Packages changed:
  apparmor
  cracklib
  less (557 -> 562)
  libksba (1.3.5 -> 1.4.0)
  nano (4.9.2 -> 4.9.3)
  vim
  xen (4.13.0_12 -> 4.13.1_02)
  zstd (1.4.4 -> 1.4.5)

=== Details ===

==== apparmor ====
Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils perl-apparmor python3-apparmor

- add changes-since-2.13.4.diff with upstream changes and fixes
  since 2.13.4 up to 5f61bd4c:
  - add several abstractions related to xdg-open:
    dbus-network-manager-strict, exo-open, gio-open, gvfs-open,
    kde-open5, xdg-open
  - introduce @{run} variable
  - update dnsmasq and winbindd profile
  - update mdns, mesa and nameservice abstraction
  - some bugfixes in the aa-* tools, including a remote bugfix in the
    YaST AppArmor module (boo#1171315)
- drop upstream(ed) patches (now part of changes-since-2.13.4.diff):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-fix-utils-network-test.diff
  - make-4.3-network.diff
  - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
- apply usr-etc-abstractions-base-nameservice.diff only for
  Tumbleweed, but not for Leap 15.x where it's not needed
- refresh usr-etc-abstractions-base-nameservice.diff

==== cracklib ====
Subpackages: cracklib-dict-small libcrack2

- Enable translation-update-upstream on leap, to remove the use of
  is_opensuse (jsc#SLE-12096).
- use /usr/lib instead of %{_libexecdir}, %{_libexecdir} should
  contain internal binaries, not data

==== less ====
Version update (557 -> 562)

- less 562:
  * Update unicode tables
  * formatting changes in man pages

==== libksba ====
Version update (1.3.5 -> 1.4.0)

- libksba 1.4.0:
  * Supports ECDSA and EdDSA certificate creation and parsing.
  * Supports ECDH enveloped data.
  * Supports ECDSA and EdDSA signed data.
  * Supports rsaPSS signature verification.
  * Supports standard file descriptors in ksba_reader_read.
  * Allows for optional elements in keyinfo objects.
  * Fixes error detection in the CMS parser.
  * Fixes memory leak in ksba_cms_identify.
  * New constants KSBA_VERSION and KSBA_VERSION_NUMBER.
  * New API to make creation of DER objects easy.
  * Interface changes relative to the 1.3.5 release:
  KSBA_VERSION                     NEW.
  KSBA_VERSION_NUMBER              NEW.
  KSBA_CT_SPC_IND_DATA_CTX         NEW.
  KSBA_CLASS_*                     NEW.
  KSBA_TYPE_*                      NEW.
  ksba_der_t                       NEW.
  ksba_der_release                 NEW.
  ksba_der_builder_new             NEW.
  ksba_der_builder_reset           NEW.
  ksba_der_add_ptr                 NEW.
  ksba_der_add_val                 NEW.
  ksba_der_add_int                 NEW.
  ksba_der_add_oid                 NEW.
  ksba_der_add_bts                 NEW.
  ksba_der_add_der                 NEW.
  ksba_der_add_tag                 NEW.
  ksba_der_add_end                 NEW.
  ksba_der_builder_get             NEW.

==== nano ====
Version update (4.9.2 -> 4.9.3)

- GNU nano 4.9.3:
  * fix a crash when the terminal screen is resized while at a
    lock-file prompt

==== vim ====
Subpackages: vim-data-common

- apparmor.vim: update from latest AppArmor 2.13 branch:
  - allow alias rules with leading whitespace
  - allow 'include if exists' rules

==== xen ====
Version update (4.13.0_12 -> 4.13.1_02)

- Update to Xen 4.13.1 bug fix release (bsc#1027519)
  xen-4.13.1-testing-src.tar.bz2
  5eb51be6-cpupool-fix-removing-cpu-from-pool.patch
  5eb51caa-sched-vcpu-pause-flags-atomic.patch
  5ec2a760-x86-determine-MXCSR-mask-always.patch
- Drop patches contained in new tarball
  5de65f84-gnttab-map-always-do-IOMMU-part.patch
  5de65fc4-x86-avoid-HPET-use-on-certain-Intel.patch
  5e15e03d-sched-fix-S3-resume-with-smt=0.patch
  5e16fb6a-x86-clear-per-cpu-stub-page-info.patch
  5e1da013-IRQ-u16-is-too-narrow-for-evtchn.patch
  5e1dcedd-Arm-place-speculation-barrier-after-ERET.patch
  5e21ce98-x86-time-update-TSC-stamp-after-deep-C-state.patch
  5e286cce-VT-d-dont-pass-bridges-to-domain_context_mapping_one.patch
  5e318cd4-x86-apic-fix-disabling-LVT0.patch
  5e344c11-x86-HVM-relinquish-resources-from-domain_destroy.patch
  5e3bd385-EFI-recheck-variable-name-strings.patch
  5e3bd3d1-EFI-dont-leak-heap-VIA-XEN_EFI_get_next_variable_name.patch
  5e3bd3f8-xmalloc-guard-against-overflow.patch
  5e46e090-x86-smp-reset-x2apic_enabled-in-smp_send_stop.patch
  5e4c00ef-VT-d-check-full-RMRR-for-E820-reserved.patch
  5e4d4f5b-sched-fix-get_cpu_idle_time-with-core-sched.patch
  5e4e614d-x86-spec-ctrl-no-xen-also-disables-branch-hardening.patch
  5e4ec20e-x86-virtualise-MSR_PLATFORM_ID-properly.patch
  5e5e7188-fix-error-path-in-cpupool_unassign_cpu_start.patch
  5e6f53dd-AMD-IOMMU-fix-off-by-one-get_paging_mode.patch
  5e7a371c-sched-fix-cpu-onlining-with-core-sched.patch
  5e7c90cf-sched-fix-cpu-offlining-with-core-sched.patch
  5e7cfb29-x86-ucode-AMD-fix-assert-in-compare_patch.patch
  5e7cfb29-x86-ucode-fix-error-paths-in-apply_microcode.patch
  5e7dd83b-libx86-CPUID-fix-not-just-leaf-7.patch
  5e7dfbf6-x86-ucode-AMD-potential-buffer-overrun-equiv-tab.patch
  5e846cce-x86-HVM-fix-AMD-ECS-handling-for-Fam10.patch
  5e84905c-x86-ucode-AMD-fix-more-potential-buffer-overruns.patch
  5e86f7b7-credit2-avoid-vCPUs-with-lower-creds-than-idle.patch
  5e86f7fd-credit2-fix-credit-too-few-resets.patch
  5e876b0f-tools-xenstore-fix-use-after-free-in-xenstored.patch
  5e95ad61-xenoprof-clear-buffer-intended-to-be-shared-with-guests.patch
  5e95ad8f-xenoprof-limit-consumption-of-shared-buffer-data.patch
  5e95ae77-Add-missing-memory-barrier-in-the-unlock-path-of-rwlock.patch
  5e95af5e-xen-gnttab-Fix-error-path-in-map_grant_ref.patch
  5e95afb8-gnttab-fix-GNTTABOP_copy-continuation-handling.patch

==== zstd ====
Version update (1.4.4 -> 1.4.5)

- Update to version 1.4.5
  * perf: Improved decompression speed (x64 >+5%, ARM >+15%)
  * perf: Automatically downsizes ZSTD_DCtx when too large for too
  * perf: Improved fast compression speed on aarch64 (#2040, ~+3%)
  * perf: Small level 1 compression speed gains (depending on compiler)
  * fix: Compression ratio regression on huge files (> 3 GB) using high
    levels (--ultra) and multithreading
  * api: ZDICT_finalizeDictionary() is promoted to stable
  * api: new experimental parameter ZSTD_d_stableOutBuffer
  * cli: New --patch-from command, create and apply patches from files
  * cli: --filelist= : Provide a list of files to operate upon from a file
  * cli: -b can now benchmark multiple files in decompression mode
  * cli: New --no-content-size command
  * cli: New --show-default-cparams command
  * misc: new diagnosis tool, checked_flipped_bits, in contrib/
  * misc: Extend largeNbDicts benchmark to compression
  * misc: experimental edit-distance match finder in contrib/