Packages changed: libnftnl (1.1.7 -> 1.1.8) ncurses (6.2.20201010 -> 6.2.20201024) openldap2 (2.4.54 -> 2.4.55) === Details === ==== libnftnl ==== Version update (1.1.7 -> 1.1.8) - Update to release 1.1.8 * libnftnl: export nftnl_set_elem_fprintf * examples: add support for NF_PROTO_INET family * table: add userdata support * object: add userdata and comment support * chain: add userdata and comment support * src: add support for chain ID attribute ==== ncurses ==== Version update (6.2.20201010 -> 6.2.20201024) Subpackages: libncurses6 ncurses-utils terminfo-base - Disable usage of libbsd as this one is not in bootstrap image - Add ncurses patch 20201024 + provide workaround configure-check for bool when cross-compiling. + fix a potential indexing error in _nc_parse_entry(), seen with Herlim's test data using address-sanitizer. + change a null-pointer check in set_curterm to a valid-string check, needed in to tic's use-resolution work pad_char is cancelled (report/testcase by Robert Sebastian Herlim) + improve tic's -c option to validate the number and type of parameters and compare against expected number/type before deciding which set of parameter-lists to use in tparm calls (report/testcase by Robert Sebastian Herlim). + fix a link for tabs.1 manpage in announce.html.in (report by Nick Black), as well as some fixes via linklint. - Update to tack 1.9 (patch 20200220) * sysdep.c: gcc-warning * tack.c: fix gcc warning for non-ncurses configuration * init.c: zero-out the debug/log-pointers after closing them * tack.1: add -d option, for debug.log * output.c: use debug.log to record putp's and tput's which hint at the testing done * sysdep.c: use debug.log to record when the tty is set/reset * tack.h: split-out log_chr and log_str * tack.c: add -d option, for debug.log * tack.1, tack.c, tack.h: add -l option * tack.c: eliminate a confusing comparison for the logging-menu-entry state by using #define'd strings for that and the hex-output menu. * tack.c: use getopt * fun.c, crum.c, edit.c: fix coverity warning about copying into fixed-size buffer * tack.c: do a sanity-check on $TERM * aclocal.m4: resync with my-autoconf * configure: regen * aclocal.m4: split-out CF__CURSES_DATA to simplify ifdef's * configure: regen - Use libbsd which provides strlcpy as well as strlcat to avoid reinvent common BSD standard and string functions - Let makedepend find standard header files even if not below /usr/include - Add ncurses patch 20201017 + improve manpage typography. + improve discussion in curs_addch.3x of the use of unctrl to display nonprintable characters. + add a note in terminfo.5 explaining that no-parameter strings such as sgr0 or cnorm should not be used with tparm. ==== openldap2 ==== Version update (2.4.54 -> 2.4.55) - bsc#1175568 CVE-2020-8027 openldap_update_modules_path.sh has a number of issues in it's design that lead to security issues. This file has been removed, from the package, and the %post execution of the install. The function is replaced by /usr/sbin/slapd-ldif-update-crc and /usr/lib/openldap/fixup-modulepath, through the addition of the source files: * fixup-modulepath.sh * slapd-ldif-update-crc.sh * update-crc.sh - updated to 2.4.55 OpenLDAP 2.4.55 Release (2020/10/26) Fixed slapd normalization handling with modrdn (ITS#9370) Fixed slapd-meta to check ldap_install_tls return code (ITS#9366) Contrib Fixed nssov misplaced semicolon (ITS#8731, ITS#9368) LMDB 0.9.27 Release (2020/10/26) ITS#9376 fix repeated DUPSORT cursor deletes