Packages changed: amarok docbook-xsl docbook_4 docbook_5 gnome-weather goffice (0.10.36 -> 0.10.37) icinga kdebase4-runtime kdebase4-workspace kdelibs4 kernel-source (4.14.2 -> 4.14.3) man-pages (4.13 -> 4.14) nagios python-qt4 qt4-qtscript squid virt-manager virt-sandbox === Details === ==== amarok ==== Subpackages: amarok-lang - Add patch to not build WebKit-dependent parts: * Skip-qtwebkit-parts.patch ==== docbook-xsl ==== Subpackages: docbook-xsl-stylesheets docbook5-xsl-stylesheets - Abandom the docbook-xsl-stylesheets-script package. The dbtoepub script is available from the rubygem-dbtoepub package. The script pdf2index is available in docbook-xsl-pdf2index - First attempt to build the two DocBook stylesheet packages from a single source: - Added xslnons-build script from upstream. - Improved dbxslt-install.sh script a lot - Fix bsc#1063066: From 1.79.1 and later, upstream decided to release namespace aware stylesheets only. The non-NS stylesheets have to be built with the "xslnons-build" script (taken from upstream). This is integrated now. The switch from NS-aware to non-NS stylesheets help to fix this problem. - Restore working patch (bsc#1063066): * Rebase docbook-xsl-stylesheets-non-recursive_string_subst.patch - Update to version 1.79.2 - Rebase docbook-xsl-stylesheets-non-recursive_string_subst.patch - callout-gen is removed - Add docbook-xsl-stylesheets-non-recursive_string_subst.patch Use str:replace from exslt.org to implement string.subst string.subst implementation causes recursion issues when building systemd documentation. This issue has been reported in https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=765567 and https://bugs.archlinux.org/task/54694 . Taken from https://github.com/fishilico/xslt10-stylesheets/commit/a7df4fbbef3ab0f97d50aa47f2ccfa0630a2686e - Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13. - Use update-xml-catalog - Update download urls - Update to version 1.79.0, see http://snapshots.docbook.org/xsl/RELEASE-NOTES.html#V1.79.0 for details (Mostly bugfix release) - Remove obsolete patches * docbook-xsl-stylesheets-epub3-base.dir.patch * docbook-xsl-stylesheets-manpages-other-r9847.patch - Perform a spec-cleaner on the spec file - Fixed bsc#928753 (added missing template directory) - Slightly corrected file list - Slightly adapted %post and %postun section to fix bsc#918565 - Added missing images directory to install-script dbxslt-install.sh - Fixed bnc#842844 and added upstream patch from r9847 of docbook#1313 (File docbook-xsl-stylesheets-manpages-other-r9847.patch) - .spec: syntax fix. - Added missing patch description to follow Patch Guidlines (see http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines) - Added upstream patch (r9732-r9743 for base.dir parameter in EPUB3) - Moved installation procedure into dbxslt-install.sh Shell script - Corrected conflict with docbook5-xsl-stylesheets: Created subpackage with pdf2index (which raised this conflict) and moved other scripts too (db2epub, callout-gen). This makes it easier to install both variantes of the stylesheets - Fix spec to avoid conflict with docbook5-xsl-stylesheets - Update to 1.78.1, see http://snapshots.docbook.org/xsl/RELEASE-NOTES.html#V1.78.1 for details - Added %exclude in SPEC file for .htaccess files - Updated to 1.78.0, see http://snapshots.docbook.org/xsl/RELEASE-NOTES.html#V1.78.0 for details (Mostly bugfix release) - Fixed SPEC file: * added missing db2epub in /epub/bin/ * create symbolic links (-s) with fdupes - Updated to 1.77.1, see http://snapshots.docbook.org/xsl/RELEASE-NOTES.html#V1.77.1 for details (Mostly bugfix release) - Fixed spec file to copy VERSION.xsl instead of VERSION - Updated to 1.77.0, see http://snapshots.docbook.org/xsl/RELEASE-NOTES.html#V1.77.0 for details (Merged from Factory) - change license to be in spdx.org format - remove ruby requires, there is nothing in here using ruby and ruby needs this package indirectly - creating a build cycle - Remove redundant tags/sections from specfile (cf. packaging guidelines) - Update to 1.76.1; for news, see http://lists.oasis-open.org/archives/docbook-apps/201011/msg00007.html - Moved pdf2index and dbtoepub to /usr/bin - Cleaned up Spec file to avoid rpmlint warnings - Removed now obsolete chunktoc-fix.patch - chunktoc.xsl: Added missing namespace declarations. Closes bug #2890069. - Fix last patch to remove another release number. - Only remove file from catalog if it disappeared. - Do not use release numbers, they're not needed anymore. - Update to 1.75.2; for news, see http://lists.oasis-open.org/archives/docbook-apps/200907/msg00046.html - Update to 1.75.1; for news, see http://lists.oasis-open.org/archives/docbook-apps/200905/msg00165.html http://lists.oasis-open.org/archives/docbook-apps/200905/msg00018.html - Update to version 1.75.0; for news, see http://sourceforge.net/forum/forum.php?forum_id=951185. - Update to version 1.74.3; for news, see http://sourceforge.net/forum/forum.php?forum_id=920190. ==== docbook_4 ==== - Fix XML catalog problems (missing or mistyped identifiers) - Fix version 4.1.2 link in SGML (yes!) directory - Add missing docbook-xml-4.1.2-catalog.xml - - Spec file changes: * Adapted patches (only directory) * Used spec-cleaner * Removed obsolete stuff * Installed files through Makefile * Used/require sgml-skel >= 0.7 * Used update-xml-catalog ==== docbook_5 ==== - Correct Makefile: - Add more pattern rules - Use more builtin make functions - Create links in nvdl directory to docbook.{rng,sch} - Add missing assembly.rn{c,g} and dbits.rn{c,g} for Schematron - Correct spec file: - Add docbook_5-nvdl.patch to change path to DocBook RNG/SCH files - Apply spec-cleaner ==== gnome-weather ==== Subpackages: gnome-shell-search-provider-gnome-weather gnome-weather-lang - Add gnome-weather-fix-gettext-domain.patch: gschema: Fix gettext-domain. - Drop post(un) handling of glib2_gsettings_schema_post(un), desktop_database_post(un) and icon_theme_cache_post(un), we have file-triggers taking care of this now. - Modernize spec, run spec-cleaner, use autosetup and make_build macros. ==== goffice ==== Version update (0.10.36 -> 0.10.37) Subpackages: goffice-lang libgoffice-0_10-10 - Update to version 0.10.37: + No visible changes for the users. - Point fdupes to the data directory intead of build root, which is is a practice that must be avoided. - Adopt the use of %make_build macro instead of raw make command, following the best practices. - Remove %clean section once its use is redundant since RPM does this work now. ==== icinga ==== - fix a possible symlink attack for files/dirs created by root fixes CVE-2016-8641 (bsc#1011630 and bsc#1018047) - the update to 1.14.0 also fixed boo#952777 - remove the pre-configured administrative account with fixed password for the WebUI - CVE-2016-0726 (boo#961115) ==== kdebase4-runtime ==== - Add patch to not build against Qt 4 WebKit: * skip-qtwebkit-parts.patch ==== kdebase4-workspace ==== Subpackages: kdebase4-workspace-libs python-kdebase4 - Add patch to not build against Qt4 WebKit: * skip-qtwebkit-parts.patch * Drop ksysguard, not built anymore * Adjust filelist ==== kdelibs4 ==== Subpackages: kdelibs4-core libkde4 libkdecore4 libksuseinstall1 - Add patch to not build against Qt4 WebKit: * Skip-qtwebkit-parts.patch * Vade retro satana ==== kernel-source ==== Version update (4.14.2 -> 4.14.3) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms - Linux 4.14.3 (bnc#1012628). - s390: fix transactional execution control register handling (bnc#1012628). - s390/noexec: execute kexec datamover without DAT (bnc#1012628). - s390/runtime instrumention: fix possible memory corruption (bnc#1012628). - s390/guarded storage: fix possible memory corruption (bnc#1012628). - s390/disassembler: add missing end marker for e7 table (bnc#1012628). - s390/disassembler: increase show_code buffer size (bnc#1012628). - ACPI / PM: Fix acpi_pm_notifier_lock vs flush_workqueue() deadlock (bnc#1012628). - ACPI / EC: Fix regression related to triggering source of EC event handling (bnc#1012628). - cpufreq: schedutil: Reset cached_raw_freq when not in sync with next_freq (bnc#1012628). - serdev: fix registration of second slave (bnc#1012628). - sched: Make resched_cpu() unconditional (bnc#1012628). - lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012628). - x86/boot: Fix boot failure when SMP MP-table is based at 0 (bnc#1012628). - x86/decoder: Add new TEST instruction pattern (bnc#1012628). - x86/entry/64: Fix entry_SYSCALL_64_after_hwframe() IRQ tracing (bnc#1012628). - x86/entry/64: Add missing irqflags tracing to native_load_gs_index() (bnc#1012628). - perf/x86/intel: Hide TSX events when RTM is not supported (bnc#1012628). - arm64: Implement arch-specific pte_access_permitted() (bnc#1012628). - ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE (bnc#1012628). - ARM: 8721/1: mm: dump: check hardware RO bit for LPAE (bnc#1012628). - uapi: fix linux/tls.h userspace compilation error (bnc#1012628). - uapi: fix linux/rxrpc.h userspace compilation errors (bnc#1012628). - MIPS: cmpxchg64() and HAVE_VIRT_CPU_ACCOUNTING_GEN don't work for 32-bit SMP (bnc#1012628). - MIPS: ralink: Fix MT7628 pinmux (bnc#1012628). - MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012628). - net: mvneta: fix handling of the Tx descriptor counter (bnc#1012628). - nbd: wait uninterruptible for the dead timeout (bnc#1012628). - nbd: don't start req until after the dead connection logic (bnc#1012628). - PM / OPP: Add missing of_node_put(np) (bnc#1012628). - PCI/ASPM: Account for downstream device's Port Common_Mode_Restore_Time (bnc#1012628). - PCI/ASPM: Use correct capability pointer to program LTR_L1.2_THRESHOLD (bnc#1012628). - PCI: hv: Use effective affinity mask (bnc#1012628). - PCI: Set Cavium ACS capability quirk flags to assert RR/CR/SV/UF (bnc#1012628). - PCI: Apply Cavium ThunderX ACS quirk to more Root Ports (bnc#1012628). - ALSA: hda: Add Raven PCI ID (bnc#1012628). - dm integrity: allow unaligned bv_offset (bnc#1012628). - dm cache: fix race condition in the writeback mode overwrite_bio optimisation (bnc#1012628). - dm crypt: allow unaligned bv_offset (bnc#1012628). - dm zoned: ignore last smaller runt zone (bnc#1012628). - dm mpath: remove annoying message of 'blk_get_request() returned -11' (bnc#1012628). - dm bufio: fix integer overflow when limiting maximum cache size (bnc#1012628). - ovl: Put upperdentry if ovl_check_origin() fails (bnc#1012628). - dm: allocate struct mapped_device with kvzalloc (bnc#1012628). - sched/rt: Simplify the IPI based RT balancing logic (bnc#1012628). - MIPS: pci: Remove KERN_WARN instance inside the mt7620 driver (bnc#1012628). - dm: fix race between dm_get_from_kobject() and __dm_destroy() (bnc#1012628). - dm: discard support requires all targets in a table support discards (bnc#1012628). - MIPS: Fix odd fp register warnings with MIPS64r2 (bnc#1012628). - MIPS: Fix MIPS64 FP save/restore on 32-bit kernels (bnc#1012628). - MIPS: dts: remove bogus bcm96358nb4ser.dtb from dtb-y entry (bnc#1012628). - MIPS: Fix an n32 core file generation regset support regression (bnc#1012628). - MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012628). - MIPS: math-emu: Fix final emulation phase for certain instructions (bnc#1012628). - rt2x00usb: mark device removed when get ENOENT usb error (bnc#1012628). - mm/z3fold.c: use kref to prevent page free/compact race (bnc#1012628). - autofs: don't fail mount for transient error (bnc#1012628). - nilfs2: fix race condition that causes file system corruption (bnc#1012628). - fscrypt: lock mutex before checking for bounce page pool (bnc#1012628). - eCryptfs: use after free in ecryptfs_release_messaging() (bnc#1012628). - libceph: don't WARN() if user tries to add invalid key (bnc#1012628). - bcache: check ca->alloc_thread initialized before wake up it (bnc#1012628). - fs: guard_bio_eod() needs to consider partitions (bnc#1012628). - fanotify: fix fsnotify_prepare_user_wait() failure (bnc#1012628). - isofs: fix timestamps beyond 2027 (bnc#1012628). - btrfs: change how we decide to commit transactions during flushing (bnc#1012628). - f2fs: expose some sectors to user in inline data or dentry case (bnc#1012628). - NFS: Fix typo in nomigration mount option (bnc#1012628). - NFS: Revert "NFS: Move the flock open mode check into nfs_flock()" (bnc#1012628). - nfs: Fix ugly referral attributes (bnc#1012628). - NFS: Avoid RCU usage in tracepoints (bnc#1012628). - NFS: revalidate "." etc correctly on "open" (bnc#1012628). - nfsd: deal with revoked delegations appropriately (bnc#1012628). - rtlwifi: rtl8192ee: Fix memory leak when loading firmware (bnc#1012628). - rtlwifi: fix uninitialized rtlhal->last_suspend_sec time (bnc#1012628). - iwlwifi: fix firmware names for 9000 and A000 series hw (bnc#1012628). - md: fix deadlock error in recent patch (bnc#1012628). - md: don't check MD_SB_CHANGE_CLEAN in md_allow_write (bnc#1012628). - Bluetooth: btqcomsmd: Add support for BD address setup (bnc#1012628). - md/bitmap: revert a patch (bnc#1012628 bsc#1062597). - fsnotify: clean up fsnotify_prepare/finish_user_wait() (bnc#1012628). - fsnotify: pin both inode and vfsmount mark (bnc#1012628). - fsnotify: fix pinning group in fsnotify_prepare_user_wait() (bnc#1012628). - ata: fixes kernel crash while tracing ata_eh_link_autopsy event (bnc#1012628). - ext4: fix interaction between i_size, fallocate, and delalloc after a crash (bnc#1012628). - ext4: prevent data corruption with inline data + DAX (bnc#1012628). - ext4: prevent data corruption with journaling + DAX (bnc#1012628). - ALSA: pcm: update tstamp only if audio_tstamp changed (bnc#1012628). - ALSA: usb-audio: Add sanity checks to FE parser (bnc#1012628). - ALSA: usb-audio: Fix potential out-of-bound access at parsing SU (bnc#1012628). - ALSA: usb-audio: Add sanity checks in v2 clock parsers (bnc#1012628). - ALSA: timer: Remove kernel warning at compat ioctl error paths (bnc#1012628). - ALSA: hda/realtek - Fix ALC275 no sound issue (bnc#1012628). - ALSA: hda: Fix too short HDMI/DP chmap reporting (bnc#1012628). - ALSA: hda - Fix yet remaining issue with vmaster 0dB initialization (bnc#1012628). - ALSA: hda/realtek - Fix ALC700 family no sound issue (bnc#1012628). - ASoC: sun8i-codec: Invert Master / Slave condition (bnc#1012628). - ASoC: sun8i-codec: Fix left and right channels inversion (bnc#1012628). - ASoC: sun8i-codec: Set the BCLK divider (bnc#1012628). - mfd: lpc_ich: Avoton/Rangeley uses SPI_BYT method (bnc#1012628). - fix a page leak in vhost_scsi_iov_to_sgl() error recovery (bnc#1012628). - 9p: Fix missing commas in mount options (bnc#1012628). - fs/9p: Compare qid.path in v9fs_test_inode (bnc#1012628). - net/9p: Switch to wait_event_killable() (bnc#1012628). - scsi: qla2xxx: Suppress a kernel complaint in qla_init_base_qpair() (bnc#1012628). - scsi: sd_zbc: Fix sd_zbc_read_zoned_characteristics() (bnc#1012628). - scsi: lpfc: fix pci hot plug crash in timer management routines (bnc#1012628). - scsi: lpfc: fix pci hot plug crash in list_add call (bnc#1012628). - scsi: lpfc: Fix crash receiving ELS while detaching driver (bnc#1012628). - scsi: lpfc: Fix FCP hba_wqidx assignment (bnc#1012628). - scsi: lpfc: Fix oops if nvmet_fc_register_targetport fails (bnc#1012628). - iscsi-target: Make TASK_REASSIGN use proper se_cmd->cmd_kref (bnc#1012628). - iscsi-target: Fix non-immediate TMR reference leak (bnc#1012628). - target: fix null pointer regression in core_tmr_drain_tmr_list (bnc#1012628). - target: fix buffer offset in core_scsi3_pri_read_full_status (bnc#1012628). - target: Fix QUEUE_FULL + SCSI task attribute handling (bnc#1012628). - target: Fix caw_sem leak in transport_generic_request_failure (bnc#1012628). - target: Fix quiese during transport_write_pending_qf endless loop (bnc#1012628). - target: Avoid early CMD_T_PRE_EXECUTE failures during ABORT_TASK (bnc#1012628). - mtd: Avoid probe failures when mtd->dbg.dfs_dir is invalid (bnc#1012628). - mtd: nand: Export nand_reset() symbol (bnc#1012628). - mtd: nand: atmel: Actually use the PM ops (bnc#1012628). - mtd: nand: omap2: Fix subpage write (bnc#1012628). - mtd: nand: Fix writing mtdoops to nand flash (bnc#1012628). - mtd: nand: mtk: fix infinite ECC decode IRQ issue (bnc#1012628). - mailbox: bcm-flexrm-mailbox: Fix FlexRM ring flush sequence (bnc#1012628). - p54: don't unregister leds when they are not initialized (bnc#1012628). - block: Fix a race between blk_cleanup_queue() and timeout handling (bnc#1012628). - raid1: prevent freeze_array/wait_all_barriers deadlock (bnc#1012628). - genirq: Track whether the trigger type has been set (bnc#1012628). - irqchip/gic-v3: Fix ppi-partitions lookup (bnc#1012628). - lockd: double unregister of inetaddr notifiers (bnc#1012628). - KVM: PPC: Book3S HV: Don't call real-mode XICS hypercall handlers if not enabled (bnc#1012628). - KVM: nVMX: set IDTR and GDTR limits when loading L1 host state (bnc#1012628). - KVM: SVM: obey guest PAT (bnc#1012628). - kvm: vmx: Reinstate support for CPUs without virtual NMI (bnc#1012628). - dax: fix PMD faults on zero-length files (bnc#1012628). - dax: fix general protection fault in dax_alloc_inode (bnc#1012628). - SUNRPC: Fix tracepoint storage issues with svc_recv and svc_rqst_status (bnc#1012628). - clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012628). - libnvdimm, dimm: clear 'locked' status on successful DIMM enable (bnc#1012628). - libnvdimm, pfn: make 'resource' attribute only readable by root (bnc#1012628). - libnvdimm, namespace: fix label initialization to use valid seq numbers (bnc#1012628). - libnvdimm, region : make 'resource' attribute only readable by root (bnc#1012628). - libnvdimm, namespace: make 'resource' attribute only readable by root (bnc#1012628). - svcrdma: Preserve CB send buffer across retransmits (bnc#1012628). - IB/srpt: Do not accept invalid initiator port names (bnc#1012628). - IB/cm: Fix memory corruption in handling CM request (bnc#1012628). - IB/hfi1: Fix incorrect available receive user context count (bnc#1012628). - IB/srp: Avoid that a cable pull can trigger a kernel crash (bnc#1012628). - IB/core: Avoid crash on pkey enforcement failed in received MADs (bnc#1012628). - IB/core: Only maintain real QPs in the security lists (bnc#1012628). - NFC: fix device-allocation error return (bnc#1012628). - spi-nor: intel-spi: Fix broken software sequencing codes (bnc#1012628). - i40e: Use smp_rmb rather than read_barrier_depends (bnc#1012628). - igb: Use smp_rmb rather than read_barrier_depends (bnc#1012628). - igbvf: Use smp_rmb rather than read_barrier_depends (bnc#1012628). - ixgbevf: Use smp_rmb rather than read_barrier_depends (bnc#1012628). - i40evf: Use smp_rmb rather than read_barrier_depends (bnc#1012628). - fm10k: Use smp_rmb rather than read_barrier_depends (bnc#1012628). - ixgbe: Fix skb list corruption on Power systems (bnc#1012628). - parisc: Fix validity check of pointer size argument in new CAS implementation (bnc#1012628). - powerpc: Fix boot on BOOK3S_32 with CONFIG_STRICT_KERNEL_RWX (bnc#1012628). - powerpc/mm/radix: Fix crashes on Power9 DD1 with radix MMU and STRICT_RWX (bnc#1012628). - powerpc/perf/imc: Use cpu_to_node() not topology_physical_package_id() (bnc#1012628). - powerpc/signal: Properly handle return value from uprobe_deny_signal() (bnc#1012628). - powerpc/64s: Fix masking of SRR1 bits on instruction fault (bnc#1012628). - powerpc/64s/radix: Fix 128TB-512TB virtual address boundary case allocation (bnc#1012628). - powerpc/64s/hash: Fix 512T hint detection to use >= 128T (bnc#1012628). - powerpc/64s/hash: Fix 128TB-512TB virtual address boundary case allocation (bnc#1012628). - powerpc/64s/hash: Fix fork() with 512TB process address space (bnc#1012628). - powerpc/64s/hash: Allow MAP_FIXED allocations to cross 128TB boundary (bnc#1012628). - media: Don't do DMA on stack for firmware upload in the AS102 driver (bnc#1012628). - media: rc: check for integer overflow (bnc#1012628). - media: rc: nec decoder should not send both repeat and keycode (bnc#1012628). - media: v4l2-ctrl: Fix flags field on Control events (bnc#1012628). - media: venus: fix wrong size on dma_free (bnc#1012628). - media: venus: venc: fix bytesused v4l2_plane field (bnc#1012628). - media: venus: reimplement decoder stop command (bnc#1012628). - ARM64: dts: meson-gxl: Add alternate ARM Trusted Firmware reserved memory zone (bnc#1012628). - iwlwifi: fix wrong struct for a000 device (bnc#1012628). - iwlwifi: add a new a000 device (bnc#1012628). - iwlwifi: pcie: sort IDs for the 9000 series for easier comparisons (bnc#1012628). - iwlwifi: add new cards for a000 series (bnc#1012628). - iwlwifi: add new cards for 8265 series (bnc#1012628). - iwlwifi: add new cards for 8260 series (bnc#1012628). - iwlwifi: fix PCI IDs and configuration mapping for 9000 series (bnc#1012628). - e1000e: Fix error path in link detection (bnc#1012628). - e1000e: Fix return value test (bnc#1012628). - e1000e: Separate signaling for link check/link up (bnc#1012628). - e1000e: Avoid receiver overrun interrupt bursts (bnc#1012628). - e1000e: fix buffer overrun while the I219 is processing DMA transactions (bnc#1012628). - Refresh patches.suse/dm-mpath-accept-failed-paths. - Delete patches.suse/0002-md-bitmap-copy-correct-data-for-bitmap-super.patch. - commit a731a45 - Refresh patches.suse/apparmor-fix-oops-in-audit_signal_cb-hook.patch. Update upstream status. - commit 00f319b - mmc: sdhci: Avoid swiotlb buffer being full (bnc#1068877). - Delete patches.suse/revert-mmc-Delete-bounce-buffer-handling.patch. - commit acb1236 - config: armv6hl: Enable 8250 irq sharing for RPi Zero W (boo#1069828) - commit 01942c4 - scsi: libfc: fix ELS request handling (bsc#1069801). - commit 75312a6 - config: armv6hl: Enable brcmfmac for RPi Zero W (boo#1069830) - commit 56423d9 - config: armv6hl: Enable 8250 serial console for RPi Zero W (boo#1069828) - commit 3a3001a ==== man-pages ==== Version update (4.13 -> 4.14) - update to 4.14: * new or rewritten pages: pthread_spin_init.3, pthread_spin_lock.3, smartpqi.4, veth.4 * removed pages: infnan.3 - see Changes for detailed upstream change log ==== nagios ==== Subpackages: nagios-www - fix a possible symlink attack for files/dirs created by root fixes CVE-2016-8641 (bsc#1011630 and bsc#1018047) - remove the pre-configured administrative account with fixed password from the htpasswd file and provide an empty one instead (fixes boo#961115 - CVE-2016-0726) ==== python-qt4 ==== Subpackages: python-qt4-utils python2-qt4 python3-qt4 - Do not build with Qt4 WebKit: * Vade retro satana ==== qt4-qtscript ==== - Do not build against Qt4 WebKit: * Vade retro satana * Add qtscript-qt-no_webkit.patch * Remove qtscript-separate-webkit.patch, not needed anymore ==== squid ==== - Explicitly BuildRequire libopenssl-1_0_0-devel until OpenSSL 1.1.x support can be ported. ==== virt-manager ==== Subpackages: virt-install virt-manager-common - bsc#1070896 - virt-manager will not run on a python3 only system virtcli-python2-to-python3-conversion.patch virtconv-python2-to-python3-conversion.patch virtinst-python2-to-python3-conversion.patch virtman-python2-to-python3-conversion.patch virtmisc-python2-to-python3-conversion.patch virttests-python2-to-python3-conversion.patch ==== virt-sandbox ==== Subpackages: libvirt-sandbox-1_0-5 typelib-1_0-LibvirtSandbox-1_0 - Conversion to python 3 (fate#323526) python3.patch - Enable LZMA support for recent distributions