[opensuse-factory] New Tumbleweed snapshot 20191104 released!

6 Nov 2019

      Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.

Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20191104

Please do not reply to this email to report issues, rather file a bug
on bugzilla.opensuse.org. For more information on filing bugs please
see https://en.opensuse.org/openSUSE:Submitting_bug_reports

Packages changed:
  ImageMagick (7.0.8.68 -> 7.0.9.1)
  Mesa (19.2.1 -> 19.2.2)
  Mesa-drivers (19.2.1 -> 19.2.2)
  MozillaFirefox (69.0.3 -> 70.0.1)
  freerdp
  gawk
  gdb
  glib2-branding-openSUSE
  grub2 (2.02 -> 2.04)
  hwdata (0.326 -> 0.328)
  java-11-openjdk (11.0.4.0 -> 11.0.5.0)
  kdepim-runtime
  kernel-source (5.3.7 -> 5.3.8)
  khmeros-fonts ERROR: no changelog
  libchamplain (0.12.19 -> 0.12.20)
  libdrm (2.4.99 -> 2.4.100)
  libglvnd
  libical
  libical-glib
  libreoffice (6.3.3.1 -> 6.3.3.2)
  mailutils (3.5 -> 3.7)
  man-pages
  mdadm
  mozilla-nspr (4.21 -> 4.22)
  mozilla-nss (3.45 -> 3.46.1)
  myspell-dictionaries (20190423 -> 20191016)
  perl-HTTP-Cookies (6.04 -> 6.05)
  perl-Log-Dispatch (2.68 -> 2.69)
  perl-Role-Tiny (2.001003 -> 2.001004)
  perl-libwww-perl (6.39 -> 6.41)
  php7 (7.3.10 -> 7.3.11)
  python-Jinja2 (2.10.1 -> 2.10.3)
  python-attrs (19.1.0 -> 19.3.0)
  python-base (2.7.16 -> 2.7.17)
  python-brotlipy
  python-cffi (1.12.3 -> 1.13.0)
  python-chardet
  python-cryptography (2.7 -> 2.8)
  python-ecdsa (0.13.2 -> 0.13.3)
  python-jedi
  python-matplotlib
  python-mypy_extensions (0.4.1 -> 0.4.3)
  python-numpy
  python-olefile
  python-pip (19.2.2 -> 19.3.1)
  python-pyparsing
  python-python-dateutil
  python-requests
  python-urllib3
  systemd
  tcpdump
  twolame (0.3.13 -> 0.4.0)
  valgrind
  vim (8.1.2148 -> 8.1.2233)
  wireshark (3.0.5 -> 3.0.6)
  xen
  yast2 (4.2.29 -> 4.2.30)
  zlib

=== Details ===

==== ImageMagick ====
Version update (7.0.8.68 -> 7.0.9.1)
Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagick++-7_Q16HDRI4 perl-PerlMagick

- version update to 7.0.9.1
  * Fixed numerous issues  posted to GitHub (reference
    https://github.com/ImageMagick/ImageMagick/issues).
  * Support trim:background-color define for -trim option.
- modified sources
  % baselibs.conf

==== Mesa ====
Version update (19.2.1 -> 19.2.2)
Subpackages: Mesa-dri-devel Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1

- Use %pkg_vcmp macro instead of llvm-config to detect LLVM 9.
- Update to version 19.2.2
  * assortment of fixes in this release, notably a bunch of work
    to get Solaris and illumos working with mesa, as well as more
    work fixing issues in the migration of package-config and
    headers being handled by libglvnd instead of mesa when mesa
    is built with support for glvnd.
    There's  bunch of other changes here, with radv and intel
    leading the pack, otherwise just a few things here and there.
- n_add-Mesa-headers-again.patch
  * add Mesa headers again despite of building it against libglvnd;
    those headers turned out not to be usable; in addition packaging
    headers with libglvnd make dependancies problematic ...

==== Mesa-drivers ====
Version update (19.2.1 -> 19.2.2)
Subpackages: Mesa-dri Mesa-dri-nouveau Mesa-gallium Mesa-libva libvdpau_nouveau libvdpau_r300 libvdpau_r600 libvdpau_radeonsi libvulkan_intel libvulkan_radeon libxatracker2

- Use %pkg_vcmp macro instead of llvm-config to detect LLVM 9.
- Update to version 19.2.2
  * assortment of fixes in this release, notably a bunch of work
    to get Solaris and illumos working with mesa, as well as more
    work fixing issues in the migration of package-config and
    headers being handled by libglvnd instead of mesa when mesa
    is built with support for glvnd.
    There's  bunch of other changes here, with radv and intel
    leading the pack, otherwise just a few things here and there.
- n_add-Mesa-headers-again.patch
  * add Mesa headers again despite of building it against libglvnd;
    those headers turned out not to be usable; in addition packaging
    headers with libglvnd make dependancies problematic ...

==== MozillaFirefox ====
Version update (69.0.3 -> 70.0.1)
Subpackages: MozillaFirefox-translations-common

- Mozilla Firefox 70.0.1
  * Fix for an issue that caused some websites or page elements using
    dynamic JavaScript to fail to load. (bmo#1592136)
  * Title bar no longer shows in full screen view (bmo#1588747)
- added mozilla-bmo1504834-part4.patch to fix some visual issues on
  big endian platforms
- Mozilla Firefox 70.0
  * more privacy protections from Enhanced Tracking Protection
  * Firefox Lockwise passwordmanager
  * Improvements to core engine components, for better browsing on more sites
  * Improved privacy and security indicators
  MFSA 2019-34
  * CVE-2018-6156 (bmo#1480088)
    Heap buffer overflow in FEC processing in WebRTC
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11765 (bmo#1562582)
    Incorrect permissions could be granted to a website
  * CVE-2019-17000 (bmo#1441468)
    CSP bypass using object tag with data: URI
  * CVE-2019-17001 (bmo#1587976)
    CSP bypass using object tag when script-src 'none' is specified
  * CVE-2019-17002 (bmo#1561056)
    upgrade-insecure-requests was not being honored for links dragged and dropped
  * CVE-2019-11764 (bmo#1558522, bmo#1577061, bmo#1548044, bmo#1571223,
    bmo#1573048, bmo#1578933, bmo#1575217, bmo#1583684, bmo#1586845, bmo#1581950,
    bmo#1583463, bmo#1586599)
    Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
- requires
    rust/cargo >= 1.36
    NSPR >= 4.22
    NSS >= 3.46.1
    rust-cbindgen >= 0.9.1
- removed obsolete patches
    mozilla-bmo1573381.patch
    mozilla-nestegg-big-endian.patch

==== freerdp ====
Subpackages: libfreerdp2 libwinpr2

- Add freerdp-Fix-realloc-return-handling.patch: Fix realloc return
  handling that results in memory leaks (boo#1153163, boo#1153164,
  gh#FreeRDP/FreeRDP#5645, CVE-2019-17177, CVE-2019-17178)

==== gawk ====

- Fix typo in Summary
- Stop overriding %_libexecdir with %_libdir
- Fix the backward compatibility of the inplace extension:
  * Add gawk-inplace-namespace-part1.patch
  * Add gawk-inplace-namespace-part2.patch
  * Add gawk-inplace-namespace-part3.patch
- Run autoreconf as part of the build process

==== gdb ====

- Backport 2nd part of fix for swo#23657.
  [bsc#1142772, swo#23657, CVE-2019-1010180]
  * gdb-dwarf-reader-reject-sections-with-invalid-sizes.patch
- Add gdb-s390-handle-arch13.diff to handle most new s390 arch13
  instructions.  [fate#327369, jsc#ECO-368]

==== glib2-branding-openSUSE ====

- Add super+f1 key binding for help to match GNOME default.

==== grub2 ====
Version update (2.02 -> 2.04)
Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen

- Disable btrfs zstd support for i386-pc to workaround core.img too large to be
  embedded in btrfs bootloader area or MBR gap (boo#1154809)
  * 0001-btrfs-disable-zstd-support-for-i386-pc.patch
- Fix grub2.sleep to load old kernel after hibernation (boo#1154783)
- Enable support for riscv64
- Backports from upstream:
  * risc-v-fix-computation-of-pc-relative-relocation-offset.patch
  * risc-v-add-clzdi2-symbol.patch
  * grub-install-define-default-platform-for-risc-v.patch
- Version bump to 2.04
  * removed
  - translations-20170427.tar.xz
  * grub2.spec
  - Make signed grub-tpm.efi specific to x86_64-efi build, the platform
    currently shipped with tpm module from upstream codebase
  - Add shim_lock to signed grub.efi in x86_64-efi build
  - x86_64: linuxefi now depends on linux, both will verify kernel via
    shim_lock
  - Remove translation tarball and po file hacks as it's been included in
    upstream tarball
  * rediff
  - grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch
  - grub2-commands-introduce-read_file-subcommand.patch
  - grub2-secureboot-add-linuxefi.patch
  - 0001-add-support-for-UEFI-network-protocols.patch
  - grub2-efi-HP-workaround.patch
  - grub2-secureboot-install-signed-grub.patch
  - grub2-linux.patch
  - use-grub2-as-a-package-name.patch
  - grub2-pass-corret-root-for-nfsroot.patch
  - grub2-secureboot-use-linuxefi-on-uefi.patch
  - grub2-secureboot-no-insmod-on-sb.patch
  - grub2-secureboot-provide-linuxefi-config.patch
  - grub2-secureboot-chainloader.patch
  - grub2-s390x-01-Changes-made-and-files-added-in-order-to-allow-s390x.patch
  - grub2-s390x-02-kexec-module-added-to-emu.patch
  - grub2-s390x-04-grub2-install.patch
  - grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  - grub2-efi-chainloader-root.patch
  - grub2-ppc64le-disable-video.patch
  - grub2-ppc64-cas-reboot-support.patch
  - grub2-Fix-incorrect-netmask-on-ppc64.patch
  - 0003-bootp-New-net_bootp6-command.patch
  - 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  - 0012-tpm-Build-tpm-as-module.patch
  - grub2-emu-4-all.patch
  - grub2-btrfs-09-get-default-subvolume.patch
  - grub2-ppc64le-memory-map.patch
  - grub2-ppc64-cas-fix-double-free.patch
  - 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
  * drop upstream patches
  - grub2-fix-locale-en.mo.gz-not-found-error-message.patch
  - grub2-fix-build-with-flex-2.6.4.patch
  - grub2-accept-empty-module.patch
  - 0001-Fix-packed-not-aligned-error-on-GCC-8.patch
  - 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch
  - unix-exec-avoid-atexit-handlers-when-child-exits.patch
  - 0001-xfs-Accept-filesystem-with-sparse-inodes.patch
  - grub2-binutils2.31.patch
  - grub2-msdos-fix-overflow.patch
  - 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch
  - grub2-efi-Move-grub_reboot-into-kernel.patch
  - grub2-efi-Free-malloc-regions-on-exit.patch
  - grub2-move-initrd-upper.patch
  - 0002-Add-Virtual-LAN-support.patch
  - 0001-ofnet-Initialize-structs-in-bootpath-parser.patch
  - 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  - 0001-tpm-Core-TPM-support.patch
  - 0002-tpm-Measure-kernel-initrd.patch
  - 0003-tpm-Add-BIOS-boot-measurement.patch
  - 0004-tpm-Rework-linux-command.patch
  - 0005-tpm-Rework-linux16-command.patch
  - 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  - 0007-tpm-Measure-the-kernel-commandline.patch
  - 0008-tpm-Measure-commands.patch
  - 0009-tpm-Measure-multiboot-images-and-modules.patch
  - 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  - 0011-tpm-Fix-build-error.patch
  - 0013-tpm-i386-pc-diskboot-img.patch
  - grub2-freetype-pkgconfig.patch
  - 0001-cpio-Disable-gcc9-Waddress-of-packed-member.patch
  - 0002-jfs-Disable-gcc9-Waddress-of-packed-member.patch
  - 0003-hfs-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0004-hfsplus-Fix-gcc9-error-with-Waddress-of-packed-membe.patch
  - 0005-acpi-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0006-usbtest-Disable-gcc9-Waddress-of-packed-member.patch
  - 0007-chainloader-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0008-efi-Fix-gcc9-error-Waddress-of-packed-member.patch
- Consistently find btrfs snapshots on s390x.  (bsc#1136970)
  * grub2-s390x-04-grub2-install.patch

==== hwdata ====
Version update (0.326 -> 0.328)

- Update to version 0.328:
  * Updated pci, usb and vendor ids.

==== java-11-openjdk ====
Version update (11.0.4.0 -> 11.0.5.0)
Subpackages: java-11-openjdk-headless

- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n->outcnt() != 0 || C->top() == n ||
    n->is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined && use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl->trip_count() > 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting > 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context

==== kdepim-runtime ====
Subpackages: kdepim-runtime-lang

- Update build requirements

==== kernel-source ====
Version update (5.3.7 -> 5.3.8)
Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms kernel-vanilla

- Refresh
  patches.suse/stacktrace-don-t-skip-first-entry-on-noncurrent-task.patch.
  v3 of the patch
- commit ea4c828
- Linux 5.3.8 (bnc#1151927).
- drm: Free the writeback_job when it with an empty fb
  (bnc#1151927).
- drm: Clear the fence pointer when writeback job signaled
  (bnc#1151927).
- clk: ti: dra7: Fix mcasp8 clock bits (bnc#1151927).
- ARM: dts: Fix wrong clocks for dra7 mcasp (bnc#1151927).
- nvme-pci: Fix a race in controller removal (bnc#1151927).
- scsi: ufs: skip shutdown if hba is not powered (bnc#1151927).
- scsi: megaraid: disable device when probe failed after enabled
  device (bnc#1151927).
- scsi: qla2xxx: Silence fwdump template message (bnc#1151927).
- scsi: qla2xxx: Fix unbound sleep in fcport delete path
  (bnc#1151927).
- scsi: qla2xxx: Fix stale mem access on driver unload
  (bnc#1151927).
- scsi: qla2xxx: Fix N2N link reset (bnc#1151927).
- scsi: qla2xxx: Fix N2N link up fail (bnc#1151927).
- ARM: dts: Fix gpio0 flags for am335x-icev2 (bnc#1151927).
- ARM: OMAP2+: Fix missing reset done flag for am3 and am43
  (bnc#1151927).
- ARM: OMAP2+: Add missing LCDC midlemode for am335x
  (bnc#1151927).
- ARM: OMAP2+: Fix warnings with broken omap2_set_init_voltage()
  (bnc#1151927).
- nvme-tcp: fix wrong stop condition in io_work (bnc#1151927).
- nvme-pci: Save PCI state before putting drive into deepest state
  (bnc#1151927).
- nvme: fix an error code in nvme_init_subsystem() (bnc#1151927).
- nvme-rdma: Fix max_hw_sectors calculation (bnc#1151927).
- Added QUIRKs for ADATA XPG SX8200 Pro 512GB (bnc#1151927).
- nvme: Add quirk for Kingston NVME SSD running FW E8FK11.T
  (bnc#1151927).
- nvme: allow 64-bit results in passthru commands (bnc#1151927).
- drm/komeda: prevent memory leak in komeda_wb_connector_add
  (bnc#1151927).
- nvme-rdma: fix possible use-after-free in connect timeout
  (bnc#1151927).
- blk-mq: honor IO scheduler for multiqueue devices (bnc#1151927).
- ieee802154: ca8210: prevent memory leak (bnc#1151927).
- ARM: dts: am4372: Set memory bandwidth limit for DISPC
  (bnc#1151927).
- net: dsa: qca8k: Use up to 7 ports for all operations
  (bnc#1151927).
- MIPS: dts: ar9331: fix interrupt-controller size (bnc#1151927).
- xen/efi: Set nonblocking callbacks (bnc#1151927).
- loop: change queue block size to match when using DIO
  (bnc#1151927).
- nl80211: fix null pointer dereference (bnc#1151927).
- mac80211: fix txq null pointer dereference (bnc#1151927).
- netfilter: nft_connlimit: disable bh on garbage collection
  (bnc#1151927).
- net: mscc: ocelot: add missing of_node_put after calling
  of_get_child_by_name (bnc#1151927).
- net: dsa: rtl8366rb: add missing of_node_put after calling
  of_get_child_by_name (bnc#1151927).
- net: stmmac: xgmac: Not all Unicast addresses may be available
  (bnc#1151927).
- net: stmmac: dwmac4: Always update the MAC Hash Filter
  (bnc#1151927).
- net: stmmac: Correctly take timestamp for PTPv2 (bnc#1151927).
- net: stmmac: Do not stop PHY if WoL is enabled (bnc#1151927).
- net: ag71xx: fix mdio subnode support (bnc#1151927).
- RISC-V: Clear load reservations while restoring hart contexts
  (bnc#1151927).
- riscv: Fix memblock reservation for device tree blob
  (bnc#1151927).
- drm/amdgpu: fix multiple memory leaks in acp_hw_init
  (bnc#1151927).
- drm/amd/display: memory leak (bnc#1151927).
- mips: Loongson: Fix the link time qualifier of 'serial_exit()'
  (bnc#1151927).
- net: hisilicon: Fix usage of uninitialized variable in function
  mdio_sc_cfg_reg_write() (bnc#1151927).
- net: stmmac: Avoid deadlock on suspend/resume (bnc#1151927).
- selftests: kvm: Fix libkvm build error (bnc#1151927).
- lib: textsearch: fix escapes in example code (bnc#1151927).
- s390/mm: fix -Wunused-but-set-variable warnings (bnc#1151927).
- r8152: Set macpassthru in reset_resume callback (bnc#1151927).
- net: phy: allow for reset line to be tied to a sleepy GPIO
  controller (bnc#1151927).
- net: phy: fix write to mii-ctrl1000 register (bnc#1151927).
- namespace: fix namespace.pl script to support relative paths
  (bnc#1151927).
- Convert filldir[64]() from __put_user() to unsafe_put_user()
  (bnc#1151927).
- elf: don't use MAP_FIXED_NOREPLACE for elf executable mappings
  (bnc#1151927).
- Make filldir[64]() verify the directory entry filename is valid
  (bnc#1151927).
- uaccess: implement a proper unsafe_copy_to_user() and switch
  filldir over to it (bnc#1151927).
- filldir[64]: remove WARN_ON_ONCE() for bad directory entries
  (bnc#1151927).
- net_sched: fix backward compatibility for TCA_KIND
  (bnc#1151927).
- net_sched: fix backward compatibility for TCA_ACT_KIND
  (bnc#1151927).
- libata/ahci: Fix PCS quirk application (bnc#1151927).
- md/raid0: fix warning message for parameter default_layout
  (bnc#1151927).
- Revert "drm/radeon: Fix EEH during kexec" (bnc#1151927).
- ocfs2: fix panic due to ocfs2_wq is null (bnc#1151927).
- nvme-pci: Set the prp2 correctly when using more than 4k page
  (bnc#1151927).
- ipv4: fix race condition between route lookup and invalidation
  (bnc#1151927).
- ipv4: Return -ENETUNREACH if we can't create route but saddr
  is valid (bnc#1151927).
- net: avoid potential infinite loop in tc_ctl_action()
  (bnc#1151927).
- net: bcmgenet: Fix RGMII_MODE_EN value for GENET v1/2/3
  (bnc#1151927).
- net: bcmgenet: Set phydev->dev_flags only for internal PHYs
  (bnc#1151927).
- net: i82596: fix dma_alloc_attr for sni_82596 (bnc#1151927).
- net/ibmvnic: Fix EOI when running in XIVE mode (bnc#1151927).
- net: ipv6: fix listify ip6_rcv_finish in case of forwarding
  (bnc#1151927).
- net: stmmac: disable/enable ptp_ref_clk in suspend/resume flow
  (bnc#1151927).
- rxrpc: Fix possible NULL pointer access in ICMP handling
  (bnc#1151927).
- sched: etf: Fix ordering of packets with same txtime
  (bnc#1151927).
- sctp: change sctp_prot .no_autobind with true (bnc#1151927).
- net: aquantia: temperature retrieval fix (bnc#1151927).
- net: aquantia: when cleaning hw cache it should be toggled
  (bnc#1151927).
- net: aquantia: do not pass lro session with invalid tcp checksum
  (bnc#1151927).
- net: aquantia: correctly handle macvlan and multicast
  coexistence (bnc#1151927).
- net: phy: micrel: Discern KSZ8051 and KSZ8795 PHYs
  (bnc#1151927).
- net: phy: micrel: Update KSZ87xx PHY name (bnc#1151927).
- net: avoid errors when trying to pop MLPS header on non-MPLS
  packets (bnc#1151927).
- net/sched: fix corrupted L2 header with MPLS 'push' and 'pop'
  actions (bnc#1151927).
- netdevsim: Fix error handling in nsim_fib_init and nsim_fib_exit
  (bnc#1151927).
- net: ethernet: broadcom: have drivers select DIMLIB as needed
  (bnc#1151927).
- net: phy: Fix "link partner" information disappear issue
  (bnc#1151927).
- LSM: SafeSetID: Stop releasing uninitialized ruleset
  (bnc#1151927).
- rxrpc: use rcu protection while reading sk->sk_user_data
  (bnc#1151927).
- io_uring: fix bad inflight accounting for
  SETUP_IOPOLL|SETUP_SQTHREAD (bnc#1151927).
- io_uring: Fix corrupted user_data (bnc#1151927).
- USB: legousbtower: fix memleak on disconnect (bnc#1151927).
- ALSA: hda/realtek - Add support for ALC711 (bnc#1151927).
- ALSA: hda/realtek - Enable headset mic on Asus MJ401TA
  (bnc#1151927).
- ALSA: usb-audio: Disable quirks for BOSS Katana amplifiers
  (bnc#1151927).
- ALSA: hda - Force runtime PM on Nvidia HDMI codecs
  (bnc#1151927).
- usb: udc: lpc32xx: fix bad bit shift operation (bnc#1151927).
- USB: serial: ti_usb_3410_5052: fix port-close races
  (bnc#1151927).
- USB: ldusb: fix memleak on disconnect (bnc#1151927).
- USB: usblp: fix use-after-free on disconnect (bnc#1151927).
- USB: ldusb: fix read info leaks (bnc#1151927).
- binder: Don't modify VMA bounds in ->mmap handler (bnc#1151927).
- MIPS: tlbex: Fix build_restore_pagemask KScratch restore
  (bnc#1151927).
- staging: wlan-ng: fix exit return when sme->key_idx >=
  NUM_WEPKEYS (bnc#1151927).
- scsi: zfcp: fix reaction on bit error threshold notification
  (bnc#1151927).
- scsi: sd: Ignore a failure to sync cache due to lack of
  authorization (bnc#1151927).
- scsi: core: save/restore command resid for error handling
  (bnc#1151927).
- scsi: core: try to get module before removing device
  (bnc#1151927).
- scsi: ch: Make it possible to open a ch device multiple times
  again (bnc#1151927).
- Revert "Input: elantech - enable SMBus on new (2018+) systems"
  (bnc#1151927).
- Input: da9063 - fix capability and drop KEY_SLEEP (bnc#1151927).
- Input: synaptics-rmi4 - avoid processing unknown IRQs
  (bnc#1151927).
- Input: st1232 - fix reporting multitouch coordinates
  (bnc#1151927).
- ASoC: rsnd: Reinitialize bit clock inversion flag for every
  format setting (bnc#1151927).
- ACPI: CPPC: Set pcc_data[pcc_ss_id] to NULL in
  acpi_cppc_processor_exit() (bnc#1151927).
- ACPI: NFIT: Fix unlock on error in scrub_show() (bnc#1151927).
- iwlwifi: pcie: change qu with jf devices to use qu configuration
  (bnc#1151927).
- mac80211: Reject malformed SSID elements (bnc#1151927).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
  (bnc#1151927).
- drm/ttm: Restore ttm prefaulting (bnc#1151927).
- drm/panfrost: Handle resetting on timeout better (bnc#1151927).
- drm/amdgpu: Bail earlier when amdgpu.cik_/si_support is not
  set to 1 (bnc#1151927).
- drm/amdgpu/sdma5: fix mask value of POLL_REGMEM packet for
  pipe sync (bnc#1151927).
- drm/i915/userptr: Never allow userptr into the mappable GGTT
  (bnc#1151927).
- drm/i915: Favor last VBT child device with conflicting AUX
  ch/DDC pin (bnc#1151927 bnc#1152971 fdo#112028).
- drm/amdgpu/vce: fix allocation size in enc ring test
  (bnc#1151927).
- drm/amdgpu/vcn: fix allocation size in enc ring test
  (bnc#1151927).
- drm/amdgpu/uvd6: fix allocation size in enc ring test (v2)
  (bnc#1151927).
- drm/amdgpu/uvd7: fix allocation size in enc ring test (v2)
  (bnc#1151927).
- drm/amdgpu: user pages array memory leak fix (bnc#1151927).
- drivers/base/memory.c: don't access uninitialized memmaps in
  soft_offline_page_store() (bnc#1151927).
- fs/proc/page.c: don't access uninitialized memmaps in
  fs/proc/page.c (bnc#1151927).
- io_uring: Fix broken links with offloading (bnc#1151927).
- io_uring: Fix race for sqes with userspace (bnc#1151927).
- io_uring: used cached copies of sq->dropped and cq->overflow
  (bnc#1151927).
- mmc: mxs: fix flags passed to dmaengine_prep_slave_sg
  (bnc#1151927).
- mmc: cqhci: Commit descriptors before setting the doorbell
  (bnc#1151927).
- mmc: sdhci-omap: Fix Tuning procedure for temperatures < -20C
  (bnc#1151927).
- mm/memory-failure.c: don't access uninitialized memmaps in
  memory_failure() (bnc#1151927).
- mm/slub: fix a deadlock in show_slab_objects() (bnc#1151927).
- mm/page_owner: don't access uninitialized memmaps when reading
  /proc/pagetypeinfo (bnc#1151927).
- mm/memunmap: don't access uninitialized memmap in
  memunmap_pages() (bnc#1151927).
- mm: memcg/slab: fix panic in __free_slab() caused by premature
  memcg pointer release (bnc#1151927).
- mm, compaction: fix wrong pfn handling in
  __reset_isolation_pfn() (bnc#1151927).
- mm: memcg: get number of pages on the LRU list in memcgroup
  base on lru_zone_size (bnc#1151927).
- mm: memblock: do not enforce current limit for memblock_phys*
  family (bnc#1151927).
- hugetlbfs: don't access uninitialized memmaps in
  pfn_range_valid_gigantic() (bnc#1151927).
- mm/memory-failure: poison read receives SIGKILL instead of
  SIGBUS if mmaped more than once (bnc#1151927).
- zram: fix race between backing_dev_show and backing_dev_store
  (bnc#1151927).
- xtensa: drop EXPORT_SYMBOL for outs*/ins* (bnc#1151927).
- xtensa: fix change_bit in exclusive access option (bnc#1151927).
- s390/zcrypt: fix memleak at release (bnc#1151927).
- s390/kaslr: add support for R_390_GLOB_DAT relocation type
  (bnc#1151927).
- lib/vdso: Make clock_getres() POSIX compliant again
  (bnc#1151927).
- parisc: Fix vmap memory leak in ioremap()/iounmap()
  (bnc#1151927).
- EDAC/ghes: Fix Use after free in ghes_edac remove path
  (bnc#1151927).
- arm64: KVM: Trap VM ops when ARM64_WORKAROUND_CAVIUM_TX2_219_TVM
  is set (bnc#1151927).
- arm64: Avoid Cavium TX2 erratum 219 when switching TTBR
  (bnc#1151927).
- arm64: Enable workaround for Cavium TX2 erratum 219 when
  running SMT (bnc#1151927).
- arm64: Allow CAVIUM_TX2_ERRATUM_219 to be selected
  (bnc#1151927).
- CIFS: avoid using MID 0xFFFF (bnc#1151927).
- cifs: Fix missed free operations (bnc#1151927).
- CIFS: Fix use after free of file info structures (bnc#1151927).
- perf/aux: Fix AUX output stopping (bnc#1151927).
- tracing: Fix race in perf_trace_buf initialization
  (bnc#1151927).
- fs/dax: Fix pmd vs pte conflict detection (bnc#1151927).
- dm cache: fix bugs when a GFP_NOWAIT allocation fails
  (bnc#1151927).
- irqchip/sifive-plic: Switch to fasteoi flow (bnc#1151927).
- x86/apic/x2apic: Fix a NULL pointer deref when handling a
  dying cpu (bnc#1151927).
- x86/hyperv: Make vapic support x2apic mode (bnc#1151927).
- pinctrl: cherryview: restore Strago DMI workaround for all
  versions (bnc#1151927).
- pinctrl: armada-37xx: fix control of pins 32 and up
  (bnc#1151927).
- pinctrl: armada-37xx: swap polarity on LED group (bnc#1151927).
- btrfs: block-group: Fix a memory leak due to missing
  btrfs_put_block_group() (bnc#1151927).
- Btrfs: add missing extents release on file extent cluster
  relocation error (bnc#1151927).
- btrfs: don't needlessly create extent-refs kernel thread
  (bnc#1151927).
- Btrfs: fix qgroup double free after failure to reserve metadata
  for delalloc (bnc#1151927).
- Btrfs: check for the full sync flag while holding the inode
  lock during fsync (bnc#1151927).
- btrfs: tracepoints: Fix wrong parameter order for qgroup events
  (bnc#1151927).
- btrfs: tracepoints: Fix bad entry members of qgroup events
  (bnc#1151927).
- KVM: PPC: Book3S HV: XIVE: Ensure VP isn't already in use
  (bnc#1151927).
- memstick: jmb38x_ms: Fix an error handling path in
  'jmb38x_ms_probe()' (bnc#1151927).
- cpufreq: Avoid cpufreq_suspend() deadlock on system shutdown
  (bnc#1151927).
- ceph: just skip unrecognized info in ceph_reply_info_extra
  (bnc#1151927).
- xen/netback: fix error path of xenvif_connect_data()
  (bnc#1151927).
- PCI: PM: Fix pci_power_up() (bnc#1151927).
- opp: of: drop incorrect lockdep_assert_held() (bnc#1151927).
- of: reserved_mem: add missing of_node_put() for proper
  ref-counting (bnc#1151927).
- blk-rq-qos: fix first node deletion of rq_qos_del()
  (bnc#1151927).
- RDMA/cxgb4: Do not dma memory off of the stack (bnc#1151927).
- Delete
  patches.suse/Revert-drm-i915-bios-make-child-device-order-the-pri.patch.
- Update config files.
  CAVIUM_TX2_ERRATUM_219=y (default)
- commit f0ffcb7
- x86/boot/64: Make level2_kernel_pgt pages invalid outside
  kernel area (bnc#1153969).
- x86/boot/64: Round memory hole size up to next PMD page
  (bnc#1153969).
- commit 3501dc2
- drm/amdgpu: Add DC feature mask to disable fractional pwm
  (bsc#1154010).
- commit 6ffba6e
- stacktrace: don't skip first entry on noncurrent tasks
  (bnc#1154866).
- commit 387f2bb
- kernel-binary.spec.in: Fix build of non-modular kernels (boo#1154578).
- commit 7f1e881
- ARM: 8904/1: skip nomap memblocks while finding the
  lowmem/highmem boundary (bsc#1122614).
- commit 9f59038
- rtlwifi: Fix potential overflow on P2P code (bsc#1154372
  CVE-2019-17666).
- cfg80211: wext: avoid copying malformed SSIDs (bsc#1153158
  CVE-2019-17133).
- commit e229e3d
- libertas: fix a potential NULL pointer dereference
  (CVE-2019-16232,bsc#1150465).
- iwlwifi: pcie: fix rb_allocator workqueue allocation
  (CVE-2019-16234,bsc#1150452).
- commit 23c6b73
- kernel-binary.spec.in: Obsolete kgraft packages only when not building
  them.
- commit 25f7690
- kernel-subpackage-build: create zero size ghost for uncompressed vmlinux
  (bsc#1154354).
  It is not strictly necessary to uncompress it so maybe the ghost file
  can be 0 size in this case.
- commit 4bf73c8

==== libchamplain ====
Version update (0.12.19 -> 0.12.20)
Subpackages: libchamplain-0_12-0 typelib-1_0-Champlain-0_12

- Update to version 0.12.20:
  + Remove autotools-based build and all the related files.
  + Fix gtk-doc module name.
  + Add missing gdk required dependency.
  + Make the build reproducible.

==== libdrm ====
Version update (2.4.99 -> 2.4.100)
Subpackages: libdrm-devel libdrm2 libdrm_amdgpu1 libdrm_intel1 libdrm_nouveau2 libdrm_radeon1

- Update to version 2.4.100
  * bugfixes (boo#1155382)

==== libglvnd ====
Subpackages: libglvnd-32bit

- 0001-include-install-GL-headers-when-GL-is-enabled.patch
  * A typo made it depend on EGL instead.
- 0002-Add-a-configure-option-to-disable-glesv1-or-glesv2.patch
  * Because mesa can be built without glesv1 so it breaks
    autodetection. Fixes: https://bugs.archlinux.org/task/64032
    ('mesa-demos doesn't build, unable to find GLES/gl.h')
- 0003-egl-Sync-with-Khronos.patch
  * Reserve enums 0x34A0..0x34AF for ANGLE project. (#93)
    Closes: https://gitlab.freedesktop.org/glvnd/libglvnd/issues/193

==== libical ====

- Fix multibuild building. For baselibs.conf and _multibuild to
  work correctly, we need to define all possible %package in the
  spec file irrespective of the "flavor". Packages are not generated
  if they do not have a %files section
- Add pkgconfig(libical) BuildRequires: pkg-config 0.29.2 is not
  able to generate libical-glib pkgconfig dependency without
  libical.pc.

==== libical-glib ====

- Fix multibuild building. For baselibs.conf and _multibuild to
  work correctly, we need to define all possible %package in the
  spec file irrespective of the "flavor". Packages are not generated
  if they do not have a %files section
- Add pkgconfig(libical) BuildRequires: pkg-config 0.29.2 is not
  able to generate libical-glib pkgconfig dependency without
  libical.pc.

==== libreoffice ====
Version update (6.3.3.1 -> 6.3.3.2)
Subpackages: libreoffice-base libreoffice-base-drivers-firebird libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-cs libreoffice-l10n-da libreoffice-l10n-de libreoffice-l10n-el libreoffice-l10n-en libreoffice-l10n-en_GB libreoffice-l10n-es libreoffice-l10n-fr libreoffice-l10n-hu libreoffice-l10n-it libreoffice-l10n-ja libreoffice-l10n-pl libreoffice-l10n-pt_BR libreoffice-l10n-ru libreoffice-l10n-zh_CN libreoffice-l10n-zh_TW libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit

- Drop disable-kde4 switch as it is no longer known by configure
- Update to 6.3.3.2 jsc#SLE-8705:
  * 6.3.3 stable release

==== mailutils ====
Version update (3.5 -> 3.7)
Subpackages: libmailutils5

- update to 3.7
- enable python3 instead of python2
  * Support for the new mailbox format - dotmail
  * Improve automatic mailbox format detection
  * Rewrite mailcap (RFC1524) support
  * imap4d: SEARCH command
  * Improved SEARCH BODY and SEARCH TEXT commands
  * Fixes in the 'mail' utility
  * New mailbox notation @
  * Sender addresses in message sets
  * Fixes in IMAP client library

==== man-pages ====

- tcp.7: correct documentation of tcp_fack, document tcp_recovery
- added patches
  [bsc#1154701]
  + man-pages-tcp_fack.patch

==== mdadm ====

- 0012-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
  0013-mdcheck-use-to-pass-variable-to-mdcheck.patch
  0014-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
  Improve mdcheck (bsc#1153258)

==== mozilla-nspr ====
Version update (4.21 -> 4.22)

- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes

==== mozilla-nss ====
Version update (3.45 -> 3.46.1)
Subpackages: libfreebl3 libfreebl3-hmac libsoftokn3 libsoftokn3-hmac mozilla-nss-certs mozilla-nss-tools

- update to NSS 3.46.1
  * required by Firefox 70.0
  Notable changes in 3.46
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM
  Many bugfixes
  Bug fixes in 3.46.1
  * Soft token MAC verification not constant time (bmo#1582343)
  * Remove arbitrary HKDF output limit by allocating space as needed
    (bmo#1577953)
- requires NSPR 4.22

==== myspell-dictionaries ====
Version update (20190423 -> 20191016)
Subpackages: myspell-cs_CZ myspell-da_DK myspell-de myspell-de_DE myspell-el_GR myspell-en myspell-en_GB myspell-en_US myspell-es myspell-es_ES myspell-fr_FR myspell-hu_HU myspell-it_IT myspell-lightproof-en myspell-lightproof-hu_HU myspell-lightproof-pt_BR myspell-lightproof-ru_RU myspell-pl_PL myspell-pt_BR myspell-ru_RU

- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"

==== perl-HTTP-Cookies ====
Version update (6.04 -> 6.05)

- updated to 6.05
  see /usr/share/doc/packages/perl-HTTP-Cookies/Changes
  6.05      2019-10-24 02:21:51Z
  - Fix GH#32 by checking for " as well as ; when splitting. (GH#49) (colinnewell)
  - Fix GH#48 update documentation about $version (GH#55) (Dave Menninger)
  - Fix broken README badge (GH#54) (Alex Peters)
  - Whenever possible, use an absolute four digit year for Time::Local (GH#52) (Olaf Alders)
  - Add test case for Issue #26 (GH#45) (George-NG)
  - Long numbers (GH#47) (pludlamCVL)
  - Cookies.pm: die if close on $fh in ->save fails (GH#46) (MCRayRay)
  - Replace "use vars" with "our" (GH#43) (James Raspass)
  - Fixed minor typo in the pod for HTTP::Cookies. (GH#39) (Mohammad S Anwar)

==== perl-Log-Dispatch ====
Version update (2.68 -> 2.69)

- updated to 2.69
  see /usr/share/doc/packages/perl-Log-Dispatch/Changes
  2.69     2019-10-25
  - Fix a warning Log::Dispatch::Email::Mailsender (GH #57). Fixed by Graham
    Knop. 58 #GH.

==== perl-Role-Tiny ====
Version update (2.001003 -> 2.001004)

- updated to 2.001004
  see /usr/share/doc/packages/perl-Role-Tiny/Changes
  2.001004 - 2019-10-25
  - fix methods being excluded from composition if they previously existed in
    the composing role (RT#130811)
  - fix role application overwriting subs that are not considered methods
  - fix helper subs created by a Role::Tiny extension (like Moo::Role)
    sometimes being teated as methods

==== perl-libwww-perl ====
Version update (6.39 -> 6.41)

- updated to 6.41
  see /usr/share/doc/packages/perl-libwww-perl/Changes
  6.41      2019-10-28 14:42:06Z
  - Allow mirroring to files called '0' (GH#329) (Mark Fowler)
- updated to 6.40
  see /usr/share/doc/packages/perl-libwww-perl/Changes
  6.40      2019-10-24 12:55:45Z
  - Let Digest authentication act on nonce expiry (GH#313) (Frank Maas)
  - Make file arg for mirror mandatory #304 (GH#326) (Julien Fiegehenn)
  - Doc fix: fields starting with ":" have to be quoted (GH#324) (Slaven
    Rezi?)
  - Fix documentation for removing all handlers (GH#319) (leedo)
  - Ensure proper version of Dist::Zilla::Plugin::MakeMaker::Awesome
  - Add TravisCI testing for Perl v5.30
  - Clean up .perltidyrc

==== php7 ====
Version update (7.3.10 -> 7.3.11)
Subpackages: apache2-mod_php7 php7-bcmath php7-bz2 php7-calendar php7-ctype php7-curl php7-dba php7-devel php7-dom php7-exif php7-fastcgi php7-ftp php7-gd php7-gettext php7-gmp php7-iconv php7-json php7-ldap php7-mbstring php7-mysql php7-odbc php7-openssl php7-pdo php7-pear php7-pgsql php7-shmop php7-snmp php7-sockets php7-sqlite php7-sysvsem php7-sysvshm php7-tidy php7-tokenizer php7-wddx php7-xmlreader php7-xmlwriter php7-xsl php7-zlib

- version update to 7.3.11: This is a security release which also
  contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.3.11

==== python-Jinja2 ====
Version update (2.10.1 -> 2.10.3)

- Update to 2.10.3:
  * Fix Python 3.7 deprecation warnings.
  * Using range in the sandboxed environment uses xrange on Python 2 to avoid memory use. :issue:`933`
  * Use Python 3.7's better traceback support to avoid a core dump when using debug builds of Python 3.7. :issue:`1050`
  * Fix a typo in Babel entry point in setup.py that was preventing installation.
- Remove merged python38.patch

==== python-attrs ====
Version update (19.1.0 -> 19.3.0)

- update to 19.3.0
  * Fixed auto_attribs usage when default values cannot be compared directly
    with ==, such as numpy arrays.
- update to version 19.2.0:
  * Backward-incompatible Changes
    + Removed deprecated "Attribute" attribute "convert" per scheduled
    removal on 2019/1.  This planned deprecation is tracked in issue
    `#307 <https://github.com/python-attrs/attrs/issues/307>`_.
    `#504 <https://github.com/python-attrs/attrs/issues/504>`_
    + "__lt__", "__le__", "__gt__", and "__ge__" do not consider
    subclasses comparable anymore.  This has been deprecated since
    18.2.0 and was raising a "DeprecationWarning" for over a year.
    `#570 <https://github.com/python-attrs/attrs/issues/570>`_
  * Deprecations
    + The "cmp" argument to "attr.s()" and "attr.ib()" is now
    deprecated.  Please use "eq" to add equality methods ("__eq__"
    and "__ne__") and "order" to add ordering methods ("__lt__",
    "__le__", "__gt__", and "__ge__") instead ? just like with
    `dataclasses
    <https://docs.python.org/3/library/dataclasses.html>`_.  Both
    are effectively "True" by default but it's enough to set
    "eq=False" to disable both at once.  Passing "eq=False,
    order=True" explicitly will raise a "ValueError" though.  Since
    this is arguably a deeper backward-compatibility break, it will
    have an extended deprecation period until 2021-06-01.  After
    that day, the "cmp" argument will be removed.  "attr.Attribute"
    also isn't orderable anymore.  `#574
    <https://github.com/python-attrs/attrs/issues/574>`_
  * Changes
    + Updated "attr.validators.__all__" to include new validators
    added in `#425`_.  `#517
    <https://github.com/python-attrs/attrs/issues/517>`_
    + Slotted classes now use a pure Python mechanism to rewrite the
    "__class__" cell when rebuilding the class, so "super()" works
    even on environments where "ctypes" is not installed.  `#522
    <https://github.com/python-attrs/attrs/issues/522>`_
    + When collecting attributes using "@attr.s(auto_attribs=True)",
    attributes with a default of "None" are now deleted too.  `#523
    <https://github.com/python-attrs/attrs/issues/523>`_, `#556
    <https://github.com/python-attrs/attrs/issues/556>`_
    + Fixed "attr.validators.deep_iterable()" and
    "attr.validators.deep_mapping()" type stubs.  `#533
    <https://github.com/python-attrs/attrs/issues/533>`_
    + "attr.validators.is_callable()" validator now raises an
    exception "attr.exceptions.NotCallableError", a subclass of
    "TypeError", informing the received value.  `#536
    <https://github.com/python-attrs/attrs/issues/536>`_
    + "@attr.s(auto_exc=True)" now generates classes that are hashable
    by ID, as the documentation always claimed it would.  `#543
    <https://github.com/python-attrs/attrs/issues/543>`_, `#563
    <https://github.com/python-attrs/attrs/issues/563>`_
    + Added "attr.validators.matches_re()" that checks string
    attributes whether they match a regular expression.  `#552
    <https://github.com/python-attrs/attrs/issues/552>`_
    + Keyword-only attributes ("kw_only=True") and attributes that are
    excluded from the "attrs"'s "__init__" ("init=False") now can
    appear before mandatory attributes.  `#559
    <https://github.com/python-attrs/attrs/issues/559>`_
    + The fake filename for generated methods is now more stable.  It
    won't change when you restart the process.  `#560
    <https://github.com/python-attrs/attrs/issues/560>`_
    + The value passed to "@attr.ib(repr=?)" can now be either a
    boolean (as before) or a callable.  That callable must return a
    string and is then used for formatting the attribute by the
    generated "__repr__()" method.  `#568
    <https://github.com/python-attrs/attrs/issues/568>`_
    + Added "attr.__version_info__" that can be used to reliably check
    the version of "attrs" and write forward- and
    backward-compatible code.  Please check out the `section on
    deprecated APIs
    <http://www.attrs.org/en/stable/api.html#deprecated-apis>`_ on
    how to use it.  `#580
    <https://github.com/python-attrs/attrs/issues/580>`_

==== python-base ====
Version update (2.7.16 -> 2.7.17)
Subpackages: libpython2_7-1_0 python-xml

- Update to 2.7.17:
  - a bug fix release in the Python 2.7.x series. It is expected
    to be the penultimate release for Python 2.7.
- Removed patches included upstream:
  - CVE-2018-20852-cookie-domain-check.patch
  - CVE-2019-16935-xmlrpc-doc-server_title.patch
  - CVE-2019-9636-netloc-no-decompose-characters.patch
  - CVE-2019-9947-no-ctrl-char-http.patch
  - CVE-2019-9948-avoid_local-file.patch

==== python-brotlipy ====

- Replace builtin libbrotli v0.6 with system libbrotli 1.x with patches:
  - merged_pr_94.patch
  - pr_154-brotli-v1.patch
- Remove build dependency stdc++
- Remove brotli/build.py from installed package

==== python-cffi ====
Version update (1.12.3 -> 1.13.0)
Subpackages: python2-cffi python3-cffi

- Update to 1.13.0:
  * No changelog provided upstream

==== python-chardet ====

- Replace %fdupes -s with plain %fdupes; hardlinks are better.

==== python-cryptography ====
Version update (2.7 -> 2.8)
Subpackages: python2-cryptography python3-cryptography

- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.

==== python-ecdsa ====
Version update (0.13.2 -> 0.13.3)
Subpackages: python2-ecdsa python3-ecdsa

- updated to 0.13.3 (bsc#1153165)
  + CVE-2019-14853 DOS atack during signature decoding
  + CVE-2019-14859 signature malleability caused by insufficient checks
    of DER encoding

==== python-jedi ====

- Skip TestSetupReadline.test_import because of gh#davidhalter/jedi#1429

==== python-matplotlib ====
Subpackages: python3-matplotlib python3-matplotlib-cairo python3-matplotlib-gtk3

- Disable Qt4 on Leap 15.2+

==== python-mypy_extensions ====
Version update (0.4.1 -> 0.4.3)

- update to 0.4.3
- removed redudant LICENSE file

==== python-numpy ====

- riscv.patch: Remove obsolete patch

==== python-olefile ====
Subpackages: python2-olefile python3-olefile

- Replace %fdupes -s with plain %fdupes; hardlinks are better.

==== python-pip ====
Version update (19.2.2 -> 19.3.1)

- Update to version 19.3.1
  * Document Python 3.8 support.
  * Fix bug that prevented installation of PEP 517 packages without setup.py.
  * Remove undocumented support for un-prefixed URL requirements pointing to SVN repositories.
  * Remove the deprecated --venv option from pip config.
  * Make pip show warn about packages not found.
  * Abort installation if any archive contains a file which would be placed outside the extraction location.
  * pip's CLI completion code no longer prints a Traceback if it is interrupted.
  * Ignore errors copying socket files for local source installs (in Python 3).
  * Skip copying .tox and .nox directories to temporary build directories
  * Ignore "require_virtualenv" in pip config

==== python-pyparsing ====
Subpackages: python2-pyparsing python3-pyparsing

- Do not pull in setuptools dependency at all to avoid cycles

==== python-python-dateutil ====
Subpackages: python2-python-dateutil python3-python-dateutil

- Replace %fdupes -s with plain %fdupes; hardlinks are better.

==== python-requests ====

- Add two patches only updating test logic to remove pytest 3 pin
  - merged_pr_5049.patch
  - pr_5251-pytest5.patch

==== python-urllib3 ====

- Require a new enough release of python-six. 1.25.6 needs at least
  1.12.0 for ensure_text() and friends.

==== systemd ====
Subpackages: libsystemd0 libsystemd0-32bit libudev-devel libudev1 libudev1-32bit systemd-32bit systemd-container systemd-lang systemd-logger systemd-sysvinit udev

- Drop 0001-compat-rules-escape-when-used-for-shell-expansion.patch
  It's part of the previous import.
- Import commit b7467b7b553d6d0d6f92758d966b69f1a88b6b42
  441f44f371 fileio: introduce read_full_virtual_file() for reading virtual files in sysfs, procfs (bsc#1133495)
  8a1bb5c66b swap: do not make swap units wanted by its device unit anymore
- Import commit 5df9000899ef7d45ddbcacd0fdf73afa07a40f6b
  f0ed7237e4 udev/cdrom_id: Do not open CD-rom in exclusive mode. (bsc#1154256)
  b37054aa5a compat-rules: escape '$' when used for shell expansion
  Changes from the v243-stable:
  ef677436aa test: Pass personality test even when i686 userland runs on x86_64 kernel
  3f6398c450 docs: fix inadvertent change in uid range
  25bb377a73 cgroup: fix typo in BPF firewall support warning message
  6d97aca0d5 fix build with compilers with default stack-protector enabled
  fbad077cec nspawn: surrender controlling terminal to PID2 when using the PID1 stub
  0553c3c668 pid1: fix DefaultTasksMax initialization
  f406a691a7 src/core/automount: use DirectoryMode when calling mkdir -p
  20438f96c3 udevadm trigger: do not propagate EACCES and ENODEV
  6480630bc3 hwdb: Correct WWWW Pattern In Documentation Comment
  9d8e889810 nspawn: consistenly fail if parsing the environment fails
  40e169b304 nspawn: default to unified hierarchy if --as-pid2 is used
  b5df1037a0 cgroup: Mark memory protections as explicitly set in transient units
  f14e3e02cc cgroup: Respect DefaultMemoryMin when setting memory.min
  ea248e53bf cgroup: Check ancestor memory min for unified memory config
  de1d25a506 cgroup: docs: memory.high doc fixups
  2ab45f38d8 cgroup: docs: Mention unbounded protection for memory.{low,min}
  19a43dc38a Consider smb3 as remote filesystem
  5c0224c7bf Handle d_type == DT_UNKNOWN correctly
  8282bc61df util-lib: Don't propagate EACCES from find_binary PATH lookup to caller
  9d0ae987a6 network: drop noisy log message
  f67f0e4ec4 Updated log message when the timesync happens for the first time (#13624)
  e151bf4674 units: make systemd-binfmt.service easier to work with no autofs
  2b8e574d82 Corect man page reference in systemd-nologin.conf comments
  a0577353f1 man: Add a missing space in machinectl(1)
  693e983988 log: Add missing "%" in "%m" log format strings
  ea7151b8c4 pid1: do not warn if /run/systemd/relabel-extra.d/ doesn't exist
  b90549290e man: fix typo
- Remove intltool BuildRequires, not needed since v237
- Use python3-base BuildRequires instead of full python3

==== tcpdump ====

- Trim CFLAGS

==== twolame ====
Version update (0.3.13 -> 0.4.0)

- Drop sourceforge download URL that doesn't work any longer...
- Update to version 0.4.0
  * Added free format encoding (now up to 450 kbps)
  * Added DAB utility methods for ScF-CRC handling
  * Added `twolame_get_original()` and `twolame_set_original()`
  * Added `twolame_get_extension()` and `twolame_set_extension()`
  * Bundled .spec file in tarball for building RPM for twolame
  * Make libsndfile dependency (and therefore the frontend)
    optional
  * Fixed VBR encoding
  * Fixed setting for error protection flag
  * New check for invalid bitrate/channel encoder settings
  * New checks against failed memory allocations
  * Fixed padding policy (now adding an empty slot)
  * Fixed build when maintainer mode is disabled
  * Fixed scaling of floating point input source through
    libsndfile
  * Removed `slotinfo` global variables to fix thread safety bug
  * Switched to handling reading from STDIN using libsndfile
  * Fix for potential buffer overrun relating to `MAX_NAME_SIZE`
    in CLI tool
  * Install AUTHORS, COPYING, README, NEWS in
    `$prefix/share/doc/twolame/`
  * Zero the whole of the data structure when calling
    `twolame_init()`
  * Prefixed all global symbols with `twolame_` to prevent
    symbol conflicts
  * Fix for `twolame_get_framelength()` returning the correct
    frame size when padding is enabled
  * Fix progress counter in twolame CLI
  * Fix compilation on mingw or mxe cross compiler
  * Fix symbols visibility on Windows
  * Add `-no-undefined` for compilation on Windows
  * Added `win32-dll` option to `LT_INIT`
  * Compiler and Valgrind warning fixes
  * Various other minor fixes
- Spec cleanup

==== valgrind ====

- move s390-*xml files to main package (bsc#1147071)

==== vim ====
Version update (8.1.2148 -> 8.1.2233)
Subpackages: gvim vim-data vim-data-common

- Updated to version 8.1.2233, fixes the following problems
- dropped python38-config.patch (upstream merged)
- refreshed  disable-unreliable-tests.patch and vim-8.0.1568-defaults.patch
  * No test for right click extending Visual area.
  * Crash when running out of memory very early.
  * No test for 'ttymouse' set from xterm version response.
  * State test is a bit flaky.
  * Combining text property and syntax highlight is wrong. (Nick Jensen)
  * Quickfix window height wrong when there is a tabline. (Daniel Hahler)
  * In a terminal window 'cursorlineopt' does not work properly.
  * First character after Tab is not highlighted.
  * Libvterm source files missing from distribution.
  * Terminal attributes missing in Terminal-normal mode.
  * Some mappings are listed twice.
  * Cannot build with +syntax but without +terminal.
  * Mapping test fails.
  * Popup resize test is flaky. (Christian Brabandt)
  * Cannot build with +spell but without +syntax.
  * Stuck when using "j" in a popupwin with popup_filter_menu if a line wraps.
  * Rubyeval() not tested as a method.
  * Mapping test fails on MS-Windows.
  * Heredoc assignment not skipped in if block.
  * Terminal flags are never reset.
  * Cannot build without the +termresponse feature.
  * Mouse support not always available.
  * Spell highlight is wrong at start of the line.
  * Searchit() has too many arguments.
  * Screen not recognized as supporting "sgr" mouse codes.
  * Meson files are not recognized.
  * Syntax attributes not combined with Visual highlighting. (Arseny Nasokin)
  * Dart files are not recognized.
  * Accessing uninitialized memory in test.
  * Pressing "q" at the more prompt doesn't stop Python output. (Daniel Hahler)
  * Error E303 is not useful when 'directory' is empty.
  * Highlighting wrong when item follows tab.
  * Test42 seen as binary by git diff.
  * Running a test is a bit verbose.
  * Option context is not copied when splitting a window. (Daniel Hahler)
  * Syntax test fails.
  * Cannot build without the +eval feature.
  * Error for bad regexp even though regexp is not used when writing a
  file. (Arseny Nasokin)
  * Build error for missing define.
  * Syntax highlighting wrong for tab.
  * Syntax test fails on Mac.
  * When using modifyOtherKeys CTRL-X mode may not work.
  * Cannot easily fill the info popup asynchronously.
  * Popup_setoptions(popup_getoptions()) does not work.
  * ModifyOtherKeys is not enabled by default.
  * Vim does not exit when closing a terminal window and it is the last window.
  * ExitPre autocommand may cause accessing freed memory.
  * Crash when using :center in autocommand.
  * Build failure when using normal features without GUI and EXITFREE defined.
  * Crash when memory allocation fails.
  * Cannot build with dynamically linked Python 3.8.
  * Running libvterm tests without the +terminal feature.
  * Crash on exit when closing terminals. (Corey Hickey)
  * Sign entry structure has confusing name.
  * No test for fixed issue #3893.
  * "gn" doesn't work quite right. (Jaehwang Jerry Jung)
  * Unix: Tabs in output might be expanded to spaces.
  * LF in escape codes may be expanded to CR-LF.
  * Using negative offset for popup_create() does not work.
  * Listener callback "added" argument is not the total. (Andy Massimino)
  * Cannot see the selection type in :reg output. (Ayberk Ayd?n)
  * Popup_textprop tests fail.
  * Too much is redrawn when 'cursorline' is set.
  * Unreachable code in adjusting text prop columns.
  * Text property in wrong place after :substitute.
  * Compiler warning for unused variable.
  * "gN" is off by one in Visual mode.
  * No autocommand for open window with terminal.
  * :cfile does not abort like other quickfix commands.
  * Cannot filter :disp output.
  * Accessing invalid memory. (Dominique Pelle)
  * Cannot see what buffer an ml_get error is for.
  * Cannot build Amiga version.
  * The "last used" info of a buffer is under used.
  * Cannot use system copy/paste in non-xterm terminals.
  * Layout wrong if 'lines' changes while cmdline window is open.
  * screenpos() returns wrong values when 'number' is set. (Ben Jackson)
  * Cannot color number column above/below cursor differently.
  * Not easy to move to the middle of a text line.
  * Cannot get the Vim command line arguments.

==== wireshark ====
Version update (3.0.5 -> 3.0.6)
Subpackages: libwireshark12 libwiretap9 libwscodecs2 libwsutil10 wireshark-ui-qt

- wireshark 3.0.6:
  * extcap: Several issues when capturing from multiple extcap interfaces.
  * Expert Infos Incorrectly Displays Info Column instead of comment.
  * Wireshark does not support USB packets with size greater than 256 KiB.
  * IS-IS: add support for decoding TE TLV Type 138 as per RFC 5307.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.0.6.html

==== xen ====
Subpackages: xen-libs xen-tools xen-tools-domU

- Add python38-build.patch fixing build with Python 3.8 (add
  - -embed to python-config call)

==== yast2 ====
Version update (4.2.29 -> 4.2.30)
Subpackages: yast2-logs

- fix showing release notes for online upgrade (bsc#1155134)
- 4.2.30

==== zlib ====
Subpackages: libminizip1 libz1 libz1-32bit zlib-devel

- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds

-- 
To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org
To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

[opensuse-factory] New Tumbleweed snapshot 20191104 released!

Dominique Leuenberger