Packages changed: MozillaFirefox (60.0 -> 60.0.1) glibc glibc kernel-source (4.16.11 -> 4.16.12) libmetalink llvm6 === Details === ==== MozillaFirefox ==== Version update (60.0 -> 60.0.1) Subpackages: MozillaFirefox-translations-common - fixed "open with" option under KDE (boo#1094747) - workaround crash on startup on aarch64 (boo#1093059) (contributed by guillaume@Arm.com) - Disable webrtc for aarch64 due to bmo#1434589 - Add patch to fix skia build on AArch64: * mozilla-fix-skia-aarch64.patch - update to Firefox 60.0.1 * Avoid overly long cycle collector pauses with some add-ons installed (bmo#1449033) * After unckecking the "Sponsored Stories" option, the New Tab page now immediately stops displaying "Sponsored content" cards (bmo#1458906) * On touchscreen devices, fixed momentum scrolling on non-zoomable pages (bmo#1457743) * Use the right default background when opening tabs or windows in high contrast mode (bmo#1458956) * Restored translations of the Preferences panels when using a language pack (bmo#1461590) - parellelise locales building ==== glibc ==== Subpackages: glibc-32bit glibc-locale-32bit - mempcpy-avx512.patch: Don't write beyond destination in __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bsc#1094154) - realpath-ssize-max-overflow.patch: Fix overflow in path length computation (CVE-2018-11236, bsc#1094161, BZ #22786) - Use %license also for COPYING, COPYING.LIB - Readd nis to netgroup and automount nss config (bsc#1088860) ==== glibc ==== Subpackages: glibc-devel glibc-extra glibc-info glibc-locale nscd - mempcpy-avx512.patch: Don't write beyond destination in __mempcpy_avx512_no_vzeroupper (CVE-2018-11237, bsc#1094154) - realpath-ssize-max-overflow.patch: Fix overflow in path length computation (CVE-2018-11236, bsc#1094161, BZ #22786) - Use %license also for COPYING, COPYING.LIB - Readd nis to netgroup and automount nss config (bsc#1088860) ==== kernel-source ==== Version update (4.16.11 -> 4.16.12) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms - Update config files. - commit 39c7522 - Linux 4.16.12 (bnc#1012628). - rtc: goldfish: Add missing MODULE_LICENSE (bnc#1012628). - rtc: rp5c01: fix possible race condition (bnc#1012628). - rtc: tx4939: avoid unintended sign extension on a 24 bit shift (bnc#1012628). - rtc: m41t80: fix race conditions (bnc#1012628). - rtc: rk808: fix possible race condition (bnc#1012628). - rtc: hctosys: Ensure system time doesn't overflow time_t (bnc#1012628). - rtc: snvs: Fix usage of snvs_rtc_enable (bnc#1012628). - serial: altera: ensure port->regshift is honored consistently (bnc#1012628). - serial: 8250: Don't service RX FIFO if interrupts are disabled (bnc#1012628). - serial: arc_uart: Fix out-of-bounds access through DT alias (bnc#1012628). - serial: fsl_lpuart: Fix out-of-bounds access through DT alias (bnc#1012628). - serial: imx: Fix out-of-bounds access through serial port index (bnc#1012628). - serial: mxs-auart: Fix out-of-bounds access through serial port index (bnc#1012628). - serial: samsung: Fix out-of-bounds access through serial port index (bnc#1012628). - serial: sh-sci: Fix out-of-bounds access through DT alias (bnc#1012628). - serial: xuartps: Fix out-of-bounds access through DT alias (bnc#1012628). - serial: mvebu-uart: fix tx lost characters (bnc#1012628). - media: cx25821: prevent out-of-bounds read on array card (bnc#1012628). - media: vivid: fix incorrect capabilities for radio (bnc#1012628). - media: vb2: Fix videobuf2 to map correct area (bnc#1012628). - media: i2c: adv748x: fix HDMI field heights (bnc#1012628). - media: v4l: vsp1: Fix display stalls when requesting too many inputs (bnc#1012628). - media: em28xx: Add Hauppauge SoloHD/DualHD bulk models (bnc#1012628). - media: lgdt3306a: Fix a double kfree on i2c device remove (bnc#1012628). - media: s3c-camif: fix out-of-bounds array access (bnc#1012628). - media: cx23885: Set subdev host data to clk_freq pointer (bnc#1012628). - media: cx23885: Override 888 ImpactVCBe crystal frequency (bnc#1012628). - media: ov5645: add missing of_node_put() in error path (bnc#1012628). - clk: meson: axg: add the fractional part of the fixed_pll (bnc#1012628). - clk: meson: axg: fix the od shift of the sys_pll (bnc#1012628). - clk: samsung: exynos3250: Fix PLL rates (bnc#1012628). - clk: samsung: exynos5250: Fix PLL rates (bnc#1012628). - clk: samsung: exynos5433: Fix PLL rates (bnc#1012628). - clk: samsung: exynos5260: Fix PLL rates (bnc#1012628). - clk: samsung: exynos7: Fix PLL rates (bnc#1012628). - clk: samsung: s3c2410: Fix PLL rates (bnc#1012628). - clk: rockchip: Prevent calculating mmc phase if clock rate is zero (bnc#1012628). - clk: tegra: Fix pll_u rate configuration (bnc#1012628). - clk: hisilicon: mark wdt_mux_p[] as const (bnc#1012628). - clk: Don't show the incorrect clock phase (bnc#1012628). - clk: rockchip: Fix wrong parent for SDMMC phase clock for rk3228 (bnc#1012628). - ASoC: samsung: i2s: Ensure the RCLK rate is properly determined (bnc#1012628). - ASoC: topology: create TLV data for dapm widgets (bnc#1012628). - ASoC: samsung: odroid: Fix 32000 sample rate handling (bnc#1012628). - ASoC: rockchip: rk3288-hdmi-analog: Select needed codecs (bnc#1012628). - scsi: lpfc: Fix frequency of Release WQE CQEs (bnc#1012628). - scsi: lpfc: Fix IO failure during hba reset testing with nvme io (bnc#1012628). - scsi: lpfc: Fix soft lockup in lpfc worker thread during LIP testing (bnc#1012628). - scsi: lpfc: Fix nonrecovery of NVME controller after cable swap (bnc#1012628). - scsi: lpfc: Fix issue_lip if link is disabled (bnc#1012628). - scsi: mvsas: fix wrong endianness of sgpio api (bnc#1012628). - scsi: core: Make SCSI Status CONDITION MET equivalent to GOOD (bnc#1012628). - scsi: lpfc: Fix NVME Initiator FirstBurst (bnc#1012628). - scsi: devinfo: add HP DISK-SUBSYSTEM device, for HP XP arrays (bnc#1012628). - scsi: aacraid: Insure command thread is not recursively stopped (bnc#1012628). - crypto: inside-secure - fix the invalidation step during cra_exit (bnc#1012628). - crypto: sunxi-ss - Add MODULE_ALIAS to sun4i-ss (bnc#1012628). - crypto: inside-secure - do not overwrite the threshold value (bnc#1012628). - crypto: inside-secure - fix the extra cache computation (bnc#1012628). - crypto: inside-secure - fix the cache_len computation (bnc#1012628). - crypto: inside-secure - do not process request if no command was issued (bnc#1012628). - crypto: ccp - don't disable interrupts while setting up debugfs (bnc#1012628). - crypto: atmel-aes - fix the keys zeroing on errors (bnc#1012628). - crypto: inside-secure - wait for the request to complete if in the backlog (bnc#1012628). - crypto: inside-secure - move the digest to the request context (bnc#1012628). - staging: lustre: lmv: correctly iput lmo_root (bnc#1012628). - staging: ks7010: Use constants from ieee80211_eid instead of literal ints (bnc#1012628). - staging: rtl8192u: return -ENOMEM on failed allocation of priv->oldaddr (bnc#1012628). - staging: fsl-dpaa2/eth: Fix incorrect casts (bnc#1012628). - staging: lustre: fix bug in osc_enter_cache_try (bnc#1012628). - staging: fsl-dpaa2/eth: Fix incorrect kfree (bnc#1012628). - staging: bcm2835-audio: Release resources on module_exit() (bnc#1012628). - x86/kexec: Avoid double free_page() upon do_kexec_load() failure (bnc#1012628). - hfsplus: stop workqueue when fill_super() failed (bnc#1012628). - cfg80211: limit wiphy names to 128 bytes (bnc#1012628). - loop: fix LOOP_GET_STATUS lock imbalance (bnc#1012628). - loop: don't call into filesystem while holding lo_ctl_mutex (bnc#1012628). - xhci: Show what USB release number the xHC supports from protocol capablity (bnc#1012628). - Bluetooth: btusb: Add support for Intel Bluetooth device 22560 [8087:0026] (bnc#1012628). - Bluetooth: btusb: Add device ID for RTL8822BE (bnc#1012628). - media: em28xx: USB bulk packet size fix (bnc#1012628). - media: lgdt3306a: Fix module count mismatch on usb unplug (bnc#1012628). - usb: gadget: composite: fix incorrect handling of OS desc requests (bnc#1012628). - usb: gadget: udc: change comparison to bitshift when dealing with a mask (bnc#1012628). - usbip: Correct maximum value of CONFIG_USBIP_VHCI_HC_PORTS (bnc#1012628). - usb: gadget: ffs: Execute copy_to_user() with USER_DS set (bnc#1012628). - usb: gadget: ffs: Let setup() return USB_GADGET_DELAYED_STATUS (bnc#1012628). - usb: dwc2: host: Fix transaction errors in host mode (bnc#1012628). - usb: dwc2: hcd: Fix host channel halt flow (bnc#1012628). - usb: dwc2: Fix interval type issue (bnc#1012628). - xhci: zero usb device slot_id member when disabling and freeing a xhci slot (bnc#1012628). - usb: dwc3: Makefile: fix link error on randconfig (bnc#1012628). - usb: dwc3: Update DWC_usb31 GTXFIFOSIZ reg fields (bnc#1012628). - usb: dwc3: Add SoftReset PHY synchonization delay (bnc#1012628). - ALSA: usb-audio: Add native DSD support for Luxman DA-06 (bnc#1012628). - Bluetooth: btusb: Add USB ID 7392:a611 for Edimax EW-7611ULB (bnc#1012628). - scsi: zfcp: fix infinite iteration on ERP ready list (bnc#1012628). - scsi: sg: allocate with __GFP_ZERO in sg_build_indirect() (bnc#1012628). - s390: use expoline thunks in the BPF JIT (bnc#1012628). - s390: extend expoline to BC instructions (bnc#1012628). - s390: move spectre sysfs attribute code (bnc#1012628). - s390/kernel: use expoline for indirect branches (bnc#1012628). - s390/ftrace: use expoline for indirect branches (bnc#1012628). - s390/lib: use expoline for indirect branches (bnc#1012628). - s390/crc32-vx: use expoline for indirect branches (bnc#1012628). - s390: move expoline assembler macros to a header (bnc#1012628). - s390: correct module section names for expoline code revert (bnc#1012628). - s390: correct nospec auto detection init order (bnc#1012628). - s390: add assembler macros for CPU alternatives (bnc#1012628). - s390: add sysfs attributes for spectre (bnc#1012628). - s390: report spectre mitigation via syslog (bnc#1012628). - s390: add automatic detection of the spectre defense (bnc#1012628). - s390: move nobp parameter functions to nospec-branch.c (bnc#1012628). - powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit (bnc#1012628). - powerpc: Move default security feature flags (bnc#1012628). - powerpc/pseries: Fix clearing of security feature flags (bnc#1012628). - powerpc/64s: Wire up cpu_show_spectre_v2() (bnc#1012628). - powerpc/64s: Wire up cpu_show_spectre_v1() (bnc#1012628). - powerpc/pseries: Use the security flags in pseries_setup_rfi_flush() (bnc#1012628). - powerpc/powernv: Use the security flags in pnv_setup_rfi_flush() (bnc#1012628). - powerpc/64s: Enhance the information in cpu_show_meltdown() (bnc#1012628). - powerpc/64s: Move cpu_show_meltdown() (bnc#1012628). - powerpc/powernv: Set or clear security feature flags (bnc#1012628). - powerpc/pseries: Set or clear security feature flags (bnc#1012628). - powerpc/pseries: Add new H_GET_CPU_CHARACTERISTICS flags (bnc#1012628). - powerpc: Add security feature flags for Spectre/Meltdown (bnc#1012628). - powerpc/rfi-flush: Always enable fallback flush on pseries (bnc#1012628). - ext2: fix a block leak (bnc#1012628). - sparc: vio: use put_device() instead of kfree() (bnc#1012628). - qed: Fix LL2 race during connection terminate (bnc#1012628). - qed: Fix possibility of list corruption during rmmod flows (bnc#1012628). - qed: LL2 flush isles when connection is closed (bnc#1012628). - net: ip6_gre: fix tunnel metadata device sharing (bnc#1012628). - net: ip6_gre: Fix ip6erspan hlen calculation (bnc#1012628). - net: ip6_gre: Split up ip6gre_changelink() (bnc#1012628). - net: ip6_gre: Split up ip6gre_newlink() (bnc#1012628). - net: ip6_gre: Split up ip6gre_tnl_change() (bnc#1012628). - net: ip6_gre: Split up ip6gre_tnl_link_config() (bnc#1012628). - net: ip6_gre: Fix headroom request in ip6erspan_tunnel_xmit() (bnc#1012628). - net: ip6_gre: Request headroom in __gre6_xmit() (bnc#1012628). - vmxnet3: use DMA memory barriers where required (bnc#1012628). - vmxnet3: set the DMA mask before the first DMA map operation (bnc#1012628). - cxgb4: fix offset in collecting TX rate limit info (bnc#1012628). - 3c59x: convert to generic DMA API (bnc#1012628). - net: dsa: bcm_sf2: Fix IPv6 rule half deletion (bnc#1012628). - net: dsa: bcm_sf2: Fix IPv6 rules and chain ID (bnc#1012628). - net: dsa: Do not register devlink for unused ports (bnc#1012628). - net: dsa: bcm_sf2: Fix RX_CLS_LOC_ANY overwrite for last rule (bnc#1012628). - cxgb4: Correct ntuple mask validation for hash filters (bnc#1012628). - tuntap: fix use after free during release (bnc#1012628). - tun: fix use after free for ptr_ring (bnc#1012628). - tcp: purge write queue in tcp_connect_init() (bnc#1012628). - sock_diag: fix use-after-free read in __sk_free (bnc#1012628). - packet: in packet_snd start writing at link layer allocation (bnc#1012628). - net: test tailroom before appending to linear skb (bnc#1012628). - net/smc: check for missing nlattrs in SMC_PNETID messages (bnc#1012628). - net: sched: red: avoid hashing NULL child (bnc#1012628). - net/sched: fix refcnt leak in the error path of tcf_vlan_init() (bnc#1012628). - net/mlx4_core: Fix error handling in mlx4_init_port_info (bnc#1012628). - net: Fix a bug in removing queues from XPS map (bnc#1012628). - net/mlx5: Fix build break when CONFIG_SMP=n (bnc#1012628). - commit 9e125b1 - Bluetooth: Apply QCA Rome patches for some ATH3012 models (bsc#1082504). - commit 3351aa8 - mkspec: only build docs for default variant kernel. - commit 045f5ac ==== libmetalink ==== - Use %license instead of %doc [bsc#1082318] ==== llvm6 ==== Subpackages: libLLVM6 libclang6 - Add patch llvm6-fix-InstCombine.patch to fix InstCombine init * Will be fixed in 6.0.1 release