Packages changed:
  busybox-links
  cockpit (230 -> 232)
  containers-systemd (0.0+git20201113.5e435e8 -> 0.0+git20201208.1b4413e)
  fwupd (1.5.2 -> 1.5.3)
  gstreamer (1.18.1 -> 1.18.2)
  gstreamer-plugins-bad (1.18.1 -> 1.18.2)
  gstreamer-plugins-base (1.18.1 -> 1.18.2)
  gstreamer-plugins-good (1.18.1 -> 1.18.2)
  kernel-firmware (20201120 -> 20201130)
  kernel-source (5.9.12 -> 5.9.14)
  libressl (3.2.2 -> 3.2.3)
  libzypp (17.25.2 -> 17.25.5)
  lvm2
  lvm2-device-mapper
  malcontent
  mdadm
  open-lldp (1.1+15.ef8495548d04 -> 1.1+18.0e969d0edcc4)
  openldap2 (2.4.55 -> 2.4.56)
  patterns-gnome (20200416 -> 20201210)
  patterns-microos
  polkit-default-privs (1550+20201119.2c1dce4 -> 1550+20201208.135bf51)
  python-cryptography (3.2.1 -> 3.3)
  python-psutil
  systemd (246.6 -> 246.7)
  tracker (3.0.1 -> 3.0.2)
  tracker-miners (3.0.1 -> 3.0.3)
  u-boot-rpiarm64
  xdm
  zypper (1.14.40 -> 1.14.41)

=== Details ===

==== busybox-links ====
Subpackages: busybox-coreutils busybox-gawk busybox-grep busybox-gzip busybox-psmisc busybox-sed

- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.

==== cockpit ====
Version update (230 -> 232)
Subpackages: cockpit-bridge cockpit-system

- new version 230
  https://cockpit-project.org/blog/cockpit-232.html
  https://cockpit-project.org/blog/cockpit-231.html

==== containers-systemd ====
Version update (0.0+git20201113.5e435e8 -> 0.0+git20201208.1b4413e)

- Update to version 0.0+git20201208.1b4413e:
  * Add support for dovecot
  * Fix description
  * Add support for minidlna container
  * Add LMTP variable

==== fwupd ====
Version update (1.5.2 -> 1.5.3)
Subpackages: libfwupd2 libfwupdplugin1 typelib-1_0-Fwupd-2_0

- Update to version 1.5.3:
  + Lower the CURL version required to fix build in RHEL
  + Do not use meson ternary operations to avoid bumping the
    required meson version
  + Added Lite Mk III
  + Allow setting the GMainContext when used for sync methods
  + Fall back to the misc device for serio devices
  + Actually implement rescan in FuUdevDevice
  + bcm57xx: Refactor CRC code to remove extra byteswap
  + bcm57xx: Fix CRC check
  + synaptics-rmi: Don't crash if calling ->to_string() before
  - >setup()
  + Fix a possible critical warning due to missing retval
  + Add the serio->firmare_id for UDev devices
  + Export the driver name from FuUdevDevice
  + Allow the client to send PKCS7 and GPG signatures
  + Force the remote kind to JCat server-side
  + Only parse the signature if the remote is JCat
  + fu-main: Fix sender_features insert with wrong size
  + make platform integrity plugin optional and disabled by default
  + Add quirk for Western Digital
  + Mark more user-visible strings as translatable
  + modem-manager: validate firmware update method combinations
  + modem-manager: remove unused byte counts in QMI/PDC update logic
  + modem-manager: make sure the correct interface number is used
    for QMI
  + modem-manager: udev monitoring only if device switches layout
  + modem-manager: plug udev client leak
  + Restrict loading component types of firmware
- Enable supported_build to clarify that this package is supported
  (bsc#1179790)
- Drop fwupd-platform-integrity.conf since upstream disables the
  platform integrity module by default now due to incompleteness.
- Address fwupd-refresh.service in %preun, %pre, %post, and %postun
  and provide a rc link for it
- Version "Obsoletes: dbxtool" and "Obsoletes: fwupdate"

==== gstreamer ====
Version update (1.18.1 -> 1.18.2)
Subpackages: libgstreamer-1_0-0

- Update to version 1.18.2:
  + Highlighted bugfixes:
  - Fix MPEG-TS timestamping regression when playing DVB streams
  - compositor: fix artefacts in certain input scaling/conversion
    situations and make sure that the output format is actually
    supported, plus renegotiation fixes
  - Fix sftp:// URI playback in decodebin/playbin via giosrc
  - adaptivedemux/dashdemux/hlsdemux fixes
  - rtsp-server fixes
  - android media: fix crash when encoding AVC
  - fix races in various unit tests
  - lots of other bug fixes and memory leak fixes
  - various stability, performance and reliability improvements
  - g-i annotation fixes
  - build fixes
  + gstreamer changes:
  - bin: When removing a sink, check if the EOS status changed
  - info: colorize PIDs in log messages
  - aggregator: Include min-upstream-latency in buffering time,
    helps especially with performance issues on single core
    systems where there are a lot of threads running
  - typefind: copy seqnum to new segment event, fixing issues
    with oggdemux operating in push mode with typefind operating
    in pull mode
  - identity, clocksync: Also provide system clock if sync=false
  - queue2: Fix modes in scheduling query handling
  - harness: Handle element not being set cleanly
  - g-i: Add some missing nullable annotations, and fix some
    nullable annotations:
  - gst_test_clock_process_next_clock_id() returns nullable
  - gst_stream_type_get_name() is not nullable
  - build: fix build issue when compiling for 32-bit
    architectures with 64-bit time_t (e.g. riscv32) by increasing
    padding in GstClockEntryImpl in gst_private.h
- Fix the _service file and spec to really use the tarball
  generated by service.

==== gstreamer-plugins-bad ====
Version update (1.18.1 -> 1.18.2)
Subpackages: libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstsctp-1_0-0 libgsturidownloader-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0

- Update to version 1.18.2:
  + tsparse: timestamp packetized buffers, fixing timestamp
    handling regression in connection with dvbsrc in MeTV
  + ttmlparse: fix issues in aggregation of input TTML
  + mpegdemux: Set duration on seeking query if possible, fixes
    seeking in MPEG-PS streams in gst-play-1.0
  + mpegtsdemux: Fix off by one error
  + adaptivedemux:
  - Store QoS values on the element
  - Don't calculate bitrate for header/index fragments
  + hlsdemux: Don't double-free variant streams on errors
  + mpegtspacketizer: Handle PCR issues with adaptive streams
  + player: call ref_sink on pipeline
  + vkdeviceprovider: Avoid deadlock on physical device
  + wlvideoformat: fix DMA format convertor
  + Webrtc shutdown crashes
  + decklink:
  - Update enum value bounds check in gst_decklink_get_mode()
  - Correct framerate 2KDCI 23.98
  + amc: Fix crash when encoding AVC
  + d3d11videoprocessor: Fix wrong input/output supportability
    check
  + opencv: allow compilation against 4.5.x
  + tests: svthevcenc: Fix test_encode_simple
  + tests: dtls: Don't set dtlsenc state before linking
  + mpegtsmux: Restore intervals when creating TsMux
  + adaptivedemux, hlsdemux, curl: Use actual object for logging
  + gi: player: Fix get_current_subtitle_track() annotation
- Fix the _service file and spec to really use the tarball
  generated by service.

==== gstreamer-plugins-base ====
Version update (1.18.1 -> 1.18.2)
Subpackages: libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0

- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg->info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.

==== gstreamer-plugins-good ====
Version update (1.18.1 -> 1.18.2)

- Update to version 1.18.2:
  + rpicamsrc: add vchostif library as it is required to build
    successful
  + deinterlace: Enable x86 assembly with nasm on MSVC
  + v4l2: caps negotiate wrong as interlace feature
  + aacparse: Fix caps change handling
  + rtspsrc: Use URI hash for stream id
  + flvmux: Release pads via GstAggregator
  + qtmux: Chain up when releasing pad, and fix some locking
  + matroska-mux: Fix sparse stream crash
  + Splitmux testsuite races
- Fix the _service file and spec to really use the tarball
  generated by service.

==== kernel-firmware ====
Version update (20201120 -> 20201130)
Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network

- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018

==== kernel-source ====
Version update (5.9.12 -> 5.9.14)

- drm/i915/gt: Declare gen9 has 64 mocs entries! (git-fixes).
- commit c648a46
- Linux 5.9.14 (bsc#1012628).
- usb: gadget: f_fs: Use local copy of descriptors for userspace
  copy (bsc#1012628).
- USB: serial: kl5kusb105: fix memleak on open (bsc#1012628).
- USB: serial: ch341: add new Product ID for CH341A (bsc#1012628).
- USB: serial: ch341: sort device-id entries (bsc#1012628).
- USB: serial: option: add Fibocom NL668 variants (bsc#1012628).
- USB: serial: option: add support for Thales Cinterion EXS82
  (bsc#1012628).
- USB: serial: option: fix Quectel BG96 matching (bsc#1012628).
- speakup: Reject setting the speakup line discipline outside
  of speakup (bsc#1012628).
- ALSA: hda/realtek: Fix bass speaker DAC assignment on Asus
  Zephyrus G14 (bsc#1012628).
- ALSA: hda/realtek: Add mute LED quirk to yet another HP x360
  model (bsc#1012628).
- ALSA: hda/realtek: Enable headset of ASUS UX482EG & B9400CEA
  with ALC294 (bsc#1012628).
- ALSA: hda/realtek - Add new codec supported for ALC897
  (bsc#1012628).
- ALSA: hda/realtek - Fixed Dell AIO wrong sound tone
  (bsc#1012628).
- ALSA: hda/generic: Add option to enforce preferred_dacs pairs
  (bsc#1012628).
- ring-buffer: Update write stamp with the correct ts
  (bsc#1012628).
- ring-buffer: Set the right timestamp in the slow path of
  __rb_reserve_next() (bsc#1012628).
- ring-buffer: Always check to put back before stamp when crossing
  pages (bsc#1012628).
- ftrace: Fix updating FTRACE_FL_TRAMP (bsc#1012628).
- ftrace: Fix DYNAMIC_FTRACE_WITH_DIRECT_CALLS dependency
  (bsc#1012628).
- cifs: allow syscalls to be restarted in __smb_send_rqst()
  (bsc#1012628).
- cifs: fix potential use-after-free in cifs_echo_request()
  (bsc#1012628).
- cifs: refactor create_sd_buf() and and avoid corrupting the
  buffer (bsc#1012628).
- cifs: add NULL check for ses->tcon_ipc (bsc#1012628).
- gfs2: Upgrade shared glocks for atime updates (bsc#1012628).
- gfs2: Fix deadlock between gfs2_{create_inode,inode_lookup}
  and delete_work_func (bsc#1012628).
- s390/pci: fix CPU address in MSI for directed IRQ (bsc#1012628).
- i2c: imx: Fix reset of I2SR_IAL flag (bsc#1012628).
- i2c: imx: Check for I2SR_IAL after every byte (bsc#1012628).
- i2c: imx: Don't generate STOP condition if arbitration has
  been lost (bsc#1012628).
- tracing: Fix userstacktrace option for instances (bsc#1012628).
- thunderbolt: Fix use-after-free in remove_unplugged_switch()
  (bsc#1012628).
- drm/omap: sdi: fix bridge enable/disable (bsc#1012628).
- drm/amdgpu/vcn3.0: stall DPG when WPTR/RPTR reset (bsc#1012628).
- drm/amdgpu/vcn3.0: remove old DPG workaround (bsc#1012628).
- drm/i915/gt: Retain default context state across shrinking
  (bsc#1012628).
- drm/i915/gt: Limit frequency drop to RPe on parking
  (bsc#1012628).
- drm/i915/gt: Program mocs:63 for cache eviction on gen9
  (bsc#1012628).
- KVM: PPC: Book3S HV: XIVE: Fix vCPU id sanity check
  (bsc#1012628).
- scsi: mpt3sas: Fix ioctl timeout (bsc#1012628).
- io_uring: fix recvmsg setup with compat buf-select
  (bsc#1012628).
- dm writecache: advance the number of arguments when reporting
  max_age (bsc#1012628).
- dm writecache: fix the maximum number of arguments
  (bsc#1012628).
- powerpc/64s/powernv: Fix memory corruption when saving SLB
  entries on MCE (bsc#1012628).
- genirq/irqdomain: Add an irq_create_mapping_affinity() function
  (bsc#1012628).
- powerpc/pseries: Pass MSI affinity to irq_create_mapping()
  (bsc#1012628).
- dm: fix bug with RCU locking in dm_blk_report_zones
  (bsc#1012628).
- dm: fix double RCU unlock in dm_dax_zero_page_range() error path
  (bsc#1012628).
- dm: remove invalid sparse __acquires and __releases annotations
  (bsc#1012628).
- x86/uprobes: Do not use prefixes.nbytes when looping over
  prefixes.bytes (bsc#1012628).
- coredump: fix core_pattern parse error (bsc#1012628).
- mm: list_lru: set shrinker map bit when child nr_items is not
  zero (bsc#1012628).
- mm/swapfile: do not sleep with a spin lock held (bsc#1012628).
- hugetlb_cgroup: fix offline of hugetlb cgroup with reservations
  (bsc#1012628).
- Revert "amd/amdgpu: Disable VCN DPG mode for Picasso"
  (bsc#1012628).
- iommu/amd: Set DTE[IntTabLen] to represent 512 IRTEs
  (bsc#1012628).
- mm: memcg/slab: fix obj_cgroup_charge() return value handling
  (bsc#1012628).
- lib/syscall: fix syscall registers retrieval on 32-bit platforms
  (bsc#1012628).
- can: af_can: can_rx_unregister(): remove WARN() statement from
  list operation sanity check (bsc#1012628).
- gfs2: check for empty rgrp tree in gfs2_ri_update (bsc#1012628).
- netfilter: ipset: prevent uninit-value in hash_ip6_add
  (bsc#1012628).
- ASoC: wm_adsp: fix error return code in wm_adsp_load()
  (bsc#1012628).
- gfs2: Fix deadlock dumping resource group glocks (bsc#1012628).
- gfs2: Don't freeze the file system during unmount (bsc#1012628).
- rtw88: debug: Fix uninitialized memory in debugfs code
  (bsc#1012628).
- i2c: qcom: Fix IRQ error misassignement (bsc#1012628).
- i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc()
  (bsc#1012628).
- dm writecache: remove BUG() and fail gracefully instead
  (bsc#1012628).
- Input: i8042 - fix error return code in i8042_setup_aux()
  (bsc#1012628).
- netfilter: nf_tables: avoid false-postive lockdep splat
  (bsc#1012628).
- netfilter: nftables_offload: set address type in control
  dissector (bsc#1012628).
- netfilter: nftables_offload: build mask based from the matching
  bytes (bsc#1012628).
- x86/insn-eval: Use new for_each_insn_prefix() macro to loop
  over prefixes bytes (bsc#1012628).
- Revert "geneve: pull IP header before ECN decapsulation"
  (bsc#1012628).
- bpf: Fix propagation of 32-bit signed bounds from 64-bit bounds
  (bsc#1012628).
- commit 960bcea
- Update patches.suse/tty-Fix-pgrp-locking-in-tiocspgrp.patch
  (bsc#1179745 CVE-2020-29661).
- Update patches.suse/tty-Fix-session-locking.patch (bsc#1179745
  CVE-2020-29660).
  Add CVE numbers.
- commit 1329f77
- Update config files to disable CONFIG_DEBUG_SECTION_MISMATCH (bsc#1177403)
- commit a0a476d
- Linux 5.9.13 (bsc#1012628).
- devlink: Hold rtnl lock while reading netdev attributes
  (bsc#1012628).
- devlink: Make sure devlink instance and port are in same net
  namespace (bsc#1012628).
- ipv6: addrlabel: fix possible memory leak in ip6addrlbl_net_init
  (bsc#1012628).
- net/af_iucv: set correct sk_protocol for child sockets
  (bsc#1012628).
- net: openvswitch: fix TTL decrement action netlink message
  format (bsc#1012628).
- net/tls: missing received data after fast remote close
  (bsc#1012628).
- net/tls: Protect from calling tls_dev_del for TLS RX twice
  (bsc#1012628).
- rose: Fix Null pointer dereference in rose_send_frame()
  (bsc#1012628).
- sock: set sk_err to ee_errno on dequeue from errq (bsc#1012628).
- tcp: Set INET_ECN_xmit configuration in
  tcp_reinit_congestion_control (bsc#1012628).
- tun: honor IOCB_NOWAIT flag (bsc#1012628).
- usbnet: ipheth: fix connectivity with iOS 14 (bsc#1012628).
- vsock/virtio: discard packets only when socket is really closed
  (bsc#1012628).
- mptcp: fix NULL ptr dereference on bad MPJ (bsc#1012628).
- net/packet: fix packet receive on L3 devices without visible
  hard header (bsc#1012628).
- netfilter: bridge: reset skb->pkt_type after
  NF_INET_POST_ROUTING traversal (bsc#1012628).
- ipv4: Fix tos mask in inet_rtm_getroute() (bsc#1012628).
- dt-bindings: net: correct interrupt flags in examples
  (bsc#1012628).
- chelsio/chtls: fix panic during unload reload chtls
  (bsc#1012628).
- ibmvnic: Ensure that SCRQ entry reads are correctly ordered
  (bsc#1012628).
- ibmvnic: Fix TX completion error handling (bsc#1012628).
- tipc: fix incompatible mtu of transmission (bsc#1012628).
- inet_ecn: Fix endianness of checksum update when setting ECT(1)
  (bsc#1012628).
- geneve: pull IP header before ECN decapsulation (bsc#1012628).
- net: ip6_gre: set dev->hard_header_len when using header_ops
  (bsc#1012628).
- dpaa_eth: copy timestamp fields to new skb in A-050385
  workaround (bsc#1012628).
- cxgb3: fix error return code in t3_sge_alloc_qset()
  (bsc#1012628).
- net: pasemi: fix error return code in pasemi_mac_open()
  (bsc#1012628).
- vxlan: fix error return code in __vxlan_dev_create()
  (bsc#1012628).
- chelsio/chtls: fix a double free in chtls_setkey()
  (bsc#1012628).
- net: mvpp2: Fix error return code in mvpp2_open() (bsc#1012628).
- net: skbuff: ensure LSE is pullable before decrementing the
  MPLS ttl (bsc#1012628).
- net: openvswitch: ensure LSE is pullable before reading it
  (bsc#1012628).
- net/sched: act_mpls: ensure LSE is pullable before reading it
  (bsc#1012628).
- net/mlx5: DR, Proper handling of unsupported Connect-X6DX SW
  steering (bsc#1012628).
- net/mlx5: Fix wrong address reclaim when command interface is
  down (bsc#1012628).
- net: mlx5e: fix fs_tcp.c build when IPV6 is not enabled
  (bsc#1012628).
- ALSA: usb-audio: US16x08: fix value count for level meters
  (bsc#1012628).
- Input: xpad - support Ardwiino Controllers (bsc#1012628).
- Input: i8042 - add ByteSpeed touchpad to noloop table
  (bsc#1012628).
- Input: atmel_mxt_ts - fix lost interrupts (bsc#1012628).
- tracing: Fix alignment of static buffer (bsc#1012628).
- tracing: Remove WARN_ON in start_thread() (bsc#1012628).
- uapi: fix statx attribute value overlap for DAX & MOUNT_ROOT
  (bsc#1012628).
- drm/i915/gt: Fixup tgl mocs for PTE tracking (bsc#1012628).
- commit 3dfd18b
- tty: Fix ->session locking (bsc#1179745).
- tty: Fix ->pgrp locking in tiocspgrp() (bsc#1179745).
- commit 9455f8b
- net/x25: prevent a couple of overflows (bsc#1178590).
- commit 2a06597

==== libressl ====
Version update (3.2.2 -> 3.2.3)
Subpackages: libcrypto46 libssl48 libtls20

- Update to release 3.2.3
  * Fixed: Malformed ASN.1 in a certificate revocation list or a
    timestamp response token could lead to a NULL pointer
    dereference.

==== libzypp ====
Version update (17.25.2 -> 17.25.5)

- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)
- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)
- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)

==== lvm2 ====
Subpackages: liblvm2cmd2_03

- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names
- Update lvm.conf, make it closely to upstream's setting (bsc#1179739)
  - change lvm.conf, follow upstream 7b41ea61b2e33dbfad754fd4c6e7851faf7ca5ef

==== lvm2-device-mapper ====
Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03

- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names
- Update lvm.conf, make it closely to upstream's setting (bsc#1179739)
  - change lvm.conf, follow upstream 7b41ea61b2e33dbfad754fd4c6e7851faf7ca5ef

==== malcontent ====
Subpackages: libmalcontent-0-0 typelib-1_0-Malcontent-0

- Split MalcontentControl into seperate package so a library
  doesn't require a desktop application.

==== mdadm ====

- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch

==== open-lldp ====
Version update (1.1+15.ef8495548d04 -> 1.1+18.0e969d0edcc4)
Subpackages: liblldp_clif1

- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)

==== openldap2 ====
Version update (2.4.55 -> 2.4.56)

- updated to 2.4.56
  OpenLDAP 2.4.56 Release (2020/11/10)
  Fixed slapd to remove assert in certificateListValidate (ITS#9383)
  Fixed slapd to remove assert in csnNormalize23 (ITS#9384)
  Fixed slapd to better parse ldapi listener URIs (ITS#9379)

==== patterns-gnome ====
Version update (20200416 -> 20201210)
Subpackages: patterns-gnome-gnome_basic patterns-gnome-gnome_basis

- Add malcontent-control recommendation to the base pattern

==== patterns-microos ====
Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-basesystem patterns-microos-cloud patterns-microos-cockpit patterns-microos-defaults patterns-microos-desktop-gnome patterns-microos-desktop-kde patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-selinux patterns-microos-sssd_ldap

- Ensure gnome-session-wayland is pulled by GNOME desktop pattern.
- Add desktop-common pattern for packages common to GNOME and KDE
  patterns
- Some small cleanups, also because of the source formatter...
- Use proper icons for desktop patterns
- Switch the KDE pattern from plasma5-pk-updates to discover-notifier
  and add plasma-browser-integration

==== polkit-default-privs ====
Version update (1550+20201119.2c1dce4 -> 1550+20201208.135bf51)

- Update to version 1550+20201208.135bf51:
  * libvirt: allow the active session to create read-only connections (bsc#1179126)
  * profiles: cleanup outdates keep_always entries

==== python-cryptography ====
Version update (3.2.1 -> 3.3)

- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.
- Remove unnecessary dependency virtualenv.

==== python-psutil ====

- Only require unittest2 for Leap.
- Add missing BR for unittest2

==== systemd ====
Version update (246.6 -> 246.7)
Subpackages: libsystemd0 libudev1 systemd-logger systemd-sysvinit udev

- Import commit d5e7958d35dc7758fe2e87e0a8193b93ce1a1b15 (merge of v246.7)
  450792497e sd-event: fix delays assert brain-o (#17790)
  1040a19d08 udevadm: rename option '--log-priority' into '--log-level'
  a7b41e19bd udev: rename kernel option 'log_priority' into 'log_level'
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/f6104ea5f554233e34b94ffd92da8332c3bd7d8f...d5e7958d35dc7758fe2e87e0a8193b93ce1a1b15

==== tracker ====
Version update (3.0.1 -> 3.0.2)
Subpackages: libtracker-sparql-3_0-0 tracker-data-files

- Update to version 3.0.2:
  + Update some wording in website
  + Fix initialization issues in portal
  + Improve turtle parser
  + Improve checks for dates in the far past/future
  + Cleanup meson build options
  + Fix invalid reads
  + Make UPDATE parser tree processing iterative rather than
    recursive
  + Fix errors in tracker:uri-is-parent
  + Protect harder against invalid database state
  + Introspection annotation fixes
  + Improve thread safety of internal ontology objects
  + Add missing <package> element to gir file.

==== tracker-miners ====
Version update (3.0.1 -> 3.0.3)
Subpackages: tracker-miner-files

- Update to version 3.0.3:
  + Allow newstatat/statat64 syscalls
  + Brown paper bag release
- Changes from version 3.0.2:
  + Fix sched test under non glibc platforms
  + Refcount fixes
  + Avoid the fluiddec gstreamer plugin
  + Ensure to avoid non-native files in tracker-extract-3
  + CI fixes
  + Updated translations.

==== u-boot-rpiarm64 ====
Subpackages: u-boot-rpiarm64-doc

- Add bananapim2zero flavor
- Introduce odroid-c4

==== xdm ====

- fixed %postun for older releases than factory/TW (see change
  right below, which broke it)

==== zypper ====
Version update (1.14.40 -> 1.14.41)
Subpackages: zypper-needs-restarting

- Avoid translated text in xml attributes ( fixes #361 )
- BuildRequires:  libzypp-devel >= 17.25.3.
  Adapt to new LoadTestcase API.
- version 1.14.41