January 2022 - openSUSE Factory - openSUSE Mailing Lists

odd style of URL on download.o.o (but causing a lot of traffic)
by Per Jessen 03 Jan '22

03 Jan '22

I am seeing a lot of traffic with GET URLs such as these: GET /repositories/./Apache:/MirrorBrain/SLE_15_SP2/x86_64/http://build.opensuse.org/ GET /repositories/Apache/openSUSE_Leap_15.2/x86_64/https://software.opensuse.org/ GET /repositories/./Apache:/Shibboleth/SLE_12_SP2/repodata/http://build.opensuse.org/ GET /repositories/./Apache:/MirrorBrain/SLE_15_SP2/https://software.opensuse.org/ Of course they all result in a 404, but currently such requests take up almost 10% of our total http traffic. Does anyone recognise that unusual request format, with 'https://software.opensuse.org/' or 'http://build.opensuse.org/' appended ? This started on 6 December with a few hundred thousand requests, but grew to 2million by 13 December, now around 3.5-4million a day. -- Per Jessen, Zürich (7.9°C) Member, openSUSE Heroes

7 25

New Tumbleweed snapshot 20220102 released!
by Dominique Leuenberger 03 Jan '22

03 Jan '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: cups libcap (2.61 -> 2.62) === Details === ==== cups ==== Subpackages: cups-client cups-config libcups2 libcups2-32bit libcupsimage2 - Provide /usr/share/cups/ppdc/ in the "cups" main package to avoid that "lpinfo -m" results in /var/log/cups/error_log things like "ppdc: Unable to find include file font.defs" or "ppdc: Unable to find include file hp.h" and then "Bad driver information file /usr/share/cups/drv/sample.drv" (bsc#1186843) - When cupsd creates directories with specific owner group and permissions (usually owner is 'root' and group matches "configure --with-cups-group=lp") specify same owner group and permissions in the RPM spec file to ensure those directories are installed by RPM with the right settings because if those directories were installed by RPM with different settings then cupsd would use them as is and not adjust its specific owner group and permissions which could lead to privilege escalation from 'lp' user to 'root' via symlink attacks e.g. if owner is falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161) - upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174 "Use 60s timeout for read_thread, revert read limits" to fix printing with older USB printers - New upstream URL https://openprinting.github.io/cups - Disable testsuite for now via "bcond_with testsuite" until https://github.com/OpenPrinting/cups/issues/155 is fixed - Add "testsuite" conditional that disables anything within %check - fix-negotiate-authentication-between-CGIs-and-scheduler.patch fixes web UI Kerberos authentication (bsc#1175960) - Upstream changed to https://github.com/OpenPrinting/cups - Added %check section to specfile that executes the old 'make check' and the new (see 2.3.3op1) 'make test' - Version upgrade to 2.3.3op2: * Security: Fixed a buffer (read) overflow in the ippReadIO function (CVE-2020-10001) * Clarified the documentation for the "Listen" directive * Fixed duplicate ColorModel entries for AirPrint printers * Fixed directory/permission defaults for Debian kfreebsd-based systems * Fixed crash bug in ppdOpen * Fixed regression in snprintf emulation function * The scheduler's systemd service file now waits for the nslcd service to start * The libusb-based USB backend now uses a simpler read timer implementation to avoid a regression in a previous change * The PPD caching code now only tracks the APPrinterIconPath value on macOS * Fixed segfault in help.cgi when searching in man pages * Root certificates were incorrectly stored in "~/.cups/ssl". * Version upgrade to 2.3.3op1: * The automated test suite can now be activated using make test for consistency with other projects and CI environments - the old make check continues to work as well, and the previous test server behavior can be accessed by running make testserver. * ippeveprinter now supports multiple icons and strings files. * ippeveprinter now uses the system's FQDN with Avahi. * ippeveprinter now supports Get-Printer-Attributes on "/". * ippeveprinter now uses a deterministic "printer-uuid" value. * ippeveprinter now uses system sounds on macOS for Identify-Printer. * Updated ippfind to look for files in "~/Desktop" on Windows. * Updated ippfind to honor SKIP-XXX directives with PAUSE. * Updated IPP Everywhere support to work around printers that only advertise color raster support but really also support grayscale * ipptool now supports DNS-SD URIs like ipps://My%20Printer._ipps._tcp.local * The scheduler now allows root backends to have world read permissions but not world execute permissions * Failures to bind IPv6 listener sockets no longer cause errors if IPv6 is disabled on the host * The SNMP backend now supports the HP and Ricoh vendor MIBs * The scheduler no longer includes a timestamp in files it writes * The systemd service names are now "cups.service" and "cups-lpd.service" * The scheduler no longer adds the local hostname to the ServerAlias list * Added LogFileGroup directive in "cups-files.conf" to control the group owner of log files * Added --with-max-log-size configure option * Added --enable-sync-on-close configure option * Added --with-error-policy configure option * IPP Everywhere PPDs could have an "unknown" default InputSlot * The httpAddrListen function now uses a listen backlog of 128. * Added USB quirks * Fixed IPP Everywhere v1.1 conformance issues in ippeveprinter. * Fixed DNS-SD name collision support in ippeveprinter. * Fixed compiler and code analyzer warnings. * Fixed TLS support on Windows. * Fixed ippfind sub-type searches with Avahi. * Fixed the default hostname used by ippeveprinter on macOS. * Fixed resolution of local IPP-USB printers with Avahi. * Fixed coverity issues * Fixed httpAddrConnect issues * Fixed web interface device URI issue * Fixed lp/lpr "printer/class not found" error reporting * Fixed xinetd support for LPD clients * Fixed libtool build issue * Fixed a memory leak in the scheduler * Fixed a potential integer overflow in the PPD hashing code * Fixed output-bin and print-quality handling issues * Fixed PPD options getting mapped to odd IPP values like "tray---4" * Fixed remote access to the cupsd.conf and log files * Fixed the automated test suite when running in certain build/CI environments * Fixed a logging regression caused by a previous change for Apple issue #5604 * Fixed fax phone number handling with GNOME * Fixed potential rounding error in rastertopwg filter * Fixed the "uri-security-supported" value from the scheduler * Fixed IPP backend crash bug with "printer-alert" values * Removed old Solaris inetconv(1m) reference in cups-lpd man page * Fixed default options that incorrectly use the "custom" prefix * Fixed a memory leak when resolving DNS-SD URIs * Fixed systemd status reporting by adopting the notify interface * Fixed crash in rastertopwg * Fixed cupsManualCopies values in IPP Everywhere PPDs - Removed let-cupsd-start-after-network.patch as it is no longer required - Removed CVE-2020-10001.patch as a fix as been merged upstream - Removed section of specfile responsible for renaming "org.cups.cups*" systemd files to cups*, due to upstream renaming these files - Remove code comments from expanded scriptlets to reduce size cf. https://build.opensuse.org/request/show/879976 - CVE-2020-10001.patch fixes CVE-2020-10001 (bsc#1180520) access to uninitialized buffer in ipp.c - Version upgrade to 2.3.3: * CVE-2020-3898: The 'ppdOpen' function did not handle invalid UI constraint. 'ppdcSource::get_resolution' function did not handle invalid resolution strings. * CVE-2019-8842: The 'ippReadIO' function may under-read an extension field. * Fixed WARNING_OPTIONS support for GCC 9.x Changes in CUPS 2.3.2: Localization updates Changes in CUPS 2.3.1: * CVE-2019-2228: The 'ippSetValuetag' function did not validate the default language value. * Fixed a crash bug in the web interface. * The PPD cache code now looks up page sizes using their dimensions. * PPD files containing "custom" option keywords did not work. * Added a workaround for the scheduler's systemd support. * Added a DigestOptions directive for the 'client.conf' file to control whether MD5-based Digest authentication is allowed. * Fixed a bug in the handling of printer resource files. * The libusb-based USB backend now reports an error when the distribution permissions are wrong. * Added paint can labels to Dymo driver. * The 'ippeveprinter' program now supports authentication. * The 'ippeveprinter' program now advertises DNS-SD services on the correct interfaces, and provides a way to turn them off. * The '--with-dbusdir' option was ignored by the configure script. * Sandboxed applications were not able to get the default printer. * Log file access controls were not preserved by 'cupsctl'. * Default printers set with 'lpoptions' did not work in all cases. * Fixed an error in the jobs web interface template. * Fixed an off-by-one error in 'ippEnumString'. * Fixed some new compiler warnings. * Fixed a few issues with the Apple Raster support. * The IPP backend did not detect all cases where a job should be retried using a raster format. * Fixed spelling of "fold-accordion". * Fixed the default common name for TLS certificates used by 'ippeveprinter'. * Fixed the option names used for IPP Everywhere finishing options. * Added support for the second roll of the DYMO Twin/DUO label printers. Changes in CUPS v2.3.0: * CVE-2019-8696 and CVE-2019-8675: Fixed SNMP buffer overflows. * Added a GPL2/LGPL2 exception to the new CUPS license terms. * Fixed a bug in the scheduler job cleanup code. * Fixed builds when there is no TLS library. * "make" failed with GZIP options. * Fixed potential excess logging from the scheduler when removing job files. * Fixed a NULL pointer dereference bug in 'httpGetSubField2'. * Added FIPS-140 workarounds for GNU TLS. * The scheduler no longer provides a default value for the description. * The scheduler now logs jobs held for authentication using the error level so it is clear what happened. * The 'lpadmin' command did not always update the PPD file for changes to the 'cupsIPPSupplies' and 'cupsSNMPSupplies' keywords. * The scheduler now uses both the group's membership list as well as the various OS-specific membership functions to determine whether a user belongs to a named group. * Added USB quirks rule for HP LaserJet 1015. * Fixed some PPD parser issues. * The IPP parser no longer allows invalid member attributes in collections. * The configure script now treats the "wheel" group as a potential system group. * Fixed IPP buffer overflow. * Fixed memory disclosure issue in the scheduler. * Fixed DoS issues in the scheduler. * Fixed an issue with unsupported "sides" values in the IPP backend. * The scheduler would restart continuously when idle and printers were not shared. * Fixed an issue with 'EXPECT !name WITH-VALUE ...' tests. * Fixed a command ordering issue in the Zebra ZPL driver. * Fixed a memory leak in 'ppdOpen'. Changes in CUPS v2.3rc1: * The 'cups-config' script no longer adds extra libraries when linking against shared libraries. * The supplied example print documents have been optimized for size. * The 'cupsctl' command now prevents setting "cups-files.conf" directives. * The "forbidden" message in the web interface is now explained. * The footer in the web interface covered some content on small displays. * The libusb-based USB backend now enforces read limits, improving print speed in many cases. * The 'ippeveprinter' command now looks for print commands in the "command" subdirectory. * The 'ipptool' command now supports '$date-current' and '$date-start' variables to insert the current and starting date and time values, as well as ISO-8601 relative time values such as "PT30S" for 30 seconds in the future. Changes in CUPS v2.3b8 * Media size matching now uses a tolerance of 0.5mm. * The lpadmin command would hang with a bad PPD file. * Fixed a potential crash bug in cups-driverd. * Fixed a performance regression with large PPDs. * Fixed a memory reallocation bug in HTTP header value expansion. * Timed out job submission now yields an error. * Restored minimal support for the 'Emulators' keyword in PPD files to allow old Samsung printer drivers to continue to work. * The scheduler did not encode octetString values like "job-password" correctly for the print filters. * The 'cupsCheckDestSupported' function did not check octetString values correctly. * Added support for 'UserAgentTokens' directive in "client.conf". * Updated the systemd service file for cupsd. * The 'ippValidateAttribute' function did not catch all instances of invalid UTF-8 strings. * Fixed an issue with the self-signed certificates generated by GNU TLS. * Fixed a potential memory leak when reading at the end of a file. * Fixed potential unaligned accesses in the string pool. * Fixed a potential memory leak when loading a PPD file. * Added a USB quirks rule for the Lexmark E120n. * Updated the USB quirks rule for Zebra label printers. * The lpadmin command, web interface, and scheduler all queried an IPP Everywhere printer differently, resulting in different PPDs for the same printer. * The web interface no longer provides access to the log files. * Non-Kerberized printing to Windows via IPP was broken. * The scheduler no longer stops a printer if an error occurs when a job is canceled or aborted. * Added a USB quirks rule for the DYMO 450 Turbo. * Added a USB quirks rule for Xerox printers. * The scheduler's self-signed certificate did not include all of the alternate names for the server when using GNU TLS. * Fixed some PPD caching and IPP Everywhere PPD accounting/password bugs. * Fixed 'PreserveJobHistory' bug with time values. * The scheduler no longer advertises the HTTP methods it supports. * The scheduler did not always idle exit as quickly as it could. * Added a new 'ippeveprinter' command based on the old ippserver sample code. Changes in CUPS v2.3b7 * Running ppdmerge with the same input and output filenames did not work as advertised. * Rebase let-cupsd-start-after-network.patch and cups-config-libs.patch. * Drop issue5509-fix-utf-8-validation-issue.patch and issue5453.patch: fixed upstream. - make cups-devel pull in cups-rpm-helper to fix printer driver provides (boo#1172407) - Fixes for %_libexecdir changing to /usr/libexec - Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118) Fixes https://github.com/apple/cups/issues/5509 - Remove libcupscgi1, libcupsmime1, libcupsppdc1 from baselibs.conf - Version upgrade to 2.3b6: This is the sixth beta of the CUPS 2.3 series which adopts the new CUPS license, adds support for IPP presets and finishing templates, and fixes a number of bugs and "polish" issues. For details see https://github.com/apple/cups/releases or the CHANGES.md file. Backward incompatible changes: * The cupsaddsmb program has been removed (Issue #5449) * The cupstestdsc program has been removed (Issue #5450) * The cupscgi, cupsmime, and cupsppdc support libraries are no longer installed as shared libraries. Changes include: * CVE-2018-4700: Linux session cookies used a predictable random number seed. * The lpoptions command now works with IPP Everywhere printers that have not yet been added as local queues (Issue #5045) * The lpadmin command would create a non-working printer in some error cases (Issue #5305) * The scheduler would crash if an empty AccessLog directive was specified (Issue #5309) * The scheduler did not idle-exit on some Linux distributions (Issue #5319) * Fixed a regression in the changes to ippValidateAttribute (Issue #5322, Issue #5330) * Fixed a crash bug in the Epson dot matrix driver (Issue #5323) * Automatic debug logging of job errors did not work with systemd (Issue #5337) * The web interface did not list the IPP Everywhere "driver" (Issue #5338) * The scheduler did not report all of the supported job options and values (Issue #5340) * The IPP Everywhere "driver" now properly supports face-up printers (Issue #5345) * Fixed some typos in the label printer drivers (Issue #5350) * Setting the Community name to the empty string in snmp.conf now disables SNMP supply level monitoring by all the standard network backends (Issue #5354) * Multi-file jobs could get stuck if the backend failed (Issue #5359, Issue #5413) * The IPP Everywhere "driver" no longer does local filtering when printing to a shared CUPS printer (Issue #5361) * The lpadmin command now correctly reports IPP errors when configuring an IPP Everywhere printer (Issue #5370) * Fixed some memory leaks discovered by Coverity (Issue #5375) * The PPD compiler incorrectly terminated JCL options (Issue #5379) * The cupstestppd utility did not generate errors for missing/mismatched CloseUI/JCLCloseUI keywords (Issue #5381) * The scheduler now reports the actual location of the log file (Issue #5398) * The generated PPD files for IPP Everywhere printers did not contain the cupsManualCopies keyword (Issue #5433) * Kerberos credentials might be truncated (Issue #5435) * The handling of MaxJobTime 0 did not match the documentation (Issue #5438) * Fixed a bug adding a queue with the -E option (Issue #5440) * The scheduler did not validate that required initial request attributes were in the operation group (rdar://41098178) * Fixed an issue with HTTP Digest authentication (rdar://41709086) * The scheduler could crash when job history was purged (rdar://42198057) * Fixed a crash bug when mapping PPD duplex options to IPP attributes (rdar://46183976) * Fixed a memory leak for some IPP (extension) syntaxes. * The snmp backend is now deprecated. - issue5453.patch fixes https://github.com/apple/cups/issues/5453 - Version upgrade to 2.3b5: This is the fifth beta of the CUPS 2.3 series which adopts the new CUPS license, adds support for IPP presets and finishing templates, and fixes a number of bugs and "polish" issues. For details see https://github.com/apple/cups/releases or the CHANGES.md file. Changes include: * The ipptool program no longer checks for duplicate attributes when running in list or CSV mode (Issue #5278) * The cupsCreateJob, cupsPrintFile2, and cupsPrintFiles2 APIs did not use the supplied HTTP connection (Issue #5288) * Fixed another crash in the scheduler when adding an IPP Everywhere printer (Issue #5290) * Added a workaround for certain web browsers that do not support multiple authentication schemes in a single response header (Issue #5289) * Fixed policy limits containing the All operation (Issue #5296) * The scheduler was always restarted after idle-exit with systemd (Issue #5297) * The mailto notifier did not wait for the welcome message (Issue #5312) * Fixed a parsing bug in the pstops filter (Issue #5321) * The scheduler allowed environment variables to be specified in the cupsd.conf file (rdar://37836779, rdar://37836995, rdar://37837252, rdar://37837581) * Fax queues did not support pause (p) or wait-for-dialtone (w) characters (rdar://39212256) * The scheduler did not validate notify-recipient-uri values properly (rdar://40068936) * The IPP parser allowed invalid group tags (rdar://40442124) * Fixed a parsing bug in the new authentication code. - issue5296_fix_policy_limits_using_All.patch is obsolete because it is fixed upstream (see "Issue #5296" above) - Add patch let-cupsd-start-after-network.patch Let cuspd start after possible network connection (boo#1111351) This let cupsd also stop before a used network connection goes down, hence the cusp does not lock due waiting on remote printers. - Fix warning message upon update (boo#1050845): Remove template service cups-lpd@ from service_* macro in scriptlets. - issue5296_fix_policy_limits_using_All.patch fixes https://github.com/apple/cups/issues/5296 by only the actually relevant part of https://github.com/apple/cups/commit/0873f681e43c04972b3d6bc90bdbdedb29e6e9… (follow-up of boo#936309 and bsc#577936 starting at comment 13) - Version upgrade to 2.3b4: This is the fourth beta of the CUPS 2.3 series. For details see https://github.com/apple/cups/releases or the CHANGES.md file. Changes include: * Additional security fixes for: bsc#1061066 DBUS library aborts caller process in _dbus_check_is_valid_utf8 (in particular that aborts cupsd) and bsc#1087018 CVE-2017-18248: cups: The add_job function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs with an invalid username, related to a D-Bus notification which are the CUPS upstream issues https://github.com/apple/cups/issues/5143 Remote DoS attack against cupsd via invalid username and malicious D-Bus library and https://github.com/apple/cups/issues/5186 squash non-UTF-8 strings into ASCII on plain IPP level and https://github.com/apple/cups/issues/5229 persistently substitute invalid job attributes with default values - not only in add_job see also bsc#1087072 dbus-1: Disable assertions to prevent un-expected DDoS attacks * NOTICE: Raw print queues are now deprecated (Issue #5269) so that now there is a warning message when you add or modify a queue to use the "raw driver" but raw printing will continue to work through CUPS 2.3.x, cf. https://lists.cups.org/pipermail/cups/2018-March/074060.html * Kerberized printing to another CUPS server did not work correctly (Issue #5233) * The scheduler now supports using temporary print queues for older IPP/1.1 print queues like those shared by CUPS 1.3 and earlier (Issue #5241) * Systemd did not restart cupsd when configuration changes were made that required a restart (Issue #5263) * Fixed an Avahi crash bug in the scheduler (Issue #5268) * TLS connections now properly timeout (rdar://34938533) * Removed support for the '-D_PPD_DEPRECATED=""' developer cheat - the PPD API should no longer be used. * Removed support for '-D_IPP_PRIVATE_STRUCTURES=1' developer cheat - the IPP accessor functions should be used instead. * The symlink rastertodymo -> rastertolabel in /usr/lib/cups/filter is no longer provided. - Removed fix_filter_Makefile.patch because since CUPS 2.3b4 it is fixed in the upstream code via https://github.com/apple/cups/issues/5247 more precisely via https://github.com/apple/cups/commit/ab89234de2d9bf36bb59f2aa4873d98e95ca4d… - Version upgrade to 2.3b3: This is the third beta of the CUPS 2.3 series. For details see https://github.com/apple/cups/releases Changes include: * More fixes for printing to old CUPS servers (Issue #5211) * Additional changes for the scheduler to substitute default values for invalid job attributes when running in "relaxed conformance" mode (Issue #5229 - a follow-up of issues #5186 and #5143) A detailed list of changes can be found in the CHANGES.md file. - fix_filter_Makefile.patch fixes https://github.com/apple/cups/issues/5247 - Version upgrade to 2.3b2: This is the second beta of the CUPS 2.3 series. For details see https://github.com/apple/cups/releases Changes include: * Printing to old CUPS servers has been fixed (Issue #5211) A detailed list of changes can be found in the CHANGES.md file. ==== libcap ==== Version update (2.61 -> 2.62) Subpackages: libcap2 libcap2-32bit - update to 2.62: * Bug fix for Go package "cap" and launching * Build cleanups * Documentation updates: cap_max_bits has a man page entry * Recognize default securebits as a libcap mode: HYBRID

1 0

Python Build setup for Leap 15.3 broken
by Axel Braun 03 Jan '22

03 Jan '22

Hi, while there is a discussion ongoing about Python versions in Leap 15.4 I noticed that the python setup for Leap 15.3 seems to be broken: It now requires explicit declaration of BuildRequires: python-rpm-macros which was not the case before, and is not required for other Leap Flavours or Tumbleweed. Can that be fixed on a distribution level? Otherwise I would need to change some hundred specfiles just for Leap 15.3..... Thanks Axel

2 3

FreeCAD dependency question
by Nicolas Formichella 03 Jan '22

03 Jan '22

Hello, Just installed FreeCAD, got into add-on manager, and got the error message saying that GitPython isn't installed so it wouldn't be able to source macros for git. Installing python38-GitPython makes the message go away Now, I'm on with the fix which is a simple dep fix, but I'm having a dilemma so I'm looking for comments. As this is for the add-on manager, that dep is not necessary to use the software, only needed to pull macros from git sources. Regarding that, I'd put a `Recommends: python3-GitPython`, but I have the feeling that a full `Requires:` is more suited I'd love to get some thoughts Regards, Nicolas FORMICHELLA

3 3

New Tumbleweed snapshot 20220101 released!
by Dominique Leuenberger 02 Jan '22

02 Jan '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (95.0.1 -> 95.0.2) alsa-ucm-conf brltty cups expat (2.4.1 -> 2.4.2) kernel-source (5.15.8 -> 5.15.12) libcamera libgsf (1.14.47 -> 1.14.48) mozilla-nspr (4.32 -> 4.33) mozilla-nss (3.73 -> 3.73.1) plasma5-desktop pulseaudio python-ordered-set python-psycopg2 (2.9.2 -> 2.9.3) python-pytest rubygem-rubocop-ast (1.15.0 -> 1.15.1) rubygem-zeitwerk (2.5.1 -> 2.5.2) yast2-installation (4.4.30 -> 4.4.31) yast2-schema (4.4.6 -> 4.4.7) yast2-security (4.4.1 -> 4.4.3) === Details === ==== MozillaFirefox ==== Version update (95.0.1 -> 95.0.2) Subpackages: MozillaFirefox-translations-common - Add upstream patches: * mozilla-bmo1745560.patch: Fix build against wayland 1.20. * mozilla-bmo1744896.patch: Create WaylandVsyncSource on window creation - Mozilla Firefox 95.0.2 * Addresses frequent crashes experienced by users with C/E/Z-Series "Bobcat" CPUs running on Windows 7, 8, and 8.1. - updated constraints for ppc and x86-64 ==== alsa-ucm-conf ==== - Fix a regression in HDA-DualCodecs: 0001-HDA-DualCodecs-fix-typo-in-Speaker-condition.patch ==== brltty ==== Subpackages: brltty-driver-at-spi2 brltty-driver-brlapi brltty-driver-speech-dispatcher brltty-driver-xwindow brltty-lang libbrlapi0_8 python3-brlapi system-user-brltty xbrlapi - Add python-rpm-macros (bsc#1180125) ==== cups ==== Subpackages: cups-client cups-config libcups2 libcups2-32bit libcupsimage2 - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_cups.service.patch ==== expat ==== Version update (2.4.1 -> 2.4.2) Subpackages: libexpat-devel libexpat1 libexpat1-32bit - update to 2.4.2: * Link againgst libm for function "isnan" * Include expat_config.h as early as possible * Autotools: Include files with release archives: - buildconf.sh - fuzz/*.c * Autotools: Sync CMake templates * docs: Document that function XML_GetBuffer may return NULL when asking for a buffer of 0 (zero) bytes size * docs: Fix return value docs for both XML_SetBillionLaughsAttackProtection* functions * Version info bumped from 9:1:8 to 9:2:8 ==== kernel-source ==== Version update (5.15.8 -> 5.15.12) Subpackages: kernel-default kernel-docs - Update config files. - commit 375fcb8 - Linux 5.15.12 (bsc#1012628). - arm64: vdso32: require CROSS_COMPILE_COMPAT for gcc+bfd (bsc#1012628). - net: usb: lan78xx: add Allied Telesis AT29M2-AF (bsc#1012628). - ext4: prevent partial update of the extent blocks (bsc#1012628). - ext4: check for out-of-order index extents in ext4_valid_extent_entries() (bsc#1012628). - ext4: check for inconsistent extents between index and leaf block (bsc#1012628). - selftests: KVM: Fix non-x86 compiling (bsc#1012628). - HID: holtek: fix mouse probing (bsc#1012628). - HID: potential dereference of null pointer (bsc#1012628). - NFSD: Fix READDIR buffer overflow (bsc#1012628). - PM: sleep: Fix error handling in dpm_prepare() (bsc#1012628). - arm64: dts: allwinner: orangepi-zero-plus: fix PHY mode (bsc#1012628). - bus: sunxi-rsb: Fix shutdown (bsc#1012628). - spi: change clk_disable_unprepare to clk_unprepare (bsc#1012628). - ucounts: Fix rlimit max values check (bsc#1012628). - drm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf (bsc#1012628). - ASoC: meson: aiu: fifo: Add missing dma_coerce_mask_and_coherent() (bsc#1012628). - RDMA/hns: Fix RNR retransmission issue for HIP08 (bsc#1012628). - IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() (bsc#1012628). - RDMA/hns: Replace kfree() with kvfree() (bsc#1012628). - netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy() (bsc#1012628). - netfilter: fix regression in looped (broad|multi)cast's MAC handling (bsc#1012628). - ARM: dts: imx6qdl-wandboard: Fix Ethernet support (bsc#1012628). - ice: Use xdp_buf instead of rx_buf for xsk zero-copy (bsc#1012628). - ice: xsk: return xsk buffers back to pool when cleaning the ring (bsc#1012628). - net: marvell: prestera: fix incorrect return of port_find (bsc#1012628). - net: marvell: prestera: fix incorrect structure access (bsc#1012628). - qlcnic: potential dereference null pointer of rx_queue->page_ring (bsc#1012628). - tcp: move inet->rx_dst_ifindex to sk->sk_rx_dst_ifindex (bsc#1012628). - ipv6: move inet6_sk(sk)->rx_dst_cookie to sk->sk_rx_dst_cookie (bsc#1012628). - inet: fully convert sk->sk_rx_dst to RCU rules (bsc#1012628). - net: accept UFOv6 packages in virtio_net_hdr_to_skb (bsc#1012628). - net: skip virtio_net_hdr_set_proto if protocol already set (bsc#1012628). - igb: fix deadlock caused by taking RTNL in RPM resume path (bsc#1012628). - ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module (bsc#1012628). - gpio: virtio: remove timeout (bsc#1012628). - bonding: fix ad_actor_system option setting to default (bsc#1012628). - fjes: Check for error irq (bsc#1012628). - drivers: net: smc911x: Check for error irq (bsc#1012628). - net: ks8851: Check for error irq (bsc#1012628). - sfc: Check null pointer of rx_queue->page_ring (bsc#1012628). - sfc: falcon: Check null pointer of rx_queue->page_ring (bsc#1012628). - asix: fix uninit-value in asix_mdio_read() (bsc#1012628). - asix: fix wrong return value in asix_check_host_enable() (bsc#1012628). - io_uring: zero iocb->ki_pos for stream file types (bsc#1012628). - veth: ensure skb entering GRO are not cloned (bsc#1012628). - net: stmmac: ptp: fix potentially overflowing expression (bsc#1012628). - net: bridge: Use array_size() helper in copy_to_user() (bsc#1012628). - net: bridge: fix ioctl old_deviceless bridge argument (bsc#1012628). - r8152: fix the force speed doesn't work for RTL8156 (bsc#1012628). - net: stmmac: dwmac-visconti: Fix value of ETHER_CLK_SEL_FREQ_SEL_2P5M (bsc#1012628). - Input: elantech - fix stack out of bound access in elantech_change_report_id() (bsc#1012628). - pinctrl: bcm2835: Change init order for gpio hogs (bsc#1012628). - hwmon: (lm90) Fix usage of CONFIG2 register in detect function (bsc#1012628). - hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations (bsc#1012628). - hwmon: (lm90) Introduce flag indicating extended temperature support (bsc#1012628). - hwmon: (lm90) Add basic support for TI TMP461 (bsc#1012628). - hwmon: (lm90) Drop critical attribute support for MAX6654 (bsc#1012628). - ARM: 9160/1: NOMMU: Reload __secondary_data after PROCINFO_INITFUNC (bsc#1012628). - uapi: Fix undefined __always_inline on non-glibc systems (bsc#1012628). - compiler.h: Fix annotation macro misplacement with Clang (bsc#1012628). - platform/x86/intel: Remove X86_PLATFORM_DRIVERS_INTEL (bsc#1012628). - kernel/crash_core: suppress unknown crashkernel parameter warning (bsc#1012628). - Revert "x86/boot: Pull up cmdline preparation and early param parsing" (bsc#1012628). - x86/boot: Move EFI range reservation after cmdline parsing (bsc#1012628). - ALSA: jack: Check the return value of kstrdup() (bsc#1012628). - ALSA: drivers: opl3: Fix incorrect use of vp->state (bsc#1012628). - ALSA: rawmidi - fix the uninitalized user_pversion (bsc#1012628). - ALSA: hda/hdmi: Disable silent stream on GLK (bsc#1012628). - ALSA: hda/realtek: Amp init fixup for HP ZBook 15 G6 (bsc#1012628). - ALSA: hda/realtek: Add new alc285-hp-amp-init model (bsc#1012628). - ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook (bsc#1012628). - ALSA: hda/realtek: Fix quirk for Clevo NJ51CU (bsc#1012628). - ASoC: meson: aiu: Move AIU_I2S_MISC hold setting to aiu-fifo-i2s (bsc#1012628). - ASoC: tegra: Add DAPM switches for headphones and mic jack (bsc#1012628). - ASoC: tegra: Restore headphones jack name on Nyan Big (bsc#1012628). - Input: atmel_mxt_ts - fix double free in mxt_read_info_block (bsc#1012628). - ipmi: bail out if init_srcu_struct fails (bsc#1012628). - ipmi: ssif: initialize ssif_info->client early (bsc#1012628). - ipmi: fix initialization when workqueue allocation fails (bsc#1012628). - parisc: Correct completer in lws start (bsc#1012628). - parisc: Fix mask used to select futex spinlock (bsc#1012628). - tee: handle lookup of shm with reference count 0 (bsc#1012628). - x86/pkey: Fix undefined behaviour with PKRU_WD_BIT (bsc#1012628). - platform/x86: amd-pmc: only use callbacks for suspend (bsc#1012628). - platform/x86: intel_pmc_core: fix memleak on registration failure (bsc#1012628). - KVM: x86: Always set kvm_run->if_flag (bsc#1012628). - KVM: x86/mmu: Don't advance iterator after restart due to yielding (bsc#1012628). - KVM: nVMX: Synthesize TRIPLE_FAULT for L2 if emulation is required (bsc#1012628). - KVM: VMX: Always clear vmx->fail on emulation_required (bsc#1012628). - KVM: VMX: Wake vCPU when delivering posted IRQ even if vCPU == this vCPU (bsc#1012628). - pinctrl: stm32: consider the GPIO offset to expose all the GPIO lines (bsc#1012628). - gpio: dln2: Fix interrupts when replugging the device (bsc#1012628). - mmc: sdhci-tegra: Fix switch to HS400ES mode (bsc#1012628). - mmc: meson-mx-sdhc: Set MANUAL_STOP for multi-block SDIO commands (bsc#1012628). - mmc: core: Disable card detect during shutdown (bsc#1012628). - mmc: mmci: stm32: clear DLYB_CR after sending tuning command (bsc#1012628). - ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling (bsc#1012628). - ksmbd: fix error code in ndr_read_int32() (bsc#1012628). - ksmbd: fix uninitialized symbol 'pntsd_size' (bsc#1012628). - ksmbd: disable SMB2_GLOBAL_CAP_ENCRYPTION for SMB 3.1.1 (bsc#1012628). - mac80211: fix locking in ieee80211_start_ap error path (bsc#1012628). - mm: mempolicy: fix THP allocations escaping mempolicy restrictions (bsc#1012628). - mm, hwpoison: fix condition in free hugetlb page path (bsc#1012628). - mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page() (bsc#1012628). - mm/damon/dbgfs: protect targets destructions with kdamond_lock (bsc#1012628). - tee: optee: Fix incorrect page free bug (bsc#1012628). - f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr() (bsc#1012628). - netfs: fix parameter of cleanup() (bsc#1012628). - KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state (bsc#1012628). - arm64: dts: lx2160a: fix scl-gpios property name (bsc#1012628). - kfence: fix memory leak when cat kfence objects (bsc#1012628). - Input: iqs626a - prohibit inlining of channel parsing functions (bsc#1012628). - Input: elants_i2c - do not check Remark ID on eKTH3900/eKTH5312 (bsc#1012628). - Input: goodix - add id->model mapping for the "9111" model (bsc#1012628). - ASoC: tas2770: Fix setting of high sample rates (bsc#1012628). - ASoC: SOF: Intel: pci-tgl: add new ADL-P variant (bsc#1012628). - ASoC: SOF: Intel: pci-tgl: add ADL-N support (bsc#1012628). - ASoC: rt5682: fix the wrong jack type detected (bsc#1012628). - pinctrl: mediatek: fix global-out-of-bounds issue (bsc#1012628). - hwmom: (lm90) Fix citical alarm status for MAX6680/MAX6681 (bsc#1012628). - hwmon: (lm90) Do not report 'busy' status bit as alarm (bsc#1012628). - r8152: sync ocp base (bsc#1012628). - ax25: NPD bug when detaching AX25 device (bsc#1012628). - hamradio: defer ax25 kfree after unregister_netdev (bsc#1012628). - hamradio: improve the incomplete fix to avoid NPD (bsc#1012628). - tun: avoid double free in tun_free_netdev (bsc#1012628). - phonet/pep: refuse to enable an unbound pipe (bsc#1012628). - Refresh patches.suse/add-product-identifying-information-to-vmcoreinfo.patch. - commit 202eb92 - Disable patches.suse/btrfs-use-the-new-VFS-super_block_dev.patch (bsc#1194007) Better to disable it completely. - commit 730a488 - Linux 5.15.11 (bsc#1012628). - xen/netback: don't queue unlimited number of packages (bsc#1012628). - xen/netback: fix rx queue stall detection (bsc#1012628). - xen/console: harden hvc_xen against event channel storms (bsc#1012628). - xen/netfront: harden netfront against event channel storms (bsc#1012628). - xen/blkfront: harden blkfront against event channel storms (bsc#1012628). - Revert "xsk: Do not sleep in poll() when need_wakeup set" (bsc#1012628). - selftests/damon: test debugfs file reads/writes with huge count (bsc#1012628). - bus: ti-sysc: Fix variable set but not used warning for reinit_modules (bsc#1012628). - io-wq: drop wqe lock before creating new worker (bsc#1012628). - rcu: Mark accesses to rcu_state.n_force_qs (bsc#1012628). - io-wq: check for wq exit after adding new worker task_work (bsc#1012628). - io-wq: remove spurious bit clear on task_work addition (bsc#1012628). - scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() (bsc#1012628). - scsi: scsi_debug: Fix type in min_t to avoid stack OOB (bsc#1012628). - scsi: scsi_debug: Don't call kcalloc() if size arg is zero (bsc#1012628). - ovl: fix warning in ovl_create_real() (bsc#1012628). - fuse: annotate lock in fuse_reverse_inval_entry() (bsc#1012628). - media: mxl111sf: change mutex_init() location (bsc#1012628). - USB: core: Make do_proc_control() and do_proc_bulk() killable (bsc#1012628). - bpf: Fix extable address check (bsc#1012628). - bpf, x64: Factor out emission of REX byte in more cases (bsc#1012628). - mptcp: add missing documented NL params (bsc#1012628). - xsk: Do not sleep in poll() when need_wakeup set (bsc#1012628). - ARM: dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name (bsc#1012628). - can: m_can: pci: use custom bit timings for Elkhart Lake (bsc#1012628). - can: m_can: make custom bittiming fields const (bsc#1012628). - Revert "can: m_can: remove support for custom bit timing" (bsc#1012628). - drm/amd/pm: fix reading SMU FW version from amdgpu_firmware_info on YC (bsc#1012628). - drm/amdgpu: don't override default ECO_BITs setting (bsc#1012628). - drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE (bsc#1012628). - powerpc/module_64: Fix livepatching for RO modules (bsc#1012628). - libata: if T_LENGTH is zero, dma direction should be DMA_NONE (bsc#1012628). - perf inject: Fix segfault due to perf_data__fd() without open (bsc#1012628). - perf inject: Fix segfault due to close without open (bsc#1012628). - riscv: dts: unmatched: Add gpio card detect to mmc-spi-slot (bsc#1012628). - riscv: dts: unleashed: Add gpio card detect to mmc-spi-slot (bsc#1012628). - locking/rtmutex: Fix incorrect condition in rtmutex_spin_on_owner() (bsc#1012628). - cifs: sanitize multiple delimiters in prepath (bsc#1012628). - timekeeping: Really make sure wall_to_monotonic isn't positive (bsc#1012628). - serial: 8250_fintek: Fix garbled text for console (bsc#1012628). - iocost: Fix divide-by-zero on donation from low hweight cgroup (bsc#1012628). - zonefs: add MODULE_ALIAS_FS (bsc#1012628). - btrfs: fix missing blkdev_put() call in btrfs_scan_one_device() (bsc#1012628). - btrfs: check WRITE_ERR when trying to read an extent buffer (bsc#1012628). - btrfs: fix double free of anon_dev after failure to create subvolume (bsc#1012628). - Refresh patches.suse/btrfs-use-the-new-VFS-super_block_dev.patch. - btrfs: fix memory leak in __add_inode_ref() (bsc#1012628). - selinux: fix sleeping function called from invalid context (bsc#1012628). - USB: serial: option: add Telit FN990 compositions (bsc#1012628). - USB: serial: cp210x: fix CP2105 GPIO registration (bsc#1012628). - usb: gadget: u_ether: fix race in setting MAC address in setup phase (bsc#1012628). - usb: typec: tcpm: fix tcpm unregister port but leave a pending timer (bsc#1012628). - usb: cdnsp: Fix lack of spin_lock_irqsave/spin_lock_restore (bsc#1012628). - usb: cdnsp: Fix issue in cdnsp_log_ep trace event (bsc#1012628). - usb: cdnsp: Fix incorrect calling of cdnsp_died function (bsc#1012628). - usb: cdnsp: Fix incorrect status for control request (bsc#1012628). - usb: xhci: Extend support for runtime power management for AMD's Yellow carp (bsc#1012628). - usb: xhci-mtk: fix list_del warning when enable list debug (bsc#1012628). - PCI/MSI: Mask MSI-X vectors only on success (bsc#1012628). - PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error (bsc#1012628). - usb: dwc2: fix STM ID/VBUS detection startup delay in dwc2_driver_probe (bsc#1012628). - USB: NO_LPM quirk Lenovo USB-C to Ethernet Adapher(RTL8153-04) (bsc#1012628). - tty: n_hdlc: make n_hdlc_tty_wakeup() asynchronous (bsc#1012628). - KVM: x86: Drop guest CPUID check for host initiated writes to MSR_IA32_PERF_CAPABILITIES (bsc#1012628). - Revert "usb: early: convert to readl_poll_timeout_atomic()" (bsc#1012628). - USB: gadget: bRequestType is a bitfield, not a enum (bsc#1012628). - powerpc/85xx: Fix oops when CONFIG_FSL_PMC=n (bsc#1012628). - bpf, selftests: Fix racing issue in btf_skc_cls_ingress test (bsc#1012628). - bpf: Fix extable fixup offset (bsc#1012628). - arm64: kexec: Fix missing error code 'ret' warning in load_other_segments() (bsc#1012628). - afs: Fix mmap (bsc#1012628). - sit: do not call ipip6_dev_free() from sit_init_net() (bsc#1012628). - net: systemport: Add global locking for descriptor lifecycle (bsc#1012628). - net/smc: Prevent smc_release() from long blocking (bsc#1012628). - net: Fix double 0x prefix print in SKB dump (bsc#1012628). - dsa: mv88e6xxx: fix debug print for SPEED_UNFORCED (bsc#1012628). - sfc_ef100: potential dereference of null pointer (bsc#1012628). - net: stmmac: dwmac-rk: fix oob read in rk_gmac_setup (bsc#1012628). - net/packet: rx_owner_map depends on pg_vec (bsc#1012628). - netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc (bsc#1012628). - ixgbe: set X550 MDIO speed before talking to PHY (bsc#1012628). - ixgbe: Document how to enable NBASE-T support (bsc#1012628). - igc: Fix typo in i225 LTR functions (bsc#1012628). - igbvf: fix double free in `igbvf_probe` (bsc#1012628). - igb: Fix removal of unicast MAC filters of VFs (bsc#1012628). - soc/tegra: fuse: Fix bitwise vs. logical OR warning (bsc#1012628). - mptcp: fix deadlock in __mptcp_push_pending() (bsc#1012628). - mptcp: clear 'kern' flag from fallback sockets (bsc#1012628). - mptcp: remove tcp ulp setsockopt support (bsc#1012628). - drm/amd/pm: fix a potential gpu_metrics_table memory leak (bsc#1012628). - drm/amd/display: Set exit_optimized_pwr_state for DCN31 (bsc#1012628). - ice: Don't put stale timestamps in the skb (bsc#1012628). - ice: Use div64_u64 instead of div_u64 in adjfine (bsc#1012628). - rds: memory leak in __rds_conn_create() (bsc#1012628). - flow_offload: return EOPNOTSUPP for the unsupported mpls action type (bsc#1012628). - net: stmmac: fix tc flower deletion for VLAN priority Rx steering (bsc#1012628). - mac80211: fix lookup when adding AddBA extension element (bsc#1012628). - cfg80211: Acquire wiphy mutex on regulatory work (bsc#1012628). - mac80211: agg-tx: don't schedule_and_wake_txq() under sta->lock (bsc#1012628). - drm/i915/display: Fix an unsigned subtraction which can never be negative (bsc#1012628). - drm/ast: potential dereference of null pointer (bsc#1012628). - mptcp: never allow the PM to close a listener subflow (bsc#1012628). - selftest/net/forwarding: declare NETIFS p9 p10 (bsc#1012628). - net: dsa: mv88e6xxx: Unforce speed & duplex in mac_link_down() (bsc#1012628). - selftests/net: toeplitz: fix udp option (bsc#1012628). - net/sched: sch_ets: don't remove idle classes from the round-robin list (bsc#1012628). - drm: simpledrm: fix wrong unit with pixel clock (bsc#1012628). - dmaengine: st_fdma: fix MODULE_ALIAS (bsc#1012628). - dmaengine: idxd: fix missed completion on abort path (bsc#1012628). - selftests: Fix IPv6 address bind tests (bsc#1012628). - selftests: Fix raw socket bind tests with VRF (bsc#1012628). - selftests: Add duplicate config only for MD5 VRF tests (bsc#1012628). - net: hns3: fix race condition in debugfs (bsc#1012628). - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (bsc#1012628). - selftests: icmp_redirect: pass xfail=0 to log_test() (bsc#1012628). - netdevsim: don't overwrite read only ethtool parms (bsc#1012628). - inet_diag: fix kernel-infoleak for UDP sockets (bsc#1012628). - sch_cake: do not call cake_destroy() from cake_init() (bsc#1012628). - s390/kexec_file: fix error handling when applying relocations (bsc#1012628). - selftests: net: Correct ping6 expected rc from 2 to 1 (bsc#1012628). - Revert "drm/fb-helper: improve DRM fbdev emulation device names" (bsc#1012628). - vdpa: Consider device id larger than 31 (bsc#1012628). - virtio/vsock: fix the transport to work with VMADDR_CID_ANY (bsc#1012628). - virtio: always enter drivers/virtio/ (bsc#1012628). - iwlwifi: mvm: don't crash on invalid rate w/o STA (bsc#1012628). - soc: imx: Register SoC device only on i.MX boards (bsc#1012628). - clk: Don't parent clks until the parent is fully registered (bsc#1012628). - arm64: dts: imx8mq: remove interconnect property from lcdif (bsc#1012628). - ARM: socfpga: dts: fix qspi node compatible (bsc#1012628). - ceph: initialize pathlen variable in reconnect_caps_cb (bsc#1012628). - ceph: fix duplicate increment of opened_inodes metric (bsc#1012628). - tee: amdtee: fix an IS_ERR() vs NULL bug (bsc#1012628). - mac80211: track only QoS data frames for admission control (bsc#1012628). - dmaengine: idxd: fix calling wq quiesce inside spinlock (bsc#1012628). - dmaengine: idxd: add halt interrupt support (bsc#1012628). - arm64: dts: rockchip: fix poweroff on helios64 (bsc#1012628). - arm64: dts: rockchip: fix audio-supply for Rock Pi 4 (bsc#1012628). - arm64: dts: rockchip: fix rk3399-leez-p710 vcc3v3-lan supply (bsc#1012628). - arm64: dts: rockchip: fix rk3308-roc-cc vcc-sd supply (bsc#1012628). - arm64: dts: rockchip: remove mmc-hs400-enhanced-strobe from rk3399-khadas-edge (bsc#1012628). - pinctrl: amd: Fix wakeups when IRQ is shared with SCI (bsc#1012628). - drm/i915/hdmi: Turn DP++ TMDS output buffers back on in encoder->shutdown() (bsc#1012628). - drm/i915/hdmi: convert intel_hdmi_to_dev to intel_hdmi_to_i915 (bsc#1012628). - scsi: ufs: core: Retry START_STOP on UNIT_ATTENTION (bsc#1012628). - btrfs: remove stale comment about the btrfs_show_devname (bsc#1012628). - btrfs: update latest_dev when we create a sprout device (bsc#1012628). - btrfs: use latest_dev in btrfs_show_devname (bsc#1012628). - btrfs: convert latest_bdev type to btrfs_device and rename (bsc#1012628). - audit: improve robustness of the audit queue handling (bsc#1012628). - dm btree remove: fix use after free in rebalance_children() (bsc#1012628). - ceph: fix up non-directory creation in SGID directories (bsc#1012628). - arm64: dts: ten64: remove redundant interrupt declaration for gpio-keys (bsc#1012628). - recordmcount.pl: look for jgnop instruction as well as bcrl on s390 (bsc#1012628). - s390/entry: fix duplicate tracking of irq nesting level (bsc#1012628). - vdpa: check that offsets are within bounds (bsc#1012628). - virtio_ring: Fix querying of maximum DMA mapping size for virtio device (bsc#1012628). - vduse: check that offset is within bounds in get_config() (bsc#1012628). - vduse: fix memory corruption in vduse_dev_ioctl() (bsc#1012628). - bpf, selftests: Update test case for atomic cmpxchg on r0 with pointer (bsc#1012628). - bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg (bsc#1012628). - bpf, selftests: Add test case trying to taint map value pointer (bsc#1012628). - bpf: Make 32->64 bounds propagation slightly more robust (bsc#1012628). - bpf: Fix signed bounds propagation after mov32 (bsc#1012628). - bpf, selftests: Add test case for atomic fetch on spilled pointer (bsc#1012628). - bpf: Fix kernel address leakage in atomic fetch (bsc#1012628). - firmware: arm_scpi: Fix string overflow in SCPI genpd driver (bsc#1012628). - mac80211: validate extended element ID is present (bsc#1012628). - mac80211: send ADDBA requests using the tid/queue of the aggregation session (bsc#1012628). - mac80211: mark TX-during-stop for TX in in_reconfig (bsc#1012628). - mac80211: fix regression in SSN handling of addba tx (bsc#1012628). - mac80211: fix rate control for retransmitted frames (bsc#1012628). - KVM: X86: Fix tlb flush for tdp in kvm_invalidate_pcid() (bsc#1012628). - x86/kvm: remove unused ack_notifier callbacks (bsc#1012628). - KVM: downgrade two BUG_ONs to WARN_ON_ONCE (bsc#1012628). - KVM: selftests: Make sure kvm_create_max_vcpus test won't hit RLIMIT_NOFILE (bsc#1012628). - KVM: VMX: clear vmx_x86_ops.sync_pir_to_irr if APICv is disabled (bsc#1012628). - reset: tegra-bpmp: Revert Handle errors in BPMP response (bsc#1012628). - commit 9903b31 - Linux 5.15.10 (bsc#1012628). - perf inject: Fix itrace space allowed for new attributes (bsc#1012628). - fuse: make sure reclaim doesn't write the inode (bsc#1012628). - staging: most: dim2: use device release method (bsc#1012628). - tracing: Fix a kmemleak false positive in tracing_map (bsc#1012628). - drm/amdkfd: process_info lock not needed for svm (bsc#1012628). - drm/amd/display: add connector type check for CRC source set (bsc#1012628). - drm/amdkfd: fix double free mem structure (bsc#1012628). - drm/amd/display: Fix for the no Audio bug with Tiled Displays (bsc#1012628). - drm/amdgpu: check atomic flag to differeniate with legacy path (bsc#1012628). - drm/amdgpu: cancel the correct hrtimer on exit (bsc#1012628). - net: netlink: af_netlink: Prevent empty skb by adding a check on len (bsc#1012628). - i2c: rk3x: Handle a spurious start completion interrupt flag (bsc#1012628). - parisc/agp: Annotate parisc agp init functions with __init (bsc#1012628). - ALSA: hda/hdmi: fix HDA codec entry table order for ADL-P (bsc#1012628). - ALSA: hda: Add Intel DG2 PCI ID and HDMI codec vid (bsc#1012628). - loop: Use pr_warn_once() for loop_control_remove() warning (bsc#1012628). - net/mlx4_en: Update reported link modes for 1/10G (bsc#1012628). - Revert "tty: serial: fsl_lpuart: drop earlycon entry for i.MX8QXP" (bsc#1012628). - s390/test_unwind: use raw opcode instead of invalid instruction (bsc#1012628). - KVM: arm64: Save PSTATE early on exit (bsc#1012628). - drm/msm/dp: Avoid unpowered AUX xfers that caused crashes (bsc#1012628). - drm/msm/dsi: set default num_data_lanes (bsc#1012628). - drm/msm/a6xx: Fix uinitialized use of gpu_scid (bsc#1012628). - drm/msm: Fix null ptr access msm_ioctl_gem_submit() (bsc#1012628). - i2c: virtio: fix completion handling (bsc#1012628). - vmxnet3: fix minimum vectors alloc issue (bsc#1012628). - ice: fix FDIR init missing when reset VF (bsc#1012628). - RDMA/irdma: Don't arm the CQ more than two times if no CE for this CQ (bsc#1012628). - RDMA/irdma: Report correct WC errors (bsc#1012628). - RDMA/irdma: Fix a potential memory allocation issue in 'irdma_prm_add_pble_mem()' (bsc#1012628). - RDMA/irdma: Fix a user-after-free in add_pble_prm (bsc#1012628). - netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1012628). - perf bpf_skel: Do not use typedef to avoid error on old clang (bsc#1012628). - clk: qcom: sm6125-gcc: Swap ops of ice and apps on sdcc1 (bsc#1012628). - dt-bindings: media: nxp,imx7-mipi-csi2: Drop bad if/then schema (bsc#1012628). - inet: use #ifdef CONFIG_SOCK_RX_QUEUE_MAPPING consistently (bsc#1012628). - mtd: rawnand: Fix nand_choose_best_timings() on unsupported interface (bsc#1012628). - mtd: rawnand: Fix nand_erase_op delay (bsc#1012628). - RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow (bsc#1012628). - RDMA: Fix use-after-free in rxe_queue_cleanup (bsc#1012628). - hwmon: (corsair-psu) fix plain integer used as NULL pointer (bsc#1012628). - nfc: fix segfault in nfc_genl_dump_devices_done (bsc#1012628). - commit 85804f3 - Linux 5.15.9 (bsc#1012628). - netfilter: selftest: conntrack_vrf.sh: fix file permission (bsc#1012628). - commit edf812e ==== libcamera ==== - Add optional pkgconfig(libtiff-4) BuildRequires. ==== libgsf ==== Version update (1.14.47 -> 1.14.48) Subpackages: gsf-office-thumbnailer libgsf-1-114 libgsf-lang - Update to version 1.14.48: + Add "zip64" readable property of GsfInfileZip. ==== mozilla-nspr ==== Version update (4.32 -> 4.33) - update to 4.33: * fixes to build system and export of private symbols ==== mozilla-nss ==== Version update (3.73 -> 3.73.1) Subpackages: libfreebl3 libfreebl3-hmac libsoftokn3 libsoftokn3-hmac mozilla-nss-certs mozilla-nss-tools - update to NSS 3.73.1: * Add SHA-2 support to mozilla::pkix's OSCP implementation ==== plasma5-desktop ==== Subpackages: plasma5-desktop-emojier plasma5-desktop-lang - Add patch to fix empty window appearing on activity switching (kde#443968, boo#1193960): * 0001-SwitcherBackend-Only-create-the-workaround-window-on.patch ==== pulseaudio ==== Subpackages: libpulse-mainloop-glib0 libpulse0 pulseaudio-bash-completion pulseaudio-gdm-hooks pulseaudio-lang pulseaudio-module-bluetooth pulseaudio-module-gsettings pulseaudio-module-x11 pulseaudio-module-zeroconf pulseaudio-setup pulseaudio-utils pulseaudio-zsh-completion system-user-pulse - Fix a typo in padsp LD_PRELOAD setup (bsc#1194074) ==== python-ordered-set ==== - Do not disable python36 here. This package is so deep in the dependency tree, you have to do it globally. - Upstream supoorted only python >= 3.5, so disable python 2 and also python 3.6 (End of support). ==== python-psycopg2 ==== Version update (2.9.2 -> 2.9.3) - update to 2.9.3: * Alpine (musl) wheels now available ==== python-pytest ==== - Add patch pytest-pr9173-importlib-py310.patch * gh#pytest-dev/pytest#9173 * refresh pytest-pr9417-py3.10.1-fail.patch * fixes asdf related errors: gh#asdf-format/asdf#1027 ==== rubygem-rubocop-ast ==== Version update (1.15.0 -> 1.15.1) - updated to version 1.15.1 [#]## Bug fixes * [#10220](https://github.com/rubocop/rubocop/pull/10220): Make `AST::Node#receiver` aware of `csend` block method calls. ([@koic][]) ==== rubygem-zeitwerk ==== Version update (2.5.1 -> 2.5.2) - updated to version 2.5.2 * When `Module#autoload` triggers the autovivification of an implicit namespace, `$LOADED_FEATURES` now gets the correspoding directory pushed. This is just a tweak to Zeitwerk's `Kernel#require` decoration. That way it acts more like the original, and cooperates better with other potential `Kernel#require` wrappers, like Bootsnap's. ==== yast2-installation ==== Version update (4.4.30 -> 4.4.31) - Add support for selecting and configuring the desired Linux Security Module during installation (jsc#SLE-22069) - 4.4.31 ==== yast2-schema ==== Version update (4.4.6 -> 4.4.7) - Added 'lsm' section to the security schema (jsc#SLE-22069) - 4.4.7 ==== yast2-security ==== Version update (4.4.1 -> 4.4.3) - Added back the selinux boot parameter when selinux is selected and not disabled in order to switch on SELinux (jsc#SLE-22069) - 4.4.3 - Add support for selecting and configuring the desired Linux Security Module (jsc#SLE-22069) - 4.4.2

1 0

Build 20211201 Crash / Reboot
by Joe Salmeri 01 Jan '22

01 Jan '22

I just had my first crash and reboot on this system since I installed TW on it 9 months ago. System has been running fine and I was using it at the time it occurred with Chrome, VMWare Player, konsole, and my editor running. In the approximately 20 minutes before the crash / reboot I found lots of the following journal messages: kglobalaccel5[1750]: kf.windowsystem.keyserver.x11: Your keyboard setup doesn't provide a key to use for meta. See 'xmodmap -pm' or 'xkbcomp $DISPLAY' kglobalaccel5[1750]: kf.windowsystem.keyserver.x11: Your keyboard setup doesn't provide a key to use for meta. See 'xmodmap -pm' or 'xkbcomp $DISPLAY' kglobalaccel5[1750]: kf.windowsystem.keyserver.x11: Your keyboard setup doesn't provide a key to use for meta. See 'xmodmap -pm' or 'xkbcomp $DISPLAY' kglobalaccel5[1750]: kf.windowsystem.keyserver.x11: Your keyboard setup doesn't provide a key to use for meta. See 'xmodmap -pm' or 'xkbcomp $DISPLAY' kglobalaccel5[1750]: kf.windowsystem.keyserver.x11: Your keyboard setup doesn't provide a key to use for meta. See 'xmodmap -pm' or 'xkbcomp $DISPLAY' About 10 minutes before the crash / reboot, snapper-timeline.service ran to cleanup snapshots and completed without an issues. 4 minutes later the following journal messages occurred, the video went black, and system rebooted. I was typing at the time this occurred. plasmashell[1773]: file:///usr/lib64/qt5/qml/org/kde/plasma/components.3/ScrollView.qml:34:43: QML ScrollBar: Binding loop detected for property "visible" kglobalaccel5[11925]: kf.windowsystem.keyserver.x11: Your keyboard setup doesn't provide a key to use for meta. See 'xmodmap -pm' or 'xkbcomp $DISPLAY' kglobalaccel5[1750]: kf.windowsystem.keyserver.x11: Your keyboard setup doesn't provide a key to use for meta. See 'xmodmap -pm' or 'xkbcomp $DISPLAY' kglobalaccel5[11977]: kf.windowsystem.keyserver.x11: Your keyboard setup doesn't provide a key to use for meta. See 'xmodmap -pm' or 'xkbcomp $DISPLAY' kglobalaccel5[11925]: kf.windowsystem.keyserver.x11: Your keyboard setup doesn't provide a key to use for meta. See 'xmodmap -pm' or 'xkbcomp $DISPLAY' kglobalaccel5[11925]: kf.windowsystem.keyserver.x11: Your keyboard setup doesn't provide a key to use for meta. See 'xmodmap -pm' or 'xkbcomp $DISPLAY' kglobalaccel5[11925]: kf.windowsystem.keyserver.x11: Your keyboard setup doesn't provide a key to use for meta. See 'xmodmap -pm' or 'xkbcomp $DISPLAY' kglobalaccel5[11977]: kf.windowsystem.keyserver.x11: Your keyboard setup doesn't provide a key to use for meta. See 'xmodmap -pm' or 'xkbcomp $DISPLAY' kglobalaccel5[11925]: kf.windowsystem.keyserver.x11: Your keyboard setup doesn't provide a key to use for meta. See 'xmodmap -pm' or 'xkbcomp $DISPLAY' kglobalaccel5[11977]: kf.windowsystem.keyserver.x11: Your keyboard setup doesn't provide a key to use for meta. See 'xmodmap -pm' or 'xkbcomp $DISPLAY' kglobalaccel5[11925]: kf.windowsystem.keyserver.x11: Your keyboard setup doesn't provide a key to use for meta. See 'xmodmap -pm' or 'xkbcomp $DISPLAY' kglobalaccel5[11925]: kf.windowsystem.keyserver.x11: Your keyboard setup doesn't provide a key to use for meta. See 'xmodmap -pm' or 'xkbcomp $DISPLAY' kglobalaccel5[11977]: kf.windowsystem.keyserver.x11: Your keyboard setup doesn't provide a key to use for meta. See 'xmodmap -pm' or 'xkbcomp $DISPLAY' kernel: loop: module loaded kernel: lp: driver loaded but no devices found kernel: PPP generic driver version 2.4.2 kernel: tun: Universal TUN/TAP device driver, 1.6 kernel: watchdog: watchdog0: watchdog did not stop! kernel: watchdog: watchdog0: watchdog did not stop! kernel: VFIO - User Level meta-driver version: 0.3 kernel: watchdog: watchdog0: watchdog did not stop! kernel: watchdog: watchdog0: watchdog did not stop! System booted back up fine and I ran checks on all the drives and there were no issues. TW was updated to 20211201 on 12/03/2021. System is on 24/7 and has only been booted 2 times since then (for normal reasons, not because of problems). System is an i7 with 32 GB ram using Intel HD internal graphics. I believe this is what caused the crash: file:///usr/lib64/qt5/qml/org/kde/plasma/components.3/ScrollView.qml:34:43: QML ScrollBar: Binding loop detected for property "visible" but am wondering why all the meta key issues are being reported??? The meta key has been working fine. Anyone else seen this issue?

3 2