Packages changed:
  bind
  dhcp
  kernel-source (5.2.2 -> 5.2.3)
  kubic-control (0.6.2 -> 0.7.0)
  libpciaccess (0.15 -> 0.16)
  libsolv
  metallb (0.7.3 -> 0.8.0)
  ncurses
  openssh
  python-base
  python-certifi (2019.3.9 -> 2019.6.16)
  python-networkx (2.2 -> 2.3)
  python-oauthlib (3.0.1 -> 3.0.2)
  python-pyzmq (18.0.1 -> 18.0.2)
  python-requests
  python-six
  python-urllib3
  ucode-intel (20190514 -> 20190618)
  vim (8.1.1694 -> 8.1.1741)
  zstd (1.4.0 -> 1.4.1)

=== Details ===

==== bind ====
Subpackages: bind-utils libbind9-160 libdns169 libirs160 libisc166 libisccc160 libisccfg160 liblwres160 python3-bind

- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html

==== dhcp ====
Subpackages: dhcp-client

- Remove SuSEfirewall2 services since SuSEfirewall2 has been
  replaced by firewalld (which already provides a service for
  dhcp).

==== kernel-source ====
Version update (5.2.2 -> 5.2.3)
Subpackages: kernel-debug kernel-default

- Linux 5.2.3 (bnc#1012628).
- dm bufio: fix deadlock with loop device (bnc#1012628).
- dm thin metadata: check if in fail_io mode when setting
  needs_check (bnc#1012628).
- phy: qcom-qmp: Correct READY_STATUS poll break condition
  (bnc#1012628).
- pstore: Fix double-free in pstore_mkfile() failure path
  (bnc#1012628).
- dt-bindings: allow up to four clocks for orion-mdio
  (bnc#1012628).
- net: mvmdio: allow up to four clocks to be specified for
  orion-mdio (bnc#1012628).
- blkcg: update blkcg_print_stat() to handle larger outputs
  (bnc#1012628).
- blk-iolatency: clear use_delay when io.latency is set to zero
  (bnc#1012628).
- clk: imx: imx8mm: correct audio_pll2_clk to audio_pll2_out
  (bnc#1012628).
- blk-throttle: fix zero wait time for iops throttled group
  (bnc#1012628).
- usb: Handle USB3 remote wakeup for LPM enabled devices correctly
  (bnc#1012628).
- dax: Fix missed wakeup with PMD faults (bnc#1012628).
- Bluetooth: Add SMP workaround Microsoft Surface Precision
  Mouse bug (bnc#1012628).
- intel_th: msu: Fix single mode with disabled IOMMU
  (bnc#1012628).
- intel_th: msu: Remove set but not used variable 'last'
  (bnc#1012628).
- mtd: spinand: read returns badly if the last page has bitflips
  (bnc#1012628).
- mtd: rawnand: mtk: Correct low level time calculation of r/w
  cycle (bnc#1012628).
- eCryptfs: fix a couple type promotion bugs (bnc#1012628).
- mmc: sdhci-msm: fix mutex while in spinlock (bnc#1012628).
- powerpc/pseries: Fix oops in hotplug memory notifier
  (bnc#1012628).
- powerpc/pseries: Fix xive=off command line (bnc#1012628).
- powerpc/powernv: Fix stale iommu table base after VFIO
  (bnc#1012628).
- powerpc/powernv/idle: Fix restore of SPRN_LDBAR for POWER9
  stop state (bnc#1012628).
- powerpc/powernv/npu: Fix reference leak (bnc#1012628).
- powerpc/watchpoint: Restore NV GPRs while returning from
  exception (bnc#1012628).
- powerpc/mm/32s: fix condition that is always true (bnc#1012628).
- powerpc/32s: fix suspend/resume when IBATs 4-7 are used
  (bnc#1012628).
- parisc: Fix kernel panic due invalid values in IAOQ0 or IAOQ1
  (bnc#1012628).
- parisc: Avoid kernel panic triggered by invalid kprobe
  (bnc#1012628).
- parisc: Ensure userspace privilege for ptraced processes in
  regset functions (bnc#1012628).
- gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM
  (bnc#1012628).
- resource: fix locking in find_next_iomem_res() (bnc#1012628).
- include/asm-generic/bug.h: fix "cut here" for WARN_ON for
  __WARN_TAINT architectures (bnc#1012628).
- coda: pass the host file in vma->vm_file on mmap (bnc#1012628).
- mm/z3fold.c: lock z3fold page before __SetPageMovable()
  (bnc#1012628).
- mm/memcontrol: fix wrong statistics in memory.stat
  (bnc#1012628).
- libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields
  (bnc#1012628).
- mm/nvdimm: add is_ioremap_addr and use that to check ioremap
  address (bnc#1012628).
- mm: vmscan: scan anonymous pages on file refaults (bnc#1012628).
- HID: wacom: correct touch resolution x/y typo (bnc#1012628).
- HID: wacom: generic: Correct pad syncing (bnc#1012628).
- HID: wacom: generic: only switch the mode on devices with LEDs
  (bnc#1012628).
- IB/mlx5: Report correctly tag matching rendezvous capability
  (bnc#1012628).
- Btrfs: add missing inode version, ctime and mtime updates when
  punching hole (bnc#1012628).
- Btrfs: fix fsync not persisting dentry deletions due to inode
  evictions (bnc#1012628).
- Btrfs: fix data loss after inode eviction, renaming it, and
  fsync it (bnc#1012628).
- btrfs: correctly validate compression type (bnc#1012628).
- PCI: qcom: Ensure that PERST is asserted for at least 100 ms
  (bnc#1012628).
- PCI: Do not poll for PME if the device is in D3cold
  (bnc#1012628).
- PCI: hv: Fix a use-after-free bug in hv_eject_device_work()
  (bnc#1012628).
- intel_th: pci: Add Ice Lake NNPI support (bnc#1012628).
- RDMA/odp: Fix missed unlock in non-blocking invalidate_start
  (bnc#1012628).
- RDMA/srp: Accept again source addresses that do not have a
  port number (bnc#1012628).
- block: Fix potential overflow in blk_report_zones()
  (bnc#1012628).
- block: Allow mapping of vmalloc-ed buffers (bnc#1012628).
- drm/edid: parse CEA blocks embedded in DisplayID (bnc#1012628).
- x86/stacktrace: Prevent infinite loop in arch_stack_walk_user()
  (bnc#1012628).
- perf/x86/amd/uncore: Set the thread mask for F17h L3 PMCs
  (bnc#1012628).
- perf/x86/amd/uncore: Do not set 'ThreadMask' and 'SliceMask'
  for non-L3 PMCs (bnc#1012628).
- perf/x86/intel: Fix spurious NMI on fixed counter (bnc#1012628).
- x86/boot: Fix memory leak in default_get_smp_config()
  (bnc#1012628).
- x86/hyper-v: Zero out the VP ASSIST PAGE on allocation
  (bnc#1012628).
- rt2x00usb: fix rx queue hang (bnc#1012628).
- 9p/virtio: Add cleanup path in p9_virtio_init (bnc#1012628).
- 9p/xen: Add cleanup path in p9_trans_xen_init (bnc#1012628).
- xen/events: fix binding user event channels to cpus
  (bnc#1012628).
- dm zoned: fix zone state management race (bnc#1012628).
- padata: use smp_mb in padata_reorder to avoid orphaned padata
  jobs (bnc#1012628).
- drm/nouveau/i2c: Enable i2c pads & busses during preinit
  (bnc#1012628).
- ARM: dts: gemini: Set DIR-685 SPI CS as active low
  (bnc#1012628).
- i3c: fix i2c and i3c scl rate by bus mode (bnc#1012628).
- fs/proc/proc_sysctl.c: fix the default values of i_uid/i_gid
  on /proc/sys inodes (bnc#1012628).
- signal: Correct namespace fixups of si_pid and si_uid
  (bnc#1012628).
- signal/usb: Replace kill_pid_info_as_cred with
  kill_pid_usb_asyncio (bnc#1012628).
- intel_th: msu: Fix unused variable warning on arm64 platform
  (bnc#1012628).
- arm64: Fix incorrect irqflag restore for priority masking
  (bnc#1012628).
- arm64: irqflags: Add condition flags to inline asm clobber list
  (bnc#1012628).
- arm64: tegra: Fix AGIC register range (bnc#1012628).
- KVM: x86/vPMU: refine kvm_pmu err msg when event creation failed
  (bnc#1012628).
- KVM: PPC: Book3S HV: Fix CR0 setting in TM emulation
  (bnc#1012628).
- KVM: PPC: Book3S HV: Clear pending decrementer exceptions on
  nested guest entry (bnc#1012628).
- KVM: PPC: Book3S HV: Signed extend decrementer value if not
  using large decrementer (bnc#1012628).
- KVM: Properly check if "page" is valid in kvm_vcpu_unmap
  (bnc#1012628).
- KVM: VMX: check CPUID before allowing read/write of IA32_XSS
  (bnc#1012628).
- KVM: VMX: Fix handling of #MC that occurs during VM-Entry
  (bnc#1012628).
- KVM: nVMX: Always sync GUEST_BNDCFGS when it comes from vmcs01
  (bnc#1012628).
- KVM: VMX: Always signal #GP on WRMSR to MSR_IA32_CR_PAT with
  bad value (bnc#1012628).
- KVM: nVMX: Don't dump VMCS if virtual APIC page can't be mapped
  (bnc#1012628).
- media: videobuf2-dma-sg: Prevent size from overflowing
  (bnc#1012628).
- media: videobuf2-core: Prevent size alignment wrapping buffer
  size to 0 (bnc#1012628).
- media: coda: Remove unbalanced and unneeded mutex unlock
  (bnc#1012628).
- media: v4l2: Test type instead of cfg->type in
  v4l2_ctrl_new_custom() (bnc#1012628).
- ceph: use ceph_evict_inode to cleanup inode's resource
  (bnc#1012628).
- ceph: fix end offset in truncate_inode_pages_range call
  (bnc#1012628).
- ALSA: hda/hdmi - Fix i915 reverse port/pin mapping
  (bnc#1012628).
- ALSA: hda/hdmi - Remove duplicated define (bnc#1012628).
- ALSA: hda/realtek: apply ALC891 headset fixup to one Dell
  machine (bnc#1012628).
- ALSA: hda/realtek - Fixed Headphone Mic can't record on Dell
  platform (bnc#1012628).
- ALSA: hda - Don't resume forcibly i915 HDMI/DP codec
  (bnc#1012628).
- ALSA: seq: Break too long mutex context in the write loop
  (bnc#1012628).
- kconfig: fix missing choice values in auto.conf (bnc#1012628).
- raid5-cache: Need to do start() part job after adding journal
  device (bnc#1012628).
- ASoC: core: Adapt for debugfs API change (bnc#1012628).
- ASoC: dapm: Adapt for debugfs API change (bnc#1012628).
- lib/scatterlist: Fix mapping iterator when sg->offset is
  greater than PAGE_SIZE (bnc#1012628).
- SUNRPC: Ensure the bvecs are reset when we re-encode the RPC
  request (bnc#1012628).
- pnfs: Fix a problem where we gratuitously start doing I/O
  through the MDS (bnc#1012628).
- pnfs/flexfiles: Fix PTR_ERR() dereferences in
  ff_layout_track_ds_error (bnc#1012628).
- Revert "NFS: readdirplus optimization by cache mechanism"
  (memleak) (bnc#1012628).
- NFSv4: Handle the special Linux file open access mode
  (bnc#1012628).
- tracing: Fix user stack trace "??" output (bnc#1012628).
- arm64: Fix interrupt tracing in the presence of NMIs
  (bnc#1012628).
- opp: Don't use IS_ERR on invalid supplies (bnc#1012628).
- iwlwifi: mvm: clear rfkill_safe_init_done when we start the
  firmware (bnc#1012628).
- iwlwifi: mvm: delay GTK setting in FW in AP mode (bnc#1012628).
- iwlwifi: fix RF-Kill interrupt while FW load for gen2 devices
  (bnc#1012628).
- iwlwifi: don't WARN when calling iwl_get_shared_mem_conf with
  RF-Kill (bnc#1012628).
- iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices
  w/o MSI-X (bnc#1012628).
- iwlwifi: pcie: don't service an interrupt that was masked
  (bnc#1012628).
- iwlwifi: add support for hr1 RF ID (bnc#1012628).
- arm64: tegra: Fix Jetson Nano GPU regulator (bnc#1012628).
- arm64: tegra: Update Jetson TX1 GPU regulator timings
  (bnc#1012628).
- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bnc#1012628).
- regulator: s2mps11: Fix ERR_PTR dereference on GPIO lookup
  failure (bnc#1012628).
- Input: alps - fix a mismatch between a condition check and
  its comment (bnc#1012628).
- Input: synaptics - whitelist Lenovo T580 SMBus intertouch
  (bnc#1012628).
- Input: alps - don't handle ALPS cs19 trackpoint-only device
  (bnc#1012628).
- Input: gtco - bounds check collection indent level
  (bnc#1012628).
- bcache: destroy dc->writeback_write_wq if failed to create
  dc->writeback_thread (bnc#1012628).
- bcache: fix mistaken sysfs entry for io_error counter
  (bnc#1012628).
- bcache: ignore read-ahead request failure on backing device
  (bnc#1012628).
- bcache: Revert "bcache: free heap cache_set->flush_btree in
  bch_journal_free" (bnc#1012628).
- bcache: Revert "bcache: fix high CPU occupancy during journal"
  (bnc#1012628).
- Revert "bcache: set CACHE_SET_IO_DISABLE in
  bch_cached_dev_error()" (bnc#1012628).
- CIFS: fix deadlock in cached root handling (bnc#1012628).
- cifs: flush before set-info if we have writeable handles
  (bnc#1012628).
- cifs: Properly handle auto disabling of serverino option
  (bnc#1012628).
- cifs: fix crash in smb2_compound_op()/smb2_set_next_command()
  (bnc#1012628).
- cifs: always add credits back for unsolicited PDUs
  (bnc#1012628).
- crypto: crypto4xx - fix a potential double free in
  ppc4xx_trng_probe (bnc#1012628).
- crypto: ccp/gcm - use const time tag comparison (bnc#1012628).
- crypto: ccp - memset structure fields to zero before reuse
  (bnc#1012628).
- crypto: crypto4xx - block ciphers should only accept complete
  blocks (bnc#1012628).
- crypto: crypto4xx - fix blocksize for cfb and ofb (bnc#1012628).
- crypto: crypto4xx - fix AES CTR blocksize value (bnc#1012628).
- crypto: chacha20poly1305 - fix atomic sleep when using async
  algorithm (bnc#1012628).
- crypto: arm64/sha2-ce - correct digest for empty data in finup
  (bnc#1012628).
- crypto: arm64/sha1-ce - correct digest for empty data in finup
  (bnc#1012628).
- crypto: ccp - Validate the the error value used to index error
  messages (bnc#1012628).
- crypto: caam - limit output IV to CBC to work around CTR mode
  DMA issue (bnc#1012628).
- crypto: ghash - fix unaligned memory access in ghash_setkey()
  (bnc#1012628).
- scsi: mac_scsi: Fix pseudo DMA implementation, take 2
  (bnc#1012628).
- scsi: mac_scsi: Increase PIO/PDMA transfer length threshold
  (bnc#1012628).
- scsi: megaraid_sas: Fix calculation of target ID (bnc#1012628).
- scsi: zfcp: fix request object use-after-free in send path
  causing wrong traces (bnc#1012628).
- scsi: zfcp: fix request object use-after-free in send path
  causing seqno errors (bnc#1012628).
- scsi: sd_zbc: Fix compilation warning (bnc#1012628).
- scsi: core: Fix race on creating sense cache (bnc#1012628).
- Revert "scsi: ncr5380: Increase register polling limit"
  (bnc#1012628).
- scsi: NCR5380: Handle PDMA failure reliably (bnc#1012628).
- scsi: NCR5380: Always re-enable reselection interrupt
  (bnc#1012628).
- xen: let alloc_xenballooned_pages() fail if not enough memory
  free (bnc#1012628).
- floppy: fix out-of-bounds read in copy_buffer (bnc#1012628).
- floppy: fix invalid pointer dereference in drive_name
  (bnc#1012628).
- floppy: fix out-of-bounds read in next_valid_format
  (bnc#1012628).
- floppy: fix div-by-zero in setup_format_params (bnc#1012628).
- libbpf: fix another GCC8 warning for strncpy (bnc#1012628).
- blk-iolatency: fix STS_AGAIN handling (bnc#1012628).
- iavf: fix dereference of null rx_buffer pointer (bnc#1012628).
- net: hns3: fix __QUEUE_STATE_STACK_XOFF not cleared issue
  (bnc#1012628).
- net: mvmdio: defer probe of orion-mdio if a clock is not ready
  (bnc#1012628).
- xdp: fix race on generic receive path (bnc#1012628).
- gtp: fix use-after-free in gtp_newlink() (bnc#1012628).
- gtp: fix use-after-free in gtp_encap_destroy() (bnc#1012628).
- gtp: fix Illegal context switch in RCU read-side critical
  section (bnc#1012628).
- gtp: fix suspicious RCU usage (bnc#1012628).
- Bluetooth: validate BLE connection interval updates
  (bnc#1012628).
- gtp: add missing gtp_encap_disable_sock() in gtp_encap_enable()
  (bnc#1012628).
- Bluetooth: hidp: NUL terminate a string in the compat ioctl
  (bnc#1012628).
- Bluetooth: Check state in l2cap_disconnect_rsp (bnc#1012628).
- perf tests: Fix record+probe_libc_inet_pton.sh for powerpc64
  (bnc#1012628).
- genirq: Update irq stats from NMI handlers (bnc#1012628).
- Bluetooth: 6lowpan: search for destination address in all peers
  (bnc#1012628).
- Bluetooth: Add new 13d3:3501 QCA_ROME device (bnc#1012628).
- Bluetooth: Add new 13d3:3491 QCA_ROME device (bnc#1012628).
- Bluetooth: hci_bcsp: Fix memory leak in rx_skb (bnc#1012628).
- net: hns3: fix port capbility updating issue (bnc#1012628).
- net: hns3: enable broadcast promisc mode when initializing VF
  (bnc#1012628).
- tools: bpftool: Fix json dump crash on powerpc (bnc#1012628).
- ASoC: audio-graph-card: fix use-after-free in
  graph_for_each_link (bnc#1012628).
- iommu/arm-smmu-v3: Invalidate ATC when detaching a device
  (bnc#1012628).
- gpiolib: Fix references to gpiod_[gs]et_*value_cansleep()
  variants (bnc#1012628).
- bonding: validate ip header before check IPPROTO_IGMP
  (bnc#1012628).
- selftests: bpf: fix inlines in test_lwt_seg6local (bnc#1012628).
- bpf, libbpf, smatch: Fix potential NULL pointer dereference
  (bnc#1012628).
- libbpf: fix GCC8 warning for strncpy (bnc#1012628).
- rxrpc: Fix oops in tracepoint (bnc#1012628).
- net: usb: asix: init MAC address buffers (bnc#1012628).
- bnx2x: Prevent ptp_task to be rescheduled indefinitely
  (bnc#1012628).
- vxlan: do not destroy fdb if register_netdevice() is failed
  (bnc#1012628).
- perf stat: Fix group lookup for metric group (bnc#1012628).
- perf stat: Don't merge events in the same PMU (bnc#1012628).
- perf stat: Fix metrics with --no-merge (bnc#1012628).
- perf stat: Make metric event lookup more robust (bnc#1012628).
- ALSA: hda: Fix a headphone detection issue when using SOF
  (bnc#1012628).
- bnxt_en: Cap the returned MSIX vectors to the RDMA driver
  (bnc#1012628).
- bnxt_en: Fix statistics context reservation logic for RDMA
  driver (bnc#1012628).
- bnxt_en: Disable bus master during PCI shutdown and driver
  unload (bnc#1012628).
- iwlwifi: dbg: fix debug monitor stop and restart delays
  (bnc#1012628).
- netfilter: Fix remainder of pseudo-header protocol 0
  (bnc#1012628).
- bpf: fix uapi bpf_prog_info fields alignment (bnc#1012628).
- iwlwifi: mvm: Drop large non sta frames (bnc#1012628).
- ixgbe: Avoid NULL pointer dereference with VF on non-IPsec hw
  (bnc#1012628).
- net: ethernet: ti: cpsw: Assign OF node to slave devices
  (bnc#1012628).
- net: hns3: add Asym Pause support to fix autoneg problem
  (bnc#1012628).
- igb: clear out skb->tstamp after reading the txtime
  (bnc#1012628).
- net: mvpp2: prs: Don't override the sign bit in SRAM parser
  shift (bnc#1012628).
- ath10k: destroy sdio workqueue while remove sdio module
  (bnc#1012628).
- ath10k: Fix memory leak in qmi (bnc#1012628).
- net: hns3: add some error checking in hclge_tm module
  (bnc#1012628).
- net: hns3: fix a -Wformat-nonliteral compile warning
  (bnc#1012628).
- bcache: fix potential deadlock in cached_def_free()
  (bnc#1012628).
- bcache: avoid a deadlock in bcache_reboot() (bnc#1012628).
- bcache: check c->gc_thread by IS_ERR_OR_NULL in
  cache_set_flush() (bnc#1012628).
- bcache: acquire bch_register_lock later in cached_dev_free()
  (bnc#1012628).
- bcache: check CACHE_SET_IO_DISABLE bit in bch_journal()
  (bnc#1012628).
- bcache: check CACHE_SET_IO_DISABLE in allocator code
  (bnc#1012628).
- bcache: fix return value error in bch_journal_read()
  (bnc#1012628).
- net/mlx5e: Attach/detach XDP program safely (bnc#1012628).
- EDAC: Fix global-out-of-bounds write when setting
  edac_mc_poll_msec (bnc#1012628).
- wil6210: drop old event after wmi_call timeout (bnc#1012628).
- ath9k: correctly handle short radar pulses (bnc#1012628).
- crypto: asymmetric_keys - select CRYPTO_HASH where needed
  (bnc#1012628).
- crypto: serpent - mark __serpent_setkey_sbox noinline
  (bnc#1012628).
- ixgbe: Check DDM existence in transceiver before access
  (bnc#1012628).
- net/mlx5: Get vport ACL namespace by vport index (bnc#1012628).
- net: hns3: restore the MAC autoneg state after reset
  (bnc#1012628).
- gpio: Fix return value mismatch of function
  gpiod_get_from_of_node() (bnc#1012628).
- rslib: Fix handling of of caller provided syndrome
  (bnc#1012628).
- bpf: fix BPF_ALU32 | BPF_ARSH on BE arches (bnc#1012628).
- rslib: Fix decoding of shortened codes (bnc#1012628).
- xsk: Properly terminate assignment in xskq_produce_flush_desc
  (bnc#1012628).
- netfilter: ctnetlink: Fix regression in conntrack entry deletion
  (bnc#1012628).
- clocksource/drivers/exynos_mct: Increase priority over ARM
  arch timer (bnc#1012628).
- clocksource/drivers/tegra: Restore base address before cleanup
  (bnc#1012628).
- libata: don't request sense data on !ZAC ATA devices
  (bnc#1012628).
- clocksource/drivers/tegra: Release all IRQ's on request_irq()
  error (bnc#1012628).
- block, bfq: fix rq_in_driver check in bfq_update_inject_limit
  (bnc#1012628).
- ASoC: Intel: hdac_hdmi: Set ops to NULL on remove (bnc#1012628).
- perf tools: Increase MAX_NR_CPUS and MAX_CACHES (bnc#1012628).
- ALSA: hdac: Fix codec name after machine driver is unloaded
  and reloaded (bnc#1012628).
- ath10k: fix PCIE device wake up failed (bnc#1012628).
- ath10k: fix fw crash by moving chip reset after napi disabled
  (bnc#1012628).
- ath10k: add missing error handling (bnc#1012628).
- mt76: mt7615: do not process rx packets if the device is not
  initialized (bnc#1012628).
- ipvs: fix tinfo memory leak in start_sync_thread (bnc#1012628).
- mt7601u: fix possible memory leak when the device is
  disconnected (bnc#1012628).
- x86/build: Add 'set -e' to mkcapflags.sh to delete broken
  capflags.c (bnc#1012628).
- mt7601u: do not schedule rx_tasklet when the device has been
  disconnected (bnc#1012628).
- rtlwifi: rtl8192cu: fix error handle when usb probe failed
  (bnc#1012628).
- net: stmmac: sun8i: force select external PHY when no internal
  one (bnc#1012628).
- media: hdpvr: fix locking and a missing msleep (bnc#1012628).
- media: vimc: cap: check v4l2_fill_pixfmt return value
  (bnc#1012628).
- media: coda: increment sequence offset for the last returned
  frame (bnc#1012628).
- media: coda: fix last buffer handling in V4L2_ENC_CMD_STOP
  (bnc#1012628).
- media: coda: fix mpeg2 sequence number handling (bnc#1012628).
- acpi/arm64: ignore 5.1 FADTs that are reported as 5.0
  (bnc#1012628).
- ASoC: soc-core: call snd_soc_unbind_card() under mutex_lock;
  (bnc#1012628).
- media: mt9m111: fix fw-node refactoring (bnc#1012628).
- timer_list: Guard procfs specific code (bnc#1012628).
- ntp: Limit TAI-UTC offset (bnc#1012628).
- media: i2c: fix warning same module names (bnc#1012628).
- media: s5p-mfc: Make additional clocks optional (bnc#1012628).
- ipvs: defer hook registration to avoid leaks (bnc#1012628).
- media: staging: davinci: fix memory leaks and check for
  allocation failure (bnc#1012628).
- ipsec: select crypto ciphers for xfrm_algo (bnc#1012628).
- arm64: Do not enable IRQs for ct_user_exit (bnc#1012628).
- nvme-pci: adjust irq max_vector using num_possible_cpus()
  (bnc#1012628).
- lightnvm: fix uninitialized pointer in nvm_remove_tgt()
  (bnc#1012628).
- lightnvm: pblk: fix freeing of merged pages (bnc#1012628).
- nvme-pci: set the errno on ctrl state change error
  (bnc#1012628).
- nvme-pci: properly report state change failure in
  nvme_reset_work (bnc#1012628).
- nvme: fix possible io failures when removing multipathed ns
  (bnc#1012628).
- EDAC/sysfs: Fix memory leak when creating a csrow object
  (bnc#1012628).
- EDAC/sysfs: Drop device references properly (bnc#1012628).
- spi: fix ctrl->num_chipselect constraint (bnc#1012628).
- ACPICA: Clear status of GPEs on first direct enable
  (bnc#1012628).
- blk-iolatency: only account submitted bios (bnc#1012628).
- x86/cacheinfo: Fix a -Wtype-limits warning (bnc#1012628).
- net: netsec: initialize tx ring on ndo_open (bnc#1012628).
- PCI: Add missing link delays required by the PCIe spec
  (bnc#1012628).
- perf build: Handle slang being in /usr/include and in
  /usr/include/slang/ (bnc#1012628).
- bpf: fix callees pruning callers (bnc#1012628).
- tools build: Fix the zstd test in the test-all.c common case
  feature test (bnc#1012628).
- ASoC: rsnd: fixup mod ID calculation in rsnd_ctu_probe_
  (bnc#1012628).
- ipoib: correcly show a VF hardware address (bnc#1012628).
- iavf: allow null RX descriptors (bnc#1012628).
- vhost_net: disable zerocopy by default (bnc#1012628).
- perf evsel: Make perf_evsel__name() accept a NULL argument
  (bnc#1012628).
- x86/atomic: Fix smp_mb__{before,after}_atomic() (bnc#1012628).
- integrity: Fix __integrity_init_keyring() section mismatch
  (bnc#1012628).
- perf/x86/intel/uncore: Handle invalid event coding for
  free-running counter (bnc#1012628).
- perf/x86/intel: Disable check_msr for real HW (bnc#1012628).
- sched/fair: Fix "runnable_avg_yN_inv" not used warnings
  (bnc#1012628).
- perf/x86/intel: Add more Icelake CPUIDs (bnc#1012628).
- sched/core: Add __sched tag for io_schedule() (bnc#1012628).
- xfrm: fix sa selector validation (bnc#1012628).
- blkcg, writeback: dead memcgs shouldn't contribute to writeback
  ownership arbitration (bnc#1012628).
- block: null_blk: fix race condition for null_del_dev
  (bnc#1012628).
- net: hns3: delay ring buffer clearing during reset
  (bnc#1012628).
- net: hns3: fix for skb leak when doing selftest (bnc#1012628).
- net: hns3: fix for dereferencing before null checking
  (bnc#1012628).
- qed: iWARP - Fix tc for MPA ll2 connection (bnc#1012628).
- x86/cpufeatures: Add FDP_EXCPTN_ONLY and ZERO_FCS_FDS
  (bnc#1012628).
- perf/x86: Add Intel Ice Lake NNPI uncore support (bnc#1012628).
- rcu: Force inlining of rcu_read_lock() (bnc#1012628).
- ASoC: meson: axg-tdm: fix sample clock inversion (bnc#1012628).
- x86/cpu: Add Ice Lake NNPI to Intel family (bnc#1012628).
- crypto: testmgr - add some more preemption points (bnc#1012628).
- selinux: fix empty write to keycreate file (bnc#1012628).
- media: s5p-mfc: fix reading min scratch buffer size on MFC v6/v7
  (bnc#1012628).
- bpf: silence warning messages in core (bnc#1012628).
- media: davinci: vpif_capture: fix memory leak in vpif_probe()
  (bnc#1012628).
- gpio: omap: Fix lost edge wake-up interrupts (bnc#1012628).
- regmap: fix bulk writes on paged registers (bnc#1012628).
- gpio: omap: ensure irq is enabled before wakeup (bnc#1012628).
- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bnc#1012628).
- iommu: Fix a leak in iommu_insert_resv_region (bnc#1012628).
- media: fdp1: Support M3N and E3 platforms (bnc#1012628).
- media: uvcvideo: Fix access to uninitialized fields on probe
  error (bnc#1012628).
- irqchip/meson-gpio: Add support for Meson-G12A SoC
  (bnc#1012628).
- selftests/bpf : clean up feature/ when make clean (bnc#1012628).
- perf report: Fix OOM error in TUI mode on s390 (bnc#1012628).
- perf test 6: Fix missing kvm module load for s390 (bnc#1012628).
- perf cs-etm: Properly set the value of 'old' and 'head' in
  snapshot mode (bnc#1012628).
- ipset: Fix memory accounting for hash types on resize
  (bnc#1012628).
- netfilter: ipset: fix a missing check of nla_parse
  (bnc#1012628).
- net: sfp: add mutex to prevent concurrent state checks
  (bnc#1012628).
- RAS/CEC: Fix pfn insertion (bnc#1012628).
- s390/qdio: handle PENDING state for QEBSM devices (bnc#1012628).
- net: axienet: Fix race condition causing TX hang (bnc#1012628).
- net: fec: Do not use netdev messages too early (bnc#1012628).
- crypto: inside-secure - do not rely on the hardware last bit
  for result descriptors (bnc#1012628).
- net: stmmac: modify default value of tx-frames (bnc#1012628).
- net: stmmac: dwmac4: fix flow control issue (bnc#1012628).
- media: aspeed: fix a kernel warning on clk control
  (bnc#1012628).
- media: aspeed: change irq to threaded irq (bnc#1012628).
- perf jvmti: Address gcc string overflow warning for strncpy()
  (bnc#1012628).
- media: imx7-mipi-csis: Propagate the error if clock enabling
  fails (bnc#1012628).
- arm64: mm: make CONFIG_ZONE_DMA32 configurable (bnc#1012628).
- cpupower : frequency-set -r option misses the last cpu in
  related cpu list (bnc#1012628).
- net: hns3: set ops to null when unregister ad_dev (bnc#1012628).
- net: hns3: add a check to pointer in error_detected and
  slot_reset (bnc#1012628).
- media: wl128x: Fix some error handling in
  fm_v4l2_init_video_device() (bnc#1012628).
- media: platform: ao-cec-g12a: disable regmap fast_io for cec
  bus regmap (bnc#1012628).
- locking/lockdep: Fix merging of hlocks with non-zero references
  (bnc#1012628).
- locking/lockdep: Fix OOO unlock when hlocks need merging
  (bnc#1012628).
- batman-adv: Fix duplicated OGMs on NETDEV_UP (bnc#1012628).
- tua6100: Avoid build warnings (bnc#1012628).
- crypto: talitos - Align SEC1 accesses to 32 bits boundaries
  (bnc#1012628).
- crypto: talitos - properly handle split ICV (bnc#1012628).
- net: dsa: sja1105: Fix broken fixed-link interfaces on user
  ports (bnc#1012628).
- net: phy: Check against net_device being NULL (bnc#1012628).
- media: staging: media: davinci_vpfe: - Fix for memory leak if
  decoder initialization fails (bnc#1012628).
- ASoC: Intel: sof-rt5682: fix undefined references with
  Baytrail-only support (bnc#1012628).
- media: saa7164: fix remove_proc_entry warning (bnc#1012628).
- media: mc-device.c: don't memset __user pointer contents
  (bnc#1012628).
- ice: Check all VFs for MDD activity, don't disable
  (bnc#1012628).
- perf annotate TUI browser: Do not use member from variable
  within its own initialization (bnc#1012628).
- media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in
  zr364xx_vidioc_querycap (bnc#1012628).
- fscrypt: clean up some BUG_ON()s in block encryption/decryption
  (bnc#1012628).
- media: v4l2-core: fix use-after-free error (bnc#1012628).
- media: vim2m: fix two double-free issues (bnc#1012628).
- xfrm: Fix xfrm sel prefix length validation (bnc#1012628).
- af_key: fix leaks in key_pol_get_resp and dump_sp (bnc#1012628).
- signal/pid_namespace: Fix reboot_pid_ns to use send_sig not
  force_sig (bnc#1012628).
- qed: Set the doorbell address correctly (bnc#1012628).
- net: hns3: fix for FEC configuration (bnc#1012628).
- net: hns3: initialize CPU reverse mapping (bnc#1012628).
- net: mvpp2: cls: Extract the RSS context when parsing the
  ethtool rule (bnc#1012628).
- ice: Fix couple of issues in ice_vsi_release (bnc#1012628).
- net: stmmac: Prevent missing interrupts when running NAPI
  (bnc#1012628).
- net: stmmac: dwmac4/5: Clear unused address entries
  (bnc#1012628).
- net: stmmac: dwmac1000: Clear unused address entries
  (bnc#1012628).
- crypto: caam - avoid S/G table fetching for AEAD zero-length
  output (bnc#1012628).
- media: venus: firmware: fix leaked of_node references
  (bnc#1012628).
- ice: Gracefully handle reset failure in ice_alloc_vfs()
  (bnc#1012628).
- media: media_device_enum_links32: clean a reserved field
  (bnc#1012628).
- media: vpss: fix a potential NULL pointer dereference
  (bnc#1012628).
- selftests/bpf: adjust verifier scale test (bnc#1012628).
- media: marvell-ccic: fix DMA s/g desc number calculation
  (bnc#1012628).
- media: ov7740: avoid invalid framesize setting (bnc#1012628).
- crypto: talitos - fix skcipher failure due to wrong output IV
  (bnc#1012628).
- media: spi: IR LED: add missing of table registration
  (bnc#1012628).
- media: dvb: usb: fix use after free in dvb_usb_device_exit
  (bnc#1012628).
- batman-adv: fix for leaked TVLV handler (bnc#1012628).
- regmap: debugfs: Fix memory leak in regmap_debugfs_init
  (bnc#1012628).
- ath10k: Fix encoding for protected management frames
  (bnc#1012628).
- ath: DFS JP domain W56 fixed pulse type 3 RADAR detection
  (bnc#1012628).
- wil6210: fix spurious interrupts in 3-msi (bnc#1012628).
- ath10k: add peer id check in ath10k_peer_find_by_id
  (bnc#1012628).
- ath6kl: add some bounds checking (bnc#1012628).
- wil6210: fix missed MISC mbox interrupt (bnc#1012628).
- ath10k: Fix the wrong value of enums for wmi tlv stats id
  (bnc#1012628).
- ath9k: Check for errors when reading SREV register
  (bnc#1012628).
- spi: rockchip: turn down tx dma bursts (bnc#1012628).
- ath10k: Do not send probe response template for mesh
  (bnc#1012628).
- wil6210: fix potential out-of-bounds read (bnc#1012628).
- ath9k: Don't trust TX status TID number when reporting airtime
  (bnc#1012628).
- ath10k: fix incorrect multicast/broadcast rate setting
  (bnc#1012628).
- ath10k: htt: don't use txdone_fifo with SDIO (bnc#1012628).
- ath10k: Check tx_stats before use it (bnc#1012628).
- commit f5296b5
- Add kernel module compression support (bsc#1135854)
  For enabling the kernel module compress, add the item COMPRESS_MODULES="xz"
  in config.sh, then mkspec will pass it to the spec file.
- commit cdf5806
- config: enable PPPoE for kvmsmall (bsc#1133945).
- commit 72c928d
- rpm/klp-symbols: update to work with kernel >= 5.3
  Since mainline commit b7dca6dd1e59 ("kbuild: create *.mod with full
  directory path and remove MODVERDIR") in v5.3-rc1, *.mod files are created
  in the build tree rather than in a single directory .tmp_versions
  ($MODVERDIR). They also do not provide path to the *.ko module file on
  their first line as the path is the same (except for the suffix).
  Update klp-symbols script to handle this new layout and format of *.mod
  files to fix build of 5.3-rc1 and newer kernel.
  Note: this is a quick band-aid to fix master branch build without risk of
  breaking any other branch. A more proper cleanup will follow.
- commit c32f8e7

==== kubic-control ====
Version update (0.6.2 -> 0.7.0)
Subpackages: kubicctl kubicd

- Update to version 0.7.0
  - Add multi master support
- Update to version 0.6.3
  - Unifiy function to reset the master
  - Cleanup behind kubeadm reset, else kubeadm init will fail
  - Add support for weave and make it the default pod network

==== libpciaccess ====
Version update (0.15 -> 0.16)

- Update to version 0.16
  * This release brings a compilation fix on 32-bit arm with newer
    glibc, and fixes the raw x86 backend's memory mapping to handle
    writes correctly.

==== libsolv ====

- Add -ffat-lto-objects to $optflags as the package provides
  static libraries
- Remove NO_BRP_STRIP_DEBUG=true as brp-15-strip-debug will
  not strip debug info for archives

==== metallb ====
Version update (0.7.3 -> 0.8.0)

- Update to version 0.8.0
  - add PodSecurityPolicy for speaker
  - speaker now tolerates running on Kubernetes control plane nodes
  - Removed metallb-pie.patch

==== ncurses ====
Subpackages: libncurses6 ncurses-utils terminfo terminfo-base

- Add ncurses patch 20190713
  + change reset's behavior for margins to simply clear soft-margins if
    possible, rather than clearing and then setting them according to the
    terminal's width (suggested by Thomas Wolff).
  + correct order of one wbkgd versus start_color call in test/padview.c
- Add ncurses patch 20190706
  + add domterm -TD
  + improve comments for recent changes, add alias xterm.js -TD
- Add ncurses patch 20190630
  + add --with-tic-path and --with-infocmp-path to work around problems
    building fallback source using pre-6.0 tic/infocmp.
  + add a check in tic for paired indn/rin
  + correct a buffer-limit in write_entry.c for systems that use caseless
    filenames.
  + add ms-terminal -TD
  + add vscode, vscode-direct -TD
  * Adopt patch ncurses-5.9-ibm327x.dif and ncurses-6.1.dif

==== openssh ====

- ssh-askpass: Try a fallback if the other option is not available

==== python-base ====
Subpackages: libpython2_7-1_0

- boo#1141853 (CVE-2018-20852) add
  CVE-2018-20852-cookie-domain-check.patch fixing
  http.cookiejar.DefaultPolicy.domain_return_ok which did not
  correctly validate the domain: it could be tricked into sending
  cookies to the wrong server.
- Skip test_urllib2_localnet that randomly fails in OBS

==== python-certifi ====
Version update (2019.3.9 -> 2019.6.16)

- version update to 2019.6.16
  * remove Certinomis Root CA

==== python-networkx ====
Version update (2.2 -> 2.3)

- Update to version 2.3
  Highlights:
  * Dropped support for Python 2. We are no longer supporting Python 2.7 and we will
    start changing code to take advantage of Python 3 features we couldn't before.
  * Added some Moral Graph analysis functions.
  * Enable matplotlib drawing using curved arrows via connectionstyle parameter.
  * Remove ticks and axes labels from matplotlib plots.
  * Two new generators of Harary Graphs.
  * Added Dual Barabasi-Albert model
  * Added VoteRank algorithm
  * Added Equitable coloring algorithms
  * Added planar layout algorithms
  * Les Miserables network example
  * Javascript example update

==== python-oauthlib ====
Version update (3.0.1 -> 3.0.2)

- specfile:
  * be more specific in %files section
- update to version 3.0.2:
  * #650: Fixed space encoding in base string URI used in the
    signature base string.
  * #652: Fixed OIDC /token response which wrongly returned
    "&state=None"
  * #654: Doc: The value state must not be stored by the AS, only
    returned in /authorize response.
  * #656: Fixed OIDC "nonce" checks: raise errors when it's mandatory

==== python-pyzmq ====
Version update (18.0.1 -> 18.0.2)

- update to version 18.0.2:
  * Compatibility with Python 3.8 prerelease by regenerating Cython
    sources with Cython 0.29.10.
  * Fix language_level=2 in Cython sources, for compatibility with
    Cython 0.30
  * Show missing path for ENOENT errors on ipc connections.

==== python-requests ====

- Hardcode pytest 3.x series as upstream even in git does not work
  with newer versions (they pinned the release)

==== python-six ====

- Simplify the pytest call

==== python-urllib3 ====

- Use old pytest 3.x as newer do not work with this release
  * this will be fixed with next release, just spread among
    numerous fixes in the git for quick backporting

==== ucode-intel ====
Version update (20190514 -> 20190618)

- Updated to 20190618 release (bsc#1111331 CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091)
  - --- updated platforms ------------------------------------
  SNB-E/EN/EP  C1/M0    6-2d-6/6d 0000061d->0000061f Xeon E3/E5, Core X
  SNB-E/EN/EP  C2/M1    6-2d-7/6d 00000714->00000718 Xeon E3/E5, Core X

==== vim ====
Version update (8.1.1694 -> 8.1.1741)
Subpackages: vim-data-common

- Update to version 8.1.1741, fixes the following problems
  * Cleared/added match highlighting not updated in other window.
  * Exepath() doesn't work for "bin/cat".
  * Deleted match highlighting not updated in other window.
  * Testing lambda with timer is slow.
  * :args command that outputs one line gives more prompt.
  * Viminfo support is spread out.
  * Can't build with tiny features.
  * The evalfunc.c file is too big.
  * The man ftplugin leaves an empty buffer behind.
  * Completion in cmdwin does not work for buffer-local commands.
  * Command line history not read from viminfo on startup.
  * Wrong place for mark viminfo support.
  * Heredoc with trim not properly handled in function.
  * Wrong place for command line history viminfo support.
  * Code for viminfo support is spread out.
  * The eval.txt help file is too big.
  * MS-Windows: E325 message may use incorrect date format.
  * Too much overhead checking for CTRL-C while processing text.
  * Heredoc assignment has no room for new features.
  * Error when scriptversion is 2 a making a dictionary access.
  * Build failure with normal features without netbeans interface.
  * Crash with very long %[] pattern.
  * Popup too wide when 'showbreak' is set.
  * Popup menu highlighting does not look good.
  * Last char in menu popup window highlighted.
  * Old style comments are wasting space
  * Emoji characters are seen as word characters for spelling.
  * Cannot preview a file in a popup window.
  * Highlighting cursor line only works with popup_menu().
  * Signs in number column cause text to be misaligned.
  * Listener callback called at the wrong moment
  * Coverity found dead code.
  * Coverity warns for possibly using a NULL pointer.
  * Coverity warns for using uninitialized variable.
  * Coverity warns for possibly using a NULL pointer.
  * Typo in #ifdef.
  * Using ~{} for a literal dict is not nice.
  * C-R C-W does not work after C-G when using 'incsearch'.
  * Breaking out of loop by checking window pointer is insufficient.
  * Compiler warning for uninitialized variable.
  * Appveyor build with MSVC fails puts progress bar in log.
  * Listener callback called for the wrong buffer.
  * Highlight_ga can be local instead of global.
  * Appveyor build with MSVC fails.
  * Cannot build with MSVC.
  * MSVC: link command line is too long.
  * Windows 10: crash when cursor is at bottom of terminal.

==== zstd ====
Version update (1.4.0 -> 1.4.1)

- Update to version 1.4.1:
  * bug: Fix data corruption in niche use cases by @terrelln (#1659)
  * bug: Fuzz legacy modes, fix uncovered bugs by @terrelln (#1593, #1594, #1595)
  * bug: Fix out of bounds read by @terrelln (#1590)
  * perf: Improve decode speed by ~7% @mgrice (#1668)
  * perf: Slightly improved compression ratio of level 3 and 4 (ZSTD_dfast) by @cyan4973 (#1681)
  * perf: Slightly faster compression speed when re-using a context by @cyan4973 (#1658)
  * perf: Improve compression ratio for small windowLog by @cyan4973 (#1624)
  * perf: Faster compression speed in high compression mode for repetitive data by @terrelln (#1635)
  * api: Add parameter to generate smaller dictionaries by @tyler-tran (#1656)
  * cli: Recognize symlinks when built in C99 mode by @felixhandte (#1640)
  * cli: Expose cpu load indicator for each file on -vv mode by @ephiepark (#1631)
  * cli: Restrict read permissions on destination files by @chungy (#1644)
  * cli: zstdgrep: handle -f flag by @felixhandte (#1618)
  * cli: zstdcat: follow symlinks by @vejnar (#1604)
  * doc: Remove extra size limit on compressed blocks by @felixhandte (#1689)
  * doc: Fix typo by @yk-tanigawa (#1633)
  * doc: Improve documentation on streaming buffer sizes by @cyan4973 (#1629)
  * build: CMake: support building with LZ4 @leeyoung624 (#1626)
  * build: CMake: install zstdless and zstdgrep by @leeyoung624 (#1647)
  * build: CMake: respect existing uninstall target by @j301scott (#1619)
  * build: Make: skip multithread tests when built without support by @michaelforney (#1620)
  * build: Make: Fix examples/ test target by @sjnam (#1603)
  * build: Meson: rename options out of deprecated namespace by @lzutao (#1665)
  * build: Meson: fix build by @lzutao (#1602)
  * build: Visual Studio: don't export symbols in static lib by @scharan (#1650)
  * build: Visual Studio: fix linking by @absotively (#1639)
  * build: Fix MinGW-W64 build by @myzhang1029 (#1600)
  * misc: Expand decodecorpus coverage by @ephiepark (#1664)