Packages changed:
  kernel-source (4.14.8 -> 4.14.9)
  libsodium
  systemd-presets-branding-openSUSE
  xfce4-branding-openSUSE
  xfce4-panel-plugin-whiskermenu (2.1.4 -> 2.1.5)
  xfce4-session

=== Details ===

==== kernel-source ====
Version update (4.14.8 -> 4.14.9)
Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms

- Linux 4.14.9 (bnc#1012628).
- x86/asm: Remove unnecessary \n\t in front of CC_SET() from
  asm templates (bnc#1012628).
- ACPI / APEI: adjust a local variable type in
  ghes_ioremap_pfn_irq() (bnc#1012628).
- x86/fpu/debug: Remove unused 'x86_fpu_state' and
  'x86_fpu_deactivate_state' tracepoints (bnc#1012628).
- bitops: Add clear/set_bit32() to linux/bitops.h (bnc#1012628).
- x86/cpuid: Add generic table for CPUID dependencies
  (bnc#1012628).
- x86/fpu: Parse clearcpuid= as early XSAVE argument
  (bnc#1012628).
- x86/fpu: Make XSAVE check the base CPUID features before
  enabling (bnc#1012628).
- x86/fpu: Remove the explicit clearing of XSAVE dependent
  features (bnc#1012628).
- x86/platform/UV: Convert timers to use timer_setup()
  (bnc#1012628).
- x86/cpuid: Prevent out of bound access in do_clear_cpu_cap()
  (bnc#1012628).
- mm/sparsemem: Allocate mem_section at runtime for
  CONFIG_SPARSEMEM_EXTREME=y (bnc#1012628).
- x86/kasan: Use the same shadow offset for 4- and 5-level paging
  (bnc#1012628).
- x86/xen: Provide pre-built page tables only for CONFIG_XEN_PV=y
  and CONFIG_XEN_PVH=y (bnc#1012628).
- x86/xen: Drop 5-level paging support code from the XEN_PV code
  (bnc#1012628).
- ACPI / APEI: remove the unused dead-code for SEA/NMI
  notification type (bnc#1012628).
- x86/asm: Don't use the confusing '.ifeq' directive
  (bnc#1012628).
- x86/build: Beautify build log of syscall headers (bnc#1012628).
- x86/mm/64: Rename the register_page_bootmem_memmap() 'size'
  parameter to 'nr_pages' (bnc#1012628).
- x86/cpufeatures: Enable new SSE/AVX/AVX512 CPU features
  (bnc#1012628).
- x86/mm: Relocate page fault error codes to traps.h
  (bnc#1012628).
- x86/boot: Relocate definition of the initial state of CR0
  (bnc#1012628).
- ptrace,x86: Make user_64bit_mode() available to 32-bit builds
  (bnc#1012628).
- x86/entry/64: Remove the restore_c_regs_and_iret label
  (bnc#1012628).
- x86/entry/64: Split the IRET-to-user and IRET-to-kernel paths
  (bnc#1012628).
- x86/entry/64: Move SWAPGS into the common IRET-to-usermode path
  (bnc#1012628).
- x86/entry/64: Simplify reg restore code in the standard IRET
  paths (bnc#1012628).
- x86/entry/64: Shrink paranoid_exit_restore and make labels local
  (bnc#1012628).
- x86/entry/64: Use pop instead of movq in
  syscall_return_via_sysret (bnc#1012628).
- x86/entry/64: Merge the fast and slow SYSRET paths
  (bnc#1012628).
- x86/entry/64: Use POP instead of MOV to restore regs on NMI
  return (bnc#1012628).
- x86/entry/64: Remove the RESTORE_..._REGS infrastructure
  (bnc#1012628).
- xen, x86/entry/64: Add xen NMI trap entry (bnc#1012628).
- x86/entry/64: De-Xen-ify our NMI code (bnc#1012628).
- x86/entry/32: Pull the MSR_IA32_SYSENTER_CS update code out
  of native_load_sp0() (bnc#1012628).
- x86/entry/64: Pass SP0 directly to load_sp0() (bnc#1012628).
- x86/entry: Add task_top_of_stack() to find the top of a task's
  stack (bnc#1012628).
- x86/xen/64, x86/entry/64: Clean up SP code in
  cpu_initialize_context() (bnc#1012628).
- x86/entry/64: Stop initializing TSS.sp0 at boot (bnc#1012628).
- x86/entry/64: Remove all remaining direct thread_struct::sp0
  reads (bnc#1012628).
- x86/entry/32: Fix cpu_current_top_of_stack initialization at
  boot (bnc#1012628).
- x86/entry/64: Remove thread_struct::sp0 (bnc#1012628).
- x86/traps: Use a new on_thread_stack() helper to clean up an
  assertion (bnc#1012628).
- x86/entry/64: Shorten TEST instructions (bnc#1012628).
- x86/cpuid: Replace set/clear_bit32() (bnc#1012628).
- bitops: Revert cbe96375025e ("bitops: Add clear/set_bit32()
  to linux/bitops.h") (bnc#1012628).
- x86/mm: Define _PAGE_TABLE using _KERNPG_TABLE (bnc#1012628).
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions
  (bnc#1012628).
- x86/cpufeatures: Fix various details in the feature definitions
  (bnc#1012628).
- selftests/x86/ldt_gdt: Add infrastructure to test
  set_thread_area() (bnc#1012628).
- selftests/x86/ldt_gdt: Run most existing LDT test cases against
  the GDT as well (bnc#1012628).
- ACPI / APEI: Replace ioremap_page_range() with fixmap
  (bnc#1012628).
- x86/virt, x86/platform: Merge 'struct x86_hyper' into 'struct
  x86_platform' and 'struct x86_init' (bnc#1012628).
- x86/virt: Add enum for hypervisors to replace x86_hyper
  (bnc#1012628).
- drivers/misc/intel/pti: Rename the header file to free up the
  namespace (bnc#1012628).
- x86/cpufeature: Add User-Mode Instruction Prevention definitions
  (bnc#1012628).
- x86: Make X86_BUG_FXSAVE_LEAK detectable in CPUID on AMD
  (bnc#1012628).
- perf/x86: Enable free running PEBS for REGS_USER/INTR
  (bnc#1012628).
- bpf: fix build issues on um due to mising bpf_perf_event.h
  (bnc#1012628).
- locking/barriers: Add implicit smp_read_barrier_depends()
  to READ_ONCE() (bnc#1012628).
- locking/barriers: Convert users of lockless_dereference()
  to READ_ONCE() (bnc#1012628).
- x86/mm/kasan: Don't use vmemmap_populate() to initialize shadow
  (bnc#1012628).
- x86/entry/64/paravirt: Use paravirt-safe macro to access eflags
  (bnc#1012628).
- x86/unwinder/orc: Dont bail on stack overflow (bnc#1012628).
- x86/unwinder: Handle stack overflows more gracefully
  (bnc#1012628).
- x86/irq: Remove an old outdated comment about context tracking
  races (bnc#1012628).
- x86/irq/64: Print the offending IP in the stack overflow warning
  (bnc#1012628).
- x86/entry/64: Allocate and enable the SYSENTER stack
  (bnc#1012628).
- x86/dumpstack: Add get_stack_info() support for the SYSENTER
  stack (bnc#1012628).
- x86/entry/gdt: Put per-CPU GDT remaps in ascending order
  (bnc#1012628).
- x86/mm/fixmap: Generalize the GDT fixmap mechanism, introduce
  struct cpu_entry_area (bnc#1012628).
- x86/kasan/64: Teach KASAN about the cpu_entry_area
  (bnc#1012628).
- x86/entry: Fix assumptions that the HW TSS is at the beginning
  of cpu_tss (bnc#1012628).
- x86/dumpstack: Handle stack overflow on all stacks
  (bnc#1012628).
- x86/entry: Move SYSENTER_stack to the beginning of struct
  tss_struct (bnc#1012628).
- x86/entry: Remap the TSS into the CPU entry area (bnc#1012628).
- x86/entry/64: Separate cpu_current_top_of_stack from TSS.sp0
  (bnc#1012628).
- x86/espfix/64: Stop assuming that pt_regs is on the entry stack
  (bnc#1012628).
- x86/entry/64: Use a per-CPU trampoline stack for IDT entries
  (bnc#1012628).
- x86/entry/64: Return to userspace from the trampoline stack
  (bnc#1012628).
- x86/entry/64: Create a per-CPU SYSCALL entry trampoline
  (bnc#1012628).
- x86/entry/64: Move the IST stacks into struct cpu_entry_area
  (bnc#1012628).
- x86/entry/64: Remove the SYSENTER stack canary (bnc#1012628).
- x86/entry: Clean up the SYSENTER_stack code (bnc#1012628).
- x86/entry/64: Make cpu_entry_area.tss read-only (bnc#1012628).
- x86/paravirt: Dont patch flush_tlb_single (bnc#1012628).
- x86/paravirt: Provide a way to check for hypervisors
  (bnc#1012628).
- x86/cpufeatures: Make CPU bugs sticky (bnc#1012628).
- optee: fix invalid of_node_put() in optee_driver_init()
  (bnc#1012628).
- backlight: pwm_bl: Fix overflow condition (bnc#1012628).
- drm: Add retries for lspcon mode detection (bnc#1012628).
- clk: sunxi-ng: nm: Check if requested rate is supported by
  fractional clock (bnc#1012628).
- clk: sunxi-ng: sun5i: Fix bit offset of audio PLL post-divider
  (bnc#1012628).
- crypto: crypto4xx - increase context and scatter ring buffer
  elements (bnc#1012628).
- crypto: lrw - Fix an error handling path in 'create()'
  (bnc#1012628).
- rtc: pl031: make interrupt optional (bnc#1012628).
- kvm, mm: account kvm related kmem slabs to kmemcg (bnc#1012628).
- net: phy: at803x: Change error to EINVAL for invalid MAC
  (bnc#1012628).
- PCI: Avoid bus reset if bridge itself is broken (bnc#1012628).
- scsi: cxgb4i: fix Tx skb leak (bnc#1012628).
- scsi: mpt3sas: Fix IO error occurs on pulling out a drive from
  RAID1 volume created on two SATA drive (bnc#1012628).
- PCI: Create SR-IOV virtfn/physfn links before attaching driver
  (bnc#1012628).
- PM / OPP: Move error message to debug level (bnc#1012628).
- igb: check memory allocation failure (bnc#1012628).
- i40e: use the safe hash table iterator when deleting mac filters
  (bnc#1012628).
- iio: st_sensors: add register mask for status register
  (bnc#1012628).
- ixgbe: fix use of uninitialized padding (bnc#1012628).
- IB/rxe: check for allocation failure on elem (bnc#1012628).
- block,bfq: Disable writeback throttling (bnc#1012628).
- md: always set THREAD_WAKEUP and wake up wqueue if thread
  existed (bnc#1012628).
- ip_gre: check packet length and mtu correctly in erspan tx
  (bnc#1012628).
- ipv6: grab rt->rt6i_ref before allocating pcpu rt (bnc#1012628).
- leds: pca955x: Don't invert requested value in
  pca955x_gpio_set_value() (bnc#1012628).
- Bluetooth: hci_uart_set_flow_control: Fix NULL deref when
  using serdev (bnc#1012628).
- Bluetooth: hci_bcm: Fix setting of irq trigger type
  (bnc#1012628).
- i40e/i40evf: spread CPU affinity hints across online CPUs only
  (bnc#1012628).
- PCI/AER: Report non-fatal errors only to the affected endpoint
  (bnc#1012628).
- tracing: Exclude 'generic fields' from histograms (bnc#1012628).
- ASoC: codecs: msm8916-wcd-analog: fix micbias level
  (bnc#1012628).
- ASoC: img-parallel-out: Add pm_runtime_get/put to set_fmt
  callback (bnc#1012628).
- powerpc/xmon: Avoid tripping SMP hardlockup watchdog
  (bnc#1012628).
- powerpc/watchdog: Do not trigger SMP crash from
  touch_nmi_watchdog (bnc#1012628).
- sctp: silence warns on sctp_stream_init allocations
  (bnc#1012628).
- ASoC: codecs: msm8916-wcd-analog: fix module autoload
  (bnc#1012628).
- fm10k: fix mis-ordered parameters in declaration for
  .ndo_set_vf_bw (bnc#1012628).
- scsi: lpfc: Fix secure firmware updates (bnc#1012628).
- scsi: lpfc: PLOGI failures during NPIV testing (bnc#1012628).
- scsi: lpfc: Fix warning messages when NVME_TARGET_FC not defined
  (bnc#1012628).
- i40e: fix client notify of VF reset (bnc#1012628).
- vfio/pci: Virtualize Maximum Payload Size (bnc#1012628).
- ARM: exynos_defconfig: Enable UAS support for Odroid HC1 board
  (bnc#1012628).
- fm10k: ensure we process SM mbx when processing VF mbx
  (bnc#1012628).
- ibmvnic: Set state UP (bnc#1012628).
- net: ipv6: send NS for DAD when link operationally up
  (bnc#1012628).
- RDMA/hns: Avoid NULL pointer exception (bnc#1012628).
- staging: greybus: light: Release memory obtained by kasprintf
  (bnc#1012628).
- clk: sunxi-ng: sun6i: Rename HDMI DDC clock to avoid name
  collision (bnc#1012628).
- tcp: fix under-evaluated ssthresh in TCP Vegas (bnc#1012628).
- rtc: set the alarm to the next expiring timer (bnc#1012628).
- cpuidle: fix broadcast control when broadcast can not be entered
  (bnc#1012628).
- drm/vc4: Avoid using vrefresh==0 mode in DSI htotal math
  (bnc#1012628).
- IB/opa_vnic: Properly clear Mac Table Digest (bnc#1012628).
- IB/opa_vnic: Properly return the total MACs in UC MAC list
  (bnc#1012628).
- thermal/drivers/hisi: Fix missing interrupt enablement
  (bnc#1012628).
- thermal/drivers/hisi: Fix kernel panic on alarm interrupt
  (bnc#1012628).
- thermal/drivers/hisi: Simplify the temperature/step computation
  (bnc#1012628).
- thermal/drivers/hisi: Fix multiple alarm interrupts firing
  (bnc#1012628).
- platform/x86: asus-wireless: send an EV_SYN/SYN_REPORT between
  state changes (bnc#1012628).
- mm/sparsemem: Fix ARM64 boot crash when
  CONFIG_SPARSEMEM_EXTREME=y (bnc#1012628).
- bpf: fix branch pruning logic (bnc#1012628).
- bpf: fix corruption on concurrent perf_event_output calls
  (bnc#1012628).
- bpf, s390x: do not reload skb pointers in non-skb context
  (bnc#1012628).
- bpf, ppc64: do not reload skb pointers in non-skb context
  (bnc#1012628).
- bpf, sparc: fix usage of wrong reg for load_skb_regs after call
  (bnc#1012628).
- bpf/verifier: fix bounds calculation on BPF_RSH (bnc#1012628).
- bpf: fix incorrect sign extension in check_alu_op()
  (bnc#1012628).
- bpf: fix incorrect tracking of register size truncation
  (bnc#1012628).
- bpf: fix 32-bit ALU op verification (bnc#1012628).
- bpf: fix missing error return in check_stack_boundary()
  (bnc#1012628).
- bpf: force strict alignment checks for stack pointers
  (bnc#1012628).
- bpf: don't prune branches when a scalar is replaced with a
  pointer (bnc#1012628).
- bpf: fix integer overflows (bnc#1012628).
- selftests/bpf: add tests for recent bugfixes (bnc#1012628).
- linux/compiler.h: Split into compiler.h and compiler_types.h
  (bnc#1012628).
- Refresh patches.suse/dm-mpath-accept-failed-paths.
- Refresh patches.suse/suse-hv-guest-os-id.patch.
- commit 9423ca2
- Disable CONFIG_SPI_INTEL_SPI_PCI as well (bsc#1073836)
- commit 3f42b52
- Disable CONFIG_SPI_INTEL_SPI_PLATFORM for BIOS breakge on Lenovo laptops
  (bsc#1073836)
- commit c1a63f1

==== libsodium ====

- Enable verbose make output when building tests

==== systemd-presets-branding-openSUSE ====

- Enable lvm2-lvmpolld.socket by default (bsc#1074211)

==== xfce4-branding-openSUSE ====
Subpackages: exo-branding-openSUSE libgarcon-branding-openSUSE libxfce4ui-branding-openSUSE midori-branding-openSUSE openSUSE-xfce-icon-theme thunar-volman-branding-openSUSE xfce4-notifyd-branding-openSUSE xfce4-panel-branding-openSUSE xfce4-power-manager-branding-openSUSE xfce4-session-branding-openSUSE xfce4-settings-branding-openSUSE xfdesktop-branding-openSUSE xfwm4-branding-openSUSE

- use adwaita-icon-theme instead of gnome-icon-theme
  as fallback icon theme
  The reasons for this change are that Upstream gnome no
  longer uses gnome-icon-theme, and to save space on te Thumbleweed
  rescue CD, requested by DimStar
  https://lists.opensuse.org/opensuse-xfce/2017-05/msg00000.html
- fix /etc/xfce_defaults.conf not declared as %conf

==== xfce4-panel-plugin-whiskermenu ====
Version update (2.1.4 -> 2.1.5)
Subpackages: xfce4-panel-plugin-whiskermenu-lang

- update to 2.1.5:
  - Fix class/struct typo. (bxo#14001)
  - Translation updates

==== xfce4-session ====
Subpackages: libxfsm-4_6-0 xfce4-session-lang

- add xfce4-session-systemd-user-addons.patch to fix systemd-user
  services by exporting XAUTHLOCALHOSTNAME