Packages changed: btrfsprogs (5.6.1 -> 5.7) busybox c-ares (1.15.0+20200117 -> 1.16.1) fuse-overlayfs (1.0.0 -> 1.1.0) gettext-runtime gpg2 (2.2.20 -> 2.2.21) haproxy (2.1.7+git0.8bebf80fb -> 2.2.0+git0.3a00c915f) helm (3.0.3 -> 3.2.4) installation-images-MicroOS (15.12 -> 15.13) issue-generator (1.9 -> 1.10) libgcrypt (1.8.5 -> 1.8.6) libslirp (4.3.0 -> 4.3.1) permissions (1550_20200526 -> 1550_20200710) python-M2Crypto (0.35.2 -> 0.36.0) python-blinker rsync (3.1.3 -> 3.2.2) salt vim (8.2.0701 -> 8.2.1154) zstd === Details === ==== btrfsprogs ==== Version update (5.6.1 -> 5.7) Subpackages: btrfsprogs-udev-rules libbtrfs0 - Update to 5.7: * mkfs: * new option to enable features otherwise enabled at runtime, now implemented for quotas, 'mkfs.btrfs -R quota' * fix space accounting for small image, DUP and --rootdir * option -A removed * check: detect ranges with overlapping csum items * fi usage: report correct numbers when plain RAID56 profiles are used * convert: ensure the data chunks size never exceed device size * libbtrfsutil: update documentation regarding subvolume deletion * build: support libkcapi as implementation backend for cryptographic primitives * core: global options for verbosity (-v, -q), subcommands -v or -q are aliases and will continue to work but are considered deprecated, current command output is preserved to keep scripts working * other: * build warning fixes * btrfs-debugfs ported to python 3 ==== busybox ==== - Enable syslogd for containers - Enable testsuite and package it for later rerun (for QA, jsc#CAR-15) ==== c-ares ==== Version update (1.15.0+20200117 -> 1.16.1) - Version update to 1.16.1 Security: * Prevent possible use-after-free and double-free in ares_getaddrinfo() if ares_destroy() is called prior to ares_getaddrinfo() completing. Reported by Jann Horn at Google Project Zero. Changes: * Allow TXT records on CHAOS qclass. Used for retriving things like version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3] Bug fixes: * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1] * Silence false cast-align compiler warnings due to valid casts of struct sockaddr to struct sockaddr_in and struct sockaddr_in6. * MacOS should use libresolv for retrieving DNS servers, like iOS * CMake build system should populate the INCLUDE_DIRECTORIES property of installed targets [2] * Correct macros in use for the ares_getaddrinfo.3 man page - Changes in version 1.16.0 Changes: * Introduction of ares_getaddrinfo() API which provides similar output (including proper sorting as per RFC 6724) to the system native API, but utilizes different data structures in order to provide additional information such as TTLs and all aliases. Please reference the respective man pages for usage details. * Parse SOA records from ns_t_any response * CMake: Provide c-ares version in package export file * CMake: Add CPACK functionality for DEB and RPM * CMake: Generate PDB files during build * CMake: Support manpage installation Bug fixes: * Fix bad expectation in IPv6 localhost test. * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to prevent complaints about CPPFLAGS in CFLAGS. * Fix .onion handling * Command line usage was out of date for adig and ahost. * Typos in manpages * If ares_getenv is defined, it must return a value on all platforms * If /etc/resolv.conf has invalid lookup values, use the defaults. * Tests: Separate live tests from SetServers* tests as only live tests should require internet access. * ares_gethostbyname() should return ENODATA if no valid A or AAAA record is found, but a CNAME was found. * CMake: Rework library function checking to prevent unintended linking with system libraries that aren't needed. * Due to use of inet_addr() it was not possible to return 255.255.255.255 from ares_gethostbyname(). * CMake: Fix building of tests on Windows - Drop regression.patch which have been fixed upstream - Refresh disable-live-tests.patch - Remove static lib since its required when doing tests and we dont want it included in package - Run spec-cleaner ==== fuse-overlayfs ==== Version update (1.0.0 -> 1.1.0) - Update to v1.1.0 - use openat2(2) when available. - accept "ro" as mount option. - fix set mtime for a symlink. - fix some issues reported by static analysis. - fix potential infinite loop on a short read. - fix creating a directory if the destination already exists in the upper layer. ==== gettext-runtime ==== Subpackages: libtextstyle0 - Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629) ==== gpg2 ==== Version update (2.2.20 -> 2.2.21) - Fix regression in latest gpg2 that makes gpgme fail to build [bsc#1174007] - Add gnupg-gpgme-t-encrypt-sym.patch - GnuPG 2.2.21: * gpg: Improve symmetric decryption speed by about 25% * gpg: Support decryption of AEAD encrypted data packets * gpg: Add option --no-include-key-block * gpg: Allow for extra padding in ECDH * gpg: Only a single pinentry is shown for symmetric encryption if the pinentry supports this * gpg: Print a note if no keys are given to --delete-key * gpg,gpgsm: The ridiculous passphrase quality bar is not anymore shown * gpgsm: Certificates without a CRL distribution point are now considered valid without looking up a CRL. The new option - -enable-issuer-based-crl-check can be used to revert to the former behaviour * gpgsm: Support rsaPSS signature verification * gpgsm: Unless CRL checking is disabled lookup a missing issuer certificate using the certificate's authorityInfoAccess * gpgsm: Print the certificate's serial number also in decimal notation * gpgsm: Fix possible NULL-deref in messages of --gen-key * scd: Support the CardOS 5 based D-Trust Card 3.1 * dirmngr: Allow http URLs with "LOOKUP --url" * wkd: Take name of sendmail from configure. Fixes an OpenBSD specific bug ==== haproxy ==== Version update (2.1.7+git0.8bebf80fb -> 2.2.0+git0.3a00c915f) - Update to version 2.2.0+git0.3a00c915f: https://www.haproxy.com/blog/announcing-haproxy-2-2/ * [RELEASE] Released version 2.2.0 * MINOR: version: mention that it's an LTS release now * DOC: minor update to coding style file * DOC: update INSTALL with new compiler versions * CLEANUP: ssl: remove unrelevant comment in smp_fetch_ssl_x_keylog() * DOC: configuration: remove obsolete mentions of H2 being converted to HTTP/1.x * BUG/MINOR: connection: See new connection as available only on reuse always * BUG/MEDIUM: connection: Don't consider new private connections as available * BUG/MINOR: backend: Remove CO_FL_SESS_IDLE if a client remains on the last server * MINOR: mux-h1: Improve traces about the splicing - refreshed patches to apply cleanly again: haproxy-1.6.0-makefile_lib.patch haproxy-1.6.0-sec-options.patch - track series file in source rpm ==== helm ==== Version update (3.0.3 -> 3.2.4) - Update to version 3.2.4 (fixes security issue - https://github.com/helm/helm/security/advisories/GHSA-q8q8-93cv-v6h8 - https://github.com/helm/helm/security/advisories/GHSA-cjjc-xp8v-855w - https://github.com/helm/helm/security/advisories/GHSA-qq3j-xp49-j73f ) * Improve the extractor and add tests (#8317) * Add checking of length of resourceList before creating of deleting * docs: fix capitalization in a few help messages * polish to keep the same log style * Fix markdown table in helm command doc * Add unit test for pkg/chart/chart.go * Fixing docs from version to appVersion (#7975) * Helm upgrades with --reuse-values and nil user values -- with tests (#7959) * fix(pkg/plugin): copy plugins directly to the data directory (#7962) * fs_test: use os.Getuid() instead user.Current() to determine if a test is executed with root privileges. * fix(helm): allow a previously failed release to be upgraded (#7653) * Fixing per gofmt * Fix issue with unhandled error on Stat * chore(helm): Avoid confusion in command usage * Fix unit test * Fix repo cache setting * Fixing PAX Header handling (#8086) * fix: upgrade using --force shoud not run patch logic (#8000) * Set DisableCompression to true to disable unwanted httpclient transformation * fix: write index.yaml file atomically (#7954) * fix linting error with lookup function (#7969) * bump version to v3.2 * fix: removed inaccurate comment (#7937) * Migrate SQL storage driver to Helm 3 (#7635) * fix: Fixed a regression that was introduced with changed nil handling (#7938) * Fix nested null value overrides (#7743) * Updating sprig and semver to newer versions * add unit test for function FindPlugins * fix: rebuild chart after dependency update on install (#7897) * Make get script eaiser for helm versions to live side by side (helm3 etc) (#7752) * add softonic to adopters (#7918) * test: forward-port regression test from Helm 2 (#7927) * Add an improved user error message for removed k8s apis * fix(tests): fix broken unit tests in storage (#7928) * Add unit test for Secrets/ConfigMaps (#7765) * docs: Update inline docs on action/upgrade.go (#7834) * add unit test for metadata Validate * add unit test for ChartFullPath * add unit test for ChartPath * add unit test for IsRoot * updated help text for install --atomic, which was completely inaccurate (#7912) * feat(cmd/helm): Update Cobra to 1.0.0 release * fix(storage): preserve last deployed revision (#7806) * fixed capitalization in a few help messages. (#7898) * chore(comp): Remove unnecessary code * ref(*): kubernetes v1.18 (#7831) * Adding template docs to the version command * Implement support for multiple args for repo remove (#7791) * fix: fixed bug in Dependency.List() (#7852) * Adding notes on semver to create Chart.yaml * feat: allow image tag override * feat: add pod annotations * Avoid downloading same chart multiple times * fix(helm): Data race in kube/client Delete func. (#7820) * Improve --show-only flag (#7816) * Add unit test for pkg/chart/chart.go * remove unneeded values files from testchart * update test chart to helm3 format * fix: update unit test for go 1.14 error string change (#7835) * Add fromYamlArray and fromJsonArray template helpers (#7712) * Delete unneeded chart output * add testing for upgrade --install with subchart notes * pass subchart notes option to install client * Snapcraft installation instructions added * helm create command's templates more consistent * Improve error message to check in unit test * Add unit test for lint/values.go * Fix a bug in Delete() in storage/driver/cfgmaps.go (#7367) * Fix a bug in storage/driver/secrets.go Delete() (#7348) * fix(cli): Make upgrade check if cluster reachable * Correcting links for release notes * Add tests * Add more detail to error messages and support a non-force mode in metadata visitor * Solve the issue #7749 where proper formating was not being done if --short(-q) option was used with other formating options like json, yaml * Fixing issue where archives created on windows have broken paths * fix(install): correct append tls config. * Solve the issue #7749 where proper formating was not being done if --short(-q) option was used with other formating options like json, yaml * Solve the issue #7749 where proper formating was not being done if --short(-q) option was used with other formating options like json, yaml * Solve the issue #7749 where proper formating was not being done if --short(-q) option was used with other formating options like json, yaml * Add unit test * Fix stray modules * Port --devel flag from v2 to v3 * Use Create method if no resources need to be adopted * chore(go.mod): run `go mod tidy` * Make the charts cache safe in presence of several Helm instances * fix: add new static linter and fix issues it found (#7655) * Add --insecure-skip-tls-verify for repositories (#7254) * ref(environment): use string checking instead * Save Chart.lock to helm package tar * test(helm): fix client update error * fix(helm): polish goimport * add unit test for RecordsReplace * fix(helm): respect resource policy on ungrade Don't delete a resource on upgrade if it is annotated with helm.io/resource-policy=keep. This can cause data loss for users if the annotation is ignored(e.g. for a PVC) * add unit test for ConfigMapDelete * add unit test for SecretDelete * fix(ADOPTERS): alphabetize org list (#7645) * Add verification output to the verify command * Fixes verification output on pull command * fix(helm): stdin values for helm upgrade --install * Update README.md * Add test for unknown subcommand * Return "unknown command" error for unknown subcommands * Fix golangci-lint errors. * Fix dep build to be compatiable with Helm 2 when requirements use repo alias * fix(cmd/helm): upgrade go-shellwords * Printing name of chart that do not have requested import value. * pkg/storage/records: add unit test for Exists * pkg/storage/records: add unit test for Index * pkg/storage/records: add unit test for Get * fix(helm): add --skipCRDs flag to 'helm upgrade' When 'helm upgrade --install' is run, this will allow to skip installing CRDs Closes #7452 * feat(tests): Allow to provision memory driver * feat(comp): Dynamic completion for plugins * feat(comp): Static completion for plugins * Alternative: annotation-only solution * Adopt resources into release with correct instance and managed-by labels * feat(comp): Move kube-context completion to Go * feat(install): introduce --create-namespace * Fix output of list action when it is failed * Pass the apiserver address/port via cli, introduce HELM_KUBEAPISERVER envvar * add license headers to release-notes.sh script * Adds script to help craft release notes * pkg/helmpath: fix unit test for Windows * fix golint failure in pkg/action * cmd/helm/search_repo: print info to stderr * pkg/gates: add unit test for String * Fix render error not being propogated * IsReachable() needs to give detailed error message. * fix(scripts): scrape for the latest v2/v3 release from the releases page * feat(upgrade): introduce --disable-openapi-validation: This is a copy of the --disable-openapi-validation flag from the install command as introduced by Matthew Fisher. See commit 67e57a5fbb7b210e534157b8f67c15ffc3445453 * ref(go.mod): k8s api 0.17.3 * Making fetch-dist get the sha256sum files * Pass kube user token via cli, introduce HELM_KUBETOKEN envvar * Place rendering invalid YAML under --debug flag * fix(kube): generate k8s native scheme only once * fix(kube): use non global Scheme to convert * Revert "Do not delete templated CRDs" * fix(helm): improved logs * Fix shasums to be usable by shasum and sha256sum applications * fix(comp): Fix broken completion for --output flag * add test for template recursion * fix recursion count in templates * Fix 'helm template' to also print invalid yaml * fixed missing bullet * Add ADOPTERS file, per CNCF requirements (#7507) * bump version to v3.1 * fix(version): fix typo in doc comment * fix(helm): Reworded logs for clarity * chore(*): Removes support for searching the plugin dir * chore(postrender): Adds unit tests for exec post renderer * Adds post-render support * fix(memory_test): rebase master * fix(cmd): Specify namespace for template command * fix(tests): Add namespace support to memory driver * Fixes issue where non-CRDs are read in from the crd directory * ref(kind_sorter): use an in-place sort for sortManifestsByKind, reduce code duplication * Fix engine.newFiles doc comment * Fixes issue where <CHARTNAME> is left in starter values file * fix(tests): Ignores tarball that will change on dep update * fix(helm): Don't wait for service to be ready when external IP are set * fix(chart): lock digest differs when dependency build with Helm 2 and then Helm 3 (#7261) * Create a single shasums.txt * Create a single shasums.txt * ref(go.mod): oras v0.8.1 (#6862) * feat(template): Allow template output to use release name (#7503) * fix(tests): Make tests pass on MacOS * fixed dependencies processing in case of helm install or upgrade for disabled/enabled sub charts * fix(test) use newly created index instead of ignoring it * Fix tests on arm64 and ppc64le (#7500) * style(cmd/lint): removed slash in subcharts fp * fix(lookup_func): do not return error when object is not found * Fix typo * Tidy up go dependencies (#7494) * fix(template): helm template "--show-only" flag producing duplicates when flag used more than once (#7204) * Fix some spelling errors in comment (#7492) * When no resources were created, do not try to clean them up * fix(comp): Allow zsh completion to handle -n flag * Adding security file * maintain backwards compatibility in the api for the CRDs function * fix(package): remove --set, --values, etc. flags * fix(chartutil): remove empty lines and a space from rendered chart templates (#7455) * Friendly error message for non-existent Chart while packaging (#7127) * fix(helm): sort hooks by kind for equal weight * fix test-style * allow limited recursion in templates * Render the CRDs to spec files * fix(test): Remove invalid subcommand in test * fix(kube) only add to scheme.Scheme once * Use /usr/bin/env for bash * Remove references to protobuf (#7425) * Allow tests to run on s390x (#7096) * fix(comp): Update based on review comments * Add unit test for Reverse() in pkg/releaseutil.go * fix: catch one additional discovery client warning (#7176) * feat(version): show "unreleased" when built from a branch * fix(helm): improve handling of corrupted storage * unnecessary import removed * Signed-off-by: Ahmad Kazemi <ahmad.kazemi@recordpoint.com> log.Printf replaced to fix the log issue. * feat(comp): Isolate go completion framework better * feat(comp): Use cached charts file for speed * feat(test): add some completion tests * feat(comp): Don't use error codes for completion * feat(comp): Support completion for --revision flag * feat(comp): Support --generate-name in completion * feat(comp): Dynamic completion of flags in Go * feat(comp): Dynamic completion of arguments in Go * go.mod,go.sum: bump to k8s v1.17.1 * ref(pkg/storage): Refactor Deployed and DeployedAll (#7374) * Fix: helm3 - kind sorter incorrectly compares unknown and namespace * Fix typo in comment for func IsReachable * fix(test): Make resetEnv() properly reset settings * Refactored alpine-pod.yaml file to make the example work in accordance to the Values.yaml file * feat(comp): Speed up completion of charts * feat(chore): Remove unused code * Add hpa boilerplate * go.mod,go.sum: bump Kubernetes dependencies 1.17.0 * stop with an error immediately if a file or directory with that name already exists (#7187) * add option to bypass kubeconfig namespace * [helm create] Include serviceAccount.annotations value (#7246) * Add corresponding unit test to the function in parser.go * fix(helm): move ServiceAccount before Secret in InstallOrder. * chore(go.sum): run `go mod tidy` * fix error output * fix(tests): use sigs.k8s.io/yaml * Fix a typo "update" -> "updates" (#7346) * Add unit test for List() of pkg/storage/driver/memory.go * fix(cmd): Fixes logging on action conf init error (#6909) * Remove duplicated words (#7336) * Improve description for `--all` flag (#7144) * Add corresponding unit test to the function in resolver.go * Fix typo in --values cmd flag * Do not delete templated CRDs * Fix a typo "the the" -> "the" * fix(comp): tail cannot open +2 for reading * fix(tests): Use relative path to acceptance tests * Add corresponding unit test to the function in resource.go. * feat(cmd/lint): added a flag for linting subcharts * test(cmd/lint): added test for --with-subcharts flag * docs: point users to helm hub * fixup! Updated make to create two files sha256/sha256sum Please link sha256sum as checksum file in GIT releases page for future release * Updated make to create two files sha256/sha256sum Please link sha256sum as checksum file in GIT releases page for future release * fix(helm): add .orig as typical backup file * feat(checksum): update to get/get-helm-3 to match shasum fix * feat(checksum): Generate shasum/sha256sum -c compatible sha256 file * Port PR #4161 Fix incorrect timestamp when helm package to Helmv3 * Add back fix for CRD patch creation * Add new Makefile targets * Spelling (#7258) * add technosophos public key (#7256) * fix(kube): Port use of watcher with retries to wait for resources (#7217) * fixed golint * additional fixes based on @thomastaylor312 comment * addressing some feedback from @thomastaylor312 * fixed test issue * added rest client passed with action configuration * added license header * fixed circle ci issues * added check on namespaced resource * first lookup template function implementation * doc(helmpath) move licensing info out of godoc * fix(install) crd install with apiextensions.k8s.io/v1 * feat(template): process manifests in file path order, then in order found in each file (before sorting manifests) * fix(helm): Validate number of arguments in install client * Add missing statuses to the status help text (#7035) * Updating to sprig 3.0.2 to bring in a bugfix * fix(cmd): Add message about deprecated chart (#6889) * ref(pkg/action): split test of filterList (#6875) * fix(*): Helm v3 handling of APIVersion v1 charts dependencies (#7009) * add Marc Khouzam as a core maintainer * feat(install): introduce --disable-openapi-validation * chore(testdata): remove stale output * fix(tests): Repair tests failures * fix(helm): add --description flag to helm (#7074) * Repair failing unit tests - failure caused by os.Stat return values for directory size on Linux. * Reintroduce --is-upgrade to template command * fix: clarified behavior of 'list --deleted' (#6950) * improved the error message for failed package signing (#6948) * fix this inconsistency in the docs (#7157) * Fix godoc badge * Restoring fetch-dist and sign Make targets * fix(install): use ca file for install (#7140) * use sigs.k8s.io/yaml instead of gopkg.in/yaml.v2 * Fixing the code of conduct pointer * fix "Chart.lock is out of sync with Chart.yaml" (#7119) * Add a flag to allow template to output CRDs * fix(tests): mapfile is not available on MacOS * fix(cli): IsReachable check for "get values" * fix stack overflow error (#7114) * test(pkg): add unit tests for tar file edge cases * docs(install): clarify the --replace flag (#7089) * fix: ignore pax header files in chart validation * fix(plugin): Avoid crash on missing flag * chart_downloader: fix lint issue. * chart_downloader: avoid overriding TLS options from command flags when not setup in repo config. * cli/pull: pass TLS config to chart downloader from flags. (#7055) * chart_downloader: add TLS client config to options from repo config. (#7055) * chart_downloader: add test to verify that http opts are used correctly. (#7055) * fix(plugin): Avoid duplication of flag list * fix(plugin): Add missing -n known flag * fix(lint): Remove requirement that directory name and chart name match * remove unused variable * fix(lint): Remove requirement that directory name and chart name match * Signed-off-by: Jonathan Meyers <jonathan@cybrary.it> * Signed-off-by: Jonathan Meyers <jonathan@cybrary.it> * homebrew renamed formula to just helm from kubernetes-helm * Add s390x build target * fix: change error message to contain correct field name * fix(get-helm-3): remove tiller checks, fixup version check * fix(get): hard code DESIRED_VERSION when unset * fix(wait): Adds support for waiting on v1 apiextensions for CRDs * fix(get): install Helm v2.16.1 * fix(reame): update links to docs * fix(install): log the error when recording the release * fix(pkg/downloader): resolve repo alias before checking digests on build * fix(pkg/downloader): add failing test for build with repo alias * fix(strvals): port #3912, #4142, #4682, and #5151 to Helm 3 * fix(ci): pin golangci-lint to v1.21.0 * Used timeout instead of deadline * fix(cli): helm list was ignoring some errors * ref(tlsutil): remove ServerConfig * fix(tlsutil): accept only a CA certificate for validation * fix: stop discovery errors from halting chart rendering. (#6908) * print gvk information on existing resource conflict * fix(cli): Sort output of helm env * fix(show): restore comments from raw values * Correct spelling mistakes * fix(cmd): Standardizes all output to use lower snake_case names * Consider namespace when comparing resources * fix(version): implement `helm version -c`, mark as hidden * fix(getter): set up TLS options during .Get() * fix(chart): add JSON tags to chart object * fix(comp): Protect against user's aliases * fix(cmd): Updates description for template validation flag * Updating the usage language for search repo * feat(v3): Add shorthand for --all-namespace flag in list command (#6848) * fix(action): strip file extensions from name * Revert "[Makefile] Support reproducible builds" * Add namespace option to example kubectl command * fix(kube): return error when object cannot be patched * feat(helm): add linting support for '.tar.gz' tarballs for helm charts (#6829) * [Makefile] Support reproducible builds * fix(comp): helm plugin 'remove' is now 'uninstall' * fix(version): lift "unreleased" status * Porting fix from commit f5986db184cf6d16dcd48760ac749a20236fb845 * Fix import * fix rename for helm dependency upgrade ==== installation-images-MicroOS ==== Version update (15.12 -> 15.13) - merge gh#openSUSE/installation-images#388 - Adjust style to fix shellcheck warnings; admit this needs bash - Remove bashisms, explicitly use /bin/dash as interpreter (bsc#1172139) - 'make check' will run shellcheck on the scripts needing dash - Save 1.5 MiB RAM by switching inst_setup to dash - 15.13 ==== issue-generator ==== Version update (1.9 -> 1.10) - Update to version 1.10 - Display wlan interfaces [bsc#1169070] ==== libgcrypt ==== Version update (1.8.5 -> 1.8.6) - Update to 1.8.6 * mpi: Consider +0 and -0 the same in mpi_cmp * mpi: Fix flags in mpi_copy for opaque MPI * mpi: Fix the return value of mpi_invm_generic * mpi: DSA,ECDSA: Fix use of mpi_invm - Call mpi_invm before _gcry_dsa_modify_k - Call mpi_invm before _gcry_ecc_ecdsa_sign * mpi: Constant time mpi_inv with some conditions - mpi/mpi-inv.c (mpih_add_n_cond, mpih_sub_n_cond, mpih_swap_cond) - New: mpih_abs_cond, mpi_invm_odd - Rename from _gcry_mpi_invm: mpi_invm_generic - Use mpi_invm_odd for usual odd cases: _gcry_mpi_invm * mpi: Abort on division by zero also in _gcry_mpi_tdiv_qr * Fix wrong code execution in Poly1305 ARM/NEON implementation - Set r14 to -1 at function entry: (_gcry_poly1305_armv7_neon_init_ext) * Set vZZ.16b register to zero before use in armv8 gcm implementation * random: Fix include of config.h * Fix declaration of internal function _gcry_mpi_get_ui: Don't use ulong * ecc: Fix wrong handling of shorten PK bytes - Zeros are already recovered: (_gcry_ecc_mont_decodepoint) - Update libgcrypt-ecc-ecdsa-no-blinding.patch ==== libslirp ==== Version update (4.3.0 -> 4.3.1) - Update to 4.3.1 (bsc#1172380) - A silent truncation could occur in `slirp_fmt()`, which will now print a critical message. See also #22. - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to data leakage. See !44 and !42. - Fix win32 builds by using the SLIRP_PACKED definition. - Various coverity scan errors fixed. !41 - Fix new GCC warnings. !43 - Packaging changes - Enable "set_version" source service in _service file - Move "tar" and "recompress" service to "buildtime" as outlined in the OBS user guide - Enable "package-meta" as the libslirp build process now requires access to the git metadata. ==== permissions ==== Version update (1550_20200526 -> 1550_20200710) Subpackages: chkstat permissions-config - Update to version 20200710: * Revert "etc/permissions: remove entries for bind-chrootenv". This currently conflicts with the way the CheckSUIDPermissions rpmlint-check is implemented. - Removed dbus-libexec.patch: contained in upstream - Update to version 20200624: * rework permissions.local text (boo#1173221) * dbus-1: adjust to new libexec dir location (bsc#1171164) * permission profiles: reinstate kdesud for kde5 * etc/permissions: remove entries for bind-chrootenv * etc/permissions: remove traceroute entry * VirtualBox: remove outdated entry which is only a symlink any more * /bin/su: remove path refering to symlink * etc/permissions: remove legacy RPM directory entries * /etc/permissions: remove outdated sudo directories * singularity: remove outdated setuid-binary entries * chromium: remove now unneeded chrome_sandbox entry (bsc#1163588) * dbus-1: remove deprecated alternative paths * PolicyKit: remove outdated entries last used in SLE-11 * pcp: remove no longer needed / conflicting entries * gnats: remove entries for package removed from Factory * kdelibs4: remove entries for package removed from Factory * v4l-base: remove entries for package removed from Factory * mailman: remove entries for package deleted from Factory * gnome-pty-helper: remove dead entry no longer part of the vte package * gnokii: remove entries for package no longer in Factory * xawtv (v4l-conf): correct group ownership in easy profile * systemd-journal: remove unnecessary profile entries * thttp: make makeweb entry usable in the secure profile (bsc#1171580) ==== python-M2Crypto ==== Version update (0.35.2 -> 0.36.0) Update to 0.36.0: - wrap SocketIO in io.Buffered* for makefile <lethliel> - SSL.Connection.close accepts an argument to force the socket closing <Christophe Haen> - SSL.Connection: make the clientPostConnectionCheck an instance attribute <Christophe Haen> - Fixed bug with usage of unexisting method getreply at SSL_Transport <roman-nagaev> - Add appveyor builds for python 3.7 and 3.8 <Daniel A. Wozniak> - Fixed syntax warning on line 44. <randomfox> - Update M2Crypto.six to 1.13.0 <Mat?j Cepl> - base64.decodestring() was finally removed in Python 3.8. <Mat?j Cepl> - wrap SocketIO in io.Buffered* for makefile <lethliel> - NULL is legal argument for key and iv paramters of EVP_CipherInit(3) <Mat?j Cepl> - Expose X509_V_FLAG_ALLOW_PROXY_CERTS verification flag and X509_STORE_SET_FLAGS function <Christophe Haen> - Stop testing for 2.6 and 3.4 on Travis. Start testing 3.8 <Mat?j Cepl> - Extend test cert validity to 2049 <Bernhard M. Wiedemann> - Revert using typing module in 2.6. It is just not worthy. <Mat?j Cepl> - Update Debian/stable SSL as well <Mat?j Cepl> - Make tests pass again. <Mat?j Cepl> - Stop using string module, which has been deprecated. <Mat?j Cepl> - Tiny fixes to make pyls more happy <Mat?j Cepl> - CI: Rework Fedora CI configuration <Neal Gompa> - Remove upstream merged patch 001-fix-buffering-for-python38.patch. ==== python-blinker ==== - use pytest instead of deprecated nose - added patches https://github.com/jek/blinker/pull/60 + python-blinker-remove-nose.patch ==== rsync ==== Version update (3.1.3 -> 3.2.2) - Updated to version 3.2.2 * Too many changes to list, see included NEWS.md file. - Add BR on pkgconfig(openssl), rsync now uses openssl for MD4/MD5 - Add BR on libzstd-devel and liblz4-devel to enabled lz4 and zstd compression support. - Add BR on xxhash-devel to enable xxhash checksum support. - Refresh rsync-add_back_use_slp_directive.patch - Drop rsync-both-compressions.patch, rsync-send_error_to_sender.patch, rsync-avoid-uploading-after-error.patch, rsync-fix-prealloc-to-keep-file-size-0-when-possible.patch: Fixed upstream. ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-standalone-formulas-configuration - Fix the registration of libvirt pool and nodedev events - Accept nested namespaces in spacewalk.api runner function. (bsc#1172211) - info_installed works without status attr now (bsc#1171461) - Added: * info_installed-works-without-status-attr-now.patch * opensuse-3000.3-spacewalk-runner-parse-command-250.patch * opensuse-3000-libvirt-engine-fixes-251.patch ==== vim ==== Version update (8.2.0701 -> 8.2.1154) Subpackages: vim-data-common - Updated to version 8.2.1154, fixes the following problems * Vim9 test fails without job feature. * Running channel tests may leave running process behind. * Vim9: closure cannot store value in outer context. * Vim9: memory leak in disassemble test. * Indent tests don't run on CI for FreeBSD. * Vim9: using assert_fails() causes function to finish. * Vim9 function test fails. * Vim9: constant expressions are not simplified. * Netbeans test sometimes fails. * With a long running Vim the temp directory might be cleared on some systems. * Various code not fully tested. * The pam_environment file is not recognized. * Vim9: handling constant expression does not scale. * Vim9: leaking memory. * Vim9: another memory leak. * Vim9: postponed constant expressions does not scale. * Gcc warning for returning pointer to local variable. (John Marriott) * Vim9: more expressions can be evaluated at compile time * Occasional exit when encountering an X error. (Manfred Lotz) * Vim9: leaking memory when skipping. * Vim9: not handling constant expression for elseif. * Vim9: nested constant expression not evaluated compile time. * Vim9: appending to buffer/window/tab variable not tested * Vim9: cannot call a function declared later in Vim9 script. * Vim9: leaking memory when calling not compiled :def function. * Messages about a deadly signal are not left aligned. * Vim9: When reloading a script variables are not cleared. * Vim9: Assignment to dict member does not work. * Vim9: parsing declarations continues after :finish. * Vim9: storing value in dict messes up stack. * Vim9: assigning to dict or list argument does not work. * Vim9: leaking memory when using :finish. * Vim9: using unitialized memory. * Some files not recognized as pamenv. * When shell doesn't support CTRL-Z Vim still handles it. * Mouse handling in a terminal window not well tested. * Incomplete profiling when exiting because of a deadly signal. * Minor message mistakes. * Python tests fail because of changed message. * Handling of a TERM signal not tested. * Can move to another buffer from a terminal in popup window. * The name vim is not capitalized in a message. * Crash on exit when not all popups are closed. * popup_clear() hangs when a popup can't be closed. * Cannot forcefully close all popups. * Cannot get a list of all popups. * TERM signal test fails on FreeBSD. * Netbeans test is a bit flaky. * Vim9: performance can be improved. * Terminal in popup window test is a bit flaky. * Vim9: expressions are evaluated in the discovery phase. * Vim9: No test for forward declaration. * Vim9: No error when variable initializer is not a constant. * Vim9: no test for MEMBER instruction. * Vim9: no test for STORELIST and STOREDICT. * Vim9: missing changes for performance improvements * Vim9: dict member errors not tested. * Vim9: instructions not tested * Buffer is not considered modified after setting crypt key. * GUI test fails without the terminal feature. * Vim9: assigning to option not fully tested. * In the GUI can't use all the modifiers. (Andri Möll) * Display error when using 'number' and 'breakindent'. * ModifyOtherKeys active when using a shell command in autocmd. * Vim9: memory leak in script test. * VimLeavePre not triggered when Vim is terminated. * Cannot map CTRL-B when using the GUI. * Vim9: cannot call a compiled closure from not compiled code. * Vim9: some variable initializations not tested. * Switching to raw mode every time ":" is used. * t_TI and t_TE are output when using 'visualbell'. (Dominique Pelle) * Not easy to call a Vim function from Lua. * Libvterm code lags behind the upstream version. * Terminal test fails. * Libvterm code lags behind the upstream version. * Tmode_T not used everywhere. * Libvterm code lags behind the upstream version. * Compiler warning for not using value in Lua. * Cannot build with Lua on MS-Windows. * Libvterm code lags behind the upstream version. * Libvterm code lags behind the upstream version. * Libvterm code lags behind the upstream version. * Channel test is flaky on FreeBSD. * Libvterm code lags behind the upstream version. * Memory leak in libvterm. * Vim9: expression testing lost coverage using constants. * Vim9: list index not well tested. * A second popup window with terminal causes trouble. * Build failure with small features. * Libvterm code lags behind the upstream version. * Build fails if snprintf is not available. * Errors from failing test are unclear. * Terminal test fails on Mac. * Terminal key codes test fails on some systems. * using "func!" after vim9script gives confusing error. * Cannot easily restore a mapping. * Not enough testing for the terminal window. * Build failure with small features. (Tony Mechelynck) * Error when appending "tagfile" to 'wildoptions'. * Terminal keycode test is flaky. * mapset() does not properly handle <> notation. * libvterm code is slightly different from upstream. * Clang warning for implicit conversion. * maparg() does not provide enough information for mapset(). * Terminal test fails when compiled with Athena. * Not enough memory allocated when converting string with special character. * Vim9: using a discovery phase doesn't work well. * Compiler warning for unused variable. * Vim9: function type isn't set until compiled. * Vim9: memory leak in expr test. * Vim9: code left over from discovery phase. * Vim9: script reload test is disabled. * Still not enough memory allocated when converting string with special character. * def_function() may return pointer that was freed. * Vim9: crash in :defcompile. * Vim9: crash in :defcompile. * Travis: regexp patttern doesn't work everywhere. * filter() may give misleading error message. * Motif: can't map "!". (Ben Jackson) * Compiler warnings for integer sizes. * Compiler warning for uninitialized variable. (Tony Mechelynck) * Mapping <C-bslash> doesn't work in the GUI. * :drop command in terminal popup causes problems. * Motif: mapping <C-bslash> still doesn't work. * Not all :cdo output is visible. * Compiler warning for value set but not used. * Dropping modifier when putting a character back in typeahead. * Search match count wrong when only match is in fold. * 'verbose' value 16 causes duplicate output. * Filetype elm not detected. * Text properties crossing lines not handled correctly. * Text properties crossing lines not handled correctly. * Build failure with small features. * Typval related code is spread out. * Can't distinguish <M-a> from accented "a" in the GUI. * Cannot map CTRL-S on some systems. * ml_delete() often called with FALSE argument. * Xxd cannot show offset as a decimal number. * GUI tests fail because the test doesn't use a modifier. * CTRL-S stops output. * GTK cell height can be a pixel too much. * Not easy to require Lua modules. * No Turkish translation of the manual. * Cannot use CTRL-A and CTRL-X on unsigned numbers. * Cannot easily get all the current marks. * ":term ++curwin" makes the current buffer hidden. (Harm te Hennepe) * Cannot set a separate color for underline/undercurl. * Pragmas are indented all the way to the left. * Syntax foldlevel is taken from the start of the line. * Not enough tests for buffer writing. * Using \{xxx} for encoding a modifier is not nice. * trim() always trims both ends. * It is not possible to customize the quickfix window contents. * MS-Windows: Control keys don't work in the GUI. * Cannot use getmarklist() as a method. * XIM code is mixed with multi-byte code. * A .jl file can be sawfish (lisp) or Julia. * Signals test is a bit flaky. * Getting attributes for directory entries is slow. * :pwd does not give a hint about the scope of the directory * Cannot get the search statistics. * No reduce() function. * Compiler warning for unused function argument. * Leaking memory when using searchcount(). * Compiler warning for argument type. * Leaking memory when using reduce(). * Memory leak in test 49. * Searchcount() test fails on slower systems. * "make shadow" does not link new lua test dir. * Cannot use octal numbers in scriptversion 4. * Searchcount().exact_match is 1 right after a match. * Readdirex() returns size -2 for a directory. * Using old style comments. * No color in terminal window when 'termguicolor' is set. * Clang warns for invalid conversion. * Ubsan warns for undefined behavior. * Assert_equalfile() does not take a third argument. * :mkspell can take very long if the word count is high. * :mkspell output does not mention the tree type. * Crash when calling searchcount() with a string. * List of functions in patched version is outdated. * Missing help for a function goes unnoticed. * Assert_equalfile() does not give a hint about the difference. * Function list test fails on MS-Windows. * Formatting CJK text isn't optimal. * Using searchcount() in 'statusline' causes an error. * comparing WINVER does not work correctly. * Assuming modifyOtherKeys for rhs of mapping. * Test coverage could be better. * When setting 'termguicolors' SpellBad is no longer red. * When using :global clipboard isn't set correctly. * Crash when changing the function table while listing it. * Cannot go back to the previous local directory. * Vim is not reproducibly buildable. * Crash when opening a buffer for the cmdline window fails. (Chris Barber) * A few test cases for CJK formatting are disabled. * Code for resetting v:register is duplicated. * Search() cannot skip over matches like searchpair() can. * Mapping with partly modifyOtherKeys code does not work. * Quickfix entries do not suport a "note" type. * Duplicate code for evaluating expression argument. * Merging modifier for modifyOtherKeys is done twice. * Writing viminfo fails with a circular reference. * CTRL-W T in cmdline window causes trouble. * Search test fails. * Cmdline test is slow. * Cannot save and restore a register properly. * Getcompletion() does not return command line arguments. * Cmdline test fails on Appveyor. * Some sshconfig and ssdhconfig files are not recognized. * Many type casts are used for vim_strnsave(). * v:register is not cleared after an operator was executed. * Script filetype detection trips over env -S argument. * Some remarks about BeOS remain. * Missspelling spelllang. * 'quickfixtextfunc' does not get window ID of location list. * Running lhelpgrep twice in a help window doesn't jump to the help topic. * Flattening a list with existing code is slow. * Some terminals misinterpret the code for getting cursor style. * Asan failure in the flatten() test. * NFA regexp uses tolower() to compare ignore-case. (Thayne McCombs) * checking for term escape sequences is long and confusing * Build failure with tiny features. * Detecting terminal properties is unstructured. * Expanding to local dir after homedir keeps "~/". * Displaying ^M or ^J depends on current buffer. * Xxd test leaves file behind. * Cannot use "z=" when 'spell' is off. * Cannot use "q" to cancel a number prompt. * Readdirex() doesn't handle broken link properly. * Spell test fails. * Strptime() does not use DST. * Tagjump test fails. * Search stat test has leftover from debugging. * No simple way to interrupt Vim. * Spell checking doesn't work for CamelCased words. * Not all desktop files are recognized. * Build fails. * Spell test fails. * Compiler warning for uninitialized variable. (Tony Mechelynck) * Not sufficient testing for buffer writing. * Using 'quickfixtextfunc' is a bit slow. * Cannot use :import in legacy Vim script. * Terminal test sometimes hangs on Travis. * Number increment/decrement does not work with 'virtualedit'. * TextYankPost does not provide info about Visual selection. * Has_funcundefined() is not used. * 'shortmess' flag "n" not used in two places. * Unnecessary type casts for vim_strnsave(). * No proper testing of the 'cpoptions' flags. * Assert_equal() output for dicts is hard to figure out. * Terminal properties are not available in Vim script. * Build with tiny features fails. * Vim9 script variable declarations need a type. * Vim9: type is not checked when assigning to a script variable. * Vim9: memory leak when script var has wrong type. * Vim9: script variable does not accept optional s: prefix. * Some 'cpoptions' not tested. * t_8u is made empty for the wrong terminals. (Dominique Pelle) * Leaking memory in termcodes test. * A couple of screendump tests fail. * Raku file extension not recognized. (Steven Penny) * Vim9: cannot compile "[var, var] = list". * Insufficient testing for reading/writing files. * SConstruct file type not recognized. * Not using previous window when closing a shell popup window. * Simplify() does not remove slashes from "///path". * Vim9: cannot assign to [var; var]. * Getting directory contents is always case sorted. * Crash after resizing a terminal window. (August Masquelier) * Using duplicate error number. * Cannot get window type for autocmd and preview window. * Vim9: crash when using :import in the Vim command. * Vim9 script test fails with normal features. * Vim9: missing function causes compilation error. * Insufficient testing for the readdir() sort option. * Using "aucmdwin" in win_gettype() is not ideal. * Cannot execute a register containing line continuation. * Not all tag code is tested. * Moving to next sentence gets stuck on quote. * Get error when leaving Ex mode with :visual and a CmdLineEnter autocommand was used. * Vim9: crash with nested "if" and assignment. * Test may fail when run directly. * Vim9: return type of sort() is too generic. * Line numbers below filler lines not always updated. * Vim9: using TRUE/FALSE/MAYBE for ctx_skip is confusing. * Vim9: require unnecessary return statement. * Completion doesn't work after ":r ++arg !". * Vim9: no test for disassambling newly added instructions. * Vim9: some failures not checked for. * Build failure in libvterm with debug enabled. (John Little) * Vim9: some code not tested. * Vim9: cannot declare single character script variables. * Channel tests can be a bit flaky. * Using "name" for a string result is confusing. * Popup filter gets key with modifier prepended when using modifyOtherKeys. * Vim9: test fails when channel feature is missing. * Appveyor output doesn't show MinGW console features. * Typo in enum value. (James McCoy) * Mapping <M-S-a> does not work in the GUI. * Popupwin test fails in the GUI. * Ruby interface not tested enough. * Various parts of code not covered by tests. * Vim9: redefining a function uses a new index every time. * Vim9: no error for using "let g:var = val". * Tabpage menu and tabline not sufficiently tested. * Vim9: cannot break the line after "->". * GUI: multi-byte characters do not work in a terminal. * Vim9: no error for declaring buffer, window, etc. variable. * Vim9: cannot chain function calls with -> at line start. * Reducing size of a terminal window may cause a crash. * Build failure with Perl5.32. * Error message for declaring a variable cannot be translated. * Not easy to read the test time in the test output. * Compiler warning for uninitialized variables. * setreg() does not always clear the register. * Popupwin test fails sometimes. * Vim9: crash when using line continuation inside :def. * Popupwin test fails. * Cannot put NUL byte on clipboard. * Not enough testing for movement commands. * Test summary is missing executed count. * Vim9: cannot put an operator on the next line. * %a item in 'statusline' not tested. * Not all systemd file types are recognized. * Vim9: line break before operator does not work. * Insufficient tests for src/buffer.c. * Vim9: script cannot use line continuation like in a :def function. * Build failure without the eval feature. * Vim9: leaking memory when using continuation line. * Missing change in struct. * Crash when changing a list while using reduce() on it. * Build failure with older compilers. * Insufficient testing for 'statusline' and 'tabline'. * Not so easy to pass a lua function to Vim. * No filetype set for pacman config files. * Wrong display when mixing match conceal and syntax conceal. * Cannot build with dynamic Lua. * Multiline conceal causes display errors. * Crash when using :tabonly in an autocommand. (Yegappan Lakshmanan) * Not all elinks files are recognized. * Insufficient testing for src/window.c. * Vim9: no line break allowed inside "cond ? val1 : val2". * Vim9: no line break allowed before || or &&. * Vim9: no line break allowed before comperators. * Vim9: no line break allowed inside a list. * Lua arrays are zero based. * Expression "!expr->func()" does not work. * Vim9: no line break allowed inside a dict. * Vim9: fail to check for white space in list. * Vim9: leaking memory when lacking white space in dict. * Vim9: no line break allowed inside a lambda. * Missing libvterm test. * Vim9: no line break allowed in () expression. * Vim9: no line break allowed after some operators. * Vim9: no line break allowed in :echo expression. * Vim9: no line break allowed in :if expression. * Not enough test coverage for highlighting. * Highlight and match functionality together in one file. * Vim9: no line break allowed in a while loop. * Vim9: no line break allowed in a for loop. * Lua: cannot use table.insert() and table.remove(). * Coverity complains about ignoring dict_add() return value. * Crash when using reduce() on a NULL list. * Lua: registering function has useless code. * Coverity complains about ignoring dict_add() return value. * Possibly using freed memory when text properties used when changing indent of a line. * Possible memory leak when file expansion fails. * A very long translation might cause a buffer overflow. * Coverity warns for pointer computation. * May use NULL pointer when skipping over name. * No check if opening a pty works. * Not checking if saving for undo succeeds. * Python: double free when adding item to dict fails. * Dead code in libvterm. * May use pointer after freeing it when text properties are used. * Vim9: return type of getqflist() is wrong. * Highlight code not sufficiently tested. * Vim9: cannot use line break in :throw argument. * Vim9: cannot use line break in :cexpr argument. * Vim9: cannot use line break in :execute, :echomsg and :echoerr argument. * No error when using wrong arguments for setqflist() or setloclist(). * Coverity gets confused by an unnecessary NULL check. * Coverity reports an unnecessary NULL check. * Coverity warns for possible NULL pointer use. * Insufficient test coverage for Lua. * Crash when trying to use s: variable in typed command. * 'imactivatefunc' and 'imstatusfunc' are not used in the GUI. * Mouse left-right scroll is not supported in terminal window. * Still crashing when using s:variable. * Vim9: line continuation does not work in function arguments. * Inconsistent naming of get_list_tv() and eval_dict(). * Vim9: no line continuation allowed in method call. * No test for verbose output of :call. * Terminal test sometimes times out. * Iminsert test fails when compiled with VIMDLL. * Vim9: parsing command checks for list twice. * Coverity warns for unsing unitialized field. * Condition can never be true, dead code. * Configure fails with Xcode 12 beta. * Python code not tested properly. * Command completion not working after ++arg. * Vim9: line continuation in dict member not recognized. * Python 3 test is old style. * Vim9: no line break allowed in :import command. * Vim9: double quote can be a string or a comment. * Vim9: using :copen causes an error. * Vim9: getting a dict member may not work. * The write message mentions characters, but it's actually bytes. * Vim9: bar not recognized after not compiled command. * Vim9: bar not recognized after function call * Vim9: error message for returning a value in a function that does not return anything is not clear. * Vim9: return type of repeat() is not specific enough. * Vim9: return type of add() is not specific enough. * Vim9: getting a list member may not work. * Vim9: getting a dict member may not work. * Vim9: return type of argv() is always any. * Vim9: modifiers not cleared after compiling function. * Vim9: return type of copy() and deepcopy() is any. * Vim9: test for silent echo fails in some environments. * Vim9: return type of extend() is any. * Vim9: return type of filter() is any. * Vim9: return type of insert() is any. * Vim9: return type of remove() is any. * Vim9: return type of reverse() is any. * Vim9: "for" only accepts a list at compile time. * Not enough testing for Python. * :confirm may happen in cooked mode. (Jason Franklin) * Warning for using int instead of size_t. * Vim9: :eval command not handled properly. * ml_get error when using Python. (Yegappan Lakshmanan) * Insufficient test coverage for Python. * Vim9: function reference is missing script prefix. * Vim9: script test fails on some systems. * Vim9: crash when using imported function. ==== zstd ==== - Remove not needed exports in %install section. - Use %make_build macro. - Add upstream patch fix-lib-build.patch which fixes lib-mt target.