Packages changed: filesystem freetype2 (2.10.2 -> 2.10.4) issue-generator (1.10 -> 1.12) patterns-base patterns-microos selinux-policy (20200910 -> 20201016) sssd (2.3.1 -> 2.4.0) yast2 (4.3.37 -> 4.3.38) === Details === ==== filesystem ==== - Add /usr/etc/skel (boo#1173321) - Move additional /etc/skel directories to /usr/etc/skel ==== freetype2 ==== Version update (2.10.2 -> 2.10.4) - Update to version 2.10.4 * Fix a heap buffer overflow has been found in the handling of embedded PNG bitmaps, introduced in FreeType version 2.6 (CVE-2020-15999 bsc#1177914) * Minor improvements to the B/W rasterizer. * Auto-hinter support for Medefaidrin script. * Fix various memory leaks (mainly for CFF) and other issues that might cause crashes in rare circumstances. ==== issue-generator ==== Version update (1.10 -> 1.12) - Update to version 1.12 - Update manual page - Use python3 instead of python 2.x - Update to version 1.11 - Don't display issue.d/*.issue files, agetty will do that [bsc#1177891] - Ignore /run/issue.d in issue-generator.path, else issue-generator will be called too fast too often [bsc#1177865] - Ignore *.bak, *~ and *.rpm* files [bsc#1118862] ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-base patterns-base-bootloader patterns-base-minimal_base - Have pattern enhanced_base recommend documentation: patterns-base-documentation in turn recommends man-pages (man cp) and pam-doc (boo#1177828). ==== patterns-microos ==== Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-basesystem patterns-microos-cloud patterns-microos-defaults patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-selinux patterns-microos-sssd_ldap - Add cockpit pattern - Remove more optional SELinux packages from default install - GNOME desktop pattern: + Add a dependency for adwaita-icon-theme so GNOME icons show up - Remove restorecond from the selinux pattern ==== selinux-policy ==== Version update (20200910 -> 20201016) Subpackages: selinux-policy-targeted - Update to version 20201016 - Use python3 to build (fc_sort.c was replaced by fc_sort.py which uses python3) - Drop SELINUX=disabled, "selinux=0" kernel commandline option has to be used instead. New default is "permissive" [bsc#1176923]. ==== sssd ==== Version update (2.3.1 -> 2.4.0) Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap - Update to release 2.4.0 * Session recording can now exclude specific users or groups when scope is set to all (see exclude_users and exclude_groups options). * Active Directory provider now sends CLDAP pings over UDP protocol to Domain Controllers in parallel to determine site and forest to speed up server discovery. ==== yast2 ==== Version update (4.3.37 -> 4.3.38) - Added support for nested items in CWM::Table (bsc#1176402) - 4.3.38