Packages changed:
  MozillaFirefox (60.0 -> 60.0.1)
  glibc
  glibc
  kernel-source (4.16.11 -> 4.16.12)
  libmetalink
  llvm6

=== Details ===

==== MozillaFirefox ====
Version update (60.0 -> 60.0.1)
Subpackages: MozillaFirefox-translations-common

- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume@Arm.com)
- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch
- update to Firefox 60.0.1
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)
- parellelise locales building

==== glibc ====
Subpackages: glibc-32bit glibc-locale-32bit

- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bsc#1094154)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- Use %license also for COPYING, COPYING.LIB
- Readd nis to netgroup and automount nss config (bsc#1088860)

==== glibc ====
Subpackages: glibc-devel glibc-extra glibc-info glibc-locale nscd

- mempcpy-avx512.patch: Don't write beyond destination in
  __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bsc#1094154)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- Use %license also for COPYING, COPYING.LIB
- Readd nis to netgroup and automount nss config (bsc#1088860)

==== kernel-source ====
Version update (4.16.11 -> 4.16.12)
Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms

- Update config files.
- commit 39c7522
- Linux 4.16.12 (bnc#1012628).
- rtc: goldfish: Add missing MODULE_LICENSE (bnc#1012628).
- rtc: rp5c01: fix possible race condition (bnc#1012628).
- rtc: tx4939: avoid unintended sign extension on a 24 bit shift
  (bnc#1012628).
- rtc: m41t80: fix race conditions (bnc#1012628).
- rtc: rk808: fix possible race condition (bnc#1012628).
- rtc: hctosys: Ensure system time doesn't overflow time_t
  (bnc#1012628).
- rtc: snvs: Fix usage of snvs_rtc_enable (bnc#1012628).
- serial: altera: ensure port->regshift is honored consistently
  (bnc#1012628).
- serial: 8250: Don't service RX FIFO if interrupts are disabled
  (bnc#1012628).
- serial: arc_uart: Fix out-of-bounds access through DT alias
  (bnc#1012628).
- serial: fsl_lpuart: Fix out-of-bounds access through DT alias
  (bnc#1012628).
- serial: imx: Fix out-of-bounds access through serial port index
  (bnc#1012628).
- serial: mxs-auart: Fix out-of-bounds access through serial
  port index (bnc#1012628).
- serial: samsung: Fix out-of-bounds access through serial port
  index (bnc#1012628).
- serial: sh-sci: Fix out-of-bounds access through DT alias
  (bnc#1012628).
- serial: xuartps: Fix out-of-bounds access through DT alias
  (bnc#1012628).
- serial: mvebu-uart: fix tx lost characters (bnc#1012628).
- media: cx25821: prevent out-of-bounds read on array card
  (bnc#1012628).
- media: vivid: fix incorrect capabilities for radio
  (bnc#1012628).
- media: vb2: Fix videobuf2 to map correct area (bnc#1012628).
- media: i2c: adv748x: fix HDMI field heights (bnc#1012628).
- media: v4l: vsp1: Fix display stalls when requesting too many
  inputs (bnc#1012628).
- media: em28xx: Add Hauppauge SoloHD/DualHD bulk models
  (bnc#1012628).
- media: lgdt3306a: Fix a double kfree on i2c device remove
  (bnc#1012628).
- media: s3c-camif: fix out-of-bounds array access (bnc#1012628).
- media: cx23885: Set subdev host data to clk_freq pointer
  (bnc#1012628).
- media: cx23885: Override 888 ImpactVCBe crystal frequency
  (bnc#1012628).
- media: ov5645: add missing of_node_put() in error path
  (bnc#1012628).
- clk: meson: axg: add the fractional part of the fixed_pll
  (bnc#1012628).
- clk: meson: axg: fix the od shift of the sys_pll (bnc#1012628).
- clk: samsung: exynos3250: Fix PLL rates (bnc#1012628).
- clk: samsung: exynos5250: Fix PLL rates (bnc#1012628).
- clk: samsung: exynos5433: Fix PLL rates (bnc#1012628).
- clk: samsung: exynos5260: Fix PLL rates (bnc#1012628).
- clk: samsung: exynos7: Fix PLL rates (bnc#1012628).
- clk: samsung: s3c2410: Fix PLL rates (bnc#1012628).
- clk: rockchip: Prevent calculating mmc phase if clock rate is
  zero (bnc#1012628).
- clk: tegra: Fix pll_u rate configuration (bnc#1012628).
- clk: hisilicon: mark wdt_mux_p[] as const (bnc#1012628).
- clk: Don't show the incorrect clock phase (bnc#1012628).
- clk: rockchip: Fix wrong parent for SDMMC phase clock for rk3228
  (bnc#1012628).
- ASoC: samsung: i2s: Ensure the RCLK rate is properly determined
  (bnc#1012628).
- ASoC: topology: create TLV data for dapm widgets (bnc#1012628).
- ASoC: samsung: odroid: Fix 32000 sample rate handling
  (bnc#1012628).
- ASoC: rockchip: rk3288-hdmi-analog: Select needed codecs
  (bnc#1012628).
- scsi: lpfc: Fix frequency of Release WQE CQEs (bnc#1012628).
- scsi: lpfc: Fix IO failure during hba reset testing with nvme io
  (bnc#1012628).
- scsi: lpfc: Fix soft lockup in lpfc worker thread during LIP
  testing (bnc#1012628).
- scsi: lpfc: Fix nonrecovery of NVME controller after cable swap
  (bnc#1012628).
- scsi: lpfc: Fix issue_lip if link is disabled (bnc#1012628).
- scsi: mvsas: fix wrong endianness of sgpio api (bnc#1012628).
- scsi: core: Make SCSI Status CONDITION MET equivalent to GOOD
  (bnc#1012628).
- scsi: lpfc: Fix NVME Initiator FirstBurst (bnc#1012628).
- scsi: devinfo: add HP DISK-SUBSYSTEM device, for HP XP arrays
  (bnc#1012628).
- scsi: aacraid: Insure command thread is not recursively stopped
  (bnc#1012628).
- crypto: inside-secure - fix the invalidation step during
  cra_exit (bnc#1012628).
- crypto: sunxi-ss - Add MODULE_ALIAS to sun4i-ss (bnc#1012628).
- crypto: inside-secure - do not overwrite the threshold value
  (bnc#1012628).
- crypto: inside-secure - fix the extra cache computation
  (bnc#1012628).
- crypto: inside-secure - fix the cache_len computation
  (bnc#1012628).
- crypto: inside-secure - do not process request if no command
  was issued (bnc#1012628).
- crypto: ccp - don't disable interrupts while setting up debugfs
  (bnc#1012628).
- crypto: atmel-aes - fix the keys zeroing on errors
  (bnc#1012628).
- crypto: inside-secure - wait for the request to complete if
  in the backlog (bnc#1012628).
- crypto: inside-secure - move the digest to the request context
  (bnc#1012628).
- staging: lustre: lmv: correctly iput lmo_root (bnc#1012628).
- staging: ks7010: Use constants from ieee80211_eid instead of
  literal ints (bnc#1012628).
- staging: rtl8192u: return -ENOMEM on failed allocation of
  priv->oldaddr (bnc#1012628).
- staging: fsl-dpaa2/eth: Fix incorrect casts (bnc#1012628).
- staging: lustre: fix bug in osc_enter_cache_try (bnc#1012628).
- staging: fsl-dpaa2/eth: Fix incorrect kfree (bnc#1012628).
- staging: bcm2835-audio: Release resources on module_exit()
  (bnc#1012628).
- x86/kexec: Avoid double free_page() upon do_kexec_load()
  failure (bnc#1012628).
- hfsplus: stop workqueue when fill_super() failed (bnc#1012628).
- cfg80211: limit wiphy names to 128 bytes (bnc#1012628).
- loop: fix LOOP_GET_STATUS lock imbalance (bnc#1012628).
- loop: don't call into filesystem while holding lo_ctl_mutex
  (bnc#1012628).
- xhci: Show what USB release number the xHC supports from
  protocol capablity (bnc#1012628).
- Bluetooth: btusb: Add support for Intel Bluetooth device 22560
  [8087:0026] (bnc#1012628).
- Bluetooth: btusb: Add device ID for RTL8822BE (bnc#1012628).
- media: em28xx: USB bulk packet size fix (bnc#1012628).
- media: lgdt3306a: Fix module count mismatch on usb unplug
  (bnc#1012628).
- usb: gadget: composite: fix incorrect handling of OS desc
  requests (bnc#1012628).
- usb: gadget: udc: change comparison to bitshift when dealing
  with a mask (bnc#1012628).
- usbip: Correct maximum value of CONFIG_USBIP_VHCI_HC_PORTS
  (bnc#1012628).
- usb: gadget: ffs: Execute copy_to_user() with USER_DS set
  (bnc#1012628).
- usb: gadget: ffs: Let setup() return USB_GADGET_DELAYED_STATUS
  (bnc#1012628).
- usb: dwc2: host: Fix transaction errors in host mode
  (bnc#1012628).
- usb: dwc2: hcd: Fix host channel halt flow (bnc#1012628).
- usb: dwc2: Fix interval type issue (bnc#1012628).
- xhci: zero usb device slot_id member when disabling and freeing
  a xhci slot (bnc#1012628).
- usb: dwc3: Makefile: fix link error on randconfig (bnc#1012628).
- usb: dwc3: Update DWC_usb31 GTXFIFOSIZ reg fields (bnc#1012628).
- usb: dwc3: Add SoftReset PHY synchonization delay (bnc#1012628).
- ALSA: usb-audio: Add native DSD support for Luxman DA-06
  (bnc#1012628).
- Bluetooth: btusb: Add USB ID 7392:a611 for Edimax EW-7611ULB
  (bnc#1012628).
- scsi: zfcp: fix infinite iteration on ERP ready list
  (bnc#1012628).
- scsi: sg: allocate with __GFP_ZERO in sg_build_indirect()
  (bnc#1012628).
- s390: use expoline thunks in the BPF JIT (bnc#1012628).
- s390: extend expoline to BC instructions (bnc#1012628).
- s390: move spectre sysfs attribute code (bnc#1012628).
- s390/kernel: use expoline for indirect branches (bnc#1012628).
- s390/ftrace: use expoline for indirect branches (bnc#1012628).
- s390/lib: use expoline for indirect branches (bnc#1012628).
- s390/crc32-vx: use expoline for indirect branches (bnc#1012628).
- s390: move expoline assembler macros to a header (bnc#1012628).
- s390: correct module section names for expoline code revert
  (bnc#1012628).
- s390: correct nospec auto detection init order (bnc#1012628).
- s390: add assembler macros for CPU alternatives (bnc#1012628).
- s390: add sysfs attributes for spectre (bnc#1012628).
- s390: report spectre mitigation via syslog (bnc#1012628).
- s390: add automatic detection of the spectre defense
  (bnc#1012628).
- s390: move nobp parameter functions to nospec-branch.c
  (bnc#1012628).
- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (bnc#1012628).
- powerpc: Move default security feature flags (bnc#1012628).
- powerpc/pseries: Fix clearing of security feature flags
  (bnc#1012628).
- powerpc/64s: Wire up cpu_show_spectre_v2() (bnc#1012628).
- powerpc/64s: Wire up cpu_show_spectre_v1() (bnc#1012628).
- powerpc/pseries: Use the security flags in
  pseries_setup_rfi_flush() (bnc#1012628).
- powerpc/powernv: Use the security flags in pnv_setup_rfi_flush()
  (bnc#1012628).
- powerpc/64s: Enhance the information in cpu_show_meltdown()
  (bnc#1012628).
- powerpc/64s: Move cpu_show_meltdown() (bnc#1012628).
- powerpc/powernv: Set or clear security feature flags
  (bnc#1012628).
- powerpc/pseries: Set or clear security feature flags
  (bnc#1012628).
- powerpc/pseries: Add new H_GET_CPU_CHARACTERISTICS flags
  (bnc#1012628).
- powerpc: Add security feature flags for Spectre/Meltdown
  (bnc#1012628).
- powerpc/rfi-flush: Always enable fallback flush on pseries
  (bnc#1012628).
- ext2: fix a block leak (bnc#1012628).
- sparc: vio: use put_device() instead of kfree() (bnc#1012628).
- qed: Fix LL2 race during connection terminate (bnc#1012628).
- qed: Fix possibility of list corruption during rmmod flows
  (bnc#1012628).
- qed: LL2 flush isles when connection is closed (bnc#1012628).
- net: ip6_gre: fix tunnel metadata device sharing (bnc#1012628).
- net: ip6_gre: Fix ip6erspan hlen calculation (bnc#1012628).
- net: ip6_gre: Split up ip6gre_changelink() (bnc#1012628).
- net: ip6_gre: Split up ip6gre_newlink() (bnc#1012628).
- net: ip6_gre: Split up ip6gre_tnl_change() (bnc#1012628).
- net: ip6_gre: Split up ip6gre_tnl_link_config() (bnc#1012628).
- net: ip6_gre: Fix headroom request in ip6erspan_tunnel_xmit()
  (bnc#1012628).
- net: ip6_gre: Request headroom in __gre6_xmit() (bnc#1012628).
- vmxnet3: use DMA memory barriers where required (bnc#1012628).
- vmxnet3: set the DMA mask before the first DMA map operation
  (bnc#1012628).
- cxgb4: fix offset in collecting TX rate limit info
  (bnc#1012628).
- 3c59x: convert to generic DMA API (bnc#1012628).
- net: dsa: bcm_sf2: Fix IPv6 rule half deletion (bnc#1012628).
- net: dsa: bcm_sf2: Fix IPv6 rules and chain ID (bnc#1012628).
- net: dsa: Do not register devlink for unused ports
  (bnc#1012628).
- net: dsa: bcm_sf2: Fix RX_CLS_LOC_ANY overwrite for last rule
  (bnc#1012628).
- cxgb4: Correct ntuple mask validation for hash filters
  (bnc#1012628).
- tuntap: fix use after free during release (bnc#1012628).
- tun: fix use after free for ptr_ring (bnc#1012628).
- tcp: purge write queue in tcp_connect_init() (bnc#1012628).
- sock_diag: fix use-after-free read in __sk_free (bnc#1012628).
- packet: in packet_snd start writing at link layer allocation
  (bnc#1012628).
- net: test tailroom before appending to linear skb (bnc#1012628).
- net/smc: check for missing nlattrs in SMC_PNETID messages
  (bnc#1012628).
- net: sched: red: avoid hashing NULL child (bnc#1012628).
- net/sched: fix refcnt leak in the error path of tcf_vlan_init()
  (bnc#1012628).
- net/mlx4_core: Fix error handling in mlx4_init_port_info
  (bnc#1012628).
- net: Fix a bug in removing queues from XPS map (bnc#1012628).
- net/mlx5: Fix build break when CONFIG_SMP=n (bnc#1012628).
- commit 9e125b1
- Bluetooth: Apply QCA Rome patches for some ATH3012 models
  (bsc#1082504).
- commit 3351aa8
- mkspec: only build docs for default variant kernel.
- commit 045f5ac

==== libmetalink ====

- Use %license instead of %doc [bsc#1082318]

==== llvm6 ====
Subpackages: libLLVM6 libclang6

- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release