Packages changed: apparmor cloud-init gnutls iproute2 (5.2 -> 5.3) iptables libnettle libxslt lvm2-device-mapper open-vm-tools (10.3.10 -> 11.0.0) patterns-microos python-asn1crypto (0.24.0 -> 1.0.0) python-base python-urllib3 (1.25.5 -> 1.25.6) texinfo xen === Details === ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils perl-apparmor python3-apparmor - add abstractions-ssl-certbot-paths.diff - add certbot paths to abstractions/ssl_certs and abstractions/ssl_keys - add apparmor-krb5-conf-d.diff for kerberos client ==== cloud-init ==== - Add cloud-init-after-wicked.patch - Change the service order, the cloud-init service wants to run after networking is started - Add cloud-init-noresolv-merge-no-dns-data.diff - Avoid writing resolv.conf if the network configuration contains no dns entries. - Follow up to update cloud-init-trigger-udev.patch (bsc#1144363) - In this implementation the "name" is not yet an attribute, use get() to obtain the value from a dict. Source code version confusion. ==== gnutls ==== - Install checksums for binary integrity verification which are required when running in FIPS mode (bsc#1152692, jsc#SLE-9518) ==== iproute2 ==== Version update (5.2 -> 5.3) - Update to new upstream release 5.3 * devlink: show devlink port number * devlink: introduce PCI PF and VF port flavor and attribute * ip: support for nexthop objects * ip: add -Numeric option * ip: bond: support peer notification delay * rdma: query/set netns sharing sys parameter * rdma: support setting netns of rdma device * rdma: support "stat qp show" * rdma: support per-port counter mode * rdma: support stat manual mode * rdma: support default counter statistics * rdma: support CQ adaptive moderation * tc: support act_ctinfo action * tc: skbedit: add mask parameter * tc: add mpls actions * tc: stricter parameter parsing * tc: netem: json output * tipc: support interface name when activating UDP bearer * update documentation - refresh * xfrm-support-displaying-transformations-used-for-Mob.patch * bpf-data-section-support-poc.patch * bpf-bss-section-poc.patch - use fallback definition %make_build if it is not defined (fix SLE12 build) ==== iptables ==== Subpackages: libip4tc2 libip6tc2 libxtables12 xtables-plugins - Add Conflicts with iptables-nft = 1.6.2 as during the update to iptables 1.8 ip6tables-restore-translate, ip6tables-translate, iptables-restore-translate and iptables-translate were moved from iptables-nft subpackage (now iptables-backend-nft) to the main package. So we need to add a conflict here otherwise we hit file conflicts error during the update. ==== libnettle ==== Subpackages: libhogweed5 libnettle7 - Install checksums for binary integrity verification which are required when running in FIPS mode (bsc#1152692, jsc#SLE-9518) ==== libxslt ==== - Drop out lilbxslt-python package as it is just py2 based and upstream yet didn't bother to port it to python3. When there is python3 compatible code it should be enabled as multibuild here * Drop now unused libxslt-1.1.24-linkflags.patch and libxslt-do_not_build_doc_nor_xsltproc.patch ==== lvm2-device-mapper ==== Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 - Fix LV activation issues (boo#1152378, rh#1727270) + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch ==== open-vm-tools ==== Version update (10.3.10 -> 11.0.0) Subpackages: libvmtools0 - Update to 11.0.0 (build 14549424) (boo#1151523) + Added appInfo to publish information about running applications inside the guest. + Provided sample tool.conf for ease of administration. - Updated spec file to build 11.0.0 - Removed libgrabbitmqProxy.so, vmware-guestproxycerttool, and guestproxy-ssl.conf - Added %config(noreplace) %{_sysconfdir}/vmware-tools/tools.conf.example - Drop unnecessary patch: - gcc9-warnings.patch ==== patterns-microos ==== Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-basesystem patterns-microos-cloud patterns-microos-defaults patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-selinux patterns-microos-sssd_ldap - Enable armv7 ==== python-asn1crypto ==== Version update (0.24.0 -> 1.0.0) - update to version 1.0.0 * BREAKING CHANGE: Removed functionality to calculate public key values from private key values. Alternatives have been added to oscrypto. (see upstream changelog) * Significantly improved parsing of core.UTCTime() and core.GeneralizedTime() values that include timezones and fractional seconds * core.Choice() may now be constructed by a 2-element tuple or a 1-key dict * No longer try to load optional performance dependency, libcrypto, on Mac or Linux * Add support for explicit RSA SSA PSS to keys.PublicKeyInfo() and keys.PrivateKeyInfo() * Add/improve few algorithms (RC4, secp256k1, SHA-3, SHAKE) * Added asn1crypto_tests package to PyPi * Many bugfixes ==== python-base ==== Subpackages: libpython2_7-1_0 - Add bpo36302-sort-module-sources.patch (boo#1041090) ==== python-urllib3 ==== Version update (1.25.5 -> 1.25.6) - Updae to 1.25.6: * Fix issue where tilde (~) characters were incorrectly percent-encoded in the path. (Pull #1692) ==== texinfo ==== - use filetrigger instead of transfiletrigger - Temporary disable %transfiletriggerin/%transfiletriggerun and reintroduce %post/%preun with %install_info/%install_info_delete as libzypp currentyl can not handle first case (boo#1041742) - Fix patch texinfo-zlib.patch to enable open of compressed info files without using a compressor utility (boo#1152105) - For bug boo#1152105 split of the info pages of package info to be able to preinstall gzip before/with first install-info call - implement file trigger for installing and removing info pages (boo#1152105) ==== xen ==== - bsc#1135799 - Partner-L3: Xen crashes on AMD ROME based machines 5ca7660f-x86-entry-drop-unused-includes.patch 5cf8da09-adjust-sysdom-creation-call-earlier-on-x86.patch 5cab2a6b-x86-ACPI-also-parse-AMD-tables-early.patch 5cab2ab7-x86-IOMMU-introduce-init-ops.patch 5cab2ae8-x86-IOMMU-abstract-iommu_supports_eim.patch 5cab2b4e-x86-IOMMU-abstract-iommu_enable_x2apic_IR.patch 5cab2b95-x86-IOMMU-initialize-iommu_ops-in.patch 5cac9a4b-x86-IOMMU-abstract-adjust_vtd_irq_affinities.patch 5cdeac7f-AMD-IOMMU-adjust-IOMMU-list-head-init.patch 5d0cf4e4-AMD-IOMMU-initialize-IRQ-tasklet-once.patch 5d149bb0-AMD-IOMMU-dont-add-IOMMUs.patch 5d1b3fab-AMD-IOMMU-restrict-feature-logging.patch 5d358508-x86-IRQ-desc-affinity-represents-request.patch 5d358534-x86-IRQ-consolidate-arch-cpu_mask-use.patch 5d358a67-AMD-IOMMU-pass-IOMMU-to-iterate_ivrs_entries-cb.patch 5d358a92-AMD-IOMMU-pass-IOMMU-to-amd_iommu_alloc_intremap_table.patch 5d39811c-x86-IOMMU-dont-restrict-IRQ-affinities.patch 5d417813-AMD-IOMMU-bitfield-extended-features.patch 5d417838-AMD-IOMMU-bitfield-control-reg.patch 5d41785b-AMD-IOMMU-bitfield-IRTE.patch 5d41787e-AMD-IOMMU-pass-IOMMU-to-gfu-intremap-entry.patch 5d4178ad-AMD-IOMMU-128bit-non-guest-APIC-IRTE.patch 5d4178fc-AMD-IOMMU-split-amd_iommu_init_one.patch 5d41793f-AMD-IOMMU-allow-enabling-without-IRQ.patch 5d417a16-AMD-IOMMU-adjust-IRQ-setup-for-x2APIC.patch 5d417ab6-AMD-IOMMU-enable-x2APIC-mode.patch 5d417b38-AMD-IOMMU-correct-IRTE-updating.patch 5d417b6a-AMD-IOMMU-dont-needlessly-log-headers.patch 5d4a9d25-AMD-IOMMU-drop-not-found-message.patch 5d80e7c0-AMD-IOMMU-free-shared-IRT-once.patch 5d80e80d-AMD-IOMMU-valid-flag-for-IVRS-mappings.patch 5d80e82e-AMD-IOMMU-alloc_intremap_table-callers-handle-errors.patch 5d80e857-x86-PCI-read-MSI-X-table-entry-count-early.patch 5d8b72e5-AMD-IOMMU-dont-blindly-alloc-intremap-tables.patch 5d8b730e-AMD-IOMMU-phantom-funcs-share-intremap-tables.patch 5d8b733b-x86-PCI-read-max-MSI-vector-count-early.patch 5d8b736d-AMD-IOMMU-replace-INTREMAP_ENTRIES.patch 5d8b7393-AMD-IOMMU-restrict-intremap-table-sizes.patch - bsc#1145240 - [Migration]Can't pre-allocate 1 shadow pages 5d70bfba-x86-shadow-dont-enable-with-too-small-allocation.patch - bsc#1137717 - [HPS Bug] Unable to install Windows Server 2016 with 2 CPUs setting (or above) under SLES12 SP4 Xen Server on AMD ROME platform 5d89d8d9-libxc-x86-avoid-overflow-in-CPUID-APIC-ID.patch - Upstream bug fixes (bsc#1027519) 5d67ceaf-x86-properly-gate-PKU-clearing.patch 5d779811-x86-fix-CPUID7-0-eax-levelling-MSR.patch 5d77b40f-fix-hvm_all_ioreq_servers_add_vcpu-cleanup.patch 5d80ea13-vpci-honor-read-only-devices.patch 5d8b715f-ACPI-cpuidle-bump-max-num-of-states.patch - bsc#1145774 - Libivrtd segfaults when trying to live migrate a VM Fix crash in an error path of libxl_domain_suspend with libxl.helper_done-crash.patch