Packages changed:
  kanagram
  kernel-source (4.20.4 -> 4.20.6)
  libyaml (0.1.7 -> 0.2.1)
  perl-Encode (2.99 -> 3.00)
  python-PyYAML
  python-Twisted
  python-cryptography (2.4.2 -> 2.5)
  python-gevent (1.3.5 -> 1.4.0)
  python-msgpack
  python-pyasn1 (0.4.4 -> 0.4.5)
  python-pyasn1-modules (0.2.2 -> 0.2.4)
  python-tornado
  python3
  python3-base
  remmina (1.3.1 -> 1.3.2)
  rtl8812au (5.2.20.2+git20190117.edcd447_k4.20.4_1 -> 5.2.20.2+git20190117.edcd447_k4.20.6_1)
  virt-manager
  vm-install (0.10.05 -> 0.10.06)

=== Details ===

==== kanagram ====
Subpackages: kanagram-lang

- Update/cleanup build requirements
- Add Qt5TextToSpeech BuildRequires to enable text-to-speech

==== kernel-source ====
Version update (4.20.4 -> 4.20.6)
Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms kernel-vanilla-base

- Linux 4.20.6 (bnc#1012628).
- amd-xgbe: Fix mdio access for non-zero ports and clause 45 PHYs
  (bnc#1012628).
- net: bridge: Fix ethernet header pointer before check skb
  forwardable (bnc#1012628).
- net: Fix usage of pskb_trim_rcsum (bnc#1012628).
- net: phy: marvell: Errata for mv88e6390 internal PHYs
  (bnc#1012628).
- net: phy: mdio_bus: add missing device_del() in
  mdiobus_register() error handling (bnc#1012628).
- net: phy: phy driver features are mandatory (bnc#1012628).
- net/sched: act_tunnel_key: fix memory leak in case of action
  replace (bnc#1012628).
- net_sched: refetch skb protocol for each filter (bnc#1012628).
- openvswitch: Avoid OOB read when parsing flow nlattrs
  (bnc#1012628).
- vhost: log dirty page correctly (bnc#1012628).
- mlxsw: pci: Increase PCI SW reset timeout (bnc#1012628).
- net: ipv4: Fix memory leak in network namespace dismantle
  (bnc#1012628).
- mlxsw: spectrum_fid: Update dummy FID index (bnc#1012628).
- mlxsw: pci: Ring CQ's doorbell before RDQ's (bnc#1012628).
- net/sched: cls_flower: allocate mask dynamically in fl_change()
  (bnc#1012628).
- udp: with udp_segment release on error path (bnc#1012628).
- ip6_gre: fix tunnel list corruption for x-netns (bnc#1012628).
- erspan: build the header with the right proto according to
  erspan_ver (bnc#1012628).
- net: phy: marvell: Fix deadlock from wrong locking
  (bnc#1012628).
- ip6_gre: update version related info when changing link
  (bnc#1012628).
- tcp: allow MSG_ZEROCOPY transmission also in CLOSE_WAIT state
  (bnc#1012628).
- ARM: fix the cockup in the previous patch (bnc#1012628).
- SUNRPC: Address Kerberos performance/behavior regression
  (bnc#1012628).
- mei: me: mark LBG devices as having dma support (bnc#1012628).
- mei: me: add denverton innovation engine device IDs
  (bnc#1012628).
- USB: leds: fix regression in usbport led trigger (bnc#1012628).
- USB: EHCI: ehci-mv: add MODULE_DEVICE_TABLE (bnc#1012628).
- USB: serial: ftdi_sio: fix GPIO not working in autosuspend
  (bnc#1012628).
- USB: serial: simple: add Motorola Tetra TPG2200 device id
  (bnc#1012628).
- USB: serial: pl2303: add new PID to support PL2303TB
  (bnc#1012628).
- ceph: clear inode pointer when snap realm gets dropped by its
  inode (bnc#1012628).
- ASoC: atom: fix a missing check of snd_pcm_lib_malloc_pages
  (bnc#1012628).
- ASoC: rt5514-spi: Fix potential NULL pointer dereference
  (bnc#1012628).
- ASoC: tlv320aic32x4: Kernel OOPS while entering DAPM standby
  mode (bnc#1012628).
- clk: zynqmp: Fix memory allocation in zynqmp_clk_setup
  (bnc#1012628).
- clk: socfpga: stratix10: fix rate calculation for pll clocks
  (bnc#1012628).
- clk: socfpga: stratix10: fix naming convention for the
  fixed-clocks (bnc#1012628).
- inotify: Fix fd refcount leak in inotify_add_watch()
  (bnc#1012628).
- ALSA: hda/realtek - Fix typo for ALC225 model (bnc#1012628).
- ALSA: hda - Add mute LED support for HP ProBook 470 G5
  (bnc#1012628).
- ARCv2: lib: memeset: fix doing prefetchw outside of buffer
  (bnc#1012628).
- ARC: adjust memblock_reserve of kernel memory (bnc#1012628).
- ARC: perf: map generic branches to correct hardware condition
  (bnc#1012628).
- s390/vdso: correct vdso mapping for compat tasks (bnc#1012628).
- s390/mm: always force a load of the primary ASCE on context
  switch (bnc#1012628).
- s390/early: improve machine detection (bnc#1012628).
- s390/smp: fix CPU hotplug deadlock with CPU rescan
  (bnc#1012628).
- s390/smp: Fix calling smp_call_ipl_cpu() from ipl CPU
  (bnc#1012628).
- misc: ibmvsm: Fix potential NULL pointer dereference
  (bnc#1012628).
- char/mwave: fix potential Spectre v1 vulnerability
  (bnc#1012628).
- mmc: sdhci-iproc: handle mmc_of_parse() errors during probe
  (bnc#1012628).
- mmc: dw_mmc-bluefield: : Fix the license information
  (bnc#1012628).
- mmc: meson-gx: Free irq in release() callback (bnc#1012628).
- staging: rtl8188eu: Add device code for D-Link DWA-121 rev B1
  (bnc#1012628).
- tty: Handle problem if line discipline does not have receive_buf
  (bnc#1012628).
- uart: Fix crash in uart_write and uart_put_char (bnc#1012628).
- tty/n_hdlc: fix __might_sleep warning (bnc#1012628).
- hv_balloon: avoid touching uninitialized struct page during
  tail onlining (bnc#1012628).
- Drivers: hv: vmbus: Check for ring when getting debug info
  (bnc#1012628).
- vgacon: unconfuse vc_origin when using soft scrollback
  (bnc#1012628).
- CIFS: Fix possible hang during async MTU reads and writes
  (bnc#1012628).
- CIFS: Fix credits calculations for reads with errors
  (bnc#1012628).
- CIFS: Fix credit calculation for encrypted reads with errors
  (bnc#1012628).
- CIFS: Do not reconnect TCP session in add_credits()
  (bnc#1012628).
- smb3: add credits we receive from oplock/break PDUs
  (bnc#1012628).
- Input: xpad - add support for SteelSeries Stratus Duo
  (bnc#1012628).
- Input: input_event - provide override for sparc64 (bnc#1012628).
- Input: uinput - fix undefined behavior in
  uinput_validate_absinfo() (bnc#1012628).
- acpi/nfit: Block function zero DSMs (bnc#1012628).
- acpi/nfit: Fix command-supported detection (bnc#1012628).
- scsi: ufs: Use explicit access size in ufshcd_dump_regs
  (bnc#1012628).
- dm thin: fix passdown_double_checking_shared_status()
  (bnc#1012628).
- dm crypt: fix parsing of extended IV arguments (bnc#1012628).
- drm/amdgpu: Add APTX quirk for Lenovo laptop (bnc#1012628).
- EDAC, altera: Fix S10 persistent register offset (bnc#1012628).
- KVM: x86: Fix single-step debugging (bnc#1012628).
- KVM: x86: Fix PV IPIs for 32-bit KVM host (bnc#1012628).
- KVM: x86: WARN_ONCE if sending a PV IPI returns a fatal error
  (bnc#1012628).
- kvm: x86/vmx: Use kzalloc for cached_vmcs12 (bnc#1012628).
- x86/pkeys: Properly copy pkey state at fork() (bnc#1012628).
- x86/selftests/pkeys: Fork() to check for state being preserved
  (bnc#1012628).
- x86/kaslr: Fix incorrect i8254 outb() parameters (bnc#1012628).
- x86/entry/64/compat: Fix stack switching for XEN PV
  (bnc#1012628).
- posix-cpu-timers: Unbreak timer rearming (bnc#1012628).
- net: sun: cassini: Cleanup license conflict (bnc#1012628).
- irqchip/gic-v3-its: Align PCI Multi-MSI allocation on their size
  (bnc#1012628).
- can: dev: __can_get_echo_skb(): fix bogous check for
  non-existing skb by removing it (bnc#1012628).
- can: bcm: check timer values before ktime conversion
  (bnc#1012628).
- can: flexcan: fix NULL pointer exception during bringup
  (bnc#1012628).
- vt: make vt_console_print() compatible with the unicode screen
  buffer (bnc#1012628).
- vt: always call notifier with the console lock held
  (bnc#1012628).
- vt: invoke notifier on screen size change (bnc#1012628).
- drm/meson: Fix atomic mode switching regression (bnc#1012628).
- bpf: move {prev_,}insn_idx into verifier env (bnc#1012628).
- bpf: move tmp variable into ax register in interpreter
  (bnc#1012628).
- nvmet-rdma: Add unlikely for response allocated check
  (bnc#1012628).
- nvmet-rdma: fix null dereference under heavy load (bnc#1012628).
- bpf: enable access to ax register also from verifier rewrite
  (bnc#1012628).
- bpf: restrict map value pointer arithmetic for unprivileged
  (bnc#1012628).
- bpf: restrict stack pointer arithmetic for unprivileged
  (bnc#1012628).
- bpf: restrict unknown scalars of mixed signed bounds for
  unprivileged (bnc#1012628).
- bpf: fix check_map_access smin_value test when pointer contains
  offset (bnc#1012628).
- bpf: prevent out of bounds speculation on pointer arithmetic
  (bnc#1012628).
- bpf: fix sanitation of alu op with pointer / scalar type from
  different paths (bnc#1012628).
- bpf: fix inner map masking to prevent oob under speculation
  (bnc#1012628).
- Drivers: hv: vmbus: Remove the useless API
  vmbus_get_outgoing_channel() (bnc#1012628).
- vmbus: fix subchannel removal (bnc#1012628).
- Revert "mm, memory_hotplug: initialize struct pages for the
  full memory section" (bnc#1012628).
- usb: dwc3: gadget: Clear req->needs_extra_trb flag on cleanup
  (bnc#1012628).
- mt76x0: do not overwrite other MT_BBP(AGC, 8) fields
  (bnc#1012628).
- mt76x0: use band parameter for LC calibration (bnc#1012628).
- mt76x02: run calibration after scanning (bnc#1012628).
- mt76x02: assure we update gain after scan (bnc#1012628).
- mt76x0: do not perform MCU calibration for MT7630 (bnc#1012628).
- mt76x0: antenna select corrections (bnc#1012628).
- mt76x0: phy: unify calibration between mt76x0u and mt76x0e
  (bnc#1012628).
- ide: fix a typo in the settings proc file name (bnc#1012628).
- Input: input_event - fix the CONFIG_SPARC64 mixup (bnc#1012628).
- Refresh
  patches.suse/0005-x86-enter-Use-IBRS-on-syscall-and-interrupts.patch.
- commit 463cfd2
- config files: set CONFIG_SCSI_MQ_DEFAULT=y (bsc#1122182)
  Kernel 4.20 and newer use blk_mq for device mapper exclusively.
  Thus stacking device mapper on SCSI devices fails unless we
  use blk_mq for SCSI devices as well.
- commit 0a5bbbc
- Linux 4.20.5 (bnc#1012628).
- ipmi:ssif: Fix handling of multi-part return messages
  (bnc#1012628).
- ipmi: Prevent use-after-free in deliver_response (bnc#1012628).
- ipmi: msghandler: Fix potential Spectre v1 vulnerabilities
  (bnc#1012628).
- ipmi: Don't initialize anything in the core until something
  uses it (bnc#1012628).
- ipmi: fix use-after-free of user->release_barrier.rda
  (bnc#1012628).
- Bluetooth: Fix unnecessary error message for HCI request
  completion (bnc#1012628).
- drm/amd/display: Fix disabled cursor on top screen edge
  (bnc#1012628).
- mm/memblock.c: skip kmemleak for kasan_init() (bnc#1012628).
- mm, proc: be more verbose about unstable VMA flags in
  /proc/<pid>/smaps (bnc#1012628).
- userfaultfd: clear flag if remap event not enabled
  (bnc#1012628).
- mm/swap: use nr_node_ids for avail_lists in swap_info_struct
  (bnc#1012628).
- mm/page-writeback.c: don't break integrity writeback on
  - >writepage() error (bnc#1012628).
- ocfs2: fix panic due to unrecovered local alloc (bnc#1012628).
- iomap: don't search past page end in iomap_is_partially_uptodate
  (bnc#1012628).
- scsi: megaraid: fix out-of-bound array accesses (bnc#1012628).
- KVM: PPC: Book3S HV: Apply combination of host and l1 pte rc
  for nested guest (bnc#1012628).
- KVM: PPC: Book3S HV: Align gfn to L1 page size when inserting
  nest-rmap entry (bnc#1012628).
- scsi: smartpqi: call pqi_free_interrupts() in pqi_shutdown()
  (bnc#1012628).
- ath10k: fix peer stats null pointer dereference (bnc#1012628).
- scsi: smartpqi: correct lun reset issues (bnc#1012628).
- scsi: mpt3sas: fix memory ordering on 64bit writes
  (bnc#1012628).
- IB/usnic: Fix potential deadlock (bnc#1012628).
- sysfs: Disable lockdep for driver bind/unbind files
  (bnc#1012628).
- ALSA: bebob: fix model-id of unit for Apogee Ensemble
  (bnc#1012628).
- Bluetooth: btusb: Add support for Intel bluetooth device
  8087:0029 (bnc#1012628).
- dm: Check for device sector overflow if CONFIG_LBDAF is not set
  (bnc#1012628).
- clocksource/drivers/integrator-ap: Add missing of_node_put()
  (bnc#1012628).
- quota: Lock s_umount in exclusive mode for Q_XQUOTA{ON,OFF}
  quotactls (bnc#1012628).
- perf tools: Add missing open_memstream() prototype for systems
  lacking it (bnc#1012628).
- perf tools: Add missing sigqueue() prototype for systems
  lacking it (bnc#1012628).
- perf cs-etm: Correct packets swapping in cs_etm__flush()
  (bnc#1012628).
- dm snapshot: Fix excessive memory usage and workqueue stalls
  (bnc#1012628).
- tools lib subcmd: Don't add the kernel sources to the include
  path (bnc#1012628).
- perf stat: Avoid segfaults caused by negated options
  (bnc#1012628).
- dm kcopyd: Fix bug causing workqueue stalls (bnc#1012628).
- dm crypt: use u64 instead of sector_t to store iv_offset
  (bnc#1012628).
- x86/topology: Use total_cpus for max logical packages
  calculation (bnc#1012628).
- netfilter: ipt_CLUSTERIP: fix deadlock in netns exit routine
  (bnc#1012628).
- netfilter: ipt_CLUSTERIP: remove wrong WARN_ON_ONCE in netns
  exit routine (bnc#1012628).
- netfilter: ipt_CLUSTERIP: check MAC address when duplicate
  config is set (bnc#1012628).
- perf vendor events intel: Fix Load_Miss_Real_Latency on SKL/SKX
  (bnc#1012628).
- perf parse-events: Fix unchecked usage of strncpy()
  (bnc#1012628).
- perf svghelper: Fix unchecked usage of strncpy() (bnc#1012628).
- perf tests ARM: Disable breakpoint tests 32-bit (bnc#1012628).
- perf intel-pt: Fix error with config term "pt=0" (bnc#1012628).
- tools lib traceevent: Fix compile warnings in
  tools/lib/traceevent/event-parse.c (bnc#1012628).
- tty/serial: do not free trasnmit buffer page under port lock
  (bnc#1012628).
- btrfs: improve error handling of btrfs_add_link (bnc#1012628).
- btrfs: fix use-after-free due to race between replace start
  and cancel (bnc#1012628).
- btrfs: alloc_chunk: fix more DUP stripe size handling
  (bnc#1012628).
- btrfs: volumes: Make sure there is no overlap of dev extents
  at mount time (bnc#1012628).
- mmc: atmel-mci: do not assume idle after atmci_request_end
  (bnc#1012628).
- kconfig: fix memory leak when EOF is encountered in quotation
  (bnc#1012628).
- kconfig: fix file name and line number of
  warn_ignored_character() (bnc#1012628).
- x86/resctrl: Fix rdt_find_domain() return value and checks
  (bnc#1012628).
- usb: dwc2: Fix disable all EP's on disconnect (bnc#1012628).
- bpf: relax verifier restriction on BPF_MOV | BPF_ALU
  (bnc#1012628).
- arm64: Fix minor issues with the dcache_by_line_op macro
  (bnc#1012628).
- clk: imx6q: reset exclusive gates on init (bnc#1012628).
- arm64: kasan: Increase stack size for KASAN_EXTRA (bnc#1012628).
- selftests: do not macro-expand failed assertion expressions
  (bnc#1012628).
- scsi: target/core: Make sure that target_wait_for_sess_cmds()
  waits long enough (bnc#1012628).
- scsi: target: use consistent left-aligned ASCII INQUIRY data
  (bnc#1012628).
- net: call sk_dst_reset when set SO_DONTROUTE (bnc#1012628).
- staging: erofs: fix use-after-free of on-stack
  `z_erofs_vle_unzip_io' (bnc#1012628).
- media: venus: core: Set dma maximum segment size (bnc#1012628).
- coresight: tmc: Fix bad register address for CLAIM
  (bnc#1012628).
- ASoC: use dma_ops of parent device for acp_audio_dma
  (bnc#1012628).
- media: firewire: Fix app_info parameter type in
  avc_ca{,_app}_info (bnc#1012628).
- arm64: relocatable: fix inconsistencies in linker script and
  options (bnc#1012628).
- powerpc/pseries/cpuidle: Fix preempt warning (bnc#1012628).
- powerpc/xmon: Fix invocation inside lock region (bnc#1012628).
- media: uvcvideo: Refactor teardown of uvc on USB disconnect
  (bnc#1012628).
- pstore/ram: Do not treat empty buffers as valid (bnc#1012628).
- clk: imx: make mux parent strings const (bnc#1012628).
- kbuild: let fixdep directly write to .*.cmd files (bnc#1012628).
- jffs2: Fix use of uninitialized delayed_work, lockdep breakage
  (bnc#1012628).
- efi/libstub: Disable some warnings for x86{,_64} (bnc#1012628).
- rxe: IB_WR_REG_MR does not capture MR's iova field
  (bnc#1012628).
- drm/amdgpu: Reorder uvd ring init before uvd resume
  (bnc#1012628).
- net: ethernet: ave: Set initial wol state to disabled
  (bnc#1012628).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (bnc#1012628).
- ASoC: pcm3168a: Don't disable pcm3168a when CONFIG_PM defined
  (bnc#1012628).
- arm64: Use a raw spinlock in __install_bp_hardening_cb()
  (bnc#1012628).
- selinux: always allow mounting submounts (bnc#1012628).
- fpga: altera-cvp: fix probing for multiple FPGAs on the bus
  (bnc#1012628).
- usb: gadget: udc: renesas_usb3: add a safety connection way
  for forced_b_device (bnc#1012628).
- samples: bpf: fix: error handling regarding kprobe_events
  (bnc#1012628).
- clk: meson: meson8b: fix incorrect divider mapping in
  cpu_scale_table (bnc#1012628).
- clk: meson: meson8b: add support for more M/N values in sys_pll
  (bnc#1012628).
- drm/atomic-helper: Complete fake_commit->flip_done potentially
  earlier (bnc#1012628).
- MIPS: Loongson: Add Loongson-3A R2.1 basic support
  (bnc#1012628).
- arm64: perf: set suppress_bind_attrs flag to true (bnc#1012628).
- drm/scheduler: Fix bad job be re-processed in TDR (bnc#1012628).
- crypto: ecc - regularize scalar for scalar multiplication
  (bnc#1012628).
- MIPS: SiByte: Enable swiotlb for SWARM, LittleSur and BigSur
  (bnc#1012628).
- x86/mce: Fix -Wmissing-prototypes warnings (bnc#1012628).
- ALSA: oxfw: add support for APOGEE duet FireWire (bnc#1012628).
- bpf: Allow narrow loads with offset > 0 (bnc#1012628).
- serial: set suppress_bind_attrs flag only if builtin
  (bnc#1012628).
- writeback: don't decrement wb->refcnt if !wb->bdi (bnc#1012628).
- of: overlay: add missing of_node_put() after add new node to
  changeset (bnc#1012628).
- selftests/bpf: enable (uncomment) all tests in test_libbpf.sh
  (bnc#1012628).
- usb: typec: tcpm: Do not disconnect link for self powered
  devices (bnc#1012628).
- e1000e: allow non-monotonic SYSTIM readings (bnc#1012628).
- platform/x86: asus-wmi: Tell the EC the OS will handle the
  display off hotkey (bnc#1012628).
- ixgbe: allow IPsec Tx offload in VEPA mode (bnc#1012628).
- qtnfmac: fix error handling in control path (bnc#1012628).
- drm/amdkfd: fix interrupt spin lock (bnc#1012628).
- drm/amd/display: Guard against null stream_state in
  set_crc_source (bnc#1012628).
- ASoC: wm97xx: fix uninitialized regmap pointer problem
  (bnc#1012628).
- gpio: pl061: Move irq_chip definition inside struct pl061
  (bnc#1012628).
- netfilter: ipset: Allow matching on destination MAC address
  for mac and ipmac sets (bnc#1012628).
- net: clear skb->tstamp in bridge forwarding path (bnc#1012628).
- openvswitch: Fix IPv6 later frags parsing (bnc#1012628).
- octeontx2-af: Fix a resource leak in an error handling path in
  'cgx_probe()' (bnc#1012628).
- netlink: fixup regression in RTM_GETADDR (bnc#1012628).
- ipv6: Fix dump of specific table with strict checking
  (bnc#1012628).
- ipv6: Take rcu_read_lock in __inet6_bind for mapped addresses
  (bnc#1012628).
- r8169: Add support for new Realtek Ethernet (bnc#1012628).
- qmi_wwan: add MTU default to qmap network interface
  (bnc#1012628).
- net, skbuff: do not prefer skb allocation fails early
  (bnc#1012628).
- net: dsa: mv88x6xxx: mv88e6390 errata (bnc#1012628).
- mlxsw: spectrum_switchdev: Set PVID correctly during VLAN
  deletion (bnc#1012628).
- mlxsw: spectrum: Disable lag port TX before removing it
  (bnc#1012628).
- ipv6: Consider sk_bound_dev_if when binding a socket to a v4
  mapped address (bnc#1012628).
- commit 34ae151

==== libyaml ====
Version update (0.1.7 -> 0.2.1)

- --with-pic is useless without static libs, remove it.
- Update RPM groups and descriptions.
- Add libyaml-revert-emitter-changes.patch: Revert "This code is
  not needed and breaks tests" (gh#yaml/libyaml#122).
- update to 0.2.1
  * Fixed most compiler warnings -Wall -Wextra
  * Support static and dynamic libraries
  * Add support for `make test`
  * Apply old fix for `\/` that is not in master.
  * Port bug fix from Perl binding
  * Removed trailing-whitespaces
  * Fix -Wformat compilation errors in tests
  * Added missing Cflags path in pkg-config file
  * Forbid escaped singlequote in doublequotes

==== perl-Encode ====
Version update (2.99 -> 3.00)

- updated to 3.00
  see /usr/share/doc/packages/perl-Encode/Changes

==== python-PyYAML ====
Subpackages: python2-PyYAML python3-PyYAML

- Use %license instead of %doc [bsc#1082318]

==== python-Twisted ====

- test-mktime-invalid-tm_isdst.patch: don't pass invalid tm_isdst value to
  mktime (see also bpo-15750)

==== python-cryptography ====
Version update (2.4.2 -> 2.5)
Subpackages: python2-cryptography python3-cryptography

- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().

==== python-gevent ====
Version update (1.3.5 -> 1.4.0)

- Version update to 1.4.0:
  * generate with cython 0.29
  * Refactored the gevent test runner and test suite to make them more reusable. In particular, the tests are now run with python -m gevent.tests. See issue #1293.
  * Formatting run info no longer includes gevent.local.local objects that have no value in the greenlet. See issue #1275.
  * Fixed negative length in pywsgi?s Input read functions for non chunked body. Reported in issue #1274 by tzickel.
  * Fix opening files in text mode in CPython 2 on Windows by patching libuv. See issue #1282 reported by wiggin15.
  * gevent now depends on greenlet 0.4.14 or above.
  * gevent.local.local subclasses correctly supports @staticmethod functions. Reported by Brendan Powers in issue #1266.
- Do NOT bundle c-ares and libev

==== python-msgpack ====

- Use %license

==== python-pyasn1 ====
Version update (0.4.4 -> 0.4.5)
Subpackages: python2-pyasn1 python3-pyasn1

- update to 0.4.5
  * Debug logging refactored for more efficiency when disabled and for more
    functionality when in use. Specifically, the global LOG object can easily
    be used from any function/method, not just from codec main loop as it used
    to be.
  * More debug logging added to BER family of codecs to ease encoding problems
    troubleshooting.
  * Copyright notice extended to the year 2019
  * Fixed defaulted constructed SEQUENCE component initialization.

==== python-pyasn1-modules ====
Version update (0.2.2 -> 0.2.4)

- update to version 0.2.4
  Revision 0.2.4:
- Added modules for RFC8226 implementing JWT Claim Constraints
  and TN Authorization List for X.509 certificate extensions
- Fixed bug in `rfc5280.AlgorithmIdentifier` ANY type definition
  Revision 0.2.3:
- Added modules for RFC5083 and RFC5084 (CMS)
- Copyright notice extended to the year 2019

==== python-tornado ====

- Add patch to skip tests failing with openss-1.1.1; this happens
  only when using TLS 1.3 so if user wants to use tornado they
  can hand disable the TLS and continue:
  * skip-failing-tests.patch
- Import necessary dependencies on Red Hat platforms

==== python3 ====
Subpackages: python3-curses python3-dbm

- Put LICENSE file where it belongs (bsc#1121852)
- bsc#1122191: add CVE-2019-5010-null-defer-x509-cert-DOS.patch
  fixing bpo-35746.
  An exploitable denial-of-service vulnerability exists in the
  X509 certificate parser of Python.org Python 2.7.11 / 3.7.2.
  A specially crafted X509 certificate can cause a NULL pointer
  dereference, resulting in a denial of service. An attacker can
  initiate or accept TLS connections using crafted certificates
  to trigger this vulnerability.

==== python3-base ====
Subpackages: libpython3_7m1_0

- Put LICENSE file where it belongs (bsc#1121852)
- bsc#1122191: add CVE-2019-5010-null-defer-x509-cert-DOS.patch
  fixing bpo-35746.
  An exploitable denial-of-service vulnerability exists in the
  X509 certificate parser of Python.org Python 2.7.11 / 3.7.2.
  A specially crafted X509 certificate can cause a NULL pointer
  dereference, resulting in a denial of service. An attacker can
  initiate or accept TLS connections using crafted certificates
  to trigger this vulnerability.

==== remmina ====
Version update (1.3.1 -> 1.3.2)
Subpackages: remmina-lang remmina-plugin-rdp remmina-plugin-secret remmina-plugin-vnc remmina-plugin-xdmcp

- Upgraded to 1.3.2
  * Change rcw size allocation wait algorithm, see issue #1809
  * Fix a couple of VNCI crashes, see issue #1821
  * Fix spice authentication, issue #1820
  * Update translations script fixes
  * Add a missing end point in an SSH error message
  * Translation Updates: fr, it
  * Cosmetic fixes

==== rtl8812au ====
Version update (5.2.20.2+git20190117.edcd447_k4.20.4_1 -> 5.2.20.2+git20190117.edcd447_k4.20.6_1)

- Add fix-backported-ndo_select_queue.patch to fix building with
  SLE-15-SP1's 4.12 kernel with backported features from 4.19.

==== virt-manager ====
Subpackages: virt-install virt-manager-common

- bsc#1123942 - [XEN][Build157.1] failed to open file
  '/usr/lib/grub2/x86_64-xen/grub.xen during bootup PV guest
  virtinst-change-location-for-grub_xen.patch

==== vm-install ====
Version update (0.10.05 -> 0.10.06)

- bsc#1123942 - [XEN][Build157.1] failed to open file
  '/usr/lib/grub2/x86_64-xen/grub.xen during bootup PV guest
- Version 0.10.06