Packages changed:
  branding-openSUSE
  busybox-links
  conmon (2.0.20 -> 2.0.21)
  dracut (050+suse.75.g266a76d9 -> 050+suse.226.gb86d9bcf)
  glib2 (2.64.4 -> 2.64.5)
  glib2-branding-openSUSE
  helm (3.3.1 -> 3.3.3)
  installation-images-MicroOS (16.16 -> 16.18)
  kured (1.4.5 -> 1.5.0)
  kustomize (3.8.0 -> 3.8.4)
  ldb (2.1.4 -> 2.2.0)
  libproxy
  libsolv (0.7.14 -> 0.7.15)
  libssh (0.9.4 -> 0.9.5)
  libzypp (17.24.2 -> 17.25.0)
  mozilla-nss (3.55 -> 3.56)
  openSUSE-build-key
  rook (1.4.0+git0.g801c5934 -> 1.4.3+git18.g42e1675e)
  snapper (0.8.13 -> 0.8.14)
  sysconfig (0.85.5 -> 0.85.6)
  vim (8.2.1551 -> 8.2.1719)
  wpa_supplicant
  xen (4.14.0_06 -> 4.14.0_08)
  yast2 (4.3.27 -> 4.3.29)
  zypper (1.14.38 -> 1.14.39)

=== Details ===

==== branding-openSUSE ====
Subpackages: grub2-branding-openSUSE

- Update branding-tumbleweed.zip: Rebrand all components of SLES/D
  in boot progress (jsc#SLE-14772).

==== busybox-links ====
Subpackages: busybox-coreutils busybox-gawk busybox-grep busybox-gzip busybox-xz

- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)

==== conmon ====
Version update (2.0.20 -> 2.0.21)

- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building

==== dracut ====
Version update (050+suse.75.g266a76d9 -> 050+suse.226.gb86d9bcf)
Subpackages: dracut-ima

- Update to version 050+suse.226.gb86d9bcf:
  We are now tracking the master branch, preparing for a 051 release
  within the next weeks.
  (the list includes changes previously backported)
  * 01fips: modprobe failures during manual module loading is not fatal
  * 01fips: turn info calls into fips_info calls
  * 04watchdog: split the watchdog module install
  * 35network-legacy: simplify fallback dhcp setup
  * 51-dracut-rescue.install: Don't use BLS fragment shipped by kernel package
  * 90crypt: make `rd.luks.key` usable with encrypted keydev.
  * 90crypt/module-setup.sh: try to catch kernel config changes
  * 90kernel-modules: add pci_hyperv
  * 90kernel-modules/module-setup.sh: add sg kernel module
  * 90kernel-modules: remove nfit from static module list
  * 90lvm: do not add newline to cmdline
  * 90nvdimm: include nvdimm keys in initrd
  * 90ppcmac: respect DRACUT_ARCH, don't exclude ppcle
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY
  * 95cifs: install new softdeps (sha512, gcm, ccm, aead2)
  * 95cifs: pass rootflags to mount
  * 95dcssblk: fix script permissions
  * 95fcoe: default rd.nofcoe to false
  * 95iscsi: fix ipv6 target discovery
  * 95iscsi: fix missing space when compiling cmdline args
  * 95iscsi: use ip_params_for_remote_addr()
  * 95nfs: only install rpc services for NFS < 4 when hostonly is strict
  * 95nfs: use ip_params_for_remote_addr()
  * 95nvmf: add module for NVMe-oF
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: fix typo in the example documentation
  * 95resume: Do not resume on iSCSI, FCoE or NBD
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check
  * 95znet: Add a rd.znet_ifname= option
  * 99base: Remove duplicate nfsroot_to_var from dracut-lib.sh
  * 99memstrack: hook script should not call exit
  * 99memstrack: Only start tracking service when rd.memdebug=4|5
  * 99squash: Don't hardcode the squash sub directories
  * 99squash: improve pre-requirements check
  * 99squash: simplify the code
  * Add 99memstrack module
  * Adding a bug report template
  * Adding a feature request template
  * Adding a pull request template
  * Adding code of conduct
  * Adding documentation template
  * Adding security policy
  * Adding the labels file for master
  * Adding the labels file for the RHEL-6 branch
  * Adding the labels file for the RHEL-7 branch
  * Adding the labels file for the RHEL-8 branch
  * Adding the labels trigger file for the Master branch
  * Adding the labels trigger file for the RHEL-6 branch
  * Adding the labels trigger file for the RHEL-7 branch
  * Adding the labels trigger file for the RHEL-8 branch
  * Add module "90nvdimm" for NVDIMM support
  * Add --version to man page
  * Allow $DRACUT_INSTALL to be not an absolute path
  * Always pull in machinery to read ifcfg files
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
  * btrfs: force preload btrfs module
  * busybox: simplify listing of supported utilities
  * Change the order of NFS servers during the boot NFS server provided by DHCP in next-server option has higher priority than DHCP-server itself
  * CI: remove Fedora 30, add Fedora 32
  * cms: regenerate NetworkManager connections
  * cryptroot-ask: no warn if /run/cryptsetup exist
  * dasd: only install /etc/dasd.conf if present
  * dhclient-script: Fix typo in output of  BOUND & BOUND6 cases
  * dmsquash-live-root: Remove obsolete osmin.img processing.
  * Document initqueue/online hook
  * Do not start inside container
  * don't prefer $TMPDIR over --tmpdir
  * dracut.cmdline.7.asc: clarify usage of `rd.lvm.vg` and `rd.lvm.lv`
  * dracut.cmdline.7.asc: fix typo
  * dracut.conf.5.asc: document how to config --no-compress in the config
  * dracut-functions: add ip_params_for_remote_addr() helper
  * dracut-functions: fix find_binary() to return full path
  * dracut-initqueue: Print more useful info in case of timeout
  * dracut-lib.sh: quote variables in parameter expansion patterns
  * dracut.modules.7.asc: fix another typo
  * dracut.modules.7.asc: fix reference to insmodpost module
  * dracut.sh: add check for invalid configuration files
  * dracut.sh: Add --version
  * dracut.sh: don't call fsfreeze on subvol of root file system
  * dracut.sh: FIPS workaround for openssl-libs on Fedora/RHEL
  * dracut.sh: fix early microcode detection logic
  * dracut.sh: fix errors pointed out by shellcheck.
  * dracut.sh: fix ia32 detection for uefi executables
  * dracut.sh: fix some indentation.
  * dracut.sh: Move the library workaround after squash
  * dracut.spec: add 90nvdimm
  * dracut.spec: add version check for deprecated files
  * Fix CI badges in README.md and fix dracut description
  * Fix CoC URL
  * fix graphics startup failure with the rhgb paramter in CentOS8.2
  * Fix pre-trigger stage by replacing exit with return in lldpad.sh
  * Fix test in lsinitrd
  * Fix Unicode
  * Fix Unicode and dracut install labeler
  * github actions: use test container directly
  * .github: fix path to label workflow mapping file
  * i18n: Always install /etc/vconsole.conf
  * install: also install post weak dependencies of kernel modules
  * Install crypto modules in 90kernel-modules
  * install dependant libs too
  * lvm: fix removal of pvscan from udev rules
  * lvm: remove unnecessary ${initdir} from lvm_scan.sh
  * Make externally defined CFLAGS work
  * Makefile: fix VERSION again
  * Makefile: merge main-version and git-version earlier
  * Makefile: really make externally defined CFLAGS work
  * match simplified rd.zfcp format too
  * match the whole string
  * mkinitrd-dracut.sh: use vmlinux regex for ppc*, vmlinuz for i686
  * mkinitrd-suse.sh: Fix i586 platform detection
  * mount-root.sh: fix writing fstab file with missing fsck flag
  * multipath: add automatic configuration for multipath
  * net-lib.sh: support infiniband network mac addresses
  * network: fix glob matching ipv6 addresses
  * network-manager: ensure that nm-run.sh is executed when needed
  * network-manager: install libnss DNS and mDNS plugins
  * network-manager: move connection generation to a lib file
  * network-manager: set kernel hostname from the command line
  * New labels file
  * New label trigger file
  * README.md: fix github action badge links
  * Remove cleanup_trace_mem calls
  * Remove memtrace-ko and rd.memdebug=4 support in dracut
  * Remove stratis module
  * Removing dracut entry not compat with new plugin
  * Switching label triggers from pull requests to cron
  * systemd: skip dependency add for non-existent units
  * TEST-03-USR-MOUNT/test.sh: increase loglevel
  * TEST-12-RAID-DEG/create-root.sh: more udevadm settle
  * TEST-41-NBD-NM/Makefile: should be based on TEST-40-NBD not TEST-20-NFS
  * TEST-99: exclude /etc/dnf/* from check
  * test/TEST-35-ISCSI-MULTI: bump disk space
  * test: use dd from /dev/zero, instead of creating files with a hole
  * .travis.yml: reformat
  * UEFI Mode: only write kernel cmdline to UEFI binary
  * Update master-labels.yml
  * url-lib: drop NSS if it's not in curl --version
  * Use TMPDIR if available

==== glib2 ====
Version update (2.64.4 -> 2.64.5)
Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0

- Update to version 2.64.5:
  + Fix deadlock in `g_subprocess_communicate_async()`.
  + Bugs fixed: glgo#GNOME/GLib!1519, glgo#GNOME/GLib!1520,
    glgo#GNOME/GLib!1565, glgo#GNOME/GLib!1608,
    glgo#GNOME/GLib!1618, glgo#GNOME/GLib!1621.

==== glib2-branding-openSUSE ====

- Update .gschema.override.in (jsc#SLE-14772):
  * add different key for screenlock
  * update background color for SLE.

==== helm ====
Version update (3.3.1 -> 3.3.3)

- Update to version 3.3.3:
  * fix: allow serverInfo field on index files
- Update to version 3.3.2:
  * fix rebase
  * fix(cmd/helm): add build tags for architecture
  * switched to stricter YAML parsing on plugin metadata files
  * Merge pull request from GHSA-m54r-vrmv-hw33
  * Merge pull request from GHSA-jm56-5h66-w453
  * Merge pull request from GHSA-9vp5-m38w-j776
  * fixed bug that caused helm create to not overwrite modified files
  * replace --no-update with --force-update and invert default. BREAKING.
  * improve the HTTP detection for tar archives
  * handle case where dependency name collisions break dependency resolution
  * validate the name passed in during helm create
  * refactor the release name validation to be consistent across Helm
  * fix: check mode bits on kubeconfig file

==== installation-images-MicroOS ====
Version update (16.16 -> 16.18)

- merge gh#openSUSE/installation-images#422
- prevent cross-filesystem relative symlinks to kmod in initrd
  (bsc#1169094)
- 16.18
- merge gh#openSUSE/installation-images#421
- plymouthd.defaults will be moved to branding package
  (jsc#SLE-11637)
- 16.17

==== kured ====
Version update (1.4.5 -> 1.5.0)

- Update to version 1.5.0:
  * Prepare 1.5.0 release
  * Bump helm/kind-action from v1.0.0-rc.1 to v1.0.0
  * Bump helm/chart-testing-action from v1.0.0-rc.2 to v1.0.0
  * Add dependabot
  * Prepare for k8s release 1.19 (Aug 25)

==== kustomize ====
Version update (3.8.0 -> 3.8.4)

- Update to version 3.8.4
  - Update api to v0.6.2
  - Update kyaml to v0.8.1
- Refresh vendor.tar.xz

==== ldb ====
Version update (2.1.4 -> 2.2.0)

- Release ldb 2.2.0
  + Fix memory leak in ldb_kv_index_dn_ordered(); (bso#14299)
  + Fix off-by-one increment in lldb_add_msg_attr; (bso#14413)

==== libproxy ====

- Build with KDE on Tumbleweed, Leap and SLE releases greater than
  SLE-15-SP2 (jsc#SLE-12256).

==== libsolv ====
Version update (0.7.14 -> 0.7.15)

- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15
- Enable zstd compression support for sle15
- Enable zstd compression support for sle15-sp2

==== libssh ====
Version update (0.9.4 -> 0.9.5)
Subpackages: libssh-config libssh4

- Add missing BR for openssh needed for tests
- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite

==== libzypp ====
Version update (17.24.2 -> 17.25.0)

- RepoInfo: Return the type of the local metadata cache as
  fallback (bsc#1176435)
- VendorAttr: Fix broken "suse,opensuse" equivalence handling.
  Enhance API and testcases. (bsc#1174918)
- Update docs regarding 'opensuse' namepace matching.
- New solver testcase format.
- Link against libzsd to close libsolvs open references
  (as we link statically)
- BuildRequires:  libsolv-devel >= 0.7.15.
- version 17.25.0 (22)

==== mozilla-nss ====
Version update (3.55 -> 3.56)

- Update nss-fips-approved-crypto-non-ec.patch to match RC2 code
  being moved to deprecated/.
- Remove nss-fix-dh-pkcs-derive-inverted-logic.patch. This was made
  obsolete by upstream changes.
- update to NSS 3.56
  Notable changes
  * bmo#1650702 - Support SHA-1 HW acceleration on ARMv8
  * bmo#1656981 - Use MPI comba and mulq optimizations on x86-64 MacOS.
  * bmo#1654142 - Add CPU feature detection for Intel SHA extension.
  * bmo#1648822 - Add stricter validation of DH keys in FIPS mode.
  * bmo#1656986 - Properly detect arm64 during GYP build architecture
    detection.
  * bmo#1652729 - Add build flag to disable RC2 and relocate to
    lib/freebl/deprecated.
  * bmo#1656429 - Correct RTT estimate used in 0-RTT anti-replay.
  * bmo#1588941 - Send empty certificate message when scheme selection
    fails.
  * bmo#1652032 - Fix failure to build in Windows arm64 makefile
    cross-compilation.
  * bmo#1625791 - Fix deadlock issue in nssSlot_IsTokenPresent.
  * bmo#1653975 - Fix 3.53 regression by setting "all" as the default
    makefile target.
  * bmo#1659792 - Fix broken libpkix tests with unexpired PayPal cert.
  * bmo#1659814 - Fix interop.sh failures with newer tls-interop
    commit and dependencies.
  * bmo#1656519 - NSPR dependency updated to 4.28
- do not hard require mozilla-nss-certs-32bit via baselibs
  (boo#1176206)

==== openSUSE-build-key ====

- the container keys for openSUSE and SUSE Linux Enterprise are actually
  not the build keys. (bsc#1176818)
- build@suse.de key for SLE12 was extended. (bsc#1176759)

==== rook ====
Version update (1.4.0+git0.g801c5934 -> 1.4.3+git18.g42e1675e)

- fixed spec-file:
  * operator.yaml does not get changed to use the SUSE-images
- helm chart, manifests:
  * fixed tolerations
  * Update SUSE documentation URL in NOTES.txt
- ceph: fix drive group deployment failure (bsc#1176170)
- helm chart, manifests:
  * Add tolerations to cluster & CRDs
  * Require kubeVersion >= 1.11
  * Use rbac.authorization.k8s.io/v1
  * Add affinities for label schema
  * Set Rook log level to DEBUG
  * Remove FlexVolume agent
  * Require currentNamespaceOnly=true
  * Replace NOTES.txt with SUSE specific version
- Include operator and common yamls in manifest package
- Update to v1.4.3
  * The Ceph-CSI driver was being unexpectedly removed by the garbage
    collector in some clusters. For more details to apply a fix during
    the upgrade to this patch release, see these steps. (#616)
  * Add storageClassDeviceSet label to osd pods (#6225)
  * DNS suffix issue for OBCs in custom DNS suffix clusters (#6234)
  * Cleanup mon canary pvc if the failover failed (#6224)
  * Only enable mgr init container if the dashboard is enabled (#6198)
  * cephobjectstore monitoring goroutine must be stopped during
    uninstall (#6208)
  * Remove NParts and Cache_Size from MDCACHE block in the NFS
    configuration (#6207)
  * Purge a down osd with a job created by the admin (#6127)
  * Do not use label selector on external mgr service (#6142)
  * Allow uninstall even if volumes still exist with a new CephCluster
    setting (#6145)
- Update to v1.4.2
  - Patch release focusing on small feature additions and bug fixes.
  * Improve check for LVM on the host to allow installing of OSDs (#6175)
  * Set the OSD prepare resource limits (#6118)
  * Allow memory limits below recommended settings (#6116)
  * Use full DNS suffix for object endpoint with OBCs (#6170)
  * Remove the CSI driver lifecycle preStop hook (#6141)
  * External cluster optional settings for provisioners (#6048)
  * Operator watches nodes that match OSD placement rules (#6156)
  * Allow user to add labels to the cluster daemon pods (#6084 #6082)
  * Fix vulnerability in package golang.org/x/text (#6136)
  * Add expansion support for encrypted osd on pvc (#6126)
  * Do not use realPath for OSDs on PVCs (#6120, @leseb)
  * Example object store manifests updated for consistency (#6123)
  * Separate topology spread constrinats for osd prepare jobs and
    osd daemons (#6103)
  * Pass CSI resources as strings in the helm chart (#6104)
  * Improve callCephVolume() for list and prepare (#6059)
  * Improved multus support for the CSI driver configuration (#5740)
  * Object store healthcheck yaml examples (#6090)
  * Add support for wal encrypted device on pvc (#6062)
  * Updated helm usage in documentation (#6086)
  * More details for RBD Mirroring documentation (#6083)
- Build process changes:
  - Set CSI sidecar versions through _service, and set all versions in
    code through a single patch file
    + csi-images-SUSE.patch
  - csi-dummy-images.patch
  - Use github.com/SUSE/rook and suse-release-1.4 tag in update.sh
  - Create module dependencies through _service, and store these dependencies
    in vendor.tar.gz (replacing rook-[version]-vendor.tar.xz)
  - Modify build commands to include "-mod=vendor" to use new vendor tarball
  - Add CSI sidecars as BuildRequires, in order to determine versions through
    _service process
  - Replace %setup of vendor tarball with a simple tar extraction
  - Move registry detection to %prep, and set correct registry through a
    search and replace on the SUSE_REGISTRY string
  - Use variables to track rook, ceph and cephcsi versions
  - Add '#!BuildTag', and 'appVersion' to chart.yaml
  - Add required versioning to helm chart
  - Leave ceph-csi templates in /etc, and include them in main rook package.
  - csi-template-paths.patch
  - Include only designated yaml examples in rook-k8s-yaml package

==== snapper ====
Version update (0.8.13 -> 0.8.14)
Subpackages: libsnapper5

- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14

==== sysconfig ====
Version update (0.85.5 -> 0.85.6)
Subpackages: sysconfig-netconfig

- version 0.85.6
- netconfig: execute chrony/helper in /usr/libexec with fallback
  to it's previous location in /usr/lib (boo#1176285)
- netconfig: only write files like /etc/resolv.conf on content
  change to avoid that e.g. dnsmasq (if running) re-reads the
  /etc/resolv.conf and re-initializes itself (bsc#1176325)

==== vim ====
Version update (8.2.1551 -> 8.2.1719)
Subpackages: vim-data-common vim-small

- Updated to version 8.2.1719, fixes the following problems
  * Vim9: error for argument type does not mention the number.
  * Warnings from asan with clang-11. (James McCoy)
  * Crash in edit test.
  * Crash in normal test.
  * Not all tests are executed on Github Actions.
  * Cursorline highlighting always overrules sign highlighting.
  * Crash in :vimgrep when started as "vim -n". (Raul Segura)
  * Signs test fails.
  * s390x tests work again.
  * Using NULL pointers in some code. (James McCoy)
  * Using NULL pointers in fold code.
  * Vim9: error when using "%" where a buffer is expected.
  * Vim9: error when using '%" with setbufvar() or getbufvar().
  * A few remaining errors from ubsan.
  * Spellfile test sometimes fails.
  * Not all Bazel files are recognized.
  * No example to use ubsan with clang.
  * prop_find() skips properties in the same line if "skipstart" is used.
  * Vim9: fixes for functions not tested; failure in getchangelist().
  * Configure check for dirfd() does not work on HPUX. (Michael Osipov)
  * Vim9: count() third argument cannot be "true".
  * Vim9: expand() does not take "true" as argument.
  * Vim9: getreg() does not take "true" as argument.
  * Vim9: glob() doesnot take "true" as argument.
  * Vim9: globpath() doesnot take "true" as argument.
  * Vim9: index() does not take "true" as argument.
  * Vim9: hasmapto(), mapcheck() and maparg() do not take "true" as argument.
  * Vim9: popup_clear() does not take "true" as argument.
  * Reports from asan are not optimal.
  * Wildmenu does not work properly.
  * Using line() for global popup window doesn't work.
  * The channel log does not show typed text.
  * Vim9: cannot use "true" for "skipstart" in prop_find().
  * Messages in globals.h not translated, xgettext on MS-Windows not fully
  supported.
  * :resize command not fully tested.
  * Loop for handling keys for the command line is too long.
  * Cannot read back the prompt of a prompt buffer.
  * Term_start() options for size are overruled by 'termwinsize'. (Sergey
  Vlasov)
  * Vim9: bufnr() doesn't take "true" argument.
  * Using winheight('.') in tests works but is wrong.
  * Vim9: passing "true" to char2nr() fails.
  * Tests do not check the error number properly.0
  * Pull requests on github do not notify a maintainer.
  * Cannot easily see what Vim sends to the terminal.
  * Using win_screenpos('.') in tests works but is wrong.
  * The channel source file is too big.
  * Starting a hidden terminal resizes the current window.
  * Missing line end when skipping a long line with :cgetfile.
  * Vim9: cannot use "true" with deepcopy().
  * Vim9: cannot use 'true" with garbagecollect().
  * Vim9: cannot use 'true" with getbufinfo().
  * Vim9: cannot use "true" with getchar().
  * Vim9: cannot use "true" with getcompletion().
  * Vim9: cannot use "true" with has().
  * Vim9: getchar() test fails with GUI.
  * Vim9: test fails when build without +channel.
  * Vim9: cannot pass "true" to list2str() and str2list().
  * Vim9: cannot pass "true" to nr2char().
  * Vim9: cannot pass "true" to prop_remove().
  * Vim9: cannot pass "true" to prop_type_add().
  * Vim9: cannot pass "true" to searchcount().
  * Vim9: cannot pass "true" to searchdecl().
  * Vim9: cannot pass "true" to synID().
  * Vim9: cannot pass "true" to win_splitmove().
  * Vim9: cannot pass "true" to setloclist().
  * Vim9: cannot pass "true" to spellsuggest().
  * searchcount() test fails.
  * Crash when using submatch(0, 1) in substitute().
  * Loop to handle keys for the command line is too long.
  * Vim9: using :call where it is not needed.
  * Vim9: cannot pass "true" to split(), str2nr() and strchars().
  * Compiler warning for use of fptr_T.
  * Test for strchars() fails with different error number.
  * Vim9: cannot pass "true" to submatch(), term_gettty() and term_start()
  * Vim9: cannot pass "true" to timer_paused().
  * Test fails without terminal feature.
  * Terminal test fails.
  * test_fails() does not check the context of the line number.
  * Not checking the context of test_fails().
  * Some error messages are internal but do not use iemsg().
  * Loop to handle keys for the command line is too long.
  * No digraph for 0x2022 BULLET.
  * Get stuck if a popup filter causes an error.
  * Vim9: :put ={expr} does not work inside :def function.
  * Leaking memory when popup filter function can't be called.
  * Options window cannot be translated.
  * Amiga: missing header for getgrgid().
  * Vim9: cannot use 0 or 1 where a bool is expected.
  * Otions test fails.
  * Vim9: :defcompile compiles dead functions.
  * Vim9: cannot assign 1 and 0 to bool at script level.
  * GTK3: icons become broken images when resized.
  * Vim9: result of expression with && and || cannot be assigned to a bool
  variable.
  * Amiga: no common build file for Amiga (-like) systems.
  * GTK3: using old file chooser.
  * Vim9: result of && and || expression cannot be assigned to a bool at
  the script level.
  * Spellfile code not completely tested.
  * Cannot translate lines in the options window.
  * Expand('<stack>') does not include the final line number.
  * When job writes to hidden buffer current window has display errors.
  (Johnny McArthur)
  * Cannot build with Strawberry Perl 5.32.0.
  * Vim9: callstack wrong if :def function calls :def function.
  * Vim9: no proper error for nested ":def!".
  * Expand('<stack>') has trailing "..".
  * Spellfile code not completely tested.
  * Assert functions require passing expected result as the first argument,
  which isn't obvious.
  * Cannot connect to 127.0.0.1 for host with only IPv6 addresses.
  * :mksession does not restore shared terminal buffer properly.
  * Options window entries cannot be translated.
  * Memory leak when using :mkview with a terminal buffer.
  * Cannot do fuzzy string matching.
  * The initial value of 'backupskip' can have duplicate items.
  * Local function name cannot shadow a global function name.
  * Vim9: not accepting 0 or 1 as bool when type is any.
  * Vim9: memory leak when storing a value fails.
  * A couple of gcc compiler warnings.
  * Vim9: stray error for missing white space.
  * v_lock is used when it is not initialized. (Yegappan Lakshmanan)
  * complete_info() selected index has an invalid value. (Ben Jackson)
  * Vim9: internal error when using variable that was not set.
  * MinGW: testdir makefile deletes non-existing file.
  * Compiler warnings for function typecast.
  * Memory access errors when calling setloclist() in an autocommand.
  * Crash when using ":set" after ":ownsyntax". (Dhiraj Mishra)
  * Vim9: ":*" is not recognized as a range.
  * Vim9: line number for compare error is wrong.
  * Vim9: unnessary :call commands in tests.
  * Vim9: const works in an unexpected way.
  * Vim9: assignment test fails.
  * "gF" does not use line number after file in Visual mode.
  * Vim9: cannot declare a constant value.
  * Vim9: "const!" not sufficiently tested.
  * Vim9: out of bounds error.
  * Increment/decrement removes text property.
  * 'colorcolumn' doesn't show in indent.
  * Text properties not adjusted for "I" in Visual block mode.
  * Vim9: list<any> is not accepted where list<number> is expected.
  * Build fails because TTFLAG_STATIC is missing.
  * "hi def" does not work for cleared highlight.
  * Compiler warning for loss if data.
  * Vim9: crash when using varargs type "any".
  * Unused (duplicate) macros.
  * Inconsistent capitalization of error messages.
  * Cannot lock a variable in legacy Vim script like in Vim9.
  * Build failure due to missing error message.
  * Vim9: try/catch causes wrong value to be returned.
  * Vim9: sort("i") does not work.
  * Crash when using undo after deleting folded lines.
  * ":highlight clear" does not restore default link.
  * Vim9: crash in for loop when autoload script has an error.
  * "verbose hi Name" reports incorrect info after ":hi clear".
  * Vim9: crash after running into the "Multiple closures" error.
  * Small inconsitency in highlight test.
  * Vim9: error message for function has unpritable characters.
  * Vim9: memory leak when using multiple closures.
  * Vim9: list of list type can be wrong.
  * Vim9: leaking memory when using partial.
  * Vim9: leaking memory when calling a lambda.
  * Motif GUI: crash when setting menu colors. (Andrzej Bylicki)
  * Text properties corrupted with substitute command. (Filipe Brandenburger)
  * Motif GUI: commented out code missed {}.
  * Options window has duplicate translations.
  * Vim9: :def function disallows "firstline" and "lastline" argument names
  for no good reason.

==== wpa_supplicant ====

- Fix spec file for SLE12, use make %{?_smp_mflags} instead of %make_build
- Enable SAE support(jsc#SLE-14992).

==== xen ====
Version update (4.14.0_06 -> 4.14.0_08)

- bsc#1176339 - VUL-0: CVE-2020-25602: xen: x86 pv: Crash when
  handling guest access to MSR_MISC_ENABLE (XSA-333)
  5f6a05a0-pv-Handle-the-Intel-specific-MSR_MISC_ENABLE-correctly.patch
- bsc#1176341 - VUL-0: CVE-2020-25598: xen: Missing unlock in
  XENMEM_acquire_resource error path (XSA-334)
  5f6a05b7-xen-memory-Dont-skip-the-RCU-unlock-path-in-acquire_resource.patch
- bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating
  timers between x86 HVM vCPU-s (XSA-336)
  5f6a05dd-vpt-fix-race-when-migrating-timers-between-vCPUs.patch
- bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code
  reading back hardware registers (XSA-337)
  5f6a05fa-msi-get-rid-of-read_msi_msg.patch
  5f6a061a-MSI-X-restrict-reading-of-table-PBA-bases-from-BARs.patch
- bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event
  channels may not turn invalid (XSA-338)
  5f6a062c-evtchn-relax-port_is_valid.patch
- bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel
  DoS via SYSENTER (XSA-339)
  5f6a065c-pv-Avoid-double-exception-injection.patch
- bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier
  barriers when accessing/allocating an event channel (XSA-340)
  5f6a0674-xen-evtchn-Add-missing-barriers-when-accessing-allocating-an-event-channel.patch
- bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event
  channels available to 32-bit x86 domains (XSA-342)
  5f6a068e-evtchn-x86-enforce-correct-upper-limit-for-32-bit-guests.patch
- bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with
  evtchn_reset() (XSA-343)
  5f6a06be-evtchn-evtchn_reset-shouldnt-succeed-with-still-open-ports.patch
  5f6a06e0-evtchn-convert-per-channel-lock-to-be-IRQ-safe.patch
  5f6a06f2-evtchn-address-races-with-evtchn_reset.patch
- bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in
  evtchn_reset() / evtchn_destroy() (XSA-344)
  5f6a071f-evtchn-arrange-for-preemption-in-evtchn_destroy.patch
  5f6a0754-evtchn-arrange-for-preemption-in-evtchn_reset.patch
- Upstream bug fix (bsc#1027519)
  5f5b6951-x86-PV-64bit-segbase-consistency.patch
- Fix problems in xen.spec with building on aarch64
- Make use of %service_del_postun_without_restart while preserving
  the old behavior for older distros.
- In %post tools, remove unnecessary qemu symlinks.
- Fix error in xen-tools %post when linking pvgrub64.bin
- Make paths below libexec more explicit
- Create symlink also for pvgrub32.bin

==== yast2 ====
Version update (4.3.27 -> 4.3.29)

- Added "--plain" and "--full" options for the "systemctl"
  calls, these are recommended when processing the output
  by scripts (bsc#1176714)
- 4.3.29
- Decrease error logging to avoid false positives in the y2log
  (bsc#1176653)
- 4.3.28

==== zypper ====
Version update (1.14.38 -> 1.14.39)
Subpackages: zypper-needs-restarting

- Use new testcase API in libzypp.
- BuildRequires:  libzypp-devel >= 17.25.0.
- help: prevent 'whatis' from writing to stderr (bsc#1176712)
- wp: point out that command is aliased to a search command and
  searches case-insensitive (jsc#SLE-16271)
- version 1.14.39