Packages changed:
  alsa
  alsa-plugins
  bash
  busybox
  ca-certificates (2+git20200129.d1a437d -> 2+git20201002.34daf7f)
  checkpolicy (3.0 -> 3.1)
  chrony (3.5 -> 3.5.1)
  cni (0.7.1 -> 0.8.0)
  expat (2.2.9 -> 2.2.10)
  fuse3 (3.9.3 -> 3.10.0)
  gettext-runtime (0.20.2 -> 0.21)
  glib2 (2.64.5 -> 2.64.6)
  glibc (2.31 -> 2.32)
  gnome-bluetooth (3.34.2 -> 3.34.3)
  gnome-desktop (3.36.6 -> 3.36.7)
  gnome-shell (3.36.6 -> 3.36.7)
  gnome-shell-extensions (3.36.3 -> 3.36.7)
  hwdata (0.339 -> 0.340)
  ibus (1.5.22 -> 1.5.23)
  installation-images-MicroOS (16.19 -> 16.23)
  iproute2
  iputils
  issue-generator
  kdeconnect-kde
  kernel-default-base (5.8.12 -> 5.8.14)
  kernel-firmware (20200916 -> 20201005)
  kernel-source (5.8.12 -> 5.8.14)
  libinput (1.16.1 -> 1.16.2)
  libproxy
  libselinux (3.0 -> 3.1)
  libselinux-bindings (3.0 -> 3.1)
  libsemanage (3.0 -> 3.1)
  libsepol (3.0 -> 3.1)
  libsolv
  libva (2.8.0 -> 2.9.0)
  libwacom (1.3 -> 1.5)
  libzypp (17.25.1 -> 17.25.2)
  mcstrans (3.0 -> 3.1)
  mozilla-nspr (4.28 -> 4.29)
  mozilla-nss (3.55 -> 3.57)
  mutter (3.36.6+2 -> 3.36.7)
  ncurses (6.2.20200711 -> 6.2.20200912)
  numactl (2.0.13 -> 2.0.14)
  open-lldp (1.0.1+102.4c7fcc3 -> 1.0.1+69.e8f522565f5a)
  p11-kit
  patterns-base
  patterns-microos
  perl-File-Listing (6.04 -> 6.11)
  policycoreutils (3.0 -> 3.1)
  popt
  procps
  python-semanage (3.0 -> 3.1)
  restorecond (3.0 -> 3.1)
  sddm
  sysuser-tools
  sysvinit (2.96 -> 2.97)
  tcpd
  vim
  vulkan-loader (1.2.153 -> 1.2.154)
  webkit2gtk3 (2.28.4 -> 2.30.1)
  wpa_supplicant
  xdm
  xinit
  xkeyboard-config (2.30 -> 2.31)
  xmodmap
  xorg-x11-server
  yelp (3.36.0 -> 3.36.1)

=== Details ===

==== alsa ====

- Placeholder for SLE15-SP3 sync (bsc#1171246):
  the actual fix is found in alsa-ucm-conf updates
- Enable topology support for riscv64

==== alsa-plugins ====

- Placeholder for SLE15-SP3 sync: jsc#SLE-11987
  no functional changes at all

==== bash ====

- dot.profile: moved example for user specific LANG setting
  from .profile to .i18n (x11-tools package) skeleton file (boo#1158724)

==== busybox ====

- Disable RPM builtin, did become pretty useless
- Disable popmaildir and mime utilities

==== ca-certificates ====
Version update (2+git20200129.d1a437d -> 2+git20201002.34daf7f)

- Update to version 2+git20201002.34daf7f:
  * Use relative symlink for /etc/ssl/certs (boo#1175340)

==== checkpolicy ====
Version update (3.0 -> 3.1)

- Update to version 3.1
  * checkpolicy treats invalid characters as an error - might break rare use
    cases (intentionally)
  * Drop extern_te_assert_t.patch, is upstream

==== chrony ====
Version update (3.5 -> 3.5.1)
Subpackages: chrony-pool-openSUSE

- Adjust and rename the sysconfig file, so that it matches the
  expectations of chronyd.service (bsc#1173277).
- Update to 3.5.1:
  * Create new file when writing pidfile (CVE-2020-14367, bsc#1174911)

==== cni ====
Version update (0.7.1 -> 0.8.0)

- Update to version 0.8.0:
  * Specification and Conventions changes
    + docs: add ips and mac to well-known capabilities
    + add interface name validation
    + Add GUID to well known Capabilities
    + Add DeviceID attribute to RuntimeConfig
    + Typo fixes for infiniband GUID
    + Fix linting issues in docs, add headers to json example, update errors into table
  * Documentation changes
    + Update cnitool docs
    + Remove extra ',' chars which makes conflist examples invalid.
  * libcni changes
    + Remove Result.String method
    + libcni: add config caching [v2]
    + clean up : fix staticcheck warnings
    + libcni: add InitCNIConfigWithCacheDir() and deprecate RuntimeConfig.CacheDir
    + skel: clean up errors in skel and add some well-known error codes
    + libcni: find plugin in exec
    + validate containerID and networkName
    + skel: remove needless functions and types
    + libcni: also cache IfName
    + libcni: fix cache file 'result' key name
    + Bump Go version to 1.13
    + When CNI version isn't supplied in config, use default.
    + intercept netplugin std error
    + invoke: capture and return stderr if plugin exits unexpectedly
    + Retry exec commands on text file busy

==== expat ====
Version update (2.2.9 -> 2.2.10)
Subpackages: libexpat1

- Update to 2.2.10:
  * Bug fixes:
  - Fix undefined behavior during parsing caused by pointer
    arithmetic with NULL pointers
  - Fix reading uninitialized variable during parsing
  - xmlwf: Add missing check for malloc NULL return
  * Other changes:
  - xmlwf: Document exit codes in xmlwf manpage and exit with code 3
    (rather than code 1) for output errors when used with "-d DIRECTORY"
  - Autotools: Use -Werror while configure tests the compiler for
    supported compile flags to avoid false positives
  - Autotools: Improve handling of user (C|CPP|CXX|LD)FLAGS, e.g.
    ensure that they have the last word over flags added while
    running ./configure
  - CMake: Create libexpatw.{dll,so} and expatw.pc (with emphasis
    on suffix "w") with -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Detect and deny unsupported build combinations
    involving -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Install pre-compiled shipped xmlwf.1 manpage in case
    of -DEXPAT_BUILD_DOCS=OFF
  - CMake: Fix use of Expat by means of add_subdirectory
  - CMake: Keep expat target name constant at "expat" (i.e. refrain
    from using the target name to control build artifact filenames)
  - CMake: Expose man page compilation as target "xmlwf-manpage"
  - CMake: Introduce option EXPAT_BUILD_PKGCONFIG to control
    generation of pkg-config file "expat.pc"
  - CMake: Add minimalistic support for building binary packages
    with CMake target "package"; based on CPack
  - CMake: Add option -DEXPAT_OSSFUZZ_BUILD=(ON|OFF) with default
    OFF to build fuzzer code against OSS-Fuzz and related
    environment variable LIB_FUZZING_ENGINE
  - Fix testsuite for -DEXPAT_DTD=OFF and -DEXPAT_NS=OFF
  - Address compiler warnings
  - Address pngcheck warnings with doc/*.png images: Version info
    bumped from 7:11:6 to 7:12:6

==== fuse3 ====
Version update (3.9.3 -> 3.10.0)
Subpackages: libfuse3-3

- Update to release 3.10.0
  * Add FUSE_CAP_CACHE_SYMLINKS: allow caching symlinks in kernel
    page cache.

==== gettext-runtime ====
Version update (0.20.2 -> 0.21)
Subpackages: libtextstyle0

- Add multiple new features (bsc#1165138)
- Add patches:
  * 0001-msgcat-Add-feature-to-use-the-newest-po-file.patch
  * 0002-msgcat-Merge-headers-when-use-first.patch
- Reintroduce utoreconf call
- Update to 0.21:
  * Programming languages support:
  - Shell:
    o xgettext now recognizes and ignores 'env' invocations and environment
    variable assignments in front of commands.
  - Java:
    o xgettext now recognizes format strings in the Formatter syntax.  They
    are marked as 'java-printf-format' in POT and PO files.
    o xgettext now recognizes text blocks as string literals.
  - JavaScript:
    xgettext parses JSX expressions more reliably.
  - Ruby:
    o xgettext now supports Ruby.
    o 'msgfmt -c' now verifies the syntax of translations of Ruby format
    strings.
  * Improvements for translators:
  - When msgfmt writes a MO file, it now does so in such a way that processes
    that are currently using an older copy of the MO file will not crash.
  * Libtextstyle:
  - Added support for emitting hyperlinks.
  - New API for doing formatted output.
  - The example programs support the NO_COLOR environment variable.

==== glib2 ====
Version update (2.64.5 -> 2.64.6)
Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0

- Update to version 2.64.6:
  + Bugs fixed: glgo#GNOME/GLib#2194, glgo#GNOME/GLib#2209,
    glgo#GNOME/GLib!1633, glgo#GNOME/GLib!1634,
    glgo#GNOME/GLib!1656, glgo#GNOME/GLib!1659,
    glgo#GNOME/GLib!1666, glgo#GNOME/GLib!1672.
  + Updated translations.

==== glibc ====
Version update (2.31 -> 2.32)
Subpackages: glibc-locale glibc-locale-base

- Keep nsswitch.conf in /etc for SLES15
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)
- ifunc-fma4.patch: x86-64: Fix FMA4 detection in ifunc (BZ #26534)
- Update to glibc 2.32
  * Unicode 13.0.0 Support
  * New locale added: ckb_IQ
  * The GNU C Library now loads audit modules listed in the DT_AUDIT and
    DT_DEPAUDIT dynamic section entries of the main executable
  * powerpc64le supports IEEE128 long double libm/libc redirects when
    using the -mabi=ieeelongdouble to compile C code on supported GCC
    toolchains
  * To help detect buffer overflows and other out-of-bounds accesses
    several APIs have been annotated with GCC 'access' attribute
  * On Linux, functions the pthread_attr_setsigmask_np and
    pthread_attr_getsigmask_np have been added
  * The GNU C Library now provides the header file <sys/single_threaded.h>
    which declares the variable __libc_single_threaded
  * The functions sigabbrev_np and sigdescr_np have been added
  * The functions strerrorname_np and strerrordesc_np have been added
  * AArch64 now supports standard branch protection security hardening
    in glibc when it is built with a GCC that is configured with
  - -enable-standard-branch-protection (or if -mbranch-protection=standard
    flag is passed when building both GCC target libraries and glibc,
    in either case a custom GCC is needed)
  * The deprecated <sys/sysctl.h> header and the sysctl function have been
    removed
  * The sstk function is no longer available to newly linked binaries
  * The legacy signal handling functions siginterrupt, sigpause, sighold,
    sigrelse, sigignore and sigset, and the sigmask macro have been
    deprecated
  * ldconfig now defaults to the new format for ld.so.cache
  * The deprecated arrays sys_siglist, _sys_siglist, and sys_sigabbrev
    are no longer available to newly linked binaries, and their declarations
    have been removed from <string.h>
  * The deprecated symbols sys_errlist, _sys_errlist, sys_nerr, and _sys_nerr
    are no longer available to newly linked binaries, and their declarations
    have been removed from from <stdio.h>
  * Both strerror and strerror_l now share the same internal buffer in the
    calling thread, meaning that the returned string pointer may be invalided
    or contents might be overwritten on subsequent calls in the same thread or
    if the thread is terminated
  * Using weak references to libpthread functions such as pthread_create
    or pthread_key_create to detect the singled-threaded nature of a
    program is an obsolescent feature
  * The "files" NSS module no longer supports the "key" database (used for
    secure RPC)
  * The __morecore and __after_morecore_hook malloc hooks and the default
    implementation __default_morecore have been deprecated
  * The hesiod NSS module has been deprecated and will be removed in a
    future version of glibc
  * CVE-2016-10228: An infinite loop has been fixed in the iconv program when
    invoked with the -c option and when processing invalid multi-byte input
    sequences
  * CVE-2020-10029: Trigonometric functions on x86 targets suffered from stack
    corruption when they were passed a pseudo-zero argument
  * CVE-2020-1752: A use-after-free vulnerability in the glob function when
    expanding ~user has been fixed.
  * CVE-2020-6096: A signed comparison vulnerability in the ARMv7 memcpy and
    memmove functions has been fixed
- riscv-syscall-clobber.patch, ldbl-96-rem-pio2l.patch,
  long-double-alias.patch: Removed

==== gnome-bluetooth ====
Version update (3.34.2 -> 3.34.3)
Subpackages: libgnome-bluetooth13 typelib-1_0-GnomeBluetooth-1_0

- Update to version 3.34.3:
  + Fix problem with intermittent connection work-around when using
    the switch in the device properties.
  + Updated translations.

==== gnome-desktop ====
Version update (3.36.6 -> 3.36.7)
Subpackages: gnome-version libgnome-desktop-3-19 libgnome-desktop-3_0-common typelib-1_0-GnomeDesktop-3_0

- Update to version 3.36.7:
  + No changes, version bump only.

==== gnome-shell ====
Version update (3.36.6 -> 3.36.7)
Subpackages: gnome-shell-calendar

- Update to version 3.36.7:
  + Fix potential stack overflow in libcroco (CVE-2020-12825).
  + Fix system action search regressions.
  + Fix week number alignment when using font-scaling.
  + Misc. bug fixes and cleanups.
  + Updated translations.

==== gnome-shell-extensions ====
Version update (3.36.3 -> 3.36.7)
Subpackages: gnome-shell-classic gnome-shell-classic-session

- Update to version 3.36.7:
  + Update sass submodule.

==== hwdata ====
Version update (0.339 -> 0.340)

- Update to version 0.340:
  + Updated pci, usb and vendor ids.

==== ibus ====
Version update (1.5.22 -> 1.5.23)
Subpackages: libibus-1_0-5 typelib-1_0-IBus-1_0

- Update version to 1.5.23
  * Generate simple.xml with denylist 6042974 508527d 37db75b 6879879 59b902a
    568d58d 6ed34f3 5959d6f 5d67a28 394d9a8 ed7bc8d e938846 3aa670e 0d90da4
    e4dd6d1
  * Accept xdigits only for Unicode typing a440942
  * Update emoji-parser with CLDR emoji annotation release-31-0-1 9a9f828
  * Update ibusunicodegen.h with unicode-ucd 13.0.0 e10fc89
  * Delete deprecated ENABLE_APPINDICATOR_ENGINE_ICON check aa3a9f0
  * Fix SEGV 02105c4 f591381
  * Fix some errors in ibus-desktop-testing-runner 7b0d091 8da0167
  * Refactor source files 0b9d936 0ad5e9a
  * Fix string formats in translatable strings 7caead1 f8c468a ce865f6
  * Use WAYLAND_DISPLAY on Wayland sessions to make up IBus socket name (Carlos
    Garnacho) 8ce2520
  * Skip parsing of compose sequence with invalid keysyms (Neil Shepperd)
    0da3cec
  * Tell Pango about the engine language in the candidate panel (Aaron Muir
    Hamilton) 3f098dc 79a09f1
  * Fix for several error spotted by static analyzer (ntfs.hard) 00adea6
  * Remove glib_check_version() in gtk immodule (Changwoo Ryu) 5765bfd
  * Build the Emoji dictionaries in parallel (Changwoo Ryu) 59d0de4
  * Update translation
- Drop 0001-Replace-the-Qt-check-for-appindicator-engine-icon-wi.patch,
  ibus-use-wayland-display-for-socket-name.patch,
  ibus-socket-name-compatibility.patch. Merged by upstream
- Update ibus.spec: Drop the is_opensuse macro to eliminate the
  difference between SLE-15 and openSUSE-Leap (jsc#SLE-11653).
- Move xim.d files to /usr/etc when available, which is
  currently Tumbleweed only (boo#1176431)

==== installation-images-MicroOS ====
Version update (16.19 -> 16.23)

- merge gh#openSUSE/installation-images#429
- remove dependency on insserv-compat (bsc#1176501)
- remove ia64-specific dependency on ia32el
- remove obsolete kbd_simple script
- convert remaining insserv uses to systemctl calls
- 16.23
- merge gh#openSUSE/installation-images#428
- include all of xorg-x11-server
- 16.22
- merge gh#openSUSE/installation-images#427
- ensure /proc is mounted in chroot environments (bsc#1176972)
- 16.21
- merge gh#openSUSE/installation-images#426
- Extra yast module for common criteria (boo#1176982)
- 16.20

==== iproute2 ====

- Add 0001-ip-add-error-reporting-when-RTM_GETNSID-failed.patch

==== iputils ====

- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).

==== issue-generator ====

- Handle the .path unit in scriptlets as well

==== kdeconnect-kde ====

- Add upstream patches to fix security issues in kdeconnect
  (CVE-2020-26164, boo#1176268):
  * 0001-Do-not-leak-the-local-user-in-the-device-name.patch
  * 0002-Fix-use-after-free-in-LanLinkProvider-connectError.patch
  * 0003-Limit-identity-packets-to-8KiB.patch
  * 0004-Do-not-let-lanlink-connections-stay-open-for-long-wi.patch
  * 0005-Don-t-brute-force-reading-the-socket.patch
  * 0006-Limit-number-of-connected-sockets-from-unpaired-devi.patch
  * 0007-Do-not-remember-more-than-a-few-identity-packets-at-.patch
  * 0008-Limit-the-ports-we-try-to-connect-to-to-the-port-ran.patch
  * 0009-Do-not-replace-connections-for-a-given-deviceId-if-t.patch

==== kernel-default-base ====
Version update (5.8.12 -> 5.8.14)

- Add cifs

==== kernel-firmware ====
Version update (20200916 -> 20201005)
Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network

- Placeholder for SLE15-SP3 package sync:
  bsc#1143331, bsc#1160204, bsc#1154395 bsc#1155307, jsc#SLE-8379
- Update to version 20201005 (git commit 58d41d0facca):
  * ice: Add comms package file for Intel E800 series driver
  * copy-firmware: Always write Link: entries
  * amdgpu: update vega20 firmware for 20.40
  * amdgpu: update vega12 firmware for 20.40
  * amdgpu: update vega10 firmware for 20.40
  * amdgpu: update renoir firmware for 20.40
  * amdgpu: update raven2 firmware for 20.40
  * amdgpu: update raven firmware for 20.40
  * amdgpu: update picasso firmware for 20.40
  * amdgpu: update navi14 firmware for 20.40
  * amdgpu: update navi12 firmware for 20.40
  * amdgpu: update navi10 firmware for 20.40
  * linux-firmware: Add new VPDMA firmware 1b8.bin
  * QCA : Updated firmware files for WCN3991
- Drop the AMDGPU Picasso workaround (bsc#1174278)
- Update to version 20200928 (git commit b78a66c909c7):
  * linux-firmware: Update firmware for Cadence MHDP8546 DP bridge
  * linux-firmware: Update firmware patch for Intel Bluetooth 7265 (D1)
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.1312
  * linux-firmware: nvidia: move firmware symlinks to WHENCE
  * linux-firmware: move i915 firmware symlinks to WHENCE
  * linux-firmware: move iwlwifi-7265D-10.ucode symlink to WHENCE
  * linux-firmware: Update Marvell Switchdev firmware with ABI changes
- Force bzip2 compression for compatibility (boo#1176981):
  for keeping the compatibility with older distros (like Leap 15.1)
  that can't deal with lzma-compressed rpm files

==== kernel-source ====
Version update (5.8.12 -> 5.8.14)

- Update config files.
  Only run_oldconfig.sh to sync up.
- commit cea47bb
- Linux 5.8.14 (bsc#1012628).
- io_uring: always delete double poll wait entry on match
  (bsc#1012628).
- btrfs: fix filesystem corruption after a device replace
  (bsc#1012628).
- mmc: sdhci: Workaround broken command queuing on Intel GLK
  based IRBIS models (bsc#1012628).
- USB: gadget: f_ncm: Fix NDP16 datagram validation (bsc#1012628).
- Revert "usbip: Implement a match function to fix usbip"
  (bsc#1012628).
- usbcore/driver: Fix specific driver selection (bsc#1012628).
- usbcore/driver: Fix incorrect downcast (bsc#1012628).
- usbcore/driver: Accommodate usbip (bsc#1012628).
- gpio: siox: explicitly support only threaded irqs (bsc#1012628).
- gpio: mockup: fix resource leak in error path (bsc#1012628).
- gpio: tc35894: fix up tc35894 interrupt configuration
  (bsc#1012628).
- gpio: amd-fch: correct logic of GPIO_LINE_DIRECTION
  (bsc#1012628).
- clk: samsung: Keep top BPLL mux on Exynos542x enabled
  (bsc#1012628).
- clk: socfpga: stratix10: fix the divider for the
  emac_ptp_free_clk (bsc#1012628).
- scsi: iscsi: iscsi_tcp: Avoid holding spinlock while calling
  getpeername() (bsc#1012628).
- i2c: i801: Exclude device from suspend direct complete
  optimization (bsc#1012628).
- Input: i8042 - add nopnp quirk for Acer Aspire 5 A515
  (bsc#1012628).
- iio: adc: qcom-spmi-adc5: fix driver name (bsc#1012628).
- ftrace: Move RCU is watching check after recursion check
  (bsc#1012628).
- tracing: Fix trace_find_next_entry() accounting of temp buffer
  size (bsc#1012628).
- memstick: Skip allocating card when removing host (bsc#1012628).
- xen/events: don't use chip_data for legacy IRQs (bsc#1012628).
- clocksource/drivers/timer-gx6605s: Fixup counter reload
  (bsc#1012628).
- vboxsf: Fix the check for the old binary mount-arguments struct
  (bsc#1012628).
- mt76: mt7915: use ieee80211_free_txskb to free tx skbs
  (bsc#1012628).
- libbpf: Remove arch-specific include path in Makefile
  (bsc#1012628).
- drivers/net/wan/hdlc_fr: Add needed_headroom for PVC devices
  (bsc#1012628).
- Revert "wlcore: Adding suppoprt for IGTK key in wlcore driver"
  (bsc#1012628).
- drm/sun4i: mixer: Extend regmap max_register (bsc#1012628).
- hv_netvsc: Cache the current data path to avoid duplicate call
  and message (bsc#1012628).
- net: dec: de2104x: Increase receive ring size for Tulip
  (bsc#1012628).
- rndis_host: increase sleep time in the query-response loop
  (bsc#1012628).
- nvme-pci: disable the write zeros command for Intel 600P/P3100
  (bsc#1012628).
- nvme-core: get/put ctrl and transport module in
  nvme_dev_open/release() (bsc#1012628).
- fuse: fix the ->direct_IO() treatment of iov_iter (bsc#1012628).
- drivers/net/wan/lapbether: Make skb->protocol consistent with
  the header (bsc#1012628).
- drivers/net/wan/hdlc: Set skb->protocol before transmitting
  (bsc#1012628).
- mac80211: Fix radiotap header channel flag for 6GHz band
  (bsc#1012628).
- mac80211: do not allow bigger VHT MPDUs than the hardware
  supports (bsc#1012628).
- tracing: Make the space reserved for the pid wider
  (bsc#1012628).
- tools/io_uring: fix compile breakage (bsc#1012628).
- io_uring: mark statx/files_update/epoll_ctl as non-SQPOLL
  (bsc#1012628).
- cpuidle: psci: Fix suspicious RCU usage (bsc#1012628).
- spi: fsl-espi: Only process interrupts for expected events
  (bsc#1012628).
- net: dsa: felix: fix some key offsets for IP4_TCP_UDP VCAP
  IS2 entries (bsc#1012628).
- nvme-pci: fix NULL req in completion handler (bsc#1012628).
- nvme-fc: fail new connections to a deleted host or remote port
  (bsc#1012628).
- scripts/kallsyms: skip ppc compiler stub *.long_branch.* /
  * .plt_branch.* (bsc#1012628).
- gpio: sprd: Clear interrupt when setting the type as edge
  (bsc#1012628).
- phy: ti: am654: Fix a leak in serdes_am654_probe()
  (bsc#1012628).
- pinctrl: mvebu: Fix i2c sda definition for 98DX3236
  (bsc#1012628).
- nfs: Fix security label length not being reset (bsc#1012628).
- NFSv4.2: fix client's attribute cache management for
  copy_file_range (bsc#1012628).
- pNFS/flexfiles: Ensure we initialise the mirror bsizes correctly
  on read (bsc#1012628).
- clk: tegra: Always program PLL_E when enabled (bsc#1012628).
- clk: tegra: Fix missing prototype for
  tegra210_clk_register_emc() (bsc#1012628).
- dmaengine: dmatest: Prevent to run on misconfigured channel
  (bsc#1012628).
- clk: samsung: exynos4: mark 'chipid' clock as CLK_IGNORE_UNUSED
  (bsc#1012628).
- scsi: target: Fix lun lookup for TARGET_SCF_LOOKUP_LUN_FROM_TAG
  case (bsc#1012628).
- iommu/exynos: add missing put_device() call in
  exynos_iommu_of_xlate() (bsc#1012628).
- gpio: pca953x: Fix uninitialized pending variable (bsc#1012628).
- gpio/aspeed-sgpio: enable access to all 80 input & output sgpios
  (bsc#1012628).
- gpio/aspeed-sgpio: don't enable all interrupts by default
  (bsc#1012628).
- gpio: aspeed: fix ast2600 bank properties (bsc#1012628).
- i2c: cpm: Fix i2c_ram structure (bsc#1012628).
- i2c: npcm7xx: Clear LAST bit after a failed transaction
  (bsc#1012628).
- Input: trackpoint - enable Synaptics trackpoints (bsc#1012628).
- blk-mq: call commit_rqs while list empty but error happen
  (bsc#1012628).
- scripts/dtc: only append to HOST_EXTRACFLAGS instead of
  overwriting (bsc#1012628).
- autofs: use __kernel_write() for the autofs pipe writing
  (bsc#1012628).
- pinctrl: qcom: sm8250: correct sdc2_clk (bsc#1012628).
- pinctrl: mediatek: check mtk_is_virt_gpio input parameter
  (bsc#1012628).
- gpio: pca953x: Correctly initialize registers 6 and 7 for
  PCA957x (bsc#1012628).
- iommu/amd: Fix the overwritten field in IVMD header
  (bsc#1012628).
- pipe: remove pipe_wait() and fix wakeup race with splice
  (bsc#1012628).
- random32: Restore __latent_entropy attribute on net_rand_state
  (bsc#1012628).
- gpiolib: Fix line event handling in syscall compatible mode
  (bsc#1012628).
- drm/i915/gvt: Fix port number for BDW on EDID region setup
  (bsc#1012628).
- scsi: sd: sd_zbc: Fix handling of host-aware ZBC disks
  (bsc#1012628).
- scsi: sd: sd_zbc: Fix ZBC disk initialization (bsc#1012628).
- epoll: do not insert into poll queues until all sanity checks
  are done (bsc#1012628).
- epoll: replace ->visited/visited_list with generation count
  (bsc#1012628).
- epoll: EPOLL_CTL_ADD: close the race in decision to take fast
  path (bsc#1012628).
- ep_create_wakeup_source(): dentry name can change under
  you.. (bsc#1012628).
- commit e882d6e
- platform/x86: intel-vbtn: Switch to an allow-list for
  SW_TABLET_MODE reporting (bsc#1175599).
- commit 5672f81
- drm/amdgpu: restore proper ref count in
  amdgpu_display_crtc_set_config (git-fixes).
- commit 08db7a3
- Linux 5.8.13 (bsc#1012628).
- device_cgroup: Fix RCU list debugging warning (bsc#1012628).
- ASoC: pcm3168a: ignore 0 Hz settings (bsc#1012628).
- ASoC: wm8994: Skip setting of the WM8994_MICBIAS register for
  WM1811 (bsc#1012628).
- ASoC: wm8994: Ensure the device is resumed in wm89xx_mic_detect
  functions (bsc#1012628).
- ASoC: Intel: bytcr_rt5640: Add quirk for MPMAN Converter9 2-in-1
  (bsc#1012628).
- clk: versatile: Add of_node_put() before return statement
  (bsc#1012628).
- RISC-V: Take text_mutex in ftrace_init_nop() (bsc#1012628).
- i2c: aspeed: Mask IRQ status to relevant bits (bsc#1012628).
- s390/init: add missing __init annotations (bsc#1012628).
- lockdep: fix order in trace_hardirqs_off_caller() (bsc#1012628).
- EDAC/ghes: Check whether the driver is on the safe list
  correctly (bsc#1012628).
- drm/amdkfd: fix a memory leak issue (bsc#1012628).
- drm/amd/display: Don't use DRM_ERROR() for DTM add topology
  (bsc#1012628).
- drm/amd/display: update nv1x stutter latencies (bsc#1012628).
- drm/amdgpu/dc: Require primary plane to be enabled whenever
  the CRTC is (bsc#1012628).
- drm/amd/display: Don't log hdcp module warnings in dmesg
  (bsc#1012628).
- objtool: Fix noreturn detection for ignored functions
  (bsc#1012628).
- i2c: mediatek: Send i2c master code at more than 1MHz
  (bsc#1012628).
- riscv: Fix Kendryte K210 device tree (bsc#1012628).
- ieee802154: fix one possible memleak in ca8210_dev_com_init
  (bsc#1012628).
- ieee802154/adf7242: check status of adf7242_read_reg
  (bsc#1012628).
- clocksource/drivers/h8300_timer8: Fix wrong return value in
  h8300_8timer_init() (bsc#1012628).
- mwifiex: Increase AES key storage size to 256 bits
  (bsc#1012628).
- batman-adv: bla: fix type misuse for backbone_gw hash indexing
  (bsc#1012628).
- libbpf: Fix build failure from uninitialized variable warning
  (bsc#1012628).
- atm: eni: fix the missed pci_disable_device() for eni_init_one()
  (bsc#1012628).
- batman-adv: mcast/TT: fix wrongly dropped or rerouted packets
  (bsc#1012628).
- netfilter: ctnetlink: add a range check for l3/l4 protonum
  (bsc#1012628).
- netfilter: ctnetlink: fix mark based dump filtering regression
  (bsc#1012628).
- netfilter: conntrack: nf_conncount_init is failing with IPv6
  disabled (bsc#1012628).
- netfilter: nft_meta: use socket user_ns to retrieve skuid and
  skgid (bsc#1012628).
- mac802154: tx: fix use-after-free (bsc#1012628).
- bpf: Fix clobbering of r2 in bpf_gen_ld_abs (bsc#1012628).
- tools/libbpf: Avoid counting local symbols in ABI check
  (bsc#1012628).
- drm/vc4/vc4_hdmi: fill ASoC card owner (bsc#1012628).
- net: qed: Disable aRFS for NPAR and 100G (bsc#1012628).
- net: qede: Disable aRFS for NPAR and 100G (bsc#1012628).
- net: qed: RDMA personality shouldn't fail VF load (bsc#1012628).
- igc: Fix wrong timestamp latency numbers (bsc#1012628).
- igc: Fix not considering the TX delay for timestamps
  (bsc#1012628).
- drm/sun4i: sun8i-csc: Secondary CSC register correction
  (bsc#1012628).
- spi: spi-fsl-dspi: use XSPI mode instead of DMA for DPAA2 SoCs
  (bsc#1012628).
- RDMA/core: Fix ordering of CQ pool destruction (bsc#1012628).
- batman-adv: Add missing include for in_interrupt()
  (bsc#1012628).
- xsk: Fix number of pinned pages/umem size discrepancy
  (bsc#1012628).
- nvme-tcp: fix kconfig dependency warning when !CRYPTO
  (bsc#1012628).
- batman-adv: mcast: fix duplicate mcast packets in BLA backbone
  from LAN (bsc#1012628).
- batman-adv: mcast: fix duplicate mcast packets in BLA backbone
  from mesh (bsc#1012628).
- batman-adv: mcast: fix duplicate mcast packets from BLA backbone
  to mesh (bsc#1012628).
- bpf: Fix a rcu warning for bpffs map pretty-print (bsc#1012628).
- lib80211: fix unmet direct dependendices config warning when
  !CRYPTO (bsc#1012628).
- mac80211: do not disable HE if HT is missing on 2.4 GHz
  (bsc#1012628).
- cfg80211: fix 6 GHz channel conversion (bsc#1012628).
- mac80211: fix 80 MHz association to 160/80+80 AP on 6 GHz
  (bsc#1012628).
- ALSA: asihpi: fix iounmap in error handler (bsc#1012628).
- io_uring: fix openat/openat2 unified prep handling
  (bsc#1012628).
- SUNRPC: Fix svc_flush_dcache() (bsc#1012628).
- regmap: fix page selection for noinc reads (bsc#1012628).
- regmap: fix page selection for noinc writes (bsc#1012628).
- net/mlx5e: mlx5e_fec_in_caps() returns a boolean (bsc#1012628).
- MIPS: Loongson-3: Fix fp register access if MSA enabled
  (bsc#1012628).
- PM / devfreq: tegra30: Disable clock on error in probe
  (bsc#1012628).
- MIPS: Add the missing 'CPU_1074K' into __get_cpu_type()
  (bsc#1012628).
- regulator: axp20x: fix LDO2/4 description (bsc#1012628).
- spi: bcm-qspi: Fix probe regression on iProc platforms
  (bsc#1012628).
- KVM: x86: Reset MMU context if guest toggles CR4.SMAP or CR4.PKE
  (bsc#1012628).
- KVM: SVM: Add a dedicated INVD intercept routine (bsc#1012628).
- mm: validate pmd after splitting (bsc#1012628).
- arch/x86/lib/usercopy_64.c: fix __copy_user_flushcache()
  cache writeback (bsc#1012628).
- x86/irq: Make run_on_irqstack_cond() typesafe (bsc#1012628).
- x86/ioapic: Unbreak check_timer() (bsc#1012628).
- scsi: lpfc: Fix initial FLOGI failure due to BBSCN not supported
  (bsc#1012628).
- ALSA: usb-audio: Add delay quirk for H570e USB headsets
  (bsc#1012628).
- ALSA: hda/realtek - Couldn't detect Mic if booting with headset
  plugged (bsc#1012628).
- ALSA: hda/realtek: Enable front panel headset LED on Lenovo
  ThinkStation P520 (bsc#1012628).
- lib/string.c: implement stpcpy (bsc#1012628).
- tracing: fix double free (bsc#1012628).
- s390/dasd: Fix zero write for FBA devices (bsc#1012628).
- mt76: mt7615: use v1 MCU API on MT7615 to fix issues with
  adding/removing stations (bsc#1012628).
- lib/bootconfig: Fix a bug of breaking existing tree nodes
  (bsc#1012628).
- lib/bootconfig: Fix to remove tailing spaces after value
  (bsc#1012628).
- kprobes: Fix to check probe enabled before
  disarm_kprobe_ftrace() (bsc#1012628).
- kprobes: tracing/kprobes: Fix to kill kprobes on initmem after
  boot (bsc#1012628).
- btrfs: fix put of uninitialized kobject after seed device delete
  (bsc#1012628).
- btrfs: fix overflow when copying corrupt csums for a message
  (bsc#1012628).
- media: cec-adap.c: don't use flush_scheduled_work()
  (bsc#1012628).
- MIPS: Loongson2ef: Disable Loongson MMI instructions
  (bsc#1012628).
- dmabuf: fix NULL pointer dereference in dma_buf_release()
  (bsc#1012628).
- mm, THP, swap: fix allocating cluster for swapfile by mistake
  (bsc#1012628).
- mm/gup: fix gup_fast with dynamic page table folding
  (bsc#1012628).
- mm: replace memmap_context by meminit_context (bsc#1012628).
- mm: don't rely on system state to detect hot-plug operations
  (bsc#1012628).
- s390/zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (bsc#1012628).
- io_uring: ensure open/openat2 name is cleaned on cancelation
  (bsc#1012628).
- KVM: arm64: Assume write fault on S1PTW permission fault on
  instruction fetch (bsc#1012628).
- dm: fix bio splitting and its bio completion order for regular
  IO (bsc#1012628).
- clocksource/drivers/timer-ti-dm: Do reset before enable
  (bsc#1012628).
- commit ea492d4

==== libinput ====
Version update (1.16.1 -> 1.16.2)

- Update to release 1.16.2
  * A few device-specific fixes for the Google Pixelbook, Apple
    Magic Trackpad 2, some ALPS i2c touchpads and a jumping
    cursor fix for ALPS DoalPoint touchpads.

==== libproxy ====

- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).

==== libselinux ====
Version update (3.0 -> 3.1)
Subpackages: libselinux1 selinux-tools

- Update to version 3.1:
  * selinux/flask.h, selinux/av_permissions.h and sepol/policydb/flask.h were
    removed. All userspace object managers should have been updated to use the
    dynamic class/perm mapping support.
    Use string_to_security_class(3) and string_to_av_perm(3) to map the class
    and permission names to their policy values, or selinux_set_mapping(3) to
    create a mapping from class and permission index values used by the
    application to the policy values.
  * Removed restrictions in libsepol and checkpolicy that required all declared
    initial SIDs to be assigned a context.
  * Support for new policy capability genfs_seclabel_symlinks
  * selinuxfs is mounted with noexec and nosuid
  * `security_compute_user()` was deprecated

==== libselinux-bindings ====
Version update (3.0 -> 3.1)

- Update to version 3.1:
  * selinux/flask.h, selinux/av_permissions.h and sepol/policydb/flask.h were
    removed. All userspace object managers should have been updated to use the
    dynamic class/perm mapping support.
    Use string_to_security_class(3) and string_to_av_perm(3) to map the class
    and permission names to their policy values, or selinux_set_mapping(3) to
    create a mapping from class and permission index values used by the
    application to the policy values.
  * Removed restrictions in libsepol and checkpolicy that required all declared
    initial SIDs to be assigned a context.
  * Support for new policy capability genfs_seclabel_symlinks
  * selinuxfs is mounted with noexec and nosuid
  * `security_compute_user()` was deprecated
  * Refreshed python3.8-compat.patch

==== libsemanage ====
Version update (3.0 -> 3.1)

- Add /var/lib/selinux
- Remove libsemanage-update-map-file.patch to prevent checkers from declining
  the submission. Keeping the snippet in the spec file in case we try to
  enable LTO again
- Update to version 3.1
  * Improved manpage
  * fsync final files before rename
- Disabled LTO again. This breaks e.g. shadow and also other packages
  in security:SELinux
- Fix build with LTO: [bsc#1133102]
  * Enable LTO (Link Time Optimization) and build with -ffat-lto-objects
  * Update map file to include new symbols and remove wildcards
- Add libsemanage-update-map-file.patch

==== libsepol ====
Version update (3.0 -> 3.1)

- Update to version 3.1
  * Add support for new polcap genfs_seclabel_symlinks
  * Initialize the multiple_decls field of the cil db
  * Return error when identifier declared as both type and attribute
  * Write CIL default MLS rules on separate lines
  * Sort portcon rules consistently
  * Remove leftovers of cil_mem_error_handler
  * Drop remove_cil_mem_error_handler.patch, is included

==== libsolv ====

- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]

==== libva ====
Version update (2.8.0 -> 2.9.0)
Subpackages: libva-drm2 libva2

- update to 2.9.0:
  * trace: Refine the va_TraceVAPictureParameterBufferAV1.
  * doc: Add comments for backward/forward reference to avoid confusion
  * doc: Modify comments in av1 decoder interfaces
  * doc: Update mailing list
  * Add SCC fields trace for HEVC SCC encoding.
  * Add FOURCC code for Y212 and Y412 format.
  * Add interpolation method for scaling.
  * add attributes for context priority setting
  * Add vaSyncBuffer for output buffers synchronization
  * Add vaSyncSurface2 with timeout

==== libwacom ====
Version update (1.3 -> 1.5)
Subpackages: libwacom-data libwacom2

- Use official %%meson_test macro for the %check section.
- Do not crrate empty %check section when not using meson.
- Fix Leap build.
- update to 1.5:
  - New devices:
  - Acer Spin 5 / Acer Spin SP513-54N
  - Dell Latitude 7410,
  - GAOMON S620
  - HP Pavilion x360 Convertible 14-dh0xxx
  - Huawei MateBook HZ-W19
  - Lenovo ThinkPad X1 Yoga 3rd
  - Wacom Cintiq 16, DTK-1660E
- update to 1.4.1:
- New devices:
  - HP ZBook Studio x360 G5
  - Dell Latitude 7285
  - Dell Latitude 7200 2-in-1, Dell Latitude 7400 2-in-1
  - Elan 2415
  - HP ENVY x360 Convertible 13,
  - Huion 420, 1060 Plus,
  - GAOMON S56K
  - Wacom FT-0405
  - Many AES stylus definitions added
  - New API: libwacom_stylus_get_eraser_type()
  - udev rules are now using hwdb entries

==== libzypp ====
Version update (17.25.1 -> 17.25.2)

- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)

==== mcstrans ====
Version update (3.0 -> 3.1)

- Update to version 3.1
  * fix memory leak in new_context_str

==== mozilla-nspr ====
Version update (4.28 -> 4.29)

- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)

==== mozilla-nss ====
Version update (3.55 -> 3.57)
Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs

- update to NSS 3.57
  * The following CA certificates were Added:
    bmo#1663049 - CN=Trustwave Global Certification Authority
    SHA-256 Fingerprint: 97552015F5DDFC3C8788C006944555408894450084F100867086BC1A2BB58DC8
    bmo#1663049 - CN=Trustwave Global ECC P256 Certification Authority
    SHA-256 Fingerprint: 945BBC825EA554F489D1FD51A73DDF2EA624AC7019A05205225C22A78CCFA8B4
    bmo#1663049 - CN=Trustwave Global ECC P384 Certification Authority
    SHA-256 Fingerprint: 55903859C8C0C3EBB8759ECE4E2557225FF5758BBD38EBD48276601E1BD58097
  * The following CA certificates were Removed:
    bmo#1651211 - CN=EE Certification Centre Root CA
    SHA-256 Fingerprint: 3E84BA4342908516E77573C0992F0979CA084E4685681FF195CCBA8A229B8A76
    bmo#1656077 - O=Government Root Certification Authority; C=TW
    SHA-256 Fingerprint: 7600295EEFE85B9E1FD624DB76062AAAAE59818A54D2774CD4C0B2C01131E1B3
  * Trust settings for the following CA certificates were Modified:
    bmo#1653092 - CN=OISTE WISeKey Global Root GA CA
    Websites (server authentication) trust bit removed.
  * https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.57_release_notes
- requires NSPR 4.29
- removed obsolete nss-freebl-fix-aarch64.patch (bmo#1659256)
- introduced _constraints due to high memory requirements especially
  for LTO on Tumbleweed
- Add patch to fix build on aarch64 - boo#1176934:
  * nss-freebl-fix-aarch64.patch
- Update nss-fips-approved-crypto-non-ec.patch to match RC2 code
  being moved to deprecated/.
- Remove nss-fix-dh-pkcs-derive-inverted-logic.patch. This was made
  obsolete by upstream changes.
- update to NSS 3.56
  Notable changes
  * bmo#1650702 - Support SHA-1 HW acceleration on ARMv8
  * bmo#1656981 - Use MPI comba and mulq optimizations on x86-64 MacOS.
  * bmo#1654142 - Add CPU feature detection for Intel SHA extension.
  * bmo#1648822 - Add stricter validation of DH keys in FIPS mode.
  * bmo#1656986 - Properly detect arm64 during GYP build architecture
    detection.
  * bmo#1652729 - Add build flag to disable RC2 and relocate to
    lib/freebl/deprecated.
  * bmo#1656429 - Correct RTT estimate used in 0-RTT anti-replay.
  * bmo#1588941 - Send empty certificate message when scheme selection
    fails.
  * bmo#1652032 - Fix failure to build in Windows arm64 makefile
    cross-compilation.
  * bmo#1625791 - Fix deadlock issue in nssSlot_IsTokenPresent.
  * bmo#1653975 - Fix 3.53 regression by setting "all" as the default
    makefile target.
  * bmo#1659792 - Fix broken libpkix tests with unexpired PayPal cert.
  * bmo#1659814 - Fix interop.sh failures with newer tls-interop
    commit and dependencies.
  * bmo#1656519 - NSPR dependency updated to 4.28
- do not hard require mozilla-nss-certs-32bit via baselibs
  (boo#1176206)

==== mutter ====
Version update (3.36.6+2 -> 3.36.7)
Subpackages: libmutter-6-0 mutter-data

- Update to version 3.36.7:
  + Fix Night Light updates after DPMS
  + Fix IM handling on X11
  + Fix resizing of attached modal dialogs on wayland
  + Fix jumps when resizing windows using discrete steps.
  + Fixed crashes.
  + Plugged Memory leaks.
  + Misc. bug fixes and cleanups.
  + Updated translations.

==== ncurses ====
Version update (6.2.20200711 -> 6.2.20200912)
Subpackages: libncurses6 ncurses-utils terminfo-base

- Add ncurses patch 20200912
  + add configure-check for systre/tre with mingw configuration, to get
    the library-dependencies as seen in msys2 configuration for mingw64.
  + build-fixes for the win32-driver configuration.
  + use more defensive binary mode setting for Win32 (Juergen Pfeifer).
- Add ncurses patch 20200907
  + fix regression in setupterm validating non-empty $TERM (report by
    Soren Tempel).
- Add ncurses patch 20200906
  + merge/adapt in-progress work by Juergen Pfeifer for new version of
    win32-driver.
  + correct description of vt330/vt340 (Ross Combs).
- Add ncurses patch 20200831
  + build-fix for awk-scripts modified for win32-driver (report by Werner
    Fink).
- Drop workaround patch awk-scripts.patch as now upstream fixed
- Add patch awk-scripts.patch as workaround for patch 20200829
- Add ncurses patch 20200829
  + remove a redundant NCURSES_EXPORT as a build-fix for "Maarten
    Anonymous".
  + merge/adapt in-progress work by Juergen Pfeifer for new version of
    win32-driver.
  + modify configure script, moving gcc -Werror options to EXTRA_CFLAGS
    to avoid breaking configure-checks (adapted from ongoing work on
    mawk and lynx).
  > errate for terminfo.src (report by Florian Weimer):
  + correct icl6404 csr
  + correct ti916 cup
  + improve ndr9500
- Refresh patch ncurses-6.2.dif
- Add ncurses patch 20200822
  + improve version-number extraction in MKlib_gen.sh
  + make the test-package for manpages installable by adjusting the
    man_db.renames file.
  + correct an off-by-one loop-limit in convert_strings function
    (report by Yue Tai).
  + add CF_SHARED_OPTS cases for HPE NonStop systems (Randall S Becker).
  + modify CF_SHARED_OPTS case for NetBSD to use the same "-shared"
    option for the non-rpath case as for the rpath case, to allow gcc to
    provide suitable runtime initialization (report by Rajeev V Pillai).
- Disable wgetch-events as it is deprecated and breaks build of
  other packages
- Add ncurses patch 20200817
  + reduce build-warnings by excluding ncurses-internals from deprecation
    warnings.
  + mark wgetch-events feature as deprecated.
  + add definition for $(LIBS) to ncurses/Makefile.in, to simplify builds
    using the string-hacks option.
  + prevent KEY_EVENT from appearing in curses.h unless the configure
    option --enable-wgetch-events is used (report by Werner Fink).
- Add ncurses patch 20200816
  + amend tic/infocmp check to allow for the respective tool's absence
    (report by Steve Wills, cf: 20200808).
  + improved some of the build-scripts with shellcheck
  + filter out -MT/-MD/-MTd/-MDd options in script for Visual Studio C++
    (discussion with "Maarten Anonymous").
- Add ncurses patch 20200808
  + improve discussion of the system's tic utility when used as part
    of cross-compiling (discussion with Keith Marshall).
  + modify configuration checks for build-time tic/infocmp to use
    AC_CHECK_TOOL. That can still be overridden by --with-tic-path and
  - -with-infocmp-path when fallbacks are used, but even if not using
    fallbacks, the improved check may help with cross-compiling
    (discussion with Keith Marshall).
  + other build-fixes for Ada95 with MinGW.
  + modify Ada95 source-generation utility to write to a file given as
    parameter rather than to the standard output, allowing builds with
    MinGW.
- Add ncurses patch 20200801
  + remove remaining parts of checks for ISC Unix (cf: 20121006).
  + add user32.lib to LDFLAGS for Visual Studio C++ configuration
    (discussion with "Maarten Anonymous").
  + modify MKkey_defs.sh to hide ncurses' definition of KEY_EVENTS to
    reduce Visual Studio C++ redefinition warnings.
  + improve/update checks for external functions in test/configure
- Add ncurses patch 20200725
  + set LINK_TESTS in CF_SHARED_OPTS for msvc (patch by
    "Maarten Anonymous")
  + improved workaround for redefinition-warnings for KEY_EVENT.
  + improve man/term.5 section on legacy storage format (report by
    Florian Weimer).
- Add ncurses patch 20200718
  + reduce redefinition-warnings for KEY_EVENT when building with Visual
    Studio C++.
  + define NCURSES_STATIC when compiling programs to link with static
    libraries, to work with MinGW vs Visual Studio C++.
  > additional changes for building with Visual Studio C++ and msys2
    (reports/patches by "Maarten Anonymous")
  + modify c++/Makefile.in to set the current directory while compiling
    the main program, so the linker can find related objects.
  + several changes to allow the c++/demo program to compile/link.
  + change an ifdef in test-directory, to use VC++ wide-character funcs.

==== numactl ====
Version update (2.0.13 -> 2.0.14)

- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning

==== open-lldp ====
Version update (1.0.1+102.4c7fcc3 -> 1.0.1+69.e8f522565f5a)
Subpackages: liblldp_clif1

- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file
- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)
- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions

==== p11-kit ====
Subpackages: libp11-kit0 p11-kit-tools

- avoid bareword to fix build failure

==== patterns-base ====
Subpackages: patterns-base-base patterns-base-bootloader patterns-base-minimal_base patterns-base-x11

- Handle the yast pattern split into basis, desktop and server (boo#1159875)

==== patterns-microos ====
Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-basesystem patterns-microos-cloud patterns-microos-defaults patterns-microos-desktop-gnome patterns-microos-desktop-kde patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-selinux patterns-microos-sssd_ldap

- Add container-selinux and selinux-policy-targeted policy packages
  to selinux pattern
- Add policycoreutils-python-utils to media

==== perl-File-Listing ====
Version update (6.04 -> 6.11)

- updated to 6.11
  see /usr/share/doc/packages/perl-File-Listing/Changes
  6.11      2020-10-06 03:00:45 -0600
  - Remove accidental recursive req on LWP::Simple
- updated to 6.10
  see /usr/share/doc/packages/perl-File-Listing/Changes
  6.10      2020-10-05 15:18:30 -0600
  - Production version identical to 6.09_01
  6.09_01   2020-10-05 08:17:32 -0600
  - Remove TABs from source files and tests (gh#17)
  - Restores (theoretical, untested) support for 5.6, which was removed when
    the tests added modern file tests (gh#17)
  - Fixes or silences several minor nits reported by PerlCritic (gh#17)
  6.08_01 2020-10-01 17:28:35 -0600
  - We now only call Time::Local::timelocal with four digit years (gh#5, gh#14)
- updated to 6.07
  see /usr/share/doc/packages/perl-File-Listing/Changes

==== policycoreutils ====
Version update (3.0 -> 3.1)
Subpackages: python3-policycoreutils

- Add get_os_version.patch
  get_os_version is implemented in a very RH/Fedora specific way.
  Ensure that it returns a valid string for SUSE by changing the
  default. Also remove the RH specific logic when generating HTML
  versions of the SELinux documentation
- Align more with Fedora spec file to get rid of python dependencies
  in the core system
  - create new python-utils sub-package
  - move some tools to devel sub-package
- Cleanup dependencies
- Proper default permissions for newrole (4755)
- Update to version 3.1
  * New `setfiles -E` option - treat conflicting specifications as errors, such
    as where two hardlinks for the same inode have different contexts.
  * `setsebool -V` reports errors from commit phase
  * matchpathcon related interfaces are deprecated
  * New `restorecon -x` option which prevents it from crossing file system
  * boundaries.
  * `sepolgen-ifgen` parses a gen_tunable statement as bool
  * Removed Requires for python3-ipy as the ipaddress module is used. No
    requires for python-ipaddress as it's assumed this is used only on recent
    systems
  * Drop chcat_join.patch, is upstream

==== popt ====

- Update homepage URL.
- Drop old rpm constructs.

==== procps ====
Subpackages: libprocps8

- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.

==== python-semanage ====
Version update (3.0 -> 3.1)

- Update to version 3.1
  * Improved manpage
  * fsync final files before rename
- Disabled LTO again. This breaks e.g. shadow and also other packages
  in security:SELinux
- Fix build with LTO: [bsc#1133102]
  * Enable LTO (Link Time Optimization)
  * Update map file to include new symbols and remove wildcards
- Add libsemanage-update-map-file.patch

==== restorecond ====
Version update (3.0 -> 3.1)

- Use proper macros for SYSTEMDSYSTEMUNITDIR and SYSTEMDUSERUNITDIR
- Update to version 3.1
  * `restorecond_user.service` - new systemd user service which runs
    `restorecond -u`

==== sddm ====
Subpackages: sddm-branding-openSUSE

- Change paths from /etc to /usr/etc for UsrEtc Move (boo#1177195)

==== sysuser-tools ====

- Avoid useless use of cat
- Simplify %sysusers_requires
- Drop shebang, rpm passes it to /bin/sh itself

==== sysvinit ====
Version update (2.96 -> 2.97)

- Drop /bin/pidof and /sbin/pidof, including corresponding man
  page: let's switch to pidof as provided by procps-ng.
- Update to sysvinit 2.97:
  * Check $(ROOT) filesystem for libcrypt instead of a hardcoded
    path to /usr.
  * Code clean-up and making sure we avoid freeing unused memory.
  * Added shell script which converts systemd unit files into
    init.d style scripts.
  * Allow init to load configuration data from files stored in
    /etc/inittab.d/
  * Allow shutdown time to be specified in the format +hh:mm. This
    is in addition to the existing formats such as hh:mm, +m, and
    "now".
  * Fixed typos in manual pages.
- Update startpar to 0.65:
  + Make sure startpar testsuite can find insserv executable in
    /usr/sbin or /sbin.
  + Added PREFIX variable to Makefile and testsuite to make
    location of startpar and insserv more flexible.
- Rebase sysvinit-2.90.dif.
- Drop SCVER defines: not used in any place.
- Drop startpar-sysmacros.patch: fixed upstream.

==== tcpd ====

- tcp_wrappers_7.6-shared-lib.diff: Linux has STRERROR not SYS_ERRLIST
  [bsc#1175272]

==== vim ====
Subpackages: vim-data-common vim-small

- apparmor.vim: update from latest AppArmor 2.13 branch:
  - add capabilities bpf and perfmon

==== vulkan-loader ====
Version update (1.2.153 -> 1.2.154)

- Update to release 1.2.154
  * Revert loader error characteristics to 1.2.152
- Drop 0001-Revert-loader-Return-error-if-layer-loading-failed.patch
  (merged)

==== webkit2gtk3 ====
Version update (2.28.4 -> 2.30.1)
Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles

- Enable c_loop on aarch64: currently needed for compilation to
  succeed with JIT disabled. Also disable sampling profiler, since
  it conflicts with c_loop (boo#1177087).
- Update to version 2.30.1:
  + Bring back the environment variable to force single process
    mode when PSON is disabled.
  + Fix downloads started by an ephemeral web context.
  + Updated translations.
- Update to version 2.30.0:
  + Fix NTLM authentication.
  + Don't try to use SHM on wayland with older wpebackend-fdo.
  + Fix the build due to seccomp.h header not found.
- Drop seccomp-build-fix.patch and wpe-shm-check.patch: fixed
  upstream.
- Add wpe-shm-check.patch: make SHM initialization fail for
  wpebackend-fdo < 1.7.0.
- Add seccomp-build-fix.patch: pass seccomp include directory to
    g++.
- Re-enable bubblewrap sandbox for SLE-15-SP2 and Tumbleweed.
- Update to version 2.29.92:
  + Fix user agent header after a redirect when a new quirk is
    required.
  + Stop using firefox user agent quirk for google docs.
  + Fix rendering frames timeline panel in web inspector.
  + Fix per-thread cpu usage in web inspector.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.91:
  + Fix a web process crash introduced in 2.29.90.
- Changes from version 2.29.90:
  + Fix font variation settings when font smoothing setting is also
    present.
  + Fix HTML drag and drop operations.
  + Fix argument order for clone syscall seccomp filter on s390x.
  + Fix a crash when selecting text.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.4:
  + Add support for backdrop filters.
  + Add support for text-underline-offset and
    text-decoration-thickness.
  + Add OpenCDM and AV1 support to media backend.
  + Add new API to get ITP data summary.
  + Use mobile user-agent on tablets.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.3:
  + Add webkit_authentication_request_get_security_origin.
  + Change the cookies accept policy to always when no-third-party
    is set and ITP is enabled.
  + Fix web process hangs on large GitHub pages.
  + Bubblewrap sandbox should not attempt to bind empty paths.
  + Add support for sndio to bubblewrap sandbox.
  + Also handle dark themes when the name ends with -Dark.
  + Fix a race condition causing a crash in media player.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.2:
  + Add Intelligent Tracking Prevention (ITP) support.
  + Add support for video formats in img elements.
  + Add API to handle video autoplay policy that now defaults to
    disallow autoplay videos with audio.
  + Add API to mute a web view.
  + Add API to allow applications to handle the HTTP authentication
    credential storage.
  + Add a WebKitSetting to set the media content types requiring
    hardware support.
  + Fix a crash during drag an drop due to a bug introduced in
    2.29.1.
  + Do not start page load during animation in back/forward
    gesture.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.1:
  + Stop using GTK theming to render form controls.
  + Add API to disable GTK theming for scrollbars too.
  + Fix several race conditions and threading issues in the media
    player.
  + Add USER_AGENT_BRANDING build option.
  + Add paste as plain text option to the context menu for rich
    editable content.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Rebase webkit2gtk3-fdo-soname.patch.
- Add pkgconfig(libsystemd) BuildRequires: new dependency.

==== wpa_supplicant ====

- Add wpa_supplicant-p2p_iname_size.diff -- Limit P2P_DEVICE name to appropriate ifname size
  (https://patchwork.ozlabs.org/project/hostap/patch/20200825062902.124600-1-benjamin@sipsolutions.net/)

==== xdm ====

- removed /etc/X11/xdm/Keyboard.map since it meanwhile has been
  replaced by /usr/share/systemd/kbd-model-map (used by YaST)
- Don't create the compat symlinks in /etc on the fly, track them
  properly as %config
- /etc/X11/xdm/scripts/11-ssh-agent
  * ssh-askpass now moved to /usr/libexec/ssh (boo#1175991)
- moved xdm/xdm-np PAM files to /usr/etc/pam.d, since lightdm has
  been adjusted meanwhile
- Switch to /usr/bin/pidof dependency, provided by procps-ng.
- fixes in xdm-tarball.patch
  * /usr/lib/X11/display-manager: fixes sddm, which didn't use
    xdm_reload_files in xdm_start_proc() of
    /usr/lib/X11/displaymanagers/sddm (boo#1173049)
- fixes in xdm-tarball.patch
  * symlink also $XDMDIR/xinitrc.common in /etc/X11/xinit; it
    is still often sourced in old ~/.xinitrc user files ...
- fixes in xdm-tarball.patch
  * fixed include path for generic Xresources in xdm's Xresources file
  * fixed $XDMDIR in Xsession, so sys.xsession can be found
  * sys.xsession: fixed syntax error in code, which reads
    additional xdm scripts
  * display-manager: also symlink Xstartup and Xreset in
    /etc/X11/xdm (needed by lighdm)
- specfile:
  * for now use again /etc/pam.d for xdm/xdm-np PAM files instead
    of /usr/etc/pam.d (using the latter resulted in
    "authentificataion failure" with lightdm)
- reenabled move to /usr/etc/X11/xdm; updated xdm-tarball.patch
  (includes changes from xinit-UsrEtcMove.patch) [boo#1176212]
- xinit-UsrEtcMove.patch
  * changes needed with xinitrc moving to %{_libexecdir}/xinit and
    xinitrc.common moving to /usr/etc/X11/xinit/
- reverted move to /usr/etc/X11/xdm for now due to boo#1176212
- updated xdm-tarball.patch
  * adjusted for changes in xmodmap and xinit (boo#1173049)
- xdm-tarball.patch
  * /usr/etc changes still needed for xdm.tar.bz2; will need
    more changes once xmodmap and xinit files are also moved to
    /usr/etc (boo#1173049)
- move /etc/X11/xdm --> /usr/etc/X11/xdm and
  /etc/pam.d -> /usr/etc/pam.d; still TODO: adjust scripts in
  xdm.tar.bz2 (boo#1173049)
- more cleanup
  * no longer support sle12; adjusted xdm.tar.bz2 and
    applied xdm-with-update-alternative.patch to this tarball
- cleanup
  * get rid of xdm-fallbacks.tar.bz2, which wasn't used any longer
    since SUSE 12.1
  * no longer support systmed based OSes like SUSE < 12.1 and sle11;
    removed therefore also xdm-consolekit.diff
  * no longer support sle11

==== xinit ====

- Properly track the compatibility symlink
- simplified UsrEtcMove enable/disable logic in specfile
- xinit-tarball.patch/xinit.spec
  * reenabled move to /usr/etc/X11/xinit
  * fixed remaining issues mentioned in boo#1173052, comment#6
    and boo#1176212, comment#7
- reverted move to /usr/etc/X11/xinit for now (boo#1173052, comment#6)
- moved xinit files to /usr/etc/X11/xinit and removed xinitrc
  skeleton (boo#1173052)
- xinit-tarball.patch
  * adjust tarball contenct to /usr/etc move (boo#1173052)

==== xkeyboard-config ====
Version update (2.30 -> 2.31)

- Update to version 2.31
  * latest bugfix release
- supersedes U_Fix-symbols-in-syntax-error-spurious-git-conflict-ma.patch
- adjusted n_suse-ctrl-alt-bksp-terminate.patch

==== xmodmap ====

- reenabled move to /usr/etc/X11 for Tumbleweed (boo#1173053)
- reverted move to /usr/etc/X11 for now (boo#1173053, comment#3)
- moved Xmodmap files to /usr/etc/X11 (boo#1173053)

==== xorg-x11-server ====
Subpackages: xorg-x11-server-Xvfb xorg-x11-server-wayland

- n_xorg-wrapper-anybody.patch
  * replace default config /etc/X11/Xwrapper, which allows
    anybody to use the wrapper, by a patch for the code, i.e.
    [#] rootonly, console, anybody
    allowed_users=anybody
    [#] yes, no, auto
    needs_root_rights=auto
    is now the default without any Xwrapper config
    (needs_root_rights=auto was already the default before)
- u_xorg-wrapper-Xserver-Options-Whitelist-Filter.patch
  * replaced by improved version written by Matthias Gerstner of
    our security team
    + simplified the option parsing code a bit
    + changed the "ignore forbidden argument" logic into an "abort
    on forbidden argument" logic. This is safer and avoids
    surprises on the user's end that could occur if the desired
    command line arguments aren't effective but the Xorg server is
    still started.
    + tried to adjust to the coding style present in the file
    (mostly the function name)
    + added some logic to apply the option filtering only to
    non-root users when Xorg is actually started as root. This
    should allow for full flexibility if root calls the wrapper or
    if the Xorg server only runs with user privileges.
- U_Fix-segfault-on-probing-a-non-PCI-platform-device-on.patch,
  U_Revert-linux-Fix-platform-device-PCI-detection-for-c.patch,
  U_Revert-linux-Fix-platform-device-probe-for-DT-based-.patch,
  U_Revert-linux-Make-platform-device-probe-less-fragile.patch
  * fix Xserver startup on Raspberry Pi 3 (boo#1176203)
- n_xorg-wrapper-rename-Xorg.patch
  * moved Xorg to Xorg.bin and Xorg.sh to Xorg (boo#1175867)
- change default for needs_root_rights to auto in Xwrapper.config
  (boo#1175867)
- reenabled SUID wrapper for TW (boo#1175867)
- u_xorg-wrapper-Xserver-Options-Whitelist-Filter.patch
  * Xserver option whitelist filter (boo#1175867)

==== yelp ====
Version update (3.36.0 -> 3.36.1)
Subpackages: libyelp0

- Update to version 3.36.1:
  + Fix issue when opening local HTML files.
  + Updated translations.