Packages changed: aaa_base (84.87+git20200818.b9dd70f -> 84.87+git20200909.ee4a72c) acl boost-base busybox-links c-ares efivar etcd (3.4.10 -> 3.4.13) haproxy (2.2.2+git0.b8a2763d5 -> 2.2.3+git0.0e58a340d) helm (3.3.0 -> 3.3.1) hostname (3.21 -> 3.23) installation-images-MicroOS (16.8 -> 16.14) iproute2 (5.7.0 -> 5.8.0) kuberlr (0.3.0 -> 0.3.1) kubernetes (1.19.0 -> 1.19.1) kubernetes1.19 (1.19.0 -> 1.19.1) libseccomp (2.4.3 -> 2.5.0) permissions (1550_20200904 -> 1550_20200909) python-networkx (2.4 -> 2.5) sudo === Details === ==== aaa_base ==== Version update (84.87+git20200818.b9dd70f -> 84.87+git20200909.ee4a72c) - Update to version 84.87+git20200909.ee4a72c: * /etc/profile.d/xdg-environment.{sh,csh}: Added /usr/etc/xdg to $XDG_CONFIG_DIRS * sysctl.d/50-default.conf: allow everybody to create IPPROTO_ICMP sockets (bsc#1174504) ==== acl ==== - update url ==== boost-base ==== Subpackages: boost-license1_74_0 libboost_thread1_74_0 - Enable context on s390x ==== busybox-links ==== Subpackages: busybox-coreutils busybox-gawk busybox-grep busybox-gzip busybox-xz - busybox-vi: conflict with all vi variants ==== c-ares ==== - simplify conditions bit to make it tad more readable - Implement multibuild specfile to split out tests into its own flavor; this way we can build and run tests, which require static lib, as well as avoid packaging the latter without issues with the installed cmake file.. ==== efivar ==== - Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix segfault in non-EFI systems (bsc#1175989) ==== etcd ==== Version update (3.4.10 -> 3.4.13) - Update to version 3.4.13: * version: 3.4.13 * pkg: file stat warning * Automated cherry pick of #12243 on release 3.4 * version: 3.4.12 * etcdserver: Avoid panics logging slow v2 requests in integration tests * version: 3.4.11 * Revert "etcdserver/api/v3rpc: "MemberList" never return non-empty ClientURLs" * *: fix backport of PR12216 * *: add experimental flag for watch notify interval * clientv3: remove excessive watch cancel logging * etcdserver: add OS level FD metrics * pkg/runtime: optimize FDUsage by removing sort * clientv3: log warning in case of error sending request * etcdserver/api/v3rpc: "MemberList" never return non-empty ClientURLs ==== haproxy ==== Version update (2.2.2+git0.b8a2763d5 -> 2.2.3+git0.0e58a340d) - Update to version 2.2.3+git0.0e58a340d: * [RELEASE] Released version 2.2.3 * BUG/MEDIUM: mux-h1: always apply the timeout on half-closed connections * BUG/MINOR: auth: report valid crypto(3) support depending on build options * DOC: ssl-load-extra-files only applies to certificates on bind lines * MINOR: server: Improve log message sent when server address is updated * BUG/MEDIUM: dns: Be sure to renew IP address for already known servers * BUG/MEDIUM: dns: Don't store additional records in a linked-list * CLEANUP: dns: remove 45 "return" statements from dns_validate_dns_response() * CLEANUP: Update .gitignore * MINOR: Commit .gitattributes * BUILD: thread: limit the libgcc_s workaround to glibc only * BUG/MINOR: threads: work around a libgcc_s issue with chrooting * BUG/MEDIUM: ssl: does not look for all SNIs before chosing a certificate * MINOR: arg: Use chunk_destroy() to release string arguments * BUG/MEDIUM: ssl: check OCSP calloc in ssl_sock_load_ocsp() * REGTEST: Add a test for request path manipulations, with and without the QS * MINOR: http-fetch: Add pathq sample fetch * MINOR: http-rules: Add set-pathq and replace-pathq actions * BUG/MEDIUM: doc: Fix replace-path action description * Revert "BUG/MINOR: http-rules: Replace path and query-string in "replace-path" action" * BUG/MINOR: startup: haproxy -s cause 100% cpu * BUG/MEDIUM: contrib/spoa-server: Fix ipv4_address used instead of ipv6_address * BUG/MINOR: contrib/spoa-server: Updating references to free in case of failure * BUG/MINOR: contrib/spoa-server: Do not free reference to NULL * BUG/MINOR: contrib/spoa-server: Ensure ip address references are freed * BUG/MAJOR: contrib/spoa-server: Fix unhandled python call leading to memory leak * BUILD: task: work around a bogus warning in gcc 4.7/4.8 at -O1 * BUILD: tools: include auxv a bit later * MINOR: cache: Reject duplicate cache names * DOC: cache: Use '' instead of '' in error message * BUG/MEDIUM: ssl: crt-list negative filters don't work * BUG/MINOR: http-rules: Replace path and query-string in "replace-path" action * MINOR: http-htx: Add an option to eval query-string when the path is replaced * BUG/MEDIUM: http-ana: Don't wait to send 1xx responses received from servers * BUG/MINOR: reload: do not fail when no socket is sent * BUG/MEDIUM: ssl: fix ssl_bind_conf double free w/ wildcards * BUG/MEDIUM: ssl: never generates the chain from the verify store * BUG/MEDIUM: htx: smp_prefetch_htx() must always validate the direction * BUG/MINOR: stats: use strncmp() instead of memcmp() on health states * BUG/MINOR: ssl: ssl-skip-self-issued-ca requires >= 1.0.2 * BUG/MEDIUM: ssl: fix the ssl-skip-self-issued-ca option * BUG/MINOR: snapshots: leak of snapshots on deinit() * MEDIUM: lua: Don't filter exported fetches and converters * BUG/MINOR: lua: Duplicate lua strings in sample fetches/converters arg array * MINOR: hlua: Don't needlessly copy lua strings in trash during args validation * BUG/MINOR: lua: Check argument type to convert it to IP mask in arg validation * BUG/MINOR: lua: Check argument type to convert it to IPv4/IPv6 arg validation * BUG/MINOR: arg: Fix leaks during arguments validation for fetches/converters * BUG/MINOR: lua: Duplicate map name to load it when a new Map object is created * BUG/MINOR: converters: Store the sink in an arg pointer for debug() converter * MINOR: arg: Add an argument type to keep a reference on opaque data * BUG/MEDIUM: map/lua: Return an error if a map is loaded during runtime * BUG/MEDIUM: ssl: memory leak of ocsp data at SSL_CTX_free() * BUG/MINOR: ssl: fix memory leak at OCSP loading * DOC: spoa-server: fix false friends `actually` * BUG/MINOR: spoa-server: fix size_t format printing * BUG/MAJOR: dns: disabled servers through SRV records never recover * CLEANUP: dns: typo in reported error message * BUG/MEDIUM: mux-h1: Refresh H1 connection timeout after a synchronous send * SCRIPTS: git-show-backports: emit the shell command to backport a commit * SCRIPTS: git-show-backports: make -m most only show the left branch ==== helm ==== Version update (3.3.0 -> 3.3.1) - Update to version 3.3.1: * Fix spelling in completion.go * Fixing linting of templates on Windows * Bump Kubernetes to v0.18.8 + Bump jsonpatch * Fix Quick Start Guide Link in README.md * fix test that modifies the wrong cache data * bufix: fix validateNumColons docs * Fix typo * Enhance readability by extracting bitwise operation * Make helm ls return only current releases if providing state filter * fix: Allow building in a path containing spaces * Alter whitespace in "Update Complete" output * Fixing version and spelling errors ==== hostname ==== Version update (3.21 -> 3.23) - update to 3.23: * Increase buffer size for all FQDNs to NI_MAXHOST as suggested by manpage. (Closes: #942311) * Use the same size for getdomainname(). * Bumped Standards-Version, no changes needed. ==== installation-images-MicroOS ==== Version update (16.8 -> 16.14) - merge gh#openSUSE/installation-images#416 - fix library dependency checking - 16.14 - BuildRequire system-role-common-criteria in SLE - 16.13 - Include common critera system role handler (jsc#SLE-12905) - merge gh#openSUSE/installation-images#413 - add watchdog modules (bsc#1176112) - 16.12 - merge gh#openSUSE/installation-images#411 - make exfat support optional - 16.11 - merge gh#openSUSE/installation-images#410 - add exfatprogs to spec file - 16.10 - merge gh#openSUSE/installation-images#409 - support exfat filesystem (bsc#1175731) - 16.9 ==== iproute2 ==== Version update (5.7.0 -> 5.8.0) - Update to release 5.8 * macsec: add support for MAC offload * Add support for mptcp netlink interface * erspan: Add type I version 0 support ==== kuberlr ==== Version update (0.3.0 -> 0.3.1) - Update to version 0.3.1: * Prepare for release of v0.3.1 * fix: set progress bar desc to shorter string * Update Changelog * Update README to mention all the platforms supported * GitHub actions: enable test matrix * Build kuberlr binary for windows * windows: fix path construction for download dir * windows: require .exe extension on windows * windows: add filename extension utils ==== kubernetes ==== Version update (1.19.0 -> 1.19.1) Subpackages: kubernetes-client kubernetes-kubeadm kubernetes-kubelet - Bump kubernetes to 1.19.1, etcd to 3.4.13 ==== kubernetes1.19 ==== Version update (1.19.0 -> 1.19.1) Subpackages: kubernetes1.19-client kubernetes1.19-client-common kubernetes1.19-kubeadm kubernetes1.19-kubelet kubernetes1.19-kubelet-common - Update to version 1.19.1: * build/lib/release: Explicitly use '--platform' in building server images * build/common.sh: Remove extraneous reference to debian-base image * Update default etcd server to 3.4.13 * kubeadm: remove the CoreDNS check for supported image digests * Update snapshot controller to use k8s.gcr.io * kubeadm: make the scheduler and KCM connect to local endpoint * Fixed reflector not recovering from "Too large resource version" errors with API servers 1.17.0-1.18.5 * let panics propagate up when processLoop panic * kubeadm: Fix `upgrade plan` for air-gapped setups * Add impersonated user to system:authenticated group * cleanup: print warning message after timeout * Revert "cleanup: decrease log level from warn to v3" * cleanup: decrease log level from warn to v3 * Remove duplicate nodeSelector * test(kubelet): add a regression test to verify kubelet would not panic * fix(kubelet): protect `containerCleanupInfos` from concurrent map writes * fix(azure): check error returned by scaleSet.getVMSS * Fix issue on skipTest in storage suits * Use NLB Subnet CIDRs instead of VPC CIDRs in updateInstanceSecurityGroupsForNLB * Add PR #89069 Action Required * Update CHANGELOG/CHANGELOG-1.19.md for v1.19.0 ==== libseccomp ==== Version update (2.4.3 -> 2.5.0) - Do not rely on gperf: pass GPERF=/bin/true to configure and remove gperf BuildRequires. The syscalls.perf file it would generate is part of the tarball already. - testsuite-riscv64-missing-syscalls.patch: Fix testsuite failure on riscv64 - Ignore failure of tests/52-basic-load on qemu linux-user emulation - Update to release 2.5.0 * Add support for the seccomp user notifications, see the seccomp_notify_alloc(3), seccomp_notify_receive(3), seccomp_notify_respond(3) manpages for more information * Add support for new filter optimization approaches, including a balanced tree optimization, see the SCMP_FLTATR_CTL_OPTIMIZE filter attribute for more information * Add support for the 64-bit RISC-V architecture * Performance improvements when adding new rules to a filter thanks to the use of internal shadow transactions and improved syscall lookup tables * Properly document the libseccomp API return values and include them in the stable API promise * Improvements to the s390 and s390x multiplexed syscall handling * Multiple fixes and improvements to the libseccomp manpages * Moved from manually maintained syscall tables to an automatically generated syscall table in CSV format * Update the syscall tables to Linux v5.8.0-rc5 * Python bindings and build now default to Python 3.x * Improvements to the tests have boosted code coverage to over 93% - libseccomp.keyring: replaced by Paul Moore key. ==== permissions ==== Version update (1550_20200904 -> 1550_20200909) Subpackages: chkstat permissions-config - Update to version 20200909: * screen: remove /run/uscreens covered by systemd-tmpfiles (bsc#1171879) ==== python-networkx ==== Version update (2.4 -> 2.5) - Update to 2.5: * Highlights: + Dropped support for Python 3.5. + add Pathlib support to work with files. + improve performance. + Updated docs and tests. + Removed code designed to work with Python 2. * New Functions: + lukes_partitioning + triadic analysis functions + functions for trophic levels analysis + d_separated + is_regular and other regular graph measures + graph_hash using Weisfeiler Lehman methods + common_neighbor_centrality (CCPA link prediction) + max_weight_clique + path_weight and is_path + rescale_layout_dict + junction_tree * New generators: + paley_graph + interval_graph * New layouts: + multipartite_layout - To see improvements, API changes and deprecations, please visit: https://networkx.github.io/documentation/stable/release/release_2.5.html - Dropped patches already included by upstream: * numpy-38-test.patch * matplotlib.patch * networkx-pr4012-use-mpl.patch - Add patch to remove a failing test in i586. The issue was submitted to upstream at gh#networkx/networkx#4203: * disable-test-failing-in-i586.patch ==== sudo ==== - Modified the secure_path to include the other two default paths which are commonly available to $user. This will offer a better and more consistent UX.