Packages changed: ImageMagick (7.0.8.41 -> 7.0.8.42) alpine binutils gstreamer-plugins-base java-11-openjdk kernel-source (5.0.9 -> 5.0.10) libksysguard5 libselinux pcsc-lite perl-Template-Toolkit (2.28 -> 2.29) pesign purple-carbons (0.2.1 -> 0.2.2) qpdf (8.4.0 -> 8.4.1) qqc2-desktop-style (5.56.0 -> 5.57.0) shotwell (0.30.2 -> 0.30.4) tmux (2.8 -> 2.9) transactional-update (2.14.1 -> 2.14.2) xfce4-panel-plugin-datetime (0.7.0 -> 0.7.1) yast2-trans (84.87.20190419.dc2675f07e -> 84.87.20190427.78ab7fa405) === Details === ==== ImageMagick ==== Version update (7.0.8.41 -> 7.0.8.42) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagick++-7_Q16HDRI4 libMagickCore-7_Q16HDRI6 libMagickWand-7_Q16HDRI6 perl-PerlMagick - version update to 7.0.8.42 * Fixed a number of issues (reference https://imagemagick.org/discourse-server/viewforum.php?f=3). * Fixed a number of issues (reference https://github.com/ImageMagick/ImageMagick/issues). ==== alpine ==== Subpackages: pico - Fix initialisation of encrypted password store (bsc#1133597, alpine-pinepw.patch). ==== binutils ==== Subpackages: binutils-devel - Add binutils-pr24486.patch: fix for PR24486 (boo#1133131 boo#1133232). ==== gstreamer-plugins-base ==== Subpackages: gstreamer-plugins-base-lang libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 typelib-1_0-GstAudio-1_0 typelib-1_0-GstPbutils-1_0 typelib-1_0-GstTag-1_0 typelib-1_0-GstVideo-1_0 - Added: 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch which fixes: https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384 "Segfault since 1.16" which also occurs in 1.14.4. ==== java-11-openjdk ==== Subpackages: java-11-openjdk-headless - Require update-ca-certificates by the headless subpackage (bsc#1131378) - Removed patch: * java11-improved-fonts.patch + broken with the recent changes in font rendering ==== kernel-source ==== Version update (5.0.9 -> 5.0.10) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms kernel-vanilla - Linux 5.0.10 (bnc#1012628). - bonding: fix event handling for stacked bonds (bnc#1012628). - failover: allow name change on IFF_UP slave interfaces (bnc#1012628). - net: atm: Fix potential Spectre v1 vulnerabilities (bnc#1012628). - net: bridge: fix per-port af_packet sockets (bnc#1012628). - net: bridge: multicast: use rcu to access port list from br_multicast_start_querier (bnc#1012628). - net: fec: manage ahb clock in runtime pm (bnc#1012628). - net: Fix missing meta data in skb with vlan packet (bnc#1012628). - net: fou: do not use guehdr after iptunnel_pull_offloads in gue_udp_recv (bnc#1012628). - tcp: tcp_grow_window() needs to respect tcp_space() (bnc#1012628). - team: set slave to promisc if team is already in promisc mode (bnc#1012628). - tipc: missing entries in name table of publications (bnc#1012628). - vhost: reject zero size iova range (bnc#1012628). - ipv4: recompile ip options in ipv4_link_failure (bnc#1012628). - ipv4: ensure rcu_read_lock() in ipv4_link_failure() (bnc#1012628). - mlxsw: spectrum_switchdev: Add MDB entries in prepare phase (bnc#1012628). - mlxsw: core: Do not use WQ_MEM_RECLAIM for EMAD workqueue (bnc#1012628). - mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw ordered workqueue (bnc#1012628). - mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw workqueue (bnc#1012628). - mlxsw: spectrum_router: Do not check VRF MAC address (bnc#1012628). - net: thunderx: raise XDP MTU to 1508 (bnc#1012628). - net: thunderx: don't allow jumbo frames with XDP (bnc#1012628). - net/tls: fix the IV leaks (bnc#1012628). - net/tls: don't leak partially sent record in device mode (bnc#1012628). - net: strparser: partially revert "strparser: Call skb_unclone conditionally" (bnc#1012628). - net/tls: fix build without CONFIG_TLS_DEVICE (bnc#1012628). - net: bridge: fix netlink export of vlan_stats_per_port option (bnc#1012628). - net/mlx5e: XDP, Avoid checksum complete when XDP prog is loaded (bnc#1012628). - net/mlx5e: Protect against non-uplink representor for encap (bnc#1012628). - net/mlx5e: Switch to Toeplitz RSS hash by default (bnc#1012628). - net/mlx5e: Rx, Fixup skb checksum for packets with tail padding (bnc#1012628). - net/mlx5e: Rx, Check ip headers sanity (bnc#1012628). - Revert "net/mlx5e: Enable reporting checksum unnecessary also for L3 packets" (bnc#1012628). - net/mlx5: FPGA, tls, hold rcu read lock a bit longer (bnc#1012628). - net/tls: prevent bad memory access in tls_is_sk_tx_device_offloaded() (bnc#1012628). - net/mlx5: FPGA, tls, idr remove on flow delete (bnc#1012628). - route: Avoid crash from dereferencing NULL rt->from (bnc#1012628). - nfp: flower: replace CFI with vlan present (bnc#1012628). - nfp: flower: remove vlan CFI bit from push vlan action (bnc#1012628). - sch_cake: Use tc_skb_protocol() helper for getting packet protocol (bnc#1012628). - sch_cake: Make sure we can write the IP header before changing DSCP bits (bnc#1012628). - NFC: nci: Add some bounds checking in nci_hci_cmd_received() (bnc#1012628). - nfc: nci: Potential off by one in ->pipes[] array (bnc#1012628). - sch_cake: Simplify logic in cake_select_tin() (bnc#1012628). - CIFS: keep FileInfo handle live during oplock break (bnc#1012628). - cifs: Fix lease buffer length error (bnc#1012628). - cifs: Fix use-after-free in SMB2_write (bnc#1012628). - cifs: Fix use-after-free in SMB2_read (bnc#1012628). - cifs: fix handle leak in smb2_query_symlink() (bnc#1012628). - fs/dax: Deposit pagetable even when installing zero page (bnc#1012628). - KVM: x86: Don't clear EFER during SMM transitions for 32-bit vCPU (bnc#1012628). - KVM: x86: svm: make sure NMI is injected after nmi_singlestep (bnc#1012628). - Staging: iio: meter: fixed typo (bnc#1012628). - staging: iio: ad7192: Fix ad7193 channel address (bnc#1012628). - iio: gyro: mpu3050: fix chip ID reading (bnc#1012628). - iio/gyro/bmg160: Use millidegrees for temperature scale (bnc#1012628). - iio:chemical:bme680: Fix, report temperature in millidegrees (bnc#1012628). - iio:chemical:bme680: Fix SPI read interface (bnc#1012628). - iio: cros_ec: Fix the maths for gyro scale calculation (bnc#1012628). - iio: ad_sigma_delta: select channel when reading register (bnc#1012628). - iio: dac: mcp4725: add missing powerdown bits in store eeprom (bnc#1012628). - iio: Fix scan mask selection (bnc#1012628). - iio: adc: at91: disable adc channel interrupt in timeout case (bnc#1012628). - iio: core: fix a possible circular locking dependency (bnc#1012628). - io: accel: kxcjk1013: restore the range after resume (bnc#1012628). - staging: most: core: use device description as name (bnc#1012628). - staging: comedi: vmk80xx: Fix use of uninitialized semaphore (bnc#1012628). - staging: comedi: vmk80xx: Fix possible double-free of - >usb_rx_buf (bnc#1012628). - staging: comedi: ni_usb6501: Fix use of uninitialized mutex (bnc#1012628). - staging: comedi: ni_usb6501: Fix possible double-free of - >usb_rx_buf (bnc#1012628). - ALSA: hda/realtek - add two more pin configuration sets to quirk table (bnc#1012628). - ALSA: core: Fix card races between register and disconnect (bnc#1012628). - Input: elan_i2c - add hardware ID for multiple Lenovo laptops (bnc#1012628). - serial: sh-sci: Fix HSCIF RX sampling point adjustment (bnc#1012628). - serial: sh-sci: Fix HSCIF RX sampling point calculation (bnc#1012628). - vt: fix cursor when clearing the screen (bnc#1012628). - scsi: core: set result when the command cannot be dispatched (bnc#1012628). - Revert "scsi: fcoe: clear FC_RP_STARTED flags when receiving a LOGO" (bnc#1012628). - i3c: dw: Fix dw_i3c_master_disable controller by using correct mask (bnc#1012628). - i3c: Fix the verification of random PID (bnc#1012628). - Revert "svm: Fix AVIC incomplete IPI emulation" (bnc#1012628). - coredump: fix race condition between mmget_not_zero()/get_task_mm() and core dumping (bnc#1012628). - x86/kvm: move kvm_load/put_guest_xcr0 into atomic context (bnc#1012628). - ipmi: fix sleep-in-atomic in free_user at cleanup SRCU user->release_barrier (bnc#1012628). - crypto: x86/poly1305 - fix overflow during partial reduction (bnc#1012628). - drm/ttm: fix out-of-bounds read in ttm_put_pages() v2 (bnc#1012628). - arm64: futex: Restore oldval initialization to work around buggy compilers (bnc#1012628). - x86/kprobes: Verify stack frame on kretprobe (bnc#1012628). - kprobes: Mark ftrace mcount handler functions nokprobe (bnc#1012628). - x86/kprobes: Avoid kretprobe recursion bug (bnc#1012628). - kprobes: Fix error check when reusing optimized probes (bnc#1012628). - rt2x00: do not increment sequence number while re-transmitting (bnc#1012628). - mac80211: do not call driver wake_tx_queue op during reconfig (bnc#1012628). - s390/mem_detect: Use IS_ENABLED(CONFIG_BLK_DEV_INITRD) (bnc#1012628). - drm/amdgpu/gmc9: fix VM_L2_CNTL3 programming (bnc#1012628). - perf/x86/amd: Add event map for AMD Family 17h (bnc#1012628). - x86/cpu/bugs: Use __initconst for 'const' init data (bnc#1012628). - perf/x86: Fix incorrect PEBS_REGS (bnc#1012628). - x86/speculation: Prevent deadlock on ssb_state::lock (bnc#1012628). - timers/sched_clock: Prevent generic sched_clock wrap caused by tick_freeze() (bnc#1012628). - nfit/ars: Remove ars_start_flags (bnc#1012628). - nfit/ars: Introduce scrub_flags (bnc#1012628). - nfit/ars: Allow root to busy-poll the ARS state machine (bnc#1012628). - nfit/ars: Avoid stale ARS results (bnc#1012628). - tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete (bnc#1012628). - tpm: Fix the type of the return value in calc_tpm2_event_size() (bnc#1012628). - Revert "kbuild: use -Oz instead of -Os when using clang" (bnc#1012628). - sched/fair: Limit sched_cfs_period_timer() loop to avoid hard lockup (bnc#1012628). - tpm: fix an invalid condition in tpm_common_poll (bnc#1012628). - mt76x02: avoid status_list.lock and sta->rate_ctrl_lock dependency (bnc#1012628). - device_cgroup: fix RCU imbalance in error case (bnc#1012628). - perf/ring_buffer: Fix AUX record suppression (bnc#1012628). - mm/memory_hotplug: do not unlock after failing to take the device_hotplug_lock (bnc#1012628). - mm/vmstat.c: fix /proc/vmstat format for CONFIG_DEBUG_TLBFLUSH=y CONFIG_SMP=n (bnc#1012628). - ALSA: info: Fix racy addition/deletion of nodes (bnc#1012628). - percpu: stop printing kernel addresses (bnc#1012628). - commit 048e1d2 - kernel/sysctl.c: fix out-of-bounds access when setting file-max (kasan). - commit 09ca824 ==== libksysguard5 ==== Subpackages: libksysguard5-helper libksysguard5-lang - No Qt5WebEngineWidgets on riscv64 ==== libselinux ==== Subpackages: libselinux1 libselinux1-32bit selinux-tools - Disable LTO (boo#1133244). ==== pcsc-lite ==== Subpackages: libpcsclite1 - bsc#1130588: Require shadow instead of old pwdutils ==== perl-Template-Toolkit ==== Version update (2.28 -> 2.29) - updated to 2.29 see /usr/share/doc/packages/perl-Template-Toolkit/Changes [#] Version 2.29 - 29th April 2019 [#]------------------------------------------------------------------------ * G. Flohr fixed multiple weaken cyclic reference [#]----------------------------------------------------------------------- ==== pesign ==== - bsc#1130588: Require shadow instead of old pwdutils ==== purple-carbons ==== Version update (0.2.1 -> 0.2.2) - Update to version 0.2.2: * Use JabberStream to account's domain instead of parsing the username * Make sure to not edit the client capabilities while connected * Do not set any pointers to null while processing (should play nicer with other plugins) * Makefile improvements ==== qpdf ==== Version update (8.4.0 -> 8.4.1) - Update to version 8.4.1 * See included ChangeLog file for the complete changelog ==== qqc2-desktop-style ==== Version update (5.56.0 -> 5.57.0) - Update to 5.57.0 * New feature release * For more details please see: * https://www.kde.org/announcements/kde-frameworks-5.57.0.php - Changes since 5.56.0: * the plasma desktop style supports icon coloring * [SpinBox] Improve mouse wheel behavior * add a bit of padding in ToolBars * fix RoundButton icons * scrollbar based padding on all delegates * look for a scrollview to take its scrollbar for margins ==== shotwell ==== Version update (0.30.2 -> 0.30.4) Subpackages: shotwell-lang - Update to version 0.30.4: + Fix building against GExiv2 0.12 and later. + Fix camera fall-back icon. + Fix icon resource fall-backs. + Fix issue with ACDSEE hierarchical tags. + Fix compile issue with recent vala. + Fix focus issue in slideshow. + Updated translations. - Drop shotwell-Adapt-to-gexiv2-changes.patch: Fixed upstream. ==== tmux ==== Version update (2.8 -> 2.9) - Update to version 2.9 * Add format variables for the default formats in the various modes (tree_mode_format and so on) and add a -a flag to display-message to list variables with values. * Add a -v flag to display-message to show verbose messages as the format is parsed, this allows formats to be debugged * Add support for HPA (\033[`). * Add support for origin mode (\033[?6h). * No longer clear history on RIS. * Extend the #[] style syntax and use that together with previous format changes to allow the status line to be entirely configured with a single option. * Add E: and T: format modifiers to expand a format twice (useful to expand the value of an option). * The individual -fg, -bg and -attr options have been removed; they were superseded by -style options in tmux 1.9. * Add -b to display-panes like run-shell. * Handle UTF-8 in word-separators option. * New "terminal" colour allowing options to use the terminal default colour rather than inheriting the default from a parent option. * Do not move the cursor in copy mode when the mouse wheel is used. * Use the same working directory rules for jobs as new windows rather than always starting in the user's home. * Allow panes to be one line or column in size. * Go to last line when goto-line number is out of range in copy mode. * Yank previously cut text if any with C-y in the command prompt, only use the buffer if no text has been cut. * Add q: format modifier to quote shell special characters. * Add -Z to find-window. * Support for windows larger than the client. This adds two new options, window-size and default-size, and a new command, resize-window. The force-width and force-height options and the session_width and session_height formats have been removed. - Drop fix-cve201819387.patch, issue_1549.diff: Fixed upstream. ==== transactional-update ==== Version update (2.14.1 -> 2.14.2) Subpackages: transactional-update-zypp-config - Update to version 2.14.2 - Prevent unnecessary error message on systems not installed with YaST (e.g. KIWI) ==== xfce4-panel-plugin-datetime ==== Version update (0.7.0 -> 0.7.1) Subpackages: xfce4-panel-plugin-datetime-lang - Update to version 0.7.1 * Removed the frame around the calendar popup to simplify appearance * Spacing improvements in the preferences dialog (bxo#14662) * Fixed build warnings * Updated translations ==== yast2-trans ==== Version update (84.87.20190419.dc2675f07e -> 84.87.20190427.78ab7fa405) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en yast2-trans-en_GB yast2-trans-en_US yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20190427.78ab7fa405: * Translated using Weblate (Slovak) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Slovak) * Translated using Weblate (Indonesian) * Translated using Weblate (Indonesian) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Japanese) * Translated using Weblate (Italian) * Translated using Weblate (German) * Translated using Weblate (Dutch) * Translated using Weblate (Chinese (Taiwan)) * Translated using Weblate (Arabic) * Translated using Weblate (Indonesian) * Translated using Weblate (Czech) * Translated using Weblate (German) * Translated using Weblate (Indonesian) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Hungarian) * Translated using Weblate (French) * Translated using Weblate (Dutch) * Translated using Weblate (Indonesian) * Translated using Weblate (Indonesian) * Translated using Weblate (Indonesian) * Translated using Weblate (Spanish) * Translated using Weblate (Indonesian) * Translated using Weblate (Indonesian) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Indonesian) * Translated using Weblate (German) * Translated using Weblate (Chinese (China)) * Translated using Weblate (Catalan) * Translated using Weblate (German) * Translated using Weblate (Catalan) * Translated using Weblate (Indonesian) * Translated using Weblate (Albanian) * Translated using Weblate (Spanish) * New POT for text domain 'storage'. * Translated using Weblate (Spanish) * New POT for text domain 'network'. * New POT for text domain 'storage'. * Translated using Weblate (Czech) * Translated using Weblate (Chinese (China))