Packages changed:
  ImageMagick (7.0.7.1 -> 7.0.7.4)
  colord (1.3.5 -> 1.4.1)
  gdm
  git (2.14.1 -> 2.14.2)
  gnome-settings-daemon
  gnome-shell
  gstreamer-plugins-bad
  gvfs
  icu4j
  jline
  kbd (2.0.3 -> 2.0.4)
  kernel-source (4.13.3 -> 4.13.4)
  libatasmart
  libpt2
  libqt5-qtwebengine
  libunicap
  libvirt
  libxml2 (2.9.4 -> 2.9.5)
  mpg123 (1.25.6 -> 1.25.7)
  newt
  openconnect
  perl-Authen-SASL
  perl-XML-LibXML
  php7 (7.1.9 -> 7.1.10)
  polari
  python-M2Crypto (0.26.3 -> 0.26.4)
  python-libxml2 (2.9.4 -> 2.9.5)
  python-six (1.10.0 -> 1.11.0)
  radvd (2.11 -> 2.17)
  systemd
  taglib

=== Details ===

==== ImageMagick ====
Version update (7.0.7.1 -> 7.0.7.4)
Subpackages: ImageMagick-devel ImageMagick-extra libMagick++-7_Q16HDRI3 libMagickCore-7_Q16HDRI4 libMagickWand-7_Q16HDRI4 perl-PerlMagick

- updated to 7.0.7-4
  * Fixed numerous memory leaks.
  * Maximum valid hour is 23, not 24, in the PNG tIME chunk, and maximum
    valid minute is 59, not 60.
  * Use signed integer arithmetic to calculate timezone corrections.

==== colord ====
Version update (1.3.5 -> 1.4.1)
Subpackages: colord-color-profiles colord-lang libcolord2 libcolorhug2

- Add ulimit -Sv 2000000 entry before build, set ~2 GiB limit so
  that colprof is forced to work in chunks when generating the
  print profile rather than trying to allocate a 3.1 GiB chunk of
  RAM to put the entire B-to-A tables in.
- Add pkgconfig(vapigen) BuildRequires and pass
  enable-session-example=false, enable-bash-completion=true,
  enable-systemd=true, enable-libcolordcompat=true,
  enable-argyllcms-sensor=true, enable-reverse=false,
  enable-sane=false, enable-vala=true, enable-print-profiles=true,
  enable-tests=false, enable-installed-tests=false,
  with-daemon-user=colord, enable-man=true and enable-docs=true to
  meson, ensure we build the feature we want.
- Update to version 1.4.1:
  + Bugfixes:
  - Add back the meson -Denable-systemd=false configure argument.
  - Add the fallback rules for older PolicyKit versions.
  - Define PATH_MAX if not available.
  - Enable C99 support in meson.build.
  - Include all the files in the GIR target.
  - Include the correct file when using Colord-1.0.gir.
  - Use appropriate feature macro for realpath().
  - Use gio-2.0 when generating the VAPI.
- Changes from version 1.4.0:
  + New Features:
  - Port to the Meson build system.
  - Enable Travis CI for Fedora 25 and Debian Stretch.
  - Make PolicyKit, gusb and udev a hard requirement.
  + Bugfixes:
  - Add some experimental tools for the HueyCOLOR sensor as found
    in the P70.
  - Conditionally build documentation and man pages.
  - Correctly build the ICC transfer curve for Rec709.
  - Do not build the examples as part of the regular build.
  - Do not spin the Huey LEDs when the sensor is embedded.
  - Do not use /tmp to create profiles.
  - Fix the version numbers in cd-version.h to reflect reality.
  - Get the Huey status before trying to unlock.
  - Use a different Huey unlock code on the W700 laptop.
- Add meson BuildRequires, and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson Build System.
- Add gtk-doc and docbook-utils BuildRequires: new dependencies.
- Drop %glib2_gsettings_schema_* post/postun macros: the
  functionality is now covered by file triggers.
- Drop intltool and vala BuildRequires: no longer needed.
- Upstream rename of ColorHug-1.0.typelib file to
  Colorhug-1.0.typelib, thus its package has been renamed as well.

==== gdm ====
Subpackages: gdm-lang gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0

- Add gdm-ignore-SLE-CLASSIC-MODE.patch: Ignore env
  SLE_CLASSIC_MODE variable when switching from sle-classic session
  to gnome-classic session (bsc#1060630).

==== git ====
Version update (2.14.1 -> 2.14.2)
Subpackages: git-core git-cvs git-daemon git-email git-gui git-svn git-web gitk

- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * "git cvsserver" no longer is invoked by "git daemon" by
    default bsc#1060377
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    bsc#1060378

==== gnome-settings-daemon ====
Subpackages: gnome-settings-daemon-lang

- Add gnome-settings-daemon-wacom-tablet-rotation.patch: wacom:
  Add both tablet and touchscreen devices on initial iteration,
  and use GTK+ skeleton to make sure input coordinates are
  properly transformed upon screen rotation; patch taken from
  upstream git (bgo#787884).

==== gnome-shell ====
Subpackages: gnome-shell-browser-plugin gnome-shell-calendar gnome-shell-lang

- Add gnome-shell-Avoid-loginDialog-grab-focus-when-locked.patch:
  Fix using keyboard can't unlock screen (bgo#788169).

==== gstreamer-plugins-bad ====
Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbadbase-1_0-0 libgstbadvideo-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstgl-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgsturidownloader-1_0-0 libgstwayland-1_0-0

- Split out chromaprint plugin into
  gstreamer-plugins-bad-chromaprint: the chromaprint plugin links
  against ffmpeg (indirectly) which in turn can cause cycles in
  various other builds, like webkit2).

==== gvfs ====
Subpackages: gvfs-backend-afc gvfs-backend-samba gvfs-backends gvfs-fuse gvfs-lang

- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.

==== icu4j ====

- Don't condition the maven defines on release version, but on
  _maven_repository being defined

==== jline ====

- Don't require java-1_5_0-gcj-compat, but build with any
  java-devel provider
- Specify java source and target level 1.6: fixes build with
  jdk9

==== kbd ====
Version update (2.0.3 -> 2.0.4)
Subpackages: kbd-legacy

- Version update to 2.0.6:
  * translation updates
  * support for U+202F
  * minor fixes and code cleanup
  * minor improvements and more characters support
- Enable vlock (bsc#1056449, FATE#261).

==== kernel-source ====
Version update (4.13.3 -> 4.13.4)
Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms

- Linux 4.13.4 (bnc#1012628).
- orangefs: Don't clear SGID when inheriting ACLs (bnc#1012628).
- <linux/uaccess.h>: Fix copy_in_user() declaration (bnc#1012628).
- IB/hfi1: Revert egress pkey check enforcement (bnc#1012628).
- IB/{qib, hfi1}: Avoid flow control testing for RDMA write
  operation (bnc#1012628).
- IB/mlx5: Fix cached MR allocation flow (bnc#1012628).
- srcu: Provide ordering for CPU not involved in grace period
  (bnc#1012628).
- smp/hotplug: Handle removal correctly in cpuhp_store_callbacks()
  (bnc#1012628).
- Input: xpad - validate USB endpoint type during probe
  (bnc#1012628).
- drm/amdgpu: read reg in each iterator of psp_wait_for loop
  (bnc#1012628).
- tty: improve tty_insert_flip_char() fast path (bnc#1012628).
- tty: improve tty_insert_flip_char() slow path (bnc#1012628).
- tty: fix __tty_insert_flip_char regression (bnc#1012628).
- pinctrl: samsung: Fix invalid register offset used for
  Exynos5433 external interrupts (bnc#1012628).
- pinctrl: samsung: Fix NULL pointer exception on external
  interrupts on S3C24xx (bnc#1012628).
- pinctrl/amd: save pin registers over suspend/resume
  (bnc#1012628).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012628).
- MIPS: math-emu: <MAX|MAXA|MIN|MINA>.<D|S>: Fix quiet NaN
  propagation (bnc#1012628).
- MIPS: math-emu: <MAX|MAXA|MIN|MINA>.<D|S>: Fix cases of both
  inputs zero (bnc#1012628).
- MIPS: math-emu: <MAX|MIN>.<D|S>: Fix cases of both inputs
  negative (bnc#1012628).
- MIPS: math-emu: <MAXA|MINA>.<D|S>: Fix cases of input values
  with opposite signs (bnc#1012628).
- MIPS: math-emu: <MAXA|MINA>.<D|S>: Fix cases of both infinite
  inputs (bnc#1012628).
- MIPS: math-emu: MINA.<D|S>: Fix some cases of infinity and
  zero inputs (bnc#1012628).
- MIPS: math-emu: <MADDF|MSUBF>.<D|S>: Fix NaN propagation
  (bnc#1012628).
- MIPS: math-emu: <MADDF|MSUBF>.<D|S>: Fix some cases of infinite
  inputs (bnc#1012628).
- MIPS: math-emu: <MADDF|MSUBF>.<D|S>: Fix some cases of zero
  inputs (bnc#1012628).
- MIPS: math-emu: <MADDF|MSUBF>.<D|S>: Clean up "maddf_flags"
  enumeration (bnc#1012628).
- MIPS: math-emu: <MADDF|MSUBF>.S: Fix accuracy (32-bit case)
  (bnc#1012628).
- MIPS: math-emu: <MADDF|MSUBF>.D: Fix accuracy (64-bit case)
  (bnc#1012628).
- docs: disable KASLR when debugging kernel (bnc#1012628).
- crypto: ccp - Fix XTS-AES-128 support on v5 CCPs (bnc#1012628).
- crypto: scompress - don't sleep with preemption disabled
  (bnc#1012628).
- crypto: caam/qi - fix typo in authenc alg driver name
  (bnc#1012628).
- crypto: caam/qi - properly set IV after {en,de}crypt
  (bnc#1012628).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012628).
- regulator: cpcap: Fix standby mode (bnc#1012628).
- wcn36xx: Introduce mutual exclusion of fw configuration
  (bnc#1012628).
- ext4: in ext4_seek_{hole,data}, return -ENXIO for negative
  offsets (bnc#1012628).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012628).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012628).
- cxl: Fix driver use count (bnc#1012628).
- powerpc/powernv/npu: Move tlb flush before launching ATSD
  (bnc#1012628).
- powerpc/pseries: Don't attempt to acquire drc during memory
  hot add for assigned lmbs (bnc#1012628).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012628).
- block: Relax a check in blk_start_queue() (bnc#1012628).
- block: directly insert blk-mq request from
  blk_insert_cloned_request() (bnc#1012628).
- md/bitmap: copy correct data for bitmap super (bnc#1012628).
- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bnc#1012628).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012628).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012628).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012628).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012628).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012628).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012628).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012628).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012628).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012628).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012628).
- scsi: qedi: off by one in qedi_get_cmd_from_tid() (bnc#1012628).
- scsi: aacraid: Fix command send race condition (bnc#1012628).
- scsi: megaraid_sas: mismatch of allocated MFI frame size and
  length exposed in MFI MPT pass through command (bnc#1012628).
- scsi: megaraid_sas: set minimum value of resetwaittime to be
  1 secs (bnc#1012628).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012628).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012628).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012628).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012628).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012628).
- scsi: qla2xxx: Update fw_started flags at qpair creation
  (bnc#1012628).
- scsi: qla2xxx: Correction to vha->vref_count timeout
  (bnc#1012628).
- scsi: qla2xxx: Fix target multiqueue configuration
  (bnc#1012628).
- scsi: qla2xxx: Use BIT_6 to acquire FAWWPN from switch
  (bnc#1012628).
- scsi: qla2xxx: Use fabric name for Get Port Speed command
  (bnc#1012628).
- mailbox: bcm-flexrm-mailbox: Fix mask used in
  CMPL_START_ADDR_VALUE() (bnc#1012628).
- ftrace: Fix debug preempt config name in
  stack_tracer_{en,dis}able (bnc#1012628).
- ftrace: Fix selftest goto location on error (bnc#1012628).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012628).
- tracing: Add barrier to trace_printk() buffer nesting
  modification (bnc#1012628).
- tracing: Fix clear of RECORDED_TGID flag when disabling trace
  event (bnc#1012628).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012628).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012628).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012628).
- PCI: pciehp: Report power fault only once until we clear it
  (bnc#1012628).
- net/netfilter/nf_conntrack_core: Fix net_conntrack_lock()
  (bnc#1012628).
- s390/mm: fix local TLB flushing vs. detach of an mm address
  space (bnc#1012628).
- s390/mm: fix race on mm->context.flush_mm (bnc#1012628).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012628).
- media: Revert "[media] lirc_dev: remove superfluous
  get/put_device() calls" (bnc#1012628).
- media: venus: fix copy/paste error in return_buf_error
  (bnc#1012628).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012628).
- media: adv7180: add missing adv7180cp, adv7180st i2c device IDs
  (bnc#1012628).
- PM / devfreq: Fix memory leak when fail to register device
  (bnc#1012628).
- ALSA: seq: Cancel pending autoload work at unbinding device
  (bnc#1012628).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012628).
- bcache: Fix leak of bdev reference (bnc#1012628).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012628).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012628).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012628).
- bcache: fix sequential large write IO bypass (bnc#1012628).
- bcache: fix for gc and write-back race (bnc#1012628).
- bcache: fix bch_hprint crash and improve output (bnc#1012628).
- sched/cpuset/pm: Fix cpuset vs. suspend-resume bugs
  (bnc#1012628).
- iwlwifi: add workaround to disable wide channels in 5GHz
  (bnc#1012628).
- commit c028f76
- scripts/stableids: add 4.12 as SLE15 kernel
- commit 58b8d0c
- usb: quirks: add delay init quirk for Corsair Strafe RGB
  keyboard (bnc#1012628).
- USB: serial: option: add support for D-Link DWM-157 C1
  (bnc#1012628).
- usb: Add device quirk for Logitech HD Pro Webcam C920-C
  (bnc#1012628).
- usb:xhci:Fix regression when ATI chipsets detected
  (bnc#1012628).
- USB: musb: fix external abort on suspend (bnc#1012628).
- ANDROID: binder: add padding to binder_fd_array_object
  (bnc#1012628).
- ANDROID: binder: add hwbinder,vndbinder to BINDER_DEVICES
  (bnc#1012628).
- USB: core: Avoid race of async_completed() w/ usbdev_release()
  (bnc#1012628).
- staging/rts5208: fix incorrect shift to extract upper nybble
  (bnc#1012628).
- staging: ccree: save ciphertext for CTS IV (bnc#1012628).
- staging: fsl-dpaa2/eth: fix off-by-one FD ctrl bitmaks
  (bnc#1012628).
- iio: adc: ti-ads1015: fix incorrect data rate setting update
  (bnc#1012628).
- iio: adc: ti-ads1015: fix scale information for ADS1115
  (bnc#1012628).
- iio: adc: ti-ads1015: enable conversion when CONFIG_PM is not
  set (bnc#1012628).
- iio: adc: ti-ads1015: avoid getting stale result after runtime
  resume (bnc#1012628).
- iio: adc: ti-ads1015: don't return invalid value from buffer
  setup callbacks (bnc#1012628).
- iio: adc: ti-ads1015: add adequate wait time to get correct
  conversion (bnc#1012628).
- driver core: bus: Fix a potential double free (bnc#1012628).
- HID: wacom: Do not completely map WACOM_HID_WD_TOUCHRINGSTATUS
  usage (bnc#1012628).
- binder: free memory on error (bnc#1012628).
- crypto: caam/qi - fix compilation with
  CONFIG_DEBUG_FORCE_WEAK_PER_CPU=y (bnc#1012628).
- crypto: caam/qi - fix compilation with DEBUG enabled
  (bnc#1012628).
- thunderbolt: Fix reset response_type (bnc#1012628).
- fpga: altera-hps2fpga: fix multiple init of l3_remap_lock
  (bnc#1012628).
- intel_th: pci: Add Cannon Lake PCH-H support (bnc#1012628).
- intel_th: pci: Add Cannon Lake PCH-LP support (bnc#1012628).
- ath10k: fix memory leak in rx ring buffer allocation
  (bnc#1012628).
- drm/vgem: Pin our pages for dmabuf exports (bnc#1012628).
- drm/ttm: Fix accounting error when fail to get pages for pool
  (bnc#1012628).
- drm/dp/mst: Handle errors from
  drm_atomic_get_private_obj_state() correctly (bnc#1012628).
- rtlwifi: rtl_pci_probe: Fix fail path of _rtl_pci_find_adapter
  (bnc#1012628).
- Bluetooth: Add support of 13d3:3494 RTL8723BE device
  (bnc#1012628).
- iwlwifi: pci: add new PCI ID for 7265D (bnc#1012628).
- dlm: avoid double-free on error path in
  dlm_device_{register,unregister} (bnc#1012628).
- mwifiex: correct channel stat buffer overflows (bnc#1012628).
- MCB: add support for SC31 to mcb-lpc (bnc#1012628).
- s390/mm: avoid empty zero pages for KVM guests to avoid postcopy
  hangs (bnc#1012628).
- drm/nouveau/pci/msi: disable MSI on big-endian platforms by
  default (bnc#1012628).
- drm/nouveau: Fix error handling in nv50_disp_atomic_commit
  (bnc#1012628).
- workqueue: Fix flag collision (bnc#1012628).
- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bnc#1012628).
- cs5536: add support for IDE controller variant (bnc#1012628).
- scsi: sg: protect against races between mmap() and
  SG_SET_RESERVED_SIZE (bnc#1012628).
- scsi: sg: recheck MMAP_IO request length with lock held
  (bnc#1012628).
- of/device: Prevent buffer overflow in of_device_modalias()
  (bnc#1012628).
- rtlwifi: Fix memory leak when firmware request fails
  (bnc#1012628).
- rtlwifi: Fix fallback firmware loading (bnc#1012628).
- Linux 4.13.1 (bnc#1012628).
- mtd: nand: make Samsung SLC NAND usable again (bnc#1012628).
- mtd: nand: hynix: add support for 20nm NAND chips (bnc#1012628).
- mtd: nand: mxc: Fix mxc_v1 ooblayout (bnc#1012628).
- mtd: nand: qcom: fix read failure without complete bootchain
  (bnc#1012628).
- mtd: nand: qcom: fix config error for BCH (bnc#1012628).
- nvme-fabrics: generate spec-compliant UUID NQNs (bnc#1012628).
- btrfs: resume qgroup rescan on rw remount (bnc#1012628).
- rtlwifi: btcoexist: Fix breakage of ant_sel for rtl8723be
  (bnc#1012628).
- rtlwifi: btcoexist: Fix antenna selection code (bnc#1012628).
- radix-tree: must check __radix_tree_preload() return value
  (bnc#1012628).
- brcmfmac: feature check for multi-scheduled scan fails on
  bcm4345 devices (bnc#1012628).
- kselftests: timers: leap-a-day: Change default arguments to
  help test runs (bnc#1012628).
- selftests: timers: Fix run_destructive_tests target to handle
  skipped tests (bnc#1012628).
- selftests/x86/fsgsbase: Test selectors 1, 2, and 3
  (bnc#1012628).
- mm: kvfree the swap cluster info if the swap file is
  unsatisfactory (bnc#1012628).
- mm/swapfile.c: fix swapon frontswap_map memory leak on error
  (bnc#1012628).
- mm/sparse.c: fix typo in online_mem_sections (bnc#1012628).
- mm/memory.c: fix mem_cgroup_oom_disable() call missing
  (bnc#1012628).
- KVM: SVM: Limit PFERR_NESTED_GUEST_PAGE error_code check to
  L1 guest (bnc#1012628).
- Revert "firmware: add sanity check on shutdown/suspend"
  (bnc#1012628).
- rt2800: fix TX_PIN_CFG setting for non MT7620 chips (bnc#1012628
  bnc#1055826).
- Bluetooth: Properly check L2CAP config option output buffer
  length (bnc#1012628).
- ARM64: dts: marvell: armada-37xx: Fix GIC maintenance interrupt
  (bnc#1012628).
- ARM: 8692/1: mm: abort uaccess retries upon fatal signal
  (bnc#1012628).
- NFS: Fix 2 use after free issues in the I/O code (bnc#1012628).
- NFS: Sync the correct byte range during synchronous writes
  (bnc#1012628).
- NFSv4: Fix up mirror allocation (bnc#1012628).
- xfs: XFS_IS_REALTIME_INODE() should be false if no rt device
  present (bnc#1012628).
- Linux 4.13.2 (bnc#1012628).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012628).
- Revert "net: fix percpu memory leaks" (bnc#1012628).
- gianfar: Fix Tx flow control deactivation (bnc#1012628).
- vhost_net: correctly check tx avail during rx busy polling
  (bnc#1012628).
- ip6_gre: update mtu properly in ip6gre_err (bnc#1012628).
- udp: drop head states only when all skb references are gone
  (bnc#1012628).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012628).
- ipv6: fix typo in fib6_net_exit() (bnc#1012628).
- sctp: fix missing wake ups in some situations (bnc#1012628).
- tcp: fix a request socket leak (bnc#1012628).
- ip_tunnel: fix setting ttl and tos value in collect_md mode
  (bnc#1012628).
- f2fs: let fill_super handle roll-forward errors (bnc#1012628).
- f2fs: check hot_data for roll-forward recovery (bnc#1012628).
- thunderbolt: Remove superfluous check (bnc#1012628).
- thunderbolt: Make key root-only accessible (bnc#1012628).
- thunderbolt: Allow clearing the key (bnc#1012628).
- x86/fsgsbase/64: Fully initialize FS and GS state in
  start_thread_common (bnc#1012628).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012628).
- x86/switch_to/64: Rewrite FS/GS switching yet again to fix
  AMD CPUs (bnc#1012628).
- x86/mm, mm/hwpoison: Clear PRESENT bit for kernel 1:1 mappings
  of poison pages (bnc#1012628).
- ovl: fix false positive ESTALE on lookup (bnc#1012628).
- fuse: allow server to run in different pid_ns (bnc#1012628).
- idr: remove WARN_ON_ONCE() when trying to replace negative ID
  (bnc#1012628).
- libnvdimm, btt: check memory allocation failure (bnc#1012628).
- libnvdimm: fix integer overflow static analysis warning
  (bnc#1012628).
- xfs: write unmount record for ro mounts (bnc#1012628).
- xfs: toggle readonly state around xfs_log_mount_finish
  (bnc#1012628).
- xfs: Add infrastructure needed for error propagation during
  buffer IO failure (bnc#1012628).
- xfs: Properly retry failed inode items in case of error during
  buffer writeback (bnc#1012628).
- xfs: fix recovery failure when log record header wraps log end
  (bnc#1012628).
- xfs: always verify the log tail during recovery (bnc#1012628).
- xfs: fix log recovery corruption error due to tail overwrite
  (bnc#1012628).
- xfs: handle -EFSCORRUPTED during head/tail verification
  (bnc#1012628).
- xfs: stop searching for free slots in an inode chunk when
  there are none (bnc#1012628).
- xfs: evict all inodes involved with log redo item (bnc#1012628).
- xfs: check for race with xfs_reclaim_inode() in
  xfs_ifree_cluster() (bnc#1012628).
- xfs: open-code xfs_buf_item_dirty() (bnc#1012628).
- xfs: remove unnecessary dirty bli format check for ordered bufs
  (bnc#1012628).
- xfs: ordered buffer log items are never formatted (bnc#1012628).
- xfs: refactor buffer logging into buffer dirtying helper
  (bnc#1012628).
- xfs: don't log dirty ranges for ordered buffers (bnc#1012628).
- xfs: skip bmbt block ino validation during owner change
  (bnc#1012628).
- xfs: move bmbt owner change to last step of extent swap
  (bnc#1012628).
- xfs: disallow marking previously dirty buffers as ordered
  (bnc#1012628).
- xfs: relog dirty buffers during swapext bmbt owner change
  (bnc#1012628).
- xfs: disable per-inode DAX flag (bnc#1012628).
- xfs: fix incorrect log_flushed on fsync (bnc#1012628).
- xfs: don't set v3 xflags for v2 inodes (bnc#1012628).
- xfs: open code end_buffer_async_write in
  xfs_finish_page_writeback (bnc#1012628).
- xfs: use kmem_free to free return value of kmem_zalloc
  (bnc#1012628).
- md/raid1/10: reset bio allocated from mempool (bnc#1012628).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012628).
- xfs: fix compiler warnings (bnc#1012628).
- Linux 4.13.3 (bnc#1012628).
- Delete patches.kernel.org/patch-4.13.1.
- Delete patches.kernel.org/patch-4.13.1-2.
- Delete patches.kernel.org/patch-4.13.2-3.
  Replace stable all-in-one patches by expanded patches.
- commit 8e0ee21
- x86/asm: Fix inline asm call constraints for Clang
  (bnc#1058115).
- objtool: Handle another GCC stack pointer adjustment bug
  (bnc#1058115).
- commit 8e680d0
- scripts/stable*: generate one file per commit
- scripts/stableids: generate one file per commit
- commit 1dc9b0e
- 8139too: revisit napi_complete_done() usage (bsc#1042208).
- commit 99343bb
- crypto: x86/blowfish - Fix RBP usage (bnc#1058115).
- crypto: x86/camellia - Fix RBP usage (bnc#1058115).
- crypto: x86/cast5 - Fix RBP usage (bnc#1058115).
- crypto: x86/cast6 - Fix RBP usage (bnc#1058115).
- crypto: x86/des3_ede - Fix RBP usage (bnc#1058115).
- crypto: x86/sha1-avx2 - Fix RBP usage (bnc#1058115).
- crypto: x86/sha1-ssse3 - Fix RBP usage (bnc#1058115).
- crypto: x86/sha256-avx - Fix RBP usage (bnc#1058115).
- crypto: x86/sha256-avx2 - Fix RBP usage (bnc#1058115).
- crypto: x86/sha256-ssse3 - Fix RBP usage (bnc#1058115).
- crypto: sha512-avx2 - Fix RBP usage (bnc#1058115).
- crypto: x86/twofish - Fix RBP usage (bnc#1058115).
  Update upstream status.
- commit e890e3e

==== libatasmart ====

- Add libatasmart-0.19-wd-fix.patch: Fix issue with WD drives.
  Fixes fdo#61998.

==== libpt2 ====

- Disable esd plugin (openSUSE has moved through various other
  sound daemons since esd was useful):
  + Drop esound-devel BuildRequires
  + No longer pass --enable-esd to configure
  + Drop libpt2_10_11-plugins-esd subpackage.
- Add an explicit alsa-devel BuildRequires: this uses to be pulled
  in by esound devel.

==== libqt5-qtwebengine ====

- Unbundle ffmpeg if possible, only support proprietary codecs
  if the system ffmpeg does

==== libunicap ====
Subpackages: libunicap-devel libunicap2

- Fix Factory build by disable gtk-doc html build due to
  gtkdoc-mktmpl having been removed.

==== libvirt ====
Subpackages: libvirt-client libvirt-daemon libvirt-daemon-config-network libvirt-daemon-config-nwfilter libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-lxc libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-driver-uml libvirt-daemon-driver-vbox libvirt-daemon-lxc libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs

- apparmor: Add rules for kernel 4.13 ptrace checks
  b482925c-apparmor-ptrace-support.patch
  Drop temporary workaround apparmor-ptrace-support.patch
  bsc#1058847
- apparmor: Add rules for denial encountered when starting
  confined domains
  f305d8a1-apparmor-attach_disconnected.patch,
  suse-apparmor-libnl-paths.patch
  Drop old, useless, undocumented apparmor-fixes.patch

==== libxml2 ====
Version update (2.9.4 -> 2.9.5)
Subpackages: libxml2-2 libxml2-2-32bit libxml2-devel libxml2-tools

- Update package summaries and RPM groups. Trim descriptions for
  size on secondary subpackages. Replace install call by a
  commonly-used macro.
- Add patch to fix TW integration:
  * libxml2-bug787941.patch
- Version update to 2.9.5 release:
  * Merged all the previous cve fixes that were patched in
  * Few small tweaks
- Remove merged patches:
  * libxml2-CVE-2016-4658.patch
  * libxml2-CVE-2017-0663.patch
  * libxml2-CVE-2017-5969.patch
  * libxml2-CVE-2017-9047.patch
  * libxml2-CVE-2017-9048.patch
  * libxml2-CVE-2017-9049.patch
  * libxml2-2.9.4-fix_attribute_decoding.patch

==== mpg123 ====
Version update (1.25.6 -> 1.25.7)
Subpackages: libmpg123-0 mpg123-openal mpg123-pulse

- Drop pkgconfig(esound) BuildRequires and mpg123-esound
  sub-package, esound is a long obsoleted sound server.
- Update to version 1.25.7
  mpg123:
  * Do not play with cursor and inverse video for progress bar
    when TERM=dumb.
  * Fix parsing of host port for numerical IPv6 addresses (just did
    not work before, only for textual host names).
  libmpg123:
  * Proper fix for the xrpnt overflow problems by correctly
    initialising certain tables for MPEG 2.x layer III. The checks
    that catch the resulting overflow are still in place, but
    likely superfluous now. Note that this means certain valid
    files would have been misdecoded before, if anyone actually
    produced them. Thanks to Robert Hegemann for the fix!
  * Silently handle granules with part2_3_length == 0, but
    scalefac_compress != 0 (ignore the latter).

==== newt ====

- build python3 subpackage

==== openconnect ====
Subpackages: openconnect-devel

- Drop vpnc dependency by including vpnc-script from vpnc package
  (fate#323497).

==== perl-Authen-SASL ====

- add perl526.path to build with perl 5.26

==== perl-XML-LibXML ====

- Add patch to fix building with new libxml (from Fedora):
  * XML-LibXML-2.0129-Adjust-tests-to-libxml2-2.9.5.patch

==== php7 ====
Version update (7.1.9 -> 7.1.10)
Subpackages: apache2-mod_php7 php7-bcmath php7-bz2 php7-calendar php7-ctype php7-curl php7-dba php7-devel php7-dom php7-exif php7-fastcgi php7-ftp php7-gd php7-gettext php7-gmp php7-iconv php7-imap php7-json php7-ldap php7-mbstring php7-mysql php7-odbc php7-openssl php7-pdo php7-pear php7-pear-Archive_Tar php7-pgsql php7-shmop php7-snmp php7-sockets php7-sqlite php7-sysvsem php7-sysvshm php7-tidy php7-tokenizer php7-wddx php7-xmlreader php7-xmlwriter php7-xsl php7-zlib

- updated to 7.1.10: Several bugs have been fixed, see
  https://secure.php.net/ChangeLog-7.php
  for details
- aarch64-mult.patch renamed to php7-aarch64-mult.patch

==== polari ====
Subpackages: polari-lang typelib-1_0-Polari-1_0

- Add telepathy-idle and telepathy-logger Requires: missing
  mandatory run-time dependencies.

==== python-M2Crypto ====
Version update (0.26.3 -> 0.26.4)

- Update to 0.26.4 with fix for OpenSSL 1.1.0 and LibreSSL

==== python-libxml2 ====
Version update (2.9.4 -> 2.9.5)

- Update package summaries and RPM groups. Trim descriptions for
  size on secondary subpackages. Replace install call by a
  commonly-used macro.
- Version update to 2.9.5 release:
  * Merged all the previous cve fixes that were patched in
  * Few small tweaks
- Remove merged patches:
  * libxml2-CVE-2016-4658.patch
  * libxml2-CVE-2017-0663.patch
  * libxml2-CVE-2017-5969.patch
  * libxml2-CVE-2017-9047.patch
  * libxml2-CVE-2017-9048.patch
  * libxml2-CVE-2017-9049.patch
  * libxml2-2.9.4-fix_attribute_decoding.patch

==== python-six ====
Version update (1.10.0 -> 1.11.0)
Subpackages: python2-six python3-six

- Fix Source url
- README->README.rst, add CHANGES
- update to version 1.11.0:
  * Pull request #178: `with_metaclass` now properly proxies
    `__prepare__` to the underlying metaclass.
  * Pull request #191: Allow `with_metaclass` to work with metaclasses
    implemented in C.
  * Pull request #203: Add parse_http_list and parse_keqv_list to
    moved urllib.request.
  * Pull request #172 and issue #171: Add unquote_to_bytes to moved
    urllib.parse.
  * Pull request #167: Add `six.moves.getoutput`.
  * Pull request #80: Add `six.moves.urllib_parse.splitvalue`.
  * Pull request #75: Add `six.moves.email_mime_image`.
  * Pull request #72: Avoid creating reference cycles through
    tracebacks in `reraise`.

==== radvd ====
Version update (2.11 -> 2.17)

- only do group prereq on new style distro
- update to 2.17:
  * Fix STDERR_SYSLOG log level bug.
  * Always close stdout and stderr when daemonizing.
  * Implement RFC 7772 Section 5.1.1, 5.1.2, defaulted to on. <Robin H. Johnson>
  * Fixed ExecReload in systemd service file <Harald Albrecht>
  * Merged ARPHRD_6LOWPAN netlink query from <Alexander Aring>
  * Add systemd service file <Craig Andrews>
  * Fixed bug in new vs old address list comparison when
    responding to netlink messages.
  * Fix netlink bug where RADVD reacts to RTM_NEWADDR
    messages when there weren't actually any new addresses
    to be found.  Those RTM_NEWADDR messages were only
  * process.c: fixup ugly overflow check
    radvd.conf.5.man: minor fixup to 'client' option
    radvd.conf.5.man: update abro usage
    gram.y: deprecate abro prefix length
    device-linux.c: IEEE 802.15.4 musl libc fix
    send.c: seconds/miliseconds comparison fix
    send.c: preferred lifetime RFC 4862, 5.5.3 fix
    defaults.h: remaining lifetime RFC 4862 fix
    radvdump: show routes with prefixlen > 64
- run tmpfiles_create in post to ensure creation of rundir
- depend on daemon group to be created before adding user
- fix rundir group permission

==== systemd ====
Subpackages: libsystemd0 libsystemd0-32bit libudev-devel libudev1 libudev1-32bit systemd-32bit systemd-bash-completion systemd-logger systemd-sysvinit udev

- Import commit 9e0985dc330b1cf04bc44049962343bdf4ba851a
  4fd7cd041 pam_logind: skip leading /dev/ from PAM_TTY field before passing it on
  dd6312828 logind: make sure we don't process the same method call twice (#6583)
- Update scripts-systemd-upgrade-from-pre-210.sh script
  - drop dependency on awk
  - fallback to runlevel #3 if something goes wrong
  Note: I'm not sure how this is supposed to work as /etc/inittab is
  likely to be missing in my understanding. Indeed this file is part
  of the aaa_base package which might be upgraded before systemd is
  installed...
- Drop macros.systemd.upstream as it's not used

==== taglib ====
Subpackages: libtag-devel libtag1 libtag_c0

- Cleanup bit with spec-cleaner
- Drop librcc dependency as there is no actual code dependency in taglib