Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=Tumbleweed&build=20200229 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=Kubic&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: cilium (1.6.5 -> 1.7.0) ipset (7.5 -> 7.6) libzypp (17.22.1 -> 17.23.0) mozilla-nss patterns-containers python-ecdsa (0.13.3 -> 0.15) python-requests (2.22.0 -> 2.23.0) rakkess (0.4.3 -> 0.4.4) sysconfig (0.85.3 -> 0.85.4) transactional-update (2.20.1 -> 2.20.2) wicked (0.6.61 -> 0.6.62) xfsprogs (5.0.0 -> 5.4.0) yomi-formula (0.0.1+git.1579090265.ecae64c -> 0.0.1+git.1582036279.1c70638) zypper (1.14.33 -> 1.14.34) === Details === ==== cilium ==== Version update (1.6.5 -> 1.7.0) - Use %requires_eq for cilium-proxy. - Add cilium-proxy as a runtime dependency. - Build with correct cilium-proxy version string. - Add upstream patches which fix running Cilium on aarch64 and remove dependency on glibc: * 0001-option-mark-keep-bpf-templates-as-deprecated.patch * 0002-make-remove-the-need-for-go-bindata.patch * 0003-bpf-don-t-use-fixed-size-integer-types-from-stdint.h.patch - Add downstream patch which makes helm charts compatible with openSUSE images: * 0004-helm-Allow-variables-for-compatibility-with-openSUSE.patch - Update to version 1.7.0: * Major changes - Add direct server return (DSR) for NodePort BPF - Add support for k8s 1.17 - Add support for k8s endpoint slice - Add support for L7 visibility via pod annotations - Clusterwide K8s Cilium Network Policies - Envoy TLS support with header imposition * Bugfixes - Add better mechanism to detect if k8s caches are synced against k8s - api: Add missing annotations to generate DeepCopy for new status fields - bpf: Fix proxy redirection for egress programs - bpf: Remove POLICY_MAP from bpf_netdev and bpf_overlay - cilium: use %v for dumping frontend struct on error - Correct clustermesh identity sync kvstore backend usage (to actually use the remote) - daemon: Upgrade spf13/viper - eni: Check instance existence before resolving deficit - Filter out bpftool probes emitting dmesg messages - Fix cilium daemonset deletion on AKS - Fix concurrent access of a variable used for metrics - Fix issue (#10092) which incorrectly configured route MTU with encryption and tunnel enabled. - Fix memory corruption on clusters with IPv6 and NodePort enabled - Fix node-port default route detection in case there multiple default entries with same ifindex. - Fix regression to avoid freeing alive IPs - Fix regular service lookup in node-port range in case of host-reachable services. - Fix Unlock handling for kvstore locks - Fix vishvananda/netlink library's VethPeerIndex() stack corruption with 4.20+ kernels. - fqdn: Support setting tofqdns-min-ttl to 0 - health: add ipv6 health check status to cilium health status output - HostToContainer propagation for /sys/fs/bpf - ipam: Protect release from releasing alive IP - ipcache: Add probe to check for dump capability to support delete - ipsec: fix connectivity after node reboots - k8s: Fix Service.DeepEquals for ExternalIP - kubernetes: Disable LocalNodeRoute while chaining - node: Provide context in log when restoring router addresses - operator: only enable kvstore watcher if kvstore is enabled - pkg/bpf: Protect each uintptr with runtime.KeepAlive - pkg/endpoint: access endpoint state safely across go routines - pkg/ip: fix cilium status output for big CIDR ranges - policy: Don't open localhost when allowing L7 traffic - policy: Expose L3 selectors within endpoint JSON - Remove quick-install.yaml file, ship only helm chart instead. ==== ipset ==== Version update (7.5 -> 7.6) Subpackages: libipset13 - Update to release 7.6 * Add checking system_power_efficient_wq in the source tree. ==== libzypp ==== Version update (17.22.1 -> 17.23.0) - Log patch status changes to history (jsc#SLE-5116) - Allow to disable all WebServer dependent tests when building. OBS wants to be able to get rid of the nginx/FastCGI-devel build requirement. Use 'rpmbuild --without mediabackend_tests' or 'cmake -DDISABLE_MEDIABACKEND_TESTS=1'. - version 17.23.0 (22) ==== mozilla-nss ==== - Package also the cmac.h needed by blapi.h - Disable LTO on %arm as LTO fails on neon errors ==== patterns-containers ==== Subpackages: patterns-containers-container_runtime patterns-containers-container_runtime_kubernetes patterns-containers-kubeadm patterns-containers-kubernetes_utilities patterns-containers-kubic_admin patterns-containers-kubic_loadbalancer patterns-containers-kubic_worker - Prevent building of kubic-specific patterns in SLE/Leap ==== python-ecdsa ==== Version update (0.13.3 -> 0.15) - update to 0.15 - fix fdupes usage * extra long changelog - see NEWS file ==== python-requests ==== Version update (2.22.0 -> 2.23.0) - update to 2.23.0 - dropped merged_pr_5049.patch - refreshed requests-no-hardcoded-version.patch * Remove defunct reference to prefetch in Session __attrs__ * Requests no longer outputs password in basic auth usage warning ==== rakkess ==== Version update (0.4.3 -> 0.4.4) - Fix building on %arm architectures - Update to version 0.4.4 - Upstream release script fixes ==== sysconfig ==== Version update (0.85.3 -> 0.85.4) Subpackages: sysconfig-netconfig - version 0.85.4 - Add Upstream First openSUSE Build Service Policy to the spec - Mark /etc/yp.conf as %config(noreplace): this is the same as the file shipped by ypbind has as mode. In sysconfig we create a symlink, in ypbind, the file is actually only owned for reference. Having the same modes allows for the bots to do their work properly (boo#1159566). ==== transactional-update ==== Version update (2.20.1 -> 2.20.2) Subpackages: transactional-update-zypp-config - Update to version 2.20.2 - Use full names for zypper options [bsc#1164543] - Ignore /var/lib/rpm in shadowed file output - Optimize create-dirs-from-rpmdb ==== wicked ==== Version update (0.6.61 -> 0.6.62) Subpackages: wicked-service - version 0.6.62 - dhcp4: discard lease on client-id mismatch (CVE-2020-7217,bsc#1160906) - dhcp4: free lease on response without message type (CVE-2020-7216,bsc#1160905) - dhcp6: don't add free'd IA to ia_pd_list on T1>T2 (CVE-2019-18903,bsc#1160904) - dhcp6: fix use-after-free on option parsing failure (CVE-2019-18902,bsc#1160903) - utils: don't reject NULL var array names/keys breaking wicked duid dump - routes: schema fix to avoid not applying rto_min incl. new time format (bsc#1160939) - systemd: order start wicked after network-pre.target and openvswitch.service start - packaging: use pkgconfig(libsystemd) instead of systemd-devel - misc bug fixes by Malte Kraus including undefined behaviour, memory access alignment - corrections, use-after-free, missed initialization and format errors ==== xfsprogs ==== Version update (5.0.0 -> 5.4.0) - split xfs scrubbing scripts and service files into a separate optional package, in order to avoid having python as a dependency in the main xfsprogs rpm (bsc#1157438). - update to v5.4.0: * xfsprogs: Release v5.4.0 * xfsprogs: Release v5.4.0-rc1 * mkfs: tidy up discard notifications * mkfs: Break block discard into chunks of 2 GB * xfs_admin: enable online label getting and setting * xfs_admin: support external log devices * xfsprogs: add missing line feeds in libxfs/rdwr.c * xfsprogs: remove stray libxfs whitespace * xfsprogs: Release v5.4.0-rc0 * xfs: change the seconds fields in xfs_bulkstat to signed * xfs: move local to extent inode logging into bmap helper * xfs: remove broken error handling on failed attr sf to leaf change * xfs: log the inode on directory sf to block format change * xfs: remove unused flags arg from xfs_get_aghdr_buf() * xfs: log proper length of superblock * xfs: revert 1baa2800e62d ("xfs: remove the unused XFS_ALLOC_USERDATA flag") * xfs: convert inode to extent format after extent merge due to shift * xfs: define a flags field for the AG geometry ioctl structure * xfs: add a xfs_valid_startblock helper * xfs: remove the unused XFS_ALLOC_USERDATA flag * xfs: allocate xattr buffer on demand * xfs: consolidate attribute value copying * xfs: move remote attr retrieval into xfs_attr3_leaf_getvalue * xfs: remove unnecessary indenting from xfs_attr3_leaf_getvalue * xfs: make attr lookup returns consistent * xfs: reverse search directory freespace indexes * xfs: speed up directory bestfree block scanning * xfs: factor free block index lookup from xfs_dir2_node_addname_int() * xfs: factor data block addition from xfs_dir2_node_addname_int() * xfs: move xfs_dir2_addname() * xfs: remove all *_ITER_CONTINUE values * xfs: remove all *_ITER_ABORT values * xfs: reinitialize rm_flags when unpacking an offset into an rmap irec * xfs: remove unnecessary int returns from deferred bmap functions * xfs: remove unnecessary int returns from deferred refcount functions * xfs: remove unnecessary int returns from deferred rmap functions * xfs: remove unnecessary parameter from xfs_iext_inc_seq * xfs: fix sign handling problem in xfs_bmbt_diff_two_keys * xfs: don't return _QUERY_ABORT from xfs_rmap_has_other_keys * xfs: fix maxicount division by zero error * xfs: remove excess function parameter description in 'xfs_btree_sblock_v5hdr_verify' * xfs: add kmem allocation trace points * fs: xfs: Remove KM_NOSLEEP and KM_SLEEP. - update to v.5.3.0 * mkfs.xfs: use libfx to write out AGs versus open coding * mkfs.xfs: fix incorrect error message during AG init * xfs_repair: better info when metadata updates fail * xfs_growfs: allow mounted device node as argument * xfs_spaceman: always report sick metadata * xfs_io: add a bulkstat command * xfs_io: encrypt command enhancements * xfs_io: copy_file_range fixes * man: document several new ioctls * xfs_scrub: copious rewriting * libfrog: header moves, refactoring, updates * libxfs: fix buffer refcounting - update to v5.2.0 - libxfs: cosmetic changes to trans.c to match kernel (Eric Sandeen) - libxfs changes merged from kernel 5.2 - mkfs: enable reflink by default (Darrick Wong) - mkfs: fix stripe unit handling (Allison Collins) - mkfs: remove useless log options in usage() (Yang Xu) - mkfs: validate start and end of aligned logs (Darrick Wong) - xfs_quota: fix built-in help for project setup (Eric Sandeen) - xfs_io: allow passing an open file to copy_range (Amir Goldstein) - xfs_info: limit findmnt to mounted xfs filesystems (Amir Goldstein) - man: break out several ioctl man pages (Darrick Wong) - man: Fix an inconsistency in the mkfs man page (Alvin Zheng) - xfs_scrub: fix background-mode sleep throttling (Darrick Wong) - libxfs: sync up xfs_trans_inode.c with the kernel (Eric Sandeen) - libfrog: fix bitmap return values (Darrick Wong) - libfrog: don't set negative errno in conversion f'ns (Darrick Wong) ==== yomi-formula ==== Version update (0.0.1+git.1579090265.ecae64c -> 0.0.1+git.1582036279.1c70638) - Update to version 0.0.1+git.1582036279.1c70638: * Revert "init: drop namespace for the check" - Update to version 0.0.1+git.1581958876.d324e18: * metadata: support "after" ordering - Adjust the ordering of the forms - Move out the user modules from the susemanager domain ==== zypper ==== Version update (1.14.33 -> 1.14.34) Subpackages: zypper-needs-restarting - Do not allow the abbreviation of cli arguments (bsc#1164543) - accoring to according in all translation files. - Always show exception history if available. - Use default package cache location for temporary repos (bsc#1130873) - version 1.14.34 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-kubic+owner@opensuse.org