Packages changed: e2fsprogs (1.45.3 -> 1.45.4) gnutls (3.6.9 -> 3.6.10) haproxy (2.0.6+git0.58706ab4 -> 2.0.7+git0.1909aa1e) nano (4.4 -> 4.5) patterns-base salt talloc (2.1.16 -> 2.2.0) tdb (1.3.18 -> 1.4.2) tevent (0.9.39 -> 0.10.0) xen yomi-formula (0.0.1+git.1566569312.4133e8e -> 0.0.1+git.1570457098.f38ad71) === Details === ==== e2fsprogs ==== Version update (1.45.3 -> 1.45.4) Subpackages: libcom_err2 libext2fs2 - Update to 1.45.4: * A maliciously corrupted file systems can trigger buffer overruns in the quota code used by e2fsck. (Addresses CVE-2019-5094) * E2fsck now checks to make sure the casefold flag is only set on directories, and only when the casefold feature is enabled * E2fsck will not disable the low dtime checks when using a backup superblock where the last mount time is zero * Scrubbing scripts fixes * Update translations ==== gnutls ==== Version update (3.6.9 -> 3.6.10) - gnutls 3.6.10: * Add support for deterministic ECDSA/DSA (RFC6979) * Add functions for in-place encryption/decryption of data buffers * server now selects the highest TLS protocol version, if TLS 1.3 is enabled and the client advertises an older protocol version first * Add support for GOST 28147-89 cipher in CNT (GOST counter) mode and MAC generation based on GOST 28147-89 (IMIT) * certtool: when outputting an encrypted private key do not insert the textual description of it ==== haproxy ==== Version update (2.0.6+git0.58706ab4 -> 2.0.7+git0.1909aa1e) - Update to version 2.0.7+git0.1909aa1e: * [RELEASE] Released version 2.0.7 * BUG/MEDIUM: namespace: fix fd leak in master-worker mode * DOC: Fix documentation about the cli command to get resolver stats * BUG/MINOR: contrib/prometheus-exporter: Return the time averages in seconds * MINOR: stats: Add the support of float fields in stats * MINOR: spoe: Support the async mode with several threads * MINOR: spoe: Improve generation of the engine-id * BUG/MEDIUM: spoe: Use a different engine-id per process * BUG/MINOR: mux-h1: Do h2 upgrade only on the first request * BUG/MAJOR: mux_h2: Don't consume more payload than received for skipped frames * BUG/MINOR: mux-h2: Use the dummy error when decoding headers for a closed stream * BUG/MEDIUM: mux-h2: don't reject valid frames on closed streams * BUG/MEDIUM: namespace: close open namespaces during soft shutdown * BUG/MINOR: mux-h2: do not wake up blocked streams before the mux is ready * BUG/MEDIUM: checks: make sure the connection is ready before trying to recv * BUG/MEDIUM: stream-int: Process connection/CS errors during synchronous sends * BUG/MINOR: stream-int: Process connection/CS errors first in si_cs_send() * BUG/MEDIUM: check/threads: make external checks run exclusively on thread 1 * BUG/MAJOR: mux-h2: Handle HEADERS frames received after a RST_STREAM frame * BUG/MINOR: mux-h2: Be sure to have a connection to unsubcribe * BUG/MEDIUM: stick-table: Properly handle "show table" with a data type argument ==== nano ==== Version update (4.4 -> 4.5) - nano 4.5: * new 'tabgives' to modify behavior per syntax * will indent a marked region also when M-} has been rebound ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-minimal_base - transactional_base require man by default (boo#1127539) ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-standalone-formulas-configuration - Improve batch_async to release consumed memory (bsc#1140912) - Fix memory leak produced by batch async find_jobs mechanism (bsc#1140912) - Grant read and execute permission to others (bsc#1150447) - Added: * improve-batch_async-to-release-consumed-memory-bsc-1.patch * fix-memory-leak-produced-by-batch-async-find_jobs-me.patch ==== talloc ==== Version update (2.1.16 -> 2.2.0) - Update to version 2.2.0 + Remove pytalloc_CObject_FromTallocPtr() + Remove --extra-python (a build time mode to produce Python2 and Python3 bindings at the same time) + New minor version to allow Samba 4.10 to release a talloc if required from that branch ==== tdb ==== Version update (1.3.18 -> 1.4.2) - Update to version 1.4.2 + Build fixes + Improve the performance by inlining the tdb_oob() checks + Do not propogate any errors from tdb_repack() to tdb_transaction_commit(); (bso#13952) + Remove Python 2.x support except to build just the bare C library + Remove --extra-python (a build time mode to produce Python2 and Python3 bindings at the same time) + New minor version to allow Samba 4.10 to release a tdb if required from that branch ==== tevent ==== Version update (0.9.39 -> 0.10.0) - Update to version 0.10.0 + Remove Python 2.x support except to build just the bare C library + Remove --extra-python (a build time mode to produce Python2 and Python3 bindings at the same time) + New minor version to allow Samba 4.10 to release a tevent if required from that branch ==== xen ==== - bsc#1120095 - add code to change LIBXL_HOTPLUG_TIMEOUT at runtime The included README has details about the impact of this change libxl.LIBXL_HOTPLUG_TIMEOUT.patch ==== yomi-formula ==== Version update (0.0.1+git.1566569312.4133e8e -> 0.0.1+git.1570457098.f38ad71) - Update directoy persmissions based on the new configuration from salt-standalone-formulas-configuration - Update to version 0.0.1+git.1570457098.f38ad71: * mount: pre-set the chroot before calling zypper (bsc#1153062) * mkinitrd: force re-creation if software changes - Update to version 0.0.1+git.1570179173.75fc04c: * states: simplify default values on conditions * machine-id: copy machine-id from the system * reboot: replace backtick quote in shell command * partitions: unify kind of quote * users: force password hash under quotes * metadata: split form in multiple subforms - Generate metadata information for subforms - Update to version 0.0.1+git.1569935178.cfe975f: * image: check the presence of URL for inclusion * image: fix umount_image_/mnt name * installer: rename entry point to init.sls * mark: remove guard mark and use mount detector * states: get default value for empty sections * pillar: install glibc-locale with pattern:enhanced_base * bootloader: fix documentation and form * metadata: add the initial metadata and form data - Add metadata directory - Adjust states and metadata directory permissions - Update to version 0.0.1+git.1567698409.1177c34: * image: add new mechanism for software installation * formatted: remove useless comments * docs: refactor the documentation - Add metadata information - Adjust salt-formula directory permissions