Packages changed:
apparmor (2.13.5 -> 3.0.0)
bcache-tools
chrony
cilium (1.7.6 -> 1.8.5)
container-selinux (2.145.0 -> 2.150.0)
gcc10 (10.2.1+git583 -> 10.2.1+git872)
glibc
grub2
haproxy
helm (3.3.4 -> 3.4.0)
ima-evm-utils (1.3.1 -> 1.3.2)
installation-images-MicroOS (16.25 -> 16.26)
iptables (1.8.5 -> 1.8.6)
kernel-firmware (20201005 -> 20201023)
kernel-source (5.8.15 -> 5.9.1)
libapparmor (2.13.5 -> 3.0.0)
libxml2
microos-tools (2.6 -> 2.7)
nfs-utils
perl (5.30.3 -> 5.32.0)
python-cryptography (3.0 -> 3.2.1)
python-psutil
raspberrypi-firmware-dt (2020.05.02 -> 2020.10.26)
rpm-config-SUSE (0.g60 -> 0.g64)
salt
selinux-policy (20201016 -> 20201029)
shadow
systemd-default-settings (0.2 -> 0.4)
timezone (2020a -> 2020d)
transactional-update (2.28 -> 2.28.2)
vim (8.2.1900 -> 8.2.1955)
zypp-plugin
=== Details ===
==== apparmor ====
Version update (2.13.5 -> 3.0.0)
Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils python3-apparmor
- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in
de, id and sv translations (and fix the test) (MR 675)
- add extra-profiles-fix-Pux.diff to fix an inactive profile -
prevents a crash in aa-logprof and aa-genprof when creating a new
profile (MR 676)
- update to AppArmor 3.0.0
- introduce feature abi declaration in profiles to enable use of
new rule types (for openSUSE: dbus and unix rules)
- support xattr attachment conditionals
- experimental support for kill and unconfined profile modes
- rewritten aa-status (in C), including support for new profile modes
- rewritten aa-notify (in python), finally dropping the perl
requirement at runtime
- new tool aa-features-abi for extracting feature abis from the kernel
- update profiles to have profile names and to use 3.0 feature abi
- introduce @{etc_ro} and @{etc_rw} profile variables
- new profile for php-fpm
- several updates to profiles and abstractions (including boo#1166007)
- fully support 'include if exists' in the aa-* tools
- rewrite handling of alias, include, link and variable rules in
the aa-* tools
- rewrite and simplify log handling in the aa-logprof and aa-genprof
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0
for the detailed upstream changelog
- patches:
- add changes-since-3.0.0.diff with upstream fixes since the 3.0.0
release up to 3e18c0785abc03ee42a022a67a27a085516a7921
- drop upstreamed usr-etc-abstractions-base-nameservice.diff
- drop 2.13-only libapparmor-so-number.diff
- refresh apparmor-enable-profile-cache.diff - partially upstreamed
- update apparmor-samba-include-permissions-for-shares.diff and
apparmor-lessopen-profile.patch - switch to "include if exists"
- apparmor-lessopen-profile.patch: add abi rule to lessopen profile
- refresh apparmor-lessopen-nfs-workaround.diff
- move away very loose apache profile that doesn't even match the
apache2 binary path in openSUSE to avoid confusion (boo#872984)
- move rewritten aa-status from utils to parser subpackage
- add aa-features-abi to parser subpackage
- replace perl and libnotify-tools requires with requiring
python3-notify2 and python3-psutil (needed by the rewritten
aa-notify)
- drop ancient cleanup for /etc/init.d/subdomain from parser %pre
- drop (never enabled) conditionals to build with python2 and to
build the python-apparmor subpackage (upstream dropped python2
support)
- drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed
- set PYFLAKES path for utils check
- add precompiled_cache build conditional to allow faster local
builds without using kvm
- remove duplicated BuildRequires: swig
==== bcache-tools ====
- Remove dependence of smartcols bcache-tools.spec, bcache-tools
code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
specified (jsc#SLE-9807)
0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
(jsc#SLE-9807)
0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
(jsc#SLE-9807)
0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
in lib.c (jsc#SLE-9807)
0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
(jsc#SLE-9807)
0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
on-disk format (jsc#SLE-9807)
0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
(jsc#SLE-9807)
0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
undefined (jsc#SLE-9807)
0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
CPU endians (jsc#SLE-9807)
0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
backing device (jsc#SLE-9807)
0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
for zoned devive (jsc#SLE-9807)
0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch
==== chrony ====
Subpackages: chrony-pool-openSUSE
- By default we don't write log files but log to journald, so
only recommend logrotate.
==== cilium ====
Version update (1.7.6 -> 1.8.5)
- Update to 1.8.5
* Release notes: https://github.com/cilium/cilium/releases/tag/v1.8.5
- Remove patches which were included upstream:
* 0001-option-mark-keep-bpf-templates-as-deprecated.patch
* 0002-make-remove-the-need-for-go-bindata.patch
* 0003-bpf-don-t-use-fixed-size-integer-types-from-stdint.h.patch
* 0005-bpf-re-add-a-proper-types.h-mapper.patch
* 0006-build-Avoid-using-git-if-not-in-a-git-repo.patch
* 0007-option-rename-PolicyMapMaxEntries-to-PolicyMapEntrie.patch
* 0008-helm-allow-to-configure-bpf-nat-global-max-using-Hel.patch
* 0009-option-reduce-default-number-for-TCP-CT-and-NAT-tabl.patch
* 0010-daemon-add-option-to-dynamically-size-BPF-maps-based.patch
- Remove downstream patch which is not needed anymore (now it's
enough to just modify the Helm chart with sed to set out images):
* 0004-helm-Allow-variables-for-compatibility-with-openSUSE.patch
- Add upstream patch for installing the operator binary:
* 0001-operator-make-Add-install-target.patch
==== container-selinux ====
Version update (2.145.0 -> 2.150.0)
- Don't use BuildRequires based on shell script output. OBS can't
evaluate that.
- Update to version 2.150.0
- Add additional allow rules for kvm based containers using
virtiofsd.
==== gcc10 ====
Version update (10.2.1+git583 -> 10.2.1+git872)
Subpackages: libgcc_s1 libgomp1 libstdc++6
- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.
- Build complete set of multilibs for arm-none target [bsc#1106014]
* Fixes inadvertant mixture of ARM and Thumb instructions in linker output
==== glibc ====
Subpackages: glibc-locale glibc-locale-base
- Use --enable-cet on x86_64 to instrument glibc for indirect branch
tracking and shadow stack use. Enable indirect branch tracking
and shadow stack in the dynamic loader. [jsc#PM-2110] [bsc#1175154]
==== grub2 ====
Subpackages: grub2-arm64-efi grub2-snapper-plugin
- Fix boot failure in blocklist installation (bsc#1178278)
* Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch
==== haproxy ====
- apparmor profile fixes:
- include abstractions that give access to the openssl config,
ssl certs and ssl keys
- include local configs only with "if exists" so they do not have
to exist.
- move local files to %ghost
==== helm ====
Version update (3.3.4 -> 3.4.0)
- Update to version 3.4.0:
* bump version to v3.4.0
* this rewrites a whole bunch of old repo URLs to the new repo URL (#8902)
* warn and block old repo URLs (#8903)
* improved user-facing error messages to explain the underlying problem (#8731)
* Linking to a more complete list of meeting details.
* add authentication to CircleCI jobs
* helm create: make generated YAML indentation more consistent
* Makefile: check and use GOBIN environment variable first
* TestCheckPerms: utilize pipe to read stderr
* Bump github.com/DATA-DOG/go-sqlmock from 1.4.1 to 1.5.0
* Bump github.com/sirupsen/logrus from 1.6.0 to 1.7.0
* feat(install): add requested version to error
* Bump github.com/gofrs/flock from 0.7.1 to 0.8.0
* Bump github.com/lib/pq from 1.7.0 to 1.8.0
* Fix wrong function's name in comment
* ref(cmd): prevent klogs flags from polluting the help text
* Adding support for k8s 1.19
* remove redudant time func
* fix example time format
* rename to time format flag
* refactor time formatting
* fix ls command example
* add time-format flag to list command
* Adding annotation to index.yaml file
* Fixing import package issue
* Update go version to 1.14 in go.mod
* use warning function
* Adding size labels pointer
* Fixing issue with idempotent repo add
* support passing signing passphrase from file or stdin (#8394)
* size/S and larger requiring 2 LGTMs
* Update docs links in release notes script
* fix: allow serverInfo field on index files
* fix(cmd/helm): add build tags for architecture
* switched to stricter YAML parsing on plugin metadata files
* Merge pull request from GHSA-m54r-vrmv-hw33
* Merge pull request from GHSA-jm56-5h66-w453
* Merge pull request from GHSA-9vp5-m38w-j776
* go fmt
* improve the HTTP detection for tar archives
* replace --no-update with --force-update and invert default. BREAKING.
* handle case where dependency name collisions break dependency resolution
* fixed bug that caused helm create to not overwrite modified files
* refactor the release name validation to be consistent across Helm
* fix: if not .Values.autoscaling.enabled indent
* validate the name passed in during helm create
* fix: check mode bits on kubeconfig file
* fix incorrect wildcard expand
* fix(comp): Disable file comp for output formats
* Makefile: Fix LDFLAGS overriding
* Add support to install helm
* Fixing typo in engine comments
* Use T.cleanup() to cleanup cmdtest_temp file
* Use RemoveAll to remove a non-empty directory
* mark NewTempServer as Deprecated
* Use T.Cleanup() to cleanup temp dir helm-repotest
* Support impersonation via flags similar to kubectl --as="user"
* Document all env vars for CLI help
* Use T.cleanup() to cleanup helm-action-test
* Add GPG signature verification to install script (#7944)
* fix: with .Values.podAnnotations indent template
* Revert PR 8562
* feat(comp): Add support for fish completion
* feat: status command display description
* Remove duplicate variable definition
* Fixed a variable name collision caused by two PR merges (#8681)
* Fix/8467 linter failing (#8496)
* fix name length check on lint (#8543)
* Fix spelling in completion.go
* cleanup tempfiles for load_test
* add checkFileCompletion for env HELM_BIN
* feat(env): add support of accepting a specific variable for helm env
* Fixing failing CI for windows
* pkg/*: Small linting fixes
* Correct checksum file links
* Fixing linting of templates on Windows
* use URL escape codes
* add v4 to list of exempt labels
* optimise if condition in service ready logic
* feat(comp): Disable file completion when not valid
* Bump Kubernetes to v0.18.8 + Bump jsonpatch
* release/mock: Ensure conversion from int to string yields a string
* Update Common Lables template in starter chart
* chore(deps): add dependabot.yml
* Fix Quick Start Guide Link in README.md
* add helm v4 todo comments for FindChartInAuthAndTLSRepoURL.
* polish the error handler
* Move selector filtering after latest release version filtering
* Added testing for list action with selector
* Added notice about supported backends
* Fix linting issues
* Added selector filtering
* Pass labels from secret/configmap to release object
* Added selector option to list command
* fix test that modifies the wrong cache data
* bufix: fix validateNumColons docs
* Fix typo
* darwin-386 and windows-386 are not supported now
* Fix issue with install and upgrade running all hooks
* introduce stale issue bot
* Close gzip reader when done.
* fix watch error due to elb/proxy timeout
* Avoid hardcoded container port in default notes
* add unit tests for FindChartInAuthAndTLSRepoURL.
* Restoring Build behavior
* Adding helm v4 todo
* Make unmanaged repositories version resolvable
* Locking file URIs to a version in lockfile
* Enhance readability by extracting bitwise operation
* fix(sdk): Polish the downloader/manager package error return (#8491)
* fix insecure-skip-tls-verify flag does't work on helm install, Keep FindChartInRepoURL and FindChartInAuthRepoURL functions signatures intact.
* fix: Allow building in a path containing spaces
* Alter whitespace in "Update Complete" output
* fix(create): update the hook name of test-connection pod
* polish the help text of flag
* Reinstating comment that is still accurate
* Rollback command support for max history
* fix(helm): Update test during pending install
* Correct make target in Makefile
* fix(helm): Added test for concurrent upgrades
* fix(helm): Avoid corrupting storage via a lock
* Fixing version and spelling errors
* Clarify comments to match practice
* fix the code style error
* feature(show): support jsonpath output for `helm show value`
* fix(kube): use logger instead of fmt.Printf
* fix windows build failure caused by #8431
* address PR comment, adding whitespace for formatting
* feat(helm): prompt for password with helm repo add
* Lint dependencies (#7970)
* Environment variable for setting the max history for an environment
* chore(OWNERS): move michelleN to emeritus
* bump version to v3.3
* fix conflict
* add test case
* fix another extreme case
* add test case
* fix #6116
* Make helm ls return only current releases if providing state filter
* Report what cause finding chart to fail
* Simplify chart installable check
==== ima-evm-utils ====
Version update (1.3.1 -> 1.3.2)
Subpackages: evmctl libimaevm2
- Update to version 1.3.2
* Bugfixes: importing keys
* NEW: Docker based travis distro testing
* Travis bugfixes, code cleanup, software version update,
and script removal
* Initial travis testing
- Remove 0001-help-Add-missing-new-line-for-ignore-violations.patch
(patch from this release)
- Add make check + dependencies (getfattr => attr, xxd => vim)
==== installation-images-MicroOS ====
Version update (16.25 -> 16.26)
- merge gh#openSUSE/installation-images#435
- don't forget .lib*.hmac files (bsc#1178208)
- 16.26
==== iptables ====
Version update (1.8.5 -> 1.8.6)
Subpackages: libip4tc2 libip6tc2 libxtables12 xtables-plugins
- Update to release 1.8.6
* iptables-nft had pointlessly added "bitwise" expressions to
each IP address match, needlessly slowing down run-time
performance (by 50% in worst cases).
* iptables-nft-restore: Support basechain policy value of "-"
(indicating to not change the chain's policy).
* nft-translte: Fix translation of ICMP type "any" match.
==== kernel-firmware ====
Version update (20201005 -> 20201023)
Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network
- Update to version 20201023 (git commit dae4b4cd0841):
* cypress: add Cypress firmware and clm_blob files
* rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
* ath10k: add SDIO firmware for QCA9377 WiFi
* ice: update package file to 1.3.16.0
* mediatek: separate venc service thread
* QCA : Updated firmware file for WCN3991
* iwlwifi: update and add new FWs from core56-54 release
* iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
* i915: Add DG1 DMC v2.02
* qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)
==== kernel-source ====
Version update (5.8.15 -> 5.9.1)
- vt_ioctl: fix GIO_UNIMAP regression (5.9 GIO_UNIMAP regression).
- commit 15946ea
- kernel-binary.spec.in: pack scripts/module.lds into kernel-$flavor-devel
Since mainline commit 596b0474d3d9 ("kbuild: preprocess module linker
script") in 5.10-rc1, scripts/module.lds linker script is needed to build
out of tree modules. Add it into kernel-$flavor-devel subpackage.
- commit fe37c16
- drm/amd/display: Don't invoke kgdb_breakpoint() unconditionally
(bsc#1177973).
- drm/amd/display: Fix kernel panic by dal_gpio_open() error
(bsc#1177973).
- commit 3f21462
- series.conf: cleanup
- move to "almost mainline" section:
patches.suse/coresight-fix-offset-by-one-error-in-counting-ports.patch
- commit 8e0635b
- Refresh
patches.suse/coresight-fix-offset-by-one-error-in-counting-ports.patch.
Update upstream status.
- commit 7b40cc9
- Linux 5.9.1 (bsc#1012628).
- Bluetooth: MGMT: Fix not checking if BT_HS is enabled
(bsc#1012628).
- media: usbtv: Fix refcounting mixup (bsc#1012628).
- USB: serial: option: add Cellient MPL200 card (bsc#1012628).
- USB: serial: option: Add Telit FT980-KS composition
(bsc#1012628).
- staging: comedi: check validity of wMaxPacketSize of usb
endpoints found (bsc#1012628).
- USB: serial: pl2303: add device-id for HP GC device
(bsc#1012628).
- USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART
adapters (bsc#1012628).
- vt_ioctl: make VT_RESIZEX behave like VT_RESIZE (bsc#1012628).
- reiserfs: Initialize inode keys properly (bsc#1012628).
- reiserfs: Fix oops during mount (bsc#1012628).
- Revert "drm/amdgpu: Fix NULL dereference in dpm sysfs handlers"
(bsc#1012628).
- crypto: bcm - Verify GCM/CCM key length in setkey (bsc#1012628).
- crypto: qat - check cipher length for aead AES-CBC-HMAC-SHA
(bsc#1012628).
- commit b7f511b
- update patches metadata
- update upstream references:
patches.suse/Bluetooth-A2MP-Fix-not-initializing-all-members.patch
patches.suse/Bluetooth-L2CAP-Fix-calling-sk_filter-on-non-socket-.patch
- commit b1f22f7
==== libapparmor ====
Version update (2.13.5 -> 3.0.0)
- update to AppArmor 3.0.0
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0
for the detailed upstream changelog
- add changes-since-3.0.0.diff with upstream fixes since the 3.0.0
release up to 3e18c0785abc03ee42a022a67a27a085516a7921
- drop 2.13-only patch libapparmor-so-number.diff
==== libxml2 ====
Subpackages: libxml2-2 libxml2-tools
- Make python subpackage ready for multiple python3 flavors
gh#openSUSE/python-rpm-macros#66
==== microos-tools ====
Version update (2.6 -> 2.7)
- Update to version 2.7
- Add workaround if /.autorelabel is used, don't ignore it
- Rename tmp.conf to microos-tmp.conf on SUSE MicroOS
- Fix building on SUSE MicroOS
==== nfs-utils ====
Subpackages: libnfsidmap1 nfs-client
- Update to version 2.5.2
- fixed a couple memory leaks and other bug fixes,
- a lot of clean up
- Refresh nfs-utils-1.0.7-bind-syntax.patch
- Use %autosetup -p1
==== perl ====
Version update (5.30.3 -> 5.32.0)
- update to perl-5.32.0
* new experimental infix "isa" operator
* support of unicode 13.0
* chained comparisons capability
- updated patches:
* perl-HiRes.t-timeout.diff
* posix-sigaction.patch
* perl-fix2020.patch
* perl-reproducible2.patch
* perl_skip_flaky_tests_powerpc.patch
==== python-cryptography ====
Version update (3.0 -> 3.2.1)
- update to 3.2.1:
Disable blinding on RSA public keys to address an error with
some versions of OpenSSL.
- update to 3.2:
* CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
by our API, we cannot completely mitigate this vulnerability.
* Support for OpenSSL 1.0.2 has been removed.
* Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- update to 3.1.1:
* wheels compiled with OpenSSL 1.1.1h.
- update to 3.1:
* **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
:term:`U-label` parsing in various X.509 classes. This support was originally
deprecated in version 2.1 and moved to an extra in 2.5.
* Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
the OpenSSL project. The next version of ``cryptography`` will drop support
for it.
* Deprecated support for Python 3.5. This version sees very little use and will
be removed in the next release.
* ``backend`` arguments to functions are no longer required and the
default backend will automatically be selected if no ``backend`` is provided.
* Added initial support for parsing certificates from PKCS7 files with
:func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
and
:func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
.
* Calling ``update`` or ``update_into`` on
:class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
also resolves the same issue in :doc:`/fernet`.
==== python-psutil ====
- Fix shebang replacement for multiple python flavors
==== raspberrypi-firmware-dt ====
Version update (2020.05.02 -> 2020.10.26)
- Update to 2dc96ad40979 (2020-10-26):
* Introduce firmware-clocks
* Introduce firmware-reset
* Add reset controller in xHCI node
- Get rid of vl805-firmware-loader-overlay.dts, not needed anymore
==== rpm-config-SUSE ====
Version update (0.g60 -> 0.g64)
- Update to version 0.g64:
* Define a global %_firmwaredir
* macros.obs: remove unused macros
==== salt ====
Subpackages: python3-salt salt-master salt-minion salt-standalone-formulas-configuration
- Set passphrase for salt-ssh keys to empty string (bsc#1178485)
- Added:
* set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch
- Properly validate eauth credentials and tokens on SSH calls made by Salt API
(bsc#1178319) (bsc#1178362) (bsc#1178361)
(CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
* fix-cve-2020-25592-and-add-tests-bsc-1178319.patch
- Fix novendorchange handling in zypperpkg module
- Added:
* fix-novendorchange-option-284.patch
- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
* path-replace-functools.wraps-with-six.wraps-bsc-1177.patch
==== selinux-policy ====
Version update (20201016 -> 20201029)
Subpackages: selinux-policy-targeted
- wicked.fc: add libexec directories
- Update to version 20201029
- update container policy
==== shadow ====
- Change again useradd.local script to let it work even for system
accounts and work together with SELinux (bsc#1178296)
- Change patch useradd-script.patch to support the four arguments
used by the useradd.local script (bsc#1178296)
==== systemd-default-settings ====
Version update (0.2 -> 0.4)
Subpackages: systemd-default-settings-branding-SLE systemd-default-settings-branding-openSUSE
- rpm file lists are now generated from the spec file.
- Make sure the release number between the main and the branding
packages match
- Import 0.3
d299248 List drop-in directories in SUSE.list exclusively
e4651a7 Disable memory accounting by default for all distros (jsc#PM-2229 jsc#PM-2230)
==== timezone ====
Version update (2020a -> 2020d)
- Add fat.patch to generate "fat" timezone files (was default before 2020b).
- Adjust timezone-java.spec.in to avoid build failures when running
pre_checkin.sh
- timezone update 2020d
* Palestine ends DST earlier than predicted, on 2020-10-24.
- timezone update 2020c
* Fiji starts DST later than usual, on 2020-12-20.
- timezone update 2020b (bsc#1177460)
* Revised predictions for Morocco's changes starting in 2023.
* Canada's Yukon changes to -07 on 2020-11-01, not 2020-03-08.
* Macquarie Island has stayed in sync with Tasmania since 2011.
* Casey, Antarctica is at +08 in winter and +11 in summer.
* zic no longer supports -y, nor the TYPE field of Rules.
- Rebased timezone-2018f-bsc1112310.patch
==== transactional-update ====
Version update (2.28 -> 2.28.2)
Subpackages: transactional-update-zypp-config
- Version 2.28.2
- SELinux: Exclude security.selinux attribute from rsyncing (again)
- Version 2.28.1
- SELinux: Fixed changing the wrong grub configuration file
- SELinux: Move /.autorelabel file to writeable location
==== vim ====
Version update (8.2.1900 -> 8.2.1955)
Subpackages: vim-data-common vim-small
- Updated to version 8.2.1955, fixes the following problems
* Vim9: command modifiers do not work.
* Variable completion does not work in command line window.
* Default option values are changed when using :badd for an existing buffer.
* Buffer test fails with normal features.
* Still using default option values after using ":badd +1".
* The wininfo list may contain stale entries.
* Warning for signed/unsigned.
* Complete_info().selected may be wrong.
* Lua is initialized even when not used.
* Number of status line items is limited to 80.
* Reading past the end of the command line.
* Tiny build fails.
* With Python 3.9 some tests fail.
* GTK GUI: rounding for the cell height is too strict.
* Vim9: cannot put line break in expression for '=' register.
* Vim9: error for wrong number of arguments is not useful.
* Vim9: function call is aborted even when "silent!" is used.
* No test for improved Man command.
* Vim9: E1100 mentions :let.
* Assert_fails() setting emsg_silent changes normal execution.
* Listlbr test fails when run after another test.
* Fuzzy matching does not recognize path separators.
* Win32: scrolling doesn't work properly when part of window is off-screen.
* Vim9: "filter" command modifier doesn't work.
* Vim9: crash when indexing dict with NULL key.
* List/dict test fails.
* Cannot use a space in 'spellfile'. (Filipe Brandenburger)
* Vim9: get unknown error with an error in a timer function.
* Vim9: "silent!" not effective when list index is wrong.
* MS-Windows: problem loading Perl 5.32.
* Wrong input if removing shift results in special key code.
* Vim9: arguments of extend() not checked at compile time.
* Compiler warnings when building with Athena GUI.
* Cannot sort using locale ordering.
* Vim9: command modifiers in :def function not tested.
* Sort test fails on Mac.
* Session sets the local 'scrolloff' value to the global value.
* Vim9: test for confirm modifier fails in some situations.
* Wiping out a terminal buffer makes some tests fail.
* Invalid memory access in Ex mode with global command.
* Vim9: browse modifier test fails on Mac.
* Ex mode test fails on MS-Windows with GUI.
* Insufficient test coverage for the Netbeans interface.
* Vim9: wrong error message when colon is missing.
* Netbeans test is flaky.
* Crash when passing NULL function to reduce().
* sort() with NULL string not tested.
* Crash when using "zj" without folds. (Sean Dewar)
* GUI: crash when handling message while closing a window. (Srinath
Avadhanula)
* Vim9: using extend() on null dict is silently ignored.
* Vim9: crash when compiling function fails when getting type.
* Test for list and dict fails.
* Vim9: crash when using a NULL dict key.
* Vim9: extra "unknown" error after other error.
* Vim9: not all command modifiers are tested.
* Vim9: not all command modifiers are tested.
- apparmor.vim: update from AppArmor 3.0
- add capability checkpoint_restore
==== zypp-plugin ====
- singlespec in Tumbleweed must support multiple python3 flavors
in the future gh#openSUSE/python-rpm-macros#66