Packages changed: kanagram kernel-source (4.20.4 -> 4.20.6) libyaml (0.1.7 -> 0.2.1) perl-Encode (2.99 -> 3.00) python-PyYAML python-Twisted python-cryptography (2.4.2 -> 2.5) python-gevent (1.3.5 -> 1.4.0) python-msgpack python-pyasn1 (0.4.4 -> 0.4.5) python-pyasn1-modules (0.2.2 -> 0.2.4) python-tornado python3 python3-base remmina (1.3.1 -> 1.3.2) rtl8812au (5.2.20.2+git20190117.edcd447_k4.20.4_1 -> 5.2.20.2+git20190117.edcd447_k4.20.6_1) virt-manager vm-install (0.10.05 -> 0.10.06) === Details === ==== kanagram ==== Subpackages: kanagram-lang - Update/cleanup build requirements - Add Qt5TextToSpeech BuildRequires to enable text-to-speech ==== kernel-source ==== Version update (4.20.4 -> 4.20.6) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms kernel-vanilla-base - Linux 4.20.6 (bnc#1012628). - amd-xgbe: Fix mdio access for non-zero ports and clause 45 PHYs (bnc#1012628). - net: bridge: Fix ethernet header pointer before check skb forwardable (bnc#1012628). - net: Fix usage of pskb_trim_rcsum (bnc#1012628). - net: phy: marvell: Errata for mv88e6390 internal PHYs (bnc#1012628). - net: phy: mdio_bus: add missing device_del() in mdiobus_register() error handling (bnc#1012628). - net: phy: phy driver features are mandatory (bnc#1012628). - net/sched: act_tunnel_key: fix memory leak in case of action replace (bnc#1012628). - net_sched: refetch skb protocol for each filter (bnc#1012628). - openvswitch: Avoid OOB read when parsing flow nlattrs (bnc#1012628). - vhost: log dirty page correctly (bnc#1012628). - mlxsw: pci: Increase PCI SW reset timeout (bnc#1012628). - net: ipv4: Fix memory leak in network namespace dismantle (bnc#1012628). - mlxsw: spectrum_fid: Update dummy FID index (bnc#1012628). - mlxsw: pci: Ring CQ's doorbell before RDQ's (bnc#1012628). - net/sched: cls_flower: allocate mask dynamically in fl_change() (bnc#1012628). - udp: with udp_segment release on error path (bnc#1012628). - ip6_gre: fix tunnel list corruption for x-netns (bnc#1012628). - erspan: build the header with the right proto according to erspan_ver (bnc#1012628). - net: phy: marvell: Fix deadlock from wrong locking (bnc#1012628). - ip6_gre: update version related info when changing link (bnc#1012628). - tcp: allow MSG_ZEROCOPY transmission also in CLOSE_WAIT state (bnc#1012628). - ARM: fix the cockup in the previous patch (bnc#1012628). - SUNRPC: Address Kerberos performance/behavior regression (bnc#1012628). - mei: me: mark LBG devices as having dma support (bnc#1012628). - mei: me: add denverton innovation engine device IDs (bnc#1012628). - USB: leds: fix regression in usbport led trigger (bnc#1012628). - USB: EHCI: ehci-mv: add MODULE_DEVICE_TABLE (bnc#1012628). - USB: serial: ftdi_sio: fix GPIO not working in autosuspend (bnc#1012628). - USB: serial: simple: add Motorola Tetra TPG2200 device id (bnc#1012628). - USB: serial: pl2303: add new PID to support PL2303TB (bnc#1012628). - ceph: clear inode pointer when snap realm gets dropped by its inode (bnc#1012628). - ASoC: atom: fix a missing check of snd_pcm_lib_malloc_pages (bnc#1012628). - ASoC: rt5514-spi: Fix potential NULL pointer dereference (bnc#1012628). - ASoC: tlv320aic32x4: Kernel OOPS while entering DAPM standby mode (bnc#1012628). - clk: zynqmp: Fix memory allocation in zynqmp_clk_setup (bnc#1012628). - clk: socfpga: stratix10: fix rate calculation for pll clocks (bnc#1012628). - clk: socfpga: stratix10: fix naming convention for the fixed-clocks (bnc#1012628). - inotify: Fix fd refcount leak in inotify_add_watch() (bnc#1012628). - ALSA: hda/realtek - Fix typo for ALC225 model (bnc#1012628). - ALSA: hda - Add mute LED support for HP ProBook 470 G5 (bnc#1012628). - ARCv2: lib: memeset: fix doing prefetchw outside of buffer (bnc#1012628). - ARC: adjust memblock_reserve of kernel memory (bnc#1012628). - ARC: perf: map generic branches to correct hardware condition (bnc#1012628). - s390/vdso: correct vdso mapping for compat tasks (bnc#1012628). - s390/mm: always force a load of the primary ASCE on context switch (bnc#1012628). - s390/early: improve machine detection (bnc#1012628). - s390/smp: fix CPU hotplug deadlock with CPU rescan (bnc#1012628). - s390/smp: Fix calling smp_call_ipl_cpu() from ipl CPU (bnc#1012628). - misc: ibmvsm: Fix potential NULL pointer dereference (bnc#1012628). - char/mwave: fix potential Spectre v1 vulnerability (bnc#1012628). - mmc: sdhci-iproc: handle mmc_of_parse() errors during probe (bnc#1012628). - mmc: dw_mmc-bluefield: : Fix the license information (bnc#1012628). - mmc: meson-gx: Free irq in release() callback (bnc#1012628). - staging: rtl8188eu: Add device code for D-Link DWA-121 rev B1 (bnc#1012628). - tty: Handle problem if line discipline does not have receive_buf (bnc#1012628). - uart: Fix crash in uart_write and uart_put_char (bnc#1012628). - tty/n_hdlc: fix __might_sleep warning (bnc#1012628). - hv_balloon: avoid touching uninitialized struct page during tail onlining (bnc#1012628). - Drivers: hv: vmbus: Check for ring when getting debug info (bnc#1012628). - vgacon: unconfuse vc_origin when using soft scrollback (bnc#1012628). - CIFS: Fix possible hang during async MTU reads and writes (bnc#1012628). - CIFS: Fix credits calculations for reads with errors (bnc#1012628). - CIFS: Fix credit calculation for encrypted reads with errors (bnc#1012628). - CIFS: Do not reconnect TCP session in add_credits() (bnc#1012628). - smb3: add credits we receive from oplock/break PDUs (bnc#1012628). - Input: xpad - add support for SteelSeries Stratus Duo (bnc#1012628). - Input: input_event - provide override for sparc64 (bnc#1012628). - Input: uinput - fix undefined behavior in uinput_validate_absinfo() (bnc#1012628). - acpi/nfit: Block function zero DSMs (bnc#1012628). - acpi/nfit: Fix command-supported detection (bnc#1012628). - scsi: ufs: Use explicit access size in ufshcd_dump_regs (bnc#1012628). - dm thin: fix passdown_double_checking_shared_status() (bnc#1012628). - dm crypt: fix parsing of extended IV arguments (bnc#1012628). - drm/amdgpu: Add APTX quirk for Lenovo laptop (bnc#1012628). - EDAC, altera: Fix S10 persistent register offset (bnc#1012628). - KVM: x86: Fix single-step debugging (bnc#1012628). - KVM: x86: Fix PV IPIs for 32-bit KVM host (bnc#1012628). - KVM: x86: WARN_ONCE if sending a PV IPI returns a fatal error (bnc#1012628). - kvm: x86/vmx: Use kzalloc for cached_vmcs12 (bnc#1012628). - x86/pkeys: Properly copy pkey state at fork() (bnc#1012628). - x86/selftests/pkeys: Fork() to check for state being preserved (bnc#1012628). - x86/kaslr: Fix incorrect i8254 outb() parameters (bnc#1012628). - x86/entry/64/compat: Fix stack switching for XEN PV (bnc#1012628). - posix-cpu-timers: Unbreak timer rearming (bnc#1012628). - net: sun: cassini: Cleanup license conflict (bnc#1012628). - irqchip/gic-v3-its: Align PCI Multi-MSI allocation on their size (bnc#1012628). - can: dev: __can_get_echo_skb(): fix bogous check for non-existing skb by removing it (bnc#1012628). - can: bcm: check timer values before ktime conversion (bnc#1012628). - can: flexcan: fix NULL pointer exception during bringup (bnc#1012628). - vt: make vt_console_print() compatible with the unicode screen buffer (bnc#1012628). - vt: always call notifier with the console lock held (bnc#1012628). - vt: invoke notifier on screen size change (bnc#1012628). - drm/meson: Fix atomic mode switching regression (bnc#1012628). - bpf: move {prev_,}insn_idx into verifier env (bnc#1012628). - bpf: move tmp variable into ax register in interpreter (bnc#1012628). - nvmet-rdma: Add unlikely for response allocated check (bnc#1012628). - nvmet-rdma: fix null dereference under heavy load (bnc#1012628). - bpf: enable access to ax register also from verifier rewrite (bnc#1012628). - bpf: restrict map value pointer arithmetic for unprivileged (bnc#1012628). - bpf: restrict stack pointer arithmetic for unprivileged (bnc#1012628). - bpf: restrict unknown scalars of mixed signed bounds for unprivileged (bnc#1012628). - bpf: fix check_map_access smin_value test when pointer contains offset (bnc#1012628). - bpf: prevent out of bounds speculation on pointer arithmetic (bnc#1012628). - bpf: fix sanitation of alu op with pointer / scalar type from different paths (bnc#1012628). - bpf: fix inner map masking to prevent oob under speculation (bnc#1012628). - Drivers: hv: vmbus: Remove the useless API vmbus_get_outgoing_channel() (bnc#1012628). - vmbus: fix subchannel removal (bnc#1012628). - Revert "mm, memory_hotplug: initialize struct pages for the full memory section" (bnc#1012628). - usb: dwc3: gadget: Clear req->needs_extra_trb flag on cleanup (bnc#1012628). - mt76x0: do not overwrite other MT_BBP(AGC, 8) fields (bnc#1012628). - mt76x0: use band parameter for LC calibration (bnc#1012628). - mt76x02: run calibration after scanning (bnc#1012628). - mt76x02: assure we update gain after scan (bnc#1012628). - mt76x0: do not perform MCU calibration for MT7630 (bnc#1012628). - mt76x0: antenna select corrections (bnc#1012628). - mt76x0: phy: unify calibration between mt76x0u and mt76x0e (bnc#1012628). - ide: fix a typo in the settings proc file name (bnc#1012628). - Input: input_event - fix the CONFIG_SPARC64 mixup (bnc#1012628). - Refresh patches.suse/0005-x86-enter-Use-IBRS-on-syscall-and-interrupts.patch. - commit 463cfd2 - config files: set CONFIG_SCSI_MQ_DEFAULT=y (bsc#1122182) Kernel 4.20 and newer use blk_mq for device mapper exclusively. Thus stacking device mapper on SCSI devices fails unless we use blk_mq for SCSI devices as well. - commit 0a5bbbc - Linux 4.20.5 (bnc#1012628). - ipmi:ssif: Fix handling of multi-part return messages (bnc#1012628). - ipmi: Prevent use-after-free in deliver_response (bnc#1012628). - ipmi: msghandler: Fix potential Spectre v1 vulnerabilities (bnc#1012628). - ipmi: Don't initialize anything in the core until something uses it (bnc#1012628). - ipmi: fix use-after-free of user->release_barrier.rda (bnc#1012628). - Bluetooth: Fix unnecessary error message for HCI request completion (bnc#1012628). - drm/amd/display: Fix disabled cursor on top screen edge (bnc#1012628). - mm/memblock.c: skip kmemleak for kasan_init() (bnc#1012628). - mm, proc: be more verbose about unstable VMA flags in /proc//smaps (bnc#1012628). - userfaultfd: clear flag if remap event not enabled (bnc#1012628). - mm/swap: use nr_node_ids for avail_lists in swap_info_struct (bnc#1012628). - mm/page-writeback.c: don't break integrity writeback on - >writepage() error (bnc#1012628). - ocfs2: fix panic due to unrecovered local alloc (bnc#1012628). - iomap: don't search past page end in iomap_is_partially_uptodate (bnc#1012628). - scsi: megaraid: fix out-of-bound array accesses (bnc#1012628). - KVM: PPC: Book3S HV: Apply combination of host and l1 pte rc for nested guest (bnc#1012628). - KVM: PPC: Book3S HV: Align gfn to L1 page size when inserting nest-rmap entry (bnc#1012628). - scsi: smartpqi: call pqi_free_interrupts() in pqi_shutdown() (bnc#1012628). - ath10k: fix peer stats null pointer dereference (bnc#1012628). - scsi: smartpqi: correct lun reset issues (bnc#1012628). - scsi: mpt3sas: fix memory ordering on 64bit writes (bnc#1012628). - IB/usnic: Fix potential deadlock (bnc#1012628). - sysfs: Disable lockdep for driver bind/unbind files (bnc#1012628). - ALSA: bebob: fix model-id of unit for Apogee Ensemble (bnc#1012628). - Bluetooth: btusb: Add support for Intel bluetooth device 8087:0029 (bnc#1012628). - dm: Check for device sector overflow if CONFIG_LBDAF is not set (bnc#1012628). - clocksource/drivers/integrator-ap: Add missing of_node_put() (bnc#1012628). - quota: Lock s_umount in exclusive mode for Q_XQUOTA{ON,OFF} quotactls (bnc#1012628). - perf tools: Add missing open_memstream() prototype for systems lacking it (bnc#1012628). - perf tools: Add missing sigqueue() prototype for systems lacking it (bnc#1012628). - perf cs-etm: Correct packets swapping in cs_etm__flush() (bnc#1012628). - dm snapshot: Fix excessive memory usage and workqueue stalls (bnc#1012628). - tools lib subcmd: Don't add the kernel sources to the include path (bnc#1012628). - perf stat: Avoid segfaults caused by negated options (bnc#1012628). - dm kcopyd: Fix bug causing workqueue stalls (bnc#1012628). - dm crypt: use u64 instead of sector_t to store iv_offset (bnc#1012628). - x86/topology: Use total_cpus for max logical packages calculation (bnc#1012628). - netfilter: ipt_CLUSTERIP: fix deadlock in netns exit routine (bnc#1012628). - netfilter: ipt_CLUSTERIP: remove wrong WARN_ON_ONCE in netns exit routine (bnc#1012628). - netfilter: ipt_CLUSTERIP: check MAC address when duplicate config is set (bnc#1012628). - perf vendor events intel: Fix Load_Miss_Real_Latency on SKL/SKX (bnc#1012628). - perf parse-events: Fix unchecked usage of strncpy() (bnc#1012628). - perf svghelper: Fix unchecked usage of strncpy() (bnc#1012628). - perf tests ARM: Disable breakpoint tests 32-bit (bnc#1012628). - perf intel-pt: Fix error with config term "pt=0" (bnc#1012628). - tools lib traceevent: Fix compile warnings in tools/lib/traceevent/event-parse.c (bnc#1012628). - tty/serial: do not free trasnmit buffer page under port lock (bnc#1012628). - btrfs: improve error handling of btrfs_add_link (bnc#1012628). - btrfs: fix use-after-free due to race between replace start and cancel (bnc#1012628). - btrfs: alloc_chunk: fix more DUP stripe size handling (bnc#1012628). - btrfs: volumes: Make sure there is no overlap of dev extents at mount time (bnc#1012628). - mmc: atmel-mci: do not assume idle after atmci_request_end (bnc#1012628). - kconfig: fix memory leak when EOF is encountered in quotation (bnc#1012628). - kconfig: fix file name and line number of warn_ignored_character() (bnc#1012628). - x86/resctrl: Fix rdt_find_domain() return value and checks (bnc#1012628). - usb: dwc2: Fix disable all EP's on disconnect (bnc#1012628). - bpf: relax verifier restriction on BPF_MOV | BPF_ALU (bnc#1012628). - arm64: Fix minor issues with the dcache_by_line_op macro (bnc#1012628). - clk: imx6q: reset exclusive gates on init (bnc#1012628). - arm64: kasan: Increase stack size for KASAN_EXTRA (bnc#1012628). - selftests: do not macro-expand failed assertion expressions (bnc#1012628). - scsi: target/core: Make sure that target_wait_for_sess_cmds() waits long enough (bnc#1012628). - scsi: target: use consistent left-aligned ASCII INQUIRY data (bnc#1012628). - net: call sk_dst_reset when set SO_DONTROUTE (bnc#1012628). - staging: erofs: fix use-after-free of on-stack `z_erofs_vle_unzip_io' (bnc#1012628). - media: venus: core: Set dma maximum segment size (bnc#1012628). - coresight: tmc: Fix bad register address for CLAIM (bnc#1012628). - ASoC: use dma_ops of parent device for acp_audio_dma (bnc#1012628). - media: firewire: Fix app_info parameter type in avc_ca{,_app}_info (bnc#1012628). - arm64: relocatable: fix inconsistencies in linker script and options (bnc#1012628). - powerpc/pseries/cpuidle: Fix preempt warning (bnc#1012628). - powerpc/xmon: Fix invocation inside lock region (bnc#1012628). - media: uvcvideo: Refactor teardown of uvc on USB disconnect (bnc#1012628). - pstore/ram: Do not treat empty buffers as valid (bnc#1012628). - clk: imx: make mux parent strings const (bnc#1012628). - kbuild: let fixdep directly write to .*.cmd files (bnc#1012628). - jffs2: Fix use of uninitialized delayed_work, lockdep breakage (bnc#1012628). - efi/libstub: Disable some warnings for x86{,_64} (bnc#1012628). - rxe: IB_WR_REG_MR does not capture MR's iova field (bnc#1012628). - drm/amdgpu: Reorder uvd ring init before uvd resume (bnc#1012628). - net: ethernet: ave: Set initial wol state to disabled (bnc#1012628). - scsi: qedi: Check for session online before getting iSCSI TLV data (bnc#1012628). - ASoC: pcm3168a: Don't disable pcm3168a when CONFIG_PM defined (bnc#1012628). - arm64: Use a raw spinlock in __install_bp_hardening_cb() (bnc#1012628). - selinux: always allow mounting submounts (bnc#1012628). - fpga: altera-cvp: fix probing for multiple FPGAs on the bus (bnc#1012628). - usb: gadget: udc: renesas_usb3: add a safety connection way for forced_b_device (bnc#1012628). - samples: bpf: fix: error handling regarding kprobe_events (bnc#1012628). - clk: meson: meson8b: fix incorrect divider mapping in cpu_scale_table (bnc#1012628). - clk: meson: meson8b: add support for more M/N values in sys_pll (bnc#1012628). - drm/atomic-helper: Complete fake_commit->flip_done potentially earlier (bnc#1012628). - MIPS: Loongson: Add Loongson-3A R2.1 basic support (bnc#1012628). - arm64: perf: set suppress_bind_attrs flag to true (bnc#1012628). - drm/scheduler: Fix bad job be re-processed in TDR (bnc#1012628). - crypto: ecc - regularize scalar for scalar multiplication (bnc#1012628). - MIPS: SiByte: Enable swiotlb for SWARM, LittleSur and BigSur (bnc#1012628). - x86/mce: Fix -Wmissing-prototypes warnings (bnc#1012628). - ALSA: oxfw: add support for APOGEE duet FireWire (bnc#1012628). - bpf: Allow narrow loads with offset > 0 (bnc#1012628). - serial: set suppress_bind_attrs flag only if builtin (bnc#1012628). - writeback: don't decrement wb->refcnt if !wb->bdi (bnc#1012628). - of: overlay: add missing of_node_put() after add new node to changeset (bnc#1012628). - selftests/bpf: enable (uncomment) all tests in test_libbpf.sh (bnc#1012628). - usb: typec: tcpm: Do not disconnect link for self powered devices (bnc#1012628). - e1000e: allow non-monotonic SYSTIM readings (bnc#1012628). - platform/x86: asus-wmi: Tell the EC the OS will handle the display off hotkey (bnc#1012628). - ixgbe: allow IPsec Tx offload in VEPA mode (bnc#1012628). - qtnfmac: fix error handling in control path (bnc#1012628). - drm/amdkfd: fix interrupt spin lock (bnc#1012628). - drm/amd/display: Guard against null stream_state in set_crc_source (bnc#1012628). - ASoC: wm97xx: fix uninitialized regmap pointer problem (bnc#1012628). - gpio: pl061: Move irq_chip definition inside struct pl061 (bnc#1012628). - netfilter: ipset: Allow matching on destination MAC address for mac and ipmac sets (bnc#1012628). - net: clear skb->tstamp in bridge forwarding path (bnc#1012628). - openvswitch: Fix IPv6 later frags parsing (bnc#1012628). - octeontx2-af: Fix a resource leak in an error handling path in 'cgx_probe()' (bnc#1012628). - netlink: fixup regression in RTM_GETADDR (bnc#1012628). - ipv6: Fix dump of specific table with strict checking (bnc#1012628). - ipv6: Take rcu_read_lock in __inet6_bind for mapped addresses (bnc#1012628). - r8169: Add support for new Realtek Ethernet (bnc#1012628). - qmi_wwan: add MTU default to qmap network interface (bnc#1012628). - net, skbuff: do not prefer skb allocation fails early (bnc#1012628). - net: dsa: mv88x6xxx: mv88e6390 errata (bnc#1012628). - mlxsw: spectrum_switchdev: Set PVID correctly during VLAN deletion (bnc#1012628). - mlxsw: spectrum: Disable lag port TX before removing it (bnc#1012628). - ipv6: Consider sk_bound_dev_if when binding a socket to a v4 mapped address (bnc#1012628). - commit 34ae151 ==== libyaml ==== Version update (0.1.7 -> 0.2.1) - --with-pic is useless without static libs, remove it. - Update RPM groups and descriptions. - Add libyaml-revert-emitter-changes.patch: Revert "This code is not needed and breaks tests" (gh#yaml/libyaml#122). - update to 0.2.1 * Fixed most compiler warnings -Wall -Wextra * Support static and dynamic libraries * Add support for `make test` * Apply old fix for `\/` that is not in master. * Port bug fix from Perl binding * Removed trailing-whitespaces * Fix -Wformat compilation errors in tests * Added missing Cflags path in pkg-config file * Forbid escaped singlequote in doublequotes ==== perl-Encode ==== Version update (2.99 -> 3.00) - updated to 3.00 see /usr/share/doc/packages/perl-Encode/Changes ==== python-PyYAML ==== Subpackages: python2-PyYAML python3-PyYAML - Use %license instead of %doc [bsc#1082318] ==== python-Twisted ==== - test-mktime-invalid-tm_isdst.patch: don't pass invalid tm_isdst value to mktime (see also bpo-15750) ==== python-cryptography ==== Version update (2.4.2 -> 2.5) Subpackages: python2-cryptography python3-cryptography - Dependency on python-idna changed to "Recommends" aligned with change in upstream source (see below) - update to 2.5: * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1, but this version removes the default idna dependency as well. If you still need this deprecated path please install cryptography with the idna extra: pip install cryptography[idna]. * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4. * Numerous classes and functions have been updated to allow bytes-like types for keying material and passwords, including symmetric algorithms, AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes. * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a. * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1. * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1. * Added support for X448 key exchange when using OpenSSL 1.1.1. * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1. * Added initial support for parsing PKCS12 files with load_key_and_certificates(). * Added support for IssuingDistributionPoint. * Added rfc4514_string() method to x509.Name, x509.RelativeDistinguishedName, and x509.NameAttribute to format the name or component an RFC 4514 Distinguished Name string. * Added from_encoded_point(), which immediately checks if the point is on the curve and supports compressed points. Deprecated the previous method from_encoded_point(). * Added signature_hash_algorithm to OCSPResponse. * Updated X25519 key exchange support to allow additional serialization methods. Calling public_bytes() with no arguments has been deprecated. * Added support for encoding compressed and uncompressed points via public_bytes(). Deprecated the previous method encode_point(). ==== python-gevent ==== Version update (1.3.5 -> 1.4.0) - Version update to 1.4.0: * generate with cython 0.29 * Refactored the gevent test runner and test suite to make them more reusable. In particular, the tests are now run with python -m gevent.tests. See issue #1293. * Formatting run info no longer includes gevent.local.local objects that have no value in the greenlet. See issue #1275. * Fixed negative length in pywsgi?s Input read functions for non chunked body. Reported in issue #1274 by tzickel. * Fix opening files in text mode in CPython 2 on Windows by patching libuv. See issue #1282 reported by wiggin15. * gevent now depends on greenlet 0.4.14 or above. * gevent.local.local subclasses correctly supports @staticmethod functions. Reported by Brendan Powers in issue #1266. - Do NOT bundle c-ares and libev ==== python-msgpack ==== - Use %license ==== python-pyasn1 ==== Version update (0.4.4 -> 0.4.5) Subpackages: python2-pyasn1 python3-pyasn1 - update to 0.4.5 * Debug logging refactored for more efficiency when disabled and for more functionality when in use. Specifically, the global LOG object can easily be used from any function/method, not just from codec main loop as it used to be. * More debug logging added to BER family of codecs to ease encoding problems troubleshooting. * Copyright notice extended to the year 2019 * Fixed defaulted constructed SEQUENCE component initialization. ==== python-pyasn1-modules ==== Version update (0.2.2 -> 0.2.4) - update to version 0.2.4 Revision 0.2.4: - Added modules for RFC8226 implementing JWT Claim Constraints and TN Authorization List for X.509 certificate extensions - Fixed bug in `rfc5280.AlgorithmIdentifier` ANY type definition Revision 0.2.3: - Added modules for RFC5083 and RFC5084 (CMS) - Copyright notice extended to the year 2019 ==== python-tornado ==== - Add patch to skip tests failing with openss-1.1.1; this happens only when using TLS 1.3 so if user wants to use tornado they can hand disable the TLS and continue: * skip-failing-tests.patch - Import necessary dependencies on Red Hat platforms ==== python3 ==== Subpackages: python3-curses python3-dbm - Put LICENSE file where it belongs (bsc#1121852) - bsc#1122191: add CVE-2019-5010-null-defer-x509-cert-DOS.patch fixing bpo-35746. An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.7.2. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted certificates to trigger this vulnerability. ==== python3-base ==== Subpackages: libpython3_7m1_0 - Put LICENSE file where it belongs (bsc#1121852) - bsc#1122191: add CVE-2019-5010-null-defer-x509-cert-DOS.patch fixing bpo-35746. An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.7.2. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted certificates to trigger this vulnerability. ==== remmina ==== Version update (1.3.1 -> 1.3.2) Subpackages: remmina-lang remmina-plugin-rdp remmina-plugin-secret remmina-plugin-vnc remmina-plugin-xdmcp - Upgraded to 1.3.2 * Change rcw size allocation wait algorithm, see issue #1809 * Fix a couple of VNCI crashes, see issue #1821 * Fix spice authentication, issue #1820 * Update translations script fixes * Add a missing end point in an SSH error message * Translation Updates: fr, it * Cosmetic fixes ==== rtl8812au ==== Version update (5.2.20.2+git20190117.edcd447_k4.20.4_1 -> 5.2.20.2+git20190117.edcd447_k4.20.6_1) - Add fix-backported-ndo_select_queue.patch to fix building with SLE-15-SP1's 4.12 kernel with backported features from 4.19. ==== virt-manager ==== Subpackages: virt-install virt-manager-common - bsc#1123942 - [XEN][Build157.1] failed to open file '/usr/lib/grub2/x86_64-xen/grub.xen during bootup PV guest virtinst-change-location-for-grub_xen.patch ==== vm-install ==== Version update (0.10.05 -> 0.10.06) - bsc#1123942 - [XEN][Build157.1] failed to open file '/usr/lib/grub2/x86_64-xen/grub.xen during bootup PV guest - Version 0.10.06