October 2021 - openSUSE ARM - openSUSE Mailing Lists

ARMv9
by Matwey V. Kornilov 10 Sep '24

10 Sep '24

Hello, There was an announce of ARMv9 architecture recently: https://www.arm.com/company/news/2021/03/arms-answer-to-the-future-of-ai-ar… As soon as I could understand it is still old good aarch64 instruction set with mandatory SVE2 extensions. But what does it mean exactly from the packaging perspective? For instance, will we have two separate flavours of glibc for armv8 and for armv9 as it was for i586 and i686 in good old times? -- With best regards, Matwey V. Kornilov

4 3

New ARM Tumbleweed snapshot 20210108 released!
by Guillaume Gardet 26 Aug '24

26 Aug '24

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.0.10.45 -> 7.0.10.49) Mesa (20.2.4 -> 20.3.2) Mesa-drivers (20.2.4 -> 20.3.2) MozillaFirefox (82.0.3 -> 84.0.1) MozillaThunderbird (78.5.1 -> 78.6.0) NetworkManager PackageKit SDL2 (2.0.12 -> 2.0.14) acpid akonadi-calendar (20.08.3 -> 20.12.1) akonadi-calendar-tools (20.08.3 -> 20.12.1) akonadi-contact (20.08.3 -> 20.12.1) akonadi-import-wizard (20.08.3 -> 20.12.1) akonadi-mime (20.08.3 -> 20.12.1) akonadi-notes (20.08.3 -> 20.12.1) akonadi-search (20.08.3 -> 20.12.1) akonadi-server (20.08.3 -> 20.12.1) akregator (20.08.3 -> 20.12.1) alsa-ucm-conf alsa-utils amarok (2.9.70git.20200930T124856~3973278a68 -> 2.9.70git.20201222T022603~89d13c15ad) amavisd-new (2.12.0 -> 2.12.1) analitza (20.08.3 -> 20.12.0) apache2 apache2-mod_php7 (7.4.13 -> 7.4.14) apache2-prefork apache2-utils ark (20.08.3 -> 20.12.1) aspell-en (2019.10.06 -> 2020.12.07) atkmm1_6 (2.28.0 -> 2.28.1) attica-qt5 (5.76.0 -> 5.77.0) audit audit-secondary autoyast2 (4.3.63 -> 4.3.64) babl (0.1.82 -> 0.1.84) baloo5 (5.76.0 -> 5.77.0) baloo5-widgets (20.08.3 -> 20.12.1) bcm20702a1-firmware bind (9.16.8 -> 9.16.10) blinken (20.08.3 -> 20.12.0) bluedevil5 (5.20.4 -> 5.20.5) bluez-qt (5.76.0 -> 5.77.0) bovo (20.08.3 -> 20.12.0) breeze (5.20.4 -> 5.20.5) breeze-gtk (5.20.4 -> 5.20.5) breeze5-icons (5.76.0 -> 5.77.0) breezy busybox (1.32.0 -> 1.32.1) busybox-links (1.32.0 -> 1.32.1) calendarsupport (20.08.3 -> 20.12.1) cantarell-fonts (0.201 -> 0.301) cervisia (20.08.3 -> 20.12.0) cppcheck (2.1 -> 2.3) crash (7.2.8_k5.9.14_1 -> 7.2.8_k5.10.4_1) curl (7.73.0 -> 7.74.0) cyrus-sasl dar (2.6.12 -> 2.6.13) dav1d (0.8.0 -> 0.8.1) discover (5.20.4 -> 5.20.5) distribution-logos-openSUSE djvulibre (3.5.27 -> 3.5.28) dolphin (20.08.3 -> 20.12.1) dracut (050+suse.250.ge6b6e843 -> 051+suse.84.gc6bd70b8) dragonplayer (20.08.3 -> 20.12.1) drkonqi5 (5.20.4 -> 5.20.5) elfutils-debuginfod ell (0.33 -> 0.35) ethtool (5.9 -> 5.10) eventviews (20.08.3 -> 20.12.1) fetchmail (6.4.12 -> 6.4.15) ffmpegthumbs (20.08.3 -> 20.12.0) flatpak fprintd (1.90.6 -> 1.90.8) frameworkintegration (5.76.0 -> 5.77.0) fuse fuse3 (3.10.0 -> 3.10.1) fwupd gdbm (1.18.1 -> 1.19) gegl (0.4.26 -> 0.4.28) geoclue2 (2.5.4 -> 2.5.6) gimp glib2 (2.66.3 -> 2.66.4) glibc gmp (6.2.0 -> 6.2.1) gnome-disk-utility (3.38.0 -> 3.38.1) gnome-shell gnome-tweaks (3.34.0 -> 3.34.1) grantleetheme (20.08.3 -> 20.12.1) gstreamer gstreamer-devtools gstreamer-plugins-bad gtk2 (2.24.32+70 -> 2.24.33) gtkmm3 (3.24.2 -> 3.24.3) gwenview5 (20.08.3 -> 20.12.1) harfbuzz (2.7.2 -> 2.7.4) haveged (1.9.13 -> 1.9.14) hdjmod (1.28_k5.9.14_1 -> 1.28_k5.10.4_1) hdparm (9.58 -> 9.60) highlight (3.59 -> 3.60) icewm (1.6.5 -> 2.0.0) ilmbase (2.5.3 -> 2.5.4) incidenceeditor (20.08.3 -> 20.12.1) inotify-tools (3.20.2.2 -> 3.20.11.0) ipset (7.9 -> 7.10) juk (20.08.3 -> 20.12.0) k3b (20.08.3 -> 20.12.0) kaccounts-integration (20.08.3 -> 20.12.1) kaccounts-providers (20.08.3 -> 20.12.1) kactivities-stats (5.76.0 -> 5.77.0) kactivities5 (5.76.0 -> 5.77.0) kactivitymanagerd (5.20.4 -> 5.20.5) kaddressbook (20.08.3 -> 20.12.1) kalarmcal (20.08.3 -> 20.12.1) kalgebra (20.08.3 -> 20.12.0) kamera (20.08.3 -> 20.12.1) kanagram (20.08.3 -> 20.12.0) kapptemplate (20.08.3 -> 20.12.0) karchive (5.76.0 -> 5.77.0) kate (20.08.3 -> 20.12.1) katomic (20.08.3 -> 20.12.0) kauth (5.76.0 -> 5.77.0) kblackbox (20.08.3 -> 20.12.0) kblocks (20.08.3 -> 20.12.0) kbookmarks (5.76.0 -> 5.77.0) kbounce (20.08.3 -> 20.12.0) kbreakout (20.08.3 -> 20.12.0) kbruch (20.08.3 -> 20.12.0) kcachegrind (20.08.3 -> 20.12.0) kcalc (20.08.3 -> 20.12.1) kcalendarcore (5.76.0 -> 5.77.0) kcalutils (20.08.3 -> 20.12.1) kcharselect (20.08.3 -> 20.12.1) kcm_sddm (5.20.4 -> 5.20.5) kcmutils (5.76.0 -> 5.77.0) kcodecs (5.76.0 -> 5.77.0) kcolorchooser (20.08.3 -> 20.12.1) kcompletion (5.76.0 -> 5.77.0) kconfig (5.76.0 -> 5.77.0) kconfigwidgets (5.76.0 -> 5.77.0) kcontacts (5.76.0 -> 5.77.0) kcoreaddons (5.76.0 -> 5.77.0) kcrash (5.76.0 -> 5.77.0) kcron (20.08.3 -> 20.12.0) kdav (5.76.0 -> 5.77.0) kdbusaddons (5.76.0 -> 5.77.0) kde-cli-tools5 (5.20.4 -> 5.20.5) kde-gtk-config5 (5.20.4 -> 5.20.5) kde-print-manager (20.08.3 -> 20.12.1) kdeclarative (5.76.0 -> 5.77.0) kdeconnect-kde (20.08.3 -> 20.12.1) kded (5.76.0 -> 5.77.0) kdeedu-data (20.08.3 -> 20.12.0) kdegraphics-thumbnailers (20.08.3 -> 20.12.0) kdelibs4support (5.76.0 -> 5.77.0) kdepim-addons (20.08.3 -> 20.12.1) kdepim-runtime (20.08.3 -> 20.12.1) kdesu (5.76.0 -> 5.77.0) kdf (20.08.3 -> 20.12.0) kdialog (20.08.3 -> 20.12.1) kdiamond (20.08.3 -> 20.12.0) kdnssd-framework (5.76.0 -> 5.77.0) kdoctools (5.76.0 -> 5.77.0) kemoticons (5.76.0 -> 5.77.0) kernel-64kb (5.9.14 -> 5.10.4) kernel-firmware (20201130 -> 20201218) kernel-source (5.9.14 -> 5.10.4) keyutils (1.6 -> 1.6.3) kfilemetadata5 (5.76.0 -> 5.77.0) kgamma5 (5.20.4 -> 5.20.5) kgeography (20.08.3 -> 20.12.0) kget (20.08.3 -> 20.12.0) kglobalaccel (5.76.0 -> 5.77.0) kgoldrunner (20.08.3 -> 20.12.0) kguiaddons (5.76.0 -> 5.77.0) khangman (20.08.3 -> 20.12.0) khelpcenter5 (20.08.3 -> 20.12.1) kholidays (5.76.0 -> 5.77.0) khotkeys5 (5.20.4 -> 5.20.5) khtml (5.76.0 -> 5.77.0) ki18n (5.76.0 -> 5.77.0) kiconthemes (5.76.0 -> 5.77.0) kidentitymanagement (20.08.3 -> 20.12.1) kidletime (5.76.0 -> 5.77.0) kig (20.08.3 -> 20.12.0) kimageformats (5.76.0 -> 5.77.0) kimap (20.08.3 -> 20.12.1) kinfocenter5 (5.20.4 -> 5.20.5) kinit (5.76.0 -> 5.77.0) kio (5.76.0 -> 5.77.0) kio-extras5 (20.08.3 -> 20.12.1) kio_audiocd (20.08.3 -> 20.12.1) kipi-plugins (20.08.3 -> 20.12.0) kirigami2 (5.76.0 -> 5.77.0) kiriki (20.08.3 -> 20.12.0) kismet (2020_09_R4 -> 2020_12_R3) kitemmodels (5.76.0 -> 5.77.0) kitemviews (5.76.0 -> 5.77.0) kiten (20.08.3 -> 20.12.0) kitinerary (20.08.3 -> 20.12.1) kjobwidgets (5.76.0 -> 5.77.0) kjs (5.76.0 -> 5.77.0) kjumpingcube (20.08.3 -> 20.12.0) kldap (20.08.3 -> 20.12.1) kleopatra (20.08.3 -> 20.12.1) klines (20.08.3 -> 20.12.0) kmag (20.08.3 -> 20.12.1) kmahjongg (20.08.3 -> 20.12.0) kmail (20.08.3 -> 20.12.1) kmail-account-wizard (20.08.3 -> 20.12.1) kmailtransport (20.08.3 -> 20.12.1) kmbox (20.08.3 -> 20.12.1) kmenuedit5 (5.20.4 -> 5.20.5) kmime (20.08.3 -> 20.12.1) kmines (20.08.3 -> 20.12.0) kmousetool (20.08.3 -> 20.12.1) kmouth (20.08.3 -> 20.12.0) kmplot (20.08.3 -> 20.12.0) knavalbattle (20.08.3 -> 20.12.0) knetwalk (20.08.3 -> 20.12.0) knewstuff (5.76.0 -> 5.77.0) knotes (20.08.3 -> 20.12.1) knotifications (5.76.0 -> 5.77.0) knotifyconfig (5.76.0 -> 5.77.0) kolf (20.08.3 -> 20.12.0) kollision (20.08.3 -> 20.12.0) kolourpaint (20.08.3 -> 20.12.0) kompare (20.08.3 -> 20.12.1) konquest (20.08.3 -> 20.12.0) konsole (20.08.3 -> 20.12.1) kontact (20.08.3 -> 20.12.1) kontactinterface (20.08.3 -> 20.12.1) konversation (1.7.7 -> 20.12.1) kopete (20.08.3 -> 20.12.1) korganizer (20.08.3 -> 20.12.1) kpackage (5.76.0 -> 5.77.0) kparts (5.76.0 -> 5.77.0) kpat (20.08.3 -> 20.12.0) kpeople5 (5.76.0 -> 5.77.0) kpimtextedit (20.08.3 -> 20.12.1) kpkpass (20.08.3 -> 20.12.1) kplotting (5.76.0 -> 5.77.0) kpty (5.76.0 -> 5.77.0) kqtquickcharts (20.08.3 -> 20.12.0) kquickcharts (5.76.0 -> 5.77.0) krb5 (1.18.2 -> 1.18.3) krdc (20.08.3 -> 20.12.0) kreversi (20.08.3 -> 20.12.0) krfb (20.08.3 -> 20.12.0) kross (5.76.0 -> 5.77.0) kruler (20.08.3 -> 20.12.1) krunner (5.76.0 -> 5.77.0) kscreen5 (5.20.4 -> 5.20.5) kscreenlocker (5.20.4 -> 5.20.5) kservice (5.76.0 -> 5.77.0) kshisen (20.08.3 -> 20.12.0) ksirk (20.08.3 -> 20.12.0) ksmtp (20.08.3 -> 20.12.1) kspaceduel (20.08.3 -> 20.12.0) ksquares (20.08.3 -> 20.12.0) ksshaskpass5 (5.20.4 -> 5.20.5) ksudoku (20.08.3 -> 20.12.0) ksysguard5 (5.20.4 -> 5.20.5) ksystemlog (20.08.3 -> 20.12.0) kteatime (20.08.3 -> 20.12.0) ktexteditor (5.76.0 -> 5.77.0) ktextwidgets (5.76.0 -> 5.77.0) ktimer (20.08.3 -> 20.12.0) ktnef (20.08.3 -> 20.12.1) ktouch (20.08.3 -> 20.12.0) kturtle (20.08.3 -> 20.12.0) kubrick (20.08.3 -> 20.12.0) kunitconversion (5.76.0 -> 5.77.0) kvm_stat (5.9.12 -> 5.10.4) kwallet (5.76.0 -> 5.77.0) kwalletmanager5 (20.08.3 -> 20.12.1) kwayland (5.76.0 -> 5.77.0) kwayland-integration (5.20.4 -> 5.20.5) kwayland-server (5.20.4 -> 5.20.5) kwidgetsaddons (5.76.0 -> 5.77.0) kwin5 (5.20.4 -> 5.20.5) kwindowsystem (5.76.0 -> 5.77.0) kwordquiz (20.08.3 -> 20.12.0) kwrited5 (5.20.4 -> 5.20.5) kxmlgui (5.76.0 -> 5.77.0) libKF5ModemManagerQt (5.76.0 -> 5.77.0) libKF5NetworkManagerQt (5.76.0 -> 5.77.0) libappindicator3 libcdr libdrm (2.4.102 -> 2.4.103) libe-book libebml (1.4.0 -> 1.4.1) libepoxy (1.5.4 -> 1.5.5) liberation-fonts (2.1.1 -> 2.1.2) libgravatar (20.08.3 -> 20.12.1) libgsasl (1.8.1 -> 1.10.0) libhandy (1.0.2 -> 1.0.3) libheif (1.9.1 -> 1.10.0) libical-glib libimagequant (2.12.6 -> 2.13.1) libiscsi (1.19.0+git.20201023 -> 1.19.0+git.20201217) libjpeg-turbo (2.0.5 -> 2.0.6) libkcddb (20.08.3 -> 20.12.1) libkcompactdisc (20.08.3 -> 20.12.1) libkdcraw (20.08.3 -> 20.12.1) libkdecoration2 (5.20.4 -> 5.20.5) libkdegames (20.08.3 -> 20.12.0) libkdepim (20.08.3 -> 20.12.1) libkeduvocdocument (20.08.3 -> 20.12.0) libkexiv2 (20.08.3 -> 20.12.1) libkgapi (20.08.3 -> 20.12.1) libkipi (20.08.3 -> 20.12.1) libkleo (20.08.3 -> 20.12.1) libkmahjongg (20.08.3 -> 20.12.0) libkolabxml libkomparediff2 (20.08.3 -> 20.12.1) libksane (20.08.3 -> 20.12.1) libkscreen2 (5.20.4 -> 5.20.5) libksieve (20.08.3 -> 20.12.1) libksysguard5 (5.20.4 -> 5.20.5) libktorrent (2.2.0 -> 20.12.0) libopenmpt (0.5.0 -> 0.5.4) libproxy (0.4.15 -> 0.4.17) libproxy-plugins (0.4.15 -> 0.4.17) libqt5-qtbase libqt5-qtwebengine libqt5-qtwebkit librdkafka (1.5.2 -> 1.5.3) libreoffice libstorage-ng (4.3.72 -> 4.3.78) libtirpc (1.2.6 -> 1.3.1) libusb-1_0 (1.0.23 -> 1.0.24) libva (2.9.1 -> 2.10.0) libva-gl (2.9.1 -> 2.10.0) libvirt libxml2 lilv (0.24.6 -> 0.24.10) linux-glibc-devel (5.9 -> 5.10) llvm11 lokalize (20.08.3 -> 20.12.0) lskat (20.08.3 -> 20.12.0) mailcommon (20.08.3 -> 20.12.1) mailimporter (20.08.3 -> 20.12.1) man-pages (5.09 -> 5.10) man-pages-ja (20201115 -> 20201215) mariadb mbox-importer (20.08.3 -> 20.12.0) messagelib (20.08.3 -> 20.12.1) milou5 (5.20.4 -> 5.20.5) miniupnpc mobile-broadband-provider-info (20190618 -> 20201225) mobipocket (20.08.3 -> 20.12.1) mozilla-nss (3.58 -> 3.59.1) mpg123 (1.26.3 -> 1.26.4) multipath-tools (0.8.4+192+suse.1bc10ad -> 0.8.5+12+suse.3b0e9ca) mutt (2.0.3 -> 2.0.4) myspell-dictionaries (20201005 -> 20201230) nano ncurses (6.2.20201031 -> 6.2.20201205) net-snmp netcat-openbsd netpbm (10.88.1 -> 10.93.0) nghttp2 (1.41.0 -> 1.42.0) nodejs14 (14.15.1 -> 14.15.4) numactl oath-toolkit (2.6.2 -> 2.6.5) okular (20.08.3 -> 20.12.1) open-iscsi openblas_openmp (0.3.12 -> 0.3.13) openblas_pthreads (0.3.12 -> 0.3.13) openexr (2.5.3 -> 2.5.4) openldap2 openssh openssl-1_1 orca (3.38.1 -> 3.38.2) oxygen5 (5.20.4 -> 5.20.5) pangomm1_4 (2.42.1 -> 2.42.2) parley (20.08.3 -> 20.12.0) patterns-base pcre2 (10.35 -> 10.36) perl-Image-ExifTool (12.10 -> 12.13) perl-LWP-Protocol-https (6.09 -> 6.10) perl-Mojolicious (8.67 -> 8.70) perl-Term-ReadLine-Gnu (1.36 -> 1.37) perl-Text-CSV_XS (1.44 -> 1.45) perl-libwww-perl (6.49 -> 6.51) php7 (7.4.13 -> 7.4.14) pim-data-exporter (20.08.3 -> 20.12.0) pim-sieve-editor (20.08.3 -> 20.12.0) pimcommon (20.08.3 -> 20.12.1) plasma-browser-integration (5.20.4 -> 5.20.5) plasma-framework (5.76.0 -> 5.77.0) plasma-nm5 (5.20.4 -> 5.20.5) plasma5-addons (5.20.4 -> 5.20.5) plasma5-desktop (5.20.4 -> 5.20.5) plasma5-disks (5.20.4 -> 5.20.5) plasma5-integration (5.20.4 -> 5.20.5) plasma5-openSUSE plasma5-pa (5.20.4 -> 5.20.5) plasma5-thunderbolt (5.20.4 -> 5.20.5) plasma5-workspace (5.20.4 -> 5.20.5) pngquant (2.12.6 -> 2.13.1) polkit polkit-kde-agent-5 (5.20.4 -> 5.20.5) poppler (20.12.0 -> 20.12.1) poppler-qt5 (20.12.0 -> 20.12.1) postgresql13 powerdevil5 (5.20.4 -> 5.20.5) prison-qt5 (5.76.0 -> 5.77.0) privoxy (3.0.28 -> 3.0.29) publicsuffix (20201026 -> 20201223) pulseaudio purpose (5.76.0 -> 5.77.0) python-Babel (2.8.0 -> 2.9.0) python-Mako python-Pillow python-argcomplete (1.11.1 -> 1.12.2) python-atspi python-cached-property (1.5.1 -> 1.5.2) python-certifi (2020.11.8 -> 2020.12.5) python-cffi (1.14.3 -> 1.14.4) python-chardet (3.0.4 -> 4.0.0) python-cryptography (3.3 -> 3.3.1) python-dbus-python python-dnspython python-dulwich (0.20.11 -> 0.20.15) python-ecdsa (0.16.0 -> 0.16.1) python-gevent python-geventhttpclient python-hpack (3.0.0 -> 4.0.0) python-importlib-metadata (2.0.0 -> 3.3.0) python-kiwisolver (1.2.0 -> 1.3.1) python-libxml2 python-mailman python-more-itertools (8.5.0 -> 8.6.0) python-msgpack (1.0.0 -> 1.0.2) python-notify2 python-parso (0.7.0 -> 0.7.1) python-pyOpenSSL (19.1.0 -> 20.0.0) python-pycurl python-python-xlib (0.27 -> 0.29) python-pytz (2020.4 -> 2020.5) python-pyudev python-qt5 python-requests (2.25.0 -> 2.25.1) python-requests-toolbelt python-scipy (1.5.2 -> 1.5.4) python-setproctitle (1.2 -> 1.2.1) python-setuptools python-typing_extensions python-urllib3 (1.25.10 -> 1.26.2) python-urwid (2.1.1 -> 2.1.2) qalculate (3.14.0 -> 3.15.0) qqc2-desktop-style (5.76.0 -> 5.77.0) raspberrypi-firmware (2020.12.08 -> 2020.12.15) raspberrypi-firmware-config (2020.12.08 -> 2020.12.15) readline rtl_433 (20.02+git.20200218 -> 20.11) rubygem-ffi (1.13.1 -> 1.14.2) rubygem-grape (1.4.0 -> 1.5.1) rubygem-json (2.3.1 -> 2.5.1) rubygem-net-ldap (0.16.3 -> 0.17.0) rubygem-nokogiri (1.10.10 -> 1.11.0) rubygem-rubocop (1.4.2 -> 1.7.0) rubygem-rubocop-ast (1.1.1 -> 1.4.0) rubygem-tzinfo (2.0.3 -> 2.0.4) rubygem-yajl-ruby rygel samba (4.13.2+git.176.0a5e55b510c -> 4.13.3+git.181.fc4672a5b81) signon-kwallet-extension (20.08.3 -> 20.12.1) snapper (0.8.14 -> 0.8.15) solid (5.76.0 -> 5.77.0) sonnet (5.76.0 -> 5.77.0) sord (0.16.4 -> 0.16.6) spamassassin spectacle (20.08.3 -> 20.12.1) step (20.08.3 -> 20.12.0) strace (5.9 -> 5.10) sudo (1.9.4 -> 1.9.4p2) sweeper (20.08.3 -> 20.12.0) syndication (5.76.0 -> 5.77.0) syntax-highlighting (5.76.0 -> 5.77.0) system-users systemd (246.7 -> 246.9) systemsettings5 (5.20.4 -> 5.20.5) sysuser-tools threadweaver (5.76.0 -> 5.77.0) tiff (4.1.0 -> 4.2.0) timezone (2020d -> 2020f) timezone-java (2020d -> 2020f) tlp totem u-boot-rpiarm64 udisks2 umbrello (20.08.3 -> 20.12.0) utf8proc (2.5.0 -> 2.6.1) v4l2loopback (0.12.5_k5.9.14_1 -> 0.12.5_k5.10.4_1) vim (8.2.2105 -> 8.2.2129) virt-manager vlc vulkan-loader (1.2.154.1 -> 1.2.162.0) webkit2gtk3 (2.30.3 -> 2.30.4) wget (1.20.3 -> 1.21) wireless-regdb wireshark (3.4.0 -> 3.4.2) wxWidgets-3_0 (3.0.4 -> 3.0.5.1) xapps (2.0.0 -> 2.0.4) xdg-desktop-portal-kde (5.20.4 -> 5.20.5) xdm xen (4.14.0_12 -> 4.14.1_05) xf86-video-r128 (6.11.0 -> 6.12.0) xfce4-mailwatch-plugin (1.2.0 -> 1.3.0) xfce4-places-plugin xfce4-smartbookmark-plugin (0.5.1 -> 0.5.2) xmlsec1 (1.2.30 -> 1.2.31) xreader (2.8.0 -> 2.8.1) yakuake (20.08.3 -> 20.12.0) yast2 (4.3.45 -> 4.3.46) yast2-alternatives (4.3.0 -> 4.3.1) yast2-country (4.3.10 -> 4.3.11) yast2-firstboot (4.3.9 -> 4.3.10) yast2-network (4.3.32 -> 4.3.37) yast2-pkg-bindings (4.3.4 -> 4.3.5) yast2-schema (4.3.15 -> 4.3.16) yast2-security (4.3.5 -> 4.3.7) yast2-storage-ng (4.3.28 -> 4.3.35) yast2-trans (84.87.20201205.6b65f14502 -> 84.87.20201231.ee5608b05e) yast2-tune (4.2.3 -> 4.3.1) yast2-vm (4.2.4 -> 4.2.5) zchunk zstd (1.4.5 -> 1.4.8) === Details === ==== ImageMagick ==== Version update (7.0.10.45 -> 7.0.10.49) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagick++-7_Q16HDRI4 libMagickCore-7_Q16HDRI8 libMagickWand-7_Q16HDRI8 - version update to 7.0.10.49 * correct previous patch to read planar RGB TIFF images. * Repair unit test failures (reference https://github.com/ImageMagick/ImageMagick/issues/2959) * support YAML image format. * use generic TIFF read method for LZW-compressed strips (reference https://github.com/ImageMagick/ImageMagick/discussions/2935) * possible TIFF related-heap buffer overflow (alert & POC by Hardik Shah). * set default system font in policy.xml configuration file. * support portable float map format 16-bit half. - modified patches % ImageMagick-configuration-SUSE.patch (refreshed) ==== Mesa ==== Version update (20.2.4 -> 20.3.2) Subpackages: Mesa-dri-devel Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - update to 20.3.2 * third bugfix release for the 20.3 branch - drm and surfaceless are not specified as platforms anymore, remove them from egl_platforms ==== Mesa-drivers ==== Version update (20.2.4 -> 20.3.2) Subpackages: Mesa-dri Mesa-dri-nouveau Mesa-gallium Mesa-libva libvdpau_nouveau libvdpau_r300 libvdpau_r600 libvdpau_radeonsi - update to 20.3.2 * third bugfix release for the 20.3 branch - drm and surfaceless are not specified as platforms anymore, remove them from egl_platforms ==== MozillaFirefox ==== Version update (82.0.3 -> 84.0.1) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 84.0.1 * Fixed problems loading secure websites and crashes for users with certain third-party PKCS11 modules and smartcards installed (bmo#1682881) (fixed in NSS 3.59.1) * Fixed a bug causing some Unity JS games to not load on Apple Silicon devices due to improper detection of the OS version (bmo#1680516) - requires NSS 3.59.1 - Mozilla Firefox 84.0 * Firefox 84 is the final release to support Adobe Flash * WebRender is enabled by default when run on GNOME-based X11 Linux desktops MFSA 2020-54 (bsc#1180039)) * CVE-2020-16042 (bmo#1679003) Operations on a BigInt could have caused uninitialized memory to be exposed * CVE-2020-26971 (bmo#1663466) Heap buffer overflow in WebGL * CVE-2020-26972 (bmo#1671382) Use-After-Free in WebGL * CVE-2020-26973 (bmo#1680084) CSS Sanitizer performed incorrect sanitization * CVE-2020-26974 (bmo#1681022) Incorrect cast of StyleGenericFlexBasis resulted in a heap use-after-free * CVE-2020-26975 (bmo#1661071) Malicious applications on Android could have induced Firefox for Android into sending arbitrary attacker-specified headers * CVE-2020-26976 (bmo#1674343) HTTPS pages could have been intercepted by a registered service worker when they should not have been * CVE-2020-26977 (bmo#1676311) URL spoofing via unresponsive port in Firefox for Android * CVE-2020-26978 (bmo#1677047) Internal network hosts could have been probed by a malicious webpage * CVE-2020-26979 (bmo#1641287, bmo#1673299) When entering an address in the address or search bars, a website could have redirected the user before they were navigated to the intended url * CVE-2020-35111 (bmo#1657916) The proxy.onRequest API did not catch view-source URLs * CVE-2020-35112 (bmo#1661365) Opening an extension-less download may have inadvertently launched an executable instead * CVE-2020-35113 (bmo#1664831, bmo#1673589) Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6 * CVE-2020-35114 (bmo#1607449, bmo#1640416, bmo#1656459, bmo#1669914, bmo#1673567) Memory safety bugs fixed in Firefox 84 - requires NSS >= 3.59 rust >= 1.44 rust-cbindgen >= 0.15.0 - remove revert-795c8762b16b.patch and replace with mozilla-pgo.patch - Add/Enable GNOME search provider - Mozilla Firefox 83.0 * major update for SpiderMonkey improving performance significantly * optional HTTPS-Only mode * more improvements https://www.mozilla.org/en-US/firefox/83.0/releasenotes/ MFSA 2020-50 (bsc#1178824)) * CVE-2020-26951 (bmo#1667113) Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code * CVE-2020-26952 (bmo#1667685) Out of memory handling of JITed, inlined functions could lead to a memory corruption * CVE-2020-16012 (bmo#1642028) Variable time processing of cross-origin images during drawImage calls * CVE-2020-26953 (bmo#1656741) Fullscreen could be enabled without displaying the security UI * CVE-2020-26954 (bmo#1657026) Local spoofing of web manifests for arbitrary pages in Firefox for Android * CVE-2020-26955 (bmo#1663261) Cookies set during file downloads are shared between normal and Private Browsing Mode in Firefox for Android * CVE-2020-26956 (bmo#1666300) XSS through paste (manual and clipboard API) * CVE-2020-26957 (bmo#1667179) OneCRL was not working in Firefox for Android * CVE-2020-26958 (bmo#1669355) Requests intercepted through ServiceWorkers lacked MIME type restrictions * CVE-2020-26959 (bmo#1669466) Use-after-free in WebRequestService * CVE-2020-26960 (bmo#1670358) Potential use-after-free in uses of nsTArray * CVE-2020-15999 (bmo#1672223) Heap buffer overflow in freetype * CVE-2020-26961 (bmo#1672528) DoH did not filter IPv4 mapped IP Addresses * CVE-2020-26962 (bmo#610997) Cross-origin iframes supported login autofill * CVE-2020-26963 (bmo#1314912) History and Location interfaces could have been used to hang the browser * CVE-2020-26964 (bmo#1658865) Firefox for Android's Remote Debugging via USB could have been abused by untrusted apps on older versions of Android * CVE-2020-26965 (bmo#1661617) Software keyboards may have remembered typed passwords * CVE-2020-26966 (bmo#1663571) Single-word search queries were also broadcast to local network * CVE-2020-26967 (bmo#1665820) Mutation Observers could break or confuse Firefox Screenshots feature * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697, bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479, bmo#1671923) Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5 * CVE-2020-26969 (bmo#1623920, bmo#1651705, bmo#1667872, bmo#1668876) Memory safety bugs fixed in Firefox 83 - requires NSS >= 3.58 nodejs >= 10.22.1 - removed obsolete mozilla-ppc-altivec_static_inline.patch - disable LTO on TW because of ICEs in gcc ==== MozillaThunderbird ==== Version update (78.5.1 -> 78.6.0) - Mozilla Thunderbird 78.6.0 * changes and additions in MailExtensions * several bugfixes * https://www.thunderbird.net/en-US/thunderbird/78.6.0/releasenotes/ MFSA 2020-56 (bsc#1180039)) * CVE-2020-16042 (bmo#1679003) Operations on a BigInt could have caused uninitialized memory to be exposed * CVE-2020-26971 (bmo#1663466) Heap buffer overflow in WebGL * CVE-2020-26973 (bmo#1680084) CSS Sanitizer performed incorrect sanitization * CVE-2020-26974 (bmo#1681022) Incorrect cast of StyleGenericFlexBasis resulted in a heap use-after-free * CVE-2020-26978 (bmo#1677047) Internal network hosts could have been probed by a malicious webpage * CVE-2020-35111 (bmo#1657916) The proxy.onRequest API did not catch view-source URLs * CVE-2020-35112 (bmo#1661365) Opening an extension-less download may have inadvertently launched an executable instead * CVE-2020-35113 (bmo#1664831, bmo#1673589) Memory safety bugs fixed in Thunderbird 78.6 ==== NetworkManager ==== Subpackages: libnm0 typelib-1_0-NM-1_0 - Second attempt to exclude systemd.automount from nfs processing: fix boo#1116625 ==== PackageKit ==== Subpackages: PackageKit-backend-zypp PackageKit-gstreamer-plugin PackageKit-gtk3-module libpackagekit-glib2-18 typelib-1_0-PackageKitGlib-1_0 - Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when calling pk_dbus_get_uid() before D-Bus is setup. ==== SDL2 ==== Version update (2.0.12 -> 2.0.14) - update to 2.0.14: * Added support for PS5 DualSense and Xbox Series X controllers to the HIDAPI controller driver * Vulkan support to the KMSDRM video driver * see details on https://discourse.libsdl.org/t/sdl-2-0-14-released/28470 ==== acpid ==== - spec-cleaner run ==== akonadi-calendar ==== Version update (20.08.3 -> 20.12.1) Subpackages: akonadi-calendar-lang akonadi-plugin-calendar libKF5AkonadiCalendar5 - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - Changes since 20.12.0: * calendarbase.cpp - handleUidChange(): reload memory calendar - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - Changes since 20.11.90: * Serializer: fix endianness on magic; rewind before load. - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Modernize code * Serializer: don't use seek() on sequential devices * Fix generate pri file * If include is define in .h remove it if it's defined in .cpp too (scripted) * Time to increase version * Add missing lib * Port QRegExp to QRegularExpression ==== akonadi-calendar-tools ==== Version update (20.08.3 -> 20.12.1) Subpackages: akonadi-calendar-tools-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * Time to increase version * Perform SPDX conversion for previously missed files * Convert license headers to SPDX format * Use ISO date/time in csv export ==== akonadi-contact ==== Version update (20.08.3 -> 20.12.1) Subpackages: akonadi-contact-lang akonadi-plugin-contacts libKF5AkonadiContact5 libKF5ContactEditor5 - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - Changes since 20.12.0: * Fix msvc build on https://build.kde.org * Fix Bug 430119 - Confirm add address on OK (kde#430119) * Activate signal/slot * Continue to implement "check if address is created" * Start to fix 430119 - Obsolete kdepim-apps-libs-lang as well to avoid update problems - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes to list here. ==== akonadi-import-wizard ==== Version update (20.08.3 -> 20.12.1) Subpackages: akonadi-import-wizard-lang libKPimImportWizard5 - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes to list here. ==== akonadi-mime ==== Version update (20.08.3 -> 20.12.1) Subpackages: akonadi-mime-lang akonadi-plugin-mime libKF5AkonadiMime5 - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes to list here. ==== akonadi-notes ==== Version update (20.08.3 -> 20.12.1) Subpackages: akonadi-notes-lang libKF5AkonadiNotes5 - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Fix generate pri file * Time to increase version * Port QRegExp to QRegularExpression ==== akonadi-search ==== Version update (20.08.3 -> 20.12.1) Subpackages: akonadi-search-lang libKF5AkonadiSearch - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes since 20.08.3, only listing bugfixes: * Fix Bug 428750 - akonadi-search does not build due to deprecated symbol (kde#428750) * Prevent crash by catching exceptions thrown by Xapian::WritableDatabase::commit (kde#418804) * Fix crash by handling exceptions thrown by GlassTable::set_overwritten (kde#401865) ==== akonadi-server ==== Version update (20.08.3 -> 20.12.1) Subpackages: libKF5AkonadiAgentBase5 libKF5AkonadiCore5 libKF5AkonadiPrivate5 libKF5AkonadiWidgets5 libKF5AkonadiXml5 - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - Changes since 20.12.0: * NotificationSubscriber: fix regression introduced by my commit 61ae4984 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - Changes since 20.11.80: * Check if external library is needed to have atomic support. * CMake: Don't use the LZMA imported targets * Revert "Fix building akonadiprivate_obj with out of system lzma libs on macOS" * Install compressionstream private header * Introduce Config class, disable payload comp. by default - Drop obsolete patches: * 0001-Revert-Fix-building-akonadiprivate_obj-with-out-of-s.patch * 0002-CMake-Don-t-use-the-LZMA-imported-targets.patch - Add upstream patches to fix build with older CMake versions: * 0001-Revert-Fix-building-akonadiprivate_obj-with-out-of-s.patch * 0002-CMake-Don-t-use-the-LZMA-imported-targets.patch - Update to 20.11.80 * New feature release - Too many changes to list here. ==== akregator ==== Version update (20.08.3 -> 20.12.1) Subpackages: akregator-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - Changes since 20.12.0: * Remove setRunExecutables(true), it serves no purpose with a text/html mimetype - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes to list here. ==== alsa-ucm-conf ==== - Backport upstream fixes: AMD MCP mute issue, chtnau8824 fixes, rt715 fix, and soundwire initialization fix: 0004-Revert-ucm2-HDA-acp-add-Capture-simple-mixer-element.patch 0005-chtnau8824-Fix-mono-speaker-config-not-working.patch 0006-chtnau8824-Add-support-for-laptops-using-stereo-DMIC.patch 0007-chtnau8824-Boost-analog-mic-volumes-a-bit.patch 0008-rt715-init-setup-ADC07-to-a-proper-volume.patch 0009-sof-hda-dsp-Set-Master-Playback-Switch-on-in-the-Boo.patch ==== alsa-utils ==== - Fix alsactl restore behavior during locking (boo#1179904): 0010-alsactl-Fix-double-decrease-of-lock-timeout.patch 0011-alsactl-Fix-race-at-creating-a-lock-file.patch - Remove unnecessary condition for alsa-restore.service 0012-alsactl-Remove-asound.state-file-check-from-alsa-res.patch - Fix dependency in sound-extra.service ==== amarok ==== Version update (2.9.70git.20200930T124856~3973278a68 -> 2.9.70git.20201222T022603~89d13c15ad) - Update to version 2.9.70git.20201222T022603~89d13c15ad: * Fix last context applet missing from toolbar on program startup * Changing KStatusNotifier's ToolTipTitle to 'Now playing' and the rich text track details to ToolTipSubTitle instead * Update org.kde.amarok.appdata.xml * Remove button to move to the system sound settings - Update translations ==== amavisd-new ==== Version update (2.12.0 -> 2.12.1) Subpackages: amavisd-new-docs - update to version 2.12.1 * Generate DKIM record comment line including the 's=' (selector) tag instead of an 'i=' (identifier) tag when using "amavisd showkeys". * Make sure generated Authentication-Results follow RFC specification. * Prevent re-encoding of notification templates. * Compare inode numbers as strings. * Resolve MySQL invalid utf8mb4 clause. - cleanup spec * align (Build)Requires and Recommends with upstream * rework creating vscan user (new system-user in Tumbleweed) ==== analitza ==== Version update (20.08.3 -> 20.12.0) Subpackages: analitza-lang libAnalitza5 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * Port away from deprecated Qt::MidButton ==== apache2 ==== - obsolete apache2-example-page and obsolete/provide apache2-doc [bsc#180075] - only include BuildRequires: apache2-{prefork,worker,event} used in test target ==== apache2-mod_php7 ==== Version update (7.4.13 -> 7.4.14) - build the MySQL Native Driver as a shared module (rather than builtin) to prevent a hard requirement for OpenSSL in the CLI - updated to 7.4.14: This is a security release which also contains several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.14 - make phar SOURCE_DATE_EPOCH aware so the timestamps in phar.phar are reproducible and sort filelist to include + php-build-reproducible-phar.patch + php-sort-filelist-phar.patch - fix build failure for SLE_15 - deleted patches - php-openssl.patch (undocumented and not upstreamed patch for a long time) - php7-arm-build-fixes.patch (do not build for SLE12 anymore) - php-pts.patch (undocumented and not upstreamed patch for a long time) - improved patch documentation - use cli sapi php-config --libs - build devel subpackage in cli configuration (otherwise include files for shared modules are missing) - php-phar requires the php-zlib extension - trim specfile lint - install macros.php in %{_rpmconfigdir}/macros.d - build devel subpackage in embed subpackage (where it previously was built) - don't build with CPU specific instructions as it can't be guaranteed these are available at runtime + php-no-check-cpu.patch - remove obsolete patch (replaced by SOURCE_DATE_EPOCH) - php-no-build-date.patch - add D(eterministic) flag to AR_FLAGS to (php-ar-flags.patch) - modified sources % _multibuild - restart php-fpm.service in %posttrans fpm (extensions may need to be updated too, so restart must be delayed to after all RPM transactions have completed) ==== apache2-prefork ==== - obsolete apache2-example-page and obsolete/provide apache2-doc [bsc#180075] - only include BuildRequires: apache2-{prefork,worker,event} used in test target ==== apache2-utils ==== - obsolete apache2-example-page and obsolete/provide apache2-doc [bsc#180075] - only include BuildRequires: apache2-{prefork,worker,event} used in test target ==== ark ==== Version update (20.08.3 -> 20.12.1) Subpackages: ark-lang libkerfuffle20 - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes since 20.08.3, only listing bugfixes: * Fix extraction to directories with unicode names when using the Extract file menu (kde#408186) * Override text of saveAs standard action (kde#426960) ==== aspell-en ==== Version update (2019.10.06 -> 2020.12.07) - version update to 2020.12.07 * Various new words. * Variant cleanups. * Bump irregardless, froward (+ derivatives) and perpend to level 70. ==== atkmm1_6 ==== Version update (2.28.0 -> 2.28.1) - Update to version 2.28.1: + Build: - Improve NMake support - Use __declspec(dllexport) when building with Visual Studio - Add Meson support - doc/reference/: Update for Doxygen >= 1.8.16 - Add meson BuildRequires and macros following upstreams port. - Add doxygen, graphviz and xsltproc BuildRequires, needed now for building documentation. - Replace gcc-c++ with generic c++_compiler BuildRequires. - Tweak setup macro and fdupes call. ==== attica-qt5 ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5Attica5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Fix crash in provider loading by checking reply pointer before deref (kde#427974) ==== audit ==== Subpackages: libaudit1 libauparse0 - Enable Aarch64 processor support. (bsc#1179515 bsc#1179806) ==== audit-secondary ==== Subpackages: audit python3-audit - Enable Aarch64 processor support. (bsc#1179515 bsc#1179806) ==== autoyast2 ==== Version update (4.3.63 -> 4.3.64) Subpackages: autoyast2-installation - Add support for Btrfs quotas (jsc#SLE-7742). - 4.3.64 ==== babl ==== Version update (0.1.82 -> 0.1.84) - Update to version 0.1.84: * Fixed bug in caching of CMYK ICC profiles. ==== baloo5 ==== Version update (5.76.0 -> 5.77.0) Subpackages: baloo5-file baloo5-file-lang baloo5-imports baloo5-imports-lang baloo5-kioslaves baloo5-kioslaves-lang baloo5-tools baloo5-tools-lang libKF5Baloo5 libKF5BalooEngine5 libKF5BalooEngine5-lang - Fix a regression causing empty results (kde#430273): 0001-BasicIndexingJob-Strip-trailing-slash-from-folders.patch - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Too many changes to list here. ==== baloo5-widgets ==== Version update (20.08.3 -> 20.12.1) Subpackages: baloo5-widgets-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) ==== bcm20702a1-firmware ==== - use %_firmwaredir ==== bind ==== Version update (9.16.8 -> 9.16.10) Subpackages: bind-chrootenv bind-doc bind-utils libbind9-1600 libirs1601 libisccc1600 python3-bind - update to 9.16.10: New Features: * NSEC3 support was added to KASP. A new option for dnssec-policy, nsec3param, can be used to set the desired NSEC3 parameters. NSEC3 salt collisions are automatically prevented during resalting. [GL #1620] * A new configuration option, stale-refresh-time, has been introduced. It allows a stale RRset to be served directly from cache for a period of time after a failed lookup, before a new attempt to refresh it is made. [GL #2066] Feature Changes: * The default value of max-recursion-queries was increased from 75 to 100. Since the queries sent towards root and TLD servers are now included in the count (as a result of the fix for CVE-2020-8616), max-recursion-queries has a higher chance of being exceeded by non-attack queries, which is the main reason for increasing its default value. [GL #2305] The default value of nocookie-udp-size was restored back to 4096 bytes. Since max-udp-size is the upper bound for nocookie-udp-size, this change relieves the operator from having to change nocookie-udp-size together with max-udp-size in order to increase the default EDNS buffer size limit. nocookie-udp-size can still be set to a value lower than max-udp-size, if desired. [GL #2250] Bug Fixes: Handling of missing DNS COOKIE responses over UDP was tightened by falling back to TCP. [GL #2275] The CNAME synthesized from a DNAME was incorrectly followed when the QTYPE was CNAME or ANY. [GL #2280] Building with native PKCS#11 support for AEP Keyper has been broken since BIND 9.16.6. This has been fixed. [GL #2315] named could crash with an assertion failure if a TCP connection were closed while a request was still being processed. [GL #2227] named acting as a resolver could incorrectly treat signed zones with no DS record at the parent as bogus. Such zones should be treated as insecure. This has been fixed. [GL #2236] After a Negative Trust Anchor (NTA) is added, BIND performs periodic checks to see if it is still necessary. If BIND encountered a failure while creating a query to perform such a check, it attempted to dereference a NULL pointer, resulting in a crash. [GL #2244] A problem obtaining glue records could prevent a stub zone from functioning properly, if the authoritative server for the zone were configured for minimal responses. [GL #1736] UV_EOF is no longer treated as a TCP4RecvErr or a TCP6RecvErr. [GL #2208] ==== blinken ==== Version update (20.08.3 -> 20.12.0) Subpackages: blinken-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * add content rating * Port away from KRandom ==== bluedevil5 ==== Version update (5.20.4 -> 5.20.5) Subpackages: bluedevil5-lang - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - Changes since 5.20.4: * Show only paired devices in KCM and applet (kde#422383,kde#416322) ==== bluez-qt ==== Version update (5.76.0 -> 5.77.0) Subpackages: bluez-qt-imports bluez-qt-udev libKF5BluezQt6 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== bovo ==== Version update (20.08.3 -> 20.12.0) Subpackages: bovo-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Fix to have c++17 compatibility * If include is define in .h remove it if it's defined in .cpp too (scripted) ==== breeze ==== Version update (5.20.4 -> 5.20.5) Subpackages: breeze5-cursors breeze5-decoration breeze5-style breeze5-style-lang breeze5-wallpapers libbreezecommon5-5 - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== breeze-gtk ==== Version update (5.20.4 -> 5.20.5) Subpackages: gtk2-metatheme-breeze gtk3-metatheme-breeze metatheme-breeze-common - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== breeze5-icons ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Add text-field variants: -frameless (-> text-field), -framed * Add symbolic name symlink for input-* icons. * Add icon for True Type XML font * Add add-subtitle * Change MathML icon to use a formula and use specific mime type * Add icon for QEMU disk image and SquashFS image * Add edit-move action icon * Add icon for core dumps * Add a bunch of subtitle mime types * Remove useless blur from kontrast icon ==== breezy ==== - Require the full python3 stdlib for sqlite3 import gh#openSUSE/python-rpm-macros#66 - Add skip_resource.setrlimit.patch to avoid tests failing in the limit environment of osc build, where resource.setrlimit() doesn't work (lp#1883125). ==== busybox ==== Version update (1.32.0 -> 1.32.1) Subpackages: busybox-static - Update to version 1.32.1 - fixes a case where in ash, "wait" never finishes. - sendmail-ignore-F-option.patch: ignore -F option as used by cron (workaround for [bbn#13426]) - Don't require nogroup for adduser command, as this can lead to a dependency cycle with sysusers-tools. ==== busybox-links ==== Version update (1.32.0 -> 1.32.1) Subpackages: busybox-coreutils busybox-findutils busybox-gawk busybox-grep busybox-gzip busybox-patch busybox-psmisc busybox-sed busybox-sendmail busybox-tar busybox-xz - busybox-sendmail also conflicts with the postfix-bdb flavor. ==== calendarsupport ==== Version update (20.08.3 -> 20.12.1) Subpackages: calendarsupport-lang libKF5CalendarSupport5 - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Drop obsolete build requirements (kdepim-apps-libs is no more) - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 ==== cantarell-fonts ==== Version update (0.201 -> 0.301) - Update to version 0.301: + Oopsie-release: The last one was missing PostScript names for the new glyphs. Only relevant for when extracting text from PDFs where the generator omitted the text stream. + Rounded coordinates of macronbelowcomb.narrow and macroncomb.narrow.case. Leftovers from when they were scaled components. + Internal: Removed stale layers and data, added normalization script to prune unnecessary data. import-glyphs.py also imports PostScript names now. - Update to version 0.300: + Import Greek glyph set designed by Florian Fecher for GSoC 2018. No kerning, might need a slight respacing. Imported anyway because someting is better than nothing. + Correct positioning of dotaccentcomb.case. + Correct mark positioning in caroncomb.case. + Correct appearance of ustraightstroke in variable font, the overlap became visible at smaller, autohinted sizes. + Correct bar positioning in Ustraightstroke and ustraightstroke. + Correct anchor positioning in Y. + Internal: Consolidate various anchors in composites into the base outline glyphs, to reduce the chance they get out sync. + Updated translations. ==== cervisia ==== Version update (20.08.3 -> 20.12.0) Subpackages: cervisia-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Port to modern SPDX license identifier ==== cppcheck ==== Version update (2.1 -> 2.3) - Update to version 2.3 Improved C++ parser: * types * wrong operands in ast * better simplification of templates Improved clang import, various fixes. Improved value flow analysis Fixed false positives Improved configuration in library files * boost.cfg * googletest.cfg * qt.cfg * windows.cfg * wxwidgets.cfg Added several Misra rules: * 6.1 * 6.2 * 7.2 * 7.4 * 9.2 * 10.2 * 15.4 Added platforms: * elbrus e1c+ * pic * pic8 * mips - Update to version 2.2 New checks: * incorrect usage of mutexes and lock guards * Dereference end iterator * Iterating a known empty container * outOfBounds check for iterators to containers Removed 'operator=' check that ensures reference to self is returned. That is not about safety. Improved parser * various ast fixes Clang parser * The Clang import feature in Cppcheck should be considered to be experimental for now. There are problems. Improved bug hunting * variable constraints * handling of multidimension arrays * function calls, execute functions that are in same TU * improved handling of containers * several improvements for uninitialized variables check * improved analysis of for loops * added a hash value for warnings that can be used for suppressions Improved data flow * one more heuristic for ternary operators * improved data flow for containers CLI: * Fixed some addon execution problems when there are spaces etc GUI: * Fix handling of tags * Exclude files cppcheck-htmlreport: * several result files can be combined into 1 output Suppressions: * comments can be added at end of suppression in suppressions file ==== crash ==== Version update (7.2.8_k5.9.14_1 -> 7.2.8_k5.10.4_1) - Fix "kmem -i" option on Linux 5.9-rc1 and later kernels (bsc#1179970 ltc#188981). crash-Fix-kmem-i-option-on-Linux-5.9-rc1-and-later-kernels.patch - Fix crash utility is taking forever to initialize a vmcore from large config system (bsc#1178827 ltc#189279). crash-task.c-avoid-unnecessary-cpu-cycles-in-stkptr_to_tas.patch - Corrected project URL in spec file to match the changed upstream location as-of May 30th 2020. Noted the project URL change in README.SUSE without removing the old URL because it represents the location the project source was obtained from. The next project source update is available from the new project URL. When the package is updated with that source all URL project references will be modified to only show the new URL. Add crash-update-whitepaper-URL.patch Note change of no longer valid old project whitepaper URL to current valid project whitepaper URL in help output. Leave the old one reported because it represents the location the project source was obtained from for this package version. (bsc#1179536) ==== curl ==== Version update (7.73.0 -> 7.74.0) Subpackages: libcurl4 - Enable zstd and brotli support - Update to 7.74.0 * Changes: hsts: add experimental support for Strict-Transport-Security * Bugfixes: - Inferior OCSP verification [bsc#1179593, CVE-2020-8286] - FTP wildcard stack overflow [bsc#1179399, CVE-2020-8285] - trusting FTP PASV responses [bsc#1179398, CVE-2020-8284] - Revert "multi: implement wait using winsock events" - openssl: free mem_buf in error path - ntlm: avoid malloc(0) on zero length user and domain - ngtcp2: use the minimal version of QUIC supported by ngtcp2 - ngtcp2: advertise h3 ALPN unconditionally - file: avoid duplicated code sequence - openssl: guard against OOM on context creation - docs: document the 8MB input string limit for curl_easy_escape and curl_easy_setopt() - hsts: add read/write callbacks - hsts: add support for Strict-Transport-Security - alt-svc: enable by default - checksrc: warn on empty line before open brace - connect: repair build without ipv6 availability - curl.se: new home - ftp: retry getpeername for FTP with TCP_FASTOPEN - gnutls: fix memory leaks (certfields memory wasn't released) - http: pass correct header size to debug callback for chunked post - libssh2: fix transport over HTTPS proxy - openssl: guard against OOM on context creation - openssl: use OPENSSL_init_ssl() with >= 1.1.0 - Revert "multi: implement wait using winsock events" - socks: check for DNS entries with the right port number - tool_operate: --retry for HTTP 408 responses too - tool_operate: bail out proper on errors during parallel transfers - urlapi: don't accept blank port number field without scheme - urlapi: URL encode a '+' in the query part - vquic/ngtcp2.h: define local_addr as sockaddr_storage - Update check section: * runtests now supports dynamically base64 encoded sections in tests * Replace env interpreter for perl and python3 - Remove curl-use_OPENSSL_config.patch since the OpenSSL initialization has been updated to use OPENSSL_init_ssl() with >= 1.1.0 - Update patches to fix compiling warnings: * curl-disabled-redirect-protocol-message.patch * libcurl-ocloexec.patch - Enable test 1165 ==== cyrus-sasl ==== Subpackages: cyrus-sasl-crammd5 cyrus-sasl-digestmd5 cyrus-sasl-gssapi cyrus-sasl-plain libsasl2-3 - Remove Berkeley DB dependency (JIRA#SLE-12190) The pacakges cyrus-sasl and cyrus-sasl-saslauthd are build without Berkely DB support. gdbm will be used instead of BDB. The pacakges cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are build with Berkely DB support. - Update to 2.1.27 * Added support for OpenSSL 1.1 * Added support for lmdb * Lots of build fixes * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech * DIGEST-MD5 plugin: Fixed memory leaks Fixed a segfault when looking for non-existent reauth cache Prevent client from going from step 3 back to step 2 Allow cmusaslsecretDIGEST-MD5 property to be disabled * GSSAPI plugin: Added support for retrieving negotiated SSF Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF Properly compute maxbufsize AFTER security layers have been set * SCRAM plugin: Added support for SCRAM-SHA-256 * LOGIN plugin: Don?t prompt client for password until requested by server * NTLM plugin: Fixed crash due to uninitialized HMAC context - Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468) - bsc#983938 `After=syslog.target` left-overs in several unit files - added patches: fix_libpq-fe_include.diff for fixing including libpq-fe.h - removed patches obsoleted by upstream changes: * shared_link_on_ppc.patch * cyrus-sasl-2.1.27-openssl-1.1.0.patch * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch * 0003-Check-return-error-from-gss_wrap_size_limit.patch * 0004-Add-support-for-retrieving-the-mech_ssf.patch * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch * cyrus-sasl-fix-logging-in-gssapi.patch - Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518) * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch - Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518) * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch ==== dar ==== Version update (2.6.12 -> 2.6.13) Subpackages: dar-doc dar-lang libdar64-6000 - Enable curl and rsync support - update to 2.6.13: - fixed compilation warning in testing routine (outside libdar and dar) - due to change in autoconf, the --sysconfdir path (which defaults to ${prefix}/etc) was read as an empty string, leading dar to look for darrc system file at the root of the filesystem (/darrc) - fixed bug that should occur in extremely rare conditions (it has been discover during 2.7.0 validation process): compression must be used, no ciphering, no hashing, file changed at backup time or had a poor compression ratio, was not saved at slice boundary, the previous entry had an EA saved but no FSA or an unchanged FSA. In such conditions are all met, dar tries to resave the file in place, but partially or totally overwites the EAs of the previous entry leading to archive testing to fail for these EA (though the archive could be finished without error). - fixed bug met when case insensitive mask is requested (-an option) and locale of file to restore or backup is not the one the dar binary is run with. ==== dav1d ==== Version update (0.8.0 -> 0.8.1) - Update to version 0.8.1 * Keep references to buffers valid after dav1d_close(). Fixes a regression caused by the picture buffer pool added in 0.8.0. * ARM32 optimizations for 10bit bitdepth for SGR * ARM32 optimizations for 16bit bitdepth for blend/w_masl/emu_edge * ARM64 optimizations for 10bit bitdepth for SGR * x86 optimizations for wiener in SSE2/SSSE3/AVX2 ==== discover ==== Version update (5.20.4 -> 5.20.5) Subpackages: discover-backend-flatpak discover-backend-fwupd discover-backend-packagekit discover-lang - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - Changes since 5.20.4: * pk: Have the notifier listen to the correct for offline events * ApplicationPage: Fix license button tooltip ==== distribution-logos-openSUSE ==== - Only build Leap subpackage on Leap base and Tumbleweed based distros subpackages on Tumbleweed base ==== djvulibre ==== Version update (3.5.27 -> 3.5.28) - Update to version 3.5.28 * ddjvu: tiff generation improvements * djvumake: security checks on INCL chunks * all: updated for modern compilers * bugs: fixed several crashes on invalid inputs * miniexp: fixed escape printout and macrochars * djvudigital: can use poppler to find text * csepdjvu: handle T comments for page titles * bytestream: fixed 2GB limit * gexception, gthread: cleanup obsolete code - Drop patches incorporated or otherwise fixed upstream: * djvulibre-invalid-tiff.patch * djvulibre-CVE-2019-15144.patch * djvulibre-CVE-2019-15145.patch * djvulibre-CVE-2019-18804.patch * djvulibre-CVE-2019-15143.patch * djvulibre-always-assume-that-cpuid-works-on-x86_64.patch * djvulibre-CVE-2019-15142.patch * reproducible.patch - Only run post(un) scriptlets for desktop database update for openSUSE < 1550, these are void otherwise. - Regenerate configure script as it is no longer supplied with tarball; add BuildRequires: libtool. - Adapt file list for mime file no longer being installed (this is intentional from upstream); accordingly drop shared-mime-info BuildRequires and post(un) scripts. ==== dolphin ==== Version update (20.08.3 -> 20.12.1) Subpackages: dolphin-part dolphin-part-lang libdolphinvcs5 - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - Changes since 20.12.0: * Fix vertical scroll with horizontal component not being recognized properly (kde#430532) * DolphinContextMenu: drop wrong assert * Fix crash when device with capacitybar is dragged (kde#430441) * Use setShowOpenOrExecuteDialog(true) with OpenUrlJob * Fix access url navigator while creating new tab in filename search view (kde#429628, kde#430434) * Fix KIO warning when URL is empty * servicemenuinstaller: Remove file if it already exists * Fix PlacesItemModelTest, 2nd try - Dropped patches, now upstream: * 0001-Fix-access-url-navigator-while-creating-new-tab-in-f.patch - Add upstream patch to fix crash on launch (kde#429628, kde#430434): * 0001-Fix-access-url-navigator-while-creating-new-tab-in-f.patch - Add patch to fix appearance on the first start (kde#429447): * 0001-Update-cached-viewContainer-geometry-every-time-they.patch - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - Changes since 20.11.90: * Fix PlacesItemModelTest, 2nd try * Re-allow to paste files via context menu (kde#429762) - Update to 20.11.90 * New feature release - Too many changes since 20.11.80, only listing bugfixes: * Allow the openURLJob to run executables (kde#429603) * Places panel: highlight place only when it is displayed (kde#156678) * Select last visited folder when going up/back (kde#429097) * Re-allow icons that are not theme icon (kde#429113) - Update to 20.11.80 * New feature release - Too many changes to list here. ==== dracut ==== Version update (050+suse.250.ge6b6e843 -> 051+suse.84.gc6bd70b8) - Update to version 051 (051+suse.84.gc6bd70b8): * suse.spec: add 051 modules dbus, wicked * Update AUTHORS, NEWS * Drop 51-dracut-rescue-postinst.sh entirely * Revert "Retrieve service, rpc and protcol entries via getent in hostonly mode" * Adding stalebot file * Revert "Add --uefi-output for custom output filename" * Improve documentation of iso-scan/filename feature * multipathd: fix the comparison * 06dbus: consider dbus-broker * 06dbus: Add busctl as a more useful tool * 06dbus: Include dbus or messagebus group and user, depending on distro * 35network-wicked: openSUSE Factory has reintroduced libexec * 35network-wicked: install ip utility anyway * 35network-wicked: Run wicked early enough to unlock block devices * 06dbus: Do not install superfluous services * 40network: introduce wicked option * 35network-wicked: introduce wicked support module * 06dbus: introduce dbus support * Add --uefi-output for custom output filename * 95fcoe: don't install if there is no FCoE hostonly devices * 95fcoe: ensure needed modules are installed * dracut-install: Globbing support for resolving "firmware:" * dracut-bash-completion.sh: add positional argument completion * Prevent creating unexpected files on the host when running dracut * configure: Find FTS library with --as-needed - Update to version 050+suse.275.gc9639522: * Don't print when a module is explicitly omitted (by default) * 95nfs: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (boo#1177462) * Retrieve service, rpc and protcol entries via getent in hostonly mode (boo#1177461) * Remove uses of bash (and bash specific syntax) in runtime scripts * 90crypt: pull in remote-cryptsetup.target enablement * 90multipath: install kpartx's 11-dm-parts.rules * Revert "90crypt: ship initrd-cryptsetup.target" * 90qemu-net: install less module for strict hostonly mode * 90qemu-net: in hostonly mode, only install if network is needed * 95nfs: Install less module if hostonly mode is strict * 90kernel-modules: Install less modules for hostonly mode * 90kernel-modules: install block drivers more strictly * 04watchdog-modules: Simplify install_kernel using new added helper * dracut-init.sh: Add a helper for detect device kernel modules * dracut-functions.sh: Fix check_block_and_slaves_all * 90kernel-network-modules: Don't install iscsi related module * Add a --hostonly-nics option * Configure the runner for team interfaces * 99squash: Check require module earlier, and properly * dracut-functions: add a helper to check if kernel module is available * 90crypt: ship initrd-cryptsetup.target * Revert "90crypt: pull in remote-cryptsetup.target enablement" * dmsquash-live/iso-scan: Provide an easy reference to iso-scan device. * 99memstrack: use /bin/bash ==== dragonplayer ==== Version update (20.08.3 -> 20.12.1) Subpackages: dragonplayer-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - No code change since 20.08.3 ==== drkonqi5 ==== Version update (5.20.4 -> 5.20.5) Subpackages: drkonqi5-lang - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== elfutils-debuginfod ==== - Move profile files to libdebuginfod1 sub-package. - Silent 2 rpmlint issues. ==== ell ==== Version update (0.33 -> 0.35) - Update to release 0.35 * Add support for DHCP v6 Rapid Commit. * Add support for ICMP v6 implementation. * Add support for PKCS#1 formatted private keys. ==== ethtool ==== Version update (5.9 -> 5.10) - update to new upstream release 5.10 * infrastructure for JSON output * separate FLAGS in -h output * use policy dumps to check flags support * show pause stats (-a) * pretty printing of policy dumps * improve error message when SFP module is missing * fix use after free in netlink_run_handler() * fix leaked instances of struct nl_socket * improve compatibility between netlink and ioctl (-s) - drop patches present in 5.10 release: * ethtool-Improve-compatibility-between-netlink-and-io.patch * netlink-do-not-send-messages-and-process-replies-in-.patch * netlink-fix-leaked-instances-of-struct-nl_socket.patch * netlink-fix-use-after-free-in-netlink_run_handler.patch ==== eventviews ==== Version update (20.08.3 -> 20.12.1) Subpackages: eventviews-lang libKF5EventViews5 - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - Changes since 20.12.0: * Revert merge request 14 * Make To-do List popup menu match other menus * agendaviews: Display recurrence w/o main incidence * incidencetreemodel: Improve debug ouput * Fix display of multi-day events from non-local time zones (kde#429007) - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes to list here. ==== fetchmail ==== Version update (6.4.12 -> 6.4.15) Subpackages: fetchmailconf - update to 6.4.15: * Fix a typo in the manual page reported by David McKelvie. * Fix cross-compilation with openssl, by Fabrice Fontaine. Merge request !23. * Fix truncation of SMTP PLAIN AUTH with ^ in credentials, by Earl Chew. - update to 6.4.14: * sr: ???????? ??????? (Miroslav Nikoli?) [Serbian] * Errors about lock file (= pidfile) creation could be lost in daemon configurations (-d option, or set daemon) when using syslog. Now they are also logged to syslog. Found verifying a pidfile creation issue on 6.4.12 that was previously reported by Alex Hall of Automatic Distributors. * If the lock file cannot be removed (no write permission on directory), try to truncate it, and if that fails, report error. * If the pidfile was non-default, fetchmail -q or --quit would malfunction and claim no other fetchmail were running, because it did not read the configuration files or merge the command line options, thus it would look for the PID in the wrong file. - Don't require systemd - Use tmpfiles for all files - Use systemd macro for tmpfiles - Don't delete home directory if the user stays - Use sysusers config to create system user ==== ffmpegthumbs ==== Version update (20.08.3 -> 20.12.0) Subpackages: ffmpegthumbs-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Remove explicit ECM_KDE_MODULE_DIR * remove deprecated/unnecessary call * register our own log handler for ffmpeg using QLoggingCategory * Add missing REQUIRED keyword for Taglib * Use embedded cover in MP4 video files (kde#408956) ==== flatpak ==== Subpackages: libflatpak0 system-user-flatpak - Move flatpak-bisect and flatpak-coredumpctl to devel subpackage, allow to remove python3 dependency on main package. - Enable LTO (boo#1133124) as gobject-introspection works fine with LTO. ==== fprintd ==== Version update (1.90.6 -> 1.90.8) Subpackages: fprintd-lang fprintd-pam - Update to version 1.90.8 It seems that we are finally reaching the end of the tunnel with regard to regressions. One more issue that cropped up was that a pam_fprintd fix to avoid a possible authentication bypass caused issues when fprintd was just started on demand. Highlights: * pam: Only listen to NameOwnerChanged after fprintd is known to run. * Place new ObjectManager DBus API at /net/reactivated/Fprint - Update to version 1.90.7 While 1.90.6 fixed a number of issues, we did have a bad regression due causing pam_fprintd to crash when there are no fingerprint devices installed. Highlights: * pam: Guard strdup calls against NULL pointers ==== frameworkintegration ==== Version update (5.76.0 -> 5.77.0) Subpackages: frameworkintegration-plugin libKF5Style5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Pass parent to Q*Layout ctor instead of calling setLayout() ==== fuse ==== Subpackages: libfuse2 - Enable LTO (boo#1133101) and use -ffat-lto-objects. - Modernize some older specfile constructs. Rediff patch4 as -p1. - Update descriptions. ==== fuse3 ==== Version update (3.10.0 -> 3.10.1) Subpackages: libfuse3-3 - Update to release 3.10.1 * Unspecified "various minor fixes" ==== fwupd ==== Subpackages: libfwupd2 libfwupdplugin1 typelib-1_0-Fwupd-2_0 - Add fwupd-bsc1179790-disable-hintsystem.patch to remove Block.HintSystem from ESP filtering (bsc#1179790) ==== gdbm ==== Version update (1.18.1 -> 1.19) Subpackages: libgdbm6 libgdbm_compat4 - version update to 1.19 * Pre-read the memory mapped regions on systems that support it. This speeds up operations on big databases. * gdbmtool: tagged initialization of structured data Initializers for structured data can be given in tagged form, e.g.: store somekey { status=2, id={a,u,x}, name="foo" } * Bugfixes: * * Preserve locking type during database reorganization - modified patches % gdbm-no-build-date.patch (refreshed) - deleted patches - gdbm-no-common.patch (upstreamed) ==== gegl ==== Version update (0.4.26 -> 0.4.28) Subpackages: gegl-0_4 libgegl-0_4-0 - Update to version 0.4.28: + Core: Infrastructure to opt out of listing ops with unmet runtime dependencies. + Build: Set vapi metadata better under meson. Make graphviz' dot library is a run-time not build time dependency. + Operations: - gegl:convert-space and gegl:cast-space operations fixed, and added to build. - icc:load new operation that treats .icc files as images, permitting loading a space into the graph from file. + Workshop: New operation paint-select for an foreground select tool in development. - Add disabled pkgconfig(maxflow) BuildRequires: New dependency. ==== geoclue2 ==== Version update (2.5.4 -> 2.5.6) Subpackages: system-user-srvGeoClue typelib-1_0-Geoclue-2_0 - Update to version 2.5.6: + Fix crashes in WiFi handling code. + Plug a leak. - Changes from version 2.5.5: + Plug another leak. + Fix another buffer overflow. + Fix WiFi-geolocation that got broken in 2.5.4. + Put freequently used small strings on the stack to avoid excessive memory usage. ==== gimp ==== Subpackages: gimp-lang gimp-plugin-aa gimp-plugins-python libgimp-2_0-0 libgimpui-2_0-0 - Added python-xml as recommend dependency. (bsc#1180363) ==== glib2 ==== Version update (2.66.3 -> 2.66.4) Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 libgthread-2_0-0 - Update to version 2.66.4: + Fix some issues in parsing floating point seconds in `GDateTime` + Fix some issues in handling invalid UTF-8 when parsing for `GDate` + Bugs fixed: glgo#GNOME/GLib#2264, glgo#GNOME/GLib!1774, glgo#GNOME/GLib!1790, glgo#GNOME/GLib!1793, glgo#GNOME/GLib!1799, glgo#GNOME/GLib!1805. ==== glibc ==== Subpackages: glibc-devel glibc-extra glibc-locale glibc-locale-base nscd - aarch64-static-pie.patch: fix static PIE start code for BTI (bsc#1179450, BZ #27068) - iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224) - iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop bounds (CVE-2020-29562, bsc#1179694, BZ #26923) - printf-long-double-non-normal.patch: x86: Harden printf against non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649) - get-nprocs-cpu-online-parsing.patch: Fix parsing of /sys/devices/system/cpu/online (bsc#1180038, BZ #25859) ==== gmp ==== Version update (6.2.0 -> 6.2.1) - Add gmp-6.2.1-arm64-invert_limb.patch [bsc#1179751] - GMP 6.2.1: * A possible overflow of type int is avoided for mpz_cmp on huge operands * Overflows are more carefully detected and reported for mpz_pow_ui * Fix a bug in longlong.h for aarch64 sub_ddmmss * mini-gmp: mpz_out_str and mpq_out_str now correctly handle out of range bases * C90 compliance * Support for more processors ==== gnome-disk-utility ==== Version update (3.38.0 -> 3.38.1) - Update to version 3.38.1: + Do not display zram devices. + Updated translations. ==== gnome-shell ==== Subpackages: gnome-shell-calendar - Re-enable gnome-shell-private-connection.patch: it was rebased back in October, but not enabled (boo#1180230). - Add missing pkgconfig(libpipewire-0.3) BuildRequires and gstreamer-plugin-pipewire Requires, needed now to build the screen-cast support. ==== gnome-tweaks ==== Version update (3.34.0 -> 3.34.1) - Update to version 3.34.1: + Fix default window sizing and requests. + Updated translations. - Drop gnome-tweaks-fix-titlebar-buttons-left.patch: Fixed upstream, though in a different way than the patch we had. ==== grantleetheme ==== Version update (20.08.3 -> 20.12.1) Subpackages: grantleetheme-lang libKF5GrantleeTheme5 - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Modernize code (using auto) * Fix metainfo * If include is define in .h remove it if it's defined in .cpp too (scripted) * Time to increase version * const'ify pointer * Remove unused LIBRARY_NAMELINK * Convert license headers to SPDX format ==== gstreamer ==== Subpackages: gstreamer-utils libgstreamer-1_0-0 typelib-1_0-Gst-1_0 - Move gst-plugins-doc-cache-generator to devel subpackage (remove python3 dependency on main gstreamer package). ==== gstreamer-devtools ==== Subpackages: libgstvalidate-1_0-0 typelib-1_0-GstValidate-1_0 - Drop unneeded and unwanted gstreamer-devtools recommends from libgstvalidate-1_0-0 subpackage. - Cleanup spec file. ==== gstreamer-plugins-bad ==== Subpackages: gstreamer-transcoder libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 typelib-1_0-GstTranscoder-1_0 - Drop GPL-2.0-or-later from license tag, upstream moved to LGPL-2.1-or-later only starting from version 1.18.1. See commit https://gitlab.freedesktop.org/gstreamer/gst-plugins-bad/-/merge_requests/1… ==== gtk2 ==== Version update (2.24.32+70 -> 2.24.33) Subpackages: gtk2-data gtk2-immodule-amharic gtk2-immodule-inuktitut gtk2-immodule-thai gtk2-immodule-tigrigna gtk2-immodule-vietnamese gtk2-tools libgtk-2_0-0 - Update to version 2.24.33: + This is the final GTK 2.x release. There will be no more updates to GTK 2. All users are encouraged to update to GTK 3 or 4. + Make the output of gtk-query-immodules deterministic. + GtkCalendar: Use %OB if supported. + GtkIconTheme: prefer exact matches. + build: - Support automake 1.16. - Fix compiler warnings with newer gcc. ==== gtkmm3 ==== Version update (3.24.2 -> 3.24.3) - Update to version 3.24.3: + Gtk: Actionable::get_action_target_value(): Fix ref count + Documentation: - Improve the documentation of Gtk::Application::add_window() and Gtk::Window::set_application() - Gtk::Button::set_image(): Fix the documentation - Gtk::TreeView::append_column(): Add code example - README: Add instructions for building gtkmm - Explain key values + Demos: - Don't use C++14 auto deduction - Update the GLArea demo (similar to updates in gtk+) - GLArea demo: Fix a crash + Tests: Builder test: Test derived props declared in C++ + Build: - Improve NMake support - Fix Autotools build with X11 backend disabled (--enable-x11-backend=no) - Use __declspec(dllexport) when building with Visual Studio - Add support for building gtkmm with Meson - docs/reference/: Update for Doxygen >= 1.8.16 - Add meson BuildRequires and macros following upstreams port. - Add graphviz BuildRequires (needed for documentation build now) and replace gcc-c++ with generic c++_compiler BuildRequires. ==== gwenview5 ==== Version update (20.08.3 -> 20.12.1) Subpackages: gwenview5-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - Changes since 20.12.0: * Do not restore the JPG quality after a "Save" operation - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes since 20.08.3, only listing bugfixes: * Show message bar with URL after sharing to imgur (kde#428528) * Add option to disable autoplaying videos (kde#274901) * Fix ESC key not exiting fullscreen when viewing image (kde#425479) ==== harfbuzz ==== Version update (2.7.2 -> 2.7.4) Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0 - harfbuzz 2.7.4: - Fix missing --enable-introspection configure option - includes changes from 2.7.3: - Update USE shaper to 2020-08-13 specification, and other improvements - Don?t disable liga feature in myanmar shaper, to match Uniscribe - Improvements to language and script tags handling. - Update language system tag registry to OpenType 1.8.4 - Support for serializing and deserializing Unicode buffers - Increase buffer work limits to handle fonts with many complex lookups - Handle more shaping operations in trace output - Memory access fixes - More OOM fixes - Improved documentation ==== haveged ==== Version update (1.9.13 -> 1.9.14) Subpackages: libhavege2 - Update to 1.9.14: * made enttest configurable * havegecmd.c - new command added to close the communication socket - Drop haveged-conditional-enttest.patch ==== hdjmod ==== Version update (1.28_k5.9.14_1 -> 1.28_k5.10.4_1) - Make package conform to spec-cleaner - Drop support for ancient openSUSE versions ==== hdparm ==== Version update (9.58 -> 9.60) - update to 9.60: - support for ioSafe Solo with jMicron bridge, courtesy Matthias-Christian Ott. - decode more bits from id[69], courtesy Adrián Kálazi. - allow passing of custom LDFLAGS from the environment. - add new "static" target. - fix --dco-identify max sectors, courtesy of Paul Sultana. - get rid of leftover "unknown" variables from identify.c - fixed return values from get_log_page_data(). ==== highlight ==== Version update (3.59 -> 3.60) - Update to version 3.60: * Improved PHP 8 syntax support. * Added Emacs Org-Mode support (gl#saalen/highlight#174). * Fixed single argument and truecolor output of mark_lines.lua plug-in (gl#saalen/highlight#164). * Added lineno and column parameters to Decorate hook. * LIB: Moved CodeGenerator::readUserStyleDef and getStyleDefinition to public (gl#saalen/highlight#173). ==== icewm ==== Version update (1.6.5 -> 2.0.0) Subpackages: icewm-config-upstream icewm-default icewm-lang icewm-lite - Add missing imlib2-loaders to Requires - Update to 2.0.0 * Remove support for the old and obsolete _WIN_PROTOCOL properties. * Add support for the Imlib2 image rendering engine as an alternative for the gdk-pixbuf-xlib rendering engine. The Imlib2 image rendering engine is now the default, but this can be set at configure time. * Center the window list window if it got offscreen. * Fix horizontal scrolling in icehelp. * Use _NET_WM_STATE_HIDDEN instead of IconicState for minimize in icesh. * Icewm now supports ICCCM icon_pixmap and icon_window. * Don't unroll rolled up windows on left button press for issue #525. * Fix for drawing title pixmaps when they are gradients for issue #523. * Remove unwanted separator in taskbar for empty toolbar for issue #524. support BR_Portuguese language in 2 desktop files for issue #522. * Add support for WM_HINTS icon_window in MiniIcons. * Check if WM_HINTS update actually changes anything. * Don't attempt to draw Unicode in non-UTF-8 environment for issue #519 * Icewm now supports the icon_pixmaps from WM_HINTS to correctly show the icon for NEdit, xmgrace, xv, timidity and fontforge. * Don't resize when trying to move when dragging at y=0 for issue #520. * Report errors if enabled packages are missing for issue #516. * Instead of render.h include Xrender.h for dependency checking for issue #516. * Fix the positioning of the window list title for non-standard SmallIconSize settings for issue #514. - from version 1.9.2 * Fix for correctly restoring xterm from fullscreen in issue #28. * Prevent inadvertent growing of windows in issue #512. - from version 1.9.1 * Fix for NEdit, which delays setting WM_NORMAL_HINTS, to fix issue #510. * Fix for changing layers when ABOVE or BELOW bit is set. * Use a minimum delay of 10 ms for auto taskbar delays for issue #508. * Note in preferences which timing delays are in milliseconds. * Ignore applications with _NET_WM_STATE_SKIP_PAGER set in PagerShowPreview. * Update XDND protocol version from 3 to 5. - from version 1.9.0 * Properly handle name lookup failure for mailboxes for issue #493. * Add --valgrind and --catchsegv options to icewm-session to support debugging. * Add support for _NET_WM_WINDOW_TYPE to icesh. * Always send one synthetic ConfigureNotify on initial window map for issue #492. * Remove resize indicators from the frame window when unneeded. * Reduce the number of redraws in title bar. * Support incomplete _MOTIF_WM_HINTS property for mlterm. * Add missing getProtocols to message dialog to fix issue #494. * Drop support for ISDN network devices in the network monitor. * Update the Catalan, Japanese, Portugeuese, Slovak translations. * Update the Czech, Dutch, Indonesian, and Hindi translations. * Optimizations to handling of Motif hints to avoid unneeded resizing. * Several fixes for correct PagerShowPreview updates for #496. * Fix desktop mini icon positioning for fullscreen windows. * Don't activate a fullscreen window on startup when it is unmapped. * Fixes for TaskBarAutoHide. * Improve drawing of ellipsis in titles. * Optimize the loading of configuration files. * Workaround for non-standard behavior of xnec2c in issue #503. * When fullscreen then record resize requests for later restoration. * Allow width_inc and height_inc to be zero to disable maximization. * Fix handling of WM_CLIENT_LEADER property for Motif applications in #506. - from version 1.8.3 * Check if filedescriptor is valid and fix off-by-one allocation error. * When icewm starts, reduce the number of workarea updates for taskbar to one. * The taskbar only has struts if it is exactly at the top or bottom of the screen. * Fix for autohide taskbar not wanting to hide. * Support TaskBarAutoHide for TaskBarKeepBelow. * Postpone taskbar app status updates until idle, for faster event response. * Don't send synthetic ConfigureNotify events for resizing unless required. * Do send synthetic ConfigureNotify events for positioning when required. * Only send window position updates to the client if it really has moved. * Send at most one synthetic ConfigureNotify message per resize. * Add proper support for EWMH _NET_RESTACK_WINDOW requests to raise a window. * Reflect layer changes in the _NET_WM_STATE ABOVE and BELOW flags. * Add WinStateFullscreen to the visible _WIN_STATE bits. * Make switch icons opaque for 32-bit visuals. * Fix for "icesh -last". * Fix issue bbidulock/icewm#491 for F11 fullscreen key on GTK terminals. * Support "icesh toggleState Fullscreen" * Support icesh "iconic" and "normal" commands for WM_CHANGE_STATE. * Use wmHide or wmShow to hide or show the taskbar to fix issue bbidulock/icewm#489. - from version 1.8.2 * Fixes for using the proper icon sizes for issue #483. * Fixes for reading from pipes in "menuprog" and "menuprogreload" for issue #487. * CMake support was extended to the FreeBSD, OpenBSD and Solaris platforms. * In "menuprog" and "menuprogreload" do dollar expansion and tilde expansion. * New Portuguese (pt) translations. - from version 1.8.1 * Fix path_lookup strtok_r for non-Glibc BSD systems for #23. * Fix topSideVerticalOffset for fully opaque frame borders for #482. * Fix the FreeBSD case where icewm-session is started * in the root directory by the display manager. * Prevent premature workarea changes when collapsing * taskbar to avoid repositioning MiniIcons. * Fix the default KeySysArrangeIcons key binding to Alt+Shift+F8. * Only define KeySysArrangeIcons if preference MinimizeToDesktop=1. * Add KeyWinSmartPlace to preferences. * Remove undocumented KeyWinSnapMove. * Portability changes for OpenBSD. * Prevent cyclic dependencies for transient windows. * Also let icesh spy on ClientMessages. - from version 1.8.0 * Let workspacebutton use the workspace button fonts when drawing text. * Don't switch focus on a FocusOut event on the root window. * Prevent the pingponging of focus between windows when one window loses focus. * Improved support of applications with transient windows. * In the window list window, improve the Show command to consider work area and screen boundaries. * Give message buttons some padding and a minimum size. * Fix the saving of modified options to preferences. * Fix opacity in titlebar and task buttons when using gradients. * Fix status of logout entry in the logout menu. * New theme option MenuButtonIconVertOffset to adjust the position of the menu button icon in case ShowMenuButtonIcon=1. * Improved ICCCM conformance for restack requests of transient windows. * Several improvements to the CrystalBlue theme. * Update theme NanoBlue. * Change xterm.icon into xterm.XTerm.icon in the default winoptions. * More beautiful MiniIcons show just a large shaped icon if MinimizeToDesktop=1. * Improved positioning of MiniIcons when the work area grows or shrinks. * Enable Arrange Icons in taskbar menu to rearrange all desktop MiniIcons. * Add a tooltip to MiniIcons which reflects the window title. * Enable dragging MiniIcons with the left mouse button. * Ensure icons of irregular sizes are always scaled or loaded. * Fix the --logevents option. * Update the frame status in the move menu and the layer menu before showing them. * Improved Chinese translation by WhiredPlanck. * Rename comments from APM monitor to battery monitor by DieSpinne. * Efficiency improvements to the relocation of frames when the workarea changes. * Better positioning of collapse button to avoid a white line at the bottom of the taskbar. * A completely rewritten icon locator by Eduard Bloch which finds many more icons. * A new option IconThemes by Eduard Bloch to set your icon theme preferences. * Handle more detail in configure request messages. * Avoid focusing a random client when a request to stack a client below is received. * Update _NET_CLIENT_LIST_STACKING on a configure request to restack a window. * Detect when the top side of the title bar border is partially transparent for improved positioning. * More updated translations. * Exclude the collapsed taskbar button from workarea calculations. * Update workspace buttons when workspace names change. * Show a sticky window just once on all PagerShowPreview workspace buttons. * Make button hover work after a click-cancel for issue #448. * Fix for correctly computing the X shape mask of shaped titlebars. * Fix for updating titlebar shape when title changes. * Prevent the delayed focus timer or autoraise timer from interfering when a frame is minimized, iconified or rolled up. * Don't set the _NET_WM_STATE_FOCUSED flag when mimimized, hidden or rolledup. * Set the WM_ICON_SIZE root window property according to theme icon sizes. * Add sys/resource.h include for FreeBSD for issue #445. * Add definition of ACPIDEV to fix compilation for FreeBSD. - from version 1.7.0 * New preference KeyboardLayouts for switching of keyboards layouts. * Fix move menu and layer menu for selections in window list window. * Don't take away focus from an application when icewm exits. * On startup check _NET_ACTIVE_WINDOW and use it to preserve focus over restarts. * Set _NET_ACTIVE_WINDOW to None when no window has focus. * Better restore focus to window in Above layer when some other window closes. * New winoption ignoreActivationMessages to ignore programmatic focus requests. * Fix for taskBarWidthPercentage in case screen is not at (0, 0). * Use wordexp to avoid a /bin/sh. * Fix #21 "Problem with dosbox and re-maximize the screen". * Add Maximize Horizontal to window list window. * Refresh frames and buttons after screen resize to prevent artefacts. * Add detailed tracing of systray activity. * Slightly better conformance to XEMBED standard. * Reorder systray operations for better test results. * Only refocus in setWorkspace if workspace really changes. * Reset workspace focused frame if focused frame changes workspace. * Fix for negative geometry positions in winoptions. * Fix icesh runonce. * Fix for icewm --replace. * Fix icewm hint processing and make icewmhint geometry work. * Let icehelp be quiet when parsing html. * Update theme NanoBlue from Nano_Blu-1.3 to evade a bug in Glamor. - from version 1.6.6 * Permit deleting entire input line in address bar. * Fix for TaskBarShowWindows=0 if TaskBarAutoHide=1 for issue #434. * Accept requests for clipboard selection as UTF-8. * Request selection as UTF-8 string in addressbar. * Add support for setting icewm options in env for icewm-session. * New option PagerShowLabels for issue #19. * Prevent possible division by zero when calculating battery capacity. * Make CPU temperature centered. * Fix to make window list icons fit their rows in issue #433. * Fix scaled icons in menu for issue #429 * Fix for systray background filling in issue #430. * Fix for CPUStatusShowAcpiTempInGraph=1 in issue #431. * Make title buttons behave the same as title bar for Button2. * Pass mouse presses on object buttons on to the taskbar for issue #424. * Add new -xembed selector for icesh in issue #423. * Fix for icesh -window. * Add icewm-session --output=FILE option. * Repaint frame border immediately for issue #417. * Fix TaskBarAutoHide for TaskBarDoubleHeight for issue #415. * Port to Solaris. * Slightly larger tray app icons. * Limit resize band to 3 pixels wide. * Better support for RGBA colors. * Add support for urxvt -borderless. * Fuzzy matching of desktop categories for icewm-menu-fdo. * A number of updated translations. - Add pkgconfig(imlib2) to BuildRequires - Fix file pattern for manpages in %files section - Refresh patches for new version - icewm-desktop-nodisplay.patch - icewm-preferences.patch - icewm-susemenu.patch ==== ilmbase ==== Version update (2.5.3 -> 2.5.4) Subpackages: libHalf-2_5-25 libIex-2_5-25 libIlmThread-2_5-25 - merge also baselibs.conf - modified sources % baselibs.conf - merge ilmbase and openexr source packages into one _multibuild - added sources + _multibuild - version update to 2.5.4 * Patch release with various bug/sanitizer/security fixes, primarily related to reading corrupted input files. - version update to 2.5.3 * Various sanitizer/fuzz-identified issues related to handling of invalid input * Fixes to misc compiler warnings * Cmake fix for building on arm64 macOS (#772) * Read performance optimization (#782) * Fix for building on non-glibc (#798) * Fixes to tests - Disable testsuite also on s390/s390x, probably will not pass on any bigendian platform in current state - Disable testsuite also on ppc - Fix 0001-Use-absolute-CMAKE_INSTALL_FULL_LIBDIR-for-libdir-in.patch so pkgconfig file has no duplicate prefix. - Run test suite also on all other archs but i586 and ppc64(be) - version update to 2.5.2 2.5.2 * Invalid input could cause a heap-use-after-free error in DeepScanLineInputFile::DeepScanLineInputFile() * Invalid chunkCount attributes could cause heap buffer overflow in getChunkOffsetTableSize() * Invalid tiled input file could cause invalid memory access TiledInputFile::TiledInputFile() * OpenEXRConfig.h now correctly sets OPENEXR_PACKAGE_STRING to "OpenEXR" (rather than "IlmBase") 2.5.1 * A patch release that corrects the SO version for the v2.5 release, which missed getting bumped in v2.5.0. * This release also fixes an improper failure in IlmImfTest when running on ARMv7 and AAarch64. 2.5.0 * No more build-time header generation: toFloat.h, eLut.h, b44ExpLogTable.h, and dwaLookups.h are now ordinary header files, no longer generated on the fly. * New StdISSTream class, an "input" stringstream version of StdOSStream * New Matrix22 class in Imath * Chromaticity comparison operator now includes white (formerly ignored) * Various cmake fixes * Bug fixes for various memory leaks * Bug fixes for various invalid memory accesses * New checks to detect damaged input files * OpenEXR_Viewers has been deprecated, removed from the top-level cmake build and documentation. - modified patches % 0001-Use-absolute-CMAKE_INSTALL_FULL_LIBDIR-for-libdir-in.patch (refreshed) - modified sources % baselibs.conf - version update to 2.4.1 * Various fixes for memory leaks and invalid memory accesses * Various fixes for integer overflow with large images. * Various cmake fixes for build/install of python modules. * ImfMisc.h is no longer installed, since it's a private header. - deleted patches - Fix-the-symlinks-creation.patch (upstreamed) - Fix relative paths in generated pkgconfig files: 0001-Use-absolute-CMAKE_INSTALL_FULL_LIBDIR-for-libdir-in.patch - Fix build with older cmake package (Leap 15.0 up to 15.2), the included ctest macro does not accept extra parameters. - Add Fix-the-symlinks-creation.patch to fix the symlinks creation. - fix OpenEXR.pc - increase timeout for IlmImf test - version update to 2.4.0 * Completely re-written CMake configuration files * Improved support for building on Windows, via CMake * Improved support for building on macOS, via CMake * All code compiles without warnings on gcc, clang, msvc * Cleanup of license and copyright notices * floating-point exception handling is disabled by default * New Slice::Make method to reliably compute base pointer for a slice. * Miscellaneous bug fixes * CVE-2018-18444 Issue #351 Out of Memory * CVE-2018-18443 Issue #350 heap-buffer-overflow - upstream does not provide gpg signature anymore https://github.com/openexr/openexr/issues/565 - modified sources % baselibs.conf - deleted patches - openexr-CVE-2017-14988.patch (upstreamed) - openexr-CVE-2017-9111,9113,9115.patch (upstreamed) - openexr-CVE-2018-18444.patch (upstreamed) - deleted sources - openexr-2.3.0.tar.gz.sig (not needed) - openexr.keyring (not needed) - testsuite only for x86_64 [bsc#1146648] - Enable tests on architectures with enough memory - boo#1146648 * disable imffuzztest as it takes to much resources - security update - added patches CVE-2017-14988 [bsc#1061305] + openexr-CVE-2017-14988.patch - security update - added patches CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115] + openexr-CVE-2017-9111,9113,9115.patch - Codify new ilmbase requirements. - security update * CVE-2018-18444 [bsc#1113455] + openexr-CVE-2018-18444.patch - asan_build: build ASAN included - debug_build: build more suitable for debugging - Remove useless --with-pic. - Adjust RPM groups and repair sentence structure. - updated to 2.3.0 * ThreadPool overhead improvements, enable custom thread pool to be registered via ThreadPoolProvider class * Fixes to enable custom namespaces for Iex, Imf * Improve read performance for deep/zipped data, and SIMD-accelerated uncompress support * Added rawPixelDataToBuffer() function for access to compressed scanlines * Iex::BaseExc no longer derived from std::string. * Imath throw() specifiers removed * Initial Support for Python 3 * removed patch - Update to 2.2.1 * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110, CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114, CVE-2017-9115 and CVE-2017-9116 - pgajdos(a)suse.com: but really seem to fix only: CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114], CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for the rest of issues see [bsc#1040109], [bsc#1040112], [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305] - Cleanup a bit with spec-cleaner - Update to 2.2.0 * DreamWorks Lossy Compression A new high quality, high performance lossy compression codec contributed by DreamWorks Animation. This codec allows control over variable lossiness to balance visual quality and file size. This contribution also includes performance improvements that speed up the PIZ codec. * IlmImfUtil A new library intended to aid in development of image file manipulation utilities that support the many types of OpenEXR images. * This release also includes improvements to cross-platform build support using CMake. - Bumped the soname, and now we have libIlmImf and libIlmImfUtil - Removed openexr-2.1.0-headers.patch - Updated openexr.keyring from the savannah project page. - Add obsoletes to baselibs.conf. - remove dependency on gpg-offline (blocks rebuilds and tarball integrity is checked by source-validator anyway) - add openexr-2.1.0-headers.patch to install ImfDeepImageStateAttribute.h header too - update to 2.1.0 This release includes a refactoring of the optimised read paths for RGBA data, optimisations for some of the python bindings to Imath, improvements to the cmake build environment as well as additional documentation describing deep data in more detail. - make tests conditional, enable fuzz test and huge test - update to 2.0.1 This is a maintenance push that predominantly addresses edge case failures in the optimisation code paths by temporarily disabling the feature. For more details, please refer to the /usr/share/doc/packages/openexr/ChangeLog - add gpg-offline based verification - fix library deps - update to 2.0.0 * Deep Data support - Pixels can now store a variable-length list of samples. The main rationale behind deep images is to enable the storage of multiple values at different depths for each pixel. OpenEXR 2.0 supports both hard-surface and volumetric representations for Deep Compositing workflows. * Multi-part Image Files - With OpenEXR 2.0, files can now contain a number of separate, but related, data parts in one file. Access to any part is independent of the others, pixels from parts that are not required in the current operation don't need to be accessed, resulting in quicker read times when accessing only a subset of channels. The multipart interface also incorporates support for Stereo images where views are stored in separate parts. This makes stereo OpenEXR 2.0 files significantly faster to work with than the previous multiview support in OpenEXR. * Optimized pixel reading - decoding RGB(A) scanline images has been accelerated on SSE processors providing a significant speedup when reading both old and new format images, including multipart and multiview files. * Namespacing - The library introduces versioned namespaces to avoid conflicts between packages compiled with different versions of the library. - obsoleted openexr-suse-docdir.patch (moved in install phase) openexr-disable-tests.patch - license update: BSD-3-Clause No GPL licensed files found in the package - Update baselibs.conf - Update to 1.7.1 * Updated the .so verison to 7. * obsoletes openexr-includes.patch - require new ilmbase-devel for build - rename libopenexr-devel to openexr devel to be compatible with renamed ilmbase package - disable the test at all, as running them in OBS seems not to be reliable - Remove redundant tags/sections per specfile guideline suggestions - openexr-disable-tests.patch - disable broken tests prevents a build in Factory - remove explicit libdrm buildrequires - Use %_smp_mflags for parallel build - Update to 1.7.0 - bugfix release, multiviewer support * obsoletes CVE-2009-1720 support * built with --enable-larget-stack and test - Renammed to be more comfortable with Shared Library policy * openexr - main (source package) contains tools in bindir, it provides and obsoletes the old OpenEXR symbol * libIlmImf6 - contains the openexr library * libopenexr-devel - contains the headers, Provides and Obsoletes the OpenEXR-devel symbol * openexr-doc - documentation - add baselibs.conf as a source - fixed bnc#527539: VUL-0: OpenEXR: [ MDVSA-2009:190 ] OpenEXR used patches from Mandriva * CVE-2009-1720 * CVE-2009-1721 - save 6.7MB by removing static libraries and "la" files - use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade (bnc#437293) - obsolete old -XXbit packages (bnc#437293) - added baselibs.conf file to build xxbit packages for multilib support - update to 1.6.1 - fix buid, add docu subpackage with documentation and examples - fix linking of new IlmThread lib versus libpthread - update to 1.4.6 - fix build, fix packaging examples and doc - added missing Requires - fixed RPM_OPT_FLAGS - fix shared lib dependencies - fix installed headers - converted neededforbuild to BuildRequires - make use of mesa-devel-packages macro in neededforbuild - don't build as root - update to version 1.2.2 - Fix missing declaration. - try to fix docu installation - initial package of version 1.2.1 ==== incidenceeditor ==== Version update (20.08.3 -> 20.12.1) Subpackages: incidenceeditor-lang libKF5IncidenceEditor5 - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - Changes since 20.12.0: * Handle changes to start dates of recurring to-dos (kde#430651) * Fix off-by-one error in yearly recurrence rule pull-down * IncidenceAttachment: don't allow running executables - Drop obsolete build requirements - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes since 20.08.3, only listing bugfixes: * Fix attachment mimetype detection (kde#407871) ==== inotify-tools ==== Version update (3.20.2.2 -> 3.20.11.0) Subpackages: libinotifytools0 - update to 3.20.11.0: * Added --no-dereference to watch a symlink * bugfixes ==== ipset ==== Version update (7.9 -> 7.10) Subpackages: libipset13 - Update to release 7.10 * Fix shift-out-of-bounds in htable_bits() ==== juk ==== Version update (20.08.3 -> 20.12.0) Subpackages: juk-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - Changes since 20.11.90: * ensure systray tooltip updates on track change (kde#412009) - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Port away from deprecated Qt::MidButton * Port away from deprecated random generator and QString function. * cgit -> invent ==== k3b ==== Version update (20.08.3 -> 20.12.0) Subpackages: k3b-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Warn when trying to add folders that contain unsupported filenames (kde#428115) * Avoid creating KCModuleInfo * Port away from KRandom * Fix -Wimplicit-fallthrough warnings ==== kaccounts-integration ==== Version update (20.08.3 -> 20.12.1) Subpackages: kaccounts-integration-lang libkaccounts2 - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - Changes since 20.12.0: * Load translations - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes to list here. ==== kaccounts-providers ==== Version update (20.08.3 -> 20.12.1) Subpackages: kaccounts-providers-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - Changes since 20.12.0: * [*cloud] Don't manually close the window when finished - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes since 20.08.3, only listing bugfixes: * [*cloud] Cancel configuration when window is closed (kde#427200) * Make (own|next)cloud url handling more resilient (kde#425807) * Extract messages from QML files (kde#388203) * Bundle nextcloud icon (kde#418745) ==== kactivities-stats ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Port deprecated method * Port QRegExp to QRegularExpression * Removed debugging output * ResultModel: expose resource MimeType * Add event filtering for files and directories (kde#428085) ==== kactivities5 ==== Version update (5.76.0 -> 5.77.0) Subpackages: kactivities5-imports libKF5Activities5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kactivitymanagerd ==== Version update (5.20.4 -> 5.20.5) Subpackages: kactivitymanagerd-lang - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== kaddressbook ==== Version update (20.08.3 -> 20.12.1) Subpackages: kaddressbook-doc kaddressbook-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Obsolete kdepim-apps-libs-lang as well to avoid update problems - Drop obsolete build requirements - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - Changes since 20.11.80: * Fix order of cmake imports ==== kalarmcal ==== Version update (20.08.3 -> 20.12.1) Subpackages: akonadi-plugin-kalarmcal kalarmcal-lang libKF5AlarmCalendar5 - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - Changes since 20.12.0: * Fix RFC3339 fractional seconds handling - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes to list here. ==== kalgebra ==== Version update (20.08.3 -> 20.12.0) Subpackages: kalgebra-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * [mobile] Remove bannerimage from drawer * Drop empty X-KDE-PluginInfo-Depends ==== kamera ==== Version update (20.08.3 -> 20.12.1) Subpackages: kamera-lang kio_kamera - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Use systemsettings5 instead of kcmshell5 * If include is define in .h remove it if it's defined in .cpp too (scripted) * Remove explicit ECM_KDE_MODULE_DIR * Port deprecated method ==== kanagram ==== Version update (20.08.3 -> 20.12.0) Subpackages: kanagram-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Remove explicit ECM_KDE_MODULE_DIR * When checking typed letters also check stripping accents. * Remove KDeclarative dependency * Improve i18n tooling * Add missing content_rating tag to appdata file. ==== kapptemplate ==== Version update (20.08.3 -> 20.12.0) Subpackages: kapptemplate-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Port to modern SPDX license identifier ==== karchive ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kate ==== Version update (20.08.3 -> 20.12.1) Subpackages: kate-lang kate-plugins - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes since 20.08.3, only listing bugfixes: * lspclient: also secretly accept LocationLink in some replies (kde#427270) * implement optional limit for number of tabs and LRU replacement (kde#426520) ==== katomic ==== Version update (20.08.3 -> 20.12.0) Subpackages: katomic-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * Fix KNS deprecations ==== kauth ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5Auth5 libKF5Auth5-lang libKF5AuthCore5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kblackbox ==== Version update (20.08.3 -> 20.12.0) Subpackages: kblackbox-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) ==== kblocks ==== Version update (20.08.3 -> 20.12.0) Subpackages: kblocks-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * We use QRandomGenerator => we need qt5.10 min * compile local kdegames and grab neon kdoctools in the snap * add a snap file for building snap package on binary factory * Fix KNS deprecations * Port KRandom::random ==== kbookmarks ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5Bookmarks5 libKF5Bookmarks5-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Pass parent to Q*Layout ctor instead of calling setLayout() ==== kbounce ==== Version update (20.08.3 -> 20.12.0) Subpackages: kbounce-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * We use QRandomGenerator => we need qt5.10 min * Port away from KRandom ==== kbreakout ==== Version update (20.08.3 -> 20.12.0) Subpackages: kbreakout-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - No code change since 20.08.3 ==== kbruch ==== Version update (20.08.3 -> 20.12.0) Subpackages: kbruch-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * Remove explicit ECM_KDE_MODULE_DIR * add content rating ==== kcachegrind ==== Version update (20.08.3 -> 20.12.0) Subpackages: kcachegrind-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes to list here. ==== kcalc ==== Version update (20.08.3 -> 20.12.1) Subpackages: kcalc-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Add the backspace button to the list of memory buttons * Using no deprecated enum Qt::MiddleButton * Optionally install icons * Fix usage of the corrected and uncorrected SD * appdata.xml: Update screenshot URLs * appdata.xml: Add content rating from the OARS ==== kcalendarcore ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Fix maintainer, that is supposed to be Allen Winter * Re-add COLOR property serialization from RFC7986. * Add support for CONFERENCE property * Add alarmsTo convenience method to Calendar * Check that by day recurrences do not precede dtStart. ==== kcalutils ==== Version update (20.08.3 -> 20.12.1) Subpackages: kcalutils-lang libKF5CalendarUtils5 - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - Changes since 20.12.0: * Use consistent icons for events and to-dos * Simplify invitation style * Fix autotests/testincidenceformatter * Fix autotests/testtodotooltip - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Modernize code * Fix generate pri file * If include is define in .h remove it if it's defined in .cpp too (scripted) * Time to increase version * const'ify pointer ==== kcharselect ==== Version update (20.08.3 -> 20.12.1) Subpackages: kcharselect-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * We depend against kf5.56 * Fix clazy warning ==== kcm_sddm ==== Version update (5.20.4 -> 5.20.5) Subpackages: kcm_sddm-lang - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== kcmutils ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5KCMUtils5 libKF5KCMUtils5-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Pass parent to Q*Layout ctor instead of calling setLayout() * remove hack that broke multi level kcms in icon mode ==== kcodecs ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5Codecs5 libKF5Codecs5-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kcolorchooser ==== Version update (20.08.3 -> 20.12.1) Subpackages: kcolorchooser-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - No code change since 20.08.3 ==== kcompletion ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5Completion5 libKF5Completion5-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kconfig ==== Version update (5.76.0 -> 5.77.0) Subpackages: kconf_update5 libKF5ConfigCore5 libKF5ConfigCore5-lang libKF5ConfigGui5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Add KF6 TODO to use the just-approved (*) XDG_STATE_HOME env var. * Fix KConfigGroup::copyTo with KConfigBase::Notify ==== kconfigwidgets ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5ConfigWidgets5 libKF5ConfigWidgets5-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Remove redundant setLayout() call ==== kcontacts ==== Version update (5.76.0 -> 5.77.0) Subpackages: kcontacts-lang libKF5Contacts5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kcoreaddons ==== Version update (5.76.0 -> 5.77.0) Subpackages: kcoreaddons-lang libKF5CoreAddons5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Port some usage of QStringRef to QStringView * [ktexttohtml] Add test case for empty text * Make int to QChar conversion explicit * Remove unused include * Guard QRegExp include behind deprecation flag * Fix include for NAME_MAX * Fix test KFormatTest::formatRelativeDate * Avoid to crash when factory is empty (when we return an error) * KFormat: Add more relative date time cases * Enable KPluginFactory to optionally pass KPluginMetaData to plugins ==== kcrash ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kcron ==== Version update (20.08.3 -> 20.12.0) Subpackages: kcron-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Use systemsettings5 instead of kcmshell5 * If include is define in .h remove it if it's defined in .cpp too (scripted) ==== kdav ==== Version update (5.76.0 -> 5.77.0) Subpackages: kdav-lang libKF5DAV5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Remove it as it creates too many errors ==== kdbusaddons ==== Version update (5.76.0 -> 5.77.0) Subpackages: kdbusaddons-tools libKF5DBusAddons5 libKF5DBusAddons5-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kde-cli-tools5 ==== Version update (5.20.4 -> 5.20.5) Subpackages: kde-cli-tools5-lang - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== kde-gtk-config5 ==== Version update (5.20.4 -> 5.20.5) Subpackages: kde-gtk-config5-gtk3 - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - Changes since 5.20.4: * Set correct installation directory for kconf_update script * Use only GTK Module for managing window decorations CSS (kde#428322,kde#428120,kde#428842) ==== kde-print-manager ==== Version update (20.08.3 -> 20.12.1) Subpackages: kde-print-manager-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes since 20.08.3, only listing bugfixes: * [applet] Simplify printer list item subtitle (kde#425534) ==== kdeclarative ==== Version update (5.76.0 -> 5.77.0) Subpackages: kdeclarative-components libKF5CalendarEvents5 libKF5Declarative5 libKF5Declarative5-lang libKF5QuickAddons5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Sync margins from AbstractKCM into SimpleKCM * Remove obsolete license text * Relicense file to LGPL-2.0-or-later * Rewrite KeySequenceItem (and helper) to use KeySequenceRecorder (kde#407395) ==== kdeconnect-kde ==== Version update (20.08.3 -> 20.12.1) Subpackages: kdeconnect-kde-lang kdeconnect-kde-zsh-completion - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - Changes since 20.12.0: * plugins/battery: add battery charge info to the update signal - Add missing runtime requirements (boo#1180272) - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - Changes since 20.11.90: * [SMS App] Disable sending attachments until we have Android support * Fix build with bluetooth enabled - Update to 20.11.90 * New feature release - Changes since 20.11.80: * Add a verification key that's displayed when pairing - Update to 20.11.80 * New feature release - Too many changes to list here. ==== kded ==== Version update (5.76.0 -> 5.77.0) Subpackages: kded-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kdeedu-data ==== Version update (20.08.3 -> 20.12.0) - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - No code change since 20.08.3 ==== kdegraphics-thumbnailers ==== Version update (20.08.3 -> 20.12.0) - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) ==== kdelibs4support ==== Version update (5.76.0 -> 5.77.0) Subpackages: kdelibs4support-lang libKF5KDELibs4Support5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kdepim-addons ==== Version update (20.08.3 -> 20.12.1) Subpackages: kdepim-addons-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Drop obsolete build requirements - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - Changes since 20.11.80: * Fix build with newer Qt * Don't clear line edit when we finish editing * Specify calendar when we open editor * Fix select correct calendar when we open editor * Fix CSS from HTML emails messing up the layout of our buttons - Update to 20.11.80 * New feature release - Too many changes since 20.08.3, only listing bugfixes: * Fix Bug 424940 - Add support for importing Windows contacts from .contact XML files (kde#424940) ==== kdepim-runtime ==== Version update (20.08.3 -> 20.12.1) Subpackages: kdepim-runtime-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - Changes since 20.11.90: * Fix Google Groupware segfault - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes since 20.08.3, only listing bugfixes: * Fix crash in SessionPool::requestPassword (kde#415339) ==== kdesu ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5Su5 libKF5Su5-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Properly parse escaped double quotes * Add OpenBSD's doas(1) support ==== kdf ==== Version update (20.08.3 -> 20.12.0) Subpackages: kdf-lang kwikdisk - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Use systemsettings5 instead of kcmshell5 * If include is define in .h remove it if it's defined in .cpp too (scripted) * We depend against kf5.70 * Remove unused include * Remove unneeded includes ==== kdialog ==== Version update (20.08.3 -> 20.12.1) Subpackages: kdialog-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Fix --menu, --checklist, and --radiolist usage instructions (kde#427415) * make \n work with (img)inputbox and (new)password (kde#352981) * Use camelcase (scripted) ==== kdiamond ==== Version update (20.08.3 -> 20.12.0) Subpackages: kdiamond-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * Fix KNS deprecations ==== kdnssd-framework ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5DNSSD5 libKF5DNSSD5-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kdoctools ==== Version update (5.76.0 -> 5.77.0) Subpackages: kdoctools-lang libKF5DocTools5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kemoticons ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kernel-64kb ==== Version update (5.9.14 -> 5.10.4) - drm/panfrost: Remove unused variables in panfrost_job_close() (git-fixes). - commit 4169c1f - drm/panfrost: Don't corrupt the queue mutex on open/close (git-fixes). - RDMA/hns: Avoid filling sl in high 3 bits of vlan_id (git-fixes). - scsi: lpfc: Fix variable 'vport' set but not used in lpfc_sli4_abts_err_handler() (git-fixes). - commit 77d98b1 - Linux 5.10.4 (bsc#1012628). - hwmon: (k10temp) Remove support for displaying voltage and current on Zen CPUs (bsc#1012628). - drm/gma500: fix double free of gma_connector (bsc#1012628). - iio: adc: at91_adc: add Kconfig dep on the OF symbol and remove of_match_ptr() (bsc#1012628). - drm/aspeed: Fix Kconfig warning & subsequent build errors (bsc#1012628). - drm/mcde: Fix handling of platform_get_irq() error (bsc#1012628). - drm/tve200: Fix handling of platform_get_irq() error (bsc#1012628). - arm64: dts: renesas: hihope-rzg2-ex: Drop rxc-skew-ps from ethernet-phy node (bsc#1012628). - arm64: dts: renesas: cat875: Remove rxc-skew-ps from ethernet-phy node (bsc#1012628). - soc: renesas: rmobile-sysc: Fix some leaks in rmobile_init_pm_domains() (bsc#1012628). - soc: mediatek: Check if power domains can be powered on at boot time (bsc#1012628). - arm64: dts: mediatek: mt8183: fix gce incorrect mbox-cells value (bsc#1012628). - arm64: dts: ipq6018: update the reserved-memory node (bsc#1012628). - arm64: dts: qcom: sc7180: Fix one forgotten interconnect reference (bsc#1012628). - soc: qcom: geni: More properly switch to DMA mode (bsc#1012628). - Revert "i2c: i2c-qcom-geni: Fix DMA transfer race" (bsc#1012628). - RDMA/bnxt_re: Set queue pair state when being queried (bsc#1012628). - rtc: pcf2127: fix pcf2127_nvmem_read/write() returns (bsc#1012628). - RDMA/bnxt_re: Fix entry size during SRQ create (bsc#1012628). - selinux: fix error initialization in inode_doinit_with_dentry() (bsc#1012628). - ARM: dts: aspeed-g6: Fix the GPIO memory size (bsc#1012628). - ARM: dts: aspeed: s2600wf: Fix VGA memory region location (bsc#1012628). - RDMA/core: Fix error return in _ib_modify_qp() (bsc#1012628). - RDMA/rxe: Compute PSN windows correctly (bsc#1012628). - x86/mm/ident_map: Check for errors from ident_pud_init() (bsc#1012628). - ARM: p2v: fix handling of LPAE translation in BE mode (bsc#1012628). - RDMA/rtrs-clt: Remove destroy_con_cq_qp in case route resolving failed (bsc#1012628). - RDMA/rtrs-clt: Missing error from rtrs_rdma_conn_established (bsc#1012628). - RDMA/rtrs-srv: Don't guard the whole __alloc_srv with srv_mutex (bsc#1012628). - x86/apic: Fix x2apic enablement without interrupt remapping (bsc#1012628). - ASoC: qcom: fix unsigned int bitwidth compared to less than zero (bsc#1012628). - sched/deadline: Fix sched_dl_global_validate() (bsc#1012628). - sched: Reenable interrupts in do_sched_yield() (bsc#1012628). - drm/amdgpu: fix incorrect enum type (bsc#1012628). - crypto: talitos - Endianess in current_desc_hdr() (bsc#1012628). - crypto: talitos - Fix return type of current_desc_hdr() (bsc#1012628). - crypto: inside-secure - Fix sizeof() mismatch (bsc#1012628). - ASoC: sun4i-i2s: Fix lrck_period computation for I2S justified mode (bsc#1012628). - drm/msm: Add missing stub definition (bsc#1012628). - ARM: dts: aspeed: tiogapass: Remove vuart (bsc#1012628). - drm/amdgpu: fix build_coefficients() argument (bsc#1012628). - powerpc/64: Set up a kernel stack for secondaries before cpu_restore() (bsc#1012628). - spi: img-spfi: fix reference leak in img_spfi_resume (bsc#1012628). - f2fs: call f2fs_get_meta_page_retry for nat page (bsc#1012628). - RDMA/mlx5: Fix corruption of reg_pages in mlx5_ib_rereg_user_mr() (bsc#1012628). - perf test: Use generic event for expand_libpfm_events() (bsc#1012628). - drm/msm/dp: DisplayPort PHY compliance tests fixup (bsc#1012628). - drm/msm/dsi_pll_7nm: restore VCO rate during restore_state (bsc#1012628). - drm/msm/dsi_pll_10nm: restore VCO rate during restore_state (bsc#1012628). - drm/msm/dpu: fix clock scaling on non-sc7180 board (bsc#1012628). - spi: spi-mem: fix reference leak in spi_mem_access_start (bsc#1012628). - scsi: aacraid: Improve compat_ioctl handlers (bsc#1012628). - pinctrl: core: Add missing #ifdef CONFIG_GPIOLIB (bsc#1012628). - ASoC: pcm: DRAIN support reactivation (bsc#1012628). - drm/bridge: tpd12s015: Fix irq registering in tpd12s015_probe (bsc#1012628). - crypto: arm64/poly1305-neon - reorder PAC authentication with SP update (bsc#1012628). - crypto: arm/aes-neonbs - fix usage of cbc(aes) fallback (bsc#1012628). - crypto: caam - fix printing on xts fallback allocation error path (bsc#1012628). - selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling (bsc#1012628). - nl80211/cfg80211: fix potential infinite loop (bsc#1012628). - spi: stm32: fix reference leak in stm32_spi_resume (bsc#1012628). - bpf: Fix tests for local_storage (bsc#1012628). - x86/mce: Correct the detection of invalid notifier priorities (bsc#1012628). - drm/edid: Fix uninitialized variable in drm_cvt_modes() (bsc#1012628). - ath11k: Initialize complete alpha2 for regulatory change (bsc#1012628). - ath11k: Fix number of rules in filtered ETSI regdomain (bsc#1012628). - ath11k: fix wmi init configuration (bsc#1012628). - brcmfmac: Fix memory leak for unpaired brcmf_{alloc/free} (bsc#1012628). - arm64: dts: exynos: Include common syscon restart/poweroff for Exynos7 (bsc#1012628). - arm64: dts: exynos: Correct psci compatible used on Exynos7 (bsc#1012628). - drm/panel: simple: Add flags to boe_nv133fhm_n61 (bsc#1012628). - Bluetooth: Fix null pointer dereference in hci_event_packet() (bsc#1012628). - Bluetooth: Fix: LL PRivacy BLE device fails to connect (bsc#1012628). - Bluetooth: hci_h5: fix memory leak in h5_close (bsc#1012628). - spi: stm32-qspi: fix reference leak in stm32 qspi operations (bsc#1012628). - spi: spi-ti-qspi: fix reference leak in ti_qspi_setup (bsc#1012628). - spi: mt7621: fix missing clk_disable_unprepare() on error in mt7621_spi_probe (bsc#1012628). - spi: tegra20-slink: fix reference leak in slink ops of tegra20 (bsc#1012628). - spi: tegra20-sflash: fix reference leak in tegra_sflash_resume (bsc#1012628). - spi: tegra114: fix reference leak in tegra spi ops (bsc#1012628). - spi: bcm63xx-hsspi: fix missing clk_disable_unprepare() on error in bcm63xx_hsspi_resume (bsc#1012628). - spi: imx: fix reference leak in two imx operations (bsc#1012628). - ASoC: qcom: common: Fix refcounting in qcom_snd_parse_of() (bsc#1012628). - ath11k: Handle errors if peer creation fails (bsc#1012628). - mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure (bsc#1012628). - drm/msm/a6xx: Clear shadow on suspend (bsc#1012628). - drm/msm/a5xx: Clear shadow on suspend (bsc#1012628). - firmware: tegra: fix strncpy()/strncat() confusion (bsc#1012628). - drm/msm/dp: return correct connection status after suspend (bsc#1012628). - drm/msm/dp: skip checking LINK_STATUS_UPDATED bit (bsc#1012628). - drm/msm/dp: do not notify audio subsystem if sink doesn't support audio (bsc#1012628). - selftests/run_kselftest.sh: fix dry-run typo (bsc#1012628). - selftest/bpf: Add missed ip6ip6 test back (bsc#1012628). - ASoC: wm8994: Fix PM disable depth imbalance on error (bsc#1012628). - ASoC: wm8998: Fix PM disable depth imbalance on error (bsc#1012628). - spi: sprd: fix reference leak in sprd_spi_remove (bsc#1012628). - virtiofs fix leak in setup (bsc#1012628). - ASoC: arizona: Fix a wrong free in wm8997_probe (bsc#1012628). - RDMa/mthca: Work around -Wenum-conversion warning (bsc#1012628). - ASoC: SOF: Intel: fix Kconfig dependency for SND_INTEL_DSP_CONFIG (bsc#1012628). - arm64: dts: ti: k3-am65*/j721e*: Fix unit address format error for dss node (bsc#1012628). - MIPS: BCM47XX: fix kconfig dependency bug for BCM47XX_BCMA (bsc#1012628). - drm/amdgpu: fix compute queue priority if num_kcq is less than 4 (bsc#1012628). - soc: ti: omap-prm: Do not check rstst bit on deassert if already deasserted (bsc#1012628). - crypto: Kconfig - CRYPTO_MANAGER_EXTRA_TESTS requires the manager (bsc#1012628). - crypto: qat - fix status check in qat_hal_put_rel_rd_xfer() (bsc#1012628). - firmware: arm_scmi: Fix missing destroy_workqueue() (bsc#1012628). - drm/udl: Fix missing error code in udl_handle_damage() (bsc#1012628). - staging: greybus: codecs: Fix reference counter leak in error handling (bsc#1012628). - staging: gasket: interrupt: fix the missed eventfd_ctx_put() in gasket_interrupt.c (bsc#1012628). - scripts: kernel-doc: Restore anonymous enum parsing (bsc#1012628). - drm/amdkfd: Put ACPI table after using it (bsc#1012628). - ionic: use mc sync for multicast filters (bsc#1012628). - ionic: flatten calls to ionic_lif_rx_mode (bsc#1012628). - ionic: change set_rx_mode from_ndo to can_sleep (bsc#1012628). - media: tm6000: Fix sizeof() mismatches (bsc#1012628). - media: platform: add missing put_device() call in mtk_jpeg_clk_init() (bsc#1012628). - media: mtk-vcodec: add missing put_device() call in mtk_vcodec_init_dec_pm() (bsc#1012628). - media: mtk-vcodec: add missing put_device() call in mtk_vcodec_release_dec_pm() (bsc#1012628). - media: mtk-vcodec: add missing put_device() call in mtk_vcodec_init_enc_pm() (bsc#1012628). - media: v4l2-fwnode: Return -EINVAL for invalid bus-type (bsc#1012628). - media: v4l2-fwnode: v4l2_fwnode_endpoint_parse caller must init vep argument (bsc#1012628). - media: ov5640: fix support of BT656 bus mode (bsc#1012628). - media: staging: rkisp1: cap: fix runtime PM imbalance on error (bsc#1012628). - media: cedrus: fix reference leak in cedrus_start_streaming (bsc#1012628). - media: platform: add missing put_device() call in mtk_jpeg_probe() and mtk_jpeg_remove() (bsc#1012628). - media: venus: core: change clk enable and disable order in resume and suspend (bsc#1012628). - media: venus: core: vote for video-mem path (bsc#1012628). - media: venus: core: vote with average bandwidth and peak bandwidth as zero (bsc#1012628). - RDMA/cma: Add missing error handling of listen_id (bsc#1012628). - ASoC: meson: fix COMPILE_TEST error (bsc#1012628). - spi: dw: fix build error by selecting MULTIPLEXER (bsc#1012628). - scsi: core: Fix VPD LUN ID designator priorities (bsc#1012628). - media: venus: put dummy vote on video-mem path after last session release (bsc#1012628). - media: solo6x10: fix missing snd_card_free in error handling case (bsc#1012628). - video: fbdev: atmel_lcdfb: fix return error code in atmel_lcdfb_of_init() (bsc#1012628). - mmc: sdhci: tegra: fix wrong unit with busy_timeout (bsc#1012628). - drm/omap: dmm_tiler: fix return error code in omap_dmm_probe() (bsc#1012628). - drm/meson: Free RDMA resources after tearing down DRM (bsc#1012628). - drm/meson: Unbind all connectors on module removal (bsc#1012628). - drm/meson: dw-hdmi: Register a callback to disable the regulator (bsc#1012628). - drm/meson: dw-hdmi: Ensure that clocks are enabled before touching the TOP registers (bsc#1012628). - ASoC: intel: SND_SOC_INTEL_KEEMBAY should depend on ARCH_KEEMBAY (bsc#1012628). - iommu/vt-d: include conditionally on CONFIG_INTEL_IOMMU_SVM (bsc#1012628). - Input: ads7846 - fix race that causes missing releases (bsc#1012628). - Input: ads7846 - fix integer overflow on Rt calculation (bsc#1012628). - Input: ads7846 - fix unaligned access on 7845 (bsc#1012628). - bus: mhi: core: Remove double locking from mhi_driver_remove() (bsc#1012628). - bus: mhi: core: Fix null pointer access when parsing MHI configuration (bsc#1012628). - usb/max3421: fix return error code in max3421_probe() (bsc#1012628). - spi: mxs: fix reference leak in mxs_spi_probe (bsc#1012628). - selftests/bpf: Fix broken riscv build (bsc#1012628). - powerpc: Avoid broken GCC __attribute__((optimize)) (bsc#1012628). - powerpc/feature: Fix CPU_FTRS_ALWAYS by removing CPU_FTRS_GENERIC_32 (bsc#1012628). - ARM: dts: tacoma: Fix node vs reg mismatch for flash memory (bsc#1012628). - Revert "powerpc/pseries/hotplug-cpu: Remove double free in error path" (bsc#1012628). - powerpc/powernv/sriov: fix unsigned int win compared to less than zero (bsc#1012628). - mfd: htc-i2cpld: Add the missed i2c_put_adapter() in htcpld_register_chip_i2c() (bsc#1012628). - mfd: MFD_SL28CPLD should depend on ARCH_LAYERSCAPE (bsc#1012628). - mfd: stmfx: Fix dev_err_probe() call in stmfx_chip_init() (bsc#1012628). - mfd: cpcap: Fix interrupt regression with regmap clear_ack (bsc#1012628). - EDAC/mce_amd: Use struct cpuinfo_x86.cpu_die_id for AMD NodeId (bsc#1012628). - scsi: ufs: Avoid to call REQ_CLKS_OFF to CLKS_OFF (bsc#1012628). - scsi: ufs: Fix clkgating on/off (bsc#1012628). - rcu: Allow rcu_irq_enter_check_tick() from NMI (bsc#1012628). - rcu,ftrace: Fix ftrace recursion (bsc#1012628). - rcu/tree: Defer kvfree_rcu() allocation to a clean context (bsc#1012628). - crypto: crypto4xx - Replace bitwise OR with logical OR in crypto4xx_build_pd (bsc#1012628). - crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe (bsc#1012628). - crypto: sun8i-ce - fix two error path's memory leak (bsc#1012628). - spi: fix resource leak for drivers without .remove callback (bsc#1012628). - drm/meson: dw-hdmi: Disable clocks on driver teardown (bsc#1012628). - drm/meson: dw-hdmi: Enable the iahb clock early enough (bsc#1012628). - PCI: Disable MSI for Pericom PCIe-USB adapter (bsc#1012628). - PCI: brcmstb: Initialize "tmp" before use (bsc#1012628). - soc: ti: knav_qmss: fix reference leak in knav_queue_probe (bsc#1012628). - soc: ti: Fix reference imbalance in knav_dma_probe (bsc#1012628). - drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe (bsc#1012628). - soc: qcom: initialize local variable (bsc#1012628). - arm64: dts: qcom: sm8250: correct compatible for sm8250-mtp (bsc#1012628). - arm64: dts: qcom: msm8916-samsung-a2015: Disable muic i2c pin bias (bsc#1012628). - Input: omap4-keypad - fix runtime PM error handling (bsc#1012628). - clk: meson: Kconfig: fix dependency for G12A (bsc#1012628). - staging: mfd: hi6421-spmi-pmic: fix error return code in hi6421_spmi_pmic_probe() (bsc#1012628). - ath11k: Fix the rx_filter flag setting for peer rssi stats (bsc#1012628). - RDMA/cxgb4: Validate the number of CQEs (bsc#1012628). - soundwire: Fix DEBUG_LOCKS_WARN_ON for uninitialized attribute (bsc#1012628). - pinctrl: sunxi: fix irq bank map for the Allwinner A100 pin controller (bsc#1012628). - memstick: fix a double-free bug in memstick_check (bsc#1012628). - ARM: dts: at91: sam9x60: add pincontrol for USB Host (bsc#1012628). - ARM: dts: at91: sama5d4_xplained: add pincontrol for USB Host (bsc#1012628). - ARM: dts: at91: sama5d3_xplained: add pincontrol for USB Host (bsc#1012628). - mmc: pxamci: Fix error return code in pxamci_probe (bsc#1012628). - brcmfmac: fix error return code in brcmf_cfg80211_connect() (bsc#1012628). - orinoco: Move context allocation after processing the skb (bsc#1012628). - qtnfmac: fix error return code in qtnf_pcie_probe() (bsc#1012628). - rsi: fix error return code in rsi_reset_card() (bsc#1012628). - cw1200: fix missing destroy_workqueue() on error in cw1200_init_common (bsc#1012628). - dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe() (bsc#1012628). - arm64: dts: qcom: sdm845: Limit ipa iommu streams (bsc#1012628). - leds: netxbig: add missing put_device() call in netxbig_leds_get_of_pdata() (bsc#1012628). - leds: lp50xx: Fix an error handling path in 'lp50xx_probe_dt()' (bsc#1012628). - leds: turris-omnia: check for LED_COLOR_ID_RGB instead LED_COLOR_ID_MULTI (bsc#1012628). - arm64: tegra: Fix DT binding for IO High Voltage entry (bsc#1012628). - RDMA/cma: Fix deadlock on &lock in rdma_cma_listen_on_all() error unwind (bsc#1012628). - soundwire: qcom: Fix build failure when slimbus is module (bsc#1012628). - drm/imx/dcss: fix rotations for Vivante tiled formats (bsc#1012628). - media: siano: fix memory leak of debugfs members in smsdvb_hotplug (bsc#1012628). - platform/x86: mlx-platform: Remove PSU EEPROM from default platform configuration (bsc#1012628). - platform/x86: mlx-platform: Remove PSU EEPROM from MSN274x platform configuration (bsc#1012628). - arm64: dts: qcom: sc7180: limit IPA iommu streams (bsc#1012628). - RDMA/hns: Only record vlan info for HIP08 (bsc#1012628). - RDMA/hns: Fix missing fields in address vector (bsc#1012628). - RDMA/hns: Avoid setting loopback indicator when smac is same as dmac (bsc#1012628). - serial: 8250-mtk: Fix reference leak in mtk8250_probe (bsc#1012628). - samples: bpf: Fix lwt_len_hist reusing previous BPF map (bsc#1012628). - media: imx214: Fix stop streaming (bsc#1012628). - mips: cdmm: fix use-after-free in mips_cdmm_bus_discover (bsc#1012628). - media: max2175: fix max2175_set_csm_mode() error code (bsc#1012628). - slimbus: qcom-ngd-ctrl: Avoid sending power requests without QMI (bsc#1012628). - RDMA/core: Track device memory MRs (bsc#1012628). - drm/mediatek: Use correct aliases name for ovl (bsc#1012628). - HSI: omap_ssi: Don't jump to free ID in ssi_add_controller() (bsc#1012628). - ARM: dts: Remove non-existent i2c1 from 98dx3236 (bsc#1012628). - arm64: dts: armada-3720-turris-mox: update ethernet-phy handle name (bsc#1012628). - power: supply: bq25890: Use the correct range for IILIM register (bsc#1012628). - arm64: dts: rockchip: Set dr_mode to "host" for OTG on rk3328-roc-cc (bsc#1012628). - power: supply: max17042_battery: Fix current_{avg,now} hiding with no current sense (bsc#1012628). - power: supply: axp288_charger: Fix HP Pavilion x2 10 DMI matching (bsc#1012628). - power: supply: bq24190_charger: fix reference leak (bsc#1012628). - genirq/irqdomain: Don't try to free an interrupt that has no mapping (bsc#1012628). - arm64: dts: ls1028a: fix ENETC PTP clock input (bsc#1012628). - arm64: dts: ls1028a: fix FlexSPI clock input (bsc#1012628). - arm64: dts: freescale: sl28: combine SPI MTD partitions (bsc#1012628). - phy: tegra: xusb: Fix usb_phy device driver field (bsc#1012628). - arm64: dts: qcom: c630: Polish i2c-hid devices (bsc#1012628). - arm64: dts: qcom: c630: Fix pinctrl pins properties (bsc#1012628). - PCI: Bounds-check command-line resource alignment requests (bsc#1012628). - PCI: Fix overflow in command-line resource alignment requests (bsc#1012628). - PCI: iproc: Fix out-of-bound array accesses (bsc#1012628). - PCI: iproc: Invalidate correct PAXB inbound windows (bsc#1012628). - arm64: dts: meson: fix spi-max-frequency on Khadas VIM2 (bsc#1012628). - arm64: dts: meson-sm1: fix typo in opp table (bsc#1012628). - soc: amlogic: canvas: add missing put_device() call in meson_canvas_get() (bsc#1012628). - scsi: hisi_sas: Fix up probe error handling for v3 hw (bsc#1012628). - scsi: pm80xx: Do not sleep in atomic context (bsc#1012628). - spi: spi-fsl-dspi: Use max_native_cs instead of num_chipselect to set SPI_MCR (bsc#1012628). - ARM: dts: at91: at91sam9rl: fix ADC triggers (bsc#1012628). - RDMA/hns: Fix 0-length sge calculation error (bsc#1012628). - RDMA/hns: Bugfix for calculation of extended sge (bsc#1012628). - mailbox: arm_mhu_db: Fix mhu_db_shutdown by replacing kfree with devm_kfree (bsc#1012628). - soundwire: master: use pm_runtime_set_active() on add (bsc#1012628). - platform/x86: dell-smbios-base: Fix error return code in dell_smbios_init (bsc#1012628). - ASoC: Intel: Boards: tgl_max98373: update TDM slot_width (bsc#1012628). - media: max9271: Fix GPIO enable/disable (bsc#1012628). - media: rdacm20: Enable GPIO1 explicitly (bsc#1012628). - media: i2c: imx219: Selection compliance fixes (bsc#1012628). - ath11k: Don't cast ath11k_skb_cb to ieee80211_tx_info.control (bsc#1012628). - ath11k: Reset ath11k_skb_cb before setting new flags (bsc#1012628). - ath11k: Fix an error handling path (bsc#1012628). - ath10k: Fix the parsing error in service available event (bsc#1012628). - ath10k: Fix an error handling path (bsc#1012628). - ath10k: Release some resources in an error handling path (bsc#1012628). - SUNRPC: rpc_wake_up() should wake up tasks in the correct order (bsc#1012628). - NFSv4.2: condition READDIR's mask for security label based on LSM state (bsc#1012628). - SUNRPC: xprt_load_transport() needs to support the netid "rdma6" (bsc#1012628). - NFSv4: Fix the alignment of page data in the getdeviceinfo reply (bsc#1012628). - net: sunrpc: Fix 'snprintf' return value check in 'do_xprt_debugfs' (bsc#1012628). - lockd: don't use interval-based rebinding over TCP (bsc#1012628). - NFS: switch nfsiod to be an UNBOUND workqueue (bsc#1012628). - selftests/seccomp: Update kernel config (bsc#1012628). - vfio-pci: Use io_remap_pfn_range() for PCI IO memory (bsc#1012628). - hwmon: (ina3221) Fix PM usage counter unbalance in ina3221_write_enable (bsc#1012628). - f2fs: fix double free of unicode map (bsc#1012628). - media: tvp5150: Fix wrong return value of tvp5150_parse_dt() (bsc#1012628). - media: saa7146: fix array overflow in vidioc_s_audio() (bsc#1012628). - powerpc/perf: Fix crash with is_sier_available when pmu is not set (bsc#1012628). - powerpc/64: Fix an EMIT_BUG_ENTRY in head_64.S (bsc#1012628). - powerpc/xmon: Fix build failure for 8xx (bsc#1012628). - powerpc/perf: Fix to update radix_scope_qual in power10 (bsc#1012628). - powerpc/perf: Update the PMU group constraints for l2l3 events in power10 (bsc#1012628). - powerpc/perf: Fix the PMU group constraints for threshold events in power10 (bsc#1012628). - clocksource/drivers/orion: Add missing clk_disable_unprepare() on error path (bsc#1012628). - clocksource/drivers/cadence_ttc: Fix memory leak in ttc_setup_clockevent() (bsc#1012628). - clocksource/drivers/ingenic: Fix section mismatch (bsc#1012628). - clocksource/drivers/riscv: Make RISCV_TIMER depends on RISCV_SBI (bsc#1012628). - arm64: mte: fix prctl(PR_GET_TAGGED_ADDR_CTRL) if TCF0=NONE (bsc#1012628). - iio: hrtimer-trigger: Mark hrtimer to expire in hard interrupt context (bsc#1012628). - libbpf: Sanitise map names before pinning (bsc#1012628). - ARM: dts: at91: sam9x60ek: remove bypass property (bsc#1012628). - ARM: dts: at91: sama5d2: map securam as device (bsc#1012628). - scripts: kernel-doc: fix parsing function-like typedefs (bsc#1012628). - bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address() (bsc#1012628). - selftests/bpf: Fix invalid use of strncat in test_sockmap (bsc#1012628). - pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe() (bsc#1012628). - soc: rockchip: io-domain: Fix error return code in rockchip_iodomain_probe() (bsc#1012628). - arm64: dts: rockchip: Fix UART pull-ups on rk3328 (bsc#1012628). - memstick: r592: Fix error return in r592_probe() (bsc#1012628). - MIPS: Don't round up kernel sections size for memblock_add() (bsc#1012628). - mt76: mt7663s: fix a possible ple quota underflow (bsc#1012628). - mt76: mt7915: set fops_sta_stats.owner to THIS_MODULE (bsc#1012628). - mt76: set fops_tx_stats.owner to THIS_MODULE (bsc#1012628). - mt76: dma: fix possible deadlock running mt76_dma_cleanup (bsc#1012628). - net/mlx5: Properly convey driver version to firmware (bsc#1012628). - mt76: fix memory leak if device probing fails (bsc#1012628). - mt76: fix tkip configuration for mt7615/7663 devices (bsc#1012628). - ASoC: jz4740-i2s: add missed checks for clk_get() (bsc#1012628). - ASoC: q6afe-clocks: Add missing parent clock rate (bsc#1012628). - dm ioctl: fix error return code in target_message (bsc#1012628). - ASoC: cros_ec_codec: fix uninitialized memory read (bsc#1012628). - ASoC: atmel: mchp-spdifrx needs COMMON_CLK (bsc#1012628). - ASoC: qcom: fix QDSP6 dependencies, attempt #3 (bsc#1012628). - phy: mediatek: allow compile-testing the hdmi phy (bsc#1012628). - phy: renesas: rcar-gen3-usb2: disable runtime pm in case of failure (bsc#1012628). - memory: ti-emif-sram: only build for ARMv7 (bsc#1012628). - memory: jz4780_nemc: Fix potential NULL dereference in jz4780_nemc_probe() (bsc#1012628). - drm/msm: a5xx: Make preemption reset case reentrant (bsc#1012628). - drm/msm: add IOMMU_SUPPORT dependency (bsc#1012628). - clocksource/drivers/arm_arch_timer: Use stable count reader in erratum sne (bsc#1012628). - clocksource/drivers/arm_arch_timer: Correct fault programming of CNTKCTL_EL1.EVNTI (bsc#1012628). - cpufreq: ap806: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - cpufreq: highbank: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - cpufreq: mediatek: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - cpufreq: qcom: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - cpufreq: st: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - cpufreq: sun50i: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - cpufreq: loongson1: Add missing MODULE_ALIAS (bsc#1012628). - cpufreq: scpi: Add missing MODULE_ALIAS (bsc#1012628). - cpufreq: vexpress-spc: Add missing MODULE_ALIAS (bsc#1012628). - cpufreq: imx: fix NVMEM_IMX_OCOTP dependency (bsc#1012628). - macintosh/adb-iop: Always wait for reply message from IOP (bsc#1012628). - macintosh/adb-iop: Send correct poll command (bsc#1012628). - staging: bcm2835: fix vchiq_mmal dependencies (bsc#1012628). - staging: greybus: audio: Fix possible leak free widgets in gbaudio_dapm_free_controls (bsc#1012628). - spi: dw: Fix error return code in dw_spi_bt1_probe() (bsc#1012628). - Bluetooth: btusb: Add the missed release_firmware() in btusb_mtk_setup_firmware() (bsc#1012628). - Bluetooth: btmtksdio: Add the missed release_firmware() in mtk_setup_firmware() (bsc#1012628). - Bluetooth: sco: Fix crash when using BT_SNDMTU/BT_RCVMTU option (bsc#1012628). - block/rnbd-clt: Dynamically alloc buffer for pathname & blk_symlink_name (bsc#1012628). - block/rnbd: fix a null pointer dereference on dev->blk_symlink_name (bsc#1012628). - Bluetooth: btusb: Fix detection of some fake CSR controllers with a bcdDevice val of 0x0134 (bsc#1012628). - platform/x86: intel-vbtn: Fix SW_TABLET_MODE always reporting 1 on some HP x360 models (bsc#1012628). - adm8211: fix error return code in adm8211_probe() (bsc#1012628). - mtd: spi-nor: sst: fix BPn bits for the SST25VF064C (bsc#1012628). - mtd: spi-nor: ignore errors in spi_nor_unlock_all() (bsc#1012628). - mtd: spi-nor: atmel: remove global protection flag (bsc#1012628). - mtd: spi-nor: atmel: fix unlock_all() for AT25FS010/040 (bsc#1012628). - arm64: dts: meson: g12b: odroid-n2: fix PHY deassert timing requirements (bsc#1012628). - arm64: dts: meson: fix PHY deassert timing requirements (bsc#1012628). - ARM: dts: meson: fix PHY deassert timing requirements (bsc#1012628). - arm64: dts: meson: g12a: x96-max: fix PHY deassert timing requirements (bsc#1012628). - arm64: dts: meson: g12b: w400: fix PHY deassert timing requirements (bsc#1012628). - clk: fsl-sai: fix memory leak (bsc#1012628). - scsi: qedi: Fix missing destroy_workqueue() on error in __qedi_probe (bsc#1012628). - scsi: pm80xx: Fix error return in pm8001_pci_probe() (bsc#1012628). - scsi: iscsi: Fix inappropriate use of put_device() (bsc#1012628). - seq_buf: Avoid type mismatch for seq_buf_init (bsc#1012628). - scsi: fnic: Fix error return code in fnic_probe() (bsc#1012628). - platform/x86: mlx-platform: Fix item counter assignment for MSN2700, MSN24xx systems (bsc#1012628). - platform/x86: mlx-platform: Fix item counter assignment for MSN2700/ComEx system (bsc#1012628). - ARM: 9030/1: entry: omit FP emulation for UND exceptions taken in kernel mode (bsc#1012628). - powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend ops (bsc#1012628). - powerpc/pseries/hibernation: remove redundant cacheinfo update (bsc#1012628). - powerpc/powermac: Fix low_sleep_handler with CONFIG_VMAP_STACK (bsc#1012628). - drm/mediatek: avoid dereferencing a null hdmi_phy on an error message (bsc#1012628). - ASoC: amd: change clk_get() to devm_clk_get() and add missed checks (bsc#1012628). - coresight: remove broken __exit annotations (bsc#1012628). - ASoC: max98390: Fix error codes in max98390_dsm_init() (bsc#1012628). - powerpc/mm: sanity_check_fault() should work for all, not only BOOK3S (bsc#1012628). - usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe (bsc#1012628). - usb: oxu210hp-hcd: Fix memory leak in oxu_create (bsc#1012628). - speakup: fix uninitialized flush_lock (bsc#1012628). - nfsd: Fix message level for normal termination (bsc#1012628). - NFSD: Fix 5 seconds delay when doing inter server copy (bsc#1012628). - nfs_common: need lock during iterate through the list (bsc#1012628). - x86/kprobes: Restore BTF if the single-stepping is cancelled (bsc#1012628). - scsi: qla2xxx: Fix FW initialization error on big endian machines (bsc#1012628). - scsi: qla2xxx: Fix N2N and NVMe connect retry failure (bsc#1012628). - platform/chrome: cros_ec_spi: Don't overwrite spi::mode (bsc#1012628). - misc: pci_endpoint_test: fix return value of error branch (bsc#1012628). - bus: fsl-mc: add back accidentally dropped error check (bsc#1012628). - bus: fsl-mc: fix error return code in fsl_mc_object_allocate() (bsc#1012628). - fsi: Aspeed: Add mutex to protect HW access (bsc#1012628). - s390/cio: fix use-after-free in ccw_device_destroy_console (bsc#1012628). - iwlwifi: dbg-tlv: fix old length in is_trig_data_contained() (bsc#1012628). - iwlwifi: mvm: hook up missing RX handlers (bsc#1012628). - erofs: avoid using generic_block_bmap (bsc#1012628). - clk: renesas: r8a779a0: Fix R and OSC clocks (bsc#1012628). - can: m_can: m_can_config_endisable(): remove double clearing of clock stop request bit (bsc#1012628). - powerpc/sstep: Emulate prefixed instructions only when CPU_FTR_ARCH_31 is set (bsc#1012628). - powerpc/sstep: Cover new VSX instructions under CONFIG_VSX (bsc#1012628). - slimbus: qcom: fix potential NULL dereference in qcom_slim_prg_slew() (bsc#1012628). - ALSA: hda/hdmi: fix silent stream for first playback to DP (bsc#1012628). - RDMA/core: Do not indicate device ready when device enablement fails (bsc#1012628). - RDMA/uverbs: Fix incorrect variable type (bsc#1012628). - remoteproc/mediatek: change MT8192 CFG register base (bsc#1012628). - remoteproc/mtk_scp: surround DT device IDs with CONFIG_OF (bsc#1012628). - remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable (bsc#1012628). - remoteproc: qcom: fix reference leak in adsp_start (bsc#1012628). - remoteproc: qcom: pas: fix error handling in adsp_pds_enable (bsc#1012628). - remoteproc: k3-dsp: Fix return value check in k3_dsp_rproc_of_get_memories() (bsc#1012628). - remoteproc: qcom: Fix potential NULL dereference in adsp_init_mmio() (bsc#1012628). - remoteproc/mediatek: unprepare clk if scp_before_load fails (bsc#1012628). - clk: qcom: gcc-sc7180: Use floor ops for sdcc clks (bsc#1012628). - clk: tegra: Fix duplicated SE clock entry (bsc#1012628). - mtd: rawnand: gpmi: fix reference count leak in gpmi ops (bsc#1012628). - mtd: rawnand: meson: Fix a resource leak in init (bsc#1012628). - mtd: rawnand: gpmi: Fix the random DMA timeout issue (bsc#1012628). - samples/bpf: Fix possible hang in xdpsock with multiple threads (bsc#1012628). - fs: Handle I_DONTCACHE in iput_final() instead of generic_drop_inode() (bsc#1012628). - extcon: max77693: Fix modalias string (bsc#1012628). - crypto: atmel-i2c - select CONFIG_BITREVERSE (bsc#1012628). - mac80211: don't set set TDLS STA bandwidth wider than possible (bsc#1012628). - mac80211: fix a mistake check for rx_stats update (bsc#1012628). - ASoC: wm_adsp: remove "ctl" from list on error in wm_adsp_create_control() (bsc#1012628). - irqchip/alpine-msi: Fix freeing of interrupts on allocation error path (bsc#1012628). - irqchip/ti-sci-inta: Fix printing of inta id on probe success (bsc#1012628). - irqchip/ti-sci-intr: Fix freeing of irqs (bsc#1012628). - dmaengine: ti: k3-udma: Correct normal channel offset when uchan_cnt is not 0 (bsc#1012628). - RDMA/hns: Limit the length of data copied between kernel and userspace (bsc#1012628). - RDMA/hns: Normalization the judgment of some features (bsc#1012628). - RDMA/hns: Do shift on traffic class when using RoCEv2 (bsc#1012628). - gpiolib: irq hooks: fix recursion in gpiochip_irq_unmask (bsc#1012628). - ath11k: Fix incorrect tlvs in scan start command (bsc#1012628). - irqchip/qcom-pdc: Fix phantom irq when changing between rising/falling (bsc#1012628). - watchdog: armada_37xx: Add missing dependency on HAS_IOMEM (bsc#1012628). - watchdog: sirfsoc: Add missing dependency on HAS_IOMEM (bsc#1012628). - watchdog: sprd: remove watchdog disable from resume fail path (bsc#1012628). - watchdog: sprd: check busy bit before new loading rather than after that (bsc#1012628). - watchdog: Fix potential dereferencing of null pointer (bsc#1012628). - ubifs: Fix error return code in ubifs_init_authentication() (bsc#1012628). - um: Monitor error events in IRQ controller (bsc#1012628). - um: tty: Fix handling of close in tty lines (bsc#1012628). - um: chan_xterm: Fix fd leak (bsc#1012628). - sunrpc: fix xs_read_xdr_buf for partial pages receive (bsc#1012628). - RDMA/mlx5: Fix MR cache memory leak (bsc#1012628). - RDMA/cma: Don't overwrite sgid_attr after device is released (bsc#1012628). - nfc: s3fwrn5: Release the nfc firmware (bsc#1012628). - drm: mxsfb: Silence -EPROBE_DEFER while waiting for bridge (bsc#1012628). - powerpc/perf: Fix Threshold Event Counter Multiplier width for P10 (bsc#1012628). - powerpc/ps3: use dma_mapping_error() (bsc#1012628). - perf test: Fix metric parsing test (bsc#1012628). - drm/amdgpu: fix regression in vbios reservation handling on headless (bsc#1012628). - mm/gup: reorganize internal_get_user_pages_fast() (bsc#1012628). - mm/gup: prevent gup_fast from racing with COW during fork (bsc#1012628). - mm/gup: combine put_compound_head() and unpin_user_page() (bsc#1012628). - mm: memcg/slab: fix return of child memcg objcg for root memcg (bsc#1012628). - mm: memcg/slab: fix use after free in obj_cgroup_charge (bsc#1012628). - mm/rmap: always do TTU_IGNORE_ACCESS (bsc#1012628). - sparc: fix handling of page table constructor failure (bsc#1012628). - mm/vmalloc: Fix unlock order in s_stop() (bsc#1012628). - mm/vmalloc.c: fix kasan shadow poisoning size (bsc#1012628). - mm,memory_failure: always pin the page in madvise_inject_error (bsc#1012628). - hugetlb: fix an error code in hugetlb_reserve_pages() (bsc#1012628). - mm: don't wake kswapd prematurely when watermark boosting is disabled (bsc#1012628). - proc: fix lookup in /proc/net subdirectories after setns(2) (bsc#1012628). - checkpatch: fix unescaped left brace (bsc#1012628). - s390/test_unwind: fix CALL_ON_STACK tests (bsc#1012628). - lan743x: fix rx_napi_poll/interrupt ping-pong (bsc#1012628). - ice, xsk: clear the status bits for the next_to_use descriptor (bsc#1012628). - i40e, xsk: clear the status bits for the next_to_use descriptor (bsc#1012628). - net: dsa: qca: ar9331: fix sleeping function called from invalid context bug (bsc#1012628). - dpaa2-eth: fix the size of the mapped SGT buffer (bsc#1012628). - net: bcmgenet: Fix a resource leak in an error handling path in the probe functin (bsc#1012628). - net: mscc: ocelot: Fix a resource leak in the error handling path of the probe function (bsc#1012628). - net: allwinner: Fix some resources leak in the error handling path of the probe and in the remove function (bsc#1012628). - block/rnbd-clt: Get rid of warning regarding size argument in strlcpy (bsc#1012628). - block/rnbd-clt: Fix possible memleak (bsc#1012628). - NFS/pNFS: Fix a typo in ff_layout_resend_pnfs_read() (bsc#1012628). - net: korina: fix return value (bsc#1012628). - devlink: use _BITUL() macro instead of BIT() in the UAPI header (bsc#1012628). - libnvdimm/label: Return -ENXIO for no slot in __blk_label_update (bsc#1012628). - powerpc/32s: Fix cleanup_cpu_mmu_context() compile bug (bsc#1012628). - watchdog: qcom: Avoid context switch in restart handler (bsc#1012628). - watchdog: coh901327: add COMMON_CLK dependency (bsc#1012628). - clk: ti: Fix memleak in ti_fapll_synth_setup (bsc#1012628). - pwm: zx: Add missing cleanup in error path (bsc#1012628). - pwm: lp3943: Dynamically allocate PWM chip base (bsc#1012628). - pwm: imx27: Fix overflow for bigger periods (bsc#1012628). - pwm: sun4i: Remove erroneous else branch (bsc#1012628). - io_uring: cancel only requests of current task (bsc#1012628). - tools build: Add missing libcap to test-all.bin target (bsc#1012628). - =?UTF-8?q?perf=20record:=20Fix=20memory=20leak=20when=20u?= =?UTF-8?q?sing=20'--user-regs=3D=3F'=20to=20list=20registers?= (bsc#1012628). - qlcnic: Fix error code in probe (bsc#1012628). - nfp: move indirect block cleanup to flower app stop callback (bsc#1012628). - vdpa/mlx5: Use write memory barrier after updating CQ index (bsc#1012628). - virtio_ring: Cut and paste bugs in vring_create_virtqueue_packed() (bsc#1012628). - virtio_net: Fix error code in probe() (bsc#1012628). - virtio_ring: Fix two use after free bugs (bsc#1012628). - vhost scsi: fix error return code in vhost_scsi_set_endpoint() (bsc#1012628). - epoll: check for events when removing a timed out thread from the wait queue (bsc#1012628). - clk: at91: sama7g5: fix compilation error (bsc#1012628). - clk: at91: sam9x60: remove atmel,osc-bypass support (bsc#1012628). - clk: s2mps11: Fix a resource leak in error handling paths in the probe function (bsc#1012628). - clk: sunxi-ng: Make sure divider tables have sentinel (bsc#1012628). - clk: vc5: Use "idt,voltage-microvolt" instead of "idt,voltage-microvolts" (bsc#1012628). - kconfig: fix return value of do_error_if() (bsc#1012628). - powerpc/boot: Fix build of dts/fsl (bsc#1012628). - powerpc/smp: Add __init to init_big_cores() (bsc#1012628). - ARM: 9044/1: vfp: use undef hook for VFP support detection (bsc#1012628). - ARM: 9036/1: uncompress: Fix dbgadtb size parameter name (bsc#1012628). - perf probe: Fix memory leak when synthesizing SDT probes (bsc#1012628). - io_uring: fix racy IOPOLL flush overflow (bsc#1012628). - io_uring: cancel reqs shouldn't kill overflow list (bsc#1012628). - Smack: Handle io_uring kernel thread privileges (bsc#1012628). - proc mountinfo: make splice available again (bsc#1012628). - io_uring: fix io_cqring_events()'s noflush (bsc#1012628). - io_uring: fix racy IOPOLL completions (bsc#1012628). - io_uring: always let io_iopoll_complete() complete polled io (bsc#1012628). - vfio/pci: Move dummy_resources_list init in vfio_pci_probe() (bsc#1012628). - vfio/pci/nvlink2: Do not attempt NPU2 setup on POWER8NVL NPU (bsc#1012628). - media: gspca: Fix memory leak in probe (bsc#1012628). - io_uring: fix io_wqe->work_list corruption (bsc#1012628). - io_uring: fix 0-iov read buffer select (bsc#1012628). - io_uring: hold uring_lock while completing failed polled io in io_wq_submit_work() (bsc#1012628). - io_uring: fix ignoring xa_store errors (bsc#1012628). - io_uring: fix double io_uring free (bsc#1012628). - io_uring: make ctx cancel on exit targeted to actual ctx (bsc#1012628). - media: sunxi-cir: ensure IR is handled when it is continuous (bsc#1012628). - media: netup_unidvb: Don't leak SPI master in probe error path (bsc#1012628). - media: ipu3-cio2: Remove traces of returned buffers (bsc#1012628). - media: ipu3-cio2: Return actual subdev format (bsc#1012628). - media: ipu3-cio2: Serialise access to pad format (bsc#1012628). - media: ipu3-cio2: Validate mbus format in setting subdev format (bsc#1012628). - media: ipu3-cio2: Make the field on subdev format V4L2_FIELD_NONE (bsc#1012628). - Input: cyapa_gen6 - fix out-of-bounds stack access (bsc#1012628). - ALSA: hda/ca0132 - Change Input Source enum strings (bsc#1012628). - ACPI: NFIT: Fix input validation of bus-family (bsc#1012628). - PM: ACPI: PCI: Drop acpi_pm_set_bridge_wakeup() (bsc#1012628). - Revert "ACPI / resources: Use AE_CTRL_TERMINATE to terminate resources walks" (bsc#1012628). - ACPI: PNP: compare the string length in the matching_id() (bsc#1012628). - ALSA: hda: Fix regressions on clear and reconfig sysfs (bsc#1012628). - ALSA: hda/ca0132 - Fix AE-5 rear headphone pincfg (bsc#1012628). - ALSA: hda/realtek: make bass spk volume adjustable on a yoga laptop (bsc#1012628). - ALSA: hda/realtek - Enable headset mic of ASUS X430UN with ALC256 (bsc#1012628). - ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (bsc#1012628). - ALSA: hda/realtek - Add supported for more Lenovo ALC285 Headset Button (bsc#1012628). - ALSA: pcm: oss: Fix a few more UBSAN fixes (bsc#1012628). - ALSA/hda: apply jack fixup for the Acer Veriton N4640G/N6640G/N2510G (bsc#1012628). - ALSA: hda/realtek: Add quirk for MSI-GP73 (bsc#1012628). - ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (bsc#1012628). - ALSA: hda/realtek: Remove dummy lineout on Acer TravelMate P648/P658 (bsc#1012628). - ALSA: hda/realtek - Supported Dell fixed type headset (bsc#1012628). - ALSA: usb-audio: Add VID to support native DSD reproduction on FiiO devices (bsc#1012628). - ALSA: usb-audio: Disable sample read check if firmware doesn't give back (bsc#1012628). - ALSA: usb-audio: Add alias entry for ASUS PRIME TRX40 PRO-S (bsc#1012628). - ALSA: core: memalloc: add page alignment for iram (bsc#1012628). - s390/smp: perform initial CPU reset also for SMT siblings (bsc#1012628). - s390/kexec_file: fix diag308 subcode when loading crash kernel (bsc#1012628). - s390/idle: add missing mt_cycles calculation (bsc#1012628). - s390/idle: fix accounting with machine checks (bsc#1012628). - s390/dasd: fix hanging device offline processing (bsc#1012628). - s390/dasd: prevent inconsistent LCU device data (bsc#1012628). - s390/dasd: fix list corruption of pavgroup group list (bsc#1012628). - s390/dasd: fix list corruption of lcu list (bsc#1012628). - binder: add flag to clear buffer on txn complete (bsc#1012628). - ASoC: cx2072x: Fix doubly definitions of Playback and Capture streams (bsc#1012628). - ASoC: AMD Renoir - add DMI table to avoid the ACP mic probe (broken BIOS) (bsc#1012628). - ASoC: AMD Raven/Renoir - fix the PCI probe (PCI revision) (bsc#1012628). - staging: comedi: mf6x4: Fix AI end-of-conversion detection (bsc#1012628). - z3fold: simplify freeing slots (bsc#1012628). - z3fold: stricter locking and more careful reclaim (bsc#1012628). - perf/x86/intel: Add event constraint for CYCLE_ACTIVITY.STALLS_MEM_ANY (bsc#1012628). - perf/x86/intel: Fix rtm_abort_event encoding on Ice Lake (bsc#1012628). - perf/x86/intel/lbr: Fix the return type of get_lbr_cycles() (bsc#1012628). - powerpc/perf: Exclude kernel samples while counting events in user space (bsc#1012628). - cpufreq: intel_pstate: Use most recent guaranteed performance values (bsc#1012628). - crypto: ecdh - avoid unaligned accesses in ecdh_set_secret() (bsc#1012628). - crypto: arm/aes-ce - work around Cortex-A57/A72 silion errata (bsc#1012628). - m68k: Fix WARNING splat in pmac_zilog driver (bsc#1012628). - Documentation: seqlock: s/LOCKTYPE/LOCKNAME/g (bsc#1012628). - EDAC/i10nm: Use readl() to access MMIO registers (bsc#1012628). - EDAC/amd64: Fix PCI component registration (bsc#1012628). - cpuset: fix race between hotplug work and later CPU offline (bsc#1012628). - dyndbg: fix use before null check (bsc#1012628). - USB: serial: mos7720: fix parallel-port state restore (bsc#1012628). - USB: serial: digi_acceleport: fix write-wakeup deadlocks (bsc#1012628). - USB: serial: keyspan_pda: fix dropped unthrottle interrupts (bsc#1012628). - USB: serial: keyspan_pda: fix write deadlock (bsc#1012628). - USB: serial: keyspan_pda: fix stalled writes (bsc#1012628). - USB: serial: keyspan_pda: fix write-wakeup use-after-free (bsc#1012628). - USB: serial: keyspan_pda: fix tx-unthrottle use-after-free (bsc#1012628). - USB: serial: keyspan_pda: fix write unthrottling (bsc#1012628). - btrfs: do not shorten unpin len for caching block groups (bsc#1012628). - btrfs: update last_byte_to_unpin in switch_commit_roots (bsc#1012628). - btrfs: fix race when defragmenting leads to unnecessary IO (bsc#1012628). - ext4: fix an IS_ERR() vs NULL check (bsc#1012628). - ext4: fix a memory leak of ext4_free_data (bsc#1012628). - ext4: fix deadlock with fs freezing and EA inodes (bsc#1012628). - ext4: don't remount read-only with errors=continue on reboot (bsc#1012628). - RISC-V: Fix usage of memblock_enforce_memory_limit (bsc#1012628). - arm64: dts: ti: k3-am65: mark dss as dma-coherent (bsc#1012628). - arm64: dts: marvell: keep SMMU disabled by default for Armada 7040 and 8040 (bsc#1012628). - KVM: arm64: Introduce handling of AArch32 TTBCR2 traps (bsc#1012628). - KVM: x86: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (bsc#1012628). - KVM: SVM: Remove the call to sev_platform_status() during setup (bsc#1012628). - iommu/arm-smmu: Allow implementation specific write_s2cr (bsc#1012628). - iommu/arm-smmu-qcom: Read back stream mappings (bsc#1012628). - iommu/arm-smmu-qcom: Implement S2CR quirk (bsc#1012628). - ARM: dts: pandaboard: fix pinmux for gpio user button of Pandaboard ES (bsc#1012628). - ARM: dts: at91: sama5d2: fix CAN message ram offset and size (bsc#1012628). - ARM: tegra: Populate OPP table for Tegra20 Ventana (bsc#1012628). - xprtrdma: Fix XDRBUF_SPARSE_PAGES support (bsc#1012628). - powerpc/32: Fix vmap stack - Properly set r1 before activating MMU on syscall too (bsc#1012628). - powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at (bsc#1012628). - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (bsc#1012628). - powerpc/bitops: Fix possible undefined behaviour with fls() and fls64() (bsc#1012628). - powerpc/feature: Add CPU_FTR_NOEXECUTE to G2_LE (bsc#1012628). - powerpc/xmon: Change printk() to pr_cont() (bsc#1012628). - powerpc/8xx: Fix early debug when SMC1 is relocated (bsc#1012628). - powerpc/mm: Fix verification of MMU_FTR_TYPE_44x (bsc#1012628). - powerpc/powernv/npu: Do not attempt NPU2 setup on POWER8NVL NPU (bsc#1012628). - powerpc/powernv/memtrace: Don't leak kernel memory to user space (bsc#1012628). - powerpc/powernv/memtrace: Fix crashing the kernel when enabling concurrently (bsc#1012628). - ovl: make ioctl() safe (bsc#1012628). - ima: Don't modify file descriptor mode on the fly (bsc#1012628). - um: Remove use of asprinf in umid.c (bsc#1012628). - um: Fix time-travel mode (bsc#1012628). - ceph: fix race in concurrent __ceph_remove_cap invocations (bsc#1012628). - SMB3: avoid confusing warning message on mount to Azure (bsc#1012628). - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (bsc#1012628). - SMB3.1.1: do not log warning message if server doesn't populate salt (bsc#1012628). - ubifs: wbuf: Don't leak kernel memory to flash (bsc#1012628). - jffs2: Fix GC exit abnormally (bsc#1012628). - jffs2: Fix ignoring mounting options problem during remounting (bsc#1012628). - fsnotify: generalize handle_inode_event() (bsc#1012628). - inotify: convert to handle_inode_event() interface (bsc#1012628). - fsnotify: fix events reported to watching parent and child (bsc#1012628). - jfs: Fix array index bounds check in dbAdjTree (bsc#1012628). - drm/panfrost: Fix job timeout handling (bsc#1012628). - drm/panfrost: Move the GPU reset bits outside the timeout handler (bsc#1012628). - platform/x86: mlx-platform: remove an unused variable (bsc#1012628). - drm/amd/display: Fix memory leaks in S3 resume (bsc#1012628). - drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor() (bsc#1012628). - drm/i915: Fix mismatch between misplaced vma check and vma insert (bsc#1012628). - iio: ad_sigma_delta: Don't put SPI transfer buffer on the stack (bsc#1012628). - spi: pxa2xx: Fix use-after-free on unbind (bsc#1012628). - spi: spi-sh: Fix use-after-free on unbind (bsc#1012628). - spi: atmel-quadspi: Fix use-after-free on unbind (bsc#1012628). - spi: spi-mtk-nor: Don't leak SPI master in probe error path (bsc#1012628). - spi: ar934x: Don't leak SPI master in probe error path (bsc#1012628). - spi: davinci: Fix use-after-free on unbind (bsc#1012628). - spi: fsl: fix use of spisel_boot signal on MPC8309 (bsc#1012628). - spi: gpio: Don't leak SPI master in probe error path (bsc#1012628). - spi: mxic: Don't leak SPI master in probe error path (bsc#1012628). - spi: npcm-fiu: Disable clock in probe error path (bsc#1012628). - spi: pic32: Don't leak DMA channels in probe error path (bsc#1012628). - spi: rb4xx: Don't leak SPI master in probe error path (bsc#1012628). - spi: rpc-if: Fix use-after-free on unbind (bsc#1012628). - spi: sc18is602: Don't leak SPI master in probe error path (bsc#1012628). - spi: spi-geni-qcom: Fix use-after-free on unbind (bsc#1012628). - spi: spi-qcom-qspi: Fix use-after-free on unbind (bsc#1012628). - spi: st-ssc4: Fix unbalanced pm_runtime_disable() in probe error path (bsc#1012628). - spi: synquacer: Disable clock in probe error path (bsc#1012628). - spi: mt7621: Disable clock in probe error path (bsc#1012628). - spi: mt7621: Don't leak SPI master in probe error path (bsc#1012628). - spi: atmel-quadspi: Disable clock in probe error path (bsc#1012628). - spi: atmel-quadspi: Fix AHB memory accesses (bsc#1012628). - soc: qcom: smp2p: Safely acquire spinlock without IRQs (bsc#1012628). - mtd: spinand: Fix OOB read (bsc#1012628). - mtd: parser: cmdline: Fix parsing of part-names with colons (bsc#1012628). - mtd: core: Fix refcounting for unpartitioned MTDs (bsc#1012628). - mtd: rawnand: qcom: Fix DMA sync on FLASH_STATUS register read (bsc#1012628). - mtd: rawnand: meson: fix meson_nfc_dma_buffer_release() arguments (bsc#1012628). - scsi: qla2xxx: Fix crash during driver load on big endian machines (bsc#1012628). - scsi: lpfc: Fix invalid sleeping context in lpfc_sli4_nvmet_alloc() (bsc#1012628). - scsi: lpfc: Fix scheduling call while in softirq context in lpfc_unreg_rpi (bsc#1012628). - scsi: lpfc: Re-fix use after free in lpfc_rq_buf_free() (bsc#1012628). - openat2: reject RESOLVE_BENEATH|RESOLVE_IN_ROOT (bsc#1012628). - iio: buffer: Fix demux update (bsc#1012628). - iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error in rockchip_saradc_resume (bsc#1012628). - iio: imu: st_lsm6dsx: fix edge-trigger interrupts (bsc#1012628). - iio:light:rpr0521: Fix timestamp alignment and prevent data leak (bsc#1012628). - iio:light:st_uvis25: Fix timestamp alignment and prevent data leak (bsc#1012628). - iio:magnetometer:mag3110: Fix alignment and data leak issues (bsc#1012628). - iio:pressure:mpl3115: Force alignment of buffer (bsc#1012628). - iio:imu:bmi160: Fix too large a buffer (bsc#1012628). - iio:imu:bmi160: Fix alignment and data leak issues (bsc#1012628). - iio:adc:ti-ads124s08: Fix buffer being too long (bsc#1012628). - iio:adc:ti-ads124s08: Fix alignment and data leak issues (bsc#1012628). - md/cluster: block reshape with remote resync job (bsc#1012628). - md/cluster: fix deadlock when node is doing resync job (bsc#1012628). - pinctrl: sunxi: Always call chained_irq_{enter, exit} in sunxi_pinctrl_irq_handler (bsc#1012628). - clk: ingenic: Fix divider calculation with div tables (bsc#1012628). - clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9 (bsc#1012628). - clk: tegra: Do not return 0 on failure (bsc#1012628). - counter: microchip-tcb-capture: Fix CMR value check (bsc#1012628). - device-dax/core: Fix memory leak when rmmod dax.ko (bsc#1012628). - dma-buf/dma-resv: Respect num_fences when initializing the shared fence list (bsc#1012628). - driver: core: Fix list corruption after device_del() (bsc#1012628). - xen-blkback: set ring->xenblkd to NULL after kthread_stop() (bsc#1012628). - xen/xenbus: Allow watches discard events before queueing (bsc#1012628). - xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path() (bsc#1012628). - xen/xenbus/xen_bus_type: Support will_handle watch callback (bsc#1012628). - xen/xenbus: Count pending messages for each watch (bsc#1012628). - xenbus/xenbus_backend: Disallow pending watch messages (bsc#1012628). - memory: jz4780_nemc: Fix an error pointer vs NULL check in probe() (bsc#1012628). - memory: renesas-rpc-if: Fix a node reference leak in rpcif_probe() (bsc#1012628). - memory: renesas-rpc-if: Return correct value to the caller of rpcif_manual_xfer() (bsc#1012628). - memory: renesas-rpc-if: Fix unbalanced pm_runtime_enable in rpcif_{enable,disable}_rpm (bsc#1012628). - libnvdimm/namespace: Fix reaping of invalidated block-window-namespace labels (bsc#1012628). - platform/x86: intel-vbtn: Allow switch events on Acer Switch Alpha 12 (bsc#1012628). - tracing: Disable ftrace selftests when any tracer is running (bsc#1012628). - mt76: add back the SUPPORTS_REORDERING_BUFFER flag (bsc#1012628). - of: fix linker-section match-table corruption (bsc#1012628). - PCI: Fix pci_slot_release() NULL pointer dereference (bsc#1012628). - regulator: axp20x: Fix DLDO2 voltage control register mask for AXP22x (bsc#1012628). - remoteproc: sysmon: Ensure remote notification ordering (bsc#1012628). - thermal/drivers/cpufreq_cooling: Update cpufreq_state only if state has changed (bsc#1012628). - rtc: ep93xx: Fix NULL pointer dereference in ep93xx_rtc_read_time (bsc#1012628). - Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS" (bsc#1012628). - null_blk: Fix zone size initialization (bsc#1012628). - null_blk: Fail zone append to conventional zones (bsc#1012628). - drm/edid: fix objtool warning in drm_cvt_modes() (bsc#1012628). - x86/CPU/AMD: Save AMD NodeId as cpu_die_id (bsc#1012628). - Update config files. - commit 84f94bc - media: uvcvideo: Accept invalid bFormatIndex and bFrameIndex values (bsc#1180117). - commit b9a0c5f - iwlwifi: dbg: Don't touch the tlv data (bsc#1180344). - commit cd8100a - Linux 5.10.3 (bsc#1012628). - md: fix a warning caused by a race between concurrent md_ioctl()s (bsc#1012628). - nl80211: validate key indexes for cfg80211_registered_device (bsc#1012628). - crypto: af_alg - avoid undefined behavior accessing salg_name (bsc#1012628). - media: msi2500: assign SPI bus number dynamically (bsc#1012628). - fs: quota: fix array-index-out-of-bounds bug by passing correct argument to vfs_cleanup_quota_inode() (bsc#1012628). - quota: Sanity-check quota file headers on load (bsc#1012628). - Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() (bsc#1012628). - f2fs: prevent creating duplicate encrypted filenames (bsc#1012628). - ext4: prevent creating duplicate encrypted filenames (bsc#1012628). - ubifs: prevent creating duplicate encrypted filenames (bsc#1012628). - fscrypt: add fscrypt_is_nokey_name() (bsc#1012628). - fscrypt: remove kernel-internal constants from UAPI header (bsc#1012628). - serial_core: Check for port state when tty is in error state (bsc#1012628). - HID: i2c-hid: add Vero K147 to descriptor override (bsc#1012628). - scsi: megaraid_sas: Check user-provided offsets (bsc#1012628). - f2fs: init dirty_secmap incorrectly (bsc#1012628). - f2fs: fix to seek incorrect data offset in inline data file (bsc#1012628). - coresight: etm4x: Handle TRCVIPCSSCTLR accesses (bsc#1012628). - coresight: etm4x: Fix accesses to TRCPROCSELR (bsc#1012628). - coresight: etm4x: Fix accesses to TRCCIDCTLR1 (bsc#1012628). - coresight: etm4x: Fix accesses to TRCVMIDCTLR1 (bsc#1012628). - coresight: etm4x: Skip setting LPOVERRIDE bit for qcom, skip-power-up (bsc#1012628). - coresight: etb10: Fix possible NULL ptr dereference in etb_enable_perf() (bsc#1012628). - coresight: tmc-etr: Fix barrier packet insertion for perf buffer (bsc#1012628). - coresight: tmc-etr: Check if page is valid before dma_map_page() (bsc#1012628). - coresight: tmc-etf: Fix NULL ptr dereference in tmc_enable_etf_sink_perf() (bsc#1012628). - ARM: dts: exynos: fix USB 3.0 pins supply being turned off on Odroid XU (bsc#1012628). - ARM: dts: exynos: fix USB 3.0 VBUS control and over-current pins on Exynos5410 (bsc#1012628). - ARM: dts: exynos: fix roles of USB 3.0 ports on Odroid XU (bsc#1012628). - usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul (bsc#1012628). - USB: gadget: f_rndis: fix bitrate for SuperSpeed and above (bsc#1012628). - usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus (bsc#1012628). - USB: gadget: f_midi: setup SuperSpeed Plus descriptors (bsc#1012628). - USB: gadget: f_acm: add support for SuperSpeed Plus (bsc#1012628). - USB: serial: option: add interface-number sanity check to flag handling (bsc#1012628). - usb: mtu3: fix memory corruption in mtu3_debugfs_regset() (bsc#1012628). - soc/tegra: fuse: Fix index bug in get_process_id (bsc#1012628). - exfat: Avoid allocating upcase table using kcalloc() (bsc#1012628). - x86/split-lock: Avoid returning with interrupts enabled (bsc#1012628). - net: ipconfig: Avoid spurious blank lines in boot log (bsc#1012628). - commit 246b3e0 - reset: raspberrypi: Don't reset USB if already up (bsc#1180336). - commit cbfc03c - series.conf: cleanup - update upstream reference and move to "almost mainline" section: patches.suse/clk-bcm-dvp-add-module_device_table.patch - commit 24deb54 - config: refresh - drop USB_SISUSBVGA_CON (no longer accessible) - commit c403c88 - Linux 5.10.2 (bsc#1012628). - serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access (bsc#1012628). - ALSA: pcm: oss: Fix potential out-of-bounds shift (bsc#1012628). - USB: sisusbvga: Make console support depend on BROKEN (bsc#1012628). - USB: UAS: introduce a quirk to set no_write_same (bsc#1012628). - xhci-pci: Allow host runtime PM as default for Intel Maple Ridge xHCI (bsc#1012628). - xhci-pci: Allow host runtime PM as default for Intel Alpine Ridge LP (bsc#1012628). - usb: xhci: Set quirk for XHCI_SG_TRB_CACHE_SIZE_QUIRK (bsc#1012628). - xhci: Give USB2 ports time to enter U3 in bus suspend (bsc#1012628). - ALSA: usb-audio: Fix control 'access overflow' errors from chmap (bsc#1012628). - ALSA: usb-audio: Fix potential out-of-bounds shift (bsc#1012628). - USB: add RESET_RESUME quirk for Snapscan 1212 (bsc#1012628). - USB: dummy-hcd: Fix uninitialized array use in init() (bsc#1012628). - USB: legotower: fix logical error in recent commit (bsc#1012628). - ktest.pl: Fix the logic for truncating the size of the log file for email (bsc#1012628). - ktest.pl: If size of log is too big to email, email error message (bsc#1012628). - ptrace: Prevent kernel-infoleak in ptrace_get_syscall_info() (bsc#1012628). - commit 0c7d1c1 - clk: bcm: dvp: Add MODULE_DEVICE_TABLE() (bsc#1180260). - commit fa7a177 - drm/amdgpu: only set DP subconnector type on DP and eDP connectors (bsc#1180227). - commit 74c3250 - Update config files. Just to match my env. - commit 588066a - Linux 5.10.1 (bsc#1012628). - Revert "dm raid: fix discard limits for raid1 and raid10" (bsc#1012628). - Revert "md: change mddev 'chunk_sectors' from int to unsigned" (bsc#1012628). - commit bc79fb6 - lpae: disable CONFIG_QCOM_PIL_INFO to fix build on armv7 - commit 0c08c2e - Update to 5.10 final - eliminated 1 patch - patches.suse/revert-mm-filemap-add-static-for-function-__add_to_p.patch - update configs - NFS_V4_2_READ_PLUS=n (recommended default, unsafe feature) - commit ff9060b - config.conf: Reenable armv6hl/armv7hl/arm64 - Update config files: * Settings copied from x86_64 update * arm specific options are =m except if debug or test, =y otherwise - commit cc424ba ==== kernel-firmware ==== Version update (20201130 -> 20201218) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20201218 (git commit 646f159690e2): * make AP6212 in bananpi m2 plus/zero work * linux-firmware: Update firmware file for Intel Bluetooth AX210 * linux-firmware: Update firmware file for Intel Bluetooth AX200 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge * mediatek: update MT8173 VPU firmware to v1.1.6 * QCA : Updated firmware files for WCN3991 - Remove the already upstreamed extrawhence entry - Update topic entry for lt9611uxc - Update aliases from 5.10.x kernels - add banana pi brcm wireless symlinks to extrawhence ==== kernel-source ==== Version update (5.9.14 -> 5.10.4) Subpackages: kernel-default kernel-docs - drm/panfrost: Remove unused variables in panfrost_job_close() (git-fixes). - commit 4169c1f - drm/panfrost: Don't corrupt the queue mutex on open/close (git-fixes). - RDMA/hns: Avoid filling sl in high 3 bits of vlan_id (git-fixes). - scsi: lpfc: Fix variable 'vport' set but not used in lpfc_sli4_abts_err_handler() (git-fixes). - commit 77d98b1 - Linux 5.10.4 (bsc#1012628). - hwmon: (k10temp) Remove support for displaying voltage and current on Zen CPUs (bsc#1012628). - drm/gma500: fix double free of gma_connector (bsc#1012628). - iio: adc: at91_adc: add Kconfig dep on the OF symbol and remove of_match_ptr() (bsc#1012628). - drm/aspeed: Fix Kconfig warning & subsequent build errors (bsc#1012628). - drm/mcde: Fix handling of platform_get_irq() error (bsc#1012628). - drm/tve200: Fix handling of platform_get_irq() error (bsc#1012628). - arm64: dts: renesas: hihope-rzg2-ex: Drop rxc-skew-ps from ethernet-phy node (bsc#1012628). - arm64: dts: renesas: cat875: Remove rxc-skew-ps from ethernet-phy node (bsc#1012628). - soc: renesas: rmobile-sysc: Fix some leaks in rmobile_init_pm_domains() (bsc#1012628). - soc: mediatek: Check if power domains can be powered on at boot time (bsc#1012628). - arm64: dts: mediatek: mt8183: fix gce incorrect mbox-cells value (bsc#1012628). - arm64: dts: ipq6018: update the reserved-memory node (bsc#1012628). - arm64: dts: qcom: sc7180: Fix one forgotten interconnect reference (bsc#1012628). - soc: qcom: geni: More properly switch to DMA mode (bsc#1012628). - Revert "i2c: i2c-qcom-geni: Fix DMA transfer race" (bsc#1012628). - RDMA/bnxt_re: Set queue pair state when being queried (bsc#1012628). - rtc: pcf2127: fix pcf2127_nvmem_read/write() returns (bsc#1012628). - RDMA/bnxt_re: Fix entry size during SRQ create (bsc#1012628). - selinux: fix error initialization in inode_doinit_with_dentry() (bsc#1012628). - ARM: dts: aspeed-g6: Fix the GPIO memory size (bsc#1012628). - ARM: dts: aspeed: s2600wf: Fix VGA memory region location (bsc#1012628). - RDMA/core: Fix error return in _ib_modify_qp() (bsc#1012628). - RDMA/rxe: Compute PSN windows correctly (bsc#1012628). - x86/mm/ident_map: Check for errors from ident_pud_init() (bsc#1012628). - ARM: p2v: fix handling of LPAE translation in BE mode (bsc#1012628). - RDMA/rtrs-clt: Remove destroy_con_cq_qp in case route resolving failed (bsc#1012628). - RDMA/rtrs-clt: Missing error from rtrs_rdma_conn_established (bsc#1012628). - RDMA/rtrs-srv: Don't guard the whole __alloc_srv with srv_mutex (bsc#1012628). - x86/apic: Fix x2apic enablement without interrupt remapping (bsc#1012628). - ASoC: qcom: fix unsigned int bitwidth compared to less than zero (bsc#1012628). - sched/deadline: Fix sched_dl_global_validate() (bsc#1012628). - sched: Reenable interrupts in do_sched_yield() (bsc#1012628). - drm/amdgpu: fix incorrect enum type (bsc#1012628). - crypto: talitos - Endianess in current_desc_hdr() (bsc#1012628). - crypto: talitos - Fix return type of current_desc_hdr() (bsc#1012628). - crypto: inside-secure - Fix sizeof() mismatch (bsc#1012628). - ASoC: sun4i-i2s: Fix lrck_period computation for I2S justified mode (bsc#1012628). - drm/msm: Add missing stub definition (bsc#1012628). - ARM: dts: aspeed: tiogapass: Remove vuart (bsc#1012628). - drm/amdgpu: fix build_coefficients() argument (bsc#1012628). - powerpc/64: Set up a kernel stack for secondaries before cpu_restore() (bsc#1012628). - spi: img-spfi: fix reference leak in img_spfi_resume (bsc#1012628). - f2fs: call f2fs_get_meta_page_retry for nat page (bsc#1012628). - RDMA/mlx5: Fix corruption of reg_pages in mlx5_ib_rereg_user_mr() (bsc#1012628). - perf test: Use generic event for expand_libpfm_events() (bsc#1012628). - drm/msm/dp: DisplayPort PHY compliance tests fixup (bsc#1012628). - drm/msm/dsi_pll_7nm: restore VCO rate during restore_state (bsc#1012628). - drm/msm/dsi_pll_10nm: restore VCO rate during restore_state (bsc#1012628). - drm/msm/dpu: fix clock scaling on non-sc7180 board (bsc#1012628). - spi: spi-mem: fix reference leak in spi_mem_access_start (bsc#1012628). - scsi: aacraid: Improve compat_ioctl handlers (bsc#1012628). - pinctrl: core: Add missing #ifdef CONFIG_GPIOLIB (bsc#1012628). - ASoC: pcm: DRAIN support reactivation (bsc#1012628). - drm/bridge: tpd12s015: Fix irq registering in tpd12s015_probe (bsc#1012628). - crypto: arm64/poly1305-neon - reorder PAC authentication with SP update (bsc#1012628). - crypto: arm/aes-neonbs - fix usage of cbc(aes) fallback (bsc#1012628). - crypto: caam - fix printing on xts fallback allocation error path (bsc#1012628). - selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling (bsc#1012628). - nl80211/cfg80211: fix potential infinite loop (bsc#1012628). - spi: stm32: fix reference leak in stm32_spi_resume (bsc#1012628). - bpf: Fix tests for local_storage (bsc#1012628). - x86/mce: Correct the detection of invalid notifier priorities (bsc#1012628). - drm/edid: Fix uninitialized variable in drm_cvt_modes() (bsc#1012628). - ath11k: Initialize complete alpha2 for regulatory change (bsc#1012628). - ath11k: Fix number of rules in filtered ETSI regdomain (bsc#1012628). - ath11k: fix wmi init configuration (bsc#1012628). - brcmfmac: Fix memory leak for unpaired brcmf_{alloc/free} (bsc#1012628). - arm64: dts: exynos: Include common syscon restart/poweroff for Exynos7 (bsc#1012628). - arm64: dts: exynos: Correct psci compatible used on Exynos7 (bsc#1012628). - drm/panel: simple: Add flags to boe_nv133fhm_n61 (bsc#1012628). - Bluetooth: Fix null pointer dereference in hci_event_packet() (bsc#1012628). - Bluetooth: Fix: LL PRivacy BLE device fails to connect (bsc#1012628). - Bluetooth: hci_h5: fix memory leak in h5_close (bsc#1012628). - spi: stm32-qspi: fix reference leak in stm32 qspi operations (bsc#1012628). - spi: spi-ti-qspi: fix reference leak in ti_qspi_setup (bsc#1012628). - spi: mt7621: fix missing clk_disable_unprepare() on error in mt7621_spi_probe (bsc#1012628). - spi: tegra20-slink: fix reference leak in slink ops of tegra20 (bsc#1012628). - spi: tegra20-sflash: fix reference leak in tegra_sflash_resume (bsc#1012628). - spi: tegra114: fix reference leak in tegra spi ops (bsc#1012628). - spi: bcm63xx-hsspi: fix missing clk_disable_unprepare() on error in bcm63xx_hsspi_resume (bsc#1012628). - spi: imx: fix reference leak in two imx operations (bsc#1012628). - ASoC: qcom: common: Fix refcounting in qcom_snd_parse_of() (bsc#1012628). - ath11k: Handle errors if peer creation fails (bsc#1012628). - mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure (bsc#1012628). - drm/msm/a6xx: Clear shadow on suspend (bsc#1012628). - drm/msm/a5xx: Clear shadow on suspend (bsc#1012628). - firmware: tegra: fix strncpy()/strncat() confusion (bsc#1012628). - drm/msm/dp: return correct connection status after suspend (bsc#1012628). - drm/msm/dp: skip checking LINK_STATUS_UPDATED bit (bsc#1012628). - drm/msm/dp: do not notify audio subsystem if sink doesn't support audio (bsc#1012628). - selftests/run_kselftest.sh: fix dry-run typo (bsc#1012628). - selftest/bpf: Add missed ip6ip6 test back (bsc#1012628). - ASoC: wm8994: Fix PM disable depth imbalance on error (bsc#1012628). - ASoC: wm8998: Fix PM disable depth imbalance on error (bsc#1012628). - spi: sprd: fix reference leak in sprd_spi_remove (bsc#1012628). - virtiofs fix leak in setup (bsc#1012628). - ASoC: arizona: Fix a wrong free in wm8997_probe (bsc#1012628). - RDMa/mthca: Work around -Wenum-conversion warning (bsc#1012628). - ASoC: SOF: Intel: fix Kconfig dependency for SND_INTEL_DSP_CONFIG (bsc#1012628). - arm64: dts: ti: k3-am65*/j721e*: Fix unit address format error for dss node (bsc#1012628). - MIPS: BCM47XX: fix kconfig dependency bug for BCM47XX_BCMA (bsc#1012628). - drm/amdgpu: fix compute queue priority if num_kcq is less than 4 (bsc#1012628). - soc: ti: omap-prm: Do not check rstst bit on deassert if already deasserted (bsc#1012628). - crypto: Kconfig - CRYPTO_MANAGER_EXTRA_TESTS requires the manager (bsc#1012628). - crypto: qat - fix status check in qat_hal_put_rel_rd_xfer() (bsc#1012628). - firmware: arm_scmi: Fix missing destroy_workqueue() (bsc#1012628). - drm/udl: Fix missing error code in udl_handle_damage() (bsc#1012628). - staging: greybus: codecs: Fix reference counter leak in error handling (bsc#1012628). - staging: gasket: interrupt: fix the missed eventfd_ctx_put() in gasket_interrupt.c (bsc#1012628). - scripts: kernel-doc: Restore anonymous enum parsing (bsc#1012628). - drm/amdkfd: Put ACPI table after using it (bsc#1012628). - ionic: use mc sync for multicast filters (bsc#1012628). - ionic: flatten calls to ionic_lif_rx_mode (bsc#1012628). - ionic: change set_rx_mode from_ndo to can_sleep (bsc#1012628). - media: tm6000: Fix sizeof() mismatches (bsc#1012628). - media: platform: add missing put_device() call in mtk_jpeg_clk_init() (bsc#1012628). - media: mtk-vcodec: add missing put_device() call in mtk_vcodec_init_dec_pm() (bsc#1012628). - media: mtk-vcodec: add missing put_device() call in mtk_vcodec_release_dec_pm() (bsc#1012628). - media: mtk-vcodec: add missing put_device() call in mtk_vcodec_init_enc_pm() (bsc#1012628). - media: v4l2-fwnode: Return -EINVAL for invalid bus-type (bsc#1012628). - media: v4l2-fwnode: v4l2_fwnode_endpoint_parse caller must init vep argument (bsc#1012628). - media: ov5640: fix support of BT656 bus mode (bsc#1012628). - media: staging: rkisp1: cap: fix runtime PM imbalance on error (bsc#1012628). - media: cedrus: fix reference leak in cedrus_start_streaming (bsc#1012628). - media: platform: add missing put_device() call in mtk_jpeg_probe() and mtk_jpeg_remove() (bsc#1012628). - media: venus: core: change clk enable and disable order in resume and suspend (bsc#1012628). - media: venus: core: vote for video-mem path (bsc#1012628). - media: venus: core: vote with average bandwidth and peak bandwidth as zero (bsc#1012628). - RDMA/cma: Add missing error handling of listen_id (bsc#1012628). - ASoC: meson: fix COMPILE_TEST error (bsc#1012628). - spi: dw: fix build error by selecting MULTIPLEXER (bsc#1012628). - scsi: core: Fix VPD LUN ID designator priorities (bsc#1012628). - media: venus: put dummy vote on video-mem path after last session release (bsc#1012628). - media: solo6x10: fix missing snd_card_free in error handling case (bsc#1012628). - video: fbdev: atmel_lcdfb: fix return error code in atmel_lcdfb_of_init() (bsc#1012628). - mmc: sdhci: tegra: fix wrong unit with busy_timeout (bsc#1012628). - drm/omap: dmm_tiler: fix return error code in omap_dmm_probe() (bsc#1012628). - drm/meson: Free RDMA resources after tearing down DRM (bsc#1012628). - drm/meson: Unbind all connectors on module removal (bsc#1012628). - drm/meson: dw-hdmi: Register a callback to disable the regulator (bsc#1012628). - drm/meson: dw-hdmi: Ensure that clocks are enabled before touching the TOP registers (bsc#1012628). - ASoC: intel: SND_SOC_INTEL_KEEMBAY should depend on ARCH_KEEMBAY (bsc#1012628). - iommu/vt-d: include conditionally on CONFIG_INTEL_IOMMU_SVM (bsc#1012628). - Input: ads7846 - fix race that causes missing releases (bsc#1012628). - Input: ads7846 - fix integer overflow on Rt calculation (bsc#1012628). - Input: ads7846 - fix unaligned access on 7845 (bsc#1012628). - bus: mhi: core: Remove double locking from mhi_driver_remove() (bsc#1012628). - bus: mhi: core: Fix null pointer access when parsing MHI configuration (bsc#1012628). - usb/max3421: fix return error code in max3421_probe() (bsc#1012628). - spi: mxs: fix reference leak in mxs_spi_probe (bsc#1012628). - selftests/bpf: Fix broken riscv build (bsc#1012628). - powerpc: Avoid broken GCC __attribute__((optimize)) (bsc#1012628). - powerpc/feature: Fix CPU_FTRS_ALWAYS by removing CPU_FTRS_GENERIC_32 (bsc#1012628). - ARM: dts: tacoma: Fix node vs reg mismatch for flash memory (bsc#1012628). - Revert "powerpc/pseries/hotplug-cpu: Remove double free in error path" (bsc#1012628). - powerpc/powernv/sriov: fix unsigned int win compared to less than zero (bsc#1012628). - mfd: htc-i2cpld: Add the missed i2c_put_adapter() in htcpld_register_chip_i2c() (bsc#1012628). - mfd: MFD_SL28CPLD should depend on ARCH_LAYERSCAPE (bsc#1012628). - mfd: stmfx: Fix dev_err_probe() call in stmfx_chip_init() (bsc#1012628). - mfd: cpcap: Fix interrupt regression with regmap clear_ack (bsc#1012628). - EDAC/mce_amd: Use struct cpuinfo_x86.cpu_die_id for AMD NodeId (bsc#1012628). - scsi: ufs: Avoid to call REQ_CLKS_OFF to CLKS_OFF (bsc#1012628). - scsi: ufs: Fix clkgating on/off (bsc#1012628). - rcu: Allow rcu_irq_enter_check_tick() from NMI (bsc#1012628). - rcu,ftrace: Fix ftrace recursion (bsc#1012628). - rcu/tree: Defer kvfree_rcu() allocation to a clean context (bsc#1012628). - crypto: crypto4xx - Replace bitwise OR with logical OR in crypto4xx_build_pd (bsc#1012628). - crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe (bsc#1012628). - crypto: sun8i-ce - fix two error path's memory leak (bsc#1012628). - spi: fix resource leak for drivers without .remove callback (bsc#1012628). - drm/meson: dw-hdmi: Disable clocks on driver teardown (bsc#1012628). - drm/meson: dw-hdmi: Enable the iahb clock early enough (bsc#1012628). - PCI: Disable MSI for Pericom PCIe-USB adapter (bsc#1012628). - PCI: brcmstb: Initialize "tmp" before use (bsc#1012628). - soc: ti: knav_qmss: fix reference leak in knav_queue_probe (bsc#1012628). - soc: ti: Fix reference imbalance in knav_dma_probe (bsc#1012628). - drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe (bsc#1012628). - soc: qcom: initialize local variable (bsc#1012628). - arm64: dts: qcom: sm8250: correct compatible for sm8250-mtp (bsc#1012628). - arm64: dts: qcom: msm8916-samsung-a2015: Disable muic i2c pin bias (bsc#1012628). - Input: omap4-keypad - fix runtime PM error handling (bsc#1012628). - clk: meson: Kconfig: fix dependency for G12A (bsc#1012628). - staging: mfd: hi6421-spmi-pmic: fix error return code in hi6421_spmi_pmic_probe() (bsc#1012628). - ath11k: Fix the rx_filter flag setting for peer rssi stats (bsc#1012628). - RDMA/cxgb4: Validate the number of CQEs (bsc#1012628). - soundwire: Fix DEBUG_LOCKS_WARN_ON for uninitialized attribute (bsc#1012628). - pinctrl: sunxi: fix irq bank map for the Allwinner A100 pin controller (bsc#1012628). - memstick: fix a double-free bug in memstick_check (bsc#1012628). - ARM: dts: at91: sam9x60: add pincontrol for USB Host (bsc#1012628). - ARM: dts: at91: sama5d4_xplained: add pincontrol for USB Host (bsc#1012628). - ARM: dts: at91: sama5d3_xplained: add pincontrol for USB Host (bsc#1012628). - mmc: pxamci: Fix error return code in pxamci_probe (bsc#1012628). - brcmfmac: fix error return code in brcmf_cfg80211_connect() (bsc#1012628). - orinoco: Move context allocation after processing the skb (bsc#1012628). - qtnfmac: fix error return code in qtnf_pcie_probe() (bsc#1012628). - rsi: fix error return code in rsi_reset_card() (bsc#1012628). - cw1200: fix missing destroy_workqueue() on error in cw1200_init_common (bsc#1012628). - dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe() (bsc#1012628). - arm64: dts: qcom: sdm845: Limit ipa iommu streams (bsc#1012628). - leds: netxbig: add missing put_device() call in netxbig_leds_get_of_pdata() (bsc#1012628). - leds: lp50xx: Fix an error handling path in 'lp50xx_probe_dt()' (bsc#1012628). - leds: turris-omnia: check for LED_COLOR_ID_RGB instead LED_COLOR_ID_MULTI (bsc#1012628). - arm64: tegra: Fix DT binding for IO High Voltage entry (bsc#1012628). - RDMA/cma: Fix deadlock on &lock in rdma_cma_listen_on_all() error unwind (bsc#1012628). - soundwire: qcom: Fix build failure when slimbus is module (bsc#1012628). - drm/imx/dcss: fix rotations for Vivante tiled formats (bsc#1012628). - media: siano: fix memory leak of debugfs members in smsdvb_hotplug (bsc#1012628). - platform/x86: mlx-platform: Remove PSU EEPROM from default platform configuration (bsc#1012628). - platform/x86: mlx-platform: Remove PSU EEPROM from MSN274x platform configuration (bsc#1012628). - arm64: dts: qcom: sc7180: limit IPA iommu streams (bsc#1012628). - RDMA/hns: Only record vlan info for HIP08 (bsc#1012628). - RDMA/hns: Fix missing fields in address vector (bsc#1012628). - RDMA/hns: Avoid setting loopback indicator when smac is same as dmac (bsc#1012628). - serial: 8250-mtk: Fix reference leak in mtk8250_probe (bsc#1012628). - samples: bpf: Fix lwt_len_hist reusing previous BPF map (bsc#1012628). - media: imx214: Fix stop streaming (bsc#1012628). - mips: cdmm: fix use-after-free in mips_cdmm_bus_discover (bsc#1012628). - media: max2175: fix max2175_set_csm_mode() error code (bsc#1012628). - slimbus: qcom-ngd-ctrl: Avoid sending power requests without QMI (bsc#1012628). - RDMA/core: Track device memory MRs (bsc#1012628). - drm/mediatek: Use correct aliases name for ovl (bsc#1012628). - HSI: omap_ssi: Don't jump to free ID in ssi_add_controller() (bsc#1012628). - ARM: dts: Remove non-existent i2c1 from 98dx3236 (bsc#1012628). - arm64: dts: armada-3720-turris-mox: update ethernet-phy handle name (bsc#1012628). - power: supply: bq25890: Use the correct range for IILIM register (bsc#1012628). - arm64: dts: rockchip: Set dr_mode to "host" for OTG on rk3328-roc-cc (bsc#1012628). - power: supply: max17042_battery: Fix current_{avg,now} hiding with no current sense (bsc#1012628). - power: supply: axp288_charger: Fix HP Pavilion x2 10 DMI matching (bsc#1012628). - power: supply: bq24190_charger: fix reference leak (bsc#1012628). - genirq/irqdomain: Don't try to free an interrupt that has no mapping (bsc#1012628). - arm64: dts: ls1028a: fix ENETC PTP clock input (bsc#1012628). - arm64: dts: ls1028a: fix FlexSPI clock input (bsc#1012628). - arm64: dts: freescale: sl28: combine SPI MTD partitions (bsc#1012628). - phy: tegra: xusb: Fix usb_phy device driver field (bsc#1012628). - arm64: dts: qcom: c630: Polish i2c-hid devices (bsc#1012628). - arm64: dts: qcom: c630: Fix pinctrl pins properties (bsc#1012628). - PCI: Bounds-check command-line resource alignment requests (bsc#1012628). - PCI: Fix overflow in command-line resource alignment requests (bsc#1012628). - PCI: iproc: Fix out-of-bound array accesses (bsc#1012628). - PCI: iproc: Invalidate correct PAXB inbound windows (bsc#1012628). - arm64: dts: meson: fix spi-max-frequency on Khadas VIM2 (bsc#1012628). - arm64: dts: meson-sm1: fix typo in opp table (bsc#1012628). - soc: amlogic: canvas: add missing put_device() call in meson_canvas_get() (bsc#1012628). - scsi: hisi_sas: Fix up probe error handling for v3 hw (bsc#1012628). - scsi: pm80xx: Do not sleep in atomic context (bsc#1012628). - spi: spi-fsl-dspi: Use max_native_cs instead of num_chipselect to set SPI_MCR (bsc#1012628). - ARM: dts: at91: at91sam9rl: fix ADC triggers (bsc#1012628). - RDMA/hns: Fix 0-length sge calculation error (bsc#1012628). - RDMA/hns: Bugfix for calculation of extended sge (bsc#1012628). - mailbox: arm_mhu_db: Fix mhu_db_shutdown by replacing kfree with devm_kfree (bsc#1012628). - soundwire: master: use pm_runtime_set_active() on add (bsc#1012628). - platform/x86: dell-smbios-base: Fix error return code in dell_smbios_init (bsc#1012628). - ASoC: Intel: Boards: tgl_max98373: update TDM slot_width (bsc#1012628). - media: max9271: Fix GPIO enable/disable (bsc#1012628). - media: rdacm20: Enable GPIO1 explicitly (bsc#1012628). - media: i2c: imx219: Selection compliance fixes (bsc#1012628). - ath11k: Don't cast ath11k_skb_cb to ieee80211_tx_info.control (bsc#1012628). - ath11k: Reset ath11k_skb_cb before setting new flags (bsc#1012628). - ath11k: Fix an error handling path (bsc#1012628). - ath10k: Fix the parsing error in service available event (bsc#1012628). - ath10k: Fix an error handling path (bsc#1012628). - ath10k: Release some resources in an error handling path (bsc#1012628). - SUNRPC: rpc_wake_up() should wake up tasks in the correct order (bsc#1012628). - NFSv4.2: condition READDIR's mask for security label based on LSM state (bsc#1012628). - SUNRPC: xprt_load_transport() needs to support the netid "rdma6" (bsc#1012628). - NFSv4: Fix the alignment of page data in the getdeviceinfo reply (bsc#1012628). - net: sunrpc: Fix 'snprintf' return value check in 'do_xprt_debugfs' (bsc#1012628). - lockd: don't use interval-based rebinding over TCP (bsc#1012628). - NFS: switch nfsiod to be an UNBOUND workqueue (bsc#1012628). - selftests/seccomp: Update kernel config (bsc#1012628). - vfio-pci: Use io_remap_pfn_range() for PCI IO memory (bsc#1012628). - hwmon: (ina3221) Fix PM usage counter unbalance in ina3221_write_enable (bsc#1012628). - f2fs: fix double free of unicode map (bsc#1012628). - media: tvp5150: Fix wrong return value of tvp5150_parse_dt() (bsc#1012628). - media: saa7146: fix array overflow in vidioc_s_audio() (bsc#1012628). - powerpc/perf: Fix crash with is_sier_available when pmu is not set (bsc#1012628). - powerpc/64: Fix an EMIT_BUG_ENTRY in head_64.S (bsc#1012628). - powerpc/xmon: Fix build failure for 8xx (bsc#1012628). - powerpc/perf: Fix to update radix_scope_qual in power10 (bsc#1012628). - powerpc/perf: Update the PMU group constraints for l2l3 events in power10 (bsc#1012628). - powerpc/perf: Fix the PMU group constraints for threshold events in power10 (bsc#1012628). - clocksource/drivers/orion: Add missing clk_disable_unprepare() on error path (bsc#1012628). - clocksource/drivers/cadence_ttc: Fix memory leak in ttc_setup_clockevent() (bsc#1012628). - clocksource/drivers/ingenic: Fix section mismatch (bsc#1012628). - clocksource/drivers/riscv: Make RISCV_TIMER depends on RISCV_SBI (bsc#1012628). - arm64: mte: fix prctl(PR_GET_TAGGED_ADDR_CTRL) if TCF0=NONE (bsc#1012628). - iio: hrtimer-trigger: Mark hrtimer to expire in hard interrupt context (bsc#1012628). - libbpf: Sanitise map names before pinning (bsc#1012628). - ARM: dts: at91: sam9x60ek: remove bypass property (bsc#1012628). - ARM: dts: at91: sama5d2: map securam as device (bsc#1012628). - scripts: kernel-doc: fix parsing function-like typedefs (bsc#1012628). - bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address() (bsc#1012628). - selftests/bpf: Fix invalid use of strncat in test_sockmap (bsc#1012628). - pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe() (bsc#1012628). - soc: rockchip: io-domain: Fix error return code in rockchip_iodomain_probe() (bsc#1012628). - arm64: dts: rockchip: Fix UART pull-ups on rk3328 (bsc#1012628). - memstick: r592: Fix error return in r592_probe() (bsc#1012628). - MIPS: Don't round up kernel sections size for memblock_add() (bsc#1012628). - mt76: mt7663s: fix a possible ple quota underflow (bsc#1012628). - mt76: mt7915: set fops_sta_stats.owner to THIS_MODULE (bsc#1012628). - mt76: set fops_tx_stats.owner to THIS_MODULE (bsc#1012628). - mt76: dma: fix possible deadlock running mt76_dma_cleanup (bsc#1012628). - net/mlx5: Properly convey driver version to firmware (bsc#1012628). - mt76: fix memory leak if device probing fails (bsc#1012628). - mt76: fix tkip configuration for mt7615/7663 devices (bsc#1012628). - ASoC: jz4740-i2s: add missed checks for clk_get() (bsc#1012628). - ASoC: q6afe-clocks: Add missing parent clock rate (bsc#1012628). - dm ioctl: fix error return code in target_message (bsc#1012628). - ASoC: cros_ec_codec: fix uninitialized memory read (bsc#1012628). - ASoC: atmel: mchp-spdifrx needs COMMON_CLK (bsc#1012628). - ASoC: qcom: fix QDSP6 dependencies, attempt #3 (bsc#1012628). - phy: mediatek: allow compile-testing the hdmi phy (bsc#1012628). - phy: renesas: rcar-gen3-usb2: disable runtime pm in case of failure (bsc#1012628). - memory: ti-emif-sram: only build for ARMv7 (bsc#1012628). - memory: jz4780_nemc: Fix potential NULL dereference in jz4780_nemc_probe() (bsc#1012628). - drm/msm: a5xx: Make preemption reset case reentrant (bsc#1012628). - drm/msm: add IOMMU_SUPPORT dependency (bsc#1012628). - clocksource/drivers/arm_arch_timer: Use stable count reader in erratum sne (bsc#1012628). - clocksource/drivers/arm_arch_timer: Correct fault programming of CNTKCTL_EL1.EVNTI (bsc#1012628). - cpufreq: ap806: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - cpufreq: highbank: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - cpufreq: mediatek: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - cpufreq: qcom: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - cpufreq: st: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - cpufreq: sun50i: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - cpufreq: loongson1: Add missing MODULE_ALIAS (bsc#1012628). - cpufreq: scpi: Add missing MODULE_ALIAS (bsc#1012628). - cpufreq: vexpress-spc: Add missing MODULE_ALIAS (bsc#1012628). - cpufreq: imx: fix NVMEM_IMX_OCOTP dependency (bsc#1012628). - macintosh/adb-iop: Always wait for reply message from IOP (bsc#1012628). - macintosh/adb-iop: Send correct poll command (bsc#1012628). - staging: bcm2835: fix vchiq_mmal dependencies (bsc#1012628). - staging: greybus: audio: Fix possible leak free widgets in gbaudio_dapm_free_controls (bsc#1012628). - spi: dw: Fix error return code in dw_spi_bt1_probe() (bsc#1012628). - Bluetooth: btusb: Add the missed release_firmware() in btusb_mtk_setup_firmware() (bsc#1012628). - Bluetooth: btmtksdio: Add the missed release_firmware() in mtk_setup_firmware() (bsc#1012628). - Bluetooth: sco: Fix crash when using BT_SNDMTU/BT_RCVMTU option (bsc#1012628). - block/rnbd-clt: Dynamically alloc buffer for pathname & blk_symlink_name (bsc#1012628). - block/rnbd: fix a null pointer dereference on dev->blk_symlink_name (bsc#1012628). - Bluetooth: btusb: Fix detection of some fake CSR controllers with a bcdDevice val of 0x0134 (bsc#1012628). - platform/x86: intel-vbtn: Fix SW_TABLET_MODE always reporting 1 on some HP x360 models (bsc#1012628). - adm8211: fix error return code in adm8211_probe() (bsc#1012628). - mtd: spi-nor: sst: fix BPn bits for the SST25VF064C (bsc#1012628). - mtd: spi-nor: ignore errors in spi_nor_unlock_all() (bsc#1012628). - mtd: spi-nor: atmel: remove global protection flag (bsc#1012628). - mtd: spi-nor: atmel: fix unlock_all() for AT25FS010/040 (bsc#1012628). - arm64: dts: meson: g12b: odroid-n2: fix PHY deassert timing requirements (bsc#1012628). - arm64: dts: meson: fix PHY deassert timing requirements (bsc#1012628). - ARM: dts: meson: fix PHY deassert timing requirements (bsc#1012628). - arm64: dts: meson: g12a: x96-max: fix PHY deassert timing requirements (bsc#1012628). - arm64: dts: meson: g12b: w400: fix PHY deassert timing requirements (bsc#1012628). - clk: fsl-sai: fix memory leak (bsc#1012628). - scsi: qedi: Fix missing destroy_workqueue() on error in __qedi_probe (bsc#1012628). - scsi: pm80xx: Fix error return in pm8001_pci_probe() (bsc#1012628). - scsi: iscsi: Fix inappropriate use of put_device() (bsc#1012628). - seq_buf: Avoid type mismatch for seq_buf_init (bsc#1012628). - scsi: fnic: Fix error return code in fnic_probe() (bsc#1012628). - platform/x86: mlx-platform: Fix item counter assignment for MSN2700, MSN24xx systems (bsc#1012628). - platform/x86: mlx-platform: Fix item counter assignment for MSN2700/ComEx system (bsc#1012628). - ARM: 9030/1: entry: omit FP emulation for UND exceptions taken in kernel mode (bsc#1012628). - powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend ops (bsc#1012628). - powerpc/pseries/hibernation: remove redundant cacheinfo update (bsc#1012628). - powerpc/powermac: Fix low_sleep_handler with CONFIG_VMAP_STACK (bsc#1012628). - drm/mediatek: avoid dereferencing a null hdmi_phy on an error message (bsc#1012628). - ASoC: amd: change clk_get() to devm_clk_get() and add missed checks (bsc#1012628). - coresight: remove broken __exit annotations (bsc#1012628). - ASoC: max98390: Fix error codes in max98390_dsm_init() (bsc#1012628). - powerpc/mm: sanity_check_fault() should work for all, not only BOOK3S (bsc#1012628). - usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe (bsc#1012628). - usb: oxu210hp-hcd: Fix memory leak in oxu_create (bsc#1012628). - speakup: fix uninitialized flush_lock (bsc#1012628). - nfsd: Fix message level for normal termination (bsc#1012628). - NFSD: Fix 5 seconds delay when doing inter server copy (bsc#1012628). - nfs_common: need lock during iterate through the list (bsc#1012628). - x86/kprobes: Restore BTF if the single-stepping is cancelled (bsc#1012628). - scsi: qla2xxx: Fix FW initialization error on big endian machines (bsc#1012628). - scsi: qla2xxx: Fix N2N and NVMe connect retry failure (bsc#1012628). - platform/chrome: cros_ec_spi: Don't overwrite spi::mode (bsc#1012628). - misc: pci_endpoint_test: fix return value of error branch (bsc#1012628). - bus: fsl-mc: add back accidentally dropped error check (bsc#1012628). - bus: fsl-mc: fix error return code in fsl_mc_object_allocate() (bsc#1012628). - fsi: Aspeed: Add mutex to protect HW access (bsc#1012628). - s390/cio: fix use-after-free in ccw_device_destroy_console (bsc#1012628). - iwlwifi: dbg-tlv: fix old length in is_trig_data_contained() (bsc#1012628). - iwlwifi: mvm: hook up missing RX handlers (bsc#1012628). - erofs: avoid using generic_block_bmap (bsc#1012628). - clk: renesas: r8a779a0: Fix R and OSC clocks (bsc#1012628). - can: m_can: m_can_config_endisable(): remove double clearing of clock stop request bit (bsc#1012628). - powerpc/sstep: Emulate prefixed instructions only when CPU_FTR_ARCH_31 is set (bsc#1012628). - powerpc/sstep: Cover new VSX instructions under CONFIG_VSX (bsc#1012628). - slimbus: qcom: fix potential NULL dereference in qcom_slim_prg_slew() (bsc#1012628). - ALSA: hda/hdmi: fix silent stream for first playback to DP (bsc#1012628). - RDMA/core: Do not indicate device ready when device enablement fails (bsc#1012628). - RDMA/uverbs: Fix incorrect variable type (bsc#1012628). - remoteproc/mediatek: change MT8192 CFG register base (bsc#1012628). - remoteproc/mtk_scp: surround DT device IDs with CONFIG_OF (bsc#1012628). - remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable (bsc#1012628). - remoteproc: qcom: fix reference leak in adsp_start (bsc#1012628). - remoteproc: qcom: pas: fix error handling in adsp_pds_enable (bsc#1012628). - remoteproc: k3-dsp: Fix return value check in k3_dsp_rproc_of_get_memories() (bsc#1012628). - remoteproc: qcom: Fix potential NULL dereference in adsp_init_mmio() (bsc#1012628). - remoteproc/mediatek: unprepare clk if scp_before_load fails (bsc#1012628). - clk: qcom: gcc-sc7180: Use floor ops for sdcc clks (bsc#1012628). - clk: tegra: Fix duplicated SE clock entry (bsc#1012628). - mtd: rawnand: gpmi: fix reference count leak in gpmi ops (bsc#1012628). - mtd: rawnand: meson: Fix a resource leak in init (bsc#1012628). - mtd: rawnand: gpmi: Fix the random DMA timeout issue (bsc#1012628). - samples/bpf: Fix possible hang in xdpsock with multiple threads (bsc#1012628). - fs: Handle I_DONTCACHE in iput_final() instead of generic_drop_inode() (bsc#1012628). - extcon: max77693: Fix modalias string (bsc#1012628). - crypto: atmel-i2c - select CONFIG_BITREVERSE (bsc#1012628). - mac80211: don't set set TDLS STA bandwidth wider than possible (bsc#1012628). - mac80211: fix a mistake check for rx_stats update (bsc#1012628). - ASoC: wm_adsp: remove "ctl" from list on error in wm_adsp_create_control() (bsc#1012628). - irqchip/alpine-msi: Fix freeing of interrupts on allocation error path (bsc#1012628). - irqchip/ti-sci-inta: Fix printing of inta id on probe success (bsc#1012628). - irqchip/ti-sci-intr: Fix freeing of irqs (bsc#1012628). - dmaengine: ti: k3-udma: Correct normal channel offset when uchan_cnt is not 0 (bsc#1012628). - RDMA/hns: Limit the length of data copied between kernel and userspace (bsc#1012628). - RDMA/hns: Normalization the judgment of some features (bsc#1012628). - RDMA/hns: Do shift on traffic class when using RoCEv2 (bsc#1012628). - gpiolib: irq hooks: fix recursion in gpiochip_irq_unmask (bsc#1012628). - ath11k: Fix incorrect tlvs in scan start command (bsc#1012628). - irqchip/qcom-pdc: Fix phantom irq when changing between rising/falling (bsc#1012628). - watchdog: armada_37xx: Add missing dependency on HAS_IOMEM (bsc#1012628). - watchdog: sirfsoc: Add missing dependency on HAS_IOMEM (bsc#1012628). - watchdog: sprd: remove watchdog disable from resume fail path (bsc#1012628). - watchdog: sprd: check busy bit before new loading rather than after that (bsc#1012628). - watchdog: Fix potential dereferencing of null pointer (bsc#1012628). - ubifs: Fix error return code in ubifs_init_authentication() (bsc#1012628). - um: Monitor error events in IRQ controller (bsc#1012628). - um: tty: Fix handling of close in tty lines (bsc#1012628). - um: chan_xterm: Fix fd leak (bsc#1012628). - sunrpc: fix xs_read_xdr_buf for partial pages receive (bsc#1012628). - RDMA/mlx5: Fix MR cache memory leak (bsc#1012628). - RDMA/cma: Don't overwrite sgid_attr after device is released (bsc#1012628). - nfc: s3fwrn5: Release the nfc firmware (bsc#1012628). - drm: mxsfb: Silence -EPROBE_DEFER while waiting for bridge (bsc#1012628). - powerpc/perf: Fix Threshold Event Counter Multiplier width for P10 (bsc#1012628). - powerpc/ps3: use dma_mapping_error() (bsc#1012628). - perf test: Fix metric parsing test (bsc#1012628). - drm/amdgpu: fix regression in vbios reservation handling on headless (bsc#1012628). - mm/gup: reorganize internal_get_user_pages_fast() (bsc#1012628). - mm/gup: prevent gup_fast from racing with COW during fork (bsc#1012628). - mm/gup: combine put_compound_head() and unpin_user_page() (bsc#1012628). - mm: memcg/slab: fix return of child memcg objcg for root memcg (bsc#1012628). - mm: memcg/slab: fix use after free in obj_cgroup_charge (bsc#1012628). - mm/rmap: always do TTU_IGNORE_ACCESS (bsc#1012628). - sparc: fix handling of page table constructor failure (bsc#1012628). - mm/vmalloc: Fix unlock order in s_stop() (bsc#1012628). - mm/vmalloc.c: fix kasan shadow poisoning size (bsc#1012628). - mm,memory_failure: always pin the page in madvise_inject_error (bsc#1012628). - hugetlb: fix an error code in hugetlb_reserve_pages() (bsc#1012628). - mm: don't wake kswapd prematurely when watermark boosting is disabled (bsc#1012628). - proc: fix lookup in /proc/net subdirectories after setns(2) (bsc#1012628). - checkpatch: fix unescaped left brace (bsc#1012628). - s390/test_unwind: fix CALL_ON_STACK tests (bsc#1012628). - lan743x: fix rx_napi_poll/interrupt ping-pong (bsc#1012628). - ice, xsk: clear the status bits for the next_to_use descriptor (bsc#1012628). - i40e, xsk: clear the status bits for the next_to_use descriptor (bsc#1012628). - net: dsa: qca: ar9331: fix sleeping function called from invalid context bug (bsc#1012628). - dpaa2-eth: fix the size of the mapped SGT buffer (bsc#1012628). - net: bcmgenet: Fix a resource leak in an error handling path in the probe functin (bsc#1012628). - net: mscc: ocelot: Fix a resource leak in the error handling path of the probe function (bsc#1012628). - net: allwinner: Fix some resources leak in the error handling path of the probe and in the remove function (bsc#1012628). - block/rnbd-clt: Get rid of warning regarding size argument in strlcpy (bsc#1012628). - block/rnbd-clt: Fix possible memleak (bsc#1012628). - NFS/pNFS: Fix a typo in ff_layout_resend_pnfs_read() (bsc#1012628). - net: korina: fix return value (bsc#1012628). - devlink: use _BITUL() macro instead of BIT() in the UAPI header (bsc#1012628). - libnvdimm/label: Return -ENXIO for no slot in __blk_label_update (bsc#1012628). - powerpc/32s: Fix cleanup_cpu_mmu_context() compile bug (bsc#1012628). - watchdog: qcom: Avoid context switch in restart handler (bsc#1012628). - watchdog: coh901327: add COMMON_CLK dependency (bsc#1012628). - clk: ti: Fix memleak in ti_fapll_synth_setup (bsc#1012628). - pwm: zx: Add missing cleanup in error path (bsc#1012628). - pwm: lp3943: Dynamically allocate PWM chip base (bsc#1012628). - pwm: imx27: Fix overflow for bigger periods (bsc#1012628). - pwm: sun4i: Remove erroneous else branch (bsc#1012628). - io_uring: cancel only requests of current task (bsc#1012628). - tools build: Add missing libcap to test-all.bin target (bsc#1012628). - =?UTF-8?q?perf=20record:=20Fix=20memory=20leak=20when=20u?= =?UTF-8?q?sing=20'--user-regs=3D=3F'=20to=20list=20registers?= (bsc#1012628). - qlcnic: Fix error code in probe (bsc#1012628). - nfp: move indirect block cleanup to flower app stop callback (bsc#1012628). - vdpa/mlx5: Use write memory barrier after updating CQ index (bsc#1012628). - virtio_ring: Cut and paste bugs in vring_create_virtqueue_packed() (bsc#1012628). - virtio_net: Fix error code in probe() (bsc#1012628). - virtio_ring: Fix two use after free bugs (bsc#1012628). - vhost scsi: fix error return code in vhost_scsi_set_endpoint() (bsc#1012628). - epoll: check for events when removing a timed out thread from the wait queue (bsc#1012628). - clk: at91: sama7g5: fix compilation error (bsc#1012628). - clk: at91: sam9x60: remove atmel,osc-bypass support (bsc#1012628). - clk: s2mps11: Fix a resource leak in error handling paths in the probe function (bsc#1012628). - clk: sunxi-ng: Make sure divider tables have sentinel (bsc#1012628). - clk: vc5: Use "idt,voltage-microvolt" instead of "idt,voltage-microvolts" (bsc#1012628). - kconfig: fix return value of do_error_if() (bsc#1012628). - powerpc/boot: Fix build of dts/fsl (bsc#1012628). - powerpc/smp: Add __init to init_big_cores() (bsc#1012628). - ARM: 9044/1: vfp: use undef hook for VFP support detection (bsc#1012628). - ARM: 9036/1: uncompress: Fix dbgadtb size parameter name (bsc#1012628). - perf probe: Fix memory leak when synthesizing SDT probes (bsc#1012628). - io_uring: fix racy IOPOLL flush overflow (bsc#1012628). - io_uring: cancel reqs shouldn't kill overflow list (bsc#1012628). - Smack: Handle io_uring kernel thread privileges (bsc#1012628). - proc mountinfo: make splice available again (bsc#1012628). - io_uring: fix io_cqring_events()'s noflush (bsc#1012628). - io_uring: fix racy IOPOLL completions (bsc#1012628). - io_uring: always let io_iopoll_complete() complete polled io (bsc#1012628). - vfio/pci: Move dummy_resources_list init in vfio_pci_probe() (bsc#1012628). - vfio/pci/nvlink2: Do not attempt NPU2 setup on POWER8NVL NPU (bsc#1012628). - media: gspca: Fix memory leak in probe (bsc#1012628). - io_uring: fix io_wqe->work_list corruption (bsc#1012628). - io_uring: fix 0-iov read buffer select (bsc#1012628). - io_uring: hold uring_lock while completing failed polled io in io_wq_submit_work() (bsc#1012628). - io_uring: fix ignoring xa_store errors (bsc#1012628). - io_uring: fix double io_uring free (bsc#1012628). - io_uring: make ctx cancel on exit targeted to actual ctx (bsc#1012628). - media: sunxi-cir: ensure IR is handled when it is continuous (bsc#1012628). - media: netup_unidvb: Don't leak SPI master in probe error path (bsc#1012628). - media: ipu3-cio2: Remove traces of returned buffers (bsc#1012628). - media: ipu3-cio2: Return actual subdev format (bsc#1012628). - media: ipu3-cio2: Serialise access to pad format (bsc#1012628). - media: ipu3-cio2: Validate mbus format in setting subdev format (bsc#1012628). - media: ipu3-cio2: Make the field on subdev format V4L2_FIELD_NONE (bsc#1012628). - Input: cyapa_gen6 - fix out-of-bounds stack access (bsc#1012628). - ALSA: hda/ca0132 - Change Input Source enum strings (bsc#1012628). - ACPI: NFIT: Fix input validation of bus-family (bsc#1012628). - PM: ACPI: PCI: Drop acpi_pm_set_bridge_wakeup() (bsc#1012628). - Revert "ACPI / resources: Use AE_CTRL_TERMINATE to terminate resources walks" (bsc#1012628). - ACPI: PNP: compare the string length in the matching_id() (bsc#1012628). - ALSA: hda: Fix regressions on clear and reconfig sysfs (bsc#1012628). - ALSA: hda/ca0132 - Fix AE-5 rear headphone pincfg (bsc#1012628). - ALSA: hda/realtek: make bass spk volume adjustable on a yoga laptop (bsc#1012628). - ALSA: hda/realtek - Enable headset mic of ASUS X430UN with ALC256 (bsc#1012628). - ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (bsc#1012628). - ALSA: hda/realtek - Add supported for more Lenovo ALC285 Headset Button (bsc#1012628). - ALSA: pcm: oss: Fix a few more UBSAN fixes (bsc#1012628). - ALSA/hda: apply jack fixup for the Acer Veriton N4640G/N6640G/N2510G (bsc#1012628). - ALSA: hda/realtek: Add quirk for MSI-GP73 (bsc#1012628). - ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (bsc#1012628). - ALSA: hda/realtek: Remove dummy lineout on Acer TravelMate P648/P658 (bsc#1012628). - ALSA: hda/realtek - Supported Dell fixed type headset (bsc#1012628). - ALSA: usb-audio: Add VID to support native DSD reproduction on FiiO devices (bsc#1012628). - ALSA: usb-audio: Disable sample read check if firmware doesn't give back (bsc#1012628). - ALSA: usb-audio: Add alias entry for ASUS PRIME TRX40 PRO-S (bsc#1012628). - ALSA: core: memalloc: add page alignment for iram (bsc#1012628). - s390/smp: perform initial CPU reset also for SMT siblings (bsc#1012628). - s390/kexec_file: fix diag308 subcode when loading crash kernel (bsc#1012628). - s390/idle: add missing mt_cycles calculation (bsc#1012628). - s390/idle: fix accounting with machine checks (bsc#1012628). - s390/dasd: fix hanging device offline processing (bsc#1012628). - s390/dasd: prevent inconsistent LCU device data (bsc#1012628). - s390/dasd: fix list corruption of pavgroup group list (bsc#1012628). - s390/dasd: fix list corruption of lcu list (bsc#1012628). - binder: add flag to clear buffer on txn complete (bsc#1012628). - ASoC: cx2072x: Fix doubly definitions of Playback and Capture streams (bsc#1012628). - ASoC: AMD Renoir - add DMI table to avoid the ACP mic probe (broken BIOS) (bsc#1012628). - ASoC: AMD Raven/Renoir - fix the PCI probe (PCI revision) (bsc#1012628). - staging: comedi: mf6x4: Fix AI end-of-conversion detection (bsc#1012628). - z3fold: simplify freeing slots (bsc#1012628). - z3fold: stricter locking and more careful reclaim (bsc#1012628). - perf/x86/intel: Add event constraint for CYCLE_ACTIVITY.STALLS_MEM_ANY (bsc#1012628). - perf/x86/intel: Fix rtm_abort_event encoding on Ice Lake (bsc#1012628). - perf/x86/intel/lbr: Fix the return type of get_lbr_cycles() (bsc#1012628). - powerpc/perf: Exclude kernel samples while counting events in user space (bsc#1012628). - cpufreq: intel_pstate: Use most recent guaranteed performance values (bsc#1012628). - crypto: ecdh - avoid unaligned accesses in ecdh_set_secret() (bsc#1012628). - crypto: arm/aes-ce - work around Cortex-A57/A72 silion errata (bsc#1012628). - m68k: Fix WARNING splat in pmac_zilog driver (bsc#1012628). - Documentation: seqlock: s/LOCKTYPE/LOCKNAME/g (bsc#1012628). - EDAC/i10nm: Use readl() to access MMIO registers (bsc#1012628). - EDAC/amd64: Fix PCI component registration (bsc#1012628). - cpuset: fix race between hotplug work and later CPU offline (bsc#1012628). - dyndbg: fix use before null check (bsc#1012628). - USB: serial: mos7720: fix parallel-port state restore (bsc#1012628). - USB: serial: digi_acceleport: fix write-wakeup deadlocks (bsc#1012628). - USB: serial: keyspan_pda: fix dropped unthrottle interrupts (bsc#1012628). - USB: serial: keyspan_pda: fix write deadlock (bsc#1012628). - USB: serial: keyspan_pda: fix stalled writes (bsc#1012628). - USB: serial: keyspan_pda: fix write-wakeup use-after-free (bsc#1012628). - USB: serial: keyspan_pda: fix tx-unthrottle use-after-free (bsc#1012628). - USB: serial: keyspan_pda: fix write unthrottling (bsc#1012628). - btrfs: do not shorten unpin len for caching block groups (bsc#1012628). - btrfs: update last_byte_to_unpin in switch_commit_roots (bsc#1012628). - btrfs: fix race when defragmenting leads to unnecessary IO (bsc#1012628). - ext4: fix an IS_ERR() vs NULL check (bsc#1012628). - ext4: fix a memory leak of ext4_free_data (bsc#1012628). - ext4: fix deadlock with fs freezing and EA inodes (bsc#1012628). - ext4: don't remount read-only with errors=continue on reboot (bsc#1012628). - RISC-V: Fix usage of memblock_enforce_memory_limit (bsc#1012628). - arm64: dts: ti: k3-am65: mark dss as dma-coherent (bsc#1012628). - arm64: dts: marvell: keep SMMU disabled by default for Armada 7040 and 8040 (bsc#1012628). - KVM: arm64: Introduce handling of AArch32 TTBCR2 traps (bsc#1012628). - KVM: x86: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (bsc#1012628). - KVM: SVM: Remove the call to sev_platform_status() during setup (bsc#1012628). - iommu/arm-smmu: Allow implementation specific write_s2cr (bsc#1012628). - iommu/arm-smmu-qcom: Read back stream mappings (bsc#1012628). - iommu/arm-smmu-qcom: Implement S2CR quirk (bsc#1012628). - ARM: dts: pandaboard: fix pinmux for gpio user button of Pandaboard ES (bsc#1012628). - ARM: dts: at91: sama5d2: fix CAN message ram offset and size (bsc#1012628). - ARM: tegra: Populate OPP table for Tegra20 Ventana (bsc#1012628). - xprtrdma: Fix XDRBUF_SPARSE_PAGES support (bsc#1012628). - powerpc/32: Fix vmap stack - Properly set r1 before activating MMU on syscall too (bsc#1012628). - powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at (bsc#1012628). - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (bsc#1012628). - powerpc/bitops: Fix possible undefined behaviour with fls() and fls64() (bsc#1012628). - powerpc/feature: Add CPU_FTR_NOEXECUTE to G2_LE (bsc#1012628). - powerpc/xmon: Change printk() to pr_cont() (bsc#1012628). - powerpc/8xx: Fix early debug when SMC1 is relocated (bsc#1012628). - powerpc/mm: Fix verification of MMU_FTR_TYPE_44x (bsc#1012628). - powerpc/powernv/npu: Do not attempt NPU2 setup on POWER8NVL NPU (bsc#1012628). - powerpc/powernv/memtrace: Don't leak kernel memory to user space (bsc#1012628). - powerpc/powernv/memtrace: Fix crashing the kernel when enabling concurrently (bsc#1012628). - ovl: make ioctl() safe (bsc#1012628). - ima: Don't modify file descriptor mode on the fly (bsc#1012628). - um: Remove use of asprinf in umid.c (bsc#1012628). - um: Fix time-travel mode (bsc#1012628). - ceph: fix race in concurrent __ceph_remove_cap invocations (bsc#1012628). - SMB3: avoid confusing warning message on mount to Azure (bsc#1012628). - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (bsc#1012628). - SMB3.1.1: do not log warning message if server doesn't populate salt (bsc#1012628). - ubifs: wbuf: Don't leak kernel memory to flash (bsc#1012628). - jffs2: Fix GC exit abnormally (bsc#1012628). - jffs2: Fix ignoring mounting options problem during remounting (bsc#1012628). - fsnotify: generalize handle_inode_event() (bsc#1012628). - inotify: convert to handle_inode_event() interface (bsc#1012628). - fsnotify: fix events reported to watching parent and child (bsc#1012628). - jfs: Fix array index bounds check in dbAdjTree (bsc#1012628). - drm/panfrost: Fix job timeout handling (bsc#1012628). - drm/panfrost: Move the GPU reset bits outside the timeout handler (bsc#1012628). - platform/x86: mlx-platform: remove an unused variable (bsc#1012628). - drm/amd/display: Fix memory leaks in S3 resume (bsc#1012628). - drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor() (bsc#1012628). - drm/i915: Fix mismatch between misplaced vma check and vma insert (bsc#1012628). - iio: ad_sigma_delta: Don't put SPI transfer buffer on the stack (bsc#1012628). - spi: pxa2xx: Fix use-after-free on unbind (bsc#1012628). - spi: spi-sh: Fix use-after-free on unbind (bsc#1012628). - spi: atmel-quadspi: Fix use-after-free on unbind (bsc#1012628). - spi: spi-mtk-nor: Don't leak SPI master in probe error path (bsc#1012628). - spi: ar934x: Don't leak SPI master in probe error path (bsc#1012628). - spi: davinci: Fix use-after-free on unbind (bsc#1012628). - spi: fsl: fix use of spisel_boot signal on MPC8309 (bsc#1012628). - spi: gpio: Don't leak SPI master in probe error path (bsc#1012628). - spi: mxic: Don't leak SPI master in probe error path (bsc#1012628). - spi: npcm-fiu: Disable clock in probe error path (bsc#1012628). - spi: pic32: Don't leak DMA channels in probe error path (bsc#1012628). - spi: rb4xx: Don't leak SPI master in probe error path (bsc#1012628). - spi: rpc-if: Fix use-after-free on unbind (bsc#1012628). - spi: sc18is602: Don't leak SPI master in probe error path (bsc#1012628). - spi: spi-geni-qcom: Fix use-after-free on unbind (bsc#1012628). - spi: spi-qcom-qspi: Fix use-after-free on unbind (bsc#1012628). - spi: st-ssc4: Fix unbalanced pm_runtime_disable() in probe error path (bsc#1012628). - spi: synquacer: Disable clock in probe error path (bsc#1012628). - spi: mt7621: Disable clock in probe error path (bsc#1012628). - spi: mt7621: Don't leak SPI master in probe error path (bsc#1012628). - spi: atmel-quadspi: Disable clock in probe error path (bsc#1012628). - spi: atmel-quadspi: Fix AHB memory accesses (bsc#1012628). - soc: qcom: smp2p: Safely acquire spinlock without IRQs (bsc#1012628). - mtd: spinand: Fix OOB read (bsc#1012628). - mtd: parser: cmdline: Fix parsing of part-names with colons (bsc#1012628). - mtd: core: Fix refcounting for unpartitioned MTDs (bsc#1012628). - mtd: rawnand: qcom: Fix DMA sync on FLASH_STATUS register read (bsc#1012628). - mtd: rawnand: meson: fix meson_nfc_dma_buffer_release() arguments (bsc#1012628). - scsi: qla2xxx: Fix crash during driver load on big endian machines (bsc#1012628). - scsi: lpfc: Fix invalid sleeping context in lpfc_sli4_nvmet_alloc() (bsc#1012628). - scsi: lpfc: Fix scheduling call while in softirq context in lpfc_unreg_rpi (bsc#1012628). - scsi: lpfc: Re-fix use after free in lpfc_rq_buf_free() (bsc#1012628). - openat2: reject RESOLVE_BENEATH|RESOLVE_IN_ROOT (bsc#1012628). - iio: buffer: Fix demux update (bsc#1012628). - iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error in rockchip_saradc_resume (bsc#1012628). - iio: imu: st_lsm6dsx: fix edge-trigger interrupts (bsc#1012628). - iio:light:rpr0521: Fix timestamp alignment and prevent data leak (bsc#1012628). - iio:light:st_uvis25: Fix timestamp alignment and prevent data leak (bsc#1012628). - iio:magnetometer:mag3110: Fix alignment and data leak issues (bsc#1012628). - iio:pressure:mpl3115: Force alignment of buffer (bsc#1012628). - iio:imu:bmi160: Fix too large a buffer (bsc#1012628). - iio:imu:bmi160: Fix alignment and data leak issues (bsc#1012628). - iio:adc:ti-ads124s08: Fix buffer being too long (bsc#1012628). - iio:adc:ti-ads124s08: Fix alignment and data leak issues (bsc#1012628). - md/cluster: block reshape with remote resync job (bsc#1012628). - md/cluster: fix deadlock when node is doing resync job (bsc#1012628). - pinctrl: sunxi: Always call chained_irq_{enter, exit} in sunxi_pinctrl_irq_handler (bsc#1012628). - clk: ingenic: Fix divider calculation with div tables (bsc#1012628). - clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9 (bsc#1012628). - clk: tegra: Do not return 0 on failure (bsc#1012628). - counter: microchip-tcb-capture: Fix CMR value check (bsc#1012628). - device-dax/core: Fix memory leak when rmmod dax.ko (bsc#1012628). - dma-buf/dma-resv: Respect num_fences when initializing the shared fence list (bsc#1012628). - driver: core: Fix list corruption after device_del() (bsc#1012628). - xen-blkback: set ring->xenblkd to NULL after kthread_stop() (bsc#1012628). - xen/xenbus: Allow watches discard events before queueing (bsc#1012628). - xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path() (bsc#1012628). - xen/xenbus/xen_bus_type: Support will_handle watch callback (bsc#1012628). - xen/xenbus: Count pending messages for each watch (bsc#1012628). - xenbus/xenbus_backend: Disallow pending watch messages (bsc#1012628). - memory: jz4780_nemc: Fix an error pointer vs NULL check in probe() (bsc#1012628). - memory: renesas-rpc-if: Fix a node reference leak in rpcif_probe() (bsc#1012628). - memory: renesas-rpc-if: Return correct value to the caller of rpcif_manual_xfer() (bsc#1012628). - memory: renesas-rpc-if: Fix unbalanced pm_runtime_enable in rpcif_{enable,disable}_rpm (bsc#1012628). - libnvdimm/namespace: Fix reaping of invalidated block-window-namespace labels (bsc#1012628). - platform/x86: intel-vbtn: Allow switch events on Acer Switch Alpha 12 (bsc#1012628). - tracing: Disable ftrace selftests when any tracer is running (bsc#1012628). - mt76: add back the SUPPORTS_REORDERING_BUFFER flag (bsc#1012628). - of: fix linker-section match-table corruption (bsc#1012628). - PCI: Fix pci_slot_release() NULL pointer dereference (bsc#1012628). - regulator: axp20x: Fix DLDO2 voltage control register mask for AXP22x (bsc#1012628). - remoteproc: sysmon: Ensure remote notification ordering (bsc#1012628). - thermal/drivers/cpufreq_cooling: Update cpufreq_state only if state has changed (bsc#1012628). - rtc: ep93xx: Fix NULL pointer dereference in ep93xx_rtc_read_time (bsc#1012628). - Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS" (bsc#1012628). - null_blk: Fix zone size initialization (bsc#1012628). - null_blk: Fail zone append to conventional zones (bsc#1012628). - drm/edid: fix objtool warning in drm_cvt_modes() (bsc#1012628). - x86/CPU/AMD: Save AMD NodeId as cpu_die_id (bsc#1012628). - Update config files. - commit 84f94bc - media: uvcvideo: Accept invalid bFormatIndex and bFrameIndex values (bsc#1180117). - commit b9a0c5f - iwlwifi: dbg: Don't touch the tlv data (bsc#1180344). - commit cd8100a - Linux 5.10.3 (bsc#1012628). - md: fix a warning caused by a race between concurrent md_ioctl()s (bsc#1012628). - nl80211: validate key indexes for cfg80211_registered_device (bsc#1012628). - crypto: af_alg - avoid undefined behavior accessing salg_name (bsc#1012628). - media: msi2500: assign SPI bus number dynamically (bsc#1012628). - fs: quota: fix array-index-out-of-bounds bug by passing correct argument to vfs_cleanup_quota_inode() (bsc#1012628). - quota: Sanity-check quota file headers on load (bsc#1012628). - Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() (bsc#1012628). - f2fs: prevent creating duplicate encrypted filenames (bsc#1012628). - ext4: prevent creating duplicate encrypted filenames (bsc#1012628). - ubifs: prevent creating duplicate encrypted filenames (bsc#1012628). - fscrypt: add fscrypt_is_nokey_name() (bsc#1012628). - fscrypt: remove kernel-internal constants from UAPI header (bsc#1012628). - serial_core: Check for port state when tty is in error state (bsc#1012628). - HID: i2c-hid: add Vero K147 to descriptor override (bsc#1012628). - scsi: megaraid_sas: Check user-provided offsets (bsc#1012628). - f2fs: init dirty_secmap incorrectly (bsc#1012628). - f2fs: fix to seek incorrect data offset in inline data file (bsc#1012628). - coresight: etm4x: Handle TRCVIPCSSCTLR accesses (bsc#1012628). - coresight: etm4x: Fix accesses to TRCPROCSELR (bsc#1012628). - coresight: etm4x: Fix accesses to TRCCIDCTLR1 (bsc#1012628). - coresight: etm4x: Fix accesses to TRCVMIDCTLR1 (bsc#1012628). - coresight: etm4x: Skip setting LPOVERRIDE bit for qcom, skip-power-up (bsc#1012628). - coresight: etb10: Fix possible NULL ptr dereference in etb_enable_perf() (bsc#1012628). - coresight: tmc-etr: Fix barrier packet insertion for perf buffer (bsc#1012628). - coresight: tmc-etr: Check if page is valid before dma_map_page() (bsc#1012628). - coresight: tmc-etf: Fix NULL ptr dereference in tmc_enable_etf_sink_perf() (bsc#1012628). - ARM: dts: exynos: fix USB 3.0 pins supply being turned off on Odroid XU (bsc#1012628). - ARM: dts: exynos: fix USB 3.0 VBUS control and over-current pins on Exynos5410 (bsc#1012628). - ARM: dts: exynos: fix roles of USB 3.0 ports on Odroid XU (bsc#1012628). - usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul (bsc#1012628). - USB: gadget: f_rndis: fix bitrate for SuperSpeed and above (bsc#1012628). - usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus (bsc#1012628). - USB: gadget: f_midi: setup SuperSpeed Plus descriptors (bsc#1012628). - USB: gadget: f_acm: add support for SuperSpeed Plus (bsc#1012628). - USB: serial: option: add interface-number sanity check to flag handling (bsc#1012628). - usb: mtu3: fix memory corruption in mtu3_debugfs_regset() (bsc#1012628). - soc/tegra: fuse: Fix index bug in get_process_id (bsc#1012628). - exfat: Avoid allocating upcase table using kcalloc() (bsc#1012628). - x86/split-lock: Avoid returning with interrupts enabled (bsc#1012628). - net: ipconfig: Avoid spurious blank lines in boot log (bsc#1012628). - commit 246b3e0 - reset: raspberrypi: Don't reset USB if already up (bsc#1180336). - commit cbfc03c - series.conf: cleanup - update upstream reference and move to "almost mainline" section: patches.suse/clk-bcm-dvp-add-module_device_table.patch - commit 24deb54 - config: refresh - drop USB_SISUSBVGA_CON (no longer accessible) - commit c403c88 - Linux 5.10.2 (bsc#1012628). - serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access (bsc#1012628). - ALSA: pcm: oss: Fix potential out-of-bounds shift (bsc#1012628). - USB: sisusbvga: Make console support depend on BROKEN (bsc#1012628). - USB: UAS: introduce a quirk to set no_write_same (bsc#1012628). - xhci-pci: Allow host runtime PM as default for Intel Maple Ridge xHCI (bsc#1012628). - xhci-pci: Allow host runtime PM as default for Intel Alpine Ridge LP (bsc#1012628). - usb: xhci: Set quirk for XHCI_SG_TRB_CACHE_SIZE_QUIRK (bsc#1012628). - xhci: Give USB2 ports time to enter U3 in bus suspend (bsc#1012628). - ALSA: usb-audio: Fix control 'access overflow' errors from chmap (bsc#1012628). - ALSA: usb-audio: Fix potential out-of-bounds shift (bsc#1012628). - USB: add RESET_RESUME quirk for Snapscan 1212 (bsc#1012628). - USB: dummy-hcd: Fix uninitialized array use in init() (bsc#1012628). - USB: legotower: fix logical error in recent commit (bsc#1012628). - ktest.pl: Fix the logic for truncating the size of the log file for email (bsc#1012628). - ktest.pl: If size of log is too big to email, email error message (bsc#1012628). - ptrace: Prevent kernel-infoleak in ptrace_get_syscall_info() (bsc#1012628). - commit 0c7d1c1 - clk: bcm: dvp: Add MODULE_DEVICE_TABLE() (bsc#1180260). - commit fa7a177 - drm/amdgpu: only set DP subconnector type on DP and eDP connectors (bsc#1180227). - commit 74c3250 - Update config files. Just to match my env. - commit 588066a - Linux 5.10.1 (bsc#1012628). - Revert "dm raid: fix discard limits for raid1 and raid10" (bsc#1012628). - Revert "md: change mddev 'chunk_sectors' from int to unsigned" (bsc#1012628). - commit bc79fb6 - lpae: disable CONFIG_QCOM_PIL_INFO to fix build on armv7 - commit 0c08c2e - Update to 5.10 final - eliminated 1 patch - patches.suse/revert-mm-filemap-add-static-for-function-__add_to_p.patch - update configs - NFS_V4_2_READ_PLUS=n (recommended default, unsafe feature) - commit ff9060b - config.conf: Reenable armv6hl/armv7hl/arm64 - Update config files: * Settings copied from x86_64 update * arm specific options are =m except if debug or test, =y otherwise - commit cc424ba ==== keyutils ==== Version update (1.6 -> 1.6.3) Subpackages: libkeyutils1 - the license of the library and -devel package is LGPL only, the tools are GPL. - update to 1.6.3: * Revert the change notifications that were using /dev/watch_queue. * Apply the change notifications that use pipe2(O_NOTIFICATION_PIPE). * Allow "keyctl supports" to retrieve raw capability data. * Allow "keyctl id" to turn a symbolic key ID into a numeric ID. * Allow "keyctl new_session" to name the keyring. * Allow "keyctl add/padd/etc." to take hex-encoded data. * Add "keyctl watch*" to expose kernel change notifications on keys. * Add caps for namespacing and notifications. * Set a default TTL on keys that upcall for name resolution. * Explicitly clear memory after it's held sensitive information. * Various manual page fixes. * Fix C++-related errors. * Add support for keyctl_move(). * Add support for keyctl_capabilities(). * Make key=val list optional for various public-key ops. * Fix system call signature for KEYCTL_PKEY_QUERY. * Fix 'keyctl pkey_query' argument passing. * Use keyctl_read_alloc() in dump_key_tree_aux(). * Various manual page fixes. - spec-cleaner run (fixup failing homepage url) ==== kfilemetadata5 ==== Version update (5.76.0 -> 5.77.0) Subpackages: kfilemetadata5-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Port some deprecated method * Fix some leaks in OpenDocument and Office OpenXML extractors * Add several subtypes for OpenDocument and OpenXML document ==== kgamma5 ==== Version update (5.20.4 -> 5.20.5) Subpackages: kgamma5-lang - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== kgeography ==== Version update (20.08.3 -> 20.12.0) Subpackages: kgeography-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * Port away from deprecated Qt::MidButton * Port away from KRandom ==== kget ==== Version update (20.08.3 -> 20.12.0) Subpackages: kget-lang - Add patches to fix issues reported by valgrind (boo#1180352): * 0001-Initialize-Transfer-m_runningSeconds.patch * 0002-Don-t-create-dangling-iterators-in-TransferMultiSegK.patch- - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Port some Qt4 style connects * Port away from KIO::pixmapForUrl * Drop empty X-KDE-PluginInfo-Depends ==== kglobalaccel ==== Version update (5.76.0 -> 5.77.0) Subpackages: kglobalaccel5 libKF5GlobalAccel5 libKF5GlobalAccel5-lang libKF5GlobalAccelPrivate5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Load statically linked kglobalacceld interface plugins ==== kgoldrunner ==== Version update (20.08.3 -> 20.12.0) Subpackages: kgoldrunner-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * Fix KNS deprecations ==== kguiaddons ==== Version update (5.76.0 -> 5.77.0) - Explicitly BuildRequire pkgconfig(wayland-client) that's needed now and don't rely on other packages pulling it in - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Remove redundant setLayout() call (parent is passed to Q*Layout ctor) * Make shortcut inhibition work from the get-go (kde#407395) * Fix potential crash in wayland inhibitor teardown (kde#429267) * CMake: Find Qt5::GuiPrivate when Wayland support is enabled * Add KeySequenceRecorder as base for KKeySequenceWidget and KeySequenceItem ==== khangman ==== Version update (20.08.3 -> 20.12.0) Subpackages: khangman-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * Remove explicit ECM_KDE_MODULE_DIR * add content rating * Remove KDeclarative dependency ==== khelpcenter5 ==== Version update (20.08.3 -> 20.12.1) Subpackages: khelpcenter5-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes to list here. ==== kholidays ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5Holidays5 libKF5Holidays5-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Fix rounding of sun position events less than 30s before the next hour * Avoid parsing each holiday file twice in defaultRegionCode() * Compute the astro seasons only once per occurrence * Fix holiday region lookup for ISO 3166-2 codes * Make HolidayRegion copyable/movable * Add support for calculating civil twilight times ==== khotkeys5 ==== Version update (5.20.4 -> 5.20.5) Subpackages: khotkeys5-lang - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== khtml ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5KHtml5 libKF5KHtml5-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== ki18n ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5I18n5 libKF5I18n5-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kiconthemes ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5IconThemes5 libKF5IconThemes5-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Pass parent to Q*Layout ctor instead of calling setLayout() * Add selected property to effects * Use qDebug instead if icon theme is not found ==== kidentitymanagement ==== Version update (20.08.3 -> 20.12.1) Subpackages: kidentitymanagement-lang libKF5IdentityManagement5 - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Modernize code * Fix generate pri file * Clean up * If include is define in .h remove it if it's defined in .cpp too (scripted) * Time to increase version * Add missing Q_REQUIRED_RESULT * modernize code * Convert license headers to SPDX format * increase dependancy * Make it compile with last kpimtextedit ==== kidletime ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Load statically linked system poller plugins ==== kig ==== Version update (20.08.3 -> 20.12.0) Subpackages: kig-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Update docs and screenshots to Breeze * add content rating * Port away from deprecated Qt::MidButton ==== kimageformats ==== Version update (5.76.0 -> 5.77.0) Subpackages: kimageformats-eps - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * test: don't convert image format if possible * No longer descease color depth to 8 for 16 bit uncompressed PSD files * tests: Remove qimage_format_enum_names and just use QMetaEnum ==== kimap ==== Version update (20.08.3 -> 20.12.1) Subpackages: kimap-lang libKF5IMAP5 - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes to list here. ==== kinfocenter5 ==== Version update (5.20.4 -> 5.20.5) Subpackages: kinfocenter5-lang - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== kinit ==== Version update (5.76.0 -> 5.77.0) Subpackages: kinit-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kio ==== Version update (5.76.0 -> 5.77.0) Subpackages: kio-core kio-lang - Add upstream patch to prevent crashing when using "apply to all" in the move/copy/overwrite dialog (kde#430374): * 0001-RenameDialog-Add-missing-nullptr-initialization.patch - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Too many changes since 5.76.0, only listing bugfixes: * NewFile Dialog: allow to accept directory creation before stat has run (kde#429838) * KUrlNavBtn: make opening subdirs from dropdown menu with the keyboard work (kde#428226) * Places view: highlight place only when it is displayed (kde#429806) * KIO::iconNameForUrl: resolve icon for remote files based on name (kde#429530) * RenameDialog: allow to overwrite when files are older (kde#236884) * Do not add unnecessary separators (kde#427830) ==== kio-extras5 ==== Version update (20.08.3 -> 20.12.1) Subpackages: kio-extras5-lang libkioarchive5 - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - Changes since 20.11.80: * Add PowerPoint slideshow mime types - Update to 20.11.80 * New feature release - Too many changes since 20.08.3, only listing bugfixes: * [DjvuThumbnailer] Replace open coded ddjvu invocation with QProcess (kde#420074) * Remove Mimetype overlay icon blending (kde#425789) ==== kio_audiocd ==== Version update (20.08.3 -> 20.12.1) Subpackages: kio_audiocd-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Add missing kdoctools_install * Use systemsettings5 instead of kcmshell5 * Add I18N context for the "Missing device specification" message * Update to work properly with current KIO * Search all possible locations for plugins * Use CamelCase includes (scripted) ==== kipi-plugins ==== Version update (20.08.3 -> 20.12.0) Subpackages: kipi-plugins-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - No code change since 20.08.3 ==== kirigami2 ==== Version update (5.76.0 -> 5.77.0) Subpackages: kirigami2-lang libKF5Kirigami2-5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Too many changes since 5.76.0, only listing bugfixes: * Refine list separator appearance (kde#428739) * Fix rendering borders the proper size with software fallback (kde#427556) * Use fwidth() for smoothing in low power mode (kde#427553) ==== kiriki ==== Version update (20.08.3 -> 20.12.0) Subpackages: kiriki-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * Require Qt that has QRandomGenerator * Port away from KRandom ==== kismet ==== Version update (2020_09_R4 -> 2020_12_R3) Subpackages: kismet-capture-freaklabs-zigbee kismet-capture-linux-bluetooth kismet-capture-linux-wifi kismet-capture-nrf-51822 kismet-capture-nrf-mousejack kismet-capture-sdr-rtl433 kismet-capture-sdr-rtladsb kismet-capture-sdr-rtlamr kismet-capture-ti-cc2540 kismet-logtools - Update to version 2020-12-R3 * A bugfix release which solves a possible infinite loop until crash due to how GCC handles C++ templates differently than Clang. - Update to version 2020-12-R2 * Fix improper assignment of system endpoints to the logon role instead of read-only * Fix broken implementation of legacy TCP remote capture on python-based sources - Update to version 2020-12-R1 Release Highlights: * All new ASIO networking model + Kismet now uses the C++ ASIO networking library. * All new web server implementation (drop libmicrohttpdd) * New role based REST API * Remote capture over websockets * Huge RAM savings * Stability improvements * Higher performance web UI * New websocket APIs * Better location averaging * Improved channel and signal mapping * Improved 802.11 WDS handling * General improvements and changes to the REST API See https://www.kismetwireless.net/release/kismet-2020-12-R1/ for the full changelog. ==== kitemmodels ==== Version update (5.76.0 -> 5.77.0) Subpackages: kitemmodels-imports libKF5ItemModels5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Remove redundant setLayout() call * Remove test app, KRecursiveFilterProxyModel is deprecated since 5.65 * KRearrangeColumnsProxyModel: only column 0 has children ==== kitemviews ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5ItemViews5 libKF5ItemViews5-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Pass parent to Q*Layout ctor instead of calling setLayout() * We require Qt 5.13 now, so remove ifdef ==== kiten ==== Version update (20.08.3 -> 20.12.0) Subpackages: fonts-KanjiStrokeOrders kiten-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - Changes since 20.11.80: * Set initial focus on the search bar on startup (kde#427077) * radselect: Add trailing "+" to last radicals column header * radselect: Actually clear the list of search results in clearSearch() * radselect: Properly fetch kanji stroke count from kanjidic (kde#385070) - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * add content rating * Fix potential crash in sessionConfig ==== kitinerary ==== Version update (20.08.3 -> 20.12.1) Subpackages: libKPimItinerary5 libKPimItinerary5-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - Changes since 20.12.0: * Handle yet another TER ticket variant - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - Changes since 20.11.90: * Consider horizontal flips in the PDF vector graphics transformation - Update to 20.11.90 * New feature release - Changes since 20.11.80: * Work around another variant of invalid JSON * These tests don't need a QGuiApplication - Update to 20.11.80 * New feature release - Too many changes to list here. ==== kjobwidgets ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5JobWidgets5 libKF5JobWidgets5-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Pass parent to Q*Layout ctor instead of calling setLayout() ==== kjs ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5JS5 libKF5JSApi5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kjumpingcube ==== Version update (20.08.3 -> 20.12.0) Subpackages: kjumpingcube-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) ==== kldap ==== Version update (20.08.3 -> 20.12.1) Subpackages: kldap-lang libKF5Ldap5 - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Modernize code (using auto) * If include is define in .h remove it if it's defined in .cpp too (scripted) * Remove not implemented method * Time to increase version * Relicense LGPL-2.0-only files to LGPL-2.0-or-later * We don't need KIOWidgets ==== kleopatra ==== Version update (20.08.3 -> 20.12.1) Subpackages: kleopatra-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - Changes since 20.11.80: * Make it compile with libgpg-error < 1.36 - Drop upstream patch: * 0001-Make-it-compile-with-libgpg-error-1.36.patch - Add patch to fix build with older libgpg-error versions: * 0001-Make-it-compile-with-libgpg-error-1.36.patch - Update to 20.11.80 * New feature release - Too many changes to list here. ==== klines ==== Version update (20.08.3 -> 20.12.0) Subpackages: klines-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - No code change since 20.08.3 ==== kmag ==== Version update (20.08.3 -> 20.12.1) Subpackages: kmag-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * Port away from deprecated Qt::MidButton ==== kmahjongg ==== Version update (20.08.3 -> 20.12.0) Subpackages: kmahjongg-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * make pos a quint32 which is what QRandomGenerator::bounded returns * Port to QRandomGenerator ==== kmail ==== Version update (20.08.3 -> 20.12.1) Subpackages: kmail-application-icons kmail-lang ktnef - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes since 20.08.3, only listing bugfixes: * Fix Bug 426943 - Composer settings dialog: Word wrap at column is limited to 78 (kde#426943) * Fix Bug 427916 - User Feedback string about "Account configured in KMail" is misleading (kde#427916) ==== kmail-account-wizard ==== Version update (20.08.3 -> 20.12.1) Subpackages: kmail-account-wizard-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Fix copyright * Modernize code * If include is define in .h remove it if it's defined in .cpp too (scripted) * Remove NO_REGENERATE_MIME as now UPDATE_XDG_MIMETYPES uses -n * Time to increase version * Convert headers to SPDX format ==== kmailtransport ==== Version update (20.08.3 -> 20.12.1) Subpackages: kmailtransport-lang libKF5MailTransport5 libKF5MailTransportAkonadi5 - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Modernize code * Fix generate pri file * If include is define in .h remove it if it's defined in .cpp too (scripted) * Time to increase version * SmtpJob: use the password from the KPasswordDialog * Port QRegExp to QRegularExpression * Put back KIO in the package search * Remove KIOCore dependancy ==== kmbox ==== Version update (20.08.3 -> 20.12.1) - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Use "using" here too * Modernize code (using auto) * Fix info about qmake dep * Fix generate pri file * Time to increase version * Modernize code ==== kmenuedit5 ==== Version update (5.20.4 -> 5.20.5) Subpackages: kmenuedit5-lang - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== kmime ==== Version update (20.08.3 -> 20.12.1) Subpackages: kmime-lang libKF5Mime5 - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes to list here. ==== kmines ==== Version update (20.08.3 -> 20.12.0) Subpackages: kmines-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Port away from deprecated KRandomSequence * Port away from deprecated Qt::MidButton * Add new 'Explore with...' option to the docs * Reveal cells by clicking on numbers ==== kmousetool ==== Version update (20.08.3 -> 20.12.1) Subpackages: kmousetool-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Fix indentation and unused variable * Enable high dpi support * If include is define in .h remove it if it's defined in .cpp too (scripted) * Remove explicit ECM_KDE_MODULE_DIR * Update org.kde.kmousetool.appdata.xml ==== kmouth ==== Version update (20.08.3 -> 20.12.0) Subpackages: kmouth-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * Remove explicit ECM_KDE_MODULE_DIR ==== kmplot ==== Version update (20.08.3 -> 20.12.0) Subpackages: kmplot-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * Remove explicit ECM_KDE_MODULE_DIR * Avoid casting from ASCII ==== knavalbattle ==== Version update (20.08.3 -> 20.12.0) Subpackages: knavalbattle-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * We use QRandomGenerator => we need qt5.10 min * Add Readme ==== knetwalk ==== Version update (20.08.3 -> 20.12.0) Subpackages: knetwalk-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) ==== knewstuff ==== Version update (5.76.0 -> 5.77.0) Subpackages: knewstuff-imports libKF5NewStuff5 libKF5NewStuff5-lang libKF5NewStuffCore5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Too many changes since 5.76.0, only listing bugfixes: * Reuse QWidgets dialog (kde#416328) * Fix entry disappearing too early from updatable page (kde#427801) * Remove entry from cache before inserting new entry (kde#424919) ==== knotes ==== Version update (20.08.3 -> 20.12.1) Subpackages: knotes-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Fix build on windows * It's x11 specific * It's already in lib * Modernize code * If include is define in .h remove it if it's defined in .cpp too (scripted) * Remove not implemented method * Time to increase version * Remove reference to kdepim-apps-libs * Convert license headers to SPDX format * Define AKONADI_SEARCH_VERSION ==== knotifications ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5Notifications5 libKF5Notifications5-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Remove redundant setLayout() call * Don't pass transient hint (kde#422042) * Add SPDX license statement for the impl on macOS * Fix case-sensitive error of AppKit header on macOS * Do not invoke invalid notification actions * Fix memory handling for notifybysnore ==== knotifyconfig ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5NotifyConfig5 libKF5NotifyConfig5-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Pass parent to Q*Layout ctor instead of calling setLayout() ==== kolf ==== Version update (20.08.3 -> 20.12.0) Subpackages: kolf-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * Port away from KRandom ==== kollision ==== Version update (20.08.3 -> 20.12.0) Subpackages: kollision-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - No code change since 20.08.3 ==== kolourpaint ==== Version update (20.08.3 -> 20.12.0) Subpackages: kolourpaint-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - Changes since 20.11.80: * Don't grab/release keyboard to get key events. Use setFocus() instead (kde#405991) - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * Make GitLab render the README ==== kompare ==== Version update (20.08.3 -> 20.12.1) Subpackages: kompare-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 ==== konquest ==== Version update (20.08.3 -> 20.12.0) Subpackages: konquest-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) ==== konsole ==== Version update (20.08.3 -> 20.12.1) Subpackages: konsole-part konsole-part-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - Changes since 20.12.0: * Correct columns size with highlightScrolledLines (kde#429600) * Only link konsoleprofile to konsoleprivate (kde#430492) * Revert 'Fix bold character color paint' - Dropped patches, now upstream: * Only-link-konsoleprofile-to-konsoleprivate.patch - Add Only-link-konsoleprofile-to-konsoleprivate.patch to fix choosing a profile in the "New Tab" button's menu (boo#1180311, kde#424986), and possible crashes on exit (kde#430492) - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - Changes since 20.11.90: * Fix bold character color paint (kde#405345) * Require cmake 3.13 * SessionController: don't delete actions removed from QMenu manually * Revert "Uses SessionDisplayConnection to connect sessions and displays." - Update to 20.11.90 * New feature release - Changes since 20.11.80: * SessionController: iterate over a const container * SessionContoller: fix crash when closing session from Konsole KPart (kde#429538) - Update to 20.11.80 * New feature release - Too many changes to list here. ==== kontact ==== Version update (20.08.3 -> 20.12.1) Subpackages: kontact-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Drop obsolete build requirements - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Modernize code * If include is define in .h remove it if it's defined in .cpp too (scripted) * Time to increase version * Use qobject_cast here * Convert license headers to SPDX format * Add comment about cid * Clean up code * Start to remove KPrefsModule support ==== kontactinterface ==== Version update (20.08.3 -> 20.12.1) Subpackages: kontactinterface-lang libKF5KontactInterface5 - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Fix generate pri file * If include is define in .h remove it if it's defined in .cpp too (scripted) * Time to increase version ==== konversation ==== Version update (1.7.7 -> 20.12.1) Subpackages: konversation-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - Changes since 20.12.0: * Fix shell scripts to also find qdbus-qt5 * Handle \ in nicks when opening new query in ircview (kde#431045) * Use SSL for the server created by default * Don't allow spaces in ident and nick inputs (kde#422146) * Fix missed handling of a irc:// url cmdl arg on app start (kde#391698) - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - Changes since 20.11.90: * Remove X-KDE-ServiceTypes=DBUS/InstantMessenger (left-over from KIMProxy) * Fix possible memory leak in UPnPRouter - Update to 20.11.90 * New feature release - Changes since 20.11.80: * Make hisc-apps-konversation.svgz an actually qzip'ed file * Remove unused decoder.h * Fix memory leak in ChannelDialog as well * Fix possible memory leak in ServerDialog * Fixed selected treeview index if activated by a notification - Update to 20.11.80. * New feature release - konversation is now released using the KDE release service. ==== kopete ==== Version update (20.08.3 -> 20.12.1) Subpackages: kopete-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - No code change since 20.08.3 ==== korganizer ==== Version update (20.08.3 -> 20.12.1) Subpackages: korganizer-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - Changes since 20.12.0: * Recognize selection of different dates of a recurring incidence * Use the same icons in the Actions menu as are used in the pop-up menu * Do not double-delete * collectionview: Show correct tooltip - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes to list here. ==== kpackage ==== Version update (5.76.0 -> 5.77.0) Subpackages: kpackage-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Drop X-KDE-PluginInfo-Depends ==== kparts ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5Parts5 libKF5Parts5-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Deprecate embed() method, for lack of usage * Make KParts use KPluginMetaData instead of KAboutData ==== kpat ==== Version update (20.08.3 -> 20.12.0) Subpackages: kpat-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Set WITH_BH_SOLVER=OFF on Leap as libblack-hole-solver is not available - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * Fix pressing alt+G and Enter/Return redeals current game (kde#408931) * cmake: install knsrc files in newer ECM 5.58.0+ location * Start new deal when double clicking after game is won (kde#422825) * Make the default of WITH_BH_SOLVER "ON" ==== kpeople5 ==== Version update (5.76.0 -> 5.77.0) Subpackages: kpeople5-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kpimtextedit ==== Version update (20.08.3 -> 20.12.1) Subpackages: kpimtextedit-lang libKF5PimTextEdit5 - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes to list here. ==== kpkpass ==== Version update (20.08.3 -> 20.12.1) Subpackages: libKPimPkPass5 - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Add workarounds for known JSON syntax errors in pass.json * Remove NO_REGENERATE_MIME as now UPDATE_XDG_MIMETYPES uses -n * Time to increase version * Pass QLatin1String by value (clazy check) * Don't duplicate SPDX headers ==== kplotting ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kpty ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5Pty5 libKF5Pty5-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kqtquickcharts ==== Version update (20.08.3 -> 20.12.0) - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Remove explicit ECM_KDE_MODULE_DIR * Library project has no user visible strings ==== kquickcharts ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Too many changes to list here. ==== krb5 ==== Version update (1.18.2 -> 1.18.3) Subpackages: krb5-client - Update to 1.18.3 * Fix a denial of service vulnerability when decoding Kerberos protocol messages. * Fix a locking issue with the LMDB KDB module which could cause KDC and kadmind processes to lose access to the database. * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded and unloaded while libkrb5support remains loaded. ==== krdc ==== Version update (20.08.3 -> 20.12.0) Subpackages: krdc-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - Changes since 20.11.80: * org.kde.krdc.appdata.xml: add <content_rating> - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Fix mouse wheel scaling same way as click ==== kreversi ==== Version update (20.08.3 -> 20.12.0) Subpackages: kreversi-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * Compile without deprecated method ==== krfb ==== Version update (20.08.3 -> 20.12.0) Subpackages: krfb-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes since 20.08.3, only listing bugfixes: * Compensate for global scale factor when using xcb fb plugin (kde#419814) - Drop upstream patches: * 0001-Declare-and-use-logging-categories.patch * 0001-Replace-KLineEdit-with-QLineEdit.patch ==== kross ==== Version update (5.76.0 -> 5.77.0) Subpackages: kross-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kruler ==== Version update (20.08.3 -> 20.12.1) Subpackages: kruler-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Remove not implmemented method ==== krunner ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Do not use explicitly deleted constructor in autotests * Deprecate KDE4 package remnants * Remove unneeded test * Use isValid() method instead of nullptr check * Simplify nullptr checks * Make use of new KPluginMetaData plugin constructor support of KPluginLoader * Add trailing commas * Add clang-format target * Rework internals of match id methods and add tests for it ==== kscreen5 ==== Version update (5.20.4 -> 5.20.5) Subpackages: kscreen5-lang kscreen5-plasmoid - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== kscreenlocker ==== Version update (5.20.4 -> 5.20.5) Subpackages: kscreenlocker-lang libKScreenLocker5 - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== kservice ==== Version update (5.76.0 -> 5.77.0) Subpackages: kservice-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * [kapplicationtrader] Fix API docs * KSycoca: recreate DB when version < expected version * KSycoca: Keep track of resources Files of KMimeAssociation * KSycoca: ensure extrafiles are ordered for comparison * KSycoca: avoid database rebuild if XDG_CONFIG_DIRS contains duplicates * Fix duplicate detection check ==== kshisen ==== Version update (20.08.3 -> 20.12.0) Subpackages: kshisen-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) ==== ksirk ==== Version update (20.08.3 -> 20.12.0) Subpackages: ksirk-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * Port away from KIconThemes * Port away from KRandom * Fix KNS deprecations ==== ksmtp ==== Version update (20.08.3 -> 20.12.1) Subpackages: ksmtp-lang libKPimSMTP5 - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Modernize code * Time to increase version * Convert license headers to SPDX format ==== kspaceduel ==== Version update (20.08.3 -> 20.12.0) Subpackages: kspaceduel-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * Fix mistake in KRandomSequence -> QRandomGenerator porting * KRandomSequence -> QRandomGenerator ==== ksquares ==== Version update (20.08.3 -> 20.12.0) Subpackages: ksquares-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * We use QRandomGenerator => we need qt5.10 min ==== ksshaskpass5 ==== Version update (5.20.4 -> 5.20.5) Subpackages: ksshaskpass5-lang - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== ksudoku ==== Version update (20.08.3 -> 20.12.0) Subpackages: ksudoku-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * OPENGL_SUPPORT flag exists, so make Qt5OpenGL optional as well * If include is define in .h remove it if it's defined in .cpp too (scripted) * Link to OpenGL::GL instead of OpenGL::OpenGL * Link against GLU (kde#426088) ==== ksysguard5 ==== Version update (5.20.4 -> 5.20.5) Subpackages: ksysguard5-lang - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== ksystemlog ==== Version update (20.08.3 -> 20.12.0) Subpackages: ksystemlog-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * Remove explicit ECM_KDE_MODULE_DIR * fix compile with Qt < 5.15 * Make it compile without deprecated method * Allow to execute unittests on Windows * Replace url().path() with url().toLocalFile() * Don't list coredump files * Fix leak * Win: Remove kdewin leftover ==== kteatime ==== Version update (20.08.3 -> 20.12.0) Subpackages: kteatime-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Avoid manual casting of signals/slots * If include is define in .h remove it if it's defined in .cpp too (scripted) * Remove explicit ECM_KDE_MODULE_DIR ==== ktexteditor ==== Version update (5.76.0 -> 5.77.0) Subpackages: ktexteditor-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Port KComboBox to QComboBox * use KSyntaxHighlighting themeForPalette * fix i18n call, missing argument (kde#429096) * minor improvements to theme search * Improve the automatic theme selection ==== ktextwidgets ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5TextWidgets5 libKF5TextWidgets5-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Pass parent to Q*Layout ctor instead of calling setLayout() ==== ktimer ==== Version update (20.08.3 -> 20.12.0) Subpackages: ktimer-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * Fix clazy warning * Remove unneeded includes ==== ktnef ==== Version update (20.08.3 -> 20.12.1) - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Modernize code * Fix generate pri file * If include is define in .h remove it if it's defined in .cpp too (scripted) * Time to increase version ==== ktouch ==== Version update (20.08.3 -> 20.12.0) Subpackages: ktouch-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - Changes since 20.11.90: * Fix visual artifacts in new versions of QT (kde#427923) - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes to list here. ==== kturtle ==== Version update (20.08.3 -> 20.12.0) Subpackages: kturtle-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Add missing kdoctools_install * If include is define in .h remove it if it's defined in .cpp too (scripted) * Remove explicit ECM_KDE_MODULE_DIR * Manual formatting of license headers * Manual conversion of exotic file types * Remove obsolete COPYING file * Add license texts according to REUSE specification * Convert license statements to SPDX expressions * add content rating * Improve i18n tooling ==== kubrick ==== Version update (20.08.3 -> 20.12.0) Subpackages: kubrick-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) ==== kunitconversion ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5UnitConversion5 libKF5UnitConversion5-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kvm_stat ==== Version update (5.9.12 -> 5.10.4) - Get rid of the stale patch file. - Remove broken patch tools-kvm_stat-explicitly-reference-python3.patch * the patch does not apply any longer, at least on top of Kernel source packages does the same (i.e., replacing /usr/bin/env) in their own kernel-source.spec; * therefore, let's take care of that directly inside of our own spec file instead, which is a solution that always work, no matter what has been done in the Kernel source package. - Fix kernel version comparison for selectively applying patches * so that it won't break when, e.g., 5.10.0 hits Factory ==== kwallet ==== Version update (5.76.0 -> 5.77.0) Subpackages: kwallet-tools kwallet-tools-lang kwalletd5 kwalletd5-lang libKF5Wallet5 libkwalletbackend5-5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kwalletmanager5 ==== Version update (20.08.3 -> 20.12.1) Subpackages: kwalletmanager5-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Use systemsettings5 for Exec line * If include is define in .h remove it if it's defined in .cpp too (scripted) * Port away from deprecated KToolInvocation::startServiceByDesktopName * Remove unused include * align naming with elsewhere in the stack * [KWalletEditor] Use new kwallet methods to populate the view list(s) ==== kwayland ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Compile without deprecated method ==== kwayland-integration ==== Version update (5.20.4 -> 5.20.5) - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== kwayland-server ==== Version update (5.20.4 -> 5.20.5) - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== kwidgetsaddons ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5WidgetsAddons5 libKF5WidgetsAddons5-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Pass parent to Q*Layout ctor instead of calling setLayout() * Don't emit twice passwordChanged * We require Qt 5.13 now, so remove ifdef * KEditListWidget: fix runtime warning from QLayout * typo-- * Add KMessageDialog, an async-centric variant of KMessageBox * Restore the old default popup mode of KActionMenu * Port KActionMenu to QToolButton::ToolButtonPopupMode ==== kwin5 ==== Version update (5.20.4 -> 5.20.5) Subpackages: kwin5-lang - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - Changes since 5.20.4: * scene: Fix window pixmap traversal order * screencasting: fix build * Screencast: support BGRx format for backwards compatibility with WebRTC ==== kwindowsystem ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5WindowSystem5 libKF5WindowSystem5-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Pass parent to Q*Layout ctor instead of calling setLayout() * Load statically linked integration plugins * Portaway from pid() to processId() ==== kwordquiz ==== Version update (20.08.3 -> 20.12.0) Subpackages: kwordquiz-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * Remove explicit ECM_KDE_MODULE_DIR * Port away from KIconThemes * Fix KNS deprecations ==== kwrited5 ==== Version update (5.20.4 -> 5.20.5) - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== kxmlgui ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5XmlGui5 libKF5XmlGui5-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Pass parent to Q*Layout ctor instead of calling setLayout() * autotests: fix for Windows by using GenericDataLocation * We depend on Qt 5.13 now so we can remove this check * Introduce HideLibraries and deprecate HideKdeVersion * Fix build without KGlobalAccel * Rewrite KKeySequenceWidget to use KeySequenceRecorder ==== libKF5ModemManagerQt ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== libKF5NetworkManagerQt ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== libappindicator3 ==== Subpackages: libappindicator3-1 typelib-1_0-AppIndicator3-0_1 - Provide RH used libappindicator symbol, so third party rpms like Mailspring won't complain about missing dependencies ==== libcdr ==== - Add icu-68.patch: fix build with ICU 68 ==== libdrm ==== Version update (2.4.102 -> 2.4.103) Subpackages: libdrm-devel libdrm2 libdrm_amdgpu1 libdrm_etnaviv1 libdrm_exynos1 libdrm_freedreno1 libdrm_nouveau2 libdrm_radeon1 libdrm_tegra0 - update to 2.4.103: * xf86drm.c: Use integer logarithm. * amdgpu: only enable security tests on raven family * amdgpu: sync up amdgpu_drm.h with latest from kernel * amdgpu: add marketing names from 20.40 * intel: add INTEL_DG1_IDS to the pciids list * amdgpu: add device IDs for Raven, Picasso and Renoir * intel: sync i915_pciids.h with kernel * amdgpu: Add Device IDs for Embedded Raven2 platforms * intel: sync i915_pciids.h with kernel * xf86drm.c: fix build failure * core: use `O_RDONLY` instead of ambiguous `0` flag * lots of tests/amdgpu updates ==== libe-book ==== - Add icu-68.patch: fix build with ICU 68 ==== libebml ==== Version update (1.4.0 -> 1.4.1) - Update to version 1.4.1 * Fixed a case EbmlMaster::Read where the element returned via UpperEltFound and FountElt points to a just-deleted element, causing callers to think the memory returned is valid, potentially leading to use-after-free/double-free errors. This can happen if the specific element's Read function throws an exception when encountering certain invalid data constellations. ==== libepoxy ==== Version update (1.5.4 -> 1.5.5) - Update to version 1.5.5: + Remove Python 2 support. + Remove Autotools support. + Use EGL_NO_X11 to disable X11 headers. + Use call convention for mock function. + Return correct version of GLSL on GLES2. + Rely on Meson's darwin_versions option. - Drop Lower-the-minimum-required-version-of-Meson.patch: New minimum meson is 0.48. ==== liberation-fonts ==== Version update (2.1.1 -> 2.1.2) - update to 2.1.2: - Resolves #25: liberation-fonts doesn't have proper <==> symbol - Resolves #33: Liberation Mono: U+20BF is too wide - Resolves #14: Liberation mono fonts are not recognized as monospace by fontconfig and cairo ==== libgravatar ==== Version update (20.08.3 -> 20.12.1) Subpackages: libKF5Gravatar5 libgravatar-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Modernize code * If include is define in .h remove it if it's defined in .cpp too (scripted) * Time to increase version * Remove unused LIBRARY_NAMELINK * Convert license headers to SPDX format ==== libgsasl ==== Version update (1.8.1 -> 1.10.0) - update to 1.10.0: * SCRAM-SHA-256 and SCRAM-SHA-256-PLUS (RFC 7677) * New SCRAM crypto helper APIs * SCRAM server: Support for password-less usage * SCRAM: Sets SCRAM_ITER/SCRAM_SALT/SCRAM_SALTED_PASSWORD * SCRAM, GS2, and GSSAPI no longer retrieve the TLS channel binding data (property GSASL_CB_TLS_UNIQUE) during gsasl_client_start() or gsasl_server_start() * A number of legacy and less secure interfaces deprecated * New APIs for hex encoding/decoding - add upstream signing key and validate source signature - refresh spec file - build with all warnings and treat them as errors ==== libhandy ==== Version update (1.0.2 -> 1.0.3) Subpackages: libhandy-1-0 typelib-1_0-Handy-1_0 - Update to version 1.0.3: + Fix build warnings with newer GCC. + HdyActionRow: Clarify hdy_action_row_get_icon_name() documentation. + HdyCarousel: Fix drawing cache invalidation on resize. + HdyComboRow: Use the right checkmark icon. + HdyLeaflet and HdyDeck: Increase the edge swipe area size. + HdyKeypad: Fix typing the '+' symbol. + HdyPreferencesGroup: - Fix a memory leak when destroying the widget. - Don't show empty title and description when using gtk_widget_show_all(). + HdySwipeTracker: - Correctly transform widget coordinates for touchpad swipes. - Fix a memory leak. ==== libheif ==== Version update (1.9.1 -> 1.10.0) - Build with dav1d and rav1e support, do this via: + Add pkgconfig(dav1d) BuildRequires. + Add conditional pkgconfig(rav1e) BuildRequires (currently Tumbleweed only). - Drop libheif-lang Recommends: Package does not exist. - Re-download tarball and check with osc service runall download_files, all ok. - Updated to version 1.10.0: * New API: may access all (vendor-dependent) auxiliary images (e.g. hdrgainmap, semanticskinmatte, ...). * When ICC profile is present, will now write two color boxes (nclx and ICC) into AVIF files. Also reads files with two color boxes. * Alpha image is now saved as monochrome. * Loading of 16bit greyscale PNGs in heif_enc. * Deprecated heif_enc option "-E". * Remove dependency on alloca(). * Bug fixes. ==== libical-glib ==== - Add 0001-Fix-build-with-icu-68.1.patch: fix build with icu 68.1. ==== libimagequant ==== Version update (2.12.6 -> 2.13.1) - update to 2.13.1: * Support OpenMP in clang * speed improvements ==== libiscsi ==== Version update (1.19.0+git.20201023 -> 1.19.0+git.20201217) - Update to version 1.19.0+git.20201217: * Revert "specify number of blocks in write_same command" * iser: fix segmentation fault when task management pdu is received * iser: fix segmentation fault when async message pdu is received ==== libjpeg-turbo ==== Version update (2.0.5 -> 2.0.6) Subpackages: libjpeg8 libturbojpeg0 - version update to 2.0.6 1. Fixed "using JNI after critical get" errors that occurred on Android platforms when using any of the YUV encoding/compression/decompression/decoding methods in the TurboJPEG Java API. 2. Fixed or worked around multiple issues with `jpeg_skip_scanlines()`: - Fixed segfaults or "Corrupt JPEG data: premature end of data segment" errors in `jpeg_skip_scanlines()` that occurred when decompressing 4:2:2 or 4:2:0 JPEG images using merged (non-fancy) upsampling/color conversion (that is, when setting `cinfo.do_fancy_upsampling` to `FALSE`.) 2.0.0[6] was a similar fix, but it did not cover all cases. - `jpeg_skip_scanlines()` now throws an error if two-pass color quantization is enabled. Two-pass color quantization never worked properly with `jpeg_skip_scanlines()`, and the issues could not readily be fixed. - Fixed an issue whereby `jpeg_skip_scanlines()` always returned 0 when skipping past the end of an image. 3. The Arm 64-bit (Armv8) Neon SIMD extensions can now be built using MinGW toolchains targetting Arm64 (AArch64) Windows binaries. 4. Fixed unexpected visual artifacts that occurred when using `jpeg_crop_scanline()` and interblock smoothing while decompressing only the DC scan of a progressive JPEG image. 5. Fixed an issue whereby libjpeg-turbo would not build if 12-bit-per-component JPEG support (`WITH_12BIT`) was enabled along with libjpeg v7 or libjpeg v8 API/ABI emulation (`WITH_JPEG7` or `WITH_JPEG8`.) - modified sources % libjpeg-turbo.keyring ==== libkcddb ==== Version update (20.08.3 -> 20.12.1) Subpackages: libKF5Cddb5 libkcddb-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Use systemsettings5 instead of kcmshell5 ==== libkcompactdisc ==== Version update (20.08.3 -> 20.12.1) Subpackages: libKF5CompactDisc5 libkcompactdisc-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Drop no longer needed dependency on KCoreAddons * Port away from KRandomSequence * Fix for the CD not being recognised if it is not in the first drive ==== libkdcraw ==== Version update (20.08.3 -> 20.12.1) - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - No code change since 20.08.3 ==== libkdecoration2 ==== Version update (5.20.4 -> 5.20.5) Subpackages: libkdecorations2-5 libkdecorations2-5-lang libkdecorations2private7 - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== libkdegames ==== Version update (20.08.3 -> 20.12.0) Subpackages: kdegames-carddecks-default libkdegames-lang libkf5kdegames6 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * Increase KF5_MIN_VERSION ==== libkdepim ==== Version update (20.08.3 -> 20.12.1) Subpackages: libKF5Libkdepim5 libkdepim-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - Changes since 20.11.80: * Drop unnecessary KGuiAddons dependency - Update to 20.11.80 * New feature release - Too many changes to list here. ==== libkeduvocdocument ==== Version update (20.08.3 -> 20.12.0) Subpackages: libKEduVocDocument5 libkeduvocdocument-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) * remove unused krandomsequence include * Port to nullptr ==== libkexiv2 ==== Version update (20.08.3 -> 20.12.1) - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - No code change since 20.08.3 ==== libkgapi ==== Version update (20.08.3 -> 20.12.1) Subpackages: libKPimGAPICalendar5 libKPimGAPIContacts5 libKPimGAPICore5 libKPimGAPITasks5 libkgapi-lang sasl2-kdexoauth2 - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes since 20.08.3, only listing bugfixes: * Remove duplicate "gContact$groupMembershipInfo" value in mock fetch response. (kde#419629) ==== libkipi ==== Version update (20.08.3 -> 20.12.1) Subpackages: libKF5Kipi32_0_0 libkipi-data - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Remove extra ';' ==== libkleo ==== Version update (20.08.3 -> 20.12.1) Subpackages: libKF5Libkleo5 libkleo-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes to list here. ==== libkmahjongg ==== Version update (20.08.3 -> 20.12.0) Subpackages: libKF5KMahjongglib5 libkmahjongg-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - No code change since 20.08.3 ==== libkolabxml ==== - Update 0001-Make-sure-boost-is-found-when-using-libkolabxml.patch to make sure we only use CMake's FindBoost.cmake module. (boo#1180633) ==== libkomparediff2 ==== Version update (20.08.3 -> 20.12.1) Subpackages: libkomparediff2-5 libkomparediff2-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - No code change since 20.08.3 ==== libksane ==== Version update (20.08.3 -> 20.12.1) Subpackages: libKF5Sane5 libksane-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Disable multi-selection for Automatic Document Feeder (kde#415749) * Add wiggle room for page sizes to fit in the scan-area (kde#424010) ==== libkscreen2 ==== Version update (5.20.4 -> 5.20.5) Subpackages: libKF5Screen7 libkscreen2-plugin - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== libksieve ==== Version update (20.08.3 -> 20.12.1) Subpackages: libksieve-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes to list here. ==== libksysguard5 ==== Version update (5.20.4 -> 5.20.5) Subpackages: libksysguard5-helper libksysguard5-imports libksysguard5-lang - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - Changes since 5.20.4: * Always emit sensorMetaDataChanged() when receiving a metaData update ==== libktorrent ==== Version update (2.2.0 -> 20.12.0) Subpackages: libKF5Torrent6 libktorrent-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80. * New feature release - libktorrent is now released using the KDE release service. - Use %cmake_build instead of %make_jobs ==== libopenmpt ==== Version update (0.5.0 -> 0.5.4) - Update to 0.5.4: * AMS: An upper bound for uncompressed sample size is now established to avoid memory exhaustion from malformed files. * DMF: Support early format beta versions (in particular versions 1-4). * MED: Also use octave wrapping in 8-channel mode for MMD0/MMD1 modules. * MED: If 8-channel mode is activated, ignore BPM mode. * MED: Emulate tempo commands F01 and F02 quirk. * MED: Tempo commands below 32 BPM were interpreted as tempo slides. * IMF: Instrument sample mapping was off by one octave, notable in the guitar part of Astaris by Karsten Koch. Changes in 0.5.3: * [Sec] Possible hang if a MED file claimed to contain 256 songs. * [Bug] libopenmpt: openmpt::is_extension_supported2() exported symbol was missing (C++). * [Bug] openmpt::module::set_position_seconds sometimes behaved as if the song end was reached when seeking into a pattern loop and in some other corner cases. * Increase threshold for ignoring panning commands from 820 to 830. * Subsong names now fall back to the first pattern?s name if empty. * MO3: Avoid certain ModPlug hacks from being fixed up twice, which could lead to e.g. very narrow pan swing range for old OpenMPT IT files saved with a recent MO3 encoder version. * MO3: Some files with corrupted envelope data could be rejected completely (normally libopenmpt should fix up the envelope data). * MO3: Song metadata didn?t correctly identify MPTM as source format (it appeared as IT instead). * STM: Change tempo computation to behave like Scream Tracker 2.3 instead of Scream Tracker 2.2, as the playback frequencies we use for sample playback are closer to those of Scream Tracker 2.3. * PLM: Percentage offset (Mxx) was slightly off. * WOW: Fix loading of several files and harden WOW detection. Changes in 0.5.2: * PP20: The first few bytes of some files were not decompressed properly, making some files unplayable (depending on the original format). Changes in 0.5.1: * [Bug] libopenmpt/libopenmpt.h failed to compile with LIBOPENMPT_NO_DEPRECATE defined. * MPTM: Qxy now retriggers OPL notes if new compatibility flag is set in file. * MPTM: Bring back old OPL note end-of-envelope behaviour for files made with OpenMPT 1.28. * IT: Global volume slides with both nibbles set preferred the ?slide up? nibble over the ?slide down? nibble in old OpenMPT versions, unlike other slides. Such old files are now imported correctly again. * IT: Fixed an edge case where, if the filter hit full cutoff / no resonance on the first tick of a row where a new delayed note would be triggered, the filter would be disabled even though it should stay active. Fixes trace.it by maddie. * OXM: Some sample loops were not imported correctly. * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT 1.23.05.00. The arpeggios in Binary World by Dakota now play correctly again. * S3M: Support old-style sample pre-amp value in very early S3M files. * S3M: Only force-enable fast slides for files ST 3.00. Previously, any S3M file made with an ST3 version older than 3.20 enabled them. * S3M: Only apply volume and middle-C speed on instrument change if the new sample slot has sample data. * MOD: Fix an infinite loop in GamerMan by MrGamer by playing non-ProTracker MODs more like FT2 would. * M15: Improve tracker detection heuristics to never assume SoundTracker 2.0 if there is a huge number of Dxx commands, as that is a definite hint that they should be treated as volume slides. Fixes Monty On The Run by Master Blaster. * MO3: Support OPL patches in MO3 files created from MPTM and S3M * DBM: If a global pattern command would be lost because both effect commands in a cell would have to go into the regular effect column (e.g. a speed and a tempo command), the lost command is now attempted to be written into a different cell on the same row. Fixes ?Party-Question V? by grogon. ==== libproxy ==== Version update (0.4.15 -> 0.4.17) - Update to version 0.4.17: + python bindings: fix "TypeError: argtypes must be a sequence of types". - Drop 147.patch: fixed upstream. - Add 147.patch: python bindings: fix "TypeError: _argtypes_ must be a sequence of types". - Update to version 0.4.16: + Port to, and require, SpiderMonkey 6. + Use closesocket() instead of close() on Windows. + Add symbol versions - be ready to introduce new APIs as needed. + Add public px_proxy_factory_free_proxies function. + Add PacRunner config backend (largely untested; feedback welcome!). + Small performance improvements. + pxgsettings: use the correct syntax to connect to the changed signal (silences annoying output on console). + Support python3 up to version 3.9. + Fix buffer overflow when PAC is enabled (CVE-2020-26154). + Rewrite url::recvline to be nonrecursive (CVE-2020-25219). + Remove nonfunctional and crashy pacrunner caching. + Never use system libmodman (no other consumers, not maintained). - Drop upstream merged patches: + libproxy-python3.7.patch + libproxy-pxgsettings.patch + libproxy-CVE-2020-25219.patch libproxy-fix-pac-buffer-overflow.patch - Create new sub-package libproxy1-config-pacrunner. ==== libproxy-plugins ==== Version update (0.4.15 -> 0.4.17) Subpackages: libproxy1-config-gnome3 libproxy1-config-kde libproxy1-networkmanager libproxy1-pacrunner-webkit - Update to version 0.4.17: + python bindings: fix "TypeError: argtypes must be a sequence of types". - Drop 147.patch: fixed upstream. - Add 147.patch: python bindings: fix "TypeError: _argtypes_ must be a sequence of types". - Update to version 0.4.16: + Port to, and require, SpiderMonkey 6. + Use closesocket() instead of close() on Windows. + Add symbol versions - be ready to introduce new APIs as needed. + Add public px_proxy_factory_free_proxies function. + Add PacRunner config backend (largely untested; feedback welcome!). + Small performance improvements. + pxgsettings: use the correct syntax to connect to the changed signal (silences annoying output on console). + Support python3 up to version 3.9. + Fix buffer overflow when PAC is enabled (CVE-2020-26154). + Rewrite url::recvline to be nonrecursive (CVE-2020-25219). + Remove nonfunctional and crashy pacrunner caching. + Never use system libmodman (no other consumers, not maintained). - Drop upstream merged patches: + libproxy-python3.7.patch + libproxy-pxgsettings.patch + libproxy-CVE-2020-25219.patch libproxy-fix-pac-buffer-overflow.patch - Create new sub-package libproxy1-config-pacrunner. ==== libqt5-qtbase ==== Subpackages: libQt5Concurrent5 libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5OpenGL5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-mysql libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5 libqt5-qtbase-platformtheme-gtk3 - Add patch to avoid excessive use of memory by lconvert: * 0001-Fix-allocated-memory-of-QByteArray.patch ==== libqt5-qtwebengine ==== - Fix build with ICU 68: * Added icu-68.patch * Added icu-68-2.patch ==== libqt5-qtwebkit ==== Subpackages: libQt5WebKit5 libQt5WebKit5-imports libQt5WebKitWidgets5 - Add icu-68.patch: fix build with ICU 68 ==== librdkafka ==== Version update (1.5.2 -> 1.5.3) - update to 1.5.3: * Fix a use-after-free crash when certain coordinator requests were retried. * Consumer would not filter out messages for aborted transactions if the messages were compressed (#3020). * Consumer destroy without prior `close()` could hang in certain cgrp states (@gridaphobe, #3127). * Fix possible null dereference in `Message::errstr()` (#3140). * The `roundrobin` partition assignment strategy could get stuck in an endless loop or generate uneven assignments in case the group members had asymmetric subscriptions (e.g., c1 subscribes to t1,t2 while c2 subscribes to t2,t3). (#3159) ==== libreoffice ==== Subpackages: libreoffice-base libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-en libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit - LO-L3: Shadow effect(s) for table completely missing - part 1 and 2 * bsc1178944.diff * bsc1178943.diff ==== libstorage-ng ==== Version update (4.3.72 -> 4.3.78) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - (temporary) add patch for efivars detection - Translated using Weblate (Finnish) (bsc#1149754) - 4.3.78 - Translated using Weblate (Russian) (bsc#1149754) - 4.3.77 - Translated using Weblate (French) (bsc#1149754) - 4.3.76 - merge gh#openSUSE/libstorage-ng#788 - remove Travis support (replaced by GitHub Actions) - 4.3.75 - merge gh#openSUSE/libstorage-ng#787 - add more btrfs qgroups to remove view (bsc#1179590) - added integration test - extended documentation - 4.3.74 - merge gh#openSUSE/libstorage-ng#786 - treat btrfs parent UUID only as a "hint" (bsc#1179061) - 4.3.73 ==== libtirpc ==== Version update (1.2.6 -> 1.3.1) Subpackages: libtirpc-netconfig libtirpc3 - Fix sed call to fixup libtirpc.pc.in: as we want our tirpc to be a transparent drop-in-replacement for rpc, we move the files from /usr/include/tirpc to /usr/include. Due to an upstream change in libtirpc.pc.in, though, the existing sed call no longer matched and no longer corrected the information according to our package. - Update to libtirpc 1.3.1 - Remove AUTH_DES interfaces from auth_des.h The unsupported AUTH_DES authentication has be compiled out since commit d918e41d889 (Wed Oct 9 2019) replaced by API routines that return errors. - svc_dg: Free xp_netid during destroy - Fix memory management issues of fd locks - libtirpc: replace array with list for per-fd locks - __svc_vc_dodestroy: fix double free of xp_ltaddr.buf - __rpc_dtbsize: rlim_cur instead of rlim_max - pkg-config: use the correct replacements for libdir/includedir ==== libusb-1_0 ==== Version update (1.0.23 -> 1.0.24) - Update to version 1.0.24 * Add new platform abstraction (#252). * Add Null POSIX backend. * Add support for eventfd. * New API libusb_hotplug_get_user_data(). * Linux: Drop support for kernel older than 2.6.32. * Linux: Provide an event thread name. (#689). * Linux: Wait until all USBs have been reaped before freeing them. (#607) * Documentation fixes and improvements. * Various other bug fixes and improvements. ==== libva ==== Version update (2.9.1 -> 2.10.0) Subpackages: libva-drm2 libva-x11-2 libva2 - update to 2.10.0: * add: Pass offset and size of pred_weight_table * add: add vaCopy interface to copy surface and buffer * add: add definition for different execution * add: New parameters for transport controlled BRC were added * add: add FreeBSD support * add: add a bufer type to adjust context priority dynamically * fix: correct the api version in meson.build * fix: remove deprecated variable from va_trace.c * fix: Use va_deprecated for the deprecate variable * fix: Mark chroma_sample_position as deprecated * doc: va_dec_av1: clarifies CDEF syntax element packing * doc: [AV1] Update documented ranges for loop filter and quantization params. * doc: Update va.h for multi-threaded usages * trace: va/va_trace: ignore system gettid() on Linux ==== libva-gl ==== Version update (2.9.1 -> 2.10.0) Subpackages: libva-glx2 libva-wayland2 - update to 2.10.0: * add: Pass offset and size of pred_weight_table * add: add vaCopy interface to copy surface and buffer * add: add definition for different execution * add: New parameters for transport controlled BRC were added * add: add FreeBSD support * add: add a bufer type to adjust context priority dynamically * fix: correct the api version in meson.build * fix: remove deprecated variable from va_trace.c * fix: Use va_deprecated for the deprecate variable * fix: Mark chroma_sample_position as deprecated * doc: va_dec_av1: clarifies CDEF syntax element packing * doc: [AV1] Update documented ranges for loop filter and quantization params. * doc: Update va.h for multi-threaded usages * trace: va/va_trace: ignore system gettid() on Linux ==== libvirt ==== Subpackages: libvirt-bash-completion libvirt-client libvirt-daemon libvirt-daemon-driver-interface libvirt-daemon-driver-lxc libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lxc libvirt-daemon-qemu libvirt-libs - qemu: Fix logic bug in inactive snapshot deletion 0ddebdb4-qemu-snapshot-deletion.patch boo#1180049 ==== libxml2 ==== Subpackages: libxml2-2 libxml2-tools - Security fix: [bsc#1161521, CVE-2019-20388] * Memory leak in xmlSchemaPreRun in xmlschemas.c - Add libxml2-CVE-2019-20388.patch ==== lilv ==== Version update (0.24.6 -> 0.24.10) - update to 0.24.10: * Fix memory leaks in lv2bench * Fix various minor warnings and other code quality issues * Make lilv_world_get() use translations * Split and clean up test suite * Allow passing strings for URIs in Python API when unambiguous * Fix cases where incorrect translation is used * Fix deleting state bundles loaded from the model * Fix memory leak when dyn-manifest has no plugins (thanks Michael Fisher) * Implement state:freePath feature ==== linux-glibc-devel ==== Version update (5.9 -> 5.10) - Update to kernel headers 5.10 ==== llvm11 ==== Subpackages: clang-tools clang11 clang11-doc libLLVM11 libLTO11 libc++-devel libc++1 libc++abi-devel libc++abi1 libclang11 - Increase required RAM for aarch64 - Move BFD plugins to %{_libdir} - polly-pthread.patch: Remove, std::call_once no longer needs libpthread ==== lokalize ==== Version update (20.08.3 -> 20.12.0) Subpackages: lokalize-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Use KLanguageName instead of kf5_all_languages * Port away from deprecated Qt::MidButton * Allow non-existing file to be set as glossary * Fix compile * Update global icons with Breeze Icons ==== lskat ==== Version update (20.08.3 -> 20.12.0) Subpackages: lskat-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) ==== mailcommon ==== Version update (20.08.3 -> 20.12.1) Subpackages: libKF5MailCommon5 mailcommon-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes to list here. ==== mailimporter ==== Version update (20.08.3 -> 20.12.1) Subpackages: libKF5MailImporter5 libKF5MailImporterAkonadi5 mailimporter-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes to list here. ==== man-pages ==== Version update (5.09 -> 5.10) - version update to 5.10 * added documentation of the faccessat2() system call * added a new subsection to the signal(7) manual page that provides a "big picture" of what happens when a signal handler is executed - deleted patches - man-pages-openat2.h-location.patch (upstreamed) ==== man-pages-ja ==== Version update (20201115 -> 20201215) - version update to 20201215 * added and improved manual pages ==== mariadb ==== Subpackages: libmariadbd19 mariadb-client mariadb-errormessages - switch to bcond_with to make it easier to enable galera support via the prjconfig - fix non galera case for building ==== mbox-importer ==== Version update (20.08.3 -> 20.12.0) Subpackages: mbox-importer-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Modernize code (using auto) * Time to increase version * Add missing lib when we moved KAddressbookGrantlee * Modernize code * Convert license headers to SPDX format * Drop COPYING.DOC. This repository has no documentation ==== messagelib ==== Version update (20.08.3 -> 20.12.1) Subpackages: messagelib-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - Changes since 20.12.0: * Add Protected Header tests for SignEncryptJob * Messagecomposer: Move protected headers to signed part * Fix[messagecomposer]: Do copy all mail headers instad of reference them (kde#427091) * Fix Bug 431153 - Crash in MessageComposer::MessageFactoryNG::createForwardDigestMIME() when trying to forward a group of emails (kde#431153) * storagemodel.cpp - collectionForId() improve * Remove setRunExecutables(true), it serves no purpose with a text/html mimetype * cleanup EncryptedJobTest. * FIX[messagecomposer/cryptocomposertests]: Use EncryptJob exec instead of async variant to pass tests. - Drop obsolete build requirements - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - Changes since 20.11.80: * Fix assert when deleting a folder in kmail * Fix compilation with recent Qt 5.15 * Fix Bug 429224 - Enabling undo send results in empty return path breaking DKIM (kde#429224) * Start to fix print to pdf - Update to 20.11.80 * New feature release - Too many changes to list here. ==== milou5 ==== Version update (5.20.4 -> 5.20.5) Subpackages: milou5-lang - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== miniupnpc ==== - Fix the python subpackage generation gh#openSUSE/python-rpm-macros#79 - Support multiple python3 flavors gh#openSUSE/python-rpm-macros#66 - Don't own the whole python sitearch directory ==== mobile-broadband-provider-info ==== Version update (20190618 -> 20201225) - Update to version 20201225: * release: bump version to 20201225 * Add <name> to .doap file * th: add new provider AIS (AWN) * pl/nju mobile: Fix the balance check USSD code * trivial: fix spurious whitespaces * Add Polish MVNOs "nju mobile" and "Virgin Mobile" * Remove defunct Polish MVNOs * Update configuration for Polish operators * pl: fix APN for Polish provider PLUS * Rename Swiss provider Orange to Salt * Add APN Information for Aliv Bahamas * Add China Telecom as LTE carrier * Add SpeedTalk Mobile MVNO * Add gitltab-ci * at: add balance check and top-up code for hot.at * sg/Starhub: Add USSD command to fetch balance info * Add Airtel Malawi settings * Add a new provider: Yota (25011) * Add eSwatini mobile provider info ==== mobipocket ==== Version update (20.08.3 -> 20.12.1) - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Remove explicit ECM_KDE_MODULE_DIR ==== mozilla-nss ==== Version update (3.58 -> 3.59.1) Subpackages: libfreebl3 libfreebl3-hmac libsoftokn3 libsoftokn3-hmac mozilla-nss-certs mozilla-nss-tools - update to NSS 3.59.1 * bmo#1679290 - Fix potential deadlock with certain third-party PKCS11 modules - update to NSS 3.59 Notable changes * Exported two existing functions from libnss: CERT_AddCertToListHeadWithData and CERT_AddCertToListTailWithData Bugfixes * bmo#1607449 - Lock cert->nssCertificate to prevent a potential data race * bmo#1672823 - Add Wycheproof test cases for HMAC, HKDF, and DSA * bmo#1663661 - Guard against NULL token in nssSlot_IsTokenPresent * bmo#1670835 - Support enabling and disabling signatures via Crypto Policy * bmo#1672291 - Resolve libpkix OCSP failures on SHA1 self-signed root certs when SHA1 signatures are disabled. * bmo#1644209 - Fix broken SelectedCipherSuiteReplacer filter to solve some test intermittents * bmo#1672703 - Tolerate the first CCS in TLS 1.3 to fix a regression in our CVE-2020-25648 fix that broke purple-discord (boo#1179382) * bmo#1666891 - Support key wrap/unwrap with RSA-OAEP * bmo#1667989 - Fix gyp linking on Solaris * bmo#1668123 - Export CERT_AddCertToListHeadWithData and CERT_AddCertToListTailWithData from libnss * bmo#1634584 - Set CKA_NSS_SERVER_DISTRUST_AFTER for Trustis FPS Root CA * bmo#1663091 - Remove unnecessary assertions in the streaming ASN.1 decoder that affected decoding certain PKCS8 private keys when using NSS debug builds * bmo#670839 - Use ARM crypto extension for AES, SHA1 and SHA2 on MacOS. ==== mpg123 ==== Version update (1.26.3 -> 1.26.4) Subpackages: libmpg123-0 mpg123-openal mpg123-pulse - Update to version 1.26.4 * Clarify seeking documentation regarding samples and PCM frames. * Fix cmake build to install fmt123.h. * Some cmake build fixes, tinyalsa addition by Maarten. * libmpg123: explicitly handle some irrelevant corner cases in tabinit ==== multipath-tools ==== Version update (0.8.4+192+suse.1bc10ad -> 0.8.5+12+suse.3b0e9ca) Subpackages: kpartx libmpath0 - Update to versioni 0.8.5+12+suse.3b0e9ca * libmultipath: force map reload if udev incomplete (bsc#1178662, bsc#1172157, bsc#1175454, bsc#1176406) - Fixes from upstream 0.8.5 * multipath-tools: add MacroSAN arrays to hwtable * libmultipath: Allow discovery of USB devices (add configuration option "allow_usb_devices") - Remove compatibility code for SLE <= 12-SP2 from spec file ==== mutt ==== Version update (2.0.3 -> 2.0.4) Subpackages: mutt-doc mutt-lang - mutt 2.0.4: * Fix smtp debug segfault on invalid SmtpAuthenticators list * Fix header cache BDB version checking * Fix offset to use LOFF_T in a couple places * Ensure idata->check_status is cleared on mailbox close * Abort IMAP open if condstore/qresync updates fetch fails - drop upstreamed bug-676388-largefile.patch ==== myspell-dictionaries ==== Version update (20201005 -> 20201230) Subpackages: myspell-en myspell-en_US myspell-lightproof-en - version update to 20201228 * several updated dictionaries, see https://cgit.freedesktop.org/libreoffice/dictionaries/log/ ==== nano ==== - Install a useful default nanorc configuration - Enable useful extra definitions for syntax highlighting ==== ncurses ==== Version update (6.2.20201031 -> 6.2.20201205) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20201205 + amend build-fixes for gnat 10 to work with certain systems lacking gprbuild (cf: 20200627). + eliminate an additional strlen and wsclen. + eliminate an unnecessary strlen in waddnstr() (suggested by Benjamin Abendroth). + modify inopts manpage, separating the items for nodelay and notimeout (patch by Benno Schulenberg). + correct mlterm3 kf1-kf4 (Debian #975322) -TD + add flash to mlterm3 -TD - Add ncurses patch 20201128 + add Smulx to alacritty (Christian Duerr). + add rep to PuTTY -TD + add putty+keypad -TD + add another fflush(stdout) in _nc_flush() to handle time-delays in the middle of strings such as flash when the application uses low-level calls rather than curses (cf: 20161217). + modify configure check for c89/c99 aliases of clang to use its - std option instead, because some platforms, in particular macOS, do not provide workable c89/c99 aliases. - Add ncurses patch 20201121 + fix some compiler-warnings in experimental Windows-10 driver. + add the definitions needed in recent configure-check for clang (report by Steven Pitman). - Add ncurses patch 20201114 + fix some compiler-warnings in experimental Windows-10 driver. + modify a check for parameters in terminfo capabilities to handle the special case where short extended capability strings were not converted from terminfo to termcap format. + modify CF_MIXEDCASE_FILENAMES macro, adding darwin as special case when cross-compiling (report by Eli Rykoff). - Add ncurses patch 20201107 + update kitty+common -TD + add putty+screen and putty-screen (suggested by Alexandre Montaron). + explain in ncurses.3x that functions in the tinfo library do not rely upon wide-characters (prompted by discussion with Reuben Thomas). ==== net-snmp ==== Subpackages: libsnmp30 perl-SNMP snmp-mibs - Update the tmpfiles.d/ drop-in file - remove legacy directory Fixes boo#1137761 and boo#1176997 ==== netcat-openbsd ==== - Build with hidden visibility since no symbols should be exported - enable-udp-ip_recverr.patch: Enable IP_RECVERR on UDP sockets to match *bsd behaviour and avoid long timeouts if an error ocurrs. ==== netpbm ==== Version update (10.88.1 -> 10.93.0) Subpackages: libnetpbm11 - version update to 10.93.0 * lot of bug fixes and features, see HISTORY - modified patches % netpbm-disable-jasper.patch (refreshed) % netpbm-make.patch (refreshed) % netpbm-security-code.patch (refreshed) % netpbm-security-scripts.patch (refreshed) % netpbm-tmpfile.patch (refreshed) % signed-char.patch (refreshed) - deleted patches - netpbm-pbmtonokia-cmdline-txt-null.patch (upstreamed) ==== nghttp2 ==== Version update (1.41.0 -> 1.42.0) - update to 1.42.0: * lib: fix ubsan errors (Patch from Asra Ali) (GH-1468) * lib: Don't send RST_STREAM to idle stream (GH-1477) * lib: nghttp2_map backed by nghttp2_ksl * doc: Update sphinx_rtd_theme * doc: nghttp2_session_send is also affected by max concurrent streams (Patch from Tomas Krizek) (GH-1489) * doc: clarify flow control behaviour for nghttp2_session_send() (Patch from Tomas Krizek) (GH-1488) * build: Add missing cmake/FindSystemd.cmake to dist (GH-1526) * third-party: Bump llhttp to 2.2.0 * third-party: Bump mruby to 2.1.2 * nghttpx: Deal with the case when h2 backend is retired before it is initialized * nghttpx: Add accesslog variables to record request path without query (GH-1511) * nghttpx: Fix stall when TLS follows after proxy protocol * nghttpx: Fix logging integer ==== nodejs14 ==== Version update (14.15.1 -> 14.15.4) Subpackages: npm14 - New upstream LTS version 14.15.4: * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap object as first argument. If the DoWrite method does not return an error, this object is passed back to the caller as part of a StreamWriteResult structure. This may be exploited to corrupt memory leading to a Denial of Service or potentially other exploits (bsc#1180553) * CVE-2020-8287: HTTP Request Smuggling allow two copies of a header field in a http request. For example, two Transfer-Encoding header fields. In this case Node.js identifies the first header field and ignores the second. This can lead to HTTP Request Smuggling (https://cwe.mitre.org/data/definitions/444.html) (bsc#1180554) - New upstream LTS version 14.15.3: * deps: + upgrade npm to 6.14.9 + update acorn to v8.0.4 * http2: check write not scheduled in scope destructor * stream: fix regression on duplex end - versioned.patch, sle12_python3_compat.patch: refreshed ==== numactl ==== Subpackages: libnuma1 - Enable LTO (boo#1133098) as it works now. ==== oath-toolkit ==== Version update (2.6.2 -> 2.6.5) - Update to version 2.6.5 * oathtool: Support for reading KEY and OTP from standard input or filename. KEY and OTP may now be given as '-' to mean stdin, or @FILE to read from a particular file. This is recommended on multi-user systems, since secrets as command line parameters leak. * pam_oath: Fix unlikely logic fail on out of memory conditions. * Doc fixes. - Update to version 2.6.4 * libpskc: New --with-xmlsec-crypto-engine to hard-code crypto engine. Use it like --with-xmlsec-crypto-engine=gnutls or - -with-xmlsec-crypto-engine=openssl if the default dynamic loading fails because of runtime linker search path issues. * oathtool --totp --verbose now prints TOTP hash mode. * oathtool: Hash names (e.g., SHA256) for --totp are now upper case. Lower/mixed case hash names are supported for compatibility. * pam_oath: Fail gracefully for missing users. This allows you to incrementally add support for OATH authentication instead of forcing it on all users. * Fix libpskc memory corruption bug. * Fix man pages. * Build fixes. - Update to version 2.6.3 * pam_oath: Fix self-tests. - Drop not longer needed patches: * 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch * 0003-pam_oath-assign-safe-default-to-alwaysok-config-memb.patch * 0002-update_gnulibs_files.patch * gnulib-libio.patch - Use source verification - Use proper source URLs ==== okular ==== Version update (20.08.3 -> 20.12.1) Subpackages: okular-lang okular-spectre - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - Changes since 20.12.0: * Fix opening markdown files (kde#430538) * Make search work on documents that describe A? as A + ?? (kde#430243) * Fix crash with some broken PDF files * pdf: Fix small memory leak * clang-tidy: Disable performance-no-automatic-move * Make the CI pass with new clang-tidy * Document::openRelativeFile: Double check the url changed when we asked to (kde#429924) - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - Changes since 20.11.90: * handle <subtitle> inside <cite> in FictionBook documents - Update to 20.11.90 * New feature release - Changes since 20.11.80: * add support for <subtitle> tag in FictionBook * Rework how we open urls that have a # (kde#426976) * Show annotation tip when selecting the tool in continuous mode (kde#426782) * More fine tuning of the mime of the opened file * Fix QScroller crash on Qt < 5.14 and certain screen arrangements (kde#425188) * Avoid unintentional accelerating flicks by reducing maximum flick time * New part/ directory for okularpart sources from /, ui/, conf/ - Rebase 0001-Inform-users-about-the-okular-spectre-package-in-the.patch - Update to 20.11.80 * New feature release - Too many changes to list here. ==== open-iscsi ==== Subpackages: iscsiuio libopeniscsiusr0_2_0 - Updated to upstream version 2.1.3 as 2.1.3-suse, for bsc#1179908, including: * uip: check for TCP urgent pointer past end of frame * uip: check for u8 overflow when processing TCP options * uip: check for header length underflow during checksum calculation * fwparam_ppc: Fix memory leak in fwparam_ppc.c * iscsiuio: Remove unused macro IFNAMSIZ defined in iscsid_ipc.c * fwparam_ppc: Fix illegal memory access in fwparam_ppc.c * sysfs: Verify parameter of sysfs_device_get() * fwparam_ppc: Fix NULL pointer dereference in find_devtree() * open-iscsi: Clean user_param list when process exit * iscsi_net_util: Fix NULL pointer dereference in find_vlan_dev() * open-iscsi: Fix NULL pointer dereference in mgmt_ipc_read_req() * open-iscsi: Fix invalid pointer deference in find_initiator() * iscsiuio: Fix invalid parameter when call fstat() * iscsi-iname: Verify open() return value before calling read() * iscsi_sysfs: Fix NULL pointer deference in iscsi_sysfs_read_iface ==== openblas_openmp ==== Version update (0.3.12 -> 0.3.13) - Update to version 0.3.13 common: * Added a generic bfloat16 SBGEMV kernel * Fixed a potentially severe memory leak after fork in OpenMP builds that was introduced in 0.3.12 * Added detection of the Fujitsu Fortran compiler * Added detection of the (e)gfortran compiler on OpenBSD * Added support for overriding the default name of the library independently from symbol suffixing in the gmake builds (already supported in cmake) RISC V: * Added a RISC V port optimized for C910V POWER: * Added optimized POWER10 kernels for SAXPY, CAXPY, SDOT, DDOT and DGEMV_N * Improved DGEMM performance on POWER10 * Improved STRSM and DTRSM performance on POWER9 and POWER10 * Fixed segmemtation faults in DYNAMIC_ARCH builds * Fixed compilation with the PGI compiler x86: * Fixed compilation of kernels that require SSE2 intrinsics since 0.3.12 x86_64: * Added an optimized bfloat16 SBGEMV kernel for SkylakeX and Cooperlake * Improved the performance of SASUM and DASUM kernels through parallelization * Improved the performance of SROT and DROT kernels * Improved the performance of multithreaded xSYRK * Fixed OpenMP builds that use the LLVM Clang compiler together with GNU gfortran (where linking of both the LLVM libomp and GNU libgomp could lead to lockups or wrong results) * Fixed miscompilations by old gcc 4.6 * Fixed misdetection of AVX2 capability in some Sandybridge cpus * Fixed lockups in builds combining DYNAMIC_ARCH with TARGET=GENERIC on OpenBSD ARM64: * Fixed segmentation faults in DYNAMIC_ARCH builds MIPS: * Improved kernels for Loongson 3R3 ("3A") and 3R4 ("3B") models, including MSA * Fixed bugs in the MSA kernels for CGEMM, CTRMM, CGEMV and ZGEMV * Added handling of zero increments in the MSA kernels for SSWAP and DSWAP * Added DYNAMIC_ARCH support for MIPS64 (currently Loongson3R3/3R4 only) SPARC: * Fixed building 32 and 64 bit SPARC kernels with the SolarisStudio compilers - Fix invalid symlinks (boo#1179764). ==== openblas_pthreads ==== Version update (0.3.12 -> 0.3.13) - Update to version 0.3.13 common: * Added a generic bfloat16 SBGEMV kernel * Fixed a potentially severe memory leak after fork in OpenMP builds that was introduced in 0.3.12 * Added detection of the Fujitsu Fortran compiler * Added detection of the (e)gfortran compiler on OpenBSD * Added support for overriding the default name of the library independently from symbol suffixing in the gmake builds (already supported in cmake) RISC V: * Added a RISC V port optimized for C910V POWER: * Added optimized POWER10 kernels for SAXPY, CAXPY, SDOT, DDOT and DGEMV_N * Improved DGEMM performance on POWER10 * Improved STRSM and DTRSM performance on POWER9 and POWER10 * Fixed segmemtation faults in DYNAMIC_ARCH builds * Fixed compilation with the PGI compiler x86: * Fixed compilation of kernels that require SSE2 intrinsics since 0.3.12 x86_64: * Added an optimized bfloat16 SBGEMV kernel for SkylakeX and Cooperlake * Improved the performance of SASUM and DASUM kernels through parallelization * Improved the performance of SROT and DROT kernels * Improved the performance of multithreaded xSYRK * Fixed OpenMP builds that use the LLVM Clang compiler together with GNU gfortran (where linking of both the LLVM libomp and GNU libgomp could lead to lockups or wrong results) * Fixed miscompilations by old gcc 4.6 * Fixed misdetection of AVX2 capability in some Sandybridge cpus * Fixed lockups in builds combining DYNAMIC_ARCH with TARGET=GENERIC on OpenBSD ARM64: * Fixed segmentation faults in DYNAMIC_ARCH builds MIPS: * Improved kernels for Loongson 3R3 ("3A") and 3R4 ("3B") models, including MSA * Fixed bugs in the MSA kernels for CGEMM, CTRMM, CGEMV and ZGEMV * Added handling of zero increments in the MSA kernels for SSWAP and DSWAP * Added DYNAMIC_ARCH support for MIPS64 (currently Loongson3R3/3R4 only) SPARC: * Fixed building 32 and 64 bit SPARC kernels with the SolarisStudio compilers - Fix invalid symlinks (boo#1179764). ==== openexr ==== Version update (2.5.3 -> 2.5.4) - merge also baselibs.conf - modified sources % baselibs.conf - merge ilmbase and openexr source packages into one _multibuild - added sources + _multibuild - version update to 2.5.4 * Patch release with various bug/sanitizer/security fixes, primarily related to reading corrupted input files. ==== openldap2 ==== Subpackages: libldap-2_4-2 libldap-data openldap2-client - added openldap2.keyring and source signature file ==== openssh ==== Subpackages: openssh-clients openssh-common openssh-server - Support /usr/etc/pam.d ==== openssl-1_1 ==== Subpackages: libopenssl1_1 libopenssl1_1-hmac - Use the centralized crypto policy profile (jsc#SLE-15832) * add openssl-1.1.1-system-cipherlist.patch from Fedora ==== orca ==== Version update (3.38.1 -> 3.38.2) - Update to version 3.38.2: + Don't treat unknown coordinates as definitely off-screen. Should fix the problem seen with flat review resulting from a change in Gtk+ 3.24.24. ==== oxygen5 ==== Version update (5.20.4 -> 5.20.5) - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== pangomm1_4 ==== Version update (2.42.1 -> 2.42.2) - Update to version 2.42.2: + Build: - Use __declspec(dllexport) when building with Visual Studio - Meson build: Avoid some recompilations - Meson build: Better error message if trying to build with maintainer-mode=false when true is necessary - Meson build: Set default value of the 'warnings' option to 'min' - Improve NMake support - - Improve Visual Studio support - docs/reference/: Update for Doxygen >= 1.8.16 - Meson build: Fix versioning on macOS - Add meson BuildRequires and macros following upstreams port. - Add doxygen, graphviz and xsltproc BuildRequires, needed now for building documentation. - Replace gcc-c++ with generic c++_compiler BuildRequires. - Tweak setup macro and fdupes call. ==== parley ==== Version update (20.08.3 -> 20.12.0) Subpackages: parley-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Remove deleteLater from ParleyDocument * Fix segfault when leaving statistics main window (kde#420302) * Remove explicit ECM_KDE_MODULE_DIR * Drop empty X-KDE-PluginInfo-Depends * Fix deprecated knsrc file location (kde#423903) ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-base patterns-base-basesystem patterns-base-basic_desktop patterns-base-console patterns-base-documentation patterns-base-enhanced_base patterns-base-minimal_base patterns-base-sw_management patterns-base-transactional_base patterns-base-x11 patterns-base-x11_enhanced - Remove yast2-qt requires on x11 pattern, there is already an equivalent recommends in the pattern. ==== pcre2 ==== Version update (10.35 -> 10.36) Subpackages: libpcre2-16-0 libpcre2-8-0 - pcre2 10.36: * add GNU grep's -m (aka --max-count) option to pcre2grep * unify the handling of substitution strings for both -O and callouts in pcre2grep, with the addition of $x{...} and $o{...} to allow for characters whose code points are greater than 255 in Unicode mode ==== perl-Image-ExifTool ==== Version update (12.10 -> 12.13) Subpackages: exiftool perl-File-RandomAccess - update to 12.13: - Add time zone automatically to most string-based QuickTime date/time tags when writing unless the PrintConv option is disabled - Added -i HIDDEN option to ignore files with names that start with "." - Added a few new Nikon ShutterMode values (thanks Jan Skoda) - Added ability to write Google GCamera MicroVideo XMP tags - Decode a new Sony tag (thanks LibRaw) - Changed behaviour when writing only pseudo tags to return an error and avoid writing any other tags if writing FileName fails - Print "X image files read" message even if only 1 file is read when at least one other file has failed the -if condition - Added ability to geotag from DJI CSV log files - Added a new CanonModelID - Added a couple of new Sony LensType values (thanks LibRaw) - Enhanced -csvDelim option to allow "\t", "\n", "\r" and "\\" - Unescape "\b" and "\f" in imported JSON values - Fixed bug introduced in 12.10 which generated a "Not an integer" warning when attempting to shift some QuickTime date/time tags - Fixed shared-write permission problem with -@ argfile when using -stay_open and a filename containing special characters on Windows - Added -csvDelim option - Added new Canon and Olympus LensType values (thanks LibRaw) - Added a warning if ICC_Profile is deleted from an image (github issue #63) - EndDir() function for -if option now works when -fileOrder is used - Changed FileSize conversion to use binary prefixes since that is how the conversion is currently done (eg. MiB instead of MB) - Patched -csv option so columns aren't resorted when using -G option and one of the tags is missing from a file - Fixed incompatiblity with Google Photos when writing UserData:GPSCoordinates to MP4 videos - Fixed problem where the tags available in a -p format string were limited to the same as the -if[NUM] option when NUM was specified - Fixed incorrect decoding of SourceFileIndex/SourceDirectoryIndex for Ricoh models ==== perl-LWP-Protocol-https ==== Version update (6.09 -> 6.10) - updated to 6.10 see /usr/share/doc/packages/perl-LWP-Protocol-https/Changes 6.10 2020-12-17 15:42:06Z - Fix #39 - prevent user env from breaking the test (GH#63) (Gianni Ceccarelli) - Include Net::SSLeay in reported prereqs (GH#60) (Olaf Alders) - Use GitHub as a bug tracker (GH#59) (Olaf Alders) ==== perl-Mojolicious ==== Version update (8.67 -> 8.70) - updated to 8.70 see /usr/share/doc/packages/perl-Mojolicious/Changes 8.70 2020-12-29 - Fixed top-level help command in Mojolicious::Commands. (schelcj) 8.69 2020-12-28 - Improved design of built-in templates. 8.68 2020-12-27 - Updated built-in templates with new responsive design from mojolicious.org. - Fixed a bug in Mojo::Message::Request that resulted in duplicate request ids for Mojo::Server::Prefork workers. ==== perl-Term-ReadLine-Gnu ==== Version update (1.36 -> 1.37) - updated to 1.37 see /usr/share/doc/packages/perl-Term-ReadLine-Gnu/Changes ==== perl-Text-CSV_XS ==== Version update (1.44 -> 1.45) - updated to 1.45 see /usr/share/doc/packages/perl-Text-CSV_XS/ChangeLog 1.45 - 2020-12-24, H.Merijn Brand * Update to Devel::PPPort-3.60 (3.59 was b0rked) * Allow adding to existing data in csv (out => $ref) * examples/csv2xlsx : -L # to limit records to export * examples/csv2xlsx : --de # for possible double-encoding fix * Update to Devel::PPPort-3.61 * Update to Devel::PPPort-3.62 * Add examples/csv-split * examples/csv2xlsx : Check if .xlsx is creatable before conversion * Small doc additions * Fix META issue for bugtracker ==== perl-libwww-perl ==== Version update (6.49 -> 6.51) - updated to 6.51 see /usr/share/doc/packages/perl-libwww-perl/Changes 6.51 2020-12-29 22:09:04Z - Fix proxy test on Windows (GH#358) (Olaf Alders) - Sort keys in Pod example of constructor defaults (GH#356) (Olaf Alders) - updated to 6.50 see /usr/share/doc/packages/perl-libwww-perl/Changes 6.50 2020-12-16 18:35:08Z - Fix RT #81381 - Make LWP::UserAgent robust to 5.17.6/5.18 hash randomization (GH#355) (Yves Orton and Olaf Alders) ==== php7 ==== Version update (7.4.13 -> 7.4.14) Subpackages: php7-ctype php7-dom php7-gd php7-gettext php7-iconv php7-json php7-mbstring php7-mysql php7-pdo php7-sqlite php7-tokenizer php7-xmlreader php7-xmlwriter - build the MySQL Native Driver as a shared module (rather than builtin) to prevent a hard requirement for OpenSSL in the CLI - updated to 7.4.14: This is a security release which also contains several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.14 - make phar SOURCE_DATE_EPOCH aware so the timestamps in phar.phar are reproducible and sort filelist to include + php-build-reproducible-phar.patch + php-sort-filelist-phar.patch - fix build failure for SLE_15 - deleted patches - php-openssl.patch (undocumented and not upstreamed patch for a long time) - php7-arm-build-fixes.patch (do not build for SLE12 anymore) - php-pts.patch (undocumented and not upstreamed patch for a long time) - improved patch documentation - use cli sapi php-config --libs - build devel subpackage in cli configuration (otherwise include files for shared modules are missing) - php-phar requires the php-zlib extension - trim specfile lint - install macros.php in %{_rpmconfigdir}/macros.d - build devel subpackage in embed subpackage (where it previously was built) - don't build with CPU specific instructions as it can't be guaranteed these are available at runtime + php-no-check-cpu.patch - remove obsolete patch (replaced by SOURCE_DATE_EPOCH) - php-no-build-date.patch - add D(eterministic) flag to AR_FLAGS to (php-ar-flags.patch) - modified sources % _multibuild - restart php-fpm.service in %posttrans fpm (extensions may need to be updated too, so restart must be delayed to after all RPM transactions have completed) ==== pim-data-exporter ==== Version update (20.08.3 -> 20.12.0) Subpackages: pim-data-exporter-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * not necessary to export it * Fix compile on windows * Modernize code * If include is define in .h remove it if it's defined in .cpp too (scripted) * Remove not implmemented method * Time to increase version * Add missing lib when we moved KAddressbookGrantlee * Convert license headers to SPDX format ==== pim-sieve-editor ==== Version update (20.08.3 -> 20.12.0) Subpackages: pim-sieve-editor-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - Changes since 20.11.80: * Fix mem leak - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Modernize code (using auto) * If include is define in .h remove it if it's defined in .cpp too (scripted) * Add margins * Time to increase version * const'ify pointer * Fix dev_version ==== pimcommon ==== Version update (20.08.3 -> 20.12.1) Subpackages: libKF5PimCommon5 libKF5PimCommonAkonadi5 pimcommon-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - Changes since 20.12.0: * Fix crash with old data (before my fixing about simple quote) * Add more autotest * Add autotest for loading quote * Start to implement loading autotest * Fix Bug 430345 - kmail suppress "apostrophe" in french (kde#430345) - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes to list here. ==== plasma-browser-integration ==== Version update (5.20.4 -> 5.20.5) Subpackages: plasma-browser-integration-lang - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== plasma-framework ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5Plasma5 plasma-framework-components plasma-framework-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Too many changes since 5.76.0, only listing bugfixes: * Finish the animation before changing the length of the progressbar highlight (kde#428955) * [textfield] Fix clear button overlapping text (kde#429187) ==== plasma-nm5 ==== Version update (5.20.4 -> 5.20.5) Subpackages: plasma-nm5-lang plasma-nm5-openconnect plasma-nm5-openvpn plasma-nm5-pptp plasma-nm5-vpnc - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== plasma5-addons ==== Version update (5.20.4 -> 5.20.5) Subpackages: plasma5-addons-lang - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - Changes since 5.20.4: * Fix weather widget crash when going to Units tab for the second time (kde#419709) * Fix the comic applet to display icons in the tabbar ==== plasma5-desktop ==== Version update (5.20.4 -> 5.20.5) Subpackages: plasma5-desktop-emojier - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - Changes since 5.20.4: * revert: bf7d64b3 . Fixes panel height adjusting fails when the panel is on top / left (kde#430050) * Reparse the key repeat rate config when we try to load it. (kde#418175) * Fix the order of the actions of the emojier * [kcms/users]: Make sure avatar grid doesn't escape bounds (kde#428899) * Use Instantiator to create drawer actions to improve startup time * [kcms/users] Avoid race condition on startup (kde#429314) - Drop patches, now upstream: * Reparse-the-key-repeat-rate-config-when-we-try-to-load-it.patch - Add upstream patch to fix keyboard repeat settings not being applied immediately (boo#1164739, kde#418175): * Reparse-the-key-repeat-rate-config-when-we-try-to-load-it.patch ==== plasma5-disks ==== Version update (5.20.4 -> 5.20.5) - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - Changes since 5.20.4: * bump smartctl timeout in helper (kde#428844) ==== plasma5-integration ==== Version update (5.20.4 -> 5.20.5) Subpackages: plasma5-integration-plugin plasma5-integration-plugin-lang - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== plasma5-openSUSE ==== Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE - Update to 5.20.5 ==== plasma5-pa ==== Version update (5.20.4 -> 5.20.5) Subpackages: plasma5-pa-lang - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - Changes since 5.20.4: * [kcm] Read text color from proper theme ==== plasma5-thunderbolt ==== Version update (5.20.4 -> 5.20.5) - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== plasma5-workspace ==== Version update (5.20.4 -> 5.20.5) Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-lang plasma5-workspace-libs xembedsniproxy - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - Changes since 5.20.4: * Recent Documents Runner: Strip trailing slash in subtext * [applets/systemtray] Fix missing expander arrow (kde#430569) * [Notifications] Check popup being null * move keyboard positioning in the keyboard itself (kde#427934) - RPM got fixed, so use %fdupes on TW again ==== pngquant ==== Version update (2.12.6 -> 2.13.1) - update to 2.13.1: - small speed and quality improvements ==== polkit ==== Subpackages: libpolkit0 typelib-1_0-Polkit-1_0 move to libexec dir is still not complete: - add polkit-adjust-libexec-path.patch: There is another hard coded reference of lib/ in the code that this patch addresses. - also adjust invocation of %set_permissions and %verify_permissions to new libexec dir location. - also set libprivdir during build, otherwhise systemd and D-Bus service files contain the wrong path and we'll get runtime errors. - Install private binaries into libexec instead of into lib. For this an override of the custom libprivdir variable is necessary, because upstream explicitly moved away from libexecdir via upstram commit 6fbcc6cd839680fcefd81c4a43676e7c031c9859. ==== polkit-kde-agent-5 ==== Version update (5.20.4 -> 5.20.5) Subpackages: polkit-kde-agent-5-lang - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== poppler ==== Version update (20.12.0 -> 20.12.1) Subpackages: libpoppler-cpp0 libpoppler-glib8 libpoppler105 poppler-tools - Update to version 20.12.1: + core: - PSOutputDev: fixing regression in the rasterization code. - Add missing profile copy operation in GfxICCBasedColorSpace::copy() - Fix issue in broken files. + build system: Use modern CMake linking for Qt and boost. ==== poppler-qt5 ==== Version update (20.12.0 -> 20.12.1) - Update to version 20.12.1: + core: - PSOutputDev: fixing regression in the rasterization code. - Add missing profile copy operation in GfxICCBasedColorSpace::copy() - Fix issue in broken files. + build system: Use modern CMake linking for Qt and boost. ==== postgresql13 ==== Subpackages: libpq5 postgresql13-contrib postgresql13-docs postgresql13-llvmjit postgresql13-server - Add postgresql-icu68.patch: fix build with ICU 68 ==== powerdevil5 ==== Version update (5.20.4 -> 5.20.5) Subpackages: powerdevil5-lang - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== prison-qt5 ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5Prison5 prison-qt5-imports - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Pass parent to Q*Layout ctor instead of calling setLayout() ==== privoxy ==== Version update (3.0.28 -> 3.0.29) - privoxy 3.0.29: * Fixed memory leaks when a response is buffered and the buffer limit is reached or Privoxy is running out of memory. OVE-20201118-0001 * Fixed a memory leak in the show-status CGI handler when no action files are configured OVE-20201118-0002 * Fixed a memory leak in the show-status CGI handler when no filter files are configured OVE-20201118-0003 * Fixes a memory leak when client tags are active OVE-20201118-0004 * Fixed a memory leak if multiple filters are executed and the last one is skipped due to a pcre error OVE-20201118-0005 * Prevent an unlikely dereference of a NULL-pointer that could result in a crash if accept-intercepted-requests was enabled, Privoxy failed to get the request destination from the Host header and a memory allocation failed. OVE-20201118-0006 * Fixed memory leaks in the client-tags CGI handler when client tags are configured and memory allocations fail. OVE-20201118-0007 * Fixed memory leaks in the show-status CGI handler when memory allocations fail OVE-20201118-0008 * Add experimental https inspection support * Use JIT compilation for static filtering for speedup * Add support for Brotli decompression, add 'no-brotli-accepted' filter which prevents the use of Brotli compression * Add feature to gather exended statistics * Use IP_FREEBIND socket option to help with failover * Allow to use extended host patterns and vanilla host patterns at the same time by prefixing extended host patterns with "PCRE-HOST-PATTERN:" * Added "Cross-origin resource sharing" (CORS) support * Add SOCKS5 username/password support * Bump the maximum number of action and filter files to 100 each * Fixed handling of filters with "split-large-forms 1" when using the CGI editor. * Better detect a mismatch of connection details when figuring out whether or not a connection can be reused * Don't send a "Connection failure" message instead of the "DNS failure" message * Let LOG_LEVEL_REQUEST log all requests * Improvements to default Action file - license changed to GPLv3 - remove packaging vulnerability boo#1157449 - remove packaging for distributions without systemd drops privoxy-3.0.16-networkmanager.patch - add upstream signing key and verify source signature ==== publicsuffix ==== Version update (20201026 -> 20201223) - Update to version 20201223: * gTLD autopull: 2020-12-21 (#1172) * Featherhead: Remove defunct project (#1171) * Add needed suffixes for WPMU DEV hosting and CDNs (#1169) * Add GünstigBestellen domains (#1170) * add deno.dev (#1167) * Update WoltLab Cloud Domains (#1168) * gTLD autopull: 2020-12-11 (#1165) * Update public_suffix_list.dat (#1162) * Add lohmus.me to the private section (#1161) * Add flap.id domain (#1160) * UPDATE TO SLD ON HOSTBIP SECTION (#1130) * Third level .??? domains for the PRIVATE section (#1159) * Add orsites.com to the list of domains (#1157) * Add webthings.io and krellian.net (#1154) * gTLD autopull: 2020-12-10 (#1164) * gTLD autopull: 2020-11-30 (#1155) * The list of Jelastic public domains was extended. Addition to #1023 #1063 #1092 #1095 (#1151) * gTLD autopull: 2020-11-21 (#1152) * Add ondigitalocean.app to the list of domains (#1150) * Add private domains for airy.host (#1149) * gTLD autopull: 2020-11-11 (#1148) * Update public_suffix_list.dat (#1147) * Add of.je (#1131) * Update the existing Names.of.London Public List (#1146) * Del linkitools.space nxd from Private (#1145) * Del ptplus.fit NXD from Private (#1144) * Del cloudeity.net NXD from Private (#1143) * Del uklugs.org NXD from Private section (#1142) * Del xenapponazure.com from Private (#1141) * Added an RSS feed URL (#1140) * gTLD autopull: 2020-11-03 (#1139) * Add secaas.hk (#1138) * Adding qoto.io (#1129) * Add fh-muenster.io to PSL (#1134) * gTLD autopull: 2020-10-28 (#1135) * Update pull_request_template.md (#1116) ==== pulseaudio ==== Subpackages: libpulse-mainloop-glib0 libpulse0 pulseaudio-bash-completion pulseaudio-gdm-hooks pulseaudio-module-bluetooth pulseaudio-module-gsettings pulseaudio-module-x11 pulseaudio-module-zeroconf pulseaudio-utils pulseaudio-zsh-completion - Enable LTO (boo#1133278) as it works now. ==== purpose ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5Purpose5 libKF5PurposeWidgets5 purpose-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Remove unused include * [bluetooth] Fix sharing multiple files (kde#429620) * Read translated plugin action label (kde#429510) ==== python-Babel ==== Version update (2.8.0 -> 2.9.0) - removed obsolete patches * python383.patch * pytest6.patch - update to 2.9.0 * Improvements - CLDR: Use CLDR 37 ? Aarni Koskela (#734) - Dates: Handle ZoneInfo objects in get_timezone_location, get_timezone_name - Alessio Bogon (#741) - Numbers: Add group_separator feature in number formatting - Abdullah Javed Nesar (#726) * Bugfixes - Dates: Correct default Format().timedelta format to 'long' to mute deprecation warnings ? Aarni Koskela - Import: Simplify iteration code in "import_cldr.py" ? Felix Schwarz - Import: Stop using deprecated ElementTree methods "getchildren()" and "getiterator()" ? Felix Schwarz - Messages: Fix unicode printing error on Python 2 without TTY. ? Niklas Hambüchen - Messages: Introduce invariant that _invalid_pofile() takes unicode line. ? Niklas Hambüchen - Tests: fix tests when using Python 3.9 ? Felix Schwarz - Tests: Remove deprecated 'sudo: false' from Travis configuration ? Jon Dufresne - Tests: Support Py.test 6.x ? Aarni Koskela - Utilities: LazyProxy: Handle AttributeError in specified func ? Nikiforov Konstantin (#724) - Utilities: Replace usage of parser.suite with ast.parse ? Miro Hron?ok - Support Py.test 6 - Aarni Koskela (#747, #750, #752) * Documentation - Update parse_number comments ? Brad Martin (#708) - Add __iter__ to Catalog documentation ? @CyanNani123 ==== python-Mako ==== - Let the python-rpm-macros do their job for the correct provides and obsoletes tags for multiple python3 flavors gh#openSUSE/python-rpm-macros#66 ==== python-Pillow ==== - fix build with libtiff 4.2.0 - added patches fix https://github.com/python-pillow/Pillow/pull/5153 + python-Pillow-tiff-4.2.0.patch fix https://github.com/python-pillow/Pillow/commit/416f12e772d2b3cb920b18b3625e… + python-Pillow-tiff-fix-oob-read.patch ==== python-argcomplete ==== Version update (1.11.1 -> 1.12.2) - update to 1.12.2: - Update importlib-metadata dependency pin (#332) - Add change log project URL (#312) - Replace Travis CI with GitHub Actions (#323) - Update importlib-metadata dependency version range - Bash nounset mode fixes (#313) - remove 0001-Remove-expected-test-failure-for-new-versions-of-fish.patch (upstream) ==== python-atspi ==== - Support future multiple python3 flavors * fix py*atspi provides * remove %ifpython3 -- it will break * gh#openSUSE/python-rpm-macros#66 - Enable testsuite. General rule for python packages: must run if they are available. And it revealed a problem with the (not given) path to the python interpreter. * The test suite compiles test libraries which do not work for armv7l and ppc64le. Skip there. ==== python-cached-property ==== Version update (1.5.1 -> 1.5.2) - update to 1.5.2: * Add formal support for Python 3.8 * Remove formal support for Python 3.4 * Switch from Travis to GitHub actions * Made tests pass flake8 for Python 2.7 ==== python-certifi ==== Version update (2020.11.8 -> 2020.12.5) - update to 2020.12.5 ==== python-cffi ==== Version update (1.14.3 -> 1.14.4) - update to 1.14.4: * no upstream changelog provided ==== python-chardet ==== Version update (3.0.4 -> 4.0.0) - Remove now unnecessary pytest4.patch and python-chardet-rpmlintrc - Update to v4.0.0 See https://github.com/chardet/chardet/compare/3.0.4...4.0.0 ==== python-cryptography ==== Version update (3.3 -> 3.3.1) - update to 3.3.1: * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use ==== python-dbus-python ==== - Support builds with more than one python3 flavor gh#openSUSE/python-rpm-macros#66 - Remove shebang from examples (rpmlint warning, is in common doc) - Clean duplicate python flavor variables for configure - Update the provides/obsoletes tags for old-style dbus-1-$python ==== python-dnspython ==== - Remove skipping tests which are acutally passing. - Python < 3.7 requires external contextvars ==== python-dulwich ==== Version update (0.20.11 -> 0.20.15) - update to 0.20.15: * Add some functions for parsing and writing bundles. * Add ``no_verify`` flag to ``porcelain.commit`` and ``Repo.do_commit``. * Remove dependency on external mock module. - drop remove_mock.patch (upstream) - update to 0.20.14: * Fix some stash functions on Python 3. * Fix handling of relative paths in alternates files on Python 3. * Add py.typed to allow type checking. * Add tests demonstrating a bug in the walker code. - Fix condition around BuildRequirement - We don't need to break Python 2.7 - Add remove_mock.patch to remove dependency on the external mock package (gh#dulwich/dulwich#820). ==== python-ecdsa ==== Version update (0.16.0 -> 0.16.1) - update to to 0.16.1: * `VerifyingKey.precompute()` supports `lazy` argument to delay precomputation to the first time the key is used to verify a signature. * Make created signatures correct when the hash used is bigger than the curve order bit size and the curve order is not a multiple of 8 * Speed up library load time by calculating the generator point multiplication tables the first time the points are used, not when they are initialised. ==== python-gevent ==== - mock dependency was actually not needed at all ==== python-geventhttpclient ==== - Fix condition around BuildRequirement - We don't need to break Python 2.7 - Add remove_mock.patch to remove dependency on the external mock package (gh#gwik/geventhttpclient#135). ==== python-hpack ==== Version update (3.0.0 -> 4.0.0) - Upgrade to 4.0.0: - remove pytest5.patch, which was included in the upstream tarball. - support for Python < 3.6 (including 2.7) has been removed. - support for Python 3.8 has been added. - Performance improvement of static header search. Use dict search instead of linear search. - Fix debug output of headers during encoding. ==== python-importlib-metadata ==== Version update (2.0.0 -> 3.3.0) - New version requires typing_extensions for Python < 3.8 (Leap and TW python36 flavor) - update to 3.3.0: * * #265: ``EntryPoint`` objects now expose a ``.dist`` object referencing the ``Distribution`` when constructed from a Distribution. * The object returned by ``metadata()`` now has a formally-defined protocol called ``PackageMetadata`` with declared support for the ``.get_all()`` method. Fixes #126. - add typing-extensions dependency for older python versions - Update to 3.1.1 * no changelog, probably just the merge of 2.1.1 - Update in v2.1.1 * #261: Restored compatibility for package discovery for metadata without version in the name and for legacy eggs. - Update in v3.1.0 * Merge with 2.1.0. - Update in v2.1.0 * #253: When querying for package metadata, the lookup now honors package normalization rules. - Update in v3.0.0 * Require Python 3.6 or later. - Upstream switched to pytest, so do we - Revert last change: The condition for **BuildRequires** does not make any sense, as that would also prevent the install of python36-importlib_resources into the build environment. - Make requirement of importlib_resources only for particular versions of Python (< 3.9). ==== python-kiwisolver ==== Version update (1.2.0 -> 1.3.1) - update to 1.3.1: - allow to avoid linking against VC2014_1 on windows PR #97 - do not mark move constructor / assignment operator of expression as noexcept PR #97 This is to circumvent a suspected bug in the GCC compiler in the manylinux1 image. - add c++ benchmarks and run them on CIs PR #91 - modernize the c++ code by using more c++11 features PR #90 - introduce move semantic in some c++ constructors to improve performances PR #89 - add support for Python 3.9 PR #88 ==== python-libxml2 ==== - Security fix: [bsc#1161521, CVE-2019-20388] * Memory leak in xmlSchemaPreRun in xmlschemas.c - Add libxml2-CVE-2019-20388.patch ==== python-mailman ==== - Added mailman-notify.service and mailman-notify.timer - Added rcmailman* service symlinks - Added missing logrotate requirement - Fix systemd services - Add missing services and timers to systemd ==== python-more-itertools ==== Version update (8.5.0 -> 8.6.0) - update to 8.6.0: * :func:`all_unique` (thanks to brianmaissy) * :func:`nth_product` and :func:`nth_permutation` (thanks to N8Brooks) * :func:`chunked` and :func:`sliced` now accept a ``strict`` parameter (thanks to shlomif and jtwool) * Python 3.5 has reached its end of life and is no longer supported. * Python 3.9 is officially supported. ==== python-msgpack ==== Version update (1.0.0 -> 1.0.2) - update to 1.0.2: * Python 3.9 support * bugfixes ==== python-notify2 ==== - Fix Requires of dbus-python so that the macros can work out the correct flavor for multiple python3 flavors gh#openSUSE/python-rpm-macros#66 ==== python-parso ==== Version update (0.7.0 -> 0.7.1) - update to 0.7.1: - Fixed a couple of smaller bugs (mostly syntax error detection in ``Grammar.iter_errors``) - Revert back to the 0.7.0 version. ==== python-pyOpenSSL ==== Version update (19.1.0 -> 20.0.0) - Adjust metadata for skip-networked-test.patch and refer to the proper upstream ticket gh#pyca/pyopenssl#68. - According to gh#pyca/pyopenssl#684 tests must run with TZ=UTC, also skip test_verify_with_time on %ix86. - Update to v20.0.0 - Backward-incompatible changes: - The minimum cryptography version is now 3.2. - Remove deprecated OpenSSL.tsafe module. - Removed deprecated OpenSSL.SSL.Context.set_npn_advertise_callback, OpenSSL.SSL.Context.set_npn_select_callback, and OpenSSL.SSL.Connection.get_next_proto_negotiated. - Drop support for Python 3.4 - Drop support for OpenSSL 1.0.1 and 1.0.2 - Deprecations: - Deprecated OpenSSL.crypto.loads_pkcs7 and OpenSSL.crypto.loads_pkcs12. - Changes: - Added a new optional chain parameter to OpenSSL.crypto.X509StoreContext() where additional untrusted certificates can be specified to help chain building. #948 - Added OpenSSL.crypto.X509Store.load_locations to set trusted certificate file bundles and/or directories for verification. [#943] - Added Context.set_keylog_callback to log key material. #910 - Added OpenSSL.SSL.Connection.get_verified_chain to retrieve the verified certificate chain of the peer. #894. - Make verification callback optional in Context.set_verify. If omitted, OpenSSL?s default verification is used. #933 - Fixed a bug that could truncate or cause a zero-length key error due to a null byte in private key passphrase in OpenSSL.crypto.load_privatekey and OpenSSL.crypto.dump_privatekey. #947 - drop patch fix-compilation-2020.patch: no longer needed - refreshed patch skip-networked-test.patch ==== python-pycurl ==== - Add make-leap15-compat.patch to pass tests on Leap 15.2 - Add remove_nose.patch to remove dependency on nose (gh#pycurl/pycurl#655). ==== python-python-xlib ==== Version update (0.27 -> 0.29) - Update to version 0.29 * Drawable & XInput: Avoid using array.array.tostring() which will be removed in Python 3.9 (thanks @t-wissmann). - Changelog for version 0.28 * DPMS: Display Power Management Signaling (by @thiagokokada) - Add remove-mock.patch gh#python-xlib/python-xlib#186 - Let the python-rpm-macros do their job for correct provides and obsoletes tag for all python3 flavors gh#openSUSE/python-rpm-macros#66 ==== python-pytz ==== Version update (2020.4 -> 2020.5) - update to 2020.5: * update to IANA 2020e timezone release ==== python-pyudev ==== - Add remove_mock.patch gh#pyudev/pyudev#409 - Static linting with pylint is not needed for unit tests or build ==== python-qt5 ==== - Mark the package as typed for mypy deb#978586 ==== python-requests ==== Version update (2.25.0 -> 2.25.1) - update to 2.25.1: - Requests now treats `application/json` as `utf8` by default. Resolving inconsistencies between `r.text` and `r.json` output. (#5673) ==== python-requests-toolbelt ==== - Fix condition around BuildRequirement - We don't need to break Python 2.7 - Add remove_mock.patch to remove dependency on the external mock ==== python-scipy ==== Version update (1.5.2 -> 1.5.4) - Update to version 1.5.4. * Bug fix release with no new feature. - Updates for 1.5.3. * Bug fix release with no new feature. ==== python-setproctitle ==== Version update (1.2 -> 1.2.1) - update to 1.2.1 - Fixed segfault after ``os.environ.clear()`` (issue #88). ==== python-setuptools ==== - Add remove_mock.patch to remove dependency on the external mock package. ==== python-typing_extensions ==== - add transitional typing-extensions provides ==== python-urllib3 ==== Version update (1.25.10 -> 1.26.2) - Skip test for RECENT_DATE. It is a test purely for developers. To maintain reproducibility, keep upstreams possibly outdated RECENT_DATE in the source code. - Add CI variable, which makes timeouts in the test suite longer (gh#urllib3/urllib3#2109, bsc#1176389) and test_timeout_errors_cause_retries should not fail. - If you skip_python2 you don't need mock. - We don't need to break Python 2.7 - Add remove_mock.patch to remove dependency on the external mock package (gh#urllib3/urllib3#2108). - Fixed the testsuite and updated dependencies - update to 1.26.2: * Fixed an issue where ``wrap_socket`` and ``CERT_REQUIRED`` wouldn't be imported properly on Python 2.7.8 and earlier (Pull #2052) * Fixed an issue where two ``User-Agent`` headers would be sent if a ``User-Agent`` header key is passed as ``bytes`` (Pull #2047) * Added support for HTTPS proxies contacting HTTPS servers (Pull #1923, Pull #1806) * Deprecated negotiating TLSv1 and TLSv1.1 by default. Users that still wish to use TLS earlier than 1.2 without a deprecation warning should opt-in explicitly by setting ``ssl_version=ssl.PROTOCOL_TLSv1_1`` (Pull #2002) * *Starting in urllib3 v2.0: Connections that receive a ``DeprecationWarning`` will fail** * Deprecated ``Retry`` options ``Retry.DEFAULT_METHOD_WHITELIST``, ``Retry.DEFAULT_REDIRECT_HEADERS_BLACKLIST`` and ``Retry(method_whitelist=...)`` in favor of ``Retry.DEFAULT_ALLOWED_METHODS``, ``Retry.DEFAULT_REMOVE_HEADERS_ON_REDIRECT``, and ``Retry(allowed_methods=...)`` (Pull #2000) **Starting in urllib3 v2.0: Deprecated options will be removed** * Added default ``User-Agent`` header to every request (Pull #1750) * Added ``urllib3.util.SKIP_HEADER`` for skipping ``User-Agent``, ``Accept-Encoding``, and ``Host`` headers from being automatically emitted with requests (Pull #2018) * Collapse ``transfer-encoding: chunked`` request data and framing into the same ``socket.send()`` call (Pull #1906) * Send ``http/1.1`` ALPN identifier with every TLS handshake by default (Pull #1894) * Properly terminate SecureTransport connections when CA verification fails (Pull #1977) * Don't emit an ``SNIMissingWarning`` when passing ``server_hostname=None`` to SecureTransport (Pull #1903) * Disabled requesting TLSv1.2 session tickets as they weren't being used by urllib3 (Pull #1970) * Suppress ``BrokenPipeError`` when writing request body after the server has closed the socket (Pull #1524) * Wrap ``ssl.SSLError`` that can be raised from reading a socket (e.g. "bad MAC") into an ``urllib3.exceptions.SSLError`` (Pull #1939) * Fix retry backoff time parsed from ``Retry-After`` header when given in the HTTP date format. The HTTP date was parsed as the local timezone rather than accounting for the timezone in the HTTP date (typically UTC) (Pull #1932, Pull #1935, Pull #1938, Pull #1949) ==== python-urwid ==== Version update (2.1.1 -> 2.1.2) - update to 2.1.2: * Add pack method to LineBox. Fixes: #346 (by Miguel de Dios) * Add a test to check the linebox.pack is good. (by Miguel de Dios) * Add bin/release.sh script to partially automate releases. (by Tony Cebzanov) * Add workaround for #386 (by Tony Cebzanov) * Fix curses_display python3 ord() (by Ya-Liang Chang (Allen)) * Fix bumping to dev version in release.sh script (by Tony Cebzanov) * Fix focus_end on a collapsed tree (by Anonymous Maarten) * Fix crash with "ellipsis" clipping for py2 tour.py works with py2 now Typo in tour.py (by akorb) * Ignore resetting to invalid locale (Closes: #377) (by Jochen Sprickerhof) * Use ord2 for python2/3 compatibility (by Ya-Liang Chang (Allen)) ==== qalculate ==== Version update (3.14.0 -> 3.15.0) Subpackages: libqalculate21 qalculate-data - Update to 3.15.0: * Automatic and dual approximation and fractions mode in qalc and Gnome shell search provider * Do not ask before overwriting temporary variables in qalc * Add keyboard shortcuts for approximation (Ctrl+E), fraction mode (Ctrl+F), and save variable (Ctrl+R) in qalc * Add "precalculate expression" argument (default false) to save() function (this also changes the behaviour of ":=") * Support multiple equivalent custom digits, separated by semicolon (e.g. "0;aA1;bB2;cC3"), and phoneword digit set in base() function * Always place unit with prefix first (fixes kWh) * Fix local time zone on Windows * Fix matrix/vector multiplication with approximate matrix/vector variable * Fix parsing of expression with multiple degree signs * Minor bug fixes and feature improvements ==== qqc2-desktop-style ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * button: rely on down, not pressed for styling * Reduce the size of round buttons on mobile * Remove debugging leftover * fix mobile scrollbar in RTL mode * fix progressbar in RTL mode * fix RTL display for RangeSlider ==== raspberrypi-firmware ==== Version update (2020.12.08 -> 2020.12.15) - Update to 8a5549c (2020-12-15): * firmware: dmalib: Allow sdcard to borrow channel 6 See: #1511 See: Hexxeh/rpi-firmware#251 See: https://www.raspberrypi.org/forums/viewtopic.php?f=63&t=294932 - Update to 8cd7665 (2020-12-14): * firmware: Use DMA40 for PWM audio * firmware: imx477: Replace existing 720p120 mode with a new 1332x990 120fps mode * firmware: arm_loader: Allow max_framebuffers=0 to disable framebuffers See: #1507 ==== raspberrypi-firmware-config ==== Version update (2020.12.08 -> 2020.12.15) - Update to 8a5549c (2020-12-15): * firmware: dmalib: Allow sdcard to borrow channel 6 See: #1511 See: Hexxeh/rpi-firmware#251 See: https://www.raspberrypi.org/forums/viewtopic.php?f=63&t=294932 - Update to 8cd7665 (2020-12-14): * firmware: Use DMA40 for PWM audio * firmware: imx477: Replace existing 720p120 mode with a new 1332x990 120fps mode * firmware: arm_loader: Allow max_framebuffers=0 to disable framebuffers See: #1507 ==== readline ==== Subpackages: libreadline8 readline-doc - get rid of /lib hack and install readline in /usr. Bash is already there anyways (boo#1029961) - remove deprecated %install_info ==== rtl_433 ==== Version update (20.02+git.20200218 -> 20.11) - Update to version 20.11 Highlights * HTTP server, JSON-RPC * Added RfRaw analyzer output and format input support * Added support for LaCrosse Technology View LTV-R1 Rainfall Gauge * Added support for ECODHOME smart socket * Added support for LaCrosse Technology View TH2 Thermo/Hygro sensor * Added support for Bresser 6-in-1, 7-in-1 weather station * Added support for LaCrosse Technology View TH3 Thermo/Hygro Sensor * Added support for LaCrosse LTV-WR1 Multi Sensor * Added support for Nice Flor-s remote * Added support for Schrader TPMS SMD3MA4 (Subaru) * Added support for MightyMule Driveway Alarm FM231 * Added support for Somfy RTS * Added support for LaCrosse LTV-WSDTH01 * Added support for TFA 30.3221.02 Temperature/Humidity sensor * Added support for Security plus v2 keyfob * Added support for Acurite Atlas and Atlas Lightning Detector * Added support for Acurite 590TX * Added support for ThermoPro TX2 * Added support for IDM and NetIDM decoders * Added support for Insteon decoder * Added support for LaCrosse TX141B * Added support for Sharp SPC775 * Added support for Missil ML0757 * Added support for Fineoffset WH32 * Added support for Abarth124 TPMS sensor * Added support for Fine Offset WH1080 FSK version * Added support for SCM+ decoder * Added support for Kerui WD51 Water leak sensor * Added support for Cotech 36-7959 * Added support for Eurochron EFTH-800 * Added support for Visonic Powercode devices * Added support for Klimalogg decoder and needed nrzs demodulator Changed * Added support for LaCrosse Technology View R1 Rainfall Gauge (#1553) * Added http server (#871) * Added jsmn json lib * Added support for ECODHOME smart socket (#1544) * Fixed Lacrosse-THx hardcoded strings to support data extractor scripts * Added support for LaCrosse Technology View TH2 Thermo/Hygro sensor (#1552) * Added stats start time reporting * Fixed Analyzer FSK/OOK hint (#1557) * Improved unit tests for bitbuffer with extra assertions * Fixed UNUSED in term_ctl * Removed "http" as "influx" alias * Added arguments and docs to Home Assistant MQTT auto discovery script (#1546) * Changed LaCrosse LTV-WR1 to wind_avg_km_h key (#1549) * Fixed rfraw builder overflow (#1539) * Added Dooya Curtain Remote conf (#1545) * Added SDR loop api * Changed to sig_atomic_t for sighandler * Fixed wmbus csv output parameters * Fixed flags field for TPMS Jansite (#1538) * Added note for TFA Dostmann 30.3159.IT (#1537) * Added SDR runtime settings api * Changed exit async naming * Added SDR device info * Added support for Bresser 6-in-1, 7-in-1 weather station (#1225) * Added support for LaCrosse Technology View TH3 Thermo/Hygro Sensor (#1536) * Added support for LaCrosse LTV-WR1 Multi Sensor (#1533) * Added support for Nice Flor-s remote (#1526) * Changed remove DSC subtype key (#1522) * Changed Acurite subtype key to message_type (#1520) * Added support for WH31E RCC packet type (#1528) * Fixed wmbus mode S buffer length issue for Lansen meters * Added SoapySDR to MinGW-w64 build * Added output format option to flex getters (#1532) * Added TFA 30.3209 note to Nexus (#1516) * Added TFA-Dostmann 30.3161 rain scale (#1531) * Fixed Insteon string overflow * Fixed missing CSV fields, add a debug check * Added named output tag option (#1517) * Added support for Schrader TPMS SMD3MA4 (Subaru) (#1511) * Removed unneeded update_protocol * Changed width calc from r_device to slicers (#1513) * Added support for mightymule driveway alarm FM231 (#1407) (#1515) * Changed rfraw parse to accept multiple codes * Fixed include for memcmp in rfraw (#1507) * Added id key to scmplus (#1503) * Removed list of supported device protocols from man page (#1345) * Added RfRaw analyzer output support * Added RfRaw format input support * Removed FSK_PULSE_MANCHESTER_ZEROBIT from ook_demods * Fixed Inovalley kw9015b temp/rain fields proper * Fixed Inovalley kw9015b temp/rain fields (#1501) * Added support for Somfy RTS (#1496) * Added 7-bit clean strings check to actions * Added maintainer_update check * Fixed Security+ 2.0 decoder for new gap_limit rows (#1498) * Added clang-analyzer action * Added build action * Added style check action * Improved PCM NRZ 0-bit slicing precision * Fixed output keys for FineOffset WH51 (#1495) * Fixed index bug in TFA 30.3221 * Fixed simplisafe non-printable character output * Added support for LaCrosse LTV-WSDTH01 (#1485) * Added gap_limit to PCM demod * Fixed invalid dumpers on ook input (#1463) * Added support for TFA 30.3221.02 Temperature/Humidity sensor (#1426) * Fixed Acurite 6045 temperature 2.0F too low (#1482 #1401) * Added support for Security plus v2 keyfob (#1480) * Fixed opus_xt300 added sanity check to data values (#1470) * Fixed runtime error 'left shift of 229 by 24 places cannot be represented in type int (#1479) * Fixed bad conf for Fan-11t (#1477) * Added came top432 flex decoder config (#1474) * Fixed wmbus raw telegram output, mainly for wmbusmeters use * Fixed efergy_e2_classic False Trigger (#1475) * FIXed check manchester_decode check decoded bit length in a constent method, removed superfluous comment * FIXed check manchester_decode result length * Fixed current_cost 8 bytes required * Fixed TPMS Abarth124 false positive (#1466) * Fixed alectov1 csv fields (#1457) * Added Atlas Lightning Detector support (#1418) * Added Acurite Atlas support (#1124) * Added Nexus-TE82s compatibility note (#1455) * Updated idm scmplus Meter type list (#1445) * Added Acurite 590TX support (#1411) * Added ThermoPro TX2 support (#1450) * Improved program exit code in case of error (#1451) * Improved Home Assistant MQTT auto discovery (#1390) * Fixed Many False Positives (#1444) * Fixed Globaltronics QUIGG GT-TMBBQ-05 false positives (#1443) * Fixed Oregon Scientific SL109H false positives (#1442) * Added IDM and NetIDM decoders (#1421) * Changed Fineoffset WH32 to exclude pressure * Added Insteon decoder (#1285) * Added Friedland EVO door bell conf * Added support for LaCrosse TX141B (#1434) * Added missing parts for Sharp SPC775 decoder * Added Sharp SPC775 support (#1433) * Added support for Missil ML0757 * Fixed use of return code in Abarth Spider decoder * Added conditional to data_make (#1432) * Added support for Fineoffset WH32 (#1431) * Added bit reversed output for HCS200 decoder to match official tools * Added reverse32 function * Improved x10sec add sensors, tamper, crc (#1413) * Improved inFactory e.g. MIC (#1325) * Changed Kerui to break out additional fields from state (#1018) * Updated rtl_433.example.conf * Improved validations checks for smoke_gs558 protocol * Added Equation/Siemens ADLM FPRF remote conf * Added Abarth124 tpms sensor support * Added missing protocol to readme * Added attenuation histogram output (#1387) * Added Fine Offset WH1080 FSK version support * Improved FSK demodulation of distorted signals better * Added SCM+ decoder (#1410) * Added support for Kerui WD51 Water leak sensor (#1406) * Fixed cancel watchdog when reading from file input * Fixed ERT Endpoint Type extraction (#1379) * Added custom data processor example * Improved Honeywell sensor support (#1384) * Added delay and low battery codes for DS10A door sensor (#1397) * Fixed free results from SoapySDR API * Fixed handle empty filenames * Added support for Cotech 36-7959 (#1382) * Removed deprecated positional flex syntax * Changed div 10 to mul 0.1 in all decoders * Changed value scaling for double to float in all decoders * Changed checks on Rubicson/Nexus/Solight * Fixed Bresser 5in1 Wind calculation (#1353) * Improved MQTT Home Assistant example (#1357) * Added decode_uart util (#1376) * Fixed Eurochron EFTH-800 missing mic * Added Eurochron EFTH-800 support (#1375) * Fixed MQTTT mgr free * Fixed Soapy string leaks * Added Prometheus/OpenMetrics relay example (#1371) * Fixed missing levels with minmax demod (fixes #1363) * Fixed socket portability * Fixed visonic device battery reporting * Improved visonic_powercode * Fixed rtl_tcp gain/rate/freq status output * Fixed missing WSAStartup in rtl_tcp * Added support for Visonic Powercode devices (#1349) * Added message length check for ESIC EMT7110. * Updated Acurite 6045 to capture all 8 bits of strike counter (#1348) * Added configuration file for SMC5326 (#1346) * Updated template guideline for verbosity (#1344) * Fixed failing style-check test by adding allocation check to write-sigrok * Added support for sigrok convert on windows (#1341) * Fixed flex map parse * Changed -l n to -Y level=n * Changed detector level limits to dB * Fixed Fineoffset-WHx080 temperature (#1327) * Fixed Ecowitt-WH53, Maverick-ET73 timings * Fixed Klimalogg device settings, tolerance was set to low * Added Klimalogg decoder and needed nrzs demodulator * Fixed negative temperatures in wmbus decoder * Added pulse-eval example ==== rubygem-ffi ==== Version update (1.13.1 -> 1.14.2) - updated to version 1.14.2 Fixed: * Fix builtin libffi on newer Ubuntu caused by an outdated Makefile.in . #863 - updated to version 1.14.1 Changed: * Revert changes to FFI::Pointer#write_string made in ffi-1.14.0. It breaks compatibilty in a way that can cause hard to find errors. #857 ==== rubygem-grape ==== Version update (1.4.0 -> 1.5.1) updated to version 1.5.1 1.5.1 (2020/11/15) Fixes - #2129: Fix validation error when Required Array nested inside an optional array, for Multiparam validators - @dwhenry. - #2128: Fix validation error when Required Array nested inside an optional array - @dwhenry. - #2127: Fix a performance issue with dependent params - @dnesteryuk. - #2126: Fix warnings about redefined attribute accessors in AttributeTranslator - @samsonjs. - #2121: Fix 2.7 deprecation warning in validator_factory - @Legogris. - #2115: Fix declared_params regression with multiple allowed types - @stanhu. - #2123: Fix 2.7 deprecation warning in middleware/stack - @Legogris. 1.5.0 (2020/10/05) Fixes - #2104: Fix Ruby 2.7 keyword deprecation warning - @stanhu. - #2103: Ensure complete declared params structure is present - @tlconnor. - #2099: Added truffleruby to Travis-CI - @gogainda. - #2089: Specify order of mounting Grape with Rack::Cascade in README - @jonmchan. - #2083: Set Cache-Control header only for streamed responses - @stanhu. - #2092: Correct an example params in Include Missing doc - @huyvohcmc. - #2091: Fix ruby 2.7 keyword deprecations - @dim. - #2097: Skip to set default value unless meets_dependency? - @wanabe. - #2096: Fix redundant dependency check - @braktar. - #2096: Fix nested coercion - @braktar. - #2102: Fix retaining setup blocks when remounting APIs - @jylamont. ==== rubygem-json ==== Version update (2.3.1 -> 2.5.1) - updated to version 2.5.1 * Restore the compatibility for constants of JSON class. ==== rubygem-net-ldap ==== Version update (0.16.3 -> 0.17.0) updated to version 0.17.0 - Added private recursive_delete as alternative to DELETE_TREE #268 - Test suite updates #373 #376 #377 - Use Base64.strict_encode64 and SSHA256 #303 - Remove deprecated ConnectionRefusedError #366 - Added method to get a duplicate of the internal Hash #286 - remove a circular require #380 - fix LdapServerAsnSyntax compile #379 - Implement '==' operator for entries #381 - fix for undefined method for write exception #383 ==== rubygem-nokogiri ==== Version update (1.10.10 -> 1.11.0) - Update to version 1.11.0 https://nokogiri.org/CHANGELOG.html#v1110-2021-01-03 ==== rubygem-rubocop ==== Version update (1.4.2 -> 1.7.0) - New upstream release 1.7.0 [#]## New features * [#9260](https://github.com/rubocop-hq/rubocop/pull/9260): Support auto-correction for `Style/MultilineMethodSignature`. ([@koic][]) * [#9282](https://github.com/rubocop-hq/rubocop/pull/9282): Make `Style/RedundantFreeze` and `Style/MutableConstant` cops aware of frozen regexp and range literals when using Ruby 3.0. ([@koic][]) * [#9223](https://github.com/rubocop-hq/rubocop/issues/9223): Add new `Lint/AmbiguousAssignment` cop. ([@fatkodima][]) * [#9243](https://github.com/rubocop-hq/rubocop/pull/9243): Support auto-correction for `Style/CommentedKeyword`. ([@koic][]) * [#9283](https://github.com/rubocop-hq/rubocop/pull/9283): Add new `Style/HashExcept` cop. ([@koic][]) * [#9231](https://github.com/rubocop-hq/rubocop/pull/9231): Add new `Layout/SpaceBeforeBrackets` cop. ([@koic][]) [#]## Bug fixes * [#9232](https://github.com/rubocop-hq/rubocop/pull/9232): Fix `Style/SymbolProc` registering wrong offense when using a symbol numbered block argument greater than 1, i.e. `[[1, 2]].map { _2.succ }`. ([@tdeo][]) * [#9274](https://github.com/rubocop-hq/rubocop/issues/9274): Fix error in `Metrics/ClassLength` when the class only contains comments. ([@dvandersluis][]) * [#9213](https://github.com/rubocop-hq/rubocop/issues/9213): Fix a false positive for `Style/RedanduntFreeze` when using `Array#*`. ([@koic][]) * [#9279](https://github.com/rubocop-hq/rubocop/pull/9279): Add support for endless methods to `Style/MethodCallWithArgsParentheses`. ([@dvandersluis][]) * [#9245](https://github.com/rubocop-hq/rubocop/issues/9245): Fix `Lint/AmbiguousRegexpLiteral` when given a `match_with_lvasgn` node. ([@dvandersluis][]) * [#9276](https://github.com/rubocop-hq/rubocop/pull/9276): Add support for endless methods to `Style/SingleLineMethods`. ([@dvandersluis][]) * [#9225](https://github.com/rubocop-hq/rubocop/issues/9225): Fix Style/LambdaCall ignoring further offenses after opposite style is detected. ([@sswander][]) * [#9234](https://github.com/rubocop-hq/rubocop/issues/9234): Fix the error for `Style/KeywordParametersOrder` and make it aware of block keyword parameters. ([@koic][]) * [#8938](https://github.com/rubocop-hq/rubocop/pull/8938): Fix some ConfigurableEnforcedStyle cops to output `Exclude` file lists in `--auto-gen-config` runs. ([@h-lame][]) * [#9257](https://github.com/rubocop-hq/rubocop/issues/9257): Fix false positive for `Style/SymbolProc` when the block uses a variable from outside the block. ([@dvandersluis][]) * [#9251](https://github.com/rubocop-hq/rubocop/issues/9251): Fix extracted cop warning when the extension is loaded using `--require`. ([@dvandersluis][]) * [#9244](https://github.com/rubocop-hq/rubocop/issues/9244): When a cop defined in an extension is explicitly enabled, ensure that it remains enabled. ([@dvandersluis][]) * [#8046](https://github.com/rubocop-hq/rubocop/issues/8046): Fix an error for `Layout/HeredocArgumentClosingParenthesis` when there is an argument between a heredoc argument and the closing paretheses. ([@koic][]) * [#9261](https://github.com/rubocop-hq/rubocop/pull/9261): Fix an incorrect auto-correct for `Style/MultilineWhenThen` when one line for multiple condidate values of `when` statement. ([@makicamel][]) * [#9258](https://github.com/rubocop-hq/rubocop/pull/9258): Fix calculation of cop department for nested departments. ([@mvz][]) * [#9277](https://github.com/rubocop-hq/rubocop/pull/9277): Fix `Layout/EmptyLineBetweenDefs` error with endless method definitions. ([@dvandersluis][]) * [#9278](https://github.com/rubocop-hq/rubocop/pull/9278): Update `Style/MethodDefParentheses` to ignore endless method definitions since parentheses are always required. ([@dvandersluis][]) [#]## Changes * [#9212](https://github.com/rubocop-hq/rubocop/pull/9212): Make `Style/RedundantArgument` aware of `String#chomp` and `String#chomp!`. ([@koic][]) * [#8482](https://github.com/rubocop-hq/rubocop/issues/8482): Allow simple math for `Lint/BinaryOperatorWithIdenticalOperands` cop. ([@fatkodima][]) * [#9237](https://github.com/rubocop-hq/rubocop/issues/9237): Add `IgnoredPatterns` configuration to `Lint/UnreachableLoop` to allow for block methods that share a name with an `Enumerable` method. ([@dvandersluis][]) * [#9206](https://github.com/rubocop-hq/rubocop/pull/9206): Allow extensions to disable cop obsoletions. ([@dvandersluis][]) * [#9262](https://github.com/rubocop-hq/rubocop/issues/9262): Update `Style/CollectionMethods` to be handle additional arguments and methods that accept a symbol instead of a block. ([@dvandersluis][]) * [#9235](https://github.com/rubocop-hq/rubocop/issues/9235): Allow `--only` and `--except` to be able to properly qualify cops added by require. ([@dvandersluis][]) * [#9205](https://github.com/rubocop-hq/rubocop/issues/9205): Update `Naming/MemoizedInstanceVariableName` to handle dynamically defined methods. ([@dvandersluis][]) * [#9285](https://github.com/rubocop-hq/rubocop/pull/9285): Add `AllowPercentLiteralArrayArgument` option for `Lint/RedundantSplatExpansion` to enable the option by default. ([@koic][]) * [#9208](https://github.com/rubocop-hq/rubocop/issues/9208): Use Array#bsearch instead of Array#include? to detect hidden files. ([@dark-panda][]) * [#9228](https://github.com/rubocop-hq/rubocop/pull/9228): Suppress any config warnings for `rubocop -V`. ([@dvandersluis][]) * [#9193](https://github.com/rubocop-hq/rubocop/pull/9193): Add `IgnoreLiteralBranches` and `IgnoreConstantBranches` options to `Lint/DuplicateBranch`. ([@dvandersluis][]) [@koic]: https://github.com/koic [@fatkodima]: https://github.com/fatkodima [@tdeo]: https://github.com/tdeo [@dvandersluis]: https://github.com/dvandersluis [@sswander]: https://github.com/sswander [@h-lame]: https://github.com/h-lame [@makicamel]: https://github.com/makicamel [@mvz]: https://github.com/mvz [@dark-panda]: https://github.com/dark-panda - New upstream release 1.6.1 [#]## Bug fixes * [#9196](https://github.com/rubocop-hq/rubocop/issues/9196): Fix `ConfigObsoletion::ExtractedCop` raising errors for loaded features when bundler is not activated. ([@dvandersluis][]) [@dvandersluis]: https://github.com/dvandersluis - New upstream release 1.6.0 [#]## New features * [#9125](https://github.com/rubocop-hq/rubocop/issues/9125): Allow ConfigObsoletion to be extended by other RuboCop libraries. ([@dvandersluis][]) * [#9182](https://github.com/rubocop-hq/rubocop/pull/9182): Support auto-correction for `Style/RedundantArgument`. ([@koic][]) * [#9186](https://github.com/rubocop-hq/rubocop/pull/9186): Support auto-correction for `Style/FloatDivision`. ([@koic][]) * [#9167](https://github.com/rubocop-hq/rubocop/pull/9167): Support auto-correct for `StyleSingleLineBlockParams`. ([@koic][]) [#]## Bug fixes * [#9177](https://github.com/rubocop-hq/rubocop/pull/9177): Remove back-ref related code from `Style/SpecialGlobalVars`. ([@r7kamura][]) * [#9160](https://github.com/rubocop-hq/rubocop/issues/9160): Fix an incorrect auto-correct for `Style/IfUnlessModifier` and `Style/SoleNestedConditional` when auto-correction conflicts for guard condition. ([@koic][]) * [#9174](https://github.com/rubocop-hq/rubocop/issues/9174): Handle send nodes with unparenthesized arguments in `Style/SoleNestedConditional`. ([@dvandersluis][]) * [#9184](https://github.com/rubocop-hq/rubocop/issues/9184): `Layout/EmptyLinesAroundAttributeAccessor` fails if the attr_accessor is the last line of the file. ([@tas50][]) [#]## Changes * [#9171](https://github.com/rubocop-hq/rubocop/pull/9171): Add "did you mean" message when failing due to invalid cops in configuration. ([@dvandersluis][]) * [#8897](https://github.com/rubocop-hq/rubocop/issues/8897): Change `Style/StringConcatenation` to accept line-end concatenation between two strings so that `Style/LineEndConcatenation` can handle it instead. ([@dvandersluis][]) * [#9172](https://github.com/rubocop-hq/rubocop/pull/9172): Add `Style/PerlBackrefs` targets and change message more detailed. ([@r7kamura][]) * [#9187](https://github.com/rubocop-hq/rubocop/pull/9187): Update formatters to output `[Correctable]` for correctable offenses. ([@dvandersluis][]) * [#9169](https://github.com/rubocop-hq/rubocop/pull/9169): Add obsoletion warnings for `Performance/*` and `Rails/*` which are in separate gems now. ([@dvandersluis][]) [@dvandersluis]: https://github.com/dvandersluis [@koic]: https://github.com/koic [@r7kamura]: https://github.com/r7kamura [@tas50]: https://github.com/tas50 - New upstream release 1.5.2 [#]## Bug fixes * [#9152](https://github.com/rubocop-hq/rubocop/issues/9152): Fix an incorrect auto-correct for `Style/SoleNestedConditional` when nested `||` operator modifier condition. ([@koic][]) * [#9161](https://github.com/rubocop-hq/rubocop/issues/9161): Fix a false positive for `Layout/HeredocArgumentClosingParenthesis` when using subsequence closing parentheses in the same line. ([@koic][]) * [#9151](https://github.com/rubocop-hq/rubocop/issues/9151): Fix `SuggestExtensions` to not suggest extensions that are installed but not direct dependencies. ([@dvandersluis][]) * [#8985](https://github.com/rubocop-hq/rubocop/issues/8985): Fix `Style/StringConcatenation` autocorrect generating invalid ruby. ([@tejasbubane][]) * [#9155](https://github.com/rubocop-hq/rubocop/issues/9155): Fix a false positive for `Layout/MultilineMethodCallIndentation` when multiline method chain has expected indent width and the method is preceded by splat for `EnforcedStyle: indented_relative_to_receiver`. ([@koic][]) [#]## Changes * [#9080](https://github.com/rubocop-hq/rubocop/issues/9080): Make `Lint/ShadowingOuterVariable` aware of `Ractor`. ([@tejasbubane][]) * [#9102](https://github.com/rubocop-hq/rubocop/pull/9102): Relax regexp_parser requirement. ([@marcandre][]) [@koic]: https://github.com/koic [@dvandersluis]: https://github.com/dvandersluis [@tejasbubane]: https://github.com/tejasbubane [@marcandre]: https://github.com/marcandre - New upstream release 1.5.1 [#]## Bug fixes * [#8684](https://github.com/rubocop-hq/rubocop/issues/8684): Fix an error for `Lint/InterpolationCheck` cop. ([@tejasbubane][]) * [#9145](https://github.com/rubocop-hq/rubocop/issues/9145): Fix issues with SuggestExtensions when bundler is not available, or when there is no gemfile. ([@dvandersluis][]) * [#9140](https://github.com/rubocop-hq/rubocop/issues/9140): Fix an error for `Layout/EmptyLinesAroundArguments` when multiline style argument for method call without selector. ([@koic][]) * [#9136](https://github.com/rubocop-hq/rubocop/pull/9136): Fix `AllowedIdentifiers` in `Naming/VariableNumber` to include variable assignments. ([@PhilCoggins][]) [@tejasbubane]: https://github.com/tejasbubane [@dvandersluis]: https://github.com/dvandersluis [@koic]: https://github.com/koic [@PhilCoggins]: https://github.com/PhilCoggins - New upstream release 1.5.0 [#]## New features * [#9112](https://github.com/rubocop-hq/rubocop/pull/9112): Add new cop `Lint/UnexpectedBlockArity`. ([@dvandersluis][]) * [#9010](https://github.com/rubocop-hq/rubocop/pull/9010): `Metrics/ParameterLists` supports `MaxOptionalParameters` config parameter. ([@fatkodima][]) * [#9114](https://github.com/rubocop-hq/rubocop/pull/9114): Support auto-correction for `Style/SoleNestedConditional`. ([@koic][]) * [#8564](https://github.com/rubocop-hq/rubocop/issues/8564): `Metrics/AbcSize`: Add optional discount for repeated "attributes". ([@marcandre][]) [#]## Bug fixes * [#8820](https://github.com/rubocop-hq/rubocop/issues/8820): Fixes `IfWithSemicolon` autocorrection when `elsif` is present. ([@adrian-rivera][], [@dvandersluis][]) * [#9113](https://github.com/rubocop-hq/rubocop/pull/9113): Fix a false positive for `Style/MethodCallWithoutArgsParentheses` when assigning to a default argument with the same name. ([@koic][]) * [#9115](https://github.com/rubocop-hq/rubocop/issues/9115): Fix a false positive for `Style/FirstArgumentIndentation` when argument has expected indent width and the method is preceded by splat for `EnforcedStyle: consistent_relative_to_receiver`. ([@koic][]) * [#9128](https://github.com/rubocop-hq/rubocop/issues/9128): Fix an incorrect auto-correct for `Style/ClassAndModuleChildren` when namespace is defined as a class in the same file. ([@koic][]) * [#9105](https://github.com/rubocop-hq/rubocop/issues/9105): Fix an incorrect auto-correct for `Style/RedundantCondition` when using operator method in `else`. ([@koic][]) * [#9096](https://github.com/rubocop-hq/rubocop/pull/9096): Fix #9095 use merged_config instead of config for pending new cop check. ([@ThomasKoppensteiner][https://github.com/ThomasKoppensteiner]) * [#8053](https://github.com/rubocop-hq/rubocop/issues/8053): Fix an incorrect auto-correct for `Style/AndOr` when `or` precedes `and`. ([@koic][]) * [#9097](https://github.com/rubocop-hq/rubocop/issues/9097): Fix a false positive for `Layout/EmptyLinesAroundArguments` when blank line is inserted between method with arguments and receiver. ([@koic][]) [#]## Changes * [#9122](https://github.com/rubocop-hq/rubocop/issues/9122): Added tip message if any gems are loaded that have RuboCop extensions. ([@dvandersluis][]) * [#9104](https://github.com/rubocop-hq/rubocop/issues/9104): Preset some stdlib method names for `Naming/VariableNumber`. ([@koic][]) * [#9127](https://github.com/rubocop-hq/rubocop/pull/9127): Update `Style/SymbolProc` to be aware of numblocks. ([@dvandersluis][]) * [#9102](https://github.com/rubocop-hq/rubocop/pull/9102): Upgrade regexp_parser to 2.0. ([@knu][]) * [#9100](https://github.com/rubocop-hq/rubocop/pull/9100): Update `ConfigObsoletion` so that parameters can be deprecated but still accepted. ([@dvandersluis][]) * [#9108](https://github.com/rubocop-hq/rubocop/pull/9108): Update `Lint/UnmodifiedReduceAccumulator` to handle numblocks and more than 2 arguments. ([@dvandersluis][]) * [#9098](https://github.com/rubocop-hq/rubocop/pull/9098): Update `Metrics/BlockLength` and `Metrics/MethodLength` to use `IgnoredMethods` instead of `ExcludedMethods` in configuration. The previous key is retained for backwards compatibility. ([@dvandersluis][]) * [#9098](https://github.com/rubocop-hq/rubocop/pull/9098): Update `IgnoredMethods` so that every cop that uses it will accept both strings and regexes in the configuration. ([@dvandersluis][]) [@dvandersluis]: https://github.com/dvandersluis [@fatkodima]: https://github.com/fatkodima [@koic]: https://github.com/koic [@marcandre]: https://github.com/marcandre [@adrian-rivera]: https://github.com/adrian-rivera [@knu]: https://github.com/knu ==== rubygem-rubocop-ast ==== Version update (1.1.1 -> 1.4.0) - New upstream release 1.4.0 [#]# 1.4.0 (2021-01-01) [#]## Changes * [#162](https://github.com/rubocop-hq/rubocop-ast/pull/162): Improve compatibility with `parser` 3.0. Turn on `emit_match_pattern` switch. ([@marcandre][]) [#]# 1.3.0 (2020-11-30) [#]## Changes * [#156](https://github.com/rubocop-hq/rubocop-ast/issues/156): NodePattern now considers constant names to refer to constants (instead of predicate `#Example_type?`). ([@marcandre][]) [#]# 1.2.0 (2020-11-24) [#]## New features * [#154](https://github.com/rubocop-hq/rubocop-ast/pull/154): Add `ArgNode` and `Procarg0Node` ("modern" mode), and add `ArgsNode#argument_list` to get only argument type nodes. ([@dvandersluis][]) [#]## Changes * [#155](https://github.com/rubocop-hq/rubocop-ast/pull/155): Enable `BlockNode#argument_list` for `numblock`s. ([@dvandersluis][]) * [#154](https://github.com/rubocop-hq/rubocop-ast/pull/154): Add `BlockNode#argument_list` and `BlockNode#argument_names`. ([@dvandersluis][]) * [#147](https://github.com/rubocop-hq/rubocop-ast/pull/147): `def_node_pattern` and `def_node_search` now return the method name. ([@marcandre][]) ==== rubygem-tzinfo ==== Version update (2.0.3 -> 2.0.4) - updated to version 2.0.4 * Fixed an incorrect `InvalidTimezoneIdentifier` exception raised when loading a zoneinfo file that includes rules specifying an additional transition to the final defined offset (for example, Africa/Casablanca in version 2018e of the Time Zone Database). #123. ==== rubygem-yajl-ruby ==== - added silence-gcc-warnings.patch silence gcc warnings ==== rygel ==== Subpackages: librygel-core-2_6-2 librygel-server-2_6-2 - Update/correct the description of rygel-plugin-gstreamer-renderer, it is now based on playbin3. ==== samba ==== Version update (4.13.2+git.176.0a5e55b510c -> 4.13.3+git.181.fc4672a5b81) Subpackages: libdcerpc-binding0 libdcerpc0 libndr-krb5pac0 libndr-nbt0 libndr-standard0 libndr1 libnetapi0 libsamba-credentials0 libsamba-errors0 libsamba-hostconfig0 libsamba-passdb0 libsamba-policy0-python3 libsamba-util0 libsamdb0 libsmbclient0 libsmbconf0 libsmbldap2 libtevent-util0 libwbclient0 samba-client samba-doc samba-libs samba-libs-python3 samba-python3 samba-winbind - Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514); ==== signon-kwallet-extension ==== Version update (20.08.3 -> 20.12.1) - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - No code change since 20.12.0 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - No code change since 20.08.3 ==== snapper ==== Version update (0.8.14 -> 0.8.15) Subpackages: libsnapper5 snapper-zypp-plugin - added option to abbreviate columns in table (see gh#openSUSE/snapper#268) - version 0.8.15 - in systemd-helper continue with other configs if one config is broken (gh#openSUSE/snapper#495) - fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505) ==== solid ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5Solid5 libKF5Solid5-lang solid-imports solid-tools - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Include errno.h for EBUSY/EPERM * FstabBackend: return DeviceBusy where umount failed on EBUSY (kde#411772) * Fix detection of recent libplist and libimobiledevice ==== sonnet ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5SonnetCore5 libKF5SonnetCore5-lang libKF5SonnetUi5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Use contains instead of indexOf ==== sord ==== Version update (0.16.4 -> 0.16.6) - update to 0.16.6: * Fix potential crash or incorrectness issues with GCC 10 * Fix various minor warnings and other code quality issues ==== spamassassin ==== Subpackages: perl-Mail-SpamAssassin - Require perl(Mail::SpamAssassin) instead of perl-spamassassin - Don't use BerkeleyDB (not even for unit test) - Don't use is_opensuse conditional - Move spamc into an own sub-package to avoid the full spamassassin installation on every client if there is a spamd server - Compile rules in %post if Perl and/or spamassassin version changed and SPAM_SA_COMPILE=yes - Enable test (add basic-lint-without-sandbox.patch) - Ignore known warnings (add spamassassin-rpmlintrc) ==== spectacle ==== Version update (20.08.3 -> 20.12.1) Subpackages: spectacle-lang - Update to 20.12.1 * New bugfix release * For more details please see: * https://kde.org/announcements/releases/2021-01-apps-update - Changes since 20.12.0: * Changed signal of Annotate button in main window from pressed to clicked in order to let annotation mode appear after button is released. * We do not need progress info when checking if a file exists (kde#430173) * Remove dead code variant - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - Changes since 20.11.90: * PlatformKWinWayland: avoid recursion in readData (kde#428636) - Update to 20.11.90 * New feature release - Changes since 20.11.80: * Support Wayland rectangular selection HiDpi (kde#409762) * fix autoincrement of %d for templates with subdirs * Set pixmap device pixel ratio before sending it to kimageannotator - Update to 20.11.80 * New feature release - Too many changes since 20.08.3, only listing bugfixes: * Unhide window if it is hidden (kde#428635) * Separate messages for a failed and canceled screenshot (kde#427645) * Use default value for including decorations and pointer in background mode (kde#425995) * Improve settings logic and layout (kde#420477) * Respect settings and cli parameters (kde#425573) * Add CLI options for including pointer/decorations (kde#425995) * Fix wrong file name when --output option is used (kde#424380) - Drop upstream patch: * 0001-Fix-wrong-file-name-when-output-option-is-used.patch ==== step ==== Version update (20.08.3 -> 20.12.0) Subpackages: step-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Add QT_MIN_VERSION and KF5_MIN_VERSION like everywhere else * Qt5Test is only used in autotests and already searched for in there * Remove explicit ECM_KDE_MODULE_DIR * Port away from deprecated Qt::MidButton * Fix KNS deprecations ==== strace ==== Version update (5.9 -> 5.10) - Update to strace 5.10 * Improvements * libdw-based stack tracing is now enabled for non-native personalities. * Implemented decoding of process_madvise syscall introduced in Linux 5.10. * Updated decoding of pidfd_open syscall to match Linux 5.10. * Updated decoding of membarrier syscall to match Linux 5.10. * Updated lists of ALG_*, BPF_*, INET_DIAG_*, IORING_*, KEY_*, KVM_*, MDBA_*, MEMBARRIER_CMD_*, MS_*, NLMSGERR_*, NT_*, STATX_*, SEGV_*, and V4L2_* constants. * Updated lists of ioctl commands from Linux 5.10. * Bug fixes * Added clock_gettime64, clock_settime64, clock_adjtime64, and lock_getres_time64 syscalls to %clock trace class. ==== sudo ==== Version update (1.9.4 -> 1.9.4p2) Subpackages: sudo-plugin-python - Update to 1.9.4p2 * Fixed a bug introduced in sudo 1.9.4p1 which could lead to a crash if the sudoers file contains a runas user-specific Defaults entry. Bug #951. - News in 1.9.4p1 * Fixed a regression introduced in version 1.9.4 where sudo would not build when configured using the --without-sendmail option. Bug #947. * Fixed a problem where if I/O logging was disabled and sudo was unable to connect to sudo_logsrvd, the command would still be allowed to run even when the "ignore_logfile_errors" sudoers option was enabled. * Fixed a crash introduced in version 1.9.4 when attempting to run a command as a non-existent user. Bug #948. * The installed sudo.conf file now has the default sudoers Plugin lines commented out. This fixes a potential conflict when there is both a system-installed version of sudo and a user-installed version. GitHub issue #75. * Fixed a regression introduced in sudo 1.9.4 where sudo would run the command as a child process even when a pseudo-terminal was not in use and the "pam_session" and "pam_setcred" options were disabled. GitHub issue #76. * Fixed a regression introduced in sudo 1.8.9 where the "closefrom" sudoers option could not be set to a value of 3. Bug #950. ==== sweeper ==== Version update (20.08.3 -> 20.12.0) Subpackages: sweeper-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Remove explicit ECM_KDE_MODULE_DIR ==== syndication ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== syntax-highlighting ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5SyntaxHighlighting5 libKF5SyntaxHighlighting5-lang - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Too many changes since 5.76.0, only listing bugfixes: * Latex: some math environments can be nested (kde#428947) ==== system-users ==== Subpackages: system-group-hardware system-group-libvirt system-group-wheel system-user-bin system-user-daemon system-user-ftp system-user-games system-user-lp system-user-mail system-user-man system-user-news system-user-nobody system-user-qemu system-user-tftp system-user-upsd system-user-uucp system-user-wwwrun - Add system-user-vscan subpackage with vscan user and group and /var/spool/amavis as home directory - Remove kvm group from hardware subpackage, since kvm is in its own subpackage (jsc#SLE-11629). ==== systemd ==== Version update (246.7 -> 246.9) Subpackages: libsystemd0 libudev-devel libudev1 systemd-container systemd-doc systemd-logger systemd-sysvinit udev - Import commit 520e53b6d85087b05892ee637ae93f1b269e7e52 (merge of v246.9) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/2401461e5f0e32922823d954c56106f… - Import commit 2401461e5f0e32922823d954c56106f96344070e 6131548b0f udev: link_update() should fail if the entry in symlink dir couldn't have been created f6cb8c7d79 udev: make algorithm that selects highest priority devlink less susceptible to race conditions (bsc#1084748) fc64e47291 basic/stat-util: make mtime check stricter and use entire timestamp ae91d45d3d test/sys-script.py: add missing DEVNAME entries to uevents 09e3473a7a test/udev_test.pl: add "expected good" count fc89379b5b test/udev-test.pl: suppress umount error message at startup d9e114f10d test/sd-script.py: new helper script for udev testing f2672eae66 test/udev-test.pl: generator for large list of block devices 42b68e43e2 test/udev-test.pl: add repeat count eec8ec375a tests/udev-test.pl: add multiple device test 73b8f3cf93 test/udev-test.pl: count "good" results ee04d70bb6 test/udev-test.pl: merge import parent tests into one 03942c8fbc test/udev-test.pl: merge "space and var with space" tests ec95546189 test/udev-test.pl: remove bogus rules from magic subsys test f704429217 test/udev-test.pl: Make some tests a little harder ce1a877dc0 test/udev-test.pl: last_rule is unsupported 913c72ff2d test/udev-test.pl: fix wrong test descriptions eeb25a1be6 test/udev-test.pl: allow checking multiple symlinks 00ab4292da test/udev-test.pl: test correctness of symlink targets 5b71ee2911 test/udev-test.pl: use computed devnode name 2e04bb9ae8 test/udev-test.pl: allow concurrent additions and removals 8816dd593c test/udev-test.pl: create rules only once 214418632d test/udev-test.pl: allow multiple devices per test 1eb6b23f27 udev-test: do not rely on "mail" group being defined 4a0a4dcf10 udev: Fix sound.target dependency (bsc#1179363) - Enable support for zstd compression systemd-journald will now use zstd for compressing large fields in journal files. systemd-coredump will also use this algorithm to compress coredump files. Please note that systemd older than v246 won't be able to read new journal files as zstd algorithm is not supported by these versions. This incompatible change was actually not the only one introduced by v246 since the hash tables in journal files have been hardened against hash collisions too in an incompatible way with older versions. - Explicitly require group(kvm) by udev: the group used to be created by system-users-hardware, but has been split/moved to qemu/kvm, where it is more logical. The file /usr/lib/udev/rules.d/50-udev-default.rules references this group, thus we should make sure the group exists. Otherwise there are errors in the journal in the form of: /usr/lib/udev/rules.d/50-udev-default.rules:86 Unknown group 'kvm', ignoring ==== systemsettings5 ==== Version update (5.20.4 -> 5.20.5) Subpackages: systemsettings5-lang - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== sysuser-tools ==== - useradd_or_adduser_dep must be PreReq so ordering makes sure it gets installed before. - suggest shadow where useradd_or_adduser_dep is actually required ==== threadweaver ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== tiff ==== Version update (4.1.0 -> 4.2.0) Subpackages: libtiff5 - version update to 4.2.0 Major changes: * Optional support for using libdeflate is added. * Many of the tools now support a memory usage limit. See http://www.simplesystems.org/libtiff/v4.2.0.html for more. ==== timezone ==== Version update (2020d -> 2020f) - timezone update 2020f (bsc#1177460) * 'make rearguard_tarballs' no longer generates a bad rearguard.zi, fixing a 2020e bug. - timezone update 2020e (bsc#1177460) * Volgograd switches to Moscow time on 2020-12-27 at 02:00. ==== timezone-java ==== Version update (2020d -> 2020f) - timezone update 2020f (bsc#1177460) * 'make rearguard_tarballs' no longer generates a bad rearguard.zi, fixing a 2020e bug. - timezone update 2020e (bsc#1177460) * Volgograd switches to Moscow time on 2020-12-27 at 02:00. ==== tlp ==== Subpackages: tlp-rdw - Use the same value for TLP_ULIB in the %build phase and the %install phase (boo#1180495): + BuildRequire pkgconfig(udev) + Use pkg-config --variable udev_dir udev for the value of TLP_ULIB. ==== totem ==== Subpackages: totem-plugins - Add totem-enable-vaapi.patch: Enable vaapi support again. ==== u-boot-rpiarm64 ==== Subpackages: u-boot-rpiarm64-doc - Rename sun50ia64 to sun50i_a64 and sun50ih6 to sun50i_h6 to follow arm-trusted-firmware-* rename - Add rockpro64-rk3399 Enable RPi 4 Compute Module (jsc#SLE-16895). Fix problems with DMA offset after FW update (bsc#1180338) Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2020.10 * Patches added: 0015-rpi-Add-identifier-for-the-new-RPi4.patch 0016-rpi-Add-identifier-for-the-new-CM4.patch 0017-pci-pcie-brcmstb-Fix-inbound-window.patch 0018-dm-Introduce-xxx_get_dma_range.patch 0019-dm-test-Add-test-case-for-dev_get_d.patch 0020-dm-Introduce-DMA-constraints-into-t.patch 0021-dm-test-Add-test-case-for-dev-dma_o.patch 0022-dm-Introduce-dev_phys_to_bus-dev_bu.patch 0023-dm-test-Add-test-case-for-dev_phys_.patch 0024-xhci-translate-virtual-addresses-in.patch 0025-mmc-Introduce-mmc_phys_to_bus-mmc_b.patch 0026-configs-rpi4-Enable-DM_DMA-across-a.patch 0027-video-arm-rpi-Add-brcm-bcm2711-hdmi.patch 0028-usb-xhci-xhci_bulk_tx-Don-t-BUG-whe.patch ==== udisks2 ==== Subpackages: libudisks2-0 libudisks2-0_btrfs - Add upstream bugfix patches: + udisks2-Fix-memory-leaks.patch + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch ==== umbrello ==== Version update (20.08.3 -> 20.12.0) Subpackages: umbrello-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes since 20.08.3, only listing bugfixes: * Add support to use external KDevPHP packaga (kde#428460) ==== utf8proc ==== Version update (2.5.0 -> 2.6.1) - update to 2.6.1: - Bugfix in `utf8proc_grapheme_break_stateful` for `NULL` state argument, which also broke `utf8proc_grapheme_break`. - New `utf8proc_islower` and `utf8proc_isupper` functions ([#196]). - Bugfix for manual calls to `grapheme_break_extended` for initial characters ([#205]). - Various build and portability improvements. ==== v4l2loopback ==== Version update (0.12.5_k5.9.14_1 -> 0.12.5_k5.10.4_1) Subpackages: v4l2loopback-kmp-default v4l2loopback-utils - add -autoload subpackages that provides the configuration files to autoload the driver on startup ==== vim ==== Version update (8.2.2105 -> 8.2.2129) Subpackages: gvim vim-data vim-data-common - Update to version 8.2.2129, fixes the following problems: * There is no way to do something on CTRL-Z * Vim9: executing user command from Vim9 script not tested * Ruby: missing function prototype * Vim9: leaking memory * Vim9: a range cannot be computed at runtime * After using a complete popup the buffer is listed * Vim9: crash when sourcing vim9script early * Internal error when using \ze before \zs in a pattern * Not all Perl functionality is tested * GTK3: status line background color is wrong * Dead code in the job support * Some functions use any value as a string * Vim9: some errors not tested for; dead code * Vim9: unreachable code in assignment * Running tests may leave some files behind * GTK: menu background is the same color as the main window * Cannot use ":shell" when reading from stdin * "vim -" does not work well when modifyOtherKeys is enabled * Vim9: no test to check for :let error * Vim9: some errors not tested * TOML files are not recognized * Update runtime files. ==== virt-manager ==== Subpackages: virt-install virt-manager-common - bsc#1180062 - virt-install uses isoinfo. Include mkisofs in the spec file. virt-manager.spec - Upstream bug fixes (bsc#1027942) e7222b50-addstorage-Dont-pass-None-to-widget.set_active.patch 4d0e3232-virtinst-Fix-TOCTOU-in-domain-enumeration.patch ==== vlc ==== Subpackages: libvlc5 libvlccore9 vlc-codec-gstreamer vlc-lang vlc-noX vlc-qt vlc-vdpau - Enable LTO (boo#1133290) as it works now (and use FAT lto objects). ==== vulkan-loader ==== Version update (1.2.154.1 -> 1.2.162.0) - Update to release 1.2.162 (sdk) * Add GGP WSI platform support to Vulkan-Loader - Update to release 1.2.161 * Fix some issues when EnumerateAdapterPhysicalDevices is available. * loader: Override layer load when custom allocator used. * Add support for VK_FUCHSIA_imagepipe_surface. ==== webkit2gtk3 ==== Version update (2.30.3 -> 2.30.4) Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 typelib-1_0-JavaScriptCore-4_0 typelib-1_0-WebKit2-4_0 webkit2gtk-4_0-injected-bundles - Update to version 2.30.4: + Fix text data sent with WebSockets when using libsoup < 2.68. + Fix the rendering on Raspberry Pi 3 using the proprietary video driver. + Fix clipping of descedant layers of a mask layer. + Fix the build with ICU 68.1. - Drop upstream merged patch: + 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch ==== wget ==== Version update (1.20.3 -> 1.21) - GNU wget 1.21: * Improve the number of translated strings * Remove all uses of alloca * Fix buffer overflows in progress bar code in some locales * Fix two null pointer accesses * Amend cookie file header to be recognized by the 'file' command * Post Handshake Authentication for OpenSSL - drop obsolete texinfo packaging macros ==== wireless-regdb ==== - leverage %{_firmwaredir} to install firmware into correct location (boo#1029961) ==== wireshark ==== Version update (3.4.0 -> 3.4.2) Subpackages: libwireshark14 libwiretap11 libwsutil12 wireshark-ui-qt - Wireshark 3.4.2 * CVE-2020-26422: QUIC dissector crash (boo#1180232) * Fix IETF QUIC TLS decryption errors when packets are coalesced with random data * QUIC: missing dissection of some coalesced SH packets * Fix false expect error seen on FCoE frames * Updated Protocol Support DOCSIS, FC-dNS, FC-SWILS, FCoE, QUIC, SNMP, and USBHID - Wireshark 3.4.1: * CVE-2020-26418: Kafka dissector memory leak (wnpa-sec-2020-16, boo#1179930) * CVE-2020-26419: Multiple dissector memory leaks (wnpa-sec-2020-19, boo#1179931) * CVE-2020-26420: RTPS dissector memory leak (wnpa-sec-2020-18, boo#1179932) * CVE-2020-26421: USB HID dissector crash (wnpa-sec-2020-17, boo#1179933) * Fix IETF QUIC TLS decryption errors * Fix failures or crashes in various dissectors ==== wxWidgets-3_0 ==== Version update (3.0.4 -> 3.0.5.1) - Update to 3.0.5.1 (boo#1180492): * Workaround for the problem with overflowing maximum command line length in MinGW builds not using configure. * Fix for a problem with wxSpinCtrl in wxGTK, see https://trac.wxwidgets.org/ticket/18688. - Changes from version 3.0.5: * Bug fixes, see https://raw.githubusercontent.com/wxWidgets/wxWidgets/v3.0.5/docs/changes.t…. - Refresh soversion.diff. - Remove 0001-spinctrl.patch: Merged upstream. ==== xapps ==== Version update (2.0.0 -> 2.0.4) Subpackages: libxapp1 typelib-1_0-XApp-1_0 xapps-common xapps-common-lang - Update to version 2.0.4. * Change shebang path - Update to version 2.0.3 * fix "build/install: Make the favorite gtk module's xinit file executable." * Add shebang to 80xapp-gtk3-module.sh * l10n: Update translations - Update to version 2.0.2 * Add an extra icon for favorites - Update to version 2.0.1 * Update docs * fix xorg-server startup variable * favorites: Make sure initializing favorites also initializes the uri scheme. * xapp-favorites.c: Add a note about the favorites uri in the class description. * build/install: Make the favorite gtk module's xinit file executable. * build: update some dependencies. * xapp-gtk3-module.c: Override GObject's constructed vfunc to inject the favorites uri into GtkPlacesSidebars rather than hooking onto a signal. * build: use buildtype=debugoptimized by default. * sn-item.c: Fix typo. * various: Fix some previously missed build warnings. * xapp-gtk3-module.c: Don't add a favorites section if there aren't any favorites. * favorite-vfs-file.c: Don't assume a GError was passed in for file_query_info. * favorite-vfs-file-enumerator.c: Fix a couple more places where an error was assumed. * change favorite icons * favorite-vfs-file.c: Don't free priv->uri until finalize. * favorites: Fix some leaks revealed by valgrind. - Remove fix_sn-item_control_reaches_end_of_non-void_function.patch and xapps-void-return-no-return.patch, fixed ==== xdg-desktop-portal-kde ==== Version update (5.20.4 -> 5.20.5) Subpackages: xdg-desktop-portal-kde-lang - Update to 5.20.5 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.5 - No code changes since 5.20.4 ==== xdm ==== Subpackages: xdm-xsession - fixed path of pidof tool for older openSUSE Leap releases (boo#1179607) ==== xen ==== Version update (4.14.0_12 -> 4.14.1_05) Subpackages: xen-libs xen-tools-domU - Update libxl.set-migration-constraints-from-cmdline.patch Remove code which handled --max_factor. The total amount of transferred data is no indicator to trigger the final stop+copy. This should have been removed during upgrade to Xen 4.7. Fix off-by-one in --max_iters, it caused one additional copy cycle. Reduce default value of --max_iters from 5 to 2. The workload within domU will continue to produce dirty pages. It is unreasonable to expect any slowdown during migration. Now there is one initial copy of all memory, one instead of four iteration for dirty memory, and a final copy iteration prior move. - Update to Xen 4.14.1 bug fix release (bsc#1027519) xen-4.14.1-testing-src.tar.bz2 Contains the following recent security fixes bsc#1179516 XSA-359 - CVE-2020-29571 bsc#1179514 XSA-358 - CVE-2020-29570 bsc#1179513 XSA-356 - CVE-2020-29567 bsc#1178963 XSA-355 - CVE-2020-29040 bsc#1178591 XSA-351 - CVE-2020-28368 bsc#1179506 XSA-348 - CVE-2020-29566 bsc#1179502 XSA-325 - CVE-2020-29483 bsc#1179501 XSA-324 - CVE-2020-29484 bsc#1179498 XSA-322 - CVE-2020-29481 bsc#1179496 XSA-115 - CVE-2020-29480 - Dropped patches contained in new tarball 5f1a9916-x86-S3-put-data-sregs-into-known-state.patch 5f21b9fd-x86-cpuid-APIC-bit-clearing.patch 5f479d9e-x86-begin-to-support-MSR_ARCH_CAPS.patch 5f4cf06e-x86-Dom0-expose-MSR_ARCH_CAPS.patch 5f4cf96a-x86-PV-fix-SEGBASE_GS_USER_SEL.patch 5f560c42-x86-PV-64bit-segbase-consistency.patch 5f560c42-x86-PV-rewrite-segment-ctxt-switch.patch 5f5b6b7a-hypfs-fix-custom-param-writes.patch 5f607915-x86-HVM-more-consistent-IO-completion.patch 5f6a002d-x86-PV-handle-MSR_MISC_ENABLE-correctly.patch 5f6a0049-memory-dont-skip-RCU-unlock-in-acquire_resource.patch 5f6a0067-x86-vPT-fix-race-when-migrating-timers.patch 5f6a008e-x86-MSI-drop-read_msi_msg.patch 5f6a00aa-x86-MSI-X-restrict-reading-of-PBA-bases.patch 5f6a00c4-evtchn-relax-port_is_valid.patch 5f6a00df-x86-PV-avoid-double-exception-injection.patch 5f6a00f4-evtchn-add-missing-barriers.patch 5f6a0111-evtchn-x86-enforce-correct-upper-limit.patch 5f6a013f-evtchn_reset-shouldnt-succeed-with.patch 5f6a0160-evtchn-IRQ-safe-per-channel-lock.patch 5f6a0178-evtchn-address-races-with-evtchn_reset.patch 5f6a01a4-evtchn-preempt-in-evtchn_destroy.patch 5f6a01c6-evtchn-preempt-in-evtchn_reset.patch 5f6cfb5b-x86-PV-dont-GP-for-SYSENTER-with-NT-set.patch 5f6cfb5b-x86-PV-dont-clobber-NT-on-return-to-guest.patch 5f71a21e-x86-S3-fix-shadow-stack-resume.patch 5f76ca65-evtchn-Flask-prealloc-for-send.patch 5f76caaf-evtchn-FIFO-use-stable-fields.patch 5f897c25-x86-traps-fix-read_registers-for-DF.patch 5f897c7b-x86-smpboot-restrict-memguard_guard_stack.patch 5f8ed5d3-x86-mm-map_pages_to_xen-single-exit-path.patch 5f8ed5eb-x86-mm-modify_xen_mappings-one-exit-path.patch 5f8ed603-x86-mm-prevent-races-in-mapping-updates.patch 5f8ed635-IOMMU-suppress-iommu_dont_flush_iotlb-when.patch 5f8ed64c-IOMMU-hold-page-ref-until-TLB-flush.patch 5f8ed682-AMD-IOMMU-convert-amd_iommu_pte.patch 5f8ed69c-AMD-IOMMU-update-live-PTEs-atomically.patch 5f8ed6b0-AMD-IOMMU-suitably-order-DTE-mods.patch xsa286-1.patch xsa286-2.patch xsa286-3.patch xsa286-4.patch xsa286-5.patch xsa286-6.patch xsa351-1.patch xsa351-2.patch xsa351-3.patch xsa355.patch - Pass --with-rundir to configure to get rid of /var/run - bsc#1178736 - allow restart of xenwatchdogd, enable tuning of keep-alive interval and timeout options via XENWATCHDOGD_ARGS= add xenwatchdogd-options.patch add xenwatchdogd-restart.patch - bsc#1177112 - Fix libxc.sr.superpage.patch The receiving side may punch holes incorrectly into optimistically allocated superpages. Also reduce overhead in bitmap handling. add libxc-bitmap-50a5215f30e964a6f16165ab57925ca39f31a849.patch add libxc-bitmap-long.patch add libxc-bitmap-longs.patch - boo#1029961 - Move files in xen-tools-domU to /usr/bin from /bin xen-destdir.patch Drop tmp_build.patch - bsc#1176782 - L3: xl dump-core shows missing nr_pages during core. If maxmem and current are the same the issue doesn't happen 5fca3b32-tools-libs-ctrl-fix-dumping-of-ballooned-guest.patch - bsc#1178963 - VUL-0: xen: stack corruption from XSA-346 change (XSA-355) xsa355.patch - Fix build error with libxl.fix-libacpi-dependency.patch - Enhance libxc.migrate_tracking.patch Hide SUSEINFO messages from pause/unpause/resume from xl command. They are intended for libvirt logging, but lacked info about execution context. Remove extra logging about dirty pages in each iteration, the number of transferred pages + protocol overhead is already reported elsewhere. - Remove libxl.libxl__domain_pvcontrol.patch It is already part of 4.14.0-rc1 ==== xf86-video-r128 ==== Version update (6.11.0 -> 6.12.0) - update to 6.12.0: * Separate EXA and XAA initialization * Evaluate NoAccel option inside R128PreInit * Evaluate EXA related options inside R128PreInit * Evaluate software cursor option inside R128PreInit * Remove OPTION_DAC_8BIT option * Move many DDX UMS options into R128UMSOption * Delete USE_CRT_ONLY conditional compilation directive * Delete OPTION_DISPLAY option enumeration * Move RAMDAC module initialization into R128LegacyMS * Move loading of EXA and XAA modules into R128PreInitAccel * Version bumped to 6.11.100 * Prevent disabling of EXA inside R128ScreenInit * Consolidate frame buffer initialization code * Deprecate R128EXAAccelInit * Deprecate R128AccelInit * Deprecate R128VerboseInitEXA * Consolidate EXA initialization code into R128EXAInit * Hold off enabling acceleration until EXA / XAA are fully initialized * Version bumped to 6.11.101 * Rename R128UMSOption to r128UMSOption * Consolidate acquisition of many options into two functions * Version bumped to 6.11.102 * Fix for build failure when --disable-dri option is specified * Remove Dac6Bit option from man page ==== xfce4-mailwatch-plugin ==== Version update (1.2.0 -> 1.3.0) Subpackages: xfce4-mailwatch-plugin-lang - Update to version 1.3.0 - GTK 3 Port - Remove Libgcrypt dependency - Move "watching" column to the left to avoid overlapping with scrollbar - Add support for XfceTitledDialog new API - Fix cast to pointer - Replace deprecated GTimeVal - Update URLs from goodies.x.o to docs.x.o (bxo#16167) - Added support for multi-row/column panels in xfce4-panel > 4.9 - Fix running command on each change of the count - Fix running an empty command - Do not run command when new message count is 0 - Add SSL support CFLAGS and LDFLAGS conditionally - Translation Updates ==== xfce4-places-plugin ==== Subpackages: xfce4-places-plugin-lang - Fixed dependency requirements for GTK3: pkgconfig(libxfce4panel-2.0) ==== xfce4-smartbookmark-plugin ==== Version update (0.5.1 -> 0.5.2) Subpackages: xfce4-smartbookmark-plugin-lang - Update to version 0.5.2 * Fix build with panel 4.15 * Fix ISO C90 forbids mixed declarations and code * Update configure.ac.in syntax * Create README.md. Update configure.ac.in * Add basic GitLab pipeline * Update URLs from goodies.x.o to docs.x.o (bxo#16176) * Fix build with panel 4.15 * Make build less verbose * s/http/https * Translation Updates - Remove xfce4-smartbookmark-plugin-0.5.0-defaults.patch * Xfce Bugzilla was replaced by Gitlab, the Patch no longer applies ==== xmlsec1 ==== Version update (1.2.30 -> 1.2.31) Subpackages: libxmlsec1-1 libxmlsec1-nss1 libxmlsec1-openssl1 - Update to version 1.2.31: + Unload error strings in OpenSSL shutdown. + Make userData available when executing preExecCallback function. + Add an option to use secure memset. - Pass --disable-md5 to configure: The cryptographic strength of the MD5 algorithm is sufficiently doubtful that its use is discouraged at this time. It is not listed as an algorithm in [XMLDSIG-CORE1] https://www.w3.org/TR/xmlsec-algorithms/#bib-XMLDSIG-CORE1 ==== xreader ==== Version update (2.8.0 -> 2.8.1) Subpackages: libxreaderdocument3 libxreaderview3 xreader-lang xreader-plugin-comicsdocument xreader-plugin-djvudocument xreader-plugin-dvidocument xreader-plugin-epubdocument xreader-plugin-pdfdocument xreader-plugin-pixbufdocument xreader-plugin-psdocument xreader-plugin-tiffdocument xreader-plugin-xpsdocument - Update to version 2.8.1. * Convert parse_mimetypes from returning g_char** to void * l10n: Update translations - Remove fix_no_return_statement_ev-application.c.patch, fixed. - Fix RPMLINT warning W: obsolete-not-provided. ==== yakuake ==== Version update (20.08.3 -> 20.12.0) Subpackages: yakuake-lang - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Consider renaming tabs via DBus interactive. This allows it to override a previouly interactively set title. (kde#428400) * Fix deprecated knsrc file location * Fix fullscreen mode regression (kde#424286) ==== yast2 ==== Version update (4.3.45 -> 4.3.46) Subpackages: yast2-logs - Removed SCR agent .etc.inittab which is obsolete because SysVinit is no longer supported (bsc#1175494). - 4.3.46 ==== yast2-alternatives ==== Version update (4.3.0 -> 4.3.1) - Change .desktop file so module launches with xdg-su (bsc#1180173). - 4.3.1 ==== yast2-country ==== Version update (4.3.10 -> 4.3.11) Subpackages: yast2-country-data - Removed old code for sysvinit configuration (bsc#1175494). - 4.3.11 ==== yast2-firstboot ==== Version update (4.3.9 -> 4.3.10) - Map the current static hostname only to the primary IP address of the connections without a hostname. - Do not write network changes that are not related with the hostname client (bsc#1178834) - 4.3.10 ==== yast2-network ==== Version update (4.3.32 -> 4.3.37) - When the static hostname is modified, propose the hostname to be used by the affected connection (bsc#1174431) - 4.3.36 - Fix prefix length assignation when the alias netmask uses dot notation (bsc#1174766). - 4.3.35 - Write also connections in case that the hostname mapped to a connection primary IP address is changed through the DNS standalone client (bsc#1174431) - 4.3.34 - Allow to modify the hostname mapped to a connection primary IP address when the associated hostname is modified (bsc#1174431) - 4.3.33 ==== yast2-pkg-bindings ==== Version update (4.3.4 -> 4.3.5) - Set the previous "distro_target" option when restarting the package manager (bsc#1176275), fixes upgrade from SLE12 via SMT - 4.3.5 ==== yast2-schema ==== Version update (4.3.15 -> 4.3.16) - Add support for Btrfs quotas (jsc#SLE-7742). - 4.3.16 ==== yast2-security ==== Version update (4.3.5 -> 4.3.7) - Removed old code for sysvinit configuration (bsc#1175494). - 4.3.7 - Removed obsolete setting DISPLAYMANAGER_SHUTDOWN from /etc/sysconfig/displaymanager (bsc#1175495). - 4.3.6 ==== yast2-storage-ng ==== Version update (4.3.28 -> 4.3.35) - Partitioner: do not allow to modify the path of Btrfs subvolumes (bsc#1180182) - 4.3.35 - Storage: pre-generates an UUID for every swap device the installer plans to create (related to jsc#SLE-17081, bsc#1169874, and bsc#1177926). - 4.3.34 - AutoYaST: setting the 'quotas' element to 'false' disables subvolumes quotas, no matter whether the 'referenced_limit' was specified or not (related to jsc#SLE-7742). - 4.3.33 - Fixed deletion of dependant devicegraph nodes (bsc#1179590) - 4.3.32 - AutoYaST: added management of tmpfs file systems (jsc#SLE-11308). - 4.3.31 - Do not enforce installation of packages that are not strictly needed (bsc#1065588). - Partitioner: improved calculation of which packages need to be installed in the running system (bsc#1168077). ==== yast2-trans ==== Version update (84.87.20201205.6b65f14502 -> 84.87.20201231.ee5608b05e) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20201231.ee5608b05e: * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (French) * Translated using Weblate (Czech) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) - Update to version 84.87.20201227.aee94d5ba8: * Translated using Weblate (Portuguese) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Portuguese) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Chinese (China)) * Translated using Weblate (Chinese (China)) * Translated using Weblate (Chinese (China)) * Translated using Weblate (Chinese (China)) * Translated using Weblate (Chinese (China)) * Translated using Weblate (Slovak) * Translated using Weblate (Dutch) * Translated using Weblate (Chinese (China)) * Translated using Weblate (Catalan) * Translated using Weblate (Japanese) * Translated using Weblate (Indonesian) * New POT for text domain 'network'. * Translated using Weblate (Portuguese) * New POT for text domain 'storage'. * Translated using Weblate (Portuguese) * Translated using Weblate (Slovak) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Dutch) * Translated using Weblate (Catalan) * Translated using Weblate (Japanese) * New POT for text domain 'network'. * Translated using Weblate (Italian) * Translated using Weblate (Indonesian) * Translated using Weblate (Indonesian) * Translated using Weblate (Indonesian) - Update to version 84.87.20201220.b9bcd0f062: * Translated using Weblate (Indonesian) * Translated using Weblate (Indonesian) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Czech) * Translated using Weblate (Slovak) * Translated using Weblate (Dutch) * Translated using Weblate (Catalan) * Translated using Weblate (Japanese) * New POT for text domain 'registration'. * Translated using Weblate (Czech) * Translated using Weblate (Slovak) * Translated using Weblate (Slovak) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Japanese) * Translated using Weblate (Dutch) * Translated using Weblate (Catalan) * New POT for text domain 'tune'. * New POT for text domain 'network'. * Translated using Weblate (Portuguese (Portugal)) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Added translation using Weblate (Portuguese (Portugal)) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Portuguese) - Update to version 84.87.20201217.4c32b71e71: * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Czech) * Translated using Weblate (Slovak) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (German) * Translated using Weblate (Portuguese) * Translated using Weblate (Dutch) * Translated using Weblate (Catalan) * Translated using Weblate (Japanese) * New POT for text domain 'storage'. * New POT for text domain 'security'. * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Slovak) * Translated using Weblate (Slovak) * Translated using Weblate (Japanese) * Translated using Weblate (Japanese) * Translated using Weblate (Dutch) * Translated using Weblate (Dutch) * Translated using Weblate (Czech) * Translated using Weblate (Czech) * Translated using Weblate (Catalan) * Translated using Weblate (Catalan) * New POT for text domain 'storage'. * New POT for text domain 'security'. * New POT for text domain 'network'. * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) - Update to version 84.87.20201213.376c5d6d35: * Translated using Weblate (Chinese (China)) * New POT for text domain 'security'. * Translated using Weblate (Slovak) * Translated using Weblate (Czech) * Translated using Weblate (Dutch) * Translated using Weblate (Catalan) * Translated using Weblate (Japanese) * Translated using Weblate (Indonesian) * New POT for text domain 'registration'. * New POT for text domain 'firstboot'. * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese) * New POT for text domain 'firstboot'. * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese (Portugal)) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Added translation using Weblate (Portuguese (Portugal)) ==== yast2-tune ==== Version update (4.2.3 -> 4.3.1) - remove elevator settings (bsc#1178797) - 4.3.1 - add I/O device autoconfig checkbox on s390 (bsc#1168036) - 4.3.0 ==== yast2-vm ==== Version update (4.2.4 -> 4.2.5) - Removed old code for sysvinit configuration (bsc#1175494). - 4.2.5 ==== zchunk ==== - Add d2eae512bee09a4047cfe586de12f644d73b0736.patch: Fix build with zstd 1.4.7+. ==== zstd ==== Version update (1.4.5 -> 1.4.8) - Update to version 1.4.8 to fix i586+s390x - Update to version 1.4.7 * Improved --long mode * --long now automatically enabled for any window size >= 128MB * Faster decompression of small blocks * CLI improvements + accept parameter through environment variable ZSTD_NBTHREADS + new command --output-dir-mirror + more accurate warning and error messages * New experimental features + Shared Thread Pool + Faster Dictionary Compression + New Sequence Ingestion API * Drop upstream fix-lib-build.patch

6 11

Dell Wyse
by Ciro Iriarte 23 Dec '21

23 Dec '21

Hello!, I would like to replace the stock firmware of some thinclients (Dell Wyse 3010 & 3020) with opensuse Leap. Is there any experience dealing with these machines? As generic Linux notes, found some for the 3020 (ARMADA PXA 2128) but nothing on the 3010 (Marvell ARMADA PXA 510 v7): https://linux-mmp.docs.kernel.org/dell-wyse-3020.html Regards, CI.-

3 7

New Arm Tumbleweed snapshot 20211028 released!
by Guillaume Gardet 30 Oct '21

30 Oct '21

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: AppStream (0.14.4 -> 0.14.6) MozillaThunderbird (91.1.2 -> 91.2.1) apache2-mod_php7 (7.4.24 -> 7.4.25) bluez-tools (0.1.38+git20190428 -> 0.1.38+git.20201024T225355.f653217) freerdp (2.4.0 -> 2.4.1) grub2 gstreamer-devtools kernel-64kb (5.14.11 -> 5.14.14) kernel-source (5.14.11 -> 5.14.14) libguestfs libyui (4.2.19 -> 4.2.20) libyui-ncurses (4.2.19 -> 4.2.20) libyui-ncurses-pkg (4.2.19 -> 4.2.20) libyui-qt (4.2.19 -> 4.2.20) libyui-qt-graph (4.2.19 -> 4.2.20) libyui-qt-pkg (4.2.19 -> 4.2.20) logrotate mpg123 (1.29.1 -> 1.29.2) ncurses (6.2.20211002 -> 6.3.20211021) ocfs2-tools parted pcre2 (10.37 -> 10.38) perl-Mojolicious (9.21 -> 9.22) php7 (7.4.24 -> 7.4.25) plasma5-openSUSE polkit postfix privoxy python python-Babel python-Mako (1.1.4 -> 1.1.5) python-base python-cryptography (3.3.2 -> 3.4.8) python-numpy python-pandas (1.3.3 -> 1.3.4) python-rpm (4.16.1.3 -> 4.17.0) python38 python38-core python38-documentation qca-qt5 rpm (4.16.1.3 -> 4.17.0) rpm-config-SUSE (0.g83 -> 0.g89) rsyslog (8.2108.0 -> 8.2110.0) suse-module-tools (16.0.11 -> 16.0.13) systemd-rpm-macros tigervnc transactional-update (3.5.6 -> 3.6.0) u-boot-rpiarm64 virt-manager yast2-country (4.4.6 -> 4.4.7) === Details === ==== AppStream ==== Version update (0.14.4 -> 0.14.6) Subpackages: libAppStreamQt2 libappstream4 - Update to 0.14.6. Check the NEWS file for the list of changes. - Only install the license files once. ==== MozillaThunderbird ==== Version update (91.1.2 -> 91.2.1) - Mozilla Thunderbird 91.2.1 * Preference added to disable automatic pausing RSS feed updates after a fetch failure * several bugfixes as outlined in release notes https://www.thunderbird.net/en-US/thunderbird/91.2.1/releasenotes/ - Increase memory required per threads for aarch64 to avoid OOM - Enable LTO on Tumbleweed. - add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863) fix some env variables which are enabled for any value - Mozilla Thunderbird 91.2.0 * Saving a single message as .eml now uses a unique filename * New mail notifications did not properly take subfolders into account * Decrypting binary attachments when using an external GnuPG configuration failed * Account name fields in the account manager were not big enough for long names * LDAP searches using an extensibleMatch filter returned no results * Read-only CalDAV calendars and CardDAV address books were not detected * Multipart messages containing a calendar invite did not display any of the human-readable alternatives * Some calendar days were displayed incorrectly or duplicated (eg. two "29th" days of a particular month) * Phantom event was shown at the end of each day in Calendar week view MFSA 2021-46 (bsc#1191332) * CVE-2021-38496 (bmo#1725335) Use-after-free in MessageTask * CVE-2021-38497 (bmo#1726621) Validation message could have been overlaid on another origin * CVE-2021-38498 (bmo#1729642) Use-after-free of nsLanguageAtomService object * CVE-2021-32810 (bmo#1729813, https://github.com/crossbeam- rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw) Data race in crossbeam-deque * CVE-2021-38500 (bmo#1725854, bmo#1728321) Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15, and Firefox ESR 91.2 * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176) Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2 ==== apache2-mod_php7 ==== Version update (7.4.24 -> 7.4.25) - updated to 7.4.25: This is a security release (CVE-2021-21703) which also contains several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.25 ==== bluez-tools ==== Version update (0.1.38+git20190428 -> 0.1.38+git.20201024T225355.f653217) - Update to version 0.1.38+git.20201024T225355.f653217 (changes since 0.1.38+git20190428): * Fix bt-agent file reloading signal handler setup. * Remove incorrectly handled error argument from device_* calls. * Fix gcc-10 compile. * Correct the signal handler registration bt-agent. ==== freerdp ==== Version update (2.4.0 -> 2.4.1) - Upgraded to freerdp 2.4.1 Important security issues, boo#1191895: * CVE-2021-41159: Improper client input validation for gateway connections allows to overwrite memory * CVE-2021-41160: Improper region checks in all clients allow out of bound write to memory Noteworthy changes: * Refactored RPC gateway parsing code * OpenSSL 3.0 compatibility fixes * USB redirection: fixed transfer lengths Fixed issues: * #gh:FreeRDP/FreeRDP#7363: Length checks in ConvertUTF8toUTF16 * #gh:FreeRDP/FreeRDP#7349: Added checks for bitmap width and heigth values - Force library update to the latest, renamed versions (followup to boo#1191755) - Renamed libraries to follow packaging standards as requested in boo#1191755 ==== grub2 ==== Subpackages: grub2-arm64-efi grub2-snapper-plugin grub2-systemd-sleep-plugin - Fix installation on usrmerged s390x ==== gstreamer-devtools ==== Subpackages: libgstvalidate-1_0-0 typelib-1_0-GstValidate-1_0 - Pass debug_viewer=enabled to meson, build the optional gst-debug-viewer app. ==== kernel-64kb ==== Version update (5.14.11 -> 5.14.14) - Update patches.kernel.org/5.14.14-060-x86-fpu-Mask-out-the-invalid-MXCSR-bits-prop… (bsc#1012628 bsc#1191855). - commit 2b5383f - Linux 5.14.14 (bsc#1012628). - ALSA: usb-audio: Add quirk for VF0770 (bsc#1012628). - ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat ioctl (bsc#1012628). - ALSA: usb-audio: Fix a missing error check in scarlett gen2 mixer (bsc#1012628). - ALSA: seq: Fix a potential UAF by wrong private_free call order (bsc#1012628). - ALSA: hda/realtek: Enable 4-speaker output for Dell Precision 5560 laptop (bsc#1012628). - ALSA: hda - Enable headphone mic on Dell Latitude laptops with ALC3254 (bsc#1012628). - ALSA: hda/realtek: Complete partial device name to avoid ambiguity (bsc#1012628). - ALSA: hda/realtek: Add quirk for Clevo X170KM-G (bsc#1012628). - ALSA: hda/realtek - ALC236 headset MIC recording issue (bsc#1012628). - ALSA: hda/realtek: Add quirk for TongFang PHxTxX1 (bsc#1012628). - ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo 13s Gen2 (bsc#1012628). - ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW (bsc#1012628). - platform/x86: gigabyte-wmi: add support for B550 AORUS ELITE AX V2 (bsc#1012628). - platform/x86: amd-pmc: Add alternative acpi id for PMC controller (bsc#1012628). - spi: atmel: Fix PDC transfer setup bug (bsc#1012628). - mtd: rawnand: qcom: Update code word value for raw read (bsc#1012628). - nds32/ftrace: Fix Error: invalid operands (*UND* and *UND* sections) for `^' (bsc#1012628). - dm: fix mempool NULL pointer race when completing IO (bsc#1012628). - ACPI: PM: Include alternate AMDI0005 id in special behaviour (bsc#1012628). - dm rq: don't queue request to blk-mq during DM suspend (bsc#1012628). - s390: fix strrchr() implementation (bsc#1012628). - clk: socfpga: agilex: fix duplicate s2f_user0_clk (bsc#1012628). - csky: don't let sigreturn play with priveleged bits of status register (bsc#1012628). - csky: Fixup regs.sr broken in ptrace (bsc#1012628). - drm/fbdev: Clamp fbdev surface size if too large (bsc#1012628). - arm64/hugetlb: fix CMA gigantic page order for non-4K PAGE_SIZE (bsc#1012628). - drm/nouveau/fifo: Reinstate the correct engine bit programming (bsc#1012628). - drm/msm: Do not run snapshot on non-DPU devices (bsc#1012628). - drm/msm: Avoid potential overflow in timeout_to_jiffies() (bsc#1012628). - btrfs: unlock newly allocated extent buffer after error (bsc#1012628). - btrfs: deal with errors when replaying dir entry during log replay (bsc#1012628). - btrfs: deal with errors when adding inode reference during log replay (bsc#1012628). - btrfs: check for error when looking up inode during dir entry replay (bsc#1012628). - btrfs: update refs for any root except tree log roots (bsc#1012628). - btrfs: fix abort logic in btrfs_replace_file_extents (bsc#1012628). - module: fix clang CFI with MODULE_UNLOAD=n (bsc#1012628). - x86/resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails (bsc#1012628). - mei: me: add Ice Lake-N device id (bsc#1012628). - mei: hbm: drop hbm responses on early shutdown (bsc#1012628). - USB: xhci: dbc: fix tty registration race (bsc#1012628). - xhci: guard accesses to ep_state in xhci_endpoint_reset() (bsc#1012628). - xhci: add quirk for host controllers that don't update endpoint DCS (bsc#1012628). - xhci: Fix command ring pointer corruption while aborting a command (bsc#1012628). - xhci: Enable trust tx length quirk for Fresco FL11 USB controller (bsc#1012628). - cb710: avoid NULL pointer subtraction (bsc#1012628). - efi/cper: use stack buffer for error record decoding (bsc#1012628). - efi: Change down_interruptible() in virt_efi_reset_system() to down_trylock() (bsc#1012628). - usb: musb: dsps: Fix the probe error path (bsc#1012628). - Input: xpad - add support for another USB ID of Nacon GC-100 (bsc#1012628). - USB: serial: qcserial: add EM9191 QDL support (bsc#1012628). - USB: serial: option: add Quectel EC200S-CN module support (bsc#1012628). - USB: serial: option: add Telit LE910Cx composition 0x1204 (bsc#1012628). - USB: serial: option: add prod. id for Quectel EG91 (bsc#1012628). - misc: fastrpc: Add missing lock before accessing find_vma() (bsc#1012628). - virtio: write back F_VERSION_1 before validate (bsc#1012628). - EDAC/armada-xp: Fix output of uncorrectable error counter (bsc#1012628). - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (bsc#1012628). - virtio-blk: remove unneeded "likely" statements (bsc#1012628). - Revert "virtio-blk: Add validation for block size in config space" (bsc#1012628). - x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (bsc#1012628). - powerpc/xive: Discard disabled interrupts in get_irqchip_state() (bsc#1012628). - iio: adc: aspeed: set driver data when adc probe (bsc#1012628). - drivers: bus: simple-pm-bus: Add support for probing simple bus only devices (bsc#1012628). - driver core: Reject pointless SYNC_STATE_ONLY device links (bsc#1012628). - iio: adc: ad7192: Add IRQ flag (bsc#1012628). - iio: adc: ad7780: Fix IRQ flag (bsc#1012628). - iio: adc: ad7793: Fix IRQ flag (bsc#1012628). - iio: adis16480: fix devices that do not support sleep mode (bsc#1012628). - iio: adc128s052: Fix the error handling path of 'adc128_probe()' (bsc#1012628). - iio: adc: max1027: Fix wrong shift with 12-bit devices (bsc#1012628). - iio: adis16475: fix deadlock on frequency set (bsc#1012628). - iio: mtk-auxadc: fix case IIO_CHAN_INFO_PROCESSED (bsc#1012628). - iio: light: opt3001: Fixed timeout error when 0 lux (bsc#1012628). - iio: accel: fxls8962af: return IRQ_HANDLED when fifo is flushed (bsc#1012628). - iio: adc: max1027: Fix the number of max1X31 channels (bsc#1012628). - iio: ssp_sensors: add more range checking in ssp_parse_dataframe() (bsc#1012628). - iio: ssp_sensors: fix error code in ssp_print_mcu_debug() (bsc#1012628). - Input: resistive-adc-touch - fix division by zero error on z1 == 0 (bsc#1012628). - eeprom: 93xx46: Add SPI device ID table (bsc#1012628). - eeprom: 93xx46: fix MODULE_DEVICE_TABLE (bsc#1012628). - eeprom: at25: Add SPI ID table (bsc#1012628). - fpga: ice40-spi: Add SPI device ID table (bsc#1012628). - iio: dac: ti-dac5571: fix an error code in probe() (bsc#1012628). - tracing: Fix missing osnoise tracer on max_latency (bsc#1012628). - tee: optee: Fix missing devices unregister during optee_remove (bsc#1012628). - ARM: dts: bcm2711-rpi-4-b: Fix usb's unit address (bsc#1012628). - ARM: dts: bcm283x: Fix VEC address for BCM2711 (bsc#1012628). - ARM: dts: bcm2711: fix MDIO #address- and #size-cells (bsc#1012628). - firmware: arm_ffa: Fix __ffa_devices_unregister (bsc#1012628). - firmware: arm_ffa: Add missing remove callback to ffa_bus_type (bsc#1012628). - ARM: dts: bcm2711-rpi-4-b: fix sd_io_1v8_reg regulator states (bsc#1012628). - ARM: dts: bcm2711-rpi-4-b: Fix pcie0's unit address formatting (bsc#1012628). - clk: renesas: rzg2l: Fix clk status function (bsc#1012628). - nvme-pci: Fix abort command id (bsc#1012628). - sctp: account stream padding length for reconf chunk (bsc#1012628). - gpio: 74x164: Add SPI device ID table (bsc#1012628). - gpio: pca953x: Improve bias setting (bsc#1012628). - net: arc: select CRC32 (bsc#1012628). - net: korina: select CRC32 (bsc#1012628). - net/smc: improved fix wait on already cleared link (bsc#1012628). - net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path (bsc#1012628). - net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp (bsc#1012628). - net/mlx5e: Switchdev representors are not vlan challenged (bsc#1012628). - net: stmmac: fix get_hw_feature() on old hardware (bsc#1012628). - net: phy: Do not shutdown PHYs in READY state (bsc#1012628). - net: dsa: mv88e6xxx: don't use PHY_DETECT on internal PHY's (bsc#1012628). - net: dsa: microchip: Added the condition for scheduling ksz_mib_read_work (bsc#1012628). - net: dsa: fix spurious error message when unoffloaded port leaves bridge (bsc#1012628). - net: encx24j600: check error in devm_regmap_init_encx24j600 (bsc#1012628). - ethernet: s2io: fix setting mac address during resume (bsc#1012628). - vhost-vdpa: Fix the wrong input in config_cb (bsc#1012628). - nfc: fix error handling of nfc_proto_register() (bsc#1012628). - NFC: digital: fix possible memory leak in digital_tg_listen_mdaa() (bsc#1012628). - NFC: digital: fix possible memory leak in digital_in_send_sdd_req() (bsc#1012628). - pata_legacy: fix a couple uninitialized variable bugs (bsc#1012628). - ata: ahci_platform: fix null-ptr-deref in ahci_platform_enable_regulators() (bsc#1012628). - mlxsw: thermal: Fix out-of-bounds memory accesses (bsc#1012628). - platform/mellanox: mlxreg-io: Fix argument base in kstrtou32() call (bsc#1012628). - platform/mellanox: mlxreg-io: Fix read access of n-bytes size attributes (bsc#1012628). - spi: spidev: Add SPI ID table (bsc#1012628). - spi: bcm-qspi: clear MSPI spifie interrupt during probe (bsc#1012628). - drm/panel: olimex-lcd-olinuxino: select CRC32 (bsc#1012628). - drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read (bsc#1012628). - drm/msm: Fix null pointer dereference on pointer edp (bsc#1012628). - drm/msm/mdp5: fix cursor-related warnings (bsc#1012628). - drm/msm/submit: fix overflow check on 64-bit architectures (bsc#1012628). - drm/msm/a6xx: Track current ctx by seqno (bsc#1012628). - drm/msm/a4xx: fix error handling in a4xx_gpu_init() (bsc#1012628). - drm/msm/a3xx: fix error handling in a3xx_gpu_init() (bsc#1012628). - drm/msm/dsi: dsi_phy_14nm: Take ready-bit into account in poll_for_ready (bsc#1012628). - drm/msm/dsi: Fix an error code in msm_dsi_modeset_init() (bsc#1012628). - drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling (bsc#1012628). - acpi/arm64: fix next_platform_timer() section mismatch error (bsc#1012628). - platform/x86: intel_scu_ipc: Fix busy loop expiry time (bsc#1012628). - mqprio: Correct stats in mqprio_dump_class_stats() (bsc#1012628). - mptcp: fix possible stall on recvmsg() (bsc#1012628). - qed: Fix missing error code in qed_slowpath_start() (bsc#1012628). - r8152: select CRC32 and CRYPTO/CRYPTO_HASH/CRYPTO_SHA256 (bsc#1012628). - ice: fix locking for Tx timestamp tracking flush (bsc#1012628). - block/rnbd-clt-sysfs: fix a couple uninitialized variable bugs (bsc#1012628). - nfp: flow_offload: move flow_indr_dev_register from app init to app start (bsc#1012628). - net: mscc: ocelot: make use of all 63 PTP timestamp identifiers (bsc#1012628). - net: mscc: ocelot: avoid overflowing the PTP timestamp FIFO (bsc#1012628). - net: mscc: ocelot: warn when a PTP IRQ is raised for an unknown skb (bsc#1012628). - net: mscc: ocelot: deny TX timestamping of non-PTP packets (bsc#1012628). - net: mscc: ocelot: cross-check the sequence id from the timestamp FIFO with the skb PTP header (bsc#1012628). - net: dsa: felix: break at first CPU port during init and teardown (bsc#1012628). - ionic: don't remove netdev->dev_addr when syncing uc list (bsc#1012628). - commit 6859230 - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (CVE-2021-3542 bsc#1184673). - commit 08ab8da - x86/fpu: Mask out the invalid MXCSR bits properly (x86_32 breakage). - commit 565cd48 - rpm/kernel-obs-build.spec.in: reduce initrd functionality For building in OBS, we always build inside a virtual machine that gets a new, freshly created scratch filesystem image. So we do not need to handle fscks because that ain't gonna happen, as well as not we do not need to handle microcode update in the initrd as these only can be run on the host system anyway. We can also strip and hardlink as an additional optimisation that should not significantly hurt. - commit c72c6fc - Update upstream commit id for rtw89 patch (bsc#1191321) - commit 8dccb66 - Linux 5.14.13 (bsc#1012628). - hwmon: (pmbus/ibm-cffps) max_power_out swap changes (bsc#1012628). - io_uring: kill fasync (bsc#1012628). - sched: Always inline is_percpu_thread() (bsc#1012628). - perf/core: fix userpage->time_enabled of inactive events (bsc#1012628). - scsi: qla2xxx: Fix excessive messages during device logout (bsc#1012628). - scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported" (bsc#1012628). - scsi: ses: Fix unsigned comparison with less than zero (bsc#1012628). - drm/amdgpu: fix gart.bo pin_count leak (bsc#1012628). - net: sun: SUNVNET_COMMON should depend on INET (bsc#1012628). - vboxfs: fix broken legacy mount signature checking (bsc#1012628). - net: bgmac-platform: handle mac-address deferral (bsc#1012628). - mac80211: check return value of rhashtable_init (bsc#1012628). - net: prevent user from passing illegal stab size (bsc#1012628). - hwmon: (ltc2947) Properly handle errors when looking for the external clock (bsc#1012628). - m68k: Handle arrivals of multiple signals correctly (bsc#1012628). - pinctrl: qcom: sc7280: Add PM suspend callbacks (bsc#1012628). - mac80211: Drop frames from invalid MAC address in ad-hoc mode (bsc#1012628). - netfilter: nf_nat_masquerade: defer conntrack walk to work queue (bsc#1012628). - netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic (bsc#1012628). - KVM: arm64: nvhe: Fix missing FORCE for hyp-reloc.S build rule (bsc#1012628). - ASoC: SOF: loader: release_firmware() on load failure to avoid batching (bsc#1012628). - HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs (bsc#1012628). - netfilter: ip6_tables: zero-initialize fragment offset (bsc#1012628). - HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS (bsc#1012628). - ALSA: usb-audio: Unify mixer resume and reset_resume procedure (bsc#1012628). - ALSA: oxfw: fix transmission method for Loud models based on OXFW971 (bsc#1012628). - ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic (bsc#1012628). - ext4: correct the error path of ext4_write_inline_data_end() (bsc#1012628). - ext4: check and update i_disksize properly (bsc#1012628). - commit ab3ca44 - kernel-spec-macros: Since rpm 4.17 %verbose is unusable (bsc#1191229). The semantic changed in an incompatible way so invoking the macro now causes a build failure. - commit 3e55f55 - Linux 5.14.12 (bsc#1012628). - dsa: tag_dsa: Fix mask for trunked packets (bsc#1012628). - x86/hpet: Use another crystalball to evaluate HPET usability (bsc#1012628). - x86/entry: Clear X86_FEATURE_SMAP when CONFIG_X86_SMAP=n (bsc#1012628). - x86/entry: Correct reference to intended CONFIG_64_BIT (bsc#1012628). - x86/fpu: Restore the masking out of reserved MXCSR bits (bsc#1012628). - x86/sev: Return an error on a returned non-zero SW_EXITINFO1[31:0] (bsc#1012628). - x86/Kconfig: Correct reference to MWINCHIP3D (bsc#1012628). - x86/platform/olpc: Correct ifdef symbol to intended CONFIG_OLPC_XO15_SCI (bsc#1012628). - pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init (bsc#1012628). - powerpc/32s: Fix kuap_kernel_restore() (bsc#1012628). - powerpc/64s: Fix unrecoverable MCE calling async handler from NMI (bsc#1012628). - powerpc/traps: do not enable irqs in _exception (bsc#1012628). - powerpc/64s: fix program check interrupt emergency stack path (bsc#1012628). - powerpc/bpf ppc32: Fix BPF_SUB when imm == 0x80000000 (bsc#1012628). - powerpc/bpf ppc32: Do not emit zero extend instruction for 64-bit BPF_END (bsc#1012628). - powerpc/bpf ppc32: Fix JMP32_JSET_K (bsc#1012628). - powerpc/bpf ppc32: Fix ALU32 BPF_ARSH operation (bsc#1012628). - powerpc/bpf: Fix BPF_SUB when imm == 0x80000000 (bsc#1012628). - powerpc/bpf: Fix BPF_MOD when imm == 1 (bsc#1012628). - objtool: Make .altinstructions section entry size consistent (bsc#1012628). - objtool: Remove reloc symbol type checks in get_alt_entry() (bsc#1012628). - scsi: iscsi: Fix iscsi_task use after free (bsc#1012628). - RISC-V: Include clone3() on rv32 (bsc#1012628). - i2c: mlxcpld: Modify register setting for 400KHz frequency (bsc#1012628). - i2c: mlxcpld: Fix criteria for frequency setting (bsc#1012628). - bpf, s390: Fix potential memory leak about jit_data (bsc#1012628). - riscv/vdso: make arch_setup_additional_pages wait for mmap_sem for write killable (bsc#1012628). - riscv/vdso: Move vdso data page up front (bsc#1012628). - riscv/vdso: Refactor asm/vdso.h (bsc#1012628). - RISC-V: Fix VDSO build for !MMU (bsc#1012628). - riscv: explicitly use symbol offsets for VDSO (bsc#1012628). - i2c: mediatek: Add OFFSET_EXT_CONF setting back (bsc#1012628). - i2c: acpi: fix resource leak in reconfiguration device addition (bsc#1012628). - powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (bsc#1012628). - net: prefer socket bound to interface when not in VRF (bsc#1012628). - iavf: fix double unlock of crit_lock (bsc#1012628). - i40e: Fix freeing of uninitialized misc IRQ vector (bsc#1012628). - i40e: fix endless loop under rtnl (bsc#1012628). - gve: report 64bit tx_bytes counter from gve_handle_report_stats() (bsc#1012628). - gve: fix gve_get_stats() (bsc#1012628). - rtnetlink: fix if_nlmsg_stats_size() under estimation (bsc#1012628). - gve: Properly handle errors in gve_assign_qpl (bsc#1012628). - gve: Avoid freeing NULL pointer (bsc#1012628). - gve: Correct available tx qpl check (bsc#1012628). - net: stmmac: trigger PCS EEE to turn off on link down (bsc#1012628). - net: pcs: xpcs: fix incorrect steps on disable EEE (bsc#1012628). - drm/nouveau/debugfs: fix file release memory leak (bsc#1012628). - drm/nouveau/kms/nv50-: fix file release memory leak (bsc#1012628). - drm/nouveau: avoid a use-after-free when BO init fails (bsc#1012628). - video: fbdev: gbefb: Only instantiate device when built for IP32 (bsc#1012628). - drm/panel: abt-y030xx067a: yellow tint fix (bsc#1012628). - drm/nouveau/fifo/ga102: initialise chid on return from channel creation (bsc#1012628). - drm/sun4i: dw-hdmi: Fix HDMI PHY clock setup (bsc#1012628). - bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893 (bsc#1012628). - perf jevents: Free the sys_event_tables list after processing entries (bsc#1012628). - drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume (bsc#1012628). - drm/amdkfd: fix a potential ttm->sg memory leak (bsc#1012628). - ARM: defconfig: gemini: Restore framebuffer (bsc#1012628). - netlink: annotate data races around nlk->bound (bsc#1012628). - net: pcs: xpcs: fix incorrect CL37 AN sequence (bsc#1012628). - net: sfp: Fix typo in state machine debug string (bsc#1012628). - net/sched: sch_taprio: properly cancel timer from taprio_destroy() (bsc#1012628). - net: bridge: fix under estimation in br_get_linkxstats_size() (bsc#1012628). - net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size() (bsc#1012628). - afs: Fix afs_launder_page() to set correct start file position (bsc#1012628). - netfs: Fix READ/WRITE confusion when calling iov_iter_xarray() (bsc#1012628). - drm/i915/bdb: Fix version check (bsc#1012628). - drm/i915/tc: Fix TypeC port init/resume time sanitization (bsc#1012628). - drm/i915/jsl: Add W/A 1409054076 for JSL (bsc#1012628). - drm/i915/audio: Use BIOS provided value for RKL HDA link (bsc#1012628). - ARM: imx6: disable the GIC CPU interface before calling stby-poweroff sequence (bsc#1012628). - dt-bindings: drm/bridge: ti-sn65dsi86: Fix reg value (bsc#1012628). - arm64: dts: ls1028a: fix eSDHC2 node (bsc#1012628). - arm64: dts: imx8mm-kontron-n801x-som: do not allow to switch off buck2 (bsc#1012628). - arm64: dts: imx8: change the spi-nor tx (bsc#1012628). - ARM: dts: imx: change the spi-nor tx (bsc#1012628). - ptp_pch: Load module automatically if ID matches (bsc#1012628). - powerpc/fsl/dts: Fix phy-connection-type for fm1mac3 (bsc#1012628). - netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in event notification (bsc#1012628). - MIPS: Revert "add support for buggy MT7621S core detection" (bsc#1012628). - net: stmmac: dwmac-rk: Fix ethernet on rk3399 based devices (bsc#1012628). - net: mscc: ocelot: fix VCAP filters remaining active after being deleted (bsc#1012628). - net_sched: fix NULL deref in fifo_set_limit() (bsc#1012628). - libbpf: Fix memory leak in strset (bsc#1012628). - phy: mdio: fix memory leak (bsc#1012628). - libbpf: Fix segfault in light skeleton for objects without BTF (bsc#1012628). - net/mlx5e: Fix the presented RQ index in PTP stats (bsc#1012628). - net/mlx5: Fix setting number of EQs of SFs (bsc#1012628). - net/mlx5: Fix length of irq_index in chars (bsc#1012628). - net/mlx5: Avoid generating event after PPS out in Real time mode (bsc#1012628). - net/mlx5: Force round second at 1PPS out start time (bsc#1012628). - net/mlx5: E-Switch, Fix double allocation of acl flow counter (bsc#1012628). - net/mlx5e: Keep the value for maximum number of channels in-sync (bsc#1012628). - net/mlx5e: IPSEC RX, enable checksum complete (bsc#1012628). - bpf: Fix integer overflow in prealloc_elems_and_freelist() (bsc#1012628). - soc: ti: omap-prm: Fix external abort for am335x pruss (bsc#1012628). - bpf, arm: Fix register clobbering in div/mod implementation (bsc#1012628). - netfilter: nf_tables: reverse order in rule replacement expansion (bsc#1012628). - netfilter: nf_tables: add position handle in event notification (bsc#1012628). - netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1 (bsc#1012628). - iwlwifi: pcie: add configuration of a Wi-Fi adapter on Dell XPS 15 (bsc#1012628). - xtensa: call irqchip_init only when CONFIG_USE_OF is selected (bsc#1012628). - xtensa: use CONFIG_USE_OF instead of CONFIG_OF (bsc#1012628). - arm64: dts: qcom: pm8150: use qcom,pm8998-pon binding (bsc#1012628). - ath5k: fix building with LEDS=m (bsc#1012628). - PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (bsc#1012628). - ARM: dts: imx6qdl-pico: Fix Ethernet support (bsc#1012628). - ARM: dts: imx: Fix USB host power regulator polarity on M53Menlo (bsc#1012628). - ARM: dts: imx: Add missing pinctrl-names for panel on M53Menlo (bsc#1012628). - soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment (bsc#1012628). - iwlwifi: mvm: Fix possible NULL dereference (bsc#1012628). - ARM: at91: pm: do not panic if ram controllers are not enabled (bsc#1012628). - Revert "arm64: dts: qcom: sc7280: Fixup the cpufreq node" (bsc#1012628). - ARM: dts: qcom: apq8064: Use 27MHz PXO clock as DSI PLL reference (bsc#1012628). - soc: qcom: socinfo: Fixed argument passed to platform_set_data() (bsc#1012628). - bus: ti-sysc: Add break in switch statement in sysc_init_soc() (bsc#1012628). - riscv: Flush current cpu icache before other cpus (bsc#1012628). - scsi: ufs: core: Fix task management completion (bsc#1012628). - ARM: dts: qcom: apq8064: use compatible which contains chipid (bsc#1012628). - ARM: dts: imx6dl-yapp4: Fix lp5562 LED driver probe (bsc#1012628). - ARM: dts: omap3430-sdp: Fix NAND device node (bsc#1012628). - xen/balloon: fix cancelled balloon action (bsc#1012628). - SUNRPC: fix sign error causing rpcsec_gss drops (bsc#1012628). - nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero (bsc#1012628). - nfsd: fix error handling of register_pernet_subsys() in init_nfsd() (bsc#1012628). - ovl: fix IOCB_DIRECT if underlying fs doesn't support direct IO (bsc#1012628). - ovl: fix missing negative dentry check in ovl_rename() (bsc#1012628). - fbdev: simplefb: fix Kconfig dependencies (bsc#1012628). - Update config files. - mmc: sdhci-of-at91: replace while loop with read_poll_timeout (bsc#1012628). - mmc: sdhci-of-at91: wait for calibration done before proceed (bsc#1012628). - mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk (bsc#1012628). - xen/privcmd: fix error handling in mmap-resource processing (bsc#1012628). - drm/i915: Extend the async flip VT-d w/a to skl/bxt (bsc#1012628). - drm/i915: Fix runtime pm handling in i915_gem_shrink (bsc#1012628). - drm/amd/display: Fix DCN3 B0 DP Alt Mapping (bsc#1012628). - drm/amd/display: Fix detection of 4 lane for DPALT (bsc#1012628). - drm/amd/display: Limit display scaling to up to 4k for DCN 3.1 (bsc#1012628). - drm/nouveau/ga102-: support ttm buffer moves via copy engine (bsc#1012628). - drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows (bsc#1012628). - drm/amdgpu: During s0ix don't wait to signal GFXOFF (bsc#1012628). - drm/amd/display: USB4 bring up set correct address (bsc#1012628). - drm/amd/display: Fix B0 USB-C DP Alt mode (bsc#1012628). - usb: typec: tipd: Remove dependency on "connector" child fwnode (bsc#1012628). - usb: typec: tcpm: handle SRC_STARTUP state if cc changes (bsc#1012628). - usb: typec: tcpci: don't handle vSafe0V event if it's not enabled (bsc#1012628). - USB: cdc-acm: fix break reporting (bsc#1012628). - USB: cdc-acm: fix racy tty buffer accesses (bsc#1012628). - usb: gadget: f_uac2: fixed EP-IN wMaxPacketSize (bsc#1012628). - usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle (bsc#1012628). - usb: cdc-wdm: Fix check for WWAN (bsc#1012628). - Partially revert "usb: Kconfig: using select for USB_COMMON dependency" (bsc#1012628). - Update config files. - commit 7246625 - rtw89: add Realtek 802.11ax driver (bsc#1191321). - commit 4c399ab - Enable CONFIG_RTW88_DEBUG and CONFIG_RTW89_DEBUG on debug flavors (bsc#1191321) - commit a76143b ==== kernel-source ==== Version update (5.14.11 -> 5.14.14) Subpackages: kernel-default kernel-docs - Update patches.kernel.org/5.14.14-060-x86-fpu-Mask-out-the-invalid-MXCSR-bits-prop… (bsc#1012628 bsc#1191855). - commit 2b5383f - Linux 5.14.14 (bsc#1012628). - ALSA: usb-audio: Add quirk for VF0770 (bsc#1012628). - ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat ioctl (bsc#1012628). - ALSA: usb-audio: Fix a missing error check in scarlett gen2 mixer (bsc#1012628). - ALSA: seq: Fix a potential UAF by wrong private_free call order (bsc#1012628). - ALSA: hda/realtek: Enable 4-speaker output for Dell Precision 5560 laptop (bsc#1012628). - ALSA: hda - Enable headphone mic on Dell Latitude laptops with ALC3254 (bsc#1012628). - ALSA: hda/realtek: Complete partial device name to avoid ambiguity (bsc#1012628). - ALSA: hda/realtek: Add quirk for Clevo X170KM-G (bsc#1012628). - ALSA: hda/realtek - ALC236 headset MIC recording issue (bsc#1012628). - ALSA: hda/realtek: Add quirk for TongFang PHxTxX1 (bsc#1012628). - ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo 13s Gen2 (bsc#1012628). - ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW (bsc#1012628). - platform/x86: gigabyte-wmi: add support for B550 AORUS ELITE AX V2 (bsc#1012628). - platform/x86: amd-pmc: Add alternative acpi id for PMC controller (bsc#1012628). - spi: atmel: Fix PDC transfer setup bug (bsc#1012628). - mtd: rawnand: qcom: Update code word value for raw read (bsc#1012628). - nds32/ftrace: Fix Error: invalid operands (*UND* and *UND* sections) for `^' (bsc#1012628). - dm: fix mempool NULL pointer race when completing IO (bsc#1012628). - ACPI: PM: Include alternate AMDI0005 id in special behaviour (bsc#1012628). - dm rq: don't queue request to blk-mq during DM suspend (bsc#1012628). - s390: fix strrchr() implementation (bsc#1012628). - clk: socfpga: agilex: fix duplicate s2f_user0_clk (bsc#1012628). - csky: don't let sigreturn play with priveleged bits of status register (bsc#1012628). - csky: Fixup regs.sr broken in ptrace (bsc#1012628). - drm/fbdev: Clamp fbdev surface size if too large (bsc#1012628). - arm64/hugetlb: fix CMA gigantic page order for non-4K PAGE_SIZE (bsc#1012628). - drm/nouveau/fifo: Reinstate the correct engine bit programming (bsc#1012628). - drm/msm: Do not run snapshot on non-DPU devices (bsc#1012628). - drm/msm: Avoid potential overflow in timeout_to_jiffies() (bsc#1012628). - btrfs: unlock newly allocated extent buffer after error (bsc#1012628). - btrfs: deal with errors when replaying dir entry during log replay (bsc#1012628). - btrfs: deal with errors when adding inode reference during log replay (bsc#1012628). - btrfs: check for error when looking up inode during dir entry replay (bsc#1012628). - btrfs: update refs for any root except tree log roots (bsc#1012628). - btrfs: fix abort logic in btrfs_replace_file_extents (bsc#1012628). - module: fix clang CFI with MODULE_UNLOAD=n (bsc#1012628). - x86/resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails (bsc#1012628). - mei: me: add Ice Lake-N device id (bsc#1012628). - mei: hbm: drop hbm responses on early shutdown (bsc#1012628). - USB: xhci: dbc: fix tty registration race (bsc#1012628). - xhci: guard accesses to ep_state in xhci_endpoint_reset() (bsc#1012628). - xhci: add quirk for host controllers that don't update endpoint DCS (bsc#1012628). - xhci: Fix command ring pointer corruption while aborting a command (bsc#1012628). - xhci: Enable trust tx length quirk for Fresco FL11 USB controller (bsc#1012628). - cb710: avoid NULL pointer subtraction (bsc#1012628). - efi/cper: use stack buffer for error record decoding (bsc#1012628). - efi: Change down_interruptible() in virt_efi_reset_system() to down_trylock() (bsc#1012628). - usb: musb: dsps: Fix the probe error path (bsc#1012628). - Input: xpad - add support for another USB ID of Nacon GC-100 (bsc#1012628). - USB: serial: qcserial: add EM9191 QDL support (bsc#1012628). - USB: serial: option: add Quectel EC200S-CN module support (bsc#1012628). - USB: serial: option: add Telit LE910Cx composition 0x1204 (bsc#1012628). - USB: serial: option: add prod. id for Quectel EG91 (bsc#1012628). - misc: fastrpc: Add missing lock before accessing find_vma() (bsc#1012628). - virtio: write back F_VERSION_1 before validate (bsc#1012628). - EDAC/armada-xp: Fix output of uncorrectable error counter (bsc#1012628). - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (bsc#1012628). - virtio-blk: remove unneeded "likely" statements (bsc#1012628). - Revert "virtio-blk: Add validation for block size in config space" (bsc#1012628). - x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (bsc#1012628). - powerpc/xive: Discard disabled interrupts in get_irqchip_state() (bsc#1012628). - iio: adc: aspeed: set driver data when adc probe (bsc#1012628). - drivers: bus: simple-pm-bus: Add support for probing simple bus only devices (bsc#1012628). - driver core: Reject pointless SYNC_STATE_ONLY device links (bsc#1012628). - iio: adc: ad7192: Add IRQ flag (bsc#1012628). - iio: adc: ad7780: Fix IRQ flag (bsc#1012628). - iio: adc: ad7793: Fix IRQ flag (bsc#1012628). - iio: adis16480: fix devices that do not support sleep mode (bsc#1012628). - iio: adc128s052: Fix the error handling path of 'adc128_probe()' (bsc#1012628). - iio: adc: max1027: Fix wrong shift with 12-bit devices (bsc#1012628). - iio: adis16475: fix deadlock on frequency set (bsc#1012628). - iio: mtk-auxadc: fix case IIO_CHAN_INFO_PROCESSED (bsc#1012628). - iio: light: opt3001: Fixed timeout error when 0 lux (bsc#1012628). - iio: accel: fxls8962af: return IRQ_HANDLED when fifo is flushed (bsc#1012628). - iio: adc: max1027: Fix the number of max1X31 channels (bsc#1012628). - iio: ssp_sensors: add more range checking in ssp_parse_dataframe() (bsc#1012628). - iio: ssp_sensors: fix error code in ssp_print_mcu_debug() (bsc#1012628). - Input: resistive-adc-touch - fix division by zero error on z1 == 0 (bsc#1012628). - eeprom: 93xx46: Add SPI device ID table (bsc#1012628). - eeprom: 93xx46: fix MODULE_DEVICE_TABLE (bsc#1012628). - eeprom: at25: Add SPI ID table (bsc#1012628). - fpga: ice40-spi: Add SPI device ID table (bsc#1012628). - iio: dac: ti-dac5571: fix an error code in probe() (bsc#1012628). - tracing: Fix missing osnoise tracer on max_latency (bsc#1012628). - tee: optee: Fix missing devices unregister during optee_remove (bsc#1012628). - ARM: dts: bcm2711-rpi-4-b: Fix usb's unit address (bsc#1012628). - ARM: dts: bcm283x: Fix VEC address for BCM2711 (bsc#1012628). - ARM: dts: bcm2711: fix MDIO #address- and #size-cells (bsc#1012628). - firmware: arm_ffa: Fix __ffa_devices_unregister (bsc#1012628). - firmware: arm_ffa: Add missing remove callback to ffa_bus_type (bsc#1012628). - ARM: dts: bcm2711-rpi-4-b: fix sd_io_1v8_reg regulator states (bsc#1012628). - ARM: dts: bcm2711-rpi-4-b: Fix pcie0's unit address formatting (bsc#1012628). - clk: renesas: rzg2l: Fix clk status function (bsc#1012628). - nvme-pci: Fix abort command id (bsc#1012628). - sctp: account stream padding length for reconf chunk (bsc#1012628). - gpio: 74x164: Add SPI device ID table (bsc#1012628). - gpio: pca953x: Improve bias setting (bsc#1012628). - net: arc: select CRC32 (bsc#1012628). - net: korina: select CRC32 (bsc#1012628). - net/smc: improved fix wait on already cleared link (bsc#1012628). - net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path (bsc#1012628). - net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp (bsc#1012628). - net/mlx5e: Switchdev representors are not vlan challenged (bsc#1012628). - net: stmmac: fix get_hw_feature() on old hardware (bsc#1012628). - net: phy: Do not shutdown PHYs in READY state (bsc#1012628). - net: dsa: mv88e6xxx: don't use PHY_DETECT on internal PHY's (bsc#1012628). - net: dsa: microchip: Added the condition for scheduling ksz_mib_read_work (bsc#1012628). - net: dsa: fix spurious error message when unoffloaded port leaves bridge (bsc#1012628). - net: encx24j600: check error in devm_regmap_init_encx24j600 (bsc#1012628). - ethernet: s2io: fix setting mac address during resume (bsc#1012628). - vhost-vdpa: Fix the wrong input in config_cb (bsc#1012628). - nfc: fix error handling of nfc_proto_register() (bsc#1012628). - NFC: digital: fix possible memory leak in digital_tg_listen_mdaa() (bsc#1012628). - NFC: digital: fix possible memory leak in digital_in_send_sdd_req() (bsc#1012628). - pata_legacy: fix a couple uninitialized variable bugs (bsc#1012628). - ata: ahci_platform: fix null-ptr-deref in ahci_platform_enable_regulators() (bsc#1012628). - mlxsw: thermal: Fix out-of-bounds memory accesses (bsc#1012628). - platform/mellanox: mlxreg-io: Fix argument base in kstrtou32() call (bsc#1012628). - platform/mellanox: mlxreg-io: Fix read access of n-bytes size attributes (bsc#1012628). - spi: spidev: Add SPI ID table (bsc#1012628). - spi: bcm-qspi: clear MSPI spifie interrupt during probe (bsc#1012628). - drm/panel: olimex-lcd-olinuxino: select CRC32 (bsc#1012628). - drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read (bsc#1012628). - drm/msm: Fix null pointer dereference on pointer edp (bsc#1012628). - drm/msm/mdp5: fix cursor-related warnings (bsc#1012628). - drm/msm/submit: fix overflow check on 64-bit architectures (bsc#1012628). - drm/msm/a6xx: Track current ctx by seqno (bsc#1012628). - drm/msm/a4xx: fix error handling in a4xx_gpu_init() (bsc#1012628). - drm/msm/a3xx: fix error handling in a3xx_gpu_init() (bsc#1012628). - drm/msm/dsi: dsi_phy_14nm: Take ready-bit into account in poll_for_ready (bsc#1012628). - drm/msm/dsi: Fix an error code in msm_dsi_modeset_init() (bsc#1012628). - drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling (bsc#1012628). - acpi/arm64: fix next_platform_timer() section mismatch error (bsc#1012628). - platform/x86: intel_scu_ipc: Fix busy loop expiry time (bsc#1012628). - mqprio: Correct stats in mqprio_dump_class_stats() (bsc#1012628). - mptcp: fix possible stall on recvmsg() (bsc#1012628). - qed: Fix missing error code in qed_slowpath_start() (bsc#1012628). - r8152: select CRC32 and CRYPTO/CRYPTO_HASH/CRYPTO_SHA256 (bsc#1012628). - ice: fix locking for Tx timestamp tracking flush (bsc#1012628). - block/rnbd-clt-sysfs: fix a couple uninitialized variable bugs (bsc#1012628). - nfp: flow_offload: move flow_indr_dev_register from app init to app start (bsc#1012628). - net: mscc: ocelot: make use of all 63 PTP timestamp identifiers (bsc#1012628). - net: mscc: ocelot: avoid overflowing the PTP timestamp FIFO (bsc#1012628). - net: mscc: ocelot: warn when a PTP IRQ is raised for an unknown skb (bsc#1012628). - net: mscc: ocelot: deny TX timestamping of non-PTP packets (bsc#1012628). - net: mscc: ocelot: cross-check the sequence id from the timestamp FIFO with the skb PTP header (bsc#1012628). - net: dsa: felix: break at first CPU port during init and teardown (bsc#1012628). - ionic: don't remove netdev->dev_addr when syncing uc list (bsc#1012628). - commit 6859230 - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (CVE-2021-3542 bsc#1184673). - commit 08ab8da - x86/fpu: Mask out the invalid MXCSR bits properly (x86_32 breakage). - commit 565cd48 - rpm/kernel-obs-build.spec.in: reduce initrd functionality For building in OBS, we always build inside a virtual machine that gets a new, freshly created scratch filesystem image. So we do not need to handle fscks because that ain't gonna happen, as well as not we do not need to handle microcode update in the initrd as these only can be run on the host system anyway. We can also strip and hardlink as an additional optimisation that should not significantly hurt. - commit c72c6fc - Update upstream commit id for rtw89 patch (bsc#1191321) - commit 8dccb66 - Linux 5.14.13 (bsc#1012628). - hwmon: (pmbus/ibm-cffps) max_power_out swap changes (bsc#1012628). - io_uring: kill fasync (bsc#1012628). - sched: Always inline is_percpu_thread() (bsc#1012628). - perf/core: fix userpage->time_enabled of inactive events (bsc#1012628). - scsi: qla2xxx: Fix excessive messages during device logout (bsc#1012628). - scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported" (bsc#1012628). - scsi: ses: Fix unsigned comparison with less than zero (bsc#1012628). - drm/amdgpu: fix gart.bo pin_count leak (bsc#1012628). - net: sun: SUNVNET_COMMON should depend on INET (bsc#1012628). - vboxfs: fix broken legacy mount signature checking (bsc#1012628). - net: bgmac-platform: handle mac-address deferral (bsc#1012628). - mac80211: check return value of rhashtable_init (bsc#1012628). - net: prevent user from passing illegal stab size (bsc#1012628). - hwmon: (ltc2947) Properly handle errors when looking for the external clock (bsc#1012628). - m68k: Handle arrivals of multiple signals correctly (bsc#1012628). - pinctrl: qcom: sc7280: Add PM suspend callbacks (bsc#1012628). - mac80211: Drop frames from invalid MAC address in ad-hoc mode (bsc#1012628). - netfilter: nf_nat_masquerade: defer conntrack walk to work queue (bsc#1012628). - netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic (bsc#1012628). - KVM: arm64: nvhe: Fix missing FORCE for hyp-reloc.S build rule (bsc#1012628). - ASoC: SOF: loader: release_firmware() on load failure to avoid batching (bsc#1012628). - HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs (bsc#1012628). - netfilter: ip6_tables: zero-initialize fragment offset (bsc#1012628). - HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS (bsc#1012628). - ALSA: usb-audio: Unify mixer resume and reset_resume procedure (bsc#1012628). - ALSA: oxfw: fix transmission method for Loud models based on OXFW971 (bsc#1012628). - ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic (bsc#1012628). - ext4: correct the error path of ext4_write_inline_data_end() (bsc#1012628). - ext4: check and update i_disksize properly (bsc#1012628). - commit ab3ca44 - kernel-spec-macros: Since rpm 4.17 %verbose is unusable (bsc#1191229). The semantic changed in an incompatible way so invoking the macro now causes a build failure. - commit 3e55f55 - Linux 5.14.12 (bsc#1012628). - dsa: tag_dsa: Fix mask for trunked packets (bsc#1012628). - x86/hpet: Use another crystalball to evaluate HPET usability (bsc#1012628). - x86/entry: Clear X86_FEATURE_SMAP when CONFIG_X86_SMAP=n (bsc#1012628). - x86/entry: Correct reference to intended CONFIG_64_BIT (bsc#1012628). - x86/fpu: Restore the masking out of reserved MXCSR bits (bsc#1012628). - x86/sev: Return an error on a returned non-zero SW_EXITINFO1[31:0] (bsc#1012628). - x86/Kconfig: Correct reference to MWINCHIP3D (bsc#1012628). - x86/platform/olpc: Correct ifdef symbol to intended CONFIG_OLPC_XO15_SCI (bsc#1012628). - pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init (bsc#1012628). - powerpc/32s: Fix kuap_kernel_restore() (bsc#1012628). - powerpc/64s: Fix unrecoverable MCE calling async handler from NMI (bsc#1012628). - powerpc/traps: do not enable irqs in _exception (bsc#1012628). - powerpc/64s: fix program check interrupt emergency stack path (bsc#1012628). - powerpc/bpf ppc32: Fix BPF_SUB when imm == 0x80000000 (bsc#1012628). - powerpc/bpf ppc32: Do not emit zero extend instruction for 64-bit BPF_END (bsc#1012628). - powerpc/bpf ppc32: Fix JMP32_JSET_K (bsc#1012628). - powerpc/bpf ppc32: Fix ALU32 BPF_ARSH operation (bsc#1012628). - powerpc/bpf: Fix BPF_SUB when imm == 0x80000000 (bsc#1012628). - powerpc/bpf: Fix BPF_MOD when imm == 1 (bsc#1012628). - objtool: Make .altinstructions section entry size consistent (bsc#1012628). - objtool: Remove reloc symbol type checks in get_alt_entry() (bsc#1012628). - scsi: iscsi: Fix iscsi_task use after free (bsc#1012628). - RISC-V: Include clone3() on rv32 (bsc#1012628). - i2c: mlxcpld: Modify register setting for 400KHz frequency (bsc#1012628). - i2c: mlxcpld: Fix criteria for frequency setting (bsc#1012628). - bpf, s390: Fix potential memory leak about jit_data (bsc#1012628). - riscv/vdso: make arch_setup_additional_pages wait for mmap_sem for write killable (bsc#1012628). - riscv/vdso: Move vdso data page up front (bsc#1012628). - riscv/vdso: Refactor asm/vdso.h (bsc#1012628). - RISC-V: Fix VDSO build for !MMU (bsc#1012628). - riscv: explicitly use symbol offsets for VDSO (bsc#1012628). - i2c: mediatek: Add OFFSET_EXT_CONF setting back (bsc#1012628). - i2c: acpi: fix resource leak in reconfiguration device addition (bsc#1012628). - powerpc/iommu: Report the correct most efficient DMA mask for PCI devices (bsc#1012628). - net: prefer socket bound to interface when not in VRF (bsc#1012628). - iavf: fix double unlock of crit_lock (bsc#1012628). - i40e: Fix freeing of uninitialized misc IRQ vector (bsc#1012628). - i40e: fix endless loop under rtnl (bsc#1012628). - gve: report 64bit tx_bytes counter from gve_handle_report_stats() (bsc#1012628). - gve: fix gve_get_stats() (bsc#1012628). - rtnetlink: fix if_nlmsg_stats_size() under estimation (bsc#1012628). - gve: Properly handle errors in gve_assign_qpl (bsc#1012628). - gve: Avoid freeing NULL pointer (bsc#1012628). - gve: Correct available tx qpl check (bsc#1012628). - net: stmmac: trigger PCS EEE to turn off on link down (bsc#1012628). - net: pcs: xpcs: fix incorrect steps on disable EEE (bsc#1012628). - drm/nouveau/debugfs: fix file release memory leak (bsc#1012628). - drm/nouveau/kms/nv50-: fix file release memory leak (bsc#1012628). - drm/nouveau: avoid a use-after-free when BO init fails (bsc#1012628). - video: fbdev: gbefb: Only instantiate device when built for IP32 (bsc#1012628). - drm/panel: abt-y030xx067a: yellow tint fix (bsc#1012628). - drm/nouveau/fifo/ga102: initialise chid on return from channel creation (bsc#1012628). - drm/sun4i: dw-hdmi: Fix HDMI PHY clock setup (bsc#1012628). - bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893 (bsc#1012628). - perf jevents: Free the sys_event_tables list after processing entries (bsc#1012628). - drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume (bsc#1012628). - drm/amdkfd: fix a potential ttm->sg memory leak (bsc#1012628). - ARM: defconfig: gemini: Restore framebuffer (bsc#1012628). - netlink: annotate data races around nlk->bound (bsc#1012628). - net: pcs: xpcs: fix incorrect CL37 AN sequence (bsc#1012628). - net: sfp: Fix typo in state machine debug string (bsc#1012628). - net/sched: sch_taprio: properly cancel timer from taprio_destroy() (bsc#1012628). - net: bridge: fix under estimation in br_get_linkxstats_size() (bsc#1012628). - net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size() (bsc#1012628). - afs: Fix afs_launder_page() to set correct start file position (bsc#1012628). - netfs: Fix READ/WRITE confusion when calling iov_iter_xarray() (bsc#1012628). - drm/i915/bdb: Fix version check (bsc#1012628). - drm/i915/tc: Fix TypeC port init/resume time sanitization (bsc#1012628). - drm/i915/jsl: Add W/A 1409054076 for JSL (bsc#1012628). - drm/i915/audio: Use BIOS provided value for RKL HDA link (bsc#1012628). - ARM: imx6: disable the GIC CPU interface before calling stby-poweroff sequence (bsc#1012628). - dt-bindings: drm/bridge: ti-sn65dsi86: Fix reg value (bsc#1012628). - arm64: dts: ls1028a: fix eSDHC2 node (bsc#1012628). - arm64: dts: imx8mm-kontron-n801x-som: do not allow to switch off buck2 (bsc#1012628). - arm64: dts: imx8: change the spi-nor tx (bsc#1012628). - ARM: dts: imx: change the spi-nor tx (bsc#1012628). - ptp_pch: Load module automatically if ID matches (bsc#1012628). - powerpc/fsl/dts: Fix phy-connection-type for fm1mac3 (bsc#1012628). - netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in event notification (bsc#1012628). - MIPS: Revert "add support for buggy MT7621S core detection" (bsc#1012628). - net: stmmac: dwmac-rk: Fix ethernet on rk3399 based devices (bsc#1012628). - net: mscc: ocelot: fix VCAP filters remaining active after being deleted (bsc#1012628). - net_sched: fix NULL deref in fifo_set_limit() (bsc#1012628). - libbpf: Fix memory leak in strset (bsc#1012628). - phy: mdio: fix memory leak (bsc#1012628). - libbpf: Fix segfault in light skeleton for objects without BTF (bsc#1012628). - net/mlx5e: Fix the presented RQ index in PTP stats (bsc#1012628). - net/mlx5: Fix setting number of EQs of SFs (bsc#1012628). - net/mlx5: Fix length of irq_index in chars (bsc#1012628). - net/mlx5: Avoid generating event after PPS out in Real time mode (bsc#1012628). - net/mlx5: Force round second at 1PPS out start time (bsc#1012628). - net/mlx5: E-Switch, Fix double allocation of acl flow counter (bsc#1012628). - net/mlx5e: Keep the value for maximum number of channels in-sync (bsc#1012628). - net/mlx5e: IPSEC RX, enable checksum complete (bsc#1012628). - bpf: Fix integer overflow in prealloc_elems_and_freelist() (bsc#1012628). - soc: ti: omap-prm: Fix external abort for am335x pruss (bsc#1012628). - bpf, arm: Fix register clobbering in div/mod implementation (bsc#1012628). - netfilter: nf_tables: reverse order in rule replacement expansion (bsc#1012628). - netfilter: nf_tables: add position handle in event notification (bsc#1012628). - netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1 (bsc#1012628). - iwlwifi: pcie: add configuration of a Wi-Fi adapter on Dell XPS 15 (bsc#1012628). - xtensa: call irqchip_init only when CONFIG_USE_OF is selected (bsc#1012628). - xtensa: use CONFIG_USE_OF instead of CONFIG_OF (bsc#1012628). - arm64: dts: qcom: pm8150: use qcom,pm8998-pon binding (bsc#1012628). - ath5k: fix building with LEDS=m (bsc#1012628). - PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (bsc#1012628). - ARM: dts: imx6qdl-pico: Fix Ethernet support (bsc#1012628). - ARM: dts: imx: Fix USB host power regulator polarity on M53Menlo (bsc#1012628). - ARM: dts: imx: Add missing pinctrl-names for panel on M53Menlo (bsc#1012628). - soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment (bsc#1012628). - iwlwifi: mvm: Fix possible NULL dereference (bsc#1012628). - ARM: at91: pm: do not panic if ram controllers are not enabled (bsc#1012628). - Revert "arm64: dts: qcom: sc7280: Fixup the cpufreq node" (bsc#1012628). - ARM: dts: qcom: apq8064: Use 27MHz PXO clock as DSI PLL reference (bsc#1012628). - soc: qcom: socinfo: Fixed argument passed to platform_set_data() (bsc#1012628). - bus: ti-sysc: Add break in switch statement in sysc_init_soc() (bsc#1012628). - riscv: Flush current cpu icache before other cpus (bsc#1012628). - scsi: ufs: core: Fix task management completion (bsc#1012628). - ARM: dts: qcom: apq8064: use compatible which contains chipid (bsc#1012628). - ARM: dts: imx6dl-yapp4: Fix lp5562 LED driver probe (bsc#1012628). - ARM: dts: omap3430-sdp: Fix NAND device node (bsc#1012628). - xen/balloon: fix cancelled balloon action (bsc#1012628). - SUNRPC: fix sign error causing rpcsec_gss drops (bsc#1012628). - nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero (bsc#1012628). - nfsd: fix error handling of register_pernet_subsys() in init_nfsd() (bsc#1012628). - ovl: fix IOCB_DIRECT if underlying fs doesn't support direct IO (bsc#1012628). - ovl: fix missing negative dentry check in ovl_rename() (bsc#1012628). - fbdev: simplefb: fix Kconfig dependencies (bsc#1012628). - Update config files. - mmc: sdhci-of-at91: replace while loop with read_poll_timeout (bsc#1012628). - mmc: sdhci-of-at91: wait for calibration done before proceed (bsc#1012628). - mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk (bsc#1012628). - xen/privcmd: fix error handling in mmap-resource processing (bsc#1012628). - drm/i915: Extend the async flip VT-d w/a to skl/bxt (bsc#1012628). - drm/i915: Fix runtime pm handling in i915_gem_shrink (bsc#1012628). - drm/amd/display: Fix DCN3 B0 DP Alt Mapping (bsc#1012628). - drm/amd/display: Fix detection of 4 lane for DPALT (bsc#1012628). - drm/amd/display: Limit display scaling to up to 4k for DCN 3.1 (bsc#1012628). - drm/nouveau/ga102-: support ttm buffer moves via copy engine (bsc#1012628). - drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows (bsc#1012628). - drm/amdgpu: During s0ix don't wait to signal GFXOFF (bsc#1012628). - drm/amd/display: USB4 bring up set correct address (bsc#1012628). - drm/amd/display: Fix B0 USB-C DP Alt mode (bsc#1012628). - usb: typec: tipd: Remove dependency on "connector" child fwnode (bsc#1012628). - usb: typec: tcpm: handle SRC_STARTUP state if cc changes (bsc#1012628). - usb: typec: tcpci: don't handle vSafe0V event if it's not enabled (bsc#1012628). - USB: cdc-acm: fix break reporting (bsc#1012628). - USB: cdc-acm: fix racy tty buffer accesses (bsc#1012628). - usb: gadget: f_uac2: fixed EP-IN wMaxPacketSize (bsc#1012628). - usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle (bsc#1012628). - usb: cdc-wdm: Fix check for WWAN (bsc#1012628). - Partially revert "usb: Kconfig: using select for USB_COMMON dependency" (bsc#1012628). - Update config files. - commit 7246625 - rtw89: add Realtek 802.11ax driver (bsc#1191321). - commit 4c399ab - Enable CONFIG_RTW88_DEBUG and CONFIG_RTW89_DEBUG on debug flavors (bsc#1191321) - commit a76143b ==== libguestfs ==== Subpackages: guestfs-data guestfs-tools guestfs-winsupport libguestfs0 perl-Sys-Guestfs python3-libguestfs - Fix build errors in Factory * Alert ocaml_deprecated_cli: Setting a warning with a sequence of lowercase or uppercase letters, like 'CDEFLMPSUVYZX', is deprecated. 63c9cd93-m4-guestfs-ocaml.m4-Fix-deprecated-warning-format.patch * Error (warning 6 [labels-omitted]): label verbose was omitted in the application of this function. a4930f5f-customize-Suppress-OCaml-warning.patch - Update spec file licenses to GPL-2.0-or-later ==== libyui ==== Version update (4.2.19 -> 4.2.20) - Use the C++17 standard in the *-pkg plugins (libzypp uses that standard by default) (related to bsc#1191829) - 4.2.20 ==== libyui-ncurses ==== Version update (4.2.19 -> 4.2.20) - Use the C++17 standard in the *-pkg plugins (libzypp uses that standard by default) (related to bsc#1191829) - 4.2.20 ==== libyui-ncurses-pkg ==== Version update (4.2.19 -> 4.2.20) - Use the C++17 standard in the *-pkg plugins (libzypp uses that standard by default) (related to bsc#1191829) - 4.2.20 ==== libyui-qt ==== Version update (4.2.19 -> 4.2.20) - Use the C++17 standard in the *-pkg plugins (libzypp uses that standard by default) (related to bsc#1191829) - 4.2.20 ==== libyui-qt-graph ==== Version update (4.2.19 -> 4.2.20) - Use the C++17 standard in the *-pkg plugins (libzypp uses that standard by default) (related to bsc#1191829) - 4.2.20 ==== libyui-qt-pkg ==== Version update (4.2.19 -> 4.2.20) - Use the C++17 standard in the *-pkg plugins (libzypp uses that standard by default) (related to bsc#1191829) - 4.2.20 ==== logrotate ==== - Add patch: * logrotate-dont_warn_on_size=_syntax.patch (boo#1191816) ==== mpg123 ==== Version update (1.29.1 -> 1.29.2) Subpackages: libmpg123-0 mpg123-openal - Update to version 1.29.2 * libmpg123: Fix non-live-decoder safeguard for mpg123_framebyframe_decode() (was a no-op in practice). ==== ncurses ==== Version update (6.2.20211002 -> 6.3.20211021) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Update to ncurses 6.3 (patch 20211021) + update release notes + add "ncu2openbsd" script, to illustrate how to update an OpenBSD system to use a current ncurses release. - Add upstream keyring to verify source signatures of both ncurses and tack tar ball with their ASC (armored ASCii signature) counterpart - Add ncurses patch 20211018 + check for screen size-change in scr_init() and scr_restore(), in case a screen dump does not match the current screen dimensions (report by Frank Tkalcevic). - Add ncurses patch 20211017 + amend change for pkg-config to account for "none" being returned in the libdir-path result rather than "no" (report by Gabriele Balducci). - Add ncurses patch 20211016 + build-fix for pmake with libtool. + improve make-tar.sh scripts, adding COPYING to tar file, and clean up shellcheck warnings. + add link for "reset6" manpage in test-package ncurses6-doc + revise configure option --with-pkg-config-libdir, using the actual search path from pkg-config or pkgconf using the output from --debug (report by Pascal Pignard). + freeze ABI in ".map" files. - Correct offsets of patch ncurses-6.2.dif - Add ncurses patch 20211009 + implement "+m" option in tabs program. + fill in some details for infoton -TD + fix spelling/consistency in several descriptions -TD + use vt420+lrmm in vt420 -TD + modify save_tty_settings() to avoid opening /dev/tty for cases other than reset/init, e.g., for clear. + modify output of "toe -as" to show first description found rather than the last. + improve tic checks for number of parameters of smglp, smgrp, smgtp, and smgbp (cf: 20020525). + correct off-by-one comparison in last_char(), which did not allow special case of ":" in a terminfo description field (cf: 20120407). + remove check in tic that assumes that none or both parameterized and non-parameterized margin-setting capabilities are present (cf: 20101002). ==== ocfs2-tools ==== - Fix mounted.ocfs2 output when some devices are not ready (bsc#1191810) + fixed-mounted.ocfs2-output-when-some-devices-are-Not.patch + update-mounted.ocfs2-mounted.c.patch ==== parted ==== Subpackages: libparted0 - BuildRequire python3-base: Fix execution of test suite. Otherwise we fail with ./t0282-gpt-move-backup.sh: /usr/bin/python3: bad interpreter: No such file or directory. - run checks during build - added patches: tests-disable.patch ==== pcre2 ==== Version update (10.37 -> 10.38) Subpackages: libpcre2-16-0 libpcre2-32-0 libpcre2-8-0 - pcre2 10.38: * Following Perl's lead, \K is now locked out in lookaround assertions by default, but an option is provided to re-enable the previous behaviour ==== perl-Mojolicious ==== Version update (9.21 -> 9.22) - updated to 9.22 see /usr/share/doc/packages/perl-Mojolicious/Changes 9.22 2021-10-16 - Added a referer method to Mojo::Headers, as an alias for the referrer method. - Fixed response status log message to use the "trace" log level instead of "debug". ==== php7 ==== Version update (7.4.24 -> 7.4.25) Subpackages: php7-cli php7-ctype php7-dom php7-gd php7-gettext php7-iconv php7-json php7-mbstring php7-mysql php7-openssl php7-pdo php7-sqlite php7-tokenizer php7-xmlreader php7-xmlwriter - updated to 7.4.25: This is a security release (CVE-2021-21703) which also contains several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.25 ==== plasma5-openSUSE ==== Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE - Update to 5.23.2 ==== polkit ==== Subpackages: typelib-1_0-Polkit-1_0 - fork libpolkit0 package into libpolkit-agent-1-0 and libpolkit-gobject-1-0 as mandated. bsc#1191781 ==== postfix ==== Subpackages: postfix-doc - config.postfix not updatet after lmdb switch (bsc#1190945) Adapt config.postfix - postfix master.cf: to include "submissions" service (bsc#1189684) Adapt master.cf patch - postfix fails with glibc 2.34 Define HAS_CLOSEFROM (bsc#1189101) add patch - postfix-3.6.2-glibc-234-build-fix.patch - fix config.postfix (follow up of bsc#1188477) - Syntax error in config.postfix (bsc#1188477) - Update to 3.6.2 * In Postfix 3.6, fixed a false "Result too large" (ERANGE) fatal error in the compatibility_level parser, because there was no 'errno = 0' statement before an strtol() call. * (problem introduced in Postfix 3.3) "Null pointer read" error in the cleanup daemon when "header_from_format = standard" (the default as of Postfix 3.3), and email was submitted with /usr/sbin/sendmail without From: header, and an all-space full name was specified in 1) the password file, 2) with "sendmail - F", or 3) with the NAME environment variable. Found by Renaud Metrich. * (problem introduced in Postfix 2.4) False "too many reverse jump" warnings in the showq daemon, because loop detection code was comparing memory addresses instead of queue file names. Reported by Mehmet Avcioglu. * (problem introduced in 1999) The Postfix SMTP server was sending all session transcripts to the error_notice_recipient (default: postmaster), instead of sending transcripts of bounced mail to the bounce_notice_recipient (default: postmaster). Reported by Hans van Zijst. * The texthash: map implementation broke tls_server_sni_maps, because it did not support multi-file inputs. Reported by Christopher Gurnee, who also found an instance of the missing code in the "postmap -F" source code. File: util/dict_thash.c. - spamd wants to start before mail-transfer-agent.target, but that target doesn't exist (bsc#1066854) - postfix-SUSE * rework sysconfig.postfix, add - POSTFIX_WITH_DKIM - POSTFIX_DKIM_CONN * rework config.postfix for main.cf - with_dkim - update postfix-main.cf.patch * add OpenDKIM settings - postfix-mysql * add mysql_relay_recipient_maps.cf - postfix-SUSE * rework sysconfig.postfix, add - POSTFIX_RELAY_RECIPIENTS - POSTFIX_BACKUPMX * add relay_recipients * rework config.postfix for main.cf - is_backupmx - relay_recipient_maps - Add now working CONFIG parameter to sysusers generator - Remove unnecessary group line from postfix-vmail-user.conf - Update to 3.6.1 * Bugfix (introduced: Postfix 2.11): the command "postmap lmdb:/file/name" (create LMDB database from textfile) handled duplicate input keys ungracefully, discarding entries stored up to and including the duplicate key, and causing a double free() call with lmdb versions 0.9.17 and later. Reported by Adi Prasaja; double free() root cause analysis by Howard Chu. * Typo (introduced: Postfix 3.4): silent_discard should be silent-discard in BDAT_README. - fix postfix-master.cf.patch * set correct indentation (again) for options of - submission (needs 3 spaces) - smtps (needs 4 spaces) to make config.postfix work nicely again - Update to 3.6.0 - Major changes - internal protocol identification Internal protocols have changed. You need to "postfix stop" before updating, or before backing out to an earlier release, otherwise long-running daemons (pickup, qmgr, verify, tlsproxy, postscreen) may fail to communicate with the rest of Postfix, causing mail delivery delays until Postfix is restarted. For more see /usr/share/doc/packages/postfix/RELEASE_NOTES - refreshed patches to apply cleanly again: fix-postfix-script.patch ipv6_disabled.patch pointer_to_literals.patch postfix-linux45.patch postfix-main.cf.patch postfix-master.cf.patch postfix-no-md5.patch postfix-ssl-release-buffers.patch postfix-vda-v14-3.0.3.patch set-default-db-type.patch - (bsc#1186669) - postfix.service has "Requires=var-run.mount" Remove bad requirements - Update to 3.5.10 with security fixes: * Missing null pointer checks (introduced in Postfix 3.4) after an internal I/O error during the smtp(8) to tlsproxy(8) handshake. Found by Coverity, reported by Jaroslav Skarvada. Based on a fix by Viktor Dukhovni. * Null pointer bug (introduced in Postfix 3.0) and memory leak (introduced in Postfix 3.4) after an inline: table syntax error in main.cf or master.cf. Found by Coverity, reported by Jaroslav Skarvada. Based on a fix by Viktor Dukhovni. * Incomplete null pointer check (introduced: Postfix 2.10) after truncated HaProxy version 1 handshake message. Found by Coverity, reported by Jaroslav Skarvada. Fix by Viktor Dukhovni. * Missing null pointer check (introduced: Postfix alpha) after null argv[0] value. - (bsc#1183305) - config.postfix uses db as suffix for postmaps Depending on DEF_DB_TYPE uses lmdb or db - (bsc#1182833) - /usr/share/fillup-templates/sysconfig.postfix still refers to /etc/services Use getent to detect if smtps is already defined. - (bsc#1180473) [Build 20201230] postfix has invalid default config (bsc#1181381) [Build 130.3] openQA test fails in mta, mutt - postfix broken: "queue file write error" and "error: unsupported dictionary type: hash" Export DEF_DB_TYPE before starting the perl script. - bsc#1180473 - [Build 20201230] postfix has invalid default config Fixing config.postfix and sysconfig.postfix - Update to 3.5.9 * improves the reporting of DNSSEC problems that may affect DANE security - Only do the conversion from the hash/btree databases to lmdb when the default database type changes from hash to lmdb and do not stop and start the service (the old compiled databases can live together with the new ones) - convert-bdb-to-lmdb.sh - Clean up the specfile * Remove < 1330 conditional builds * Use generated postfix-files instead of the obsolete one from postfix-SUSE.tar.gz * Use dynamicmaps.cf.d instead of modifying dynamicmaps.cf upon (de)installation of optional mysql, pgsql and ldap subpackages * Use default location for post-install, postfix-tls-script, postfix-wrapper and postmulti-script - Set lmdb to be the default db. - Convert btree tables to lmdb too. Stop postfix before converting from bdb to lmdb - This package is without bdb support. That's why convert must be done without any suse release condition. o remove patch postfix-no-btree.patch o add set-default-db-type.patch - Set database type for address_verify_map and postscreen_cache_map to lmdb (btree requires Berkeley DB) o add postfix-no-btree.patch - Set default database type to lmdb and fix update_postmaps script - Use variable substition instead of sed to remove .db suffix and substitute hash: for lmdb: in /etc/postfix/master.cf as well. Check before substitution if there is something to do (to keep rpmcheck happy). - bsc#1176650 L3: What is regularly triggering the "fillup" command and changing modify-time of /etc/sysconfig/postfix? o Remove miss placed fillup_only call from %verifyscript - Remove Berkeley DB dependency (JIRA#SLE-12191) The pacakges postfix is build without Berkely DB support. lmdb will be used instead of BDB. The pacakges postfix-bdb is build with Berkely DB support. o add patch for main.cf for postfix-bdb package postfix-bdb-main.cf.patch - Update to 3.5.8 * The Postfix SMTP client inserted <CR><LF> into message headers longer than $line_length_limit (default: 2048), causing all subsequent header content to become message body content. * The postscreen daemon did not save a copy of the postscreen_dnsbl_reply_map lookup result. This has no effect when the recommended texthash: look table is used, but it could result in stale data with other lookup tables. * After deleting a recipient with a Milter, the Postfix recipient duplicate filter was not updated; the filter suppressed requests to add the recipient back. * Memory leak: the static: maps did not free their casefolding buffer. * With "smtpd_tls_wrappermode = yes", the smtps service was waiting for a TLS handshake, after processing an XCLIENT command. * The smtp_sasl_mechanism_filter implementation ignored table lookup errors, treating them as 'not found'. * The code that looks for Delivered-To: headers ignored headers longer than $line_length_limit (default: 2048). - Update to 3.5.7 * Fixed random certificate verification failures with "smtp_tls_connection_reuse = yes", because tlsproxy(8) was using the wrong global TLS context for connections that use DANE or non-DANE trust anchors. - Move ldap into an own sub-package like all other databases - Move manual pages to correct sub-package - Use sysusers.d to create system accounts - Remove wrong %config for systemd directory content - Use the correct signature file for source verification - Rename postfix-3.5.6.tar.gz.sig to postfix-3.5.6.tar.gz.asc (to prevent confusion, as the signature file from upstream with .sig extension is incompatible with the build service) - Update to 3.5.6 with following fixes: * Workaround for unexpected TLS interoperability problems when Postfix runs on OS distributions with system-wide OpenSSL configurations. * Memory leaks in the Postfix TLS library, the largest one involving multiple kBytes per peer certificate. - Add source verification (add postfix.keyring) - Use systemd_ordering instead of systemd_require. - Move /etc/postfix/system to /usr/lib/postfix/systemd [bsc#1173688] - Drop /var/adm/SuSEconfig from %post, it does nothing. - Rename postfix-SuSE to postfix-SUSE - Delete postfix-SUSE/README.SuSE, company name spelled wrong, completly outdated and not used. - Delete postfix-SUSE/SPAMASSASSIN+POSTFIX.SuSE, company name spelled wrong, outdated and not used. - sysconfig.mail-postfix: Fix description of MAIL_CREATE_CONFIG, SuSEconfig is gone since ages. - update_chroot.systemd: Remove advice to run SuSEconfig. - Remove rc.postfix, not used, outdated. - mkpostfixcert: Remove advice to run SuSEconfig. - Update to 3.5.4: * The connection_reuse attribute in smtp_tls_policy_maps always resulted in an "invalid attribute name" error. * SMTP over TLS connection reuse always failed for Postfix SMTP client configurations that specify explicit trust anchors (remote SMTP server certificates or public keys). * The Postfix SMTP client's DANE implementation would always send an SNI option with the name in a destination's MX record, even if the MX record pointed to a CNAME record. MX records that point to CNAME records are not conformant with RFC5321, and so are rare. Based on the DANE survey of ~2 million hosts it was found that with the corrected SMTP client behavior, sending SNI with the CNAME-expanded name, the SMTP server would not send a different certificate. This fix should therefore be safe. - Update to 3.5.3: * TLS handshake failure in the Postfix SMTP server during SNI processing, after the server-side TLS engine sent a TLSv1.3 HelloRetryRequest (HRR) to a remote SMTP client. * The command "postfix tls deploy-server-cert" did not handle a missing optional argument. This bug was introduced in Postfix 3.1. - Update to 3.5.2: * A TLS error for a database client caused a false 'lost connection' error for an SMTP over TLS session in the same Postfix process. This bug was introduced with Postfix 2.2. * The same bug existed in the tlsproxy(8) daemon, where a TLS error for one TLS session could cause a false 'lost connection' error for a concurrent TLS session in the same process. This bug was introduced with Postfix 2.8. * The Postfix build now disables DANE support on Linux systems with libc-musl such as Alpine, because libc-musl provides no indication whether DNS responses are authentic. This broke DANE support without a clear explanation. * Due to implementation changes in the ICU library, some Postfix daemons reported file access errrors (U_FILE_ACCESS_ERROR) after chroot(). This was fixed by initializing the ICU library before making the chroot() call. * Minor code changes to silence a compiler that special-cases string literals. * Segfault (null pointer) in the tlsproxy(8) client role when the server role was disabled. This typically happened on systems that do not receive mail, after configuring connection reuse for outbound SMTP over TLS. * The date portion of the maillog_file_rotate_suffix default value used the minute (%M) instead of the month (%m). - boo#1106004 fix incorrect locations for files in postfix-files - Dropped deprecated-RES_INSECURE1.patch to make DNSSEC-secured lookups and DANE mail transport work again - Update to 3.5.1: * Support for the haproxy v2 protocol. The Postfix implementation supports TCP over IPv4 and IPv6, as well as non-proxied connections; the latter are typically used for heartbeat tests. * Support to force-expire email messages. This introduces new postsuper(1) command-line options to request expiration, and additional information in mailq(1) or postqueue(1) output. * The Postfix SMTP and LMTP client support a list of nexthop destinations separated by comma or whitespace. These destinations will be tried in the specified order. * Incompatible changes: * Logging: Postfix daemon processes now log the from= and to= addresses in external (quoted) form in non-debug logging (info, warning, etc.). This means that when an address localpart contains spaces or other special characters, the localpart will be quoted, for example: from=<"name with spaces"@example.com> Specify "info_log_address_format = internal" for backwards compatibility. * Postfix now normalizes IP addresses received with XCLIENT, XFORWARD, or with the HaProxy protocol, for consistency with direct connections to Postfix. This may change the appearance of logging, and the way that check_client_access will match subnets of an IPv6 address. - Update to 3.4.10: * Bug (introduced: Postfix 2.3): Postfix Milter client state was not properly reset after one Milter in a multi-Milter configuration failed during MAIL FROM, resulting in a Postfix Milter client panic during the next MAIL FROM command in the same SMTP session. - bsc#1162891 server:mail/postfix: cond_slp bug on TW after moving /etc/services to /usr/etc/services - bsc#1160413 postfix fails with -fno-common - Update to 3.4.9: * Bug (introduced: Postfix 3.1): smtp_dns_resolver_options were broken while adding support for negative DNS response caching in postscreen. Postfix was inadvertently changed to call res_query() instead of res_search(). * Bug (introduced: Postfix 2.5): Postfix ignored the CONNECT macro overrides from a Milter application. Postfix now evaluates the Milter macros for an SMTP CONNECT event after the Postfix-to-Milter connection is negotiated. * Bug (introduced: Postfix 3.0): sanitize (remote) server responses before storing them in the verify database, to avoid Postfix warnings about malformed UTF8. Found during code maintenance. - Update to 3.4.8: * Fix for an Exim interoperability problem when postscreen after-220 checks are enabled. Bug introduced in Postfix 3.4: the code that detected "PIPELINING after BDAT" looked at the wrong variable. The warning now says "BDAT without valid RCPT", and the error is no longer treated as a command PIPELINING error, thus allowing mail to be delivered. Meanwhile, Exim has been fixed to stop sending BDAT commands when postscreen rejects all RCPT commands. * Usability bug, introduced in Postfix 3.4: the parser for key/certificate chain files rejected inputs that contain an EC PARAMETERS object. While this is technically correct (the documentation says what types are allowed) this is surprising behavior because the legacy cert/key parameters will accept such inputs. For now, the parser skips object types that it does not know about for usability, and logs a warning because ignoring inputs is not kosher. * Bug introduced in Postfix 2.8: don't gratuitously enable all after-220 tests when only one such test is enabled. This made selective tests impossible with 'good' clients. This will be fixed in older Postfix versions at some later time. - Backport deprecated-RES_INSECURE1.patch in order to fix boo#1149705. - Update to 3.4.7: * Robustness: the tlsproxy(8) daemon could go into a loop, logging a flood of error messages. Problem reported by Andreas Schulze after enabling SMTP/TLS connection reuse. * Workaround: OpenSSL changed an SSL_Shutdown() non-error result value into an error result value, causing logfile noise. * Configuration: the new 'TLS fast shutdown' parameter name was implemented incorrectly. The documentation said "tls_fast_shutdown_enable", but the code said "tls_fast_shutdown". This was fixed by changing the code, because no-one is expected to override the default. * Performance: workaround for poor TCP loopback performance on LINUX, where getsockopt(..., TCP_MAXSEG, ...) reports a bogus TCP maximal segment size that is 1/2 to 1/3 of the real MSS. To avoid client-side Nagle delays or server-side delayed ACKs caused by multiple smaller-than-MSS writes, Postfix chooses a VSTREAM buffer size that is a small multiple of the reported bogus MSS. This workaround increases the multiplier from 2x to 4x. * Robustness: the Postfix Dovecot client could segfault (null pointer read) or cause an SMTP server assertion to fail when talking to a fake Dovecot server. The Postfix Dovecot client now logs a proper error instead. - bsc#1120757 L3: File Permissions->Paranoid can cause a system hang Break loop if postfix has no permission in spool directory. - add postfix-avoid-infinit-loop-if-no-permission.patch - fix for boo#1144946 mydestination - missing default localhost * update config.postfix - bsc#1142881 - mkpostfixcert from Postfix still uses md - removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by firewalld, see [1]. [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html - update example POSTFIX_BASIC_SPAM_PREVENTION: permit_mynetworks for * POSTFIX_SMTPD_HELO_RESTRICTIONS * POSTFIX_SMTPD_RECIPIENT_RESTRICTIONS - fix for: Can't connect to local MySQL server through socket '/run/mysql/mysql.sock' * update config.postfix * update update_chroot.systemd - Update to 3.4.6: * Workaround for implementations that hang Postfix while shutting down a TLS session, until Postfix times out. With "tls_fast_shutdown_enable = yes" (the default), Postfix no longer waits for the TLS peer to respond to a TLS 'close' request. This is recommended with TLSv1.0 and later. * Fixed a too-strict censoring filter that broke multiline Milter responses for header/body events. Problem report by Andreas Thienemann. * The code to reset Postfix SMTP server command counts was not called after a HaProxy handshake failure, causing stale numbers to be reported. Problem report by Joseph Ward. * postconf(5) documentation: tlsext_padding is not a tls_ssl_options feature. * smtp(8) documentation: updated the BUGS section text about Postfix support to reuse open TLS connections. * Portability: added "#undef sun" to util/unix_dgram_connect.c. - Ensure that postfix is member of all groups as before. - BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to shortcut the build queues by allowing usage of systemd-mini - Drop the omc config fate#301838: * it is obsolete since SLE11 - bsc#1104543 config.postfix does not start tlsmgr in master.cf when using POSTFIX_SMTP_TLS_CLIENT="must". Applyed the proposed patch. - Update to 3.4.5: Bugfix (introduced: Postfix 3.0): LMTP connections over UNIX-domain sockets were cached but not reused, due to a cache lookup key mismatch. Therefore, idle cached connections could exhaust LMTP server resources, resulting in two-second pauses between email deliveries. This problem was investigated by Juliana Rodrigueiro. File: smtp/smtp_connect.c. - Update to 3.4.4 o Incompatible changes - The Postfix SMTP server announces CHUNKING (BDAT command) by default. In the unlikely case that this breaks some important remote SMTP client, disable the feature as follows: /etc/postfix/main.cf: [#] The logging alternative: smtpd_discard_ehlo_keywords = chunking [#] The non-logging alternative: smtpd_discard_ehlo_keywords = chunking, silent_discard - This introduces a new master.cf service 'postlog' with type 'unix-dgram' that is used by the new postlogd(8) daemon. Before backing out to an older Postfix version, edit the master.cf file and remove the postlog entry. - Postfix 3.4 drops support for OpenSSL 1.0.1 - To avoid performance loss under load, the tlsproxy(8) daemon now requires a zero process limit in master.cf (this setting is provided with the default master.cf file). By default, a tlsproxy(8) process will retire after several hours. - To set the tlsproxy process limit to zero: postconf -F tlsproxy/unix/process_limit=0 postfix reload o Major changes - Postfix SMTP server support for RFC 3030 CHUNKING (the BDAT command) without BINARYMIME, in both smtpd(8) and postscreen(8). This has no effect on Milters, smtpd_mumble_restrictions, and smtpd_proxy_filter. See BDAT_README for more. - Support for logging to file or stdout, instead of using syslog. - Logging to file solves a usability problem for MacOS, and eliminates multiple problems with systemd-based systems. - Logging to stdout is useful when Postfix runs in a container, as it eliminates a syslogd dependency. - Better handling of undocumented(!) Linux behavior whether or not signals are delivered to a PID=1 process. - Support for (key, list of filenames) in map source text. Currently, this feature is used only by tls_server_sni_maps. - Automatic retirement: dnsblog(8) and tlsproxy(8) process will now voluntarily retire after after max_idle*max_use, or some sane limit if either limit is disabled. Without this, a process could stay busy for days or more. - Postfix SMTP client support for multiple deliveries per TLS-encrypted connection. This is primarily to improve mail delivery performance for destinations that throttle clients when they don't combine deliveries. This feature is enabled with "smtp_tls_connection_reuse=yes" in main.cf, or with "tls_connection_reuse=yes" in smtp_tls_policy_maps. It supports all Postfix TLS security levels including dane and dane-only. - SNI support in the Postfix SMTP server, the Postfix SMTP client, and in the tlsproxy(8) daemon (both server and client roles). See the postconf(5) documentation for the new tls_server_sni_maps and smtp_tls_servername parameters. - Support for files that contain multiple (key, certificate, trust chain) instances. This was required to implement server-side SNI table lookups, but it also eliminates the need for separate cert/key files for RSA, DSA, Elliptic Curve, and so on. - Support for smtpd_reject_footer_maps (as well as the postscreen variant postscreen_reject_footer_maps) for more informative reject messages. This is indexed with the Postfix SMTP server response text, and overrides the footer specified with smtpd_reject_footer. One will want to use a pcre: or regexp: map with this. o Bugfixes - Andreas Schulze discovered that reject_multi_recipient_bounce was producing false rejects with BDAT commands. This problem already existed with Postfix 2.2 smtpd_end_of_data_restrictons. Postfix 3.4.4 fixes both. - postfix-linux45.patch: support also newer kernels -- pretend we are still at kernel 3. Note that there are no conditionals for LINUX3 or LINUX4. And LINUX5 was generated, but not tested in the code which caused build failures. - skip set -x and fix version update changes entry - Update to 3.3.3 * When the master daemon runs with PID=1 (init mode), it will now reap child processes from non-Postfix code running in the same container, instead of terminating with a panic. * Bugfix (introduced: postfix-2.11): with posttls-finger, connections to unix-domain servers always resulted in "Failed to establish session" even after a connection was established. Jaroslav Skarva. File: posttls-finger/posttls-finger.c. * Bugfix (introduced: Postfix 3.0): with smtputf8_enable=yes, table lookups could casefold the search string when searching a lookup table that does not use fixed-string keys (regexp, pcre, tcp, etc.). Historically, Postfix would not case-fold the search string with such tables. File: util/dict_utf8.c. - PostrgeSQL's pg_config is meant for linking server extensions, use libpq's pkg-config instead, if available. This is needed to fix build with PostgreSQL 11. - rework config.postfix * disable commenting of smtpd_sasl_path/smtpd_sasl_type no need to comment, cause it is set to default anyway and 'uncommenting' would place it at end of file then which is not wanted - rework postfix-main.cf.patch * disable virtual_alias_domains cause (default: $virtual_alias_maps) - rework config.postfix * disable PCONF of virtual_alias_domains virtual_alias_maps will be set anyway to the correct value * extend virtual_alias_maps with - mysql_virtual_alias_domain_maps.cf - mysql_virtual_alias_domain_catchall_maps.cf - rework postfix-mysql, added * mysql_virtual_alias_domain_maps.cf * mysql_virtual_alias_domain_catchall_maps.cf needed for reject_unverified_recipient - binary hardening: link with full RELRO - Update to 3.3.2 * Support for OpenSSL 1.1.1 and TLSv1.3. * Bugfixes: - smtpd_discard_ehlo_keywords could not disable "SMTPUTF8", because some lookup table was using "EHLO_MASK_SMTPUTF8" instead. - minor memory leak in DANE support when minting issuer certs. - The Postfix build did not abort if the m4 command was not installed, resulting in a broken postconf command. - add POSTFIX_RELAY_DOMAINS * more flexibility to add to relay_domains without breaking config.postfix * rework restriction examples in sysconf.postfix based on postfix-buch.com (2. edtion by Hildebrandt, Koetter) - disable weak cipher: RC4 after check with https://ssl-tools.net/mailservers - update config.postfix * don't reject mail from authenticated users even if reject_unknown_client_hostname would match, add permit_sasl_authenticated to all restrictions requires smtpd_delay_reject = yes - update postfix-main.cf.patch * recover removed setting smtpd_sasl_path and smtpd_sasl_type, set to default value config.postfix will not 'enable' (remove #) var, but place modified (enabled) var at end of file, far away from place where it should be - rebase patches * fix-postfix-script.patch * postfix-vda-v14-3.0.3.patch * postfix-linux45.patch * postfix-master.cf.patch * pointer_to_literals.patch * postfix-no-md5.patch - bsc#1092939 - Postfixes postconf gives a lot of LDAP related warnings o add m4 as buildrequires, as proposed. - Add zlib-devel as buildrequires, previously included from openssl-devel - bsc#1087471 Unreleased Postfix update breaks SUSE Manager o Removing setting smtpd_sasl_path and smtpd_sasl_type to empty - Update to 3.3.1 * Postfix did not support running as a PID=1 process, which complicated Postfix deployment in containers. The "postfix start-fg" command will now run the Postfix master daemon as a PID=1 process if possible. Thanks for inputs from Andreas Schulze, Eray Aslan, and Viktor Dukhovni. * Segfault in the postconf(1) command after it could not open a Postfix database configuration file due to a file permission error (dereferencing a null pointer). Reported by Andreas Hasenack, fixed by Viktor Dukhovni. * The luser_relay feature became a black hole, when the luser_relay parameter was set to a non-existent local address (i.e. mail disappeared silently). Reported by J?rgen Thomsen. * Missing error propagation in the tlsproxy(8) daemon could result in a segfault after TLS handshake error (dereferencing a 0xffff...ffff pointer). This daemon handles the TLS protocol when a non-whitelisted client sends a STARTTLS command to postscreen(8). - remove pre-requirements on sysvinit(network) and sysvinit(syslog). There seems to be no good reason for that other than blowing up the dependencies (bsc#1092408). - bsc#1071807 postfix-SuSE/config.postfix: only reload postfix if the actual service is running. This prevents spurious and irrelevant error messages in system logs. - bsc#1082514 autoyast: postfix gets not set myhostname properly - set to localhost - Refresh spec-file via spec-cleaner and manual optinizations. * Add %license macro. * Set license to IPL-1.0 OR EPL-2.0. - Update to 3.3.0 * http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.… * Dual license: in addition to the historical IBM Public License 1.0, Postfix is now also distributed with the more recent Eclipse Public License 2.0. Recipients can choose to take the software under the license of their choice. Those who are more comfortable with the IPL can continue with that license. * The postconf command now warns about unknown parameter names in a Postfix database configuration file. As with other unknown parameter names, these warnings can help to find typos early. * Container support: Postfix 3.3 will run in the foreground with "postfix start-fg". This requires that Postfix multi-instance support is disabled (the default). To collect Postfix syslog information on the container's host, mount the host's /dev/log socket into the container, for example with "docker run -v /dev/log:/dev/log ...other options...", and specify a distinct Postfix syslog_name setting in the container (for example with "postconf syslog_name=the-name-here"). * Milter support: applications can now send RET and ENVID parameters in SMFIR_CHGFROM (change envelope sender) requests. * Postfix-generated From: headers with 'full name' information are now formatted as "From: name <address>" by default. Specify "header_from_format = obsolete" to get the earlier form "From: address (name)". * Interoperability: when Postfix IPv6 and IPv4 support are both enabled, the Postfix SMTP client will now relax MX preferences and attempt to schedule similar numbers of IPv4 and IPv6 addresses. This works around mail delivery problems when a destination announces lots of primary MX addresses on IPv6, but is reachable only over IPv4 (or vice versa). The new behavior is controlled with the smtp_balance_mx_inet_protocols parameter. * Compatibility safety net: with compatibility_level < 1, the Postfix SMTP server now warns for mail that would be blocked by the Postfix 2.10 smtpd_relay_restrictions feature, without blocking that mail. There still is a steady trickle of sites that upgrade from an earlier Postfix version. - bsc#1065411 Package postfix should require package system-user-nobody - bsc#1080772 postfix smtpd throttle getting "hello" if no sasl auth was configured - Fix usage of fillup_only:-y is not a valid option to this macro. - Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468) - Don't mark postfix.service as config file, this is no config file. - Some of the Requires(pre) are needed for post-install and at runtime, fix the requires. - update to 3.2.4 * DANE interoperability. Postfix builds with OpenSSL 1.0.0 or 1.0.1 failed to send email to some sites with "TLSA 2 X X" DNS records associated with an intermediate CA certificate. Problem report and initial fix by Erwan Legrand. * Missing dynamicmaps support in the Postfix sendmail command. This broke authorized_submit_users settings that use a dynamically-loaded map type. Problem reported by Ulrich Zehl. - bnc#1059512 L3: Postfix Problem The applied changes breaks existing postfix configurations because daemon_directory was not adapted to the new value. - fix build for SLE * nothing provides libnsl-devel * add bcond_with libnsl - bnc#1059512 L3: Postfix Problem To manage multiple Postfix instances on a single host requires that daemon_directory and shlib_directory is different to avoid use of the shared directories also as per-instance directories. For this reason daemon_directory was set to /usr/lib/postfix/bin/. shlib_directory stands /usr/lib/postfix/. - bnc#1016491 postfix raported to log "warning: group or other writable:" on each symlink in config. * Add fix-postfix-script.patch - update to 3.2.3 * Extension propagation was broken with "recipient_delimiter = .". This change reverts a change that was trying to be too clever. * The postqueue command would abort with a panic message after it experienced an output write error while listing the mail queue. This change restores a write error check that was lost with the Postfix 3.2 rewrite of the vbuf_print formatter. * Restored sanity checks for dynamically-specified width and precision in format strings (%*, %.*, and %*.*). These checks were lost with the Postfix 3.2 rewrite of the vbuf_print formatter. - Add libnsl-devel build requires for glibc obsoleting libnsl - bnc#1045264 L3: postmap problem * Applying proposed patch of leen.meyer(a)ziggo.nl in bnc#771811 - update to 3.2.2 * Security: Berkeley DB versions 2 and later try to read settings from a file DB_CONFIG in the current directory. This undocumented feature may introduce undisclosed vulnerabilities resulting in privilege escalation with Postfix set-gid programs (postdrop, postqueue) before they chdir to the Postfix queue directory, and with the postmap and postalias commands depending on whether the user's current directory is writable by other users. This fix does not change Postfix behavior for Berkeley DB versions < 3, but it does reduce postmap and postalias 'create' performance with Berkeley DB versions 3.0 .. 4.6. * The SMTP server receive_override_options were not restored at the end of an SMTP session, after the options were modified by an smtpd_milter_maps setting of "DISABLE". Milter support remained disabled for the life time of the smtpd process. * After the Postfix 3.2 address/domain table lookup overhaul, the check_sender_access and check_recipient_access features ignored a non-default parent_domain_matches_subdomains setting. - revert changes of postfix-main.cf.patch from rev=261 * config.postfix will not 'enable' (remove #) var, but place modified (enabled) var at end of file, far away from place where it should be * keep vars enabled but empty - Some cleanups * Fix SUSE postfix-files to avoid chown errors (anyway this file seems to be obsolete) * Avoid installing shared libraries twice * Refresh patch postfix-linux45.patch - update postfix-master.cf.patch * recover lost (with 3.2.0 update) submission, smtps sections * merge with upstream update - update config.postfix * update master.cf generation for submission - rebase patches against 3.2.0 * pointer_to_literals.patch * postfix-no-md5.patch * postfix-ssl-release-buffers.patch * postfix-vda-v14-3.0.3.patch - Require system group mail - Use mail group name instead of GID - update to 3.2.0 - [Feature 20170128] Postfix 3.2 fixes the handling of address extensions with email addresses that contain spaces. For example, the virtual_alias_maps, canonical_maps, and smtp_generic_maps features now correctly propagate an address extension from "aa bb+ext"@example.com to "cc dd+ext"@other.example, instead of producing broken output. - [Feature 20161008] "PASS" and "STRIP" actions in header/body_checks. "STRIP" is similar to "IGNORE" but also logs the action, and "PASS" disables header, body, and Milter inspection for the remainder of the message content. Contributed by Hobbit. - [Feature 20160330] The collate.pl script by Viktor Dukhovni for grouping Postfix logfile records into "sessions" based on queue ID and process ID information. It's in the auxiliary/collate directory of the Postfix source tree. - [Feature 20160527] Postfix 3.2 cidr tables support if/endif and negation (by prepending ! to a pattern), just like regexp and pcre tables. The primarily purpose is to improve readability of complex tables. See the cidr_table(5) manpage for syntax details. - [Incompat 20160925] In the Postfix MySQL database client, the default option_group value has changed to "client", to enable reading of "client" option group settings in the MySQL options file. This fixes a "not found" problem with Postfix queries that contain UTF8-encoded non-ASCII text. Specify an empty option_group value (option_group =) to get backwards-compatible behavior. - [Feature 20161217] Stored-procedure support for MySQL databases. Contributed by John Fawcett. See mysql_table(5) for instructions. - [Feature 20170128] The postmap command, and the inline: and texthash: maps now support spaces in left-hand field of the lookup table "source text". Use double quotes (") around a left-hand field that contains spaces, and use backslash (\) to protect embedded quotes in a left-hand field. There is no change in the processing of the right-hand field. - [Feature 20160611] The Postfix SMTP server local IP address and port are available in the policy delegation protocol (attribute names: server_address, server_port), in the Milter protocol (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT protocol (attribute names: DESTADDR, DESTPORT). - [Feature 20161024] smtpd_milter_maps support for per-client Milter configuration that overrides smtpd_milters, and that has the same syntax. A lookup result of "DISABLE" turns off Milter support. See MILTER_README.html for details. - [Feature 20160611] The Postfix SMTP server local IP address and port are available in the policy delegation protocol (attribute names: server_address, server_port), in the Milter protocol (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT protocol (attribute names: DESTADDR, DESTPORT). - [Incompat 20170129] The postqueue command no longer forces all message arrival times to be reported in UTC. To get the old behavior, set TZ=UTC in main.cf:import_environment (this override is not recommended, as it affects all Postfix utities and daemons). - [Incompat 20161227] For safety reasons, the sendmail -C option must specify an authorized directory: the default configuration directory, a directory that is listed in the default main.cf file with alternate_config_directories or multi_instance_directories, or the command must be invoked with root privileges (UID 0 and EUID 0). This mitigates a recurring problem with the PHP mail() function. - [Feature 20160625] The Postfix SMTP server now passes remote client and local server network address and port information to the Cyrus SASL library. Build with ``make makefiles "CCARGS=$CCARGS -DNO_IP_CYRUS_SASL_AUTH"'' for backwards compatibility. - [Feature 20161103] Postfix 3.2 disables the 'transitional' compatibility between the IDNA2003 and IDNA2008 standards for internationalized domain names (domain names beyond the limits of US-ASCII). This change makes Postfix behavior consistent with contemporary web browsers. It affects the handling of some corner cases such as German sz and Greek zeta. See http://unicode.org/cldr/utility/idna.jsp for more examples. Specify "enable_idna2003_compatibility = yes" to restore historical behavior (but keep in mind that the rest of the world may not make that same choice). - [Feature 20160828] Fixes for deprecated OpenSSL 1.1.0 API features, so that Postfix will build without depending on backwards-compatibility support. [Incompat 20161204] Postfix 3.2 removes tentative features that were implemented before the DANE spec was finalized: - Support for certificate usage PKIX-EE(1), - The ability to disable digest agility (Postfix now behaves as if "tls_dane_digest_agility = on"), and - The ability to disable support for "TLSA 2 [01] [12]" records that specify the digest of a trust anchor (Postfix now behaves as if "tls_dane_trust_anchor_digest_enable = yes). - [Feature 20161217] Postfix 3.2 enables elliptic curve negotiation with OpenSSL >= 1.0.2. This changes the default smtpd_tls_eecdh_grade setting to "auto", and introduces a new parameter tls_eecdh_auto_curves with the names of curves that may be negotiated. The default tls_eecdh_auto_curves setting is determined at compile time, and depends on the Postfix and OpenSSL versions. At runtime, Postfix will skip curve names that aren't supported by the OpenSSL library. - [Feature 20160611] The Postfix SMTP server local IP address and port are available in the policy delegation protocol (attribute names: server_address, server_port), in the Milter protocol (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT protocol (attribute names: DESTADDR, DESTPORT). - refresh postfix-master.cf.patch - make sure that system users can be created in %pre - Fix requires: - shadow is needed for postfix-mysql pre-install section - insserv is not needed if systemd is used - update postfix-mysql * update mysql_*.cf files * update postfix-mysql.sql (INNODB, utf8) - update postfix-main.cf.patch * uncomment smtpd_sasl_path, smtpd_sasl_type can be changed via POSTFIX_SMTP_AUTH_SERVICE=(cyrus,dovecot) * add option for smtp_tls_policy_maps (commented) - update postfix-master.cf.patch * fix indentation of submission, smtps options for correct enabling via config.postfix - update config.postfix * fix sync of CA certificates * fix master.cf generation for submission, smtps - rebase postfix-vda-v14-3.0.3.patch - FATE#322322 Update postfix to version 3.X Merging changes with SLES12-SP2 Removeved patches: add_missed_library.patch bnc#947707.diff dynamic_maps.patch postfix-db6.diff postfix-opensslconfig.patch bnc#947519.diff dynamic_maps_pie.patch postfix-post-install.patch These are included in the new version of postfix - Remove references to SuSEconfig.postfix from sysconfig docs. (bsc#871575) - bnc#947519 SuSEconfig.postfix should enforce umask 022 - bnc#947707 mail generated by Amavis being prevented from being re-adressed by /etc/postfix/virtual - bnc#972346 /usr/sbin/SuSEconfig.postfix is wrong - postfix-linux45.patch: handle Linux 4.x and Linux 5.x (used by aarch64) (bsc#940289) - update to 3.1.4 * The postscreen daemon did not merge the client test status information for concurrent sessions from the same IP address. * The Postfix SMTP server falsely rejected a sender address when validating a sender address with "smtpd_reject_unlisted_recipient = yes" or with "reject_unlisted_sender". Cause: the address validation code did not query sender_canonical_maps. * The virtual delivery agent did not detect failure to skip to the end of a mailbox file, so that mail would be delivered to the beginning of the file. This could happen when a mailbox file was already larger than the virtual mailbox size limit. * The postsuper logged an incorrect rename operation count after creating a missing directory. * The Postfix SMTP server falsely rejected mail when a sender-dependent "error" transport was configured. Cause: the SMTP server address validation code was not updated when the sender_dependent_default_transport_maps feature was introduced. * The Postfix SMTP server falsely rejected an SMTPUTF8 sender address, when "smtpd_delay_reject = no". * The "postfix tls deploy-server-cert" command used the wrong certificate and key file. This was caused by a cut-and-paste error in the postfix-tls-script file. - improve config.postfix * improve SASL stuff * add POSTFIX_SMTP_AUTH_SERVICE=(cyrus|dovecot) - improve config.postfix * improve with MySQL stuff - update vda patch to latest available * remove postfix-vda-v13-3.10.0.patch * add postfix-vda-v14-3.0.3.patch - rebase patches (and to be p0) * pointer_to_literals.patch * postfix-main.cf.patch * postfix-master.cf.patch * postfix-no-md5.patch * postfix-ssl-release-buffers.patch - add /etc/postfix/ssl as default DIR for SSL stuff * cacerts -> ../../ssl/certs/ * certs/ - revert POSTFIX_SSL_PATH from '/etc/ssl' to '/etc/postfix/ssl' - improve config.postfix * revert smtpd_tls_CApath to POSTFIX_SSL_PATH/cacerts which is a symlink to /etc/ssl/certs Without reverting, 'gen_CA' would create files which would then be on the previous defined 'sslpath(/etc/ssl)/certs' (smtpd_tls_CApath) Cert reqs would be placed in 'sslpath(/etc/ssl)/certs/postfixreq.pem' which is not a good idea. * mkchroot: sync '/etc/postfix/ssl' to chroot * improve PCONF for smtp{,d}_tls_{cert,key}_file, adding/removing from main.cf, show warning if enabled and file is missing - update to 3.1.3: * The Postfix SMTP server did not reset a previous session's failed/total command counts before rejecting a client that exceeds request or concurrency rates. This resulted in incorrect failed/total command counts being logged at the end of the rejected session. * The unionmap multi-table interface did not propagate table lookup errors, resulting in false "user unknown" responses. * The documentation was updated with a workaround for false "not found" errors with MySQL map queries that contain UTF8-encoded text. The workaround is to specify "option_group = client" in Postfix MySQL configuration files. This will be the default setting with Postfix 3.2 and later. - update to 3.1.2: * Changes to make Postfix build with OpenSSL 1.1.0. * The makedefs script ignored readme_directory=pathname overrides. Fix by Todd C. Olson. * The tls_session_ticket_cipher documentation says that the default cipher for TLS session tickets is aes-256-cbc, but the implemented default was aes-128-cbc. Note that TLS session ticket keys are rotated after 1/2 hour, to limit the impact of attacks on session ticket keys. - postfix-post-install.patch: remove empty patch - fix Changelog cause of Factory decline - Fix typo in config.postfix - bnc#981097 config.postfix creates broken main.cf for tls client configuration - bnc#981099 /etc/sysconfig/postfix: POSTFIX_SMTP_TLS_CLIENT incomplete - update to 3.1.1: - The new address_verify_pending_request_limit parameter introduces a safety limit for the number of address verification probes in the active queue. The default limit is 1/4 of the active queue maximum size. The queue manager enforces the limit by tempfailing probe messages that exceed the limit. This design avoids dependencies on global counters that get out of sync after a process or system crash. - Machine-readable, JSON-formatted queue listing with "postqueue -j" (no "mailq" equivalent). - The milter_macro_defaults feature provides an optional list of macro name=value pairs. These specify default values for Milter macros when no value is available from the SMTP session context. - Support to enforce a destination-independent delay between email deliveries. The following example inserts 20 seconds of delay between all deliveries with the SMTP transport, limiting the delivery rate to at most three messages per minute. smtp_transport_rate_delay = 20s - Historically, the default setting "postscreen_dnsbl_ttl = 1h" assumes that a "not found" result from a DNSBL server will be valid for one hour. This may have been adequate five years ago when postscreen was first implemented, but nowadays, that one hour can result in missed opportunities to block new spambots. To address this, postscreen now respects the TTL of DNSBL "not found" replies, as well as the TTL of DNSWL replies (both "found" and "not found"). The TTL for a "not found" reply is determined according to RFC 2308 (the TTL of an SOA record in the reply). Support for DNSBL or DNSWL reply TTL values is controlled by two configuration parameters: postscreen_dnsbl_min_ttl (default: 60 seconds). postscreen_dnsbl_max_ttl (default: $postscreen_dnsbl_ttl or 1 hour) The postscreen_dnsbl_ttl parameter is now obsolete, and has become the default value for the new postscreen_dnsbl_max_ttl parameter. - New "smtpd_client_auth_rate_limit" feature, to enforce an optional rate limit on AUTH commands per SMTP client IP address. Similar to other smtpd_client_*_rate_limit features, this enforces a limit on the number of requests per $anvil_rate_time_unit. - New SMTPD policy service attribute "policy_context", with a corresponding "smtpd_policy_service_policy_context" configuration parameter. Originally, this was implemented to share the same SMTPD policy service endpoint among multiple check_policy_service clients. - A new "postfix tls" command to quickly enable opportunistic TLS in the Postfix SMTP client or server, and to manage SMTP server keys and certificates, including certificate signing requests and TLSA DNS records for DANE. - build with working support for SMTPUTF8 - fix build on sle11 by pointing _libexecdir to /usr/lib all the time. - some distros did not pull pkgconfig indirectly. pull it directly. - fix building the dynamic maps: the old build had postgresql e.g. with missing symbols. - convert to AUXLIBS_* instead of plain AUXLIBS which is needed for proper dynamic maps. - reordered the CCARGS and AUXLIBS* lines to group by feature - use pkgconfig or *_config tools where possible - picked up signed char from fedora spec file - enable lmdb support: new BR lmdb-devel, new subpackage postfix-lmdb. - don't delete vmail user/groups - update to 3.1.0 - Since version 3.0 postfix supports dynamic loading of cdb:, ldap:, lmdb:, mysql:, pcre:, pgsql:, sdbm:, and sqlite: database clients. Thats why the patches dynamic_maps.patch and dynamic_maps_pie.patch could be removed. - Adapting all the patches to postfix 3.1.0 - remove obsolete patches * add_missed_library.patch * postfix-opensslconfig.patch - update vda patch * remove postfix-vda-v13-2.10.0.patch * add postfix-vda-v13-3.10.0.patch - The patch postfix-db6.diff is not more neccessary - Backwards-compatibility safety net. With NEW Postfix installs, you MUST install a main.cf file with the setting "compatibility_level = 2". See conf/main.cf for an example. With UPGRADES of existing Postfix systems, you MUST NOT change the main.cf compatibility_level setting, nor add this setting if it does not exist. Several Postfix default settings have changed with Postfix 3.0. To avoid massive frustration with existing Postfix installations, Postfix 3.0 comes with a safety net that forces Postfix to keep running with backwards-compatible main.cf and master.cf default settings. This safety net depends on the main.cf compatibility_level setting (default: 0). Details are in COMPATIBILITY_README. - Major changes - tls * [Feature 20160207] A new "postfix tls" command to quickly enable opportunistic TLS in the Postfix SMTP client or server, and to manage SMTP server keys and certificates, including certificate signing requests and TLSA DNS records for DANE. * As of the middle of 2015, all supported Postfix releases no longer nable "export" grade ciphers for opportunistic TLS, and no longer use the deprecated SSLv2 and SSLv3 protocols for mandatory or opportunistic TLS. * [Incompat 20150719] The default Diffie-Hellman non-export prime was updated from 1024 to 2048 bits, because SMTP clients are starting to reject TLS handshakes with primes smaller than 2048 bits. * [Feature 20160103] The Postfix SMTP client by default enables DANE policies when an MX host has a (DNSSEC) secure TLSA DNS record, even if the MX DNS record was obtained with insecure lookups. The existence of a secure TLSA record implies that the host wants to talk TLS and not plaintext. For details see the smtp_tls_dane_insecure_mx_policy configuration parameter. - Major changes - default settings [Incompat 20141009] The default settings have changed for relay_domains (new: empty, old: $mydestination) and mynetworks_style (new: host, old: subnet). However the backwards-compatibility safety net will prevent these changes from taking effect, giving the system administrator the option to make an old default setting permanent in main.cf or to adopt the new default setting, before turning off backwards compatibility. See COMPATIBILITY_README for details. [Incompat 20141001] A new backwards-compatibility safety net forces Postfix to run with backwards-compatible main.cf and master.cf default settings after an upgrade to a newer but incompatible Postfix version. See COMPATIBILITY_README for details. While the backwards-compatible default settings are in effect, Postfix logs what services or what email would be affected by the incompatible change. Based on this the administrator can make some backwards-compatibility settings permanent in main.cf or master.cf, before turning off backwards compatibility. - Major changes - address verification safety [Feature 20151227] The new address_verify_pending_request_limit parameter introduces a safety limit for the number of address verification probes in the active queue. The default limit is 1/4 of the active queue maximum size. The queue manager enforces the limit by tempfailing probe messages that exceed the limit. This design avoids dependencies on global counters that get out of sync after a process or system crash. Tempfailing verify requests is not as bad as one might think. The Postfix verify cache proactively updates active addresses weeks before they expire. The address_verify_pending_request_limit affects only unknown addresses, and inactive addresses that have expired from the address verify cache (by default, after 31 days). - Major changes - json support [Feature 20151129] Machine-readable, JSON-formatted queue listing with "postqueue -j" (no "mailq" equivalent). The output is a stream of JSON objects, one per queue file. To simplify parsing, each JSON object is formatted as one text line followed by one newline character. See the postqueue(1) manpage for a detailed description of the output format. - Major changes - milter support [Feature 20150523] The milter_macro_defaults feature provides an optional list of macro name=value pairs. These specify default values for Milter macros when no value is available from the SMTP session context. For example, with "milter_macro_defaults = auth_type=TLS", the Postfix SMTP server will send an auth_type of "TLS" to a Milter, unless the remote client authenticates with SASL. This feature was originally implemented for a submission service that may authenticate clients with a TLS certificate, without having to make changes to the code that implements TLS support. - Major changes - output rate control [Feature 20150710] Destination-independent delivery rate delay Support to enforce a destination-independent delay between email deliveries. The following example inserts 20 seconds of delay between all deliveries with the SMTP transport, limiting the delivery rate to at most three messages per minute. /etc/postfix/main.cf: smtp_transport_rate_delay = 20s For details, see the description of default_transport_rate_delay and transport_transport_rate_delay in the postconf(5) manpage. - Major changes - postscreen dnsbl [Feature 20150710] postscreen support for the TTL of DNSBL and DNSWL lookup results Historically, the default setting "postscreen_dnsbl_ttl = 1h" assumes that a "not found" result from a DNSBL server will be valid for one hour. This may have been adequate five years ago when postscreen was first implemented, but nowadays, that one hour can result in missed opportunities to block new spambots. To address this, postscreen now respects the TTL of DNSBL "not found" replies, as well as the TTL of DNSWL replies (both "found" and "not found"). The TTL for a "not found" reply is determined according to RFC 2308 (the TTL of an SOA record in the reply). Support for DNSBL or DNSWL reply TTL values is controlled by two configuration parameters: postscreen_dnsbl_min_ttl (default: 60 seconds). This parameter specifies a minimum for the amount of time that a DNSBL or DNSWL result will be cached in the postscreen_cache_map. This prevents an excessive number of postscreen cache updates when a DNSBL or DNSWL server specifies a very small reply TTL. postscreen_dnsbl_max_ttl (default: $postscreen_dnsbl_ttl or 1 hour) This parameter specifies a maximum for the amount of time that a DNSBL or DNSWL result will be cached in the postscreen_cache_map. This prevents cache pollution when a DNSBL or DNSWL server specifies a very large reply TTL. The postscreen_dnsbl_ttl parameter is now obsolete, and has become the default value for the new postscreen_dnsbl_max_ttl parameter. - Major changes - sasl auth safety [Feature 20151031] New "smtpd_client_auth_rate_limit" feature, to enforce an optional rate limit on AUTH commands per SMTP client IP address. Similar to other smtpd_client_*_rate_limit features, this enforces a limit on the number of requests per $anvil_rate_time_unit. - Major changes - smtpd policy [Feature 20150913] New SMTPD policy service attribute "policy_context", with a corresponding "smtpd_policy_service_policy_context" configuration parameter. Originally, this was implemented to share the same SMTPD policy service endpoint among multiple check_policy_service clients. - bnc#958329 postfix fails to start when openslp is not installed - upstream update postfix 2.11.7: * The Postfix Milter client aborted with a panic while adding a message header, after adding a short message header with the header_checks PREPEND action. Fixed by invoking the header output function while PREPENDing a message header. * False alarms while scanning the Postfix queue. Fixed by resetting errno before calling readdir(). This defect was introduced 19970309. * The postmulti command produced an incorrect error message. * The postmulti command now refuses to create a new MTA instance when the template main.cf or master.cf file are missing. This is a common problem on Debian-like systems. * Turning on Postfix SMTP server HAProxy support broke TLS wrappermode. Fixed by temporarily using a 1-byte VSTREAM buffer to read the HAProxy connection hand-off information. * The xtext_unquote() function did not propagate error reports from xtext_unquote_append(), causing the decoder to return partial output, instead of rejecting malformed input. The Postfix SMTP server uses this function to parse input for the ENVID and ORCPT parameters, and for XFORWARD and XCLIENT command parameters. - boo#934060: Remove quirky hostname logic from config.postfix * /etc/hostname doesn't contain anything useful * linux.local is no good either * postfix will use `hostname`.localdomain as fallback - postfix-no-md5.patch: replace fingerprint defaults by sha1. bsc#928885 - %verifyscript is a new section, move it out of the %ifdef so the fillups are run afterwards. - upstream update postfix 2.11.6: Default settings have been updated so that they no longer enable export-grade ciphers, and no longer enable the SSLv2 and SSLv3 protocols. - removed postfix-2.11.5_linux4.patch because it's obsolete - Bugfix (introduced: Postfix 2.11): with connection caching enabled (the default), recipients could be given to the wrong mail server. (bsc#944722) - postfix-SuSE.tar.gz/postfix.service: None of nss-lookup.target network.target local-fs.target time-sync.target should be Wanted or Required except by the services the implement the relevant functionality i.e network.target is wanted/required by networkmanager, wicked, systemd-network. other software must be ordered After them, see systemd.special(7) - Fix library symlink generation (boo#928662) - added postfix-2.11.5_linux4.patch: Allow building on kernel 4. Patch taken from: https://groups.google.com/forum/#!topic/mailing.postfix.users/fufS22sMGWY - update to postfix 2.11.5 - Bugfix (introduced: Postfix 2.6): sender_dependent_relayhost_maps ignored the relayhost setting in the case of a DUNNO lookup result. It would use the recipient domain instead. Viktor Dukhovni. Wietse took the pieces of code that enforce the precedence of a sender-dependent relayhost, the global relayhost, and the recipient domain, and put that code together in once place so that it is easier to maintain. File: trivial-rewrite/resolve.c. - Bitrot: prepare for future changes in OpenSSL API. Viktor Dukhovni. File: tls_dane.c. - Incompatibility: specifying "make makefiles" with "CC=command" will no longer override the default WARN setting. - upstream update postfix 2.11.4: Postfix 2.11.4 only: * Fix a core dump when smtp_policy_maps specifies an invalid TLS level. * Fix a missing " in \%s\", in postconf(1) fatal error messages, which violated the C language spec. Reported by Iain Hibbert. All supported releases: * Stop excessive recursion in the cleanup server while recovering from a virtual alias expansion loop. Problem found at Two Sigma. * Stop exponential memory allocation with virtual alias expansion loops. This came to light after fixing the previous problem. - correct pf_daemon_directory in spec. This must be /usr/lib/ - bnc#914086 syntax error in config.postfix - Adapt config.postfix to be able to run on SLE11 too. - Don't install sysvinit script when systemd is used - Make explicit PreReq dependencies conditional only for older systems - Don't try to set explicit attributes to symlinks - Cleanup spec file vith spec-cleaner - bnc#912594 config.postfix creates config based on old options - bnc#911806 config.postfix does not set up correct saslauthd socket directory for chroot - bnc#910265 config.postfix does not upgrade the chroot - bnc#908003 wrong access rights on /usr/sbin/postdrop causes permission denied when trying to send a mail as non root user - bnc#729154 wrong permissions for some postfix components - Remove keyring and things as it is md5 based one no longer accepted by gpg 2.1 - No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify. - restore previously lost fix: Fri Oct 11 13:32:32 UTC 2013 - matz(a)suse.de - Ignore errors in %pre/%post. - postfix 2.11.3: * Fix for configurations that prepend message headers with Postfix access maps, policy servers or Milter applications. Postfix now hides its own Received: header from Milters and exposes prepended headers to Milters, regardless of the mechanism used to prepend a header. This fix reverts a partial solution that was released on October 13, 2014, and replaces it with a complete solution. * Portability fix for MacOS X 10.7.x (Darwin 11.x) build procedure. - postfix 2.11.2: * Fix for DMARC implementations based on SPF policy plus DKIM Milter. The PREPEND access/policy action added headers ABOVE Postfix's own Received: header, exposing Postfix's own Received: header to Milters (protocol violation) and hiding the PREPENDed header from Milters. PREPENDed headers are now added BELOW Postfix's own Received: header and remain visible to Milters. * The Postfix SMTP server logged an incorrect client name in reject messages for check_reverse_client_hostname_access and check_reverse_client_hostname_{mx,ns}_access. They replied with the verified client name, instead of the name that was rejected. * The qmqpd daemon crashed with null pointer bug when logging a lost connection while not in a mail transaction. - switch from md5 based signature to one using the SHA-512 digest algorithm supplied by maintainer on ML to pass source_validator - postfix 2.11.1: * With connection caching enabled (the default), recipients could be given to the wrong mail server. * Enforce TLS when TLSA records exist, but all are unusable. * Don't leak memory when TLSA records exist, but all are unusable. * Prepend "-I. -I../../include" to the compiler command-line options, to avoid name clashes with non-Postfix header files. * documentation fixes * logging fixes - fix dynamic_maps patch to enable memcache support, which does not need any libraries - Rename rpmlintrc to %{name}-rpmlintrc. Follow the packaging guidelines. - fix typo in postfix-SuSE/update_chroot.systemd - fix config.postfix * 'insserv amavis' -> 'chkconfig amavis on' - rework main.cf patch * fix virtual stuff * add some dovecot stuff - rework master.cf patch * add some dovecot stuff - The included postfix-mysql.tar.bz2 was using a MySQL 4.1 style of table engine specification. Modified so that the sql uses 'ENGINE=' instead of 'TYPE=' for creating tables. - bnc#816769 - config.postfix issues warnings about missing master.cf - bnc#882033 - Package postfix has changed files according to rpm - bnc#855688 - possible systemd bug: postfix & cifs dependency confict - bnc#863350 - SuSEconfig.postfix complains about modified /etc/postfix/main.cf after updating postfix - replace vda patch: * add postfix-vda-v13-2.10.0.patch * remove postfix-vda-v11-2.9.6.patch - rebase patches - config.postfix * add master.cf support for submission (587) * rework master.cf support for smtps - bnc#862662 - Unable to configure postfix SMTP with forced TLS using YaST2 - Update to 2.11.0 * TLS o Support for PKI-less TLS server certificate verification, where the CA public key or the server certificate is identified via DNSSEC lookup * LMDB database support * master o The master_service_disable parameter value syntax has changed: use "service/type" instead of "service.type". * postconf: o Support for advanced master.cf query and update operations. This was implemented primarily to support automated system management tools. o The postconf command produces more warnings * relay safety New smtpd_relay_restrictions parameter built-in default settings: smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination * postscreen whitelisting Allow a remote SMTP client to skip postscreen(8) tests based on its postscreen_dnsbl_sites score. - Ignore errors in %pre/%post. - two improvements for 13.1 and factory * postfix-opensslconfig.patch call openSSL_config so postfix respects the system's openssl configuration * postfix-SuSE/postfix.service since a few months there is no mail-transfer-agent.target, units must be ordered after a list of smtpd implementations instead. - Proc is not needed in chroot anymore - postfix-main.cf.patch: remove duplicate entry for inet_protocols - fix for warning * unused parameter: virtual_create_maildirsize=yes * unused parameter: virtual_mailbox_extended=yes * rework main.cf.patch - fix rcpostfix for sysvinit systems * /etc/postfix/system/update_postmaps: No such file or directory - rebase patches * vda-v11-2.9.5 -> vda-v11-2.9.6 - fix file postfix-SuSE.tar.gz * made a tar.gz - postfix.spec forces the use of SSL and SASL libraries, so make sure the BuildRequires are there - Add postfix-db6.diff to fix compile abort with libdb-6.0 - Add Source URL, see https://en.opensuse.org/SourceUrls - Add GPG verification - postfix-SuSE/postfix.service do not Require or order after syslog.target as it no longer exists postfix will fail to start in the next systemd version. - Install postfix.service accordingly (/usr/lib/systemd for 12.3 and up or /lib/systemd for older versions). - update to 2,9.6 Bugfix: the local(8) delivery agent dereferenced a null pointer while delivering to null command (for example, "|" in a .forward file). Bugfix: memory leak in program initialization. tls/tls_misc.c. Bugfix: he undocumented OpenSSL X509_pubkey_digest() function is unsuitable for computing certificate PUBLIC KEY fingerprints. Postfix now provides a correct procedure that accounts for the algorithm and parameters in addition to the key data. Specify "tls_legacy_public_key_fingerprints = yes" if you need backwards compatibility. - bnc#796162 - script to assign path elements not working in postfix install Build-0284(iso) - rebase patches * vda-v10-2.8.12 -> vda-v11-2.9.5 (and to be a p0) * main, master, post-instal, ssl-release-buffers (remove version) * dynamic_maps, dynamic_maps_pie, pointer_to_literals - update to 2,9.5 * tls support: Support to turn off the TLSv1.1 and TLSv1.2 protocols: To temporarily turn off problematic protocols globally: /etc/postfix/main.cf: smtp_tls_protocols = !SSLv2, !TLSv1.1, !TLSv1.2 smtp_tls_mandatory_protocols = !SSLv2, !TLSv1.1, !TLSv1.2 However, it may be better to temporarily turn off problematic protocols for broken sites only: /etc/postfix/main.cf: smtp_tls_policy_maps = hash:/etc/postfix/tls_policy /etc/postfix/tls_policy: example.com may protocols=!SSLv2:!TLSv1.1:!TLSv1.2 * 20111012 To simplify integration with third-party applications, the Postfix sendmail command now always transforms all input lines ending in <CR><LF> into UNIX format (lines ending in <LF>). Specify "sendmail_fix_line_endings = strict" to restore historical Postfix behavior (i.e. convert all input lines ending in <CR><LF> only if the first line ends in <CR><LF>). * 20120114 Logfile-based alerting systems may need to be updated to look for "error" messages in addition to "fatal" messages. Specify "daemon_table_open_error_is_fatal = yes" to get the historical behavior (immediate termination with "fatal" message). * enable_long_queue_ids Postfix 2.9 introduces support for non-repeating queue IDs (also used as queue file names). These names are encoded in a mix of upper case, lower case and decimal digit characters. Long queue IDs are disabled by default to avoid breaking tools that parse logfiles and that expect queue IDs with the smaller [A-F0-9] character set. * 20111209 memcache lookup and update support. This provides a way to share postscreen(8) or verify(8) caches between Postfix instances. See MEMCACHE_README and memcache_table(5) for details and limitations. * 20111218 To support external SASL authentication, e.g., in an NGINX proxy daemon, the Postfix SMTP server now always checks the smtpd_sender_login_maps table, even without having "smtpd_sasl_auth_enable = yes" in main.cf. * ipv6 o The default inet_protocols value is now "all" instead of "ipv4", meaning use both IPv4 and IPv6. o The default smtp_address_preference value is now "any" instead of "ipv6", meaning choose randomly between IPv6 and IPv4. With this the Postfix SMTP client will have more success delivering mail to sites that have problematic IPv6 configurations. - update to 2.8.13 * 20121029 Workaround: strip datalink suffix from IPv6 addresses returned by the system getaddrinfo() routine. Such suffixes mess up the default mynetworks value, host name/address verification and possibly more. This change obsoletes the 20101108 change that removes datalink suffixes in the SMTP and QMQP servers, but we leave that code alone. File: util/myaddrinfo.c. * 20121013 Cleanup: to compute the LDAP connection cache lookup key, join the numeric fields with null, just like string fields. Viktor Dukhovni. File: global/dict_ldap.c. * 20121010 Bugfix (introduced: Postfix 2.5): memory leak in program initialization. Reported by Coverity. File: tls/tls_misc.c. Bugfix (introduced: Postfix 2.3): memory leak in the unused oqmgr program. Reported by Coverity. File: oqmgr/qmgr_message.c. * 20121003 Bugfix: the postscreen_access_list feature was case-sensitive in the first character of permit, reject, etc. Reported by Feancis Picabia. File: global/server_acl.c. - rebase dynamic_maps_pie patch - rpmlint * invalid-suse-version-check 1140 * obsolete-suse-version-check 920 (changes file) - bnc#790141 - Command SuSEconfig.postfix reports ERROR - "can not find /lib/YaST/SuSEconfig.functions!!" - bnc#782048 - postfix uses /sbin/conf.d - bnc#784659 - remove SuSEconfig calls from yast2-mail - update to 2.8.12 * 20120730 Bugfix (introduced: 20000314): AUTH is not allowed after MAIL. Timo Sirainen. File: smtpd/smtpd_sasl_proto.c. * 20120702 Bugfix (introduced: 19990127): the BIFF client leaked an unprivileged UDP socket. Fix by Jaroslav Skarvada. File: local/biff_notify.c. * 20120621 Bugfix (introduced: Postfix 2.8): the unused "pass" trigger client could close the wrong file descriptors. File: util/unix_pass_trigger.c. - fix for bnc#771303 * add 'version = 3' to ldap_aliases.cf - rebase patches * main, master, post-install: 2.8.3 -> 2.8.12 * ssl-release-buffers: 2.8.5 -> 2.8.12 * vda-v10: 2.8.9 -> 2.8.12 * dynamic_maps, dynamic_maps_pie, ipv6_disabled, pointer_to_literals - fix changes file - bnc#771811 - postfix update does not regenerate the maps - update to 2.8.11 * 20120520 - Bugfix (introduced Postfix 2.4): the event_drain() function was comparing bitmasks incorrectly causing the program to always wait for the full time limit. This error affected the unused postkick command, but only after s/fifo/unix/ in master.cf. File: util/events.c. - Cleanup: laptop users have always been able to avoid unnecessary disk spin-up by doing s/fifo/unix/ in master.cf (this is currently not supported on Solaris systems). However, to make this work reliably, the "postqueue -f" command must wait until its requests have reached the pickup and qmgr servers before closing the UNIX-domain request sockets. Files: postqueue/postqueue.c, postqueue/Makefile.in. - bnc#753910 - {name} instead of %{name} in postfix .spec - bnc#756452 - VUL-1: postfix: VRFY allows enumerating users - update to 2.8.10 * 20120401 Bitrot: shut up useless warnings about Cyrus SASL call-back function pointer type mis-matches. Files: xsasl/xsasl_cyrus.h, xsasl/xsasl_cyrus_server.c, xsasl/xsasl_client.c. * 20120422 Bit-rot: OpenSSL 1.0.1 introduces new protocols. Update the known TLS protocol list so that protocols can be turned off selectively to work around implementation bugs. Based on a patch by Victor Duchovni. Files: proto/TLS_README.html, proto/postconf.proto, tls/tls.h, tls/tls_misc.c, tls/tls_client.c, tls/tls_server.c. - update to 2.8.9 * 20120217 Cleanup: missing #include statement for bugfix code added 20111226. File: local/unknown.c. * 20120214 Bugfix (introduced: Postfix 2.4): extraneous null assignment caused core dump when postlog emitted the "usage" message. Reported by Kant (fnord.hammer). File: postlog/postlog.c. * 20120202 Bugfix (introduced: Postfix 2.3): the "change header" milter request could replace the wrong header. A long header name could match a shorter one, because a length check was done on the wrong string. Reported by Vladimir Vassiliev. File: cleanup/cleanup_milter.c. - use latest VDA patch (2.8.9) - bnc#756450 - postfix: remove version from banner - add port 587 smtp-auth submission to postfix-fw bnc#756289 - set exit code explicitely in cond_slp, systemd checks for it - Documentation for bnc#751994 - SuSEconfig module postfix does not exist - rcpostfix now updates the aliases too - update to 2.8.8 Bugfixes: tlsproxy(8) stored TLS sessions with a serverID of "tlsproxy" instead of "smtpd", wasting an opportunity for session reuse. File: tlsproxy/tlsproxy.c. missing lookup table entry and terminator, causing proxymap server segfault when postscreen(8) or verify(8) attempted to access their cache via the proxymap server. This could never have worked anyway, because the Postfix 2.8 proxymap protocol does not support cache cleanup. File util/dict.c. the Postfix client sqlite quoting routine returned the unquoted result instead of the quoted text. The opportunities for misuse are limited, because Postfix sqlite files are usually owned by root, and Postfix daemons usually run with non-root privileges so they can't corrupt the database. Problem reported by Rob McGee (rob0). File: global/dict_sqlite.c. the trace service did not distinguish between notifications for a non-bounce or a bounce message. This code pre-dates DSN support and should have been updated when it was re-purposed to handle DSN SUCCESS notifications. Problem reported by Sabahattin Gucukoglu. File: bounce/bounce_trace_service.c. - use latest VDA patch (2.8.5) - bnc#743369 - yast2 mail module does not open the firewall - Set MD5DIR in SuSEconfig.postfix to avoid warnings - bnc738693 - upgrade from 11.4 enables mysql service for systemd - Add postmap rebuild script to systemv init script too - bnc#738900 - cyrus-imapd not receiving mail from postfix - Move the post map rebuild script into the start script - Fix the last change in %post - bnc#728308 - warning output after update the postfix package - update to 2.8.7 Bugfixes: smtpd(8) did not sanitize newline characters in cleanup(8) REJECT messages, causing them to be sent out via SMTP as bare newline characters. smtpd(8) sent multi-line responses from a before-queue content filter as text with bare <LF> instead of <CR><LF>. Workaround: postscreen sent non-compliant SMTP responses (220- followed by 421) when it could not give a connection to a real smtpd process, causing some remote SMTP clients to bounce mail. - Use the systemd macros in the spec file - only fix files that exists in %post - Use SSL_MODE_RELEASE_BUFFERS if available, see SSL_CTX_set_mode man page and http://www.imperialviolet.org/2010/06/25/overclocking-ssl.html for the full details. - update to 2.8.5 * Bugfix: allow for Milters that send an SMTP server reply without RFC 3463 enhanced status code. Reported by Vladimir Vassiliev. File: milter/milter8.c. - bnc#684304 - server:mail/postfix: Bugs in SuSEconfig chroot setup script - Aplly SASL_SOCKET_DIR patch - Move SuSEconfig.postfix into /usr/sbin/ (FATE#311272: Do not rewrite postfix.cf via SuSEconfig) SuSEconfig.postfix will be executed only once after installation automaticaly. Afterwards only you can start it manually or via yast2 mail module. - Just the first strep forward to systemd, please test out /etc/postfix/system/update_chroot /etc/postfix/system/wait_qmgr /etc/postfix/system/cond_slp and /lib/systemd/system/postfix.service and also fill out the missing description. - rework SuSE patch * add missing SASL stuff in rc.postfix - when chrooted and using SASL o mount -o bind SASL_SOCKET_DIR into postfix CHROOT - update to 2.8.4 o Linux kernel version 3 support. for more info see ChangeLog - bnc#686436 - postfix bounces messages with improper use of 8-bit data in message body - Apply patch - rework master.cf patch o fix receive_override_options line - rework SuSE patch o sysconfig: remove POSTFIX_WITH_POP_BEFORE_SMTP o SuSEconfig: fix receive_override_options line - replace vda patch o 2.8.1 -> 2.8.3 - fix files doc o remove 'doc auxiliary' instead cp to pf_docdir - fix spec for building on all repos - bnc#679187 - suseconfig/postfix: missing dependency - fix master.cf o fix missing - amavis unix - - n - 4 smtp - localhost:10025 inet n - n - - smtpd o add master.cf patch - rework patches o main.cf (add two missing sasl vars) o postfix-SuSE (SuSEconfig, cleanup those vars,...) - rework TLS stuff o reworked main.cf patch o added postfix-SuSE patch o added post-install patch Editing /etc/postfix/master.cf, adding missing entry for tlsmgr service add only if it really does not exist - removed Author from description - updated vda patch o vda-2.7.1 > vda-v10-2.8.1 - fix build for SLE_10 o no fdupes ;) - remove document paths from postfix-files to avoid error messages when postfix-doc is not installed - update to 2.8.3 - VUL-0: postfix memory corruption - bnc#641271 - postfix-2.7.1: init script cannot properly stop multi-instance configurations - update to 2.8.2 * DNSBL/DNSWL: o Support for address patterns in DNS blacklist and whitelist lookup results. o The Postfix SMTP server now supports DNS-based whitelisting with several safety features * Support for read-only sqlite database access. * Alias expansion: o Postfix now reports a temporary delivery error when the result of virtual alias expansion would exceed the virtual_alias_recursion_limit or virtual_alias_expansion_limit. o To avoid repeated delivery to mailing lists with pathological nested alias configurations, the local(8) delivery agent now keeps the owner-alias attribute of a parent alias, when delivering mail to a child alias that does not have its own owner alias. * The Postfix SMTP client no longer appends the local domain when looking up a DNS name without ".". * The SMTP server now supports contact information that is appended to "reject" responses: smtpd_reject_footer * Postfix by default no longer adds a "To: undisclosed-recipients:;" header when no recipient specified in the message header. * tls support: o The Postfix SMTP server now always re-computes the SASL mechanism list after successful completion of the STARTTLS command. o The smtpd_starttls_timeout default value is now stress-dependent. o Postfix no longer appends the system-supplied default CA certificates to the lists specified with *_tls_CAfile or with *_tls_CApath. * New feature: Prototype postscreen(8) server that runs a number of time-consuming checks in parallel for all incoming SMTP connections, before clients are allowed to talk to a real Postfix SMTP server. It detects clients that start talking too soon, or clients that appear on DNS blocklists, or clients that hang up without sending any command. - bnc#667299 - Postfix LICENSE not marked as documentation - add some min LDAP support for virtual LDAP-users o sysconfig "WITH_LDAP" o add ldap_aliases.cf o SuSEconfig.postfix virtual_alias_maps = ... ldap:/etc/postfix/ldap_aliases.cf - update to 2.7.2 * Bugfix (introduced Postfix 2.2): Postfix no longer appends the system default CA certificates to the lists specified with *_tls_CAfile or with *_tls_CApath. This prevents third-party certificates from getting mail relay permission with the permit_tls_all_clientcerts feature. Unfortunately this may cause compatibility problems with configurations that rely on certificate verification for other purposes. To get the old behavior, specify "tls_append_default_CA = yes". Files: tls/tls_certkey.c, tls/tls_misc.c, global/mail_params.h. proto/postconf.proto, mantools/postlink. * Compatibility with Postfix < 2.3: fix 20061207 was incomplete (undoing the change to bounce instead of defer after pipe-to-command delivery fails with a signal). Fix by Thomas Arnett. File: global/pipe_command.c. * Bugfix: the milter_header_checks parser provided only the actions that change the message flow (reject, filter, discard, redirect) but disabled the non-flow actions (warn, replace, prepend, ignore, dunno, ok). File: cleanup/cleanup_milter.c. * Performance: fix for poor smtpd_proxy_filter TCP performance over loopback (127.0.0.1) connections. Problem reported by Mark Martinec. Files: smtpd/smtpd_proxy.c. * Cleanup: don't apply reject_rhsbl_helo to non-domain forms such as network addresses. This would cause false positives with dbl.spamhaus.org. File: smtpd/smtpd_check.c. * Bugfix: the "421" reply after Milter error was overruled by Postfix 1.1 code that replied with "503" for RFC 2821 compliance. We now make an exception for "final" replies, as permitted by RFC. Solution by Victor Duchovni. File: smtpd/smtpd.c. - update vda patch o remove 2.6.1-vda-ng.patch o remove 2.6.1-vda-ng-64bit.patch o add vda-2.7.1.patch - rework main.cf.patch o remove 2.2.9-main.cf.patch o add 2.7.1-main.cf.patch - prereq init scripts network and syslog - Remove obsolate postscripts - bnc#625657 - SuSEconfig.postfix and smtp_use_tls - bnc#622873 - postfix doesn't start if ipv6 is disabled - reworked bnc#606251 stuff (not checked in to Factory) o used my_print_defaults command for parsing of /etc/my.cnf o using quotation marks: "$PF_CHROOT" o added sysconfig option POSTFIX_MYSQL_CONN=(socket,tcp) - bnc#606251 - postfix chrooted mysql.sock lost on mysql restart o Now MYSQL_SOCK_DIR is mounted with '-o bind' to postfix CHROOT - update to 2.7.1 * Bugfix (introduced Postfix 2.6) in the XFORWARD implementation, which sends remote SMTP client attributes through SMTP-based content filters. The Postfix SMTP client did not skip "unknown" SMTP client attributes, causing a syntax error when sending an "unknown" client PORT attribute. * Robustness: skip LDAP queries with non-ASCII search strings, instead of failing with a database lookup error. * Safety: Postfix processes now log a warning when a matchlist has a #comment at the end of a line (for example mynetworks or relay_domains). * Portability: OpenSSL 1.0.0 changes the priority of anonymous cyphers. * Portability: Berkeley DB 5.x is now supported. - fix obviously lost POSTFIX_MYHOSTNAME in SuSEconfig.postfix - New file check_mail_queue. This script checks if there are some mails in the queue and starts postfix if necessary. After delivering the mails postfix will be stoped. - bnc#559145 - Changed Domain name not reflected when sending mail First /var/run/dhcp-hostname will be evaluated - Now POSTFIX_SMTP_TLS_CLIENT is ternary : no yes must - update to 2.7.0 * performance - Periodic cache cleanup for the verify(8) cache database. - Improved before-queue filter performance. * sender reputation - The FILTER action in access maps or header/body_checks now supports sender reputation schemes that dynamically choose the SMTP source IP address. * address verification - The verify(8) service now uses a persistent cache by default. * content filter - The meaning of an empty filter next-hop destination has changed. - The FILTER action in access maps or header/body_checks now supports sender reputation schemes that dynamically choose the SMTP source IP address. * milter - Support for header checks on Milter-generated message headers. Please read /usr/share/doc/packages/postfix/RELEASE_NOTES for details. - revert the change to PreReq openldap-devel, this increases the default installation several MBs - bnc#567569 - Postfix: move ldap support to a separate package - bnc#557239 - postfix delivers mail to user's home instead of /var/spool/mail - rpmlint fixes o init-script-undefined-dependency $network-remotefs - fix for SuSEconfig.postfix o if use_amavis eq "yes" then content_filter "amavis:[127.0.0.1]:10024]" is defined, so removed "-o content_filter=smtp:[127.0.0.1]:10024" for smtp - s#ldconfig#/sbin/ldconfig# - Add support for dovecot as MDA to SuSEconfig. - Package documentation as noarch - Remove postfixs update script. This does not work now. - Fix the %post section add missed %{fillup_only -an mail} - bnc#555814 ? VUL-0: SMTPD_LISTEN_REMOTE="yes" by default - bnc#555732 - Invalid $(hostname -i) usage SuSEconfig.postfix - bnc#547928 ? Postfix does not start during boot process - Avoid append relay multiple times in POSTFIX_MAP_LIST - bnc#549612 ? SuSEconfig.postfix - bnc#540538 ? postfix-2.6.1-10.1 installs new files in /etc/postfix and does not generate <file>.db - bnc#519438 - Postfix: Running chrooted lets qmgr loosing his syslog-socket - remove obsolate version tests from SuSEconfig.postfix - bnc#525825 - when using cyrus in a chroot environment Suseconfig does not create socket /var/lib/imap/socket/lmtp - spec o fdupes if >= 1100 - update to 2.6.1 o merge home:varkoly:Factory and o:F - spec mods o use of getent - rpmlint o remove unneeded dists from examples/chroot-setup/ o postin-without-ldconfig o files-duplicate /usr/share/doc/packages/postfix-doc/html/ o files-duplicate /usr/share/man/man? - added VDA patch o Mailbox / Maildir size limit, known also as "soft quota", to avoid user take all you disk space o Customizable "limit" message when the soft quota limit is reached. NOTE: message is sent to senders, but NOT to the owner of the mailbox. o Limit only 'INBOX', because some people use IMAP and don't want the same limit in IMAP folder that are differents from INBOX. o Support for 'Courier' style Maildir, usefull for people that use courier as pop3/imap server and to get fast soft quota summary. Note that it is also compatible with qmail maildir per default. o Supports for Courier 'maildirsize' file in Maildir folder that is used to read quotas quickly. Note that this option is not actived per default and can be dangerous on some NFS client implementation (like for example Solaris that cache some filesystem operations). o Customisable suffix for Maildir support, when share same external dict between postfix and pop3/imap server sometime "Maildir/" suffix is needed to avoid extra database handling (eg LDAP, MySQL...). - some improvements of SuSEconfig.postfix o POSTFIX_LISTEN: Comma separated list of IP's o POSTFIX_INET_PROTO: ipv4, ipv6, all o POSTFIX_MYHOSTNAME: define SMTPs FQHOSTNAME o POSTFIX_WITH_MYSQL: when using MySQL as backend o POSTFIX_BASIC_SPAM_PREVENTION: "custom" you can now define your own rules - POSTFIX_SMTPD_CLIENT_RESTRICTIONS - POSTFIX_SMTPD_HELO_RESTRICTIONS - POSTFIX_SMTPD_SENDER_RESTRICTIONS - POSTFIX_SMTPD_RECIPIENT_RESTRICTIONS - added helo_access for helo checks - added relay for relaying domain - added MySQL stuff when using MySQL as backend (virtuser) o you should consider postfixAdmin as mgmnt interface o when runninng postfix chrooted: you have to run SUSEconfig each time when you have restarted MySQL because of linking mysql.sock - bnc#439287 - not all POSTFIX_ADD_* values are properly handled by SuSEconfig.postfix - bnc#483208 - Postfix configuration trashed after update - bnc#488268 - SuSEconfig.postfix chroot setup misses /etc/ssl/certs - bnc#465165 - postfix src package - bnc#464869 - SuSEconfig.postfix causes DNS lookup - bnc#460442 - amavisd-new and Postfix need fqdn-hostname in "uname -n" - update to 2.5.6 - The SMTP server did not ask for a client certificate with "smtpd_tls_req_ccert = yes". Reported by Rob Foehl. - Avoid reduced TCP performance when reusing an SMTP connection with a larger than 4096-byte TCP MSS value. In practice, this could happen only with loopback (localhost) connections. - (bnc#442456) - chrooted postfix and saslauthd - fix build - upgrade must not be executed during installation - (bnc#403976) - permissions on /var/lib/postfix changed - (bnc#433916) - postfix should be splitted into postfix and postfix-doc - (bnc#415216) - Postfix RPM Install Displays Multiple Warnings - clean up spec file - Update to Version 2.5 patchlevel 5 * Bugfix (introduced Postfix 2.4): epoll file descriptor leak. With Postfix >= 2.4 on Linux >= 2.6, Postfix has an epoll file descriptor leak when it executes non-Postfix commands in, for example, user-controlled $HOME/.forward files. * Security: some systems have changed their link() semantics, and will hardlink a symlink, contrary to POSIX and XPG4. Sebastian Krahmer, SuSE. File: util/safe_open.c. The solution introduces the following incompatible change: when the target of mail delivery is a symlink, the parent directory of that symlink must now be writable by root only (in addition to the already existing requirement that the symlink itself is owned by root). This change will break legitimate configurations that deliver mail to a symbolic link in a directory with less restrictive permissions. * Bugfix: dangling pointer in vstring_sprintf_prepend(). File: util/vstring.c. - init script: copy LSB *-Start tags to *-Stop - spec file: removed obsolete rc.config update hooks - (bnc#414959) postfix doesn't have any "Name: " tag in firewall definition - (bnc#405900) SuSEconfig.postfix changes owner and permissions of /tmp if smtpd_tls_CApath is not set - Update to Version 2.5 patchlevel 3 * Cleanup of code * defer delivery when a mailbox file is not owned by the recipient. Requested by Sebastian Krahmer, SuSE. Specify "strict_mailbox_ownership=no" to ignore ownership discrepancies. * Bugfix: null-terminate CN comment string after sanitization. * Bugfix (introduced Postfix 2.0): after "warn_if_reject reject_unlisted_recipient/sender", the SMTP server mistakenly remembered that recipient/sender validation was already done. - (fate#305005) Enable SMTPS in postfix ootb - (bnc#396985) sending of NUL character disallowed by RFC2822 - (bnc#397127) without relay is silent about undeliverable mails - (bnc#389670) - postfix generates invalid config - remove dir /usr/share/omc/svcinfo.d as it is provided now by filesystem - Update to Version 2.5 patchlevel 1 Changes: The Postfix 2.5 "postfix upgrade-configuration" command now works even with Postfix 2.4 or earlier versions of the postfix command. When installing Postfix 2.5.0 without upgrading from an existing master.cf file, the new master.cf file had an incorrect process limit for the proxywrite service. This service is used only by the obscure "smtp_sasl_auth_cache_name" and "lmtp_sasl_auth_cache_name" configuration parameters. Someone needed multi-line support for header/body Milter replies. The LDAP client's TLS support was broken in several ways. - #360572 - postfix %post script leaves lots of backup files in /etc/postfix/ - Update to Version 2.5 patchlevel 0 Major changes - critical - ----------------------- [Incompat 20071224] The protocol to send Milter information from smtpd(8) to cleanup(8) processes was cleaned up. If you use the Milter feature, and upgrade a live Postfix system, you may see an "unexpected record type" warning from a cleanup(8) server process. To prevent this, execute the command "postfix reload". The incompatibility affects only systems that use the Milter feature. It does not cause loss of mail, just a minor delay until the remote SMTP client retries. [Incompat 20071212] The allow_min_user feature now applies to both sender and recipient addresses in SMTP commands. With earlier Postfix versions, only recipients were subject to the allow_min_user feature, and the restriction took effect at mail delivery time, causing mail to be bounced later instead of being rejected immediately. [Incompat 20071206] The "make install" and "make upgrade" procedures now create a Postfix-owned directory for Postfix-writable data files such as caches and random numbers. The location is specified with the "data_directory" parameter (default: "/var/lib/postfix"), and the ownership is specified with the "mail_owner" parameter. [Incompat 20071206] The tlsmgr(8) and verify(8) servers no longer use root privileges when opening the address_verify_map, * _tls_session_cache_database, and tls_random_exchange_name cache files. This avoids a potential security loophole where the ownership of a file (or directory) does not match the trust level of the content of that file (or directory). [Incompat 20071206] The tlsmgr(8) and verify(8) cache files should now be stored as Postfix-owned files under the Postfix-owned data_directory. As a migration aid, attempts to open these files under a non-Postfix directory are redirected to the Postfix-owned data_directory, and a warning is logged. This is an example of the warning messages: Dec 6 12:56:22 bristle postfix/tlsmgr[7899]: warning: request to update file /etc/postfix/prng_exch in non-postfix directory /etc/postfix Dec 6 12:56:22 bristle postfix/tlsmgr[7899]: warning: redirecting the request to postfix-owned data_directory /var/lib/postfix If you wish to continue using a pre-existing tls_random_exchange_name or address_verify_map file, move it to the Postfix-owned data_directory and change ownership from root to Postfix (that is, change ownership to the account specified with the mail_owner configuration parameter). [Feature 20071205] The "make install" and "make upgrade" procedures now create a Postfix-owned directory for Postfix-writable data files such as caches and random numbers. The location is specified with the "data_directory" parameter (default: "/var/lib/postfix"), and the ownership is specified with the "mail_owner" parameter. [Incompat 20071203] The "make upgrade" procedure adds a new service "proxywrite" to the master.cf file, for read/write lookup table access. If you copy your old configuration file over the updated one, you may see warnings in the maillog file like this: connect #xx to subsystem private/proxywrite: No such file or directory To recover, run "postfix upgrade-configuration" again. [Incompat 20070613] The pipe(8) delivery agent no longer allows delivery with the same group ID as the main.cf postdrop group. Major changes - malware defense - ------------------------------ [Feature 20080107] New "pass" service type in master.cf. Written years ago, this allows future front-end daemons to accept all connections from the network, and to hand over connections from well-behaved clients to Postfix. Since this feature uses file descriptor passing, it imposes no overhead once a connection is handed over to Postfix. See master(5) for a few details. [Feature 20070911] Stress-adaptive behavior. When a "public" network service runs into an "all processes are busy" condition, the master(8) daemon logs a warning, restarts the service, and runs it with "-o stress=yes" on the command line (under normal conditions it runs the service with "-o stress=" on the command line). This can be used to make main.cf parameter settings stress dependent, for example: /etc/postfix/main.cf: smtpd_timeout = ${stress?10}${stress:300} smtpd_hard_error_limit = ${stress?1}${stress:20} Translation: under conditions of stress, use an smtpd_timeout value of 10 seconds instead of 300, and use smtpd_hard_error_limit of 1 instead of 20. The syntax is explained in the postconf(5) manpage. The STRESS_README file gives examples of how to mitigate flooding problems. Major changes - tls support - -------------------------- [Incompat 20080109] TLS logging output has changed to make it more useful. Existing logfile parser regular expressions may need adjustment. - More log entries include the "hostnamename[ipaddress]" of the remote SMTP peer. - Certificate trust chain error reports show only the first error certificate (closest to the trust chain root), and the reporting is more human-readable for the most likely errors. - After the completion of the TLS handshake, the session is logged with TLS loglevel >= 1 as either "Untrusted", "Trusted" or "Verified" (SMTP client only). - "Untrusted" means that the certificate trust chain is invalid, or that the root CA is not trusted. - "Trusted" means that the certificate trust chain is valid, and that the root CA is trusted. - "Verified" means that the certificate meets the SMTP client's matching criteria for the destination: - In the case of a destination name match, "Verified" also implies "Trusted". - In the case of a fingerprint match, CA trust is not applicable. - The logging of protocol states with TLS loglevel >= 2 no longer reports bogus error conditions when OpenSSL asks Postfix to refill (or flush) network I/O buffers. This loglevel is for debugging only; use 0 or 1 in production configurations. [Feature 20080109] The Postfix SMTP client has a new "fingerprint" security level. This avoids dependencies on CAs, and relies entirely on bi-lateral exchange of public keys (really self-signed or private CA signed X.509 public key certificates). Scalability is clearly limited. For details, see the fingerprint discussion in TLS_README. [Feature 20080109] The Postfix SMTP server can now use SHA1 instead of MD5 to compute remote SMTP client certificate fingerprints. For backwards compatibility, the default algorithm is MD5. For details, see the "smtpd_tls_fingerprint_digest" parameter in the postconf(5) manual. [Feature 20080109] The maximum certificate trust chain depth (verifydepth) is finally implemented in the Postfix TLS library. Previously, the parameter had no effect. The default depth was changed to 9 (the OpenSSL default) for backwards compatibility. If you have explicity limited the verification depth in main.cf, check that the configured limit meets your needs. See the "lmtp_tls_scert_verifydepth", "smtp_tls_scert_verifydepth" and "smtpd_tls_ccert_verifydepth" parameters in the postconf(5) manual. [Feature 20080109] The selection of SSL/TLS protocols for mandatory TLS can now use exclusion rather than inclusion. Either form is acceptable; see the "lmtp_tls_mandatory_protocols", "smtp_tls_mandatory_protocols" and "smtpd_tls_mandatory_protocols" parameters in the postconf(5) manual. Major changes - scheduler - ------------------------ [Feature 20071130] Revised queue manager with separate mechanisms for per-destination concurrency control and for dead destination detection. The concurrency control supports less-than-1 feedback to allow for more gradual concurrency adjustments, and uses hysteresis to avoid rapid oscillations. A destination is declared "dead" after a configurable number of pseudo-cohorts(*) reports connection or handshake failure. (*) A pseudo-cohort is a number of delivery requests equal to a destination's delivery concurrency. The drawbacks of the old +/-1 feedback scheduler are a) overshoot due to exponential delivery concurrency growth with each pseudo-cohort(*) (5-10-20...); b) throttling down to zero concurrency after a single pseudo-cohort(*) failure. The latter was especially an issue with low-concurrency channels where a single failure could be sufficient to mark a destination as "dead", and suspend further deliveries. New configuration parameters: destination_concurrency_feedback_debug, default_destination_concurrency_positive_feedback, default_destination_concurrency_negative_feedback, default_destination_concurrency_failed_cohort_limit, as well as transport-specific versions of the same. The default parameter settings are backwards compatible with older Postfix versions. This may change after better defaults are field tested. The updated SCHEDULER_README document describes the theory behind the new concurrency scheduler, as well as Patrik Rak's preemptive job scheduler. See postconf(5) for more extensive descriptions of the configuration parameters. Major changes - small/home office - -------------------------------- [Feature 20080115] Preliminary SOHO_README document that combines bits and pieces from other document in one place, so that it is easier to find. This document describes the "mail sending" side only. [Feature 20071202] Output rate control in the queue manager. For example, specify "smtp_destination_rate_delay = 5m", to pause five minutes between message deliveries. More information in the postconf(5) manual under "default_destination_rate_delay". Major changes - smtp client - -------------------------- [Incompat 20080114] The Postfix SMTP client now by default defers mail after a remote SMTP server rejects a SASL authentication attempt. Specify "smtp_sasl_auth_soft_bounce = no" for the old behavior. [Feature 20080114] The Postfix SMTP client can now avoid making repeated SASL login failures with the same server, username and password. To enable this safety feature, specify for example "smtp_sasl_auth_cache_name = proxy:btree:/var/lib/postfix/sasl_auth_cache" (access through the proxy service is required). Instead of trying to SASL authenticate, the Postfix SMTP client defers or bounces mail as controlled with the new smtp_sasl_auth_soft_bounce configuration parameter. [Feature 20071111] Header/body checks are now available in the SMTP client, after the implementation was moved from the cleanup server to a library module. The SMTP client provides only actions that don't change the message delivery time or destination: warn, replace, prepend, ignore, dunno, ok. [Incompat 20070614] By default, the Postfix Cyrus SASL client no longer sends a SASL authoriZation ID (authzid); it sends only the SASL authentiCation ID (authcid) plus the authcid's password. Specify "send_cyrus_sasl_authzid = yes" to get the old behavior. Major changes - smtp server - -------------------------- [Feature 20070724] Not really major. New support for RFC 3848 (Received: headers with ESMTPS, ESMTPA, or ESMTPSA); updated SASL support according to RFC 4954, resulting in small changes to SMTP reply codes and (DSN) enhanced status codes. Major changes - milter - --------------------- [Incompat 20071224] The protocol to send Milter information from smtpd(8) to cleanup(8) processes was cleaned up. If you use the Milter feature, and upgrade a live Postfix system, you may see an "unexpected record type" warning from a cleanup(8) server process. To prevent this, execute the command "postfix reload". The incompatibility affects only systems that use the Milter feature. It does not cause loss of mail, just a minor delay until the remote SMTP client retries. [Feature 20071221] Support for most of the Sendmail 8.14 Milter protocol features. To enable the new features specify "milter_protocol = 6" and link the filter application with a libmilter library from Sendmail 8.14 or later. Sendmail 8.14 Milter features supported at this time: - NR_CONN, NR_HELO, NR_MAIL, NR_RCPT, NR_DATA, NR_UNKN, NR_HDR, NR_EOH, NR_BODY: The filter can tell Postfix that it won't reply to some of the SMTP events that Postfix sends. This makes the protocol less chatty and improves performance. - SKIP: The filter can tell Postfix to skip sending the rest of the message body, which also improves performance. - HDR_LEADSPC: The filter can request that Postfix does not delete the first space character between header name and header value when sending a header to the filter, and that Postfix does not insert a space character between header name and header value when receiving a header from the filter. This fixes a limitation in the old Milter protocol that can break DKIM and DK signatures. - SETSYMLIST: The filter can override one or more of the main.cf milter_xxx_macros parameter settings. Sendmail 8.14 Milter features not supported at this time: - RCPT_REJ: report rejected recipients to the mail filter. - CHGFROM: replace sender, with optional ESMTP command parameters. - ADDRCPT_PAR: add recipient, with optional ESMTP command parameters. It is unclear when (if ever) the missing features will be implemented. SMFIP_RCPT_REJ requires invasive changes in the SMTP server recipient processing and error handling. SMFIR_CHGFROM and SMFIR_ADDRCPT_PAR require ESMTP command-line parsing in the cleanup server. Unfortunately, Sendmail's documentation does not specify what ESMTP options are supported, but only discusses examples of things that don't work. Major changes - address verification - ----------------------------------- [Incompat 20070514] The default sender address for address verification probes was changed from "postmaster" to "double-bounce", so that the Postfix SMTP server no longer causes surprising behavior by excluding "postmaster" from SMTP server access controls. Major changes - ldap - ------------------- [Incompat 20071216] Due to an incompatible API change between OpenLDAP 2.0.11 and 2.0.12, an LDAP client compiled for OpenLDAP version <= 2.0.11 will refuse to work with an OpenLDAP library version >= 2.0.12 and vice versa. Major changes - logging - ---------------------- [Incompat 20080109] TLS logging output has changed to make it more useful. Existing logfile parser regular expressions may need adjustment. - More log entries include the "hostnamename[ipaddress]" of the remote SMTP peer. - Certificate trust chain error reports show only the first error certificate (closest to the trust chain root), and the reporting is more human-readable for the most likely errors. - After the completion of the TLS handshake, the session is logged with TLS loglevel >= 1 as either "Untrusted", "Trusted" or "Verified" (SMTP client only). - "Untrusted" means that the certificate trust chain is invalid, or that the root CA is not trusted. - "Trusted" means that the certificate trust chain is valid, and that the root CA is trusted. - "Verified" means that the certificate meets the SMTP client's matching criteria for the destination: - In the case of a destination name match, "Verified" also implies "Trusted". - In the case of a fingerprint match, CA trust is not applicable. - The logging of protocol states with TLS loglevel >= 2 no longer reports bogus error conditions when OpenSSL asks Postfix to refill (or flush) network I/O buffers. This loglevel is for debugging only; use 0 or 1 in production configurations. [Incompat 20071216] The SMTP "transcript of session" email now includes the remote SMTP server TCP port number. Major changes - loop detection - ----------------------------- [Incompat 20070422] [Incompat 20070422] When the pipe(8) delivery agent is configured to create the optional Delivered-To: header, it now first checks if that same header is already present in the message. If so, the message is returned as undeliverable. This test should have been included with Postfix 2.0 when Delivered-To: support was added to the pipe(8) delivery agent. - Remove previous fix - #301335 - [SuSEconfig]: Postfix module uses stderr - Update to Version 2.4 patchlevel 6 Bugfix (introduced Postfix 2.2.11): TLS client certificate with unparsable canonical name caused the SMTP server's policy client to allocate zero-length memory, triggering an assertion that it shouldn't do such things. File: smtpd/smtpd_check.c. Bugfix (introduced Postfix 2.4) missing initialization of event mask in the event_mask_drain() routine (used by the obsolete postkick(1) command). Found by Coverity. File: util/events.c. Workaround: the flush daemon forces an access time update for the per-destination logfile, to prevent an excessive rate of delivery attempts when the queue file system is mounted with "noatime". File: flush/flush.c. - #330276 ? /sbin/conf.d/SuSEconfig.postfix could copy certs into smtpd_tls_CApath - Use correct SuSEfirewall2 rule directory. - #333629 - saslauthd typo in SuSEconfig.postfix - #331044 - Postfix uses receive_override_options in main.cf - fix the last fix - fix the last fix - Fixing bug: #297622 - SMTPD_LISTEN_REMOTE has no effect - Update to Version 2.4 patchlevel 5 Bugfix: the loopback TCP performance workaround was ineffective due to a wetware bit-flip during code cleanup. File: util/vstream_tweak.c. (patch level 4) Bugfix: the Milter client assumed that a Milter application does not modify the message header or envelope, after that same Milter application has modified the message body of that same email message. This is not a problem with updates by different Milter applications. Problem was triggered by Jose-Marcio Martins da Cruz. Also simplified the handling of queue file update errors. File: milter/milter8.c. Workaround: some non-Cyrus SASL SMTP servers require SASL login without authzid (authoriZation ID), i.e. the client must send only the authcid (authentiCation ID) + the authcid's password. In this case the server is supposed to derive the authzid from the authcid. This works as expected when authenticating to a Cyrus SASL SMTP server. To get the old behavior specify "send_cyrus_sasl_authzid = yes", in which case Postfix sends the (authzid, authcid, password), with the authzid equal to the authcid. File: xsasl/xsasl_cyrus_client.c. Portability: /dev/poll support for Solaris chroot jail setup scripts. Files: examples/chroot-setup/Solaris8, examples/chroot-setup/Solaris10. Cleanup: Milter client error handling, so that the (Postfix SMTP server's Milter client) does not get out of sync with Milter applications after the (cleanup server's Milter client) encounters some non-recoverable problem. Files: milter/milter8.c, smtpd/smtpd.c. Performance: workaround for poor TCP performance on loopback (127.0.0.1) connections. Problem reported by Mark Martinec. Files: util/vstream_tweak.c, milter/milter8.c, smtp/smtp_connect.c, smtpstone/*source.c. Bugfix: when a milter replied with ACCEPT at or before the first RCPT command, the cleanup server would apply the non_smtpd_milters setting as if the message was a local submission. Problem reported by Jukka Salmi. Also, the cleanup server would get out of sync with the milter when a milter replied with ACCEPT at the DATA command. Files: cleanup/cleanup_envelope.c, smtpd/smtpd.c, milter/milters.c. - rediffed patches - Update to Version 2.4 patchlevel 3 (patch level 1) Bugfix (introduced Postfix 2.3): segfault with HOLD action in access/header_checks/body_checks on 64-bit platforms. File: cleanup/cleanup_api.c. Portability (introduced 20070325): the fix for hardlinks and symlinks in postfix-install forgot to work around shells where "IFS=/ command" makes the IFS setting permanent. This is allowed by some broken standard, and affects Solaris. File: postfix-install. Portability (introduced 20070212): the workaround for non-existent library bugs with descriptors >= FD_SETSIZE broke with "fcntl F_DUPFD: Invalid argument" on 64-bit Solaris. Files: master/multi_server.c, *qmgr/qmgr_transport.c. Cleanup: on (Linux) platforms that cripple signal handlers with deadlock, "postfix stop" now forcefully stops all the processes in the master's process group, not just the master process alone. File: conf/postfix-script. (patch level 2) Bugfix: don't falsely report "lost connection from localhost[127.0.0.1]" when Postfix is being portscanned. Files: smtpd/smtpd_peer.c, qmqpd/qmqpd_peer.c. Robustness: recommend a "0" process limit for policy servers to avoid "connection refused" problems when the smtpd process limit exceeds the default process limit. File: proto/SMTPD_POLICY_README.html. Safety: when IPv6 (or IPv4) is turned off, don't treat an IPv6 (or IPv4) connection from e.g. inetd as if it comes from localhost[127.0.0.1]. Files: smtpd/smtpd_peer.c, qmqpd/qmqpd_peer.c. Bugfix: Content-Transfer-Encoding: attribute values are case insensitive. File: src/cleanup/cleanup_message.c. Bugfix: mailbox_transport(_maps) and fallback_transport(_maps) were broken when used with the error(8) or discard(8) transports. Cause: insufficient documentation. Files: error/error.c, discard/discard.c. Bugfix (problem introduced Postfix 2.3): when DSN support was introduced it broke "agressive" recipient duplicate elimination with "enable_original_recipient = no". File: cleanup/cleanup_out_recipient.c. Bugfix (introduced Postfix 2.3): the sendmail/postdrop commands would hang when trying to submit a message larger than the per-message size limit. File: postdrop/postdrop.c. Sabotage the saboteur who insists on breaking Postfix by adding gethostbyname() calls that cause maildir delivery to fail when the machine name is not found in /etc/hosts, or that cause Postfix processes to hang when the network is down. (patch level 3) Portability: Victor helpfully pointed out that change 20070425 broke on non-IPv6 systems. Files: smtpd/smtpd_peer.c, qmqpd/qmqpd_peer.c. - Bug 285553 amavisd inconsistency - provide smtp meta-service as well - don't PreRequire /sbin/ip: removed call in SuSEconfig.postfix - dynamic_maps.patch: readded the chunk for dict_tcp and dict_pcre - replaced prereq for postfix with a prereq on %{name} = %{version} - updated to postfix 2.4, patchlevel 0 Major changes - safety * As a safety measure, Postfix now by default creates mailbox dotlock files on all systems. This prevents problems with GNU POP3D which subverts kernel locking by creating a new mailbox file and deleting the old one Major changes - Milter support * The support for Milter header modification requests was revised. With minimal change in the on-disk representation, the code was greatly simplified, and regression tests were updated to ensure that old errors were not re-introduced. The queue file format is entirely backwards compatible with Postfix 2.3. * Support for Milter requests to replace the message body. Postfix now implements all the header/body modification requests that are available with Sendmail 8.13. * A new field is added to the queue file "size" record that specifies the message content length. Postfix 2.3 and older Postfix 2.4 snapshots will ignore this field, and will report the message size as it was before the body was replaced. Major changes - TLS support * The check_smtpd_policy client sends TLS certificate attributes (client ccert_subject, ccert_issuer) only after successful client certificate verification. The reason is that the certification verification status itself is not available in the policy request. * The check_smtpd_policy client sends TLS certificate fingerprint information even when the certificate itself was not verified. * The remote SMTP client TLS certificate fingerprint can be used for access control even when the certificate itself was not verified. * The format of SMTP server TLS session cache lookup keys has changed. The lookup key now includes the master.cf service name. Major changes - performance * Better support for systems that run thousands of Postfix processes. Postfix now supports FreeBSD kqueue(2), Solaris poll(7d) and Linux epoll(4) as more scalable alternatives to the traditional select(2) system call, and uses poll(2) when examining a single file descriptor for readability or writability. These features are supported on sufficiently recent versions of FreeBSD, NetBSD, OpenBSD, Solaris and Linux; support for other systems will be added as evidence becomes available that usable implementations exist. Major changes - delivery status notifications * Small changes were made to the default bounce message templates, to prevent HTML-aware software from hiding or removing the text "<postmaster>", and producing misleading text. * Postfix no longer announces its name in delivery status notifications. Users believe that Wietse provides a free help desk service that solves all their email problems. Major changes - ETRN support * More precise queue flushing with the ETRN, "postqueue -s site", and "sendmail -qRsite" commands, after minimization of race conditions. New per-queue-file flushing with "postqueue -i queueid" and "sendmail -qIqueueid". Major changes - small office/home office support * Postfix no longer requires a domain name. It uses "localdomain" as the default Internet domain name when no domain is specified via main.cf or via the machine's hostname. Major changes - SMTP access control * The check_smtpd_policy client sends TLS certificate attributes (client ccert_subject, ccert_issuer) only after successful client certificate verification. The reason is that the certification verification status itself is not available in the policy request. * The check_smtpd_policy client sends TLS certificate fingerprint information even when the certificate itself was not verified. * The remote SMTP client TLS certificate fingerprint can be used for access control even when the certificate itself was not verified. * The Postfix installation procedure no longer updates main.cf with "unknown_local_recipient_reject_code = 450". Four years after the introduction of mandatory recipient validation, this transitional tool is no longer neeed. - Add pwdutils BuildRequires to allow postinst script to succeed. - Add /usr/share/omc directory. - #247351 - postfix - Ports for SuSEfirewall added via packages - Move postfix.xml into the postfix-SuSE tarball - #228479 - Postfix is configured for inet_protocols=all if selecting ipv4 only support during installation. Now we set both inet_protocols and inet_interfaces to all. This means the available interfaces and protocols will be used. To avoid bogus warnings inet_proto.c was patched. - #251598 - postfix use pointers for literals - #144104 - postfix does not start - Implementing Fate #301840: Postfix XML Service Description Document - Enhancing /etc/sysconfig/postfix descripton to avoid problems like Bug 228678 - Problems with setting up chroot environment if /var/spool is not on same filesystem as /var - moved the dict handling into a preun script instead of postun and do not remove the dict entry on upgrade (#223176) - removed duplicates in the filelists. - #218229 - Postfix SuSEconfig script increases the max_proc line each run in master.cf - #206414 - /usr/lib/sasl2/smtpd.conf misplaced - #202119 ? SuSEconfig script for Postfix incomplete - #202162 ? Postfix 2.3.2 slightly incorrect, Cyrus SASL unavailable - #203174 ? /sbin/conf.d/SuSEconfig.postfix should configure a TLS session cache for postfix 2.2 - #203575 ? postfix-2.2.9-10 chokes without scache - #213589 - No development package/headers for postfix - also add libpostfix-milter.so* - updated to postfix 2.3, patchlevel 2 - Major changes - Name server replies that contain a malformed hostname are now flagged as permanent errors instead of transient errors. - DSN support as described in RFC 3461 .. RFC 3464. - The SMTP client now implements the LMTP protocol. - Milter (mail filter) application support, compatible with Sendmail version 8.13.6 and earlier. - Major changes - SASL authentication - Plug-in support for SASL authentication in the SMTP server and in the SMTP/LMTP client. - The Postfix-with-Cyrus-SASL build procedure has changed. - Support for sender-dependent ISP accounts. - Major changes - SMTP client - The SMTP client now implements the LMTP protocol. - This version addresses a performance stability problem with remote SMTP servers. - Major changes - SMTP server - The Postfix SMTP server now refuses to receive mail from the network if it isn't running with postfix mail_owner privileges. - Optional suppression of remote SMTP client hostname lookup and hostname verification. - SMTPD Access control based on the existence of an address->name mapping - Major changes - TLS - New concept: TLS security levels ("none", "may", "encrypt", "verify" or "secure") in the Postfix SMTP client. - Both the Postfix SMTP client and server can be configured without a client or server certificate. - See /usr/share/doc/packages/postfix/RELEASE_NOTES /usr/share/doc/packages/postfix/TLS_CHANGES /usr/share/doc/packages/postfix/README_FILES/SASL_README for detailed informations. - Only %{conf_backup_dir} is contained by the package not /var/adm/backup - Bugfix: #190639 Default number of processes for postfix - Bugfix: #190270 postfix-postgresql - Bugfix: #98188 - SuSE.tar.gz filename collision in cyrus/postfix SRPMs - Bugfix: #165786 - yast2-mail modul uses obsolate postfix attributes - updated to postfix 2.2, patchlevel 9. - Reasons: Bugfix: the LMTP client would reuse a session after negative reply to the RSET command (which may happen when client and server somehow get out of sync). Bugfix: race condition in the connection caching protocol, causing the SMTP delivery agent to hang after delivering mail, while trying to save a connection. Bugfix: the best_mx_transport, mailbox_transport and fallback_transport features did not write a per-recipient defer logfile record when the target delivery agent was broken. Bugfix: an EHLO I/O error after STARTTLS would be reported as a STARTTLS I/O error. Bugfix: the *SQL, proxy and LDAP maps were not defined in user-land commands such as postqueue. Bugfix: the anvil server would terminate after "max_idle" seconds, even when this was less than the anvil_rate_time_unit interval. Portability: 64-bit support for LINUX chroot script by Keith Owens. Safety: new "smtp_cname_overrides_servername" parameter. Bugfix: mailbox_command_maps was not subject to $name expansion. Bugfix: don't ignore the per-site policy when SSL library initialization fails. Bugfix: a TLS per-site MUST_NOPEERMATCH policy could not override a stronger main.cf policy, while a per-site NONE policy could. Bugfix: a combined TLS per-site (host, recipient) policy of (NONE, MAY) changed a global MUST policy into NONE, and a global MUST_NOPEERMATCH into MAY. The result is now NONE. Problem found by exhaustive simulation. Bugfix: an empty remote_header_rewrite_domain value caused trivial-rewrite to dereference a null pointer, but only in regression tests, not in production. Postfix rewrites addresses in the remote rewriting context only when the remote_header_rewrite_domain parameter value is non-empty. Workaround: a malformed domain name lookup result (such as null MX record) is now treated as a hard error, so that Postfix will no longer repeatedly try to deliver mail until the message expires in the queue. However, this will not reject mail with reject_unknown_sender/recipient_domain. That would require too much change for a stable release. - converted neededforbuild to BuildRequires - Fixing the spec-file - Bugfix: ID#143682 - Spurious (obsoleted?) configuration variable in postfix's main.cf - Bugfix: ID#140173 postfix allows relaying on the whole subnet - Bugfix: ID#144091 postfix doesn't start with the latest kernel - Bugfix: ID#144091 - Postfix makes an entry in slp servre for smtp & smtps - removing openldap from "neededforbuild" - updated to postfix 2.2, patchlevel 6 - added patch ldap_api_changes.patch: openldap2.3 enforces to use "The C LDAP Application Program Interface" - Bugfix Bugzilla ID#104663 - consistent use of variables in postfix init-script - Bugfix Bugzilla ID#104568 - SuSEconfig.postfix doesnt set $PATH properly to find all binaries. - Package the /usr/lib/sendmail -> /usr/sbin/sendmail link [#102947] - Bugfix Bugzilla ID#93884 - package postfix uses -fsigned-char Remove -fsigned-char option for ppc and s390 archs - updated to postfix 2.2, patchlevel 5: - Portability: the connection caching code broke on LP64 systems (inherited from Stevens Network Programming). Files: util/unix_send_fd.c, util/unix_recv_fd.c. This code is back-ported from the Postfix 2.3 snapshot release. - Robustness: the SMTP client now disables connection caching when it is unable to communicate with the scache(8) server, instead of looping forever and not delivering mail. File: global/scache_clnt.c. This code is back-ported from the Postfix 2.3 snapshot release. - Portability: after sending a socket, the scache(8) server now waits for an ACK from the connection cache client before closing the socket that it just sent. Files: scache/scache.c, global/scache_clnt.c. This code is back-ported from the Postfix 2.3 snapshot release. - Portability: on LP64 systems, integer expressions are int, but sizeof() and pointer difference expressions are larger. Point fixes for a few discrepancies with variadic functions that expect int (the permanent fix is to change the receiving modules, but that results in too much change, and is not allowed in the stable release). Files: tls/tls_scache.c, util/clean_env.c, util/vstring.h, smtpstone/qmqp-source.c. - force to set strict_8bitmime to "no" when POSTFIX_MDA != cyrus, because once it is set to "yes", nobody sets it back. - only install /etc/pam.d/smtp if suse_version > 920 - use Prereq instead of Requires for mysql and postgresql subpackages - added /etc/pam.d/smtp configuration file - Fixed build on x86_64: use -fPIC for libraries and -fPIE for the rest - applied dynamic maps patch of LaMont Jones at debian - Fix to SuSEconfig.postfix: only touch tlsmgr line in master.cf, if it is the new one using unix socket instead of fifo - build with -fPIE (not -fpie) to avoid GOT overflow on s390x - updated to postfix 2.2, patchlevel 4 - fixed build using -pie/-fpie (hopefully) - Build using -pie - set strict_8bitmime parameter to yes when using cyrus mailbox delivery - Bugfix ID#66325 - postfix: permissions also ship a postfix.paranoid file with the package with all suid and sgid bits disabled - updated to postfix 2.2, patchlevel 3 - Bugfix ID#75717 - postfix init scripts reports success allthough postfix is not running: use checkproc again instead of "master -t", as "master -t" seems to be broken - updated to postfix 2.2, patchlevel 2 - Bugfix ID#74712, problems with read-only mounting of $chroot/proc: don't mount /var/spool/postfix/proc ro as that results in /proc also mounted ro. - Bugfix ID#74709, postfix configuration and USE_IPV6 in sysconfig/network/config - updated to postfix 2.2, patchlevel 1 Postfix 2.2.1 solves four portability problems that surfaced in the week since the 2.2.0 release, one harmless bug in the TLS session cache cleaning code, and cleans up minor documentation problems. - 2.2.0 is out - update to RC2 - make it compile with gcc4 - RC1 of 2.2 is out - use "usr/sbin/postfix upgrade-configuration" now instead of "etc/postfix/post-install upgrade-package" - removed some @ chars (don't know how they slipped in) - update to current pre 2.2 snapshot (2.2-20050216) 2.2 release could happen next week - added patch needed for the Kolab project (this patch is part of the upcoming postfix 2-2 release), see http://wiki.kolab.org/index.php/Kolab-major-app-patches - s/X-UnitedLinux-Should-Start/Should-Start/ - added long_header.patch long lines piped into postfix sendmail can lead to errors. - Bugfix ID#49307: faster postfix startup: don't use hashed directories if possible: - added patch empty_hash_queue_names.patch to be able to modify hash_queue_names parameter. - added check to %post to change hash_queue_names in case of /var/spool/postfix residing on a reiserfs partition when doing a fresh installation - Bugfix ID#50386 - postfix must prereq /sbin/ip (iproute2) - updated tls+ipv6 patchkit to v1.26 - Bugfix: Incomplete error checking in getaddrinfo() could cause lmtpd to crash with debug_peer_list defined. Carsten Hoeger, SuSE. File: util/match_ops.c - Linux workaround: When mynetworks isn't set, a chrooted process could not read the IPv6 address information from /proc. We now invoke own_inet_addr() before chrooting, while processing main.cf. [backported from 2.2-nonprod snapshot] File: global/mail_params.c - Safety: when IPv6 netmask can't be determined, mynetworks is not set and mynetworks_style = subnet, assume /128 (host only). Until now, Tru64Unix assumed /64 (good for real subnets, but not safe for tunnel ranges etc.). File: util/inet_addr_local.c - Use <owner>:<group> in permissions file. - Two fixes to ipv6-patch related bugs: - Bugfix Bugzilla ID#49435 - VUL-0: Postfix, permit_mx_backup, IPv6, chroot - -> Open Relay! - Bugfix Bugzilla ID#49695 - SEGV while lmtp delivery - mount /proc into chroot jail to be able to access /proc/net/if_inet6 - Put options first in find command line. - setting LC_ALL=POSIX in SuSEconfig.postfix - Bugfix Bugzilla ID#46462, postfix should switch biff off - updated to postfix 2.1, patchlevel 5 (several small bugfixes) - updated tls+ipv6 patchkit (there have been some small bugs) - use v4 address 127.0.0.1 as amavisd-new local contact address as amavisd is not listening on any v6 address - also chmod the .db file resulting of a postmap (related to bugfix ID#39045 - Bugfix Bugzilla ID#39045 - tls_per_site table updates in SuSEconfig.postfix introduced POSTFIX_MAP_LIST in /etc/sysconfig/postfix where additional maps maintained by SuSEconfig.postfix can be added - Bugfix Bugzilla ID#45252 - rpm calls SuSEconfig.permissions which calls rpm - > 3 minute timeout Also don't call rpm from SuSEconfig.postfix - Speedup: set timestamp of $TMPDIR/main.cf into the past to workaround postconf safety which is not neccessary, because we do not touch the main.cf, the postfix daemons are using. - added $time to Required-Start in init-script - do not filter locally delivered mail when USE_AMAVIS=yes (don't set content_filter=vscan in main.cf) - removed obsolete vscan service definition from master.cf - use "$MASTER_BIN -t" to check whether postfix is already running in start section of init-script. That's more reliable then checkproc. - Bugfix Bugzilla ID#42995 - SuSEconfig.postfix should ignore .swp and other files in /etc/aliases.d - Bugfix Bugzilla ID#42281, openssl ca segfaults: added missing [ policy_anything ] configuration options to openssl.cnf - updated to postfix 2.1, patchlevel 4 - updated tls+ipv6 patchkit to v1.25 - new feature POSTFIX_REGISTER_SLP in /etc/sysconfig/postfix to be able to totally disable slptool from being started - updated tls+ipv6 patchkit to v1.24: - Bugfix: Prefixlen non-null host portion validation (in CIDR maps for example) yielded incorrect results sometimes because signed arithmetic was used instad of unsigned. - Patch correction: The TLS+IPv6 patch for Postfix 2.1.0 missed the master.cf update (used for new installattions). Added it back. - as tls and ipv6 patches have not been completely ported to postfix 2.1 new documentation system, especially the new postconf(5) manpage is missing the complete ipv6 and tls related configuration parameters, readded the sample-* files from ipv6+tls to %doc/samples - update to postfix 2.1, patchlevel 1: - Patch 01 fixes a signal 11 problem in the check_policy_service feature when SASL support is compiled in but turned off in the SMTP server (smtpd_sasl_auth_enable = no). - added now officially released tls patchkit 0.8.18-2.1.0-0.9.7d to the source package for the user to be able to build a non-ipv6 postfix package - official tls+ipv6 v1.23 patchkit released: - Patch fixes: Several code fixes to make the patch compile and work correctly when compiled without IPv6 support. - Bugfix (Solaris only?): address family length was not updated which could cause client hostname validation errors. File: smtpd/smtpd_peer.c - Portability: added support for Darwin 7.3+. This may need some further testing. - Cleanup: Restructure and redocument interface address retrieval functions. (This reduced the number of preprocessor statements from 99 to 93 ;) File: util/inet_addr_local.c - Cleanup: make several explicit casts to have compilers shut their pie holes about uninteresting things. - update to final postfix v2.1 - Bugfix: changed {main,master}.cf backup path in specfile, but not in SuSEconfig script - update to postfix 2.1 RC5 - update to current postfix 2.1 release candidate (RC4) - Bugfix Bugzilla ID#38569, exit SuSEconfig.postfix if mktemp fails - Bugfix Bugzilla ID#37409 the saslauthd socket is not copied to chroot jail due to a wrong test in SuSEconfig.postfix (used -L instead of -S) - only add ::1 to inet_interfaces when SMTPD_LISTEN_REMOTE=no AND ipv6 is enabled - Bugfix Bug ID#37293, SuSEConfig complains POSTFIX_ADD_* parameters are unknown (in turkish locale settings) added LC_CTYPE=POSIX to SuSEconfig.postfix - updated to tls+ipv6 version 1.22 (related to Bugzilla ID#35884) - Feature: Support "inet_interfaces = IPv4:all" and "inet_interfaces = IPv6:all", to restrict postfix to use either IPv4-only or IPv6-only. A more complete implementation will be part of a future patch. (Slightly modified) patch by Michal Ludvig, SuSE. Files: util/interfaces_to_af.[ch], util/inet_addr_local.c, global/own_inet_addr.c, global/wildcard_inet_addr.[ch], master/master_ent.ch - Bugfix: In Postfix snapshots, a #define was misplaced with the effect that IPv6 subnets were not included in auto- generated $mynetworks (i.e., mynetworks not defined in main.cf, when also mynetworks_style=subnet) on Linux 2.x systems. File: utils/sys_defs.h - now adding ::1 to inet_interfaces when SMTPD_LISTEN_REMOTE=no (related to Bugzilla ID#35884) - enabled ipv6 again - updated to most recent snapshot version 2.0.19-20040312: Patch 19 fixes two low-priority problems: - When mail is submitted at a high rate with the Postfix sendmail command, the pickup daemon is keps busy long enough that it it terminated by the watchdog timer (a feature that prevents Postfix from locking up permanently). - Malformed addresses in SMTP commands could result in table looks with zero-length search strings, causing trouble with NIS lookups. - disable IPv6 patch as it introduces problems for people who do not use IPv6, see Bugzilla ID#35884, "ipv6 mynetworks don't work" - be a nice packager and strictly follow http://www.porcupine.org/postfix-mirror/newdoc/PACKAGE_README.html (added setgid_group=... to post-install upgrade-package) - update to most recent version 2.0.18-20040209 - Bugfix Bugzilla ID#34817, SuSEconfig.postfix doesn't specify direct path to "postconf" and generates errors if run via sudo by a non-root user. - update to postfix 2.0.18-20040205 - enabled tls+ipv6 patch as it is now available for latest pre 2.1 snapshot - finally, the official TLS patchkit of Lutz hit the ground - additional fix for the TLS extensions patch should also fix Bugzilla ID#34218 - fixed the smtp segfault - updated to postfix 2.0.18-20040122 - added new feature for specfile usetls to en/dis-able TLS support - temporary removed TLS support (self adapted patch to most recent postfix snapshot version) as it currently results in smtp segfaulting - update to recent postfix snapshot version 2.0.17-20040120 which will become the next official release 2.1 around next week according to Wietse Venema. - added possibility to compile using the combined IPV6/TLS patch which can be downloaded from http://www.ipnet6.org/postfix/ just set useipv6 to 1 at the top of the specfile. - remove call to ldap_enable_cache (function has been removed from openldap and was already obsolete before (warning was issued back then)) - added openslp register/derigister calls to postfix init-script - add postfix user to group mail in case of POSTFIX_MDA==cyrus to let postfix lmtp access /var/lib/imap/socket/lmtp - Bugfix Bugzilla ID#33421, SMTP-Auth and relaying added permit_sasl_authenticated also to smtpd_recipient_restrictions in SuSEconfig.postfix - always create temp files and always remove them later on - some .spec improvements - Run SuSEconfig after install - Don't build as root - Be nice and clean up after ourselves - update to postfix v2.0.16 - update to tls extensions v0.8.16 - Fix for Bugzilla ID#32114, fixed some if condition syntaxes - fixed example for POSTFIX_RELAYHOST, Bug ID#30756 - updated some sysconfig descriptions - removed relays.osirosoft.com from the examples, Bug ID#30215 - Fix next useradd call - conf/postfix-files as input for /etc/permissions.d/postfix (Bug ID#29915) - generate better amavisd-new master.cf line: limit maxproc to 2 and use brackets around localhost (Bug ID#29917) - use conf/postfix-files as input for directories and permissions for files/directories in/below $queue_directory and $command_directory - use /var/lib/imap/socket/lmtp as lmtp socket in SuSEconfig.postfix and change access modes of /var/lib/imap and /var/lib/imap/socket to let postfix lmtp access the unix socket - Create postfix user as system account [Bug #29611] - Adjust sendmail permissions - Create /var/spool/postfix/public with permissions postfix is using - Add sendmail to /etc/sysconfig/mail - update to Postfix 2.0 Patch 14 - Bugfix Bugzilla ID#28921: missing activation metadata in sysconfig template - new macros for stop/restart of services on rpm update/removal - chown user:group instead of user.group - update to tls extensions 0.8.15-2.0.13-0.9.7b - updated SuSEconfig to use amavisd-new instead of amavis[d]-postfix - update to Postfix 2.0 Patch 13 - After "postfix reload", the master daemon now warns when the inet_interfaces parameter setting has changed, and ignores the change, instead of passing incorrect information to the smtp server. - After the postdrop command change with Postfix 2.0.11, the postcat command no longer recognized "maildrop" queue files as valid. - Mail could bounce when two messages were delivered simultaneously to a non-existent mailbox file. The safe_open() code that prevents race condition exploits will now try a little harder when it actually encounters a race condition. - update to tls extensions 0.8.14-2.0.12-0.9.7b - also change path to smtpd.conf in sysconfig template parameter description dependent on what %{_lib} is set to. - update to postfix 2.0, patchlevel 12 - mkdir -p $RPM_BUILD_ROOT/%{_libdir}/sasl2 instead of $RPM_BUILD_ROOT/usr/lib/sasl2 and we also can build on 64bit archs - package /usr/lib/sasl2/smtpd.conf using %{_libdir}/sasl2/smtpd.conf - added /etc/postfix to filelist - update to postfix 2.0, patchlevel 11 - update to tls extensions 0.8.13-2.0.10-0.9.7b - updated SuSE/master.cf toplevel comments - update to postfix 2.0, patchlevel 10 - remove installed (but unpackaged) file /etc/postfix/aliases - path to ca, certificate and key is relative to $POSTFIX_SSL_PATH, added $POSTFIX_SSL_PATH/ to the relevant parts of SuSEconfig.postfix - correctly handle new POSTFIX_SMTP_TLS_CLIENT parameter in SuSEconfig.postfix (activate/deactivate master.cf entries) - added libxcrypt to chroot jail, Bugzilla ID#25766 - added TLS_CLIENT support, Bugzilla ID#26647 - update to postfix 2.0, patchlevel 9 - fixed neededforbuild - update to postfix 2.0, patchlevel 7 - update to tls extensions 0.8.13-2.0.6-0.9.7a - Bugfix Bugzilla ID#25905, do not restrict mailbox size per default - use checkproc to check if there really is a postfix master process running when there's a pid file lying around. (Bugzilla ID#24910) - update to Postfix 2.0 Patch 06 - Postfix now truncates non-address information in message address headers (comments, etc.) to 250 characters per address. This should rarely present a problem. Reportedly, junk mail from poorly written software can trigger the protection, but that is no great loss. - Some little fixes to documentation. - update to Postfix 2.0 Patch 05 - The SMTP server's hard and soft error limits were off by one. With "smtpd_hard_error_limit = 1", Postfix will now disconnect after the first error, instead of the second one. - The proxymap server could deadlock when the mydestination parameter setting included a proxymapped lookup table. - Some little fixes to documentation. - when updating postfix, check whether post-install changed main/master.cf and update md5sums to not confuse SuSEconfig - when installing postfix on a fresh system, create md5sums in %post to be able to let check_md5_and_move() detect changes that a user might have done without running SuSEconfig before. - no longer remove md5sums of main.cf and master.cf during postinstall, as SuSEconfig then no longer knows, whether main.cf/master.cf had been modified by the user. Disadvantage: as postfix permanently needs basic changes to both main and master.cf, SuSEconfig.postfix will frequently generate .SuSEconfig files although the user did not change anything Bugzilla ID#24432 - update to Postfix 2.0 Patch 04 - The format of maildir filenames is synchronized with the present version of the maildir definition document. This format was already adopted by the 20030126 snapshot release. - The time limit on delivery to external commands was not enforced. This was broken probably some time before the first public Postfix release. - Duplicate elimination after virtual alias expansion works again. This was broken with the introduction of the original recipient attribute. - The local pickup daemon dropped incomplete records from local submissions. This was broken somewhere in the middle of 2002. - Bugfix Bugzilla ID#23675: new service proxymap will not be appended during update - also check whether amavisd-postfix is installed and set up filter section in master.cf - update to Postfix 2.0 Patch 03 - Postfix 2.0 broke relocated table lookup results with mail not rejected at the SMTP port, causing "User has moved to" text to be deleted. - A widely used maildir filename generating algorithm was broken. This affects all Postfix versions with maildir support. Instead of TIME.PID_COUNT.HOST Postfix now uses TIME.DEVICE_INODE.HOST. - Postfix 2.0 gave incorrect FILTER_README instructions for sites that wish to disable virtual alias mapping before the content filter. - postfix-lib64.patch code now integrated in postfix - changed SuSEconfig.postfix and smtpd.conf to use sasl2 - forgot to add tlsmgr to master.cf - Hmmm, just noticed, that suddenly 2.0.0.x became 2.0.x must have missed something... - updated SuSE/master.cf (new proxymap service) - added POSTFIX_ADD_MESSAGE_SIZE_LIMIT as example to sysconfig.postfix (Bugzilla ID#22907) - build using sasl2 - update to postfix v2 (version 2.0.0.2) - added sysconfig metadata to sysconfig templates - updated to new tls extensions - Bugfix Bugzilla ID#21865: don't copy directories into directories when updating chroot jail in cpifnewer() - Update to version 1.11, pl12 - new SuSEconfig.postfix features: . SMTP-AUTH server . SMTP-AUTH client . TLS Server - quote args of tr command - new feature: POSTFIX_ADD_* command in sysconfig/postfix to be able to add any regular postfix command via SuSEconfig - Bugfix Bugzilla ID#21120 added POSTFIX_ADD_MAILBOX_SIZE_LIMIT as example with value 0 (unlimited) - added a header to main.cf explaining that many postfix parameters have been added to the end of main.cf - Bugfix for Bugzilla ID#20754 missed some parameters when restoring main.cf or master.cf from scratch - NULLCLIENT did not work because SuSEconfig searches for the wrong keyword - Bugfix related to Bugzilla IDs 20506, 18298, 19294: masquerade_classes should not be extended by envelope_recipient - added ypbind to X-UnitedLinux-Should-Start in init-script - added restoration mechanism to restore master.cf and/or main.cf if they got deleted by (intention or) accident to SuSEconfig.postfix - added ldap to X-UnitedLinux-Should-Start - Bugfix Bugzilla ID#18298: when setting FROM_HEADER, also unqualified envelope recipients should be qualified to FROM_HEADER, not to myorigin, added envelope_recipient to masquerade_classes - Bugfix Bugzilla ID#18297: %post touches main.cf and master.cf so it may happen, that an update leaves .SuSEconfig files. Remove /var/adm/SuSEconfig/md5/etc/postfix/main.cf and master.cf in %post - Bugfix Bugzilla ID#18301: sendmail and postfix have different opinions on the usage of NULLCLIENT. Moved NULLCLIENT to sysconfig.postfix.POSTFIX_NULLCLIENT - added exim to Conflicts - wait for qmgr in the background for a maximum of 60 seconds - Bugfix for init-script: wait for qmgr to be ready before calling postfix flush - added accidently removed line in master.cf for amavis, Bugzilla ID#17732 - exclude .rpmsave and .rpmorig from /etc/aliases.d expansion - added netcfg to Prereq (/etc/aliases) - added pcre openldap2-client to prereq (Bugzilla ID#17447) - completed Prereq - Bugfix for the handling of POSTFIX_MASQUERADE_DOMAIN and FROM_HEADER - removed main.cf from SuSE.tar.gz - added X-UnitedLinux-Should-Start: cyrus to init-script - set local as default MDA again reason: postfix does not execute any external programs like procmail with uid 0, so root mails will go to /var/mail/nobody, which will confuse people - remove setting of SUSE_RELEASE version in the (E)SMTP banner - removed /etc/aliases from filelist, it's now in netcfg - removed 'q' flag from vscan transport definition, because current amavis versions have a rfc2821_mailbox_addr function - remove old aliases.db files in %post - do not use unset in %post - make procmail the default MDA - use %{_lib} macro to detect platforms with lib64 directories - make chroot jail function lib64 aware - fixed libnsl detection on lib64 systems - ldap_url_search_st is no longer available in OpenLDAP v2.1 added a patch, that uses ldap_url_parse - added new feature POSTFIX_MDA, Bugzilla ID#16720 - changed POSTFIX_BASIC_SPAM_PREVENTION. It can now be set to either off(default), medium or hard - cleaned up SuSEconfig.postfix - prepared for /etc/aliases.d - new FEATURES: POSTFIX_RBL_HOSTS, POSTFIX_BASIC_SPAM_PREVENTION, Bugzilla ID#16383 - moved sample-*.cf files to %{_docdir}/postfix/samples - update to patchlevel 11, version 1.1.11 - new FEATURE: POSTFIX_UPDATE_MAPS - update to patchlevel 10, version 1.1.10 - create required users and groups in %pre install - removed provides of my own packagename... - Bugfix for README.SuSE: POSTFIX_CREATECF is now MAIL_CREATE_CONFIG - update to patchlevel 7, version 1.1.7 - introduced new feature POSTFIX_LAPTOP - update to patchlevel 5, version 1.1.5 - Bugfix: don't check whether POSTFIX_MASQUERADE_DOMAIN is empty or not, because else we won't be able to clear it. - added flags=q to amavis transport definition (link(a)suse.de) [...] If your postfix is older than snapshot 20010610, leave out the "flags=q" part. However, amavis will not function properly with envelope adresses that contain whitespace in the local-part. This is quite rare, but has been observed a few times. [...] - update to version 1.1.4 (1.1, patchlevel 4) Bugfix (excerpt from HISTORY): .................................................................. off-by-one error, causing a null byte to be written outside dynamically allocated memory in the queue manager with addresses of exactly 100 bytes long, resulting in SIGSEGV on systems with an "exact fit" malloc routine. .................................................................. - added new option SMTPD_LISTEN_REMOTE to /etc/sysconfig/mail which has been introduced by the SuSE dist-team (excerpt): .................................................................. sendmail does have an option to listen only on the local port, this should be the default. A flag "SMTPD_LISTEN_REMOTE" in /etc/sysconfig/mail will be used to decide if port 25 should be opened externally. The sendmail package will send a mail to root explaining this fact. sendmail updates will copy the value of START_SMTPD to this new flag. .................................................................. As this is a totally different behaviour compared to old releases, SMTPD_LISTEN_REMOTE will be set to "yes", if POSTFIX_CREATECF (now MAIL_CREATE_CONFIG) had been set to "yes" before the update. - fillup workaround - hostname handling is still annoying added some piece of code to SuSEconfig.postfix to get a valid hostname - %postinst cleanup: . use rename_sysconfig_variable macro . use remove_and_set macro instead of directly calling fillup - FQHOSTNAME has been removed from /etc/sysconfig/network/config and is now set in /etc/HOSTNAME, which wasn't FQ in the past. * Please, don't change it again* - if POSTFIX_LOCALDOMAINS is set, do not append "$myhostname, localhost.$mydomain" anymore - Also take care of the localhost:10025 mailer definition when setting up chroot options - Do not set myorigin to FROM_HEADER - Bugfix(SuSEconfig.postfix): typo in path to /etc/sysconfig/amavis - SuSEconfig.postfix enhancement: get hostname from hostname -f Bugfix: get FQHOSTNAME from /etc/sysconfig/network/config - added -y to fillup_and_insserv to create startlinks after installation - changed company name to SuSE Linux AG in copyright headers - update to postfix 1.1.3 and tls extensions 0.8.3 minor bugfixes http://groups.yahoo.com/group/postfix-users/message/52953 - Bugfix: Forgot to assign a name to TMPDIR in SuSEconfig.postfix - added resolve_local_panic.patch http://groups.yahoo.com/group/postfix-users/message/52746 - update of tls extensions to 0.8.2 - update to version 1.1.2 - sysconfig.mail changes - renamed cleanup.fillup to sysconfig.postfix.cleanup - added postqueue patch, see http://groups.yahoo.com/group/postfix-users/message/51611 for more details - update to official release version 1.1.0 - moved some stuff to /etc/sysconfig/mail - cleaned up /etc/rc.config access - added some safety checks to SuSEconfig.postfix - update to version 20020115 (release candidate for Postfix official release version 1.1) - some improvements to SuSEconfig.postfix - updated to version 20020107 - added postinstall section to update from previous versions of postfix - Changed /sbin/init.d to /etc/init.d in init script comment - added sender_canonical_maps to SuSEconfig.postfix to let the new YaST2 module setup this map similar to sendmails genericstable - SuSEconfig.postfix shell script is no config file [Bug #12712] - Made initscript more LSB compliant (status codes) - Bugfix for Bugzilla ID#12672 (improve explanation of POSTFIX_LOCALDOMAINS) - robustness enhancement for SuSEconfig.postfix - typo in specfile (master.cf installed as main.cf) - update to version 20011210 - some changes to SuSEconfig.postfix: . added POSTFIX_UPDATE_CHROOT_JAIL variable, see README.SuSE . some cleanups for chroot jail . little bugfixes - moved rc.config.d -> sysconfig - update to version 20011127 - some changes to SuSEconfig.postfix: . added more robustness (Jehova) . do not chown -R postfix to /var/spool/postfix . query for package cyrus-sasl instead of sasl - update to version 20011115 Bugfix for a memory exhaustion bug in smtpd see http://groups.yahoo.com/group/postfix-users/message/46597 - remove START_ variable - some changes to specfile (thanks to Simon J Mudd from whom I copied some code) - fix some SuSEconfig.postfix bugs: . master.cf chroot column can also contain '-' . don't do anything if POSTFIX_CREATECF != yes - update to most recent snapshot version 20011008 - update to pl05 - Bugfix, Bugzilla ID#11914 - ALWAYS create master.cf, even is POSTFIX_CREATECF is set to no, because else chroot mode may not work, Bugzilla ID#11359 - removed an obsolete echo in start section of init-script - Bugfix in init-script: redirect output of postfix start to dev/null and do not use startproc to start postfix - update to tls-extensions v0.7.9 see http://groups.yahoo.com/group/postfix-users/message/41094 for details - update of tls-extensions to 0.7.8 - update of postfix to pl04 - Bugfix: - check if postfix spool is set up before starting postfix - start postfix with postfix start, because postfix-script wouldn't be executed, else. - update of tls-extensions to 0.7.3 - bugfix: remove libs from chroot jail, that are no longer valid, Bugzilla ID#9133 - bugfix: init script was not LSB compliant, Bugzilla ID#9063 - added cyrus to require start in init-script - "bugfix": bootstrap problem cyrus-imapd <-> postfix: cyrus-imapd must run before postfix, but fails to create lmtp socket, because /var/spool/postfix/public directory isn't present. FIX: add it to filelist - install postrop with special SGID modes - improved SuSEconfig.postfix - better main.cf handling - new feature: chroot or not chroot - major bugfix: memory leak in the LDAP client module - minor bugfixes - bzip2 sources - updated to pl02, bugfixrelease - Bugfix for SuSEconfig.postfix: Handling of TIMEZONE variable if set to unappropriate or no value - Improvement: Warnings are printed out in bold - Don't use a RPM macro for version number - update to pl01, bugfixrelease - added libcrack to chroot jail, because it is needed by pam_pwcheck - fixed neededforbuild for openldap - first non-beta of the next postfix generation - v20010228 - added cyrus-sasl-devel to neededforbuild - new version, 20010225 - removed notification message - bugfix: wrong permissions for maildrop directory - update to version 20010128 - now linked against ldaplib2 - bugfix: maildrop must be owned by postfix.root - update to version 20001212 - bugfix: insserv - bugfix: missed openssl in neededforbuilt - renamed to postfix, because a non-crypto version is no longer needed - Bugfix: postfix-script was not executable - Bugfixes: Provides in initscript Use /bin/bash in SuSEconfig.postfix - Update to version 20001210 - startscript sbin -> etc - new version - fix for neededforbuild - fix for master.cf - adopted to new init scheme - fixed neededforbuild - update to version 20001030 - long packagename - added rpm buildroot - fixed neededforbuild - src/util/dict_ldap.c:dict_ldap_lookup(): fix missing **-termination. - s390,ppc: added -fsigned-char compiler option, to fix obscure segfaults. (code is not signed/unsigned-char-clean) - yet another SuSEconfig.postfix bug (incorrect link) - bugfix for SuSEconfig.postfix - bugfix: missed to install new flush service - inititial revision of pfixtls ==== privoxy ==== - Added hardening to systemd service(s) (bsc#1181400). Modified: * privoxy.service ==== python ==== - BuildRequire rpm-build-python: The provider to inject python(abi) has been moved there. rpm-build pulls rpm-build-python automatically in when building anything against python3-base, but this implies that the initial build of python3-base does not trigger the automatic installation. ==== python-Babel ==== - Added BuildRequires: alts - Use libalternatives instead of update-alternatives. ==== python-Mako ==== Version update (1.1.4 -> 1.1.5) - update to 1.1.5: * Fixed some issues with running the test suite which would be revealed by running tests in random order. - Remove obsolete %suse_version %if - Added BuildRequires: alts - Use libalternatives instead of update-alternatives. ==== python-base ==== Subpackages: libpython2_7-1_0 python-xml - BuildRequire rpm-build-python: The provider to inject python(abi) has been moved there. rpm-build pulls rpm-build-python automatically in when building anything against python3-base, but this implies that the initial build of python3-base does not trigger the automatic installation. ==== python-cryptography ==== Version update (3.3.2 -> 3.4.8) - Add disable-RustExtension.patch in order to avoid a build requirement setuptools_rust - Next version (35.0) needs a full Rust toolchain. - Clean runtime, build and test requirements - Disable python2 build: Not supported anymore - update to 3.4.8 - keep new rust support disabled for now to avoid new dependencies ==== python-numpy ==== - The update- and libalternatives logic is required in the standard build, not the hpc flavor - Use libalternatives instead of update-alternatives. ==== python-pandas ==== Version update (1.3.3 -> 1.3.4) - Update to version 1.3.4 * Fixed regression in DataFrame.convert_dtypes() incorrectly converts byte strings to strings (GH43183) * Fixed regression in GroupBy.agg() where it was failing silently with mixed data types along axis=1 and MultiIndex (GH43209) * Fixed regression in merge() with integer and NaN keys failing with outer merge (GH43550) * Fixed regression in DataFrame.corr() raising ValueError with method="spearman" on 32-bit platforms (GH43588) * Fixed performance regression in MultiIndex.equals() (GH43549) * Fixed performance regression in GroupBy.first() and GroupBy.last() with StringDtype (GH41596) * Fixed regression in Series.cat.reorder_categories() failing to update the categories on the Series (GH43232) * Fixed regression in Series.cat.categories() setter failing to update the categories on the Series (GH43334) * Fixed regression in read_csv() raising UnicodeDecodeError exception when memory_map=True (GH43540) * Fixed regression in DataFrame.explode() raising AssertionError when column is any scalar which is not a string (GH43314) * Fixed regression in Series.aggregate() attempting to pass args and kwargs multiple times to the user supplied func in certain cases (GH43357) * Fixed regression when iterating over a DataFrame.groupby.rolling object causing the resulting DataFrames to have an incorrect index if the input groupings were not sorted (GH43386) * Fixed regression in DataFrame.groupby.rolling.cov() and DataFrame.groupby.rolling.corr() computing incorrect results if the input groupings were not sorted (GH43386) * Fixed bug in pandas.DataFrame.groupby.rolling() and pandas.api.indexers.FixedForwardWindowIndexer leading to segfaults and window endpoints being mixed across groups (GH43267) * Fixed bug in GroupBy.mean() with datetimelike values including NaT values returning incorrect results (GH43132) * Fixed bug in Series.aggregate() not passing the first args to the user supplied func in certain cases (GH43357) * Fixed memory leaks in Series.rolling.quantile() and Series.rolling.median() (GH43339) ==== python-rpm ==== Version update (4.16.1.3 -> 4.17.0) - update to rpm-4.17.0 ==== python38 ==== Subpackages: python38-curses python38-dbm python38-tk - BuildRequire rpm-build-python: The provider to inject python(abi) has been moved there. rpm-build pulls rpm-build-python automatically in when building anything against python3-base, but this implies that the initial build of python3-base does not trigger the automatic installation. ==== python38-core ==== Subpackages: libpython3_8-1_0 python38-base - BuildRequire rpm-build-python: The provider to inject python(abi) has been moved there. rpm-build pulls rpm-build-python automatically in when building anything against python3-base, but this implies that the initial build of python3-base does not trigger the automatic installation. ==== python38-documentation ==== - BuildRequire rpm-build-python: The provider to inject python(abi) has been moved there. rpm-build pulls rpm-build-python automatically in when building anything against python3-base, but this implies that the initial build of python3-base does not trigger the automatic installation. ==== qca-qt5 ==== Subpackages: libqca-qt5-2 qca-qt5-plugins - Set LD_LIBRARY_PATH before running tests. ==== rpm ==== Version update (4.16.1.3 -> 4.17.0) Subpackages: librpmbuild9 - update to rpm-4.17.0 - dropped support for berkeley db - archive unpacking failures no longer leave garbage - unified built-in and user-define macro syntax and calling conventions - python generators and debuginfo extraction has been split into a separate upstream project - support for ed25519 signatures - easier rpm macro access in lua - new patches: * python-rpm-packaging.diff * singlefilemode.diff * verbosearg.diff - modified patches: * usr-lib-sysimage-rpm.patch * localetag.diff * brp.diff * findlang.diff * macrosin.diff * rpmqpack.diff * build.diff * whatrequires-doc.diff * remove-brp-strips.diff * fileattrs.diff * langnoc.diff * find-lang-qt-qm.patch * findsupplements.diff * finddebuginfo.diff * finddebuginfo-absolute-links.diff * debugsubpkg.diff * debuglink.diff * debuginfo-mono.patch - dropped patches: * db.diff * dbfsync.diff * dbprivate.diff * dwarf5.diff * ndbglue.diff * pythondistdeps.diff * suspendlock.diff * taggedfileindex.diff * waitlock.diff * add-dwz-single-file-mode-option.patch ==== rpm-config-SUSE ==== Version update (0.g83 -> 0.g89) - Update to version 0.g89: * find-provides.ksyms: Do not set IFS - it is not needed for anything. * find-provides.ksyms: Fix compressed modules. * Allow locale directory to be named "locales" too ==== rsyslog ==== Version update (8.2108.0 -> 8.2110.0) - Upgrade to rsyslog 8.2110.0: * 2021-10-13: config bugfix: global(security.abortonidresolutionfail=) did not work when used with rscript based configuration, it was not checked. * 2021-10-13: config bugfix: global param $privDropToUser did not work correctly The parameter was not implemented for rscript based configuration and did not properly apply to legacy configuration. In essence, it almost always did not work as expected. see also: https://github.com/rsyslog/rsyslog/issues/4642 see also: https://github.com/rsyslog/rsyslog/commit/cbcaf2c7e5b67e5465e47bc7cc67af2ea… * 2021-10-12: rscript bugfix: ruleset called async when ruleset had queue.type="direct" The call rscript statement is able to call a rule set either synchronously or asynchronously. We did this, because practice showed that both modes are needed. For various reasons we decided to make async calls if the ruleset has a queue assigned and sync if not. To know if a "queue is assigned" we just checked if queue parameters were given. It was overlookeded the case of someone explicitly specifying a "direct queue", aka "no queue". As such, queue="direct" triggered async calls. That in turn meant that when a write operation to a variable was made inside that rule set, other rulesets could or could not see the write. While if was often not seen, this was a data race where the change could also be seen by the outside. This is now fixed. No matter if queue.type="direct" is specified or left out, the call will always by synchronous. Any values written to variables will also be seen by the "outside world" in later processing stages. Note that this has some potential to BREAK EXISTING CONFIGURATIONS. We deem this acceptable because: 1. this was racy at all, so unexpected behaviour could alwas occur 2. it is actually unlikely that someone used the triggering conditions in practice. But we can not outrule this, especially when the configuration was auto-generated. Potential compatibility issues can be solved by defining a small array-memory queue on the ruleset in question instead of specifying direct type. Again, we expect that almost all users will never experience any problems. If you do, however, please let us know: we may add an option to re-enable the bug. * 2021-10-12: ksi bugfix: locking bug fixed in rsksiCtxOpenFile Thanks to Taavi Valjaots for the patch. * 2021-10-11: core bugfix: fix typo in error message Thanks to github user jkschulz for the patch. * 2021-10-11: tcpsrv bugfix: compilation without exceptions tcpsrv.c:992:1: error: label at end of compound statement finalize_it: ^~~~~~~~~~~ Quoting from pthread.h: pthread_cleanup_push and pthread_cleanup_pop are macros and must always be used in matching pairs at the same nesting level of braces. Amends commit bcdd220142ec9eb106550195ba331fd114adb0bd. Thanks to Orgad Shaneh for the patch. * 2021-10-11: mkubernetes bugfix: no connection retry to kubernetes APP When connection to the kubernates API was not possible, mmkubernetes did not retry. This does now happen via regular rsyslog retry mechanism. Thanks to github user jayme-github for the analysis and patch. closes https://github.com/rsyslog/rsyslog/issues/4669 * 2021-10-11: openssl bugfix: Correct gnutlsPriorityString (custom ciphers) behaviour * Only apply default anon ciphers if gnutlsPriorityString is NULL and Authentication Mode is set to anon. Otherwise we do not set them as they overwrite custom Ciphers. * Added two tests for custom cipher configuration (anon/certvalid mode). * Add call for applyGnutlsPriorityString if gnutlsPriorityString changes. * Merged openssl init code from Connect into osslInitSession closes: https://github.com/rsyslog/rsyslog/issues/4686 * 2021-10-11: build issue: handle undefined MAXPATHLEN, PATH_MAX While we handled missing PATH_MAX, we did not handle missing MAXPATHLEN. This happens under GNU/Hurd, because there is no official limit. However, extremely long pathes are extremely uncommon, so we do not want to use slow dynamic alloc each time we need to build pathes. So we impose a limit of 4KiB, which should be fairly enough. Note that this obviously increases stack requirements in GNU/Hurd. As suggested by Michael Biebl, we have now implemented a generic approach to handle this via autoconf. * 2021-09-12: openssl: extended output information on connection failure Now includes the remote client/server IP address in the log output. * 2021-09-12: imhttp enhancements - query parameter ingestion & basic auth support * Basic Authentication support & tests * configured via imhttp option "basicAuthFile". This option should be configured to point to your htpasswd file generated via a standard htpasswd tool. tests: * imhttp-post-payload-basic-auth.sh * imhttp-post-payload-basic-auth-vg.sh * Query parameter ingestion capability & tests use t `addmetadata` option to inject query parameters into metadata for imhttp input. DISTRO PACKAGERS BEWARE: NEW DEPENDENCY FOR IMHTTP: libaprutil (libaprutil1-dev on debian'ish, apr-util-devel on Red Hat) Thanks to Nelson Yen for the patch. * 2021-09-07: testbench bugfix: privdrop tests under root user did not work When running under root, the privdrop tests did not properly work. This patch fixes the issue and skips test where necessary. This also includes some modernization of the related tests. closes https://github.com/rsyslog/rsyslog/issues/4619 * 2021-09-07: core/ratelimiting: fix rate limiting for already parsed messages Rate limiting may not have worked if the considered message had already been parsed (not having NEEDS_PARSING in msgFlags). This affects also imuxsock in its default configuration (useSpecialParser="true" and ratelimit.severity="1") * 2021-09-07: core bugfix: use of property $wday terminates string When $wday is used inside a template, all template parts after it are ignored. For exmaple: template(name="json_filename" type="string" string="/var/log/%$wday%.log") would generate something like "/var/log/0" - the ".log" part would be missing. For the same reason, $wday can not reliably checked in script filters. Thanks to Alain Thivillon for reporting the bug and providing an excellent analysis, which essentiellay was exactly this fix here. closes https://github.com/rsyslog/rsyslog/issues/4670 * 2021-09-07: core/queue bugfix: potential misadressing when queue discarded messages When a discard mark was set, the queue was very busy and discarded messages, a NULL pointer access could happen. Depending on circumstances, several problems could occur, including a SEGFAULT. This is now fixed. closes: https://github.com/rsyslog/rsyslog/issues/4437 * 2021-09-07: imdiga bugfix: iOverallQueueSize calculation could be incorrect This issue only affects testbench and rsyslog development debugging. The active messages counter, used for synchronizing test steps, went wrong when the queue discarded messages on it's consumer thread. Now fixed. * 2021-09-06: gnutls driver: SAN priority did not work correctly on server side PrioritizeSAN was not propagated when accepting a new connection, this is now fixed. Thanks to Attila Lakatos for the patch. * 2021-08-24: config: implement script-equavalent for $PrivDrop* statements closes https://github.com/rsyslog/rsyslog/issues/891 ==== suse-module-tools ==== Version update (16.0.11 -> 16.0.13) - Update to version 16.0.13: * fixup "rpm-script: fix bad exit status in OpenQA (bsc#1191922)" - Update to version 16.0.12: * rpm-script: fix bad exit status in OpenQA (bsc#1191922) * cert-script: Deal with existing $cert.delete file (bsc#1191804). * cert-script: Ignore kernel keyring for kernel certificates (bsc#1191480). * cert-script: Only print mokutil output in verbose mode. ==== systemd-rpm-macros ==== - Use %{load:} instead of %{?load:}: fix build with RPM 4.17. ==== tigervnc ==== Subpackages: libXvnc1 xorg-x11-Xvnc xorg-x11-Xvnc-module - Not using System crypto policies for <= sle15-sp3 (boo#1191394) ==== transactional-update ==== Version update (3.5.6 -> 3.6.0) Subpackages: dracut-transactional-update libtukit0 transactional-update-zypp-config tukit - Version 3.6.0 - Simplify mount hierarchy by just using a single slave bind mount as the root of the update environment; this may avoid the error messages of failed unmounts May fix [boo#1191945] - Version 3.5.7 Various fixes affecting Salt support: - t-u: Don't squash stderr messages into stdout - t-u: Correctly handle case when the snapshot has been deleted due to using --drop-if-no-change: Don't show reboot messages and avoid an awk error message [bsc#1191475] - tukit: Make inotify handler less sensitive / ignore more directories [bsc#1191475] ==== u-boot-rpiarm64 ==== Subpackages: u-boot-rpiarm64-doc Patch queue updated from https://github.com/openSUSE/u-boot.git tumbleweed-2021.10 * Patches added: 0015-Enable-EFI-and-ISO-partitions-suppo.patch - boo#1191966 0016-Revert-video-backlight-fix-pwm-s-du.patch - boo#1187573 ==== virt-manager ==== Subpackages: virt-install virt-manager-common - Add dependency in spec file for python3-gobject-Gdk (bsc#1191705) virt-manager.spec - bsc#1191358 - The Virtual Machine Manager shows disconnected after rebooting virtual machine in Xen mode in SLES15 SP3. virtman-init-viewer-on-reboot.patch ==== yast2-country ==== Version update (4.4.6 -> 4.4.7) Subpackages: yast2-country-data - Use official China timezone Asia/Shanghai (bsc#1187857) - 4.4.7

1 0

DE0-Nano-SoC boot fails on 15.3
by Christian Gross 29 Oct '21

29 Oct '21

Hi all, I tested the U-Boot fix for several versions and it works perfect for all of them. Version | Build | U.Boot | Kernel | Boot Leap 15.1 | 2019.05.17-Snapshot1.105 | 2019.01 | 4.12.14 | OK Leap 15.2 | 2020.07.08-Build1.276 | 2020.01 | 5.3.18 | OK Leap 15.3 | 2021.05.31-Build8.7 | 2021.01 | 5.3.18 | freezing Tumbleweed | 2021.09.21-Snapshot20211008 | 2021.10 | 5.14.9 | OK Tumbleweed | 2021.10.20-Snapshot20211023 | 2021.10 | 5.14.11-2 | OK But it looks like there is an additional problem with Leap 15.3 which freezes at boot. Booting `openSUSE Leap 15.3' Loading Linux 5.3.18-59.25-default ... Loading initial ramdisk ... EFI stub: Entering in SVC mode with MMU enabled EFI stub: Booting Linux Kernel... EFI stub: Using DTB from configuration table EFI stub: Exiting boot services and installing virtual address map... Deasserting all peripheral resets [freeze] I also upgraded a fixed Leap 15.2 to 15.3 and the same thing happens (Only without the "Deasserting all peripheral resets" message) for kernel 5.3.18-59.25-default. The older kernels 5.3.18-lp152.95 and 5.3.18-lp152.92 are booting without any problem. Any ideas how to debug this further? Regards, Christian

2 2

New Arm Tumbleweed snapshot 20211023 released!
by Guillaume Gardet 26 Oct '21

26 Oct '21

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: 389-ds ImageMagick (7.1.0.8 -> 7.1.0.10) Mesa (21.2.3 -> 21.2.4) Mesa-drivers (21.2.3 -> 21.2.4) MozillaFirefox (92.0.1 -> 93.0) acpid (2.0.32 -> 2.0.33) adwaita-qt (1.3.1 -> 1.4.0) akonadi-calendar (21.08.1 -> 21.08.2) akonadi-calendar-tools (21.08.1 -> 21.08.2) akonadi-contact (21.08.1 -> 21.08.2) akonadi-import-wizard (21.08.1 -> 21.08.2) akonadi-mime (21.08.1 -> 21.08.2) akonadi-notes (21.08.1 -> 21.08.2) akonadi-search (21.08.1 -> 21.08.2) akonadi-server (21.08.1 -> 21.08.2) akregator (21.08.1 -> 21.08.2) alsa-utils analitza (21.08.1 -> 21.08.2) apache2-mod_php7 apparmor ark (21.08.1 -> 21.08.2) at atkmm1_6 attica-qt5 (5.86.0 -> 5.87.0) audacity (3.0.4 -> 3.0.5) audit-secondary avahi avahi-glib2 baloo5 (5.86.0 -> 5.87.0) baloo5-widgets (21.08.1 -> 21.08.2) bash-completion bind blinken (21.08.1 -> 21.08.2) blosc (1.21.0 -> 1.21.1) bluedevil5 (5.22.5 -> 5.23.1) bluez-qt (5.86.0 -> 5.87.0) boost-base boost-extra bovo (21.08.1 -> 21.08.2) breeze (5.22.5 -> 5.23.1) breeze-gtk (5.22.5 -> 5.23.1) breeze5-icons (5.86.0 -> 5.87.0) brltty (6.3 -> 6.4) busybox ca-certificates (2+git20210723.27a0476 -> 2+git20211004.3efbea9) calendarsupport (21.08.1 -> 21.08.2) cervisia (21.08.1 -> 21.08.2) checkmedia (5.4 -> 6.1) chrony codec2 compat-usrmerge crash (7.2.9_k5.14.9_1 -> 7.2.9_k5.14.11_2) ddclient discover (5.22.5 -> 5.23.1) dolphin (21.08.1 -> 21.08.2) dracut (055+suse.119.g6c4187af -> 055+suse.129.g7d8c3ce3) dragonplayer (21.08.1 -> 21.08.2) drbd-utils (9.18.0 -> 9.19.0) drkonqi5 (5.22.5 -> 5.23.1) e2fsprogs emacs-w3m (1.4.632+396+g051dba16 -> 1.4.632+501+gc088fe62) eventviews (21.08.1 -> 21.08.2) evince (40.4 -> 41.2) fetchmail (6.4.21 -> 6.4.22) ffmpegthumbs (21.08.1 -> 21.08.2) file (5.40 -> 5.41) firewalld (1.0.0 -> 1.0.1) flatpak (1.11.3 -> 1.12.1) frameworkintegration (5.86.0 -> 5.87.0) freerdp fwupd (1.5.8 -> 1.6.2) gc (8.0.4 -> 8.0.6) gcr (3.40.0 -> 3.41.0) gdm gegl (0.4.30 -> 0.4.32) gimp (2.10.24 -> 2.10.28) git (2.33.0 -> 2.33.1) gjs glibc glibmm2_4 (2.66.1 -> 2.66.2) glusterfs (9.1 -> 9.3) gnome-clocks (40.0 -> 41.0) gnome-online-accounts (3.40.0 -> 3.40.1) gnome-shell gnome-shell-extensions gpm gpsd (3.23 -> 3.23.1) grantleetheme (21.08.1 -> 21.08.2) graphviz (2.48.0 -> 2.49.1) graphviz-addons (2.48.0 -> 2.49.1) grilo (0.3.13 -> 0.3.14) grilo-plugins (0.3.13 -> 0.3.14) gwenview5 (21.08.1 -> 21.08.2) hwdata (0.351 -> 0.352) hwinfo (21.76 -> 21.77) hylafax+ (7.0.3 -> 7.0.4) incidenceeditor (21.08.1 -> 21.08.2) inotify-tools (3.21.9.5 -> 3.21.9.6) inxi (3.3.03 -> 3.3.07) iputils irda iso-codes (4.6.0 -> 4.7.0) jack (1.9.18 -> 1.9.19) java-11-openjdk (11.0.12.0 -> 11.0.13.0) jfsutils juk (21.08.1 -> 21.08.2) k3b (21.08.1 -> 21.08.2) kaccounts-integration (21.08.1 -> 21.08.2) kaccounts-providers (21.08.1 -> 21.08.2) kactivities-stats (5.86.0 -> 5.87.0) kactivities5 (5.86.0 -> 5.87.0) kactivitymanagerd (5.22.5 -> 5.23.1) kaddressbook (21.08.1 -> 21.08.2) kalarmcal (21.08.1 -> 21.08.2) kalgebra (21.08.1 -> 21.08.2) kamera (21.08.1 -> 21.08.2) kanagram (21.08.1 -> 21.08.2) kapptemplate (21.08.1 -> 21.08.2) karchive (5.86.0 -> 5.87.0) kate (21.08.1 -> 21.08.2) katomic (21.08.1 -> 21.08.2) kauth (5.86.0 -> 5.87.0) kbd kblackbox (21.08.1 -> 21.08.2) kblocks (21.08.1 -> 21.08.2) kbookmarks (5.86.0 -> 5.87.0) kbounce (21.08.1 -> 21.08.2) kbreakout (21.08.1 -> 21.08.2) kbruch (21.08.1 -> 21.08.2) kcachegrind (21.08.1 -> 21.08.2) kcalc (21.08.1 -> 21.08.2) kcalendarcore (5.86.0 -> 5.87.0) kcalutils (21.08.1 -> 21.08.2) kcharselect (21.08.1 -> 21.08.2) kcm_sddm (5.22.5 -> 5.23.1) kcmutils (5.86.0 -> 5.87.0) kcodecs (5.86.0 -> 5.87.0) kcolorchooser (21.08.1 -> 21.08.2) kcompletion (5.86.0 -> 5.87.0) kconfig (5.86.0 -> 5.87.0) kconfigwidgets (5.86.0 -> 5.87.0) kcontacts (5.86.0 -> 5.87.0) kcoreaddons (5.86.0 -> 5.87.0) kcrash (5.86.0 -> 5.87.0) kcron (21.08.1 -> 21.08.2) kdav (5.86.0 -> 5.87.0) kdbusaddons (5.86.0 -> 5.87.0) kde-cli-tools5 (5.22.5 -> 5.23.1) kde-gtk-config5 (5.22.5 -> 5.23.1) kde-print-manager (21.08.1 -> 21.08.2) kdeclarative (5.86.0 -> 5.87.0) kdeconnect-kde (21.08.1 -> 21.08.2) kded (5.86.0 -> 5.87.0) kdeedu-data (21.08.1 -> 21.08.2) kdegraphics-thumbnailers (21.08.1 -> 21.08.2) kdelibs4support (5.86.0 -> 5.87.0) kdenetwork-filesharing (21.08.1 -> 21.08.2) kdepim-addons (21.08.1 -> 21.08.2) kdepim-runtime (21.08.1 -> 21.08.2) kdesu (5.86.0 -> 5.87.0) kdf (21.08.1 -> 21.08.2) kdialog (21.08.1 -> 21.08.2) kdiamond (21.08.1 -> 21.08.2) kdnssd-framework (5.86.0 -> 5.87.0) kdoctools (5.86.0 -> 5.87.0) kemoticons (5.86.0 -> 5.87.0) kernel-64kb (5.14.9 -> 5.14.11) kernel-source (5.14.9 -> 5.14.11) kfilemetadata5 (5.86.0 -> 5.87.0) kgamma5 (5.22.5 -> 5.23.1) kgeography (21.08.1 -> 21.08.2) kget (21.08.1 -> 21.08.2) kglobalaccel (5.86.0 -> 5.87.0) kgoldrunner (21.08.1 -> 21.08.2) kguiaddons (5.86.0 -> 5.87.0) khangman (21.08.1 -> 21.08.2) khelpcenter5 (21.08.1 -> 21.08.2) kholidays (5.86.0 -> 5.87.0) khotkeys5 (5.22.5 -> 5.23.1) khtml (5.86.0 -> 5.87.0) ki18n (5.86.0 -> 5.87.0) kiconthemes (5.86.0 -> 5.87.0) kidentitymanagement (21.08.1 -> 21.08.2) kidletime (5.86.0 -> 5.87.0) kig (21.08.1 -> 21.08.2) kimageformats (5.86.0 -> 5.87.0) kimap (21.08.1 -> 21.08.2) kinfocenter5 (5.22.5 -> 5.23.1) kinit (5.86.0 -> 5.87.0) kio (5.86.0 -> 5.87.0) kio-extras5 (21.08.1 -> 21.08.2) kio_audiocd (21.08.1 -> 21.08.2) kipi-plugins (21.08.1 -> 21.08.2) kirigami2 (5.86.0 -> 5.87.0) kiriki (21.08.1 -> 21.08.2) kitemmodels (5.86.0 -> 5.87.0) kitemviews (5.86.0 -> 5.87.0) kiten (21.08.1 -> 21.08.2) kitinerary (21.08.1 -> 21.08.2) kjobwidgets (5.86.0 -> 5.87.0) kjs (5.86.0 -> 5.87.0) kjumpingcube (21.08.1 -> 21.08.2) kldap (21.08.1 -> 21.08.2) kleopatra (21.08.1 -> 21.08.2) klines (21.08.1 -> 21.08.2) kmag (21.08.1 -> 21.08.2) kmahjongg (21.08.1 -> 21.08.2) kmail (21.08.1 -> 21.08.2) kmail-account-wizard (21.08.1 -> 21.08.2) kmailtransport (21.08.1 -> 21.08.2) kmbox (21.08.1 -> 21.08.2) kmenuedit5 (5.22.5 -> 5.23.1) kmime (21.08.1 -> 21.08.2) kmines (21.08.1 -> 21.08.2) kmousetool (21.08.1 -> 21.08.2) kmouth (21.08.1 -> 21.08.2) kmplot (21.08.1 -> 21.08.2) knavalbattle (21.08.1 -> 21.08.2) knetwalk (21.08.1 -> 21.08.2) knewstuff (5.86.0 -> 5.87.0) knotes (21.08.1 -> 21.08.2) knotifications (5.86.0 -> 5.87.0) knotifyconfig (5.86.0 -> 5.87.0) kolf (21.08.1 -> 21.08.2) kollision (21.08.1 -> 21.08.2) kolourpaint (21.08.1 -> 21.08.2) kompare (21.08.1 -> 21.08.2) konquest (21.08.1 -> 21.08.2) konsole (21.08.1 -> 21.08.2) kontact (21.08.1 -> 21.08.2) kontactinterface (21.08.1 -> 21.08.2) konversation (21.08.1 -> 21.08.2) kopete (21.08.1 -> 21.08.2) korganizer (21.08.1 -> 21.08.2) kpackage (5.86.0 -> 5.87.0) kparts (5.86.0 -> 5.87.0) kpat (21.08.1 -> 21.08.2) kpeople5 (5.86.0 -> 5.87.0) kpimtextedit (21.08.1 -> 21.08.2) kpkpass (21.08.1 -> 21.08.2) kplotting (5.86.0 -> 5.87.0) kpty (5.86.0 -> 5.87.0) kqtquickcharts (21.08.1 -> 21.08.2) kquickcharts (5.86.0 -> 5.87.0) krdc (21.08.1 -> 21.08.2) kreversi (21.08.1 -> 21.08.2) krfb (21.08.1 -> 21.08.2) kross (5.86.0 -> 5.87.0) kruler (21.08.1 -> 21.08.2) kscreen5 (5.22.5 -> 5.23.1) kscreenlocker (5.22.5 -> 5.23.1) kservice (5.86.0 -> 5.87.0) kshisen (21.08.1 -> 21.08.2) ksirk (21.08.1 -> 21.08.2) ksmtp (21.08.1 -> 21.08.2) kspaceduel (21.08.1 -> 21.08.2) ksquares (21.08.1 -> 21.08.2) ksshaskpass5 (5.22.5 -> 5.23.1) ksudoku (21.08.1 -> 21.08.2) ksystemlog (21.08.1 -> 21.08.2) ksystemstats5 (5.22.5 -> 5.23.1) kteatime (21.08.1 -> 21.08.2) ktexteditor (5.86.0 -> 5.87.0) ktextwidgets (5.86.0 -> 5.87.0) ktimer (21.08.1 -> 21.08.2) ktnef (21.08.1 -> 21.08.2) ktouch (21.08.1 -> 21.08.2) kturtle (21.08.1 -> 21.08.2) kubrick (21.08.1 -> 21.08.2) kunitconversion (5.86.0 -> 5.87.0) kwallet (5.86.0 -> 5.87.0) kwalletmanager5 (21.08.1 -> 21.08.2) kwayland (5.86.0 -> 5.87.0) kwayland-integration (5.22.5 -> 5.23.1) kwayland-server (5.22.5 -> 5.23.1) kwidgetsaddons (5.86.0 -> 5.87.0) kwin5 (5.22.5 -> 5.23.1) kwindowsystem (5.86.0 -> 5.87.0) kwordquiz (21.08.1 -> 21.08.2) kwrited5 (5.22.5 -> 5.23.1) kxmlgui (5.86.0 -> 5.87.0) layer-shell-qt (5.22.5 -> 5.23.1) libHX (3.26 -> 4.2) libKF5ModemManagerQt (5.86.0 -> 5.87.0) libKF5NetworkManagerQt (5.86.0 -> 5.87.0) libaom (3.1.2 -> 3.2.0) libapparmor libcap (2.51 -> 2.59) libcdio libdlm (4.0.9 -> 4.1.0) libglvnd libgphoto2 libgravatar (21.08.1 -> 21.08.2) libinput (1.19.1 -> 1.19.2) libkcddb (21.08.1 -> 21.08.2) libkcompactdisc (21.08.1 -> 21.08.2) libkdcraw (21.08.1 -> 21.08.2) libkdecoration2 (5.22.5 -> 5.23.1) libkdegames (21.08.1 -> 21.08.2) libkdepim (21.08.1 -> 21.08.2) libkeduvocdocument (21.08.1 -> 21.08.2) libkexiv2 (21.08.1 -> 21.08.2) libkgapi (21.08.1 -> 21.08.2) libkipi (21.08.1 -> 21.08.2) libkleo (21.08.1 -> 21.08.2) libkmahjongg (21.08.1 -> 21.08.2) libkomparediff2 (21.08.1 -> 21.08.2) libksane (21.08.1 -> 21.08.2) libkscreen2 (5.22.5 -> 5.23.1) libksieve (21.08.1 -> 21.08.2) libksysguard5 (5.22.5 -> 5.23.1) libktorrent (21.08.1 -> 21.08.2) libqb (2.0.2+20201203.def947e -> 2.0.3+20210303.404adbc) libqt5-qttranslations (5.15.2+kde20 -> 5.15.2+kde22) libreoffice (7.1.5.2 -> 7.2.2.2) librsvg (2.52.0 -> 2.52.2) libsamplerate (0.2.1 -> 0.2.2) libstorage-ng (4.4.43 -> 4.4.51) libteam liburing (2.0 -> 2.1) libvirt (7.7.0 -> 7.8.0) libwebp (1.2.0 -> 1.2.1) libyui (4.2.16 -> 4.2.19) libyui-ncurses (4.2.16 -> 4.2.19) libyui-ncurses-pkg (4.2.16 -> 4.2.19) libyui-qt (4.2.16 -> 4.2.19) libyui-qt-graph (4.2.16 -> 4.2.19) libyui-qt-pkg (4.2.16 -> 4.2.19) libzypp (17.28.4 -> 17.28.6) libzypp-plugin-appdata lightdm lirc lokalize (21.08.1 -> 21.08.2) lskat (21.08.1 -> 21.08.2) luajit mailcommon (21.08.1 -> 21.08.2) mailimporter (21.08.1 -> 21.08.2) mailutils man mariadb mariadb-connector-c (3.2.3 -> 3.2.4) mbox-importer (21.08.1 -> 21.08.2) mc (4.8.26 -> 4.8.27) mdadm messagelib (21.08.1 -> 21.08.2) milou5 (5.22.5 -> 5.23.1) mlocate mobipocket (21.08.1 -> 21.08.2) mpg123 (1.29.0 -> 1.29.1) mutter nano (5.8 -> 5.9) nbd (3.21 -> 3.22) ncurses (6.2.20210911 -> 6.2.20211002) ndctl ntp numad nvme-cli okular (21.08.1 -> 21.08.2) open-iscsi open-vm-tools (11.3.0 -> 11.3.5) openssh (8.4p1 -> 8.8p1) openssh-askpass-gnome (8.4p1 -> 8.8p1) oxygen5 (5.22.5 -> 5.23.1) pam-config (1.4 -> 1.5) pangomm1_4 parley (21.08.1 -> 21.08.2) patterns-gnome pcsc-lite (1.9.3 -> 1.9.4) perl-Cpanel-JSON-XS (4.26 -> 4.27) perl-Crypt-OpenSSL-RSA (0.31 -> 0.32) perl-Image-ExifTool phodav php7 pidgin pim-data-exporter (21.08.1 -> 21.08.2) pim-sieve-editor (21.08.1 -> 21.08.2) pimcommon (21.08.1 -> 21.08.2) pinfo pipewire (0.3.37 -> 0.3.38) plasma-browser-integration (5.22.5 -> 5.23.1) plasma-framework (5.86.0 -> 5.87.0) plasma-nm5 (5.22.5 -> 5.23.1) plasma5-addons (5.22.5 -> 5.23.1) plasma5-desktop (5.22.5 -> 5.23.1) plasma5-disks (5.22.5 -> 5.23.1) plasma5-integration (5.22.5 -> 5.23.1) plasma5-openSUSE plasma5-pa (5.22.5 -> 5.23.1) plasma5-systemmonitor (5.22.5 -> 5.23.1) plasma5-thunderbolt (5.22.5 -> 5.23.1) plasma5-workspace (5.22.5 -> 5.23.1) pmdk (1.11.0 -> 1.11.1) polkit-default-privs (1550+20210818.b0c41fd -> 1550+20211008.9751669) polkit-kde-agent-5 (5.22.5 -> 5.23.1) poppler (21.08.0 -> 21.10.0) poppler-qt5 (21.08.0 -> 21.10.0) postfix postgresql (13 -> 14) postgresql14 (13.4 -> 14.0) powerdevil5 (5.22.5 -> 5.23.1) prison-qt5 (5.86.0 -> 5.87.0) privoxy publicsuffix (20210928 -> 20211016) pulseaudio purpose (5.86.0 -> 5.87.0) python-Jinja2 (3.0.1 -> 3.0.2) python-alembic (1.6.5 -> 1.7.4) python-apipkg (1.5 -> 2.1.0) python-cachetools (4.2.2 -> 4.2.4) python-click (8.0.1 -> 8.0.3) python-decorator (5.0.9 -> 5.1.0) python-distro python-ecdsa (0.16.1 -> 0.17.0) python-greenlet (1.1.0 -> 1.1.2) python-idna (3.2 -> 3.3) python-libvirt-python (7.7.0 -> 7.8.0) python-more-itertools (8.8.0 -> 8.10.0) python-networkx (2.6.1 -> 2.6.3) python-outcome (1.0.1 -> 1.1.0) python-psycopg2 (2.8.6 -> 2.9.1) python-pycryptodome (3.10.1 -> 3.11.0) python-pygit2 (1.3.0 -> 1.7.0) python-pygraphviz (1.6 -> 1.7) python-pytz (2021.1 -> 2021.3) python-qt5 (5.15.4 -> 5.15.5) python-urwid python-zipp (3.5.0 -> 3.6.0) python-zope.hookable (5.0.1 -> 5.1.0) python-zope.i18nmessageid python-zope.interface qemu qqc2-desktop-style (5.86.0 -> 5.87.0) raspberrypi-firmware (2021.03.10 -> 2021.09.30) raspberrypi-firmware-config (2021.03.10 -> 2021.09.30) raspberrypi-firmware-dt (2021.03.15 -> 2021.09.17) rdma-core (36.0 -> 37.1) remmina (1.4.20 -> 1.4.21) rsyslog (8.2106.0 -> 8.2108.0) rubygem-bootsnap (1.7.7 -> 1.9.1) rubygem-ffi (1.15.3 -> 1.15.4) rubygem-marcel (1.0.1 -> 1.0.2) rubygem-nokogiri (1.12.3 -> 1.12.5) rubygem-parallel (1.20.1 -> 1.21.0) rubygem-puma (5.4.0 -> 5.5.0) rubygem-rubocop (1.19.1 -> 1.22.1) rubygem-rubocop-ast (1.11.0 -> 1.12.0) rubygem-spring (2.1.1 -> 3.0.0) rubygem-unf_ext (0.0.7.7 -> 0.0.8) rubygem-unicode-display_width (2.0.0 -> 2.1.0) rubygem-yast-rake (0.2.41 -> 0.2.42) salt signon-kwallet-extension (21.08.1 -> 21.08.2) skanlite (21.08.1 -> 21.08.2) skopeo (1.2.3 -> 1.5.0) solid (5.86.0 -> 5.87.0) sonnet (5.86.0 -> 5.87.0) spectacle (21.08.1 -> 21.08.2) sscep (0.9.1 -> 0.10.0) subversion syndication (5.86.0 -> 5.87.0) syntax-highlighting (5.86.0 -> 5.87.0) systemd (249.4 -> 249.5) systemd-presets-common-SUSE systemsettings5 (5.22.5 -> 5.23.1) thai-fonts (0.7.2 -> 0.7.3) threadweaver (5.86.0 -> 5.87.0) timezone (2021c -> 2021d) timezone-java (2021c -> 2021d) tlp totem (3.38.1 -> 3.38.2) tumbler unbound virt-manager vmaf (2.2.0 -> 2.3.0) webkit2gtk3 (2.34.0 -> 2.34.1) webkit2gtk3-soup2 (2.34.0 -> 2.34.1) wireless-regdb (20210421 -> 20210828) xdg-desktop-portal (1.10.0 -> 1.10.1) xdg-desktop-portal-kde (5.22.5 -> 5.23.1) xdg-user-dirs xf86-input-libinput xfce4-whiskermenu-plugin (2.6.0 -> 2.6.1) xfsprogs xkeyboard-config (2.33 -> 2.34) xlockmore (5.66 -> 5.67) xwayland yarn (1.22.11 -> 1.22.13) yast2-installation (4.4.19 -> 4.4.20) yast2-network (4.4.26 -> 4.4.27) yast2-pkg-bindings (4.4.2 -> 4.4.3) yast2-python-bindings (4.4.1 -> 4.4.2) yast2-storage-ng (4.4.8 -> 4.4.11) yast2-theme (4.4.3 -> 4.4.4) yast2-trans (84.87.20210914.a5d6b81b64 -> 84.87.20210929.6d3a97ea50) yast2-users (4.4.6 -> 4.4.7) z3 (4.8.11 -> 4.8.12) zypper (1.14.49 -> 1.14.50) === Details === ==== 389-ds ==== Subpackages: lib389 libsvrcore0 - Add missing dependency on iproute2 for lib389 ==== ImageMagick ==== Version update (7.1.0.8 -> 7.1.0.10) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - update to 7.1.0.10: * improved algorithm for automatic calculation of pointsize for caption and labels. * support -auto-orient option in the identify utlity. - previous version updates fixed also: CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600, CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323, CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640, CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645, CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650, CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505, CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975, CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133, CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295, CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300, CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305, CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310, CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981, CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709, CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948, CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397, CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665, CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560, CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754, CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759, CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764, CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769, CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774, CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311, CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244, CVE-2021-20246 (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203, bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007, bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996, bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619, bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365, bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317, bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501, bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100, bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110, bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538, bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554, bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669, bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212, bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785, bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103, bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240, bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278, bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315, bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336, bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347, bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624, bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325, bsc#1182337) - version update to 7.1.0.9: * Squash a dump truck load of VisualStudio compiler warnings. * improved algorithm for automatic calculation of word breaks and pointsize for caption and labels. * improve wrapping between words and within words (reference https://github.com/ImageMagick/ImageMagick/discussions/4227) - added patches disable Contrast test for i586 on SLE 15 + ImageMagick-filter.t-disable-Contrast.patch ==== Mesa ==== Version update (21.2.3 -> 21.2.4) Subpackages: Mesa-dri-devel Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - update to 21.2.4 * fourth bugfix release * 300 fixes from the new r300 maintainer! Additionally, panfrost, lots of crocus, some freedreno, intel, radv, core meas, gallivum, anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes. - supersedes U_gallivm-add-new-wrapper-around-Module.patch, U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch - u_fix-build-on-ppc64le.patch * fixes build on ppc64le (boo#1191569) ==== Mesa-drivers ==== Version update (21.2.3 -> 21.2.4) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libvdpau_r300 libvdpau_r600 libvdpau_radeonsi libvulkan_radeon - update to 21.2.4 * fourth bugfix release * 300 fixes from the new r300 maintainer! Additionally, panfrost, lots of crocus, some freedreno, intel, radv, core meas, gallivum, anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes. - supersedes U_gallivm-add-new-wrapper-around-Module.patch, U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch - u_fix-build-on-ppc64le.patch * fixes build on ppc64le (boo#1191569) ==== MozillaFirefox ==== Version update (92.0.1 -> 93.0) Subpackages: MozillaFirefox-translations-common - Add patch to fix build on aarch64 - bmo#1729124 * mozilla-bmo1729124.patch - Mozilla Firefox 93.0 * supports the new AVIF image format * PDF viewer now supports filling more forms (XFA-based forms) * now blocks downloads that rely on insecure connections, protecting against potentially malicious or unsafe downloads * Improved web compatibility for privacy protections with SmartBlock 3.0 * Introducing a new referrer tracking protection in Strict Tracking Protection and Private Browsing * TLS ciphersuites that use 3DES have been disabled. Such ciphersuites can only be enabled when deprecated versions of TLS are also enabled * The download panel now follows the Firefox visual styles MFSA 2021-43 (bsc#1191332) * CVE-2021-38496 (bmo#1725335) Use-after-free in MessageTask * CVE-2021-38497 (bmo#1726621) Validation message could have been overlaid on another origin * CVE-2021-38498 (bmo#1729642) Use-after-free of nsLanguageAtomService object * CVE-2021-32810 (bmo#1729813) https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmh…) Data race in crossbeam-deque * CVE-2021-38500 (bmo#1725854, bmo#1728321) Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15, and Firefox ESR 91.2 * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176) Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2 * CVE-2021-38499 (bmo#1667102, bmo#1723170, bmo#1725356, bmo#1727364) Memory safety bugs fixed in Firefox 93 - removed obsolete mozilla-bmo1708709.patch - require NSS >= 3.70 - allow to override wayland detection by defining MOZ_ENABLE_WAYLAND explicitely as 0 or 1 - fix aarch64 build by updating constraints - add mozilla-bmo1725828.patch to fix widevine (bsc#1190842) - add mozilla-bmo531915.patch to fix build for i586 ==== acpid ==== Version update (2.0.32 -> 2.0.33) - update to 2.0.33: - Detect newer GNOME power manager. - openrc-shutdown: Set shutdown time to 'now'. - Attempt to open input layer devices whose permissions have changed. - Comments added. ==== adwaita-qt ==== Version update (1.3.1 -> 1.4.0) Subpackages: adwaita-qt5 libadwaitaqt1 - Update to version 1.4.0 + Base colors are now parsed from stylesheets provided by GTK 4 + Added variants for HighContrast and HighContrastInverse ==== akonadi-calendar ==== Version update (21.08.1 -> 21.08.2) Subpackages: akonadi-calendar-lang akonadi-plugin-calendar libKF5AkonadiCalendar5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== akonadi-calendar-tools ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== akonadi-contact ==== Version update (21.08.1 -> 21.08.2) Subpackages: akonadi-plugin-contacts libKF5AkonadiContact5 libKF5ContactEditor5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== akonadi-import-wizard ==== Version update (21.08.1 -> 21.08.2) Subpackages: libKPimImportWizard5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== akonadi-mime ==== Version update (21.08.1 -> 21.08.2) Subpackages: akonadi-plugin-mime libKF5AkonadiMime5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== akonadi-notes ==== Version update (21.08.1 -> 21.08.2) Subpackages: akonadi-notes-lang libKF5AkonadiNotes5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== akonadi-search ==== Version update (21.08.1 -> 21.08.2) Subpackages: libKF5AkonadiSearch - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== akonadi-server ==== Version update (21.08.1 -> 21.08.2) Subpackages: libKF5AkonadiAgentBase5 libKF5AkonadiCore5 libKF5AkonadiPrivate5 libKF5AkonadiWidgets5 libKF5AkonadiXml5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== akregator ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== alsa-utils ==== - Drop ProtectClock hardening, can cause issues if other device acceess is needed ==== analitza ==== Version update (21.08.1 -> 21.08.2) Subpackages: libAnalitza5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== apache2-mod_php7 ==== - previous version updates fixes also: CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071, CVE-2021-21702,CVE-2021-21704,CVE-2021-21705 bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706, bsc#1182049,bsc#1188035,bsc#1188037 ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-profiles apparmor-utils pam_apparmor python3-apparmor - add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532) ==== ark ==== Version update (21.08.1 -> 21.08.2) Subpackages: ark-lang libkerfuffle21 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - Changes since 21.08.1: * fix: Dolphin doesn't fully quit after Compress from context menu (kde#441813) ==== at ==== - Added hardening to systemd service(s). Added patch(es): * harden_atd.service.patch Modified: * atd.service ==== atkmm1_6 ==== - turn off doc build, it does not work with new doxygen ==== attica-qt5 ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5Attica5 - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Do not mark jobs that have been aborted as errored * Add Gitlab CI configuration * Ensure categories.xml is only fetched once in parallel * Do not start basejobs twice * Add CI configuration file - Drop upstream patch: * 0001-Ensure-categories.xml-is-only-fetched-once-in-parall.patch - Add upstream patch to avoid unnecessary network traffic: * 0001-Ensure-categories.xml-is-only-fetched-once-in-parall.patch ==== audacity ==== Version update (3.0.4 -> 3.0.5) Subpackages: audacity-lang - Update to release 3.0.5. - Upstream changes: * Fix bug 1571. Convert to C locale decimal point for stable parsing. * Download manual from GitHub. * Set release version to 3.0.5 in preparation of hotfix. ==== audit-secondary ==== Subpackages: audit python3-audit system-group-audit - Add CONFIG parameter to %sysusers_generate_pre - Create separate service for augenrules (bsc#1191614, bsc#1181400) * add create-augenrules-service.patch Remove ReadWritePaths=/etc/audit from auditd.service, also removes augenrules call from ExecStartPost. Create augenrules.service with the ReadWritePaths directive above. This makes /etc/audit only accessible by augenrules.service and let auditd.service (and daemon) to be sandboxed again. - Update audit-secondary.spec to accomodate the new service file. ==== avahi ==== Subpackages: libavahi-client3 libavahi-common3 libavahi-core7 - Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd (boo#1191750). - Remove obsolete translation-update-upstream support (jsc#SLE-21105). ==== avahi-glib2 ==== Subpackages: libavahi-glib1 libavahi-gobject0 libavahi-ui-gtk3-0 - Remove obsolete translation-update-upstream support (jsc#SLE-21105). ==== baloo5 ==== Version update (5.86.0 -> 5.87.0) Subpackages: baloo5-file baloo5-file-lang baloo5-imports baloo5-kioslaves baloo5-kioslaves-lang baloo5-tools baloo5-tools-lang libKF5Baloo5 libKF5BalooEngine5 libKF5BalooEngine5-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Native Gitlab CI configuration ==== baloo5-widgets ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== bash-completion ==== - Add patch boo1190929-9af4afd0.patch for boo#1190929 add support for compeletion modinfo completion recognize .ko.zst as well as .ko.bz2 ==== bind ==== Subpackages: bind-doc bind-utils python3-bind - Just specifying "geoip-directory;" in /etc/named.conf is not correct syntax. Must either put a path name or the string "none". Appended the work "none" to make it correct syntax. - Added build requirement of libmaxminddb to the spec file Also added an entry for "geoip-directory" with the default path to /etc/named.conf. [bsc#1190884, vendor-files/config/named.conf, bind.spec] ==== blinken ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== blosc ==== Version update (1.21.0 -> 1.21.1) - Update to 1.21.1 * Fix pthread on ppc64le. * Updates in internal codecs, important performance improvements ==== bluedevil5 ==== Version update (5.22.5 -> 5.23.1) Subpackages: bluedevil5-lang - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - Changes since 5.22.90: * Remove applet list item animations - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * Confirm deleting a bluetooth device pairing. * Add keywords to bluetooth KCM * Explicitly set KDE_COMPILERSETTINGS_LEVEL * Let the user choose Bluetooth status on login (kde#440493) * [applet] Show the text "Connected" for connected devices (kde#440423) * [applet] Give FullRepresentation an implicit size (kde#439981) * Embed JSON metadata in KIOSlaves * Remove obsolete .protocol files * Convert protocol files to JSON * Use version-less qt DBus macros * Use ellipses instead of triple period ==== bluez-qt ==== Version update (5.86.0 -> 5.87.0) Subpackages: bluez-qt-imports bluez-qt-udev libKF5BluezQt6 - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== boost-base ==== Subpackages: boost-license1_77_0 libboost_date_time1_77_0 libboost_filesystem1_77_0 libboost_iostreams1_77_0 libboost_locale1_77_0 libboost_program_options1_77_0 libboost_thread1_77_0 - make boost-json-devel require boost-container-devel (bsc#1191822) ==== boost-extra ==== - make boost-json-devel require boost-container-devel (bsc#1191822) ==== bovo ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== breeze ==== Version update (5.22.5 -> 5.23.1) Subpackages: breeze5-cursors breeze5-decoration breeze5-style breeze5-style-lang libbreezecommon5-5 - Add patch to fix the version number: * 0001-Update-version-number-for-5.23.1.patch - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - Changes since 5.23.0: * Don't set alignment for spinboxes (kde#443769) - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - Changes since 5.22.90: * kstyle: Limit what kinds of QPushButtons can use autoDefault * Revert accidental revert of f763f27ebf3bbb21235ab3df0f7b9ef035cc71b5 * kstyle: Clean up tab painting and tweak tab highlight * Don't reserve room for spinbox buttons if buttons disabled (kde#440718) * kstyle: use checked color consistent with button down color for checkboxes and radiobuttons * kstyle: visible neutral highlight on not hovered checkboxes and radio buttons * KTitleWidget: Make background transparent again (kde#442860) * Revert "kstyle: make spinboxes look like qqc2-breeze-style" * Revert "kstyle: centre spinbox text" * Revert "Don't reserve room for spinbox buttons if buttons disabled" * Revert "Center all QAbstractSpinBox, not just integer QSpinBox" * Revert "kstyle: make spinbox buttons consistently widthed" * Revert "kstyle: fix misalignment of spinbox item sizes" * Darken hard-to-read positive, negative, and neutral selection colors (kde#406239) * Fix incorrect link selection color in Breeze Light color scheme (kde#419960) * Fix incorrect active selection color in Breeze Light color scheme (kde#442478) * Restore auto default button behavior (kde#438994) * kstyle: use antialiasing on combobox items - Add new key + signature to plasma.keyring - Drop patches, now upstream: * 0001-Restore-auto-default-button-behavior.patch - Add patch to automatically set a default button again (kde#438994): * 0001-Restore-auto-default-button-behavior.patch - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Too many changes to list here ==== breeze-gtk ==== Version update (5.22.5 -> 5.23.1) Subpackages: gtk2-metatheme-breeze gtk3-metatheme-breeze metatheme-breeze-common - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Add patch to fix toolbutton appearance (kde#443626): * 0001-Revert-gtk3-gtk4-update-button-style.patch - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - Changes since 5.22.90: * gtk3, gtk4: update button style * Use Breeze Light as the default color scheme - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * ci: introduce .kde-ci.yml * Use the python version found by cmake in build_theme.sh ==== breeze5-icons ==== Version update (5.86.0 -> 5.87.0) - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Native Gitlab CI configuration * Fix KTimeTracker icon sizes (kde#442993) * Tweaks to AnyDesk icons * Fix index.theme issues from !124 * Add 22px variants of the preferences icons * Add AnyDesk icons * Add more Godot MIME icons * Add symlink for skanlite's new icon name * Add process-working-symbolic, overhaul 22px animation ==== brltty ==== Version update (6.3 -> 6.4) Subpackages: brltty-driver-at-spi2 brltty-driver-brlapi brltty-driver-speech-dispatcher brltty-driver-xwindow libbrlapi0_8 python3-brlapi xbrlapi - Move sysusers.d to separate package - Remove old SUSE RPM constructs - Use sysuser-tools to process included sysusers.d file correctly (bsc#1191465) - Update to version 6.4: + See ChangeLog for changes. - API version is now 0.8.3. - Add at-spi2 to BuildRequires. Now needed for at-spi driver. ==== busybox ==== Subpackages: busybox-static - Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3) flavor of busybox with the additional setting: CONFIG_REBOOT=y CONFIG_SWITCH_ROOT=y CONFIG_CTTYHACK=y (bsc#1191514). ==== ca-certificates ==== Version update (2+git20210723.27a0476 -> 2+git20211004.3efbea9) - Update to version 2+git20211004.3efbea9: * Ensure --root option propagates prefix properly to other scripts ==== calendarsupport ==== Version update (21.08.1 -> 21.08.2) Subpackages: libKF5CalendarSupport5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - Changes since 21.08.1: * Improve incidence formatting in printed month etc * Truncate holiday names in print-outs so they don't overlap dates * Remove all days of multi-day holidays from the workday list (kde#441738) ==== cervisia ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== checkmedia ==== Version update (5.4 -> 6.1) - merge gh#openSUSE/checkmedia#16 - fix auto-detecting a suitable signature location for rh media - 6.1 - merge gh#openSUSE/checkmedia#15 - add --version option to tagmedia - use volume id if app id is missing for nice output - add support for rh style meta data and digest calculation - extend fragment calculation to suse style - show signee if signature is ok - add --create-signature option - fix large file support - updated unit tests - enhance documentation - add new and shiny README.adoc - 6.0 ==== chrony ==== Subpackages: chrony-pool-openSUSE - boo#1190926: PrivateDevices is too strict, we might need to access the rtc and ptp devices. - Add back support to build chrony on SLE12. - Drop dependency on asciidoctor. It is only needed for building the HTML documentation which we don't package anyway. ==== codec2 ==== - Added a patch moved-freedv_callback_rx_sym-into-internal-header.patch to fix building gnuradio (patch taken from upstream) - Drop handcrafted generation of the pkgconfig file - Remove "-Wno-dev" ==== compat-usrmerge ==== - Fix logic for detecting conflicts with directories (boo#1191111) ==== crash ==== Version update (7.2.9_k5.14.9_1 -> 7.2.9_k5.14.11_2) - Fix crash view of task_struct_state changes for kernel 5.14 (bsc#1191206) + crash-handle-by-kernel-task_struct-state-member-changes.patch ==== ddclient ==== - Added hardening to systemd service(s). Modified: * ddclient.service ==== discover ==== Version update (5.22.5 -> 5.23.1) Subpackages: discover-backend-flatpak discover-backend-fwupd discover-backend-packagekit discover-lang - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - Changes since 5.23.0: * flatpak: Don't reuse GError instances (kde#426565) * flatpak: Set the real value of the remotes (kde#443455) * SourcesPage: Address how we show the checked state (kde#406295) * Suggest correct words in the search field (kde#443945) * SourcesPage: Use ItemIsUserCheckable to check if a source is checkable * flatpak: Do not crash when a source is disabled * Remove pointless tooltip from Labelbackground - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - Changes since 5.22.90: * flatpak: Also show the installed version (kde#443256) * Improve margins around Updates page messages * Do not show tooltips when fetching updates (kde#443050) * snap: Don't mark as cancelled until we get the reply (kde#425680) * flatpak: Also search flatpakref files where the id doesn't include .desktop * flatpak: Fix installing sources * flatpak: Reuse remote when opening a well-known flatpakref file * flatpak: Do not crash when using a flatpakref file (kde#442709) * Explicitly set the interactive flag for PackageKit transactions (kde#442383) * Link against Qt::Widgets (kde#442866) * Sources: Fix displaying sources (kde#442604) * kns: Do not process entries from invalid backends * Stop bringing kxmlgui * Port away from KIO::AccessManager * Fix the InstallApplicationButton with QQC2 Breeze - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Too many changes to list here ==== dolphin ==== Version update (21.08.1 -> 21.08.2) Subpackages: dolphin-part dolphin-part-lang libdolphinvcs5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - Changes since 21.08.1: * Fix closing a secondary viewContainer on startup settings change (kde#426221) * Don't force icon for preferred search tool action if one is manually configured (kde#442815) * Fixed a missing bracket. * Make "Empties Trash to create free space" translatable. ==== dracut ==== Version update (055+suse.119.g6c4187af -> 055+suse.129.g7d8c3ce3) Subpackages: dracut-mkinitrd-deprecated - Update to version 055+suse.129.g7d8c3ce3: * fix(kernel-modules): add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs (bsc#1190326) * docs: update SUSE maintainers doc * fix(suse): add 60-io-scheduler.rules (bsc#1188713) * revert: remove /sbin/installkernel script from dracut package * spec: modernize specfile constructs ==== dragonplayer ==== Version update (21.08.1 -> 21.08.2) Subpackages: dragonplayer-lang - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== drbd-utils ==== Version update (9.18.0 -> 9.19.0) - Update to 9.19.0 * v9,events2: show changes of peer-client * v9: rr-conflict strategy auto-discard for protocol A * windrbd: various fixes including setting the systemd root * containers: switch to UBI8 * v9,wait-*: fix segfault - bsc#1191058, active UsrMerge to install in /usr Add patch usrmerge_move_lib_to_prefix_lib.patch - Remove patch fix-libdir-in-Makefile.patch Remove patch systemd-drbd-service-needs-network-online.patch (included) - Add drbd-utils.rpmlintrc for Error missing-call-to-setgroups-before-setuid - Add rpmlint-build-error.patch to fix rpmbuild build errors ==== drkonqi5 ==== Version update (5.22.5 -> 5.23.1) Subpackages: drkonqi5-lang - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - No code changes since 5.22.90 - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Too many changes to list here ==== e2fsprogs ==== Subpackages: e2fsprogs-scrub libcom_err2 libext2fs2 - Drop ProtectClock hardening, can cause issues if other device acceess is needed ==== emacs-w3m ==== Version update (1.4.632+396+g051dba16 -> 1.4.632+501+gc088fe62) - Update to version 1.4.632+501+gc088fe62: * * w3m-lnum.el (w3m-lnum-get-match-info, w3m-lnum-get-action): Rearrange docstrings so to be in 80-column * Typo fix * Use rfc6068.el if possible instead of rfc2368.el (issue #109) * * sb-sankei.el (shimbun-sankei-keep-login): Consult akamai cookie instead of local timer for expiry period. (shimbun-sankei-logout): Remove login/out cookies first and save last. (shimbun-sankei-login): Remove akamai cookie first as well. (shimbun-sankei-last-login): Remove variable. (shimbun-sankei-get-headers): Use date-to-time instead of encode-time and parse-time-string or timezone-parse-date. * * w3m-filter.el (w3m-filter-configuration): Add desc template * * w3m-filter.el (w3m-filter-configuration): Make Custom-set work * * w3m-bookmark.el (w3m-bookmark-menubar-update): Add a workaround to avoid a miscellaneous error * Treat application/emacs-lisp as text/plain ([emacs-w3m:13845]) * user-agents: bugfix, update, improve friendliness (PR#106) * * w3m.el (w3m-user-agent-alist): Fill in in 80-column, reindent * user-agent variables: update, and add reference feature * w3m-user-agent-default-alist: bugfix macro element * New and improved filter for github (PR#105) * * w3m-filter.el (w3m-filter-github): Fill in in 80-column, reindent * w3m-filter: new and improved filter for github * * sb-sankei.el (shimbun-headers): Run shimbun-sankei-keep-login * * sb-sankei.el (shimbun-sankei-login): Cache a copy of password always * * sb-sankei.el (shimbun-sankei-logout{in|out}): Make those functions, instead of shimbun-sankei-keep-login, manage shimbun-sankei-last-login. * * sb-sankei.el (shimbun-sankei-keep-login): Fix last commit * Keep logging in in Sankei * Add timeout to w3m-download * Fix last commit (1059e92) * Hard-code the shell used in `w3m-download' with "sh" ([emacs-w3m:13826]) * Use defvar-local in w3m.el (PR#101) * Replace make-variable-buffer-local with defvar-local * Bugfix: db-history single-page advances point too far (PR#100) * * w3m.el (w3m--goto-url--handler-function): Fix point position. (PR#99) * Position point on the first entry in the db history (PR#99) ;; slightly modified by yamaoka * Fix typo ????? * reindent * Bugfix: db-history single-page advances point too far * * w3m.el (w3m--goto-url--handler-function): Fix point position. (PR#99) * Position point on the first entry in the db history (PR#99) ;; slightly modified by yamaoka * Fix typo ????? * reindent * Fix typo ????? * Add docstring for function w3m--goto-url--handler-function * db-history: advance to first history link * reindent * force-wide-display * (shimbun-sankei-clear-contents): Show restrictions * Fix previous commit * Delete nonsense distinction of writer and byliner * (shimbun-sankei-clear-contents): Distinguish author and writer * Fix last commit * Fix last commit * Add iframe tag to movie tag so to be able to view it in other browsers * Add links to embedded movies on Sankei * * sb-sankei.el (shimbun-sankei-clear-contents): Fix regexp * * sb-sankei.el (shimbun-sankei-clear-contents): Fix regexp * Support multiple article pages on Sankei * Minor fix in last commit * Show author name if it is expressed clearly in the original * Minor improvements on read and scan-sexps usage * * sb-yoshirin.el: Spelling fix: thumnail -> thumbnail * Minor fix to Sankei * Display most detailed headline on Sankei * Display headline that might be the only place to show the author * Bugfix: make w3m-select-buffer-toggle-style work properly (PR#95) * Make Sankei support raw html embedded in java script * * sb-sankei.el (shimbun-sankei-clear-contents): Modify last commit * * sb-sankei.el (shimbun-sankei-clear-contents): Don't infloop * * sb-sankei.el (shimbun-sankei-clear-contents) : Fix regexps * * sb-sankei.el (shimbun-sankei-clear-contents) : Trivial fix * Make Sankei work on Emacs 26 and 27 * Make Sankei support raw html embedded in java script * * sb-sankei.el (shimbun-sankei-clear-contents): Modify last commit * * sb-sankei.el (shimbun-sankei-clear-contents): Don't infloop * * sb-sankei.el (shimbun-sankei-clear-contents) : Fix regexps * * sb-sankei.el (shimbun-sankei-clear-contents) : Trivial fix * Make Sankei work on Emacs 26 and 27 * Sigh; w3m-select-buffer-window needs to match the selected w3m buffer, not the select buffer. * Ensure that w3m-select-buffer-window is kept updated properly. * By the time split-window is called, the locally let selected-window variable is no longer a valid window. Thus, we *actually* need to call the selected-window function here. * Fetch more images * * doc/emacs-w3m.texi, doc/emacs-w3m-ja.texi (Newspapers Supported by Shimbun): Update Sankei groups. * Make Sankei work * Make Mainichi work * Make Asahi work (as for at least the rss group) * Declare w3m-queries-log-file in w3m-util.el * Move w3m-queries-log-file from w3m-util.el to w3m.el * Update * Reindent * w3m-queries-log-file: Use expand-file-name in variable defcustom * tweaks to handling url query parts * Update * Reindent * Place entire logic in function w3m-external-view * Revert last change that made `w3m-process-stop' do kill page buffer * Reindent * w3m-delete-buffer-if-empty: Only operate on live buffers * Fixes for w3m-current-url = NIL, loading images from ext program * Delete useless history warning * Make shimbun-sankei-login work * Silence the byte compiler on Emacs 28 ==== eventviews ==== Version update (21.08.1 -> 21.08.2) Subpackages: libKF5EventViews5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - Changes since 21.08.1: * Simplify drawBackground() * Use theme colors for today's cell and the selected cell in the Month View * CI: use stable-kf5-qt5 BRANCH_GROUP in stable branch * Do not use "due today" color for completed to-dos in Agenda View (kde#122776) * src/helper.cpp - fix crash in setResourceColor (kde#426906) * Display multi-day holidays as one wide block in the Month View (kde#187116) * Avoid vertical gaps around multi-day events in the month view (kde#435667) ==== evince ==== Version update (40.4 -> 41.2) Subpackages: evince-plugin-comicsdocument evince-plugin-djvudocument evince-plugin-dvidocument evince-plugin-pdfdocument evince-plugin-tiffdocument evince-plugin-xpsdocument libevdocument3-4 libevview3-3 nautilus-evince typelib-1_0-EvinceDocument-3_0 typelib-1_0-EvinceView-3_0 - Update to version 41.2: + data: Remove alphanumeric version from AppStream. + Include subproject (libhandy) as part of the tarball. - Update to version 41.1: + build: Revert project name capitalization. - Changes from version 41.0: + backends: - Add format attribute to stop warning on string literal - Make function static as only used in this file - Simplify metadata tags getters - Use SaveToBufferData only with "struct" before + browser-plugin: Remove browser-plugin support + build: - Add option to control internal vs external synctex - Allow building without libhandy-1 available - Bump version requirement for Poppler - Fix conversion to match new version scheme - Modernize and simplify meson files - Remove Changelog target - Update build libtiff-4 dependency - Use devel icon for unstable version installed - Remove c++ dependency, and use only C - Fix compilation error when DBus is disabled + data: - Update URL to submit issues - Fix AppData urls for issues - Add new-window desktop action - Fix donation link + help: - Fix 404 link to on-wiki bug reporting guidelines - Update Evince icon as svg - Correct Window action + libview: - Open new annotation window only for text annotation - Fix dual page option ignored for single page documents + shell: - Add mnemonics to annotations contextual menus - Added mnemonic for highlight option in context menu - Adding padding to improve readability - Always show the annotation window on new annotations - Enable annotation actions only in document that supports them - Enable odd pages left when dual page is on - Expand sidebar annotations by default - Fix libhandy includes - Implemented headerbar for Annotation Properties dialog - Reload annotation sidebar on annotation properties changes - Reload the annotation sidebar when the type changes - Show annotation contents in sidebar when available - Show content in tooltip popup in annotations sidebar - Fix g_critical about removing non-existant timer - Show filename in recent view when title has only spaces - Show None when missing creation/modification date - Add comment about logic of 'first_iteration' - Use a constant for GString init size - Support duration in decimal value - Be able to collapse/expand all entries + Updated translations. - Replace c++_compiler with c_compiler BuildRequires. - Replace libtiff-devel with pkgconfig(libtiff-4) BuildRequires. - Remove obsolete translation-update-upstream support (jsc#SLE-21105). - Update to version 41.alpha: + Backends: - Add format attribute to stop warning on string literal. - Make function static as only used in this file. - Simplify metadata tags getters. - Use SaveToBufferData only with "struct" before. + browser-plugin: Remove browser-plugin support. + Help: - Update Evince icon as svg. - Correct Window action. + libview: dual page option is ignored for single page documents. + Shell: - Add mnemonics to annotations contextual menus. - Added mnemonic for highlight option in context menu. - Adding padding to improve readability. - Always show the annotation window on new annotations. - Enable odd pages left when dual page is on. - Expand sidebar annotations by default. - Implemented headerbar for Annotation Properties dialog. - Reload annotation sidebar on annotation properties changes. - Reload the annotation sidebar when the type changes. - Show annotation contents in sidebar when available. - Show content in tooltip popup in annotations sidebar. - Show filename in recent view when title has only spaces. - Support duration in decimal value. - Be able to collapse/expand all entries. - Fix g_critical about removing non-existant timer. - Fix compilation error when DBus is disabled. - Add new-window desktop action. - Show None when missing creation/modification date. + Updated translations. ==== fetchmail ==== Version update (6.4.21 -> 6.4.22) Subpackages: fetchmailconf - Update to 6.4.22: [bsc#1190069, CVE-2021-39272] * OPENSSL AND LICENSING NOTE: - fetchmail 6.4.22 is compatible with OpenSSL 1.1.1 and 3.0.0. OpenSSL's licensing changed between these releases from dual OpenSSL/SSLeay license to Apache License v2.0, which is considered incompatible with GPL v2 by the FSF. For implications and details, see the file COPYING. * SECURITY FIXES: - CVE-2021-39272: fetchmail-SA-2021-02: On IMAP connections, without --ssl and with nonempty --sslproto, meaning that fetchmail is to enforce TLS, and when the server or an attacker sends a PREAUTH greeting, fetchmail used to continue an unencrypted connection. Now, log the error and abort the connection. --Recommendation for servers that support SSL/TLS-wrapped or "implicit" mode on a dedicated port (default 993): use --ssl, or the ssl user option in an rcfile. - On IMAP and POP3 connections, --auth ssh no longer prevents STARTTLS negotiation. - On IMAP connections, fetchmail does not permit overriding a server-side LOGINDISABLED with --auth password any more. - On POP3 connections, the possibility for RPA authentication (by probing with an AUTH command without arguments) no longer prevents STARTTLS negotiation. - For POP3 connections, only attempt RPA if the authentication type is "any". * BUG FIXES: - On IMAP connections, when AUTHENTICATE EXTERNAL fails and we have received the tagged (= final) response, do not send "*". - On IMAP connections, AUTHENTICATE EXTERNAL without username will properly send a "=" for protocol compliance. - On IMAP connections, AUTHENTICATE EXTERNAL will now check if the server advertised SASL-IR (RFC-4959) support and otherwise refuse (fetchmail <= 6.4 has not supported and does not support the separate challenge/response with command continuation) - On IMAP connections, when --auth external is requested but not advertised by the server, log a proper error message. - Fetchmail no longer crashes when attempting a connection with - -plugin "" or --plugout "". - Fetchmail no longer leaks memory when processing the arguments of --plugin or --plugout on connections. - On POP3 connections, the CAPAbilities parser is now caseblind. - Fix segfault on configurations with "defaults ... no envelope". This is a regression in fetchmail 6.4.3 and happened when plugging memory leaks, which did not account for that the envelope parameter is special when set as "no envelope". The segfault happens in a constant strlen(-1), triggered by trusted local input => no vulnerability. - Fix program abort (SIGABRT) with "internal error" when invalid sslproto is given with OpenSSL 1.1.0 API compatible SSL implementations. * CHANGES: - IMAP: When fetchmail is in not-authenticated state and the server volunteers CAPABILITY information, use it and do not re-probe. (After STARTTLS, fetchmail must and will re-probe explicitly.) - For typical POP3/IMAP ports 110, 143, 993, 995, if port and --ssl option do not match, emit a warning and continue. - fetchmail.man and README.SSL were updated in line with RFC-8314/8996/8997 recommendations to prefer Implicit TLS (--ssl/ssl) and TLS v1.2 or newer, placing --sslproto tls1.2+ more prominently. The defaults shall not change between 6.4.X releases for compatibility. * Rebase patches: fetchmail-add-imap-oauthbearer-support.patch fetchmail-add-query_to64_outsize-utility-function.patch fetchmail-support-oauthbearer-xoauth2-with-pop3.patch ==== ffmpegthumbs ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== file ==== Version update (5.40 -> 5.41) Subpackages: file-magic libmagic1 - Remove file-5.38-allow-readlinkat.dif as already doen in latest file 5.41 - Update to 5.41: * Avinash Sonawane: Fix tzname detection * Fix relationship tests with "search" magic, don't short circuit logic * Fix memory leak in compile mode * PR/272: kiefermat: Only set returnval = 1 when we printed something (in all cases print or !print). This simplifies the logic and fixes the issue in the PR with -k and --mime-type there was no continuation printed before the default case. * PR/270: Don't translate unprintable characters in %s magic formats when -r * PR/269: Avoid undefined behavior with clang (adding offset to NULL) * Add a new flag (f) that requires that the match is a full word, not a partial word match. * Add varint types (unused) * PR/256: mutableVoid: If the file is less than 3 bytes, use the file length to determine type * PR/259: aleksandr.v.novichkov: mime printing through indirect magic is not taken into account, use match directly so that it does. - Remove patches now upstream * file-5.40-1c677c04.patch * file-5.40-3096f87f.patch * file-5.40-4c5fe1ad.patch * file-5.40-6b34436a.patch * file-5.40-749e1ecf.patch * file-5.40-9b0459af.patch * file-5.40-9e2becec.patch * file-5.40-ascii.patch * file-5.40-f0601504.patch * file-5.40-f7705dca.patch - Port patches * file-5.19-biorad.dif * file-5.19-printf.dif * file-5.19-zip2.0.dif * file-5.23-endian.patch * file-5.28-btrfs-image.dif * file-5.38-allow-readlinkat.dif * file-secure_getenv.patch - Port and rename patch file-5.39.dif which is now file-5.41.dif ==== firewalld ==== Version update (1.0.0 -> 1.0.1) Subpackages: firewalld-bash-completion firewalld-zsh-completion python3-firewall - Update to 1.0.1: * keep linux capability CAP_SYS_MODULE * UPnP Client: actually allow SSDP traffic * Fix RPM macros to test if firewall-cmd is executable ==== flatpak ==== Version update (1.11.3 -> 1.12.1) Subpackages: libflatpak0 system-user-flatpak - Update to version 1.12.1: + The security fix in the 1.12.0 release failed when used with some older versions of libseccomp (that don't know about the new syscalls). - Update to version 1.12.0: + This is the first stable release in the 1.12.x series. The major changes in this series is the support for better control of sub-sandboxes, as used by the steam flatpak. + In addition, this release fixes a security vulnerability in the portal support. Some recently added syscalls were not blocked by the seccomp rules which allowed the application to create sub-sandboxes which can confuse the sandboxing verification mechanisms of the portal. This has been fixed by extending the seccomp rules (boo#1191507, CVE-2021-41133) + Some test fixes + Support for specifying the flatpak binary to use during exports + Install translations for all languages in the locale, not just the ones in LC_MESSAGES. + Fix progress reporting in flatpak fsck + Handle cases where /var/tmp is a symlink + Expose /etc/gai.conf to the sandbox + Fix the parental control checks for root + Handle missing /etc/ld.so.cache (musl) + Updated translations ==== frameworkintegration ==== Version update (5.86.0 -> 5.87.0) Subpackages: frameworkintegration-plugin libKF5Style5 - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== freerdp ==== Subpackages: libfreerdp2 libwinpr2 - Finally nailed it: CMAKE_INSTALL_LIBDIR is absolute on Leaps and relative on TW, but freerdp requires the relative variant. Fixes boo#1190919 - Remove freerdp-fix-plugin-path.patch again, the problem was introduced/fixed by cmake changes ==== fwupd ==== Version update (1.5.8 -> 1.6.2) Subpackages: libfwupd2 typelib-1_0-Fwupd-2_0 - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_fwupd-offline-update.service.patch * harden_fwupd-refresh.service.patch - Update to version 1.6.2 - The fwupd efi program be separated to fwupd-efi package. - Removed pesign-obs-integration, moved needssslcertforbuild , SBAT and EFI signing stuff to fwupd-efi. - Moved libfwupdplugin1 to libfwupdplugin2 - Change log from upstream: https://github.com/fwupd/fwupd/blob/main/data/org.freedesktop.fwupd.metainf… - This release adds the following features: * Add a plugin to check Lenovo firmware settings * Add initial support for the powerd daemon * Add support for CapsuleOnDisk * Add support for installing UEFI updates from GRUB * Add support for soft-requirements that can be ignored with --force * Allow devices to only accept version upgrades * Allow discovery of Redfish BMCs specified by VID-PID or MAC * Allow the daemon to request interactive action from the end user * Automatically connect the BMC network interface at startup * Show the build timestamp if set on the device * Show the user how to switch out of Wacom tablet Android-mode - This release fixes the following bugs: * Add the alternate vendor name into the 8BitDo allowlist * Allow multiple devices to set WAIT_FOR_REPLUG * Allow the client to watch for more property changes * Always ensure the SuperIO version string is NUL terminated * Automatically clear the update error as required * Disable all UX capsules for Lenovo hardware * Do not assume the metainfo file is NUL-terminated * Do not save invalid files on LVFS server error * Fix a VLI regression in enumerating the PD device * Fix a VLI regression when installing VL820Q7 firmware * Fix enumeration of the Synaptics Prometheus config child * Fix parsing Redfish USB/PCI network VID/PIDs * Fix the fwupdmgr progressbar spinner to actually work * Fix version number for legacy Wacom Bluetooth modules * Ignore virtual M.2 ATA devices * Preserve NEEDS_REBOOT on successful update * Prevent a corrupt PHAT table from allocating lots of memory * Read the Redfish SMBIOS table when required * Remove the vendor string from the device name where required * Save the update state to the database correctly all of the time * Switch from sysctl to ioctl for ESRT on FreeBSD * Try reading from /sys/class/dmi if SMBIOS direct access fails * Watch for children added or removed after setup has been completed * Work around a XCC-ism on Lenovo hardware - This release adds support for the following hardware: * ModemManager devices supporting Firehose or MBIM QDU * More models of RTS54HUB * More Poly DFU devices * Parade LSPCON * PixArt receiver and wireless hardware * Realtek MST with RTD2142 * SuperIO IT5570 * USB4 Dell dock ==== gc ==== Version update (8.0.4 -> 8.0.6) - Update to release 8.0.6 * Allocate start_info struct on the stack in GC_pthread_create. * Allow GC_PAUSE_TIME_TARGET environment variable values smaller than 5 ms. * Disable mprotect-based incremental GC if /proc roots are used. * Enable sbrk-to-mmap fallback on major supported Unix-like platforms. * Ensure process is running on one CPU core if AO ops are emulated with locks. * Fix data race regarding *rlh value in generic_malloc_many. * Fix handling of areas smaller than page size in GC_scratch_recycle. * Limit number of unmapped regions. ==== gcr ==== Version update (3.40.0 -> 3.41.0) Subpackages: gcr-data gcr-prompter gcr-ssh-askpass gcr-viewer libgck-1-0 libgcr-3-1 typelib-1_0-Gck-1 typelib-1_0-Gcr-3 - Update to version 3.41.0: + Port ssh-agent from gnome-keyring. + build: Fix parallel build failure due to missing marshal dependency. + Fix warnings by dropping `volatile` for g_once_init_inter locations. + tests: More robust against GTask unref race condition. + Updated translations. - Add pkgconfig(libsecret-1), pkgconfig(libsystemd), pkgconfig(systemd) and openssh-clients BuildRequires: Build new standalone ssh-agent, and split it out in own sub-package. ==== gdm ==== Subpackages: gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0 - Add gdm-daemon-Infer-session-type-from-desktop-file.patch (bsc#1191809, bsc#1191248) - Rebase gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch (bsc#1191014). ==== gegl ==== Version update (0.4.30 -> 0.4.32) Subpackages: gegl-0_4 libgegl-0_4-0 - disable docs until the upstream bug is solved https://gitlab.gnome.org/GNOME/gegl/-/issues/294#note_1281553 ==== gimp ==== Version update (2.10.24 -> 2.10.28) Subpackages: gimp-plugin-aa gimp-plugins-python libgimp-2_0-0 libgimpui-2_0-0 - Add upstream patch (GIMP issue #6210) + 0001-Issue-6210-Subpixel-font-rendering-system-settings-s.patch Fix issue where the textool produces false color artifacts when using font anti-aliasing and system is set to subpixel rendering. - gimp-tips no longer has translations - Update to 2.10.28 - Core: - Dashboard now has memory support in OpenBSD. - Default shortcuts Shift+[ and ] for tool size changed to { and }. - Performance improvements for GIMP on macOS Big Sur: these improvements were actually already applied in our macOS packages since GIMP 2.10.22, but were applied upstream directly only now. - User Interface: - Dark theme: improve accessibility of GtkRadioButton by adding a white border on mouse-hover. - Gray theme: set light background for selected text in Layers and Paths dockable dialogs to make text visible. - Dark, Gray and Light themes: remove 3D shadow box around eye and link toggles in Layers, Channels, and Paths dockable dialog tree views. - Plug-ins: - Improved DDS support and fix some red/blue bit swap for RGB10A2 DDS. The plug-in version is incremented so that it is able to catch and correct previously incorrect RGB10A2 images exported by older versions of our plug-in. - DDS files with "L16" - a 16 bit luminance channel - are now loaded in 16-bit. - DICOM images: * Support for planar configuration. Support for deprecated * big endian transfer. - TIFF images: * Thumbnail storing now done by storing the thumbnail as the * second page in the file (through Exiv2) and setting metadata "Exif.Thumbnail.NewSubfileType" to 1 (reduced resolution image) instead of storing the thumbnail as a subifd. This was done because of a Windows bug locking TIFF files with thumbnail stored as subfid. * Symmetrically, loading will ignore pages marked as "reduced resolution image" (i.e. it will consider them as thumbnails), as well as try to guess if a page (without subfile type) is a thumbnail when it meets following criteria: second page with YCbCr PhotometricInterpretation, old style jpeg compression while the first page has a different PhotometricInterpretation or compression. - Script-fu: - New (dir-make "/dir/name" mode) function to create a directory. - Build: - Fix uninstalled white-border prelight file. - On Windows, *.rs file extension is not associated with SUN Raster images anymore. The reason is that this file extension is mostly used for Rust code files nowadays. If Windows could detect file formats with "magic numbers" (i.e. byte identifiers), it would not be a problem, but since it relies apparently only the extension, it's better to remove this association. - Oppositely on Linux and other Unix-like systems using desktop files, add the image/x-sun-raster MimeType which was forgotten (there, detection should be fine and not depend on file extension). - gimp30-tips.mo is not installed anymore (only used during the build to generate gimp-tips.xml with multiple language support). - --enable-check-update now has an "auto" value, which is the new default. It is equivalent to "yes" for Windows and macOS and "no" in all other cases. - New unit test to check that localizations listed in the installer script match available po files in po-windows-installer/. - "msys*" host value now detected as Windows builds. - Bumping minimum GEGL to version 0.4.32. ==== git ==== Version update (2.33.0 -> 2.33.1) Subpackages: git-core git-cvs git-daemon git-email git-gui git-svn git-web gitk perl-Git - git 2.33.1: * fix "git pull" and "git rebase -r" various corner cases and bugs * "git commit --fixup" now works with "--edit" again. * Fix "git send-email" unwanted threading * Fix output from "git fast-export" anonymization feature showing an annotated tag incorrectly. * Fixes for various command output * fix "git difftool --dir-diff" mishandling symbolic links * Redact sensitive data in the HTTP trace for HTTP/2 requests * further bug fixes for various git operations - Added hardening to systemd service(s) (bsc#1181400). Modified: * git-daemon.service ==== gjs ==== Subpackages: libgjs0 typelib-1_0-GjsPrivate-1_0 - Add upstream crash fixer patches from stable branch: + b9e122044a7ccc1e2a3374c680b6ea82066bfa59.patch: arg: Replace gsize with size_t + 62025d4a2738a36ea5f1a7cebef08b22b5eef613.patch: Handle optional out parameters in callbacks - Stop disabling lto: Following this, stop passing dtrace=true and systemtap=true to meson, aswell as dropping systemtap-sdt-devel BuildRequires, follow upstream default. - Add optional pkgconfig(gtk4) BuildRequires: meson checks for it. ==== glibc ==== Subpackages: glibc-devel glibc-extra glibc-locale glibc-locale-base nscd - ld-show-auxv-colon.patch: elf: Fix missing colon in LD_SHOW_AUXV output (BZ #282539 - x86-string-control-test.patch: x86-64: Use testl to check __x86_string_control - pthread-kill-fail-after-exit.patch: nptl: pthread_kill, pthread_cancel should not fail after exit (BZ #19193) - pthread-kill-race-thread-exit.patch: nptl: Fix race between pthread_kill and thread exit (BZ #12889) - getcwd-attribute-access.patch: posix: Fix attribute access mode on getcwd (BZ #27476) - pthread-kill-return-esrch.patch: nptl: pthread_kill needs to return ESRCH for old programs (BZ #19193) - pthread-mutexattr-getrobust-np-type.patch: nptl: Fix type of pthread_mutexattr_getrobust_np, pthread_mutexattr_setrobust_np (BZ [#28036]) - setxid-deadlock-blocked-signals.patch: nptl: Avoid setxid deadlock with blocked signals in thread exit (BZ #28361) - pthread-kill-send-specific-thread.patch: nptl: pthread_kill must send signals to a specific thread (BZ #28407) - sysconf-nprocessors-affinity.patch: linux: Revert the use of sched_getaffinity on get_nproc (BZ #28310) - iconv-charmap-close-output.patch: renamed from icon-charmap-close-output.patch ==== glibmm2_4 ==== Version update (2.66.1 -> 2.66.2) Subpackages: libgiomm-2_4-1 libglibmm-2_4-1 - Update to version 2.66.2: + Glib, Gio: Replace all g_quark_from_static_string() by g_quark_from_string() + Gio: - FileEnumerator: Remove refreturn to avoid memory leak - ListModel::get_object(): Make it work for interface classes + Build: MSVC build: Remove extraneous GLIBMM_API in Glib::ustring ==== glusterfs ==== Version update (9.1 -> 9.3) Subpackages: libgfapi0 libgfrpc0 libgfxdr0 libglusterfs0 - Update to release 9.3 * New reset-brick command * Ability to get node level status of a cluster * Multi-threaded self-heal for Disperse volumes * Lock revocation feature * On-demand scrubbing for bitrot detection * Real time Cluster notifications using Events APIs - Move mount helper to /usr/sbin [boo#1191062] ==== gnome-clocks ==== Version update (40.0 -> 41.0) Subpackages: gnome-shell-search-provider-gnome-clocks - Update to version 41.0: + Updated translations. - Remove obsolete translation-update-upstream support (jsc#SLE-21105). ==== gnome-online-accounts ==== Version update (3.40.0 -> 3.40.1) Subpackages: libgoa-1_0-0 libgoa-backend-1_0-1 typelib-1_0-Goa-1_0 - Update to version 3.40.1: + Bugs fixed: glgo#GNOME/gnome-online-accounts!68 dbus: Add missing since tag for IsSupportedProvider. + Updated translations. - Remove obsolete translation-update-upstream support (jsc#SLE-21105). ==== gnome-shell ==== Subpackages: gnome-extensions gnome-shell-calendar - Add 380d2db1d9047ecffcef7d78f00184963b403efc.patch: inputMethod: Clear preeditStr before reset. Previously, these were performed in a different order before GNOME 41. During some other changes they were swapped. However, this causes both GTK 3 and GTK 4 applications to scroll to incorrect positions from the preedit change. ==== gnome-shell-extensions ==== Subpackages: gnome-shell-classic gnome-shell-extensions-common - Update sle-classic to version 41 + Update gse-sle-classic-ext.patch + Update sle-classic(a)suse.com.tar.gz ==== gpm ==== Subpackages: libgpm2 - Added hardening to systemd service(s) (bsc#1181400). Modified: * gpm.service ==== gpsd ==== Version update (3.23 -> 3.23.1) - Re-enable LTO on aarch64 - Set ProtectClock to false or gpsd will not start - Don't use gpsd version in patches (will break with every update) % harden_gpsd.service.patch % harden_gpsdctl@.service.patch - Update to version 3.23.1 * Improve ubx cycle detection. * Add quirks for Jackson Labs nonstandard NMEA * Change STATUS_NO_FIX to STATUS_UNK to avoid confusion with fix mode. * Change STATUS_FIX to STATUS_GPS to avoid confusion with fix mode. * Change STATUS_DGPS_FIX to STATUS_DGPS to avoid confusion with fix mode. * Split SOURCE_ACM from SOURCE_USB. ACM has no speeds. * Add speeds 1 mbps, 1.152 mbps, 1.5 mbps, and higher. When libc supports them. * Improve autobaud. * Add new u-blox M10 messages. * Fix u-blox M6, M7 initialization issues. * Various ubxtool and gpxlogger updates. * Add mtk3301_speed_switcher() * No API, ABI changes. * Fallback to "python3" if "python" not found. - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_gpsd.service.patch * harden_gpsdctl@.service.patch ==== grantleetheme ==== Version update (21.08.1 -> 21.08.2) Subpackages: libKF5GrantleeTheme5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== graphviz ==== Version update (2.48.0 -> 2.49.1) Subpackages: graphviz-plugins-core libgraphviz6 - update to 2.49.1: - the CMake build system installs gzipped man pages if `gzip` is available #1883 - CMake projects using Graphviz as a subproject (`add_subdirectory`) can now link against and use `gvc`. - various problems in the generation of Javascript bindings - 2.48.0: test suite is failing #2112 - Ensure correct file-level dependency for generated file in cmake generated projects #2119 - compile failures with a C++20-compatible toolchain #2122 - compile errors on macOS when using Bison 3.8 #2127 - Make Graphviz buildable as a cmake subproject/subdirectory #1477 - Header not found in Cmake project #2109 - a very basic C++ API for a subset of the functions in lib/cgraph and lib/gvc, allowing a graph to be rendered from DOT source to a specified format. The new API is available through two new libraries: lib/cgraph++ and lib/gvc++. It is experimental, meaning that it might have breaking changes also in upcoming patch or minor releases (towards #2001) - CMake builds now support an `with_expat` option that allows the support for using HTML-like labels through the optional expat library to be explicitly enabled (default) or disabled - CMake builds now support an with_zlib option that allows the support for raster image compression through the optional zlib library to be explicitly enabled (default) or disabled - the CMake build system now enables `-Wextra` when building C++ - some Cgraph functions that take `char*` arguments that they do not modify have been updated to take `const char*` arguments #634 - incorrectly using the `layout` attribute on anything other than a graph now results in a warning about this being invalid #2078 - `edgepaint` accepts more standard `--` prefixed command line arguments and rejects invalid options #1971 - improved detection of Lefty dependencies in the Autotools build system - libexpr rejects printing the time (`%t`) if no format is provided - `-DDATE=?` option in the CMake build system has been removed - the Autotools build system no longer writes the DATE file and the portable source tarball no longer includes this - The attached dot file causes a segfault when processed #2095 - fix typos and update URLs in `edgepaint` usage text and man page - Fix clang's undefined behavior warning in dotLayout - gvpr doesn't build on macOS but MKDEFS_EXECUTABLE points to wrong directory #2101 - the generated gdefs.h header is no longer installed - `ccomps` out-of-memory message no longer incorrectly refers to `gc` - do not abort when `calloc(0, x)` or `calloc(x, 0)` in `gcalloc` return `NULL` - failed Exshort_t type discrimination #1799 - dot manpage is in wrong directory on Windows #1936 - CMake builds fail when when the ltdl library is not available even if the `enable_ltdl` option is `ON` - CMake builds fail when when the optional `zlib` library is not available - fix graph rotation in quartz plugin ==== graphviz-addons ==== Version update (2.48.0 -> 2.49.1) Subpackages: graphviz-gd graphviz-gnome - update to 2.49.1: - the CMake build system installs gzipped man pages if `gzip` is available #1883 - CMake projects using Graphviz as a subproject (`add_subdirectory`) can now link against and use `gvc`. - various problems in the generation of Javascript bindings - 2.48.0: test suite is failing #2112 - Ensure correct file-level dependency for generated file in cmake generated projects #2119 - compile failures with a C++20-compatible toolchain #2122 - compile errors on macOS when using Bison 3.8 #2127 - Make Graphviz buildable as a cmake subproject/subdirectory #1477 - Header not found in Cmake project #2109 - a very basic C++ API for a subset of the functions in lib/cgraph and lib/gvc, allowing a graph to be rendered from DOT source to a specified format. The new API is available through two new libraries: lib/cgraph++ and lib/gvc++. It is experimental, meaning that it might have breaking changes also in upcoming patch or minor releases (towards #2001) - CMake builds now support an `with_expat` option that allows the support for using HTML-like labels through the optional expat library to be explicitly enabled (default) or disabled - CMake builds now support an with_zlib option that allows the support for raster image compression through the optional zlib library to be explicitly enabled (default) or disabled - the CMake build system now enables `-Wextra` when building C++ - some Cgraph functions that take `char*` arguments that they do not modify have been updated to take `const char*` arguments #634 - incorrectly using the `layout` attribute on anything other than a graph now results in a warning about this being invalid #2078 - `edgepaint` accepts more standard `--` prefixed command line arguments and rejects invalid options #1971 - improved detection of Lefty dependencies in the Autotools build system - libexpr rejects printing the time (`%t`) if no format is provided - `-DDATE=?` option in the CMake build system has been removed - the Autotools build system no longer writes the DATE file and the portable source tarball no longer includes this - The attached dot file causes a segfault when processed #2095 - fix typos and update URLs in `edgepaint` usage text and man page - Fix clang's undefined behavior warning in dotLayout - gvpr doesn't build on macOS but MKDEFS_EXECUTABLE points to wrong directory #2101 - the generated gdefs.h header is no longer installed - `ccomps` out-of-memory message no longer incorrectly refers to `gc` - do not abort when `calloc(0, x)` or `calloc(x, 0)` in `gcalloc` return `NULL` - failed Exshort_t type discrimination #1799 - dot manpage is in wrong directory on Windows #1936 - CMake builds fail when when the ltdl library is not available even if the `enable_ltdl` option is `ON` - CMake builds fail when when the optional `zlib` library is not available - fix graph rotation in quartz plugin ==== grilo ==== Version update (0.3.13 -> 0.3.14) Subpackages: libgrilo-0_3-0 libgrlnet-0_3-0 libgrlpls-0_3-0 typelib-1_0-Grl-0_3 - Update to version 0.3.14: + CVE-2021-39365: Fix TLS cert validation not being done for any network call. + Fix double-free when using GrlNet in Python. + Load config from GRL_CONFIG_PATH if set. + Clarify LGPLv2.1 or later license. + Handle numeric limits for GrlOperationOptions. + Updated translations. - Drop grilo-CVE-2021-39365.patch: fixed upstream. ==== grilo-plugins ==== Version update (0.3.13 -> 0.3.14) Subpackages: grilo-plugin-tracker grilo-plugin-youtube - Update to version 0.3.14: + Fix lua-factory crash on >= 5.4.3. + Clarify LGPLv2.1 or later license. + tracker3: Make resolve async. + euronews: Use YouTube feeds. + Updated translations. - Drop 108.patch: fixed upstream. ==== gwenview5 ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - Changes since 21.08.1: * Restore the ability to quickly switch between "Zoom to Fit" and "Actual Size" with a keyboard shortcut (kde#441152) ==== hwdata ==== Version update (0.351 -> 0.352) - Update to version 0.352 (bsc#1191375: + Updated pci, usb and vendor ids. ==== hwinfo ==== Version update (21.76 -> 21.77) - merge gh#openSUSE/hwinfo#105 - Use license file from gnu.org - Fix spelling - Add missing final newline - Trim excess whitespace - Simple maintenance improvements - 21.77 ==== hylafax+ ==== Version update (7.0.3 -> 7.0.4) Subpackages: hylafax+-client - version 7.0.4 * README.SUSE renamed * hylafax.diff added for boo#1191571 (pre-correction) * Dependencies on systemd-services adjusted * retry training twice at the same bitrate unless FTT (26 Aug 2021) * add missing reason messages for session failures (21 Aug 2021) * stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021) * add Class1HasRMHookIndication (16 Aug 2021) * don't attempt sending DCN if we're already on hook (15, 17 Aug 2021) * end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021) * fix some behavior following frame reception timeouts (13 Aug 2021) * improve behavior if procedural interrupt fails (12 Aug 2021) * handle sender repeating RR after we transmit MCF (10 Aug 2021) * add session logging of receipt of CFR/FTT signals (3 Aug 2021) * cope with receipt of PPR following CTC (3 Aug 2021) * attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021) * identify DCN after PPS as a receiver abort (2 Aug 2021) * attempt to cope with receipt of CTR after sending PPS (2 Aug 2021) * remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021) * don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021) * update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021) * fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021) * fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021) * try to cope with T.38 invite stutter at beginning of send (15 Jul 2021) * decouple session logging from direct filesystem I/O (15 Jul 2021) * try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021) * improve tenacity of "persistent" ECM (26 Jun 2021) * maintain the same SSL Fax passcode during a single session (20 May 2021) * log detection of binary file transfer support in receivers (1 Apr 2021) * add support for SiLabs Si2417/Si2435 (5 Feb 2021) - Drop ProtectClock hardening, can cause issues if other device acceess is needed ==== incidenceeditor ==== Version update (21.08.1 -> 21.08.2) Subpackages: libKF5IncidenceEditor5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - Changes since 21.08.1: * Do not create duplicate tags (kde#441846) ==== inotify-tools ==== Version update (3.21.9.5 -> 3.21.9.6) Subpackages: libinotifytools0 - update to 3.21.9.6: * update path for includes in stats.h * Fix spellings in manpages ==== inxi ==== Version update (3.3.03 -> 3.3.07) - update to 3.3.07: * /usr/share/doc/packages/inxi/inxi.changelog. ==== iputils ==== Subpackages: rarpd - Drop ProtectClock hardening, can cause issues if other device acceess is needed ==== irda ==== - Drop ProtectClock hardening, can cause issues if other device acceess is needed ==== iso-codes ==== Version update (4.6.0 -> 4.7.0) - update to 4.7.0: * Fix weblate check: Remove double spaces * Rename ku.po to kmr.po. * Add common names for South and North Korea. * Updates for Indonesia * ISO 3166-1 translations * ISO 3166-2 translations * ISO 3166-3 translations * ISO 639-2 translations * ISO 639-3 translations * ISO 639-5 translations * ISO 4217 translations * ISO 15924 translations ==== jack ==== Version update (1.9.18 -> 1.9.19) Subpackages: libjack-devel libjack0 libjacknet0 libjackserver0 - drop 0001-Fix-compilation-of-documentation.patch (upstream). - update to 1.9.19: * Add jack_position_t::tick_double, and flags around it * Add zalsa "-w" argument to wait for soundcard to be available * Bump internal protocol version to 9 (due to struct alignment) * Fix alignment of fields for atomic accesses * Fix build for platforms needing __STDC_FORMAT_MACROS * Fix compilation of documentation ==== java-11-openjdk ==== Version update (11.0.12.0 -> 11.0.13.0) Subpackages: java-11-openjdk-headless - Update to upstream tag jdk-11.0.13+8 (October 2021 CPU) * Security fixes + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default enabled cipher suites preference + JDK-8254967, CVE-2021-35565, bsc#1191909: com.sun.net.HttpsServer spins on TLS session close + JDK-8263314: Enhance XML Dsig modes + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors + JDK-8265574: Improve handling of sheets + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for RTF kit + JDK-8265776: Improve Stream handling for SSL + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing support + JDK-8266103: Better specified spec values + JDK-8266109: More Resilient Classloading + JDK-8266115: More Manifest Jar Loading + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore integrity + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained Delegation + JDK-8267086: ArrayIndexOutOfBoundsException in java.security.KeyFactory.generatePublic + JDK-8267712: Better LDAP reference processing + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client handshaking + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support + JDK-8268193: Improve requests of certificates + JDK-8268199: Correct certificate requests + JDK-8268205: Enhance DTLS client handshake + JDK-8268506: More Manifest Digests + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session identification + JDK-8269624: Enhance method selection support + JDK-8270398: Enhance canonicalization + JDK-8270404: Better canonicalization * Other changes + JDK-8024368: private methods are allocated vtable indices + JDK-8042902: Test java/net/Inet6Address/serialize/ /Inet6AddressSerializationTest.java fails intermittently + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites + JDK-8157404: Unable to read certain PKCS12 keystores from SequenceInputStream + JDK-8158066: SourceDebugExtensionTest fails to rename file + JDK-8168304: Make all of DependencyContext_test available in product mode + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java fails intermittently with BindException + JDK-8181313: SA: Remove libthread_db dependency on Linux + JDK-8193214: Incorrect annotations.without.processors warnings with JDK 9 + JDK-8194230: jdk/internal/jrtfs/remote/ /RemoteRuntimeImageTest.java fails with java.lang.NullPointerException + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java fails + JDK-8199931: java/net/MulticastSocket/ /UnreferencedMulticastSockets.java fails with "incorrect data received" + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK version changes + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java failed on Mac 10.13 with zh_CN and zh_TW locales. + JDK-8207316: java/nio/channels/spi/SelectorProvider/ /inheritedChannel/InheritedChannelTest.java failed + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64 + JDK-8208363: test/jdk/java/lang/Package/ /PackageFromManifest.java missing module dependencies declaration + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder compiler warnings + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh to plain java test + JDK-8209772: Refactor shell test java/util/ServiceLoader/ /basic/basic.sh to java + JDK-8209773: Refactor shell test javax/naming/module/basic.sh to java + JDK-8209832: Refactor jdk/internal/reflect/Reflection/ /GetCallerClassTest.sh to plain java test + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh to plain java test + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell tests to plain java tests + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to plain java tests + JDK-8210495: compiler crashes because of illegal signature in otherwise legal code + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time image layout + JDK-8210802: temp files left by tests in jdk/java/net/httpclient + JDK-8210819: Update the host name in CNameTest.java + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain java test + JDK-8210934: Move sun/net/www/protocol/http/ /GetErrorStream.java to OpenJDK + JDK-8210959: JShell fails and exits when statement throws an exception whose message contains a '%'. + JDK-8211055: Provide print to a file (PDF) feature even when printer was not connected + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/ /MultiThreadTest.java fails intermittently when cleaning up + JDK-8211296: Remove HotSpot deprecation warning suppression for Mac/clang + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails with cleaning up + JDK-8212040: Compilation error due to wrong usage of NSPrintJobDispositionValue in mac10.12 + JDK-8212695: Add explicit timeout to several HTTP Client tests + JDK-8212718: Refactor some annotation processor tests to better use collections + JDK-8213007: Update the link in test/jdk/sun/security/ /provider/SecureRandom/DrbgCavp.java + JDK-8213137: Remove static initialization of monitor/mutex instances + JDK-8213235: java/nio/channels/SocketChannel/ /AsyncCloseChannel.java fails with threads that didn't exit + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests to plain java tests + JDK-8213576: Make test AsyncCloseChannel.java run in othervm + JDK-8213694: Test Timeout.java should run in othervm mode + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/ /except/except002 and except003 + JDK-8213922: fix ctw stand-alone build + JDK-8214195: Align stdout messages in test/jdk/java/math/BigInteger/PrimitiveConversionTests.java + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/ /NonUniqueAliases.java failed with incorrect jtreg tags order + JDK-8214937: sun/security/tools/jarsigner/warnings/ /NoTimestampTest.java failed due to unexpected expiration date + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris) + JDK-8217825: Verify @AfterTest is used correctly in WebSocket tests + JDK-8218145: block_if_requested is not proper inlined due to size + JDK-8219417: bump jtreg requiredVersion to b14 + JDK-8219552: bump jtreg requiredVersion to b14 in test/jdk/sanity/client/ + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails intermittently due to NumberFormatException + JDK-8220445: Support for side by side MSVC Toolset versions + JDK-8221988: add possibility to build with Visual Studio 2019 + JDK-8222751: closed/test/jdk/sun/security/util/ /DerIndefLenConverter/IndefBerPkcs12.java fail + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use Dependencies::find_unique_concrete_method() for non-virtual methods + JDK-8224853: CDS address sanitizer errors + JDK-8225082: Remove IdenTrust certificate that is expiring in September 2021 + JDK-8225583: Examine the HttpResponse.BodySubscribers for null handling and multiple subscriptions + JDK-8225690: Multiple AttachListener threads can be created + JDK-8225790: Two NestedDialogs tests fail on Ubuntu + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/ /BodySubscribersTest.java + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle statically bindable methods directly + JDK-8226602: Test convenience reactive primitives from java.net.http with RS TCK + JDK-8226683: Remove review suggestion from fix to 8219804 + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due to "exit code is 134" + JDK-8227766: CheckUnhandledOops is broken in MemAllocator + JDK-8227815: Minimal VM: set_state is not a member of AttachListener + JDK-8230674: Heap dumps should exclude dormant CDS archived objects of unloaded classes + JDK-8230808: Remove Access::equals() + JDK-8230841: Remove oopDesc::equals() + JDK-8231717: Improve performance of charset decoding when charset is always compactable + JDK-8232243: Wrong caret position in JTextPane on Windows with a screen resolution > 100% + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier (aarch64) + JDK-8233790: Forward output from heap dumper to jcmd/jmap + JDK-8233989: Create an IPv4 version of java/net/MulticastSocket/SetLoopbackMode.java + JDK-8234510: Remove file seeking requirement for writing a heap dump + JDK-8235211: serviceability/attach/ /RemovingUnixDomainSocketTest.java fails with AttachNotSupportedException: Unable to open socket file + JDK-8235216: typo in test filename + JDK-8235866: bump jtreg requiredVersion to 4.2b16 + JDK-8236111: narrow allowSmartActionArgs disabling + JDK-8236413: AbstractConnectTimeout should tolerate both NoRouteToHostException and UnresolvedAddressException + JDK-8236671: NullPointerException in JKS keystore + JDK-8238930: problem list compiler/c2/Test8004741.java + JDK-8238943: switch to jtreg 5.0 + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS breaks QuietOption.java test + JDK-8240983: Incorrect copyright header in Apache Santuario 2.1.3 files + JDK-8241336: Some java.net tests failed with NoRouteToHostException on MacOS with special network configuration + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler + JDK-8241768: git needs .gitattributes + JDK-8242882: opening jar file with large manifest might throw NegativeArraySizeException + JDK-8244973: serviceability/attach/ /RemovingUnixDomainSocketTest.java fails "stderr was not empty" + JDK-8245134: test/lib/jdk/test/lib/security/ /KeyStoreUtils.java should allow to specify aliases + JDK-8246261: TCKLocalTime.java failed due to "AssertionError: expected [18:14:22] but found [18:14:23]" + JDK-8246387: switch to jtreg 5.1 + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed allocating blob + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some offline cpus are present and cpusets.effective_cpus is not available + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/ /TextLayout/ArabicDiacriticTest.java can leave frame open + JDK-8248403: AArch64: Remove uses of kernel integer types + JDK-8248414: AArch64: Remove uses of long and unsigned long ints + JDK-8248657: Windows: strengthening in ThreadCritical regarding memory model + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC + JDK-8248671: AArch64: Remove unused variables + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper + JDK-8248816: C1: Fix signature conflict in LIRGenerator::strength_reduce_multiply + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java fails on Windows + JDK-8249548: backward focus traversal gets stuck in button group + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to failure due to stray packets and interference + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o bug-id + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses @ignore w/o bug-id + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses @ignore w/o bug-id + JDK-8250588: Shenandoah: LRB needs to save/restore fp registers for runtime call + JDK-8250824: AArch64: follow up for JDK-8248414 + JDK-8251166: Add automated testcases for changes done in JDK-8214112 + JDK-8251252: Add automated testcase for fix done in JDK-8214253 + JDK-8251254: Add automated test for fix done in JDK-8218472 + JDK-8251361: Potential race between Logger configuration and GCs in HttpURLConWithProxy test + JDK-8251549: Update docs on building for Git + JDK-8251945: SIGSEGV in PackageEntry::purge_qualified_exports() + JDK-8252194: Add automated test for fix done in JDK-8218469 + JDK-8252648: Shenandoah: name gang tasks consistently + JDK-8252825: Add automated test for fix done in JDK-8218479 + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java fails intermittently with C1 + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially consistent + JDK-8253048: AArch64: When CallLeaf, no need to preserve callee-saved registers in caller + JDK-8253424: Add support for running pre-submit testing using GitHub Actions + JDK-8253631: Remove unimplemented CompileBroker methods after JEP-165 + JDK-8253865: Pre-submit testing using GitHub Actions does not detect failures reliably + JDK-8253899: Make IsClassUnloadingEnabled signature match specification + JDK-8254024: Enhance native libs for AWT and Swing to work with GraalVM Native Image + JDK-8254054: Pre-submit testing using GitHub Actions should not use the deprecated set-env command + JDK-8254173: Add Zero, Minimal hotspot targets to submit workflow + JDK-8254175: Build no-pch configuration in debug mode for submit checks + JDK-8254244: Some code emitted by TemplateTable::branch is unused when running TieredCompilation + JDK-8254270: linux 32 bit build doesn't compile libjdwp/log_messages.c + JDK-8254282: Add Linux x86_32 builds to submit workflow + JDK-8254850: Update terminology in java.awt.GridBagLayout source code comments + JDK-8255255: Update Apache Santuario (XML Signature) to version 2.2.1 + JDK-8255305: Add Linux x86_32 tier1 to submit workflow + JDK-8255352: Archive important test outputs in submit workflow + JDK-8255373: Submit workflow artifact name is always "test-results_.zip" + JDK-8255452: Doing GC during JVMTI MethodExit event posting breaks return oop + JDK-8255718: Zero: VM should know it runs in interpreter-only mode + JDK-8255790: GTKL&F: Java 16 crashes on initialising GTKL&F on Manjaro Linux + JDK-8255810: Zero: build fails without JVMTI + JDK-8255895: Submit workflow artifacts miss hs_errs/replays due to ZIP include mismatch + JDK-8256127: Add cross-compiled foreign architectures builds to submit workflow + JDK-8256215: Shenandoah: re-organize saving/restoring machine state in assembler code + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for x86_32 and lower -XX:+UseSSE + JDK-8256277: Github Action build on macOS should define OS and Xcode versions + JDK-8256354: Github Action build on Windows should define OS and MSVC versions + JDK-8256393: Github Actions build on Linux should define OS and GCC versions + JDK-8256414: add optimized build to submit workflow + JDK-8256747: GitHub Actions: decouple the hotspot build-only jobs from Linux x64 testing + JDK-8257056: Submit workflow should apt-get update to avoid package installation errors + JDK-8257148: Remove obsolete code in AWTView.m + JDK-8257497: Update keytool to create AKID from the SKID of the issuing certificate as specified by RFC 5280 + JDK-8257620: Do not use objc_msgSend_stret to get macOS version + JDK-8257913: Add more known library locations to simplify Linux cross-compilation + JDK-8258703: Incorrect 512-bit vector registers restore on x86_32 + JDK-8259338: Add expiry exception for identrustdstx3 alias to VerifyCACerts.java test + JDK-8259535: ECDSA SignatureValue do not always have the specified length + JDK-8259679: GitHub actions should use MSVC 14.28 + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could not configure libc6:i386" + JDK-8260460: GitHub actions still fail on Linux x86_32 with "Could not configure libc6:i386" + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*) + JDK-8260923: Add more tests for SSLSocket input/output shutdown + JDK-8261072: AArch64: Fix MacroAssembler::get_thread convention + JDK-8261147: C2: Node is wrongly marked as reduction resulting in a wrong execution due to wrong vector instructions + JDK-8261238: NMT should not limit baselining by size threshold + JDK-8261496: Shenandoah: reconsider pacing updates memory ordering + JDK-8261652: Remove some dead comments from os_bsd_x86 + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync with the StackFrameStream + JDK-8262000: jdk/jfr/event/gc/detailed/ /TestPromotionFailedEventWithParallelScavenge.java failed with "OutOfMemoryError: Java heap space" + JDK-8262017: C2: assert(n != __null) failed: Bad immediate dominator info. + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3 + JDK-8262409: sun/security/ssl/SSLSocketImpl/ /SSLSocketImplThrowsWrongExceptions. SSL test failures caused by java failed with "Server reported the wrong exception" + JDK-8262470: Printed GlyphVector outline with low DPI has bad quality on Windows + JDK-8262862: Harden tests sun/security/x509/URICertStore/ /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java + JDK-8263136: C4530 was reported from VS 2019 at access bridge + JDK-8263227: C2: inconsistent spilling due to dead nodes in exception block + JDK-8263382: java/util/logging/ParentLoggersTest.java failed with "checkLoggers: getLoggerNames() returned unexpected loggers" + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X) + JDK-8263432: javac may report an invalid package/class clash on case insensitive filesystems + JDK-8263490: [macos] Crash occurs on JPasswordField with activated InputMethod + JDK-8263531: Remove unused buffer int + JDK-8263667: Avoid running GitHub actions on branches named pr/* + JDK-8263776: [JVMCI] add helper to perform Java upcalls + JDK-8264016: [JVMCI] add some thread local fields for use by JVMCI + JDK-8264752: SIGFPE crash with option FlightRecorderOptions:threadbuffersize=30M + JDK-8265132: C2 compilation fails with assert "missing precedence edge" + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after fix for JDK-8264821 + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay description + JDK-8265756: AArch64: initialize memory allocated for locals according to Windows AArch64 stack page growth requirement in template interpreter + JDK-8265761: Font with missed font family name is not properly printed on Windows + JDK-8265773: incorrect jdeps message "jdk8internals" to describe a removed JDK internal API + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns incorrect CPU load inside a container + JDK-8266018: Shenandoah: fix an incorrect assert + JDK-8266206: Build failure after JDK-8264752 with older GCCs + JDK-8266248: Compilation failure in PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5 + JDK-8266288: assert root method not found in witnessed_reabstraction_in_supers is too strong + JDK-8266404: Fatal error report generated with - XX:+CrashOnOutOfMemoryError should not contain suggestion to submit a bug report + JDK-8266480: Implicit null check optimization does not update control of hoisted memory operation + JDK-8266615: C2 incorrectly folds subtype checks involving an interface array + JDK-8266642: Improve ResolvedMethodTable hash function + JDK-8266749: AArch64: Backtracing broken on PAC enabled systems + JDK-8266761: AssertionError in sun.net.httpserver.ServerImpl.responseCompleted + JDK-8266813: Shenandoah: Use shorter instruction sequence for checking if marking in progress + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due to uninitialized BasicObjectLock::_displaced_header + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use Metaspace with less classes + JDK-8267396: Avoid recording "pc" in unhandled oops detector for better performance + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java test failed with assertion + JDK-8267424: CTW: C1 fails with "State must not be null" + JDK-8267459: Pasting Unicode characters into JShell does not work. + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type + JDK-8267666: Add option to jcmd GC.heap_dump to use existing file + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13 + JDK-8267751: (test) jtreg.SkippedException has no serial VersionUID + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle min_jint correctly + JDK-8268103: JNI functions incorrectly return a double after JDK-8265836 + JDK-8268127: Shenandoah: Heap size may be too small for region to align to large page size + JDK-8268261: C2: assert(n != __null) failed: Bad immediate dominator info. + JDK-8268347: C2: nested locks optimization may create unbalanced monitor enter/exit code + JDK-8268360: Missing check for infinite loop during node placement + JDK-8268362: [REDO] C2 crash when compile negative Arrays.copyOf length after loop + JDK-8268366: Incorrect calculation of has_fpu_registers in C1 linear scan + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to missing null check + JDK-8268417: Add test from JDK-8268360 + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm performance + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy fails with NPE + JDK-8268620: InfiniteLoopException test may fail on x86 platforms + JDK-8268635: Corrupt oop in ClassLoaderData + JDK-8268699: Shenandoah: Add test for JDK-8268127 + JDK-8268771: javadoc -notimestamp option does not work on index.html + JDK-8268775: Password is being converted to String in AccessibleJPasswordField + JDK-8268776: Test `ADatagramSocket.java` missing /othervm from @run tag + JDK-8268965: TCP Connection Reset when connecting simple socket to SSL server + JDK-8269304: Regression ~5% in 2005 in b27 + JDK-8269415: [11u] Remove ea from DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should be more resilient + JDK-8269529: javax/swing/reliability/ /HangDuringStaticInitialization.java fails in Windows debug build + JDK-8269594: assert(_handle_mark_nesting > 1) failed: memory leak: allocating handle outside HandleMark + JDK-8269614: [s390] Interpreter checks wrong bit for slow path instance allocation + JDK-8269650: Optimize gc-locker in [Get|Release]StringCritical for latin string + JDK-8269661: JNI_GetStringCritical does not lock char array + JDK-8269668: [aarch64] java.library.path not including /usr/lib64 + JDK-8269763: The JEditorPane is blank after JDK-8265167 + JDK-8269795: C2: Out of bounds array load floats above its range check in loop peeling resulting in SEGV + JDK-8269847: JDK-8269594 backport breaks 11u builds + JDK-8269850: Most JDK releases report macOS version 12 as 10.16 instead of 12.0 + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports incorrect process cpu usage in containers + JDK-8269882: stack-use-after-scope in NewObjectA + JDK-8269934: RunThese24H.java failed with EXCEPTION_ACCESS_VIOLATION in java_lang_Thread::get_thread_status + JDK-8270096: Shenandoah: Optimize gc/shenandoah/ /TestRefprocSanity.java for interpreter mode + JDK-8270137: Kerberos Credential Retrieval from Cache not Working in Cross-Realm Setup + JDK-8270184: [TESTBUG] Add coverage for jvmci ResolvedJavaType.toJavaName() for lambdas + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns incorrect type name for lambdas + JDK-8270556: Exclude security/infra/java/security/cert/ /CertPathValidator/certification/LetsEncryptCA + JDK-8270893: IndexOutOfBoundsException while reading large TIFF file + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies + JDK-8272124: Cgroup v1 initialization causes NullPointerException when cgroup path contains colon + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash when clone null CallProjections.fallthrough_ioproj + JDK-8272197: Update 11u GHA workflow with Shenandoah configurations + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz after JDK-8255790 + JDK-8272472: StackGuardPages test doesn't build with glibc 2.34 + JDK-8272602: [macos] not all KEY_PRESSED events sent when control modifier is used + JDK-8272628: Problemlist gc/stress/gcbasher/ /TestGCBasherWithCMS.java for x86_32 + JDK-8272700: [macos] Build failure with Xcode 13.0 after JDK-8264848 + JDK-8272772: Shenandoah: compiler/c2/aarch64/ /TestVolatilesShenandoah.java fails in 11u + JDK-8273939: Backport of 8248414 to JDK11 breaks MacroAssembler::adrp - Remove the unneeded icedtea-sound provider - Removed patches: * icedtea-sound-1.0.1-jdk9.patch * icedtea-sound-soundproperties.patch + not needed since the icedtea-sound provider is removed * jdk11-glibc234.patch + integrated upstream ==== jfsutils ==== - UsrMerge: don't override _sbindir (bsc#1191065) ==== juk ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== k3b ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kaccounts-integration ==== Version update (21.08.1 -> 21.08.2) Subpackages: libkaccounts2 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kaccounts-providers ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kactivities-stats ==== Version update (5.86.0 -> 5.87.0) - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kactivities5 ==== Version update (5.86.0 -> 5.87.0) Subpackages: kactivities5-imports libKF5Activities5 - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kactivitymanagerd ==== Version update (5.22.5 -> 5.23.1) Subpackages: kactivitymanagerd-lang - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - Changes since 5.23.0: * Fix build by lowering KDE_COMPILERSETTINGS_LEVEL - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - No code changes since 5.22.90 - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * desktop switch support for wayland (kde#439183) * Port away from deprecated KPluginLoader * krunner plugin: Avoid querying DBus runner unnecessarily * Clean up unneeded JSON parameter in kcoreaddons_add_plugin * Port from KPluginLoader::pluginsById to KPluginMetaData::pluginById * Use version-less qt DBus macros * Clean up ServiceType property usage for JSON based plugins * Remove empty dependencies value of JSON plugin metadata ==== kaddressbook ==== Version update (21.08.1 -> 21.08.2) Subpackages: kaddressbook-doc libKPimAddressbookImportExport5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kalarmcal ==== Version update (21.08.1 -> 21.08.2) Subpackages: akonadi-plugin-kalarmcal libKF5AlarmCalendar5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kalgebra ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kamera ==== Version update (21.08.1 -> 21.08.2) Subpackages: kamera-lang kio_kamera - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kanagram ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kapptemplate ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== karchive ==== Version update (5.86.0 -> 5.87.0) - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kate ==== Version update (21.08.1 -> 21.08.2) Subpackages: kate-plugins - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - Changes since 21.08.1: * Fix replicode plugin not deleting its toolview (kde#441859) * Fix commit dialog width - Change the license tag to LGPL-2.0-only AND LGPL-2.1-or-later. There are no GPL-3.0 files. ==== katomic ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kauth ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5Auth5 libKF5Auth5-lang libKF5AuthCore5 - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kbd ==== Subpackages: kbd-legacy - regenerated cz-map.patch needed for xkeyboard-config 2.34 update ==== kblackbox ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kblocks ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kbookmarks ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5Bookmarks5 libKF5Bookmarks5-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kbounce ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kbreakout ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kbruch ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kcachegrind ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kcalc ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kcalendarcore ==== Version update (5.86.0 -> 5.87.0) - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * Set the correct last modified time when creating an exception for a recurring event. * icalformat_p.cpp - support ATTACH parameter FILENAME (kde#436161) * Add Qt5Gui as dependency in pkgconfig file. * autotests/testicaltimezones.cpp - fix unused variable warning * Read floating date time as LocalTime * Implement PERIOD support in RDATE ==== kcalutils ==== Version update (21.08.1 -> 21.08.2) Subpackages: libKF5CalendarUtils5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - Changes since 21.08.1: * Display completion date as a date and time ==== kcharselect ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kcm_sddm ==== Version update (5.22.5 -> 5.23.1) Subpackages: kcm_sddm-lang - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - No code changes since 5.22.90 - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * Add keywords to SDDM KCM * Explicitly set KDE_COMPILERSETTINGS_LEVEL * Re-word synchronization text for greater usability (kde#439217) * Port OverlaySheet headers to use new title: property * Sync the current kscreen configuration * Print an error when the copy didn't work * Close sheets after successfully interacting with them (kde#433919,kde#436137) * Mark simple data files as non-copyrightable * Convert LicenseRef-KDE-Accepted-GPL license headers to SPDX * Convert license headers to SPDX ==== kcmutils ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5KCMUtils5 libKF5KCMUtils5-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * Fix Warning: Property type "Int" is not a known QVariant type * Add support for static builds * Add compat code for KService based plugin loading * Introduce KCModuleProxy::isChanged method * Un-overload KCModuleProxy:changed signal ==== kcodecs ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5Codecs5 libKF5Codecs5-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * KCodecs::decodeRFC2047String(): return "UTF-8" when multiple charsets used * Add CI configuration file ==== kcolorchooser ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kcompletion ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5Completion5 libKF5Completion5-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * New shouldAutoSuggest property on KCompletion. * Fix typo in argument name (autosubject -> autoSuggest) ==== kconfig ==== Version update (5.86.0 -> 5.87.0) Subpackages: kconf_update5 libKF5ConfigCore5 libKF5ConfigCore5-lang libKF5ConfigGui5 - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Android: Fix writing to config if path is a content:// Uri * Add Gitlab CI configuration * kconfigini: Only open the file once to write * Allow KConfigXT to use KSharedConfig::openStateConfig ==== kconfigwidgets ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5ConfigWidgets5 libKF5ConfigWidgets5-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * Do not emit deprecation warnings for overload which gets chosen by compiler ==== kcontacts ==== Version update (5.86.0 -> 5.87.0) Subpackages: kcontacts-lang libKF5Contacts5 - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kcoreaddons ==== Version update (5.86.0 -> 5.87.0) Subpackages: kcoreaddons-lang libKF5CoreAddons5 - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * KStringHandler: add a new perlSplit() overload that takes a QStringView * ktexttohtml: port QStringRef (deprecated) to QStringView and minor refactor * Port QStringRef (deprected) to QStringView * Deprecate KPluginMetaData::extraInformation * Don't forward-declare QVector * Fix python bindings generation ==== kcrash ==== Version update (5.86.0 -> 5.87.0) - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kcron ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kdav ==== Version update (5.86.0 -> 5.87.0) Subpackages: kdav-lang libKF5DAV5 - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kdbusaddons ==== Version update (5.86.0 -> 5.87.0) Subpackages: kdbusaddons-tools libKF5DBusAddons5 libKF5DBusAddons5-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * Introduce UpdateLaunchEnvJob * Correct to make sure we use the matching ECM version * Add CI configuration file ==== kde-cli-tools5 ==== Version update (5.22.5 -> 5.23.1) Subpackages: kde-cli-tools5-lang - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - No code changes since 5.22.90 - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * kioclient: Add a 'stat' command * Explicitly set KDE_COMPILERSETTINGS_LEVEL * kcmshell: Allow loading KCMs using plugin path * kcmshell: general code cleanup * General code cleanup * kcmshell: Re-group includes * Replace QtDBus include with includes for specific classes * plasma-open-settings: support both systemsettings:// and :/// * Include settings-open that allows summoning system settings from a URL * Relicense file to LGPL-2.0-or-later ==== kde-gtk-config5 ==== Version update (5.22.5 -> 5.23.1) Subpackages: kde-gtk-config5-gtk3 - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - Changes since 5.22.90: * kwin_bridge: Load DecorationButton without the "button" keyword (kde#442659) - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * kded: listen for changes to accent colours * Explicitly set KDE_COMPILERSETTINGS_LEVEL * Make sure to actually commit GSettings changes * Drop unused dependency on gtk+-2.0 * Minor color-reload-module clean-up. * Fix license identifier statement * Adapt to recent kdecoration private api changes * Restore preview.ui - Drop patches, now upstream: * 0001-Drop-unused-dependency-on-gtk-2.0.patch ==== kde-print-manager ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kdeclarative ==== Version update (5.86.0 -> 5.87.0) Subpackages: kdeclarative-components libKF5CalendarEvents5 libKF5Declarative5 libKF5Declarative5-lang libKF5QuickAddons5 - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * Make sure the object gets destroyed before the view * Add support for static builds * SimpleKCM: Remove last vestiges of previously-removed properties * SimpleKCM: remove custom header and footer handling ==== kdeconnect-kde ==== Version update (21.08.1 -> 21.08.2) Subpackages: kdeconnect-kde-zsh-completion - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - Changes since 21.08.1: * [sendreplydialog] Move focus on tab * [sendreplydialog] Submit on enter, enter newline on shift+enter * Install status icons again ==== kded ==== Version update (5.86.0 -> 5.87.0) Subpackages: kded-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kdeedu-data ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kdegraphics-thumbnailers ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kdelibs4support ==== Version update (5.86.0 -> 5.87.0) Subpackages: kdelibs4support-lang libKF5KDELibs4Support5 - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kdenetwork-filesharing ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kdepim-addons ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kdepim-runtime ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - Changes since 21.08.1: * Consider the online state when attempting to reconnect * DAV resource: support exception incidences ==== kdesu ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5Su5 libKF5Su5-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kdf ==== Version update (21.08.1 -> 21.08.2) Subpackages: kwikdisk - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kdialog ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kdiamond ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kdnssd-framework ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5DNSSD5 libKF5DNSSD5-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kdoctools ==== Version update (5.86.0 -> 5.87.0) Subpackages: kdoctools-lang libKF5DocTools5 - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kemoticons ==== Version update (5.86.0 -> 5.87.0) - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kernel-64kb ==== Version update (5.14.9 -> 5.14.11) - Linux 5.14.11 (bsc#1012628). - Revert "ARM: imx6q: drop of_platform_default_populate() from init_machine" (bsc#1012628). - Revert "brcmfmac: use ISO3166 country code and 0 rev as fallback" (bsc#1012628). - libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD (bsc#1012628). - perf/x86: Reset destroy callback on event init failure (bsc#1012628). - KVM: x86: nSVM: restore int_vector in svm_clear_vintr (bsc#1012628). - kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[] (bsc#1012628). - KVM: x86: reset pdptrs_from_userspace when exiting smm (bsc#1012628). - KVM: do not shrink halt_poll_ns below grow_start (bsc#1012628). - selftests: KVM: Align SMCCC call with the spec in steal_time (bsc#1012628). - kasan: always respect CONFIG_KASAN_STACK (bsc#1012628). - tools/vm/page-types: remove dependency on opt_file for idle page tracking (bsc#1012628). - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (bsc#1012628). - io_uring: allow conditional reschedule for intensive iterators (bsc#1012628). - x86/insn, tools/x86: Fix undefined behavior due to potential unaligned accesses (bsc#1012628). - smb3: correct smb3 ACL security descriptor (bsc#1012628). - irqchip/gic: Work around broken Renesas integration (bsc#1012628). - scsi: ses: Retry failed Send/Receive Diagnostic commands (bsc#1012628). - thermal/drivers/tsens: Fix wrong check for tzd in irq handlers (bsc#1012628). - nvme-fc: avoid race between time out and tear down (bsc#1012628). - nvme-fc: update hardware queues before using them (bsc#1012628). - swiotlb-xen: ensure to issue well-formed XENMEM_exchange requests (bsc#1012628). - Xen/gntdev: don't ignore kernel unmapping error (bsc#1012628). - selftests: kvm: fix get_run_delay() ignoring fscanf() return warn (bsc#1012628). - selftests: kvm: move get_run_delay() into lib/test_util (bsc#1012628). - selftests:kvm: fix get_trans_hugepagesz() ignoring fscanf() return warn (bsc#1012628). - selftests:kvm: fix get_warnings_count() ignoring fscanf() return warn (bsc#1012628). - selftests: be sure to make khdr before other targets (bsc#1012628). - habanalabs/gaudi: fix LBW RR configuration (bsc#1012628). - habanalabs: fail collective wait when not supported (bsc#1012628). - habanalabs/gaudi: use direct MSI in single mode (bsc#1012628). - usb: dwc2: check return value after calling platform_get_resource() (bsc#1012628). - usb: testusb: Fix for showing the connection speed (bsc#1012628). - scsi: elx: efct: Do not hold lock while calling fc_vport_terminate() (bsc#1012628). - scsi: sd: Free scsi_disk device via put_device() (bsc#1012628). - drm/amdkfd: fix svm_migrate_fini warning (bsc#1012628). - drm/amdkfd: handle svm migrate init error (bsc#1012628). - ext2: fix sleeping in atomic bugs on error (bsc#1012628). - platform/x86: gigabyte-wmi: add support for B550I Aorus Pro AX (bsc#1012628). - sparc64: fix pci_iounmap() when CONFIG_PCI is not set (bsc#1012628). - xen-netback: correct success/error reporting for the SKB-with-fraglist case (bsc#1012628). - net: mdio: introduce a shutdown method to mdio device drivers (bsc#1012628). - btrfs: fix mount failure due to past and transient device flush error (bsc#1012628). - btrfs: replace BUG_ON() in btrfs_csum_one_bio() with proper error handling (bsc#1012628). - nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN (bsc#1012628). - platform/x86: touchscreen_dmi: Update info for the Chuwi Hi10 Plus (CWI527) tablet (bsc#1012628). - platform/x86: touchscreen_dmi: Add info for the Chuwi HiBook (CWI514) tablet (bsc#1012628). - afs: Add missing vnode validation checks (bsc#1012628). - spi: rockchip: handle zero length transfers without timing out (bsc#1012628). - commit 834dddd - iwlwifi: Fix MODULE_FIRMWARE() for non-existing ucode version (boo#1191417). - commit 6597512 - Linux 5.14.10 (bsc#1012628). - media: hantro: Fix check for single irq (bsc#1012628). - media: cedrus: Fix SUNXI tile size calculation (bsc#1012628). - media: s5p-jpeg: rename JPEG marker constants to prevent build warnings (bsc#1012628). - ASoC: fsl_sai: register platform component before registering cpu dai (bsc#1012628). - ASoC: fsl_esai: register platform component before registering cpu dai (bsc#1012628). - ASoC: fsl_micfil: register platform component before registering cpu dai (bsc#1012628). - ASoC: fsl_spdif: register platform component before registering cpu dai (bsc#1012628). - ASoC: fsl_xcvr: register platform component before registering cpu dai (bsc#1012628). - ASoC: mediatek: common: handle NULL case in suspend/resume function (bsc#1012628). - scsi: elx: efct: Fix void-pointer-to-enum-cast warning for efc_nport_topology (bsc#1012628). - ASoC: SOF: Fix DSP oops stack dump output contents (bsc#1012628). - ASoC: SOF: imx: imx8: Bar index is only valid for IRAM and SRAM types (bsc#1012628). - ASoC: SOF: imx: imx8m: Bar index is only valid for IRAM and SRAM types (bsc#1012628). - pinctrl: qcom: spmi-gpio: correct parent irqspec translation (bsc#1012628). - net/mlx4_en: Resolve bad operstate value (bsc#1012628). - s390/qeth: Fix deadlock in remove_discipline (bsc#1012628). - s390/qeth: fix deadlock during failing recovery (bsc#1012628). - m68k: Update ->thread.esp0 before calling syscall_trace() in ret_from_signal (bsc#1012628). - NIOS2: fix kconfig unmet dependency warning for SERIAL_CORE_CONSOLE (bsc#1012628). - kasan: fix Kconfig check of CC_HAS_WORKING_NOSANITIZE_ADDRESS (bsc#1012628). - HID: amd_sfh: Fix potential NULL pointer dereference (bsc#1012628). - perf test: Fix DWARF unwind for optimized builds (bsc#1012628). - perf iostat: Use system-wide mode if the target cpu_list is unspecified (bsc#1012628). - perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *' (bsc#1012628). - watchdog/sb_watchdog: fix compilation problem due to COMPILE_TEST (bsc#1012628). - tty: Fix out-of-bound vmalloc access in imageblit (bsc#1012628). - cpufreq: schedutil: Use kobject release() method to free sugov_tunables (bsc#1012628). - scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS (bsc#1012628). - drm/amdgpu: adjust fence driver enable sequence (bsc#1012628). - drm/amdgpu: avoid over-handle of fence driver fini in s3 test (v2) (bsc#1012628). - drm/amdgpu: stop scheduler when calling hw_fini (v2) (bsc#1012628). - cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory (bsc#1012628). - scsi: ufs: ufs-pci: Fix Intel LKF link stability (bsc#1012628). - ALSA: rawmidi: introduce SNDRV_RAWMIDI_IOCTL_USER_PVERSION (bsc#1012628). - ALSA: firewire-motu: fix truncated bytes in message tracepoints (bsc#1012628). - ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i 15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops (bsc#1012628). - ACPI: NFIT: Use fallback node id when numa info in NFIT table is incorrect (bsc#1012628). - fs-verity: fix signed integer overflow with i_size near S64_MAX (bsc#1012628). - hwmon: (tmp421) handle I2C errors (bsc#1012628). - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (bsc#1012628). - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (bsc#1012628). - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (bsc#1012628). - gpio: pca953x: do not ignore i2c errors (bsc#1012628). - scsi: ufs: Fix illegal offset in UPIU event trace (bsc#1012628). - mac80211: fix use-after-free in CCMP/GCMP RX (bsc#1012628). - platform/x86/intel: hid: Add DMI switches allow list (bsc#1012628). - x86/kvmclock: Move this_cpu_pvti into kvmclock.h (bsc#1012628). - ptp: Fix ptp_kvm_getcrosststamp issue for x86 ptp_kvm (bsc#1012628). - KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect() (bsc#1012628). - KVM: x86: nSVM: don't copy virt_ext from vmcb12 (bsc#1012628). - KVM: x86: Clear KVM's cached guest CR3 at RESET/INIT (bsc#1012628). - KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks (bsc#1012628). - KVM: nVMX: Filter out all unsupported controls when eVMCS was activated (bsc#1012628). - KVM: SEV: Update svm_vm_copy_asid_from for SEV-ES (bsc#1012628). - KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA (bsc#1012628). - KVM: SEV: Acquire vcpu mutex when updating VMSA (bsc#1012628). - KVM: SEV: Allow some commands for mirror VM (bsc#1012628). - KVM: SVM: fix missing sev_decommission in sev_receive_start (bsc#1012628). - KVM: nVMX: Fix nested bus lock VM exit (bsc#1012628). - KVM: VMX: Fix a TSX_CTRL_CPUID_CLEAR field mask issue (bsc#1012628). - mmc: renesas_sdhi: fix regression with hard reset on old SDHIs (bsc#1012628). - media: ir_toy: prevent device from hanging during transmit (bsc#1012628). - RDMA/cma: Do not change route.addr.src_addr.ss_family (bsc#1012628). - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests (bsc#1012628). - nbd: use shifts rather than multiplies (bsc#1012628). - drm/amd/display: initialize backlight_ramping_override to false (bsc#1012628). - drm/amd/display: Pass PCI deviceid into DC (bsc#1012628). - drm/amd/display: Fix Display Flicker on embedded panels (bsc#1012628). - drm/amdgpu: force exit gfxoff on sdma resume for rmb s0ix (bsc#1012628). - drm/amdgpu: check tiling flags when creating FB on GFX8- (bsc#1012628). - drm/amdgpu: correct initial cp_hqd_quantum for gfx9 (bsc#1012628). - interconnect: qcom: sdm660: Fix id of slv_cnoc_mnoc_cfg (bsc#1012628). - interconnect: qcom: sdm660: Correct NOC_QOS_PRIORITY shift and mask (bsc#1012628). - drm/i915/gvt: fix the usage of ww lock in gvt scheduler (bsc#1012628). - ipvs: check that ip_vs_conn_tab_bits is between 8 and 20 (bsc#1012628). - bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog (bsc#1012628). - IB/cma: Do not send IGMP leaves for sendonly Multicast groups (bsc#1012628). - RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure (bsc#1012628). - bpf, mips: Validate conditional branch offsets (bsc#1012628). - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (bsc#1012628). - RDMA/irdma: Skip CQP ring during a reset (bsc#1012628). - RDMA/irdma: Validate number of CQ entries on create CQ (bsc#1012628). - RDMA/irdma: Report correct WC error when transport retry counter is exceeded (bsc#1012628). - RDMA/irdma: Report correct WC error when there are MW bind errors (bsc#1012628). - netfilter: nf_tables: unlink table before deleting it (bsc#1012628). - netfilter: log: work around missing softdep backend module (bsc#1012628). - Revert "mac80211: do not use low data rates for data frames with no ack flag" (bsc#1012628). - mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug (bsc#1012628). - mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap (bsc#1012628). - mac80211: mesh: fix potentially unaligned access (bsc#1012628). - mac80211-hwsim: fix late beacon hrtimer handling (bsc#1012628). - driver core: fw_devlink: Add support for FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD (bsc#1012628). - net: mdiobus: Set FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD for mdiobus parents (bsc#1012628). - sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb (bsc#1012628). - mptcp: don't return sockets in foreign netns (bsc#1012628). - mptcp: allow changing the 'backup' bit when no sockets are open (bsc#1012628). - RDMA/hns: Work around broken constant propagation in gcc 8 (bsc#1012628). - hwmon: (tmp421) report /PVLD condition as fault (bsc#1012628). - hwmon: (tmp421) fix rounding for negative values (bsc#1012628). - net: enetc: fix the incorrect clearing of IF_MODE bits (bsc#1012628). - net: ipv4: Fix rtnexthop len when RTA_FLOW is present (bsc#1012628). - smsc95xx: fix stalled rx after link change (bsc#1012628). - drm/i915/request: fix early tracepoints (bsc#1012628). - drm/i915: Remove warning from the rps worker (bsc#1012628). - dsa: mv88e6xxx: 6161: Use chip wide MAX MTU (bsc#1012628). - dsa: mv88e6xxx: Fix MTU definition (bsc#1012628). - dsa: mv88e6xxx: Include tagger overhead when setting MTU for DSA and CPU ports (bsc#1012628). - e100: fix length calculation in e100_get_regs_len (bsc#1012628). - e100: fix buffer overrun in e100_get_regs (bsc#1012628). - RDMA/hfi1: Fix kernel pointer leak (bsc#1012628). - RDMA/hns: Fix the size setting error when copying CQE in clean_cq() (bsc#1012628). - RDMA/hns: Add the check of the CQE size of the user space (bsc#1012628). - bpf: Exempt CAP_BPF from checks against bpf_jit_limit (bsc#1012628). - libbpf: Fix segfault in static linker for objects without BTF (bsc#1012628). - selftests, bpf: Fix makefile dependencies on libbpf (bsc#1012628). - selftests, bpf: test_lwt_ip_encap: Really disable rp_filter (bsc#1012628). - bpf, x86: Fix bpf mapping of atomic fetch implementation (bsc#1012628). - net: ks8851: fix link error (bsc#1012628). - ionic: fix gathering of debug stats (bsc#1012628). - Revert "block, bfq: honor already-setup queue merges" (bsc#1012628). - scsi: csiostor: Add module softdep on cxgb4 (bsc#1012628). - ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup (bsc#1012628). - net: hns3: do not allow call hns3_nic_net_open repeatedly (bsc#1012628). - net: hns3: remove tc enable checking (bsc#1012628). - net: hns3: don't rollback when destroy mqprio fail (bsc#1012628). - net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and HCLGE_FLAG_DCB_ENABLE (bsc#1012628). - net: hns3: fix show wrong state when add existing uc mac address (bsc#1012628). - net: hns3: reconstruct function hns3_self_test (bsc#1012628). - net: hns3: fix always enable rx vlan filter problem after selftest (bsc#1012628). - net: hns3: disable firmware compatible features when uninstall PF (bsc#1012628). - net: phy: bcm7xxx: Fixed indirect MMD operations (bsc#1012628). - net: sched: flower: protect fl_walk() with rcu (bsc#1012628). - net: stmmac: fix EEE init issue when paired with EEE capable PHYs (bsc#1012628). - af_unix: fix races in sk_peer_pid and sk_peer_cred accesses (bsc#1012628). - objtool: Teach get_alt_entry() about more relocation types (bsc#1012628). - perf/x86/intel: Update event constraints for ICX (bsc#1012628). - sched/fair: Add ancestors of unthrottled undecayed cfs_rq (bsc#1012628). - sched/fair: Null terminate buffer when updating tunable_scaling (bsc#1012628). - hwmon: (occ) Fix P10 VRM temp sensors (bsc#1012628). - hwmon: (pmbus/mp2975) Add missed POUT attribute for page 1 mp2975 controller (bsc#1012628). - kvm: fix objtool relocation warning (bsc#1012628). - nvme: add command id quirk for apple controllers (bsc#1012628). - elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings (bsc#1012628). - driver core: fw_devlink: Improve handling of cyclic dependencies (bsc#1012628). - debugfs: debugfs_create_file_size(): use IS_ERR to check for error (bsc#1012628). - ipack: ipoctal: fix stack information leak (bsc#1012628). - ipack: ipoctal: fix tty registration race (bsc#1012628). - ipack: ipoctal: fix tty-registration error handling (bsc#1012628). - ipack: ipoctal: fix missing allocation-failure check (bsc#1012628). - ipack: ipoctal: fix module reference leak (bsc#1012628). - ext4: fix loff_t overflow in ext4_max_bitmap_size() (bsc#1012628). - ext4: limit the number of blocks in one ADD_RANGE TLV (bsc#1012628). - ext4: fix reserved space counter leakage (bsc#1012628). - ext4: add error checking to ext4_ext_replay_set_iblocks() (bsc#1012628). - ext4: fix potential infinite loop in ext4_dx_readdir() (bsc#1012628). - ext4: flush s_error_work before journal destroy in ext4_fill_super (bsc#1012628). - HID: u2fzero: ignore incomplete packets without data (bsc#1012628). - net: udp: annotate data race around udp_sk(sk)->corkflag (bsc#1012628). - NIOS2: setup.c: drop unused variable 'dram_start' (bsc#1012628). - usb: hso: remove the bailout parameter (bsc#1012628). - HID: betop: fix slab-out-of-bounds Write in betop_probe (bsc#1012628). - netfilter: ipset: Fix oversized kvmalloc() calls (bsc#1012628). - mm: don't allow oversized kvmalloc() calls (bsc#1012628). - HID: usbhid: free raw_report buffers in usbhid_stop (bsc#1012628). - crypto: aesni - xts_crypt() return if walk.nbytes is 0 (bsc#1012628). - KVM: x86: Handle SRCU initialization failure during page track init (bsc#1012628). - netfilter: conntrack: serialize hash resizes and cleanups (bsc#1012628). - netfilter: nf_tables: Fix oversized kvmalloc() calls (bsc#1012628). - drivers: net: mhi: fix error path in mhi_net_newlink (bsc#1012628). - objtool: print out the symbol type when complaining about it (bsc#1012628). - HID: amd_sfh: Fix potential NULL pointer dereference - take 2 (bsc#1012628). - commit 7c980ba - ALSA: hda: intel: Allow repeatedly probing on codec configuration errors (bsc#1190801). - commit 924f4be - rpm: use _rpmmacrodir (boo#1191384) - commit e350c14 ==== kernel-source ==== Version update (5.14.9 -> 5.14.11) Subpackages: kernel-default kernel-docs - Linux 5.14.11 (bsc#1012628). - Revert "ARM: imx6q: drop of_platform_default_populate() from init_machine" (bsc#1012628). - Revert "brcmfmac: use ISO3166 country code and 0 rev as fallback" (bsc#1012628). - libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD (bsc#1012628). - perf/x86: Reset destroy callback on event init failure (bsc#1012628). - KVM: x86: nSVM: restore int_vector in svm_clear_vintr (bsc#1012628). - kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[] (bsc#1012628). - KVM: x86: reset pdptrs_from_userspace when exiting smm (bsc#1012628). - KVM: do not shrink halt_poll_ns below grow_start (bsc#1012628). - selftests: KVM: Align SMCCC call with the spec in steal_time (bsc#1012628). - kasan: always respect CONFIG_KASAN_STACK (bsc#1012628). - tools/vm/page-types: remove dependency on opt_file for idle page tracking (bsc#1012628). - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (bsc#1012628). - io_uring: allow conditional reschedule for intensive iterators (bsc#1012628). - x86/insn, tools/x86: Fix undefined behavior due to potential unaligned accesses (bsc#1012628). - smb3: correct smb3 ACL security descriptor (bsc#1012628). - irqchip/gic: Work around broken Renesas integration (bsc#1012628). - scsi: ses: Retry failed Send/Receive Diagnostic commands (bsc#1012628). - thermal/drivers/tsens: Fix wrong check for tzd in irq handlers (bsc#1012628). - nvme-fc: avoid race between time out and tear down (bsc#1012628). - nvme-fc: update hardware queues before using them (bsc#1012628). - swiotlb-xen: ensure to issue well-formed XENMEM_exchange requests (bsc#1012628). - Xen/gntdev: don't ignore kernel unmapping error (bsc#1012628). - selftests: kvm: fix get_run_delay() ignoring fscanf() return warn (bsc#1012628). - selftests: kvm: move get_run_delay() into lib/test_util (bsc#1012628). - selftests:kvm: fix get_trans_hugepagesz() ignoring fscanf() return warn (bsc#1012628). - selftests:kvm: fix get_warnings_count() ignoring fscanf() return warn (bsc#1012628). - selftests: be sure to make khdr before other targets (bsc#1012628). - habanalabs/gaudi: fix LBW RR configuration (bsc#1012628). - habanalabs: fail collective wait when not supported (bsc#1012628). - habanalabs/gaudi: use direct MSI in single mode (bsc#1012628). - usb: dwc2: check return value after calling platform_get_resource() (bsc#1012628). - usb: testusb: Fix for showing the connection speed (bsc#1012628). - scsi: elx: efct: Do not hold lock while calling fc_vport_terminate() (bsc#1012628). - scsi: sd: Free scsi_disk device via put_device() (bsc#1012628). - drm/amdkfd: fix svm_migrate_fini warning (bsc#1012628). - drm/amdkfd: handle svm migrate init error (bsc#1012628). - ext2: fix sleeping in atomic bugs on error (bsc#1012628). - platform/x86: gigabyte-wmi: add support for B550I Aorus Pro AX (bsc#1012628). - sparc64: fix pci_iounmap() when CONFIG_PCI is not set (bsc#1012628). - xen-netback: correct success/error reporting for the SKB-with-fraglist case (bsc#1012628). - net: mdio: introduce a shutdown method to mdio device drivers (bsc#1012628). - btrfs: fix mount failure due to past and transient device flush error (bsc#1012628). - btrfs: replace BUG_ON() in btrfs_csum_one_bio() with proper error handling (bsc#1012628). - nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN (bsc#1012628). - platform/x86: touchscreen_dmi: Update info for the Chuwi Hi10 Plus (CWI527) tablet (bsc#1012628). - platform/x86: touchscreen_dmi: Add info for the Chuwi HiBook (CWI514) tablet (bsc#1012628). - afs: Add missing vnode validation checks (bsc#1012628). - spi: rockchip: handle zero length transfers without timing out (bsc#1012628). - commit 834dddd - iwlwifi: Fix MODULE_FIRMWARE() for non-existing ucode version (boo#1191417). - commit 6597512 - Linux 5.14.10 (bsc#1012628). - media: hantro: Fix check for single irq (bsc#1012628). - media: cedrus: Fix SUNXI tile size calculation (bsc#1012628). - media: s5p-jpeg: rename JPEG marker constants to prevent build warnings (bsc#1012628). - ASoC: fsl_sai: register platform component before registering cpu dai (bsc#1012628). - ASoC: fsl_esai: register platform component before registering cpu dai (bsc#1012628). - ASoC: fsl_micfil: register platform component before registering cpu dai (bsc#1012628). - ASoC: fsl_spdif: register platform component before registering cpu dai (bsc#1012628). - ASoC: fsl_xcvr: register platform component before registering cpu dai (bsc#1012628). - ASoC: mediatek: common: handle NULL case in suspend/resume function (bsc#1012628). - scsi: elx: efct: Fix void-pointer-to-enum-cast warning for efc_nport_topology (bsc#1012628). - ASoC: SOF: Fix DSP oops stack dump output contents (bsc#1012628). - ASoC: SOF: imx: imx8: Bar index is only valid for IRAM and SRAM types (bsc#1012628). - ASoC: SOF: imx: imx8m: Bar index is only valid for IRAM and SRAM types (bsc#1012628). - pinctrl: qcom: spmi-gpio: correct parent irqspec translation (bsc#1012628). - net/mlx4_en: Resolve bad operstate value (bsc#1012628). - s390/qeth: Fix deadlock in remove_discipline (bsc#1012628). - s390/qeth: fix deadlock during failing recovery (bsc#1012628). - m68k: Update ->thread.esp0 before calling syscall_trace() in ret_from_signal (bsc#1012628). - NIOS2: fix kconfig unmet dependency warning for SERIAL_CORE_CONSOLE (bsc#1012628). - kasan: fix Kconfig check of CC_HAS_WORKING_NOSANITIZE_ADDRESS (bsc#1012628). - HID: amd_sfh: Fix potential NULL pointer dereference (bsc#1012628). - perf test: Fix DWARF unwind for optimized builds (bsc#1012628). - perf iostat: Use system-wide mode if the target cpu_list is unspecified (bsc#1012628). - perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *' (bsc#1012628). - watchdog/sb_watchdog: fix compilation problem due to COMPILE_TEST (bsc#1012628). - tty: Fix out-of-bound vmalloc access in imageblit (bsc#1012628). - cpufreq: schedutil: Use kobject release() method to free sugov_tunables (bsc#1012628). - scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS (bsc#1012628). - drm/amdgpu: adjust fence driver enable sequence (bsc#1012628). - drm/amdgpu: avoid over-handle of fence driver fini in s3 test (v2) (bsc#1012628). - drm/amdgpu: stop scheduler when calling hw_fini (v2) (bsc#1012628). - cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory (bsc#1012628). - scsi: ufs: ufs-pci: Fix Intel LKF link stability (bsc#1012628). - ALSA: rawmidi: introduce SNDRV_RAWMIDI_IOCTL_USER_PVERSION (bsc#1012628). - ALSA: firewire-motu: fix truncated bytes in message tracepoints (bsc#1012628). - ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i 15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops (bsc#1012628). - ACPI: NFIT: Use fallback node id when numa info in NFIT table is incorrect (bsc#1012628). - fs-verity: fix signed integer overflow with i_size near S64_MAX (bsc#1012628). - hwmon: (tmp421) handle I2C errors (bsc#1012628). - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (bsc#1012628). - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (bsc#1012628). - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (bsc#1012628). - gpio: pca953x: do not ignore i2c errors (bsc#1012628). - scsi: ufs: Fix illegal offset in UPIU event trace (bsc#1012628). - mac80211: fix use-after-free in CCMP/GCMP RX (bsc#1012628). - platform/x86/intel: hid: Add DMI switches allow list (bsc#1012628). - x86/kvmclock: Move this_cpu_pvti into kvmclock.h (bsc#1012628). - ptp: Fix ptp_kvm_getcrosststamp issue for x86 ptp_kvm (bsc#1012628). - KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect() (bsc#1012628). - KVM: x86: nSVM: don't copy virt_ext from vmcb12 (bsc#1012628). - KVM: x86: Clear KVM's cached guest CR3 at RESET/INIT (bsc#1012628). - KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks (bsc#1012628). - KVM: nVMX: Filter out all unsupported controls when eVMCS was activated (bsc#1012628). - KVM: SEV: Update svm_vm_copy_asid_from for SEV-ES (bsc#1012628). - KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA (bsc#1012628). - KVM: SEV: Acquire vcpu mutex when updating VMSA (bsc#1012628). - KVM: SEV: Allow some commands for mirror VM (bsc#1012628). - KVM: SVM: fix missing sev_decommission in sev_receive_start (bsc#1012628). - KVM: nVMX: Fix nested bus lock VM exit (bsc#1012628). - KVM: VMX: Fix a TSX_CTRL_CPUID_CLEAR field mask issue (bsc#1012628). - mmc: renesas_sdhi: fix regression with hard reset on old SDHIs (bsc#1012628). - media: ir_toy: prevent device from hanging during transmit (bsc#1012628). - RDMA/cma: Do not change route.addr.src_addr.ss_family (bsc#1012628). - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests (bsc#1012628). - nbd: use shifts rather than multiplies (bsc#1012628). - drm/amd/display: initialize backlight_ramping_override to false (bsc#1012628). - drm/amd/display: Pass PCI deviceid into DC (bsc#1012628). - drm/amd/display: Fix Display Flicker on embedded panels (bsc#1012628). - drm/amdgpu: force exit gfxoff on sdma resume for rmb s0ix (bsc#1012628). - drm/amdgpu: check tiling flags when creating FB on GFX8- (bsc#1012628). - drm/amdgpu: correct initial cp_hqd_quantum for gfx9 (bsc#1012628). - interconnect: qcom: sdm660: Fix id of slv_cnoc_mnoc_cfg (bsc#1012628). - interconnect: qcom: sdm660: Correct NOC_QOS_PRIORITY shift and mask (bsc#1012628). - drm/i915/gvt: fix the usage of ww lock in gvt scheduler (bsc#1012628). - ipvs: check that ip_vs_conn_tab_bits is between 8 and 20 (bsc#1012628). - bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog (bsc#1012628). - IB/cma: Do not send IGMP leaves for sendonly Multicast groups (bsc#1012628). - RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure (bsc#1012628). - bpf, mips: Validate conditional branch offsets (bsc#1012628). - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (bsc#1012628). - RDMA/irdma: Skip CQP ring during a reset (bsc#1012628). - RDMA/irdma: Validate number of CQ entries on create CQ (bsc#1012628). - RDMA/irdma: Report correct WC error when transport retry counter is exceeded (bsc#1012628). - RDMA/irdma: Report correct WC error when there are MW bind errors (bsc#1012628). - netfilter: nf_tables: unlink table before deleting it (bsc#1012628). - netfilter: log: work around missing softdep backend module (bsc#1012628). - Revert "mac80211: do not use low data rates for data frames with no ack flag" (bsc#1012628). - mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug (bsc#1012628). - mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap (bsc#1012628). - mac80211: mesh: fix potentially unaligned access (bsc#1012628). - mac80211-hwsim: fix late beacon hrtimer handling (bsc#1012628). - driver core: fw_devlink: Add support for FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD (bsc#1012628). - net: mdiobus: Set FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD for mdiobus parents (bsc#1012628). - sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb (bsc#1012628). - mptcp: don't return sockets in foreign netns (bsc#1012628). - mptcp: allow changing the 'backup' bit when no sockets are open (bsc#1012628). - RDMA/hns: Work around broken constant propagation in gcc 8 (bsc#1012628). - hwmon: (tmp421) report /PVLD condition as fault (bsc#1012628). - hwmon: (tmp421) fix rounding for negative values (bsc#1012628). - net: enetc: fix the incorrect clearing of IF_MODE bits (bsc#1012628). - net: ipv4: Fix rtnexthop len when RTA_FLOW is present (bsc#1012628). - smsc95xx: fix stalled rx after link change (bsc#1012628). - drm/i915/request: fix early tracepoints (bsc#1012628). - drm/i915: Remove warning from the rps worker (bsc#1012628). - dsa: mv88e6xxx: 6161: Use chip wide MAX MTU (bsc#1012628). - dsa: mv88e6xxx: Fix MTU definition (bsc#1012628). - dsa: mv88e6xxx: Include tagger overhead when setting MTU for DSA and CPU ports (bsc#1012628). - e100: fix length calculation in e100_get_regs_len (bsc#1012628). - e100: fix buffer overrun in e100_get_regs (bsc#1012628). - RDMA/hfi1: Fix kernel pointer leak (bsc#1012628). - RDMA/hns: Fix the size setting error when copying CQE in clean_cq() (bsc#1012628). - RDMA/hns: Add the check of the CQE size of the user space (bsc#1012628). - bpf: Exempt CAP_BPF from checks against bpf_jit_limit (bsc#1012628). - libbpf: Fix segfault in static linker for objects without BTF (bsc#1012628). - selftests, bpf: Fix makefile dependencies on libbpf (bsc#1012628). - selftests, bpf: test_lwt_ip_encap: Really disable rp_filter (bsc#1012628). - bpf, x86: Fix bpf mapping of atomic fetch implementation (bsc#1012628). - net: ks8851: fix link error (bsc#1012628). - ionic: fix gathering of debug stats (bsc#1012628). - Revert "block, bfq: honor already-setup queue merges" (bsc#1012628). - scsi: csiostor: Add module softdep on cxgb4 (bsc#1012628). - ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup (bsc#1012628). - net: hns3: do not allow call hns3_nic_net_open repeatedly (bsc#1012628). - net: hns3: remove tc enable checking (bsc#1012628). - net: hns3: don't rollback when destroy mqprio fail (bsc#1012628). - net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and HCLGE_FLAG_DCB_ENABLE (bsc#1012628). - net: hns3: fix show wrong state when add existing uc mac address (bsc#1012628). - net: hns3: reconstruct function hns3_self_test (bsc#1012628). - net: hns3: fix always enable rx vlan filter problem after selftest (bsc#1012628). - net: hns3: disable firmware compatible features when uninstall PF (bsc#1012628). - net: phy: bcm7xxx: Fixed indirect MMD operations (bsc#1012628). - net: sched: flower: protect fl_walk() with rcu (bsc#1012628). - net: stmmac: fix EEE init issue when paired with EEE capable PHYs (bsc#1012628). - af_unix: fix races in sk_peer_pid and sk_peer_cred accesses (bsc#1012628). - objtool: Teach get_alt_entry() about more relocation types (bsc#1012628). - perf/x86/intel: Update event constraints for ICX (bsc#1012628). - sched/fair: Add ancestors of unthrottled undecayed cfs_rq (bsc#1012628). - sched/fair: Null terminate buffer when updating tunable_scaling (bsc#1012628). - hwmon: (occ) Fix P10 VRM temp sensors (bsc#1012628). - hwmon: (pmbus/mp2975) Add missed POUT attribute for page 1 mp2975 controller (bsc#1012628). - kvm: fix objtool relocation warning (bsc#1012628). - nvme: add command id quirk for apple controllers (bsc#1012628). - elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings (bsc#1012628). - driver core: fw_devlink: Improve handling of cyclic dependencies (bsc#1012628). - debugfs: debugfs_create_file_size(): use IS_ERR to check for error (bsc#1012628). - ipack: ipoctal: fix stack information leak (bsc#1012628). - ipack: ipoctal: fix tty registration race (bsc#1012628). - ipack: ipoctal: fix tty-registration error handling (bsc#1012628). - ipack: ipoctal: fix missing allocation-failure check (bsc#1012628). - ipack: ipoctal: fix module reference leak (bsc#1012628). - ext4: fix loff_t overflow in ext4_max_bitmap_size() (bsc#1012628). - ext4: limit the number of blocks in one ADD_RANGE TLV (bsc#1012628). - ext4: fix reserved space counter leakage (bsc#1012628). - ext4: add error checking to ext4_ext_replay_set_iblocks() (bsc#1012628). - ext4: fix potential infinite loop in ext4_dx_readdir() (bsc#1012628). - ext4: flush s_error_work before journal destroy in ext4_fill_super (bsc#1012628). - HID: u2fzero: ignore incomplete packets without data (bsc#1012628). - net: udp: annotate data race around udp_sk(sk)->corkflag (bsc#1012628). - NIOS2: setup.c: drop unused variable 'dram_start' (bsc#1012628). - usb: hso: remove the bailout parameter (bsc#1012628). - HID: betop: fix slab-out-of-bounds Write in betop_probe (bsc#1012628). - netfilter: ipset: Fix oversized kvmalloc() calls (bsc#1012628). - mm: don't allow oversized kvmalloc() calls (bsc#1012628). - HID: usbhid: free raw_report buffers in usbhid_stop (bsc#1012628). - crypto: aesni - xts_crypt() return if walk.nbytes is 0 (bsc#1012628). - KVM: x86: Handle SRCU initialization failure during page track init (bsc#1012628). - netfilter: conntrack: serialize hash resizes and cleanups (bsc#1012628). - netfilter: nf_tables: Fix oversized kvmalloc() calls (bsc#1012628). - drivers: net: mhi: fix error path in mhi_net_newlink (bsc#1012628). - objtool: print out the symbol type when complaining about it (bsc#1012628). - HID: amd_sfh: Fix potential NULL pointer dereference - take 2 (bsc#1012628). - commit 7c980ba - ALSA: hda: intel: Allow repeatedly probing on codec configuration errors (bsc#1190801). - commit 924f4be - rpm: use _rpmmacrodir (boo#1191384) - commit e350c14 ==== kfilemetadata5 ==== Version update (5.86.0 -> 5.87.0) Subpackages: kfilemetadata5-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kgamma5 ==== Version update (5.22.5 -> 5.23.1) Subpackages: kgamma5-lang - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - No code changes since 5.22.90 - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * Explicitly set KDE_COMPILERSETTINGS_LEVEL ==== kgeography ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kget ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kglobalaccel ==== Version update (5.86.0 -> 5.87.0) Subpackages: kglobalaccel5 libKF5GlobalAccel5 libKF5GlobalAccel5-lang libKF5GlobalAccelPrivate5 - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * Remove obsolete LGPL-2.0-only license text * Relicense remaining LGPL-2.0-only file * Remove unneeded header ==== kgoldrunner ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kguiaddons ==== Version update (5.86.0 -> 5.87.0) - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * Use imported target for X11 libs * Add explicit option for controlling X11 support * Relicense remaining files away from LGPL-2.0-only * Add missing static dependency to Config.cmake.in ==== khangman ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== khelpcenter5 ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kholidays ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5Holidays5 libKF5Holidays5-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * Update Canadian holidays * Update README.md ==== khotkeys5 ==== Version update (5.22.5 -> 5.23.1) Subpackages: khotkeys5-lang - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - No code changes since 5.22.90 - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * Make unused variables anonymous or Q_UNUSED * Explicitly set KDE_COMPILERSETTINGS_LEVEL * Remove autotests * replace klineedit * helper: fix warning from .ui file * app: the kded library needn't link directly to kdelibs4 or xtest either * testing: the standalone (test)app needs no kdelibs4 or XTest * helpers: tidy up * lib: replace use of KApplication * KCM: use KF5-era UI-wrangling * CMake: fix up FindKF5 bits * Arts: one more ARTS-related file (was not hooked to build anymore) * Arts: fix build after ARTS-removal * Arts: remove ARTS-related files * lib: replace deprecated methods * Use version-less qt DBus macros ==== khtml ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5KHtml5 libKF5KHtml5-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== ki18n ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5I18n5 libKF5I18n5-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kiconthemes ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5IconThemes5 libKF5IconThemes5-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kidentitymanagement ==== Version update (21.08.1 -> 21.08.2) Subpackages: kidentitymanagement-lang libKF5IdentityManagement5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kidletime ==== Version update (5.86.0 -> 5.87.0) - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kig ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kimageformats ==== Version update (5.86.0 -> 5.87.0) Subpackages: kimageformats-eps - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * avif: performance and quality improvements ==== kimap ==== Version update (21.08.1 -> 21.08.2) Subpackages: kimap-lang libKF5IMAP5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - Changes since 21.08.1: * Disconnect rather than reconnect when not ignoring SSL errors ==== kinfocenter5 ==== Version update (5.22.5 -> 5.23.1) Subpackages: kinfocenter5-lang - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - Changes since 5.22.90: * fix up about-distro exec - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Too many changes to list here - Drop patches, now upstream: * 0001-Handle-libpci-errors-gracefully.patch * 0002-Enable-the-PCI-module-everywhere.patch - Drop patch, now longer necessary: * plasma-session-name.patch ==== kinit ==== Version update (5.86.0 -> 5.87.0) Subpackages: kinit-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * Fix KDE shutdown bug ==== kio ==== Version update (5.86.0 -> 5.87.0) Subpackages: kio-core kio-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Too many changes since 5.86.0, only listing bugfixes: * KUrlCompletion blocks autosuggestion from happening if the input is an exact directory path. (kde#420966) * KDirOperator: provide an option to enable showing open-with item actions (kde#440748) * Fix permissions when copying files (kde#404777) * KFileItem: refresh() shouldn't discard ACL attributes (kde#299155) * KPropertiesDialog: show text label with item name for readonly items too (kde#442237) ==== kio-extras5 ==== Version update (21.08.1 -> 21.08.2) Subpackages: libkioarchive5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - Changes since 21.08.1: * Fix kio-mtp with libmtp 1.1.19 ==== kio_audiocd ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kipi-plugins ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kirigami2 ==== Version update (5.86.0 -> 5.87.0) Subpackages: kirigami2-lang libKF5Kirigami2-5 - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Too many changes since 5.86.0, only listing bugfixes: * PageRow: Do not async load the global header (kde#442660) ==== kiriki ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kitemmodels ==== Version update (5.86.0 -> 5.87.0) Subpackages: kitemmodels-imports libKF5ItemModels5 - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kitemviews ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5ItemViews5 libKF5ItemViews5-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * Relicense files from LGPL-2.0-only to LGPL-2.0-or-later ==== kiten ==== Version update (21.08.1 -> 21.08.2) Subpackages: fonts-KanjiStrokeOrders - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kitinerary ==== Version update (21.08.1 -> 21.08.2) Subpackages: libKPimItinerary5 libKPimItinerary5-lang - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - Changes since 21.08.1: * Correctly decode HTML MIME nodes which specify codecs in HTML and MIME * Handle US date formats in Accor hotel reservations * Add extractor for onepagebooking * Add extractor for Feratel cards * Fix extracting English language SNCF tickets ==== kjobwidgets ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5JobWidgets5 libKF5JobWidgets5-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * Add CI configuration file ==== kjs ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5JS5 libKF5JSApi5 - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kjumpingcube ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kldap ==== Version update (21.08.1 -> 21.08.2) Subpackages: libKF5Ldap5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kleopatra ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - Changes since 21.08.1: * Ask GnuPG for the correct path for the uiserver socket (kde#441957) * Fix duplicate release versions * Fix version number * Use correct name for third number of RELEASE_SERVICE_VERSION ==== klines ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kmag ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kmahjongg ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kmail ==== Version update (21.08.1 -> 21.08.2) Subpackages: kmail-application-icons ktnef - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kmail-account-wizard ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kmailtransport ==== Version update (21.08.1 -> 21.08.2) Subpackages: libKF5MailTransport5 libKF5MailTransportAkonadi5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kmbox ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kmenuedit5 ==== Version update (5.22.5 -> 5.23.1) Subpackages: kmenuedit5-lang - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - No code changes since 5.22.90 - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * Explicitly set KDE_COMPILERSETTINGS_LEVEL * mimeData signature was changed in qt6 (scripted) * Add build support + clazy ==== kmime ==== Version update (21.08.1 -> 21.08.2) Subpackages: kmime-lang libKF5Mime5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kmines ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kmousetool ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kmouth ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kmplot ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== knavalbattle ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== knetwalk ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== knewstuff ==== Version update (5.86.0 -> 5.87.0) Subpackages: knewstuff-imports libKF5NewStuff5 libKF5NewStuff5-lang libKF5NewStuffCore5 - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Too many changes since 5.86.0, only listing bugfixes: * Fix crash in DownloadWidget (kde#443025) - Drop upstream patches: * 0001-Include-a-user-agent-on-KNS-requests.patch * fix-crash.patch ==== knotes ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== knotifications ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5Notifications5 libKF5Notifications5-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * Add support for static builds * Fix HIG URL * Correct the version of Phonon that we use * Remove non-KDE project ==== knotifyconfig ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5NotifyConfig5 libKF5NotifyConfig5-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kolf ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kollision ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kolourpaint ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kompare ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== konquest ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== konsole ==== Version update (21.08.1 -> 21.08.2) Subpackages: konsole-part konsole-part-lang - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - Changes since 21.08.1: * Update copyright year to 2021 (kde#442016) * improve session closing behavior (kde#401898) * Hide the Plugins menu if no plugins were loaded (kde#441199) * Fix the maximum port number in the SSH Manager plugin (kde#441889) * The default navigation method should be TabbedNavigation * Don't resize window when switching virtual desktops in OpenBox (kde#441610) - Drop upstream patch: * 0001-Don-t-resize-window-when-switching-virtual-desktops-.patch ==== kontact ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kontactinterface ==== Version update (21.08.1 -> 21.08.2) Subpackages: kontactinterface-lang libKF5KontactInterface5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== konversation ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kopete ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== korganizer ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - Changes since 21.08.1: * Remove duplicated workDays() function * Update the Search dialog when items in the calendar change * Separate the Search dialog and Event List configurations ==== kpackage ==== Version update (5.86.0 -> 5.87.0) Subpackages: kpackage-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kparts ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5Parts5 libKF5Parts5-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kpat ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kpeople5 ==== Version update (5.86.0 -> 5.87.0) Subpackages: kpeople5-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kpimtextedit ==== Version update (21.08.1 -> 21.08.2) Subpackages: libKF5PimTextEdit5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - Changes since 21.08.1: * Fix text color * Fix Bug 442416 - Text highlight while composing or replaying the message (kde#442416) ==== kpkpass ==== Version update (21.08.1 -> 21.08.2) Subpackages: libKPimPkPass5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kplotting ==== Version update (5.86.0 -> 5.87.0) - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kpty ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5Pty5 libKF5Pty5-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kqtquickcharts ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kquickcharts ==== Version update (5.86.0 -> 5.87.0) - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== krdc ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kreversi ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== krfb ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kross ==== Version update (5.86.0 -> 5.87.0) Subpackages: kross-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kruler ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kscreen5 ==== Version update (5.22.5 -> 5.23.1) Subpackages: kscreen5-lang kscreen5-plasmoid - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - Changes since 5.23.0: * Fix algorithm for common sizes in Generator::cloneScreens (kde#442822) - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - Changes since 5.22.90: * fix all the new settings * kcm: Use more conventional parent/background for OverlaySheet (kde#442563) - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * Remove obsolete COPYING files * Improve formatting of license headers * Clarify sponsoring note * Convert license headers to SPDX * Add keywords to display KCM to improve search * Do not bind "keep" to enter key * support rgb range setting * Allow to refresh view when modes change * feat(kcm): add revert timer * Import QtQuick 2.15 to enable Connection's items function onFoo Syntax * Explicitly set KDE_COMPILERSETTINGS_LEVEL * [kcm] Correct punctuation of "only when in tablet mode" string * [kcm] Sort output's refresh rates descending (kde#439515) * plasmoid: Use K_PLUGIN_CLASS_WITH_JSON directly * Update IRC network name in CONTRIBUTING.md * Use version-less qt DBus macros * [kcm] Show on mobile * [kcm] Align right edges of all comboboxes ==== kscreenlocker ==== Version update (5.22.5 -> 5.23.1) Subpackages: kscreenlocker-lang libKScreenLocker5 - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - Changes since 5.23.0: * Fix sleep and hibernate actions - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - No code changes since 5.22.90 - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * Add keywords to KScreenLocker to improve search * Explicitly set KDE_COMPILERSETTINGS_LEVEL * Avoid creating windows for placeholder screens. (kde#439096) * Simplify multi-screen handling * Move DBus logic back into the greeter * Use imported targets for X11 libs * kcheckpass: Fix incorrect kevent() argument * Handle ConvPutAuthAbort as an authentication failure (kde#438099) * Make it compile with last ecm * Remind people to log out of the VT after they unlock the session (kde#410772) * --warning: use non-deprecated API * Properly define Q_ENUM() * [kcm] Fix icon name in metadata.desktop * Use version-less qt DBus macros * Show kcm on mobile * Remove plasmashell protocol leftovers * Fix logind test ==== kservice ==== Version update (5.86.0 -> 5.87.0) Subpackages: kservice-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * Deprecate KAutostart class * Deprecate KService::parentApp * Deprecate KService::pluginKeyword property ==== kshisen ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== ksirk ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== ksmtp ==== Version update (21.08.1 -> 21.08.2) Subpackages: ksmtp-lang libKPimSMTP5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - Changes since 21.08.1: * Emit an error rather than reconnect when SSL errors are not ignored (kde#423424) ==== kspaceduel ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== ksquares ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== ksshaskpass5 ==== Version update (5.22.5 -> 5.23.1) Subpackages: ksshaskpass5-lang - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - No code changes since 5.22.90 - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * Explicitly set KDE_COMPILERSETTINGS_LEVEL ==== ksudoku ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== ksystemlog ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== ksystemstats5 ==== Version update (5.22.5 -> 5.23.1) - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - Changes since 5.22.90: * Fix ksystemstatstest failure * Add description for the Sensors package * Move find_package line * Fix missing "Hardware Sensors" on Linux (kde#442528) * Read extra amd gpu sensors * Correct discoverSensors chip detection (kde#442042) * Initialize some more pointer members to nullptr - Drop patches, now upstream: * 0001-Initialize-some-more-pointer-members-to-nullptr.patch * 0001-Fix-ksystemstatstest-failure.patch - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * [plugins/gpu] Initialise properties (kde#442023) * Discover more hardware gpu sensors (kde#438318) * Use sensors to read amd gpu temperature * Use SensorFeatureSensor in CPU plugin * Use SensorsFeatureSensor from libksysguard * Make libsensors required on Linux * Do not dereference iterator that has been invalidated * Only add a new VolumeObject if there's no other one with the same mounting point (kde#440477) * Add maximum for total GPU usage (kde#441148) * viewer: expand README with usage examples * viewer: drop the "rolling" display, expand diagnostics * daemon: log successfully loaded plugins, too * freebsd-cpu: fix CPU load data retrieval * freebsd-cpu: fix sysctl name of temperature sensor * Explicitly set KDE_COMPILERSETTINGS_LEVEL * Fix handling of IPV6 addresses (kde#436296) * gpu: Only scan pci devices * Add load averages sensors * Don't crash if there's no input subfeature (kde#439615) * Only add "All GPUs" sensors when there is at least one GPU with statistics (kde#436770) * Use 500ms update rate for network traffic sensors in NetworkManager backend * Filter duplicate provider names * Simplify plugin loading * Use version-less qt DBus macros * Init lib sensors centrally in the daemon (kde#437523) * Update .gitignore - Add patch to fix autotest failure: * 0001-Fix-ksystemstatstest-failure.patch - Add patch to fix crash on startup: * 0001-Initialize-some-more-pointer-members-to-nullptr.patch ==== kteatime ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== ktexteditor ==== Version update (5.86.0 -> 5.87.0) Subpackages: ktexteditor-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * The user is not selecting as soon as we clearSelection * fix missing i18n (kde#442071) ==== ktextwidgets ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5TextWidgets5 libKF5TextWidgets5-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * Handle RTL text selection the same way as Qt (kde#397922) ==== ktimer ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== ktnef ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== ktouch ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kturtle ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kubrick ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kunitconversion ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5UnitConversion5 libKF5UnitConversion5-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kwallet ==== Version update (5.86.0 -> 5.87.0) Subpackages: kwallet-tools kwallet-tools-lang kwalletd5 kwalletd5-lang libKF5Wallet5 libkwalletbackend5-5 - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kwalletmanager5 ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kwayland ==== Version update (5.86.0 -> 5.87.0) - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * KWayland depends on libraries/plasma-wayland-protocols ==== kwayland-integration ==== Version update (5.22.5 -> 5.23.1) - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - Changes since 5.23.0: * fix: Kicker's sub-menus are covered up by Plasma panels (kde#378694) - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - No code changes since 5.22.90 - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * fix a dirty shadows (kde#439408) * Implement setting frost * Add pre-commit hook for clang-format * Add .git-blame-ignore-revs file * Run clang-format * Explicitly set KDE_COMPILERSETTINGS_LEVEL * Guard use of activation proxy (kde#440448) * Fix compile with last ecm * Fix build with GCC * Be more explicit about types, hopefully fix CI builds * Improve the behaviour when we are requesting without a window * Also link against xkb and fix build * Provide an implementation for the xdg_activation_v1 API ==== kwayland-server ==== Version update (5.22.5 -> 5.23.1) - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - Changes since 5.22.90: * Automatically close fds for inert resources (kde#438097) * outputdevice: add missing done events * Send kde_output_device_v1.current_mode to the right resource * Fix texture format handling for Nvidia driver * fix rgb range sending (kde#442548) - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Too many changes to list here ==== kwidgetsaddons ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5WidgetsAddons5 libKF5WidgetsAddons5-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * Make lupdate happier * KCharSelect: Added option to show all blocks found in the data file (in the section menu). * KFontChooser: the widget shouldn't become wider when toggling show fixed only * KMessageDialog: disconnect default buttonbox signals as we emit done() manually ==== kwin5 ==== Version update (5.22.5 -> 5.23.1) Subpackages: kwin5-lang - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - Changes since 5.23.0: * platforms/drm: fix disabled outputs with legacy drivers * platforms/drm: reverse output creation order * x11: Properly unredirect windows if compositing is not possible (kde#443953) * Restore old behavior of Workspace::clientArea(clientOpt, Toplevel) (kde#443787) * Do not ask for decoration settings without guarding * scripting: Guard against nullptr m_client in WindowThumbnailItem (kde#443765) * Properly update parent item's bounding rect when moving item (kde#443756) * Fix AbstractClient::adjustedSize() for wayland windows with no committed buffer (kde#443705) * Set KDE_COMPILERSETTINGS_LEVEL * pipewire: Fix downloading software-rotated textures * [wayland] fix crash on startup with lv3:ralt_alt XKB option (kde#440027) - Drop patches, now upstream: * kde443953.patch - Add patch to fix black screen when compositing fails to initialize (kde#443953): * kde443953.patch - Make pipewire-devel BR versioned - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - Too many changes to list here - Drop patches, now upstream: * 0001-Fix-build-on-32bit-platforms.patch - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Too many changes to list here - Adjust 0001-Export-consistent-hostname-as-XAUTHLOCALHOSTNAME.patch - Add patch to fix build on 32bit: * 0001-Fix-build-on-32bit-platforms.patch ==== kwindowsystem ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5WindowSystem5 libKF5WindowSystem5-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== kwordquiz ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== kwrited5 ==== Version update (5.22.5 -> 5.23.1) - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - No code changes since 5.22.90 - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * Explicitly set KDE_COMPILERSETTINGS_LEVEL ==== kxmlgui ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5XmlGui5 libKF5XmlGui5-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * Add missing Q_INIT_RESOURCE(kxmlgui) * Replace "Libraries" by "Components" to show KAboutComponents info ==== layer-shell-qt ==== Version update (5.22.5 -> 5.23.1) - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - No code changes since 5.22.90 - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * Fix a crash when creating views on the placeholder screen * Explicitly set KDE_COMPILERSETTINGS_LEVEL * Fix compile with last ecm. * Mark .gitignore file as non-copyrightable ==== libHX ==== Version update (3.26 -> 4.2) - Update to release 4.2 * string: New functions ``HX_strtod_unit``, ``HX_strtoull_unit``, ``HX_unit_size``, ``HX_unit_size_cu`` for converting between sizes and human-readable sizes like 1457664 <-> "1.45M"/"1.39M". - Update to release 4.1 * io: fix a use-after-free in conjunction with HX_realpath - Update to release 4.0.1 * lib: add ``HX_slurp_fd``, ``HX_slurp_file`` * proc: add ``HXproc_switch_user`` * proc: add ``HXproc_top_fd`` * socket: add ``HX_socket_from_env`` * opt: add ``HXOPT_KEEP_ARGV`` flag ==== libKF5ModemManagerQt ==== Version update (5.86.0 -> 5.87.0) - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * Introduce countryCode Modem3gpp API ==== libKF5NetworkManagerQt ==== Version update (5.86.0 -> 5.87.0) - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== libaom ==== Version update (3.1.2 -> 3.2.0) - Update to version 3.2.0: * This release includes compression efficiency and perceptual quality improvements, speedup and memory optimizations, as well as some new features. * New Features: + Introduced speeds 7, 8, and 9 for all intra mode. + Introduced speed 10 for real time mode. + Introduced an API that allows external partition decisions. + SVC: added support for compound prediction. + SVC: added support for fixed SVC modes. * Compression Efficiency Improvements: + Intra-mode search improvement. + Improved real time (RT) mode BDrate savings by ~5% (RT speed 5) and ~12% (RT speed 6). The improvement was measured on the video conference set. + Improved real time mode for nonrd path (speed 7, 8, 9): BDrate gains of ~3-5%. + Rate control and RD adjustments based on ML research in VP9. Gains of ~0.5-1.0% for HD. * Perceptual Quality Improvements: + Added a new mode --deltaq-mode=3 to improve perceptual quality based on a differential contrast model for still images. + Added a new mode ?deltaq-mode=4 to improve perceptual quality based on user rated cq_level data set for still images. + Weighting of some intra mode and partition size choices to better manage and retain texture. * Speedup and Memory Optimizations: + Further improved 2-pass good quality encoder speed: . Speed 2 speedup: 18% . Speed 3 speedup: 22% . Speed 4 speedup: 37% . Speed 5 speedup: 30% . Speed 6 speedup: 20% + Optimized the real time encoder (measured on the video conference set): . RT speed 5 speedup: 110% . RT speed 6 speedup: 77% * Bug Fixes + Issue 3069: Fix one-pass mode keyframe placement off-by-one error. + Issue 3156: Fix a bug in av1_quantize_lp AVX2 optimization. - Drop libaom-CVE-2021-30475.patch: Fixed upstream. - Remove changesgenerate option from _service file, use data from CHANGELOG to fill .changes instead as it it much nicer and human readable than just a list of commit messages. - fix service data - Update to version 3.1.3: * Update CHANGELOG for v3.1.3-rc2 * Detect chroma subsampling more directly * Detect chroma subsampling more directly * image2yuvconfig() should calculate uv_crop_width * aom/aom_encoder.h: remove configure option reference * aom_encoder.h: fix rc_overshoot_pct range * Update AUTHORS,CHANGELOG,CMakeLists.txt for v3.1.3 * aom_install: don't exclude msvc from install * aom_install: use relpath for install * aom_install: Install lib dlls to bindir ==== libapparmor ==== - add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532) ==== libcap ==== Version update (2.51 -> 2.59) - update to 2.59: * Fixed a potential libcap memory leak by adding a destructor * Major improvement is that there is a path for Linux-PAM compliant applications to support setting Ambient vector Capabilities via pam_cap.so now * Added libcap cap_proc_root() API function * Added color support to captree * Fixed contrib/sucap/su to correctly handle the Inheritable flag * capsh enhancements * getcap -r / now generates readable output * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now runnable as standalone binaries * The module pam_cap.so now contains support for a default=<IAB> module argument * Enhanced capsh --suggest to also compare against the capability value names and not just their descriptions * Added capsh --current support * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su * Fix for a corner case infinite loop handling long strings * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs * Added a Go utility, captree, to display the process (and thread) graph along with the POSIX.1e and IAB capabilities of each PID{TID} tree. ==== libcdio ==== Subpackages: libcdio19 libiso9660-11 - Bump cdiopp_name libcdio++0 to libcdio++1, this was missed when it was bumped by upstream. Followup change in baselibs.conf to. - Split out new subpackage libiso9660++0, add needed Requires and entry in baselibs.conf. ==== libdlm ==== Version update (4.0.9 -> 4.1.0) Subpackages: libdlm3 - Update to v4.1.0+ (bsc#1191734) * include some fixes/enhancements upstream patches based on 4.1.0 tag + bug-1191734_0001-libdlm-add-stdint.h-to-api-header.patch + bug-1191734_0002-dlm_controld-create-var-parent-directories.patch + bug-1191734_0003-stonith_helper-fix-build.patch + bug-1191734_0004-plock-move-clear-waiter-to-debug-info.patch + bug-1191734_0005-treewide-try-to-resolve-symbols-at-linking-time.patch + bug-1191734_0006-dlm_controld-add-version-check-for-libquorum.patch + bug-1191734_0007-dlm_tool-man-add-command-joinleave-USAGE.patch + bug-1191734_0008-man-add-reload_config-in-dlm_tool-dlm.conf.patch + bug-1191734_0009-add-new-dlm_tool-command-reload_config.patch + bug-1191734_0010-dlm_tool-man-add-new-command-set_config.patch + bug-1191734_0011-dlm_tool-dlm_controld-add-new-feature-set_config.patch + bug-1191734_0012-fix-some-minor-bugs.patch + bug-1191734_0013-dlm_controld-fix-string-copies.patch + bug-1191734_0014-man-page-updates.patch * patch for compatible with corosync-2.4.5+ + bug-1191734_0015-Revert-dlm_controld-add-version-check-for-libquorum.patch + bug-1191734_0016-Revert-dlm_controld-use-new-quorum-api-to-detect-mis.patch * drop 2 patches which are already included in upstream code - cluster-ringid-seq.patch - sysmacros.patch * change name and modify patch for code changed - dlm_controld-add-note-that-the-dlm-file-is-not-creat.patch + 0004-man-dlm.conf-add-note-that-the-file-is-not-creat.patch * change libdlm.spec to seperate upsteam patch and suse special patch ==== libglvnd ==== - libglvnd.rpmlintrc * workaround for future buildcheck (boo#1191763) ==== libgphoto2 ==== - split out libgphoto2_port for now to meet new shared library policy requirements. bsc#1191764 ==== libgravatar ==== Version update (21.08.1 -> 21.08.2) Subpackages: libKF5Gravatar5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== libinput ==== Version update (1.19.1 -> 1.19.2) Subpackages: libinput-udev libinput10 - Update to release 1.19.2: * quirks: add quirk for GPD Win Max * evdev: disable button scroll timeout for extra mouse buttons * evdev: avoid usage of bogus BTN_FORWARD name * gestures: avoid processing the last hold and motion event twice * quirks: Add quirk for StarLabs clickpads with two phyisical buttons * quirks: Update dmi for StarBook Mk V * quirks: relax DMI modalias match for Purism Librem 14v1 ==== libkcddb ==== Version update (21.08.1 -> 21.08.2) Subpackages: libKF5Cddb5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== libkcompactdisc ==== Version update (21.08.1 -> 21.08.2) Subpackages: libKF5CompactDisc5 libkcompactdisc-lang - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== libkdcraw ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== libkdecoration2 ==== Version update (5.22.5 -> 5.23.1) Subpackages: libkdecorations2-5 libkdecorations2-5-lang - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - No code changes since 5.22.90 - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * Explicitly set KDE_COMPILERSETTINGS_LEVEL * Add kdecoration to plasma group for documentation purpose * Build KDecoration with -DQT_NO_KEYWORDS * Replace emit with Q_EMIT * Introduce Decoration::damaged signal ==== libkdegames ==== Version update (21.08.1 -> 21.08.2) Subpackages: kdegames-carddecks-default libkf5kdegames6 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== libkdepim ==== Version update (21.08.1 -> 21.08.2) Subpackages: libKF5Libkdepim5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== libkeduvocdocument ==== Version update (21.08.1 -> 21.08.2) Subpackages: libKEduVocDocument5 libkeduvocdocument-lang - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== libkexiv2 ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== libkgapi ==== Version update (21.08.1 -> 21.08.2) Subpackages: libKPimGAPICalendar5 libKPimGAPIContacts5 libKPimGAPICore5 libKPimGAPITasks5 libkgapi-lang sasl2-kdexoauth2 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== libkipi ==== Version update (21.08.1 -> 21.08.2) Subpackages: libKF5Kipi32_0_0 libkipi-data - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== libkleo ==== Version update (21.08.1 -> 21.08.2) Subpackages: libKF5Libkleo5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - Changes since 21.08.1: * src/CMakeLists.txt - New fix: Add Boost::headers to link libraries * Add Boost::headers to link libraries ==== libkmahjongg ==== Version update (21.08.1 -> 21.08.2) Subpackages: libKF5KMahjongglib5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== libkomparediff2 ==== Version update (21.08.1 -> 21.08.2) Subpackages: libkomparediff2-5 libkomparediff2-lang - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== libksane ==== Version update (21.08.1 -> 21.08.2) Subpackages: libKF5Sane5 libksane-lang - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - Changes since 21.08.1: * set initial values for the scan thread * Fix multi page detection when 'source' is const ==== libkscreen2 ==== Version update (5.22.5 -> 5.23.1) Subpackages: libKF5Screen7 libkscreen2-plugin - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - Changes since 5.22.90: * Fix autorotate when "only in tablet mode" is selected (kde#428626) * fix all the new settings (kde#442520) - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * wayland: Fix output hotplugging * wayland: Fix output transforms * add rgb range setting * Add support for plasma wayland protocol kde_output_device_v2 * Explicitly set KDE_COMPILERSETTINGS_LEVEL * Natural sort the outputs modes in kscreen-doctor * Use qEnvironmentVariable() with a default instead of qgetenv() * dpms: Remove boilerplatey code * dpms: Do not hardcode the wayland socket * Update IRC network name in CONTRIBUTING.md * Use version-less qt DBus macros * We depend against 5.82 * Use the same wayland connection to fetch screen information ==== libksieve ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== libksysguard5 ==== Version update (5.22.5 -> 5.23.1) Subpackages: ksysguardsystemstats-data libKSysGuardSystemStats1 libksysguard5-imports libksysguard5-lang - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - Changes since 5.22.90: * Add Plasma System Monitor to "Tools" menu - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Too many changes to list here ==== libktorrent ==== Version update (21.08.1 -> 21.08.2) Subpackages: libKF5Torrent6 libktorrent-lang - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== libqb ==== Version update (2.0.2+20201203.def947e -> 2.0.3+20210303.404adbc) - Update to version 2.0.3+20210303.404adbc (v2.0.3): - syslog: Add a message-id parameter for messages (gh#ClusterLabs/libqb#433) - timers: Add some locking (gh#ClusterLabs/libqb#436) - ipcc: Have a few goes at tidying up after a dead server (gh#ClusterLabs/libqb#434) - strlcpy: Check for maxlen underflow (gh#ClusterLabs/libqb#432) - doxygen2man: fix printing of lines starting with '.' (gh#ClusterLabs/libqb#431) - doxygen2man: ignore all-whitespace brief descriptions (gh#ClusterLabs/libqb#430) ==== libqt5-qttranslations ==== Version update (5.15.2+kde20 -> 5.15.2+kde22) - Update to version 5.15.2+kde22: * fix pt_BR meta catalog * rename (outdated) qt_pt.ts => qt_pt_PT.ts ==== libreoffice ==== Version update (7.1.5.2 -> 7.2.2.2) Subpackages: libreoffice-base libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-en libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit - Update to 7.2.2.2 - Update to 7.2.2.1 - Refresh pld-skia-patches.patch - Fix bsc#1189813: LO-L3: Shadow effect for tables in PPTX partly incorrect * bsc1189813.patch - Add vendored poppler to use for all codestreams except Tumbleweed. - Use vendored boost for all codestreams except Tumbleweed. Update boost vendored version. - Update to 7.2.1.2: * LO minor release - Added patch: * pld-skia-patches.patch * skia-freetype2.11.patch ==== librsvg ==== Version update (2.52.0 -> 2.52.2) Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0 - Update to version 2.52.2: + New features: - rsvg-convert now supports generating multi-page PDFs in a sensible way. - With one SVG document per page, each page with the SVG's natural size: - rsvg-convert --format=pdf -o out.pdf a.svg b.svg c.svg - With all pages sized as portrait US Letter, and each SVG scaled to fit so that there is a 1in margin around each page: rsvg-convert --format=pdf -o out.pdf \ - -page-width=8.5in --page-height=11in \ - -width=6.5in --height=8.5in --keep-aspect-ratio \ - -top=1in --left=1in a.svg b.svg c.svg Please see the man page for details. - Support <a> elements inside <text>. Also, support the CSS :link pseudo-class for matching against links. - Support the CSS :lang() pseudo-class for matching against an element's xml:lang attribute. - Support the mask-type property from SVG2. + Bugs fixed: - Don't panic when a shorthand property is set to inherit. - Fix regression with the viewport size of interior <svg> elements. - Allow length units to be case-insensitive, per SVG2. + Documentation: - There is now a FEATURES.md in the repository, where you can see all the elements, attributes, and properties that librsvg supports. We will be adding detail to this gradually. - For developers, there is now devel-docs/adding-a-property.md with a tutorial on how to add support for new CSS properties. - Update to version 2.52.1: + Fix ordering of tspan inside text elements for right-to-left languages. + Fix text-anchor positioning for right-to-left languages. + Fix regression in computing sizes when an SVG has only one of width/height and a viewBox. + Spec compliance - the writing-mode property applies only to text elements, no to individual tspan elements. + Fix build on big-endian platforms. + Clarify documentation for the rsvg_handle_write() / rsvg_handle_close() deprecated APIs. ==== libsamplerate ==== Version update (0.2.1 -> 0.2.2) - update to 0.2.2: * Fix CMake overlinking for examples (#146) * Switch to GCC's visibility for hiding more implementation details * Check GNU ld instead of gcc for exported symbols control logic in configure.ac * Disable static builds using Autotools by default. * ABI version incompatibility between Autotools and CMake build on Apple platforms. * Fixes and improvements for CMake build system. * Fixes and improvements for Autotools build system. * Switch to .xz over .bz2 for release tarballs. * Minor bug fixes and updates. ==== libstorage-ng ==== Version update (4.4.43 -> 4.4.51) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Czech) (bsc#1149754) - 4.4.51 - merge gh#openSUSE/libstorage-ng#840 - BIOS RAIDs can also not be removed - 4.4.50 - Translated using Weblate (Japanese) (bsc#1149754) - 4.4.49 - merge gh#openSUSE/libstorage-ng#839 - allow to create partitions with any number - coding style - 4.4.48 - merge gh#openSUSE/libstorage-ng#838 - Use dev name in fstab for LUKS devices (jsc#SLE-20416, bsc#1181196) - 4.4.47 - Translated using Weblate (Slovak) (bsc#1149754) - 4.4.46 - merge gh#openSUSE/libstorage-ng#837 - simplified parted flag handling - added partition id for 'linux-home' - 4.4.45 - merge gh#openSUSE/libstorage-ng#836 - added non-const versions of several existing functions - added detect_remove_info() - 4.4.44 ==== libteam ==== - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_teamd@.service.patch ==== liburing ==== Version update (2.0 -> 2.1) - update to 2.1: * Ignore spurious fadvise/madvise failures * build: add -D_GNU_SOURCE to all CPPFLAGS/CFLAGS. * man: clean up spelling * man/io_uring_enter.2: add notes about direct open/accept * io_uring.h: sync with 5.15 kernel * Fix IORING_REGISTER_IOWQ_MAX_WORKERS name * man: document new register/update API * liburing: add helpers for direct open/accept * liburing.h: correct max_worker name * Change IORING_REGISTER_IOWQ_MAX_UNBOUND_WORKERS * src/syscall.h: get rid of useless externs * man/io_uring_enter.2: document IORING_ENTER_EXT_ARG * Add io_uring_register_iowq_max_unbound() helper * Get rid of useless 'extern' on function declarations in liburing.h * Add (UN)REGISTER_IOWQ_AFF helpers * man/io_uring_register.2: note when MAX_UNBOUND became available * man/io_uring_register.2: add missing punctuation * man/io_uring_register.2: document IORING_REGISTER_IOWQ_MAX_UNBOUND * man/io_uring_enter.2: add IORING_OP_TIMEOUT clock sources * man/io_uring_enter.2: improve timeout entry * man/io_uring_enter.2: update SQE * man/io_uring_enter.2: note that not all requests support fixed files * man/io_uring_enter.2: add new 5.15 opcodes * man/io_uring_enter.2: note that cqe->flags is indeed used * man/io_uring_enter.2: add poll update and multishot mode * man/io_uring_register.2: add IORING_(UN)REGISTER_IOWQ * man: update notes on register quiesce * man: fix io_uring_sqe alignment * register: add tagging and buf update helpers * liburing.h: make header clean for implicit sign and size conversions * configure: document --cc and --cxx options * io_uring: update buffer update feature testing * liburing.h: dedup poll mask conversion * liburing.h: add a multipoll helper * Update io_uring.h * examples: disable ucontext-cp for elbrus (e2k) architecture * Update io_uring_setup.2 * man/io_uring_setup.2: document the two most recent FEAT flags * man/io_uring_setup.2: make sure FEAT flags are kernel versioned * correct syscall NR in mips * Fix 32-bit compile warnings * liburing.h: make all file/IO offset __u64 * src/queue: don't flush SQ ring for new wait interface * man/io_uring_enter.2: further clarify what cqe->res holds * Clarify information about error results * Refer to the accept_flags in io_uring_enter manual * Fix a bug due to the unreleased lock before function returns * debian/rules: add missing slash for relativelibdir * man/io_uring_enter.2: clarify io_uring_enter(2) SQPOLL return value * liburing.h: add linkat prep helper * io_uring.h: add linkat opcode * liburing.h: add symlinkat prep helper * io_uring.h: add symlinkat opcode * liburing.h: add mkdirat prep helper * update rsrc register/update ABI and tests * queue: clean up SQ flushing * io_uring_enter(2): Clarify how to read from and write to non-seekable files * clarify an edge case of IORING_SETUP_SQ_AFF * io_uring_enter(2): clarify OP_READ and OP_WRITE * sync io_uring.h API file with Linux 5.13 * man: Fix typo in man io_uring_queue_exit * examples/link-cp: fix a couple of strerror negations * src/setup: don't treat dummy ring init as failure * src/setup: add some documentation to the memlock helpers * examples/ucontext-cp.c: cope with variable SIGSTKSZ * setup: provide helpers to inquire about necessary mlock sizes * examples/io_uring-cp: wait for pending writes before exit copy loop * spec: add explicit build dependency on make * spec: bump version to 2.0 * man/io_uring_enter.2: note that -EBUSY can also happen for getevents ==== libvirt ==== Version update (7.7.0 -> 7.8.0) Subpackages: libvirt-client libvirt-daemon libvirt-daemon-driver-interface libvirt-daemon-driver-lxc libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lxc libvirt-daemon-qemu libvirt-libs - supportconfig: Use systemctl command 'is-active' instead of 'is-enabled' when checking if libvirtd is active - Drop 'Requires: libvirt-daemon-driver-lxc' from the main libvirt package jsc#SLE-22296 - qemu: Do not report eof when processing monitor IO 2703b0b5-qemu-dont-report-eof.patch bsc#1190917 - lxc: controller: Fix container launch on cgroup v1 1b9ce05c-lxc-fix-cgroupV1.patch boo#1183247 - tools: Fix virt-host-validate SEV detection 3f9c1a4b-fix-host-validate-sev.patch boo#1188715 - Update to libvirt 7.8.0 - jsc#SLE-18260 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html - Dropped patches: b75a16ae-libxl-improve-die-id.patch, 65fab900-libxl-fix-driver-reload.patch, 51eb680b-libxl-dont-autostart-on-reload.patch - spec: Fix hangs during package update bsc#1177902, bsc#1190693 - spec: Don't add --timeout arg to /etc/sysconfig/libvirtd when running in traditional mode without socket activation bsc#1190695 ==== libwebp ==== Version update (1.2.0 -> 1.2.1) Subpackages: libwebp7 libwebpdemux2 libwebpmux3 - update to 1.2.1: * minor lossless encoder improvements and x86 color conversion speed up * further security related hardening in libwebp & examples * toolchain updates and bug fixes * use more inclusive language within the source ==== libyui ==== Version update (4.2.16 -> 4.2.19) - Fixed crash in NCurses online update when retracted packages are present (bsc#1191130) - 4.2.19 - Add debug_label as filter and improve error handling (bsc#1174390) - 4.2.18 - Fixed empty entries in YQPackageSelector Zypp history window (bsc#1191430) - Added missing textdomain (bsc#1190805) - 4.2.17 ==== libyui-ncurses ==== Version update (4.2.16 -> 4.2.19) - Fixed crash in NCurses online update when retracted packages are present (bsc#1191130) - 4.2.19 - Add debug_label as filter and improve error handling (bsc#1174390) - 4.2.18 - Fixed empty entries in YQPackageSelector Zypp history window (bsc#1191430) - Added missing textdomain (bsc#1190805) - 4.2.17 ==== libyui-ncurses-pkg ==== Version update (4.2.16 -> 4.2.19) - Fixed crash in NCurses online update when retracted packages are present (bsc#1191130) - 4.2.19 - Add debug_label as filter and improve error handling (bsc#1174390) - 4.2.18 - Fixed empty entries in YQPackageSelector Zypp history window (bsc#1191430) - Added missing textdomain (bsc#1190805) - 4.2.17 ==== libyui-qt ==== Version update (4.2.16 -> 4.2.19) - Fixed crash in NCurses online update when retracted packages are present (bsc#1191130) - 4.2.19 - Add debug_label as filter and improve error handling (bsc#1174390) - 4.2.18 - Fixed empty entries in YQPackageSelector Zypp history window (bsc#1191430) - Added missing textdomain (bsc#1190805) - 4.2.17 ==== libyui-qt-graph ==== Version update (4.2.16 -> 4.2.19) - Fixed crash in NCurses online update when retracted packages are present (bsc#1191130) - 4.2.19 - Add debug_label as filter and improve error handling (bsc#1174390) - 4.2.18 - Fixed empty entries in YQPackageSelector Zypp history window (bsc#1191430) - Added missing textdomain (bsc#1190805) - 4.2.17 ==== libyui-qt-pkg ==== Version update (4.2.16 -> 4.2.19) - Fixed crash in NCurses online update when retracted packages are present (bsc#1191130) - 4.2.19 - Add debug_label as filter and improve error handling (bsc#1174390) - 4.2.18 - Fixed empty entries in YQPackageSelector Zypp history window (bsc#1191430) - Added missing textdomain (bsc#1190805) - 4.2.17 ==== libzypp ==== Version update (17.28.4 -> 17.28.6) - Zypper should keep cached files if transaction is aborted (bsc#1190356) Singletrans mode currently does not keep files around if the transaction is aborted. This patch fixes the problem. - Require a minimum number of mirrors for multicurl (bsc#1191609) - Use procfs to detect nr of open fd's if rlimit is too high (bsc#1191324) Especially in a VM iterating over all possible fd's to close open ones right before a exec() slows down zypper unnecessarily. This patch uses /proc/self/fd to iterate over open fd's in case rlimit is above 1024. - po: Fix some lost '%' signs in positional args (bsc#1191370) - RepoManager: Don't probe for plaindir repo if URL schema is plugin: (bsc#1191286) - version 17.28.6 (22) - Downloader does not respect checkExistsOnly flag (bsc#1190712) A missing check causes zyppng::Downloader to always download full files even if the checkExistsOnly flag is set. This patch adds the missing logic. - Fix kernel-*-livepatch removal in purge-kernels (bsc#1190815) The kernel-*-livepatch packages are supposed to serve as a stable handle for the ephemeral kernel livepatch packages. See FATE#320268 for details. As part of the kernel live patching ecosystem, kernel-*-livepatch packages should not block the purge-kernels step. - version 17.28.5 (22) ==== libzypp-plugin-appdata ==== - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_appstream-sync-cache.service.patch ==== lightdm ==== Subpackages: liblightdm-gobject-1-0 lightdm-lang - Replace /usr/etc to /etc for products if suse_version < 1550 (bsc#1190289) ==== lirc ==== - Revert "Require typelib packages": better to have rpm auto-detect them. - Add gobject-introspection BuildRequires to have the typelib dep scanner on board. - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_irexec.service.patch * harden_lircd-uinput.service.patch * harden_lircd.service.patch * harden_lircmd.service.patch - Require typelib packages, otherwise lirc-setup fails to start. ==== lokalize ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== lskat ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== luajit ==== - Exclude s390x for now. There is a not-yet-upstreamed port available, but we would need to rebase it for our release. ==== mailcommon ==== Version update (21.08.1 -> 21.08.2) Subpackages: libKF5MailCommon5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - Changes since 21.08.1: * Make sure that quota value was defined ==== mailimporter ==== Version update (21.08.1 -> 21.08.2) Subpackages: libKF5MailImporter5 libKF5MailImporterAkonadi5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== mailutils ==== - Modify patch mailutils-3.5-guile-2.0.patch and apply later if needed for older guile versions - Increase somajor spec file macro to value 8 (boo#1191772) - Add check for any version change of shared the libraries ==== man ==== - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_man-db.service.patch Modified: * man-db-create.service ==== mariadb ==== Subpackages: libmariadbd19 mariadb-client mariadb-errormessages - Fix socket address in mariadb@.socket file ==== mariadb-connector-c ==== Version update (3.2.3 -> 3.2.4) - Update to 3.2.4: * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-connector-c-324-release-notes https://mariadb.com/kb/en/library/mariadb-connector-c-324-changelog ==== mbox-importer ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== mc ==== Version update (4.8.26 -> 4.8.27) Subpackages: mc-lang - Midnight Commander 4.8.27: * Core - Minimal version of Autoconf is 2.64 (#3603) - Minimal version of Automake is 1.12 (#3986) - Minimal version of Gettext is 0.18.2 (#3603) - Minimal version of libssh2 is 1.2.8 (#4259) - Reimplement version detection (#3603, #4249) - Significantly reduce rebuilt time after version change (#2252, #4266) - Drop automatic migration of configuration from ~/.mc to XDG-based directories (#3682) - zsh: support custom configuration file: ~/.local/share/mc/.zshrc (#4203) - Widgets: implement WST_VISIBLE state to show/hide widgets (#2919) - Find File: add Follow symlinks option (#2020) * VFS - extfs: support unrar-6 (#4154) - extfs: support official 7z binary (7zz) (#4239) - ftpfs: apply file list parser from lftp project (#2841, #3174) * Editor - Word completion: get candidates from all open files (#4160) - etags: get rid of hardcoded list length and window width (#4132) - Update syntax files: - python (#4140) - Add syntax highlighting: - Verilog and SystemVerilog? header files (#4215) - JSON (#4250) - openrc-run scripts (#4246) * Viewer * Diff viewer * Misc - Code clean up (#4179, #4173, #4269) - Filehighlight of c++ and h++ files as sources (#4194) - Filehighlight of JSON files as documents (#4250) - Support of alacritty terminal emulator (?https://github.com/alacritty/alacritty) (#4248) - Support of foot terminal emulator (?https://codeberg.org/dnkl/foot) (#4251) - Support of (alt+)shift+arrow keys in st terminal emulator (st.suckless.org) (#4267) - Mouse support in screen: don't check variable (#4233) - mc.ext: support fb2 e-books (#4167) - ext.d: use mediainfo to view info about various media files (#4167) - Remove OS/distro-specific package-related stuff from source tree (#4217) * Fixes - FTBFS against NCurses on OS X 10.9.5 (#4181) - Segfault on dialog before panels get visible (#4244) - Crash if shadow is out of screen (build against NCurses) (#4192) - Crash in search (#4222) - Crash on startup with enabled subshell in FreeBSD (workaround) (#4213) - Hang on start randomly with zsh as subshell (#4198) - If command line is invisible it's partially displayed (#4182) - Broken handling of zip archives (#4180, #4183) - Broken handling of jar files as zip archives (#4223) - Timestamps of symlinks, sockets, fifos, etc are not preserved after copy/move (#3985) - %view action in the user menu doesn't work on no-exec filesystem (#4242) - Hardlinks are not colored by file type or extension (#3375) - mcedit: silent macro makes terminal disrupted (#4171) - mcedit: disrupting of TAGS file path (#4207) - vfs: unable to browse compressed tar archives (#4191) - sftpfs vfs: CVE-2021-36370: server fingerprint isn't verified (discovered by AUT-milCERT during an audit of open source software) (#4259) - ftpfs vfs: month of file is always January (#4260) - Tests: log files are written by libcheck and automake simultaneously (#3986) - Rebase mc-ext-audio.patch. - Rebase mc-extd-sound.patch. ==== mdadm ==== - Install mdadm in _sbindir rather than /sbin. This is more appropriate now that we have a merged-/usr. (bsc#1191076) ==== messagelib ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - Changes since 21.08.1: * Fix Bug 443108 - Ability to copy tables with original formatting (kde#443108) * Store in completion list too * Set RUN_SERIAL test property for all add_gpg_crypto_test tests ==== milou5 ==== Version update (5.22.5 -> 5.23.1) Subpackages: milou5-lang - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - No code changes since 5.22.90 - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * Explicitly set KDE_COMPILERSETTINGS_LEVEL * Remove no longer needed CMake code * Remove Preview stuff * Fix error about "reversed" not being defined * Make results delegate list items a bit taller with bigger icons (kde#422567) ==== mlocate ==== Subpackages: mlocate-lang - Added hardening to systemd service(s) (bsc#1181400). Modified: * mlocate.service ==== mobipocket ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== mpg123 ==== Version update (1.29.0 -> 1.29.1) Subpackages: libmpg123-0 mpg123-openal - Update to version 1.29.1 mpg123: * Keep default output encoding of s16 for raw and file outputs also with the new resampler. This reverts the unintentional change in 1.26.0 of switching to f32 for forced output rate unless the NtoM resampler is selected. In any case, you should make sure to specify your desired --encoding if you depend on it. * Catch error in indexing (mpg123_scan() return value was ignored before, bug 322). mpg123-strip: * Lift the resync limit, as it should be to clean up really dirty streams. mpg123-id3dump: * Also lift resync limit for the same reasons. libout123: * Fix reporting of device property flags for buffer libmpg123: * More safeguarding against attempts to decode if decoder setup failed and user ignored the returned error code (bug 322) ==== mutter ==== - Rebase mutter-SLE-bsc984738-grab-display.patch. ==== nano ==== Version update (5.8 -> 5.9) - GNU nano 5.9: * The extension of a filename is added to the name of a corresponding temporary file, so that spell checking a C file, for example, will check only the comments and strings (when using 'aspell'). * The process number is added to the name of an emergency save file, so that when multiple nanos die they will not fight over a filename. * Undoing a cutting operation will restore an anchor that was located in the cut area to its original line. * When using --locking, saving a new buffer will create a lock file. * Syntax highlighting for YAML files has been added ==== nbd ==== Version update (3.21 -> 3.22) - update to 3.22: - nbd-server: handle auth for v6-mapped IPv4 addresses - nbd-client.c: parse the next option in all cases - configure.ac: silence a few autoconf 2.71 warnings - spec: Relax NBD_OPT_LIST_META_CONTEXTS - client: Don't confuse Unix socket with TLS hostname - server: Avoid deprecated g_memdup ==== ncurses ==== Version update (6.2.20210911 -> 6.2.20211002) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20211002 + use return-value from vsnprintf to reallocate as needed to allow for buffers larger than the screen size (report by "_RuRo_"). + modify tset "-q" option to refrain from modifying terminal modes, to match the documentation. + add section on margins to terminfo.5, adapted from X/Open Curses. + make tput/tset warning messages consistently using alias names when those are used, rather than the underlying program's name. + improve tput usage message for aliases such as clear, by eliminating tput-specific portions. + add a check in toe to ensure that a "termcap file" is text rather than binary. + further build-fixes for OpenBSD 6.9, whose header files differ from - Add ncurses patch 20210925 + add kbeg to xterm+keypad to accommodate termcap applications -TD + add smglp and smgrp to vt420+lrmm, to provide useful data for the "tabs" +m option -TD + build-fix for gcc 3.4.3 with Solaris10, which does not allow forward reference of anonymous struct typedef. + modify tput to allow multiple commands per line. + minor fixes for tset manpage. - Correct offsets of patch ncurses-6.2.dif ==== ndctl ==== - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_ndctl-monitor.service.patch ==== ntp ==== - Added hardening to systemd service(s) (bsc#1181400). Modified: * conf.ntp-wait.service * conf.ntpd.service ==== numad ==== - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_numad.service.patch ==== nvme-cli ==== Subpackages: nvme-cli-bash-completion - Drop ProtectClock hardening, can cause issues if other device acceess is needed - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_nvmf-connect@.service.patch ==== okular ==== Version update (21.08.1 -> 21.08.2) Subpackages: okular-spectre - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - Changes since 21.08.1: * markdown: Only remove text if we're going to add something (kde#443057) * Automatically enable and disable "Force Rasterization" when required (kde#434247) * annotationtoolbartest: Remove unneded cast * Don't allow saving over read-only files (kde#440986) * Remove \n if it's the last char of the selected text (kde#342874) ==== open-iscsi ==== Subpackages: iscsiuio libopeniscsiusr0_2_0 - Fix possible systemd cycle by adding an "obsoletes" for the old libopeniscsiusr for older versions. ==== open-vm-tools ==== Version update (11.3.0 -> 11.3.5) Subpackages: libvmtools0 open-vm-tools-desktop - Update to 11.3.5 (build 18557794) (boo#1190987) + New/Updated features: - Added a configurable logging capability to the network script. The network script has been updated to: use vmware-toolbox-cmd to query any network logging configuration from the tools.conf file. Use vmtoolsd --cmd "log ..." to log a message to the vmx logfile when the logging handler is configured to "vmx" or when the logfile is full or is not writeable. - The hgfsmounter (mount.vmhgfs) command has been removed from open-vm-tools. The hgfsmounter (mount.vmhgfs) command is no longer used in Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore, removing all references to the hgfsmounter in Linux builds. + Resolved issues: - Customization: Retry the Linux reboot if telinit is a soft link to systemctl. - Open-vm-tools commands would hang if configured with "--enable-valgrind". + Spec file updates for: - rpmlint errors - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling. ==== openssh ==== Version update (8.4p1 -> 8.8p1) Subpackages: openssh-clients openssh-common openssh-server - Version update to 8.8p1: = Security * sshd(8) from OpenSSH 6.2 through 8.7 failed to correctly initialise supplemental groups when executing an AuthorizedKeysCommand or AuthorizedPrincipalsCommand, where a AuthorizedKeysCommandUser or AuthorizedPrincipalsCommandUser directive has been set to run the command as a different user. Instead these commands would inherit the groups that sshd(8) was started with. Depending on system configuration, inherited groups may allow AuthorizedKeysCommand/AuthorizedPrincipalsCommand helper programs to gain unintended privilege. Neither AuthorizedKeysCommand nor AuthorizedPrincipalsCommand are enabled by default in sshd_config(5). = Potentially-incompatible changes * This release disables RSA signatures using the SHA-1 hash algorithm by default. This change has been made as the SHA-1 hash algorithm is cryptographically broken, and it is possible to create chosen-prefix hash collisions for <USD$50K. For most users, this change should be invisible and there is no need to replace ssh-rsa keys. OpenSSH has supported RFC8332 RSA/SHA-256/512 signatures since release 7.2 and existing ssh-rsa keys will automatically use the stronger algorithm where possible. Incompatibility is more likely when connecting to older SSH implementations that have not been upgraded or have not closely tracked improvements in the SSH protocol. For these cases, it may be necessary to selectively re-enable RSA/SHA1 to allow connection and/or user authentication via the HostkeyAlgorithms and PubkeyAcceptedAlgorithms options. = New features * ssh(1): allow the ssh_config(5) CanonicalizePermittedCNAMEs directive to accept a "none" argument to specify the default behaviour. = Bugfixes * scp(1): when using the SFTP protocol, continue transferring files after a transfer error occurs, better matching original scp/rcp behaviour. * ssh(1): fixed a number of memory leaks in multiplexing, * ssh-keygen(1): avoid crash when using the -Y find-principals command. * A number of documentation and manual improvements, including bz#3340, PR139, PR215, PR241, PR257 - Additional changes from 8.7p1 release: = Potentially-incompatible changes * scp(1): this release changes the behaviour of remote to remote copies (e.g. "scp host-a:/path host-b:") to transfer through the local host by default. This was previously available via the -3 flag. This mode avoids the need to expose credentials on the origin hop, avoids triplicate interpretation of filenames by the shell (by the local system, the copy origin and the destination) and, in conjunction with the SFTP support for scp(1) mentioned below, allows use of all authentication methods to the remote hosts (previously, only non-interactive methods could be used). A -R flag has been added to select the old behaviour. * ssh(1)/sshd(8): both the client and server are now using a stricter configuration file parser. The new parser uses more shell-like rules for quotes, space and escape characters. It is also more strict in rejecting configurations that include options lacking arguments. Previously some options (e.g. DenyUsers) could appear on a line with no subsequent arguments. This release will reject such configurations. The new parser will also reject configurations with unterminated quotes and multiple '=' characters after the option name. * ssh(1): when using SSHFP DNS records for host key verification, ssh(1) will verify all matching records instead of just those with the specific signature type requested. This may cause host key verification problems if stale SSHFP records of a different or legacy signature type exist alongside other records for a particular host. bz#3322 * ssh-keygen(1): when generating a FIDO key and specifying an explicit attestation challenge (using -Ochallenge), the challenge will now be hashed by the builtin security key middleware. This removes the (undocumented) requirement that challenges be exactly 32 bytes in length and matches the expectations of libfido2. * sshd(8): environment="..." directives in authorized_keys files are now first-match-wins and limited to 1024 discrete environment variable names. = New features * scp(1): experimental support for transfers using the SFTP protocol as a replacement for the venerable SCP/RCP protocol that it has traditionally used. SFTP offers more predictable filename handling and does not require expansion of glob(3) patterns via the shell on the remote side. * sftp-server(8): add a protocol extension to support expansion of ~/ and ~user/ prefixed paths. This was added to support these paths when used by scp(1) while in SFTP mode. * ssh(1): add a ForkAfterAuthentication ssh_config(5) counterpart to the ssh(1) -f flag. GHPR231 * ssh(1): add a StdinNull directive to ssh_config(5) that allows the config file to do the same thing as -n does on the ssh(1) command- line. GHPR231 * ssh(1): add a SessionType directive to ssh_config, allowing the configuration file to offer equivalent control to the -N (no session) and -s (subsystem) command-line flags. GHPR231 * ssh-keygen(1): allowed signers files used by ssh-keygen(1) signatures now support listing key validity intervals alongside they key, and ssh-keygen(1) can optionally check during signature verification whether a specified time falls inside this interval. This feature is intended for use by git to support signing and verifying objects using ssh keys. * ssh-keygen(8): support printing of the full public key in a sshsig signature via a -Oprint-pubkey flag. = Bugfixes * ssh(1)/sshd(8): start time-based re-keying exactly on schedule in the client and server mainloops. Previously the re-key timeout could expire but re-keying would not start until a packet was sent or received, causing a spin in select() if the connection was quiescent. * ssh-keygen(1): avoid Y2038 problem in printing certificate validity lifetimes. Dates past 2^31-1 seconds since epoch were displayed incorrectly on some platforms. bz#3329 * scp(1): allow spaces to appear in usernames for local to remote and scp -3 remote to remote copies. bz#1164 * ssh(1)/sshd(8): remove references to ChallengeResponseAuthentication in favour of KbdInteractiveAuthentication. The former is what was in SSHv1, the latter is what is in SSHv2 (RFC4256) and they were treated as somewhat but not entirely equivalent. We retain the old name as a deprecated alias so configuration files continue to work as well as a reference in the man page for people looking for it. bz#3303 * ssh(1)/ssh-add(1)/ssh-keygen(1): fix decoding of X.509 subject name when extracting a key from a PKCS#11 certificate. bz#3327 * ssh(1): restore blocking status on stdio fds before close. ssh(1) needs file descriptors in non-blocking mode to operate but it was not restoring the original state on exit. This could cause problems with fds shared with other programs via the shell, bz#3280 and GHPR246 * ssh(1)/sshd(8): switch both client and server mainloops from select(3) to pselect(3). Avoids race conditions where a signal may arrive immediately before select(3) and not be processed until an event fires. bz#2158 * ssh(1): sessions started with ControlPersist were incorrectly executing a shell when the -N (no shell) option was specified. bz#3290 * ssh(1): check if IPQoS or TunnelDevice are already set before overriding. Prevents values in config files from overriding values supplied on the command line. bz#3319 * ssh(1): fix debug message when finding a private key to match a certificate being attempted for user authentication. Previously it would print the certificate's path, whereas it was supposed to be showing the private key's path. GHPR247 * sshd(8): match host certificates against host public keys, not private keys. Allows use of certificates with private keys held in a ssh-agent. bz#3524 * ssh(1): add a workaround for a bug in OpenSSH 7.4 sshd(8), which allows RSA/SHA2 signatures for public key authentication but fails to advertise this correctly via SSH2_MSG_EXT_INFO. This causes clients of these server to incorrectly match PubkeyAcceptedAlgorithmse and potentially refuse to offer valid keys. bz#3213 * sftp(1)/scp(1): degrade gracefully if a sftp-server offers the limits(a)openssh.com extension but fails when the client tries to invoke it. bz#3318 * ssh(1): allow ssh_config SetEnv to override $TERM, which is otherwise handled specially by the protocol. Useful in ~/.ssh/config to set TERM to something generic (e.g. "xterm" instead of "xterm-256color") for destinations that lack terminfo entries. * sftp-server(8): the limits(a)openssh.com extension was incorrectly marked as an operation that writes to the filesystem, which made it unavailable in sftp-server read-only mode. bz#3318 * ssh(1): fix SEGV in UpdateHostkeys debug() message, triggered when the update removed more host keys than remain present. * Many manual page fixes. - Additional changes from 8.6p1 release: = Security * sshd(8): OpenSSH 8.5 introduced the LogVerbose keyword. When this option was enabled with a set of patterns that activated logging in code that runs in the low-privilege sandboxed sshd process, the log messages were constructed in such a way that printf(3) format strings could effectively be specified the low-privilege code. = New features * sftp-server(8): add a new limits(a)openssh.com protocol extension that allows a client to discover various server limits, including maximum packet size and maximum read/write length. * sftp(1): use the new limits(a)openssh.com extension (when available) to select better transfer lengths in the client. * sshd(8): Add ModuliFile keyword to sshd_config to specify the location of the "moduli" file containing the groups for DH-GEX. * unit tests: Add a TEST_SSH_ELAPSED_TIMES environment variable to enable printing of the elapsed time in seconds of each test. = Bugfixes * ssh_config(5), sshd_config(5): sync CASignatureAlgorithms lists in manual pages with the current default. GHPR174 * ssh(1): ensure that pkcs11_del_provider() is called before exit. GHPR234 * ssh(1), sshd(8): fix problems in string->argv conversion. Multiple backslashes were not being dequoted correctly and quoted space in the middle of a string was being incorrectly split. GHPR223 * ssh(1): return non-zero exit status when killed by signal; bz#3281 * sftp-server(8): increase maximum SSH2_FXP_READ to match the maximum packet size. Also handle zero-length reads that are not explicitly banned by the spec. - Additional changes from 8.5p1 release: = Security * ssh-agent(1): fixed a double-free memory corruption that was introduced in OpenSSH 8.2 . We treat all such memory faults as potentially exploitable. This bug could be reached by an attacker with access to the agent socket. = Potentially-incompatible changes * ssh(1), sshd(8): this release changes the first-preference signature algorithm from ECDSA to ED25519. * ssh(1), sshd(8): set the TOS/DSCP specified in the configuration for interactive use prior to TCP connect. The connection phase of the SSH session is time-sensitive and often explicitly interactive. The ultimate interactive/bulk TOS/DSCP will be set after authentication completes. * ssh(1), sshd(8): remove the pre-standardization cipher rijndael-cbc(a)lysator.liu.se. It is an alias for aes256-cbc before it was standardized in RFC4253 (2006), has been deprecated and disabled by default since OpenSSH 7.2 (2016) and was only briefly documented in ssh.1 in 2001. * ssh(1), sshd(8): update/replace the experimental post-quantum hybrid key exchange method based on Streamlined NTRU Prime coupled with X25519. The previous sntrup4591761x25519-sha512(a)tinyssh.org method is replaced with sntrup761x25519-sha512(a)openssh.com. * ssh(1): disable CheckHostIP by default. It provides insignificant benefits while making key rotation significantly more difficult, especially for hosts behind IP-based load-balancers. = New features * ssh(1): this release enables UpdateHostkeys by default subject to some conservative preconditions: - The key was matched in the UserKnownHostsFile (and not in the GlobalKnownHostsFile). - The same key does not exist under another name. - A certificate host key is not in use. - known_hosts contains no matching wildcard hostname pattern. - VerifyHostKeyDNS is not enabled. - The default UserKnownHostsFile is in use. * ssh(1), sshd(8): add a new LogVerbose configuration directive for that allows forcing maximum debug logging by file/function/line pattern-lists. * ssh(1): when prompting the user to accept a new hostkey, display any other host names/addresses already associated with the key. * ssh(1): allow UserKnownHostsFile=none to indicate that no known_hosts file should be used to identify host keys. * ssh(1): add a ssh_config KnownHostsCommand option that allows the client to obtain known_hosts data from a command in addition to the usual files. * ssh(1): add a ssh_config PermitRemoteOpen option that allows the client to restrict the destination when RemoteForward is used with SOCKS. * ssh(1): for FIDO keys, if a signature operation fails with a "incorrect PIN" reason and no PIN was initially requested from the user, then request a PIN and retry the operation. This supports some biometric devices that fall back to requiring PIN when reading of the biometric failed, and devices that require PINs for all hosted credentials. * sshd(8): implement client address-based rate-limiting via new sshd_config(5) PerSourceMaxStartups and PerSourceNetBlockSize directives that provide more fine-grained control on a per-origin address basis than the global MaxStartups limit. = Bugfixes * ssh(1): Prefix keyboard interactive prompts with "(user@host)" to make it easier to determine which connection they are associated with in cases like scp -3, ProxyJump, etc. bz#3224 * sshd(8): fix sshd_config SetEnv directives located inside Match blocks. GHPR201 * ssh(1): when requesting a FIDO token touch on stderr, inform the user once the touch has been recorded. * ssh(1): prevent integer overflow when ridiculously large ConnectTimeout values are specified, capping the effective value (for most platforms) at 24 days. bz#3229 * ssh(1): consider the ECDSA key subtype when ordering host key algorithms in the client. * ssh(1), sshd(8): rename the PubkeyAcceptedKeyTypes keyword to PubkeyAcceptedAlgorithms. The previous name incorrectly suggested that it control allowed key algorithms, when this option actually specifies the signature algorithms that are accepted. The previous name remains available as an alias. bz#3253 * ssh(1), sshd(8): similarly, rename HostbasedKeyTypes (ssh) and HostbasedAcceptedKeyTypes (sshd) to HostbasedAcceptedAlgorithms. * sftp-server(8): add missing lsetstat(a)openssh.com documentation and advertisement in the server's SSH2_FXP_VERSION hello packet. * ssh(1), sshd(8): more strictly enforce KEX state-machine by banning packet types once they are received. Fixes memleak caused by duplicate SSH2_MSG_KEX_DH_GEX_REQUEST (oss-fuzz #30078). * sftp(1): allow the full range of UIDs/GIDs for chown/chgrp on 32bit platforms instead of being limited by LONG_MAX. bz#3206 * Minor man page fixes (capitalization, commas, etc.) bz#3223 * sftp(1): when doing an sftp recursive upload or download of a read-only directory, ensure that the directory is created with write and execute permissions in the interim so that the transfer can actually complete, then set the directory permission as the final step. bz#3222 * ssh-keygen(1): document the -Z, check the validity of its argument earlier and provide a better error message if it's not correct. bz#2879 * ssh(1): ignore comments at the end of config lines in ssh_config, similar to what we already do for sshd_config. bz#2320 * sshd_config(5): mention that DisableForwarding is valid in a sshd_config Match block. bz3239 * sftp(1): fix incorrect sorting of "ls -ltr" under some circumstances. bz3248. * ssh(1), sshd(8): fix potential integer truncation of (unlikely) timeout values. bz#3250 * ssh(1): make hostbased authentication send the signature algorithm in its SSH2_MSG_USERAUTH_REQUEST packets instead of the key type. This make HostbasedAcceptedAlgorithms do what it is supposed to - filter on signature algorithm and not key type. - Rebased patches: * openssh-7.7p1-IPv6_X_forwarding.patch * openssh-7.7p1-X11_trusted_forwarding.patch * openssh-7.7p1-X_forward_with_disabled_ipv6.patch * openssh-7.7p1-cavstest-ctr.patch * openssh-7.7p1-cavstest-kdf.patch * openssh-7.7p1-disable_openssl_abi_check.patch * openssh-7.7p1-eal3.patch * openssh-7.7p1-enable_PAM_by_default.patch * openssh-7.7p1-fips.patch * openssh-7.7p1-fips_checks.patch * openssh-7.7p1-host_ident.patch * openssh-7.7p1-hostname_changes_when_forwarding_X.patch * openssh-7.7p1-ldap.patch * openssh-7.7p1-no_fork-no_pid_file.patch * openssh-7.7p1-pam_check_locks.patch * openssh-7.7p1-pts_names_formatting.patch * openssh-7.7p1-remove_xauth_cookies_on_exit.patch * openssh-7.7p1-seccomp_ipc_flock.patch * openssh-7.7p1-seccomp_stat.patch * openssh-7.7p1-send_locale.patch * openssh-7.7p1-sftp_force_permissions.patch * openssh-7.7p1-sftp_print_diagnostic_messages.patch * openssh-7.7p1-systemd-notify.patch * openssh-7.9p1-keygen-preserve-perms.patch * openssh-7.9p1-revert-new-qos-defaults.patch * openssh-8.0p1-gssapi-keyex.patch * openssh-8.1p1-audit.patch * openssh-8.1p1-seccomp-clock_gettime64.patch * openssh-8.1p1-seccomp-clock_nanosleep.patch * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch * openssh-8.1p1-use-openssl-kdf.patch * openssh-8.4p1-vendordir.patch * openssh-fips-ensure-approved-moduli.patch * openssh-link-with-sk.patch * openssh-reenable-dh-group14-sha1-default.patch * openssh-whitelist-syscalls.patch - Removed openssh-fix-ssh-copy-id.patch (fixed upstream). - openssh.keyring: rotated to new key from https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/RELEASE_KEY.asc - sshd-gen-keys-start: - only source sysconfig file if it exists. - create /etc/ssh if it does not exists. Required for image based installation/updates. ==== openssh-askpass-gnome ==== Version update (8.4p1 -> 8.8p1) - Version upgrade to 8.8p1 * No changes for askpass, see main package changelog for details ==== oxygen5 ==== Version update (5.22.5 -> 5.23.1) - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - No code changes since 5.22.90 - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * Fix a clang compiler warning -Winfinite-recursion * Port away from deprecated KF and Qt methods * Explicitly set KDE_COMPILERSETTINGS_LEVEL * Remove unneeded KCM plugin keyword stuff * Convert remaining copyright texts to SPDX * Remove obsolete COPYING files * Convert cursors/src copyright to SPDX * Adjust formatting of license header * Convert license headers to SPDX * Update IRC network name in the cursors README * Readd the old and longer logoff sound from KDE 4.0 as an option ==== pam-config ==== Version update (1.4 -> 1.5) - Update to Version 1.5 - Don't print an error message if one of the systemd PAM modules does not exist if creating the *-pc files [bsc#1191528] - Drop pam_systemd_home again [bsc#1191528] ==== pangomm1_4 ==== - turn off doc build, it does not work with new doxygen ==== parley ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== patterns-gnome ==== Subpackages: patterns-gnome-gnome patterns-gnome-gnome_basic patterns-gnome-gnome_basis patterns-gnome-gnome_basis_opt patterns-gnome-gnome_games patterns-gnome-gnome_imaging patterns-gnome-gnome_internet patterns-gnome-gnome_multimedia patterns-gnome-gnome_office patterns-gnome-gnome_utilities patterns-gnome-gnome_x11 patterns-gnome-gnome_yast patterns-gnome-sw_management_gnome - Drop gnome-power-manager Recommends: Package is dormant upstream and on its way to be replaced by new features inside of gnome-control-center. ==== pcsc-lite ==== Version update (1.9.3 -> 1.9.4) Subpackages: libpcsclite1 - version 1.9.4 * fix a memory leak when libusb is used for hotplug (i.e. non-Linux systems) ==== perl-Cpanel-JSON-XS ==== Version update (4.26 -> 4.27) - updated to 4.27 see /usr/share/doc/packages/perl-Cpanel-JSON-XS/Changes 4.27 2021-10-13 (rurban) - Only add -Werror=declaration-after-statement for 5.035004 and earlier (PR #186 nwc) - Fix 125_shared_boolean.t for threads (PR #184 Sinan Unur) ==== perl-Crypt-OpenSSL-RSA ==== Version update (0.31 -> 0.32) - updated to 0.32 see /usr/share/doc/packages/perl-Crypt-OpenSSL-RSA/Changes 0.32 Wed Sep 8 2021 - Prefix internal bn2sv function so it doesn't collide with Net::SSLeay - Ensure that verify() leaves openssl error stack clean on failure - Fixed broken SEE ALSO links. - prevent outer $SIG{__DIE__} handler from being called during optional require. - omit done_testing since it does not work for older perl versions * Rebase Crypt-OpenSSL-RSA.patch ==== perl-Image-ExifTool ==== Subpackages: exiftool - require File::RandomAccess otherwise exiftool(1) won't start ==== phodav ==== - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_spice-webdavd.service.patch ==== php7 ==== Subpackages: php7-cli php7-ctype php7-dom php7-gd php7-gettext php7-iconv php7-json php7-mbstring php7-mysql php7-openssl php7-pdo php7-sqlite php7-tokenizer php7-xmlreader php7-xmlwriter - previous version updates fixes also: CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071, CVE-2021-21702,CVE-2021-21704,CVE-2021-21705 bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706, bsc#1182049,bsc#1188035,bsc#1188037 ==== pidgin ==== Subpackages: libpurple libpurple-plugin-sametime libpurple-tcl - Add pidgin-fix-double-free-crash.patch: fix double free crash ==== pim-data-exporter ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== pim-sieve-editor ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== pimcommon ==== Version update (21.08.1 -> 21.08.2) Subpackages: libKF5PimCommon5 libKF5PimCommonAkonadi5 - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== pinfo ==== - added -Wno-error=format to CPPFLAGS to avoid compilation errors ==== pipewire ==== Version update (0.3.37 -> 0.3.38) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-media-session pipewire-modules pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Add patch from upstream to fix compilation on ARM (boo#1191600): * 0001-fix-compilation-on-ARM.patch - Update to version 0.3.38: * Highlights - Topic based logging was added to improve debugging. - An off-by-one error was fixed in the audio resampler that could cause distortion when downsampling. - Various bluetooth compatibility improvements. - More fixes and improvements. * PipeWire - module-pulse-tunnel now has better default latency to make it work better in more cases. There is also an option to configure the desired latency. - pw-cli now has readline support. - Topic based logging was added. Log lines can now be filtered by topic using wildcards. This should improve debugging. - The systemd service files should now have better descriptions. - Fix a crash in module-zeroconf-discover when unloading. - Fix a crash in filter-chain when using unaligned memory. * ALSA - Sync the udev rules and profiles with pulseaudio. - Fix a memory leak. * SPA plugins - An off-by-one error was fixed in the resampler that could cause distortion when downsampling. (#1646) * Bluetooth - Avoid probing the native backend because it might block for DBus activation. This fixes some long startup times. - Fix the kernel version check, 5.14.x kernels should also support mSBC. - Fix FastStream microphone support in more cases. - Add workaround for Intel AX200. - SCO sink should now also work in follower mode. * PulseAudio server - Make the service file require a session manager. - Add BuildRequires: pkgconfig(readline) so pw-cli is built with readline support ==== plasma-browser-integration ==== Version update (5.22.5 -> 5.23.1) Subpackages: plasma-browser-integration-lang - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - No code changes since 5.22.90 - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * Add .git-blame-ignore-revs file * Add pre-commit hook for clang-format * Run clang-format * Prevent clang-format uglification * [purpose] Use ShareUrl plugin type instead of Export * [History Runner] Request favicon with device pixel ratio * Use version-less qt DBus macros ==== plasma-framework ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5Plasma5 plasma-framework-components plasma-framework-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Too many changes since 5.86.0, only listing bugfixes: * Revert "Change busywidget to a gear" (kde#442525) * ExpandableListitem: Correct expanded view height calculation (kde#442537) ==== plasma-nm5 ==== Version update (5.22.5 -> 5.23.1) Subpackages: plasma-nm5-lang plasma-nm5-openconnect plasma-nm5-openvpn plasma-nm5-pptp plasma-nm5-vpnc - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - Changes since 5.23.0: * openconnect: Adjust version check in CMake and allow version 3.99 again * openconnect widget: Default to "anyconnect" when protocol is not set. * openconnect: Make FSID passphrase + empty private key combination work. (kde#443770) * Only include mobileproviderstest with ModemManager - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - Changes since 5.22.90: * Remove applet list item animations - Add new key + signature to plasma.keyring - Drop hard requirement on NM-fortisslvpn for now to avoid installcheck failure in staging - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Too many changes to list here ==== plasma5-addons ==== Version update (5.22.5 -> 5.23.1) Subpackages: plasma5-addons-lang - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - Changes since 5.22.90: * Make colors in color picker respond properly to right click and Menu key - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Too many changes to list here ==== plasma5-desktop ==== Version update (5.22.5 -> 5.23.1) Subpackages: plasma5-desktop-emojier - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - Changes since 5.23.0: * Fix "clear emoji history" action (kde#443974) * kickoff: Replace Kicker DragHelper with Qt Quick Drag (kde#443708) * Make tooltip interactive when there is a player but no window is present (kde#443425) * taskmanager: Disconnect from backend.showAllPlaces on destruction (kde#443820) * Add systemsettings runner to hardcoded list of allowed runners for kicker (kde#443776) * Folder View: Don't cancel multi-selection with right-click (kde#443743) * [applets/kicker] Explicitly set visible property when opacity is 0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - Changes since 5.22.90: * [wayland] fix activity switching shortcut (Meta+Tab) (kde#443323) * kickoff: Fix dragEnabled error for KickoffItemDelegates in singleton * [applets/taskmanger] Do not overlay scrollbars over contents (kde#443173) * kickoff: Fix null width/height error for some app grid view delegates * kickoff: re-add drag and drop for favorites (kde#440308) * kickoff: center align GridView * kickoff: move isSearchDelegate binding to where search view is * kickoff: simplify KickoffItemDelegate MouseArea anchor margins * kickoff: fix hover changing index when moving between search and normal pages (kde#443076) * kickoff: fix wrong activefocus being used in KickoffItemDelegate * kickoff: Fix misspelled module qualifier * Make clicking one item when multiple are selected deselect everything else (kde#424152) * kcm_touchpad: fix translation for scroll speed setting slider * Indicate when one of the thumbnails on the quick settings kcm has focus * Check for currentApplet existence (kde#443287) * KCM Touchpad: hide right and middle click sections when unavailable * Open context menu under the cursor again (kde#443278) * Adjust position of panel config bar when Enter is pressed (kde#443280) * CompactApplet: Only draw separator line for panel applets (kde#439374) * [keyboardlayout applet] fix non-working context menu (kde#441239) * [Emojier] Set highlightMoveDuration to zero * applets/kickoff: Improve list item touch targets and general aesthetics (kde#442661) * Use Kirigami.Avatar in Kickoff Header bar (kde#442776) * [kcms/activities] Fix QML i18n calls (kde#442514) * kickoff: implement directional navigation * kickoff: keep delegate highlight visible more often * kickoff: Use attached tooltip for leave buttons - Drop patches, now upstream: * 0001-Use-Kirigami.Avatar-in-Kickoff-Header-bar.patch - Add new key + signature to plasma.keyring - Add patch to fix fallback user icon in Kickoff (kde#442776): * 0001-Use-Kirigami.Avatar-in-Kickoff-Header-bar.patch - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Too many changes to list here ==== plasma5-disks ==== Version update (5.22.5 -> 5.23.1) - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - No code changes since 5.22.90 - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * add magnificent advanced data (kde#440486) * actually start the reload timer :O * don't require auth_admin for inactive sessions * drop usless is directory check * Explicitly set KDE_COMPILERSETTINGS_LEVEL * Remove unneeded main.cpp * Remove unneeded X-KDE-PluginKeyword * search for smartctl in /usr/local/sbin as well * don't notify on instabilities * add pipeline for reuse compliance * Use version-less qt DBus macros * Remove not necessary qt prefix ==== plasma5-integration ==== Version update (5.22.5 -> 5.23.1) Subpackages: plasma5-integration-plugin plasma5-integration-plugin-lang - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - No code changes since 5.22.90 - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * Backport "FileChooser portal: send window id in hex" from qtbase * QXdgDesktopPortalFileDialog: use QUrl to store directory & selection * More p-m-f connect() signal/slot syntax * Use pointer-to-member-function signal/slot syntax * Add pre-commit hook for clang-format * Add .git-blame-ignore-revs file * Run clang-format * Add trailing commas * Remove obsolete COPYING file * Explicitly set KDE_COMPILERSETTINGS_LEVEL * Make it compile without deprecated enum * Convert license headers to SPDX * Stop advertising titlebar "What's This?" help button * Remove wayland roundtrip * Use version-less qt DBus macros ==== plasma5-openSUSE ==== Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE - Update to 5.23.1 - Update to 5.23.0 - Update to 5.22.90 ==== plasma5-pa ==== Version update (5.22.5 -> 5.23.1) Subpackages: plasma5-pa-lang - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - Changes since 5.22.90: * [speakertest] Force canberra driver to PulseAudio (kde#442781) * Fix a bug that caused the handle of the volume slider to show artifacts (kde#434927) * Fix balance setting (kde#439751) - Add supplements for pipewire-pulseaudio as well - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * Add keywords to audio KCM * Integrate the advanced options under `Configure...` in the main page * Disable global mute when changing volume * [kcm] Avoid string puzzle * Explicitly set KDE_COMPILERSETTINGS_LEVEL * Remove unneeded target * [applet] Don't install as bundled package * [ListItemBase] Open menu on press * Remove unneeded X-KDE-PluginKeyword * [applet] Only set VolumeMonitor object if it's valid * Always disconnect streams (kde#439347) * [applet] Fix QML error * Use version-less qt DBus macros * Use ellipses instead of triple period * Set meta + mute as a default shortcut to mute the microphone * Support multiple default shortcuts * Fix crash when target is destroyed before monitor (kde#437184) * Indicate when application is "corked" (kde#398476) ==== plasma5-systemmonitor ==== Version update (5.22.5 -> 5.23.1) - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - Changes since 5.22.90: * Avoid basing a preferredWidth on a currentWidth - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Too many changes to list here ==== plasma5-thunderbolt ==== Version update (5.22.5 -> 5.23.1) - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - No code changes since 5.22.90 - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * Add keywords to Thunderbolt KCM * Use version-less qt DBus macros ==== plasma5-workspace ==== Version update (5.22.5 -> 5.23.1) Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-lang plasma5-workspace-libs xembedsniproxy - Add back X11 root window properties until firefox is adjusted (boo#1191825): * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - Changes since 5.23.0: * [freespacenotifier] impr: no notification for ro filesystems * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786) * [kcms/colors] Notify global settings change after saving * krdb: Fix removal of Xft.dpi from Xresources (kde#350039) * sddm-theme: fix missing password field on "Other" page (kde#443737) * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380) - Drop patches, now upstream: * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch - Add patch to show password input on the "Other" page in SDDM (kde#443737): * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - Changes since 5.22.90: * Revert "xembed: adapt to changes in KNotifications" (kde#442758) * sddm-theme: Fix using mouse movements to show the UI * [systemtray] Check for menuItemFactory.object existence (kde#443377) * applets/devicenotifier: Remove applet list item animations * sddm-theme: Fix use of needsPassword and related button layout * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623) * Fix Kickoff context menu actions for System Settings results (kde#442522) * klipper: Fix reading from plasma on wayland * Fix build with gpsd 3.23.1 * Unbreak fontinst KCM (kde#442748) * Address regression in VT switching code (kde#442852) * libtaskmanager: Don't request dmabuf if not supported (kde#428284) * Port away from Kirigami.Units.devicePixelRatio * lookandfeel: don't nuke accent colour (kde#442812) * kcm/colors: Improve some bindings on accent colors * sddm-theme: fix default username font size * PipeWire: Include defines for older PipeWire versions * pipewire: Properly compare pipewire versions using QVersionNumber * [Klipper] Guard against broken data fetches * [Klipper] Handle incoming UTF-8 mime types (kde#424694) * PipeWire: Make sure thumbnails properly use dmabuf again * [shell/panel] Fix ability to type in textfield (kde#442557) - Drop patches, now upstream: * 0001-Fix-build-with-gpsd-3.23.1.patch * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch * 0007-Klipper-Guard-against-broken-data-fetches.patch * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch * 0010-sddm-theme-fix-default-username-font-size.patch * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch - Refresh 0001-Ignore-default-sddm-face-icons.patch - Add new key + signature to plasma.keyring - Add patch to fix build with gpsd: * 0001-Fix-build-with-gpsd-3.23.1.patch - Add patch to fix window thumbnails if dmabuf is not supported (kde#428284): * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch - Add patches from Plasma/5.23 branch: * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch * 0007-Klipper-Guard-against-broken-data-fetches.patch * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch * 0010-sddm-theme-fix-default-username-font-size.patch - Add patch to fix XEmbed context menus (kde#442758) * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Too many changes to list here - Refresh patches: * 0001-Revert-No-icons-on-the-desktop-by-default.patch * 0001-Use-qdbus-qt5.patch - Drop patches, now upstream: * Call-UnInhibit-with-correct-signature-in-powermanagement-dataengine.patch ==== pmdk ==== Version update (1.11.0 -> 1.11.1) Subpackages: libpmem1 libpmemobj1 - Update to PMDK 1.11.1 * Bugfixes: * doc: remove exprimental moniker from libpmem2(7) * common: fix missing sfence in non-temporal memcpy * common: fix a mismatch between prototype and body * common: fix mismatched function args * obj: rename vars clashing with those of a containing block * pmem2: don't force smaller alignment for fsdax mappings * pool: don't trample upon users of localtime() * rpmem: Fix RPMEM_RAW_BUFF_SIZE and LANE_ALIGN_SIZE for powerpc64le ==== polkit-default-privs ==== Version update (1550+20210818.b0c41fd -> 1550+20211008.9751669) - drop backward compatibility symlink in /etc/polkit-default-privs.standard. rpmlint 2.0 is now in Factory and the check there directly uses the profile in /usr/etc/polkit-default-privs/profiles/standard. - drop polkit-whitelisting sub-package. This is now handled in rpmlint 2.0 internally. - Update to version 1550+20211008.9751669: * whitelist power-profiles-daemon actions (bsc#1189900) * cleanup: remove polkit-rules-whitelist.json ==== polkit-kde-agent-5 ==== Version update (5.22.5 -> 5.23.1) Subpackages: polkit-kde-agent-5-lang - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - No code changes since 5.22.90 - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * Explicitly set KDE_COMPILERSETTINGS_LEVEL * Clean up CMake code * Build with QT_NO_KEYWORDS * Use version-less qt DBus macros * Remove obsolete COPYING file * Add license information to non-copyrightable files * Convert license headers to SPDX ==== poppler ==== Version update (21.08.0 -> 21.10.0) Subpackages: libpoppler-cpp0 libpoppler-glib8 poppler-tools - Update to 21.10.0: core: * Add support for setting custom stamp annotations * Add default appearance for the well known stamp names * Correct encoding of signature's properties Reason & Location * Splash: Fix rendering of some odd patterns * SignatureHandler::validateCertificate: Add option to not do OCSP revocation check * SignatureHandler::validateCertificate: Add support for AIA fetching to verify certificates * greallocn: if memory allocation fails, free the previous pointer to avoid memory leak * Fix issues with malformed files utils: * pdfsig: Add a way to list certificate nicknames * pdfsig: You can now add signatures from pdfsig * pdfsig: Add option to not do OCSP revocation check * pdfsig: Add option for AIA fetching to verify certificates * pdfinfo: Add -custom option to print custom metadata * pdfinfo: add metadata flags qt: * Add support for setting custom stamp annotations * Add getters for signature's properties Reason & Location glib: * Remove incorrect PopplerAttachment deprecation - Update to 21.09.0: core: * Splash: Massive speed improvement on files that use lots of save/restore (q/Q) operators * Correct decoding of signature properties Reason & Location when they are Unicode * Fix issues with malformed files ==== poppler-qt5 ==== Version update (21.08.0 -> 21.10.0) - Update to 21.10.0: core: * Add support for setting custom stamp annotations * Add default appearance for the well known stamp names * Correct encoding of signature's properties Reason & Location * Splash: Fix rendering of some odd patterns * SignatureHandler::validateCertificate: Add option to not do OCSP revocation check * SignatureHandler::validateCertificate: Add support for AIA fetching to verify certificates * greallocn: if memory allocation fails, free the previous pointer to avoid memory leak * Fix issues with malformed files utils: * pdfsig: Add a way to list certificate nicknames * pdfsig: You can now add signatures from pdfsig * pdfsig: Add option to not do OCSP revocation check * pdfsig: Add option for AIA fetching to verify certificates * pdfinfo: Add -custom option to print custom metadata * pdfinfo: add metadata flags qt: * Add support for setting custom stamp annotations * Add getters for signature's properties Reason & Location glib: * Remove incorrect PopplerAttachment deprecation - Update to 21.09.0: core: * Splash: Massive speed improvement on files that use lots of save/restore (q/Q) operators * Correct decoding of signature properties Reason & Location when they are Unicode * Fix issues with malformed files ==== postfix ==== Subpackages: postfix-doc - Ensure postfix can write to home directory or server side filtering wont work (sieve) - Ensure service can write to /etc/postfix - Added hardening to systemd service (bsc#1181400). Added harden_postfix.service.patch - config.postfix not updatet after lmdb switch (bsc#1190945) Adapt config.postfix ==== postgresql ==== Version update (13 -> 14) Subpackages: postgresql-contrib postgresql-docs postgresql-llvmjit postgresql-server - Bump version and default to 14. ==== postgresql14 ==== Version update (13.4 -> 14.0) - Let genlists skip non-existing binaries to avoid lots of version conditionals in the file lists. - Remove postgresql-testsuite-int8.sql.patch, because its purpose is unclear. This affects only the test subpackage. - Upgrade to 14.0 https://www.postgresql.org/about/news/postgresql-14-released-2318/ https://www.postgresql.org/docs/14/release-14.html - Let genlists skip non-existing binaries to avoid lots of version conditionals in the file lists. - Upgrade to 14~rc1 https://www.postgresql.org/about/news/postgresql-14-rc-1-released-2309/ https://www.postgresql.org/docs/14/release-14.html https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items - Upgrade to 14~beta2 https://www.postgresql.org/about/news/postgresql-14-beta-2-released-2249/ https://www.postgresql.org/docs/14/release-14.html https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items - Upgrade to 14~beta1 https://www.postgresql.org/about/news/postgresql-14-beta-1-released-2213/ https://www.postgresql.org/docs/14/release-14.html https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items - disable postgresql-testsuite-int8.sql.patch: it seems it is not needed anymore, need to be double checked. - bsc#1185952: llvm12 breaks PostgreSQL 11 and 12 on s390x. Use llvm11 as a workaround. - Upgrade to version 13.3: * https://www.postgresql.org/docs/13/release-13-3.html * CVE-2021-32027, bsc#1185924: Prevent integer overflows in array subscripting calculations. * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk? columns in INSERT ... ON CONFLICT ... UPDATE target lists. * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect computation of UPDATE ... RETURNING "pg_psql_temporary_savepoint" does not exist?. - Don't use %_stop_on_removal, because it was meant to be private and got removed from openSUSE. %_restart_on_update is also private, but still supported and needed for now (bsc#1183168). - Re-enable build of the llvmjit subpackage on SLE, but it will only be delivered on PackageHub for now (boo#1183118). - Remove leftover PreReq on chkconfig, we stopped using it long time ago. - boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW. - Upgrade to version 13.2: * https://www.postgresql.org/docs/13/release-13-2.html * Updating stored views and reindexing might be needed after applying this update. * CVE-2021-3393, bsc#1182040: Fix information leakage in constraint-violation error messages. * CVE-2021-20229, bsc#1182039: Fix failure to check per-column SELECT privileges in some join queries. * Obsoletes postgresql-icu68.patch. - Add postgresql-icu68.patch: fix build with ICU 68 - bsc#1178961: %ghost the symlinks to pg_config and ecpg. - boo#1179765: BuildRequire libpq5 and libecpg6 when not building them to avoid dangling symlinks in the devel package. - Upgrade to version 13.1: * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD and firing of deferred triggers within index expressions and materialized view queries. * CVE-2020-25694, bsc#1178667: a) Fix usage of complex connection-string parameters in pg_dump, pg_restore, clusterdb, reindexdb, and vacuumdb. b) When psql's \connect command re-uses connection parameters, ensure that all non-overridden parameters from a previous connection string are re-used. * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from modifying specially-treated variables. * Fix recently-added timetz test case so it works when the USA is not observing daylight savings time. (obsoletes postgresql-timetz.patch) * https://www.postgresql.org/about/news/2111/ * https://www.postgresql.org/docs/13/release-13-1.html - Fix a DST problem in the test suite: postgresql-timetz.patch https://postgr.es/m/16689-57701daa23b377bf@postgresql.org - Initial packaging of PostgreSQL 13: * https://www.postgresql.org/about/news/2077/ * https://www.postgresql.org/docs/13/release-13.html ==== powerdevil5 ==== Version update (5.22.5 -> 5.23.1) Subpackages: powerdevil5-lang - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - Changes since 5.22.90: * Clear alwaysActionBox before filling (kde#443114) * Remove inappropriate low maximum width for spinboxes (kde#442556) - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * Add keywords to power KCMs * Explicitly set KDE_COMPILERSETTINGS_LEVEL * powerprofiles: Add support for ProfileHolds * powerprofiles: expose PerformanceDegraded property * Fix crash if dbus call finishes before we have a valid config group (kde#440338) * Handle DBus call finishing before buildUI is called (kde#440223) * Integrate power-profiles daemon * Use version-less qt DBus macros * Use ellipses instead of triple period ==== prison-qt5 ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5Prison5 prison-qt5-imports - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * Select the most efficient QR encoding mode rather than always using 8bit * Only build and run datamatrixtest if libdmtx is available ==== privoxy ==== - Revert privoxy-nopcreposix.patch because of bsc#1184945. ==== publicsuffix ==== Version update (20210928 -> 20211016) - Update to version 20211016: * Fix sorting of One.com domains * Add siiites.com (#1416) * Add ts.net and beta.tailscale.net domains. (#1453) * Revise Sorting for Cape Verde (.cv) * Update public_suffix_list.dat (#1456) * updated email address (#1450) * util: gTLD data autopull updates for 2021-10-08T15:12:46 UTC (#1451) * add ip.linodeusercontent.com (#1448) * Adding upli.io (#1446) * added tickets.io (#1429) * util: gTLD data autopull updates for 2021-10-07T15:11:34 UTC (#1449) * util: gTLD data autopull updates for 2021-10-06T15:12:57 UTC (#1447) - Update to version 20211006: * Update Pull Request Template to add clarity * util: gTLD data autopull updates for 2021-10-01T15:13:10 UTC (#1445) ==== pulseaudio ==== Subpackages: libpulse-mainloop-glib0 libpulse0 pulseaudio-bash-completion pulseaudio-gdm-hooks pulseaudio-module-bluetooth pulseaudio-module-gsettings pulseaudio-module-x11 pulseaudio-module-zeroconf pulseaudio-utils pulseaudio-zsh-completion - Make system-user-pulse noarch - Split sysusers.d file to separate package as needed by brltty (bsc#1191465) ==== purpose ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5Purpose5 libKF5PurposeWidgets5 purpose-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * plugins/barcode: Call it a "QR code" in the UI * Add Barcode plugin ==== python-Jinja2 ==== Version update (3.0.1 -> 3.0.2) - dropped obsolete no-warnings-as-errors.patch - update to 3.0.2 * Fix a loop scoping bug that caused assignments in nested loops to still be referenced outside of it. #1427 * Make compile_templates deterministic for filter and import names. #1452, #1453 * Revert an unintended change that caused Undefined to act like StrictUndefined for the in operator. #1448 * Imported macros have access to the current template globals in async environments. #1494 * PackageLoader will not include a current directory (.) path segment. This allows loading templates from the root of a zip import. #1467 ==== python-alembic ==== Version update (1.6.5 -> 1.7.4) - update to 1.7.4: * Fixed a regression that prevented the use of post write hooks on python version lower than 3.9 * Added missing attributes from context stubs. * Fixed issue where registration of custom ops was prone to failure due to the registration process running exec() on generated code that as of the 1.7 series includes pep-484 annotations, which in the case of end user code would result in name resolution errors when the exec occurs - specfile: * skip python 2 builds * require importlib-resources - update to version 1.7.1: * Corrected "universal wheel" directive in setup.cfg so that building a wheel does not target Python 2. The PyPi files index for 1.7.0 was corrected manually. Pull request courtesy layday. * Fixed issue in generated .pyi files where default values for "Optional" arguments were missing, thereby causing mypy to consider them as required. * Fixed regression in batch mode due to :ticket:`883` where the "auto" mode of batch would fail to accommodate any additional migration directives beyond encountering an "add_column()" directive, due to a mis-application of the conditional logic that was added as part of this change, leading to "recreate" mode not being used in cases where it is required for SQLite such as for unique constraints. - changes from version 1.7.0: * Fixed regression due to :ticket:`803` where the ".info" and ".comment" attributes of "Table" would be lost inside of the :class:`.DropTableOp` class, which when "reversed" into a :class:`.CreateTableOp` would then have lost these elements. Pull request courtesy Nicolas CANIART. * Enhance "version_locations" parsing to handle paths containing spaces. The new configuration option "version_path_separator" specifies the character to use when splitting the "version_locations" string. The default for new configurations is "version_path_separator = os", which will use "os.pathsep" (e.g., ";" on Windows). * Alembic 1.7 now supports Python 3.6 and above; support for prior versions including Python 2.7 has been dropped. * Batch "auto" mode will now select for "recreate" if the "add_column()" operation is used on SQLite, and the column itself meets the criteria for SQLite where ADD COLUMN is not allowed, in this case a functional or parenthesized SQL expression or a "Computed" (i.e. generated) column. * Make the "python-dateutil" library an optional dependency. This library is only required if the "timezone" option is used in the Alembic configuration. An extra require named "tz" is available with "pip install alembic[tz]" to install it. * Re-implemented the "python-editor" dependency as a small internal function to avoid the need for external dependencies. * Named CHECK constraints are now supported by batch mode, and will automatically be part of the recreated table assuming they are named. They also can be explicitly dropped using "op.drop_constraint()". For "unnamed" CHECK constraints, these are still skipped as they cannot be distinguished from the CHECK constraints that are generated by the "Boolean" and "Enum" datatypes. Note that this change may require adjustments to migrations that drop or rename columns which feature an associated named check constraint, such that an additional "op.drop_constraint()" directive should be added for that named constraint as there will no longer be an associated column for it; for the "Boolean" and "Enum" datatypes, an "existing_type" keyword may be passed to "BatchOperations.drop_constraint" as well. * The dependency on "pkg_resources" which is part of "setuptools" has been removed, so there is no longer any runtime dependency on "setuptools". The functionality has been replaced with "importlib.metadata" and "importlib.resources" which are both part of Python std.lib, or via pypy dependency "importlib-metadata" for Python version < 3.8 and "importlib-resources" for Python version < 3.9 (while importlib.resources was added to Python in 3.7, it did not include the "files" API until 3.9). * Created a "test suite" similar to the one for SQLAlchemy, allowing developers of third-party dialects to test their code against a set of Alembic tests that have been specially selected to exercise back-end database operations. At the time of release, third-party dialects that have adopted the Alembic test suite to verify compatibility include `CockroachDB <https://pypi.org/project/sqlalchemy-cockroachdb/>`_ and `SAP ASE (Sybase) <https://pypi.org/project/sqlalchemy-sybase/>`_. * Fixed issue where usage of the PostgreSQL "postgresql_include" option within a :meth:`.Operations.create_index` would raise a KeyError, as the additional column(s) need to be added to the table object used by the construct internally. The issue is equivalent to the SQL Server issue fixed in :ticket:`513`. Pull request courtesy Steven Bronson. * pep-484 type annotations have been added throughout the library. Additionally, stub .pyi files have been added for the "dynamically" generated Alembic modules "alembic.op" and "alembic.config", which include complete function signatures and docstrings, so that the functions in these namespaces will have both IDE support (vscode, pycharm, etc) as well as support for typing tools like Mypy. The files themselves are statically generated from their source functions within the source tree. ==== python-apipkg ==== Version update (1.5 -> 2.1.0) - Update to v2.1.0 * fix race condition for import of modules using apipkg.initpkg in Python 3.3+ by updating existing modules in-place rather than replacing in sys.modules with an apipkg.ApiModule instances. This race condition exists for import statements (and __import__) in Python 3.3+ where sys.modules is checked before obtaining an import lock, and for importlib.import_module in Python 3.11+ for the same reason. - Release 2.0.1 * fix race conditions for attribute creation - Release 2.0.0 * also transfer __spec__ attribute * make py.test hack more specific to avoid hiding real errors * switch from Travis CI to GitHub Actions * modernize package build * reformat code with black - Drop pytest4.patch ==== python-cachetools ==== Version update (4.2.2 -> 4.2.4) - update to 4.2.4: - Add submodule shims for backward compatibility. - Add documentation and tests for using ``TTLCache`` with ``datetime``. - Link to typeshed typing stubs. - Flatten package file hierarchy. ==== python-click ==== Version update (8.0.1 -> 8.0.3) - update to 8.0.3: * Fix issue with ``Path(resolve_path=True)`` type creating invalid paths. :issue:`2088` * Importing ``readline`` does not cause the ``confirm()`` prompt to disappear when pressing backspace. :issue:`2092` * Any default values injected by ``invoke()`` are cast to the corresponding parameter's type. :issue:`2089, 2090` * ``is_bool_flag`` is not set to ``True`` if ``is_flag`` is ``False``. * Bash version detection is locale independent. :issue:`1940` * Empty ``default`` value is not shown for ``multiple=True``. * Fix shell completion for arguments that start with a forward slash such as absolute file paths. :issue:`1929` * ``Path`` type with ``resolve_path=True`` resolves relative symlinks to be relative to the containing directory. :issue:`1921` * Completion does not skip Python's resource cleanup when exiting, avoiding some unexpected warning output. :issue:`1738, 2017` * Fix type annotation for ``type`` argument in ``prompt`` function. * Fix overline and italic styles, which were incorrectly added when adding underline. :pr:`2058` * An option with ``count=True`` will not show "[x>=0]" in help text. * Default values are not cast to the parameter type twice during processing. * Options with ``multiple`` and ``flag_value`` use the flag value instead of leaving an internal placeholder. ==== python-decorator ==== Version update (5.0.9 -> 5.1.0) - update to 5.1.0: * Added a function `decoratorx` using the `FunctionMaker` and thus preserving the signature of `__code__` objects. * Sphinx was printing a few warnings when building the documentation * functions decorated with `decorator.contextmanager` were one-shot, as discovered by Alex Pizarro. * `decorator.decorator` was not passing the kwsyntax argument. - drop kwsyntax.patch (usptream) ==== python-distro ==== - Expliciting setting of locale is not necessary anymore (gh#python-distro/distro#223). ==== python-ecdsa ==== Version update (0.16.1 -> 0.17.0) - Update to 0.17.0 * Keys that use explicit curve parameters can now be read and written. Reading of explicit curves can be disabled by using the `valid_curve_encodings` keyword argument in `VerifyingKey.from_pem()`, `VerifyingKey.from_der()`, `SigningKey.from_pem()`, and `SigningKey.from_der()`. * Keys can now be written with use of explicit curve parameters, use `curve_parameters_encoding` keyword argument of `VerifyingKey.to_pem()`, `VerifyingKey.to_der()`, `SigningKey.to_pem(), or `SigningKey.to_der()` to specify the format. By default `named_curve` will be used, unless the curve doesn't have an associated OID (as will be the case for an unsupported curve), then `explicit` encoding will be used. * Allow specifying acceptable point formats when loading public keys (this also fixes a minor bug where python-ecdsa would accept raw encoding for points in PKCS#8 files). Set of accepted encodings is controlled by `valid_encodings` keyword argument in `ECDH.load_received_public_key_bytes()`, `VerifyingKey.from_string()`, `VerifyingKey.from_pem()`, VerifyingKey.from_der()`. * `PointJacobi` and `Point` now inherit from `AbstractPoint` that implements the methods for parsing points. That added `from_bytes()` and `to_bytes()` methods to both of them. * Curve parameters can now be read and written to PEM and DER files. The `Curve` class supports new `to_der()`, `from_der()`, `to_pem()`, and `from_pem()` methods. * Describe in detail which methods can raise `RSZeroError`, and that `SigningKey.sign_deterministic()` won't raise it. * Correctly truncate hash values larger than the curve order (only impacted custom curves and the curves added in this release). * Correctly handle curves for which the order is larger than the prime (only impacted custom curves and the secp160r1 curve added in this release). * Fix the handling of `==` and `!=` for `Public_key`, `Private_key`, `Point`, `PointJacobi`, `VerifyingKey`, and `SigningKey` so that it behaves consistently and in the expected way both in Python 2 and Python 3. * Implement lock-less algorithm inside PointJacobi for keeping shared state so that when a calculation is aborted with KeyboardInterrupt, the state doesn't become corrupted (this fixes the occasional breakage of ecdsa in interactive shells). * The `speed.py` script now provides performance for signature verification without the use of precomputation. * New curves supported: secp112r1, secp112r2, secp128r1, secp160r1. * Use 2-ary Non-Adjacent Form for the combined multiply-add. This speeds up single-shot verify (i.e. without precomputation) by about 4 to 5%. * Use native Python 3.8 support for calculating multiplicative inverses. * Include Python 3.9 in PyPI keywords. * More realistic branch coverage counting (ignore Python version-specific branches). * Additional test coverage to many parts of the library. * Migrate to Github Actions for Continuous Testing. ==== python-greenlet ==== Version update (1.1.0 -> 1.1.2) - update to 1.1.2: - Fix a potential crash due to a reference counting error when Python subclasses of ``greenlet.greenlet`` were deallocated. The crash became more common on Python 3.10; on earlier versions, silent memory corruption could result. - Fix a leak of a list object when the last reference to a greenlet was deleted from some other thread than the one to which it belonged. For this to work correctly, you must call a greenlet API like ``getcurrent()`` before the thread owning the greenlet exits: this is a long-standing limitation that can also lead to the leak of a thread's main greenlet if not called; we hope to lift this limitation. Note that in some cases this may also fix leaks of greenlet objects themselves. See `issue 251 - Python 3.10: Tracing or profiling into a spawned greenlet didn't work as expected. See `issue 256 ==== python-idna ==== Version update (3.2 -> 3.3) - update to 3.3: - Update to Unicode 14.0.0 - Update to in-line type annotations - Throw IDNAError exception correctly for some malformed input - Advertise support for Python 3.10 - Improve testing regime on Github - Fix Russian typo in documentation ==== python-libvirt-python ==== Version update (7.7.0 -> 7.8.0) - Update to 7.8.0 - Add all new APIs and constants in libvirt 7.8.0 - jsc#SLE-18260 ==== python-more-itertools ==== Version update (8.8.0 -> 8.10.0) - update to 8.10.0: * The type stub for :func:`iter_except` was improved (thanks to MarcinKonowalczyk) * Type stubs now ship with the source release (thanks to saaketp) * The Sphinx docs were improved (thanks to MarcinKonowalczyk) * New functions * :func:`interleave_evenly` (thanks to mbugert) * :func:`repeat_each` (thanks to FinalSh4re) * :func:`chunked_even` (thanks to valtron) * :func:`map_if` (thanks to sassbalint) * :func:`zip_broadcast` (thanks to kalekundert) * Changes to existing functions * The type stub for :func:`chunked` was improved (thanks to PhilMacKay) * The type stubs for :func:`zip_equal` and `zip_offset` were improved (thanks to maffoo) * Building Sphinx docs locally was improved (thanks to MarcinKonowalczyk) ==== python-networkx ==== Version update (2.6.1 -> 2.6.3) - update to 2.6.3: * Fix modularity functions (gh#networkx/networkx#5072) * CI/MAINT: drop gdal tests (gh#networkx/networkx#5068) * modularity_max: provide labels to get_edge_data (gh#networkx/networkx#4965) * Improvements to greedy_modularity_community (gh#networkx/networkx#4996) * use weight arg instead of 'weight' key at greedy_modularity_communities() * modularity_max: breaking the loop when given community size is reached (gh#networkx/networkx#4950) * modularity_max: allow input of desired number of communities * greedy_modularity_communities with digraphs and multi(di)graphs (gh#networkx/networkx#5007) (gh#networkx/networkx#5007) * Allow greedy_modularity_communities to use floating point weights or resolution (gh#networkx/networkx#5065) * change i,j,k notation to u,v,w (no indexes since gh#networkx/networkx#5007) ==== python-outcome ==== Version update (1.0.1 -> 1.1.0) - update to version 1.1.0 * Tweaked the implementation of Error.unwrap to avoid creating a reference cycle between the exception object and the unwrap method's frame. This shouldn't affect most users, but it slightly reduces the amount of work that CPython's cycle collector has to do, and may reduce GC pauses in some cases. (#29) * Drop support for Python 2.7, 3.4, and 3.5. (#27) ==== python-psycopg2 ==== Version update (2.8.6 -> 2.9.1) - Update to 2.9.1 - Fix regression with named `sql.Placeholder` (:ticket:`1291`). - Update to 2.9.0 - ``with connection`` starts a transaction on autocommit transactions too (:ticket:`#941`). - Timezones with fractional minutes are supported on Python 3.7 and following (:ticket:`#1272`). - Escape table and column names in `~cursor.copy_from()` and `~cursor.copy_to()`. - Connection exceptions with sqlstate ``08XXX`` reclassified as `~psycopg2.OperationalError` (a subclass of the previously used `~psycopg2.DatabaseError`) (:ticket:`#1148`). - Include library dirs required from libpq to work around MacOS build problems (:ticket:`#1200`). - Dropped support for Python 2.7, 3.4, 3.5 (:ticket:`#1198, #1000, #1197`). - Dropped support for mx.DateTime. - Use `datetime.timezone` objects by default in datetime objects instead of `~psycopg2.tz.FixedOffsetTimezone`. - The `psycopg2.tz` module is deprecated and scheduled to be dropped in the next major release. - Provide :pep:`599` wheels packages (manylinux2014 tag) for i686 and x86_64 platforms. - Provide :pep:`600` wheels packages (manylinux_2_24 tag) for aarch64 and ppc64le platforms. - Wheel package compiled against OpenSSL 1.1.1k and PostgreSQL 13.3. - Build system for Linux/MacOS binary packages moved to GitHub action. ==== python-pycryptodome ==== Version update (3.10.1 -> 3.11.0) - update to 3.11.0: * GH#512: Especially for very small bit sizes, ``Crypto.Util.number.getPrime()`` was occasionally generating primes larger than given the bit size. * GH#552: Correct typing annotations for ``PKCS115_Cipher.decrypt()``. * GH#555: ``decrypt()`` method of a PKCS#1v1.5 cipher returned a ``bytearray`` instead of ``bytes``. * GH#557: External DSA domain parameters were accepted even when the modulus (``p``) was not prime. This affected ``Crypto.PublicKey.DSA.generate()`` and ``Crypto.PublicKey.DSA.construct()``. * Added cSHAKE128 and cSHAKE256 (of SHA-3 family). * GH#558: The flag RTLD_DEEPBIND passed to ``dlopen()`` is not well supported by `address sanitizers <https://github.com/google/sanitizers/issues/611>`_. It is now possible to set the environment variable ``PYCRYPTDOME_DISABLE_DEEPBIND`` to drop that flag and allow security testing. ==== python-pygit2 ==== Version update (1.3.0 -> 1.7.0) - Update to 1.7.0: - Upgrade to libgit2 1.3.0 - Add support for Python 3.10 - Drop support for Python 3.6 - New `pygit2.GIT_CHECKOUT_SKIP_LOCKED_DIRECTORIES` - New optional argument ``location`` in ``Repository.applies(..)`` and ``Repository.apply(..)`` - Fix: Now the `flags` argument in `Repository.blame()` is passed through - CI: Stop using Travis, move to GitHub actions - Fix a number of reference leaks - Review custom object backends - In custom backends the callbacks have been renamed from ``read`` to ``read_cb``, ``write`` to ``write_cb``, and so on. - New optional ``proxy`` argument in ``Remote`` methods - New GIT_MERGE_PREFERENCE constants - Don't require cached-property with Python 3.8 or later - Refactored build and CI, new ``build.sh`` script - Remove deprecated ``GIT_CREDTYPE_XXX`` contants, use ``GIT_CREDENTIAL_XXX`` instead. - Remove deprecated ``Patch.patch`` getter, use ``Patch.text`` instead. - New ``PackBuilder`` class and ``Repository.pack(...)`` - New ``Config.delete_multivar(...)`` - New ``Repository.is_shallow`` - New optional ``message`` argument in ``Repository.create_reference(...)`` - Fix truncated diff when there are nulls - Fix ``Index.add(...)`` raise ``TypeError`` instead of ``AttributeError`` when arguments are of unexpected type - Upgrade to libgit2 1.1, new ``GIT_BLAME_IGNORE_WHITESPACE`` constant - Drop support for PyPy3 7.2 - New optional ``flags`` argument in ``Repository.__init__(...)``, new ``GIT_REPOSITORY_OPEN_*`` constants - Remove upstreamed libgit2_1.patch. ==== python-pygraphviz ==== Version update (1.6 -> 1.7) - Update to 1.7: - Drop Python 3.6 support - Add Python 3.9 support - Require Graphviz 2.42+, (Graphviz 2.46+ recommended) - Improve installation process and documentation - Switch from nose to pytest - Remove old Python 2 code - AGraph.eq includes attribute comparison (PR #246) ==== python-pytz ==== Version update (2021.1 -> 2021.3) - update to 2021.3 * matches tzdata 2021c ==== python-qt5 ==== Version update (5.15.4 -> 5.15.5) - Update to v5.15.5 * Added the missing QPdfWriter.setPageSize() overload. * pylupdate5 now assumes that the default codec is UTF-8 and specified v2.1 as the .ts file format. * Bug fixes. - Silence some rpmlint errors ==== python-urwid ==== - %check: use %pyunittest rpm macro ==== python-zipp ==== Version update (3.5.0 -> 3.6.0) - update to 3.6.0: * Only ``Path`` is exposed in the public API. * Remove news file intended only for CPython. ==== python-zope.hookable ==== Version update (5.0.1 -> 5.1.0) - update to version 5.1.0 - Add support for Python 3.9. - Create Linux aarch64 wheels. - %check: use %pyunittest rpm macro - added sources + _multibuild ==== python-zope.i18nmessageid ==== - %check: use %pyunittest rpm macro - added sources + _multibuild ==== python-zope.interface ==== - %check: use %pyunittest rpm macro - added sources + _multibuild ==== qemu ==== Subpackages: qemu-accel-qtest qemu-accel-tcg-x86 qemu-arm qemu-audio-spice qemu-block-curl qemu-block-dmg qemu-block-gluster qemu-block-iscsi qemu-block-nfs qemu-block-rbd qemu-block-ssh qemu-chardev-baum qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-ipxe qemu-ksm qemu-lang qemu-microvm qemu-ppc qemu-s390x qemu-seabios qemu-sgabios qemu-skiboot qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-vhost-user-gpu qemu-x86 - Stable fixes from upstream * Patches added: block-introduce-max_hw_iov-for-use-in-sc.patch hmp-Unbreak-change-vnc.patch qemu-nbd-Change-default-cache-mode-to-wr.patch target-arm-Don-t-skip-M-profile-reset-en.patch vhost-vsock-fix-migration-issue-when-seq.patch virtio-mem-pci-Fix-memory-leak-when-crea.patch virtio-net-fix-use-after-unmap-free-for-.patch ==== qqc2-desktop-style ==== Version update (5.86.0 -> 5.87.0) - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * Properly get the path from a QUrl * Port away from devicePixelRatio * MenuSeparator: fix height being wrong, rewrite whole file to be more correct * Button, ToolButton: improve implicit sizing, correctly set default button state * Use more process-working-symbolic icon for busy spinner ==== raspberrypi-firmware ==== Version update (2021.03.10 -> 2021.09.30) - Update to b5257da58c (2021-09-30): * firmware: arm_loader: Allow non-optional reads of current clock See: #1619 * firmware: dispmanx: Demote null eptr from vcos_verify to no warning See: raspberrypi/linux#4592 * firmware: filesystem: sdcard: Probe FAT type in GPT ESD partitions * firmware: tvservice: Add check to warn when running with kms * firmware: filesystem: sdcard: Fix Hybrid GPT partitions See: #1465 * firmware: video_decode: Ensure all buffers are flushed before port disable completes * firmware: arm_loader: Allow hvs interrupt during SET_NOTIFY_DISPLAY_DONE * firmware: arm_display: Allow null buffer in successful call See: raspberrypi/linux#4540 - Update to b80f36b3fb (2021-09-13): * firmware: hdmi_2711: Use HDMI block REPEAT_PIXEL instead of PV See: https://forum.libreelec.tv/thread/24415-le-10-beta-for-i4-force-hdmi-resolu… * firmware: DSI display autodetection for kms * firmware: arm_dt: Load overlays for detected cameras * firmware: Make more use of the user-warnings DT property * firmware: arm_loader: Consider required flags from GET_CLOCK_RATE See: #1598 * firmware: arm_loader: Make most arm clock requests required See: #1598 * firmware: firmware: Disable VLL loading from file system See: #1605 * firmware: video_decode: Use the ISP instead of vc_image_convert * firmware: video_decode: Correct support for YVU formats using ISP * firmware: arm_dt: Limit CMA to 256MB if total_mem < 2GB or gpu_mem > 256MB See: #1603 * firmware: hdmi_cec: Remove TX/RX SW_INIT on power_on See: Hexxeh/rpi-firmware#267 See: https://www.raspberrypi.org/forums/viewtopic.php?p=1895082#p1895082 * firmware: cec: Avoid sending messages with kms See: raspberrypi/linux#4460 * firmware: Revert: video_decode: Use the ISP instead of vc_image_convert * firmware: isp: Set the YUV420/YVU420 format stride to 64 byte * arm_loader: Add message to release firmware framebuffer * firmware: video_decode: Use the ISP instead of vc_image_convert * firmware: hdmi-2711: Wait for HDMI hardware scheduler to activate in HDMI mode * firmware: bcm_host: Recognise all Pi 4 variants, add BCM2711 See: raspberrypi/userland#695 * firmware: PoE+ HAT support See: raspberrypi/linux#4367 * firmware: arm_loader: Use Pi4 bootloader MAC_ADDRESS if set * firmware: platform: Apply ARM thermal throttling rules on BCM2711 * firmware: dt-blob.dts: Correct HDMI HPD and EMMC_ENABLE for CM4 See: https://www.raspberrypi.org/forums/viewtopic.php?f=29&p=1858516 * firmware: vcfw/hdmi: CUSTOM modes used for FKMS didn't set RGB quant range correctly See: #1580 * firmware: platform: Remove build-time constant for MICROVOLTS_PER_PIP * firmware: Pi400: Reduce MII clock freq when probing ethernet PHY * firmware: isp: Ensure the VRF is locked when setting up video colour denoise See: raspberrypi/libcamera-apps#19 * firmware: isp: Remove custom EV mappings from camera tunings * firmware: Add support for board-type=0xXX conditional filters in bootloader, bootcode and firmware * firmware: Two UART1 patches See: #1566 * firmware: arm_loader: kernel_old=1 should force kernel_address=0 See: #1561 * firmware: scalerlib: Fix offset applied to x coordinate of YUV10COL image See: https://forum.kodi.tv/showthread.php?tid=361164&pid=3024654#pid3024654 * firmware: vcfw/power: Add a new latch for power_pad_control See: #1552 * firmware: board-info: Fix memsize on 3B+ * firmware: Move core to PLLA and support accurate clk108 See: xbmc/xbmc#19263 * firmware: board_info: Separate memory size from OTP field encoding * firmware: power: Swap DA9090 ADC assignments to match XR77004 * firmware: vl805: Remove redundant log statement and fix warning * firmware: power: Fix DA9090 ADC1 register definition * firmware: arm_loader: Only report clocks arm has set, not siblings * firmware: arm_loader: Don't report clocks set as turbo side effect of arm clock * firmware: arm_loader: 2711: gpu clocks are not dependant * firmware: platform: Need to clear cached versions of get_max_clock_internal vars * firmware: video_decode: For VC1/WMV with no signalled header bytes, use start of 1st buffer See: raspberrypi/linux#4113 - Use smbios overlay to get minimal SMBIOS information through dmidecode (bsc#1183079) ==== raspberrypi-firmware-config ==== Version update (2021.03.10 -> 2021.09.30) - Update to b5257da58c (2021-09-30): * firmware: arm_loader: Allow non-optional reads of current clock See: #1619 * firmware: dispmanx: Demote null eptr from vcos_verify to no warning See: raspberrypi/linux#4592 * firmware: filesystem: sdcard: Probe FAT type in GPT ESD partitions * firmware: tvservice: Add check to warn when running with kms * firmware: filesystem: sdcard: Fix Hybrid GPT partitions See: #1465 * firmware: video_decode: Ensure all buffers are flushed before port disable completes * firmware: arm_loader: Allow hvs interrupt during SET_NOTIFY_DISPLAY_DONE * firmware: arm_display: Allow null buffer in successful call See: raspberrypi/linux#4540 - Update to b80f36b3fb (2021-09-13): * firmware: hdmi_2711: Use HDMI block REPEAT_PIXEL instead of PV See: https://forum.libreelec.tv/thread/24415-le-10-beta-for-i4-force-hdmi-resolu… * firmware: DSI display autodetection for kms * firmware: arm_dt: Load overlays for detected cameras * firmware: Make more use of the user-warnings DT property * firmware: arm_loader: Consider required flags from GET_CLOCK_RATE See: #1598 * firmware: arm_loader: Make most arm clock requests required See: #1598 * firmware: firmware: Disable VLL loading from file system See: #1605 * firmware: video_decode: Use the ISP instead of vc_image_convert * firmware: video_decode: Correct support for YVU formats using ISP * firmware: arm_dt: Limit CMA to 256MB if total_mem < 2GB or gpu_mem > 256MB See: #1603 * firmware: hdmi_cec: Remove TX/RX SW_INIT on power_on See: Hexxeh/rpi-firmware#267 See: https://www.raspberrypi.org/forums/viewtopic.php?p=1895082#p1895082 * firmware: cec: Avoid sending messages with kms See: raspberrypi/linux#4460 * firmware: Revert: video_decode: Use the ISP instead of vc_image_convert * firmware: isp: Set the YUV420/YVU420 format stride to 64 byte * arm_loader: Add message to release firmware framebuffer * firmware: video_decode: Use the ISP instead of vc_image_convert * firmware: hdmi-2711: Wait for HDMI hardware scheduler to activate in HDMI mode * firmware: bcm_host: Recognise all Pi 4 variants, add BCM2711 See: raspberrypi/userland#695 * firmware: PoE+ HAT support See: raspberrypi/linux#4367 * firmware: arm_loader: Use Pi4 bootloader MAC_ADDRESS if set * firmware: platform: Apply ARM thermal throttling rules on BCM2711 * firmware: dt-blob.dts: Correct HDMI HPD and EMMC_ENABLE for CM4 See: https://www.raspberrypi.org/forums/viewtopic.php?f=29&p=1858516 * firmware: vcfw/hdmi: CUSTOM modes used for FKMS didn't set RGB quant range correctly See: #1580 * firmware: platform: Remove build-time constant for MICROVOLTS_PER_PIP * firmware: Pi400: Reduce MII clock freq when probing ethernet PHY * firmware: isp: Ensure the VRF is locked when setting up video colour denoise See: raspberrypi/libcamera-apps#19 * firmware: isp: Remove custom EV mappings from camera tunings * firmware: Add support for board-type=0xXX conditional filters in bootloader, bootcode and firmware * firmware: Two UART1 patches See: #1566 * firmware: arm_loader: kernel_old=1 should force kernel_address=0 See: #1561 * firmware: scalerlib: Fix offset applied to x coordinate of YUV10COL image See: https://forum.kodi.tv/showthread.php?tid=361164&pid=3024654#pid3024654 * firmware: vcfw/power: Add a new latch for power_pad_control See: #1552 * firmware: board-info: Fix memsize on 3B+ * firmware: Move core to PLLA and support accurate clk108 See: xbmc/xbmc#19263 * firmware: board_info: Separate memory size from OTP field encoding * firmware: power: Swap DA9090 ADC assignments to match XR77004 * firmware: vl805: Remove redundant log statement and fix warning * firmware: power: Fix DA9090 ADC1 register definition * firmware: arm_loader: Only report clocks arm has set, not siblings * firmware: arm_loader: Don't report clocks set as turbo side effect of arm clock * firmware: arm_loader: 2711: gpu clocks are not dependant * firmware: platform: Need to clear cached versions of get_max_clock_internal vars * firmware: video_decode: For VC1/WMV with no signalled header bytes, use start of 1st buffer See: raspberrypi/linux#4113 ==== raspberrypi-firmware-dt ==== Version update (2021.03.15 -> 2021.09.17) - Update to 2425833c7ff5 (2021-09-17) * Switch to 5.14 branch * Drop upstream-overlay-rpi-poe.patch ==== rdma-core ==== Version update (36.0 -> 37.1) Subpackages: libefa1 libibverbs libibverbs1 libmlx4-1 libmlx5-1 librdmacm1 - Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249) - Bugfixes on all providers - Fix cmake flags to correct paths for .pc files ==== remmina ==== Version update (1.4.20 -> 1.4.21) Subpackages: remmina-lang remmina-plugin-rdp remmina-plugin-secret remmina-plugin-vnc - Updated to remmina version 1.4.21 * Nullify host if qucikconnect isn't a valid address * rdp_plugin.c: Fix dereferencing of NULL variable when profile name is empty * Resolve label spacing in preferences window * GNOME 40 runtime and other updates * Add support for ESX web console login * Added RDP general option to remap scancodes * Back compatibility with WebKit < 2.32.0 * Make screenshot file names iso8601 compliant * Typo in bug-report template * Typo in merge-request template * Implementing restricted-mode and password hash * Unitialized var by @qarmin (Rafa? Mikrut ). Closes #2594 * Add integer-only input field for plugin settings in Remmina Editor * Adding VNCI Listen port field tooltip * Fix the translation problem of "tooltip" in ssh window * Rework x2go_plugin.c to comply with remmina coding style. * Add validation system for Remmina Editor * Small changes to README, AUTHORS and error message adjusting in remmina_file_editor.c * remmina_file_editor.c: Readd by mistake removed '!' * Mitigation for #1951 and extra RDP clibpoard debug messages * Rollback Let's Encrypt SSL workaround * Add RDP clipboard support for Microsoft HTML Clipboard Format * Building FreeRDP with icu support * Resource renaming to comply with the Freedesktop rules - Package all icons in the main package - The new x2go packages are not yet packaged, as x2go is not available in the openSUSE distributions ==== rsyslog ==== Version update (8.2106.0 -> 8.2108.0) - Upgrade to rsyslog 8.2108.0: * 2021-08-16: openssl tls: Improved error message output on tls failures. closes: https://github.com/rsyslog/rsyslog/issues/4645 * 2021-08-16: impstats: add percentile metrics tracking functionality Brief overview: TO configure tracking percentile metrics in rainerscript: User would need to define: - which percentile to track, such as [p50, p99, etc.] - window size - note, this correlates directly with memory usage to track the percentiles. To track a value, user would call built-in function `percentile_observe()` in their configurations to record an integer value, and percentile metrics would be emitted every impstats interval. Thanks to Nelson Yen for the patch. * 2021-08-12: imfile: add parameter "ignoreolderthanoption" instructs imfile not to ingest a file that has not been modified in the specified number of seconds. Thanks to github user yanjunli76 for the patch (submitted from Nelson Yen) * 2021-08-10: imklog bugfix: invalid memory adressing, could cause abort This is a regeression from commit 94c4a87. It introduced a free() call using an object that was no longer valid (the main pointer to the to-be-freed object) was already freed at time of use. This could cause various issues, including a segfault. Note: this bug was triggerred only during late phase of rsyslog shutdown, so it did not affect regular operation. Special thanks to github user wxiaoguang for analyzing the issue and providing a draft fix proposal, on which this patch builds. see also https://github.com/rsyslog/rsyslog/pull/4629 closes https://github.com/rsyslog/rsyslog/issues/4625 * 2021-08-09: imfile bugfix: deleteStateOnFileDelete missed some state files When the log file is deleted, imfile would attempt to delete the statefile but it was missing the file_id part of the statefile name. This means the statefiles were only removed in the log file was less than 512 characters, because for very small files the file ID hash is not created. This lead to some state files not being deleted. Thanks to pearseimperva for the patch. * 2021-08-09: imfile bugfix: hash char invalidly added in readmode != 0 If imfile is ingesting log files with readMode set to 2 or 1, the resulting messages all have a '#' character at the end. This patch corrects the behaviour. Note: if some external script "supported" the bug of extra hash character at the end of line, it may be necessary to update them. closes https://github.com/rsyslog/rsyslog/issues/4491 * 2021-08-09: omelasticsearch bugfix: errorFile mutex was not consistently locked Lock the file during SIGHUPs to avoid issues with concurrent accesses by writeDataError(). Thanks to François Poirotte for the patch. * 2021-08-09: imudp: add socket type (IPv4 vs. 6) to input name Most importantly, the input name is used for stats counter names as well. Previously, the same name was used for IPv4 and IPv6, so we had two counters with an equal name. That left users puzzled. Unfortunately, this change can potentially require changes to existing analysis scripts, as the name is now slightly different. closes https://github.com/rsyslog/rsyslog/issues/4364 * 2021-08-06: omfwd: add capability for action-specific TLS certificate settings This permits to override the global definitions for TLS certificates at the action() level. * 2021-08-06: imfile bugfix: file handle leak if "freshStartTail" was turned on * 2021-08-05: imtcp: permit to use different certificate files per input/action This completes the ability to override global/default TLS settings at the imtcp input() level. Support for using multiple CAs/Certs per Connection is now provided. * 2021-08-04: imptcp bugfix: keep alive interval was incorrectly set The interval was accidentally set to keep alive interval. This has been corrected. closes https://github.com/rsyslog/rsyslog/issues/4609 * 2021-07-08: openssl network driver bugfix: small memory leak Fixes a static, non-growing memory leak which existed when parameter "GnutTLSPriorityString" was used. This was primarily a cosmetic issue, but caused some grief during development in regard to memory leak detectors. Note: yes, this is for openssl -- the parameter name is historical. * 2021-07-07: psrv bugfix: abort if no listener could be started Modules (like imtcp and imdiag) which use tcpsrv could abort or otherwise malfunction if no listener for a specific input could be started. Found during implementing a new feature, no report from practice. But could very well happen. * 2021-07-07: mmkubernetes bugfix: apiserver error handling - Added graceful handling of apiserver errors with unexpected responses, i.e., anything other than 200, 404, or 429. Idea is that apiserver transient error state will recover. We don't want mmkubernetes to miss metadata resolution for containers that don't have cached metadata. During these transient error states, mmkubernetes will provide basic container file path based resolution of namespace and pod metadata for new pods whose metadata is not yet cached. After this error state recovers, mmkubernetes is expected to resume its metadata resolution as expected. - Added a unit test case for apiserver return 500 with changes to mock server - Fixed existing unit test that was failing due to missing expected results file - Added mmkubernetes unit tests to testbench Thanks to Abdul Waheed for the patch (submitted from Nelson Yen). * 2021-07-07: ommongodb bugfixes - Fix Segmentation fault when server is down - Add server connexion check while resuming Thanks to Kevin Guillemot for the patch. * 2021-06-28: omkafka improvements - drain librdkafka queues and retry later during rsyslog restart or hup. This re-injects messages into rsyslog's native queues. - add statsname on per kafka instance for better visibility - omkafka - count errors related ssl as "errors_ssl" Thanks to Nelson Yen for the patch. * 2021-06-23: some CI/QA improvements, Travis-CI disabled For the time being, Travis CI is disabled because it was outdated and Travis also changed their system. We will re-evaluate if we re-enable it. Since quite a while the Travits tests were redundant with the rest of CI, so this does not reduce coverage. * 2021-06-23: omhttp bugfix: dynrestpath param in batch mode invalid When batchmode was used, the templates could not be used to expand dynrestpath. We are now storing the restpath param within the batch data if we are in batch mode. When we are in batch mode, and the restpath value changes, the batch is submitted and reinitialized closes: https://github.com/rsyslog/rsyslog/issues/4567 * 2021-06-17: add predefined template RSYSLOG_SyslogRFC5424Format This is essentially the same as RSYSLOG_SyslogProtocol23Format with a better name and a fix to remove the unnecessary LF at the end of the message. The different name also enables us to fix the LF issue without any concern about backwards compatibility. closes https://github.com/rsyslog/rsyslog/issues/4384 * 2021-06-17: impstats/bugfix: _sender_stats reports integer counter as string Note that this introduces a small backwards incompatibility: in previous output the field was of string type, now it is integer (as intended). We discussed this on the mailing list and the overwhelming thought was that this is not a problem because almost all analysis backends are able to cover that format change. This made the bugfix essentially costmetic. HOWEVER, if you still experience issues, please let us know. We can add an option to provide the previous format, and just spared to do so because there was no evidence it was needed. ==== rubygem-bootsnap ==== Version update (1.7.7 -> 1.9.1) Subpackages: ruby2.7-rubygem-bootsnap ruby3.0-rubygem-bootsnap - updated to version 1.9.1 * Removed a forgotten debug statement in JSON precompilation ==== rubygem-ffi ==== Version update (1.15.3 -> 1.15.4) Subpackages: ruby2.7-rubygem-ffi ruby3.0-rubygem-ffi - updated to version 1.15.4 Fixed: * Fix build for uClibc. #913 * Correct module lookup when including `ffi-module` gem. #912 Changed: * Use ruby code of the ffi gem in JRuby-9.2.20+. #915 ==== rubygem-marcel ==== Version update (1.0.1 -> 1.0.2) - updated to version 1.0.2 * Include Apache license in gem release. (a525d5b) * Prefer audio/x-wav for WAV audio files. (#45) * Prefer application/x-x509-ca-cert for Privacy-Enhanced Mail certificates. (#46) * Prefer audio/flac for FLAC audio files. (#47) * Prefer audio/aac for Advanced Audio Coding audio files. (#49) * Prefer application/vnd.ms-access for Microsodt Access DB files. (#50) * Support text/x-scss and text/x-sass stylesheets. (#52) * Support encrypted Microsoft Access DB files. (#53) * Prefer application/x-ole-storage for Microsoft Office files. (#54) * Prefer text/markdown for Markdown files. (#55) * Prefer audio/mpc for Musepack audio files. (#56) * Support audio/webm audio files. (#58) * Support image/avif images files. (#63) ==== rubygem-nokogiri ==== Version update (1.12.3 -> 1.12.5) Subpackages: ruby2.7-rubygem-nokogiri ruby3.0-rubygem-nokogiri - updated to version 1.12.5 [#]# 1.12.5 / 2021-09-27 [#]## Security [JRuby] Address CVE-2021-41098 ([GHSA-2rr5-8q37-2w7h](https://github.com/sparklemotion/nokogiri/security/adv…) In Nokogiri v1.12.4 and earlier, on JRuby only, the SAX parsers resolve external entities (XXE) by default. This fix turns off entity-resolution-by-default in the JRuby SAX parsers to match the CRuby SAX parsers' behavior. CRuby users are not affected by this CVE. [#]## Fixed * [CRuby] `Document#to_xhtml` properly serializes self-closing tags in libxml > 2.9.10. A behavior change introduced in libxml 2.9.11 resulted in emitting start and and tags (e.g., `<br></br>`) instead of a self-closing tag (e.g., `<br/>`) in previous Nokogiri versions. [[#2324](https://github.com/sparklemotion/nokogiri/issues/2324)] [#]# 1.12.4 / 2021-08-29 [#]## Notable fix: Namespace inheritance Namespace behavior when reparenting nodes has historically been poorly specified and the behavior diverged between CRuby and JRuby. As a result, making this behavior consistent in v1.12.0 introduced a breaking change. This patch release reverts the Builder behavior present in v1.12.0..v1.12.3 but keeps the Document behavior. This release also introduces a Document attribute to allow affected users to easily change this behavior for their legacy code without invasive changes. [#]### Compensating Feature in XML::Document This release of Nokogiri introduces a new `Document` boolean attribute, `namespace_inheritance`, which controls whether children should inherit a namespace when they are reparented. `Nokogiri::XML:Document` defaults this attribute to `false` meaning "do not inherit," thereby making explicit the behavior change introduced in v1.12.0. CRuby users who desire the pre-v1.12.0 behavior may set `document.namespace_inheritance = true` before reparenting nodes. See https://nokogiri.org/rdoc/Nokogiri/XML/Document.html#namespace_inheritance-… for example usage. [#]### Fix for XML::Builder However, recognizing that we want `Builder`-created children to inherit namespaces, Builder now will set `namespace_inheritance=true` on the underlying document for both JRuby and CRuby. This means that, on CRuby, the pre-v1.12.0 behavior is restored. Users who want to turn this behavior off may pass a keyword argument to the Builder constructor like so: ``` ruby Nokogiri::XML::Builder.new(namespace_inheritance: false) ``` See https://nokogiri.org/rdoc/Nokogiri/XML/Builder.html#label-Namespace+inherit… for example usage. [#]### Downstream gem maintainers Note that any downstream gems may want to specifically omit Nokogiri v1.12.0--v1.12.3 from their dependency specification if they rely on child namespace inheritance: ``` ruby Gem::Specification.new do |gem| [#] ... gem.add_runtime_dependency 'nokogiri', '!=1.12.3', '!=1.12.2', '!=1.12.1', '!=1.12.0' [#] ... end ``` [#]## Fixed * [JRuby] Fix NPE in Schema parsing when an imported resource doesn't have a `systemId`. [[#2296](https://github.com/sparklemotion/nokogiri/issues/2296)] (Thanks, [@pepijnve](https://github.com/pepijnve)!) ==== rubygem-parallel ==== Version update (1.20.1 -> 1.21.0) - updated to version 1.21.0 * no changelog found ==== rubygem-puma ==== Version update (5.4.0 -> 5.5.0) - updated to version 5.5.0 * Features * Automatic SSL certificate provisioning for localhost, via localhost gem ([#2610], [#2257]) * add support for the PROXY protocol (v1 only) ([#2654], [#2651]) * Add a semantic CLI option for no config file ([#2689]) * Bugfixes * More elaborate exception handling - lets some dead pumas die. ([#2700], [#2699]) * allow multiple after_worker_fork hooks ([#2690]) * Preserve BUNDLE_APP_CONFIG on worker fork ([#2688], [#2687]) * Performance * Fix performance of server-side SSL connection close. ([#2675]) ==== rubygem-rubocop ==== Version update (1.19.1 -> 1.22.1) - updated to version 1.22.1 [#]# 1.22.1 (2021-10-04) [#]## Bug fixes * [#10143](https://github.com/rubocop/rubocop/issues/10143): Fix an error for `Lint/RequireRelativeSelfPath` when using a variable as an argument of `require_relative`. ([@koic][]) * [#10140](https://github.com/rubocop/rubocop/issues/10140): Fix false positive for `Layout/DotPosition` when a heredoc receives a method on the same line as the start sigil in `trailing` style. ([@dvandersluis][]) * [#10148](https://github.com/rubocop/rubocop/issues/10148): Fix `Style/QuotedSymbols` handling escaped characters incorrectly. ([@dvandersluis][]) * [#10145](https://github.com/rubocop/rubocop/issues/10145): Update `Style/SelectByRegexp` to ignore cases where the receiver appears to be a hash. ([@dvandersluis][]) [#]# 1.22.0 (2021-09-29) [#]## New features * [#8431](https://github.com/rubocop/rubocop/issues/8431): Add `Safety` section to documentation for all cops that are `Safe: false` or `SafeAutoCorrect: false`. ([@dvandersluis][]) * [#10132](https://github.com/rubocop/rubocop/issues/10132): Reorganize output of `rubocop --help` for better clarity. ([@dvandersluis][]) * [#10111](https://github.com/rubocop/rubocop/pull/10111): Add new `Style/NumberedParametersLimit` cop. ([@dvandersluis][]) * [#10025](https://github.com/rubocop/rubocop/pull/10025): Changed cop `SpaceInsideParens` to include a `compact` style. ([@itay-grudev][]) * [#10084](https://github.com/rubocop/rubocop/issues/10084): Add new `Lint/RequireRelativeSelfPath` cop. ([@koic][]) * [#8327](https://github.com/rubocop/rubocop/issues/8327): Add new cop `Style/SelectByRegexp`. ([@dvandersluis][]) * [#10100](https://github.com/rubocop/rubocop/pull/10100): Add new `Style/NumberedParameters` cop. ([@Hugo-Hache][]) * [#10103](https://github.com/rubocop/rubocop/issues/10103): Add `AllowHttpProtocol` option to `Bundler/InsecureProtocolSource`. ([@koic][]) * [#10102](https://github.com/rubocop/rubocop/pull/10102): Add new `Security/IoMethods` cop. ([@koic][]) [#]## Bug fixes * [#10110](https://github.com/rubocop/rubocop/issues/10110): Update `Layout/DotPosition` to be able to handle heredocs. ([@dvandersluis][]) * [#10134](https://github.com/rubocop/rubocop/issues/10134): Update `Style/MutableConstant` to not consider multiline uninterpolated strings as unfrozen in ruby 3.0. ([@dvandersluis][]) * [#10124](https://github.com/rubocop/rubocop/pull/10124): Fix `Layout/RedundantLineBreak` adding extra space within method chains. ([@dvandersluis][]) * [#10118](https://github.com/rubocop/rubocop/issues/10118): Fix crash with `Style/RedundantSort` when the block doesn't only contain a single `send` node. ([@dvandersluis][]) * [#10135](https://github.com/rubocop/rubocop/issues/10135): Fix `Style/WordArray` to exclude files in `--auto-gen-config` when `percent` style is given but brackets are required. ([@dvandersluis][]) * [#10090](https://github.com/rubocop/rubocop/issues/10090): Fix a false negative for `Style/ArgumentsForwarding` when using only kwrest arg. ([@koic][]) * [#10099](https://github.com/rubocop/rubocop/pull/10099): Update`Style/RedundantFreeze` to stop considering `ENV` values as immutable. ([@byroot][]) * [#10078](https://github.com/rubocop/rubocop/pull/10078): Fix `Layout/LineLength` reported length when ignoring directive comments. ([@dvandersluis][]) * [#9934](https://github.com/rubocop/rubocop/issues/9934): Fix configuration loading to not raise an error for an obsolete ruby version that is subsequently overridden. ([@dvandersluis][]) * [#10136](https://github.com/rubocop/rubocop/issues/10136): Update `Lint/AssignmentInCondition` to not consider assignments within blocks in conditions. ([@dvandersluis][]) * [#9588](https://github.com/rubocop/rubocop/issues/9588): Fix causing a variable to be shadowed from outside the rescue block in the logic of Naming/RescuedExceptionsVariableName. ([@lilisako][]) * [#10096](https://github.com/rubocop/rubocop/issues/10096): Fix `Lint/AmbiguousOperatorPrecedence` with `and`/`or` operators. ([@dvandersluis][]) * [#10106](https://github.com/rubocop/rubocop/issues/10106): Fix `Style/RedundantSelf` for pattern matching. ([@dvandersluis][]) * [#10066](https://github.com/rubocop/rubocop/issues/10066): Fix how `MinDigits` is calculated for `Style/NumericLiterals` when generating a configuration file. ([@dvandersluis][]) [#]## Changes * [#10088](https://github.com/rubocop/rubocop/pull/10088): Update `Lint/BooleanSymbol` to be `SafeAutoCorrect: false` rather than `Safe: false`. ([@dvandersluis][]) * [#10122](https://github.com/rubocop/rubocop/pull/10122): Update `Style/RedundantSort` to be unsafe, and revert the special case for `size` from [#10061](https://github.com/rubocop/rubocop/pull/10061). ([@dvandersluis][]) * [#10130](https://github.com/rubocop/rubocop/issues/10130): Update `Lint/ElseLayout` to be able to handle an `else` with only a single line. ([@dvandersluis][]) [#]# 1.21.0 (2021-09-13) [#]## New features * [#7849](https://github.com/rubocop/rubocop/issues/7849): Add new `Lint/AmbiguousOperatorPrecedence` cop. ([@dvandersluis][]) * [#9061](https://github.com/rubocop/rubocop/issues/9061): Add new `Lint/IncompatibleIoSelectWithFiberScheduler` cop. ([@koic][]) [#]## Bug fixes * [#10067](https://github.com/rubocop/rubocop/pull/10067): Fix an error for `Lint/NumberConversion` when using nested number conversion methods. ([@koic][]) * [#10054](https://github.com/rubocop/rubocop/pull/10054): Fix a false positive for `Layout/SpaceAroundOperators` when match operators between `<<` and `+=`. ([@koic][]) * [#10061](https://github.com/rubocop/rubocop/issues/10061): Fix a false positive for `Style/RedundantSort` when using `size` method in the block. ([@koic][]) * [#10063](https://github.com/rubocop/rubocop/pull/10063): Fix a false positive for `Layout/SingleLineBlockChain` when method call chained on a new line after a single line block with trailing dot. ([@koic][]) * [#10064](https://github.com/rubocop/rubocop/pull/10064): Fix `Style/ExplicitBlockArgument` corrector assuming any existing block argument was named `block`. ([@byroot][]) * [#10070](https://github.com/rubocop/rubocop/issues/10070): Fix a false positive for `Style/MutableConstant` when using non-interpolated heredoc in Ruby 3.0. ([@koic][]) [#]## Changes * [#9674](https://github.com/rubocop/rubocop/issues/9674): Disable `Style/AsciiComments` by default. ([@dvandersluis][]) * [#10051](https://github.com/rubocop/rubocop/pull/10051): Improve the messaging for `Style/Documentation` to be more clear about what class/module needs documentation. ([@dvandersluis][]) * [#10074](https://github.com/rubocop/rubocop/pull/10074): Update `Naming/InclusiveLanguage` to be disabled by default. ([@dvandersluis][]) * [#10068](https://github.com/rubocop/rubocop/pull/10068): Mark `Style/AndOr` as unsafe auto-correction. ([@koic][]) [#]# 1.20.0 (2021-08-26) [#]## New features * [#10040](https://github.com/rubocop/rubocop/pull/10040): Make `Lint/Debugger` aware of debug.rb. ([@koic][]) * [#9580](https://github.com/rubocop/rubocop/issues/9580): Add a new cop that enforces which bundler gem file to use. ([@gregfletch][]) [#]## Bug fixes * [#10033](https://github.com/rubocop/rubocop/issues/10033): Fix an incorrect auto-correct for `Style/BlockDelimiters` when there is a comment after the closing brace and using method chanin. ([@koic][]) * [#6630](https://github.com/rubocop/rubocop/issues/6630): Updated `Style/CommentAnnotation` to be able to handle multiword keyword phrases. ([@dvandersluis][]) * [#7836](https://github.com/rubocop/rubocop/issues/7836): Update `Style/BlockDelimeters` to add `begin`...`end` when converting a block containing `rescue` or `ensure` to braces. ([@dvandersluis][]) * [#10031](https://github.com/rubocop/rubocop/issues/10031): Fix a false positive for `Style/HashExcept` when comparing with hash value. ([@koic][]) [#]## Changes * [#10034](https://github.com/rubocop/rubocop/pull/10034): Add `RubyJard` debugger calls to Lint/Debugger/DebuggerMethods. ([@DanielVartanov][]) * [#10006](https://github.com/rubocop/rubocop/pull/10006): Interpolated string literals are no longer frozen since Ruby 3.0. ([@splattael][]) * [#9328](https://github.com/rubocop/rubocop/issues/9328): Recognize shareable_constant_value magic comment. ([@thearjunmdas][], [@caalberts][]) * [#10036](https://github.com/rubocop/rubocop/issues/10036): Mark `Style/StructInheritance` as unsafe auto-correction. ([@koic][]) ==== rubygem-rubocop-ast ==== Version update (1.11.0 -> 1.12.0) - updated to version 1.12.0 [#]## Bug fixes * [#208](https://github.com/rubocop/rubocop-ast/issues/208): Update `MethodDispatchNode#block_literal?` to return true for `numblock`s. ([@dvandersluis][]) ==== rubygem-spring ==== Version update (2.1.1 -> 3.0.0) Subpackages: ruby2.7-rubygem-spring ruby3.0-rubygem-spring - updated to version 3.0.0 * Require applications to have reloading enabled in the managed environments. * Require Ruby 2.5. * Require Rails 5.2. ==== rubygem-unf_ext ==== Version update (0.0.7.7 -> 0.0.8) - updated to version 0.0.8 * No functional change in the library code. * Include Windows binaries for Ruby 3.0. * Drop support for Ruby 2.1 and earlier. * Replace Travis CI with Github Actions. * Fix cross-build after upgrading rake-compiler/rake-compiler-dock to 1.1.1/1.1.0. ==== rubygem-unicode-display_width ==== Version update (2.0.0 -> 2.1.0) - updated to version 2.1.0 * Unicode 14.0 ==== rubygem-yast-rake ==== Version update (0.2.41 -> 0.2.42) - Fixed running the GitHub Actions locally ("rake actions:run"), allow settting additional Docker options in the YAML config or via DOCKER_OPTIONS environment variable (bsc#1191400) - 0.2.42 ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-transactional-update - Fix issues with salt-ssh's extra-filerefs - Added: * fix-issues-with-salt-ssh-s-extra-filerefs.patch - Fix crash when calling manage.not_alive runners - Added: * fix-crash-when-calling-manage.not_alive-runners.patch - Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446) - Added: * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch ==== signon-kwallet-extension ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== skanlite ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - Changes since 21.08.1: * Only depend on major.minor version of KF5Sane ==== skopeo ==== Version update (1.2.3 -> 1.5.0) - Update to version 1.5.0: * bump deps * Update VM Images + Drop prior-ubuntu references * Update installation doc with latest steps * Introduce a --ignore option to allow "sync" command to continue syncing even after a particular image sync fails * vendor-in-container: update to golang:1.16 * update c/common, c/image, c/storage * Add timeouts when waiting on OpenShift or the registry to start * Add docs and bash completions * Add support for decompressing while copying to dir:// * Update to enabled containers/image version * Fix two instances of unused err found by go-staticcheck * Test both imageOptions and imageDestOptions in TestTLSVerifyFlags * Split testing of --tls-verify into separate TestTLSVerifyFlags * Add the --tls-verify option to (skopeo logout) * Added `format` parameter to `sync` command * copy: Add --digestfile ==== solid ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5Solid5 libKF5Solid5-lang solid-imports solid-tools - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * Add support for static builds * support extracting cpu model on ppc64 ==== sonnet ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5SonnetCore5 libKF5SonnetCore5-lang libKF5SonnetUi5 - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== spectacle ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== sscep ==== Version update (0.9.1 -> 0.10.0) - Update to version 0.10.0 * Added auto-selection of default protection algorithms (-E, -S and -F) based on getcaps, unless specified explicitly. * Added parameter -W sec to wait for network connectivity (default 0). * Engines are now disabled by default and need to be enabled by ./configure --enable-engines or cmake . -DENABLE_ENGINES=ON * Compatible with OpenSSL 3.0.0 * Removed support for OpenSSL < 1.1.0 ==== subversion ==== Subpackages: libsvn_auth_gnome_keyring-1-0 libsvn_auth_kwallet-1-0 subversion-bash-completion subversion-perl subversion-server subversion-tools - always build with kwallet support, no longer make a distrinction between openSUSE and SLE (boo#1191282) ==== syndication ==== Version update (5.86.0 -> 5.87.0) - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== syntax-highlighting ==== Version update (5.86.0 -> 5.87.0) Subpackages: libKF5SyntaxHighlighting5 libKF5SyntaxHighlighting5-lang - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration * Add basic QML API docs * yara - add new 4.x keywords * Tests result * Fix operators and included more blocks on test * Change license to MIT * Included test reference * Removed items that are generating errors for now * initial work on terraform syntax highlight * Port AbstractHighlighter::highlightLine to QStringView ==== systemd ==== Version update (249.4 -> 249.5) Subpackages: libsystemd0 libudev-devel libudev1 systemd-container systemd-doc systemd-sysvinit udev - Import commit 8521f8d22fd44400289fcea03493ebd7f8b1487d (merge of v249.5) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/355e113ce193e5e2d195278c57d47f9… - Import commit 355e113ce193e5e2d195278c57d47f9a1b00ae46 3b4a005095 meson: add missing include directory when using xkbcommon 4c4e642712 meson: allow extra net naming schemes to be defined during configuration (jsc#SLE-18514) 78466e4464 meson: drop the list of valid net naming schemes b9a2098f9d netif-naming: inline one iterator variable d7fbbc5e74 Add remaining supported schemes as options for default-net-naming-scheme - Rename %{gnu-efi} into %{sd_boot} Build conditionals (%bcond_with and %bcond_without) are used to define a specific feature of systemd. "gnu-efi" is rather an implemenation detail. Also not really sure what "efi" option alone is useful for since systemd-boot & co depends on "gnu-efi". - Enable sd_boot support for aarch64 - Ghost own directories /var/log/journal and /var/log/journal/remote again rpmlint no more complain about the setgid bit, see sr#923496. - Overwriting rootprefix= is only required when split-usr is enabled - Rename %usrmerged into %split_usr - Suppress PAM warning when the credentials for user@.service service are established (bsc#1190515) systemd-user PAM service needs to define a default implementation of pam_setcred() otherwise the fallback (defined by /etc/pam.d/other) is used, which consists of pam_warn.so + pam_deny.so, and will throw a warning each time a user logs in. - No need to install upstream pam configuration file "systemd-user" It's overwritten by the SUSE version anyway. ==== systemd-presets-common-SUSE ==== - Haveged as a daemon is no longer required since kernel 5.6 do not enable by default. ==== systemsettings5 ==== Version update (5.22.5 -> 5.23.1) Subpackages: systemsettings5-lang - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - Changes since 5.22.90: * Revert "Use level 2 header" * sidebar: make placeholder message non-visible when at 0 opacity (kde#443016) * Use level 2 header * Support left/right and escape for key navigation in the sidebar - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * Swap the position of the hamburger menu and home buttons * Don't load all subpages of a category when clicked (kde#438362) * Sidebar: set background colors in the correct way * Sidebar: Unify "Show Changed Settings" button toolbar implementations * Explicitly set KDE_COMPILERSETTINGS_LEVEL * Clean up leftovers from systemsettingsrunner import * Port deprecated setDelayed * Use explicit + use override * [sidebar] Enable/disable mousearea instead of changing accepted buttons * [sidebar] Refactor subcategory button to use rectangle as its base item * Don't request context help titlebar button * Remove About Current Module * Import services runner & strip out unneeded parts * Fix highlight default for category owner children and when changing data from landing page * Allow compiling without KF5DocTools * Create simple getter to check if KCM is an SystemSettingsExternalApp * Port ExternalAppModule away from KCModuleInfo * Port loading of categories away from KServiceTypeTrader * [sidebar] Port away from KDeclarative * Remove old category files * [sidebar] Add missing subcategory header spacing for widescreen view (kde#438377) * only update the global header reacting to the active page (kde#437088) * Use ellipses instead of triple period * make sure we have 2 columns when loading a category (kde#435461) * [sidebar] Don't show back button for subcategory header in widescreen view ==== thai-fonts ==== Version update (0.7.2 -> 0.7.3) - Update to version 0.7.3. * Purisa, Sawasdee: now can be embeded as installable in PDF. * TlwgTypo, TlwgTypist: fix uneven widths of some glyphs. * TlwgTypo, TlwgTypist, TlwgMono, TlwgTypewriter: clear PANOSE to use calculated values, so as to get listed in gvim. * Norasi: add 'onum' and 'smcp' OpenType features for access to old style figures and small caps glyphs. * LaTeX: Add old style figures and small caps supports for Norasi. ==== threadweaver ==== Version update (5.86.0 -> 5.87.0) - Update to 5.87.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.87.0 - Changes since 5.86.0: * Add Gitlab CI configuration ==== timezone ==== Version update (2021c -> 2021d) - timezone update 2021d: * Fiji suspends DST for the 2021/2022 season * 'zic -r' marks unspecified timestamps with "-00" ==== timezone-java ==== Version update (2021c -> 2021d) - timezone update 2021d: * Fiji suspends DST for the 2021/2022 season * 'zic -r' marks unspecified timestamps with "-00" ==== tlp ==== Subpackages: tlp-rdw - tlp-sleep.service does not exist anymore - Make %files section a bit more precise ==== totem ==== Version update (3.38.1 -> 3.38.2) Subpackages: totem-plugins - Update to version 3.38.2: + Add support for MPL subtitles. + Fix OpenUri method in MPRIS plugin. - Remove obsolete translation-update-upstream support (jsc#SLE-21105). ==== tumbler ==== Subpackages: libtumbler-1-0 tumbler-folder-thumbnailer tumbler-lang tumbler-webp-thumbnailer - Add Recommends: ffmpegthumbnailer ==== unbound ==== Subpackages: libunbound8 unbound-anchor - Fix pidfile location ==== virt-manager ==== Subpackages: virt-install virt-manager-common - bsc#1191356 - virt-manager should not depend on gtk4 Modified files: virt-manager.spec virtman-dont-specify-gtksource-version.patch virtman-dont-specify-vte-version.patch - jsc#SLE-20856 Dev: KVM: Enable vfio-ccw and vfio-ap in virt-* tools 965480e8-virt-install-add-mediated-device.patch ==== vmaf ==== Version update (2.2.0 -> 2.3.0) - Update to release 2.3.0 * Added Contrast Aware Multiscale Banding Index. * Added pixel format VMAF_PIX_FMT_YUV400P. - Update to release 2.2.1 * Fix a race condition in vmaf_thread_pool_wait(). * Avoid chroma resampling for 420mpeg2 y4m input. ==== webkit2gtk3 ==== Version update (2.34.0 -> 2.34.1) Subpackages: libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Update to version 2.34.1: + Update user agent browser versions. + Fix a crash with GTK >= 3.24.30. + Fix a crash when loading videos on reddit. + Fix file type detection when application calls g_desktop_app_info_set_as_default_for_extension() passing html. ==== webkit2gtk3-soup2 ==== Version update (2.34.0 -> 2.34.1) Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 typelib-1_0-JavaScriptCore-4_0 typelib-1_0-WebKit2-4_0 webkit2gtk-4_0-injected-bundles - Update to version 2.34.1: + Update user agent browser versions. + Fix a crash with GTK >= 3.24.30. + Fix a crash when loading videos on reddit. + Fix file type detection when application calls g_desktop_app_info_set_as_default_for_extension() passing html. ==== wireless-regdb ==== Version update (20210421 -> 20210828) - Update to version 20210828: * wireless-regdb: update regulatory database based on preceding changes * Update regulatory rules for Ecuador (EC) * wireless-regdb: Update regulatory rules for Norway (NO) on 6 and 60 GHz * wireless-regdb: Update regulatory rules for Germany (DE) on 6GHz * wireless-regdb: update regulatory database based on preceding changes * wireless-regdb: reduce bandwidth for 5730-5850 and 5850-5895 MHz in US * wireless-regdb: remove PTMP-ONLY from 5850-5895 MHz for US * wireless-regdb: recent FCC report and order allows 5850-5895 immediately * wireless-regdb: update 5725-5850 MHz rule for GB ==== xdg-desktop-portal ==== Version update (1.10.0 -> 1.10.1) - Update to version 1.10.1: + Revert a breaking change to the screencast and inhibit portal. ==== xdg-desktop-portal-kde ==== Version update (5.22.5 -> 5.23.1) Subpackages: xdg-desktop-portal-kde-lang - Update to 5.23.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.1 - No code changes since 5.23.0 - Update to 5.23.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.23.0 - Changes since 5.22.90: * Update dbus-advertised screencast source types * Inhibit portal: send reply to the Close() request to release inhibition - Add new key + signature to plasma.keyring - Update to 5.22.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.22.90 - Changes since 5.22.5: * Fix crash when in X11 * Remove unnecessary attribute * Now we are using Qt's internal connection, we should not set an eventqueue * Remove unused output initialisation * Explicitly set KDE_COMPILERSETTINGS_LEVEL * Guard use of wayland connection * Avoid second wayland connection in xdg-desktop-portal-kde * Add missing properties for 2 dbus interfaces * Background portal: avoid crash when allowing app to run in background (kde#438954) * Fix compile with last ecm * Pass the version to the project call * Use version-less qt DBus macros * Remove unused method * Add a SNI for active screencasting sessions ==== xdg-user-dirs ==== - Remove obsolete translation-update-upstream support (jsc#SLE-21105). ==== xf86-input-libinput ==== - reverted previous change; the issue was broken ckb-next, not the usage of libinput v120 API (boo#1190646) - switch to libinput v120 API broke the driver, so disable it for now via patching config.h in specfile after running configure (boo#1190646) ==== xfce4-whiskermenu-plugin ==== Version update (2.6.0 -> 2.6.1) Subpackages: xfce4-whiskermenu-plugin-lang - Update to version 2.6.1 * Fix menu not toggling. (gxo#panel-plugins/xfce4-whiskermenu-plugin#61) * Fix small icon in multi-row panels. (gxo#panel-plugins/xfce4-whiskermenu-plugin#37) * Fix missing minimize and maximize buttons in settings dialog. * Replace deprecated code for grab check. * Translation updates ==== xfsprogs ==== Subpackages: libhandle1 xfsprogs-scrub - move fsck.xfs, mkfs.xfs and xfs_repair from /sbin to /usr/sbin (bsc#1191105) The default rpmbuild %configure macro passes --sbindir=/usr/sbin to every configure script, but the xfsprogs configure script ignores it when --exec-prefix is also set. Unset --exec-prefix since it is not really required (all other paths are explicitly passed via the rpm configure macro), so that the --sbindir is respected. ==== xkeyboard-config ==== Version update (2.33 -> 2.34) - update to version 2.34 * xml2lst: use dynamic Perl path * Resolved 101key Old Hungarian II * Old turkish f layout (with pc104 support) added. * Fix wrong key symbol name * Added International Phonetic Alphabet (QWERTY) * gitlab CI: update to latest ci-templates * Hellenic keyboard perfected. * lt: Place sterling symbol on AD03, layer 4 (with E and euro) * Use single guillemots on L4 (not less/greater) where L3 has guillemots * Added English (Dvorak, Macintosh) based on the MacOS dvorak layout * Accommodate uppercase/lowercase ß, long s, §; deduplicate ? * Move left/right quotes one key to the right, place lower quotes on AB04 * Update symbols/it adding credits and reference for fur lang * lt/us: Inherit AE09/AE10 from latin * Add Russian GOST layouts * Add Polish(lefty) layout * Add Arabic(Ergoarabic) keyboard layout * translation sync * Hebrew translation added ==== xlockmore ==== Version update (5.66 -> 5.67) - update to 5.67: * Fixing specified bound equals destination size warning in iostuff.c. * Port updated for xscreensaver-6.01. With help from EoflaOE ViceCity. * maze3d.c updated for VMS as CRTL now contains more standard functions ==== xwayland ==== - Specfile cleanup ==== yarn ==== Version update (1.22.11 -> 1.22.13) - update to 1.22.13: https://github.com/yarnpkg/yarn/releases/tag/v1.22.13 ==== yast2-installation ==== Version update (4.4.19 -> 4.4.20) - Fix file copying when using relurl:// and file:// naming schemes (bsc#1191160). - 4.4.20 ==== yast2-network ==== Version update (4.4.26 -> 4.4.27) - Fix reading of the routing configuration (bsc#1191589) - 4.4.27 ==== yast2-pkg-bindings ==== Version update (4.4.2 -> 4.4.3) - Use the C++17 standard, required by the latest libzypp (bsc#1191829) - 4.4.3 ==== yast2-python-bindings ==== Version update (4.4.1 -> 4.4.2) - Fix yast2-python-bindings requires Python (bsc#1190890). - 4.4.2 ==== yast2-storage-ng ==== Version update (4.4.8 -> 4.4.11) - Install by default to any available Dell BOSS drive and identify such drives more clearly in the Guided Setup (jsc#SLE-17578). - Try to avoid by default to install into SD Cards if a fixed disk is available (bsc#1187438). - 4.4.11 - Do not force the same mount_by method in fstab and in crypttab (needed for jsc#SLE-20416 and bsc#1181196) - 4.4.10 - Fix (un)masking systemd units by using the systemctl --plain flag for getting an output without status glyphs (bsc#1191347). - 4.4.9 ==== yast2-theme ==== Version update (4.4.3 -> 4.4.4) Subpackages: yast2-theme-breeze - Remove unnecesary rej file (bsc#1191830) - 4.4.4 ==== yast2-trans ==== Version update (84.87.20210914.a5d6b81b64 -> 84.87.20210929.6d3a97ea50) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20210929.6d3a97ea50: * New POT for text domain 'nfs'. * New POT for text domain 'network'. * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * New POT for text domain 'cluster'. * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * New POT for text domain 'network'. * Translated using Weblate (Greek) * Translated using Weblate (Greek) * New POT for text domain 'add-on'. * Translated using Weblate (Czech) * New POT for text domain 'base'. * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Slovak) * Translated using Weblate (Dutch) * Translated using Weblate (Catalan) * Translated using Weblate (Japanese) * New POT for text domain 'packager'. * New POT for text domain 'online-update'. * New POT for text domain 'bootloader'. * New POT for text domain 'base'. * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) ==== yast2-users ==== Version update (4.4.6 -> 4.4.7) - The shadow tools are used for reading the useradd default values (bsc#1190864). - Unsupported useradd attributes (i.e., skel and groups) are removed from the UI. - 4.4.7 ==== z3 ==== Version update (4.8.11 -> 4.8.12) - update to 4.8.12: Release provided to fix git tag discrepancy issues with 4.8.11 ==== zypper ==== Version update (1.14.49 -> 1.14.50) Subpackages: zypper-log zypper-needs-restarting - Fix compiler warning. - zypper.conf: New option whether to collect subcommands found in $PATH (fixes #379) +[subcommand] i + +## Whether to look for subcommands in $PATH +## +## If a subcommand is not found in the zypper_execdir, the wrapper +## will look in the rest of your $PATH for it. Thus, it's possible +## to write local zypper extensions that don't live in system space. +## See section SUBCOMMANDS in the zypper manpage. +## +## Valid values: boolean +## Default value: yes +## +# seachSubcommandInPath = yes. - help subcommand: show path of command found in $PATH. - version 1.14.50

1 0

DE0-Nano-SoC boot fails
by Christian Gross 22 Oct '21

22 Oct '21

Hi, I wrote already in April 2020 about this to the mailing list. However, the situation did not improve since then. The one and only appliance booting on the DE0-Nano-SoC is Leap 15.0, all newer fail. openSUSE-Leap15.0-ARM-JeOS-socfpgade0nanosoc.armv7l-2018.07.02-Buildlp150.1.1 boots openSUSE-Leap-15.1-ARM-JeOS-socfpgade0nanosoc.armv7l end up at u ends up showing the u-boot prompt: "=>" openSUSE-Leap-15.2-ARM-JeOS-socfpgade0nanosoc.armv7l-2020.02.26-Build1.63 and all newer do not even get to u-boot. Does nobody beside me use the DE0-Nano-SoC or DE10-Nano? Thanks, Christian

4 5

New Arm Tumbleweed snapshot 20211008 released!
by Guillaume Gardet 11 Oct '21

11 Oct '21

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa Mesa-drivers apache2 (2.4.49 -> 2.4.51) apache2-manual (2.4.49 -> 2.4.51) apache2-prefork (2.4.49 -> 2.4.51) apache2-utils (2.4.49 -> 2.4.51) bash ca-certificates-mozilla (2.50 -> 2.52) cepces cogl e2fsprogs elfutils elfutils-debuginfod filesystem gawk gtk4 hiredis (1.0.0 -> 1.0.2) ldb (2.3.0 -> 2.4.0) libsolv (0.7.19 -> 0.7.20) libsoup2 libstorage-ng (4.4.41 -> 4.4.43) llvm12 llvm13 (12.0.1 -> 13.0.0) lz4 mozilla-nss (3.69.1 -> 3.70) redis (6.2.5 -> 6.2.6) samba (4.14.6+git.182.2205d5224e3 -> 4.15.0+git.185.378416e547c) tar texinfo timezone (2021a -> 2021c) timezone-java (2021a -> 2021c) transactional-update (3.5.5 -> 3.5.6) trousers u-boot-rpiarm64 (2021.07 -> 2021.10) === Details === ==== Mesa ==== Subpackages: Mesa-dri-devel Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - Fix build with LLVM 13: * U_gallivm-add-new-wrapper-around-Module.patch * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch ==== Mesa-drivers ==== Subpackages: Mesa-dri Mesa-gallium Mesa-libva libvdpau_r300 libvdpau_r600 libvdpau_radeonsi libvulkan_radeon - Fix build with LLVM 13: * U_gallivm-add-new-wrapper-around-Module.patch * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch ==== apache2 ==== Version update (2.4.49 -> 2.4.51) - version update to 2.4.51 * ) SECURITY: CVE-2021-42013: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773) (cve.mitre.org) * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate unused AP_NORMALIZE_DROP_PARAMETERS flag. - version update to 2.4.50 * ) core: AP_NORMALIZE_DECODE_UNRESERVED should normalize the second dot in the uri-path when it's preceded by a dot. [Yann Ylavic] * ) mod_md: when MDMessageCmd for a 'challenge-setup:<type>:<dnsname>' fails (!= 0 exit), the renewal process is aborted and an error is reported for the MDomain. This provides scripts that distribute information in a cluster to abort early with bothering an ACME server to validate a dns name that will not work. The common retry logic will make another attempt in the future, as with other failures. Fixed a bug when adding private key specs to an already working MDomain, see <https://github.com/icing/mod_md/issues/260>. [Stefan Eissing] * ) mod_proxy: Handle UDS URIs with empty hostname ("unix:///...") as if they had no hostname ("unix:/..."). [Yann Ylavic] * ) mod_md: fixed a bug in handling multiple parallel OCSP requests. These could run into an assertion which terminated (and restarted) the child process where the task was running. Eventually, all OCSP responses were collected, but not in the way that things are supposed to work. See also <https://bz.apache.org/bugzilla/show_bug.cgi?id=65567>. The bug was possibly triggered when more than one OCSP status needed updating at the same time. For example for several renewed certificates after a server reload. * ) mod_rewrite: Fix UDS ("unix:") scheme for [P] rules. PR 57691 + 65590. [Janne Peltonen <janne.peltonen sange.fi>] * ) event mpm: Correctly count active child processes in parent process if child process dies due to MaxConnectionsPerChild. PR 65592 [Ruediger Pluem] * ) mod_http2: when a server is restarted gracefully, any idle h2 worker threads are shut down immediately. Also, change OpenSSL API use for deprecations in OpenSSL 3.0. Adds all other, never proposed code changes to make a clean sync of http2 sources. [Stefan Eissing] * ) mod_dav: Correctly handle errors returned by dav providers on REPORT requests. [Ruediger Pluem] * ) core: do not install core input/output filters on secondary connections. [Stefan Eissing] * ) core: Add ap_pre_connection() as a wrapper to ap_run_pre_connection() and use it to prevent that failures in running the pre_connection hook cause crashes afterwards. [Ruediger Pluem] * ) mod_speling: Add CheckBasenameMatch PR 44221. [Christophe Jaillet] ==== apache2-manual ==== Version update (2.4.49 -> 2.4.51) - version update to 2.4.51 * ) SECURITY: CVE-2021-42013: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773) (cve.mitre.org) * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate unused AP_NORMALIZE_DROP_PARAMETERS flag. - version update to 2.4.50 * ) core: AP_NORMALIZE_DECODE_UNRESERVED should normalize the second dot in the uri-path when it's preceded by a dot. [Yann Ylavic] * ) mod_md: when MDMessageCmd for a 'challenge-setup:<type>:<dnsname>' fails (!= 0 exit), the renewal process is aborted and an error is reported for the MDomain. This provides scripts that distribute information in a cluster to abort early with bothering an ACME server to validate a dns name that will not work. The common retry logic will make another attempt in the future, as with other failures. Fixed a bug when adding private key specs to an already working MDomain, see <https://github.com/icing/mod_md/issues/260>. [Stefan Eissing] * ) mod_proxy: Handle UDS URIs with empty hostname ("unix:///...") as if they had no hostname ("unix:/..."). [Yann Ylavic] * ) mod_md: fixed a bug in handling multiple parallel OCSP requests. These could run into an assertion which terminated (and restarted) the child process where the task was running. Eventually, all OCSP responses were collected, but not in the way that things are supposed to work. See also <https://bz.apache.org/bugzilla/show_bug.cgi?id=65567>. The bug was possibly triggered when more than one OCSP status needed updating at the same time. For example for several renewed certificates after a server reload. * ) mod_rewrite: Fix UDS ("unix:") scheme for [P] rules. PR 57691 + 65590. [Janne Peltonen <janne.peltonen sange.fi>] * ) event mpm: Correctly count active child processes in parent process if child process dies due to MaxConnectionsPerChild. PR 65592 [Ruediger Pluem] * ) mod_http2: when a server is restarted gracefully, any idle h2 worker threads are shut down immediately. Also, change OpenSSL API use for deprecations in OpenSSL 3.0. Adds all other, never proposed code changes to make a clean sync of http2 sources. [Stefan Eissing] * ) mod_dav: Correctly handle errors returned by dav providers on REPORT requests. [Ruediger Pluem] * ) core: do not install core input/output filters on secondary connections. [Stefan Eissing] * ) core: Add ap_pre_connection() as a wrapper to ap_run_pre_connection() and use it to prevent that failures in running the pre_connection hook cause crashes afterwards. [Ruediger Pluem] * ) mod_speling: Add CheckBasenameMatch PR 44221. [Christophe Jaillet] ==== apache2-prefork ==== Version update (2.4.49 -> 2.4.51) - version update to 2.4.51 * ) SECURITY: CVE-2021-42013: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773) (cve.mitre.org) * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate unused AP_NORMALIZE_DROP_PARAMETERS flag. - version update to 2.4.50 * ) core: AP_NORMALIZE_DECODE_UNRESERVED should normalize the second dot in the uri-path when it's preceded by a dot. [Yann Ylavic] * ) mod_md: when MDMessageCmd for a 'challenge-setup:<type>:<dnsname>' fails (!= 0 exit), the renewal process is aborted and an error is reported for the MDomain. This provides scripts that distribute information in a cluster to abort early with bothering an ACME server to validate a dns name that will not work. The common retry logic will make another attempt in the future, as with other failures. Fixed a bug when adding private key specs to an already working MDomain, see <https://github.com/icing/mod_md/issues/260>. [Stefan Eissing] * ) mod_proxy: Handle UDS URIs with empty hostname ("unix:///...") as if they had no hostname ("unix:/..."). [Yann Ylavic] * ) mod_md: fixed a bug in handling multiple parallel OCSP requests. These could run into an assertion which terminated (and restarted) the child process where the task was running. Eventually, all OCSP responses were collected, but not in the way that things are supposed to work. See also <https://bz.apache.org/bugzilla/show_bug.cgi?id=65567>. The bug was possibly triggered when more than one OCSP status needed updating at the same time. For example for several renewed certificates after a server reload. * ) mod_rewrite: Fix UDS ("unix:") scheme for [P] rules. PR 57691 + 65590. [Janne Peltonen <janne.peltonen sange.fi>] * ) event mpm: Correctly count active child processes in parent process if child process dies due to MaxConnectionsPerChild. PR 65592 [Ruediger Pluem] * ) mod_http2: when a server is restarted gracefully, any idle h2 worker threads are shut down immediately. Also, change OpenSSL API use for deprecations in OpenSSL 3.0. Adds all other, never proposed code changes to make a clean sync of http2 sources. [Stefan Eissing] * ) mod_dav: Correctly handle errors returned by dav providers on REPORT requests. [Ruediger Pluem] * ) core: do not install core input/output filters on secondary connections. [Stefan Eissing] * ) core: Add ap_pre_connection() as a wrapper to ap_run_pre_connection() and use it to prevent that failures in running the pre_connection hook cause crashes afterwards. [Ruediger Pluem] * ) mod_speling: Add CheckBasenameMatch PR 44221. [Christophe Jaillet] ==== apache2-utils ==== Version update (2.4.49 -> 2.4.51) - version update to 2.4.51 * ) SECURITY: CVE-2021-42013: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773) (cve.mitre.org) * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate unused AP_NORMALIZE_DROP_PARAMETERS flag. - version update to 2.4.50 * ) core: AP_NORMALIZE_DECODE_UNRESERVED should normalize the second dot in the uri-path when it's preceded by a dot. [Yann Ylavic] * ) mod_md: when MDMessageCmd for a 'challenge-setup:<type>:<dnsname>' fails (!= 0 exit), the renewal process is aborted and an error is reported for the MDomain. This provides scripts that distribute information in a cluster to abort early with bothering an ACME server to validate a dns name that will not work. The common retry logic will make another attempt in the future, as with other failures. Fixed a bug when adding private key specs to an already working MDomain, see <https://github.com/icing/mod_md/issues/260>. [Stefan Eissing] * ) mod_proxy: Handle UDS URIs with empty hostname ("unix:///...") as if they had no hostname ("unix:/..."). [Yann Ylavic] * ) mod_md: fixed a bug in handling multiple parallel OCSP requests. These could run into an assertion which terminated (and restarted) the child process where the task was running. Eventually, all OCSP responses were collected, but not in the way that things are supposed to work. See also <https://bz.apache.org/bugzilla/show_bug.cgi?id=65567>. The bug was possibly triggered when more than one OCSP status needed updating at the same time. For example for several renewed certificates after a server reload. * ) mod_rewrite: Fix UDS ("unix:") scheme for [P] rules. PR 57691 + 65590. [Janne Peltonen <janne.peltonen sange.fi>] * ) event mpm: Correctly count active child processes in parent process if child process dies due to MaxConnectionsPerChild. PR 65592 [Ruediger Pluem] * ) mod_http2: when a server is restarted gracefully, any idle h2 worker threads are shut down immediately. Also, change OpenSSL API use for deprecations in OpenSSL 3.0. Adds all other, never proposed code changes to make a clean sync of http2 sources. [Stefan Eissing] * ) mod_dav: Correctly handle errors returned by dav providers on REPORT requests. [Ruediger Pluem] * ) core: do not install core input/output filters on secondary connections. [Stefan Eissing] * ) core: Add ap_pre_connection() as a wrapper to ap_run_pre_connection() and use it to prevent that failures in running the pre_connection hook cause crashes afterwards. [Ruediger Pluem] * ) mod_speling: Add CheckBasenameMatch PR 44221. [Christophe Jaillet] ==== bash ==== Subpackages: bash-doc - Install bash_builtins manpage under the correct name ==== ca-certificates-mozilla ==== Version update (2.50 -> 2.52) - updated to 2.50 state of the Mozilla NSS Certificate store (bsc#1188006) - Added CAs: + HARICA Client ECC Root CA 2021 + HARICA Client RSA Root CA 2021 + HARICA TLS ECC Root CA 2021 + HARICA TLS RSA Root CA 2021 + TunTrust Root CA - remove the DST_Root_CA_X3.pem trust, as it expires september 30th 2021. (bsc#1190858) ==== cepces ==== Subpackages: cepces-certmonger cepces-selinux python3-cepces - Only install the selinux policy if necessary - Add missing dependency on the main package to the certmonger subpackage - Use %license and move it to the common subpackage - Avoid bashisms - Fix file list for the python subpackage for 3.10+ - Also disable selinux in 15.4, since it is still not supported. ==== cogl ==== Subpackages: libcogl-pango20 libcogl20 typelib-1_0-Cogl-1_0 typelib-1_0-CoglPango-1_0 - Add 2bd3cbed45d633fb15625d58e6b7cb8721b0ba98.patch: cogl-gles2: Fix undefined references. Following this, add libtool BuildRequires and pass autoreconf call before configure as the patch touches the buildsystem. - Add patches from fedora that should have gone upstream: + 0001-egl-Use-eglGetPlatformDisplay-not-eglGetDisplay.patch: egl: Use eglGetPlatformDisplay not eglGetDisplay. + 0002-add-GL_ARB_shader_texture_lod-support.patch: Add GL_ARB_shader_texture_lod support. + 0003-texture-support-copy_sub_image.patch: texture: Support copy_sub_image. ==== e2fsprogs ==== Subpackages: e2fsprogs-scrub libcom_err2 libext2fs2 - quota-Add-support-to-version-0-quota-format.patch: quota: Add support to version 0 quota format (jsc#SLE-17360) quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360) quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360) tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota files (jsc#SLE-17360) e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not trash user limits when processing orphan list (jsc#SLE-17360) debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota commands (jsc#SLE-17360) quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360) - add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships with them ==== elfutils ==== Subpackages: libasm1 libdw1 libelf1 - Enhance license fields: all the libraries actually have a different license to the tools. While the tools are GPL-3.0-or-later, the libraries are (LGPL-3.0-or-later OR GPL-2.0-or-later) SLE bug (for tracking the above) bsc#1191310 ==== elfutils-debuginfod ==== - Enhance license fields: all the libraries actually have a different license to the tools. While the tools are GPL-3.0-or-later, the libraries are (LGPL-3.0-or-later OR GPL-2.0-or-later) ==== filesystem ==== - don't perform UsrMerge if ZYPP_SINGLE_RPMTRANS is set. Rely on file trigger compat mode in that case and do it posttrans (boo#1189788). - generic %ghost handling instead of hardcoding ==== gawk ==== - remove update-alternatives support, as on linux systems GNU software (i.e. gawk in this case) is usually considered the default implementation. - use %make macros ==== gtk4 ==== Subpackages: gtk4-schema libgtk-4-1 typelib-1_0-Gtk-4_0 - Fix a syntax error in the gtk4_immodule_postun RPM macro ==== hiredis ==== Version update (1.0.0 -> 1.0.2) - hiredis 1.0.2 * Hiredis v1.0.2 is a security release with a fix for CVE-2021-32765. v1.0.1 erroneously bumped the SONAME so should be skipped. - hiredis 1.0.1: * CVE-2021-32765: integer overflow if provided maliciously crafted or corrupted RESP mult-bulk protocol data boo#1191331 ==== ldb ==== Version update (2.3.0 -> 2.4.0) Subpackages: libldb2 python3-ldb - Update to version 2.4.0 + Improve calculate_popt_array_length() + Use C99 initializers for builtin_popt_options[] + pyldb: Fix Message.items() for a message containing elements + pyldb: Add test for Message.items() + tests: Use ldbsearch '--scope instead of '-s' + pyldb: fix a typo + Change page size of guidindexpackv1.ldb + Use a 1MiB lmdb so the test also passes on aarch64 CentOS stream + attrib_handler casefold: simplify space dropping + fix ldb_comparison_fold off-by-one overrun + CVE-2020-27840: pytests: move Dn.validate test to ldb + CVE-2020-27840 ldb_dn: avoid head corruption in ldb_dn_explode + CVE-2021-20277 ldb/attrib_handlers casefold: stay in bounds + CVE-2021-20277 ldb tests: ldb_match tests with extra spaces + improve comments for ldb_module_connect_backend() + test/ldb_tdb: correct introductory comments + ldb.h: remove undefined async_ctx function signatures + correct comments in attrib_handers val_to_int64 + dn tests use cmocka print functions + ldb_match: remove redundant check + add tests for ldb_wildcard_compare + ldb_match: trailing chunk must match end of string + pyldb: catch potential overflow error in py_timestring + ldb: remove some 'if PY3's in tests + Add missing break in switch statement ==== libsolv ==== Version update (0.7.19 -> 0.7.20) Subpackages: libsolv-tools python3-solv ruby-solv - fix misparsing of '&' in attributes with libxml2 - choice rules: treat orphaned packages as newest [bsc#1190465] - fix compatibility with Python 3.10 - new SOLVER_EXCLUDEFROMWEAK job type - support for environments in comps parser - bump version to 0.7.20 - Disable python2 usage on suse_version >= 1550 by default (still possible to use osc build --with=python). ==== libsoup2 ==== Subpackages: libsoup-2_4-1 typelib-1_0-Soup-2_4 - Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840) ==== libstorage-ng ==== Version update (4.4.41 -> 4.4.43) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#835 - generate pools with dasds - extended testsuite - 4.4.43 - merge gh#openSUSE/libstorage-ng#834 - added get_dasd_type_name() and get_dasd_format_name() - 4.4.42 ==== llvm12 ==== Subpackages: clang12 clang12-doc libLLVM12 libLTO12 libclang12 - Don't build clang-tools, libc++ and python3-clang anymore, because they come from llvm13 now. - Remove version requirement from clang-tools dependency. ==== llvm13 ==== Version update (12.0.1 -> 13.0.0) Subpackages: clang-tools libc++-devel libc++1 libc++abi-devel libc++abi1 - Update to version 13.0.0. * For details, see the release notes: - https://releases.llvm.org/13.0.0/docs/ReleaseNotes.html - https://releases.llvm.org/13.0.0/tools/clang/docs/ReleaseNotes.html - https://releases.llvm.org/13.0.0/tools/clang/tools/extra/docs/ReleaseNotes.… - https://releases.llvm.org/13.0.0/projects/libcxx/docs/ReleaseNotes.html - https://releases.llvm.org/13.0.0/tools/lld/docs/ReleaseNotes.html * New LLVM tools: - llvm-otool: Mach-O object file displaying tool. - llvm-sim: LLVM IR Similarity Visualizer. - llvm-tapi-diff: Diff tool for tbd files. - llvm-windres: Tool to manipulate Windows resources. * llvm-elfabi was removed. * New Clang tools: - clang-repl, an interactive interpreter for C/C++. - intercept-build, analyze-build: the former intercepts build commands to build a compilation database, the latter runs the static analyzer over all translation units. - scan-build-py: Python reimplementation of scan-build. - Rebase patches: * link-clang-shared.patch * llvm-do-not-install-static-libraries.patch * llvm-exegesis-link-dylib.patch - Drop patches that have landed upstream: * tablegen-test-link-static.patch - Run tests on more architectures, disable those that seem to hang. Don't run libcxx tests at all anymore because they take so long. - Relax constraints so that we can build on more machines. ==== lz4 ==== - version 1.9.3 fixes also CVE-2021-3520 [bsc#1185438] ==== mozilla-nss ==== Version update (3.69.1 -> 3.70) Subpackages: libfreebl3 libfreebl3-hmac libsoftokn3 libsoftokn3-hmac mozilla-nss-certs mozilla-nss-tools - update to NSS 3.70 * bmo#1726022 - Update test case to verify fix. * bmo#1714579 - Explicitly disable downgrade check in TlsConnectStreamTls13.EchOuterWith12Max * bmo#1714579 - Explicitly disable downgrade check in TlsConnectTest.DisableFalseStartOnFallback * bmo#1681975 - Avoid using a lookup table in nssb64d. * bmo#1724629 - Use HW accelerated SHA2 on AArch64 Big Endian. * bmo#1714579 - Change default value of enableHelloDowngradeCheck to true. * bmo#1726022 - Cache additional PBE entries. * bmo#1709750 - Read HPKE vectors from official JSON. - required for Firefox 93 ==== redis ==== Version update (6.2.5 -> 6.2.6) - redis 6.2.6 with security fixes for * Security fixes: - CVE-2021-41099: Integer to heap buffer overflow handling certain string commands and network payloads, when proto-max-bulk-len is manually configured to a non-default, very large value (boo#1191299) - CVE-2021-32762: Integer to heap buffer overflow issue in redis-cli and redis-sentinel parsing large multi-bulk replies on some older and less common platforms (boo#1191300) - CVE-2021-32687: Integer to heap buffer overflow with intsets, when set-max-intset-entries is manually configured to a non-default, very large value (boo#1191302) - CVE-2021-32675: Denial Of Service when processing RESP request payloads with a large number of elements on many connections (boo#1191303) - CVE-2021-32672: Random heap reading issue with Lua Debugger (boo#1191304) - CVE-2021-32628: Integer to heap buffer overflow handling ziplist-encoded data types, when configuring a large, non-default value for hash-max-ziplist-entries, hash-max-ziplist-value, zset-max-ziplist-entries or zset-max-ziplist-value (boo#1191305) - CVE-2021-32627: Integer to heap buffer overflow issue with streams, when configuring a non-default, large value for proto-max-bulk-len and client-query-buffer-limit (boo#1191305) - CVE-2021-32626: Specially crafted Lua scripts may result with Heap buffer overflow (boo#1191306) * Bug fixes that involve behavior changes: - GEO* STORE with empty source key deletes the destination key and return 0 Previously it would have returned an empty array like the non-STORE variant. - PUBSUB NUMPAT replies with number of patterns rather than number of subscriptions This actually changed in 6.2.0 but was overlooked and omitted from the release notes. * Bug fixes that are only applicable to previous releases of Redis 6.2: - Fix CLIENT PAUSE, used an old timeout from previous PAUSE - Fix CLIENT PAUSE in a replica would mess the replication offset - Add some missing error statistics in INFO errorstats * Other bug fixes: - Fix incorrect reply of COMMAND command key positions for MIGRATE command - Fix appendfsync to always guarantee fsync before reply, on MacOS and FreeBSD (kqueue) - Fix the wrong misdetection of sync_file_range system call, affecting performance * CLI tools: - When redis-cli received ASK response, it didn't handle it * Improvements: - Add latency monitor sample when key is deleted via lazy expire - Sanitize corrupt payload improvements - Delete empty keys when loading RDB file or handling a RESTORE command ==== samba ==== Version update (4.14.6+git.182.2205d5224e3 -> 4.15.0+git.185.378416e547c) Subpackages: libdcerpc-binding0 libdcerpc0 libndr-krb5pac0 libndr-nbt0 libndr-standard0 libnetapi0 libsamba-credentials1 libsamba-errors0 libsamba-hostconfig0 libsamba-passdb0 libsamba-policy0-python3 libsamba-util0 libsamdb0 libsmbclient0 libsmbconf0 libsmbldap2 libtevent-util0 libwbclient0 samba-client samba-doc samba-gpupdate samba-ldb-ldap samba-libs samba-libs-python3 samba-python3 samba-winbind - Adjust spec to use pam macros; (bsc#1191046). - Adjust spec for size * allow some Recommends instead Requires to be configured for cifs-utils, samba-libs-python3 & samba-gpupdate; (bsc#1182847). * remove fam, undocumented and unneeded. - Add missing build dependency on bison when building with the embedded Heimdal Kerberos - Update to 4.15.0 * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10 * VFS layer modernized. * Add the ability to set allow/deny lists for zone transfer clients in Bind DLZ plugin * Server multi-channel support no longer experimental * Improved command line user experience, unifying the options in different commands * Winbindd no longer scans trusted domains on startup and will use enterprise principals by default. * The net utility is now able to support the offline domain join feature * New options for 'samba-tool dns zoneoptions' for aging control and to mark old records as static or dynamic * DNS tombstones are now deleted as appropriate and use a consistent timestamp format * The 'samba-tool dns update' command validates and rejects now malformed IPv4 and IPv6 addresses * The 'samba-tool domain backup' command correctly takes out locks against concurrent modification during backup when using the LMDB backend * TruACL support has been removed * NIS support has been removed - Update to 4.14.7 * smbd panic on force-close share during offload write; (bso#14769); * smbd should support copy_file_range() for FSCTL_SRV_COPYCHUNK; (bso#12033); * Fix returned attributes on fake quota file handle and avoid hitting the VFS; (bso#14731); * vfs_shadow_copy2 fix inodes not correctly updating inode numbers; (bso#14756); * Fix build on Solaris; (bso#14774); * Make dos attributes available for unreadable files; (bso#14654); * Work around special SMB2 READ response behavior of NetApp Ontap 7.3.7; (bso#14607); * Start the SMB encryption as soon as possible; (bso#14793); ==== tar ==== Subpackages: tar-rmt - The following issues have already been fixed in this package but weren't previously mentioned in the changes file: * bsc#1181131 * bsc#1120610 ==== texinfo ==== Subpackages: info info-std - Move to /usr for UsrMerge (boo#1191099) ==== timezone ==== Version update (2021a -> 2021c) - timezone update 2021c: * Revert almost all of 2021b's changes to the 'backward' file * Fix a bug in 'zic -b fat' that caused old timestamps to be mishandled in 32-bit-only readers - timezone update 2021b: * Jordan now starts DST on February's last Thursday. * Samoa no longer observes DST. * Move some backward-compatibility links to 'backward'. * Rename Pacific/Enderbury to Pacific/Kanton. * Correct many pre-1993 transitions in Malawi, Portugal, etc. * zic now creates each output file or link atomically. * zic -L no longer omits the POSIX TZ string in its output. * zic fixes for truncation and leap second table expiration. * zic now follows POSIX for TZ strings using all-year DST. * Fix some localtime crashes and bugs in obscure cases. * zdump -v now outputs more-useful boundary cases. * tzfile.5 better matches a draft successor to RFC 8536. ==== timezone-java ==== Version update (2021a -> 2021c) - timezone update 2021c: * Revert almost all of 2021b's changes to the 'backward' file * Fix a bug in 'zic -b fat' that caused old timestamps to be mishandled in 32-bit-only readers - timezone update 2021b: * Jordan now starts DST on February's last Thursday. * Samoa no longer observes DST. * Move some backward-compatibility links to 'backward'. * Rename Pacific/Enderbury to Pacific/Kanton. * Correct many pre-1993 transitions in Malawi, Portugal, etc. * zic now creates each output file or link atomically. * zic -L no longer omits the POSIX TZ string in its output. * zic fixes for truncation and leap second table expiration. * zic now follows POSIX for TZ strings using all-year DST. * Fix some localtime crashes and bugs in obscure cases. * zdump -v now outputs more-useful boundary cases. * tzfile.5 better matches a draft successor to RFC 8536. ==== transactional-update ==== Version update (3.5.5 -> 3.5.6) Subpackages: dracut-transactional-update libtukit0 transactional-update-zypp-config tukit - Version 3.5.6 - tukit: Add S/390 bootloader support [bsc#1189807] - t-u: support purge-kernels with t-u patch [bsc#1190788] ==== trousers ==== - move libraries to /usr/lib (bsc#1191102) ==== u-boot-rpiarm64 ==== Version update (2021.07 -> 2021.10) Subpackages: u-boot-rpiarm64-doc - Update to 2021.10 Fix Grub loading slowdown when connecting USB keyboard (bsc#1171222). Enable BTRFS for Risc-V. Patch queue updated from https://github.com/openSUSE/u-boot.git tumbleweed-2021.10 * Patches added: 0013-riscv-enable-CMD_BTRFS.patch 0014-Disable-timer-check-in-file-loading.patch - Update to 2021.10-rc5 - Patch queue updated from https://github.com/openSUSE/u-boot.git tumbleweed-2021.10 * Patches dropped (upstreamed): 0013-configs-rpi-Enable-SMBIOS-sysinfo-d.patch - Add hack to allow enabling CONFIG_CMD_BTRFS on riscv64 - Add sifiveunmatched flavor - Update to 2021.10-rc4 - Patch queue updated from https://github.com/openSUSE/u-boot.git tumbleweed-2021.10 * Patches dropped: 0014-btrfs-Use-default-subvolume-as-file.patch

1 0

New Arm Tumbleweed snapshot 20211006 released!
by Guillaume Gardet 10 Oct '21

10 Oct '21

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bolt hxtools (20210803 -> 20210928) k4dirstat (3.2.2 -> 3.3.0) kernel-64kb (5.14.6 -> 5.14.9) kernel-source (5.14.6 -> 5.14.9) libjpeg-turbo mhvtl (1.63_release+759.35ddb48e5262_k5.14.6_2 -> 1.63_release+759.35ddb48e5262_k5.14.9_1) opensc (0.21.0 -> 0.22.0) python-lazr.config (2.2.2 -> 2.2.3) rng-tools rubygem-sassc-2.2 squid (4.16 -> 5.2) step (21.08.1 -> 21.08.2) suse-module-tools (16.0.10+7 -> 16.0.11) sweeper (21.08.1 -> 21.08.2) umbrello (21.08.1 -> 21.08.2) yakuake (21.08.1 -> 21.08.2) === Details === ==== bolt ==== - Need in SLE * Support for working with adapters without ROMs is needed (jsc#SLE-19359) ==== hxtools ==== Version update (20210803 -> 20210928) Subpackages: fd0ssh ofl - Update to release 20210928 * vfontas: add recognition for BDF glyphs as produced by fontforge from PCF * kbd: map beta to eszett on cp437x * vfontas: recognize "idem" lines in kbd unimaps * vfontas: add -setbold, -setprop, -lgeu, -lgeuf commands ==== k4dirstat ==== Version update (3.2.2 -> 3.3.0) Subpackages: k4dirstat-lang - Update to 3.3.0 * Show free space in the status bar * Refresh tree after deleting a file * Fix a crash when clicking on the name column * Quote %-escapes strings in the .desktop Exec key * Fix all compilation warnings with Qt 5.15 and KDE 5.85 ==== kernel-64kb ==== Version update (5.14.6 -> 5.14.9) - ALSA: usb-audio: Restrict rates for the shared clocks (bsc#1190418). - commit d0ace7f - Update patches.kernel.org/5.14.9-147-Revert-drm-vc4-hdmi-runtime-PM-changes.patch (bsc#1012628 bsc#1190469). - Delete patches.suse/drm-vc4-hdmi-Fix-HPD-GPIO-detection.patch. The former superseded the latter. - commit 2bc4ba2 - Linux 5.14.9 (bsc#1012628). - mm, hwpoison: add is_free_buddy_page() in HWPoisonHandlable() (bsc#1012628). - ocfs2: drop acl cache for directories too (bsc#1012628). - mm/debug: sync up MR_CONTIG_RANGE and MR_LONGTERM_PIN (bsc#1012628). - mm: fix uninitialized use in overcommit_policy_handler (bsc#1012628). - usb: gadget: r8a66597: fix a loop in set_feature() (bsc#1012628). - usb: gadget: u_audio: EP-OUT bInterval in fback frequency (bsc#1012628). - usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave (bsc#1012628). - usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA (bsc#1012628). - usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned() (bsc#1012628). - cifs: Not to defer close on file when lock is set (bsc#1012628). - cifs: Fix soft lockup during fsstress (bsc#1012628). - cifs: fix incorrect check for null pointer in header_assemble (bsc#1012628). - xen/x86: fix PV trap handling on secondary processors (bsc#1012628). - usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c (bsc#1012628). - USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter (bsc#1012628). - USB: cdc-acm: fix minor-number release (bsc#1012628). - Revert "USB: bcma: Add a check for devm_gpiod_get" (bsc#1012628). - binder: make sure fd closes complete (bsc#1012628). - binder: fix freeze race (bsc#1012628). - staging: greybus: uart: fix tty use after free (bsc#1012628). - usb: isp1760: do not sleep in field register poll (bsc#1012628). - Re-enable UAS for LaCie Rugged USB3-FW with fk quirk (bsc#1012628). - usb: dwc3: core: balance phy init and exit (bsc#1012628). - usb: cdns3: fix race condition before setting doorbell (bsc#1012628). - usb: core: hcd: Add support for deferring roothub registration (bsc#1012628). - USB: serial: mos7840: remove duplicated 0xac24 device ID (bsc#1012628). - USB: serial: option: add Telit LN920 compositions (bsc#1012628). - USB: serial: option: remove duplicate USB device ID (bsc#1012628). - USB: serial: option: add device id for Foxconn T99W265 (bsc#1012628). - misc: bcm-vk: fix tty registration race (bsc#1012628). - misc: genwqe: Fixes DMA mask setting (bsc#1012628). - mcb: fix error handling in mcb_alloc_bus() (bsc#1012628). - KVM: rseq: Update rseq when processing NOTIFY_RESUME on xfer to KVM guest (bsc#1012628). - erofs: fix up erofs_lookup tracepoint (bsc#1012628). - nexthop: Fix division by zero while replacing a resilient group (bsc#1012628). - btrfs: prevent __btrfs_dump_space_info() to underflow its free space (bsc#1012628). - xhci: Set HCD flag to defer primary roothub registration (bsc#1012628). - serial: 8250: 8250_omap: Fix RX_LVL register offset (bsc#1012628). - serial: mvebu-uart: fix driver's tx_empty callback (bsc#1012628). - scsi: sd_zbc: Ensure buffer size is aligned to SECTOR_SIZE (bsc#1012628). - drm/amd/pm: Update intermediate power state for SI (bsc#1012628). - net: hso: fix muxed tty registration (bsc#1012628). - platform/x86: amd-pmc: Increase the response register timeout (bsc#1012628). - arm64: Restore forced disabling of KPTI on ThunderX (bsc#1012628). - arm64: Mitigate MTE issues with str{n}cmp() (bsc#1012628). - comedi: Fix memory leak in compat_insnlist() (bsc#1012628). - regulator: qcom-rpmh-regulator: fix pm8009-1 ldo7 resource name (bsc#1012628). - afs: Fix page leak (bsc#1012628). - afs: Fix incorrect triggering of sillyrename on 3rd-party invalidation (bsc#1012628). - afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server (bsc#1012628). - afs: Fix updating of i_blocks on file/dir extension (bsc#1012628). - platform/x86/intel: punit_ipc: Drop wrong use of ACPI_PTR() (bsc#1012628). - regulator: max14577: Revert "regulator: max14577: Add proper module aliases strings" (bsc#1012628). - NLM: Fix svcxdr_encode_owner() (bsc#1012628). - virtio-net: fix pages leaking when building skb in big mode (bsc#1012628). - enetc: Fix illegal access when reading affinity_hint (bsc#1012628). - enetc: Fix uninitialized struct dim_sample field usage (bsc#1012628). - net: dsa: tear down devlink port regions when tearing down the devlink port on error (bsc#1012628). - net: bgmac-bcma: handle deferred probe error due to mac-address (bsc#1012628). - napi: fix race inside napi_enable (bsc#1012628). - bnxt_en: Fix TX timeout when TX ring size is set to the smallest (bsc#1012628). - net: hns3: fix change RSS 'hfunc' ineffective issue (bsc#1012628). - net: hns3: fix inconsistent vf id print (bsc#1012628). - net: hns3: fix misuse vf id and vport id in some logs (bsc#1012628). - net: hns3: check queue id range before using (bsc#1012628). - net: hns3: check vlan id before using it (bsc#1012628). - net: hns3: fix a return value error in hclge_get_reset_status() (bsc#1012628). - net/smc: add missing error check in smc_clc_prfx_set() (bsc#1012628). - net/smc: fix 'workqueue leaked lock' in smc_conn_abort_work (bsc#1012628). - net: dsa: fix dsa_tree_setup error path (bsc#1012628). - net: dsa: don't allocate the slave_mii_bus using devres (bsc#1012628). - net: dsa: realtek: register the MDIO bus under devres (bsc#1012628). - platform/x86: dell: fix DELL_WMI_PRIVACY dependencies & build error (bsc#1012628). - kselftest/arm64: signal: Add SVE to the set of features we can check for (bsc#1012628). - kselftest/arm64: signal: Skip tests if required features are missing (bsc#1012628). - spi: Revert modalias changes (bsc#1012628). - s390/qeth: fix NULL deref in qeth_clear_working_pool_list() (bsc#1012628). - gpiolib: acpi: Make set-debounce-timeout failures non fatal (bsc#1012628). - gpio: uniphier: Fix void functions to remove return value (bsc#1012628). - qed: rdma - don't wait for resources under hw error recovery flow (bsc#1012628). - mptcp: ensure tx skbs always have the MPTCP ext (bsc#1012628). - nexthop: Fix memory leaks in nexthop notification chain listeners (bsc#1012628). - nfc: st-nci: Add SPI ID matching DT compatible (bsc#1012628). - net: ethernet: mtk_eth_soc: avoid creating duplicate offload entries (bsc#1012628). - net: mscc: ocelot: fix forwarding from BLOCKING ports remaining enabled (bsc#1012628). - net/mlx4_en: Don't allow aRFS for encapsulated packets (bsc#1012628). - atlantic: Fix issue in the pm resume flow (bsc#1012628). - drm/amdkfd: map SVM range with correct access permission (bsc#1012628). - drm/amdkfd: fix dma mapping leaking warning (bsc#1012628). - scsi: iscsi: Adjust iface sysfs attr detection (bsc#1012628). - scsi: target: Fix the pgr/alua_support_store functions (bsc#1012628). - tty: synclink_gt: rename a conflicting function name (bsc#1012628). - fpga: machxo2-spi: Return an error on failure (bsc#1012628). - fpga: machxo2-spi: Fix missing error code in machxo2_write_complete() (bsc#1012628). - x86/fault: Fix wrong signal when vsyscall fails with pkey (bsc#1012628). - nvme-tcp: fix incorrect h2cdata pdu offset accounting (bsc#1012628). - nvme: keep ctrl->namespaces ordered (bsc#1012628). - thermal/core: Potential buffer overflow in thermal_build_list_of_policies() (bsc#1012628). - cifs: fix a sign extension bug (bsc#1012628). - scsi: sd_zbc: Support disks with more than 2**32 logical blocks (bsc#1012628). - scsi: ufs: Revert "Utilize Transfer Request List Completion Notification Register" (bsc#1012628). - scsi: ufs: Retry aborted SCSI commands instead of completing these successfully (bsc#1012628). - scsi: ufs: core: Unbreak the reset handler (bsc#1012628). - scsi: qla2xxx: Restore initiator in dual mode (bsc#1012628). - scsi: lpfc: Use correct scnprintf() limit (bsc#1012628). - irqchip/goldfish-pic: Select GENERIC_IRQ_CHIP to fix build (bsc#1012628). - irqchip/gic-v3-its: Fix potential VPE leak on error (bsc#1012628). - md: fix a lock order reversal in md_alloc (bsc#1012628). - x86/asm: Fix SETZ size enqcmds() build failure (bsc#1012628). - io_uring: fix race between poll completion and cancel_hash insertion (bsc#1012628). - io_uring: fix missing set of EPOLLONESHOT for CQ ring overflow (bsc#1012628). - io_uring: put provided buffer meta data under memcg accounting (bsc#1012628). - io_uring: don't punt files update to io-wq unconditionally (bsc#1012628). - blktrace: Fix uaf in blk_trace access after removing by sysfs (bsc#1012628). - net: phylink: Update SFP selected interface on advertising changes (bsc#1012628). - net: macb: fix use after free on rmmod (bsc#1012628). - net: stmmac: allow CSR clock of 300MHz (bsc#1012628). - blk-mq: avoid to iterate over stale request (bsc#1012628). - m68k: Double cast io functions to unsigned long (bsc#1012628). - ipv6: delay fib6_sernum increase in fib6_add (bsc#1012628). - dma-debug: prevent an error message from causing runtime problems (bsc#1012628). - cpufreq: intel_pstate: Override parameters if HWP forced by BIOS (bsc#1012628). - bpf: Add oversize check before call kvcalloc() (bsc#1012628). - xen/balloon: use a kernel thread instead a workqueue (bsc#1012628). - nvme-multipath: fix ANA state updates when a namespace is not present (bsc#1012628). - nvme-rdma: destroy cm id before destroy qp to avoid use after free (bsc#1012628). - sparc32: page align size in arch_dma_alloc (bsc#1012628). - amd/display: downgrade validation failure log level (bsc#1012628). - drm/ttm: fix type mismatch error on sparc64 (bsc#1012628). - block: check if a profile is actually registered in blk_integrity_unregister (bsc#1012628). - block: flush the integrity workqueue in blk_integrity_unregister (bsc#1012628). - blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd (bsc#1012628). - compiler.h: Introduce absolute_pointer macro (bsc#1012628). - net: i825xx: Use absolute_pointer for memcpy from fixed memory location (bsc#1012628). - sparc: avoid stringop-overread errors (bsc#1012628). - qnx4: avoid stringop-overread errors (bsc#1012628). - parisc: Use absolute_pointer() to define PAGE0 (bsc#1012628). - drm/amdkfd: make needs_pcie_atomics FW-version dependent (bsc#1012628). - drm/amd/display: Fix unstable HPCP compliance on Chrome Barcelo (bsc#1012628). - drm/amd/display: Link training retry fix for abort case (bsc#1012628). - amd/display: enable panel orientation quirks (bsc#1012628). - arm64: Mark __stack_chk_guard as __ro_after_init (bsc#1012628). - alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile (bsc#1012628). - net: 6pack: Fix tx timeout and slot time (bsc#1012628). - spi: Fix tegra20 build with CONFIG_PM=n (bsc#1012628). - libperf evsel: Make use of FD robust (bsc#1012628). - Revert drm/vc4 hdmi runtime PM changes (bsc#1012628). - EDAC/synopsys: Fix wrong value type assignment for edac_mode (bsc#1012628). - EDAC/dmc520: Assign the proper type to dimm->edac_mode (bsc#1012628). - x86/setup: Call early_reserve_memory() earlier (bsc#1012628). - thermal/drivers/int340x: Do not set a wrong tcc offset on resume (bsc#1012628). - irqchip/armada-370-xp: Fix ack/eoi breakage (bsc#1012628). - arm64: add MTE supported check to thread switching and syscall entry/exit (bsc#1012628). - USB: serial: cp210x: fix dropped characters with CP2102 (bsc#1012628). - software node: balance refcount for managed software nodes (bsc#1012628). - xen/balloon: fix balloon kthread freezing (bsc#1012628). - qnx4: work around gcc false positive warning bug (bsc#1012628). - usb: gadget: f_uac2: Add missing companion descriptor for feedback EP (bsc#1012628). - usb: gadget: f_uac2: Populate SS descriptors' wBytesPerInterval (bsc#1012628). - Refresh patches.suse/drm-vc4-hdmi-Fix-HPD-GPIO-detection.patch. - commit 85f5318 - arm64: Update config files. (bsc#1185927) Set PINCTRL_ZYNQMP as build-in. - commit 4ae263c - blacklist.conf: add idxd commit - commit 06dbf6b - nvmet: fix a width vs precision bug in nvmet_subsys_attr_serial_show() (git-fixes). - commit fef4ef0 - Linux 5.14.8 (bsc#1012628). - drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV (bsc#1012628). - selinux,smack: fix subjective/objective credential use mixups (bsc#1012628). - io_uring: fix off-by-one in BUILD_BUG_ON check of __REQ_F_LAST_BIT (bsc#1012628). - cifs: properly invalidate cached root handle when closing it (bsc#1012628). - sched/idle: Make the idle timer expire in hard interrupt context (bsc#1012628). - rtc: rx8010: select REGMAP_I2C (bsc#1012628). - blk-mq: allow 4x BLK_MAX_REQUEST_COUNT at blk_plug for multiple_queues (bsc#1012628). - blk-throttle: fix UAF by deleteing timer in blk_throtl_exit() (bsc#1012628). - block: genhd: don't call blkdev_show() with major_names_lock held (bsc#1012628). - nvmet: fixup buffer overrun in nvmet_subsys_attr_serial() (bsc#1012628). - pwm: stm32-lp: Don't modify HW state in .remove() callback (bsc#1012628). - pwm: rockchip: Don't modify HW state in .remove() callback (bsc#1012628). - pwm: img: Don't modify HW state in .remove() callback (bsc#1012628). - habanalabs: cannot sleep while holding spinlock (bsc#1012628). - habanalabs: add "in device creation" status (bsc#1012628). - habanalabs: fix mmu node address resolution in debugfs (bsc#1012628). - habanalabs: add validity check for event ID received from F/W (bsc#1012628). - drm/amdgpu: fix fdinfo race with process exit (bsc#1012628). - drm/amd/display: Fix memory leak reported by coverity (bsc#1012628). - drm/amdgpu: Fixes to returning VBIOS RAS EEPROM address (bsc#1012628). - habanalabs: fix nullifying of destroyed mmu pgt pool (bsc#1012628). - thermal/drivers/rcar_gen3_thermal: Store TSC id as unsigned int (bsc#1012628). - nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group (bsc#1012628). - nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group (bsc#1012628). - nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group (bsc#1012628). - nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group (bsc#1012628). - nilfs2: fix NULL pointer in nilfs_##name##_attr_release (bsc#1012628). - nilfs2: fix memory leak in nilfs_sysfs_create_device_group (bsc#1012628). - btrfs: fix lockdep warning while mounting sprout fs (bsc#1012628). - btrfs: delay blkdev_put until after the device remove (bsc#1012628). - btrfs: update the bdev time directly when closing (bsc#1012628). - s390/unwind: use current_frame_address() to unwind current task (bsc#1012628). - ceph: lockdep annotations for try_nonblocking_invalidate (bsc#1012628). - ceph: remove the capsnaps when removing caps (bsc#1012628). - ceph: request Fw caps before updating the mtime in ceph_write_iter (bsc#1012628). - ceph: fix memory leak on decode error in ceph_handle_caps (bsc#1012628). - ACPI: PM: s2idle: Run both AMD and Microsoft methods if both are supported (bsc#1012628). - ASoC: audio-graph: respawn Platform Support (bsc#1012628). - s390: add kmemleak annotation in stack_alloc() (bsc#1012628). - dmaengine: xilinx_dma: Set DMA mask for coherent APIs (bsc#1012628). - dmaengine: ioat: depends on !UML (bsc#1012628). - cxl/pci: Introduce cdevm_file_operations (bsc#1012628). - cxl: Move cxl_core to new directory (bsc#1012628). - dmaengine: sprd: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - dmaengine: idxd: depends on !UML (bsc#1012628). - riscv: dts: microchip: mpfs-icicle: Fix serial console (bsc#1012628). - of: property: Disable fw_devlink DT support for X86 (bsc#1012628). - drm/ttm: Fix a deadlock if the target BO is not idle during swap (bsc#1012628). - arm64: mm: limit linear region to 51 bits for KVM in nVHE mode (bsc#1012628). - iommu/vt-d: Fix a deadlock in intel_svm_drain_prq() (bsc#1012628). - iommu/vt-d: Fix PASID leak in intel_svm_unbind_mm() (bsc#1012628). - iommu/amd: Relocate GAMSup check to early_enable_iommus (bsc#1012628). - parisc: Move pci_dev_is_behind_card_dino to where it is used (bsc#1012628). - dma-buf: DMABUF_DEBUG should depend on DMA_SHARED_BUFFER (bsc#1012628). - Update config files. - dma-buf: DMABUF_MOVE_NOTIFY should depend on DMA_SHARED_BUFFER (bsc#1012628). - Update config files. - drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION() (bsc#1012628). - drm/amdgpu: Disable PCIE_DPM on Intel RKL Platform (bsc#1012628). - thermal/core: Fix thermal_cooling_device_register() prototype (bsc#1012628). - tracing/boot: Fix to loop on only subkeys (bsc#1012628). - tools/bootconfig: Fix tracing_on option checking in ftrace2bconf.sh (bsc#1012628). - Kconfig.debug: drop selecting non-existing HARDLOCKUP_DETECTOR_ARCH (bsc#1012628). - init: move usermodehelper_enable() to populate_rootfs() (bsc#1012628). - math: RATIONAL_KUNIT_TEST should depend on RATIONAL instead of selecting it (bsc#1012628). - SUNRPC: don't pause on incomplete allocation (bsc#1012628). - s390/entry: make oklabel within CHKSTG macro local (bsc#1012628). - platform/chrome: cros_ec_trace: Fix format warnings (bsc#1012628). - platform/chrome: sensorhub: Add trace events for sample (bsc#1012628). - dmaengine: idxd: clear block on fault flag when clear wq (bsc#1012628). - dmaengine: idxd: fix abort status check (bsc#1012628). - dmaengine: idxd: fix wq slot allocation index check (bsc#1012628). - dmaengine: idxd: have command status always set (bsc#1012628). - dmanegine: idxd: cleanup all device related bits after disabling device (bsc#1012628). - pwm: mxs: Don't modify HW state in .probe() after the PWM chip was registered (bsc#1012628). - pwm: lpc32xx: Don't modify HW state in .probe() after the PWM chip was registered (bsc#1012628). - ceph: cancel delayed work instead of flushing on mdsc teardown (bsc#1012628). - thermal/drivers/qcom/spmi-adc-tm5: Don't abort probing if a sensor is not used (bsc#1012628). - PM: sleep: core: Avoid setting power.must_resume to false (bsc#1012628). - profiling: fix shift-out-of-bounds bugs (bsc#1012628). - nilfs2: use refcount_dec_and_lock() to fix potential UAF (bsc#1012628). - prctl: allow to setup brk for et_dyn executables (bsc#1012628). - pwm: ab8500: Fix register offset calculation to not depend on probe order (bsc#1012628). - 9p/trans_virtio: Remove sysfs file on probe failure (bsc#1012628). - thermal/drivers/exynos: Fix an error code in exynos_tmu_probe() (bsc#1012628). - n64cart: fix return value check in n64cart_probe() (bsc#1012628). - staging: rtl8723bs: fix wpa_set_auth_algs() function (bsc#1012628). - perf tools: Allow build-id with trailing zeros (bsc#1012628). - perf symbol: Look for ImageBase in PE file to compute .text offset (bsc#1012628). - perf test: Fix bpf test sample mismatch reporting (bsc#1012628). - dmaengine: acpi: Avoid comparison GSI with Linux vIRQ (bsc#1012628). - RDMA/mlx5: Fix xlt_chunk_align calculation (bsc#1012628). - RDMA/hns: Enable stash feature of HIP09 (bsc#1012628). - um: virtio_uml: fix memory leak on init failures (bsc#1012628). - coredump: fix memleak in dump_vma_snapshot() (bsc#1012628). - um: fix stub location calculation (bsc#1012628). - staging: rtl8192u: Fix bitwise vs logical operator in TranslateRxSignalStuff819xUsb() (bsc#1012628). - console: consume APC, DM, DCS (bsc#1012628). - PCI: aardvark: Fix reporting CRS value (bsc#1012628). - PCI: pci-bridge-emul: Add PCIe Root Capabilities Register (bsc#1012628). - commit 94242c6 - kernel-binary.spec: suse-kernel-rpm-scriptlets required for uninstall as well. Fixes: e98096d5cf85 ("rpm: Abolish scritplet templating (bsc#1189841).") - commit e082fbf - Linux 5.14.7 (bsc#1012628). - net: stmmac: fix MAC not working when system resume back with WoL active (bsc#1012628). - io_uring: ensure symmetry in handling iter types in loop_rw_iter() (bsc#1012628). - swiotlb-xen: avoid double free (bsc#1012628). - swiotlb-xen: fix late init retry (bsc#1012628). - xen: reset legacy rtc flag for PV domU (bsc#1012628). - xen: fix usage of pmd_populate in mremap for pv guests (bsc#1012628). - bnx2x: Fix enabling network interfaces without VFs (bsc#1012628). - arm64/sve: Use correct size when reinitialising SVE state (bsc#1012628). - PM: base: power: don't try to use non-existing RTC for storing data (bsc#1012628). - PCI: Add AMD GPU multi-function power dependencies (bsc#1012628). - drm/amd/display: Get backlight from PWM if DMCU is not initialized (bsc#1012628). - drm/amd/display: dsc mst 2 4K displays go dark with 2 lane HBR3 (bsc#1012628). - drm/amd/display: Fix white screen page fault for gpuvm (bsc#1012628). - drm/amd/pm: fix runpm hang when amdgpu loaded prior to sound driver (bsc#1012628). - drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10 (bsc#1012628). - drm/amdgpu: use IS_ERR for debugfs APIs (bsc#1012628). - drm/amdgpu: fix use after free during BO move (bsc#1012628). - drm/amdgpu: add amdgpu_amdkfd_resume_iommu (bsc#1012628). - drm/amdgpu: move iommu_resume before ip init/resume (bsc#1012628). - drm/amd/pm: fix the issue of uploading powerplay table (bsc#1012628). - drm/amdkfd: separate kfd_iommu_resume from kfd_resume (bsc#1012628). - drm/radeon: pass drm dev radeon_agp_head_init directly (bsc#1012628). - io_uring: allow retry for O_NONBLOCK if async is supported (bsc#1012628). - drm/etnaviv: return context from etnaviv_iommu_context_get (bsc#1012628). - drm/etnaviv: put submit prev MMU context when it exists (bsc#1012628). - drm/etnaviv: stop abusing mmu_context as FE running marker (bsc#1012628). - drm/etnaviv: keep MMU context across runtime suspend/resume (bsc#1012628). - drm/etnaviv: exec and MMU state is lost when resetting the GPU (bsc#1012628). - drm/etnaviv: fix MMU context leak on GPU reset (bsc#1012628). - drm/etnaviv: reference MMU context when setting up hardware state (bsc#1012628). - drm/etnaviv: add missing MMU context put when reaping MMU mapping (bsc#1012628). - s390/sclp: fix Secure-IPL facility detection (bsc#1012628). - net: qrtr: revert check in qrtr_endpoint_post() (bsc#1012628). - x86/pat: Pass valid address to sanitize_phys() (bsc#1012628). - x86/mm: Fix kern_addr_valid() to cope with existing but not present entries (bsc#1012628). - x86/mce: Avoid infinite loop for copy from user recovery (bsc#1012628). - net: remove the unnecessary check in cipso_v4_doi_free (bsc#1012628). - net/{mlx5|nfp|bnxt}: Remove unnecessary RTNL lock assert (bsc#1012628). - net-caif: avoid user-triggerable WARN_ON(1) (bsc#1012628). - ptp: dp83640: don't define PAGE0 (bsc#1012628). - dccp: don't duplicate ccid when cloning dccp sock (bsc#1012628). - net/l2tp: Fix reference count leak in l2tp_udp_recv_core (bsc#1012628). - r6040: Restore MDIO clock frequency after MAC reset (bsc#1012628). - tipc: increase timeout in tipc_sk_enqueue() (bsc#1012628). - drm/rockchip: cdn-dp-core: Make cdn_dp_core_resume __maybe_unused (bsc#1012628). - rtc: cmos: Disable irq around direct invocation of cmos_interrupt() (bsc#1012628). - drm/i915/dp: return proper DPRX link training result (bsc#1012628). - perf machine: Initialize srcline string member in add_location struct (bsc#1012628). - net/mlx5: FWTrace, cancel work on alloc pd error flow (bsc#1012628). - net/mlx5: Fix potential sleeping in atomic context (bsc#1012628). - net: stmmac: fix system hang caused by eee_ctrl_timer during suspend/resume (bsc#1012628). - igc: fix tunnel offloading (bsc#1012628). - nvme-tcp: fix io_work priority inversion (bsc#1012628). - powerpc/64s: system call scv tabort fix for corrupt irq soft-mask state (bsc#1012628). - events: Reuse value read using READ_ONCE instead of re-reading it (bsc#1012628). - net: ipa: initialize all filter table slots (bsc#1012628). - gen_compile_commands: fix missing 'sys' package (bsc#1012628). - vhost_net: fix OoB on sendmsg() failure (bsc#1012628). - net/af_unix: fix a data-race in unix_dgram_poll (bsc#1012628). - net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup (bsc#1012628). - x86/uaccess: Fix 32-bit __get_user_asm_u64() when CC_HAS_ASM_GOTO_OUTPUT=y (bsc#1012628). - tcp: fix tp->undo_retrans accounting in tcp_sacktag_one() (bsc#1012628). - selftest: net: fix typo in altname test (bsc#1012628). - qed: Handle management FW error (bsc#1012628). - udp_tunnel: Fix udp_tunnel_nic work-queue type (bsc#1012628). - dt-bindings: arm: Fix Toradex compatible typo (bsc#1012628). - ibmvnic: check failover_pending in login response (bsc#1012628). - KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode changing registers (bsc#1012628). - powerpc/64s: system call rfscv workaround for TM bugs (bsc#1012628). - powerpc/mce: Fix access error in mce handler (bsc#1012628). - s390/pci_mmio: fully validate the VMA before calling follow_pte() (bsc#1012628). - bnxt_en: make bnxt_free_skbs() safe to call after bnxt_free_mem() (bsc#1012628). - net: hns3: pad the short tunnel frame before sending to hardware (bsc#1012628). - net: hns3: change affinity_mask to numa node range (bsc#1012628). - net: hns3: disable mac in flr process (bsc#1012628). - net: hns3: fix the timing issue of VF clearing interrupt sources (bsc#1012628). - net: stmmac: platform: fix build warning when with !CONFIG_PM_SLEEP (bsc#1012628). - Drivers: hv: vmbus: Fix kernel crash upon unbinding a device from uio_hv_generic driver (bsc#1012628). - net/mlx5e: Fix mutual exclusion between CQE compression and HW TS (bsc#1012628). - ice: Correctly deal with PFs that do not support RDMA (bsc#1012628). - net: dsa: qca8k: fix kernel panic with legacy mdio mapping (bsc#1012628). - net: dsa: lantiq_gswip: Add 200ms assert delay (bsc#1012628). - net: hns3: fix the exception when query imp info (bsc#1012628). - nvme: avoid race in shutdown namespace removal (bsc#1012628). - blkcg: fix memory leak in blk_iolatency_init (bsc#1012628). - net: dsa: flush switchdev workqueue before tearing down CPU/DSA ports (bsc#1012628). - mlxbf_gige: clear valid_polarity upon open (bsc#1012628). - dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation (bsc#1012628). - remoteproc: qcom: wcnss: Fix race with iris probe (bsc#1012628). - mfd: db8500-prcmu: Adjust map to reality (bsc#1012628). - PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms (bsc#1012628). - fuse: fix use after free in fuse_read_interrupt() (bsc#1012628). - PCI: tegra194: Fix handling BME_CHGED event (bsc#1012628). - PCI: tegra194: Fix MSI-X programming (bsc#1012628). - PCI: tegra: Fix OF node reference leak (bsc#1012628). - mfd: Don't use irq_create_mapping() to resolve a mapping (bsc#1012628). - PCI: rcar: Fix runtime PM imbalance in rcar_pcie_ep_probe() (bsc#1012628). - riscv: fix the global name pfn_base confliction error (bsc#1012628). - KVM: arm64: Make hyp_panic() more robust when protected mode is enabled (bsc#1012628). - tracing/probes: Reject events which have the same name of existing one (bsc#1012628). - PCI: cadence: Use bitfield for *quirk_retrain_flag* instead of bool (bsc#1012628). - PCI: cadence: Add quirk flag to set minimum delay in LTSSM Detect.Quiet state (bsc#1012628). - PCI: j721e: Add PCIe support for J7200 (bsc#1012628). - PCI: j721e: Add PCIe support for AM64 (bsc#1012628). - PCI: Add ACS quirks for Cavium multi-function devices (bsc#1012628). - watchdog: Start watchdog in watchdog_set_last_hw_keepalive only if appropriate (bsc#1012628). - octeontx2-af: Add additional register check to rvu_poll_reg() (bsc#1012628). - Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6 (bsc#1012628). - flow: fix object-size-mismatch warning in flowi{4,6}_to_flowi_common() (bsc#1012628). - net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920 (bsc#1012628). - block, bfq: honor already-setup queue merges (bsc#1012628). - PCI: ibmphp: Fix double unmap of io_mem (bsc#1012628). - loop: reduce the loop_ctl_mutex scope (bsc#1012628). - ethtool: Fix an error code in cxgb2.c (bsc#1012628). - NTB: Fix an error code in ntb_msit_probe() (bsc#1012628). - NTB: perf: Fix an error code in perf_setup_inbuf() (bsc#1012628). - stmmac: dwmac-loongson:Fix missing return value (bsc#1012628). - net: phylink: add suspend/resume support (bsc#1012628). - mfd: axp20x: Update AXP288 volatile ranges (bsc#1012628). - backlight: ktd253: Stabilize backlight (bsc#1012628). - PCI: controller: PCI_IXP4XX should depend on ARCH_IXP4XX (bsc#1012628). - PCI: of: Don't fail devm_pci_alloc_host_bridge() on missing 'ranges' (bsc#1012628). - PCI: iproc: Fix BCMA probe resource handling (bsc#1012628). - netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex (bsc#1012628). - KVM: arm64: Restrict IPA size to maximum 48 bits on 4K and 16K page size (bsc#1012628). - PCI: Fix pci_dev_str_match_path() alloc while atomic bug (bsc#1012628). - mfd: tqmx86: Clear GPIO IRQ resource when no IRQ is set (bsc#1012628). - tracing/boot: Fix a hist trigger dependency for boot time tracing (bsc#1012628). - mtd: mtdconcat: Judge callback existence based on the master (bsc#1012628). - mtd: mtdconcat: Check _read, _write callbacks existence before assignment (bsc#1012628). - KVM: arm64: Fix read-side race on updates to vcpu reset state (bsc#1012628). - KVM: arm64: Handle PSCI resets before userspace touches vCPU state (bsc#1012628). - PCI/PTM: Remove error message at boot (bsc#1012628). - PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n (bsc#1012628). - mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()' (bsc#1012628). - ARC: export clear_user_page() for modules (bsc#1012628). - perf config: Fix caching and memory leak in perf_home_perfconfig() (bsc#1012628). - perf unwind: Do not overwrite FEATURE_CHECK_LDFLAGS-libunwind-{x86,aarch64} (bsc#1012628). - perf bench inject-buildid: Handle writen() errors (bsc#1012628). - gpio: mpc8xxx: Fix a resources leak in the error handling path of 'mpc8xxx_probe()' (bsc#1012628). - gpio: mpc8xxx: Fix a potential double iounmap call in 'mpc8xxx_probe()' (bsc#1012628). - gpio: mpc8xxx: Use 'devm_gpiochip_add_data()' to simplify the code and avoid a leak (bsc#1012628). - io_uring: retry in case of short read on block device (bsc#1012628). - net: dsa: tag_rtl4_a: Fix egress tags (bsc#1012628). - tools build: Fix feature detect clean for out of source builds (bsc#1012628). - mptcp: fix possible divide by zero (bsc#1012628). - selftests: mptcp: clean tmp files in simult_flows (bsc#1012628). - net: hso: add failure handler for add_net_device (bsc#1012628). - net: dsa: b53: Fix calculating number of switch ports (bsc#1012628). - net: dsa: b53: Set correct number of ports in the DSA struct (bsc#1012628). - mptcp: Only send extra TCP acks in eligible socket states (bsc#1012628). - netfilter: socket: icmp6: fix use-after-scope (bsc#1012628). - fq_codel: reject silly quantum parameters (bsc#1012628). - qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom (bsc#1012628). - iwlwifi: move get pnvm file name to a separate function (bsc#1012628). - iwlwifi: pnvm: Fix a memory leak in 'iwl_pnvm_get_from_fs()' (bsc#1012628). - ip_gre: validate csum_start only on pull (bsc#1012628). - net: dsa: b53: Fix IMP port setup on BCM5301x (bsc#1012628). - bnxt_en: fix stored FW_PSID version masks (bsc#1012628). - bnxt_en: Fix asic.rev in devlink dev info command (bsc#1012628). - bnxt_en: Fix possible unintended driver initiated error recovery (bsc#1012628). - ip6_gre: Revert "ip6_gre: add validation for csum_start" (bsc#1012628). - mfd: lpc_sch: Rename GPIOBASE to prevent build error (bsc#1012628). - cxgb3: fix oops on module removal (bsc#1012628). - net: renesas: sh_eth: Fix freeing wrong tx descriptor (bsc#1012628). - bnxt_en: Fix error recovery regression (bsc#1012628). - net: dsa: bcm_sf2: Fix array overrun in bcm_sf2_num_active_ports() (bsc#1012628). - s390/bpf: Fix optimizing out zero-extensions (bsc#1012628). - s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant (bsc#1012628). - s390/bpf: Fix branch shortening during codegen pass (bsc#1012628). - Update config files. - commit aa9b3e1 - Revert "Revert "rpm: Abolish scritplet templating (bsc#1189841)."" This reverts commit f924054cc523527b52203e352adb073db0962f5f. New suse-module-tools were accepted to factory: https://build.opensuse.org/request/show/919089 - commit 6abad1e ==== kernel-source ==== Version update (5.14.6 -> 5.14.9) - ALSA: usb-audio: Restrict rates for the shared clocks (bsc#1190418). - commit d0ace7f - Update patches.kernel.org/5.14.9-147-Revert-drm-vc4-hdmi-runtime-PM-changes.patch (bsc#1012628 bsc#1190469). - Delete patches.suse/drm-vc4-hdmi-Fix-HPD-GPIO-detection.patch. The former superseded the latter. - commit 2bc4ba2 - Linux 5.14.9 (bsc#1012628). - mm, hwpoison: add is_free_buddy_page() in HWPoisonHandlable() (bsc#1012628). - ocfs2: drop acl cache for directories too (bsc#1012628). - mm/debug: sync up MR_CONTIG_RANGE and MR_LONGTERM_PIN (bsc#1012628). - mm: fix uninitialized use in overcommit_policy_handler (bsc#1012628). - usb: gadget: r8a66597: fix a loop in set_feature() (bsc#1012628). - usb: gadget: u_audio: EP-OUT bInterval in fback frequency (bsc#1012628). - usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave (bsc#1012628). - usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA (bsc#1012628). - usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned() (bsc#1012628). - cifs: Not to defer close on file when lock is set (bsc#1012628). - cifs: Fix soft lockup during fsstress (bsc#1012628). - cifs: fix incorrect check for null pointer in header_assemble (bsc#1012628). - xen/x86: fix PV trap handling on secondary processors (bsc#1012628). - usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c (bsc#1012628). - USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter (bsc#1012628). - USB: cdc-acm: fix minor-number release (bsc#1012628). - Revert "USB: bcma: Add a check for devm_gpiod_get" (bsc#1012628). - binder: make sure fd closes complete (bsc#1012628). - binder: fix freeze race (bsc#1012628). - staging: greybus: uart: fix tty use after free (bsc#1012628). - usb: isp1760: do not sleep in field register poll (bsc#1012628). - Re-enable UAS for LaCie Rugged USB3-FW with fk quirk (bsc#1012628). - usb: dwc3: core: balance phy init and exit (bsc#1012628). - usb: cdns3: fix race condition before setting doorbell (bsc#1012628). - usb: core: hcd: Add support for deferring roothub registration (bsc#1012628). - USB: serial: mos7840: remove duplicated 0xac24 device ID (bsc#1012628). - USB: serial: option: add Telit LN920 compositions (bsc#1012628). - USB: serial: option: remove duplicate USB device ID (bsc#1012628). - USB: serial: option: add device id for Foxconn T99W265 (bsc#1012628). - misc: bcm-vk: fix tty registration race (bsc#1012628). - misc: genwqe: Fixes DMA mask setting (bsc#1012628). - mcb: fix error handling in mcb_alloc_bus() (bsc#1012628). - KVM: rseq: Update rseq when processing NOTIFY_RESUME on xfer to KVM guest (bsc#1012628). - erofs: fix up erofs_lookup tracepoint (bsc#1012628). - nexthop: Fix division by zero while replacing a resilient group (bsc#1012628). - btrfs: prevent __btrfs_dump_space_info() to underflow its free space (bsc#1012628). - xhci: Set HCD flag to defer primary roothub registration (bsc#1012628). - serial: 8250: 8250_omap: Fix RX_LVL register offset (bsc#1012628). - serial: mvebu-uart: fix driver's tx_empty callback (bsc#1012628). - scsi: sd_zbc: Ensure buffer size is aligned to SECTOR_SIZE (bsc#1012628). - drm/amd/pm: Update intermediate power state for SI (bsc#1012628). - net: hso: fix muxed tty registration (bsc#1012628). - platform/x86: amd-pmc: Increase the response register timeout (bsc#1012628). - arm64: Restore forced disabling of KPTI on ThunderX (bsc#1012628). - arm64: Mitigate MTE issues with str{n}cmp() (bsc#1012628). - comedi: Fix memory leak in compat_insnlist() (bsc#1012628). - regulator: qcom-rpmh-regulator: fix pm8009-1 ldo7 resource name (bsc#1012628). - afs: Fix page leak (bsc#1012628). - afs: Fix incorrect triggering of sillyrename on 3rd-party invalidation (bsc#1012628). - afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server (bsc#1012628). - afs: Fix updating of i_blocks on file/dir extension (bsc#1012628). - platform/x86/intel: punit_ipc: Drop wrong use of ACPI_PTR() (bsc#1012628). - regulator: max14577: Revert "regulator: max14577: Add proper module aliases strings" (bsc#1012628). - NLM: Fix svcxdr_encode_owner() (bsc#1012628). - virtio-net: fix pages leaking when building skb in big mode (bsc#1012628). - enetc: Fix illegal access when reading affinity_hint (bsc#1012628). - enetc: Fix uninitialized struct dim_sample field usage (bsc#1012628). - net: dsa: tear down devlink port regions when tearing down the devlink port on error (bsc#1012628). - net: bgmac-bcma: handle deferred probe error due to mac-address (bsc#1012628). - napi: fix race inside napi_enable (bsc#1012628). - bnxt_en: Fix TX timeout when TX ring size is set to the smallest (bsc#1012628). - net: hns3: fix change RSS 'hfunc' ineffective issue (bsc#1012628). - net: hns3: fix inconsistent vf id print (bsc#1012628). - net: hns3: fix misuse vf id and vport id in some logs (bsc#1012628). - net: hns3: check queue id range before using (bsc#1012628). - net: hns3: check vlan id before using it (bsc#1012628). - net: hns3: fix a return value error in hclge_get_reset_status() (bsc#1012628). - net/smc: add missing error check in smc_clc_prfx_set() (bsc#1012628). - net/smc: fix 'workqueue leaked lock' in smc_conn_abort_work (bsc#1012628). - net: dsa: fix dsa_tree_setup error path (bsc#1012628). - net: dsa: don't allocate the slave_mii_bus using devres (bsc#1012628). - net: dsa: realtek: register the MDIO bus under devres (bsc#1012628). - platform/x86: dell: fix DELL_WMI_PRIVACY dependencies & build error (bsc#1012628). - kselftest/arm64: signal: Add SVE to the set of features we can check for (bsc#1012628). - kselftest/arm64: signal: Skip tests if required features are missing (bsc#1012628). - spi: Revert modalias changes (bsc#1012628). - s390/qeth: fix NULL deref in qeth_clear_working_pool_list() (bsc#1012628). - gpiolib: acpi: Make set-debounce-timeout failures non fatal (bsc#1012628). - gpio: uniphier: Fix void functions to remove return value (bsc#1012628). - qed: rdma - don't wait for resources under hw error recovery flow (bsc#1012628). - mptcp: ensure tx skbs always have the MPTCP ext (bsc#1012628). - nexthop: Fix memory leaks in nexthop notification chain listeners (bsc#1012628). - nfc: st-nci: Add SPI ID matching DT compatible (bsc#1012628). - net: ethernet: mtk_eth_soc: avoid creating duplicate offload entries (bsc#1012628). - net: mscc: ocelot: fix forwarding from BLOCKING ports remaining enabled (bsc#1012628). - net/mlx4_en: Don't allow aRFS for encapsulated packets (bsc#1012628). - atlantic: Fix issue in the pm resume flow (bsc#1012628). - drm/amdkfd: map SVM range with correct access permission (bsc#1012628). - drm/amdkfd: fix dma mapping leaking warning (bsc#1012628). - scsi: iscsi: Adjust iface sysfs attr detection (bsc#1012628). - scsi: target: Fix the pgr/alua_support_store functions (bsc#1012628). - tty: synclink_gt: rename a conflicting function name (bsc#1012628). - fpga: machxo2-spi: Return an error on failure (bsc#1012628). - fpga: machxo2-spi: Fix missing error code in machxo2_write_complete() (bsc#1012628). - x86/fault: Fix wrong signal when vsyscall fails with pkey (bsc#1012628). - nvme-tcp: fix incorrect h2cdata pdu offset accounting (bsc#1012628). - nvme: keep ctrl->namespaces ordered (bsc#1012628). - thermal/core: Potential buffer overflow in thermal_build_list_of_policies() (bsc#1012628). - cifs: fix a sign extension bug (bsc#1012628). - scsi: sd_zbc: Support disks with more than 2**32 logical blocks (bsc#1012628). - scsi: ufs: Revert "Utilize Transfer Request List Completion Notification Register" (bsc#1012628). - scsi: ufs: Retry aborted SCSI commands instead of completing these successfully (bsc#1012628). - scsi: ufs: core: Unbreak the reset handler (bsc#1012628). - scsi: qla2xxx: Restore initiator in dual mode (bsc#1012628). - scsi: lpfc: Use correct scnprintf() limit (bsc#1012628). - irqchip/goldfish-pic: Select GENERIC_IRQ_CHIP to fix build (bsc#1012628). - irqchip/gic-v3-its: Fix potential VPE leak on error (bsc#1012628). - md: fix a lock order reversal in md_alloc (bsc#1012628). - x86/asm: Fix SETZ size enqcmds() build failure (bsc#1012628). - io_uring: fix race between poll completion and cancel_hash insertion (bsc#1012628). - io_uring: fix missing set of EPOLLONESHOT for CQ ring overflow (bsc#1012628). - io_uring: put provided buffer meta data under memcg accounting (bsc#1012628). - io_uring: don't punt files update to io-wq unconditionally (bsc#1012628). - blktrace: Fix uaf in blk_trace access after removing by sysfs (bsc#1012628). - net: phylink: Update SFP selected interface on advertising changes (bsc#1012628). - net: macb: fix use after free on rmmod (bsc#1012628). - net: stmmac: allow CSR clock of 300MHz (bsc#1012628). - blk-mq: avoid to iterate over stale request (bsc#1012628). - m68k: Double cast io functions to unsigned long (bsc#1012628). - ipv6: delay fib6_sernum increase in fib6_add (bsc#1012628). - dma-debug: prevent an error message from causing runtime problems (bsc#1012628). - cpufreq: intel_pstate: Override parameters if HWP forced by BIOS (bsc#1012628). - bpf: Add oversize check before call kvcalloc() (bsc#1012628). - xen/balloon: use a kernel thread instead a workqueue (bsc#1012628). - nvme-multipath: fix ANA state updates when a namespace is not present (bsc#1012628). - nvme-rdma: destroy cm id before destroy qp to avoid use after free (bsc#1012628). - sparc32: page align size in arch_dma_alloc (bsc#1012628). - amd/display: downgrade validation failure log level (bsc#1012628). - drm/ttm: fix type mismatch error on sparc64 (bsc#1012628). - block: check if a profile is actually registered in blk_integrity_unregister (bsc#1012628). - block: flush the integrity workqueue in blk_integrity_unregister (bsc#1012628). - blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd (bsc#1012628). - compiler.h: Introduce absolute_pointer macro (bsc#1012628). - net: i825xx: Use absolute_pointer for memcpy from fixed memory location (bsc#1012628). - sparc: avoid stringop-overread errors (bsc#1012628). - qnx4: avoid stringop-overread errors (bsc#1012628). - parisc: Use absolute_pointer() to define PAGE0 (bsc#1012628). - drm/amdkfd: make needs_pcie_atomics FW-version dependent (bsc#1012628). - drm/amd/display: Fix unstable HPCP compliance on Chrome Barcelo (bsc#1012628). - drm/amd/display: Link training retry fix for abort case (bsc#1012628). - amd/display: enable panel orientation quirks (bsc#1012628). - arm64: Mark __stack_chk_guard as __ro_after_init (bsc#1012628). - alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile (bsc#1012628). - net: 6pack: Fix tx timeout and slot time (bsc#1012628). - spi: Fix tegra20 build with CONFIG_PM=n (bsc#1012628). - libperf evsel: Make use of FD robust (bsc#1012628). - Revert drm/vc4 hdmi runtime PM changes (bsc#1012628). - EDAC/synopsys: Fix wrong value type assignment for edac_mode (bsc#1012628). - EDAC/dmc520: Assign the proper type to dimm->edac_mode (bsc#1012628). - x86/setup: Call early_reserve_memory() earlier (bsc#1012628). - thermal/drivers/int340x: Do not set a wrong tcc offset on resume (bsc#1012628). - irqchip/armada-370-xp: Fix ack/eoi breakage (bsc#1012628). - arm64: add MTE supported check to thread switching and syscall entry/exit (bsc#1012628). - USB: serial: cp210x: fix dropped characters with CP2102 (bsc#1012628). - software node: balance refcount for managed software nodes (bsc#1012628). - xen/balloon: fix balloon kthread freezing (bsc#1012628). - qnx4: work around gcc false positive warning bug (bsc#1012628). - usb: gadget: f_uac2: Add missing companion descriptor for feedback EP (bsc#1012628). - usb: gadget: f_uac2: Populate SS descriptors' wBytesPerInterval (bsc#1012628). - Refresh patches.suse/drm-vc4-hdmi-Fix-HPD-GPIO-detection.patch. - commit 85f5318 - arm64: Update config files. (bsc#1185927) Set PINCTRL_ZYNQMP as build-in. - commit 4ae263c - blacklist.conf: add idxd commit - commit 06dbf6b - nvmet: fix a width vs precision bug in nvmet_subsys_attr_serial_show() (git-fixes). - commit fef4ef0 - Linux 5.14.8 (bsc#1012628). - drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV (bsc#1012628). - selinux,smack: fix subjective/objective credential use mixups (bsc#1012628). - io_uring: fix off-by-one in BUILD_BUG_ON check of __REQ_F_LAST_BIT (bsc#1012628). - cifs: properly invalidate cached root handle when closing it (bsc#1012628). - sched/idle: Make the idle timer expire in hard interrupt context (bsc#1012628). - rtc: rx8010: select REGMAP_I2C (bsc#1012628). - blk-mq: allow 4x BLK_MAX_REQUEST_COUNT at blk_plug for multiple_queues (bsc#1012628). - blk-throttle: fix UAF by deleteing timer in blk_throtl_exit() (bsc#1012628). - block: genhd: don't call blkdev_show() with major_names_lock held (bsc#1012628). - nvmet: fixup buffer overrun in nvmet_subsys_attr_serial() (bsc#1012628). - pwm: stm32-lp: Don't modify HW state in .remove() callback (bsc#1012628). - pwm: rockchip: Don't modify HW state in .remove() callback (bsc#1012628). - pwm: img: Don't modify HW state in .remove() callback (bsc#1012628). - habanalabs: cannot sleep while holding spinlock (bsc#1012628). - habanalabs: add "in device creation" status (bsc#1012628). - habanalabs: fix mmu node address resolution in debugfs (bsc#1012628). - habanalabs: add validity check for event ID received from F/W (bsc#1012628). - drm/amdgpu: fix fdinfo race with process exit (bsc#1012628). - drm/amd/display: Fix memory leak reported by coverity (bsc#1012628). - drm/amdgpu: Fixes to returning VBIOS RAS EEPROM address (bsc#1012628). - habanalabs: fix nullifying of destroyed mmu pgt pool (bsc#1012628). - thermal/drivers/rcar_gen3_thermal: Store TSC id as unsigned int (bsc#1012628). - nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group (bsc#1012628). - nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group (bsc#1012628). - nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group (bsc#1012628). - nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group (bsc#1012628). - nilfs2: fix NULL pointer in nilfs_##name##_attr_release (bsc#1012628). - nilfs2: fix memory leak in nilfs_sysfs_create_device_group (bsc#1012628). - btrfs: fix lockdep warning while mounting sprout fs (bsc#1012628). - btrfs: delay blkdev_put until after the device remove (bsc#1012628). - btrfs: update the bdev time directly when closing (bsc#1012628). - s390/unwind: use current_frame_address() to unwind current task (bsc#1012628). - ceph: lockdep annotations for try_nonblocking_invalidate (bsc#1012628). - ceph: remove the capsnaps when removing caps (bsc#1012628). - ceph: request Fw caps before updating the mtime in ceph_write_iter (bsc#1012628). - ceph: fix memory leak on decode error in ceph_handle_caps (bsc#1012628). - ACPI: PM: s2idle: Run both AMD and Microsoft methods if both are supported (bsc#1012628). - ASoC: audio-graph: respawn Platform Support (bsc#1012628). - s390: add kmemleak annotation in stack_alloc() (bsc#1012628). - dmaengine: xilinx_dma: Set DMA mask for coherent APIs (bsc#1012628). - dmaengine: ioat: depends on !UML (bsc#1012628). - cxl/pci: Introduce cdevm_file_operations (bsc#1012628). - cxl: Move cxl_core to new directory (bsc#1012628). - dmaengine: sprd: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - dmaengine: idxd: depends on !UML (bsc#1012628). - riscv: dts: microchip: mpfs-icicle: Fix serial console (bsc#1012628). - of: property: Disable fw_devlink DT support for X86 (bsc#1012628). - drm/ttm: Fix a deadlock if the target BO is not idle during swap (bsc#1012628). - arm64: mm: limit linear region to 51 bits for KVM in nVHE mode (bsc#1012628). - iommu/vt-d: Fix a deadlock in intel_svm_drain_prq() (bsc#1012628). - iommu/vt-d: Fix PASID leak in intel_svm_unbind_mm() (bsc#1012628). - iommu/amd: Relocate GAMSup check to early_enable_iommus (bsc#1012628). - parisc: Move pci_dev_is_behind_card_dino to where it is used (bsc#1012628). - dma-buf: DMABUF_DEBUG should depend on DMA_SHARED_BUFFER (bsc#1012628). - Update config files. - dma-buf: DMABUF_MOVE_NOTIFY should depend on DMA_SHARED_BUFFER (bsc#1012628). - Update config files. - drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION() (bsc#1012628). - drm/amdgpu: Disable PCIE_DPM on Intel RKL Platform (bsc#1012628). - thermal/core: Fix thermal_cooling_device_register() prototype (bsc#1012628). - tracing/boot: Fix to loop on only subkeys (bsc#1012628). - tools/bootconfig: Fix tracing_on option checking in ftrace2bconf.sh (bsc#1012628). - Kconfig.debug: drop selecting non-existing HARDLOCKUP_DETECTOR_ARCH (bsc#1012628). - init: move usermodehelper_enable() to populate_rootfs() (bsc#1012628). - math: RATIONAL_KUNIT_TEST should depend on RATIONAL instead of selecting it (bsc#1012628). - SUNRPC: don't pause on incomplete allocation (bsc#1012628). - s390/entry: make oklabel within CHKSTG macro local (bsc#1012628). - platform/chrome: cros_ec_trace: Fix format warnings (bsc#1012628). - platform/chrome: sensorhub: Add trace events for sample (bsc#1012628). - dmaengine: idxd: clear block on fault flag when clear wq (bsc#1012628). - dmaengine: idxd: fix abort status check (bsc#1012628). - dmaengine: idxd: fix wq slot allocation index check (bsc#1012628). - dmaengine: idxd: have command status always set (bsc#1012628). - dmanegine: idxd: cleanup all device related bits after disabling device (bsc#1012628). - pwm: mxs: Don't modify HW state in .probe() after the PWM chip was registered (bsc#1012628). - pwm: lpc32xx: Don't modify HW state in .probe() after the PWM chip was registered (bsc#1012628). - ceph: cancel delayed work instead of flushing on mdsc teardown (bsc#1012628). - thermal/drivers/qcom/spmi-adc-tm5: Don't abort probing if a sensor is not used (bsc#1012628). - PM: sleep: core: Avoid setting power.must_resume to false (bsc#1012628). - profiling: fix shift-out-of-bounds bugs (bsc#1012628). - nilfs2: use refcount_dec_and_lock() to fix potential UAF (bsc#1012628). - prctl: allow to setup brk for et_dyn executables (bsc#1012628). - pwm: ab8500: Fix register offset calculation to not depend on probe order (bsc#1012628). - 9p/trans_virtio: Remove sysfs file on probe failure (bsc#1012628). - thermal/drivers/exynos: Fix an error code in exynos_tmu_probe() (bsc#1012628). - n64cart: fix return value check in n64cart_probe() (bsc#1012628). - staging: rtl8723bs: fix wpa_set_auth_algs() function (bsc#1012628). - perf tools: Allow build-id with trailing zeros (bsc#1012628). - perf symbol: Look for ImageBase in PE file to compute .text offset (bsc#1012628). - perf test: Fix bpf test sample mismatch reporting (bsc#1012628). - dmaengine: acpi: Avoid comparison GSI with Linux vIRQ (bsc#1012628). - RDMA/mlx5: Fix xlt_chunk_align calculation (bsc#1012628). - RDMA/hns: Enable stash feature of HIP09 (bsc#1012628). - um: virtio_uml: fix memory leak on init failures (bsc#1012628). - coredump: fix memleak in dump_vma_snapshot() (bsc#1012628). - um: fix stub location calculation (bsc#1012628). - staging: rtl8192u: Fix bitwise vs logical operator in TranslateRxSignalStuff819xUsb() (bsc#1012628). - console: consume APC, DM, DCS (bsc#1012628). - PCI: aardvark: Fix reporting CRS value (bsc#1012628). - PCI: pci-bridge-emul: Add PCIe Root Capabilities Register (bsc#1012628). - commit 94242c6 - kernel-binary.spec: suse-kernel-rpm-scriptlets required for uninstall as well. Fixes: e98096d5cf85 ("rpm: Abolish scritplet templating (bsc#1189841).") - commit e082fbf - Linux 5.14.7 (bsc#1012628). - net: stmmac: fix MAC not working when system resume back with WoL active (bsc#1012628). - io_uring: ensure symmetry in handling iter types in loop_rw_iter() (bsc#1012628). - swiotlb-xen: avoid double free (bsc#1012628). - swiotlb-xen: fix late init retry (bsc#1012628). - xen: reset legacy rtc flag for PV domU (bsc#1012628). - xen: fix usage of pmd_populate in mremap for pv guests (bsc#1012628). - bnx2x: Fix enabling network interfaces without VFs (bsc#1012628). - arm64/sve: Use correct size when reinitialising SVE state (bsc#1012628). - PM: base: power: don't try to use non-existing RTC for storing data (bsc#1012628). - PCI: Add AMD GPU multi-function power dependencies (bsc#1012628). - drm/amd/display: Get backlight from PWM if DMCU is not initialized (bsc#1012628). - drm/amd/display: dsc mst 2 4K displays go dark with 2 lane HBR3 (bsc#1012628). - drm/amd/display: Fix white screen page fault for gpuvm (bsc#1012628). - drm/amd/pm: fix runpm hang when amdgpu loaded prior to sound driver (bsc#1012628). - drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10 (bsc#1012628). - drm/amdgpu: use IS_ERR for debugfs APIs (bsc#1012628). - drm/amdgpu: fix use after free during BO move (bsc#1012628). - drm/amdgpu: add amdgpu_amdkfd_resume_iommu (bsc#1012628). - drm/amdgpu: move iommu_resume before ip init/resume (bsc#1012628). - drm/amd/pm: fix the issue of uploading powerplay table (bsc#1012628). - drm/amdkfd: separate kfd_iommu_resume from kfd_resume (bsc#1012628). - drm/radeon: pass drm dev radeon_agp_head_init directly (bsc#1012628). - io_uring: allow retry for O_NONBLOCK if async is supported (bsc#1012628). - drm/etnaviv: return context from etnaviv_iommu_context_get (bsc#1012628). - drm/etnaviv: put submit prev MMU context when it exists (bsc#1012628). - drm/etnaviv: stop abusing mmu_context as FE running marker (bsc#1012628). - drm/etnaviv: keep MMU context across runtime suspend/resume (bsc#1012628). - drm/etnaviv: exec and MMU state is lost when resetting the GPU (bsc#1012628). - drm/etnaviv: fix MMU context leak on GPU reset (bsc#1012628). - drm/etnaviv: reference MMU context when setting up hardware state (bsc#1012628). - drm/etnaviv: add missing MMU context put when reaping MMU mapping (bsc#1012628). - s390/sclp: fix Secure-IPL facility detection (bsc#1012628). - net: qrtr: revert check in qrtr_endpoint_post() (bsc#1012628). - x86/pat: Pass valid address to sanitize_phys() (bsc#1012628). - x86/mm: Fix kern_addr_valid() to cope with existing but not present entries (bsc#1012628). - x86/mce: Avoid infinite loop for copy from user recovery (bsc#1012628). - net: remove the unnecessary check in cipso_v4_doi_free (bsc#1012628). - net/{mlx5|nfp|bnxt}: Remove unnecessary RTNL lock assert (bsc#1012628). - net-caif: avoid user-triggerable WARN_ON(1) (bsc#1012628). - ptp: dp83640: don't define PAGE0 (bsc#1012628). - dccp: don't duplicate ccid when cloning dccp sock (bsc#1012628). - net/l2tp: Fix reference count leak in l2tp_udp_recv_core (bsc#1012628). - r6040: Restore MDIO clock frequency after MAC reset (bsc#1012628). - tipc: increase timeout in tipc_sk_enqueue() (bsc#1012628). - drm/rockchip: cdn-dp-core: Make cdn_dp_core_resume __maybe_unused (bsc#1012628). - rtc: cmos: Disable irq around direct invocation of cmos_interrupt() (bsc#1012628). - drm/i915/dp: return proper DPRX link training result (bsc#1012628). - perf machine: Initialize srcline string member in add_location struct (bsc#1012628). - net/mlx5: FWTrace, cancel work on alloc pd error flow (bsc#1012628). - net/mlx5: Fix potential sleeping in atomic context (bsc#1012628). - net: stmmac: fix system hang caused by eee_ctrl_timer during suspend/resume (bsc#1012628). - igc: fix tunnel offloading (bsc#1012628). - nvme-tcp: fix io_work priority inversion (bsc#1012628). - powerpc/64s: system call scv tabort fix for corrupt irq soft-mask state (bsc#1012628). - events: Reuse value read using READ_ONCE instead of re-reading it (bsc#1012628). - net: ipa: initialize all filter table slots (bsc#1012628). - gen_compile_commands: fix missing 'sys' package (bsc#1012628). - vhost_net: fix OoB on sendmsg() failure (bsc#1012628). - net/af_unix: fix a data-race in unix_dgram_poll (bsc#1012628). - net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup (bsc#1012628). - x86/uaccess: Fix 32-bit __get_user_asm_u64() when CC_HAS_ASM_GOTO_OUTPUT=y (bsc#1012628). - tcp: fix tp->undo_retrans accounting in tcp_sacktag_one() (bsc#1012628). - selftest: net: fix typo in altname test (bsc#1012628). - qed: Handle management FW error (bsc#1012628). - udp_tunnel: Fix udp_tunnel_nic work-queue type (bsc#1012628). - dt-bindings: arm: Fix Toradex compatible typo (bsc#1012628). - ibmvnic: check failover_pending in login response (bsc#1012628). - KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode changing registers (bsc#1012628). - powerpc/64s: system call rfscv workaround for TM bugs (bsc#1012628). - powerpc/mce: Fix access error in mce handler (bsc#1012628). - s390/pci_mmio: fully validate the VMA before calling follow_pte() (bsc#1012628). - bnxt_en: make bnxt_free_skbs() safe to call after bnxt_free_mem() (bsc#1012628). - net: hns3: pad the short tunnel frame before sending to hardware (bsc#1012628). - net: hns3: change affinity_mask to numa node range (bsc#1012628). - net: hns3: disable mac in flr process (bsc#1012628). - net: hns3: fix the timing issue of VF clearing interrupt sources (bsc#1012628). - net: stmmac: platform: fix build warning when with !CONFIG_PM_SLEEP (bsc#1012628). - Drivers: hv: vmbus: Fix kernel crash upon unbinding a device from uio_hv_generic driver (bsc#1012628). - net/mlx5e: Fix mutual exclusion between CQE compression and HW TS (bsc#1012628). - ice: Correctly deal with PFs that do not support RDMA (bsc#1012628). - net: dsa: qca8k: fix kernel panic with legacy mdio mapping (bsc#1012628). - net: dsa: lantiq_gswip: Add 200ms assert delay (bsc#1012628). - net: hns3: fix the exception when query imp info (bsc#1012628). - nvme: avoid race in shutdown namespace removal (bsc#1012628). - blkcg: fix memory leak in blk_iolatency_init (bsc#1012628). - net: dsa: flush switchdev workqueue before tearing down CPU/DSA ports (bsc#1012628). - mlxbf_gige: clear valid_polarity upon open (bsc#1012628). - dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation (bsc#1012628). - remoteproc: qcom: wcnss: Fix race with iris probe (bsc#1012628). - mfd: db8500-prcmu: Adjust map to reality (bsc#1012628). - PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms (bsc#1012628). - fuse: fix use after free in fuse_read_interrupt() (bsc#1012628). - PCI: tegra194: Fix handling BME_CHGED event (bsc#1012628). - PCI: tegra194: Fix MSI-X programming (bsc#1012628). - PCI: tegra: Fix OF node reference leak (bsc#1012628). - mfd: Don't use irq_create_mapping() to resolve a mapping (bsc#1012628). - PCI: rcar: Fix runtime PM imbalance in rcar_pcie_ep_probe() (bsc#1012628). - riscv: fix the global name pfn_base confliction error (bsc#1012628). - KVM: arm64: Make hyp_panic() more robust when protected mode is enabled (bsc#1012628). - tracing/probes: Reject events which have the same name of existing one (bsc#1012628). - PCI: cadence: Use bitfield for *quirk_retrain_flag* instead of bool (bsc#1012628). - PCI: cadence: Add quirk flag to set minimum delay in LTSSM Detect.Quiet state (bsc#1012628). - PCI: j721e: Add PCIe support for J7200 (bsc#1012628). - PCI: j721e: Add PCIe support for AM64 (bsc#1012628). - PCI: Add ACS quirks for Cavium multi-function devices (bsc#1012628). - watchdog: Start watchdog in watchdog_set_last_hw_keepalive only if appropriate (bsc#1012628). - octeontx2-af: Add additional register check to rvu_poll_reg() (bsc#1012628). - Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6 (bsc#1012628). - flow: fix object-size-mismatch warning in flowi{4,6}_to_flowi_common() (bsc#1012628). - net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920 (bsc#1012628). - block, bfq: honor already-setup queue merges (bsc#1012628). - PCI: ibmphp: Fix double unmap of io_mem (bsc#1012628). - loop: reduce the loop_ctl_mutex scope (bsc#1012628). - ethtool: Fix an error code in cxgb2.c (bsc#1012628). - NTB: Fix an error code in ntb_msit_probe() (bsc#1012628). - NTB: perf: Fix an error code in perf_setup_inbuf() (bsc#1012628). - stmmac: dwmac-loongson:Fix missing return value (bsc#1012628). - net: phylink: add suspend/resume support (bsc#1012628). - mfd: axp20x: Update AXP288 volatile ranges (bsc#1012628). - backlight: ktd253: Stabilize backlight (bsc#1012628). - PCI: controller: PCI_IXP4XX should depend on ARCH_IXP4XX (bsc#1012628). - PCI: of: Don't fail devm_pci_alloc_host_bridge() on missing 'ranges' (bsc#1012628). - PCI: iproc: Fix BCMA probe resource handling (bsc#1012628). - netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex (bsc#1012628). - KVM: arm64: Restrict IPA size to maximum 48 bits on 4K and 16K page size (bsc#1012628). - PCI: Fix pci_dev_str_match_path() alloc while atomic bug (bsc#1012628). - mfd: tqmx86: Clear GPIO IRQ resource when no IRQ is set (bsc#1012628). - tracing/boot: Fix a hist trigger dependency for boot time tracing (bsc#1012628). - mtd: mtdconcat: Judge callback existence based on the master (bsc#1012628). - mtd: mtdconcat: Check _read, _write callbacks existence before assignment (bsc#1012628). - KVM: arm64: Fix read-side race on updates to vcpu reset state (bsc#1012628). - KVM: arm64: Handle PSCI resets before userspace touches vCPU state (bsc#1012628). - PCI/PTM: Remove error message at boot (bsc#1012628). - PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n (bsc#1012628). - mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()' (bsc#1012628). - ARC: export clear_user_page() for modules (bsc#1012628). - perf config: Fix caching and memory leak in perf_home_perfconfig() (bsc#1012628). - perf unwind: Do not overwrite FEATURE_CHECK_LDFLAGS-libunwind-{x86,aarch64} (bsc#1012628). - perf bench inject-buildid: Handle writen() errors (bsc#1012628). - gpio: mpc8xxx: Fix a resources leak in the error handling path of 'mpc8xxx_probe()' (bsc#1012628). - gpio: mpc8xxx: Fix a potential double iounmap call in 'mpc8xxx_probe()' (bsc#1012628). - gpio: mpc8xxx: Use 'devm_gpiochip_add_data()' to simplify the code and avoid a leak (bsc#1012628). - io_uring: retry in case of short read on block device (bsc#1012628). - net: dsa: tag_rtl4_a: Fix egress tags (bsc#1012628). - tools build: Fix feature detect clean for out of source builds (bsc#1012628). - mptcp: fix possible divide by zero (bsc#1012628). - selftests: mptcp: clean tmp files in simult_flows (bsc#1012628). - net: hso: add failure handler for add_net_device (bsc#1012628). - net: dsa: b53: Fix calculating number of switch ports (bsc#1012628). - net: dsa: b53: Set correct number of ports in the DSA struct (bsc#1012628). - mptcp: Only send extra TCP acks in eligible socket states (bsc#1012628). - netfilter: socket: icmp6: fix use-after-scope (bsc#1012628). - fq_codel: reject silly quantum parameters (bsc#1012628). - qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom (bsc#1012628). - iwlwifi: move get pnvm file name to a separate function (bsc#1012628). - iwlwifi: pnvm: Fix a memory leak in 'iwl_pnvm_get_from_fs()' (bsc#1012628). - ip_gre: validate csum_start only on pull (bsc#1012628). - net: dsa: b53: Fix IMP port setup on BCM5301x (bsc#1012628). - bnxt_en: fix stored FW_PSID version masks (bsc#1012628). - bnxt_en: Fix asic.rev in devlink dev info command (bsc#1012628). - bnxt_en: Fix possible unintended driver initiated error recovery (bsc#1012628). - ip6_gre: Revert "ip6_gre: add validation for csum_start" (bsc#1012628). - mfd: lpc_sch: Rename GPIOBASE to prevent build error (bsc#1012628). - cxgb3: fix oops on module removal (bsc#1012628). - net: renesas: sh_eth: Fix freeing wrong tx descriptor (bsc#1012628). - bnxt_en: Fix error recovery regression (bsc#1012628). - net: dsa: bcm_sf2: Fix array overrun in bcm_sf2_num_active_ports() (bsc#1012628). - s390/bpf: Fix optimizing out zero-extensions (bsc#1012628). - s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant (bsc#1012628). - s390/bpf: Fix branch shortening during codegen pass (bsc#1012628). - Update config files. - commit aa9b3e1 - Revert "Revert "rpm: Abolish scritplet templating (bsc#1189841)."" This reverts commit f924054cc523527b52203e352adb073db0962f5f. New suse-module-tools were accepted to factory: https://build.opensuse.org/request/show/919089 - commit 6abad1e ==== libjpeg-turbo ==== Subpackages: libjpeg8 libturbojpeg0 - previous version updates fixes following bugs: CVE-2014-9092, CVE-2018-14498, CVE-2019-2201, CVE-2020-17541 (bsc#1128712, bsc#1186764, bsc#807183, bsc#906761) ==== mhvtl ==== Version update (1.63_release+759.35ddb48e5262_k5.14.6_2 -> 1.63_release+759.35ddb48e5262_k5.14.9_1) - Remoed the "BuildRequires: lzo-devel" line from the SPEC file, since this dependence was removed with upstream commit c327afb77cff ("Remove dependency on external lzo packages"). ==== opensc ==== Version update (0.21.0 -> 0.22.0) - Update to OpenSC 0.22.0: * Removed changes in opensc-gcc11.patch already present in upstream. - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2… * Removed some false positives from the openrc-rpmlintrc file. * Use standard paths for file cache on Linux (#2148) and OSX (#2214) * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic) * Add threading test to `pkcs11-tool` (#2067) * Add support to generate generic secret keys (#2140) * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195) * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179). * Support for gcc11 and its new strict aliasing rules (#2241, #2260) * Initial support for building with OpenSSL 3.0 (#2343) * pkcs15-tool: Write data objects in binary mode (#2324) * Avoid limited size of log messages (#2352) * Support for ECDSA verification (#2211) * Support for ECDSA with different SHA hashes (#2190) * Prevent issues in p11-kit by not returning unexpected return codes (#2207) * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293) * Standardize the version 2 on 2.20 in the code (#2096) * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE (#2176) * Copy arguments of C_Initialize (#2350) * Fix RSA-PSS signing (#2234) * Fix DO deletion (#2215) * Add support for (X)EdDSA keys (#1960) * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205) * Add support for applet version 4 (#2332) * New configuration option for opensc.conf to disable pkcs1_padding (#2193) * Add support for ECDSA with different hashes (#2190) * Enable more mechanisms (#2178) * Fixed asking for a user pin when formatting a card (#1737) * Added support for French CPx Healthcare cards (#2217) * Added ATR for new CardOS 5.4 version (#2296) ==== python-lazr.config ==== Version update (2.2.2 -> 2.2.3) - Update to 2.2.3: - Fix tests with zope.interface >= 5.0.0. - Fix deprecation warning on Python >= 3.2. (lp#1870199) ==== rng-tools ==== - disable nistbeacon support ==== rubygem-sassc-2.2 ==== - Rename rpmlintrc, cleanup dotfiles & cleanup spec file ==== squid ==== Version update (4.16 -> 5.2) - transition to squid 5.x. This is a major release and for changes and how to transition from 4.x, see the release notes, http://www.squid-cache.org/Versions/v5/RELEASENOTES.html - update to 5.2 * fixes issues with WCCP protocol that may lead to information disclosure (bsc#1189403, CVE-2021-28116) - drop unused BR: db-devel, ed, opensp-devel, pkgconfig(kdb) - new BR: pkgconfig(tdb) ==== step ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== suse-module-tools ==== Version update (16.0.10+7 -> 16.0.11) - Update to version 16.0.11: * inkmp-script(postun): don't pass existing files to weak-modules2 (boo#1191200) * kernel-scriptlets: skip cert scriptlet on non-UEFI systems (boo#1191260) ==== sweeper ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== umbrello ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1 ==== yakuake ==== Version update (21.08.1 -> 21.08.2) - Update to 21.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.08.2/ - No code change since 21.08.1

1 0

New Arm Tumbleweed snapshot 20211005 released!
by Guillaume Gardet 08 Oct '21

08 Oct '21

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (21.2.2 -> 21.2.3) Mesa-demo Mesa-drivers (21.2.2 -> 21.2.3) MozillaFirefox (92.0 -> 92.0.1) MozillaThunderbird (91.1.0 -> 91.1.2) audit (3.0.3 -> 3.0.5) audit-secondary (3.0.3 -> 3.0.5) blog (2.20 -> 2.21) btrfsprogs (5.14 -> 5.14.1) codec2 (1.0.0 -> 1.0.1) crypto-policies (20210225.05203d2 -> 20210917.c9d86d1) desktop-file-utils diffutils dracut (055+suse.117.ge5fc2048 -> 055+suse.119.g6c4187af) exim (4.94.2 -> 4.95) ffmpeg-4 gamin gcc gd gegl iio-sensor-proxy (3.1 -> 3.3) inotify-tools (3.20.11.0 -> 3.21.9.5) kernel-firmware (20210901 -> 20210928) knewstuff liberation-fonts (2.1.4 -> 2.1.5) libinput (1.19.0 -> 1.19.1) libmtp (1.1.18 -> 1.1.19) libnss_usrfiles libsoup libsrtp2 (2.4.1 -> 2.4.2) libstorage-ng (4.4.37 -> 4.4.41) libupnp (1.14.10 -> 1.14.12) libva libva-gl mailutils (3.8 -> 3.13) mhvtl (1.63_release+759.35ddb48e5262_k5.14.6_1 -> 1.63_release+759.35ddb48e5262_k5.14.6_2) monitoring-plugins mozjs78 (78.13.0 -> 78.14.0) nmap open-iscsi openSUSE-build-key openafs opie perl-Convert-ASN1 (0.31 -> 0.33) perl-Mail-AuthenticationResults (2.20210112 -> 2.20210915) perl-ldap perl-libwww-perl (6.56 -> 6.57) portaudio (190600_20161030 -> 190700_20210406) publicsuffix (20210908 -> 20210928) python python-base python-evtx (0.6.1 -> 0.7.4) python-jmespath python-requests-oauthlib python-tabulate rav1e rtl8812au (5.9.3.2+git20210427.6ef5d8f_k5.14.6_1 -> 5.9.3.2+git20210427.6ef5d8f_k5.14.6_2) salt (3002.2 -> 3003.3) selinux-policy systemd sysvinit (2.99 -> 3.00) tdb (1.4.3 -> 1.4.4) tevent (0.10.2 -> 0.11.0) xrdb xwayland yast2-alternatives (4.3.1 -> 4.4.0) yast2-installation (4.4.18 -> 4.4.19) yast2-slp-server (4.3.0 -> 4.4.0) yast2-storage-ng (4.4.7 -> 4.4.8) zimg (3.0.1 -> 3.0.3) === Details === ==== Mesa ==== Version update (21.2.2 -> 21.2.3) Subpackages: Mesa-dri-devel Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - update to 21.2.3 * third bugfix release ==== Mesa-demo ==== - Introduce new subpackage -es for GLES based demos - Symlink es2_info, es2gears_x11, es2tri to %_bindir ==== Mesa-drivers ==== Version update (21.2.2 -> 21.2.3) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libvdpau_r300 libvdpau_r600 libvdpau_radeonsi libvulkan_radeon - update to 21.2.3 * third bugfix release ==== MozillaFirefox ==== Version update (92.0 -> 92.0.1) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 92.0.1 * Fixed: Fixes an issue where audio playback was not working on some Linux systems (bmo#1730499) * Fixed: Fixes issues with the findbar close button on different operating systems (bmo#1728368) ==== MozillaThunderbird ==== Version update (91.1.0 -> 91.1.2) - Mozilla Thunderbird 91.1.2 * Thunderbird will now warn if an S/MIME encrypted message includes BCC recipients * several bugfixes listed on https://www.thunderbird.net/en-US/thunderbird/91.1.2/releasenotes/ - Mozilla Thunderbird 91.1.1 * Menu item for disabling subject encryption for a single message added * Printing messages that are not currently displayed is no longer supported, including printing multiple messages at once * for bugfixes see https://www.thunderbird.net/en-US/thunderbird/91.1.1/releasenotes - MOZ_ENABLE_WAYLAND env variable now overrides automatic detection if already set before startup ==== audit ==== Version update (3.0.3 -> 3.0.5) Subpackages: libaudit1 libauparse0 - Update to version 3.0.5: * In auditd, flush uid/gid caches when user/group added/deleted/modified * Fixed various issues when dealing with corrupted logs * In auditd, check if log_file is valid before closing handle - Include fixed from 3.0.4: * Apply performance speedups to auparse library * Optimize rule loading in auditctl * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath * Update syscall table to the 5.14 kernel * Fixed various issues when dealing with corrupted logs ==== audit-secondary ==== Version update (3.0.3 -> 3.0.5) Subpackages: audit python3-audit system-group-audit - Fix hardened auditd.service (bsc#1181400) * add fix-hardened-service.patch Make /etc/audit read-write from the service. Remove PrivateDevices=true to expose /dev/* to auditd.service. - Enable stop rules for audit.service (cf. bsc#1190227) * add enable-stop-rules.patch - Change default log_format from ENRICHED to RAW (bsc#1190500): * add change-default-log_format.patch (SUSE-specific patch) - Update to version 3.0.5: * In auditd, flush uid/gid caches when user/group added/deleted/modified * Fixed various issues when dealing with corrupted logs * In auditd, check if log_file is valid before closing handle - Include fixed from 3.0.4: * Apply performance speedups to auparse library * Optimize rule loading in auditctl * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath * Update syscall table to the 5.14 kernel * Fixed various issues when dealing with corrupted logs ==== blog ==== Version update (2.20 -> 2.21) Subpackages: libblogger2 - Move to /usr for UsrMerge (boo#1191057) ==== btrfsprogs ==== Version update (5.14 -> 5.14.1) Subpackages: btrfsprogs-udev-rules libbtrfs0 - Update to 5.14.1 * fixes: * defrag: fix parsing of compression (option -c) * add workaround for old kernels when reading zone sizes * let only check and restore open the fs with transid failures, namely preventing btrfstune to do so * convert: --uuid copy does not fail on duplicate uuids ==== codec2 ==== Version update (1.0.0 -> 1.0.1) - Update to version 1.0.1: * Release to support freedv-gui 1.6.1 ==== crypto-policies ==== Version update (20210225.05203d2 -> 20210917.c9d86d1) Subpackages: crypto-policies-scripts - Remove the scripts and documentation regarding fips-finish-install and test-fips-setup * Add crypto-policies-FIPS.patch - Update to version 20210917.c9d86d1: * openssl: fix disabling ChaCha20 * pacify pylint 2.11: use format strings * pacify pylint 2.11: specify explicit encoding * fix minor things found by new pylint * update-crypto-policies: --check against regenerated * update-crypto-policies: fix --check's walking order * policygenerators/gnutls: revert disabling DTLS0.9... * policygenerators/java: add javasystem backend * LEGACY: bump 1023 key size to 1024 * cryptopolicies: fix 'and' in deprecation warnings * *ssh: condition ecdh-sha2-nistp384 on SECP384R1 * nss: hopefully the last fix for nss sigalgs check * cryptopolicies: Python 3.10 compatibility * nss: postponing check + testing at least something * Rename 'policy modules' to 'subpolicies' * validation.rules: fix a missing word in error * cryptopolicies: raise errors right after warnings * update-crypto-policies: capitalize warnings * cryptopolicies: syntax-precheck scope errors * .gitlab-ci.yml, Makefile: enable codespell * all: fix several typos * docs: don't leave zero TLS/DTLS protocols on * openssl: separate TLS/DTLS MinProtocol/MaxProtocol * alg_lists: order protocols new-to-old for consistency * alg_lists: max_{d,}tls_version * update-crypto-policies: fix pregenerated + local.d * openssh: allow validation with pre-8.5 * .gitlab-ci.yml: run commit-range against upstream * openssh: Use the new name for PubkeyAcceptedKeyTypes * sha1_in_dnssec: deprecate * .gitlab-ci.yml: test commit ranges * FIPS:OSPP: sign = -*-SHA2-224 * scoped policies: documentation update * scoped policies: use new features to the fullest... * scoped policies: rewrite + minimal policy changes * scoped policies: rewrite preparations * nss: postponing the version check again, to 3.64 - Remove patches fixed upstream: crypto-policies-typos.patch - Rebase: crypto-policies-test_supported_modules_only.patch - Merge crypto-policies-asciidoc.patch into crypto-policies-no-build-manpages.patch ==== desktop-file-utils ==== - suse-update-mime-defaults: add Pantheon desktop environment ==== diffutils ==== - Skip stack overflow tests under qemu emulation (bsc#1190046) ==== dracut ==== Version update (055+suse.117.ge5fc2048 -> 055+suse.119.g6c4187af) Subpackages: dracut-mkinitrd-deprecated - Update to version 055+suse.119.g6c4187af: * fix(suse-initrd): handle cases with zero modprobe.d files (bsc#1189895) ==== exim ==== Version update (4.94.2 -> 4.95) - update to exim 4.95 * includes taintwarn (taintwarn.patch) * fast-ramp queue run * native SRS * TLS resumption * LMDB lookups with single key * smtp transport option "message_linelength_limit" * optionally ignore lookup caches * quota checking for appendfile transport during message reception * sqlite lookups allow a "file=<path>" option * lsearch lookups allow a "ret=full" option * command line option for the notifier socket * faster TLS startup * new main config option "proxy_protocol_timeout" * expand "smtp_accept_max_per_connection" * log selector "queue_size_exclusive" * main config option "smtp_backlog_monitor" * main config option "hosts_require_helo" * main config option "allow_insecure_tainted_data" ==== ffmpeg-4 ==== Subpackages: libavcodec58_134 libavdevice58_13 libavfilter7_110 libavformat58_76 libavresample4_0 libavutil56_70 libpostproc55_9 libswresample3_9 libswscale5_9 - Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix denial of service vulnerability exists due to a memory leak in avcodec_alloc_context3 at options.c (bsc#1186756). ==== gamin ==== - Fix source URI. ==== gcc ==== Subpackages: cpp gcc-info libstdc++-devel - Move /lib/cpp to /usr/lib/cpp for the usr merge. [bsc#1191060] ==== gd ==== Subpackages: libgd3 - reenable gd/gd2 legacy formats, was disabled by upstream by default [bsc#1190762] ==== gegl ==== Subpackages: gegl-0_4 libgegl-0_4-0 - Also disable luajit on ppc64le and s390x. Package is unavailable. ==== iio-sensor-proxy ==== Version update (3.1 -> 3.3) - Update to version 3.3: * Fix a bug left-over in one of the 3.2 bug fixes where some accelerometers would fail to initialise. - Changes from version 3.2: * Fix problems parsing numbers with decimal separator. - Require gudev >= 237 for building (for consistency with upstream). - Drop the rpmlintrc file and add back appropriate service macros in pre/post scriptlets. ==== inotify-tools ==== Version update (3.20.11.0 -> 3.21.9.5) Subpackages: libinotifytools0 - update to 3.21.9.5: * Fix Wrong pointer passed to realloc * Fix offset compiler warning * various static code analyse annotations and fixes ==== kernel-firmware ==== Version update (20210901 -> 20210928) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20210928 (git commit 7a30050592e2): * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC * linux-firmware: Update firmware file for Intel Bluetooth 9462 * amdgpu: update VCN firmware for dimgrey cavefish * amdgpu: update VCN firmware for navy flounder * amdgpu: update VCN firmware for sienna cichlid * amdgpu: update VCN firmware for vangogh * amdgpu: update VCN firmware for renoir * amdgpu: update VCN firmware for picasso * amdgpu: update VCN firmware for raven2 * amdgpu: update VCN firmware for raven * amdgpu: Add initial firmware for Beige Goby * cxgb4: Update firmware to revision 1.26.2.0 * linux-firmware: update frimware for mediatek bluetooth chip (MT7921) * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * qed: Add firmware 8.59.1.0 * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX210 * linux-firmware: Update firmware file for Intel Bluetooth AX200 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * linux-firmware: Update firmware file for Intel Bluetooth 8265 * iwlwifi: add FWs for new So device types with multiple RF modules * amdgpu: add initial firmware for Yellow Carp * i915: Update ADLP DMC v2.12 * linux-firmware: add frimware for mediatek bluetooth chip (MT7922) * linux-firmware: Update AMD SEV firmware (bsc#1186938) * Revert "iwlwifi: add FW for new So/Gf device type" - Update aliases ==== knewstuff ==== Subpackages: knewstuff-imports libKF5NewStuff5 libKF5NewStuff5-lang libKF5NewStuffCore5 - Add upstream patch: * 0001-Include-a-user-agent-on-KNS-requests.patch - Add fix-crash.patch. This patch fixes a crash in DownloadWidget. (kde#443025) ==== liberation-fonts ==== Version update (2.1.4 -> 2.1.5) - Update to release 2.1.5 * More fixes to Superscript and subscript Numbers missing issues. * Fixed inconsistent weight, missing glyphs and GSUB issues. ==== libinput ==== Version update (1.19.0 -> 1.19.1) Subpackages: libinput-udev libinput10 - Update to release 1.19.1 * New: Detects (and works around) buggy devices that claim to have a high-resolution scroll wheel but which do not actually send events. * New assumption that any non-bluetooth touchpad is internal. * Jumping cursor warning has been reduced once again. ==== libmtp ==== Version update (1.1.18 -> 1.1.19) Subpackages: libmtp-udev libmtp9 - updated to 1.1.19 release - Lots of USB ids added, especially Garmin devices - use a local libusb context, not the global one - various bugfixes ==== libnss_usrfiles ==== - Install into _libdir [bsc#1191070] ==== libsoup ==== Subpackages: libsoup-3_0-0 typelib-1_0-Soup-3_0 - Ignore test failure on 32-bit arm, as it is done for 32-bit x86 https://gitlab.gnome.org/GNOME/libsoup/-/issues/236 ==== libsrtp2 ==== Version update (2.4.1 -> 2.4.2) - Update to release 2.4.2 * Fixes an unspecified regression introduced in 2.4.1 ==== libstorage-ng ==== Version update (4.4.37 -> 4.4.41) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#833 - avoid sporadic out-of-memory during build (on Fedora) - 4.4.41 - merge gh#openSUSE/libstorage-ng#832 - added BlkDevice::can_be_removed() - 4.4.40 - merge gh#openSUSE/libstorage-ng#831 - added non-const Encryption::get_blk_device() - 4.4.39 - merge gh#openSUSE/libstorage-ng#830 - added get_encryption_type_name() - coding style - 4.4.38 ==== libupnp ==== Version update (1.14.10 -> 1.14.12) Subpackages: libixml11 libupnp17 - Update to release 1.4.12 * Changes to build system only; nothing user-visible. ==== libva ==== Subpackages: libva-drm2 libva-x11-2 libva2 - fixed JIRA number in previous changelog ==== libva-gl ==== Subpackages: libva-glx2 libva-wayland2 - fixed JIRA number in previous changelog ==== mailutils ==== Version update (3.8 -> 3.13) Subpackages: libmailutils5 - Update to mailutils 3.13 * Fix boo#1190694: mail processing escape sequences in bodies non-interactively * Improved mailbox locking * Changes in the 'locking' configuration statement. * mail utility + Fix semantics of mail sending and saving commands + Fix the -F option + Improve POSIX mailx compatible mode + Compose escapes are recognized only in interactive mode * Bugfixes + QP decoder: Accept soft line breaks (RFC 2045, 6.7, page 19). + Fix stream reference policy in filter streams. + Various bugfixes in IMAP client. + Fix handling of single-path MIME messages. * Fix expunging of mailboxes in mbox and dotmail format in a read-only directory * inc: when updating the "unseen" sequence, translate message numbers to uids * Fix default port selection in SMTP mailer * Fix building the mda utilities with mailbox quotas off * Fix bugs in the testsuite * Support for the traditional mbox format rewritten from scratch * Fix incorrect message flags in maildir * Fix persistency of UIDs for all mailbox formats * Fix message ordering in maildir. * Fix parsing of IMAP ranges * mail + Changed syntax for addressing MIME message part + write command * New utility: decodemail * readmsg + MIME messages are decoded on output + Improve searches * imap4d: implement TLS in inetd mode * imap client code + Fix handling of [TRYCREATE] and similar imap responses * sieve: quoted strings may span several lines * Dropped support for Python 2.x * Rewrite the AM_GNU_MAILUTILS macro to avoid using mailutils-config * mda: restore the message-id-header configuration statement * Changes to the libmailutils library + New functions for MIME parsing and mime object creation: * Bugfixes + Fix intermixed I/O in buffered streams + Fix handling of INTR in the "mail" utility shell + Fix compilation without libunistring + Fix operation of associative arrays in case-insensitive mode + Fix memory leaks + Fix compilation with gcc 10 + smtp mailer: fix multiple open/close on the same mailer + Fix list sort function * dotmail: fix mailbox opening in append-only mode * Fix mda testsuite * Remove deprecated ioctls * mail: fix composing MIME messages * Fix build on FreeBSD * Fix detection of Kerberos libraries * Fix build with Python 3.8 (bug #57318) - Remove patche now upstream * python38-compat.patch * silent-common-mu_tcp_wrapper_daemon.patch - Port patch mailutils-3.5-guile-2.0.patch ==== mhvtl ==== Version update (1.63_release+759.35ddb48e5262_k5.14.6_1 -> 1.63_release+759.35ddb48e5262_k5.14.6_2) - Fix failing OBS build, since it doesn't like empty DB files being installed as part of the package. The DB-creation script was copied from the Makefile (under "make install") to a SPEC-file "%post" script. ==== monitoring-plugins ==== Subpackages: monitoring-plugins-breeze monitoring-plugins-by_ssh monitoring-plugins-cluster monitoring-plugins-common monitoring-plugins-cups monitoring-plugins-dhcp monitoring-plugins-dig monitoring-plugins-disk monitoring-plugins-disk_smb monitoring-plugins-dns monitoring-plugins-dummy monitoring-plugins-file_age monitoring-plugins-flexlm monitoring-plugins-http monitoring-plugins-icmp monitoring-plugins-ide_smart monitoring-plugins-ifoperstatus monitoring-plugins-ifstatus monitoring-plugins-ircd monitoring-plugins-load monitoring-plugins-log monitoring-plugins-mailq monitoring-plugins-mrtg monitoring-plugins-mrtgtraf monitoring-plugins-nagios monitoring-plugins-nt monitoring-plugins-ntp_peer monitoring-plugins-ntp_time monitoring-plugins-nwstat monitoring-plugins-oracle monitoring-plugins-overcr monitoring-plugins-ping monitoring-plugins-procs monitoring-plugins-real monitoring-plugins-rpc monitoring-plugins-sensors monitoring-plugins-smtp monitoring-plugins-ssh monitoring-plugins -swap monitoring-plugins-tcp monitoring-plugins-time monitoring-plugins-ups monitoring-plugins-users monitoring-plugins-wave - Remove unneeded build requirement on "syslog" ==== mozjs78 ==== Version update (78.13.0 -> 78.14.0) - Update to version 78.14.0esr. ==== nmap ==== - Do not build with python2 support for SLE15-SP4, bsc#1190997 ==== open-iscsi ==== Subpackages: iscsiuio libopeniscsiusr0_2_0 - Update to latest from upstream, fixing: * Moving the executables from /sbin to /usr/sbin (bsc#1191054) * Remove default dependencies from iscsi-init.service (bsc#1187190) ==== openSUSE-build-key ==== - Only add openSUSE Backports key when building for a Leap system (sle_version > 0). Tumbleweed does not use Backports. ==== openafs ==== Subpackages: openafs-client openafs-kmp-64kb openafs-kmp-default - Fix %ifarch for 32-bit arm ==== opie ==== - use %_pam_moduledir (bsc#1191045) ==== perl-Convert-ASN1 ==== Version update (0.31 -> 0.33) - Fix perl-Convert-ASN1-0.31-test.patch and add -p0 - updated to 0.33 see /usr/share/doc/packages/perl-Convert-ASN1/ChangeLog 0.33 -- Wed Sep 22 19:49:53 ADT 2021 * Official CPAN release of 0.33 0.32 -- Tue Sep 21 18:45:20 ADT 2021 * examples/x509decode: parameters are optional for AlgorithmIdentifier when using [ec]dsa algorithms * t/19issue14.t: issue with warnings * Fixes #44 Redundant argument in printf warning * examples/x509decode: fix prototype error * examples/ldap: fix asn1_dump not working ==== perl-Mail-AuthenticationResults ==== Version update (2.20210112 -> 2.20210915) - updated to 2.20210915 see /usr/share/doc/packages/perl-Mail-AuthenticationResults/Changes 2.20210915 2021-09-15 11:10:20+00:00 UTC - Fix for older versions of Perl 2.20210914 2021-09-14 05:17:31+00:00 UTC - New method to copy children from 1 object to another ==== perl-ldap ==== - fix build with perl 5.34.0 ==== perl-libwww-perl ==== Version update (6.56 -> 6.57) - updated to 6.57 see /usr/share/doc/packages/perl-libwww-perl/Changes 6.57 2021-09-20 20:20:14Z - Update docs for protocols_allowed and protocols forbidden (GH#386) (Olaf Alders) ==== portaudio ==== Version update (190600_20161030 -> 190700_20210406) - Correct download source URL - Update to version v190700_20210406 - removed patch `0001-Merge-branch-ticket_275_pass_void-into-master.patch` as it is included in this release. ==== publicsuffix ==== Version update (20210908 -> 20210928) - Update to version 20210928: * Remove Clic2000 entries (#1434) * ondigitalocean.app: update comment for DigitalOcean App Platform (#1431) * add prequalifyme.today to private section (#1311) * util: gTLD data autopull updates for 2021-09-28T15:12:52 UTC (#1438) * Add *.usercontent.goog (#1417) * Add digitaloceanspaces.com & regional subdomains (#1421) * Update public_suffix_list.dat (#1426) - Update to version 20210909: * Adding new .ar SLDs and official nic.ar URL correction (#1414) ==== python ==== - Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091 (CVE-2019-20907, bpo#39017) avoiding possible infinite loop in specifically crafted tarball. Add recursion.tar as a testing tarball for the patch. - Provide the newest setuptools wheel (bsc#1176262, CVE-2019-20916) in their correct form (bsc#1180686). - Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211 (CVE-2020-26116, bpo#39603) no longer allowing special characters in the method parameter of HTTPConnection.putrequest in httplib, stopping injection of headers. Such characters now raise ValueError. ==== python-base ==== Subpackages: libpython2_7-1_0 python-xml - Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091 (CVE-2019-20907, bpo#39017) avoiding possible infinite loop in specifically crafted tarball. Add recursion.tar as a testing tarball for the patch. - Provide the newest setuptools wheel (bsc#1176262, CVE-2019-20916) in their correct form (bsc#1180686). - Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211 (CVE-2020-26116, bpo#39603) no longer allowing special characters in the method parameter of HTTPConnection.putrequest in httplib, stopping injection of headers. Such characters now raise ValueError. ==== python-evtx ==== Version update (0.6.1 -> 0.7.4) - Update to 0.7.4 * relax dependencies for most users #72 * show records by date filter * handling of invalid dates #43 * handling of malformed evtx files * pin dependencies due to py2 deprecation #67 * testing on pytest 4 - Drop pytest4.patch merged upstream - Fix rpmlint alternative link errors - Fix missing python2-xml requirement ==== python-jmespath ==== - Add patch remove-nose.patch: * Remove use of nose in the tests. ==== python-requests-oauthlib ==== - Use pytest to run the testsuite. ==== python-tabulate ==== - Remove unneeded BuildRequires on nose. ==== rav1e ==== - Replace rust-packaging with cargo-packaging ==== rtl8812au ==== Version update (5.9.3.2+git20210427.6ef5d8f_k5.14.6_1 -> 5.9.3.2+git20210427.6ef5d8f_k5.14.6_2) - Exclude the s390x Architecture ==== salt ==== Version update (3002.2 -> 3003.3) Subpackages: python3-salt salt-master salt-minion salt-transactional-update - Do not break master_tops for minion with version lower to 3003 - Added: * do-not-break-master_tops-for-minion-with-version-low.patch - Support querying for JSON data in external sql pillar - Added: * 3003.3-postgresql-json-support-in-pillar-423.patch - Update to Salt release version 3003.3 - See release notes: https://docs.saltstack.com/en/latest/topics/releases/3003.3.html - Added: * allow-vendor-change-option-with-zypper.patch * support-transactional-systems-microos.patch * virt-enhancements.patch - Modified: * adds-explicit-type-cast-for-port.patch * use-adler32-algorithm-to-compute-string-checksums.patch * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch * fixes-56144-to-enable-hotadd-profile-support.patch * include-aliases-in-the-fqdns-grains.patch * implementation-of-held-unheld-functions-for-state-pk.patch * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch * debian-info_installed-compatibility-50453.patch * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch * update-target-fix-for-salt-ssh-to-process-targets-li.patch * x509-fixes-111.patch * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch * restore-default-behaviour-of-pkg-list-return.patch * adding-preliminary-support-for-rocky.-59682-391.patch * add-astra-linux-common-edition-to-the-os-family-list.patch * templates-move-the-globals-up-to-the-environment-jin.patch * fix-bsc-1065792.patch * add-migrated-state-and-gpg-key-management-functions-.patch * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch * improvements-on-ansiblegate-module-354.patch * add-custom-suse-capabilities-as-grains.patch * return-the-expected-powerpc-os-arch-bsc-1117995.patch * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch * enhance-openscap-module-add-xccdf_eval-call-386.patch * implementation-of-suse_ip-execution-module-bsc-10999.patch * add-missing-aarch64-to-rpm-package-architectures-405.patch * async-batch-implementation.patch * temporary-fix-extend-the-whitelist-of-allowed-comman.patch * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch * figure-out-python-interpreter-to-use-inside-containe.patch * better-handling-of-bad-public-keys-from-minions-bsc-.patch * early-feature-support-config.patch * do-not-monkey-patch-yaml-bsc-1177474.patch - Removed: * fix-memory-leak-produced-by-batch-async-find_jobs-me.patch * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch * fix-for-log-checking-in-x509-test.patch * do-not-make-ansiblegate-to-crash-on-python3-minions.patch * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch * remove-msgpack-1.0.0-requirement-in-the-installed-me.patch * move-server_id-deprecation-warning-to-reduce-log-spa.patch * re-adding-function-to-test-for-root.patch * make-profiles-a-package.patch * handle-master-tops-data-when-states-are-applied-by-t.patch * fix-unit-tests-for-batch-async-after-refactor.patch * prevent-test_mod_del_repo_multiline_values-to-fail.patch * prevent-import-errors-when-running-test_btrfs-unit-t.patch * fix-failing-unit-tests-for-batch-async.patch * remove-unnecessary-yield-causing-badyielderror-bsc-1.patch * virt-use-dev-kvm-to-detect-kvm-383.patch * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch * add-docker-logout-237.patch * drop-wrong-mock-from-chroot-unit-test.patch * fix-async-batch-multiple-done-events.patch * fix-unit-test-for-grains-core.patch * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch * pkgrepo-support-python-2.7-function-call-295.patch * opensuse-3000-virt-defined-states-222.patch * open-suse-3002.2-xen-grub-316.patch * add-patch-support-for-allow-vendor-change-option-wit.patch * fix-the-removed-six.itermitems-and-six.-_type-262.patch * fix-aptpkg-systemd-call-bsc-1143301.patch * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch * regression-fix-of-salt-ssh-on-processing-targets-353.patch * do-not-break-repo-files-with-multiple-line-values-on.patch * 3002-set-distro-requirement-to-oldest-supported-vers.patch * integration-of-msi-authentication-with-azurearm-clou.patch * zypperpkg-filter-patterns-that-start-with-dot-244.patch * fix-for-temp-folder-definition-in-loader-unit-test.patch * fix-novendorchange-option-284.patch * backport-virt-patches-from-3001-256.patch * allow-passing-kwargs-to-pkg.list_downloaded-bsc-1140.patch * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch * virt-uefi-fix-backport-312.patch * add-all_versions-parameter-to-include-all-installed-.patch * add-pkg.services_need_restart-302.patch * add-batch_presence_ping_timeout-and-batch_presence_p.patch * allow-vendor-change-option-with-zypper-313.patch * avoid-traceback-when-http.query-request-cannot-be-pe.patch * changed-imports-to-vendored-tornado.patch * fix-issue-parsing-errors-in-ansiblegate-state-module.patch * sanitize-grains-loaded-from-roster_grains.json.patch * handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch * add-multi-file-support-and-globbing-to-the-filetree-.patch * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch * backport-thread.is_alive-fix-390.patch * get-os_arch-also-without-rpm-package-installed.patch * python3.8-compatibility-pr-s-235.patch * fixed-bug-lvm-has-no-parttion-type.-the-scipt-later-.patch * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch * xfs-do-not-fails-if-type-is-not-present.patch * grains-master-can-read-grains.patch * invalidate-file-list-cache-when-cache-file-modified-.patch * move-vendor-change-logic-to-zypper-class-355.patch * implement-network.fqdns-module-function-bsc-1134860-.patch * opensuse-3000.2-virt-backports-236-257.patch * prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch * batch_async-avoid-using-fnmatch-to-match-event-217.patch * provide-the-missing-features-required-for-yomi-yet-o.patch * fix-__mount_device-wrapper-254.patch * fix-ipv6-scope-bsc-1108557.patch * fix-failing-unit-tests-for-systemd.patch * use-current-ioloop-for-the-localclient-instance-of-b.patch * revert-add-patch-support-for-allow-vendor-change-opt.patch * remove-deprecated-warning-that-breaks-miniion-execut.patch * prevent-systemd-run-description-issue-when-running-a.patch * fix-grains.test_core-unit-test-277.patch * prevent-command-injection-in-the-snapper-module-bsc-.patch * backport-of-upstream-pr59492-to-3002.2-404.patch * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch * reintroducing-reverted-changes.patch * add-cpe_name-for-osversion-grain-parsing-u-49946.patch * add-hold-unhold-functions.patch * virt._get_domain-don-t-raise-an-exception-if-there-i.patch * fix-error-handling-in-openscap-module-bsc-1188647-40.patch * apply-patch-from-upstream-to-support-python-3.8.patch * remove-deprecated-usage-of-no_mock-and-no_mock_reaso.patch * add-supportconfig-module-for-remote-calls-and-saltss.patch * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch * fall-back-to-pymysql.patch * fixes-cve-2018-15750-cve-2018-15751.patch * do-not-crash-when-there-are-ipv6-established-connect.patch * improve-batch_async-to-release-consumed-memory-bsc-1.patch * support-config-non-root-permission-issues-fixes-u-50.patch * transactional_update-detect-recursion-in-the-executo.patch * open-suse-3002.2-virt-network-311.patch * option-to-en-disable-force-refresh-in-zypper-215.patch * do-noop-for-services-states-when-running-systemd-in-.patch * exclude-the-full-path-of-a-download-url-to-prevent-i.patch * fix-a-wrong-rebase-in-test_core.py-180.patch * add-new-custom-suse-capability-for-saltutil-state-mo.patch * opensuse-3000-libvirt-engine-fixes-251.patch * accumulated-changes-from-yomi-167.patch * fix-async-batch-race-conditions.patch * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch * loop-fix-variable-names-for-until_no_eval.patch * batch-async-catch-exceptions-and-safety-unregister-a.patch * grains.extra-support-old-non-intel-kernels-bsc-11806.patch * backport-a-few-virt-prs-272.patch * fix-git_pillar-merging-across-multiple-__env__-repos.patch * drop-wrong-virt-capabilities-code-after-rebasing-pat.patch * virt-adding-kernel-boot-parameters-to-libvirt-xml-55.patch * async-batch-implementation-fix-320.patch * support-for-btrfs-and-xfs-in-parted-and-mkfs.patch * support-transactional-systems-microos-271.patch * strip-trailing-from-repo.uri-when-comparing-repos-in.patch * opensuse-3000.3-spacewalk-runner-parse-command-250.patch * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch * add-virt.all_capabilities.patch * ansiblegate-take-care-of-failed-skipped-and-unreacha.patch * virt-pass-emulator-when-getting-domain-capabilities-.patch * fixing-streamclosed-issue.patch * fix-for-some-cves-bsc1181550.patch * transactional_update-unify-with-chroot.call.patch * do-not-raise-streamclosederror-traceback-but-only-lo.patch * fix-batch_async-obsolete-test.patch * fix-zypper-pkg.list_pkgs-expectation-and-dpkg-mockin.patch * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch * accumulated-changes-required-for-yomi-165.patch * fix-virt.update-with-cpu-defined-263.patch * remove-vendored-backports-abc-from-requirements.patch * open-suse-3002.2-bigvm-310.patch * xen-disk-fixes-264.patch * virt.network_update-handle-missing-ipv4-netmask-attr.patch * add-saltssh-multi-version-support-across-python-inte.patch ==== selinux-policy ==== Subpackages: selinux-policy-targeted - Fix auditd service start with systemd hardening directives (boo#1190918) * add fix_auditd.patch ==== systemd ==== Subpackages: libsystemd0 libudev-devel libudev1 systemd-container systemd-doc systemd-sysvinit udev - Work around rpmlint complaining about /var/log/journal shipped with setgid bit This setgid bit has been already reviewed in the past and wasn't a concern. However we want the mode/ownership adjusted by tmpfiles and avoid the duplication of these info in rpm. - Don't ghost own any directories created dynamically by tmpfiles Again rpmlint complains but it doesn't seem to make sense to try to track all paths (including theirs perms, ownerships...) created dynamically. And 'rpm -V' is likely to report issues later with these paths anyway. This effectively partially reverts the two previous commits. - Make sure the build process won't create /var/log/journal - /var/log/journal/remote is owned by systemd-journal-remote - systemd.spec: fix a bunch of rpmlint errors/warnings - Drop systemd-logger This sub package was introduced in order to configure persistent journal and also to make sure that another syslog provider (such as rsyslog) couldn't be installed at the same time: each syslog provider conflicts with each others. However this mechanism didn't work since uninstalling systemd-logger wasn't magically turning off persistent logging because /var/log/journal is likely to be populated hence not removed. Moreover using a subpackage to configure the mode of journald was overkill and the usual ways (main conf file or drop-ins) should be preferred. - Import commit 7a5801342fe2f53e5c2a8578d6db132c0eca2d97 8d65ec4a66 test: wc is needed by test/units/testsuite-50.sh 1527bcc5dd test: make the installation of the debug tools optional in the image f4e6bf0b37 journalctl: never fail at flushing when the flushed flag is set (bsc#1188588) - Update the dependencies of the testsuite package The debug tools are optional thus no more required. OTOH strip(1) is needed when building the test image and nc(1) is needed by some tests. - Drop git internal files from the testsuite sub-package - Adjust pam macros ==== sysvinit ==== Version update (2.99 -> 3.00) - Update to sysvinit 3.00: * Better device detection of bootlogd ==== tdb ==== Version update (1.4.3 -> 1.4.4) Subpackages: libtdb1 python3-tdb - Update to version 1.4.4 + Fix a memory leak on error + python: remove all 'from __future__ import print_function' + Fix CID 1471761 String not null terminated + Use hex_byte() in parse_hex() + Use hex_byte() in read_data() + fix studio compiler build + Fix some signed/unsigned comparisons + also use __has_attribute macro to check for attribute support + Fix clang 9 missing-field-initializer warnings + pytdb tests: add test for storev() + pytdb: add python binding for storev() + tdbtorture: Use ARRAY_DEL_ELEMENT() + py3: Remove #define PyInt_FromLong PyLong_FromLong + py3: Remove #define PyInt_AsLong PyLong_AsLong + py3: Remove #define PyInt_Check PyLong_Check + tdb: Align integer types - Drop obsolete patch ignore-tdb1-run-transaction-expand.diff - Fix header file using undefined function visibility macro; Add patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch; (bso#14762); ==== tevent ==== Version update (0.10.2 -> 0.11.0) Subpackages: libtevent0 python3-tevent - Update to version 0.11.0 + Other minor build fixes; (bso#14526); + Add custom tag to events + Add event trace api ==== xrdb ==== - Remove fallback to /lib/cpp, it's the same package as /usr/bin/cpp anyway (boo#1191060). ==== xwayland ==== - U_glamor-Fix-handling-of-1-bit-pixmaps.patch * glamor: Fix handling of 1-bit pixmaps; fixes e.g. issues with gimp on Wayland (which needs Xwayland) (boo#1189310) ==== yast2-alternatives ==== Version update (4.3.1 -> 4.4.0) - 4.4.0 (bsc#1185510) ==== yast2-installation ==== Version update (4.4.18 -> 4.4.19) - Release the sources and close the libzypp cache to allow cleanly unmounting /mnt/var/cache/zypp directory (bsc#1189793) - 4.4.19 ==== yast2-slp-server ==== Version update (4.3.0 -> 4.4.0) - 4.4.0 (bsc#1185510) ==== yast2-storage-ng ==== Version update (4.4.7 -> 4.4.8) - Recommend to install libyui-qt-graph package (bsc#1191109) in order to offer the View/Device Graphs menu option. - 4.4.8 ==== zimg ==== Version update (3.0.1 -> 3.0.3) - Update to 3.0.3: * depth: fix out-of-bounds read in SSE2/AVX2 error diffusion (introduced in 2.5) * colorspace: revert SMPTE 240M behavior change (introduced in 3.0.2) * Changes in version 3.0.2: * api: default to ZIMG_CPU_AUTO when graph params are null * colorspace: fix incorrect SMPTE 240M transfer function * colorspace: fix underflow in AVX-512 ST.2084 transfer functions * graph: fix conversion from fullrange grey to RGB * arm: fix data alignment * x86: optimizations for AMD Zen3 processors - Add zimg-s390x-unit-tests.patch: fix unit tests on big endian systems.

1 0