Changed packages: ==== PackageKit ==== Version update (1.0.6 -> 1.0.7) Subpackages: PackageKit-backend-zypp PackageKit-browser-plugin PackageKit-gstreamer-plugin PackageKit-gtk3-module libpackagekit-glib2-18 typelib-1_0-PackageKitGlib-1_0 - Update to version 1.0.7: + New Feature: Define command_not_found_handler for zsh. + Bugfixes: - Correct punctuation while applying offline updates. - Don't run if bash command completion is being run. - Fix Details() from spawned backends. - Port GTK+ module to org.freedesktop.PackageKit.Modify2. - Return the correct error for syntax errors in pkcon. - Return the correct error if nothing was done for repo-enable. + Backend enhancements/fixes: alpm, entropy, hif, portage, urpm and yum. ==== apache2 ==== Version update (2.4.12 -> 2.4.16) Subpackages: apache2-devel apache2-doc apache2-example-pages apache2-prefork apache2-utils - update to 2.4.16 * changes http://www.apache.org/dist/httpd/CHANGES_2.4.16 * remove the following patches (fixed in 2.4.16) * httpd-2.4.x-mod_lua_websocket_DoS.patch * httpd-2.4.12-CVE-2015-0253.patch * update httpd-2.4.12-lua-5.2.patch ==== clutter-gst-devel ==== Version update (3.0.6 -> 3.0.8) Subpackages: gstreamer-plugin-gstclutter-3_0 libclutter-gst-3_0-0 typelib-1_0-ClutterGst-3_0 - Update to version 3.0.8: + Fix crash when video frame has not been uploaded yet, gets disposed and Clutter try to paint with it. ==== icedtea-web-javadoc ==== Version update (1.5.2 -> 1.6) - Added patch: * icedtea-web-1.6-tail.patch - Fix generation of man-pages with some versions of "tail" - Update to 1.6 * Massively improved offline abilities. Added Xoffline switch to force work without inet connection. * Improved to be able to run with any JDK * JDK 6 and older no longer supported * JDK 8 support added (URLPermission granted if applicable) * JDK 9 supported * Added support for Entry-Point manifest attribute * Added KEY_ENABLE_MANIFEST_ATTRIBUTES_CHECK deployment property to control scan of Manifest file * starting arguments now accept also -- abbreviations * Added new documentation * Added support for menu shortcuts - both javaws applications/applets and html applets are supported * added support for -html switch for javaws. Now you can run most of the applets without browser at all * Control Panel - PR1856: ControlPanel UI improvement for lower resolutions (800*600) * NetX - PR1858: Java Console accepts multi-byte encodings - PR1859: Java Console UI improvement for lower resolutions (800*600) - RH1091563: [abrt] icedtea-web-1.5-2.fc20: Uncaught exception java.lang.ClassCastException in method sun.applet.PluginAppletViewer$8.run() - Dropped support for long unmaintained -basedir argument - Returned support for -jnlp argument - RH1095311, PR574 - References class sun.misc.Ref removed in OpenJDK 9 - fixed, and so buildable on JDK9 * Plugin - PR1743 - Intermittant deadlock in PluginRequestProcessor - PR1298 - LiveConnect - problem setting array elements (applet variables) from JS - RH1121549: coverity defects - Resolves method overloading correctly with superclass heirarchy distance * PolicyEditor - codebases can be renamed in-place, copied, and pasted - codebase URLs can be copied to system clipboard - displays a progress dialog while opening or saving files - codebases without permissions assigned save to file anyway (and re-appear on next open) - PR1776: NullPointer on save-and-exit - PR1850: duplicate codebases when launching from security dialogs - Fixed bug where clicking "Cancel" on the "Save before Exiting" dialog could result in the editor exiting without saving changes - Keyboard accelerators and mnemonics greatly improved - "File - New" allows editing a new policy without first selecting the file to save to * Common - PR1769: support signed applets which specify Sandbox permissions in their manifests * Temporary Permissions in security dialog now multi-selectable and based on PolicyEditor permissions ==== java-1_8_0-openjdk ==== Version update (1.8.0.45 -> 1.8.0.51) Subpackages: java-1_8_0-openjdk-headless - Upgrade to upstream tag jdk8u51-b16 * Security fix release of July 15, 2015 (bsc#938248, bsc#937828) - Security issues fixed: * CVE-2015-2590: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). * CVE-2015-2597: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Install). * CVE-2015-2601: Vulnerability in the Java SE, JRockit, Java SE Embedded component of Oracle Java SE (subcomponent: JCE). * CVE-2015-2613: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JCE). * CVE-2015-2619: Vulnerability in the Java SE, JavaFX, Java SE Embedded component of Oracle Java SE (subcomponent: 2D). * CVE-2015-2621: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JMX). * CVE-2015-2625: Vulnerability in the Java SE, JRockit, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). * CVE-2015-2627: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Install). * CVE-2015-2628: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: CORBA). * CVE-2015-2632; Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). * CVE-2015-2637: Vulnerability in the Java SE, JavaFX, Java SE Embedded component of Oracle Java SE (subcomponent: 2D). * CVE-2015-2638: Vulnerability in the Java SE, JavaFX, Java SE Embedded component of Oracle Java SE (subcomponent: 2D). * CVE-2015-2659: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). * CVE-2015-2664: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). * CVE-2015-2808: Vulnerability in the Java SE, JRockit, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). * CVE-2015-4000: Vulnerability in the Java SE, JRockit, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). * CVE-2015-4729: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). * CVE-2015-4731: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JMX). * CVE-2015-4732: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). * CVE-2015-4733: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). * CVE-2015-4736: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). * CVE-2015-4748: Vulnerability in the Java SE, JRockit, Java SE Embedded component of Oracle Java SE (subcomponent: Security). * CVE-2015-4749: Vulnerability in the Java SE, JRockit, Java SE Embedded component of Oracle Java SE (subcomponent: JNDI). * CVE-2015-4760: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). ==== java-1_8_0-openjdk-plugin ==== Version update (1.5.2 -> 1.6) - Added patch: * icedtea-web-1.6-tail.patch - Fix generation of man-pages with some versions of "tail" - Update to 1.6 * Massively improved offline abilities. Added Xoffline switch to force work without inet connection. * Improved to be able to run with any JDK * JDK 6 and older no longer supported * JDK 8 support added (URLPermission granted if applicable) * JDK 9 supported * Added support for Entry-Point manifest attribute * Added KEY_ENABLE_MANIFEST_ATTRIBUTES_CHECK deployment property to control scan of Manifest file * starting arguments now accept also -- abbreviations * Added new documentation * Added support for menu shortcuts - both javaws applications/applets and html applets are supported * added support for -html switch for javaws. Now you can run most of the applets without browser at all * Control Panel - PR1856: ControlPanel UI improvement for lower resolutions (800*600) * NetX - PR1858: Java Console accepts multi-byte encodings - PR1859: Java Console UI improvement for lower resolutions (800*600) - RH1091563: [abrt] icedtea-web-1.5-2.fc20: Uncaught exception java.lang.ClassCastException in method sun.applet.PluginAppletViewer$8.run() - Dropped support for long unmaintained -basedir argument - Returned support for -jnlp argument - RH1095311, PR574 - References class sun.misc.Ref removed in OpenJDK 9 - fixed, and so buildable on JDK9 * Plugin - PR1743 - Intermittant deadlock in PluginRequestProcessor - PR1298 - LiveConnect - problem setting array elements (applet variables) from JS - RH1121549: coverity defects - Resolves method overloading correctly with superclass heirarchy distance * PolicyEditor - codebases can be renamed in-place, copied, and pasted - codebase URLs can be copied to system clipboard - displays a progress dialog while opening or saving files - codebases without permissions assigned save to file anyway (and re-appear on next open) - PR1776: NullPointer on save-and-exit - PR1850: duplicate codebases when launching from security dialogs - Fixed bug where clicking "Cancel" on the "Save before Exiting" dialog could result in the editor exiting without saving changes - Keyboard accelerators and mnemonics greatly improved - "File - New" allows editing a new policy without first selecting the file to save to * Common - PR1769: support signed applets which specify Sandbox permissions in their manifests * Temporary Permissions in security dialog now multi-selectable and based on PolicyEditor permissions ==== libepoxy-devel ==== Version update (1.2 -> 1.3.1) Subpackages: libepoxy0 - Update to 1.3.1 * brown-paper-bag fix to unexport another private symbol that we'd leaked, noticed when I went diffing the exported symbols between v1.2 and v1.3 for the debian build. - Changes since 1.3.0: * MSVC 2013 support. * OSX drops GLX support. * Updates to the registry * Fixes for a nonconformant GL implementation * Library size reductions * Reproducible builds - Drop u_sort-the-providers-by-their-enum-not-by-their-functi.patch, merged upstream ==== libssh-devel ==== Subpackages: libssh4 - Enable testsuite run to check the state of libssh itself - Use SUSE macros to define environment clearly - Enable gssapi by adding krb5 dependency ==== lua ==== Version update (5.2.4 -> 5.3.1) Subpackages: lua-devel - macros.lua installs to lua-devel - build with LUA_COMPAT_MODULE to compatible w/ old module system - update version 5.3.1 * integers (64-bit by default) * official support for 32-bit numbers * bitwise operators * basic utf-8 support * functions for packing and unpacking values * see http://www.lua.org/manual/5.3/readme.html#changes ==== device-mapper ==== Subpackages: device-mapper-32bit lvm2 - dmeventd: fix dso_name compare error. dso_name is thought as not empty and doesn't create monitor thread. (bnc#935623) add: dmeventd-fix-dso-name-wrong-compare.patch - 13-dm-disk.rules: Import ID_FS_XXX variables from udev database(bnc#909358) If the disk is unavailable we need to import the existing ID_FS_XXX variables from the database, otherwise the filesystem UUID won't be set and the by-uuid symlink will disappear, leading to intermittent boot failures + Import-ID_FS_XXX-variables-bnc909358.patch - 10-dm.rules: Reset state variables for spurious events (bsc#932300) + 10-dm.rules-Reset-state-variable-for-spurious-events.patch ==== perl-Scope-Guard ==== Version update (0.20 -> 0.21) - updated to 0.21 see /usr/share/doc/packages/perl-Scope-Guard/Changes 0.21 Sun 19 Jul 22:14:54 2015 - remove useless use of UNIVERSAL::isa (#RT105948) (Karen Etheridge) ==== perl-Variable-Magic ==== Version update (0.57 -> 0.58) - updated to 0.58 see /usr/share/doc/packages/perl-Variable-Magic/Changes 0.58 2015-07-21 16:00 UTC + Add : If a non-len magic callback returns a reference, it will now only be freed at the end of the statement that caused the magic to trigger. This allows the user to attach free magic (or a plain destructor) to a token returned from the callbacks in order to defer an action after the magic is processed by perl. + Fix : Test failures of threads tests on systems with harsh resource constraints causing the threads to exit() during run. ==== python-sip ==== Version update (4.16.8 -> 4.16.9) Subpackages: python-sip-devel - Update to 4.16.9: * This is mainly a bug-fix release. ==== python3-sip ==== Version update (4.16.8 -> 4.16.9) - Update to 4.16.9: * This is mainly a bug-fix release. ==== yast2-ntp-client ==== Version update (3.1.15 -> 3.1.16) - Calls to sntp adjusted to the syntax of ntp 4.2.8 (bnc#937837, bnc#916617) - 3.1.16 ==== yast2-packager ==== Version update (3.1.75 -> 3.1.76) - fix crash when adding addon on DVD (bnc#938786) - 3.1.76 Removed packages: bundle-lang-common-nb Added packages: apache2-mod_dnssd liblua5_3