Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&version=Tumbleweed&build=20211125 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.0.10 -> 7.1.0.14) Mesa (21.2.5 -> 21.3.0) Mesa-drivers (21.2.5 -> 21.3.0) PackageKit apache2 apache2-manual apache2-mod_php7 (7.4.25 -> 7.4.26) apache2-prefork apache2-utils at autoyast2 (4.4.19 -> 4.4.22) cheese (41.0 -> 41.1) container-selinux (2.164.2 -> 2.171.0) crash (7.2.9_k5.14.14_3 -> 7.3.0_k5.15.3_1) curl (7.79.1 -> 7.80.0) dnsmasq dracut (055+suse.129.g7d8c3ce3 -> 055+suse.142.g7d8c3ce3) drbd (9.0.30~1+git.10bee2d5 -> 9.0.30~1+git.8e9c0812) ell (0.45 -> 0.46) emacs evince (41.2 -> 41.3) firewalld (1.0.1 -> 1.0.2) fltk (1.3.5 -> 1.3.7) fwupd (1.6.2 -> 1.6.4) gawk git (2.33.1 -> 2.34.0) glibc gmp gnome-music gnome-screenshot (40.0 -> 41.0) grub2 gtk-vnc (1.2.0 -> 1.3.0) haveged health-checker (1.5 -> 1.6) iproute2 (5.14 -> 5.15) iptables kernel-firmware (20211027 -> 20211115) kernel-source (5.14.14 -> 5.15.3) lftp libX11 libblockdev (2.25 -> 2.26) libfprint (1.92.1 -> 1.94.2) libglvnd libhandy (1.4.0 -> 1.5.0) libnftnl (1.2.0 -> 1.2.1) libqb (2.0.3+20210303.404adbc -> 2.0.4+20211112.a2691b9) libstorage-ng (4.4.56 -> 4.4.57) libvirt libwacom llvm13 makedumpfile (1.6.9 -> 1.7.0) mariadb mariadb-connector-c (3.2.4 -> 3.2.5) mdadm monitoring-plugins mutter ncurses (6.3.20211021 -> 6.3.20211115) netcat-openbsd nodejs16 (16.6.2 -> 16.13.0) pam patterns-base pcre2 (10.38 -> 10.39) perl-Date-Manip (6.85 -> 6.86) perl-HTTP-Message (6.34 -> 6.35) pfstools phonon4qt5 php7 (7.4.25 -> 7.4.26) polkit-default-privs power-profiles-daemon pulseaudio python-Jinja2 (3.0.2 -> 3.0.3) python-aiohttp python-aiosmtpd python-argon2-cffi (20.1.0 -> 21.1.0) python-falcon (2.0.0 -> 3.0.1) python-filetype (1.0.7 -> 1.0.8) python-flufl.lock (5.0.4 -> 6.0) python-gevent python-gunicorn python-importlib-resources (5.2.2 -> 5.4.0) python-mailman (3.3.4 -> 3.3.5) python-numpy python-packaging (20.9 -> 21.2) python-reportlab (3.5.59 -> 3.6.2) python-requests (2.25.1 -> 2.26.0) python-urwid python-xarray (0.20.0 -> 0.20.1) quota raspberrypi-firmware (2021.09.30 -> 2021.11.16) raspberrypi-firmware-config (2021.09.30 -> 2021.11.16) rav1e (0.5.0 -> 0.5.0+0) redis rng-tools rsync rtkit rubygem-cri salt sendmail sensors shadow shared-mime-info spacenavd spamassassin sshfs systemd (249.5 -> 249.7) systemd-rpm-macros (13 -> 14) texlive tigervnc tracker transactional-update (3.6.1 -> 3.6.2) unixODBC util-linux (2.36.2 -> 2.37.2) util-linux-systemd (2.36.2 -> 2.37.2) vim (8.2.3587 -> 8.2.3640) wayland xdg-desktop-portal-gtk xdm xen xf86-input-libinput xfce4-whiskermenu-plugin (2.6.2 -> 2.7.0) xfsprogs (5.13.0 -> 5.14.0) xorg-x11-server yast2 (4.4.20 -> 4.4.22) yast2-bootloader (4.4.7 -> 4.4.8) yast2-installation (4.4.21 -> 4.4.22) yast2-packager (4.4.12 -> 4.4.14) yast2-schema (4.4.5 -> 4.4.6) yast2-storage-ng (4.4.13 -> 4.4.14) yast2-trans (84.87.20211108.3133c3ccde -> 84.87.20211121.6ee9157350) yast2-update (4.4.3 -> 4.4.4) === Details === ==== ImageMagick ==== Version update (7.1.0.10 -> 7.1.0.14) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.0.14 * Support '#' modifier to aspect ratio geometry (e.g., 3:2#). * The profile of a PSD file will no longer be copied to all the images, only the first returned image will contain the profile. To re-enable the old behavior add -define psd:replicate-profile=true. - update to 7.1.0.13: * Fix stack overflow when parsing malicious ps image file * Fix connected component abort trap * Fix possible unitialized values * Fix stack overflow when parsing malicious tiff image file ==== Mesa ==== Version update (21.2.5 -> 21.3.0) Subpackages: Mesa-dri-devel Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - n_buildfix-21.3.0.patch * fixes Mesa-drivers build - update to 21.3.0 * Panfrost is now officially GLES 3.1 conformant * RADV has (experimental) ray tracing support * Iris gained threaded shader compilation * Zink has seen an enormous amount of work, and now supports GLES 3.2 * Lavapipe has a bunch of new extensions, and now supports Vulkan 1.2 * LLVMpipe got 2-3 times faster for 2D workloads, and gained support for the compatibility profile on GL 4.5 * VA-API gained support for AV1 videos * EGL now works on Windows * Wayland got a workaround for games making bad assumption (alpha means transparency? who could have known) * VK_EXT_color_write_enable on lavapipe * GL_ARB_texture_filter_anisotropic in llvmpipe * Anisotropic texture filtering in lavapipe * VK_EXT_shader_atomic_float2 on Intel and RADV. * VK_EXT_vertex_input_dynamic_state on RADV. * VK_KHR_timeline_semaphore on lavapipe * VK_EXT_external_memory_host on lavapipe * GL_AMD_pinned_memory on llvmpipe * GL 4.5 compatibility on llvmpipe * VK_EXT_primitive_topology_list_restart on RADV and lavapipe. * ES 3.2 on zink * VK_KHR_depth_stencil_resolve on lavapipe * VK_KHR_shader_integer_dot_product on RADV. * OpenGL FP16 support on llvmpipe * VK_KHR_shader_float16_int8 on lavapipe * VK_KHR_shader_subgroup_extended_types on lavapipe * VK_KHR_spirv_1_4 on lavapipe * Experimental raytracing support on RADV * VK_KHR_synchronization2 on Intel * NGG shader based culling is now enabled by default on GFX10.3 on RADV. * VK_KHR_maintenance4 on RADV * VK_KHR_format_feature_flags2 on RADV. * EGL_EXT_present_opaque on wayland ==== Mesa-drivers ==== Version update (21.2.5 -> 21.3.0) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libvdpau_r300 libvdpau_r600 libvdpau_radeonsi libvulkan_radeon - n_buildfix-21.3.0.patch * fixes Mesa-drivers build - update to 21.3.0 * Panfrost is now officially GLES 3.1 conformant * RADV has (experimental) ray tracing support * Iris gained threaded shader compilation * Zink has seen an enormous amount of work, and now supports GLES 3.2 * Lavapipe has a bunch of new extensions, and now supports Vulkan 1.2 * LLVMpipe got 2-3 times faster for 2D workloads, and gained support for the compatibility profile on GL 4.5 * VA-API gained support for AV1 videos * EGL now works on Windows * Wayland got a workaround for games making bad assumption (alpha means transparency? who could have known) * VK_EXT_color_write_enable on lavapipe * GL_ARB_texture_filter_anisotropic in llvmpipe * Anisotropic texture filtering in lavapipe * VK_EXT_shader_atomic_float2 on Intel and RADV. * VK_EXT_vertex_input_dynamic_state on RADV. * VK_KHR_timeline_semaphore on lavapipe * VK_EXT_external_memory_host on lavapipe * GL_AMD_pinned_memory on llvmpipe * GL 4.5 compatibility on llvmpipe * VK_EXT_primitive_topology_list_restart on RADV and lavapipe. * ES 3.2 on zink * VK_KHR_depth_stencil_resolve on lavapipe * VK_KHR_shader_integer_dot_product on RADV. * OpenGL FP16 support on llvmpipe * VK_KHR_shader_float16_int8 on lavapipe * VK_KHR_shader_subgroup_extended_types on lavapipe * VK_KHR_spirv_1_4 on lavapipe * Experimental raytracing support on RADV * VK_KHR_synchronization2 on Intel * NGG shader based culling is now enabled by default on GFX10.3 on RADV. * VK_KHR_maintenance4 on RADV * VK_KHR_format_feature_flags2 on RADV. * EGL_EXT_present_opaque on wayland ==== PackageKit ==== Subpackages: PackageKit-backend-zypp PackageKit-gstreamer-plugin PackageKit-gtk3-module libpackagekit-glib2-18 typelib-1_0-PackageKitGlib-1_0 - Apply all patches unconditonally: PackageKit-zypp-c++17.patch is merged in upstream git and thus does not justify to be conditionally applied. - Switching back to autosetup, as this works without conditional patches. - Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM version does not support that syntax yet. ==== apache2 ==== - add section for the 'event' MPM to apache2-server-tuning.conf ==== apache2-manual ==== - add section for the 'event' MPM to apache2-server-tuning.conf ==== apache2-mod_php7 ==== Version update (7.4.25 -> 7.4.26) - updated to 7.4.26: This is a security release (CVE-2021-21707) which also contains several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.26 ==== apache2-prefork ==== - add section for the 'event' MPM to apache2-server-tuning.conf ==== apache2-utils ==== - add section for the 'event' MPM to apache2-server-tuning.conf ==== at ==== - Tumbleweed is not affected by the following SLE issues: * jsc#SLE-17611 * bsc#1181576 ==== autoyast2 ==== Version update (4.4.19 -> 4.4.22) Subpackages: autoyast2-installation - Do not process the <add-on/> section during the 2nd stage (bsc#1192185). - 4.4.22 - Add support for detecting EFI boot during autoinstallation (jsc#SLE-18819) - 4.4.21 - bsc#1192626: - Registration takes place always at the same point, no matter which installation medium is being used. - Adapt to the product specification API. - Stop AutoYaST installation when registration failed on online medium (bsc#1188211, Josef Reidinger <jreidinger@suse.com>). - 4.4.20 ==== cheese ==== Version update (41.0 -> 41.1) Subpackages: libcheese-common libcheese-gtk25 libcheese8 - Update to version 41.1: + meson: avoid positional arguments in merge_file. + tests: Compile gsettings schemas for use in build tests. + Update DOAP with Gitlab account information. + introspection: Pin the API version for now. + Updated translations. - Rename typelib-1_0-Cheese-41_0 subpackage to typelib-1_0-Cheese-3_0 again, following upstreams revert. Do this via 2 new defines, typelib_major 3 and typelib_minor 0. - Use ldconfig_scriptlets for post(un) handling. - Drop removal of la files, not needed with meson buildsystem. - Drop libcheese-gtk18 Obsoletes, it was added 10 years ago, we can probably expect everyone to have updated by now. - Stop packaging help files as docs, silence rpmlint. ==== container-selinux ==== Version update (2.164.2 -> 2.171.0) - Update to version 2.171.0 * Define kubernetes_file_t as a config_type * Allow containers to be socket activated by user domains and by systemd. * Allow iptables to use fifo files of a container runtime * Allow container_runtime create all tmpfs content as container_runtime_tmpfs_t * Allow containers to create lnk_file on tmpfs_t directories. ==== crash ==== Version update (7.2.9_k5.14.14_3 -> 7.3.0_k5.15.3_1) - Update to 7.3.0 (jsc#SLE-17360). - Refresh * eppic-switch-to-system-lib.patch - Remove upstreamed patches - crash-xen-increase-__physical_mask_shift_xen-to-52.patch - crash-arm64-update-mapping-symbol-filter-in-arm64_verify_s.patch - crash-Fix-segmentation-fault-when-ikconfig-passed-nonstand.patch - crash-printk-add-support-for-lockless-ringbuffer.patch - crash-printk-use-committed-finalized-state-values.patch - crash-x86_64-VC-exception-stack-support.patch - Refresh to upstream version * crash-xen-pvops.patch * crash-handle-by-kernel-task_struct-state-member-changes.patch => 0006-Handle-task_struct-state-member-changes-for-kernels-.patch - Removed trace extension moved to different project upstream. - Enable Linux 5.14 and pull fixes since 7.3.0 + 0001-Fix-for-kmem-s-S-option-on-Linux-5.7-and-later-kerne.patch + 0002-memory-Add-support-for-SECTION_TAINT_ZONE_DEVICE-fla.patch + 0003-memory-Fix-for-kmem-n-option-to-display-NID-correctl.patch + 0004-defs.h-Fix-the-value-of-TIF_SIGPENDING-macro.patch + 0005-Fix-waitq-command-for-Linux-4.13-and-later-kernels.patch + 0007-arm64-rename-ARM64_PAGE_OFFSET_ACTUAL-to-ARM64_FLIP_.patch + 0008-arm64-assign-page_offset-with-VA_BITS-kernel-configu.patch + 0009-arm64-use-dedicated-bits-to-record-the-VA-space-layo.patch + 0010-arm64-implement-switchable-PTOV-VTOP-for-kernels-5.1.patch + 0011-diskdump-Fail-readmem-early-if-dump-is-incomplete.patch + 0012-netdump-Permit-zero_excluded-for-incomplete-ELF-dump.patch + 0013-diskdump-Print-total-number-of-dumpable-pages.patch + 0014-diskdump-Introduce-read_pd.patch + 0015-x86_64-Fix-check-for-__per_cpu_offset-initialization.patch + 0016-arm64-Get-CPU-registers-from-ELF-notes-even-without-.patch + 0017-ppc64-Add-MMU-type-info-in-machdep-command.patch + 0018-diskdump-Add-support-for-reading-dumpfiles-compresse.patch + 0019-Add-kernel-version-dependent-check-for-getting-lengt.patch + 0020-arm64-Use-VA_BITS-for-page_offset-calculation.patch - enable zstd support + add crash-enable-zstd-support.patch ==== curl ==== Version update (7.79.1 -> 7.80.0) Subpackages: libcurl4 - Update to 7.80.0: * Changes: - CURLOPT_MAXLIFETIME_CONN: maximum allowed lifetime for conn reuse - CURLOPT_PREREQFUNCTION: add new callback - libssh2: add SHA256 fingerprint support - urlapi: add curl_url_strerror() * Bugfixes: - aws-sigv4: make signature work when post data is binary - c-hyper: don't abort CONNECT responses early when auth-in-progress - c-hyper: make CURLOPT_SUPPRESS_CONNECT_HEADERS work - cmake: add CURL_ENABLE_SSL option - cmake: with OpenSSL, define OPENSSL_SUPPRESS_DEPRECATED - configure.ac: replace krb5-config with pkg-config - configure: when hyper is selected, deselect nghttp2 - curl-confopts.m4: remove --enable/disable-hidden-symbols - curl-openssl.m4: modify library order for openssl linking - curl_ntlm_core: use OpenSSL only if DES is available - Curl_updateconninfo: store addresses for QUIC connections too - ftp: make the MKD retry to retry once per directory - http: fix Basic auth with empty name field in URL - http: reject HTTP response codes < 100 - http: remove assert that breaks hyper - http: set content length earlier - imap: display quota information - libssh2: Get the version at runtime if possible - md5: fix compilation with OpenSSL 3.0 API - ngtcp2: advertise h3 as well as h3-29 - ngtcp2: compile with the latest nghttp3 - ngtcp2: use latest QUIC TLS RFC9001 - NTLM: use DES_set_key_unchecked with OpenSSL - openssl: if verifypeer is not requested, skip the CA loading - openssl: with OpenSSL 1.1.0+ a failed RAND_status means goaway - schannel: fix memory leak due to failed SSL connection - sendf: accept zero-length data in Curl_client_write() - sha256: use high-level EVP interface for OpenSSL - sws: fix memory leak on exit - tool_operate: a failed etag save now only fails that transfer - url: check the return value of curl_url() - url: set "k->size" -1 at start of request - urlapi: skip a strlen(), pass in zero - urlapi: URL decode percent-encoded host names - vtls: Fix a memory leak if an SSL session cannot be added to the cache - wolfssl: use for SHA256, MD4, MD5, and setting DES odd parity * Use --with-openssl configure option, --with-ssl is now deprecated ==== dnsmasq ==== - bsc#1192529, dnsmasq-resolv-conf.patch: Fix a segfault when re-reading an empty resolv.conf - Remove "nogroup" membership from the dnsmasq user. - Use systemd-sysusers from 15.3 onwards ==== dracut ==== Version update (055+suse.129.g7d8c3ce3 -> 055+suse.142.g7d8c3ce3) Subpackages: dracut-mkinitrd-deprecated - Update to version 055+suse.142.g7d8c3ce3: * style(dracut.sh): remove redundant script header * fix(dracut.sh): change misspelled variable name * fix(dracut.sh): remove wrong $ in loop sequence * chore(suse): update spec (jsc#SLE-20248) * fix(90kernel-modules): add isp1760 USB controller * fix(iscsi): add support for the new iscsiadm "no-wait" (-W) command (bsc#1187190) * ci(suse.conf.example): optimal compression parameters for zstd (jsc#SLE-20248) * feat(dracut.sh): check if target kernel has zstd support compiled in (jsc#SLE-20248) * ci(suse.conf.example): change default compression option for SUSE (jsc#SLE-20248) ==== drbd ==== Version update (9.0.30~1+git.10bee2d5 -> 9.0.30~1+git.8e9c0812) Subpackages: drbd-kmp-default - bsc#1192929, compat to kernel v5.15 - Remove patch convert_to_blk_alloc_disk.patch (upstream) - Add patch make_block_holder_optional.patch Add patch move_kvmalloc_related_to_slab.patch Add patch polling_to_bio_base.patch Add patch pass_gend_to_blk_queue_update_readahead.patch Add patch move_bdi_from_request_queue_to_gendisk.patch Add patch dax_support.patch Add patch add_disk_error_handle.patch Add patch have_void_drbd_submit_bio.patch Add patch remove_bdgrab.patch ==== ell ==== Version update (0.45 -> 0.46) - update to release 0.46 * Fix issue with DHCP server when OPTION_ROUTER is not configured. * Fix issue with DHCP obtained lease to retrieve it properly. ==== emacs ==== Subpackages: emacs-info emacs-nox emacs-x11 etags - Get rid of the old dbus shell code in the emacs shell script nowadays this should be not needed anymore - Make dbus code in emacs shell script failsafe - Enable the NO_AT_BRIDGE code - Again disable workaround with XLIB_SKIP_ARGB_VISUALS set (boo#1191517) - Correct quoting of anonymous function calls ==== evince ==== Version update (41.2 -> 41.3) Subpackages: evince-plugin-comicsdocument evince-plugin-djvudocument evince-plugin-dvidocument evince-plugin-pdfdocument evince-plugin-tiffdocument evince-plugin-xpsdocument libevdocument3-4 libevview3-3 nautilus-evince typelib-1_0-EvinceDocument-3_0 typelib-1_0-EvinceView-3_0 - Update to version 41.3: + data: Fix metadata. + shell: Remove "Quit" from shortcuts page. + Updated translations. ==== firewalld ==== Version update (1.0.1 -> 1.0.2) Subpackages: firewalld-bash-completion firewalld-zsh-completion python3-firewall - Update to 1.0.2: * fix(firewalld): check capng_apply() return code * fix(nftables): do not log icmp block if inversion * fix(nftables): rich: source address with netmask * fix(fw_config): zone: on rename remove then add * fix(io/functions): check_config against on disk conf * fix(zone): detect same source/interface in zones * docs(policy): fix typos * docs(policies): fix typos ==== fltk ==== Version update (1.3.5 -> 1.3.7) - update to 1.3.7: * see CHANGES * maintenance release with new macOS Big Sur support and some bug fixes. macOS Big Sur is supported on both Intel and the new Apple Silicon (M1) chips. ==== fwupd ==== Version update (1.6.2 -> 1.6.4) Subpackages: libfwupd2 libfwupdplugin2 typelib-1_0-Fwupd-2_0 - Update to version 1.6.4: * Allow overriding the quirks directory at runtime * Fix a regression in flashing the Dell dock * Fix probing the Dell TPM * Show HSiLevel=0 attributes in JSON security output * Abort on invalid SREC files early to avoid a fuzzing timeout * This release adds support for the following hardware: + AVer ATLAS CAM/CAM520 Pro2 + Cayenne/Spyder Synaptics MST + VL819 USB devices - Changes from version 1.6.3: * This release adds the following features: Fall back to the parent if the child does not have a battery level set * This release fixes the following bugs: + Disable the uefi_capsule plugin if Redfish coldplug succeeded + Fix an elantp crash when starting the daemon + Fix compiling with old versions of libxmlb + Fix detection of 8Bitdo wireless usb adapter + Fix the 8bitdo N30 Pro 2 install duration + Fix the modem-manager report that failed to get device after update + Fix writing large redfish firmware files * This release adds support for the following hardware: + Poly Studio P21 + Realtek RTD2141B - Switch service to obs_scm, and recompress to buildtime. - Drop automatic changesgenerate, upstream have perfectly fine and human understandable release notes at https://github.com/fwupd/fwupd/releases that should be copied into .changes. - Add requires to udisks2 for dbxtool update. (bnc#1192344) ==== gawk ==== - disable racy iolint tests boo#1192521 add gawk-5.1.1-Disable-racy-test-in-test-iolint.awk.patch - Add readline-devel to enable readline support in the debugger - Add mpfr-devel to enable support for MPFR mode ==== git ==== Version update (2.33.1 -> 2.34.0) Subpackages: git-core git-cvs git-daemon git-email git-gui git-svn git-web gitk perl-Git - git 2.34.0: * Release notes: https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34... ==== glibc ==== Subpackages: glibc-devel glibc-extra glibc-locale glibc-locale-base nscd - Add ExtraBuildFlags for build flags that cannot be passed to configure. - Add support for livepatches (JSC #SLE-20049). - Generate ipa-clones tarball artifact when livepatching is enabled. - glibc.rpmlintrc: Update for rpmlint2 ==== gmp ==== - Add gmp-6.2.1-CVE-2021-43618.patch to fix buffer overflow on malformed input to mpz_inp_raw. [bsc#1192717, CVE-2021-43618] ==== gnome-music ==== - Drop the following patches which removes useful code and brings hard time for future rebase: + 0001-Revert-grltrackerwrapper-Add-static-type-annotations.patch + 0002-Revert-coresong-Add-static-type-annotations.patch + 0003-gnome-music-use-python36.patch - Rewrite the patches only disabling the python3.7 specific feature: + 0001-gnome-music-use-python36.patch + 0002-gnome-music-revert-from-future-import-annotations.patch ==== gnome-screenshot ==== Version update (40.0 -> 41.0) - Update to version 41.0: + Drop support for non-unique mode in headless instance. + metainfo: Align app name with .desktop name + Updated translations. - Rebase patch with quilt. ==== grub2 ==== Subpackages: grub2-arm64-efi grub2-snapper-plugin grub2-systemd-sleep-plugin - Fix arm64 kernel image not aligned on 64k boundary (bsc#1192522) * 0001-arm64-Fix-EFI-loader-kernel-image-allocation.patch * 0002-Arm-check-for-the-PE-magic-for-the-compiled-arch.patch ==== gtk-vnc ==== Version update (1.2.0 -> 1.3.0) Subpackages: libgtk-vnc-2_0-0 libgvnc-1_0-0 - Update to version 1.3.0: + Add API to request screen rotation. + Automatically pick gthread coroutine if ucontext is not available. + Fix meson logic bug when disabling vala. + Honour choice of python when generating keymaps. + Fix error reporting and memory leaks encrypting auth data. + Fix missing includes for GDK quartz and broadway backends. + Switch to GNUTLS for VNC auth challenge to fix empty password handling. + Fix handling of auth subtypes in gvnccapture program. ==== haveged ==== Subpackages: libhavege2 - Remove ProtectKernelTunables hardening, causes the service to fail (boo#1192921) ==== health-checker ==== Version update (1.5 -> 1.6) Subpackages: health-checker-plugins-MicroOS - Update to version 1.6 * Adapt rd.retry to also trigger initqueue timeout tasks [gh#kubic-project/health-checker#11] * Reboot system and let the GRUB health-checker part try to find a working initrd if root file system could not be mounted - instead of ending up in an emergency shell * Correctly declare Bash scripts as such ==== iproute2 ==== Version update (5.14 -> 5.15) - update to 5.15: * lib: bpf_legacy: fix bpffs mount when /sys/fs/bpf exists * man: devlink-port: fix the devlink port add synopsis * man: devlink-port: fix pfnum for devlink port add * iptuntap: fix multi-queue flag display * mptcp: unbreak JSON endpoint list * ipneigh: add support to print brief output of neigh cache in tabular format * ip/bond: add LACP active support * ip/tunnel: always print all known attributes * Add, show, link, remove IOAM namespaces and schemas * New IOAM6 encap type for routes * tc/skbmod: Introduce SKBMOD_F_ECN option * tc/f_flower: fix port range parsing ==== iptables ==== Subpackages: libip4tc2 libip6tc2 libxtables12 xtables-plugins - Fix libalternatives configuration for ebtables and arptables by keeping argv0, fixes bsc#1192799. ==== kernel-firmware ==== Version update (20211027 -> 20211115) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20211115 (git commit f5d519563ac9): * linux-firmware: Update AMD cpu microcode * amdgpu: update raven2 firmware from 21.40 * amdgpu: update navi14 firmware from 21.40 * amdgpu: update raven firmware from 21.40 * amdgpu: update navi12 firmware from 21.40 * amdgpu: update navi10 firmware from 21.40 * amdgpu: update vega20 firmware from 21.40 * amdgpu: update vega12 firmware from 21.40 * amdgpu: update vega10 firmware from 21.40 * amdgpu: update picasso firmware from 21.40 * amdgpu: update vangogh firmware from 21.40 * amdgpu: update beige goby firmware from 21.40 * amdgpu: add cyan skillfish firmware from 21.40 * amdgpu: update dimgrey cavefish firmware from 21.40 * amdgpu: update green sardine firmware from 21.40 * amdgpu: update navy flounder firmware from 21.40 * amdgpu: update renoir firmware from 21.40 * amdgpu: update arcturus firmware from 21.40 * amdgpu: update sienna cichlid firmware from 21.40 * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937 * iwlwifi: add new FWs from core64-96 release * iwlwifi: update 9000-family firmwares to core64-96 * amdgpu: update VCN firmware for green sardine * linux-firmware: update frimware for mediatek bluetooth chip (MT7921) - Update aliases ==== kernel-source ==== Version update (5.14.14 -> 5.15.3) Subpackages: kernel-default kernel-docs - blacklist.conf: add one arm64's w/o prerequisites - commit 404f576 - samples/bpf: Fix incorrect use of strlen in xdp_redirect_cpu (git-fixes). - commit a48a8e6 - selftests: net: switch to socat in the GSO GRE test (git-fixes). - KVM: Fix steal time asm constraints (git-fixes). - commit 24aa787 - Linux 5.15.3 (bsc#1012628). - xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay (bsc#1012628). - usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform (bsc#1012628). - Input: iforce - fix control-message timeout (bsc#1012628). - Input: elantench - fix misreporting trackpoint coordinates (bsc#1012628). - libata: fix read log timeout value (bsc#1012628). - ocfs2: fix data corruption on truncate (bsc#1012628). - scsi: scsi_ioctl: Validate command size (bsc#1012628). - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (bsc#1012628). - scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd() (bsc#1012628). - scsi: lpfc: Don't release final kref on Fport node while ABTS outstanding (bsc#1012628). - scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (bsc#1012628). - scsi: qla2xxx: Fix crash in NVMe abort path (bsc#1012628). - scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file (bsc#1012628). - scsi: qla2xxx: Fix use after free in eh_abort path (bsc#1012628). - ce/gf100: fix incorrect CE0 address calculation on some GPUs (bsc#1012628). - char: xillybus: fix msg_ep UAF in xillyusb_probe() (bsc#1012628). - mmc: mtk-sd: Add wait dma stop done flow (bsc#1012628). - mmc: dw_mmc: Dont wait for DRTO on Write RSP error (bsc#1012628). - exfat: fix incorrect loading of i_blocks for large files (bsc#1012628). - io-wq: remove worker to owner tw dependency (bsc#1012628). - parisc: Fix set_fixmap() on PA1.x CPUs (bsc#1012628). - parisc: Fix ptrace check on syscall return (bsc#1012628). - tpm: Check for integer overflow in tpm2_map_response_body() (bsc#1012628). - firmware/psci: fix application of sizeof to pointer (bsc#1012628). - crypto: s5p-sss - Add error handling in s5p_aes_probe() (bsc#1012628). - media: rkvdec: Do not override sizeimage for output format (bsc#1012628). - media: ite-cir: IR receiver stop working after receive overflow (bsc#1012628). - media: rkvdec: Support dynamic resolution changes (bsc#1012628). - media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers (bsc#1012628). - media: v4l2-ioctl: Fix check_ext_ctrls (bsc#1012628). - ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14 (bsc#1012628). - ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED (bsc#1012628). - ALSA: hda/realtek: Add quirk for Clevo PC70HS (bsc#1012628). - ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ (bsc#1012628). - ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N (bsc#1012628). - ALSA: hda/realtek: Add quirk for ASUS UX550VE (bsc#1012628). - ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED (bsc#1012628). - ALSA: ua101: fix division by zero at probe (bsc#1012628). - ALSA: 6fire: fix control and bulk message timeouts (bsc#1012628). - ALSA: line6: fix control and interrupt message timeouts (bsc#1012628). - ALSA: mixer: oss: Fix racy access to slots (bsc#1012628). - ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume (bsc#1012628). - ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk (bsc#1012628). - ALSA: usb-audio: Add registration quirk for JBL Quantum 400 (bsc#1012628). - ALSA: hda: Free card instance properly at probe errors (bsc#1012628). - ALSA: synth: missing check for possible NULL after the call to kstrdup (bsc#1012628). - ALSA: pci: rme: Fix unaligned buffer addresses (bsc#1012628). - ALSA: PCM: Fix NULL dereference at mmap checks (bsc#1012628). - ALSA: timer: Fix use-after-free problem (bsc#1012628). - ALSA: timer: Unconditionally unlink slave instances, too (bsc#1012628). - Revert "ext4: enforce buffer head state assertion in ext4_da_map_blocks" (bsc#1012628). - ext4: fix lazy initialization next schedule time computation in more granular unit (bsc#1012628). - ext4: ensure enough credits in ext4_ext_shift_path_extents (bsc#1012628). - ext4: refresh the ext4_ext_path struct after dropping i_data_sem (bsc#1012628). - fuse: fix page stealing (bsc#1012628). - x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c (bsc#1012628). - x86/cpu: Fix migration safety with X86_BUG_NULL_SEL (bsc#1012628). - x86/irq: Ensure PI wakeup handler is unregistered before module unload (bsc#1012628). - x86/iopl: Fake iopl(3) CLI/STI usage (bsc#1012628). - btrfs: clear MISSING device status bit in btrfs_close_one_device (bsc#1012628). - btrfs: fix lost error handling when replaying directory deletes (bsc#1012628). - btrfs: call btrfs_check_rw_degradable only if there is a missing device (bsc#1012628). - KVM: x86/mmu: Drop a redundant, broken remote TLB flush (bsc#1012628). - KVM: VMX: Unregister posted interrupt wakeup handler on hardware unsetup (bsc#1012628). - KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling (bsc#1012628). - ia64: kprobes: Fix to pass correct trampoline address to the handler (bsc#1012628). - selinux: fix race condition when computing ocontext SIDs (bsc#1012628). - ipmi:watchdog: Set panic count to proper value on a panic (bsc#1012628). - md/raid1: only allocate write behind bio for WriteMostly device (bsc#1012628). - hwmon: (pmbus/lm25066) Add offset coefficients (bsc#1012628). - regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled (bsc#1012628). - regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property (bsc#1012628). - EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell (bsc#1012628). - mwifiex: fix division by zero in fw download path (bsc#1012628). - ath6kl: fix division by zero in send path (bsc#1012628). - ath6kl: fix control-message timeout (bsc#1012628). - ath10k: fix control-message timeout (bsc#1012628). - ath10k: fix division by zero in send path (bsc#1012628). - PCI: Mark Atheros QCA6174 to avoid bus reset (bsc#1012628). - rtl8187: fix control-message timeouts (bsc#1012628). - evm: mark evm_fixmode as __ro_after_init (bsc#1012628). - ifb: Depend on netfilter alternatively to tc (bsc#1012628). - platform/surface: aggregator_registry: Add support for Surface Laptop Studio (bsc#1012628). - mt76: mt7615: fix skb use-after-free on mac reset (bsc#1012628). - HID: surface-hid: Use correct event registry for managing HID events (bsc#1012628). - HID: surface-hid: Allow driver matching for target ID 1 devices (bsc#1012628). - wcn36xx: Fix HT40 capability for 2Ghz band (bsc#1012628). - wcn36xx: Fix tx_status mechanism (bsc#1012628). - wcn36xx: Fix (QoS) null data frame bitrate/modulation (bsc#1012628). - PM: sleep: Do not let "syscore" devices runtime-suspend during system transitions (bsc#1012628). - mwifiex: Read a PCI register after writing the TX ring write pointer (bsc#1012628). - mwifiex: Try waking the firmware until we get an interrupt (bsc#1012628). - libata: fix checking of DMA state (bsc#1012628). - dma-buf: fix and rework dma_buf_poll v7 (bsc#1012628). - wcn36xx: handle connection loss indication (bsc#1012628). - rsi: fix occasional initialisation failure with BT coex (bsc#1012628). - rsi: fix key enabled check causing unwanted encryption for vap_id > 0 (bsc#1012628). - rsi: fix rate mask set leading to P2P failure (bsc#1012628). - rsi: Fix module dev_oper_mode parameter description (bsc#1012628). - perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server (bsc#1012628). - perf/x86/intel/uncore: Fix invalid unit check (bsc#1012628). - perf/x86/intel/uncore: Fix Intel ICX IIO event constraints (bsc#1012628). - RDMA/qedr: Fix NULL deref for query_qp on the GSI QP (bsc#1012628). - ASoC: tegra: Set default card name for Trimslice (bsc#1012628). - ASoC: tegra: Restore AC97 support (bsc#1012628). - signal: Remove the bogus sigkill_pending in ptrace_stop (bsc#1012628). - memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode (bsc#1012628). - signal/mips: Update (_save|_restore)_fp_context to fail with - EFAULT (bsc#1012628). - signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed (bsc#1012628). - soc: samsung: exynos-pmu: Fix compilation when nothing selects CONFIG_MFD_CORE (bsc#1012628). - soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id (bsc#1012628). - soc: fsl: dpio: use the combined functions to protect critical zone (bsc#1012628). - mtd: rawnand: socrates: Keep the driver compatible with on-die ECC engines (bsc#1012628). - mctp: handle the struct sockaddr_mctp padding fields (bsc#1012628). - power: supply: max17042_battery: Prevent int underflow in set_soc_threshold (bsc#1012628). - power: supply: max17042_battery: use VFSOC for capacity when no rsns (bsc#1012628). - iio: core: fix double free in iio_device_unregister_sysfs() (bsc#1012628). - iio: core: check return value when calling dev_set_name() (bsc#1012628). - KVM: arm64: Extract ESR_ELx.EC only (bsc#1012628). - KVM: x86: Fix recording of guest steal time / preempted status (bsc#1012628). - KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows (bsc#1012628). - KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use (bsc#1012628). - KVM: nVMX: Handle dynamic MSR intercept toggling (bsc#1012628). - can: peak_usb: always ask for BERR reporting for PCAN-USB devices (bsc#1012628). - can: mcp251xfd: mcp251xfd_irq(): add missing can_rx_offload_threaded_irq_finish() in case of bus off (bsc#1012628). - can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport (bsc#1012628). - can: j1939: j1939_can_recv(): ignore messages with invalid source address (bsc#1012628). - can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM (bsc#1012628). - iio: adc: tsc2046: fix scan interval warning (bsc#1012628). - powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found (bsc#1012628). - io_uring: honour zeroes as io-wq worker limits (bsc#1012628). - ring-buffer: Protect ring_buffer_reset() from reentrancy (bsc#1012628). - serial: core: Fix initializing and restoring termios speed (bsc#1012628). - ifb: fix building without CONFIG_NET_CLS_ACT (bsc#1012628). - xen/balloon: add late_initcall_sync() for initial ballooning done (bsc#1012628). - ovl: fix use after free in struct ovl_aio_req (bsc#1012628). - ovl: fix filattr copy-up failure (bsc#1012628). - PCI: pci-bridge-emul: Fix emulation of W1C bits (bsc#1012628). - PCI: cadence: Add cdns_plat_pcie_probe() missing return (bsc#1012628). - cxl/pci: Fix NULL vs ERR_PTR confusion (bsc#1012628). - PCI: aardvark: Do not clear status bits of masked interrupts (bsc#1012628). - PCI: aardvark: Fix checking for link up via LTSSM state (bsc#1012628). - PCI: aardvark: Do not unmask unused interrupts (bsc#1012628). - PCI: aardvark: Fix reporting Data Link Layer Link Active (bsc#1012628). - PCI: aardvark: Fix configuring Reference clock (bsc#1012628). - PCI: aardvark: Fix return value of MSI domain .alloc() method (bsc#1012628). - PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG (bsc#1012628). - PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated bridge (bsc#1012628). - PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge (bsc#1012628). - PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge (bsc#1012628). - PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge (bsc#1012628). - quota: check block number when reading the block in quota file (bsc#1012628). - quota: correct error number in free_dqentry() (bsc#1012628). - cifs: To match file servers, make sure the server hostname matches (bsc#1012628). - cifs: set a minimum of 120s for next dns resolution (bsc#1012628). - mfd: simple-mfd-i2c: Select MFD_CORE to fix build error (bsc#1012628). - pinctrl: core: fix possible memory leak in pinctrl_enable() (bsc#1012628). - coresight: cti: Correct the parameter for pm_runtime_put (bsc#1012628). - coresight: trbe: Fix incorrect access of the sink specific data (bsc#1012628). - coresight: trbe: Defer the probe on offline CPUs (bsc#1012628). - iio: buffer: check return value of kstrdup_const() (bsc#1012628). - iio: buffer: Fix memory leak in iio_buffers_alloc_sysfs_and_mask() (bsc#1012628). - iio: buffer: Fix memory leak in __iio_buffer_alloc_sysfs_and_mask() (bsc#1012628). - iio: buffer: Fix memory leak in iio_buffer_register_legacy_sysfs_groups() (bsc#1012628). - drivers: iio: dac: ad5766: Fix dt property name (bsc#1012628). - iio: dac: ad5446: Fix ad5622_write() return value (bsc#1012628). - iio: ad5770r: make devicetree property reading consistent (bsc#1012628). - Documentation:devicetree:bindings:iio:dac: Fix val (bsc#1012628). - USB: serial: keyspan: fix memleak on probe errors (bsc#1012628). - serial: 8250: fix racy uartclk update (bsc#1012628). - ksmbd: set unique value to volume serial field in FS_VOLUME_INFORMATION (bsc#1012628). - io-wq: serialize hash clear with wakeup (bsc#1012628). - serial: 8250: Fix reporting real baudrate value in c_ospeed field (bsc#1012628). - Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field" (bsc#1012628). - most: fix control-message timeouts (bsc#1012628). - USB: iowarrior: fix control-message timeouts (bsc#1012628). - USB: chipidea: fix interrupt deadlock (bsc#1012628). - power: supply: max17042_battery: Clear status bits in interrupt handler (bsc#1012628). - component: do not leave master devres group open after bind (bsc#1012628). - dma-buf: WARN on dmabuf release with pending attachments (bsc#1012628). - drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2) (bsc#1012628). - drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1 (bsc#1012628). - drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6 (bsc#1012628). - Bluetooth: fix use-after-free error in lock_sock_nested() (bsc#1012628). - Bluetooth: call sock_hold earlier in sco_conn_del (bsc#1012628). - drm/panel-orientation-quirks: add Valve Steam Deck (bsc#1012628). - rcutorture: Avoid problematic critical section nesting on PREEMPT_RT (bsc#1012628). - platform/x86: wmi: do not fail if disabling fails (bsc#1012628). - drm/amdgpu: move iommu_resume before ip init/resume (bsc#1012628). - MIPS: lantiq: dma: add small delay after reset (bsc#1012628). - MIPS: lantiq: dma: reset correct number of channel (bsc#1012628). - locking/lockdep: Avoid RCU-induced noinstr fail (bsc#1012628). - net: sched: update default qdisc visibility after Tx queue cnt changes (bsc#1012628). - ACPI: resources: Add DMI-based legacy IRQ override quirk (bsc#1012628). - rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop (bsc#1012628). - smackfs: Fix use-after-free in netlbl_catmap_walk() (bsc#1012628). - ath11k: Align bss_chan_info structure with firmware (bsc#1012628). - crypto: aesni - check walk.nbytes instead of err (bsc#1012628). - x86/mm/64: Improve stack overflow warnings (bsc#1012628). - x86: Increase exception stack sizes (bsc#1012628). - mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type (bsc#1012628). - mwifiex: Properly initialize private structure on interface type changes (bsc#1012628). - spi: Check we have a spi_device_id for each DT compatible (bsc#1012628). - fscrypt: allow 256-bit master keys with AES-256-XTS (bsc#1012628). - drm/amdgpu: Fix MMIO access page fault (bsc#1012628). - drm/amd/display: Fix null pointer dereference for encoders (bsc#1012628). - selftests: net: fib_nexthops: Wait before checking reported idle time (bsc#1012628). - ath11k: Avoid reg rules update during firmware recovery (bsc#1012628). - ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED (bsc#1012628). - ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected packets (bsc#1012628). - ath10k: high latency fixes for beacon buffer (bsc#1012628). - octeontx2-pf: Enable promisc/allmulti match MCAM entries (bsc#1012628). - media: mt9p031: Fix corrupted frame after restarting stream (bsc#1012628). - media: netup_unidvb: handle interrupt properly according to the firmware (bsc#1012628). - media: atomisp: Fix error handling in probe (bsc#1012628). - media: stm32: Potential NULL pointer dereference in dcmi_irq_thread() (bsc#1012628). - media: uvcvideo: Set capability in s_param (bsc#1012628). - media: uvcvideo: Return -EIO for control errors (bsc#1012628). - media: uvcvideo: Set unique vdev name based in type (bsc#1012628). - media: vidtv: Fix memory leak in remove (bsc#1012628). - media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe() (bsc#1012628). - media: s5p-mfc: Add checking to s5p_mfc_probe() (bsc#1012628). - media: videobuf2: rework vb2_mem_ops API (bsc#1012628). - media: imx: set a media_device bus_info string (bsc#1012628). - media: rcar-vin: Use user provided buffers when starting (bsc#1012628). - media: mceusb: return without resubmitting URB in case of - EPROTO error (bsc#1012628). - ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK (bsc#1012628). - rtw88: fix RX clock gate setting while fifo dump (bsc#1012628). - brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet (bsc#1012628). - media: rcar-csi2: Add checking to rcsi2_start_receiver() (bsc#1012628). - ipmi: Disable some operations during a panic (bsc#1012628). - fs/proc/uptime.c: Fix idle time reporting in /proc/uptime (bsc#1012628). - kselftests/sched: cleanup the child processes (bsc#1012628). - ACPICA: Avoid evaluating methods too early during system resume (bsc#1012628). - cpufreq: Make policy min/max hard requirements (bsc#1012628). - ice: Move devlink port to PF/VF struct (bsc#1012628). - media: imx-jpeg: Fix possible null pointer dereference (bsc#1012628). - media: ipu3-imgu: imgu_fmt: Handle properly try (bsc#1012628). - media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info (bsc#1012628). - media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte() (bsc#1012628). - net-sysfs: try not to restart the syscall if it will fail eventually (bsc#1012628). - drm/amdkfd: rm BO resv on validation to avoid deadlock (bsc#1012628). - tracefs: Have tracefs directories not set OTH permission bits by default (bsc#1012628). - tracing: Disable "other" permission bits in the tracefs files (bsc#1012628). - ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create() (bsc#1012628). - KVM: arm64: Propagate errors from __pkvm_prot_finalize hypercall (bsc#1012628). - mmc: moxart: Fix reference count leaks in moxart_probe (bsc#1012628). - iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value (bsc#1012628). - ACPI: battery: Accept charges over the design capacity as full (bsc#1012628). - ACPI: scan: Release PM resources blocked by unused objects (bsc#1012628). - drm/amd/display: fix null pointer deref when plugging in display (bsc#1012628). - drm/amdkfd: fix resume error when iommu disabled in Picasso (bsc#1012628). - net: phy: micrel: make *-skew-ps check more lenient (bsc#1012628). - leaking_addresses: Always print a trailing newline (bsc#1012628). - thermal/core: Fix null pointer dereference in thermal_release() (bsc#1012628). - drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture() (bsc#1012628). - thermal/drivers/tsens: Add timeout to get_temp_tsens_valid (bsc#1012628). - block: bump max plugged deferred size from 16 to 32 (bsc#1012628). - floppy: fix calling platform_device_unregister() on invalid drives (bsc#1012628). - md: update superblock after changing rdev flags in state_store (bsc#1012628). - memstick: r592: Fix a UAF bug when removing the driver (bsc#1012628). - locking/rwsem: Disable preemption for spinning region (bsc#1012628). - lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression (bsc#1012628). - lib/xz: Validate the value before assigning it to an enum variable (bsc#1012628). - workqueue: make sysfs of unbound kworker cpumask more clever (bsc#1012628). - tracing/cfi: Fix cmp_entries_* functions signature mismatch (bsc#1012628). - mt76: mt7915: fix an off-by-one bound check (bsc#1012628). - mwl8k: Fix use-after-free in mwl8k_fw_state_machine() (bsc#1012628). - iwlwifi: change all JnP to NO-160 configuration (bsc#1012628). - block: remove inaccurate requeue check (bsc#1012628). - media: allegro: ignore interrupt if mailbox is not initialized (bsc#1012628). - drm/amdgpu/pm: properly handle sclk for profiling modes on vangogh (bsc#1012628). - nvmet: fix use-after-free when a port is removed (bsc#1012628). - nvmet-rdma: fix use-after-free when a port is removed (bsc#1012628). - nvmet-tcp: fix use-after-free when a port is removed (bsc#1012628). - nvme: drop scan_lock and always kick requeue list when removing namespaces (bsc#1012628). - samples/bpf: Fix application of sizeof to pointer (bsc#1012628). - arm64: vdso32: suppress error message for 'make mrproper' (bsc#1012628). - PM: hibernate: Get block device exclusively in swsusp_check() (bsc#1012628). - selftests: kvm: fix mismatched fclose() after popen() (bsc#1012628). - selftests/bpf: Fix perf_buffer test on system with offline cpus (bsc#1012628). - iwlwifi: mvm: disable RX-diversity in powersave (bsc#1012628). - smackfs: use __GFP_NOFAIL for smk_cipso_doi() (bsc#1012628). - ARM: clang: Do not rely on lr register for stacktrace (bsc#1012628). - gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE (bsc#1012628). - can: bittiming: can_fixup_bittiming(): change type of tseg1 and alltseg to unsigned int (bsc#1012628). - gfs2: Cancel remote delete work asynchronously (bsc#1012628). - gfs2: Fix glock_hash_walk bugs (bsc#1012628). - ARM: 9136/1: ARMv7-M uses BE-8, not BE-32 (bsc#1012628). - tools/latency-collector: Use correct size when writing queue_full_warning (bsc#1012628). - vrf: run conntrack only in context of lower/physdev for locally generated packets (bsc#1012628). - net: annotate data-race in neigh_output() (bsc#1012628). - ACPI: AC: Quirk GK45 to skip reading _PSR (bsc#1012628). - ACPI: resources: Add one more Medion model in IRQ override quirk (bsc#1012628). - btrfs: reflink: initialize return value to 0 in btrfs_extent_same() (bsc#1012628). - btrfs: do not take the uuid_mutex in btrfs_rm_device (bsc#1012628). - spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe() (bsc#1012628). - wcn36xx: Correct band/freq reporting on RX (bsc#1012628). - wcn36xx: Fix packet drop on resume (bsc#1012628). - Revert "wcn36xx: Enable firmware link monitoring" (bsc#1012628). - ftrace: do CPU checking after preemption disabled (bsc#1012628). - inet: remove races in inet{6}_getname() (bsc#1012628). - x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted (bsc#1012628). - drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled (bsc#1012628). - selftests/core: fix conflicting types compile error for close_range() (bsc#1012628). - perf/x86/intel: Fix ICL/SPR INST_RETIRED.PREC_DIST encodings (bsc#1012628). - parisc: fix warning in flush_tlb_all (bsc#1012628). - task_stack: Fix end_of_stack() for architectures with upwards-growing stack (bsc#1012628). - erofs: don't trigger WARN() when decompression fails (bsc#1012628). - parisc/unwind: fix unwinder when CONFIG_64BIT is enabled (bsc#1012628). - parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling (bsc#1012628). - netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state (bsc#1012628). - selftests/bpf: Fix strobemeta selftest regression (bsc#1012628). - fbdev/efifb: Release PCI device's runtime PM ref during FB destroy (bsc#1012628). - drm/bridge: anx7625: Propagate errors from sp_tx_rst_aux() (bsc#1012628). - perf/x86/intel/uncore: Fix Intel SPR CHA event constraints (bsc#1012628). - perf/x86/intel/uncore: Fix Intel SPR IIO event constraints (bsc#1012628). - perf/x86/intel/uncore: Fix Intel SPR M2PCIE event constraints (bsc#1012628). - perf/x86/intel/uncore: Fix Intel SPR M3UPI event constraints (bsc#1012628). - drm/bridge: it66121: Initialize {device,vendor}_ids (bsc#1012628). - drm/bridge: it66121: Wait for next bridge to be probed (bsc#1012628). - Bluetooth: fix init and cleanup of sco_conn.timeout_work (bsc#1012628). - libbpf: Don't crash on object files with no symbol tables (bsc#1012628). - Bluetooth: hci_uart: fix GPF in h5_recv (bsc#1012628). - rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (bsc#1012628). - MIPS: lantiq: dma: fix burst length for DEU (bsc#1012628). - x86/xen: Mark cpu_bringup_and_idle() as dead_end_function (bsc#1012628). - objtool: Handle __sanitize_cov*() tail calls (bsc#1012628). - net/mlx5: Publish and unpublish all devlink parameters at once (bsc#1012628). - drm/v3d: fix wait for TMU write combiner flush (bsc#1012628). - crypto: sm4 - Do not change section of ck and sbox (bsc#1012628). - virtio-gpu: fix possible memory allocation failure (bsc#1012628). - lockdep: Let lock_is_held_type() detect recursive read as read (bsc#1012628). - net: net_namespace: Fix undefined member in key_remove_domain() (bsc#1012628). - net: phylink: don't call netif_carrier_off() with NULL netdev (bsc#1012628). - drm: bridge: it66121: Fix return value it66121_probe (bsc#1012628). - spi: Fixed division by zero warning (bsc#1012628). - cgroup: Make rebind_subsystems() disable v2 controllers all at once (bsc#1012628). - wcn36xx: Fix Antenna Diversity Switching (bsc#1012628). - wilc1000: fix possible memory leak in cfg_scan_result() (bsc#1012628). - Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync (bsc#1012628). - drm/amdgpu: Fix crash on device remove/driver unload (bsc#1012628). - drm/amd/display: Pass display_pipe_params_st as const in DML (bsc#1012628). - drm/amdgpu: move amdgpu_virt_release_full_gpu to fini_early stage (bsc#1012628). - crypto: caam - disable pkc for non-E SoCs (bsc#1012628). - crypto: qat - power up 4xxx device (bsc#1012628). - Bluetooth: hci_h5: Fix (runtime)suspend issues on RTL8723BS HCIs (bsc#1012628). - bnxt_en: Check devlink allocation and registration status (bsc#1012628). - qed: Don't ignore devlink allocation failures (bsc#1012628). - rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies() (bsc#1012628). - mptcp: do not shrink snd_nxt when recovering (bsc#1012628). - fortify: Fix dropped strcpy() compile-time write overflow check (bsc#1012628). - mac80211: twt: don't use potentially unaligned pointer (bsc#1012628). - cfg80211: always free wiphy specific regdomain (bsc#1012628). - net/mlx5: Accept devlink user input after driver initialization complete (bsc#1012628). - net: dsa: rtl8366rb: Fix off-by-one bug (bsc#1012628). - net: dsa: rtl8366: Fix a bug in deleting VLANs (bsc#1012628). - bpf/tests: Fix error in tail call limit tests (bsc#1012628). - ath11k: fix some sleeping in atomic bugs (bsc#1012628). - ath11k: Avoid race during regd updates (bsc#1012628). - ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status (bsc#1012628). - ath11k: Fix memory leak in ath11k_qmi_driver_event_work (bsc#1012628). - gve: DQO: avoid unused variable warnings (bsc#1012628). - ath10k: Fix missing frame timestamp for beacon/probe-resp (bsc#1012628). - ath10k: sdio: Add missing BH locking around napi_schdule() (bsc#1012628). - drm/ttm: stop calling tt_swapin in vm_access (bsc#1012628). - arm64: mm: update max_pfn after memory hotplug (bsc#1012628). - drm/amdgpu: fix warning for overflow check (bsc#1012628). - libbpf: Fix skel_internal.h to set errno on loader retval < 0 (bsc#1012628). - media: em28xx: add missing em28xx_close_extension (bsc#1012628). - media: meson-ge2d: Fix rotation parameter changes detection in 'ge2d_s_ctrl()' (bsc#1012628). - media: cxd2880-spi: Fix a null pointer dereference on error handling path (bsc#1012628). - media: ttusb-dec: avoid release of non-acquired mutex (bsc#1012628). - media: dvb-usb: fix ununit-value in az6027_rc_query (bsc#1012628). - media: imx258: Fix getting clock frequency (bsc#1012628). - media: v4l2-ioctl: S_CTRL output the right value (bsc#1012628). - media: mtk-vcodec: venc: fix return value when start_streaming fails (bsc#1012628). - media: TDA1997x: handle short reads of hdmi info frame (bsc#1012628). - media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()' (bsc#1012628). - media: imx-jpeg: Fix the error handling path of 'mxc_jpeg_probe()' (bsc#1012628). - media: i2c: ths8200 needs V4L2_ASYNC (bsc#1012628). - media: sun6i-csi: Allow the video device to be open multiple times (bsc#1012628). - media: radio-wl1273: Avoid card name truncation (bsc#1012628). - media: si470x: Avoid card name truncation (bsc#1012628). - media: tm6000: Avoid card name truncation (bsc#1012628). - media: cx23885: Fix snd_card_free call on null card pointer (bsc#1012628). - media: atmel: fix the ispck initialization (bsc#1012628). - scs: Release kasan vmalloc poison in scs_free process (bsc#1012628). - kprobes: Do not use local variable when creating debugfs file (bsc#1012628). - crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency (bsc#1012628). - drm: fb_helper: fix CONFIG_FB dependency (bsc#1012628). - cpuidle: Fix kobject memory leaks in error paths (bsc#1012628). - media: em28xx: Don't use ops->suspend if it is NULL (bsc#1012628). - ath10k: Don't always treat modem stop events as crashes (bsc#1012628). - ath9k: Fix potential interrupt storm on queue reset (bsc#1012628). - PM: EM: Fix inefficient states detection (bsc#1012628). - x86/insn: Use get_unaligned() instead of memcpy() (bsc#1012628). - EDAC/amd64: Handle three rank interleaving mode (bsc#1012628). - rcu: Always inline rcu_dynticks_task*_{enter,exit}() (bsc#1012628). - rcu: Fix rcu_dynticks_curr_cpu_in_eqs() vs noinstr (bsc#1012628). - netfilter: nft_dynset: relax superfluous check on set updates (bsc#1012628). - media: venus: fix vpp frequency calculation for decoder (bsc#1012628). - media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable() (bsc#1012628). - crypto: ccree - avoid out-of-range warnings from clang (bsc#1012628). - crypto: qat - detect PFVF collision after ACK (bsc#1012628). - crypto: qat - disregard spurious PFVF interrupts (bsc#1012628). - hwrng: mtk - Force runtime pm ops for sleep ops (bsc#1012628). - ima: fix deadlock when traversing "ima_default_rules" (bsc#1012628). - b43legacy: fix a lower bounds test (bsc#1012628). - b43: fix a lower bounds test (bsc#1012628). - gve: Recover from queue stall due to missed IRQ (bsc#1012628). - gve: Track RX buffer allocation failures (bsc#1012628). - mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured (bsc#1012628). - mmc: sdhci-omap: Fix context restore (bsc#1012628). - memstick: avoid out-of-range warning (bsc#1012628). - memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host() (bsc#1012628). - net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE (bsc#1012628). - hwmon: Fix possible memleak in __hwmon_device_register() (bsc#1012628). - hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff (bsc#1012628). - ath10k: fix max antenna gain unit (bsc#1012628). - kernel/sched: Fix sched_fork() access an invalid sched_task_group (bsc#1012628). - net: fealnx: fix build for UML (bsc#1012628). - net: intel: igc_ptp: fix build for UML (bsc#1012628). - net: tulip: winbond-840: fix build for UML (bsc#1012628). - tcp: switch orphan_count to bare per-cpu counters (bsc#1012628). - crypto: octeontx2 - set assoclen in aead_do_fallback() (bsc#1012628). - thermal/core: fix a UAF bug in __thermal_cooling_device_register() (bsc#1012628). - drm/msm/dsi: do not enable irq handler before powering up the host (bsc#1012628). - drm/msm: Fix potential Oops in a6xx_gmu_rpmh_init() (bsc#1012628). - drm/msm: potential error pointer dereference in init() (bsc#1012628). - drm/msm: unlock on error in get_sched_entity() (bsc#1012628). - drm/msm: fix potential NULL dereference in cleanup (bsc#1012628). - drm/msm: uninitialized variable in msm_gem_import() (bsc#1012628). - net: stream: don't purge sk_error_queue in sk_stream_kill_queues() (bsc#1012628). - thermal/drivers/qcom/lmh: make QCOM_LMH depends on QCOM_SCM (bsc#1012628). - mailbox: Remove WARN_ON for async_cb.cb in cmdq_exec_done (bsc#1012628). - media: ivtv: fix build for UML (bsc#1012628). - media: ir_toy: assignment to be16 should be of correct type (bsc#1012628). - mmc: mxs-mmc: disable regulator on error and in the remove function (bsc#1012628). - io-wq: Remove duplicate code in io_workqueue_create() (bsc#1012628). - block: ataflop: fix breakage introduced at blk-mq refactoring (bsc#1012628). - blk-wbt: prevent NULL pointer dereference in wb_timer_fn (bsc#1012628). - platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning (bsc#1012628). - mailbox: mtk-cmdq: Validate alias_id on probe (bsc#1012628). - mailbox: mtk-cmdq: Fix local clock ID usage (bsc#1012628). - ACPI: PM: Turn off unused wakeup power resources (bsc#1012628). - ACPI: PM: Fix sharing of wakeup power resources (bsc#1012628). - drm/amdkfd: Fix an inappropriate error handling in allloc memory of gpu (bsc#1012628). - mt76: mt7921: fix endianness in mt7921_mcu_tx_done_event (bsc#1012628). - mt76: mt7915: fix endianness warning in mt7915_mac_add_txs_skb (bsc#1012628). - mt76: mt7921: fix endianness warning in mt7921_update_txs (bsc#1012628). - mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi (bsc#1012628). - mt76: mt7915: fix info leak in mt7915_mcu_set_pre_cal() (bsc#1012628). - mt76: connac: fix mt76_connac_gtk_rekey_tlv usage (bsc#1012628). - mt76: fix build error implicit enumeration conversion (bsc#1012628). - mt76: mt7921: fix survey-dump reporting (bsc#1012628). - mt76: mt76x02: fix endianness warnings in mt76x02_mac.c (bsc#1012628). - mt76: mt7921: Fix out of order process by invalid event pkt (bsc#1012628). - mt76: mt7915: fix potential overflow of eeprom page index (bsc#1012628). - mt76: mt7915: fix bit fields for HT rate idx (bsc#1012628). - mt76: mt7921: fix dma hang in rmmod (bsc#1012628). - mt76: connac: fix GTK rekey offload failure on WPA mixed mode (bsc#1012628). - mt76: overwrite default reg_ops if necessary (bsc#1012628). - mt76: mt7921: report HE MU radiotap (bsc#1012628). - mt76: mt7921: fix firmware usage of RA info using legacy rates (bsc#1012628). - mt76: mt7921: fix kernel warning from cfg80211_calculate_bitrate (bsc#1012628). - mt76: mt7921: always wake device if necessary in debugfs (bsc#1012628). - mt76: mt7915: fix hwmon temp sensor mem use-after-free (bsc#1012628). - mt76: mt7615: fix hwmon temp sensor mem use-after-free (bsc#1012628). - mt76: mt7915: fix possible infinite loop release semaphore (bsc#1012628). - mt76: mt7921: fix retrying release semaphore without end (bsc#1012628). - mt76: mt7615: fix monitor mode tear down crash (bsc#1012628). - mt76: connac: fix possible NULL pointer dereference in mt76_connac_get_phy_mode_v2 (bsc#1012628). - mt76: mt7915: fix sta_rec_wtbl tag len (bsc#1012628). - mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req() (bsc#1012628). - rsi: stop thread firstly in rsi_91x_init() error handling (bsc#1012628). - mwifiex: Send DELBA requests according to spec (bsc#1012628). - iwlwifi: mvm: reset PM state on unsuccessful resume (bsc#1012628). - iwlwifi: pnvm: don't kmemdup() more than we have (bsc#1012628). - iwlwifi: pnvm: read EFI data only if long enough (bsc#1012628). - net: enetc: unmap DMA in enetc_send_cmd() (bsc#1012628). - phy: micrel: ksz8041nl: do not use power down mode (bsc#1012628). - nbd: Fix use-after-free in pid_show (bsc#1012628). - nvme-rdma: fix error code in nvme_rdma_setup_ctrl (bsc#1012628). - PM: hibernate: fix sparse warnings (bsc#1012628). - clocksource/drivers/timer-ti-dm: Select TIMER_OF (bsc#1012628). - x86/sev: Fix stack type check in vc_switch_off_ist() (bsc#1012628). - drm/msm: Fix potential NULL dereference in DPU SSPP (bsc#1012628). - drm/msm/dsi: fix wrong type in msm_dsi_host (bsc#1012628). - crypto: tcrypt - fix skcipher multi-buffer tests for 1420B blocks (bsc#1012628). - smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi (bsc#1012628). - KVM: selftests: Fix nested SVM tests when built with clang (bsc#1012628). - libbpf: Fix memory leak in btf__dedup() (bsc#1012628). - bpftool: Avoid leaking the JSON writer prepared for program metadata (bsc#1012628). - libbpf: Fix overflow in BTF sanity checks (bsc#1012628). - libbpf: Fix BTF header parsing checks (bsc#1012628). - mt76: mt7615: mt7622: fix ibss and meshpoint (bsc#1012628). - s390/gmap: validate VMA in __gmap_zap() (bsc#1012628). - s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap() (bsc#1012628). - s390/mm: validate VMA in PGSTE manipulation functions (bsc#1012628). - s390/mm: fix VMA and page table handling code in storage key handling functions (bsc#1012628). - s390/uv: fully validate the VMA before calling follow_page() (bsc#1012628). - KVM: s390: pv: avoid double free of sida page (bsc#1012628). - KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm (bsc#1012628). - irq: mips: avoid nested irq_enter() (bsc#1012628). - net: dsa: avoid refcount warnings when ->port_{fdb,mdb}_del returns error (bsc#1012628). - ARM: 9142/1: kasan: work around LPAE build warning (bsc#1012628). - ath10k: fix module load regression with iram-recovery feature (bsc#1012628). - block: ataflop: more blk-mq refactoring fixes (bsc#1012628). - blk-cgroup: synchronize blkg creation against policy deactivation (bsc#1012628). - libbpf: Fix off-by-one bug in bpf_core_apply_relo() (bsc#1012628). - tpm: fix Atmel TPM crash caused by too frequent queries (bsc#1012628). - tpm_tis_spi: Add missing SPI ID (bsc#1012628). - libbpf: Fix endianness detection in BPF_CORE_READ_BITFIELD_PROBED() (bsc#1012628). - tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (bsc#1012628). - tracing: Fix missing trace_boot_init_histograms kstrdup NULL checks (bsc#1012628). - cpufreq: intel_pstate: Fix cpu->pstate.turbo_freq initialization (bsc#1012628). - spi: spi-rpc-if: Check return value of rpcif_sw_init() (bsc#1012628). - samples/kretprobes: Fix return value if register_kretprobe() failed (bsc#1012628). - KVM: s390: Fix handle_sske page fault handling (bsc#1012628). - libertas_tf: Fix possible memory leak in probe and disconnect (bsc#1012628). - libertas: Fix possible memory leak in probe and disconnect (bsc#1012628). - wcn36xx: add proper DMA memory barriers in rx path (bsc#1012628). - wcn36xx: Fix discarded frames due to wrong sequence number (bsc#1012628). - bpf: Avoid races in __bpf_prog_run() for 32bit arches (bsc#1012628). - bpf: Fixes possible race in update_prog_stats() for 32bit arches (bsc#1012628). - wcn36xx: Channel list update before hardware scan (bsc#1012628). - drm/amdgpu: fix a potential memory leak in amdgpu_device_fini_sw() (bsc#1012628). - drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits (bsc#1012628). - selftests/bpf: Fix fd cleanup in sk_lookup test (bsc#1012628). - selftests/bpf: Fix memory leak in test_ima (bsc#1012628). - sctp: allow IP fragmentation when PLPMTUD enters Error state (bsc#1012628). - sctp: reset probe_timer in sctp_transport_pl_update (bsc#1012628). - sctp: subtract sctphdr len in sctp_transport_pl_hlen (bsc#1012628). - sctp: return true only for pathmtu update in sctp_transport_pl_toobig (bsc#1012628). - net: amd-xgbe: Toggle PLL settings during rate change (bsc#1012628). - ipmi: kcs_bmc: Fix a memory leak in the error handling path of 'kcs_bmc_serio_add_device()' (bsc#1012628). - nfp: fix NULL pointer access when scheduling dim work (bsc#1012628). - nfp: fix potential deadlock when canceling dim work (bsc#1012628). - net: phylink: avoid mvneta warning when setting pause parameters (bsc#1012628). - net: bridge: fix uninitialized variables when BRIDGE_CFM is disabled (bsc#1012628). - selftests: net: bridge: update IGMP/MLD membership interval value (bsc#1012628). - crypto: pcrypt - Delay write to padata->info (bsc#1012628). - selftests/bpf: Fix fclose/pclose mismatch in test_progs (bsc#1012628). - udp6: allow SO_MARK ctrl msg to affect routing (bsc#1012628). - ibmvnic: don't stop queue in xmit (bsc#1012628). - ibmvnic: Process crqs after enabling interrupts (bsc#1012628). - ibmvnic: delay complete() (bsc#1012628). - selftests: mptcp: fix proto type in link_failure tests (bsc#1012628). - skmsg: Lose offset info in sk_psock_skb_ingress (bsc#1012628). - cgroup: Fix rootcg cpu.stat guest double counting (bsc#1012628). - bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off (bsc#1012628). - bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit (bsc#1012628). - of: unittest: fix EXPECT text for gpio hog errors (bsc#1012628). - cpufreq: Fix parameter in parse_perf_domain() (bsc#1012628). - staging: r8188eu: fix memory leak in rtw_set_key (bsc#1012628). - arm64: dts: meson: sm1: add Ethernet PHY reset line for ODROID-C4/HC4 (bsc#1012628). - iio: st_sensors: disable regulators after device unregistration (bsc#1012628). - RDMA/rxe: Fix wrong port_cap_flags (bsc#1012628). - ARM: dts: BCM5301X: Fix memory nodes names (bsc#1012628). - arm64: dts: broadcom: bcm4908: Fix UART clock name (bsc#1012628). - clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths (bsc#1012628). - scsi: pm80xx: Fix lockup in outbound queue management (bsc#1012628). - scsi: qla2xxx: edif: Use link event to wake up app (bsc#1012628). - scsi: lpfc: Fix NVMe I/O failover to non-optimized path (bsc#1012628). - ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc() (bsc#1012628). - arm64: dts: rockchip: Fix GPU register width for RK3328 (bsc#1012628). - ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY (bsc#1012628). - RDMA/bnxt_re: Fix query SRQ failure (bsc#1012628). - arm64: dts: ti: k3-j721e-main: Fix "max-virtual-functions" in PCIe EP nodes (bsc#1012628). - arm64: dts: ti: k3-j721e-main: Fix "bus-range" upto 256 bus number for PCIe (bsc#1012628). - arm64: dts: ti: j7200-main: Fix "vendor-id"/"device-id" properties of pcie node (bsc#1012628). - arm64: dts: ti: j7200-main: Fix "bus-range" upto 256 bus number for PCIe (bsc#1012628). - arm64: dts: meson-g12a: Fix the pwm regulator supply properties (bsc#1012628). - arm64: dts: meson-g12b: Fix the pwm regulator supply properties (bsc#1012628). - arm64: dts: meson-sm1: Fix the pwm regulator supply properties (bsc#1012628). - bus: ti-sysc: Fix timekeeping_suspended warning on resume (bsc#1012628). - ARM: dts: at91: tse850: the emac<->phy interface is rmii (bsc#1012628). - arm64: dts: qcom: sc7180: Base dynamic CPU power coefficients in reality (bsc#1012628). - soc: qcom: llcc: Disable MMUHWT retention (bsc#1012628). - arm64: dts: qcom: sc7280: fix display port phy reg property (bsc#1012628). - scsi: dc395: Fix error case unwinding (bsc#1012628). - MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT (bsc#1012628). - JFS: fix memleak in jfs_mount (bsc#1012628). - pinctrl: renesas: rzg2l: Fix missing port register 21h (bsc#1012628). - ASoC: wcd9335: Use correct version to initialize Class H (bsc#1012628). - arm64: dts: qcom: msm8916: Fix Secondary MI2S bit clock (bsc#1012628). - arm64: dts: renesas: beacon: Fix Ethernet PHY mode (bsc#1012628). - iommu/mediatek: Fix out-of-range warning with clang (bsc#1012628). - arm64: dts: qcom: pm8916: Remove wrong reg-names for rtc@6000 (bsc#1012628). - iommu/dma: Fix sync_sg with swiotlb (bsc#1012628). - iommu/dma: Fix arch_sync_dma for map (bsc#1012628). - ALSA: hda: Reduce udelay() at SKL+ position reporting (bsc#1012628). - ALSA: hda: Use position buffer for SKL+ again (bsc#1012628). - ALSA: usb-audio: Fix possible race at sync of urb completions (bsc#1012628). - soundwire: debugfs: use controller id and link_id for debugfs (bsc#1012628). - power: reset: at91-reset: check properly the return value of devm_of_iomap (bsc#1012628). - scsi: ufs: core: Fix ufshcd_probe_hba() prototype to match the definition (bsc#1012628). - scsi: ufs: core: Stop clearing UNIT ATTENTIONS (bsc#1012628). - scsi: megaraid_sas: Fix concurrent access to ISR between IRQ polling and real interrupt (bsc#1012628). - scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp() (bsc#1012628). - driver core: Fix possible memory leak in device_link_add() (bsc#1012628). - arm: dts: omap3-gta04a4: accelerometer irq fix (bsc#1012628). - ASoC: SOF: topology: do not power down primary core during topology removal (bsc#1012628). - iio: st_pressure_spi: Add missing entries SPI to device ID table (bsc#1012628). - soc/tegra: Fix an error handling path in tegra_powergate_power_up() (bsc#1012628). - memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe (bsc#1012628). - clk: at91: check pmc node status before registering syscore ops (bsc#1012628). - powerpc/mem: Fix arch/powerpc/mm/mem.c:53:12: error: no previous prototype for 'create_section_mapping' (bsc#1012628). - video: fbdev: chipsfb: use memset_io() instead of memset() (bsc#1012628). - powerpc: fix unbalanced node refcount in check_kvm_guest() (bsc#1012628). - powerpc/paravirt: correct preempt debug splat in vcpu_is_preempted() (bsc#1012628). - serial: 8250_dw: Drop wrong use of ACPI_PTR() (bsc#1012628). - usb: gadget: hid: fix error code in do_config() (bsc#1012628). - =?UTF-8?q?power:=20supply:=20rt5033=5Fbattery:=20Change?= =?UTF-8?q?=20voltage=20values=20to=20=C2=B5V?= (bsc#1012628). - power: supply: max17040: fix null-ptr-deref in max17040_probe() (bsc#1012628). - scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn() (bsc#1012628). - RDMA/mlx4: Return missed an error if device doesn't support steering (bsc#1012628). - usb: musb: select GENERIC_PHY instead of depending on it (bsc#1012628). - staging: most: dim2: do not double-register the same device (bsc#1012628). - staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC (bsc#1012628). - RDMA/core: Set sgtable nents when using ib_dma_virt_map_sg() (bsc#1012628). - dyndbg: make dyndbg a known cli param (bsc#1012628). - powerpc/perf: Fix cycles/instructions as PM_CYC/PM_INST_CMPL in power10 (bsc#1012628). - pinctrl: renesas: checker: Fix off-by-one bug in drive register check (bsc#1012628). - ARM: dts: stm32: Reduce DHCOR SPI NOR frequency to 50 MHz (bsc#1012628). - ARM: dts: stm32: fix STUSB1600 Type-C irq level on stm32mp15xx-dkx (bsc#1012628). - ARM: dts: stm32: fix SAI sub nodes register range (bsc#1012628). - ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15 (bsc#1012628). - ASoC: cs42l42: Always configure both ASP TX channels (bsc#1012628). - ASoC: cs42l42: Correct some register default values (bsc#1012628). - ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER (bsc#1012628). - soc: qcom: rpmhpd: Make power_on actually enable the domain (bsc#1012628). - soc: qcom: socinfo: add two missing PMIC IDs (bsc#1012628). - iio: buffer: Fix double-free in iio_buffers_alloc_sysfs_and_mask() (bsc#1012628). - usb: typec: STUSB160X should select REGMAP_I2C (bsc#1012628). - iio: adis: do not disabe IRQs in 'adis_init()' (bsc#1012628). - soundwire: bus: stop dereferencing invalid slave pointer (bsc#1012628). - scsi: ufs: ufshcd-pltfrm: Fix memory leak due to probe defer (bsc#1012628). - scsi: lpfc: Wait for successful restart of SLI3 adapter during host sg_reset (bsc#1012628). - serial: imx: fix detach/attach of serial console (bsc#1012628). - usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init (bsc#1012628). - usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be disabled (bsc#1012628). - usb: dwc2: drd: reset current session before setting the new one (bsc#1012628). - powerpc/booke: Disable STRICT_KERNEL_RWX, DEBUG_PAGEALLOC and KFENCE (bsc#1012628). - usb: dwc3: gadget: Skip resizing EP's TX FIFO if already resized (bsc#1012628). - firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available() (bsc#1012628). - soc: qcom: rpmhpd: fix sm8350_mxc's peer domain (bsc#1012628). - soc: qcom: apr: Add of_node_put() before return (bsc#1012628). - arm64: dts: qcom: pmi8994: Fix "eternal"->"external" typo in WLED node (bsc#1012628). - arm64: dts: qcom: sdm845: Use RPMH_CE_CLK macro directly (bsc#1012628). - arm64: dts: qcom: sdm845: Fix Qualcomm crypto engine bus clock (bsc#1012628). - pinctrl: equilibrium: Fix function addition in multiple groups (bsc#1012628). - ASoC: topology: Fix stub for snd_soc_tplg_component_remove() (bsc#1012628). - phy: qcom-qusb2: Fix a memory leak on probe (bsc#1012628). - phy: ti: gmii-sel: check of_get_address() for failure (bsc#1012628). - phy: qcom-qmp: another fix for the sc8180x PCIe definition (bsc#1012628). - phy: qcom-snps: Correct the FSEL_MASK (bsc#1012628). - phy: Sparx5 Eth SerDes: Fix return value check in sparx5_serdes_probe() (bsc#1012628). - serial: xilinx_uartps: Fix race condition causing stuck TX (bsc#1012628). - clk: at91: sam9x60-pll: use DIV_ROUND_CLOSEST_ULL (bsc#1012628). - clk: at91: clk-master: check if div or pres is zero (bsc#1012628). - clk: at91: clk-master: fix prescaler logic (bsc#1012628). - HID: u2fzero: clarify error check and length calculations (bsc#1012628). - HID: u2fzero: properly handle timeouts in usb_submit_urb (bsc#1012628). - powerpc/nohash: Fix __ptep_set_access_flags() and ptep_set_wrprotect() (bsc#1012628). - powerpc/book3e: Fix set_memory_x() and set_memory_nx() (bsc#1012628). - powerpc/44x/fsp2: add missing of_node_put (bsc#1012628). - powerpc/xmon: fix task state output (bsc#1012628). - ALSA: oxfw: fix functional regression for Mackie Onyx 1640i in v5.14 or later (bsc#1012628). - iommu/dma: Fix incorrect error return on iommu deferred attach (bsc#1012628). - powerpc: Don't provide __kernel_map_pages() without ARCH_SUPPORTS_DEBUG_PAGEALLOC (bsc#1012628). - ASoC: cs42l42: Correct configuring of switch inversion from ts-inv (bsc#1012628). - RDMA/hns: Fix initial arm_st of CQ (bsc#1012628). - RDMA/hns: Modify the value of MAX_LP_MSG_LEN to meet hardware compatibility (bsc#1012628). - ASoC: rsnd: Fix an error handling path in 'rsnd_node_count()' (bsc#1012628). - serial: cpm_uart: Protect udbg definitions by CONFIG_SERIAL_CPM_CONSOLE (bsc#1012628). - virtio_ring: check desc == NULL when using indirect with packed (bsc#1012628). - vdpa/mlx5: Fix clearing of VIRTIO_NET_F_MAC feature bit (bsc#1012628). - mips: cm: Convert to bitfield API to fix out-of-bounds access (bsc#1012628). - power: supply: bq27xxx: Fix kernel crash on IRQ handler register error (bsc#1012628). - RDMA/core: Require the driver to set the IOVA correctly during rereg_mr (bsc#1012628). - apparmor: fix error check (bsc#1012628). - rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined (bsc#1012628). - mtd: rawnand: intel: Fix potential buffer overflow in probe (bsc#1012628). - nfsd: don't alloc under spinlock in rpc_parse_scope_id (bsc#1012628). - rtc: ds1302: Add SPI ID table (bsc#1012628). - rtc: ds1390: Add SPI ID table (bsc#1012628). - rtc: pcf2123: Add SPI ID table (bsc#1012628). - remoteproc: imx_rproc: Fix TCM io memory type (bsc#1012628). - i2c: i801: Use PCI bus rescan mutex to protect P2SB access (bsc#1012628). - dmaengine: idxd: move out percpu_ref_exit() to ensure it's outside submission (bsc#1012628). - rtc: mcp795: Add SPI ID table (bsc#1012628). - Input: ariel-pwrbutton - add SPI device ID table (bsc#1012628). - i2c: mediatek: fixing the incorrect register offset (bsc#1012628). - NFS: Default change_attr_type to NFS4_CHANGE_TYPE_IS_UNDEFINED (bsc#1012628). - NFS: Don't set NFS_INO_DATA_INVAL_DEFER and NFS_INO_INVALID_DATA (bsc#1012628). - NFS: Ignore the directory size when marking for revalidation (bsc#1012628). - NFS: Fix dentry verifier races (bsc#1012628). - pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds (bsc#1012628). - drm/bridge/lontium-lt9611uxc: fix provided connector suport (bsc#1012628). - drm/plane-helper: fix uninitialized variable reference (bsc#1012628). - PCI: aardvark: Don't spam about PIO Response Status (bsc#1012628). - PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge (bsc#1012628). - opp: Fix return in _opp_add_static_v2() (bsc#1012628). - NFS: Fix deadlocks in nfs_scan_commit_list() (bsc#1012628). - sparc: Add missing "FORCE" target when using if_changed (bsc#1012628). - fs: orangefs: fix error return code of orangefs_revalidate_lookup() (bsc#1012628). - Input: st1232 - increase "wait ready" timeout (bsc#1012628). - drm/bridge: nwl-dsi: Add atomic_get_input_bus_fmts (bsc#1012628). - mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare() (bsc#1012628). - PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation (bsc#1012628). - mtd: rawnand: arasan: Prevent an unsupported configuration (bsc#1012628). - mtd: core: don't remove debugfs directory if device is in use (bsc#1012628). - remoteproc: Fix a memory leak in an error handling path in 'rproc_handle_vdev()' (bsc#1012628). - rtc: rv3032: fix error handling in rv3032_clkout_set_rate() (bsc#1012628). - dmaengine: at_xdmac: call at_xdmac_axi_config() on resume path (bsc#1012628). - dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro (bsc#1012628). - dmaengine: stm32-dma: fix stm32_dma_get_max_width (bsc#1012628). - NFS: Fix up commit deadlocks (bsc#1012628). - NFS: Fix an Oops in pnfs_mark_request_commit() (bsc#1012628). - Fix user namespace leak (bsc#1012628). - auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string (bsc#1012628). - auxdisplay: ht16k33: Connect backlight to fbdev (bsc#1012628). - auxdisplay: ht16k33: Fix frame buffer device blanking (bsc#1012628). - soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read (bsc#1012628). - netfilter: nfnetlink_queue: fix OOB when mac header was cleared (bsc#1012628). - dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result` (bsc#1012628). - dmaengine: tegra210-adma: fix pm runtime unbalance (bsc#1012628). - dmanegine: idxd: fix resource free ordering on driver removal (bsc#1012628). - dmaengine: idxd: reconfig device after device reset command (bsc#1012628). - signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL) (bsc#1012628). - m68k: set a default value for MEMORY_RESERVE (bsc#1012628). - watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT (bsc#1012628). - ar7: fix kernel builds for compiler test (bsc#1012628). - scsi: target: core: Remove from tmr_list during LUN unlink (bsc#1012628). - scsi: qla2xxx: Relogin during fabric disturbance (bsc#1012628). - scsi: qla2xxx: Fix gnl list corruption (bsc#1012628). - scsi: qla2xxx: Turn off target reset during issue_lip (bsc#1012628). - scsi: qla2xxx: edif: Fix app start fail (bsc#1012628). - scsi: qla2xxx: edif: Fix app start delay (bsc#1012628). - scsi: qla2xxx: edif: Flush stale events and msgs on session down (bsc#1012628). - scsi: qla2xxx: edif: Increase ELS payload (bsc#1012628). - scsi: qla2xxx: edif: Fix EDIF bsg (bsc#1012628). - NFSv4: Fix a regression in nfs_set_open_stateid_locked() (bsc#1012628). - dmaengine: idxd: fix resource leak on dmaengine driver disable (bsc#1012628). - i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()' (bsc#1012628). - gpio: realtek-otto: fix GPIO line IRQ offset (bsc#1012628). - xen-pciback: Fix return in pm_ctrl_init() (bsc#1012628). - nbd: fix max value for 'first_minor' (bsc#1012628). - nbd: fix possible overflow for 'first_minor' in nbd_dev_add() (bsc#1012628). - io-wq: fix max-workers not correctly set on multi-node system (bsc#1012628). - net: davinci_emac: Fix interrupt pacing disable (bsc#1012628). - kselftests/net: add missed icmp.sh test to Makefile (bsc#1012628). - kselftests/net: add missed setup_loopback.sh/setup_veth.sh to Makefile (bsc#1012628). - kselftests/net: add missed SRv6 tests (bsc#1012628). - kselftests/net: add missed vrf_strict_mode_test.sh test to Makefile (bsc#1012628). - kselftests/net: add missed toeplitz.sh/toeplitz_client.sh to Makefile (bsc#1012628). - ethtool: fix ethtool msg len calculation for pause stats (bsc#1012628). - openrisc: fix SMP tlb flush NULL pointer dereference (bsc#1012628). - net: vlan: fix a UAF in vlan_dev_real_dev() (bsc#1012628). - net: dsa: felix: fix broken VLAN-tagged PTP under VLAN-aware bridge (bsc#1012628). - ice: Fix replacing VF hardware MAC to existing MAC filter (bsc#1012628). - ice: Fix not stopping Tx queues for VFs (bsc#1012628). - kdb: Adopt scheduler's task classification (bsc#1012628). - ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses (bsc#1012628). - PCI: j721e: Fix j721e_pcie_probe() error path (bsc#1012628). - nvdimm/btt: do not call del_gendisk() if not needed (bsc#1012628). - scsi: bsg: Fix errno when scsi_bsg_register_queue() fails (bsc#1012628). - scsi: ufs: ufshpb: Use proper power management API (bsc#1012628). - scsi: ufs: core: Fix NULL pointer dereference (bsc#1012628). - scsi: ufs: ufshpb: Properly handle max-single-cmd (bsc#1012628). - selftests: net: properly support IPv6 in GSO GRE test (bsc#1012628). - drm/nouveau/svm: Fix refcount leak bug and missing check against null bug (bsc#1012628). - nvdimm/pmem: cleanup the disk if pmem_release_disk() is yet assigned (bsc#1012628). - block/ataflop: use the blk_cleanup_disk() helper (bsc#1012628). - block/ataflop: add registration bool before calling del_gendisk() (bsc#1012628). - block/ataflop: provide a helper for cleanup up an atari disk (bsc#1012628). - ataflop: remove ataflop_probe_lock mutex (bsc#1012628). - PCI: Do not enable AtomicOps on VFs (bsc#1012628). - cpufreq: intel_pstate: Clear HWP desired on suspend/shutdown and offline (bsc#1012628). - net: phy: fix duplex out of sync problem while changing settings (bsc#1012628). - block: fix device_add_disk() kobject_create_and_add() error handling (bsc#1012628). - drm/ttm: remove ttm_bo_vm_insert_huge() (bsc#1012628). - bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed (bsc#1012628). - octeontx2-pf: select CONFIG_NET_DEVLINK (bsc#1012628). - ALSA: memalloc: Catch call with NULL snd_dma_buffer pointer (bsc#1012628). - mfd: core: Add missing of_node_put for loop iteration (bsc#1012628). - mfd: cpcap: Add SPI device ID table (bsc#1012628). - mfd: sprd: Add SPI device ID table (bsc#1012628). - mfd: altera-sysmgr: Fix a mistake caused by resource_size conversion (bsc#1012628). - ACPI: PM: Fix device wakeup power reference counting error (bsc#1012628). - libbpf: Fix lookup_and_delete_elem_flags error reporting (bsc#1012628). - selftests/bpf/xdp_redirect_multi: Put the logs to tmp folder (bsc#1012628). - selftests/bpf/xdp_redirect_multi: Use arping to accurate the arp number (bsc#1012628). - selftests/bpf/xdp_redirect_multi: Give tcpdump a chance to terminate cleanly (bsc#1012628). - selftests/bpf/xdp_redirect_multi: Limit the tests in netns (bsc#1012628). - drm: fb_helper: improve CONFIG_FB dependency (bsc#1012628). - Revert "drm/imx: Annotate dma-fence critical section in commit path" (bsc#1012628). - drm/amdgpu/powerplay: fix sysfs_emit/sysfs_emit_at handling (bsc#1012628). - can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path (bsc#1012628). - can: mcp251xfd: mcp251xfd_chip_start(): fix error handling for mcp251xfd_chip_rx_int_enable() (bsc#1012628). - mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration() (bsc#1012628). - zram: off by one in read_block_state() (bsc#1012628). - perf bpf: Add missing free to bpf_event__print_bpf_prog_info() (bsc#1012628). - llc: fix out-of-bound array index in llc_sk_dev_hash() (bsc#1012628). - nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails (bsc#1012628). - litex_liteeth: Fix a double free in the remove function (bsc#1012628). - arm64: arm64_ftr_reg->name may not be a human-readable string (bsc#1012628). - arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions (bsc#1012628). - bpf, sockmap: Remove unhash handler for BPF sockmap usage (bsc#1012628). - bpf, sockmap: Fix race in ingress receive verdict with redirect to self (bsc#1012628). - bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding (bsc#1012628). - bpf, sockmap: sk_skb data_end access incorrect when src_reg = dst_reg (bsc#1012628). - dmaengine: stm32-dma: fix burst in case of unaligned memory address (bsc#1012628). - dmaengine: stm32-dma: avoid 64-bit division in stm32_dma_get_max_width (bsc#1012628). - gve: Fix off by one in gve_tx_timeout() (bsc#1012628). - drm/i915/fb: Fix rounding error in subsampled plane size calculation (bsc#1012628). - init: make unknown command line param message clearer (bsc#1012628). - seq_file: fix passing wrong private data (bsc#1012628). - drm/amdgpu: fix uvd crash on Polaris12 during driver unloading (bsc#1012628). - net: dsa: mv88e6xxx: Don't support >1G speeds on 6191X on ports other than 10 (bsc#1012628). - net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any (bsc#1012628). - net: hns3: fix ROCE base interrupt vector initialization bug (bsc#1012628). - net: hns3: fix pfc packet number incorrect after querying pfc parameters (bsc#1012628). - net: hns3: fix kernel crash when unload VF while it is being reset (bsc#1012628). - net: hns3: allow configure ETS bandwidth of all TCs (bsc#1012628). - net: stmmac: allow a tc-taprio base-time of zero (bsc#1012628). - net: ethernet: ti: cpsw_ale: Fix access to un-initialized memory (bsc#1012628). - net: marvell: mvpp2: Fix wrong SerDes reconfiguration order (bsc#1012628). - vsock: prevent unnecessary refcnt inc for nonblocking connect (bsc#1012628). - net/smc: fix sk_refcnt underflow on linkdown and fallback (bsc#1012628). - cxgb4: fix eeprom len when diagnostics not implemented (bsc#1012628). - selftests/net: udpgso_bench_rx: fix port argument (bsc#1012628). - thermal: int340x: fix build on 32-bit targets (bsc#1012628). - smb3: do not error on fsync when readonly (bsc#1012628). - ARM: 9155/1: fix early early_iounmap() (bsc#1012628). - ARM: 9156/1: drop cc-option fallbacks for architecture selection (bsc#1012628). - parisc: Fix backtrace to always include init funtion names (bsc#1012628). - parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page (bsc#1012628). - MIPS: fix duplicated slashes for Platform file path (bsc#1012628). - MIPS: fix *-pkg builds for loongson2ef platform (bsc#1012628). - MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL (bsc#1012628). - x86/mce: Add errata workaround for Skylake SKX37 (bsc#1012628). - PCI/MSI: Move non-mask check back into low level accessors (bsc#1012628). - PCI/MSI: Destroy sysfs before freeing entries (bsc#1012628). - KVM: x86: move guest_pv_has out of user_access section (bsc#1012628). - posix-cpu-timers: Clear task::posix_cputimers_work in copy_process() (bsc#1012628). - irqchip/sifive-plic: Fixup EOI failed when masked (bsc#1012628). - f2fs: should use GFP_NOFS for directory inodes (bsc#1012628). - f2fs: include non-compressed blocks in compr_written_block (bsc#1012628). - f2fs: fix UAF in f2fs_available_free_memory (bsc#1012628). - ceph: fix mdsmap decode when there are MDS's beyond max_mds (bsc#1012628). - erofs: fix unsafe pagevec reuse of hooked pclusters (bsc#1012628). - drm/i915/guc: Fix blocked context accounting (bsc#1012628). - block: Hold invalidate_lock in BLKDISCARD ioctl (bsc#1012628). - block: Hold invalidate_lock in BLKZEROOUT ioctl (bsc#1012628). - block: Hold invalidate_lock in BLKRESETZONE ioctl (bsc#1012628). - ksmbd: Fix buffer length check in fsctl_validate_negotiate_info() (bsc#1012628). - ksmbd: don't need 8byte alignment for request length in ksmbd_check_message (bsc#1012628). - dmaengine: ti: k3-udma: Set bchan to NULL if a channel request fail (bsc#1012628). - dmaengine: ti: k3-udma: Set r/tchan or rflow to NULL if request fail (bsc#1012628). - dmaengine: bestcomm: fix system boot lockups (bsc#1012628). - net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE (bsc#1012628). - 9p/net: fix missing error check in p9_check_errors (bsc#1012628). - mm/filemap.c: remove bogus VM_BUG_ON (bsc#1012628). - memcg: prohibit unconditional exceeding the limit of dying tasks (bsc#1012628). - mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (bsc#1012628). - mm, oom: do not trigger out_of_memory from the #PF (bsc#1012628). - mm, thp: lock filemap when truncating page cache (bsc#1012628). - mm, thp: fix incorrect unmap behavior for private pages (bsc#1012628). - mfd: dln2: Add cell for initializing DLN2 ADC (bsc#1012628). - video: backlight: Drop maximum brightness override for brightness zero (bsc#1012628). - bcache: fix use-after-free problem in bcache_device_free() (bsc#1012628). - bcache: Revert "bcache: use bvec_virt" (bsc#1012628). - PM: sleep: Avoid calling put_device() under dpm_list_mtx (bsc#1012628). - s390/cpumf: cpum_cf PMU displays invalid value after hotplug remove (bsc#1012628). - s390/cio: check the subchannel validity for dev_busid (bsc#1012628). - s390/tape: fix timer initialization in tape_std_assign() (bsc#1012628). - s390/ap: Fix hanging ioctl caused by orphaned replies (bsc#1012628). - s390/cio: make ccw_device_dma_* more robust (bsc#1012628). - remoteproc: elf_loader: Fix loading segment when is_iomem true (bsc#1012628). - remoteproc: Fix the wrong default value of is_iomem (bsc#1012628). - remoteproc: imx_rproc: Fix ignoring mapping vdev regions (bsc#1012628). - remoteproc: imx_rproc: Fix rsc-table name (bsc#1012628). - mtd: rawnand: fsmc: Fix use of SM ORDER (bsc#1012628). - mtd: rawnand: ams-delta: Keep the driver compatible with on-die ECC engines (bsc#1012628). - mtd: rawnand: xway: Keep the driver compatible with on-die ECC engines (bsc#1012628). - mtd: rawnand: mpc5121: Keep the driver compatible with on-die ECC engines (bsc#1012628). - mtd: rawnand: gpio: Keep the driver compatible with on-die ECC engines (bsc#1012628). - mtd: rawnand: pasemi: Keep the driver compatible with on-die ECC engines (bsc#1012628). - mtd: rawnand: orion: Keep the driver compatible with on-die ECC engines (bsc#1012628). - mtd: rawnand: plat_nand: Keep the driver compatible with on-die ECC engines (bsc#1012628). - mtd: rawnand: au1550nd: Keep the driver compatible with on-die ECC engines (bsc#1012628). - powerpc/vas: Fix potential NULL pointer dereference (bsc#1012628). - powerpc/bpf: Fix write protecting JIT code (bsc#1012628). - powerpc/32e: Ignore ESR in instruction storage interrupt handler (bsc#1012628). - powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload (bsc#1012628). - powerpc/security: Use a mutex for interrupt exit code patching (bsc#1012628). - powerpc/64s/interrupt: Fix check_return_regs_valid() false positive (bsc#1012628). - powerpc/pseries/mobility: ignore ibm, platform-facilities updates (bsc#1012628). - powerpc/85xx: fix timebase sync issue when CONFIG_HOTPLUG_CPU=n (bsc#1012628). - drm/sun4i: Fix macros in sun8i_csc.h (bsc#1012628). - PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros (bsc#1012628). - PCI: aardvark: Fix PCIe Max Payload Size setting (bsc#1012628). - SUNRPC: Partial revert of commit 6f9f17287e78 (bsc#1012628). - drm/amd/display: Look at firmware version to determine using dmub on dcn21 (bsc#1012628). - media: vidtv: move kfree(dvb) to vidtv_bridge_dev_release() (bsc#1012628). - cifs: fix memory leak of smb3_fs_context_dup::server_hostname (bsc#1012628). - ath10k: fix invalid dma_addr_t token assignment (bsc#1012628). - mmc: moxart: Fix null pointer dereference on pointer host (bsc#1012628). - selftests/x86/iopl: Adjust to the faked iopl CLI/STI usage (bsc#1012628). - selftests/bpf: Fix also no-alu32 strobemeta selftest (bsc#1012628). - arch/cc: Introduce a function to check for confidential computing features (bsc#1012628). - x86/sev: Add an x86 version of cc_platform_has() (bsc#1012628). - x86/sev: Make the #VC exception stacks part of the default stacks storage (bsc#1012628). - media: videobuf2: always set buffer vb2 pointer (bsc#1012628). - media: videobuf2-dma-sg: Fix buf->vb NULL pointer dereference (bsc#1012628). - Update config files. On armv7hl, set DRM_PANEL_SIMPLE=m to fix link error caused by 9d6366e743f3. - commit 60fa139 - Refresh patches.suse/Input-i8042-Add-deferred-probe-support.patch. Fix cut & paste error in param description. - commit 6d1d038 - random: fix crash on multiple early calls to add_bootloader_randomness() (bsc#1184924) - commit 3f996f1 - ALSA: usb-audio: Fix dB level of Bose Revolve+ SoundLink (bsc#1192375). - ALSA: usb-audio: Add minimal-mute notion in dB mapping table (bsc#1192375). - ALSA: usb-audio: Use int for dB map values (bsc#1192375). - commit 0ea1c07 - rtw89: update partition size of firmware header on skb->data (bsc#1188303). - commit d879057 - Drop downstream rtw89 fix patch, to be replaced with the upstream fix - commit b9cd6cb - Linux 5.15.2 (bsc#1012628). - rsi: fix control-message timeout (bsc#1012628). - media: staging/intel-ipu3: css: Fix wrong size comparison imgu_css_fw_init (bsc#1012628). - staging: r8188eu: fix memleak in rtw_wx_set_enc_ext (bsc#1012628). - staging: rtl8192u: fix control-message timeouts (bsc#1012628). - staging: r8712u: fix control-message timeout (bsc#1012628). - comedi: vmk80xx: fix bulk and interrupt message timeouts (bsc#1012628). - comedi: vmk80xx: fix bulk-buffer overflow (bsc#1012628). - comedi: vmk80xx: fix transfer-buffer overflows (bsc#1012628). - comedi: ni_usb6501: fix NULL-deref in command paths (bsc#1012628). - comedi: dt9812: fix DMA buffers on stack (bsc#1012628). - isofs: Fix out of bound access for corrupted isofs image (bsc#1012628). - staging: rtl8712: fix use-after-free in rtl8712_dl_fw (bsc#1012628). - btrfs: fix lzo_decompress_bio() kmap leakage (bsc#1012628). - kfence: default to dynamic branch instead of static keys mode (bsc#1012628). - kfence: always use static branches to guard kfence_alloc() (bsc#1012628). - binder: don't detect sender/target during buffer cleanup (bsc#1012628). - binder: use cred instead of task for getsecid (bsc#1012628). - binder: use cred instead of task for selinux checks (bsc#1012628). - binder: use euid from cred instead of using task (bsc#1012628). - Revert "proc/wchan: use printk format instead of lookup_symbol_name()" (bsc#1012628). - usb-storage: Add compatibility quirk flags for iODD 2531/2541 (bsc#1012628). - usb: musb: Balance list entry in musb_gadget_queue (bsc#1012628). - usb: gadget: Mark USB_FSL_QE broken on 64-bit (bsc#1012628). - usb: ehci: handshake CMD_RUN instead of STS_HALT (bsc#1012628). - Revert "x86/kvm: fix vcpu-id indexed array sizes" (bsc#1012628). - KVM: x86: avoid warning with -Wbitwise-instead-of-logical (bsc#1012628). - commit 26a203b - Fix problem with missing installkernel on Tumbleweed. - commit 2ed6686 - config: refresh - drop PROFILE_ALL_BRANCHES where not available any more - commit d11f2e4 - Revert "rpm/config.sh: Compress modules with zstd (jsc#SLE-21256)." This reverts commit 648b5c7cb84366056aed609528029ae9c75c3d37. Reported to cause build problems in IBS (boo#1192457). - commit dcfd611 - Update config files: set CONFIG_FORTIFY_SOURCE=y consistently (bsc#1192476) - commit 3837451 - Update config files (bsc#1192456). CONFIG_IMA_TRUSTED_KEYRING=y - commit 2251920 - series.conf: cleanup - update upstream reference and move to appropriate section - patches.suse/ALSA-usb-audio-Restrict-rates-for-the-shared-clocks.patch - commit 651a971 - Linux 5.15.1 (bsc#1012628). - sfc: Fix reading non-legacy supported link modes (bsc#1012628). - Revert "xhci: Set HCD flag to defer primary roothub registration" (bsc#1012628). - Revert "usb: core: hcd: Add support for deferring roothub registration" (bsc#1012628). - drm/amdkfd: fix boot failure when iommu is disabled in Picasso (bsc#1012628). - Revert "soc: imx: gpcv2: move reset assert after requesting domain power up" (bsc#1012628). - ARM: 9120/1: Revert "amba: make use of -1 IRQs warn" (bsc#1012628). - Revert "wcn36xx: Disable bmps when encryption is disabled" (bsc#1012628). - drm/amdgpu: revert "Add autodump debugfs node for gpu reset v8" (bsc#1012628). - drm/amd/display: Revert "Directly retrain link from debugfs" (bsc#1012628). - Revert "drm/i915/gt: Propagate change in error status to children on unhold" (bsc#1012628). - ALSA: usb-audio: Add quirk for Audient iD14 (bsc#1012628). - commit 7ecebb2 - Input: i8042 - Add deferred probe support (bsc#1190256). - commit 5a246e6 - update patch metadata - update upstream reference - patches.suse/arm64-dts-rockchip-Disable-CDN-DP-on-Pinebook-Pro.patch - commit aa05ab3 - series.conf: cleanup - move to the section for short lived patches: - patches.suse/rtw89-Fix-crash-by-loading-compressed-firmware-file.patch - commit 1fb2e08 - rtw89: Fix crash by loading compressed firmware file (bsc#1188303). - commit 42e1103 - supported-flag: consolidate a bit more patches.suse/revert-modpost-remove-get_next_text-and-make-grab-release_-file-s.patch is a partial revert of mainline commit 75893572d453 ("modpost: remove get_next_text() and make {grab,release_}file static"); it restores function get_next_line() which was removed in mainline but we still need it. As the function is static and only used in code built only with CONFIG_SUSE_KERNEL_SUPPORTED enabled, compiler issues a warning when building with CONFIG_SUSE_KERNEL_SUPPORTED disabled. Merge the patch into patches.suse/add-suse-supported-flag.patch and move the function into an #ifdef CONFIG_SUSE_KERNEL_SUPPORTED block. The only effect on expanded tree is moving get_next_line() lower so that it is only compiled when CONFIG_SUSE_KERNEL_SUPPORTED=n. - commit 0c612fa - Input: i8042 - Add quirk for Fujitsu Lifebook T725 (bsc#1191980). - commit 44f2754 - update patch metadata - update upstream references: - patches.suse/Bluetooth-sco-Fix-lock_sock-blockage-by-memcpy_from_.patch - patches.suse/media-firewire-firedtv-avc-fix-a-buffer-overflow-in-.patch - patches.suse/rtw89-Fix-two-spelling-mistakes-in-debug-messages.patch - patches.suse/rtw89-Fix-variable-dereferenced-before-check-sta.patch - patches.suse/rtw89-Remove-redundant-check-of-ret-after-call-to-rt.patch - patches.suse/rtw89-add-Realtek-802.11ax-driver.patch - patches.suse/rtw89-fix-error-function-parameter.patch - patches.suse/rtw89-fix-return-value-check-in-rtw89_cam_send_sec_k.patch - patches.suse/rtw89-fix-return-value-in-hfc_pub_cfg_chk.patch - patches.suse/rtw89-remove-duplicate-register-definitions.patch - patches.suse/rtw89-remove-unneeded-semicolon.patch - commit 2e35b89 - Refresh patches.suse/iwlwifi-module-firmware-ucode-fix.patch (boo#1191417) There is one model that contains *-66.ucode. Add the exception. - commit f0d7a09 - Update to 5.15 final - refresh configs - drop CONFIG_RESET_PISTACHIO - commit 2ab31e7 - config: update and enable armv6hl Update armv6hl configs to 5.15-rc7 and enable them. Where possible, values are taken from armv7hl, the rest is guesswork based on values of similar config options. - commit 22c5286 - config: update and enable armv7hl Update armv7hl configs to 5.15-rc7 and enable them. Where possible, values are taken from arm64, the rest is guesswork based on values of similar config options. - commit 3b362e7 - config: update and enable arm64 Update arm64 configs to 5.15-rc7 and enable them. Where possible, values are taken from x86_64, the rest is guesswork based on values of similar config options. - commit 482d5b4 - rtw89: Fix variable dereferenced before check 'sta' (bsc#1191321). - rtw89: fix return value in hfc_pub_cfg_chk (bsc#1191321). - rtw89: remove duplicate register definitions (bsc#1191321). - rtw89: fix error function parameter (bsc#1191321). - rtw89: remove unneeded semicolon (bsc#1191321). - rtw89: fix return value check in rtw89_cam_send_sec_key_cmd() (bsc#1191321). - rtw89: Remove redundant check of ret after call to rtw89_mac_enable_bb_rf (bsc#1191321). - rtw89: Fix two spelling mistakes in debug messages (bsc#1191321). - rtw89: Fix variable dereferenced before check 'sta' (bsc#1191321). - rtw89: fix return value in hfc_pub_cfg_chk (bsc#1191321). - rtw89: remove duplicate register definitions (bsc#1191321). - rtw89: fix error function parameter (bsc#1191321). - rtw89: remove unneeded semicolon (bsc#1191321). - rtw89: fix return value check in rtw89_cam_send_sec_key_cmd() (bsc#1191321). - rtw89: Remove redundant check of ret after call to rtw89_mac_enable_bb_rf (bsc#1191321). - rtw89: Fix two spelling mistakes in debug messages (bsc#1191321). - commit 719bb03 - config: arm64: enable dpaa2 restool support References: bsc#1191190 - commit c86f145 - Linux 5.14.15 (bsc#1012628). - block/mq-deadline: Move dd_queued() to fix defined but not used warning (bsc#1012628). - parisc: math-emu: Fix fall-through warnings (bsc#1012628). - sh: pgtable-3level: fix cast to pointer from integer of different size (bsc#1012628). - arm: dts: vexpress-v2p-ca9: Fix the SMB unit-address (bsc#1012628). - ARM: dts: at91: sama5d2_som1_ek: disable ISC node by default (bsc#1012628). - block: decode QUEUE_FLAG_HCTX_ACTIVE in debugfs output (bsc#1012628). - xen/x86: prevent PVH type from getting clobbered (bsc#1012628). - r8152: avoid to resubmit rx immediately (bsc#1012628). - drm/amdgpu/display: fix dependencies for DRM_AMD_DC_SI (bsc#1012628). - drm/amdgpu: init iommu after amdkfd device init (bsc#1012628). - xtensa: xtfpga: use CONFIG_USE_OF instead of CONFIG_OF (bsc#1012628). - xtensa: xtfpga: Try software restart before simulating CPU reset (bsc#1012628). - NFSD: Keep existing listeners on portlist error (bsc#1012628). - powerpc/lib: Add helper to check if offset is within conditional branch range (bsc#1012628). - powerpc/bpf: Validate branch ranges (bsc#1012628). - powerpc/security: Add a helper to query stf_barrier type (bsc#1012628). - powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC (bsc#1012628). - ASoC: pcm512x: Mend accesses to the I2S_1 and I2S_2 registers (bsc#1012628). - ASoC: fsl_xcvr: Fix channel swap issue with ARC (bsc#1012628). - ASoC: pcm179x: Add missing entries SPI to device ID table (bsc#1012628). - ASoC: cs4341: Add SPI device ID table (bsc#1012628). - KVM: arm64: Fix host stage-2 PGD refcount (bsc#1012628). - KVM: arm64: Release mmap_lock when using VM_SHARED with MTE (bsc#1012628). - netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value (bsc#1012628). - netfilter: nf_tables: skip netdev events generated on netns removal (bsc#1012628). - dma-debug: fix sg checks in debug_dma_map_sg() (bsc#1012628). - ASoC: wm8960: Fix clock configuration on slave mode (bsc#1012628). - ice: Fix failure to re-add LAN/RDMA Tx queues (bsc#1012628). - ice: Avoid crash from unnecessary IDA free (bsc#1012628). - ice: fix getting UDP tunnel entry (bsc#1012628). - ice: Print the api_patch as part of the fw.mgmt.api (bsc#1012628). - netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6 (bsc#1012628). - netfilter: ipvs: make global sysctl readonly in non-init netns (bsc#1012628). - sctp: fix transport encap_port update in sctp_vtag_verify (bsc#1012628). - lan78xx: select CRC32 (bsc#1012628). - tcp: md5: Fix overlap between vrf and non-vrf keys (bsc#1012628). - ipv6: When forwarding count rx stats on the orig netdev (bsc#1012628). - hamradio: baycom_epp: fix build for UML (bsc#1012628). - net: dsa: lantiq_gswip: fix register definition (bsc#1012628). - net/sched: act_ct: Fix byte count on fragmented packets (bsc#1012628). - NIOS2: irqflags: rename a redefined register name (bsc#1012628). - net: dsa: Fix an error handling path in 'dsa_switch_parse_ports_of()' (bsc#1012628). - powerpc/smp: do not decrement idle task preempt count in CPU offline (bsc#1012628). - net: hns3: Add configuration of TM QCN error event (bsc#1012628). - net: hns3: reset DWRR of unused tc to zero (bsc#1012628). - net: hns3: add limit ets dwrr bandwidth cannot be 0 (bsc#1012628). - net: hns3: schedule the polling again when allocation fails (bsc#1012628). - net: hns3: fix vf reset workqueue cannot exit (bsc#1012628). - net: hns3: disable sriov before unload hclge layer (bsc#1012628). - net: stmmac: Fix E2E delay mechanism (bsc#1012628). - ptp: Fix possible memory leak in ptp_clock_register() (bsc#1012628). - e1000e: Fix packet loss on Tiger Lake and later (bsc#1012628). - igc: Update I226_K device ID (bsc#1012628). - ice: Add missing E810 device ids (bsc#1012628). - net/mlx5e: IPsec: Fix a misuse of the software parser's fields (bsc#1012628). - net/mlx5e: IPsec: Fix work queue entry ethernet segment checksum flags (bsc#1012628). - drm/panel: ilitek-ili9881c: Fix sync for Feixin K101-IM2BYL02 panel (bsc#1012628). - drm/kmb: Work around for higher system clock (bsc#1012628). - drm/kmb: Remove clearing DPHY regs (bsc#1012628). - drm/kmb: Disable change of plane parameters (bsc#1012628). - drm/kmb: Corrected typo in handle_lcd_irq (bsc#1012628). - drm/kmb: Enable ADV bridge after modeset (bsc#1012628). - net: enetc: fix ethtool counter name for PM0_TERR (bsc#1012628). - net: enetc: make sure all traffic classes can send large frames (bsc#1012628). - can: rcar_can: fix suspend/resume (bsc#1012628). - can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state notification (bsc#1012628). - can: peak_pci: peak_pci_remove(): fix UAF (bsc#1012628). - can: isotp: isotp_sendmsg(): fix return error on FC timeout on TX path (bsc#1012628). - can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible() (bsc#1012628). - can: isotp: isotp_sendmsg(): fix TX buffer concurrent access in isotp_sendmsg() (bsc#1012628). - can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer (bsc#1012628). - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (bsc#1012628). - can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with error length (bsc#1012628). - can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes (bsc#1012628). - ceph: skip existing superblocks that are blocklisted or shut down when mounting (bsc#1012628). - ceph: fix handling of "meta" errors (bsc#1012628). - tracing: Have all levels of checks prevent recursion (bsc#1012628). - ocfs2: fix data corruption after conversion from inline format (bsc#1012628). - ocfs2: mount fails with buffer overflow in strlen (bsc#1012628). - mm/userfaultfd: selftests: fix memory corruption with thp enabled (bsc#1012628). - userfaultfd: fix a race between writeprotect and exit_mmap() (bsc#1012628). - mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind() (bsc#1012628). - elfcore: correct reference to CONFIG_UML (bsc#1012628). - vfs: check fd has read access in kernel_read_file_from_fd() (bsc#1012628). - mm/secretmem: fix NULL page->mapping dereference in page_is_secretmem() (bsc#1012628). - ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset (bsc#1012628). - ALSA: hda/realtek: Add quirk for Clevo PC50HS (bsc#1012628). - ASoC: DAPM: Fix missing kctl change notifications (bsc#1012628). - ASoC: nau8824: Fix headphone vs headset, button-press detection no longer working (bsc#1012628). - blk-cgroup: blk_cgroup_bio_start() should use irq-safe operations on blkg->iostat_cpu (bsc#1012628). - audit: fix possible null-pointer dereference in audit_filter_rules (bsc#1012628). - net: dsa: mt7530: correct ds->num_ports (bsc#1012628). - ucounts: Move get_ucounts from cred_alloc_blank to key_change_session_keyring (bsc#1012628). - ucounts: Pair inc_rlimit_ucounts with dec_rlimit_ucoutns in commit_creds (bsc#1012628). - ucounts: Proper error handling in set_cred_ucounts (bsc#1012628). - ucounts: Fix signal ucount refcounting (bsc#1012628). - KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest() (bsc#1012628). - KVM: PPC: Book3S HV: Make idle_kvm_start_guest() return 0 if it went to guest (bsc#1012628). - powerpc/idle: Don't corrupt back chain when going idle (bsc#1012628). - mm, slub: fix mismatch between reconstructed freelist depth and cnt (bsc#1012628). - mm, slub: fix potential memoryleak in kmem_cache_open() (bsc#1012628). - mm, slub: fix potential use-after-free in slab_debugfs_fops (bsc#1012628). - mm, slub: fix incorrect memcg slab count for bulk free (bsc#1012628). - KVM: nVMX: promptly process interrupts delivered while in guest mode (bsc#1012628). - KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA (bsc#1012628). - KVM: SEV-ES: rename guest_ins_data to sev_pio_data (bsc#1012628). - KVM: SEV-ES: clean up kvm_sev_es_ins/outs (bsc#1012628). - KVM: SEV-ES: keep INS functions together (bsc#1012628). - KVM: SEV-ES: fix length of string I/O (bsc#1012628). - KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed (bsc#1012628). - KVM: SEV-ES: reduce ghcb_sa_len to 32 bits (bsc#1012628). - KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out (bsc#1012628). - KVM: x86: check for interrupts before deciding whether to exit the fast path (bsc#1012628). - KVM: x86: split the two parts of emulator_pio_in (bsc#1012628). - KVM: x86: remove unnecessary arguments from complete_emulator_pio_in (bsc#1012628). - nfc: nci: fix the UAF of rf_conn_info object (bsc#1012628). - isdn: cpai: check ctr->cnr to avoid array index out of bound (bsc#1012628). - netfilter: Kconfig: use 'default y' instead of 'm' for bool config option (bsc#1012628). - selftests: netfilter: remove stray bash debug line (bsc#1012628). - net: bridge: mcast: use multicast_membership_interval for IGMPv3 (bsc#1012628). - KVM: SEV-ES: Set guest_state_protected after VMSA update (bsc#1012628). - drm: mxsfb: Fix NULL pointer dereference crash on unload (bsc#1012628). - net: hns3: fix the max tx size according to user manual (bsc#1012628). - KVM: MMU: Reset mmu->pkru_mask to avoid stale data (bsc#1012628). - kunit: fix reference count leak in kfree_at_end (bsc#1012628). - drm/msm/a6xx: Serialize GMU communication (bsc#1012628). - gcc-plugins/structleak: add makefile var for disabling structleak (bsc#1012628). - iio/test-format: build kunit tests without structleak plugin (bsc#1012628). - device property: build kunit tests without structleak plugin (bsc#1012628). - thunderbolt: build kunit tests without structleak plugin (bsc#1012628). - bitfield: build kunit tests without structleak plugin (bsc#1012628). - objtool: Check for gelf_update_rel[a] failures (bsc#1012628). - objtool: Update section header before relocations (bsc#1012628). - btrfs: deal with errors when checking if a dir entry exists during log replay (bsc#1012628). - net: stmmac: add support for dwmac 3.40a (bsc#1012628). - ARM: dts: spear3xx: Fix gmac node (bsc#1012628). - isdn: mISDN: Fix sleeping function called from invalid context (bsc#1012628). - platform/x86: intel_scu_ipc: Increase virtual timeout to 10s (bsc#1012628). - platform/x86: intel_scu_ipc: Update timeout value in comment (bsc#1012628). - ALSA: hda: avoid write to STATESTS if controller is in reset (bsc#1012628). - spi: Fix deadlock when adding SPI controllers on SPI buses (bsc#1012628). - spi-mux: Fix false-positive lockdep splats (bsc#1012628). - libperf test evsel: Fix build error on !x86 architectures (bsc#1012628). - libperf tests: Fix test_stat_cpu (bsc#1012628). - perf/x86/msr: Add Sapphire Rapids CPU support (bsc#1012628). - Input: snvs_pwrkey - add clk handling (bsc#1012628). - ASoC: codec: wcd938x: Add irq config support (bsc#1012628). - scsi: iscsi: Fix set_param() handling (bsc#1012628). - scsi: storvsc: Fix validation for unsolicited incoming packets (bsc#1012628). - scsi: mpi3mr: Fix duplicate device entries when scanning through sysfs (bsc#1012628). - scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els() (bsc#1012628). - mm/thp: decrease nr_thps in file's mapping on THP split (bsc#1012628). - sched/scs: Reset the shadow stack when idle_task_exit (bsc#1012628). - net: hns3: fix for miscalculation of rx unused desc (bsc#1012628). - net/mlx5: Lag, move lag destruction to a workqueue (bsc#1012628). - net/mlx5: Lag, change multipath and bonding to be mutually exclusive (bsc#1012628). - drm/kmb: Enable alpha blended second plane (bsc#1012628). - drm/kmb: Limit supported mode to 1080p (bsc#1012628). - autofs: fix wait name hash calculation in autofs_wait() (bsc#1012628). - scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma() (bsc#1012628). - s390/pci: cleanup resources only if necessary (bsc#1012628). - s390/pci: fix zpci_zdev_put() on reserve (bsc#1012628). - bpf, test, cgroup: Use sk_{alloc,free} for test cases (bsc#1012628). - net: mdiobus: Fix memory leak in __mdiobus_register (bsc#1012628). - e1000e: Separate TGP board type from SPT (bsc#1012628). - ARM: 9122/1: select HAVE_FUTEX_CMPXCHG (bsc#1012628). - pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume() (bsc#1012628). - Update config files. - commit 3416a5a - Update to 5.15-rc7 - commit 89a05b7 ==== lftp ==== - Deprecate the lftp_wrapper script. It is still available as an "update-alternative" for "ftp", but it is no longer used by default. The default implementation of "ftp" now is the "lftp" executable. [jsc#SLE-19631] Lftp_wrapper is an internal creation of SUSE, dating back to 2005. It was developed to help some customers transition from lukemftp, which disappeared from SLE between versions 11 and 12, to lftp. To make the transition as smooth as possible, the wrapper was made the default FTP client. However, the code was never upstreamed and it was never properly reviewed. From a security perspective (and FTP clients are definitely a target for attackers), this is rather worrying. There are many issues with lftp_wrapper, in addition to the low code quality and the fact that it has no real upstream: * Customers are reporting bugs: bsc#974874, bsc#1178363. * It has no manual page ("man ftp" displays the lftp manual page, despite both having different command line options). * Some command line options are not actually implemented, or only work in specific cases. * It was only designed for non-interactive use, but this is only mentioned in the source code. As a result, customers are not aware of that limitation, and use the wrapper also interactively, or pseudo-interactively, and complain when it doesn't work. The newly added "add-deprecation-warning-to-lftp-wrapper.patch" introduces a deprecation warning for users who might still rely on the script to make them aware that this wrapper script is going to be removed from the distribution. ==== libX11 ==== Subpackages: libX11-6 libX11-data libX11-devel libX11-xcb1 - u_no-longer-crash-in-XVisualIDFromVisual.patch * no longer crash in XVisualIDFromVisual() [boo#1191517] ==== libblockdev ==== Version update (2.25 -> 2.26) Subpackages: libbd_btrfs2 libbd_crypto2 libbd_fs2 libbd_loop2 libbd_mdraid2 libbd_part2 libbd_swap2 libbd_utils2 libblockdev2 - Fix lack of dependency on libblockdev-lvm needed by libblockdev package. The lvm-cache-stats binary needs the logical volume plugin to work (boo#1183948). - Update to version 2.26: + Fixes: - Deprecated glib function call; - Build with LLVM/clang; - Many memory leaks; - Many tests. - Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead of libbd_utils-devel (boo#1189787). ==== libfprint ==== Version update (1.92.1 -> 1.94.2) - Update to version 1.94.2 * Highlights: + goodixmoc: Fix protocol error with certain username lengths + elanmoc: New PID 0x0c7d + goodixmoc: New PID 0x63cc - Changes from version 1.94.1 * Highlights: + Ship a simple script to create new CI tests using tshark + Added CI tests for elan, uru4000, aes2501 + goodixmoc: Remove duplicate checking during enroll and let fprintd handle it + uru4000: Fix USB transfer type + synaptics: Support for new PIDs + goodixmoc: Support for new PIDs - Changes from version 1.94.0 * Highlights: + Implement suspend/resume handling including USB wakeup configuration. + This requires writing the "persist" and "wakeup" sysfs attributes. + Add simple temperature module to prevent devices from becoming too hot + Add feature for continuous scanning + New internal "critical section" API to simplify driver development + elan: new PID 0x0c58 + elanmoc: Fixes for multi-user handling and FW changes + virtual-device: Do not time out for SCAN command ==== libglvnd ==== - Disable asm on aarch64 Tumbleweed due to issue with BTI - boo#1188928 ==== libhandy ==== Version update (1.4.0 -> 1.5.0) Subpackages: libhandy-1-0 typelib-1_0-Handy-1_0 - Update to version 1.5.0: + Introduce HdyStyleManager for managing color schemes (light/dark) and high contrast mode. - Support the cross-platform color scheme preference in the settings portal. + HdyPreferencesPage: Remove adaptive margins to fix default window sizes. + HdyTabBar: Handle middle click on button release rather than press. + Various memory leak fixes. + Updated translations. - Use ldconfig_scriptlets macro for post(un) handling. ==== libnftnl ==== Version update (1.2.0 -> 1.2.1) - Update to release 1.2.1 * expr: add last match time support * expr: missing netlink attribute in last expression ==== libqb ==== Version update (2.0.3+20210303.404adbc -> 2.0.4+20211112.a2691b9) - Update to version 2.0.4+20211112.a2691b9 (v2.0.4): - poll: Don't log in a signal handler (gh#ClusterLabs/libqb##447) - Fix pthread returns (gh#ClusterLabs/libqb#444) - doxygen2man: print structure descriptions (gh#ClusterLabs/libqb#443) - Implement heap based timer list (gh#ClusterLabs/libqb#439) ==== libstorage-ng ==== Version update (4.4.56 -> 4.4.57) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#843 - added convenience function get_blk_devices() for Multipath and DmRaid - added macro LIBSTORAGE_NG_VERSION_AT_LEAST - 4.4.57 ==== libvirt ==== Subpackages: libvirt-client libvirt-daemon libvirt-daemon-driver-interface libvirt-daemon-driver-lxc libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lxc libvirt-daemon-qemu libvirt-libs - virt-create-rootfs: Fix repository URLs Updated virt-create-rootfs.patch boo#1192318 - spec: Weaken apparmor-abstractions dependency to Recommends bsc#1192119 ==== libwacom ==== Subpackages: libwacom-data libwacom2 - Add python requires to tools subpackage (bsc#1192852) ==== llvm13 ==== Subpackages: clang-tools clang13 clang13-doc libLLVM13 libLTO13 libc++-devel libc++1 libc++abi-devel libc++abi1 libclang13 - Add FileCheck into the devel package, as is required for testing Rust (boo#1192629) ==== makedumpfile ==== Version update (1.6.9 -> 1.7.0) - Turn on zstd. - Update to 1.7.0 * Zstandard (zstd) compression support * New -L option to limit output file size * Support of kernels up to v5.15 (x86_64) ==== mariadb ==== Subpackages: libmariadbd19 mariadb-client mariadb-errormessages - The following issues have already been fixed in this package but weren't previously mentioned in the changes file: bsc#1189320 CVE-2021-2145, bsc#1185872 CVE-2021-2166, bsc#1185870 CVE-2021-27928, bsc#1183770 MDEV-23851 - Fix rpmlint errors - Run spec-cleaner - Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031 - Revert systemd hardening * Remove harden_mariadb.service.patch - Add CONFIG parameter to %sysusers_generate_pre ==== mariadb-connector-c ==== Version update (3.2.4 -> 3.2.5) - Update to 3.2.5: * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-connector-c-325-release-notes https://mariadb.com/kb/en/library/mariadb-connector-c-325-changelog ==== mdadm ==== - Use %{_sbindir} for prerequisite of mkinitrd to work with usrmerge of dracut-mkinitrd-deprecated ==== monitoring-plugins ==== Subpackages: monitoring-plugins-breeze monitoring-plugins-by_ssh monitoring-plugins-cluster monitoring-plugins-common monitoring-plugins-cups monitoring-plugins-dhcp monitoring-plugins-dig monitoring-plugins-disk monitoring-plugins-disk_smb monitoring-plugins-dns monitoring-plugins-dummy monitoring-plugins-file_age monitoring-plugins-flexlm monitoring-plugins-http monitoring-plugins-icmp monitoring-plugins-ide_smart monitoring-plugins-ifoperstatus monitoring-plugins-ifstatus monitoring-plugins-ircd monitoring-plugins-load monitoring-plugins-log monitoring-plugins-mailq monitoring-plugins-mrtg monitoring-plugins-mrtgtraf monitoring-plugins-nagios monitoring-plugins-nt monitoring-plugins-ntp_peer monitoring-plugins-ntp_time monitoring-plugins-nwstat monitoring-plugins-oracle monitoring-plugins-overcr monitoring-plugins-ping monitoring-plugins-procs monitoring-plugins-real monitoring-plugins-rpc monitoring-plugins-sensors monitoring-plugins-smtp monitoring-plugins-ssh monitoring-plugins-swap monitoring-plugins-tcp monitoring-plugins-time monitoring-plugins-ups monitoring-plugins-users monitoring-plugins-wave - recommend syslog for monitoring-plugins-log, as people probably want to analize logs generated by (r)syslog or journald Renamed patches: - renamed monitoring-plugins-1.4.6-no_chown.patch to monitoring-plugins-1.4.6-Makefile_-_no_chown.patch to make it easier to detect the patched file - renamed monitoring-plugins-2.1.1-check_logfile.patch to monitoring-plugins-2.1.1-check_log_-_quoting.patch to make it easier to detect the patched file and reason for the patch New patches: - added monitoring-plugins-2.3.1-check_snmp_segfaults.patch check_snmp will segfaults at line 489 if number of lines returned by SNMPD is greater than number of defined thresholds - > https://github.com/monitoring-plugins/monitoring-plugins/pull/1589 - added monitoring-plugins-2.3.1-check_snmp_hang_on_STDERR_workaround.patch When the MIBs are not quite right, snmpget outputs lots of errors on STDERR before getting down to business. If this is enough to fill the pipe buffer, snmpget hangs waiting for it to be cleared, which it never will be because check_snmp is waiting for snmpget to output something on STDOUT. This simple fix from s2156945 for this is to read STDERR before STDOUT. cmd_run_array from utils_cmd.c is also used by plugins/check_by_ssh and plugins/negate but you're likely to get lots of errors or lots of output, not both at the same time. The real fix is probably to do a select() and read from both as they come in. https://github.com/monitoring-plugins/monitoring-plugins/issues/1706 - added monitoring-plugins-2.3.1-check_dhcp_-_detect_rogue_dhcp_servers.patch feature enhancement from Patrick Cervicek for check_dhcp, which allows to detect rogue DHCP servers. Use it with the "-x" flag, example: ./check_dhcp -s 192.168.1.1 -x CRITICAL: Rogue DHCP Server detected! Server 192.168.1.205 offered 192.168.1.239 - added monitoring-plugins-2.3.1-check_ssh.patch , which includes patches provided by op5, mainly around RFC 4253:4.2 and 4253:5 + fixing a few typos + properly parse a (delayed) version control string + Handle non-alpha software versions reported by the checked service - added monitoring-plugins-2.3.1-check_ssh.t_-_improve_testing.patch which improves the testing of check_ssh - including the patches mentioned in monitoring-plugins-2.3.1-check_ssh.patch - added monitoring-plugins-2.3.1-fixing-shellcheck.patch , which fixes some complains from shellcheck(.net): + quoting and parenthesis in check_log.sh, check_oracle.sh, check_sensors.sh ==== mutter ==== - Enable wayland-eglstream dependency on Leap/SLE (jsc#SLE-19964). - Enable eglstream on Leap/SLE (jsc#SLE-19964). ==== ncurses ==== Version update (6.3.20211021 -> 6.3.20211115) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20211115 + fix memory-leak in delwin for pads (report by Werner Fink, OpenSUSE [#1192668], cf: 20211106), - Add ncurses patch 20211113 + minor clarification to clear.1 (Debian #999437). + add xterm+sl-alt, use that in foot+base (report by Jonas Grosse Sundrup) -TD + improve search-path check for pkg-config, for Debian testing which installs pkg-config with architecture-prefixes. - Correct offsets of patch ncurses-6.3.dif - Add ncurses patch 20211106 + improve check in misc/Makefile.in for empty $PKG_CONFIG_LIBDIR + modify wnoutrefresh to call pnoutrefresh if its parameter is a pad, rather than treating it as an error, and modify new_panel to permit its window-parameter to be a pad (report by Giorgos Xou). + fix a memory-leak in del_curterm (prompted by discussion with Bram Moolenaar, cf: 20210821). - Add ncurses patch 20211030 + simplify some references to WINDOWS._flags using macros. + add a "check" rule in Ada95 makefile, to help with test-packages. + build-fix for cross-compiling to MingW, conditionally add -lssp - Correct offsets of patch ncurses-6.3.dif - Add ncurses patch 20211026 + corrected regex needed for older pkg-config used in Solaris 10. + amend configure option's auto-search to account for systems where none of the directories known to pkg-config exist, adapted from mailing-list comment (report by Milan P. Stanic). - Port patch ncurses-6.2.dif which is now named ncurses-6.3.dif ==== netcat-openbsd ==== - Fix download URL. Debian has purged older versions from their servers. ==== nodejs16 ==== Version update (16.6.2 -> 16.13.0) Subpackages: npm16 - BR python 3.6+ - Update to 16.13.0: * Experimental ESM Loader Hooks API https://github.com/nodejs/node/pull/37468 * deps: upgrade npm to 8.1.0 (npm team) * vm: add support for import assertions in dynamic imports - Changes in 16.11.1: * deps: update llhttp to 6.0.4 - HTTP Request Smuggling due to spaced in headers (bsc#1191601, CVE-2021-22959) - HTTP Request Smuggling when parsing the body (bsc#1191602, CVE-2021-22960) - Changes in 16.11.0: * deps: update nghttp2 to v1.45.1 - Changes in 16.10.0: * crypto: add rsa-pss keygen parameters * fs: make open and close stream override optional when unused * http: limit requests per connection The maximum number of requests a socket can handle before closing keep alive connection can be set with server.maxRequestsPerSocket. * src: add --no-global-search-paths cli option * stream: add signal support to pipeline generators - Changes in 16.9.0: * Added support for corepack * crypto: add RSA-PSS params to asymmetricKeyDetails * module: support pattern trailers * stream: add stream.compose - Changes in 16.8.0: * doc: deprecate type coercion for dns.lookup options * stream: add stream.Duplex.from utility and isDisturbed helper * util: expose toUSVString - Changes in 16.7.0: * fs: experimental: add recursive cp method - refreshed: fix_ci_tests.patch, flaky_test_rerun.patch, nodejs-libpath.patch, sle12_python3_compat.patch, versioned.patch, node_modules.tar.xz ==== pam ==== Subpackages: pam-doc pam_unix - Update pam-login_defs-check.sh regexp and login_defs-support-for-pam symbol to version 1.5.2 (new variable HMAC_CRYPTO_ALGO). ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-base patterns-base-basesystem patterns-base-basic_desktop patterns-base-console patterns-base-documentation patterns-base-enhanced_base patterns-base-minimal_base patterns-base-selinux patterns-base-sw_management patterns-base-transactional_base patterns-base-x11 patterns-base-x11_enhanced - x11 pattern: Require xf86-input-libinput also on s390x (JIRA#SLE-18632) ==== pcre2 ==== Version update (10.38 -> 10.39) Subpackages: libpcre2-16-0 libpcre2-32-0 libpcre2-8-0 - pcre2 10.39: * Fix incorrect detection of alternatives in first character search in JIT * Update to Unicode 14.0.0 ==== perl-Date-Manip ==== Version update (6.85 -> 6.86) - updated to 6.86 see /usr/share/doc/packages/perl-Date-Manip/Changes 6.86 2021-11-15 - Change warn to carp All warnings are now issued with the carp command rather than warn. Requested in GitHup pull request #18, but that request was not used because it only changed the uses in the Date::Manip::Date module. - Bug fixes Fixed a bug where the next/prev Date::Manip::Recur methods gave incorrect results when there are no dates that match the criteria. (GitHub #36) - Time zone fixes There were no new timezone fixes on 2021-06-01 or 2021-09-01, so no releases made then. Newest zoneinfo data (tzdata 2021e). (GitHub #37) ==== perl-HTTP-Message ==== Version update (6.34 -> 6.35) - updated to 6.35 see /usr/share/doc/packages/perl-HTTP-Message/Changes 6.35 2021-11-11 22:10:31Z - Clarify documentation for decoded_content (GH#166) (Eric Wastl) ==== pfstools ==== Subpackages: libpfs2 pfscalibration pfstmo - Use OpenCV 4 on Tumbleweed - Guard OpenEXR build dependency (needs OpenEXR < 3) - Adjust pfscalign package name to pfsalign, match contained tool - Cleanup spec file, remove old dependencies: + lapack, blas (uses GSL instead) + doxygen, libtool (unused) - Correct GL build dependency (pkgconfig(gl) instead of Mesa) ==== phonon4qt5 ==== Subpackages: libphonon4qt5 phonon4qt5-lang phononsettings phononsettings-lang - Add phonon4qt5-rpmlintrc to work around future build checks (boo#1191779) ==== php7 ==== Version update (7.4.25 -> 7.4.26) Subpackages: php7-cli php7-ctype php7-dom php7-gd php7-gettext php7-iconv php7-json php7-mbstring php7-mysql php7-openssl php7-pdo php7-sqlite php7-tokenizer php7-xmlreader php7-xmlwriter - updated to 7.4.26: This is a security release (CVE-2021-21707) which also contains several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.26 ==== polkit-default-privs ==== - Change Requires: polkit to Requires(pre): we need to be sure polkit is instaled first, as we could otherwise end up with wrong permissions on /etc/polkit-1/rules.d. - remove traces of old polkit-whitelisting sub-package ==== power-profiles-daemon ==== - Add fd1664dfe26f13f8c8cd7b44483cd872dfdede36.patch: main: Error out on D-Bus communication errors (rh#2019536). - Bump pkgconfig(polkit-gobject-1) BuildRequires version to 0.114. It's required for the g_autoptr() support we use. ==== pulseaudio ==== Subpackages: libpulse-mainloop-glib0 libpulse0 pulseaudio-bash-completion pulseaudio-gdm-hooks pulseaudio-module-bluetooth pulseaudio-module-gsettings pulseaudio-module-x11 pulseaudio-module-zeroconf pulseaudio-utils pulseaudio-zsh-completion system-user-pulse - Revert last change and BuildIgnore user(pulse) instead. - Use system-user-pulse instead of user(pulse) for PreReq; otherwise a new project can't resolve ==== python-Jinja2 ==== Version update (3.0.2 -> 3.0.3) - update to 3.0.3 * Fix traceback rewriting internals for Python 3.10 and 3.11. (#1535) * Fix how the native environment treats leading and trailing spaces when parsing values on Python 3.10. (PR#1537) * Improve async performance by avoiding checks for common types. (#1514) * Revert change to ``hash(Node)`` behavior. Nodes are hashed by id again (#1521) * ``PackageLoader`` works when the package is a single module file. (#1512) ==== python-aiohttp ==== - Update python39-failures.patch to only fire with Python 3.9.7. ==== python-aiosmtpd ==== - Disable pytest on Leap <= 15.3 ==== python-argon2-cffi ==== Version update (20.1.0 -> 21.1.0) - Update to 21.1.0 - skip building for Python 2 because not supported anymore ==== python-falcon ==== Version update (2.0.0 -> 3.0.1) Subpackages: python-falcon-doc python38-falcon - Don't restrict to primary python3 flavor. Other packages depend on this. - Update requirements * The only runtime deps have been removed in version 2.0 * Test requirements from examples are obsolete - Implement some python packaging best practises: * Check for version in dist metadata * uninstall alternative only takes master (there was even a typo) - Don't create %%{python_sitelib}/examples directory, that' just evil. - Update to version 3.0.1 This is a minor point release to take care of a couple of bugs that we did not catch for 3.0.0. - The api_helpers module was re-added, since it was renamed to app_helpers (and effectively removed) without announcing a corresponding breaking change. This module is now considered deprecated, and will be removed in a future Falcon version. - ASGI HTTP headers were treated as UTF-8 encoded, not taking the incompatibility with WSGI and porting of WSGI applications into consideration. This was fixed, and ASGI headers are now decoded and encoded as ISO-8859-1. ==== python-filetype ==== Version update (1.0.7 -> 1.0.8) - Restrict more which files are packaged. - update to 1.0.8: * docs: fix typos: s/againts/against * Support special video/3gp file. * fix: small error in docs * Fix for PEP8 styles * Fix version * Add command line * Fix linter error. * Add xcf type. * Add application abstraction and wasm type. * Add rpm and dcm type. * Add 3gp type. * Add aac type. * Add dwg type. * Add brotli support. * Fix avi matcher. * Fix cr2 handling. * Add py39 to test environment. * Add clean and doc target to tox. * Add docs to .gitignore * Switch to tox in travis CI. * Add lint and test target to tox.ini * Clean up .gitignore * Update Readme. * Extend mp3 matcher * Added support for lzop. * Added support for lz4. * Accept os.PathLike objects. * Added support for elf * setup.py: Exclude 'examples' from being installed as a global pkg * Create LICENSE * Add sample.jpg fixture - Install new filetype command into %{_bindir} - Enable update-alternatives mechanism for filetype command ==== python-flufl.lock ==== Version update (5.0.4 -> 6.0) - Update to version 6.0 * Added a default_timeout argument to the Lock constructor, which can be used in the context manager syntax as well. * When a Lock uses a lock file that already exists and does not appear to be a lock file (i.e. because its contents are ill-formatted), do a better job of not clobbering that file. * Improve some QA by re-adding diff-cover, Gitlab SAST during CI, and testing on Python 3.10 beta (except for Windows) * Added a py.typed file to satisfy type checkers. - Update to version 5.0.5 * Blued code. ==== python-gevent ==== - Skip test__threading_monkey_in_thread as it breaks with Python 3.9.9. ==== python-gunicorn ==== - Add patch support-eventlet-30-3.patch: * Upstream patch to support eventlet >= 0.30.3 ==== python-importlib-resources ==== Version update (5.2.2 -> 5.4.0) - update to 5.4.0: * Test suite now relies entirely on the traversable API. * Now raise a ``DeprecationWarning`` for all legacy functions. Instead, users should rely on the ``files()`` API introduced in importlib_resources 1.3. See * Updated readme to reflect current behavior and show which versions correspond to which behavior in CPython. ==== python-mailman ==== Version update (3.3.4 -> 3.3.5) - Update to 3.3.5, which provides many bug fixes and also these new features: - There is a new bounce_notify_admin_on_bounce_increment list setting and a corresponding list:admin:notice:increment template for the notice. This setting, if True, will cause a notice to be sent to the list admins when a member's bounce score is incremented, but doesn't disable delivery. - There is a new moderator_request_life setting in the [mailman] section of mailman.cfg that controls the lifetime of pending moderator requests as opposed to pending user confirmations. Default is 180 days. - There is a new task runner to do periodic tasks. The current implementation evicts expired pendings and cache entries and removes orphaned workflows and orphaned message store messages. It does these tasks at intervals defined by the new run_tasks_every setting in the [mailman] section of mailman.cfg. Default is 1 hour. - There is a new list:admin:notice:pending template for the notice from the mailman notify command. - The nntp runner will now run the gatenews subcommand at intervals defined by a new gatenews_every setting in the [nntp] section of mailman.cfg. Default is 5 every minutes. - Check the REST API password in a way that is resistant to timing attacks. (CVE-2021-34337) - Added support-alembic-1-7.patch - Removed obsolete support-click-8-0.patch - Added rpmlintrc ==== python-numpy ==== - Add patch bpo-45167-fixes.patch: * Support Python >= 3.9.8 changes. ==== python-packaging ==== Version update (20.9 -> 21.2) - update to 21.2: * Update documentation entry for 21.1. * Update pin to pyparsing to exclude 3.0.0. * PEP 656: musllinux support * Drop support for Python 2.7, Python 3.4 and Python 3.5. * Replace distutils usage with sysconfig * Add support for zip files in ``parse_sdist_filename`` * Use cached ``_hash`` attribute to short-circuit tag equality comparisons * Specify the default value for the ``specifier`` argument to ``SpecifierSet`` * Proper keyword-only "warn" argument in packaging.tags * Correctly remove prerelease suffixes from ~= check * Fix type hints for ``Version.post`` and ``Version.dev`` * Use typing alias ``UnparsedVersion`` * Improve type inference for ``packaging.specifiers.filter()`` * Tighten the return type of ``canonicalize_version()`` ==== python-reportlab ==== Version update (3.5.59 -> 3.6.2) - Increase verbosity of running the test suite. - Update to 3.6.2 * add mock for urlopen calls so tests can run off line. Contribution by Antonio Trande sagitter at fedoraproject dot org - Update to 3.6.1 * create py-2-3 branch * Cease support for Python-2.7 - Update to 3.6.0 * graphics improve some error messages for renderPM * changed lib.urilt.recursiveImport after errors in python3.10, reflect changes in readJPEGInfo * pdfutils readJPEGInfo extracts dpi if present defaults to (72, 72) * Image flowable allows a useDPI argument * paraparser annotate some errors - Update to 3.5.68 * Allow unicode PDFString to use encoding directly; fixes bug where colorspace indexes are broken * Ensure PIL images can be size checked - Update to 3.5.67 * fix obvious bug in renderPS.py cut'n'paste bah :( * fix bug saving to SpooledtemporaryFile's reported by Robert Schroll <rschroll at gmail.com> * fix bug in justified RTL paragraphs example & bugfix contributed by Moshe Uminer <mosheduminer at gmail.com> * fix regex deprecation reported by Jürgen Gmach <juergen.gmach at apis.de> - Update to 3.5.66 * add yieldNoneSplits utility function * fix BarChart so it lines can have markers and Nones in their data - Update to 3.5.65 * add ability to have lineplots in barcharts; no support yet for line markers * added checkAttr method to TypedPropertyCollection - Update to 3.5.64 * ensure setup.py works from sdist; bug reported by Antonio P. Sagitter (sagitter at fedoraproject.org) * restore broken MANIFEST.in somehow overwritten by Robin :( - Update to 3.5.63 * simplify annotateException and add better error messages for asUnicode/Bytes etc * improve embeddedHyphenation in paragraph.py - Update to 3.5.62 * add adjustableArrow widget * allow para tag borderPadding attribute * minor cosmetics in renderPM C extension and add fontSize setattr * allow a bounding box constraint in definePath * efficiency savings in text2Path * refactor transformation math and text2Path functionality * allow a renderPM plugin cairo backend package rlPyCairo - Update to 3.5.61 * Allow legend column control of vertical alignment * Allow renderTextMode attribute in reportlab.graphics.shapes.String * Allow renderTextMode drawString handling in renderPDF/PM/PS/SVG * Some fixes to fillMode handling ==== python-requests ==== Version update (2.25.1 -> 2.26.0) - Correct {Build,}Requires for charset_normalizer. - Add trustme to BuildRequires for the test suite. - update to 2.26.0: - `Session.send` now correctly resolves proxy configurations from both the Session and Request. Behavior now matches `Session.request`. (#5681) - Fixed a race condition in zip extraction when using Requests in parallel from zip archive. (#5707) - Instead of `chardet`, use the MIT-licensed `charset_normalizer` for Python3 to remove license ambiguity for projects bundling requests. - Requests now supports `idna` 3.x on Python 3. `idna` 2.x will continue to be used on Python 2 installations. (#5711) - The `requests[security]` extra has been converted to a no-op install. PyOpenSSL is no longer the recommended secure option for Requests. (#5867) - Requests has officially dropped support for Python 3.5. (#5867) - drop 5711.patch: upstream ==== python-urwid ==== - add dependency for python 2 builds ==== python-xarray ==== Version update (0.20.0 -> 0.20.1) - update to version 0.20.1: - This is a bugfix release to fix :issue:`5930`.: - Bug fixes: - Fix a regression in the detection of the backend entrypoints (:issue:`5930`, :pull:`5931`) By `Justus Magin <https://github.com/keewis>`_. - Documentation: - Significant improvements to :ref:`api`. By `Deepak Cherian <https://github.com/dcherian>`_. ==== quota ==== Subpackages: quota-nfs - Added hardening to systemd service(s) (bsc#1181400). Modified: * quotad.service ==== raspberrypi-firmware ==== Version update (2021.09.30 -> 2021.11.16) - Fix deps for raspberrypi-firmware-config and raspberrypi-firmware-config-camera - Add raspberrypi-firmware-config-camera flavor - boo#1192047 - Update to 12bc6e3677 (2021-11-16): * firmware: dtoverlay: Rebase aliases in overlays like labels * firmware: isp: Set core/vpu min clock to 320Mhz during ISP operation * firmware: arm_loader: Enable watchdog early if wanted See: #1651 * firmware: hello_fft: Update outdated link to V3D spec * firmware: hello_fft: Remove unused function declaration See: #1645 See: raspberrypi/userland#710 * firmware: platform: Declare CM4's SIO_1V8_SEL and SD_PWR_ON See: raspberrypi/Raspberry-Pi-OS-64bit#188 * firmware: platform: Fix incorrect turbo voltage scaling on Pi0 See: raspberrypi/documentation#2255 * firmware: ISP: Fix magenta colour in right hand image of stereo pair See: https://forums.raspberrypi.com/viewtopic.php?t=321089 * firmware: platform: Remove licence on VP6, VP8, Theora, and FLAC See: raspberrypi/linux#4661 * firmware: arm_loader: Allow VEC clock to be controlled by arm * firmware: userland: Reduce debug_sym error messages See: https://forums.raspberrypi.com/viewtopic.php?f=98&t=322238 * firmware: arm_dt: Increase maximum line length to 98 See: raspberrypi/linux#4638 * firmware: video_decode: i/p port enable/disable without o/p active could stall See: RPi-Distro/vlc#48 See: Hexxeh/rpi-firmware#272 See: #1637 * firmware: clock-2711: Limit PLLB VCO frequency to the high range * firmware: arm_dt: Export the boot-mode, partition and usb state via device-tree See: #1621 ==== raspberrypi-firmware-config ==== Version update (2021.09.30 -> 2021.11.16) - Fix deps for raspberrypi-firmware-config and raspberrypi-firmware-config-camera - Add raspberrypi-firmware-config-camera flavor - boo#1192047 - Update to 12bc6e3677 (2021-11-16): * firmware: dtoverlay: Rebase aliases in overlays like labels * firmware: isp: Set core/vpu min clock to 320Mhz during ISP operation * firmware: arm_loader: Enable watchdog early if wanted See: #1651 * firmware: hello_fft: Update outdated link to V3D spec * firmware: hello_fft: Remove unused function declaration See: #1645 See: raspberrypi/userland#710 * firmware: platform: Declare CM4's SIO_1V8_SEL and SD_PWR_ON See: raspberrypi/Raspberry-Pi-OS-64bit#188 * firmware: platform: Fix incorrect turbo voltage scaling on Pi0 See: raspberrypi/documentation#2255 * firmware: ISP: Fix magenta colour in right hand image of stereo pair See: https://forums.raspberrypi.com/viewtopic.php?t=321089 * firmware: platform: Remove licence on VP6, VP8, Theora, and FLAC See: raspberrypi/linux#4661 * firmware: arm_loader: Allow VEC clock to be controlled by arm * firmware: userland: Reduce debug_sym error messages See: https://forums.raspberrypi.com/viewtopic.php?f=98&t=322238 * firmware: arm_dt: Increase maximum line length to 98 See: raspberrypi/linux#4638 * firmware: video_decode: i/p port enable/disable without o/p active could stall See: RPi-Distro/vlc#48 See: Hexxeh/rpi-firmware#272 See: #1637 * firmware: clock-2711: Limit PLLB VCO frequency to the high range * firmware: arm_dt: Export the boot-mode, partition and usb state via device-tree See: #1621 ==== rav1e ==== Version update (0.5.0 -> 0.5.0+0) - Do not hardcode an author in the changes generator service: Attribution happens by the user that actually runs the service. - Integrate obs_scm, cargo_vendor and cargo_audit to assist automation of updates ==== redis ==== - Added hardening to systemd service(s) (bsc#1181400). Modified: * redis-sentinel@.service * redis@.service ==== rng-tools ==== - Added hardening to systemd service(s) (bsc#1181400). Modified: * rng-tools.service ==== rsync ==== - Added hardening to systemd service(s) (bsc#1181400). Modified: * rsyncd.service ==== rtkit ==== - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_rtkit-daemon.service.patch ==== rubygem-cri ==== - TW is not hard set on version 1550 - comparision to 1550 should only ever by done >= 1550, as it means TW and future CODE branches thereof. ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-transactional-update - Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution - Add "--no-return-event" option to salt-call to prevent sending return event back to master. - Make "state.highstate" to acts on concurrent flag. - Fix print regression for yumnotify plugin - Added: * refactor-and-improvements-for-transactional-updates-.patch * fix-the-regression-for-yumnotify-plugin-456.patch - Use dnfnotify instead yumnotify for relevant distros - dnfnotify pkgset plugin implementation - Add rpm_vercmp python library support for version comparison - Prevent pkg plugins errors on missing cookie path (bsc#1186738) - Added: * add-rpm_vercmp-python-library-for-version-comparison.patch * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch * fix-traceback.print_exc-calls-for-test_pip_state-432.patch * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch - Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412) - Make "salt-api" package to require python3-cherrypy on RHEL systems - Make "tar" as required for "salt-transactional-update" package - Added: * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch ==== sendmail ==== Subpackages: libmilter1_0 - Added hardening to systemd service(s) (bsc#1181400). Modified: * sendmail-client.service * sendmail.service ==== sensors ==== Subpackages: libsensors4 - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_fancontrol.service.patch * harden_lm_sensors.service.patch * harden_sensord.service.patch ==== shadow ==== Subpackages: login_defs - Fix segfaults in newgrp and pwck * Add shadow-4.9-newgrp-segfault.patch https://github.com/shadow-maint/shadow/pull/437 * Add shadow-4.9-pwck-segfault.patch https://github.com/shadow-maint/shadow/pull/445 - Added hardening to systemd service(s) (bsc#1181400). Modified: * shadow.service - shadow-util-linux.patch: * Remove the section patching lib/getdef.c in favor of the upstream FOREIGNDEFS. * Add LOGIN_KEEP_USERNAME to login.defs. * Remove PREVENT_NO_AUTH from login.defs. Only used by the unpackaged login and su. - shadow-login_defs-unused-by-pam.patch: * Remove variables BCRYPT_MIN_ROUNDS, BCRYPT_MAX_ROUNDS, YESCRYPT_COST_FACTOR, not supported by the current configuratiton. - Update login_defs-support-for-pam symbol to version 1.5.2 (support for new variable HMAC_CRYPTO_ALGO). - Update login_defs-support-for-util-linux to version 2.37 (support for new variable LOGIN_KEEP_USERNAME). - Refresh shadow-login_defs-comments.patch and shadow-login_defs-suse.patch. - Improve shadow-login_defs-check.sh: * Add helper to import local new version in the parent dir. * Fix spec editing sed expression. * Add PREVENT_NO_AUTH to known unused variables. * Update pam sed expression to find HMAC_CRYPTO_ALGO. * Add more sanity checks. ==== shared-mime-info ==== - Add fix-build-meson-0_60.patch: Fix build with meson 0.60 and newer. - Add drop-itstool-dep.patch: Drop itstool as it is no longer needed, upstream was missing this in the patch. Following this: drop itstool BuildRequires. ==== spacenavd ==== - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_spacenavd.service.patch Modified: * spacenavd.service ==== spamassassin ==== Subpackages: perl-Mail-SpamAssassin spamassassin-spamc - Set ProtectHome=false for spampd.service, as this breaks loading and storing data files in /home/vscan. - Added hardening to systemd service(s) (bsc#1181400). Modified: * spamd.service * spampd.service ==== sshfs ==== - Add fix-typo-in-ssh_opts.patch (boo#1191886) Required for kdeconnect-kde + openssh >= 8.8 ==== systemd ==== Version update (249.5 -> 249.7) Subpackages: libsystemd0 libudev-devel libudev1 systemd-container systemd-doc systemd-sysvinit udev - Import commit 523f32df573d459551760b072cb62906f4a2cf23 (merge of 249.7) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/c34c98712600bc206919ec6ed136195f... - Import commit c34c98712600bc206919ec6ed136195f75ac1967 f99aa40c6e TEST-12: make sure 'adm' group exist 6c7194ff99 TEST-08: don't force ext4 for / dd1814b8f9 test: use kbd-mode-map we ship in one more test case 94c5febf2a test: fix TEST-10-ISSUE-2467 - Update the dependencies of the systemd-testsuite sub-package. - Import commit 61c79e68381801428c0bc00a56b9e2e9cfa68373 (merge of 249.6) bcdeee7b4c virt: Support detection for ARM64 Hyper-V guests (bsc#1186071) [...] For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/8521f8d22fd44400289fcea03493ebd7... - Drop 0001-Revert-core-Check-unit-start-rate-limiting-earlier.patch It's part of v249.6. ==== systemd-rpm-macros ==== Version update (13 -> 14) - Bump version to 14 - Introduce %_systemd_util_dir It's a backport of upstream commit 3bc66bfa0136e370a8f7b06c3b69a52f5636ef82. ==== texlive ==== Subpackages: libkpathsea6 libsynctex2 - Fix wrong library paths in pkgconfig files (boo#1192662) ==== tigervnc ==== Subpackages: libXvnc1 xorg-x11-Xvnc xorg-x11-Xvnc-module - Use a template xvnc@.service.in to dynamically adjust xvnc@.service during installation to cater for the correct libexecdir value. This fixes wrong path for with-vnc-key.sh on sle15-sp4 (bsc#1192713) ==== tracker ==== Subpackages: libtracker-sparql-3_0-0 tracker-data-files typelib-1_0-Tracker-3_0 - Add 5883cebf8d7b2948bcb808162e78a4629ab3315c.patch: libtracker-sparql: Handle query cancellation on TrackerEndpointDBus (glgo#GNOME/tracker#264). ==== transactional-update ==== Version update (3.6.1 -> 3.6.2) Subpackages: dracut-transactional-update libtukit0 transactional-update-zypp-config tukit - Version 3.6.2 - Bind mount root file system snapshot on itself, this makes the temporary directory in /tmp unnecessary; also fixes [boo#1188110] to return the correct snapshot's working directory via API call. - Use separate mount namespace for transactional-update; this should fix several applications that fail to run if a mount point has the 'unbindable' mount flag set ==== unixODBC ==== - SLE-20556 Expand documentation: Add: * unixODBC-doc-website.patch * unixODBC-doc-drivers.patch ==== util-linux ==== Version update (2.36.2 -> 2.37.2) Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid-devel libuuid1 - Update to version 2.37.2: * No longer uses Groff to maintain man-pages. * New implementation of hardlink. * lscpu reimplemented. * uclampset: new util to manipulate the utilization clamping attributes of the system or a process. * hexdump automatically uses -C when called as "hd". * dmesg supports new command-line options --since and --until. * findmnt supports new command-line options --shadowed to print only filesystems over-mounted by another filesystem. * mount supports --read-only command-line option for non-root users too. * umount(8) can umount also all over-mounted filesystems (more filesystems on the the same mount point) when executed with - -recursive. * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type names on input, ignoring the case of the characters and all non-alphanumeric and non-digit characters in the name (e.g. type="Linux /usr x86" is the same as type="linux usr-x86" for sfdisk). * libmount no longer contains a workaround to detect inconsistent /proc/self/mountinfo reads. * libblkid supports "probing hints" now. The hints are the optional way how to force probing functions to check for example another location -- for example specific session on multi-session UDF. The command blkid(8) supports this functionality with a new --hint option. The library has been also extended to support others ISO9660 and UDF identifiers. * blkzone provides a new "capacity" command. * cfdisk is possible to start in read-only mode by a new command-line option --read-only * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column MOUNTPOINTS is used in the default output now and this new column prints all mount points where the device is used (btrfs subvolumes, bind mounts, etc). * losetup uses LOOP_CONFIG ioctl now. * column supports a new command-line option --table-columns-limit to specify a maximal number of the input columns. The last column will contain all remaining line data if the limit is smaller than the number of the columns in the input data. * Many other new features and fixes. For the complete list see https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes - Update util-linux-login_defs-check.sh and login_defs-support-for-util-linux to version 2.37 (new variable LOGIN_KEEP_USERNAME). - Add bc to BuildRequires to run more complete testsuite (bsc#1178236#c19). ==== util-linux-systemd ==== Version update (2.36.2 -> 2.37.2) - Update to version 2.37.2: * No longer uses Groff to maintain man-pages. * New implementation of hardlink. * lscpu reimplemented. * uclampset: new util to manipulate the utilization clamping attributes of the system or a process. * hexdump automatically uses -C when called as "hd". * dmesg supports new command-line options --since and --until. * findmnt supports new command-line options --shadowed to print only filesystems over-mounted by another filesystem. * mount supports --read-only command-line option for non-root users too. * umount(8) can umount also all over-mounted filesystems (more filesystems on the the same mount point) when executed with - -recursive. * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type names on input, ignoring the case of the characters and all non-alphanumeric and non-digit characters in the name (e.g. type="Linux /usr x86" is the same as type="linux usr-x86" for sfdisk). * libmount no longer contains a workaround to detect inconsistent /proc/self/mountinfo reads. * libblkid supports "probing hints" now. The hints are the optional way how to force probing functions to check for example another location -- for example specific session on multi-session UDF. The command blkid(8) supports this functionality with a new --hint option. The library has been also extended to support others ISO9660 and UDF identifiers. * blkzone provides a new "capacity" command. * cfdisk is possible to start in read-only mode by a new command-line option --read-only * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column MOUNTPOINTS is used in the default output now and this new column prints all mount points where the device is used (btrfs subvolumes, bind mounts, etc). * losetup uses LOOP_CONFIG ioctl now. * column supports a new command-line option --table-columns-limit to specify a maximal number of the input columns. The last column will contain all remaining line data if the limit is smaller than the number of the columns in the input data. * Many other new features and fixes. For the complete list see https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes - Update util-linux-login_defs-check.sh and login_defs-support-for-util-linux to version 2.37 (new variable LOGIN_KEEP_USERNAME). - Add bc to BuildRequires to run more complete testsuite (bsc#1178236#c19). ==== vim ==== Version update (8.2.3587 -> 8.2.3640) Subpackages: gvim vim-data vim-data-common - fix boo#1192871 - Updated to version 8.2.3640, fixes the following problems * Arglist test does not clear the argument list consistently. * ":verbose pwd" does not mention 'autochdir' was applied. * getcwd() is unclear about how 'autochdir' is used. * Cannot use a lambda for 'operatorfunc'. * Memory leak reported in libtlib. * Build failure. * "verbose pwd" shows confusing info when :lcd does not change directory. * "$*" is expanded to "nonomatch". * When renaming a terminal buffer the status text is not updated. * Illegal memory access when C-indenting. * "au!" and "au! event" cannot be followed by another command as documented. * difficult to know where the text starts in a window. (Sergey Vlasov) * Looking up terminal colors is a bit slow. * Command completion in cmdline window uses global user commands, not local commands for the window where it was opened from. * Printf() with %S does not handle multi-byte correctly. * "syntax enable" does not work properly in Vim9 context. * GTK3: undercurl does not get removed properly. * Vim9: line number of lambda is off by one. * Error for already defined function uses wrong line number. * GTK: composing underline does not show. * Coverity warns for unreachable code. * Typos in test files. * getcompletion() always passes zero as position to custom completion function. * Line commented out accidentally. * Freeze when calling term_wait() in a close callback. - Updated to version 8.2.3616, fixes the following problems * Compiler test fails with backslash file separator. * Break statement is never reached. * Failure when the "term_rows" argument of term_start() is an unusual value. * Test for v:colornames sometimes fails. (Dominique Pellé) * No event is triggered when closing a window. * Test_hlset fails when terminal has many columns. * Directory is wrong after executing "lcd" with win_execute(). * Xxd code is a bit difficult to understand. * Check for signed overflow might not work everywhere. * Crash when using :pedit in Vim9 script. * Vim seems to hang when writing a very long text to a terminal window. * RouterOS filetype is not recognized. * Not all gdbinit files are recognized. * Filetype test fails. * Check for overflow in put count does not work well. * Python3 test fails with Python 3.10 on MS-Windows. * Fish filetype not recognized. * Not all sudoers files are recognized. * Cannot clear and unlinke a highlight group with hlset() in a single call. * File missing from list of distributed files. * GTK3 screen updating is slow. * Users who type "q:" instead of ":q" are confused. * Internal error when ModeChanged is triggered when v:event is already in use. * Crash when ModeChanged triggered too early. * Crash when using CTRL-W f without finding a file name. * Using freed memory with regexp using a mark. * :find test fails. * zindex of popup windows not used when redrawing popup menu. * When re-formatting with an indent expression the first line of a paragraph may get the wrong indent. (Martin F. Krafft) * Arglist test does not clear the argument list consistently. ==== wayland ==== Subpackages: libwayland-client0 libwayland-cursor0 libwayland-egl1 libwayland-server0 - Switch to meson buildsystem: Add meson BuildRequires and macros. - Add generic c_compiler and c++_compiler BuildRequires, needed now with the meson buildsystem. - Use ldconfig_scriptlets macro for post(un) handling for Tumbleweed and newer. ==== xdg-desktop-portal-gtk ==== - Add pkgconfig(gsettings-desktop-schemas) BuildRequires and gsettings-desktop-schemas Requires and pass enable-appchooser and enable-settings to meson. This is needed for flatpak gtk apps running outside of gnome. See upstream issue/pull https://github.com/flatpak/xdg-desktop-portal-gtk/pull/362 and rh#2012315 for more info. ==== xdm ==== Subpackages: xdm-xsession - %post: enable Xorg on s390x with virtio (Redhat PCI ID 1af4:1050) via /etc/sysconfig/displaymanager on installation (but not upgrade) by checking for existence of /dev/dri [JIRA#SLE-18632] ==== xen ==== Subpackages: xen-libs xen-tools-domU - Update to Xen 4.16.0 RC3 release xen-4.16.0-testing-src.tar.bz2 - Drop iPXE sources and patches. iPXE is only used by QEMU traditional which has never shipped with SLE15. ipxe.tar.bz2 ipxe-enable-nics.patch ipxe-no-error-logical-not-parentheses.patch ipxe-use-rpm-opt-flags.patch - Drop building ocaml xenstored in the spec file. There are no plans or need to support this version. ==== xf86-input-libinput ==== - enable build on s390x (JIRA#SLE-18632) ==== xfce4-whiskermenu-plugin ==== Version update (2.6.2 -> 2.7.0) Subpackages: xfce4-whiskermenu-plugin-lang - Update to version 2.7.0 * Add showing categories as icons on top or bottom. (gxo#panel-plugins/xfce4-whiskermenu-plugin#62) * Add hiding username. (gxo#panel-plugins/xfce4-whiskermenu-plugin#36) * Add rounded profile picture. * Add optional AccountsService support. * Add catfish search action. * Add CSS classes for theming. * Improve search result relevance. * Make stripping release builds optional. * Rearrange settings dialog. * Remove sliding out search results. * Remove useless grab check. * Rename icon to follow reverse DNS scheme. * Replace size grip with resizing from edges. * Replace slots with lambdas. * Use original menu layout. * Use dm-tool for switching users. * Translation updates ==== xfsprogs ==== Version update (5.13.0 -> 5.14.0) Subpackages: libhandle1 xfsprogs-scrub - update to v5.14.0: - xfsprogs: introduce liburcu support - xfsprogs: convert atomic to uatomic - xfsprogs: convert utilities to use "fallthrough;" - libxfs: port xfs_set_inode_alloc from kernel - mkfs: warn about V4 deprecation - xfs_db: convert agresv to use for_each_perag - libxfs changes merged from kernel 5.14 ==== xorg-x11-server ==== Subpackages: xorg-x11-server-Xvfb xorg-x11-server-extra xorg-x11-server-sdk - enable build of Xorg on s390x (jira#SLE-18632) ==== yast2 ==== Version update (4.4.20 -> 4.4.22) Subpackages: yast2-logs - Force creating the UI before checking -pkg etc. UI plug-ins (bsc#1192650) - 4.4.22 - Adapt the code to the new product specification API (bsc#1192626). - yast2-packager is now responsible for finding the list of available base products during installation. - Drop ProductControlProduct class. - 4.4.21 ==== yast2-bootloader ==== Version update (4.4.7 -> 4.4.8) - bnc#1092950 - improved invalid input handling for custom boot partition - added support for defining custom boot partition by UUID and/or LABEL - 4.4.8 ==== yast2-installation ==== Version update (4.4.21 -> 4.4.22) - bsc#1192626: - Adapt the code to the new product specification API. - Remove the code to handle the selected product from the InstComplexWelcome client. - 4.4.22 ==== yast2-packager ==== Version update (4.4.12 -> 4.4.14) - Use consistent names for the Full medium repositories (bsc#1191652) - 4.4.14 - Introduce the product specification API (bsc#1192626): - Add a ProductSpec and derived classes. - Drop ProductLocation and ProductLocationDetails. - Add a specific client to initialize the workflow of the selected product. - 4.4.13 ==== yast2-schema ==== Version update (4.4.5 -> 4.4.6) - Add 'efi' element to the rules schema (jsc#SLE-18819) - 4.4.6 ==== yast2-storage-ng ==== Version update (4.4.13 -> 4.4.14) - Fixed calculation of partitions needed for booting when AutoYaST specifies an alternative crypt_method, like pervasive_luks2 (related to jsc#SLE-7376 and jsc#SLE-21308). - 4.4.14 - Fix duplicate PV error detection with disabled multipath (related to bsc#1170216). - Partitioner: initial support for regular LUKS2 encryption, if env variable YAST_LUKS2_AVAILABLE is set (part of jsc#SLE-21308). ==== yast2-trans ==== Version update (84.87.20211108.3133c3ccde -> 84.87.20211121.6ee9157350) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20211121.6ee9157350: * Translated using Weblate (Catalan) * New POT for text domain 'autoinst'. * Translated using Weblate (Slovak) * New POT for text domain 'control'. * Translated using Weblate (Slovak) * New POT for text domain 'storage'. * Translated using Weblate (Japanese) * New POT for text domain 'vpn'. * New POT for text domain 'users'. * New POT for text domain 'update'. * New POT for text domain 'tune'. * New POT for text domain 'tftp-server'. * New POT for text domain 'sysconfig'. * New POT for text domain 'support'. * New POT for text domain 'sudo'. * New POT for text domain 'storage'. * New POT for text domain 'squid'. * New POT for text domain 'sound'. * New POT for text domain 'snapper'. * New POT for text domain 'slp-server'. * New POT for text domain 'services-manager'. * New POT for text domain 'security'. * New POT for text domain 'scanner'. * New POT for text domain 'samba-server'. * New POT for text domain 'samba-client'. * New POT for text domain 's390'. * New POT for text domain 'registration'. * New POT for text domain 'rear'. * New POT for text domain 'proxy'. * New POT for text domain 'printer'. * New POT for text domain 'pam'. * New POT for text domain 'packager'. * New POT for text domain 'online-update-configuration'. * New POT for text domain 'online-update'. * New POT for text domain 'oneclickinstall'. * New POT for text domain 'ntp-client'. * New POT for text domain 'nis_server'. * New POT for text domain 'nis'. * New POT for text domain 'nfs_server'. * New POT for text domain 'nfs'. * New POT for text domain 'network'. * New POT for text domain 'migration'. * New POT for text domain 'mail'. * New POT for text domain 'ldap-client'. * New POT for text domain 'ldap'. * New POT for text domain 'kdump'. * New POT for text domain 'journalctl'. * New POT for text domain 'journal'. * New POT for text domain 'isns'. * New POT for text domain 'iscsi-lio-server'. * New POT for text domain 'iscsi-client'. * New POT for text domain 'instserver'. * New POT for text domain 'installation'. * New POT for text domain 'http-server'. * New POT for text domain 'ftp-server'. * New POT for text domain 'firewall'. * New POT for text domain 'fcoe-client'. * New POT for text domain 'drbd'. * New POT for text domain 'docker'. * New POT for text domain 'dns-server'. * New POT for text domain 'dhcp-server'. * New POT for text domain 'crowbar'. * New POT for text domain 'country'. * New POT for text domain 'control'. * New POT for text domain 'configuration_management'. * New POT for text domain 'cluster'. * New POT for text domain 'cio'. * New POT for text domain 'caasp'. * New POT for text domain 'bootloader'. * New POT for text domain 'base'. * New POT for text domain 'autoinst'. * New POT for text domain 'authserver'. * New POT for text domain 'auth-client'. * New POT for text domain 'audit-laf'. * New POT for text domain 'apparmor'. * New POT for text domain 'alternatives'. * New POT for text domain 'add-on'. * New POT for text domain 'vpn'. * New POT for text domain 'users'. * New POT for text domain 'update'. * New POT for text domain 'tune'. * New POT for text domain 'tftp-server'. * New POT for text domain 'sysconfig'. * New POT for text domain 'support'. * New POT for text domain 'sudo'. * New POT for text domain 'storage'. * New POT for text domain 'squid'. * New POT for text domain 'sound'. * New POT for text domain 'snapper'. * New POT for text domain 'slp-server'. * New POT for text domain 'services-manager'. * New POT for text domain 'security'. * New POT for text domain 'scanner'. * New POT for text domain 'samba-server'. * New POT for text domain 'samba-client'. * New POT for text domain 's390'. * New POT for text domain 'registration'. * New POT for text domain 'rear'. * New POT for text domain 'proxy'. * New POT for text domain 'printer'. * New POT for text domain 'pam'. * New POT for text domain 'packager'. * New POT for text domain 'online-update-configuration'. * New POT for text domain 'online-update'. * New POT for text domain 'oneclickinstall'. * New POT for text domain 'ntp-client'. * New POT for text domain 'nis_server'. * New POT for text domain 'nis'. * New POT for text domain 'nfs_server'. * New POT for text domain 'nfs'. * New POT for text domain 'network'. * New POT for text domain 'migration'. * New POT for text domain 'mail'. * New POT for text domain 'ldap-client'. * New POT for text domain 'ldap'. * New POT for text domain 'kdump'. * New POT for text domain 'journalctl'. * New POT for text domain 'journal'. * New POT for text domain 'isns'. * New POT for text domain 'iscsi-lio-server'. * New POT for text domain 'iscsi-client'. * New POT for text domain 'instserver'. * New POT for text domain 'installation'. * New POT for text domain 'http-server'. * New POT for text domain 'ftp-server'. * New POT for text domain 'firewall'. * New POT for text domain 'fcoe-client'. * New POT for text domain 'drbd'. * New POT for text domain 'docker'. * New POT for text domain 'dns-server'. * New POT for text domain 'dhcp-server'. * New POT for text domain 'crowbar'. * New POT for text domain 'country'. * New POT for text domain 'control'. * New POT for text domain 'configuration_management'. * New POT for text domain 'cluster'. * New POT for text domain 'cio'. * New POT for text domain 'caasp'. * New POT for text domain 'bootloader'. * New POT for text domain 'base'. * New POT for text domain 'autoinst'. * New POT for text domain 'authserver'. * New POT for text domain 'auth-client'. * New POT for text domain 'audit-laf'. * New POT for text domain 'apparmor'. * New POT for text domain 'alternatives'. * New POT for text domain 'add-on'. * New POT for text domain 'registration'. * New POT for text domain 'packager'. * New POT for text domain 'installation'. * New POT for text domain 'base'. * New POT for text domain 'autoinst'. - Update to version 84.87.20211114.f6c5a7e501: * Translated using Weblate (Catalan) * Translated using Weblate (Catalan) * Translated using Weblate (Catalan) * Translated using Weblate (Catalan) * Translated using Weblate (Catalan) * Translated using Weblate (Catalan) * Translated using Weblate (Catalan) * Translated using Weblate (Catalan) * Translated using Weblate (Catalan) * Translated using Weblate (Catalan) * Translated using Weblate (Catalan) * Translated using Weblate (Catalan) * Translated using Weblate (Catalan) * Translated using Weblate (Catalan) * Translated using Weblate (Catalan) * Translated using Weblate (Slovak) * Translated using Weblate (Slovak) * Translated using Weblate (Japanese) * Translated using Weblate (Japanese) * New POT for text domain 'users'. * New POT for text domain 'bootloader'. * Translated using Weblate (Malay) * Translated using Weblate (Malay) * Translated using Weblate (Malay) * Translated using Weblate (Malay) * Translated using Weblate (Indonesian) * Translated using Weblate (Indonesian) * Translated using Weblate (Indonesian) * Translated using Weblate (Indonesian) * Translated using Weblate (Indonesian) * Translated using Weblate (Indonesian) * Translated using Weblate (Indonesian) * New POT for text domain 'registration'. * New POT for text domain 'network'. ==== yast2-update ==== Version update (4.4.3 -> 4.4.4) - Adapt to the ProductSpec API (bsc#1192626). - 4.4.4