Packages changed: MozillaFirefox (61.0.1 -> 61.0.2) PackageKit drbd (9.0.14+git.62f906cf -> 9.0.15+git.c46d2790) drbd-utils (9.4.0 -> 9.5.0) ffmpeg-4 (4.0.1 -> 4.0.2) firewalld (0.6.0 -> 0.6.1) gtk2 gtk3 hyper-v installation-images-Kubic iso-codes (3.77 -> 3.79) iw (4.9 -> 4.14) kactivitymanagerd kernel-source (4.17.14 -> 4.18.0) kfilemetadata5 libdlm libgsf (1.14.43 -> 1.14.44) libmatroska libsoup (2.62.2 -> 2.62.3) mariadb-connector-c (3.0.5 -> 3.0.6) nfs-utils python-matplotlib (2.2.2 -> 2.2.3) python-pycurl python-six quota rpm rubygem-mini_mime (1.0.0 -> 1.0.1) strace (4.23 -> 4.24) systemd tracker utf8proc (2.1.0 -> 2.2.0) vim (8.1.0235 -> 8.1.0258) xf86-video-v4l (0.2.0 -> 0.3.0) xfce4-panel-plugin-mount (1.1.2 -> 1.1.3) xfce4-panel-plugin-whiskermenu (2.2.0 -> 2.2.1) xfce4-screenshooter (1.9.2 -> 1.9.3) xfwm4 (4.12.4 -> 4.12.5) yast2-http-server (4.1.0 -> 4.1.1) yast2-instserver (4.0.3 -> 4.0.4) === Details === ==== MozillaFirefox ==== Version update (61.0.1 -> 61.0.2) Subpackages: MozillaFirefox-translations-common - update to Firefox 61.0.2 * Improved website rendering with the Retained Display List feature enabled (bmo#1474402) * Fixed broken DevTools panels with certain extensions installed (bmo#1474379) * Fixed a crash for users with some accessibility tools enabled (bmo#1474007) ==== PackageKit ==== Subpackages: PackageKit-backend-zypp PackageKit-gstreamer-plugin PackageKit-gtk3-module PackageKit-lang libpackagekit-glib2-18 typelib-1_0-PackageKitGlib-1_0 - Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit doesn't package files in /var (bsc#1098042). ==== drbd ==== Version update (9.0.14+git.62f906cf -> 9.0.15+git.c46d2790) Subpackages: drbd-kmp-default - Update to 9.0.15-1 * fix tracking of changes (on a secondary) against the lost disk of a primary and also fix re-attaching in case the disk is replaced * fix live migrate of VMs on DRBD when migrated to/from diskless nodes * fix an IO deadlock in DRBD when the activity log on a secondary runs full * fix hanging demote after IO error followed by attaching the disk again and the corresponding resync * fix DRBD dopping connection after an IO error on the secondary node * improve details when online changing devices from diskless to with disk and vice versa. (Including peers freeing bitmap slots) * new module parameter to disable support for older protocol versions * improve details when online changing devices from diskless to with disk * remove no longer relevant compat tests * expose openers via debugfs * optimize IO submit code path * compat for v4.18 kernel ==== drbd-utils ==== Version update (9.4.0 -> 9.5.0) - Update to 9.5.0 * drbdmon: allow to start in problems view (--problems) * drbdadm,v9: fix always failing stacked handlers from kernel * drbdadm,v9: adjust now hands over the information that a diskfull->diskless change was intentional. * drbdadm,v9: adjust verifies now IPs - Remove patch: fix_call_khelper_with_stack.patch in 60ec9fa68 ==== ffmpeg-4 ==== Version update (4.0.1 -> 4.0.2) Subpackages: libavcodec58 libavdevice58 libavfilter7 libavformat58 libavresample4 libavutil56 libpostproc55 libswresample3 libswscale5 - Update to version 4.0.2: * Various bugfixes and a revert. - bsc#1092241 Enable webvtt encoders and decoders. - Build codec2 encoder and decoder, add libcodec2 to enable_decoders and enable_encoders. - Enable mpeg 1 and 2 encoders. - Add conditional pkgconfig(aom) BuildRequires and pass - -enable-libaom to configure as well as add libaom and libaom_av1 to enable_decoders and enable_encoders: Build AOMedia Video 1 (AV1) support. - bsc#1103064 attempt to allow migration from the unprefixed devel packages cleanly ==== firewalld ==== Version update (0.6.0 -> 0.6.1) Subpackages: firewall-macros firewalld-lang python3-firewall - Restore nftables as default backend (bsc#1102761). nftables and iptables can co-exist but the 'nat' table had a bug which was fixed in kernel-4.18. - Update to 0.6.1. Some of the changes are: * Correct source/destination in rich rule masquerade * Only modify ifcfg files for permanent configuration changes * Fix a backtrace when calling common_reverse_rule() * man firewalld.conf: Show nftables is the default FirewallBackend * firewall-config: fix some untranslated strings that caused a UI bug causing rich rules to not be modify-able (bsc#1096542) * fw_direct: avoid log for untracked passthrough queries * fixed many issues if iptables is actually iptables-nft * Use preferred location for AppData files * ipXtables: fix ICMP block inversion with set-log-denied * fixes ICMP block inversion with set-log-denied with IndividualCalls=yes * nftables: fix set-log-denied if target is not ACCEPT * fw_direct: strip _direct chain suffix if using nftables * NetworkManager integration bugfixes. ==== gtk2 ==== Subpackages: gtk2-data gtk2-immodule-amharic gtk2-immodule-inuktitut gtk2-immodule-thai gtk2-immodule-vietnamese gtk2-immodule-xim gtk2-lang gtk2-tools gtk2-tools-32bit libgtk-2_0-0 libgtk-2_0-0-32bit - Fix package name to be uniform immodules -> immodule bsc#1104264 ==== gtk3 ==== Subpackages: gtk3-data gtk3-immodule-amharic gtk3-immodule-inuktitut gtk3-immodule-thai gtk3-immodule-vietnamese gtk3-immodule-xim gtk3-lang gtk3-tools libgtk-3-0 typelib-1_0-Gtk-3_0 - Fix package name to be uniform immodules -> immodule bsc#1104264 ==== hyper-v ==== - hyper-v.tools.hv.hv_vss_daemon.c: Include for major ==== installation-images-Kubic ==== - get leap version from %sle_version macro (bsc#1103208) ==== iso-codes ==== Version update (3.77 -> 3.79) Subpackages: iso-codes-lang - Update to version 3.79: + Updated translations for ISO 3166-1, ISO 3166-2, ISO 639-2, ISO 639-3, ISO 639-5, ISO 4217 and ISO 15924 - Changes from version 3.78: + Update all .pot and .po files with new URL for msgid bugs + Fix copyright headers in .po files + Remove old script with l10n status + Fix some errors in .po files, spotted by Weblate + Updated translations for ISO 3166-1, ISO 3166-2, ISO 3166-3, ISO 639-2, ISO 639-3, ISO 639-5, ISO 4217 and ISO 15924 ==== iw ==== Version update (4.9 -> 4.14) - Update to version 4.14 * Support all new kernel features of kernel 4.14 * iw: add support for mfp * iw: ap: don't return -EPERM * iw: ap: support hidden/zeroed SSID * iw: ap: add support for passing a proper chandef * iw: Add support for start/stop AP * iw: print missing extended capabilities * iw: allow CCMP-128/GCMP-128 as CCMP/GCMP aliases * iw: add support for WPA2 PSK CCMP / GCMP association * iw: add command to register and dump mgmt frames * iw: define SOL_NETLINK if it isn't * iw: add extack support * iw: Fix bitrate output when no rate info found * iw: parse_freqs: check how many center frequencies to expect * iw: split str_to_bw() from parse_freqs() * Print frequency of radar events. * Add commands to send CSA * Add cac command to allow clearing channels * mesh: Use common freqchan helper for joining a mesh * ibss: Use common freqchan helper for joining an ibss * phy: Use common freqchan helper for setting the operating channel * util: Add generic frequency/channel command line handler ==== kactivitymanagerd ==== Subpackages: kactivitymanagerd-lang - Don't recommend kactivitymanagerd-imports anymore, not needed after the split (boo#1104264) ==== kernel-source ==== Version update (4.17.14 -> 4.18.0) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms - Linux 4.18.1-rc1 It contains the L1TF fixes, so push the rc1 for now. - x86/paravirt: Fix spectre-v2 mitigations for paravirt guests (bnc#1012628). - x86/speculation: Protect against userspace-userspace spectreRSB (bnc#1012628). - kprobes/x86: Fix %p uses in error messages (bnc#1012628). - x86/irqflags: Provide a declaration for native_save_fl (bnc#1012628). - x86/speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT (bnc#1012628). - x86/speculation/l1tf: Change order of offset/type in swap entry (bnc#1012628). - x86/speculation/l1tf: Protect swap entries against L1TF (bnc#1012628). - x86/speculation/l1tf: Protect PROT_NONE PTEs against speculation (bnc#1012628). - x86/speculation/l1tf: Make sure the first page is always reserved (bnc#1012628). - x86/speculation/l1tf: Add sysfs reporting for l1tf (bnc#1012628). - x86/speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings (bnc#1012628). - x86/speculation/l1tf: Limit swap file size to MAX_PA/2 (bnc#1012628). - x86/bugs: Move the l1tf function and define pr_fmt properly (bnc#1012628). - sched/smt: Update sched_smt_present at runtime (bnc#1012628). - x86/smp: Provide topology_is_primary_thread() (bnc#1012628). - x86/topology: Provide topology_smt_supported() (bnc#1012628). - cpu/hotplug: Make bringup/teardown of smp threads symmetric (bnc#1012628). - cpu/hotplug: Split do_cpu_down() (bnc#1012628). - cpu/hotplug: Provide knobs to control SMT (bnc#1012628). - x86/cpu: Remove the pointless CPU printout (bnc#1012628). - x86/cpu/AMD: Remove the pointless detect_ht() call (bnc#1012628). - x86/cpu/common: Provide detect_ht_early() (bnc#1012628). - x86/cpu/topology: Provide detect_extended_topology_early() (bnc#1012628). - x86/cpu/intel: Evaluate smp_num_siblings early (bnc#1012628). - x86/CPU/AMD: Do not check CPUID max ext level before parsing SMP info (bnc#1012628). - x86/cpu/AMD: Evaluate smp_num_siblings early (bnc#1012628). - x86/apic: Ignore secondary threads if nosmt=force (bnc#1012628). - x86/speculation/l1tf: Extend 64bit swap file size limit (bnc#1012628). - x86/cpufeatures: Add detection of L1D cache flush support (bnc#1012628). - x86/CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (bnc#1012628). - x86/speculation/l1tf: Protect PAE swap entries against L1TF (bnc#1012628). - x86/speculation/l1tf: Fix up pte->pfn conversion for PAE (bnc#1012628). - Revert "x86/apic: Ignore secondary threads if nosmt=force" (bnc#1012628). - cpu/hotplug: Boot HT siblings at least once (bnc#1012628). - x86/KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present (bnc#1012628). - x86/KVM/VMX: Add module argument for L1TF mitigation (bnc#1012628). - x86/KVM/VMX: Add L1D flush algorithm (bnc#1012628). - x86/KVM/VMX: Add L1D MSR based flush (bnc#1012628). - x86/KVM/VMX: Add L1D flush logic (bnc#1012628). - x86/KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest numbers (bnc#1012628). - x86/KVM/VMX: Add find_msr() helper function (bnc#1012628). - x86/KVM/VMX: Separate the VMX AUTOLOAD guest/host number accounting (bnc#1012628). - x86/KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (bnc#1012628). - x86/KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required (bnc#1012628). - cpu/hotplug: Online siblings when SMT control is turned on (bnc#1012628). - x86/litf: Introduce vmx status variable (bnc#1012628). - x86/kvm: Drop L1TF MSR list approach (bnc#1012628). - x86/l1tf: Handle EPT disabled state proper (bnc#1012628). - x86/kvm: Move l1tf setup function (bnc#1012628). - x86/kvm: Add static key for flush always (bnc#1012628). - x86/kvm: Serialize L1D flush parameter setter (bnc#1012628). - x86/kvm: Allow runtime control of L1D flush (bnc#1012628). - cpu/hotplug: Expose SMT control init function (bnc#1012628). - cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early (bnc#1012628). - x86/bugs, kvm: Introduce boot-time control of L1TF mitigations (bnc#1012628). - Documentation: Add section about CPU vulnerabilities (bnc#1012628). - x86/speculation/l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (bnc#1012628). - x86/KVM/VMX: Initialize the vmx_l1d_flush_pages' content (bnc#1012628). - Documentation/l1tf: Fix typos (bnc#1012628). - cpu/hotplug: detect SMT disabled by BIOS (bnc#1012628). - x86/KVM/VMX: Don't set l1tf_flush_l1d to true from vmx_l1d_flush() (bnc#1012628). - x86/KVM/VMX: Replace 'vmx_l1d_flush_always' with 'vmx_l1d_flush_cond' (bnc#1012628). - x86/KVM/VMX: Move the l1tf_flush_l1d test to vmx_l1d_flush() (bnc#1012628). - x86/irq: Demote irq_cpustat_t::__softirq_pending to u16 (bnc#1012628). - x86/KVM/VMX: Introduce per-host-cpu analogue of l1tf_flush_l1d (bnc#1012628). - x86: Don't include linux/irq.h from asm/hardirq.h (bnc#1012628). - x86/irq: Let interrupt handlers set kvm_cpu_l1tf_flush_l1d (bnc#1012628). - x86/KVM/VMX: Don't set l1tf_flush_l1d from vmx_handle_external_intr() (bnc#1012628). - Documentation/l1tf: Remove Yonah processors from not vulnerable list (bnc#1012628). - x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (bnc#1012628). - x86/speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (bnc#1012628). - KVM: VMX: Tell the nested hypervisor to skip L1D flush on vmentry (bnc#1012628). - cpu/hotplug: Fix SMT supported evaluation (bnc#1012628). - x86/speculation/l1tf: Invert all not present mappings (bnc#1012628). - x86/speculation/l1tf: Make pmd/pud_mknotpresent() invert (bnc#1012628). - x86/mm/pat: Make set_memory_np() L1TF safe (bnc#1012628). - x86/mm/kmmio: Make the tracer robust against L1TF (bnc#1012628). - tools headers: Synchronise x86 cpufeatures.h for L1TF additions (bnc#1012628). - x86/microcode: Allow late microcode loading with SMT disabled (bnc#1012628). - Refresh patches.suse/0001-x86-speculation-Add-basic-IBRS-support-infrastructur.patch. - Update config files. - commit a23e15c - Update upstream reference: patches.suse/hv-netvsc-Fix-NULL-dereference-at-single-queue-mode-.patch. - commit 0425184 - hv/netvsc: Fix NULL dereference at single queue mode fallback (bsc#1104708). - commit a0cb9f6 - Refresh patches.suse/platform-x86-ideapad-laptop-Apply-no_hw_rfkill-to-Y2. Update upstream info. - commit 799dc2a - Update to 4.18-final. - Refresh configs - commit 06ab9b3 ==== kfilemetadata5 ==== Subpackages: kfilemetadata5-lang - Don't recommend catdoc, doesn't exist anymore (boo#1104264) ==== libdlm ==== - sysmacros.patch: Include for minor ==== libgsf ==== Version update (1.14.43 -> 1.14.44) Subpackages: gsf-office-thumbnailer libgsf-1-114 libgsf-lang - Update to version 1.14.44: + Fix msole metadata writing for non-ascii. + Fix problem with threaded code. ==== libmatroska ==== - Fixed ABI tracking with cmake macro. ==== libsoup ==== Version update (2.62.2 -> 2.62.3) Subpackages: libsoup-2_4-1 libsoup-lang typelib-1_0-Soup-2_4 - Update to version 2.62.3: + Check for trailing dots in domains. + Set default cookie path for NULL origins. + Use atomic-refcounting in classes that are not using GObject-refcounting. + Many Coverity-found code fixes. + Bail out on cookie-jar calls with empty hostnames. - Drop libsoup-boo1100097-empty-string.patch: Fixed upstream. ==== mariadb-connector-c ==== Version update (3.0.5 -> 3.0.6) - New upstream version 3.0.6 * MDEV-15263: FIx IS_NUM() macro * CONC-297: local infile parameter must be unsigned int instead of my_bool * CONC-329: change return value of internal socket functions from my_bool to int * CONC-332: my_auth doesn't read/update server ok packet * CONC-344: reset internal row counter * CONC-345: invalid heap use after free * CONC-346: Remove old cmake policies * fixed crash in mysql_select_db if NULL parameter was provided - refresh private_library.patch ==== nfs-utils ==== Subpackages: nfs-client nfs-doc nfs-kernel-server - sysmacros.patch: include for major - use packageand for nfs documentation rather then always installing nfs-doc as part of the documentation pattern. ==== python-matplotlib ==== Version update (2.2.2 -> 2.2.3) Subpackages: python3-matplotlib python3-matplotlib-cairo python3-matplotlib-gtk3 - Update to version 2.2.3 * Fix import failure on BSD systems * Fix import errors in Qt shims for PyQt5 5.11 and PyQt4 4.12 * Fix import errors if bz2 module is not in standard library * Fix overflow in _path.h * Fix infinite recursion in transform repr * Fix bug with XKCD style * Remove unsafe usage of Popen ==== python-pycurl ==== Subpackages: python2-pycurl python3-pycurl - Start excluding flaky tests ==== python-six ==== Subpackages: python2-six python3-six - Remove argparse dependency ==== quota ==== Subpackages: quota-nfs - Add patch to fix high cpu load bsc#1104898: * quota-4.04-Listen-on-a-TCP-socket.patch ==== rpm ==== Subpackages: rpm-build rpm-devel - Add reproducible-debuginfo.patch to generate debuginfo in a reproducible way - Require /usr/bin/awk so that 'rpm --last' works [bnc#1101355] - Split SUSE macros and some helpers into rpm-config-SUSE package. This is based on the work of Neal Gompa, thanks! new patch: findsupplements.diff dropped files: rpm-suse_macros dropped patches: findksyms.diff, modalias.diff, firmware.diff, modalias-encode.diff, initscriptsprov.diff ==== rubygem-mini_mime ==== Version update (1.0.0 -> 1.0.1) - updated to version 1.0.1 * Update mime types from upstream * Add lookup_by_extension to the public API ==== strace ==== Version update (4.23 -> 4.24) - Update to strace 4.24 * Contains a fix for occasionally failing aio.gen.test * Improvements * Implemented decoding of kvm vcpu exit reason (-e kvm=vcpu option), requires Linux kernel version 4.16.0 or higher. * Implemented decoding of KVM_SET_CPUID2 and KVM_GET_*_CPUID ioctl commands. - Remove statx-redefinition.patch (in upstream now) ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev-devel libudev1 libudev1-32bit systemd-32bit systemd-coredump systemd-logger systemd-sysvinit udev - Import commit bb5a925bcefd4743873cae3f748ae1a426e92d44 8983bd246 core: don't include libmount.h in a header file (#8580) 3e4156a8f tmpfiles: don't adjust qgroups on existing subvolumes (bsc#1093753) 42edc93ac core/service: rework the hold-off time over message - Enable regexp matching support Currently only used by "journalctl --grep=xxx". ==== tracker ==== Subpackages: libtracker-common-2_0 libtracker-control-2_0-0 libtracker-miner-2_0-0 libtracker-sparql-2_0-0 tracker-lang typelib-1_0-Tracker-2_0 typelib-1_0-TrackerControl-2_0 - Add tracker Requires to libtracker-common-2_0 subpackage to make sure default.rule file is installed to avoid several packages breakage on Tumbleweed upgrade (boo#1104112). - Drop all tracker Suggests: no longer needed after last action. ==== utf8proc ==== Version update (2.1.0 -> 2.2.0) - utf8proc 2.2.0: * Unicode 11 support * utf8proc_NFKC_Casefold convenience function for NFKC_Casefold normalization * UTF8PROC_STRIPNA option to strip unassigned codepoints * toupper of ß (U+00df) now yields ? (U+1E9E), similar to musl; case-folding still yields the standard "ss" mapping. * utf8proc_charwidth now returns 1 for U+00AD (soft hyphen) and for unassigned/PUA codepoints * Fixed a composition bug ==== vim ==== Version update (8.1.0235 -> 8.1.0258) Subpackages: gvim vim-data vim-data-common - update to 8.1.0258 * Using setline() in TextChangedI splits undo. * Saving and restoring window title does not always work. * using full path is not supported for 'backupdir' * GTK: when screen DPI changes Vim does not handle it. * duplicated quickfix code. * Python: error message for failing import is incorrect. * Build failure without the +eval feature. * calling setline() in TextChangedI autocmd breaks undo * no redraw when using a STOP signal on Vim and then CONT * Using :term ++close ++hidden closes a window * Insert mode completion may use an invalid buffer pointer. * Effect of ":tabmove N" is not clear. * g:actual_curbuf set in wrong scope. * Now Ruby build fails on other systems. * 'buftype' is cleared when using ":term ++hidden cat" * Ruby build fails when ruby_intern is missing ==== xf86-video-v4l ==== Version update (0.2.0 -> 0.3.0) - Update to version 0.3.0 * This long overdue release features build compatibility with newer X servers and support for v4l2 devices. - supersedes patches: * n_added-definition-of-VIDEO_INVERT_CLIPLIST.patch * n_added-defines-for-xalloc-xrealloc.patch ==== xfce4-panel-plugin-mount ==== Version update (1.1.2 -> 1.1.3) Subpackages: xfce4-panel-plugin-mount-lang - update to 1.1.3 * some pointer checks * nicer formatting of Makefile and configure * translation updates ==== xfce4-panel-plugin-whiskermenu ==== Version update (2.2.0 -> 2.2.1) Subpackages: xfce4-panel-plugin-whiskermenu-lang - update to 2.2.1: * Fix category button staying active when dragged. (bxo#14419) * Fix regression of non-square panel image support. (bxo#14506) * Fix redundant hiding of menu. * Fix sidebar buttons retaining incorrect width. * Fix commands not following sidebar. * Translation updates ==== xfce4-screenshooter ==== Version update (1.9.2 -> 1.9.3) Subpackages: xfce4-panel-plugin-screenshooter xfce4-screenshooter-lang - update to version 1.9.3 - Allow user to move selection rectangle (bxo#14365) - Allow and remember 0sec delay for all regions (bxo#13763) - Fix clipboard action handling (bxo#14513) ==== xfwm4 ==== Version update (4.12.4 -> 4.12.5) Subpackages: xfwm4-lang - update to 4.12.5: - client: Check GTK_HIDE_TITLEBAR_WHEN_MAXIMIZED - client: Check when GTK_FRAME_EXTENTS has changed (bxo#14511) - netwm: Fix adding maximized state (bxo#14514) - fix typo in clientMoveTile (bxo#14181) - screen: Use computed screen size instead of xlib - client: Make sure to redraw when removing maximized (bxo#13954) - Fix logic error in bottom struts validation (bxo#13964) - client: Maximize on expected output (bxo#13284) - screen: Fix broken monitor index (bxo#13608) - Use ximerama indices for _NET_WM_FULLSCREEN_MONITORS (bxo#9351) - placement: Use primary monitor as default (bxo#13454) ==== yast2-http-server ==== Version update (4.1.0 -> 4.1.1) - Fixed PHP support (use PHP7 instead of dropped PHP5) (bsc#1099106) - Fixed also the other renamed packages (for Python and apparmor) - 4.1.1 ==== yast2-instserver ==== Version update (4.0.3 -> 4.0.4) - Do not crash when importing a SLE15 installation medium (bsc#1103621) - 4.0.4