Packages changed: apparmor irssi (1.0.5 -> 1.0.6) kcm_sddm (5.11.2 -> 5.11.5) kernel-source (4.14.11 -> 4.14.12) kyotocabinet libpsl llvm (5.0.0 -> 5.0.1) llvm5 (5.0.0 -> 5.0.1) mdadm procps === Details === ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang pam_apparmor pam_apparmor-32bit perl-apparmor python3-apparmor - add parser-write-cache-warn-only.diff to make cache write failures a warning instead of an error (boo#1069906, boo#1074429) - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" to avoid pulling in several Gnome packages on servers (boo#1067477) ==== irssi ==== Version update (1.0.5 -> 1.0.6) - update to 1.0.6 - Fix invalid memory access when reading hilight configuration (#787, #788). - Fix null pointer dereference when the channel topic is set without specifying a sender (GL#20, GL!25). CVE-2018-5206 - Fix return of random memory when using incomplete escape codes (GL#21, GL!26). CVE-2018-5205 - Fix heap buffer overflow when completing certain strings (GL#19, GL!27). CVE-2018-5208 - Fix return of random memory when using an incomplete variable argument (GL#18, GL!28). CVE-2018-5207 ==== kcm_sddm ==== Version update (5.11.2 -> 5.11.5) Subpackages: kcm_sddm-lang - Update to 5.11.5 * New bugfix release * For more details please see: * https://www.kde.org/announcements/plasma-5.11.5.php - Changes since 5.11.4: * None - Add patch to add a note to use YaST for autologin configuration: * 0001-Replace-autologin-configuration-with-a-note-to-use-Y.patch - Run spec-cleaner - Update to 5.11.4 * New bugfix release * For more details please see: * https://www.kde.org/announcements/plasma-5.11.4.php - Changes since 5.11.3: * None - Update to 5.11.3 * New bugfix release * For more details please see: * https://www.kde.org/announcements/plasma-5.11.3.php - Changes since 5.11.2: * None ==== kernel-source ==== Version update (4.14.11 -> 4.14.12) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms - Linux 4.14.12 (bnc#1012628). - exec: Weaken dumpability for secureexec (bnc#1012628). - capabilities: fix buffer overread on very short xattr (bnc#1012628). - x86/cpu, x86/pti: Do not enable PTI on AMD processors (bnc#1012628). - x86/pti: Make sure the user/kernel PTEs match (bnc#1012628). - x86/dumpstack: Fix partial register dumps (bnc#1012628). - x86/dumpstack: Print registers for first stack frame (bnc#1012628). - x86/pti: Switch to kernel CR3 at early in entry_SYSCALL_compat() (bnc#1012628). - x86/process: Define cpu_tss_rw in same section as declaration (bnc#1012628). - Revert "xfrm: Fix stack-out-of-bounds read in xfrm_state_find." (bnc#1012628). - rtc: m41t80: m41t80_sqw_set_rate should return 0 on success (bnc#1012628). - rtc: m41t80: fix m41t80_sqw_round_rate return value (bnc#1012628). - rtc: m41t80: avoid i2c read in m41t80_sqw_recalc_rate (bnc#1012628). - rtc: m41t80: avoid i2c read in m41t80_sqw_is_prepared (bnc#1012628). - rtc: m41t80: remove unneeded checks from m41t80_sqw_set_rate (bnc#1012628). - Refresh patches.suse/0002-x86-stacktrace-make-clear-the-success-paths.patch. - Refresh patches.suse/0007-x86-enter-Use-IBRS-on-syscall-and-interrupts.patch. - Refresh patches.suse/0013-x86-entry-Stuff-RSB-for-entry-to-kernel-for-non-SMEP.patch. - Refresh patches.suse/0015-x86-syscall-Clear-unused-extra-registers-on-32-bit-c.patch. - commit 3cf399e ==== kyotocabinet ==== - Add baselibs.conf: Produce libkyotocabinet16-32bit, dependency to libpinyin13-32bit. ==== libpsl ==== - Make sure to use python3 during build instead of calling env ==== llvm ==== Version update (5.0.0 -> 5.0.1) - Update to version 5.0.1 * This release contains bug-fixes for the LLVM 5.0.0 release. * This release is API and ABI compatible with 5.0.0. - Add lld package. * LLD is new since llvm5. ==== llvm5 ==== Version update (5.0.0 -> 5.0.1) Subpackages: clang5 libLLVM5 libLTO5 libc++-devel libc++1 libc++abi-devel libc++abi1 libclang5 libomp5-devel - Delete intermediate files during build to reduce total disk usage (bnc#1074625) - Update to llvm 5.0.1 * This release contains bug-fixes for the LLVM 5.0.0 release. * This release is API and ABI compatible with 5.0.0. - llvm-do-not-install-static-libraries.patch * Updated. ==== mdadm ==== - 0207-managemon-Don-t-add-disk-to-the-array-after-it-has-s.patch (bsc#1073862) ==== procps ==== Subpackages: libprocps6 - Add patch procps-ng-3.3.12-sysctl-iobuf-write.patch to use increased buffer on writing /proc/sys/net/ipv4/ip_local_reserved_ports