Packages changed:
NetworkManager
bogofilter-db-src
iptables (1.8.5 -> 1.8.6)
java-11-openjdk (11.0.8.0 -> 11.0.9.0)
libyui-qt (2.56.1 -> 2.56.2)
man-pages (5.08 -> 5.09)
perl-Convert-ASN1
perl-DBI
polkit-default-privs (1550+20201012.1df5a0d -> 1550+20201103.994a5ed)
python-kiwi (9.21.17 -> 9.21.23)
qemu
salt
shotwell (0.30.10 -> 0.30.11)
tk
tmux (3.1b -> 3.1c)
virt-manager
=== Details ===
==== NetworkManager ====
Subpackages: NetworkManager-lang libnm0 typelib-1_0-NM-1_0
- Exclude systemd.automount from nfs processing: fix boo#1116625
as suggested from Neil Brown
==== bogofilter-db-src ====
Subpackages: bogofilter-common bogofilter-db
- Convert to _multibuild: with RPM 4.16, we can no longer use
make_install in the build phase, as %install will always empty
DESTDIR.
==== iptables ====
Version update (1.8.5 -> 1.8.6)
Subpackages: libip4tc2 libip6tc2 libxtables12 xtables-plugins
- Update to release 1.8.6
* iptables-nft had pointlessly added "bitwise" expressions to
each IP address match, needlessly slowing down run-time
performance (by 50% in worst cases).
* iptables-nft-restore: Support basechain policy value of "-"
(indicating to not change the chain's policy).
* nft-translte: Fix translation of ICMP type "any" match.
==== java-11-openjdk ====
Version update (11.0.8.0 -> 11.0.9.0)
Subpackages: java-11-openjdk-headless
- Enable Sheandoah GC for x86_64
- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
bsc#1177943)
* New features
+ JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
* Security fixes
+ JDK-8233624: Enhance JNI linkage
+ JDK-8236196: Improve string pooling
+ JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
+ JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
+ JDK-8237995, CVE-2020-14782: Enhance certificate processing
+ JDK-8240124: Better VM Interning
+ JDK-8241114, CVE-2020-14792: Better range handling
+ JDK-8242680, CVE-2020-14796: Improved URI Support
+ JDK-8242685, CVE-2020-14797: Better Path Validation
+ JDK-8242695, CVE-2020-14798: Enhanced buffer support
+ JDK-8243302: Advanced class supports
+ JDK-8244136, CVE-2020-14803: Improved Buffer supports
+ JDK-8244479: Further constrain certificates
+ JDK-8244955: Additional Fix for JDK-8240124
+ JDK-8245407: Enhance zoning of times
+ JDK-8245412: Better class definitions
+ JDK-8245417: Improve certificate chain handling
+ JDK-8248574: Improve jpeg processing
+ JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
+ JDK-8253019: Enhanced JPEG decoding
* Other changes
+ JDK-6532025: GIF reader throws misleading exception with
truncated images
+ JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
/PDialogTest.java needs update by removing an infinite loop
+ JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
/Test8017492.java fails
+ JDK-8062947: Fix exception message to correctly represent
LDAP connection failure
+ JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
+ JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
/CloseServerSocket.java fails intermittently with Address
already in use
+ JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
due to timeout on DeadServerNoTimeoutTest is incorrect
+ JDK-8160768: Add capability to custom resolve host/domain
names within the default JNDI LDAP provider
+ JDK-8172404: Tools should warn if weak algorithms are used
before restricting them
+ JDK-8193367: Annotated type variable bounds crash javac
+ JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
fails intermittently: Connection reset
+ JDK-8203026: java.rmi.NoSuchObjectException: no such object
in table
+ JDK-8203281: [Windows] JComboBox change in ui when
editor.setBorder() is called
+ JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
resolve_wk_klass
+ JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
JdbExprTest.sh fail due to timeout
+ JDK-8203928: [Test] Convert non-JDB scaffolding
serviceability shell script tests to java
+ JDK-8204963: javax.swing.border.TitledBorder has a memory leak
+ JDK-8204994: SA might fail to attach to process with "Windbg
Error: WaitForEvent failed"
+ JDK-8205534: Remove SymbolTable dependency from
serviceability agent
+ JDK-8206309: Tier1 SA tests fail
+ JDK-8208281: java/nio/channels/
/AsynchronousSocketChannel/Basic.java timed out
+ JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
version - step1
+ JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
is incorrect
+ JDK-8209342: Problemlist SA tests on Solaris due to Error
attaching to process: Can't create thread_db agent!
+ JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
should be marked as headful
+ JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
timeout
+ JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
version - step2
+ JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
ZGC
+ JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
+ JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
/ap10t001/TestDescription.java failed with ObjectFree:
GetCurrentThreadCpuTimerInfo returned unexpected error code
+ JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
version - step3
+ JDK-8210527: JShell: NullPointerException in
jdk.jshell.Eval.translateExceptionStack
+ JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
tests
+ JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
with waitForPrompt timed out after 60 seconds
+ JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
clarify which output is the pending reply after a timeout
+ JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
version - step4
+ JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
fails to find ThreadLocalObject
+ JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
test
+ JDK-8211694: JShell: Redeclared variable should be reset
+ JDK-8212200: assert when shared java.lang.Object is redefined
by JVMTI agent
+ JDK-8212629: [TEST] wrong breakpoint in
test/jdk/com/sun/jdi/DeferredStepTest
+ JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
- unexpected. lastLine=52, minLine=52, maxLine=55
+ JDK-8212807: tools/jar/multiRelease/Basic.java times out
+ JDK-8213182: Minimal VM build failure after JDK-8212200
(assert when shared java.lang.Object is redefined by JVMTI
agent)
+ JDK-8213214: Set -Djava.io.tmpdir= when running tests
+ JDK-8213275: ReplaceCriticalClasses.java fails with
jdk.internal.vm.PostVMInitHook not found
+ JDK-8213574: Deadlock in string table expansion when dumping
lots of CDS classes
+ JDK-8213703: LambdaConversionException: Invalid receiver type
not a subtype of implementation type interface
+ JDK-8214074: Ghash optimization using AVX instructions
+ JDK-8214491: Upgrade to JLine 3.9.0
+ JDK-8214797: TestJmapCoreMetaspace.java timed out
+ JDK-8215243: JShell tests failing intermitently with
"Problem cleaning up the following threads:"
+ JDK-8215244: jdk/jshell/ToolBasicTest.java
testHistoryReference failed
+ JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
optimization using AVX instructions)
+ JDK-8215438: jshell tool: Ctrl-D causes EOF
+ JDK-8216021: RunTest.gmk might set concurrency level to 1 on
Windows
+ JDK-8216974: HttpConnection not returned to the pool after
204 response
+ JDK-8218948: SimpleDateFormat :: format - Zone Names are not
reflected correctly during run time
+ JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
too small on new Skylake CPUs
+ JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
instead of aliased B&W glyphs
+ JDK-8221658: aarch64: add necessary predicate for ubfx
patterns
+ JDK-8221759: Crash when completing "java.io.File.path"
+ JDK-8221918: runtime/SharedArchiveFile/serviceability/
/ReplaceCriticalClasses.java fails: Shared archive not found
+ JDK-8222074: Enhance auto vectorization for x86
+ JDK-8222079: Don't use memset to initialize fields decode_env
constructor in disassembler.cpp
+ JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
on hostname command
+ JDK-8223688: JShell: crash on the instantiation of raw
anonymous class
+ JDK-8223777: In posix_spawn mode, failing to exec()
jspawnhelper does not result in an error
+ JDK-8223940: Private key not supported by chosen signature
algorithm
+ JDK-8224184: jshell got IOException at exiting with AIX
+ JDK-8224234: compiler/codegen/TestCharVect2.java fails in
test_mulc
+ JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
NullPointerException
+ JDK-8225625: AES Electronic Codebook (ECB) encryption and
decryption optimization using AVX512 + VAES instructions
+ JDK-8226536: Catch OOM from deopt that fails rematerializing
objects
+ JDK-8226575: OperatingSystemMXBean should be made container
aware
+ JDK-8226697: Several tests which need the @key headful
keyword are missing it.
+ JDK-8226809: Circular reference in printed stack trace is not
correctly indented & ambiguous
+ JDK-8227059: sun/security/tools/keytool/
/DefaultSignatureAlgorithm.java timed out
+ JDK-8227269: Slow class loading when running with JDWP
+ JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
fails due to "exitValue = 6"
+ JDK-8228448: Jconsole can't connect to itself
+ JDK-8228967: Trust/Key store and SSL context utilities for
tests
+ JDK-8229378: jdwp library loader in linker_md.c quietly
truncates on buffer overflow
+ JDK-8229815: Upgrade Jline to 3.12.1
+ JDK-8230000: some httpclients testng tests run zero test
+ JDK-8230002: javax/xml/jaxp/unittest/transform/
/SecureProcessingTest.java runs zero test
+ JDK-8230010: Remove jdk8037819/BasicTest1.java
+ JDK-8230094: CCE in createXMLEventWriter(Result) over an
arbitrary XMLStreamWriter
+ JDK-8230402: Allocation of compile task fails with assert:
"Leaking compilation tasks?"
+ JDK-8230767: FlightRecorderListener returns null recording
+ JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
test/jdk/java/util/zip/EntryCount64k.java
+ JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
can be quicker for self thread
+ JDK-8231586: enlarge encoding space for OopMapValue offsets
+ JDK-8231953: Wrong assumption in assertion in
oop::register_oop
+ JDK-8231968: getCurrentThreadAllocatedBytes default
implementation s/b getThreadAllocatedBytes
+ JDK-8232083: Minimal VM is broken after JDK-8231586
+ JDK-8232161: Align some one-way conversion in MS950 charset
with Windows
+ JDK-8232855: jshell missing word in /help help
+ JDK-8233027: OopMapSet::all_do does oms.next() twice during
iteration
+ JDK-8233228: Disable weak named curves by default in TLS,
CertPath, and Signed JAR
+ JDK-8233386: Initialize NULL fields for unused decorations
+ JDK-8233452: java.math.BigDecimal.sqrt() with
RoundingMode.FLOOR results in incorrect result
+ JDK-8233686: XML transformer uses excessive amount of memory
+ JDK-8233741: AES Countermode (AES-CTR) optimization using
AVX512 + VAES instructions
+ JDK-8233829: javac cannot find non-ASCII module name under
non-UTF8 environment
+ JDK-8233958: Memory retention due to HttpsURLConnection
finalizer that serves no purpose
+ JDK-8234011: (zipfs) Memory leak in
ZipFileSystem.releaseDeflater()
+ JDK-8234058: runtime/CompressedOops/
/CompressedClassPointers.java fails with 'Narrow klass base:
0x0000000000000000' missing from stdout/stderr
+ JDK-8234149: Several regression tests do not dispose Frame at
end
+ JDK-8234347: "Turkey" meta time zone does not generate
composed localized names
+ JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
/bug6980209.java fails in linux nightly
+ JDK-8234535: Cross compilation fails due to missing CFLAGS
for the BUILD_CC
+ JDK-8234541: C1 emits an empty message when it inlines
successfully
+ JDK-8234687: change javap reporting on unknown attributes
+ JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
11
+ JDK-8236548: Localized time zone name inconsistency between
English and other locales
+ JDK-8236617: jtreg test containers/docker/
/TestMemoryAwareness.java fails after 8226575
+ JDK-8237182: Update copyright header for shenandoah and
epsilon files
+ JDK-8237888: security/infra/java/security/cert/
/CertPathValidator/certification/LuxTrustCA.java fails when
checking validity interval
+ JDK-8237977: Further update
javax/net/ssl/compatibility/Compatibility.java
+ JDK-8238270: java.net HTTP/2 client does not decrease stream
count when receives 204 response
+ JDK-8238284: [macos] Zero VM build fails due to an obvious
typo
+ JDK-8238380: java.base/unix/native/libjava/childproc.c
"multiple definition" link errors with GCC10
+ JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
"multiple definition" link errors with GCC10
+ JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
errors with GCC10
+ JDK-8238448: RSASSA-PSS signature verification fail when
using certain odd key sizes
+ JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
with non-zero code
+ JDK-8239083: C1 assert(known_holder == NULL ||
(known_holder->is_instance_klass() &&
(!known_holder->is_interface() ||
((ciInstanceKlass*)known_holder)->has_nonstatic_concrete_methods())),
"should be non-static concrete method");
+ JDK-8239385: KerberosTicket client name refers wrongly to
sAMAccountName in AD
+ JDK-8240169: javadoc fails to link to non-modular api docs
+ JDK-8240295: hs_err elapsed time in seconds is not accurate
enough
+ JDK-8240360: NativeLibraryEvent has wrong library name on
Linux
+ JDK-8240676: Meet not symmetric failure when running lucene
on jdk8
+ JDK-8241007: Shenandoah: remove
ShenandoahCriticalControlThreadPriority support
+ JDK-8241065: Shenandoah: remove leftover code after
JDK-8231086
+ JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
failing on 32bit Windows
+ JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
java.lang.NullPointerException
+ JDK-8241138: http.nonProxyHosts=* causes
StringIndexOutOfBoundsException in DefaultProxySelector
+ JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
+ JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
fails with OOME
+ JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
+ JDK-8241750: x86_32 build failure after JDK-8227269
+ JDK-8242184: CRL generation error with RSASSA-PSS
+ JDK-8242283: Can't start JVM when java home path includes
non-ASCII character
+ JDK-8242556: Cannot load RSASSA-PSS public key with non-null
params from byte array
+ JDK-8243029: Rewrite javax/net/ssl/compatibility/
/Compatibility.java with a flexible interop test framework
+ JDK-8243138: Enhance BaseLdapServer to support starttls
extended request
+ JDK-8243320: Add SSL root certificates to Oracle Root CA
program
+ JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
program
+ JDK-8243389: enhance os::pd_print_cpu_info on linux
+ JDK-8243453: java --describe-module failed with non-ASCII
module name under non-UTF8 environment
+ JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
+ JDK-8243489: Thread CPU Load event may contain wrong data for
CPU time under certain conditions
+ JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
HiDPI screens (Windows)
+ JDK-8244087: 2020-04-24 public suffix list update
+ JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
release 1.8.26
+ JDK-8244164: AArch64: jaotc generates incorrect code for
compressed OOPs with non-zero heap base
+ JDK-8244196: adjust output in os_linux
+ JDK-8244225: stringop-overflow warning on strncpy call from
compile_the_world_in
+ JDK-8244287: JFR: Methods samples have line number 0
+ JDK-8244703: "platform encoding not initialized" exceptions
with debugger, JNI
+ JDK-8244719: CTW: C2 compilation fails with
"assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
remove node from hash table before modifying it"
+ JDK-8244729: Shenandoah: remove resolve paths from
SBSA::generate_shenandoah_lrb
+ JDK-8244763: Update --release 8 symbol information after JSR
337 MR3
+ JDK-8244818: Java2D Queue Flusher crash while moving
application window to external monitor
+ JDK-8245151: jarsigner should not raise duplicate warnings on
verification
+ JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
+ JDK-8245714: "Bad graph detected in build_loop_late" when
loads are pinned on loop limit check uncommon branch
+ JDK-8245801: StressRecompilation triggers assert "redundunt
OSR recompilation detected. memory leak in CodeCache!"
+ JDK-8245832: JDK build make-static-libs should build all JDK
libraries
+ JDK-8245880: Shenandoah: check class unloading flag early in
concurrent code root scan
+ JDK-8245981: Upgrade to jQuery 3.5.1
+ JDK-8246027: Minimal fastdebug build broken after JDK-8245801
+ JDK-8246094: [macos] Sound Recording and playback is not
working
+ JDK-8246153: TestEliminateArrayCopy fails with
- XX:+StressReflectiveCode
+ JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
+ JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
fails with AssertionError
+ JDK-8246203: Segmentation fault in verification due to stack
overflow with -XX:+VerifyIterativeGVN
+ JDK-8246330: Add TLS Tests for Legacy ECDSA curves
+ JDK-8246453: TestClone crashes with "all collected exceptions
must come from the same place"
+ JDK-8247246: Add explicit ResolvedJavaType.link and expose
presence of default methods
+ JDK-8247350: [aarch64] assert(false) failed: wrong size of
mach node
+ JDK-8247502: PhaseStringOpts crashes while optimising
effectively dead code
+ JDK-8247615: Initialize the bytes left for the heap sampler
+ JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
in SBC2Support::pin_and_expand
+ JDK-8247874: Replacement in VersionProps.java.template not
working when --with-vendor-bug-url contains '&'
+ JDK-8247979: aarch64: missing side effect of killing flags
for clearArray_reg_reg
+ JDK-8248214: Add paddings for TaskQueueSuper to reduce
false-sharing cache contention
+ JDK-8248219: aarch64: missing memory barrier in
fast_storefield and fast_accessfield
+ JDK-8248348: Regression caused by the update to BCEL 6.0
+ JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
jtreg 5.1
+ JDK-8248495: [macos] zerovm is broken due to libffi headers
location
+ JDK-8248851: CMS: Missing memory fences between free chunk
check and klass read
+ JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
Windows
+ JDK-8249159: Downport test rework for SSLSocketTemplate from
8224650
+ JDK-8249215: JFrame::setVisible crashed with
- Dfile.encoding=UTF-8 on Japanese Windows.
+ JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
not highlighted in GTKLookAndFeel
+ JDK-8249255: Build fails if source code in cygwin home dir
+ JDK-8249277: TestVerifyIterativeGVN.java is failing with
timeout in OpenJDK 11
+ JDK-8249278: Revert JDK-8226253 which breaks the spec of
AccessibleState.SHOWING for JList
+ JDK-8249560: Shenandoah: Fix racy GC request handling
+ JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
+ JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
account for corner cases
+ JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
requesting TGS Kerberos tickets
+ JDK-8250609: C2 crash in IfNode::fold_compares
+ JDK-8250627: Use -XX:+/-UseContainerSupport for
enabling/disabling Java container metrics
+ JDK-8250755: Better cleanup for
jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
+ JDK-8250787: Provider.put no longer registering aliases in
FIPS env
+ JDK-8250826: jhsdb does not work with coredump which comes
from Substrate VM
+ JDK-8250827: Shenandoah: needs to reset/finish StringTable's
dead count before/after parallel walk
+ JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
the bounds
+ JDK-8251117: Cannot check P11Key size in P11Cipher and
P11AEADCipher
+ JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
test failure
+ JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
I-U
+ JDK-8251469: Better cleanup for
test/jdk/javax/imageio/SetOutput.java
+ JDK-8251487: Shenandoah: missing detail timing tracking for
final mark cleaning phase
+ JDK-8252120: compiler/oracle/TestCompileCommand.java
misspells "occured"
+ JDK-8252157: JDK-8231209 11u backport breaks jmm binary
compatibility
+ JDK-8252258: [11u] JDK-8242154 changes the default vendor
+ JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
downport of 8234011
+ JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
in JDK 11
+ JDK-8253283: [11u] Test build/translations/
/VerifyTranslations.java failing after JDK-8252258
+ JDK-8253813: Backout JDK-8244287 from 11u: it causes several
crashes
- Removed patch:
* gcc-fno-common-fix.patch
+ not needed any more with this version
- Added patch:
* JDK-8250861.patch
+ Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
bool)" introduced in jdk 11.0.9
==== libyui-qt ====
Version update (2.56.1 -> 2.56.2)
- Honor menu item enabled/disabled state when rebuilding menu item tree
(e.g. after keyboard shortcut change) (boo#1178394)
- 2.56.2
==== man-pages ====
Version update (5.08 -> 5.09)
- version update to 5.09
http://linux-man-pages.blogspot.com/2020/11/man-pages-509-is-released.html
- modified patches
% man-pages-openat2.h-location.patch (refreshed)
==== perl-Convert-ASN1 ====
- Security fix: [bsc#1168934, CVE-2013-7488]
* Fix infinite loop via unexpected input
- Add perl-Convert-ASN1-CVE-2013-7488.patch
==== perl-DBI ====
- Security fix [bsc#1176492, CVE-2014-10401, CVE-2014-10402]
* DBD::File drivers can open files from folders other than those
specifically passed via the f_dir attribute in the data source
name (DSN).
- Add perl-DBI-CVE-2014-10402.patch
==== polkit-default-privs ====
Version update (1550+20201012.1df5a0d -> 1550+20201103.994a5ed)
- Update to version 1550+20201103.994a5ed:
* udisks2: rename of manage-led action to match upstream changes (bsc#1178321)
- Update to version 1550+20201030.d1b5d8b:
* whitelisting of GNOME malcontent parental controls (bsc#1177974)
* restrictive profile: fix conflicting duplicate action org.kde.powerdevil.backlighthelper.setbrightness
* restrictive profile: fix conflicting duplicate action org.freedesktop.color-manager.delete-profile
* profiles: fix conflicting duplicate action org.kde.powerdevil.backlighthelper.brightness
* profiles: remove duplicate actions with same authentication settings
* tools: new script to cleanly remove duplicate actions
==== python-kiwi ====
Version update (9.21.17 -> 9.21.23)
- Bump version: 9.21.22 ? 9.21.23
- Move usrmerge package out of the bootstrap section
Currently bootstrap phase on APT package manager makes use of the
debootstrap tool. However debootstrap is limited to execute the
bootstrap using a single repository. This is causes several limitations
in OBS builds, such as the impossibility of using update repositories or
the inclusion of any package that is not part of the standard OBS
repository.
Usrmerge package is part of the universe repository in OBS which is not
te one used by debootstrap, so it can't be installed on bootstrap phase.
- Bump version: 9.21.21 ? 9.21.22
- Fixed package manager api inconsistency
The method post_process_install_requests_bootstrap in the
zypper package manager was missing an argument
- Bump version: 9.21.20 ? 9.21.21
- Fixed regexp for grub rootdev substitution
The regular expression to match the grub root device
used a lazy glob match ".*?". This however matches a
too long part depending on the rest of the content.
This commit fixes the expression to be strict on
the allowed characters and makes sure the anchor
characters are not part of the matching character
class. This Fixes #1607
- Fix quick start guide build command
The kiwi-descriptions were reorganized in profiles (See OSInside/kiwi-descriptions@788b919ea2500b9d495622c8140e618938634306).
However the build command in the quick start guide was not updated appropriately and therefore the build fails.
This commit will update the build command.
- Fixed install of bash completion
The kiwi completion was installed as kiwi-ng.sh below
/usr/share/bash-completion/completions. This is wrong
because the completion does not pick up files with
a suffix like .sh. This commit changes the completion
file to be installed as kiwi-ng without the suffix
and Fixes #1603
- Update integration tests console setup
Update all integration tests to use a serial tty console setup
and also to use a serial bootloader setup. This Fixes #1518
- Refactor VolumeManager
This commit refactors VolumeManager to turn it into a proper
factory class and to also include type hints to facilitate it's
use from an API POV. Related to #1498
- Do not exclude filesystem folders in OCI images
This commit does not exclude filesystem folders during the rsync call
in OCI images. It has been noted that including an empty /dev folder does
not hurt and it can eventually help to work around some limitations of
container related tools such as buildah.
Fixes bsc#1176129
- Refactor RootImport
This commit refactors RootImport to turn it into a proper
factory class and to also include type hints to facilitate it's
use from an API POV. Related to #1498
- Set displayname in simple disk test
Use the simple disk integration test to test the setup
of the displayname attribute. It is expected that this
image has the configured displayname set in the grub
menu. The verification of this setting should be done
in a functional test at openQA which we are currently
working on
- Refactor DiskFormat
This commit refactors DiskFormat to turn it into a proper
factory class and to also include type hints to facilitate it's
use from an API POV. Related to #1498
- Refactor SolverRepository
This commit refactors SolverRepository to turn it into a proper
factory class and to also include type hints to facilitate it's
use from an API POV. Related to #1498
- Set GRUB_DISTRIBUTOR if requested via displayname
If the image description explicitly specifies a displayname
it is expected that the bootloader shows this in the menu.
Therefore in case displayname is set GRUB_DISTRIBUTOR will
be set if grub2 is in use. This partially reverts #1420
and Fixes #1575
- Bump version: 9.21.19 ? 9.21.20
- Deleted yast from test-image-qcow-openstack
yast is not part of the testing queue in kiwi integration tests
- Obsolete config functions baseMount/baseCleanMount
The above methods are obsolete since kiwi handles these
mount/umount processes as part of the core builder code.
This Fixes #1536
- Bump version: 9.21.18 ? 9.21.19
- Allow custom root volume name setup
In addition to the custom size of the root volume it's now
also possible to setup the name of the root volume as follows:
<volume name="@root=rootlv"/>
If no name for the root volume is specified the default
name: LVRoot applies as before. This Fixes #1530
- Rename image build tests
To use the image builds in openQA they have to have a unique
name such that it cannot happen that a cached version of an
image in openQA is used. The current names matched openQA
cached images e.g openSUSE-Tumbleweed and in addition different
image build tests used the same name. This commit uses the
name of the image as it is organized in its directory structure
prepending "kiwi-" to be unique in openQA when it fetches
the image. This is realted to Issue #1555
- Better integrate debootstrap in KIWI process
This commit integrates debootstrap process in KIWI in a more transparent
way. This refactor makes debootstrap to operate directly over the image
target root tree. This way KIWI can show and parse debootstrap stdout
and also avoids having to copy the created root tree from one temporary
folder to the actual target root tree path.
Related to #1587
- Include boostrap packages list into deboostrap call
This commit includes the packages listed in boostrap section to the
debootstrap call instead chrooting into the new root tree and call
apt.
Fixes #1587
- Update outdated OBS User Guide Links
- Fixed device_array structure in get_selected_disk
In reference to Issue #880 a bug was introduced that broke
the contents of the device_array which causes issues on
installations with two or more attached disks. The change
in the mentioned PR reduced the tuple for each disk
from 3 elements to 2 elements. Therefore the loop that
iterates over the disk tuples via modulo 3 was broken.
This commit fixes the modulo operation to correctly
parse the disk_list. Fixes #1588
- Add support for s390 CDL DASD disks
On s390 and in CDL mode (4k DASD) the call of grub2-install
does not work because grub2-install is not able to identify
a 4k fdasd partitioned loop device as a grub supported device
and fails. As grub2-install is only used to invoke
grub2-zipl-setup and has no other job to do we can
circumvent this problem by directly calling grub2-zipl-setup
instead. Also delete LDL mode support, IBM no longer supports
this
- Fixed strncopy in dcounter helper
The max size of the copy operation was always set to zero
because the strlen of an empty buffer is zero. Bad mistake
from my side :( This Fixes #1579
- Bump version: 9.21.17 ? 9.21.18
- Fix profile docs
This commit fixes the profiles documentation. The example KIWI-NG
command was using wrong flags order. This commit fixes the `--profile`
flag order in documentation.
- Enhance scope of _fix_grub_root_device_reference
In addition to the wrong root=/dev/mapper/loop... reference
fixing, written by grub2-mkconfig when used in obs there is
also the case that grub2-mkconfig writes root=PARTUUID which
is also unwanted and needs fixing. To solve this properly
and also with respect to more unexpected grub2-mkconfig
data, the code changes to use a regular expression for the
root= replacement. The expression matches all root= cases which
we want to fixup:
1. If the local used root device appears in the grub config file.
2. If a linux by-id setting is used in the grub config file.
The replacement happens for overlayroot disk images where we
know grub2-mkconfig cannot handle the layout as well as if kiwi
runs in obs where we know grub2-mkconfig fails due to the absence
of udev.
- Add support for rd.root.overlay.readonly
Allow to use an overlayroot system with read-only feature.
If kernelcmdline="rd.root.overlay.readonly" is set in combination
with overlayroot="true" the overlayfs uses a tmpfs to store
new data temporary as long as the system runs. On reboot the
newly written data is lost and the system is back to its
factory state.
==== qemu ====
Subpackages: qemu-arm qemu-block-curl qemu-block-dmg qemu-block-gluster qemu-block-iscsi qemu-block-nfs qemu-block-rbd qemu-block-ssh qemu-chardev-baum qemu-guest-agent qemu-hw-display-qxl qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-ipxe qemu-ksm qemu-kvm qemu-lang qemu-microvm qemu-ppc qemu-s390 qemu-seabios qemu-sgabios qemu-skiboot qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-spice-app qemu-vgabios qemu-vhost-user-gpu qemu-x86
- Add virtio-fs support for s390x (jsc#SLE-13822)
libvhost-user-handle-endianness-as-manda.patch
virtio-add-vhost-user-fs-ccw-device.patch
==== salt ====
Subpackages: python3-salt salt-master salt-minion
- Set passphrase for salt-ssh keys to empty string (bsc#1178485)
- Added:
* set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch
- Properly validate eauth credentials and tokens on SSH calls made by Salt API
(bsc#1178319) (bsc#1178362) (bsc#1178361)
(CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
* fix-cve-2020-25592-and-add-tests-bsc-1178319.patch
- Fix novendorchange handling in zypperpkg module
- Added:
* fix-novendorchange-option-284.patch
- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
* path-replace-functools.wraps-with-six.wraps-bsc-1177.patch
==== shotwell ====
Version update (0.30.10 -> 0.30.11)
Subpackages: shotwell-lang
- Update to version 0.30.11:
+ Add missing "Publish..." item in file menu.
+ Enable sandboxing for WebKitGTK.
+ Updated translations.
==== tk ====
- Fix build with RPM 4.16: error: bare words are no longer
supported, please use "...": lib64 == lib64.
==== tmux ====
Version update (3.1b -> 3.1c)
- fix build for SLE 12 PackageHub
- Update to version 3.1c
* Fix a stack overflow on colon-separated CSI parsing.
boo#1178263 CVE-2020-27347
==== virt-manager ====
Subpackages: virt-install virt-manager-common
- jsc#SLE-12902 virt-manager: Display information about nvram file
used instead of the path to the Nvram
virtman-add-tooltip-to-firmware.patch