Packages changed:
  apparmor
  cloud-init
  gnutls
  iproute2 (5.2 -> 5.3)
  iptables
  libnettle
  libxslt
  lvm2-device-mapper
  open-vm-tools (10.3.10 -> 11.0.0)
  patterns-microos
  python-asn1crypto (0.24.0 -> 1.0.0)
  python-base
  python-urllib3 (1.25.5 -> 1.25.6)
  texinfo
  xen

=== Details ===

==== apparmor ====
Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils perl-apparmor python3-apparmor

- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add apparmor-krb5-conf-d.diff for kerberos client

==== cloud-init ====

- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started
- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.
- Follow up to update cloud-init-trigger-udev.patch (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.

==== gnutls ====

- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)

==== iproute2 ====
Version update (5.2 -> 5.3)

- Update to new upstream release 5.3
  * devlink: show devlink port number
  * devlink: introduce PCI PF and VF port flavor and attribute
  * ip: support for nexthop objects
  * ip: add -Numeric option
  * ip: bond: support peer notification delay
  * rdma: query/set netns sharing sys parameter
  * rdma: support setting netns of rdma device
  * rdma: support "stat qp show"
  * rdma: support per-port counter mode
  * rdma: support stat manual mode
  * rdma: support default counter statistics
  * rdma: support CQ adaptive moderation
  * tc: support act_ctinfo action
  * tc: skbedit: add mask parameter
  * tc: add mpls actions
  * tc: stricter parameter parsing
  * tc: netem: json output
  * tipc: support interface name when activating UDP bearer
  * update documentation
- refresh
  * xfrm-support-displaying-transformations-used-for-Mob.patch
  * bpf-data-section-support-poc.patch
  * bpf-bss-section-poc.patch
- use fallback definition %make_build if it is not defined
  (fix SLE12 build)

==== iptables ====
Subpackages: libip4tc2 libip6tc2 libxtables12 xtables-plugins

- Add Conflicts with iptables-nft = 1.6.2 as during the update to
  iptables 1.8 ip6tables-restore-translate, ip6tables-translate,
  iptables-restore-translate and iptables-translate were moved from
  iptables-nft subpackage (now iptables-backend-nft) to the main
  package. So we need to add a conflict here otherwise we hit file
  conflicts error during the update.

==== libnettle ====
Subpackages: libhogweed5 libnettle7

- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)

==== libxslt ====

- Drop out lilbxslt-python package as it is just py2 based and
  upstream yet didn't bother to port it to python3.
  When there is python3 compatible code it should be enabled as
  multibuild here
  * Drop now unused libxslt-1.1.24-linkflags.patch and
    libxslt-do_not_build_doc_nor_xsltproc.patch

==== lvm2-device-mapper ====
Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03

- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch

==== open-vm-tools ====
Version update (10.3.10 -> 11.0.0)
Subpackages: libvmtools0

- Update to 11.0.0 (build 14549424) (boo#1151523)
  + Added appInfo to publish information about running applications inside the
    guest.
  + Provided sample tool.conf for ease of administration.
- Updated spec file to build 11.0.0
  - Removed libgrabbitmqProxy.so, vmware-guestproxycerttool, and
    guestproxy-ssl.conf
  - Added %config(noreplace) %{_sysconfdir}/vmware-tools/tools.conf.example
- Drop unnecessary patch:
  - gcc9-warnings.patch

==== patterns-microos ====
Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-basesystem patterns-microos-cloud patterns-microos-defaults patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-selinux patterns-microos-sssd_ldap

- Enable armv7

==== python-asn1crypto ====
Version update (0.24.0 -> 1.0.0)

- update to version 1.0.0
  * BREAKING CHANGE: Removed functionality to calculate public key
    values from private key values. Alternatives have been added to
    oscrypto. (see upstream changelog)
  * Significantly improved parsing of core.UTCTime() and core.GeneralizedTime()
    values that include timezones and fractional seconds
  * core.Choice() may now be constructed by a 2-element tuple or a 1-key dict
  * No longer try to load optional performance dependency, libcrypto,
    on Mac or Linux
  * Add support for explicit RSA SSA PSS to keys.PublicKeyInfo()
    and keys.PrivateKeyInfo()
  * Add/improve few algorithms (RC4, secp256k1, SHA-3, SHAKE)
  * Added asn1crypto_tests package to PyPi
  * Many bugfixes

==== python-base ====
Subpackages: libpython2_7-1_0

- Add bpo36302-sort-module-sources.patch (boo#1041090)

==== python-urllib3 ====
Version update (1.25.5 -> 1.25.6)

- Updae to 1.25.6:
  * Fix issue where tilde (~) characters were incorrectly percent-encoded in the path. (Pull #1692)

==== texinfo ====

- use filetrigger instead of transfiletrigger
- Temporary disable %transfiletriggerin/%transfiletriggerun and
  reintroduce %post/%preun with %install_info/%install_info_delete
  as libzypp currentyl can not handle first case (boo#1041742)
- Fix patch texinfo-zlib.patch to enable open of compressed info
  files without using a compressor utility (boo#1152105)
- For bug boo#1152105 split of the info pages of package info to be
  able to preinstall gzip before/with first install-info call
- implement file trigger for installing and removing info pages
  (boo#1152105)

==== xen ====

- bsc#1135799 - Partner-L3: Xen crashes on AMD ROME based machines
  5ca7660f-x86-entry-drop-unused-includes.patch
  5cf8da09-adjust-sysdom-creation-call-earlier-on-x86.patch
  5cab2a6b-x86-ACPI-also-parse-AMD-tables-early.patch
  5cab2ab7-x86-IOMMU-introduce-init-ops.patch
  5cab2ae8-x86-IOMMU-abstract-iommu_supports_eim.patch
  5cab2b4e-x86-IOMMU-abstract-iommu_enable_x2apic_IR.patch
  5cab2b95-x86-IOMMU-initialize-iommu_ops-in.patch
  5cac9a4b-x86-IOMMU-abstract-adjust_vtd_irq_affinities.patch
  5cdeac7f-AMD-IOMMU-adjust-IOMMU-list-head-init.patch
  5d0cf4e4-AMD-IOMMU-initialize-IRQ-tasklet-once.patch
  5d149bb0-AMD-IOMMU-dont-add-IOMMUs.patch
  5d1b3fab-AMD-IOMMU-restrict-feature-logging.patch
  5d358508-x86-IRQ-desc-affinity-represents-request.patch
  5d358534-x86-IRQ-consolidate-arch-cpu_mask-use.patch
  5d358a67-AMD-IOMMU-pass-IOMMU-to-iterate_ivrs_entries-cb.patch
  5d358a92-AMD-IOMMU-pass-IOMMU-to-amd_iommu_alloc_intremap_table.patch
  5d39811c-x86-IOMMU-dont-restrict-IRQ-affinities.patch
  5d417813-AMD-IOMMU-bitfield-extended-features.patch
  5d417838-AMD-IOMMU-bitfield-control-reg.patch
  5d41785b-AMD-IOMMU-bitfield-IRTE.patch
  5d41787e-AMD-IOMMU-pass-IOMMU-to-gfu-intremap-entry.patch
  5d4178ad-AMD-IOMMU-128bit-non-guest-APIC-IRTE.patch
  5d4178fc-AMD-IOMMU-split-amd_iommu_init_one.patch
  5d41793f-AMD-IOMMU-allow-enabling-without-IRQ.patch
  5d417a16-AMD-IOMMU-adjust-IRQ-setup-for-x2APIC.patch
  5d417ab6-AMD-IOMMU-enable-x2APIC-mode.patch
  5d417b38-AMD-IOMMU-correct-IRTE-updating.patch
  5d417b6a-AMD-IOMMU-dont-needlessly-log-headers.patch
  5d4a9d25-AMD-IOMMU-drop-not-found-message.patch
  5d80e7c0-AMD-IOMMU-free-shared-IRT-once.patch
  5d80e80d-AMD-IOMMU-valid-flag-for-IVRS-mappings.patch
  5d80e82e-AMD-IOMMU-alloc_intremap_table-callers-handle-errors.patch
  5d80e857-x86-PCI-read-MSI-X-table-entry-count-early.patch
  5d8b72e5-AMD-IOMMU-dont-blindly-alloc-intremap-tables.patch
  5d8b730e-AMD-IOMMU-phantom-funcs-share-intremap-tables.patch
  5d8b733b-x86-PCI-read-max-MSI-vector-count-early.patch
  5d8b736d-AMD-IOMMU-replace-INTREMAP_ENTRIES.patch
  5d8b7393-AMD-IOMMU-restrict-intremap-table-sizes.patch
- bsc#1145240 - [Migration]Can't pre-allocate 1 shadow pages
  5d70bfba-x86-shadow-dont-enable-with-too-small-allocation.patch
- bsc#1137717 - [HPS Bug] Unable to install Windows Server 2016
  with 2 CPUs setting (or above) under SLES12 SP4 Xen Server on AMD
  ROME platform
  5d89d8d9-libxc-x86-avoid-overflow-in-CPUID-APIC-ID.patch
- Upstream bug fixes (bsc#1027519)
  5d67ceaf-x86-properly-gate-PKU-clearing.patch
  5d779811-x86-fix-CPUID7-0-eax-levelling-MSR.patch
  5d77b40f-fix-hvm_all_ioreq_servers_add_vcpu-cleanup.patch
  5d80ea13-vpci-honor-read-only-devices.patch
  5d8b715f-ACPI-cpuidle-bump-max-num-of-states.patch
- bsc#1145774 - Libivrtd segfaults when trying to live migrate a VM
  Fix crash in an error path of libxl_domain_suspend with
  libxl.helper_done-crash.patch