Packages changed:
  ImageMagick (7.0.10.31 -> 7.0.10.33)
  MozillaFirefox (80.0 -> 81.0.1)
  MozillaThunderbird (78.3.1 -> 78.3.2)
  alsa
  alsa-ucm-conf
  at (3.1.23 -> 3.2.1)
  bash
  bash-completion
  busybox
  ca-certificates (2+git20200129.d1a437d -> 2+git20201002.34daf7f)
  chrony (3.5 -> 3.5.1)
  expat (2.2.9 -> 2.2.10)
  gimp (2.10.20 -> 2.10.22)
  glib2 (2.64.5 -> 2.64.6)
  gnome-bluetooth (3.34.2 -> 3.34.3)
  inkscape
  inn (2.6.2 -> 2.6.3)
  iproute2
  kdeconnect-kde
  kernel-firmware (20200916 -> 20201005)
  kernel-source (5.8.12 -> 5.8.14)
  kismet (2020_09_R3 -> 2020_09_R4)
  libmbim (1.24.2 -> 1.24.4)
  libproxy
  libproxy-plugins
  libreoffice (7.0.1.2 -> 7.0.2.2)
  libsolv
  libva (2.8.0 -> 2.9.0)
  libva-gl (2.8.0 -> 2.9.0)
  libvirt (6.7.0 -> 6.8.0)
  libwacom (1.3 -> 1.5)
  libzypp (17.25.1 -> 17.25.2)
  luit (20150706 -> 20201003)
  memcached (1.6.6 -> 1.6.7)
  myspell-dictionaries (20191219 -> 20201005)
  nodejs14 (14.12.0 -> 14.13.0)
  numactl (2.0.13 -> 2.0.14)
  openblas_pthreads
  p11-kit
  patterns-base
  perl-CGI (4.50 -> 4.51)
  perl-File-Listing (6.04 -> 6.11)
  perl-XML-Writer (0.625 -> 0.900)
  php7 (7.4.10 -> 7.4.11)
  popt
  procps
  python-libvirt-python (6.7.0 -> 6.8.0)
  python-mailman
  rdma-core (27.1 -> 31.0)
  rubygem-gem2rpm
  rubygem-vagrant_cloud (3.0.0 -> 2.0.3)
  spice
  spice-gtk
  strace (5.8 -> 5.9)
  sysuser-tools
  vala (0.48.10 -> 0.48.11)
  webkit2gtk3
  wpa_supplicant
  xkeyboard-config (2.30 -> 2.31)
  yelp (3.36.0 -> 3.36.1)

=== Details ===

==== ImageMagick ====
Version update (7.0.10.31 -> 7.0.10.33)
Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagick++-7_Q16HDRI4 libMagickCore-7_Q16HDRI7 libMagickWand-7_Q16HDRI7

- version update to 7.0.10.33
  * miscellaneous clean-up.
  * enable WMF for module build.
  * writing PDF requires a seekable stream.

==== MozillaFirefox ====
Version update (80.0 -> 81.0.1)
Subpackages: MozillaFirefox-translations-common

- Mozilla Firefox 81.0.1
  * https://www.mozilla.org/en-US/firefox/81.0.1/releasenotes/
- remove obsolete python2 build requires
- Increase disk requirements in _constraints to match current needs
- Mozilla Firefox 81.0
  * https://www.mozilla.org/en-US/firefox/81.0/releasenotes
  MFSA 2020-42 (bsc#1176756)
  * CVE-2020-15675 (bmo#1654211)
    Use-After-Free in WebGL
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3
  * CVE-2020-15674 (bmo#1656063, bmo#1656064, bmo#1656067, bmo#1660293)
    Memory safety bugs fixed in Firefox 81
- requires
  NSPR 4.28
  NSS 3.56
- removed obsolete patches
  * mozilla-system-nspr.patch
  * mozilla-bmo1661715.patch
  * mozilla-silence-no-return-type.patch
- skip post-build-checks for 15.0 and 15.1
- add revert-795c8762b16b.patch to fix LTO builds with gcc
  (related to bmo#1644409)
- require python3-curses as workaround to fix i586 build
- Use %limit_build macro again for aarch64 and armv7, instead of
  the new memoryperjob _constraints to use more workers
- add mozilla-bmo1661715.patch to fix Flash plugin
- Mozilla Firefox 80.0.1: Bug fixes:
  * Fixed a performance regression when encountering new intermediate
    CA certificates (bmo#1661543)
  * Fixed crashes possibly related to GPU resets (bmo#1627616)
  * Fixed rendering on some sites using WebGL (bmo#1659225)
  * Fixed the zoom-in keyboard shortcut on Japanese language builds
    (bmo#1661895)
  * Fixed download issues related to extensions and cookies
    (bmo#1655190)
- added mozilla-silence-no-return-type.patch
- more whitelisting (/dev/random) for sandbox in relation to FIPS
  (bsc#1174284)
- improve langpack builds to use dedicated objdirs and make it
  parallel again

==== MozillaThunderbird ====
Version update (78.3.1 -> 78.3.2)
Subpackages: MozillaThunderbird-translations-common

- Mozilla Thunderbird 78.3.2
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes

==== alsa ====
Subpackages: libasound2 libasound2-32bit libatopology2

- Placeholder for SLE15-SP3 sync (bsc#1171246):
  the actual fix is found in alsa-ucm-conf updates
- Enable topology support for riscv64

==== alsa-ucm-conf ====

- Disable HDA-Intel UCM conf due to a regression on openQA (the
  muted state as default)
- Update from alsa-ucm-conf git (commit 3048ff7b15a9):
  mainly for adding the support for sof-soundwire (bsc#1176200):
  0001-bytcr-rt5640-Fix-DMIC1-not-working-when-connected-ov.patch
  0002-bytcr-rt5651-Fix-high-noise-level-soft-input-on-DMIC.patch
  0003-chtrt5645-Add-ASUSTeKCOMPUTERINC.-T101HA-1.0.conf-sy.patch
  0004-sof-hda-dsp-don-t-fail-if-Auto-Mute-control-is-not-p.patch
  0005-ucm2-use-Include-Syntax-3.patch
  0006-chtrt5645-merge-all-possible-configurations-to-HiFi..patch
  0007-cht-bsw-rt5672-merge-all-possible-configurations-to-.patch
  0008-chtnau8824-merge-all-possible-configurations-to-HiFi.patch
  0009-ucm.conf-add-support-for-the-kernel-module-name-tree.patch
  0010-sof-hda-dsp-make-Headphone-Playback-Switch-condition.patch
  0011-sof-hda-dsp-add-initial-kcontrol-values.patch
  0012-sof-hda-dsp-make-the-boot-init-optional-for-all-cont.patch
  0013-bdw-rt5677-add-support-for-legacy-and-SOF-drivers.patch
  0014-broadwell-rt286-add-SOF-support.patch
  0015-sof-soundwire-initial-UCM2-version.patch
  0016-sof-soundwire-cleanups-recommended-by-the-ucm-valida.patch
  0017-sof-soundwire-rewrite-for-syntax-3.patch
  0018-sof-hda-dsp-fix-the-device-order-Hdmi-devices.patch
  0019-HDA-Intel-add-support-for-AMD-acp-microphone-devices.patch
  0020-DAISY-I2S-move-to-Samsung-snow-snow.conf.patch
  0021-DB410c-move-to-Qualcomm-apq8016-sbc.patch
  0022-DB820c-DB845c-move-to-Qualcomm-tree.patch
  0023-PAZ00-tegraalc5632-move-to-Tegra-alc5632-tree.patch
  0024-VEYRON-I2C-move-to-Rockchip-max98090-tree.patch
  0025-Pandaboard-ES-move-to-OMAP-abe-twl6040-tree.patch
  0026-GoogleNyan-move-to-Tegra-max98090.patch
  0027-SDP4430-Move-to-OMAP-abe-twl6040-SDP4430-tree.patch
  0028-Fix-invalid-Regex-Type-in-various-Condition-blocks.patch
  0029-cht-bsw-rt5672-Add-Lenovo-Miix-2-10-specific-configu.patch
  0030-cht-bsw-rt5672-Add-Lenovo-ThinkPad-10-specific-confi.patch
  0031-cht-bsw-rt5672-Boost-ADC-volume-a-bit.patch
  0032-chtrt5645-Restore-stereo-sound-output-when-switching.patch
  0033-DB820c-Correctly-move-DB820c-to-Qualcomm-apq8096.patch
  0034-sof-hda-dsp-fixup-typo-in-Hdmi.conf.patch
  0035-sof-hda-dsp-use-sof-hda-dsp-Hdmi.conf.patch
  0036-hda-hdmi-add-HDMI4-HDMI5-HDMI6-devices.patch
  0037-update-ucm2-README.md-more-kernel-module-lookup-clar.patch
  0038-ucm2-Add-config-for-Rockchip-rk3399-gru-sound.patch
  0039-amd-renoir-acp-use-the-machine-driver-s-name-for-top.patch
  0040-amd-renoir-acp-Add-Syntax-3-in-the-module-lib-Linked.patch
  0041-Correct-conflicting-mic-in-max98090.patch
  0042-HDA-Intel-HiFi-dual-Fix-the-Rear-Mic-s-Jack-name.patch
  0043-USB-Audio-Dell-WD15-Dock-make-input-and-output-volum.patch
  0044-Rockchip-rk3399-gru-sound-remove-zero-PCM-subdevice.patch
  0045-ucm2-ucm.conf-fix-the-fix-the-sysfs-kernel-module-pa.patch
  0046-Revert-amd-renoir-acp-use-the-machine-driver-s-name-.patch
  0047-ucm2-module-rename-rk3399-gru-sound.conf-snd_soc_rk3.patch
  0048-ucm2-HDA-acp-add-Capture-simple-mixer-element-to-the.patch
  0049-HDA-Intel-only-add-the-acp-dmic-to-the-sound-card-wi.patch
  0050-Add-support-for-Lenovo-ThinkStation-P620-Main-Audio.patch
  0051-ucm2-Qualcomm-sdm845-fixes-HDMI-select-card-and-HiFi.patch

==== at ====
Version update (3.1.23 -> 3.2.1)

- Update to release 3.2.1
  * Print time of new job before the input of the commands.
  * Do not drop seconds on -t option.
  * Start using nice levels from 0 instead of 2.
  * Correctly handle DST when specifying a UTC time.
- Modernize specfile constructs / drop old ones.
- Do not silence errors from useradd/groupadd.
- Refreshed at-3.1.13-documentation-dir.patch,
  at-3.1.13-leak-fix.patch, at-3.1.13-massive_batch.patch,
  at-3.1.13-tomorrow.patch, at-3.1.14-joblist.patch,
  at-3.1.14-makefile-deps.patch,
  at-3.1.14-parse-suse-sysconfig.patch, at-3.1.14.patch,
  at-3.1.8-denylist.patch, at-3.1.8-jobdir-mtime.patch,
  at-atq-timeformat.patch, at-backport-old-privs.patch,
  at-piddir.patch, at-secure_getenv.patch for %autosetup.

==== bash ====
Subpackages: bash-doc bash-lang

- dot.profile: moved example for user specific LANG setting
  from .profile to .i18n (x11-tools package) skeleton file (boo#1158724)

==== bash-completion ====

- Convert to _multibuild. The pre_checkin.sh script was quite
  broken anyway and it was less effort to convert than to try to
  fix that one.
- Do not BuildRequire util-linux: there is no need to have this in
  the build root.
- Drop cmake BuildRequires: this is only here for the
  /usr/share/cmake directory ownership, which in turn even causes
  problems of left-over directories (e.g. install bash-completion,
  on a system without cmake, uninstall bash-completion,
  /usr/share/cmake remains left on the disk).

==== busybox ====
Subpackages: busybox-static

- Disable RPM builtin, did become pretty useless
- Disable popmaildir and mime utilities

==== ca-certificates ====
Version update (2+git20200129.d1a437d -> 2+git20201002.34daf7f)

- Update to version 2+git20201002.34daf7f:
  * Use relative symlink for /etc/ssl/certs (boo#1175340)

==== chrony ====
Version update (3.5 -> 3.5.1)
Subpackages: chrony-pool-openSUSE

- Adjust and rename the sysconfig file, so that it matches the
  expectations of chronyd.service (bsc#1173277).
- Update to 3.5.1:
  * Create new file when writing pidfile (CVE-2020-14367, bsc#1174911)

==== expat ====
Version update (2.2.9 -> 2.2.10)
Subpackages: libexpat-devel libexpat1 libexpat1-32bit

- Update to 2.2.10:
  * Bug fixes:
  - Fix undefined behavior during parsing caused by pointer
    arithmetic with NULL pointers
  - Fix reading uninitialized variable during parsing
  - xmlwf: Add missing check for malloc NULL return
  * Other changes:
  - xmlwf: Document exit codes in xmlwf manpage and exit with code 3
    (rather than code 1) for output errors when used with "-d DIRECTORY"
  - Autotools: Use -Werror while configure tests the compiler for
    supported compile flags to avoid false positives
  - Autotools: Improve handling of user (C|CPP|CXX|LD)FLAGS, e.g.
    ensure that they have the last word over flags added while
    running ./configure
  - CMake: Create libexpatw.{dll,so} and expatw.pc (with emphasis
    on suffix "w") with -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Detect and deny unsupported build combinations
    involving -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Install pre-compiled shipped xmlwf.1 manpage in case
    of -DEXPAT_BUILD_DOCS=OFF
  - CMake: Fix use of Expat by means of add_subdirectory
  - CMake: Keep expat target name constant at "expat" (i.e. refrain
    from using the target name to control build artifact filenames)
  - CMake: Expose man page compilation as target "xmlwf-manpage"
  - CMake: Introduce option EXPAT_BUILD_PKGCONFIG to control
    generation of pkg-config file "expat.pc"
  - CMake: Add minimalistic support for building binary packages
    with CMake target "package"; based on CPack
  - CMake: Add option -DEXPAT_OSSFUZZ_BUILD=(ON|OFF) with default
    OFF to build fuzzer code against OSS-Fuzz and related
    environment variable LIB_FUZZING_ENGINE
  - Fix testsuite for -DEXPAT_DTD=OFF and -DEXPAT_NS=OFF
  - Address compiler warnings
  - Address pngcheck warnings with doc/*.png images: Version info
    bumped from 7:11:6 to 7:12:6

==== gimp ====
Version update (2.10.20 -> 2.10.22)
Subpackages: gimp-lang gimp-plugin-aa libgimp-2_0-0 libgimpui-2_0-0

- Update to version 2.10.22:
  - Core:
  - Verbose version information (`gimp-2.10 -v` on command line,
    or debug output) now displays Flatpak related information
    when available. This is especially useful for debugging (such
    as the exact Flatpak build hash, the runtime version, the
    installed Flatpak extensions, permissions, etc.).
  - OpenCL settings has now been moved to the Playground tab in
    Preferences.
  - On stable builds, "Playground" tab is now visible in
    Preferences if any of the experimental features has been
    enabled, even without the CLI option `--show-playground`.
  - Tools:
  - "gegl:matting-levin" now the default engine of Foreground
    Select tool (when present, as it is an optional feature) as
    it performs a lot better.
  - GEGL operations now display a "Sample merged" checkbox in
    Tool Options. This will be used when the operation allows to
    pick a color (hence one can pick from the edited layer or
    from visible data).
  - "Sample merged" now defaults to being activated in Color
    Picker and GEGL tools as it seems the less confusing for
    beginners who don't know of the option yet (according to a
    small poll we ran).
  - User interface:
  - In GimpSpinButton, don't propagate Enter key-press events if
    updating the spin-button's value in response changes the
    entered text. This prevents confirming dialogs when hitting
    Enter after entering a math expression in size entries,
    updating their value instead.  Likewise, don't propagate
    Escape key-press events if a new value was entered, and
    restore the original value instead.
  - GimpMemSizeEntry improved to show appropriate binary prefixes
    (kibibyte, mebibyte and gibibyte) instead of decimal ones, to
    round properly when using higher units, and to not lose
    accuracy when possible when displaying in higher units.
  - Several of the biggest pages of the Preferences dialog are
    now scrollable, allowing the dialog to fit on smaller
    displays.
  - Plug-ins:
  - Add a new GIMP_EXPORT_NEEDS_CROP export capability, which
    causes gimp_export_image() to crop the exported image content
    to the image bounds; this is useful for formats that support
    layers, but have no concept of global image bounds, hence
    cropping is the only way to enforce the image bounds.  When
    showing the export dialog, give an option to either crop the
    layers to the image bounds, or to resize the image to fit the
    layers.
  - Content type `image/webp` is now recognized (and not only
    `image/x-webp` as both seem to be in used and this format is
    unfortunately not yet listed in IANA media types (so various
    content types are in use, no clear standard apparently).
  - DDS import is now a bit more permissive, allowing to load
    some files with invalid header flags regarding compression,
    while we are able to know the right compression from other
    flags. This allows to recover invalid DDS files exported by
    other software.
  - JPEG detection improved to be more generic and reliable.
  - HEIF support improvements:
  - AVIF importing and exporting added (requires libheif
    1.8.0+)
  - 10/12-bit importing and exporting now available for
    HEIC/AVIF
  - NCLX color profile import (link with LittleCMS)
  - Metadata support when importing
  - "Lossless" option is now called "Nearly lossless (YUV420
    format)" because this is actually what it is, hence
    previous naming was misleading.
  - TIFF support improvements:
  - Add an option to crop the layers to the image bounds when
    exporting individual layers (using GIMP_EXPORT_NEEDS_CROP),
    since TIFF has no concept of global image bounds otherwise.
    Cropping is enabled by default.
  - TIFF export will not override "DocumentName" metadata tag
    anymore.
  - Stop writing file paths into TIFF DocumentNames as file
    paths can contain confidential information such as
    usernames and directory structures, making the previous
    behaviour a potential privacy and security risk.
  - Fix a file descriptor leak case which may have prevented a
    file from being opened on Windows.
  - Multiple improvements in the PSP import plug-in:
  - support reading raster layers of PSP version > 6,
  - support reading 16-bit integer PSP files,
  - support reading grayscale and indexed PSP files,
  - support PSP images with zero-length layer names,
  - fix wrong layer offset of layers,
  - fix reading layer names with high bit ASCII characters,
  - fix incorrect loading of PSP images with uncompressed
    channel data,
  - fix reading of creator block data of PSP images,
  - better error messages describing yet unsupported features,
  - improve reader stability by always using the block/chunk
    length.
  - Spyrogimp now works on Grayscale images and clutters less the
    undo history.
  - "Orientation" metadata is now reset whether you accepted to
    rotate the image or not when importing an image.
  - XPM does not export a "None" (transparent) color when unused.
  - BMP always include color masks when exporting BMP with color
    space info, as mandated by BITMAPV5HEADER specification.
  - Debugging:
  - Add progressive performance logs: progressive logs contain
    complete information after each recorded sample, by writing
    partial address maps at each sample, containing all new
    addresses introduced by the sample.  This allows recording
    complete logs even in cases where they can't be properly
    terminated, such as when GIMP crashes or freezes in the
    middle of the log.  Progressive logs are disabled by default,
    since they potentially increase the sampling cost. They can
    be enabled through a toggle in the log file-dialog, or
    through GIMP_PERFORMANCE_LOG_PROGRESSIVE environment
    variable.  Performance log viewer can now process progressive
    performance logs too.
  - Allow controlling performance-log parameters through the UI.
  - Bug fixes: #2275, #2668, #2874, #3481, #3868, #4061, #4155,
    [#4328], #4505, #4536, #4560, #4816, #5043, #5069, #5208, #5219,
    [#5226], #5232, #5274, #5275, #5357, #5358, #5472, #5530, #5584,
    [#5592], #5623, #5630, #5651

==== glib2 ====
Version update (2.64.5 -> 2.64.6)
Subpackages: glib2-lang glib2-tools libgio-2_0-0 libgio-2_0-0-32bit libglib-2_0-0 libglib-2_0-0-32bit libgmodule-2_0-0 libgmodule-2_0-0-32bit libgobject-2_0-0 libgobject-2_0-0-32bit libgthread-2_0-0 libgthread-2_0-0-32bit

- Update to version 2.64.6:
  + Bugs fixed: glgo#GNOME/GLib#2194, glgo#GNOME/GLib#2209,
    glgo#GNOME/GLib!1633, glgo#GNOME/GLib!1634,
    glgo#GNOME/GLib!1656, glgo#GNOME/GLib!1659,
    glgo#GNOME/GLib!1666, glgo#GNOME/GLib!1672.
  + Updated translations.

==== gnome-bluetooth ====
Version update (3.34.2 -> 3.34.3)
Subpackages: gnome-bluetooth-lang libgnome-bluetooth13 typelib-1_0-GnomeBluetooth-1_0

- Update to version 3.34.3:
  + Fix problem with intermittent connection work-around when using
    the switch in the device properties.
  + Updated translations.

==== inkscape ====
Subpackages: inkscape-extensions-extra inkscape-extensions-gimp inkscape-lang

- Clean up constraints:
  * Remove ppc64le specific memory bound, use global 4GB limit.
  * Add memoryperjob constraint, some ppc64{,le} workers have
    a high core-to-memory ratio.

==== inn ====
Version update (2.6.2 -> 2.6.3)

- update to inn-2.6.3
  + Fixed the selection of the elliptic curve to use with OpenSSL 1.1.0 or
    later; NIST P-256 was enforced instead of using the most secure curve.
  + A new inn.conf parameter has been added to fine-tune the cipher suites
    to use with TLS 1.3:  the *tlsciphers13* now permits configuring them.
    A separate cipher suite configuration parameter is needed for TLS 1.3
    because TLS 1.3 cipher suites are not compatible with TLS 1.2, and
    vice-versa.  In order to avoid issues where legacy TLS 1.2 cipher
    suite configuration configured in the *tlsciphers* parameter would
    inadvertently disable all TLS 1.3 cipher suites, the inn.conf
    configuration has been separated out.
  + Fixed a regression since INN 2.6.1 that prevented articles with
    internationalized header fields (that is to say encoded in UTF-8) from
    being posted.
  + Support for Python 3 has been added to INN.  Embedded Python filtering
    and authentication hooks for innd and nnrpd can now use version 3.3.0
    or later of the Python interpreter.  In the 2.x series, version 2.3.0
    or later is still supported.
  + When configuring INN with the --with-python flag, the "PYTHON"
    environment variable, when set, is used to select the interpreter to
    embed.  Otherwise, it is searched in standard paths.
  + In case you change the Python interpreter to embed, make sure that the
    Python scripts you use are written in the expected syntax for that
    version of the Python interpreter.  Notably, buffer objects have been
    replaced with memoryview objects in Python 3, and UTF-8 encoding now
    really matters for string literals (Python 3 uses bytes and Unicode
    objects).
  + INN documentation and samples of Python hooks have been updated to
    provide more examples.
  + When a Python or Perl filter hook rejects an article, innd now
    mentions the reason in response to CHECK and TAKETHIS commands.
    Previously, the reason was given only for the IHAVE command.
  + nnrpd now properly logs the hostname of clients whose connection
    failed owing to an issue during the negotiation of a TLS session or
    high load average.
- renamed and refreshed inn-2.6.2.diff to inn-2.6.3.diff
- fix upstream URL
- (build)require openssl-devel and python-devel and build with
  - -with-python and --with-openssl support
- remove outdated/unknown configure options:
  - -enable-dual-socket, --enable-ipv6 and --with-etc-dir
- use 'Development/Languages/C and C++' as RPM group for the -devel
  package
- require appropriate -devel packages for -devel package installs

==== iproute2 ====

- Add 0001-ip-add-error-reporting-when-RTM_GETNSID-failed.patch

==== kdeconnect-kde ====
Subpackages: kdeconnect-kde-lang kdeconnect-kde-zsh-completion

- Add upstream patches to fix security issues in kdeconnect
  (CVE-2020-26164, boo#1176268):
  * 0001-Do-not-leak-the-local-user-in-the-device-name.patch
  * 0002-Fix-use-after-free-in-LanLinkProvider-connectError.patch
  * 0003-Limit-identity-packets-to-8KiB.patch
  * 0004-Do-not-let-lanlink-connections-stay-open-for-long-wi.patch
  * 0005-Don-t-brute-force-reading-the-socket.patch
  * 0006-Limit-number-of-connected-sockets-from-unpaired-devi.patch
  * 0007-Do-not-remember-more-than-a-few-identity-packets-at-.patch
  * 0008-Limit-the-ports-we-try-to-connect-to-to-the-port-ran.patch
  * 0009-Do-not-replace-connections-for-a-given-deviceId-if-t.patch

==== kernel-firmware ====
Version update (20200916 -> 20201005)
Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd

- Placeholder for SLE15-SP3 package sync:
  bsc#1143331, bsc#1160204, bsc#1154395 bsc#1155307, jsc#SLE-8379
- Update to version 20201005 (git commit 58d41d0facca):
  * ice: Add comms package file for Intel E800 series driver
  * copy-firmware: Always write Link: entries
  * amdgpu: update vega20 firmware for 20.40
  * amdgpu: update vega12 firmware for 20.40
  * amdgpu: update vega10 firmware for 20.40
  * amdgpu: update renoir firmware for 20.40
  * amdgpu: update raven2 firmware for 20.40
  * amdgpu: update raven firmware for 20.40
  * amdgpu: update picasso firmware for 20.40
  * amdgpu: update navi14 firmware for 20.40
  * amdgpu: update navi12 firmware for 20.40
  * amdgpu: update navi10 firmware for 20.40
  * linux-firmware: Add new VPDMA firmware 1b8.bin
  * QCA : Updated firmware files for WCN3991
- Drop the AMDGPU Picasso workaround (bsc#1174278)
- Update to version 20200928 (git commit b78a66c909c7):
  * linux-firmware: Update firmware for Cadence MHDP8546 DP bridge
  * linux-firmware: Update firmware patch for Intel Bluetooth 7265 (D1)
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.1312
  * linux-firmware: nvidia: move firmware symlinks to WHENCE
  * linux-firmware: move i915 firmware symlinks to WHENCE
  * linux-firmware: move iwlwifi-7265D-10.ucode symlink to WHENCE
  * linux-firmware: Update Marvell Switchdev firmware with ABI changes
- Force bzip2 compression for compatibility (boo#1176981):
  for keeping the compatibility with older distros (like Leap 15.1)
  that can't deal with lzma-compressed rpm files

==== kernel-source ====
Version update (5.8.12 -> 5.8.14)
Subpackages: kernel-default kernel-docs

- Update config files.
  Only run_oldconfig.sh to sync up.
- commit cea47bb
- Linux 5.8.14 (bsc#1012628).
- io_uring: always delete double poll wait entry on match
  (bsc#1012628).
- btrfs: fix filesystem corruption after a device replace
  (bsc#1012628).
- mmc: sdhci: Workaround broken command queuing on Intel GLK
  based IRBIS models (bsc#1012628).
- USB: gadget: f_ncm: Fix NDP16 datagram validation (bsc#1012628).
- Revert "usbip: Implement a match function to fix usbip"
  (bsc#1012628).
- usbcore/driver: Fix specific driver selection (bsc#1012628).
- usbcore/driver: Fix incorrect downcast (bsc#1012628).
- usbcore/driver: Accommodate usbip (bsc#1012628).
- gpio: siox: explicitly support only threaded irqs (bsc#1012628).
- gpio: mockup: fix resource leak in error path (bsc#1012628).
- gpio: tc35894: fix up tc35894 interrupt configuration
  (bsc#1012628).
- gpio: amd-fch: correct logic of GPIO_LINE_DIRECTION
  (bsc#1012628).
- clk: samsung: Keep top BPLL mux on Exynos542x enabled
  (bsc#1012628).
- clk: socfpga: stratix10: fix the divider for the
  emac_ptp_free_clk (bsc#1012628).
- scsi: iscsi: iscsi_tcp: Avoid holding spinlock while calling
  getpeername() (bsc#1012628).
- i2c: i801: Exclude device from suspend direct complete
  optimization (bsc#1012628).
- Input: i8042 - add nopnp quirk for Acer Aspire 5 A515
  (bsc#1012628).
- iio: adc: qcom-spmi-adc5: fix driver name (bsc#1012628).
- ftrace: Move RCU is watching check after recursion check
  (bsc#1012628).
- tracing: Fix trace_find_next_entry() accounting of temp buffer
  size (bsc#1012628).
- memstick: Skip allocating card when removing host (bsc#1012628).
- xen/events: don't use chip_data for legacy IRQs (bsc#1012628).
- clocksource/drivers/timer-gx6605s: Fixup counter reload
  (bsc#1012628).
- vboxsf: Fix the check for the old binary mount-arguments struct
  (bsc#1012628).
- mt76: mt7915: use ieee80211_free_txskb to free tx skbs
  (bsc#1012628).
- libbpf: Remove arch-specific include path in Makefile
  (bsc#1012628).
- drivers/net/wan/hdlc_fr: Add needed_headroom for PVC devices
  (bsc#1012628).
- Revert "wlcore: Adding suppoprt for IGTK key in wlcore driver"
  (bsc#1012628).
- drm/sun4i: mixer: Extend regmap max_register (bsc#1012628).
- hv_netvsc: Cache the current data path to avoid duplicate call
  and message (bsc#1012628).
- net: dec: de2104x: Increase receive ring size for Tulip
  (bsc#1012628).
- rndis_host: increase sleep time in the query-response loop
  (bsc#1012628).
- nvme-pci: disable the write zeros command for Intel 600P/P3100
  (bsc#1012628).
- nvme-core: get/put ctrl and transport module in
  nvme_dev_open/release() (bsc#1012628).
- fuse: fix the ->direct_IO() treatment of iov_iter (bsc#1012628).
- drivers/net/wan/lapbether: Make skb->protocol consistent with
  the header (bsc#1012628).
- drivers/net/wan/hdlc: Set skb->protocol before transmitting
  (bsc#1012628).
- mac80211: Fix radiotap header channel flag for 6GHz band
  (bsc#1012628).
- mac80211: do not allow bigger VHT MPDUs than the hardware
  supports (bsc#1012628).
- tracing: Make the space reserved for the pid wider
  (bsc#1012628).
- tools/io_uring: fix compile breakage (bsc#1012628).
- io_uring: mark statx/files_update/epoll_ctl as non-SQPOLL
  (bsc#1012628).
- cpuidle: psci: Fix suspicious RCU usage (bsc#1012628).
- spi: fsl-espi: Only process interrupts for expected events
  (bsc#1012628).
- net: dsa: felix: fix some key offsets for IP4_TCP_UDP VCAP
  IS2 entries (bsc#1012628).
- nvme-pci: fix NULL req in completion handler (bsc#1012628).
- nvme-fc: fail new connections to a deleted host or remote port
  (bsc#1012628).
- scripts/kallsyms: skip ppc compiler stub *.long_branch.* /
  * .plt_branch.* (bsc#1012628).
- gpio: sprd: Clear interrupt when setting the type as edge
  (bsc#1012628).
- phy: ti: am654: Fix a leak in serdes_am654_probe()
  (bsc#1012628).
- pinctrl: mvebu: Fix i2c sda definition for 98DX3236
  (bsc#1012628).
- nfs: Fix security label length not being reset (bsc#1012628).
- NFSv4.2: fix client's attribute cache management for
  copy_file_range (bsc#1012628).
- pNFS/flexfiles: Ensure we initialise the mirror bsizes correctly
  on read (bsc#1012628).
- clk: tegra: Always program PLL_E when enabled (bsc#1012628).
- clk: tegra: Fix missing prototype for
  tegra210_clk_register_emc() (bsc#1012628).
- dmaengine: dmatest: Prevent to run on misconfigured channel
  (bsc#1012628).
- clk: samsung: exynos4: mark 'chipid' clock as CLK_IGNORE_UNUSED
  (bsc#1012628).
- scsi: target: Fix lun lookup for TARGET_SCF_LOOKUP_LUN_FROM_TAG
  case (bsc#1012628).
- iommu/exynos: add missing put_device() call in
  exynos_iommu_of_xlate() (bsc#1012628).
- gpio: pca953x: Fix uninitialized pending variable (bsc#1012628).
- gpio/aspeed-sgpio: enable access to all 80 input & output sgpios
  (bsc#1012628).
- gpio/aspeed-sgpio: don't enable all interrupts by default
  (bsc#1012628).
- gpio: aspeed: fix ast2600 bank properties (bsc#1012628).
- i2c: cpm: Fix i2c_ram structure (bsc#1012628).
- i2c: npcm7xx: Clear LAST bit after a failed transaction
  (bsc#1012628).
- Input: trackpoint - enable Synaptics trackpoints (bsc#1012628).
- blk-mq: call commit_rqs while list empty but error happen
  (bsc#1012628).
- scripts/dtc: only append to HOST_EXTRACFLAGS instead of
  overwriting (bsc#1012628).
- autofs: use __kernel_write() for the autofs pipe writing
  (bsc#1012628).
- pinctrl: qcom: sm8250: correct sdc2_clk (bsc#1012628).
- pinctrl: mediatek: check mtk_is_virt_gpio input parameter
  (bsc#1012628).
- gpio: pca953x: Correctly initialize registers 6 and 7 for
  PCA957x (bsc#1012628).
- iommu/amd: Fix the overwritten field in IVMD header
  (bsc#1012628).
- pipe: remove pipe_wait() and fix wakeup race with splice
  (bsc#1012628).
- random32: Restore __latent_entropy attribute on net_rand_state
  (bsc#1012628).
- gpiolib: Fix line event handling in syscall compatible mode
  (bsc#1012628).
- drm/i915/gvt: Fix port number for BDW on EDID region setup
  (bsc#1012628).
- scsi: sd: sd_zbc: Fix handling of host-aware ZBC disks
  (bsc#1012628).
- scsi: sd: sd_zbc: Fix ZBC disk initialization (bsc#1012628).
- epoll: do not insert into poll queues until all sanity checks
  are done (bsc#1012628).
- epoll: replace ->visited/visited_list with generation count
  (bsc#1012628).
- epoll: EPOLL_CTL_ADD: close the race in decision to take fast
  path (bsc#1012628).
- ep_create_wakeup_source(): dentry name can change under
  you.. (bsc#1012628).
- commit e882d6e
- platform/x86: intel-vbtn: Switch to an allow-list for
  SW_TABLET_MODE reporting (bsc#1175599).
- commit 5672f81
- drm/amdgpu: restore proper ref count in
  amdgpu_display_crtc_set_config (git-fixes).
- commit 08db7a3
- Linux 5.8.13 (bsc#1012628).
- device_cgroup: Fix RCU list debugging warning (bsc#1012628).
- ASoC: pcm3168a: ignore 0 Hz settings (bsc#1012628).
- ASoC: wm8994: Skip setting of the WM8994_MICBIAS register for
  WM1811 (bsc#1012628).
- ASoC: wm8994: Ensure the device is resumed in wm89xx_mic_detect
  functions (bsc#1012628).
- ASoC: Intel: bytcr_rt5640: Add quirk for MPMAN Converter9 2-in-1
  (bsc#1012628).
- clk: versatile: Add of_node_put() before return statement
  (bsc#1012628).
- RISC-V: Take text_mutex in ftrace_init_nop() (bsc#1012628).
- i2c: aspeed: Mask IRQ status to relevant bits (bsc#1012628).
- s390/init: add missing __init annotations (bsc#1012628).
- lockdep: fix order in trace_hardirqs_off_caller() (bsc#1012628).
- EDAC/ghes: Check whether the driver is on the safe list
  correctly (bsc#1012628).
- drm/amdkfd: fix a memory leak issue (bsc#1012628).
- drm/amd/display: Don't use DRM_ERROR() for DTM add topology
  (bsc#1012628).
- drm/amd/display: update nv1x stutter latencies (bsc#1012628).
- drm/amdgpu/dc: Require primary plane to be enabled whenever
  the CRTC is (bsc#1012628).
- drm/amd/display: Don't log hdcp module warnings in dmesg
  (bsc#1012628).
- objtool: Fix noreturn detection for ignored functions
  (bsc#1012628).
- i2c: mediatek: Send i2c master code at more than 1MHz
  (bsc#1012628).
- riscv: Fix Kendryte K210 device tree (bsc#1012628).
- ieee802154: fix one possible memleak in ca8210_dev_com_init
  (bsc#1012628).
- ieee802154/adf7242: check status of adf7242_read_reg
  (bsc#1012628).
- clocksource/drivers/h8300_timer8: Fix wrong return value in
  h8300_8timer_init() (bsc#1012628).
- mwifiex: Increase AES key storage size to 256 bits
  (bsc#1012628).
- batman-adv: bla: fix type misuse for backbone_gw hash indexing
  (bsc#1012628).
- libbpf: Fix build failure from uninitialized variable warning
  (bsc#1012628).
- atm: eni: fix the missed pci_disable_device() for eni_init_one()
  (bsc#1012628).
- batman-adv: mcast/TT: fix wrongly dropped or rerouted packets
  (bsc#1012628).
- netfilter: ctnetlink: add a range check for l3/l4 protonum
  (bsc#1012628).
- netfilter: ctnetlink: fix mark based dump filtering regression
  (bsc#1012628).
- netfilter: conntrack: nf_conncount_init is failing with IPv6
  disabled (bsc#1012628).
- netfilter: nft_meta: use socket user_ns to retrieve skuid and
  skgid (bsc#1012628).
- mac802154: tx: fix use-after-free (bsc#1012628).
- bpf: Fix clobbering of r2 in bpf_gen_ld_abs (bsc#1012628).
- tools/libbpf: Avoid counting local symbols in ABI check
  (bsc#1012628).
- drm/vc4/vc4_hdmi: fill ASoC card owner (bsc#1012628).
- net: qed: Disable aRFS for NPAR and 100G (bsc#1012628).
- net: qede: Disable aRFS for NPAR and 100G (bsc#1012628).
- net: qed: RDMA personality shouldn't fail VF load (bsc#1012628).
- igc: Fix wrong timestamp latency numbers (bsc#1012628).
- igc: Fix not considering the TX delay for timestamps
  (bsc#1012628).
- drm/sun4i: sun8i-csc: Secondary CSC register correction
  (bsc#1012628).
- spi: spi-fsl-dspi: use XSPI mode instead of DMA for DPAA2 SoCs
  (bsc#1012628).
- RDMA/core: Fix ordering of CQ pool destruction (bsc#1012628).
- batman-adv: Add missing include for in_interrupt()
  (bsc#1012628).
- xsk: Fix number of pinned pages/umem size discrepancy
  (bsc#1012628).
- nvme-tcp: fix kconfig dependency warning when !CRYPTO
  (bsc#1012628).
- batman-adv: mcast: fix duplicate mcast packets in BLA backbone
  from LAN (bsc#1012628).
- batman-adv: mcast: fix duplicate mcast packets in BLA backbone
  from mesh (bsc#1012628).
- batman-adv: mcast: fix duplicate mcast packets from BLA backbone
  to mesh (bsc#1012628).
- bpf: Fix a rcu warning for bpffs map pretty-print (bsc#1012628).
- lib80211: fix unmet direct dependendices config warning when
  !CRYPTO (bsc#1012628).
- mac80211: do not disable HE if HT is missing on 2.4 GHz
  (bsc#1012628).
- cfg80211: fix 6 GHz channel conversion (bsc#1012628).
- mac80211: fix 80 MHz association to 160/80+80 AP on 6 GHz
  (bsc#1012628).
- ALSA: asihpi: fix iounmap in error handler (bsc#1012628).
- io_uring: fix openat/openat2 unified prep handling
  (bsc#1012628).
- SUNRPC: Fix svc_flush_dcache() (bsc#1012628).
- regmap: fix page selection for noinc reads (bsc#1012628).
- regmap: fix page selection for noinc writes (bsc#1012628).
- net/mlx5e: mlx5e_fec_in_caps() returns a boolean (bsc#1012628).
- MIPS: Loongson-3: Fix fp register access if MSA enabled
  (bsc#1012628).
- PM / devfreq: tegra30: Disable clock on error in probe
  (bsc#1012628).
- MIPS: Add the missing 'CPU_1074K' into __get_cpu_type()
  (bsc#1012628).
- regulator: axp20x: fix LDO2/4 description (bsc#1012628).
- spi: bcm-qspi: Fix probe regression on iProc platforms
  (bsc#1012628).
- KVM: x86: Reset MMU context if guest toggles CR4.SMAP or CR4.PKE
  (bsc#1012628).
- KVM: SVM: Add a dedicated INVD intercept routine (bsc#1012628).
- mm: validate pmd after splitting (bsc#1012628).
- arch/x86/lib/usercopy_64.c: fix __copy_user_flushcache()
  cache writeback (bsc#1012628).
- x86/irq: Make run_on_irqstack_cond() typesafe (bsc#1012628).
- x86/ioapic: Unbreak check_timer() (bsc#1012628).
- scsi: lpfc: Fix initial FLOGI failure due to BBSCN not supported
  (bsc#1012628).
- ALSA: usb-audio: Add delay quirk for H570e USB headsets
  (bsc#1012628).
- ALSA: hda/realtek - Couldn't detect Mic if booting with headset
  plugged (bsc#1012628).
- ALSA: hda/realtek: Enable front panel headset LED on Lenovo
  ThinkStation P520 (bsc#1012628).
- lib/string.c: implement stpcpy (bsc#1012628).
- tracing: fix double free (bsc#1012628).
- s390/dasd: Fix zero write for FBA devices (bsc#1012628).
- mt76: mt7615: use v1 MCU API on MT7615 to fix issues with
  adding/removing stations (bsc#1012628).
- lib/bootconfig: Fix a bug of breaking existing tree nodes
  (bsc#1012628).
- lib/bootconfig: Fix to remove tailing spaces after value
  (bsc#1012628).
- kprobes: Fix to check probe enabled before
  disarm_kprobe_ftrace() (bsc#1012628).
- kprobes: tracing/kprobes: Fix to kill kprobes on initmem after
  boot (bsc#1012628).
- btrfs: fix put of uninitialized kobject after seed device delete
  (bsc#1012628).
- btrfs: fix overflow when copying corrupt csums for a message
  (bsc#1012628).
- media: cec-adap.c: don't use flush_scheduled_work()
  (bsc#1012628).
- MIPS: Loongson2ef: Disable Loongson MMI instructions
  (bsc#1012628).
- dmabuf: fix NULL pointer dereference in dma_buf_release()
  (bsc#1012628).
- mm, THP, swap: fix allocating cluster for swapfile by mistake
  (bsc#1012628).
- mm/gup: fix gup_fast with dynamic page table folding
  (bsc#1012628).
- mm: replace memmap_context by meminit_context (bsc#1012628).
- mm: don't rely on system state to detect hot-plug operations
  (bsc#1012628).
- s390/zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (bsc#1012628).
- io_uring: ensure open/openat2 name is cleaned on cancelation
  (bsc#1012628).
- KVM: arm64: Assume write fault on S1PTW permission fault on
  instruction fetch (bsc#1012628).
- dm: fix bio splitting and its bio completion order for regular
  IO (bsc#1012628).
- clocksource/drivers/timer-ti-dm: Do reset before enable
  (bsc#1012628).
- commit ea492d4

==== kismet ====
Version update (2020_09_R3 -> 2020_09_R4)
Subpackages: kismet-capture-freaklabs-zigbee kismet-capture-linux-bluetooth kismet-capture-linux-wifi kismet-capture-nrf-51822 kismet-capture-nrf-mousejack kismet-capture-sdr-rtl433 kismet-capture-sdr-rtladsb kismet-capture-sdr-rtlamr kismet-capture-ti-cc2540 kismet-logtools

- Update to version 2020-09-R4
  * Fix a false ?login required? error on the datasources panel.

==== libmbim ====
Version update (1.24.2 -> 1.24.4)
Subpackages: libmbim-glib4 mbimcli-bash-completion

- Update to version 1.24.4:
  * libmbim-glib,device:
    + Added new mbim_device_get_transaction_id() to retrieve the
    transaction id currently being used.
  * libmbim-glib,proxy:
    + Fixed the transaction id used in fragments of the same
    request.
    + Avoid creating device context when it's already being
    untracked.
    + Fixed double GError free.
  * mbimcli:
    + Fixed missing EOL in error string when closing device.

==== libproxy ====

- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).

==== libproxy-plugins ====
Subpackages: libproxy1-config-gnome3 libproxy1-config-kde libproxy1-networkmanager libproxy1-pacrunner-webkit

- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).

==== libreoffice ====
Version update (7.0.1.2 -> 7.0.2.2)
Subpackages: libreoffice-base libreoffice-base-drivers-firebird libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-cs libreoffice-l10n-da libreoffice-l10n-de libreoffice-l10n-el libreoffice-l10n-en libreoffice-l10n-en_GB libreoffice-l10n-es libreoffice-l10n-fr libreoffice-l10n-hu libreoffice-l10n-it libreoffice-l10n-ja libreoffice-l10n-pl libreoffice-l10n-pt_BR libreoffice-l10n-ru libreoffice-l10n-zh_CN libreoffice-l10n-zh_TW libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit

- Update to 7.0.2.2:
  * RC2 of 7.0.2

==== libsolv ====
Subpackages: libsolv-tools python3-solv ruby-solv

- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]

==== libva ====
Version update (2.8.0 -> 2.9.0)
Subpackages: libva-drm2 libva-x11-2 libva2

- update to 2.9.0:
  * trace: Refine the va_TraceVAPictureParameterBufferAV1.
  * doc: Add comments for backward/forward reference to avoid confusion
  * doc: Modify comments in av1 decoder interfaces
  * doc: Update mailing list
  * Add SCC fields trace for HEVC SCC encoding.
  * Add FOURCC code for Y212 and Y412 format.
  * Add interpolation method for scaling.
  * add attributes for context priority setting
  * Add vaSyncBuffer for output buffers synchronization
  * Add vaSyncSurface2 with timeout

==== libva-gl ====
Version update (2.8.0 -> 2.9.0)
Subpackages: libva-glx2 libva-wayland2

- update to 2.9.0:
  * trace: Refine the va_TraceVAPictureParameterBufferAV1.
  * doc: Add comments for backward/forward reference to avoid confusion
  * doc: Modify comments in av1 decoder interfaces
  * doc: Update mailing list
  * Add SCC fields trace for HEVC SCC encoding.
  * Add FOURCC code for Y212 and Y412 format.
  * Add interpolation method for scaling.
  * add attributes for context priority setting
  * Add vaSyncBuffer for output buffers synchronization
  * Add vaSyncSurface2 with timeout

==== libvirt ====
Version update (6.7.0 -> 6.8.0)
Subpackages: libvirt-bash-completion libvirt-client libvirt-daemon libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-lxc libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lxc libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs

- Update to libvirt 6.8.0
  - jsc#SLE-12684, jsc#SLE-15861
  - bsc#1174955 (CVE-2020-15708)
  - bsc#1177155 (CVE-2020-25637)
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html
  - Dropped patches:
    2ad009ea-qemu-check-modules-dir.patch,
    8abd1ffe-qemu-tolerate-non-existent-files.patch,
    4a72b76b-qemu-namespace-memleak-fix.patch

==== libwacom ====
Version update (1.3 -> 1.5)
Subpackages: libwacom-data libwacom2

- Use official %%meson_test macro for the %check section.
- Do not crrate empty %check section when not using meson.
- Fix Leap build.
- update to 1.5:
  - New devices:
  - Acer Spin 5 / Acer Spin SP513-54N
  - Dell Latitude 7410,
  - GAOMON S620
  - HP Pavilion x360 Convertible 14-dh0xxx
  - Huawei MateBook HZ-W19
  - Lenovo ThinkPad X1 Yoga 3rd
  - Wacom Cintiq 16, DTK-1660E
- update to 1.4.1:
- New devices:
  - HP ZBook Studio x360 G5
  - Dell Latitude 7285
  - Dell Latitude 7200 2-in-1, Dell Latitude 7400 2-in-1
  - Elan 2415
  - HP ENVY x360 Convertible 13,
  - Huion 420, 1060 Plus,
  - GAOMON S56K
  - Wacom FT-0405
  - Many AES stylus definitions added
  - New API: libwacom_stylus_get_eraser_type()
  - udev rules are now using hwdb entries

==== libzypp ====
Version update (17.25.1 -> 17.25.2)

- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)

==== luit ====
Version update (20150706 -> 20201003)

- Update to version 20201003
  * updated configure macros:
    + compiler-warning fixes
    + build-fixes for OpenBSD and macOS
  * update config.guess, config.sub

==== memcached ====
Version update (1.6.6 -> 1.6.7)

- update to 1.6.7:
  * Dockerfile - allow override of config opts
  * Improve page balancing when writes are bursty
  * main: split binary protocol into proto_bin.c
  * main: split text protocol into proto_text.c
  * add openssl errors to SSL certificate loading error messages
  * skip setting the resource limits in debug builds
  * Use signal function instead of sigignore
  * fixing the basic tls test so it exits correctly when fails
  * net: remove most response obj cache related code
  * net: carve response buffers from read buffers
  * Do not join lru and slab maintainer threads if they do not exist
  * Restore SAN entries in testing TLS certificates
  * Changed code using strtol to use safe_strtol wrapper
  * Fix TCP failure under OS X.
- drop use-signal-function-instead-of-sigignore.patch (upstream)

==== myspell-dictionaries ====
Version update (20191219 -> 20201005)
Subpackages: myspell-cs_CZ myspell-da_DK myspell-de myspell-de_DE myspell-el_GR myspell-en myspell-en_GB myspell-en_US myspell-es myspell-es_ES myspell-fr_FR myspell-hu_HU myspell-it_IT myspell-lightproof-en myspell-lightproof-hu_HU myspell-lightproof-pt_BR myspell-lightproof-ru_RU myspell-pl_PL myspell-pt_BR myspell-ru_RU

- version update to 20201005
  * many updated dictionaries, see
    https://cgit.freedesktop.org/libreoffice/dictionaries/log/

==== nodejs14 ====
Version update (14.12.0 -> 14.13.0)
Subpackages: npm14

- Update to version 14.13.0:
  * deps: upgrade to libuv 1.40.0 #35333
  * module: named exports for CJS via static analysis #35249
  * module: exports pattern support #34718
  * src: allow N-API addon in AddLinkedBinding()

==== numactl ====
Version update (2.0.13 -> 2.0.14)
Subpackages: libnuma1

- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning

==== openblas_pthreads ====

- Set DYNAMIC_ARCH everywhere, use a base CPU model for non-dynamic
  bits to have a reproducible base line:
  x86_64: CORE2
  aarch64: ARMV8
  ppc: POWER8
  s390: ZARCH_GENERIC
- Remove workaround for build failure on aarch64 (boo#1128794).

==== p11-kit ====
Subpackages: libp11-kit0 libp11-kit0-32bit p11-kit-tools

- avoid bareword to fix build failure

==== patterns-base ====
Subpackages: patterns-base-apparmor patterns-base-base patterns-base-basesystem patterns-base-basic_desktop patterns-base-console patterns-base-documentation patterns-base-enhanced_base patterns-base-minimal_base patterns-base-sw_management patterns-base-transactional_base patterns-base-x11 patterns-base-x11_enhanced

- Handle the yast pattern split into basis, desktop and server (boo#1159875)

==== perl-CGI ====
Version update (4.50 -> 4.51)

- updated to 4.51
  see /usr/share/doc/packages/perl-CGI/Changes

==== perl-File-Listing ====
Version update (6.04 -> 6.11)

- updated to 6.11
  see /usr/share/doc/packages/perl-File-Listing/Changes
  6.11      2020-10-06 03:00:45 -0600
  - Remove accidental recursive req on LWP::Simple
- updated to 6.10
  see /usr/share/doc/packages/perl-File-Listing/Changes
  6.10      2020-10-05 15:18:30 -0600
  - Production version identical to 6.09_01
  6.09_01   2020-10-05 08:17:32 -0600
  - Remove TABs from source files and tests (gh#17)
  - Restores (theoretical, untested) support for 5.6, which was removed when
    the tests added modern file tests (gh#17)
  - Fixes or silences several minor nits reported by PerlCritic (gh#17)
  6.08_01 2020-10-01 17:28:35 -0600
  - We now only call Time::Local::timelocal with four digit years (gh#5, gh#14)
- updated to 6.07
  see /usr/share/doc/packages/perl-File-Listing/Changes

==== perl-XML-Writer ====
Version update (0.625 -> 0.900)

- updated to 0.900
  see /usr/share/doc/packages/perl-XML-Writer/Changes

==== php7 ====
Version update (7.4.10 -> 7.4.11)
Subpackages: apache2-mod_php7 php7-ctype php7-dom php7-gd php7-gettext php7-iconv php7-json php7-mbstring php7-mysql php7-pdo php7-sqlite php7-tokenizer php7-xmlreader php7-xmlwriter

- updated to 7.4.11: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.11

==== popt ====
Subpackages: libpopt0 libpopt0-32bit

- Update homepage URL.
- Drop old rpm constructs.

==== procps ====
Subpackages: libprocps8

- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.

==== python-libvirt-python ====
Version update (6.7.0 -> 6.8.0)

- Update to 6.8.0
  - Add all new APIs and constants in libvirt 6.8.0
  - jsc#SLE-12684, jsc#SLE-15861

==== python-mailman ====

- Remove suid bit from /var/lib/mailman/data
- remove systemd (build)requires
- Create mailman user and group
- Create directories for mailman and use FHS directory layout
- Create initial /etc/mailman.cfg
- Create /etc/mailman.d/ directory for extensions
- Add systemd files

==== rdma-core ====
Version update (27.1 -> 31.0)
Subpackages: libefa1 libibverbs libibverbs1 libmlx4-1 libmlx5-1 librdmacm1

- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available
- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI

==== rubygem-gem2rpm ====

- added support for 3.0.0

==== rubygem-vagrant_cloud ====
Version update (3.0.0 -> 2.0.3)

- Revert sr#837782

==== spice ====

- Fix buffer overflow vunerabilities in QUIC image decoding
  (CVE-2020-14355 bsc#1177158)
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch

==== spice-gtk ====
Subpackages: libspice-client-glib-2_0-8 libspice-client-glib-helper libspice-client-gtk-3_0-5

- Fix buffer overflow vunerabilities in QUIC image decoding
  (CVE-2020-14355 bsc#1177158)
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch

==== strace ====
Version update (5.8 -> 5.9)

- Update to strace 5.9
  * Improvements
  * Added -n/--syscall-number option for printing syscall numbers.
  * Added --pidns-translation option for PID namespace translation (addresses
    Fedora bug #1035433).
  * Implemented decoding of close_range syscall.
  * Implemented decoding of TEE_* ioctl commands.
  * Implemented decoding of struct msginfo argument of IPC_INFO
    and MSG_INFO msgctl syscall commands.
  * Implemented decoding of struct msqid_ds argument of MSG_STAT
    and MSG_STAT_ANY msgctl syscall commands.
  * Implemented decoding of struct seminfo argument of IPC_INFO
    and SEM_INFO semctl syscall commands.
  * Implemented decoding of struct semid_ds argument of IPC_SET,
    IPC_STAT, SEM_STAT, and SEM_STAT_ANY semctl syscall commands.
  * Implemented decoding of struct shminfo argument of IPC_INFO
    shmctl syscall command.
  * Implemented decoding of struct shm_info argument of SHM_INFO
    shmctl syscall command.
  * Implemented decoding of struct shmid_ds argument of SHM_STAT
    and SHM_STAT_ANY shmctl syscall commands.
  * Updated lists of BPF_*, CAP_*, FAN_*, IFLA_*, INET_DIAG_REQ_*,
    IORING_FEAT_*, IP_*, IPV6_*, KVM_*, NDA_*, PTP_PEROUT_*, RTPROT_*,
    and V4L2_FMT_FLAG_* constants.
  * Updated lists of ioctl commands from Linux 5.9.

==== sysuser-tools ====

- Avoid useless use of cat
- Simplify %sysusers_requires
- Drop shebang, rpm passes it to /bin/sh itself

==== vala ====
Version update (0.48.10 -> 0.48.11)
Subpackages: libvala-0_48-0

- Update to version 0.48.11:
  + Various improvements and bug fixes:
  - codegen:
    . The actual struct size is required for calloc (POSIX)
    . Don't pass CCodeFunctionCall to NULL-aware free macro
  - g-i: Fix a couple of C compiler warnings
  - libvaladoc: Fix a couple of C compiler warnings
  - testrunner: Pass --enable-checking to increase coverage,
    Filter external -0X flags to preserve current default -O0
  + Bindings:
  - gstreamer: Update from 1.18.0+ git master
  - gtk4: Don't skip LayoutManager.create_layout_child()
  - gtk4: Update to 3.99.1+15b635d7
  - poppler-glib: Update to 20.09.0
  - vapi: Update GIR-based bindings
  - webkit2gtk-4.0: Update to 2.30.1

==== webkit2gtk3 ====
Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 libwebkit2gtk3-lang typelib-1_0-JavaScriptCore-4_0 typelib-1_0-WebKit2-4_0 webkit2gtk-4_0-injected-bundles

- Enable c_loop on aarch64: currently needed for compilation to
  succeed with JIT disabled. Also disable sampling profiler, since
  it conflicts with c_loop (boo#1177087).

==== wpa_supplicant ====
Subpackages: wpa_supplicant-gui

- Add wpa_supplicant-p2p_iname_size.diff -- Limit P2P_DEVICE name to appropriate ifname size
  (https://patchwork.ozlabs.org/project/hostap/patch/20200825062902.124600-1-benjamin@sipsolutions.net/)

==== xkeyboard-config ====
Version update (2.30 -> 2.31)
Subpackages: xkeyboard-config-lang

- Update to version 2.31
  * latest bugfix release
- supersedes U_Fix-symbols-in-syntax-error-spurious-git-conflict-ma.patch
- adjusted n_suse-ctrl-alt-bksp-terminate.patch

==== yelp ====
Version update (3.36.0 -> 3.36.1)
Subpackages: libyelp0 yelp-lang

- Update to version 3.36.1:
  + Fix issue when opening local HTML files.
  + Updated translations.