May 2019 - openSUSE Factory - openSUSE Mailing Lists

[opensuse-factory] Can we assume that /bin/sh is bash?
by Martin Wilck 21 Mar '22

21 Mar '22

Hi Jan, all, I'd like to carry our OBS dicussion to a wider audience (https://build.opensuse.org/request/show/672510). The question is whether we can assume that "/bin/sh" links to bash, in particular whether rpm scriptlets without explicit -p interpreter can be assumed to interpreted by bash. I'm aware that, in principle, /bin/sh is supposed to be the Bourne shell on Unix systems. But as a matter of fact, on current openSUSE, it is not. Unless it's tampered with, /bin/sh is a symlink to /bin/bash. bash is not started in full POSIX mode if invoked as /bin/sh, and even if it's in POSIX mode, it supports some extensions over the POSIX shell spec (e.g. the [[ ]] construct), which makes it behave differently than another shell not supporting [[ ]] would (*). Problably there are more differences, I can't claim to know them all. Here are some arguments why I think it'd be reasonable to assume that /bin/sh is bash on openSUSE: 1. patterns-base-minimal_base depends on bash, and the /bin/sh symlink is a non-configurable part of the "bash" package. 2. we could handle /bin/sh via /etc/alternatives, but we don't. 3. our Wiki suggests testing failing scriplets using "bash -xv" (https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets) 4. /bin/sh has pointed to bash for a long time (not sure how long exactly). FTR, Fedora basically guarantees (sh == bash) for the purpose of rpm scriptlets (https://fedoraproject.org/wiki/Packaging:Scriptlets). So Fedora <-> openSUSE portability may also be an issue to consider. If we can't assume that /bin/sh is bash, what else can we assume? I recall from earlier work that writing really 100% compatible shell code for all kinds of environments is really hard. E.g., "[" isn't 100% portable either, even though it's part of the POSIX "test" standard (http://pubs.opengroup.org/onlinepubs/9699919799/utilities/test.html). We should have clear rules which syntax expressions can be used in rpm scriptlets, and which can't. IMO we should define one of the various existing shells as a reference by saying "if it's supported by this shell, it's valid scriptlet code". That'd be easier (especially for testing compliance) than referring to a spec. That reference shell doesn't have to be bash, of course. Thanks Martin (*) For example: # ln -s /usr/bin/echo '/usr/bin/[[' # ls -l /bin/sh lrwxrwxrwx 1 root root 4 Feb 8 10:38 /bin/sh -> bash # /bin/sh --posix -c '[[ 2 = 1 ]] && echo yes' # dash -c '[[ 2 = 1 ]] && echo yes' 2 -eq 1 ]] yes -- Dr. Martin Wilck <mwilck(a)suse.com>, Tel. +49 (0)911 74053 2107 SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton HRB 21284 (AG Nürnberg) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

25 147

[opensuse-factory] Too many packages to process
by Vojtěch Zeisek 12 Mar '21

12 Mar '21

I'm not sure, if this is bug or feature... After few days, update applet (TW, KDE) says there are 6843 new updates (TeX, R, ... ;-). When I click to "Install updates" error "Too many packages to process (6843/5200)" appears. Zypper handles it well. Is it worth of bug report? To b.o.o? Yours, V. -- Vojtěch Zeisek Komunita openSUSE GNU/Linuxu Community of the openSUSE GNU/Linux https://www.opensuse.org/ https://trapa.cz/

8 10

[opensuse-factory] Default Java
by Bernd Ritter 08 Jan '20

08 Jan '20

Hi there, just wanted to let you guysome days ago I wondered what the default java version would be. It should be Java 11. So I've installed a clean leap beta installation. I've installed java-openjdk-10, java-openjdk-11, java-openjdk-1_8_0. Same with the equivalent devel packages. The default java version is Java 11 both with "java" and "javac" via update-alternatives. So everything's fine. I've updated the wiki page accordingly (https://en.opensuse.org/Features_15.1#Java). Does anyone know why there is no Apache Maven available in the default packages? There is this "maven-local", which I think is not the maven program itself. Cheers, Bernd -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

4 3

[opensuse-factory] openSUSE reproducible builds status 2019-01
by Bernhard M. Wiedemann 23 Dec '19

23 Dec '19

Hi, last month's status: https://lists.opensuse.org/opensuse-factory/2018-12/msg00171.html Last months' r-b project updates (including my work): https://reproducible-builds.org/blog/posts/195/ https://reproducible-builds.org/blog/posts/194/ https://reproducible-builds.org/blog/posts/193/ https://reproducible-builds.org/blog/posts/192/ I uploaded https://rb.zq1.de/compare.factory-20190125/ today and rbstats are: total-packages: 11298 build-tried: 11297 build-failed: 37 build-n-a: 107 build-succeeded: 11153 build-official-failed+na: 85 build-compare-failed: 283 build-compare-succeeded: 10870 bit-by-bit-identical: 10605 not-bit-by-bit-identical: 538 Fixed core packages since last month: breeze5-icons dolphin libqt5-qtwebkit wireshark syntax-highlighting: Qt rcc/qrc fix merged in Factory https://build.opensuse.org/request/show/663360 also fixed dozens others like bitcoin. opa-ff CPU-detection via -march=native https://build.opensuse.org/request/show/661771 gengetopt https://build.opensuse.org/request/show/661735 nearly fixed: pcre2 PGO/parallelism https://build.opensuse.org/request/show/668163 perl: ASLR-induced randomness https://build.opensuse.org/request/show/668211 --- ring0 --- acl gcc7 gcc8 --- ring1 --- MozillaFirefox MozillaThunderbird ant bsf colord emacs firebird gconf2-branding-openSUSE gdb gimp gnome-documents go1.10 go1.11 groff-full grub2 hamcrest installation-images java-11-openjdk java-1_8_0-openjdk jing-trang jtidy junit junitperf kernel-debug kernel-default kernel-vanilla kubernetes libkolabxml libqt5-qtscript libreoffice mono-core mozilla-nss pcp php7 python-base python3-base qdox release-notes-openSUSE ruby2.5 rubygem-gem2rpm rust scons transfig virtualbox xmlbeans yodl If you are interested in why they vary: acl: date+time in /usr/share/locale/en(a)boldquot/LC_MESSAGES/acl.mo -PO-Revision-Date: 2018-10-23 01:45+0000 +PO-Revision-Date: 2033-11-24 15:01+0000 gcc7 gcc8: indeterminism from PGO/parallelism + mtime. See also https://github.com/bmwiedemann/theunreproduciblepackage/tree/master/pgo MozillaFirefox MozillaThunderbird: date+time, rust, other has bug around update.locale symlink /usr/lib64/firefox/libxul.so varies from https://github.com/rust-lang/rust/issues/57041 .../browser/extensions/langpack-ca(a)xxxxxxxxxxxxxxxxxxx/manifest.json - "version": "20181009013946" + "version": "20331110172641" apache-commons-lang3 apache-pdfbox dom4j hsqldb icu4j javassist jing-trang jtidy junitperf jython objectweb-asm qdox tomcat xerces-j2 xpp2 xpp3: date + mtime in .jar + javadoc html can be normalized by strip-nondeterminism bsh2 cglib: /usr/share/maven-metadata/bsh2.xml has ASLR order issues date + mtime in .jar + javadoc html colord some randomness from uninitialized memory maybe from glib-compile-resources 16-byte random profileID in .icc files from cd-create-profile plus an uncommitted date/time fix in lib/colord/cd-it8.c: priv->enable_created = FALSE ecj ASLR + date? /usr/share/maven-metadata/ecj.xml has alias entries in random order emacs dumps lisp interpreter memory to create its binaries (similar to clisp) causes variations in /usr/bin/emacs-* firebird: ships unreproducible database http://tracker.firebirdsql.org/browse/CORE-5548 gconf2-branding-openSUSE embeds mtime values in /etc/gconf/gconf.xml.vendor/%gconf-tree.xml gdb contains testresults https://bugzilla.opensuse.org/show_bug.cgi?id=1110708 gimp ASLR 12 byte differ in bKGD header from gegl GEGL_USE_OPENCL=no GEGL_SWAP=ram /usr/bin/gegl ../../icons/Symbolic/64/gimp-texture.png -o 64/gimp-texture.png -- gegl:invert-gamma gnome-documents gnome-documents-getting-started.pdf has random ID from inkscape go1.10 go1.11: variations in /usr/lib64/go/1.10/pkg/obj/go-build/*/*-a groff-full date+time + unknown reason? .ps files vary .html files have CreationDate grub2 mtime + readdir https://savannah.gnu.org/bugs/index.php?54841 hamcrest java .class files vary from build/temp/hamcrest-core/generated-code /org/hamcrest/CoreMatchers.java written by ant javadoc html varies installation-images many variations from mtimes + filesys/readdir and %post scripts java-1_8_0-openjdk java-10-openjdk java-11-openjdk various .jar .zip .html .jmod ordering in /usr/lib64/jvm/java-10-openjdk-10/lib/classlist kernel-debug kernel-default kernel-vanilla date+time ; random keys? "Build time autogenerated kernel key0 ..181009012108Z..21180915012108Z0.1,0" kubernetes: fixed upstream: order in man-pages https://github.com/kubernetes/kubernetes/pull/68983 maybe fixed upstream: random build-ids libkolabxml unknown/ASLR? from build/kolabformat-xcal-schema.cxx created by compiled/xsdbin.cxx libqt5-qtscript filesys order libreoffice various .jar .so .dat/.bau (.zip) javadoc_log.txt mono-core date+time ; other mozilla-nss DSA random temp-key from shlibsign https://bugzilla.opensuse.org/show_bug.cgi?id=1081723 pcp /var/lib/pcp/testsuite/perfevent/perfevent_coverage has random diffs from gcov / .gcno files causing diff in .o ? php7 date / EPOCH timestamps e.g. in /usr/share/php7/PEAR/.channels/__uri.reg python-base python3-base: PGO varies .o files that go into /usr/lib64/libpython3.6m.so.1.0 .pyc files vary python-base shows influence from date+hostname (in PGO?) python-numpy 1 .pyc file varied release-notes-openSUSE partial fix in https://github.com/openSUSE/daps/issues/482 date+time in .pdf ; needs work on fop java code random id values in .html ruby2.5 2 gemspec files have date created.rid varies rubygem-gem2rpm mtime ? /usr/lib64/ruby/gems/2.5.0/cache/checksums.yaml varies rust asm diffs in cargo and others from llvm's llc - filed at https://github.com/rust-lang/rust/issues/57041 some progress made here with the switch to llvm7 scons hostname in various places tigervnc date+time+randomness in /usr/share/vnc/classes/META-INF/TIGERVNC.RSA from SignJar.cmake calling jarsigner with temporary private key partial fix merged https://github.com/TigerVNC/tigervnc/pull/765 transfig date+time in sample-presentation.pdf /CreationDate /ModDate from pdflatex virtualbox tar + random https://www.virtualbox.org/ticket/16854 .so files have random NT_GNU_BUILD_ID (unique build ID bitstring) maybe from out/linux.amd64/release/obj/webservice/gsoapH_from_gsoap.h that has date+time in comment /usr/share/virtualbox/extensions/VNC-5.2.16.vbox-extpack unhandled gzip content: POSIX tar archive (GNU) -13343137165.010505. 5... +16773576625.010527. 5... xmlbeans index.xsb varies from filesystem created in org.apache.xmlbeans.impl.tool.SchemaCompiler yodl pdf from latex/ghostscript/dvips/ps2pdf additionally, on the SLE15 list =============================== gnuplot date+time in pdf from pdflatex golang-github-prometheus-prometheus date+time+random build-id hawk2 https://bugzilla.opensuse.org/show_bug.cgi?id=1112159 ibus-libzhuyin libpinyin libzhuyin random bytes - maybe uninitialized memory perf random filesys order from nftw call in ./linux-*/tools/perf/pmu-events/jevents.c python-keystoneauth1 https://bugs.launchpad.net/keystoneauth/+bug/1796899

5 14

[opensuse-factory] LTO in openSUSE:Factory
by Martin Liška 26 Aug '19

26 Aug '19

Hi. We as toolchain team are working on enablement of LTO in Factory: LTO stands for Link Time Optimization and it is a GCC optimization technique that improves speed and reduces size of binaries. According to our measurements, ELF binaries will be about 5% smaller and debug info packages by 15%. Now, there are various interesting packages that have been LTO in Factory right now: libreoffice, MozillaFirefox, python3, gcc9. Our goal is to extend the scope to as many packages as possible. We'll achieve that via a new RPM macro: _lto_cflags. We expect that about 5% of packages will have LTO disabled due to various reasons. A new META bug has been created for that and will link all these packages: https://bugzilla.opensuse.org/show_bug.cgi?id=1133084 I'm also planning to collect all relevant information for package maintainers on the following WIKI page: https://en.opensuse.org/openSUSE:LTO Note that Debian and Gentoo are also trying to adopt LTO in their corresponding ecosystems: https://wiki.debian.org/LTO https://github.com/InBetweenNames/gentooLTO Martin -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

24 46

[opensuse-factory] [PLEASE SPEAK UP] Disabling legacy file systems by default?
by Martin Wilck 09 Jul '19

09 Jul '19

SUSE will blacklist a number of legacy and/or less frequently used file systems by default on SLES for security reasons. The proposed list can be seen here: https://github.com/openSUSE/suse-module-tools/pull/5/commits/8cb42fb6658f21… The question is now whether we should do the same for openSUSE. I figure that while the above list is probably not controversial for enterprise customers, openSUSE users may have objections to some items on the list. Please speak up if you do. In any case, note that even if we do this, you can re-enable the filesystems you need by simply commenting out lines in the blacklist file. Regards, Martin -- Dr. Martin Wilck <mwilck(a)suse.com>, Tel. +49 (0)911 74053 2107 SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton HRB 21284 (AG Nürnberg) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

45 209

[opensuse-factory] FirewallD and routing
by Bjoern Voigt 04 Jun '19

04 Jun '19

I recently tried to migrate from SuSEfirewall2 to FirewallD on my Tumbleweed desktop. The automatic migration failed completely. No single port from my SuSEfirewall2 configuration was opened in FirewallD after the migration. Now I plan to migrate an openSUSE Leap server (from 42.3 over 15.0 to 15.1). Networking on both computers (desktop and server) is very similar. Both computers have a network interface eno1 and a bridge br0, which connects the hardware interface eno1 with the KVM machines. There are additional network interfaces to docker containers (docker0) and KVM machines (br-<something>). All docker containers and KVM machines need client access to the Internet. That's why the firewall for the host needs a routing configuration. I found some blog articles about FirewallD configuration for routing. But the blog articles I found only mention FirewallD direct rules for configuring IPTables FORWARD rules. I can't find more high level configuration tips. How are you configuring routing with FirewallD? Greetings, Björn -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

3 4

[opensuse-factory] Any plan to solve the 'legal-auto' bottleneck?
by Christophe Giboudeaux 03 Jun '19

03 Jun '19

Hi, There are currently 175 requests waiting for a legal auto review (295 with the automated review from one of the 'Cloud:Platform' repo). The oldest requests are 2 months old, one is 2 months old (SR#690389). The legal-auto 'group' contains 2 persons, the bus factor is critically low. Are there plans to improve the situation? Thanks. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

4 4

[opensuse-factory] New Tumbleweed snapshot 20181224 released!
by Dominique Leuenberger 02 Jun '19

02 Jun '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: cppcheck (1.85 -> 1.86) cups-filters (1.21.4 -> 1.21.6) elementary-xfce-icon-theme (0.13.1+20181113.14732d1b -> 0.13.1~git6.c377da86) festival flatpak-builder (1.0.0 -> 1.0.1) fwupd gnu-unifont-bitmap-fonts (11.0.02 -> 11.0.03) gstreamer-plugins-bad health-checker kernel-firmware (20181026 -> 20181218) kernel-source (4.19.8 -> 4.19.11) libassuan libinput (1.12.3 -> 1.12.4) libmtp libyui-qt-pkg (2.45.24 -> 2.45.25) llvm (6.0.1 -> 7.0.0) llvm4 llvm6 llvm7 multipath-tools (0.7.9+58+suse.0790830 -> 0.7.9+85+suse.766b95e) openldap2 (2.4.46 -> 2.4.47) osinfo-db postfix protobuf python-PySocks python-Pygments python-SecretStorage python-base python-ipaddr python-ndg-httpsclient python-parso python-passlib python-rpm-macros python-urlgrabber qqc2-desktop-style (5.52.0 -> 5.53.0) systemd-presets-common-SUSE tracker === Details === ==== cppcheck ==== Version update (1.85 -> 1.86) - Update to 1.86 * Many fixes in the template simplifier * Several fixes in the abstract syntax tree. Checking improvements: * New check: passing address of char to function that expects a strz * New check: shadow variables * Improved lifetime checking * Improved STL iterators checking * Improved data flow analysis New libraries: * zlib * googletest Addons: * misra.py: Fixes for suppressions and exclusions * namingng.py: New addon to check naming conventions. Rules are specified in json file. ==== cups-filters ==== Version update (1.21.4 -> 1.21.6) - Update to version 1.21.6: * Bug fix release, mainly for cups-browsed to avoid crashes and infinite printer removal/re-creation loops and spurious local queues for local CUPS printers. Also expanded PostScript interpreter bug workaround to more Apple LaserWriter models. * cups-browsed: To find out whether a DNS-SD-discovered printer is from the local machine, use not only the flags in the Avahi lookup result but also check the host name. * cups-browsed: When a local CUPS queue pointing to a remote CUPS printer was removed and re-created to make it a permanent queue, on_printer_deleted() was triggered by cupsd's notification to re-create a lost queue. Now on_printer_deleted() checks whether the queue is really gone and only re-creates then. * cups-browsed: When updating the CUPS queues, also removed and unregistered queues and not only created queues got checked for HTTP timeouts, which caused crashes on shutdown. * pdftops: Use the PS interpreter of Poppler for all Apple LaserWriter 16/600, 4/600, 12/640, 12/600, 12/660 as they all seem to not work with Ghostscript's PS output. * cups-browsed: On shutdown queues got removed even if they still had jobs. - Changes from version 1.21.5: * Bug fix release, to build with Poppler 0.71 and with cups-browsed converting temporary CUPS queues reliably to permanent queues. * cups-browsed: We cannot reliably determine whether a CUPS queue is temporary, so we apply the procedure to make a temporary queue permanent to any unshared queue. * pdftoraster, pdftopdf, pdftoijs, pdftoopvp: Do not use the Poppler-specific "GBool", "gFalse", "gTrue" any more, as Poppler has switched to standard "bool", "false", "true" in version 0.71.0. ==== elementary-xfce-icon-theme ==== Version update (0.13.1+20181113.14732d1b -> 0.13.1~git6.c377da86) - Update to version 0.13.1~git6.c377da86: * Add yast specific package-* icons - Renamed version ==== festival ==== - Do not ignore errors from useradd/groupadd. ==== flatpak-builder ==== Version update (1.0.0 -> 1.0.1) - Update to version 1.0.1: + Run appstream-util mirror-screenshots in the sandbox, rather than on the host, as the host might not have a new enough appstream-glib. + Fix build cache when a module has uncommon characters in the name. ==== fwupd ==== Subpackages: fwupd-lang libfwupd2 - Add pesign-obs-integration to BuildRequires and add fwupd*.efi to BRP_PESIGN_FILES to get it signed - Add LC_IMAGES and use efivar only if %{with efi_fw_update} + Also update the version requirement of efivar - Disable Redfish and NVME plugins if %{without efi_fw_update} since those two plugins require efivar - Remove fwup from BuildRequires since fwupdate is already merged into fwupd. ==== gnu-unifont-bitmap-fonts ==== Version update (11.0.02 -> 11.0.03) - unifont 11.0.03: * Add Nushu glyphs * Final forms for Kana placeholder glyphs * other minor changes to single glyphs ==== gstreamer-plugins-bad ==== Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbadvideo-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgsturidownloader-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 - Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility with libfdk-aac 2.0.0. ==== health-checker ==== - Split the CaaSP plugin into a MicroOS and CaaSP part ==== kernel-firmware ==== Version update (20181026 -> 20181218) Subpackages: ucode-amd - Update to version 20181218: * Revert "amdgpu: update vega10 fw for 18.50 release" * brcm: Add 4330 NVRAM for the Prowise PT301 tablet * brcm: Add 43430 NVRAM for the Chuwi Vi8 Plus tablet * brcm: Add 43340 based AP6234 NVRAM for the Meegopad T08 HDMI stick * brcm: Add 43430a0 based AP6212 NVRAM for the Jumper EZpad mini 3 tablet * brcm: Add 43430a0 based AP6212 NVRAM for the Onda V80 Plus tablet * brcm: Add 4356 based AP6356 NVRAM for the GPD win handheld * brcm: Add brcmfmac43362-sdio.lemaker,bananapro.txt symlink * brcm: Add 43362 based AP6210 NVRAM for the Cubietech Cubietruck * WHENCE: Put quotes around brcmfmac NVRAM filenames * check_whence.py: Add support for filenames with spaces in them * rtl_bt: Add firmware and configuration files for the Bluetooth part of RTL8723BS - Update to version 20181217: * iwlwifi: update firmwares for 8000 series * iwlwifi: add -43.ucode for 9000 series * iwlwifi: update -41.ucode for 9000 series * brcm: provide new firmwares for BCM4366 chipset * Mellanox: Add new mlxsw_spectrum firmware 13.1910.622 * cavium: Update firmware for CNN55XX crypto driver * amdgpu: update vega12 fw for 18.50 release * amdgpu: update vega10 fw for 18.50 release * amdgpu: update raven fw for 18.50 release * amdgpu: update polaris11 fw for 18.50 release * amdgpu: update polaris10 fw for 18.50 release * amdgpu: add firmware for vega12 * amdgpu: Add new polaris MC firmwares * amdgpu: Add new polaris SMC firmwares * linux-firmware: Update AMD cpu microcode * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13 * microchip: add firmware for VSC8574 and VSC8584 Ethernet PHYs * linux-firmware: intel: Update Cannonlake audio firmware. * firmware/huc/bxt: Add huC Update for BXT * nfp: update Agilio SmartNIC firmware to rev 2.1.16 * cxgb4: update firmware to revision 1.21.5.0 ==== kernel-source ==== Version update (4.19.8 -> 4.19.11) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms - Linux 4.19.11 (bnc#1012628). - sched/pelt: Fix warning and clean up IRQ PELT config (bnc#1012628). - scsi: raid_attrs: fix unused variable warning (bnc#1012628). - staging: olpc_dcon: add a missing dependency (bnc#1012628). - slimbus: ngd: mark PM functions as __maybe_unused (bnc#1012628). - i2c: aspeed: fix build warning (bnc#1012628). - ARM: dts: qcom-apq8064-arrow-sd-600eval fix graph_endpoint warning (bnc#1012628). - drm/msm: fix address space warning (bnc#1012628). - pinctrl: sunxi: a83t: Fix IRQ offset typo for PH11 (bnc#1012628). - aio: fix spectre gadget in lookup_ioctx (bnc#1012628). - scripts/spdxcheck.py: always open files in binary mode (bnc#1012628). - fs/iomap.c: get/put the page in iomap_page_create/release() (bnc#1012628). - userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (bnc#1012628). - arm64: dma-mapping: Fix FORCE_CONTIGUOUS buffer clearing (bnc#1012628). - block/bio: Do not zero user pages (bnc#1012628). - ovl: fix decode of dir file handle with multi lower layers (bnc#1012628). - ovl: fix missing override creds in link of a metacopy upper (bnc#1012628). - MMC: OMAP: fix broken MMC on OMAP15XX/OMAP5910/OMAP310 (bnc#1012628). - mmc: core: use mrq->sbc when sending CMD23 for RPMB (bnc#1012628). - mmc: sdhci-omap: Fix DCRC error handling during tuning (bnc#1012628). - mmc: sdhci: fix the timeout check window for clock and reset (bnc#1012628). - fuse: continue to send FUSE_RELEASEDIR when FUSE_OPEN returns ENOSYS (bnc#1012628). - ARM: mmp/mmp2: fix cpu_is_mmp2() on mmp2-dt (bnc#1012628). - ARM: dts: bcm2837: Fix polarity of wifi reset GPIOs (bnc#1012628). - dm thin: send event about thin-pool state change _after_ making it (bnc#1012628). - dm cache metadata: verify cache has blocks in blocks_are_clean_separate_dirty() (bnc#1012628). - dm: call blk_queue_split() to impose device limits on bios (bnc#1012628). - tracing: Fix memory leak in create_filter() (bnc#1012628). - tracing: Fix memory leak in set_trigger_filter() (bnc#1012628). - tracing: Fix memory leak of instance function hash filters (bnc#1012628). - media: vb2: don't call __vb2_queue_cancel if vb2_start_streaming failed (bnc#1012628). - powerpc/msi: Fix NULL pointer access in teardown code (bnc#1012628). - powerpc: Look for "stdout-path" when setting up legacy consoles (bnc#1012628). - drm/nouveau/kms: Fix memory leak in nv50_mstm_del() (bnc#1012628). - drm/nouveau/kms/nv50-: also flush fb writes when rewinding push buffer (bnc#1012628). - Revert "drm/rockchip: Allow driver to be shutdown on reboot/kexec" (bnc#1012628). - drm/i915/gvt: Fix tiled memory decoding bug on BDW (bnc#1012628). - drm/i915/execlists: Apply a full mb before execution for Braswell (bnc#1012628). - drm/amdgpu/powerplay: Apply avfs cks-off voltages on VI (bnc#1012628). - drm/amdkfd: add new vega10 pci ids (bnc#1012628). - drm/amdgpu: add some additional vega10 pci ids (bnc#1012628). - drm/amdgpu: update smu firmware images for VI variants (v2) (bnc#1012628). - drm/amdgpu: update SMC firmware image for polaris10 variants (bnc#1012628). - dm zoned: Fix target BIO completion handling (bnc#1012628). - commit 096f733 - Linux 4.19.10 (bnc#1012628). - tcp: lack of available data can also cause TSO defer (bnc#1012628). - bpf: fix off-by-one error in adjust_subprog_starts (bnc#1012628). - IB/hfi1: Fix an out-of-bounds access in get_hw_stats (bnc#1012628). - ALSA: hda/realtek - Fix the mute LED regresion on Lenovo X1 Carbon (bnc#1012628). - ALSA: hda/realtek: Enable audio jacks of ASUS UX433FN/UX333FA with ALC294 (bnc#1012628). - ALSA: hda/realtek: Enable audio jacks of ASUS UX533FD with ALC294 (bnc#1012628). - ALSA: hda/realtek: ALC294 mic and headset-mode fixups for ASUS X542UN (bnc#1012628). - ALSA: hda/realtek - Fixed headphone issue for ALC700 (bnc#1012628). - ALSA: fireface: fix reference to wrong register for clock configuration (bnc#1012628). - dax: Check page->mapping isn't NULL (bnc#1012628). - flexfiles: enforce per-mirror stateid only for v4 DSes (bnc#1012628). - ocfs2: fix potential use after free (bnc#1012628). - initramfs: clean old path before creating a hardlink (bnc#1012628). - kernel/kcov.c: mark funcs in __sanitizer_cov_trace_pc() as notrace (bnc#1012628). - proc: fixup map_files test on arm (bnc#1012628). - debugobjects: avoid recursive calls with kmemleak (bnc#1012628). - hfsplus: do not free node before using (bnc#1012628). - hfs: do not free node before using (bnc#1012628). - mm/page_alloc.c: fix calculation of pgdat->nr_zones (bnc#1012628). - ocfs2: fix deadlock caused by ocfs2_defrag_extent() (bnc#1012628). - ACPI/IORT: Fix iort_get_platform_device_domain() uninitialized pointer value (bnc#1012628). - nvme-rdma: fix double freeing of async event data (bnc#1012628). - nvme: flush namespace scanning work just before removing namespaces (bnc#1012628). - nvme: warn when finding multi-port subsystems without multipathing enabled (bnc#1012628). - fscache, cachefiles: remove redundant variable 'cache' (bnc#1012628). - cachefiles: Explicitly cast enumerated type in put_object (bnc#1012628). - fscache: fix race between enablement and dropping of object (bnc#1012628). - afs: Fix validation/callback interaction (bnc#1012628). - pstore/ram: Correctly calculate usable PRZ bytes (bnc#1012628). - pvcalls-front: fixes incorrect error handling (bnc#1012628). - Revert "xen/balloon: Mark unallocated host memory as UNUSABLE" (bnc#1012628). - xen: xlate_mmu: add missing header to fix 'W=1' warning (bnc#1012628). - drm/ast: fixed reading monitor EDID not stable issue (bnc#1012628). - drm/amdgpu: Add delay after enable RLC ucode (bnc#1012628). - net: hisilicon: remove unexpected free_netdev (bnc#1012628). - ixgbe: recognize 1000BaseLX SFP modules as 1Gbps (bnc#1012628). - igb: fix uninitialized variables (bnc#1012628). - cachefiles: Fix page leak in cachefiles_read_backing_file while vmscan is active (bnc#1012628). - fscache: Fix race in fscache_op_complete() due to split atomic_sub & read (bnc#1012628). - cachefiles: Fix an assertion failure when trying to update a failed object (bnc#1012628). - ALSA: usb-audio: Add vendor and product name for Dell WD19 Dock (bnc#1012628). - netfilter: nf_tables: deactivate expressions in rule replecement routine (bnc#1012628). - usb: gadget: u_ether: fix unsafe list iteration (bnc#1012628). - net: thunderx: fix NULL pointer dereference in nic_remove (bnc#1012628). - x86/kvm/vmx: fix old-style function declaration (bnc#1012628). - KVM: x86: fix empty-body warnings (bnc#1012628). - KVM: VMX: Update shared MSRs to be saved/restored on MSR_EFER.LMA changes (bnc#1012628). - netfilter: nf_conncount: remove wrong condition check routine (bnc#1012628). - netfilter: nat: fix double register in masquerade modules (bnc#1012628). - netfilter: add missing error handling code for register functions (bnc#1012628). - IB/mlx5: Fix page fault handling for MW (bnc#1012628). - netfilter: ipv6: Preserve link scope traffic original oif (bnc#1012628). - drm/meson: add support for 1080p25 mode (bnc#1012628). - thunderbolt: Prevent root port runtime suspend during NVM upgrade (bnc#1012628). - USB: omap_udc: fix rejection of out transfers when DMA is used (bnc#1012628). - USB: omap_udc: fix USB gadget functionality on Palm Tungsten E (bnc#1012628). - USB: omap_udc: fix omap_udc_start() on 15xx machines (bnc#1012628). - USB: omap_udc: fix crashes on probe error and module removal (bnc#1012628). - USB: omap_udc: use devm_request_irq() (bnc#1012628). - ipvs: call ip_vs_dst_notifier earlier than ipv6_dev_notf (bnc#1012628). - fsi: master-ast-cf: select GENERIC_ALLOCATOR (bnc#1012628). - bpf: fix check of allowed specifiers in bpf_trace_printk (bnc#1012628). - RDMA/hns: Bugfix pbl configuration for rereg mr (bnc#1012628). - exportfs: do not read dentry after free (bnc#1012628). - ASoC: omap-dmic: Add pm_qos handling to avoid overruns with CPU_IDLE (bnc#1012628). - ASoC: omap-mcpdm: Add pm_qos handling to avoid under/overruns with CPU_IDLE (bnc#1012628). - ASoC: omap-mcbsp: Fix latency value calculation for pm_qos (bnc#1012628). - tools: bpftool: fix potential NULL pointer dereference in do_load (bnc#1012628). - RDMA/rdmavt: Fix rvt_create_ah function signature (bnc#1012628). - RDMA/bnxt_re: Avoid accessing the device structure after it is freed (bnc#1012628). - RDMA/bnxt_re: Fix system hang when registration with L2 driver fails (bnc#1012628). - RDMA/core: Add GIDs while changing MAC addr only for registered ndev (bnc#1012628). - RDMA/mlx5: Fix fence type for IB_WR_LOCAL_INV WR (bnc#1012628). - Btrfs: send, fix infinite loop due to directory rename dependencies (bnc#1012628). - ARM: dts: at91: sama5d2: use the divided clock for SMC (bnc#1012628). - phy: qcom-qusb2: Fix HSTX_TRIM tuning with fused value for SDM845 (bnc#1012628). - phy: qcom-qusb2: Use HSTX_TRIM fused value as is (bnc#1012628). - objtool: Fix segfault in .cold detection with - ffunction-sections (bnc#1012628). - objtool: Fix double-free in .cold detection error path (bnc#1012628). - ASoC: acpi: fix: continue searching when machine is ignored (bnc#1012628). - PCI: imx6: Fix link training status detection in link up check (bnc#1012628). - perf tools: Restore proper cwd on return from mnt namespace (bnc#1012628). - hwmon: (w83795) temp4_type has writable permission (bnc#1012628). - netfilter: xt_hashlimit: fix a possible memory leak in htable_create() (bnc#1012628). - aio: fix failure to put the file pointer (bnc#1012628). - bpf: allocate local storage buffers using GFP_ATOMIC (bnc#1012628). - hwmon: (mlxreg-fan) Fix macros for tacho fault reading (bnc#1012628). - spi: omap2-mcspi: Add missing suspend and resume calls (bnc#1012628). - ASoC: dapm: Recalculate audio map forcely when card instantiated (bnc#1012628). - ASoC: omap-abe-twl6040: Fix missing audio card caused by deferred probing (bnc#1012628). - hwmon: (ina2xx) Fix current value calculation (bnc#1012628). - s390/cpum_cf: Reject request for sampling in event initialization (bnc#1012628). - ASoC: qcom: Set dai_link id to each dai_link (bnc#1012628). - ASoC: Intel: Power down links before turning off display audio power (bnc#1012628). - ASoC: wm_adsp: Fix dma-unsafe read of scratch registers (bnc#1012628). - ASoC: rockchip: add missing slave_config setting for I2S (bnc#1012628). - hwmon: (raspberrypi) Fix initial notify (bnc#1012628). - hwmon (ina2xx) Fix NULL id pointer in probe() (bnc#1012628). - s390/cio: Fix cleanup when unsupported IDA format is used (bnc#1012628). - s390/cio: Fix cleanup of pfn_array alloc failure (bnc#1012628). - netfilter: nf_tables: fix use-after-free when deleting compat expressions (bnc#1012628). - netfilter: xt_RATEEST: remove netns exit routine (bnc#1012628). - perf tools: Fix crash on synthesizing the unit (bnc#1012628). - selftests: add script to stress-test nft packet path vs. control plane (bnc#1012628). - netfilter: nf_tables: don't skip inactive chains during update (bnc#1012628). - netfilter: nf_conncount: fix unexpected permanent node of list (bnc#1012628). - netfilter: nf_conncount: fix list_del corruption in conn_free (bnc#1012628). - netfilter: nf_conncount: use spin_lock_bh instead of spin_lock (bnc#1012628). - sysv: return 'err' instead of 0 in __sysv_write_inode (bnc#1012628). - arm64: dts: sdm845-mtp: Reserve reserved gpios (bnc#1012628). - ASoC: sun8i-codec: fix crash on module removal (bnc#1012628). - tools: bpftool: prevent infinite loop in get_fdinfo() (bnc#1012628). - ARM: OMAP1: ams-delta: Fix possible use of uninitialized field (bnc#1012628). - ARM: dts: am3517-som: Fix WL127x Wifi interrupt (bnc#1012628). - ARM: dts: logicpd-somlv: Fix interrupt on mmc3_dat1 (bnc#1012628). - ARM: dts: LogicPD Torpedo: Fix mmc3_dat1 interrupt (bnc#1012628). - ARM: dts: am3517: Fix pinmuxing for CD on MMC1 (bnc#1012628). - staging: rtl8723bs: Fix the return value in case of error in 'rtw_wx_read32()' (bnc#1012628). - ASoC: qdsp6: q6afe-dai: Fix the dai widgets (bnc#1012628). - ASoC: qdsp6: q6afe: Fix wrong MI2S SD line mask (bnc#1012628). - ASoC: rsnd: fixup clock start checker (bnc#1012628). - ARM: OMAP2+: prm44xx: Fix section annotation on omap44xx_prm_enable_io_wakeup (bnc#1012628). - net: fix XPS static_key accounting (bnc#1012628). - net: restore call to netdev_queue_numa_node_write when resetting XPS (bnc#1012628). - sctp: update frag_point when stream_interleave is set (bnc#1012628). - net: phy: sfp: correct store of detected link modes (bnc#1012628). - virtio-net: keep vnet header zeroed after processing XDP (bnc#1012628). - tun: forbid iface creation with rtnl ops (bnc#1012628). - tcp: fix NULL ref in tail loss probe (bnc#1012628). - tcp: Do not underestimate rwnd_limited (bnc#1012628). - sctp: kfree_rcu asoc (bnc#1012628). - rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices (bnc#1012628). - Revert "net/ibm/emac: wrong bit is used for STA control" (bnc#1012628). - net: use skb_list_del_init() to remove from RX sublists (bnc#1012628). - net: Prevent invalid access to skb->prev in __qdisc_drop_all (bnc#1012628). - net: phy: don't allow __set_phy_supported to add unsupported modes (bnc#1012628). - net/mlx4_en: Change min MTU size to ETH_MIN_MTU (bnc#1012628). - net/mlx4_core: Correctly set PFC param if global pause is turned off (bnc#1012628). - net: 8139cp: fix a BUG triggered by changing mtu with network traffic (bnc#1012628). - ipv6: sr: properly initialize flowi6 prior passing to ip6_route_output (bnc#1012628). - neighbour: Avoid writing before skb->head in neigh_hh_output() (bnc#1012628). - ipv6: Check available headroom in ip6_xmit() even without options (bnc#1012628). - ipv4: ipv6: netfilter: Adjust the frag mem limit when truesize changes (bnc#1012628). - commit 9284d89 - Linux 4.19.9 (bnc#1012628). - media: vicodec: lower minimum height to 360 (bnc#1012628). - media: cec: check for non-OK/NACK conditions while claiming a LA (bnc#1012628). - media: omap3isp: Unregister media device as first (bnc#1012628). - media: ipu3-cio2: Unregister device nodes first, then release resources (bnc#1012628). - iommu/vt-d: Fix NULL pointer dereference in prq_event_thread() (bnc#1012628). - brcmutil: really fix decoding channel info for 160 MHz bandwidth (bnc#1012628). - mt76: fix building without CONFIG_LEDS_CLASS (bnc#1012628). - iommu/ipmmu-vmsa: Fix crash on early domain free (bnc#1012628). - scsi: ufs: Fix hynix ufs bug with quirk on hi36xx SoC (bnc#1012628). - can: ucan: remove set but not used variable 'udev' (bnc#1012628). - can: rcar_can: Fix erroneous registration (bnc#1012628). - test_firmware: fix error return getting clobbered (bnc#1012628). - HID: input: Ignore battery reported by Symbol DS4308 (bnc#1012628). - batman-adv: Use explicit tvlv padding for ELP packets (bnc#1012628). - batman-adv: Expand merged fragment buffer for full packet (bnc#1012628). - amd/iommu: Fix Guest Virtual APIC Log Tail Address Register (bnc#1012628). - bnx2x: Assign unique DMAE channel number for FW DMAE transactions (bnc#1012628). - qed: Fix PTT leak in qed_drain() (bnc#1012628). - qed: Fix overriding offload_tc by protocols without APP TLV (bnc#1012628). - qed: Fix rdma_info structure allocation (bnc#1012628). - qed: Fix reading wrong value in loop condition (bnc#1012628). - usb: dwc2: pci: Fix an error code in probe (bnc#1012628). - Revert "usb: gadget: ffs: Fix BUG when userland exits with submitted AIO transfers" (bnc#1012628). - s390/ism: clear dmbe_mask bit before SMC IRQ handling (bnc#1012628). - nvme-fc: resolve io failures during connect (bnc#1012628). - bnxt_en: Fix filling time in bnxt_fill_coredump_record() (bnc#1012628). - drm/amdgpu: Add amdgpu "max bpc" connector property (v2) (bnc#1012628). - drm/amd/display: Support amdgpu "max bpc" connector property (v2) (bnc#1012628). - net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command (bnc#1012628). - net/mlx4_core: Fix uninitialized variable compilation warning (bnc#1012628). - net/mlx4: Fix UBSAN warning of signed integer overflow (bnc#1012628). - drivers/net/ethernet/qlogic/qed/qed_rdma.h: fix typo (bnc#1012628). - gpio: pxa: fix legacy non pinctrl aware builds again (bnc#1012628). - gpio: mockup: fix indicated direction (bnc#1012628). - tc-testing: tdc.py: ignore errors when decoding stdout/stderr (bnc#1012628). - tc-testing: tdc.py: Guard against lack of returncode in executed command (bnc#1012628). - mtd: rawnand: qcom: Namespace prefix some commands (bnc#1012628). - cpufreq: ti-cpufreq: Only register platform_device when supported (bnc#1012628). - Revert "HID: uhid: use strlcpy() instead of strncpy()" (bnc#1012628). - HID: multitouch: Add pointstick support for Cirque Touchpad (bnc#1012628). - mtd: spi-nor: Fix Cadence QSPI page fault kernel panic (bnc#1012628). - net: ena: fix crash during failed resume from hibernation (bnc#1012628). - NFSv4: Fix a NFSv4 state manager deadlock (bnc#1012628). - qed: Fix bitmap_weight() check (bnc#1012628). - qed: Fix QM getters to always return a valid pq (bnc#1012628). - net/ibmnvic: Fix deadlock problem in reset (bnc#1012628). - riscv: fix warning in arch/riscv/include/asm/module.h (bnc#1012628). - net: faraday: ftmac100: remove netif_running(netdev) check before disabling interrupts (bnc#1012628). - iommu/vt-d: Use memunmap to free memremap (bnc#1012628). - NFSv4.2 copy do not allocate memory under the lock (bnc#1012628). - flexfiles: use per-mirror specified stateid for IO (bnc#1012628). - ibmvnic: Fix RX queue buffer cleanup (bnc#1012628). - ibmvnic: Update driver queues after change in ring size support (bnc#1012628). - team: no need to do team_notify_peers or team_mcast_rejoin when disabling port (bnc#1012628). - net: amd: add missing of_node_put() (bnc#1012628). - usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device (bnc#1012628). - usb: appledisplay: Add 27" Apple Cinema Display (bnc#1012628). - USB: check usb_get_extra_descriptor for proper size (bnc#1012628). - USB: serial: console: fix reported terminal settings (bnc#1012628). - ALSA: usb-audio: Add SMSL D1 to quirks for native DSD support (bnc#1012628). - ALSA: hda: Add support for AMD Stoney Ridge (bnc#1012628). - ALSA: pcm: Fix starvation on down_write_nonblock() (bnc#1012628). - ALSA: pcm: Call snd_pcm_unlink() conditionally at closing (bnc#1012628). - ALSA: pcm: Fix interval evaluation with openmin/max (bnc#1012628). - ALSA: hda/realtek - Fix speaker output regression on Thinkpad T570 (bnc#1012628). - ALSA: hda/realtek: ALC286 mic and headset-mode fixups for Acer Aspire U27-880 (bnc#1012628). - ALSA: hda/realtek - Add support for Acer Aspire C24-860 headset mic (bnc#1012628). - ALSA: hda/realtek: Fix mic issue on Acer AIO Veriton Z4660G (bnc#1012628). - ALSA: hda/realtek: Fix mic issue on Acer AIO Veriton Z4860G/Z6860G (bnc#1012628). - media: gspca: fix frame overflow error (bnc#1012628). - media: vicodec: fix memchr() kernel oops (bnc#1012628). - Revert "mfd: cros_ec: Use devm_kzalloc for private data" (bnc#1012628). - parisc: Enable -ffunction-sections for modules on 32-bit kernel (bnc#1012628). - virtio/s390: avoid race on vcdev->config (bnc#1012628). - virtio/s390: fix race in ccw_io_helper() (bnc#1012628). - vhost/vsock: fix use-after-free in network stack callers (bnc#1012628). - arm64: hibernate: Avoid sending cross-calling with interrupts disabled (bnc#1012628). - SUNRPC: Fix leak of krb5p encode pages (bnc#1012628). - dmaengine: dw: Fix FIFO size for Intel Merrifield (bnc#1012628). - Revert "dmaengine: imx-sdma: Use GFP_NOWAIT for dma allocations" (bnc#1012628). - Revert "dmaengine: imx-sdma: alloclate bd memory from dma pool" (bnc#1012628). - dmaengine: imx-sdma: implement channel termination via worker (bnc#1012628). - dmaengine: imx-sdma: use GFP_NOWAIT for dma descriptor allocations (bnc#1012628). - dmaengine: cppi41: delete channel from pending list when stop channel (bnc#1012628). - ARM: 8806/1: kprobes: Fix false positive with FORTIFY_SOURCE (bnc#1012628). - xhci: workaround CSS timeout on AMD SNPS 3.0 xHC (bnc#1012628). - xhci: Prevent U1/U2 link pm states if exit latency is too long (bnc#1012628). - arm64: dts: rockchip: remove vdd_log from rock960 to fix a stability issues (bnc#1012628). - Revert "x86/e820: put !E820_TYPE_RAM regions into memblock.reserved" (bnc#1012628). - cifs: Fix separator when building path from dentry (bnc#1012628). - staging: rtl8712: Fix possible buffer overrun (bnc#1012628). - Revert commit ef9209b642f "staging: rtl8723bs: Fix indenting errors and an off-by-one mistake in core/rtw_mlme_ext.c" (bnc#1012628). - crypto: do not free algorithm before using (bnc#1012628). - drm/amdgpu: update mc firmware image for polaris12 variants (bnc#1012628). - drm/lease: Send a distinct uevent (bnc#1012628). - drm/msm: Move fence put to where failure occurs (bnc#1012628). - drm/amdgpu/gmc8: update MC firmware for polaris (bnc#1012628). - drm/amdgpu/gmc8: always load MC firmware in the driver (bnc#1012628). - drm/i915: Downgrade Gen9 Plane WM latency error (bnc#1012628). - kprobes/x86: Fix instruction patching corruption when copying more than one RIP-relative instruction (bnc#1012628). - x86/efi: Allocate e820 buffer before calling efi_exit_boot_service (bnc#1012628). - Drivers: hv: vmbus: Offload the handling of channels to two workqueues (bnc#1012628). - tty: serial: 8250_mtk: always resume the device in probe (bnc#1012628). - tty: do not set TTY_IO_ERROR flag if console port (bnc#1012628). - gnss: sirf: fix activation retry handling (bnc#1012628). - kgdboc: fix KASAN global-out-of-bounds bug in param_set_kgdboc_var() (bnc#1012628). - libnvdimm, pfn: Pad pfn namespaces relative to other regions (bnc#1012628). - cfg80211: Fix busy loop regression in ieee80211_ie_split_ric() (bnc#1012628). - mac80211_hwsim: Timer should be initialized before device registered (bnc#1012628). - mac80211: fix GFP_KERNEL under tasklet context (bnc#1012628). - mac80211: Clear beacon_int in ieee80211_do_stop (bnc#1012628). - mac80211: ignore tx status for PS stations in ieee80211_tx_status_ext (bnc#1012628). - mac80211: fix reordering of buffered broadcast packets (bnc#1012628). - mac80211: ignore NullFunc frames in the duplicate detection (bnc#1012628). - HID: quirks: fix RetroUSB.com devices (bnc#1012628). - Update config files. - commit 2f28da6 - Refresh patches.rpmify/x86-build-Fix-compiler-support-check-for-CONFIG_RETP.patch. Update upstream status. - commit ceaabb8 ==== libassuan ==== - qemu-disable-fdpassing-test.patch: remove ==== libinput ==== Version update (1.12.3 -> 1.12.4) Subpackages: libinput-udev libinput10 - Update to new upstream release 1.12.4 * Three hardware-specific quirks for the HP Spectre x360 (touchpad pressure thresholds), the Macbook Pro 11,2 (palm thresholds) and the Lenovo T480s (missing INPUT_PROP_BUTTONPAD) were added. ==== libmtp ==== Subpackages: libmtp-udev libmtp9 - Small packaging cleanup ==== libyui-qt-pkg ==== Version update (2.45.24 -> 2.45.25) - Make icons pop out from any background (boo#1115949) - 2.45.25 ==== llvm ==== Version update (6.0.1 -> 7.0.0) - Update to llvm 7.0.0 * For details, see the release notes: https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.h… https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html ==== llvm4 ==== Subpackages: clang4-checker libLLVM4 libclang4 - Use %license macro - Use upstream-recommended %{_rpmconfigdir}/macros.d directory for the rpm macros. ==== llvm6 ==== Subpackages: libLLVM6 libclang6 - Use %license macro - Use upstream-recommended %{_rpmconfigdir}/macros.d directory for the rpm macros. ==== llvm7 ==== Subpackages: libc++-devel libc++1 libc++abi-devel libc++abi1 - Use %license macro - Use upstream-recommended %{_rpmconfigdir}/macros.d directory for the rpm macros. ==== multipath-tools ==== Version update (0.7.9+58+suse.0790830 -> 0.7.9+85+suse.766b95e) Subpackages: kpartx - Update to version 0.7.9+85+suse.766b95e: * upstream patch series to make verbosity level 3 less verbose and thus better usable (bsc#1118937) * fix for handling device size mismatch in coalesce_paths() (bsc#1037379) * libmultipath: fix false removes in dmevents polling code (bsc#1116272) * Spec file: remove build dependency on dracut which causes build errors for some distributions ==== openldap2 ==== Version update (2.4.46 -> 2.4.47) Subpackages: libldap-2_4-2 libldap-2_4-2-32bit libldap-data openldap2-client openldap2-devel - Update to upstream release 2.4.47 - Removed obsolete patches: * 0006-No-Build-date-and-time-in-binaries.dif (upstream now uses SOURCE_DATE_EPOCH for reproducable builds) * 0012-ITS8051-sockdnpat.patch * 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch OpenLDAP 2.4.47 Release (2018/12/19) Added slapd-sock DN qualifier for subtrees to be processed (ITS#8051) Added slapd-sock ability to send extended operations to external listeners (ITS#8714) Fixed liblber to avoid incremental access to user-supplied bv in dupbv (ITS#8752) Fixed libldap dn to domain parsing with bad input (ITS#8842) Fixed slapd slapcat to correctly honor -g option (ITS#8667) Fixed slapd to correctly handle NO_SUCH_OBJECT with dynamic groups (ITS#8923) Fixed slapd to check status of rdnNormalize (ITS#8932) Fixed slapd cn=config when modifying slapo-syncprov config (ITS#8616) Fixed slapd sasl authz-policy "all" behavior (ITS#8909) Fixed slapd sasl minor typo (ITS#8918) Fixed slapd to correctly hide hidden DBs in the rootDSE (ITS#8912) Fixed slapd domainScope control to match Microsoft specification (ITS#8840) Fixed slapd-bdb/hdb/mdb to not convert certain IDLs to ranges (ITS#8868) Fixed slapo-accesslog deadlock during cleanup (ITS#8752) Fixed slapo-memberof cn=config modifications (ITS#8663) Fixed slapo-ppolicy with multimaster replication (ITS#8927) Fixed slapo-syncprov with NULL modlist (ITS#8843) Build Environment Added slapd reproducible build support (ITS#8928) Fixed missing includes with OpenSSL 1.0.2 (ITS#8809) Contrib Fixed slapo-pbkdf2 hash generation (ITS#8878) Documentation admin24 fixed minor typo (ITS#8887) ==== osinfo-db ==== - Add correct release date for SLE12-SP4 add-sle12sp4-support.patch ==== postfix ==== Subpackages: postfix-doc - binary hardening: link with full RELRO ==== protobuf ==== Subpackages: libprotobuf-lite17 libprotobuf17 - Add maven pom files to the protobuf-java package ==== python-PySocks ==== - Remove superfluous devel dependency for noarch package ==== python-Pygments ==== - Remove superfluous devel dependency for noarch package ==== python-SecretStorage ==== - Remove superfluous devel dependency for noarch package ==== python-base ==== Subpackages: libpython2_7-1_0 libpython2_7-1_0-32bit python-xml - Use upstream-recommended %{_rpmconfigdir}/macros.d directory for the rpm macros. ==== python-ipaddr ==== - Remove superfluous devel dependency for noarch package ==== python-ndg-httpsclient ==== - Remove superfluous devel dependency for noarch package ==== python-parso ==== - Remove superfluous devel dependency for noarch package ==== python-passlib ==== - Use noun phrase in summary. Trim filler wording from description. - Remove superfluous devel dependency for noarch package ==== python-rpm-macros ==== - Use upstream-recommended %{_rpmconfigdir}/macros.d directory for the rpm macros. - Include license and readme. ==== python-urlgrabber ==== - Remove superfluous devel dependency for noarch package ==== qqc2-desktop-style ==== Version update (5.52.0 -> 5.53.0) - Update to 5.53.0 * New feature release * For more details please see: * https://www.kde.org/announcements/kde-frameworks-5.53.0.php - Changes since 5.52.0: * consistent sizing of item compared to QWidgets * emit activated * same behavior as qwidgets comboboxes * fix Menu sizing * default values for ToolTip * proper line widths * make sure flickables are pixelAligned * Fix compilation * Support for QGuiApplication-based apps (kde#396287) * touchscreen text controls * Size according to specified icon width and height * Honor flat property of buttons * Remove qt include prefix * Fix issue where there's only one element on the menu ==== systemd-presets-common-SUSE ==== - Eanble new mdadm timers mdcheck_start.timer and mdmonitor-oneshot.timer (bsc#1115407) ==== tracker ==== Subpackages: libtracker-common-2_0 libtracker-control-2_0-0 libtracker-miner-2_0-0 libtracker-sparql-2_0-0 tracker-lang typelib-1_0-Tracker-2_0 typelib-1_0-TrackerControl-2_0 - Extend tracker-sqlte-3.25-rename-tables.patch with two more commits: + libtracker-data: Update FTS if base tables were altered + libtracker-data: Reset property table name on cardinality changes -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

4 3

[opensuse-factory] New Tumbleweed snapshot 20190527 released!
by Dominique Leuenberger 02 Jun '19

02 Jun '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (66.0.5 -> 67.0) kernel-firmware (20190502 -> 20190514) opus (1.3 -> 1.3.1) pipewire (0.2.5 -> 0.2.6) polkit-default-privs (13.2+20190520.a67a2af -> 13.2+20190523.efe368f) python-kiwi (9.17.37 -> 9.17.39) python-pexpect (4.6.0 -> 4.7.0) python-pyasn1-modules (0.2.4 -> 0.2.5) python-requests (2.21.0 -> 2.22.0) ruby2.6 spandsp webkit2gtk3 (2.24.1 -> 2.24.2) wireshark (3.0.1 -> 3.0.2) yast2-add-on (4.1.11 -> 4.1.12) === Details === ==== MozillaFirefox ==== Version update (66.0.5 -> 67.0) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 67.0 * Firefox 67 will be able to run different Firefox installs side by side https://blog.nightly.mozilla.org/2019/01/14/moving-to-a-profile-per-install… * Tabs can now be pinned from the Page Actions menu in the address bar * Users can block known cryptominers and fingerprinters in the Custom settings or their Content Blocking preferences * The Import Data from Another Browser feature is now also available from the File menu * Firefox will now protect you against running older versions which can lead to data corruption and stability issues * Easier access to your list of saved logins from the main menu and login autocomplete * We?ve added a toolbar menu for your Firefox Account to provide more transparency for when you are synced, sharing data across devices and with Firefox. Personalize the appearance of the menu with your own avatar * Enable FIDO U2F API, and permit registrations for Google Accounts * Enabled AV1 support on Linux MFSA 2019-13 (boo#1135824) * CVE-2019-9815 (bmo#1546544) Disable hyperthreading on content JavaScript threads on macOS * CVE-2019-9816 (bmo#1536768) Type confusion with object groups and UnboxedObjects * CVE-2019-9817 (bmo#1540221) Stealing of cross-domain images using canvas * CVE-2019-9818 (bmo#1542581) (Windows only) Use-after-free in crash generation server * CVE-2019-9819 (bmo#1532553) Compartment mismatch with fetch API * CVE-2019-9820 (bmo#1536405) Use-after-free of ChromeEventHandler by DocShell * CVE-2019-9821 (bmo#1539125) Use-after-free in AssertWorkerThread * CVE-2019-11691 (bmo#1542465) Use-after-free in XMLHttpRequest * CVE-2019-11692 (bmo#1544670) Use-after-free removing listeners in the event listener manager * CVE-2019-11693 (bmo#1532525) Buffer overflow in WebGL bufferdata on Linux * CVE-2019-7317 (bmo#1542829) Use-after-free in png_image_free of libpng library * CVE-2019-11694 (bmo#1534196) (Windows only) Uninitialized memory memory leakage in Windows sandbox * CVE-2019-11695 (bmo#1445844) Custom cursor can render over user interface outside of web content * CVE-2019-11696 (bmo#1392955) Java web start .JNLP files are not recognized as executable files for download prompts * CVE-2019-11697 (bmo#1440079) Pressing key combinations can bypass installation prompt delays and install extensions * CVE-2019-11698 (bmo#1543191) Theft of user history data through drag and drop of hyperlinks to and from bookmarks * CVE-2019-11700 (bmo#1549833) (Windows only) res: protocol can be used to open known local files * CVE-2019-11699 (bmo#1528939) Incorrect domain name highlighting during page navigation * CVE-2019-11701 (bmo#1518627) webcal: protocol default handler loads vulnerable web page * CVE-2019-9814 (bmo#1527592, bmo#1534536, bmo#1520132, bmo#1543159, bmo#1539393, bmo#1459932, bmo#1459182, bmo#1516425) Memory safety bugs fixed in Firefox 67 * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136, bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108, bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097, bmo#1532465, bmo#1533554, bmo#1541580) Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 - requires * rust/cargo >= 1.32 * mozilla-nspr >= 4.21 * mozilla-nss >= 3.43 * rust-cbindgen >= 0.8.2 - rebased patches - KDE integration for default browser detection is broken in this revision - Fix armv7 build with: * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch ==== kernel-firmware ==== Version update (20190502 -> 20190514) Subpackages: ucode-amd - Update to version 20190514: * linux-firmware: Update firmware file for Intel Bluetooth 8265 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 22161 * amlogic: add video decoder firmwares * iwlwifi: update -46 firmwares for 22260 and 9000 series * iwlwifi: add firmware for 22260 and update 9000 series -46 firmwares * iwlwifi: add -46.ucode firmwares for 9000 series ==== opus ==== Version update (1.3 -> 1.3.1) - Update to version 1.3.1 * This release fixes an issue with the analysis on files with digital silence (all zeros), especially on x87 builds (mostly affects 32-bit builds). * Two new features: + A new OPUS_GET_IN_DTX query to know if the encoder is in DTX mode (last frame was either a comfort noise frame or not encoded at all) + A new (and still experimental) CMake-based build system that is eventually meant to replace the VS2015 build system (the autotools one will stay). ==== pipewire ==== Version update (0.2.5 -> 0.2.6) Subpackages: libpipewire-0_2-1 pipewire-modules pipewire-spa-plugins pipewire-spa-tools pipewire-tools - Update to version 0.2.6: + Improve error checking for threads. + Fix some memory and fd leaks. + Fix compilation with C++ compilers and clang. + DISABLE_RTKIT should now not try to use dbus at all. + Camera Portal fixes: - add Camera media.role. - Rename module-flatpak to module-portal. - Use the portal permissions store for camera checks. + Actually use the passed fd in pipewiresrc. + Make properties with "pipewire." prefix read-only. + Add security label to client object. + Enforce link permissions. + Permissions of objects are now combined with parent permissions. + Remove libv4l2 dependency, it is not used. + Improve format negotiation in autolink #146. + Try to avoid list corruption with event emmission #143. + Fix destroy of client-node memory corruption. + Various small improvements. - Remove pkgconfig(libv4l2) BuildRequires: follow upstreams cleanup of build dependencies. - Drop avoid-invalid-conversion-error-with-C++.patch: fixed upstream. ==== polkit-default-privs ==== Version update (13.2+20190520.a67a2af -> 13.2+20190523.efe368f) - Update to version 13.2+20190523.efe368f: * polkit profiles: whitelist lightdm-gtk-greeter-settings (bsc#1135695) ==== python-kiwi ==== Version update (9.17.37 -> 9.17.39) - Bump version: 9.17.38 ? 9.17.39 - Update obs docs per review by Tom - Disable check-valid-until with repository_gpgcheck This commit is two fold: * From one side fixes a wrong use of the `trusted` option for apt repositories. `trusted=no` does not force to run the gpg checks it just forces the repository to be considered untrusted regardless the result of the security checks. * From the other side it disables the option `check-valid-until` in case gpg checks are disabled using the `repository_gpgcheck`. It works at repository level. This enables using unmaintained or expired repositories for the build. Fixes #1028 - Simplify shell pipe expression with shell builtin Replace "echo $var | sed ..." expression with ${var//SEARCH/REPLACE} shell builtin as suggested by Codacy - Make mediacheck runtime check arch independent The check_mediacheck_only_for_x86_arch runtime check fails on non x86 architectures but the tagmedia toolchain exists independent of the platform architecture. This Fixes #1091 - Set home as protected path Along with adding home to the protection list, cleanup the prepare instance cleanup code in a way that it only runs if a root_bind object exists which needs to call its cleanup path - Extend docs about building multiple profiles on OBS - Remove FIXME from the runtime configuration file example - Improve the documentation about building in the Build Service Co-Authored-By: Thomas Schraitle <tom_schr(a)web.de> - Turn sphinx warnings into errors Modify the sphinx Makefile to treat warnings like undefined references as errors - kiwi-live-lib: mount live ISO as read-only During the boot process of a live image, dracut shows this WARNING: dracut-initqueue: mount: /run/initramfs/live: WARNING: device write-protected, mounted read-only This is not a problem, as the live ISO image is, indeed, read-only. This patch fix this cosmetic issue being explicit in the mount options in `mountIso` function. - Call isolinux-config only on supported archs - Discard default dependencies for sysroot.mount This commit makes default dependencies from sysroot.mount to be explicitly omitted. This fixes potential inconsistencies in ordering pre-mount.service with local-fs.target. This change is also applied to upstream sysroot.mount generator here: https://github.com/systemd/systemd/pull/12281 Fixes #1015 - Fix locale setting For pre-Leap 15 openSUSE versions KIWI >= 9.12.0 was not completely setting locale, as it was missingto set the RC_LANG variable from `/etc/sysconfig/language` file. Current commit enforces to update locale in `/etc/sysconfig/language` (if the file exists) at the same time it applies systemd-firstboot configurations. Fixes #1081 - Cleanup TODO & FIXME from xml_description.rst - Add GitLab CI pipeline badge to README.rst - Extend the development documentation Co-Authored-By: Thomas Schraitle <tom_schr(a)web.de> - Log thrown exceptions in Compress.get_format() - Fix documentation of Compress.get_format() - log exception in SystemPrepare.__del__ - Use yaml.safe_load instead of yaml.load yaml.load is relatively dangerous when the loaded data comes from untrusted sources, as it can allow for arbitrary code execution, see: https://pyyaml.org/wiki/PyYAMLDocumentation#LoadingYAML safe_load limits the created python objects to the basic Python types like integers and strings, which is all that we need for the runtime configuration file. - Fixing doc source for broken refs and xml syntax - Document the usage of profiles via the CLI and OBS - Apply suggestions from @tomschr Co-Authored-By: dcermak <45594031+dcermak(a)users.noreply.github.com> - Improve the documentation of the runtime configuration file Co-Authored-By: Thomas Schraitle <tom_schr(a)web.de> - Apply suggestions from @tomschr Co-Authored-By: dcermak <45594031+dcermak(a)users.noreply.github.com> - Extend the documentation of Custom Disk Volumes - Add documentation of the XML schema in a tutorial like fashion Co-Authored-By: Thomas Schraitle <tom_schr(a)web.de> - Add documentation how to configure VMX build types - Cleanup warnings in utils/size.py - use a raw string for the regexp search string - improve the readability of the returned value - Make the user.password attribute mandatory Not providing a user password results in an error when usermod or openssl is later called by kiwi (depending on the value of `pwdformat`). This fixes #1061. - Fixed repo setup for cloud integration test builds Using the devel:languages:python repos leads to inconsistencies on the module dependencies - Bump version: 9.17.37 ? 9.17.38 - Delete obsolete repository types Deleted red-carpet, slack-site, up2date-mirrors, urpmi and yast2 from the allowed values list of the repository type attribute. This Fixes #1029 - Fixed build_in_buildservice stale references Fixed style issues reported on sphinx build. Also deleted pointers to non existing references - Delete suseRemovePackagesMarkedForDeletion Any package removal is controlled by kiwi itself. There is no need to provide a shell helper method that is rpm specific. This Fixes #1054 - Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063) LICENSES are usually not large and should be kept alongside of the binaries. Also some firmware files sideload additional txt files (like for example brcmfmac43430 needs the sdio description txt files). We should just always include them because they're not listed as needed files. Co-Authored-By: Dan ?erm�k <dcermak(a)suse.com> - Split overview/workflow.rst into multiple files Co-Authored-By: Thomas Schraitle <tom_schr(a)web.de> - Update doc/source/building/build_in_buildservice.rst Co-Authored-By: dcermak <45594031+dcermak(a)users.noreply.github.com> - Rework documentation about building on OBS - Added integration test guest image for OpenStack - Update suse integration tests per Factory changes The way plymouth themes are provided has changed on suse. The package plymouth-branding-openSUSE is no longer providing the theme named openSUSE. In fact the plan is to switch to the upstream bgrt theme which is provided in another package. This commit adapts to the changes in the distribution - Bump copyright year in the docs ==== python-pexpect ==== Version update (4.6.0 -> 4.7.0) - Update to 4.7.0: * The :meth:`.pxssh.login` method now no longer requires a username if an ssh config is provided and will raise an error if neither are provided. (:ghpull:`562`). * The :meth:`.pxssh.login` method now supports providing your own ssh command via the cmd parameter. (:ghpull:`528`) (:ghpull:`563`). * :class:`.pxssh` now supports the use_poll parameter which is passed into :meth:`.pexpect.spawn` (:ghpull:`542`). * Minor bug fix with ssh_config. (:ghpull:`498`). * :meth:`.replwrap.run_command` now has async support via an async_ parameter. (:ghpull:`501`). * :meth:`.pexpect.spawn` will now read additional bytes if able up to a buffer limit. (:ghpull:`304`). - Drop merged patch fix-test.patch ==== python-pyasn1-modules ==== Version update (0.2.4 -> 0.2.5) - Update to 0.2.5: - Added RFC3560 providing RSAES-OAEP Key Transport Algorithm in CMS - Added RFC6019 providing BinaryTime - an alternate format for representing Date and Time - RFC3565 superseded by RFC5649 - Added RFC5480 providng Elliptic Curve Cryptography Subject Public Key Information - Added RFC8520 providing X.509 Extensions for MUD URL and MUD Signer - Added RFC3161 providing Time-Stamp Protocol support - Added RFC3709 providing Logotypes in X.509 Certificates - Added RFC3274 providing CMS Compressed Data Content Type - Added RFC4073 providing Multiple Contents protection with CMS - Execute testsuite ==== python-requests ==== Version update (2.21.0 -> 2.22.0) - Update to 2.22.0: * Requests now supports urllib3 v1.25.2. (note: 1.25.0 and 1.25.1 are incompatible) - Rebase requests-no-hardcoded-version.patch ==== ruby2.6 ==== Subpackages: libruby2_6-2_6 ruby2.6-devel - Move RPM macros to %_rpmmacrodir. ==== spandsp ==== - Disable LTO (boo#1136056). ==== webkit2gtk3 ==== Version update (2.24.1 -> 2.24.2) Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 libwebkit2gtk3-lang typelib-1_0-JavaScriptCore-4_0 typelib-1_0-WebKit2-4_0 webkit2gtk-4_0-injected-bundles - Update to version 2.24.2: + Fix rendering of emojis copy-pasted from GTK emoji chooser. + Fix space characters not being rendered with some CJK fonts. + Fix adaptive streaming playback with older GStreamer versions. + Set a maximum zoom level for pinch zooming gesture. + Fix navigation gesture to not interfere with scrolling. + Fix SSE2 detection at compile time, ensuring the right flags are passed to the compiler. + Fix several crashes and rendering issues. + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615. + Updated translations. - Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream. ==== wireshark ==== Version update (3.0.1 -> 3.0.2) Subpackages: libwireshark12 libwiretap9 libwscodecs2 libwsutil10 wireshark-ui-qt - Wireshark 3.0.2 (bsc#1136021) * Wireshark dissection engine crash. - Further features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-3.0.2.html ==== yast2-add-on ==== Version update (4.1.11 -> 4.1.12) - Fix: Update repository will be registered while installing an add-on on a running system (bsc#1055126). - 4.1.12 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

4 4