[prev in list] [next in list] [prev in thread] [next in thread] 

List:       opensuse-factory
Subject:    [opensuse-factory] New Tumbleweed snapshot 20200519 released!
From:       Dominique Leuenberger <dimstar () suse ! de>
Date:       2020-05-21 0:01:10
Message-ID: 159001927039.1929.8909495792643453471 () go-agent-stagingbot-5
[Download RAW message or body]


Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.

Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20200519


Please do not reply to this email to report issues, rather file a bug
on bugzilla.opensuse.org. For more information on filing bugs please
see https://en.opensuse.org/openSUSE:Submitting_bug_reports

Packages changed:
  a2ps
  bash
  cpupower
  hostname
  krb5 (1.18 -> 1.18.1)
  libgcrypt
  openssl-1_1
  virtualbox (6.1.6 -> 6.1.8)

=== Details ===

==== a2ps ====
Subpackages: liba2ps1

- Discard rm of nonexistent %{_infodir}/dir to fix build

==== bash ====
Subpackages: bash-doc bash-lang

- Add official patch bash50-017
  * There were cases where patch 16 reaped process substitution
    file descriptors (or FIFOs) and processes to early. This is
    a better fix for the problem that bash50-016 attempted to solve.
- Remove temporary patch bash50-fix-016-close-new-fifos.patch

==== cpupower ====
Subpackages: libcpupower0

- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch

==== hostname ====

- Fix LIBEXECDIR substitution for systemd service
- Add nis-domainname.service for FreeIPA

==== krb5 ====
Version update (1.18 -> 1.18.1)
Subpackages: krb5-32bit krb5-client

- Upgrade to 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Remove 0009-Fix-null-dereference-qualifying-short-hostnames.patch

==== libgcrypt ====
Subpackages: libgcrypt20 libgcrypt20-32bit libgcrypt20-hmac

- FIPS: libgcrypt: Double free in test_keys() on failed signature
  verification [bsc#1169944]
  * Use safer gcry_mpi_release() instead of mpi_free()
- Update patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch
- Ship the FIPS checksum file in the shared library package and
  create a separate trigger file for the FIPS selftests (bsc#1169569)
  * add libgcrypt-fips_selftest_trigger_file.patch
  * refresh libgcrypt-global_init-constructor.patch
- Remove libgcrypt-binary_integrity_in_non-FIPS.patch obsoleted
  by libgcrypt-global_init-constructor.patch
- FIPS: Verify that the generated signature and the original input
  differ in test_keys function for RSA, DSA and ECC: [bsc#1165539]
- Add zero-padding when qx and qy have different lengths when
  assembling the Q point from affine coordinates.
- Refreshed patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch
- FIPS: Switch the PCT to use the new signature operation [bsc#1165539]
  * Patches for DSA, RSA and ECDSA test_keys functions:
  - libgcrypt-PCT-DSA.patch
  - libgcrypt-PCT-RSA.patch
  - libgcrypt-PCT-ECC.patch
- Update patch: libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch
- FIPS: Run self-tests from constructor during power-on [bsc#1166748]
  * Set up global_init as the constructor function:
  - libgcrypt-global_init-constructor.patch
  * Relax the entropy requirements on selftest. This is especially
    important for virtual machines to boot properly before the RNG
    is available:
  - libgcrypt-random_selftests-testentropy.patch
  - libgcrypt-rsa-no-blinding.patch
  - libgcrypt-ecc-ecdsa-no-blinding.patch
  * Fix benchmark regression test in FIPS mode:
  - libgcrypt-FIPS-GMAC_AES-benckmark.patch
- Remove check not needed in _gcry_global_constructor [bsc#1164950]
  * Update libgcrypt-Restore-self-tests-from-constructor.patch
- FIPS: Run the self-tests from the constructor [bsc#1164950]
  * Add libgcrypt-invoke-global_init-from-constructor.patch

==== openssl-1_1 ====
Subpackages: libopenssl1_1 libopenssl1_1-32bit libopenssl1_1-hmac

- Limit the DRBG selftests to not deplete entropy (bsc#1165274)
  * fixes also Firefox crashing with Kerberos (bsc#1167132)
  * update openssl-fips_selftest_upstream_drbg.patch

==== virtualbox ====
Version update (6.1.6 -> 6.1.8)
Subpackages: virtualbox-guest-tools virtualbox-guest-x11 virtualbox-kmp-default

- Version bump to 6.1.8 (released May 15 2020 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  File "fixes_for_5.7.patch" is removed as the issue was fixed upstream.
  GUI: Fix several layout and mouse position handling bugs with soft keyboard
  GUI: Fixed crash on last VM removed (6.1.4 regression; bug #19568, #19525, #19506, \
#19490, #19481, #19397)  GUI and API: Allow renaming VMs which are in saved state
  Serial: Fixed slow guest output when using the TCP server mode without anyone being \
connected  Guest Additions: Restored 'VBoxClient--checkhostversion' functionality \
(6.1.0 regression; bug #19470)  Guest Additions: Fixed resizing and multi monitor \
handling for X11 guests. (6.1.0 regression; bug #19496)  Guest Additions: Build \
problems fix with Oracle Linux 8.2 (Red Hat compatible kernel) / Red Hat Enterprise \
Linux 8.2 / CentOS 8.2 (bug #19391)  Guest Control/VBoxManage: Fixed handling of \
multiple environment variables supplied to 'VBoxManage guestcontrol VM run' \
(6.1.6/6.0.20 regression; bug #19518)  Guest Control: Implemented support for \
long(er) command lines  Guest Control: Various stability improvements


-- 
To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org
To contact the owner, e-mail: opensuse-factory+owner@opensuse.org


[prev in list] [next in list] [prev in thread] [next in thread]