[opensuse-factory] New Tumbleweed snapshot 20200218 released!

20 Feb 2020

      Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.

Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20200218

Please do not reply to this email to report issues, rather file a bug
on bugzilla.opensuse.org. For more information on filing bugs please
see https://en.opensuse.org/openSUSE:Submitting_bug_reports

Packages changed:
  ModemManager (1.12.0 -> 1.12.6)
  apache2-mod_dnssd
  btrfsprogs (5.4 -> 5.4.1)
  busybox (1.30.1 -> 1.31.1)
  chrony
  dconf-editor (3.34.3 -> 3.34.4)
  dialog
  double-conversion
  epiphany (3.34.3.1 -> 3.34.4)
  evolution (3.34.3 -> 3.34.4)
  evolution-data-server (3.34.3 -> 3.34.4)
  evolution-ews (3.34.3 -> 3.34.4)
  flatpak (1.6.1 -> 1.6.2)
  glibc (2.30 -> 2.31)
  gnome-control-center (3.34.2 -> 3.34.4)
  gnome-shell-extensions
  grep (3.3 -> 3.4)
  hylafax+ (7.0.1 -> 7.0.2)
  iagno (3.34.4 -> 3.34.5)
  intel-vaapi-driver (2.3.0 -> 2.4.0)
  issue-generator (1.7 -> 1.8)
  jsoncpp
  kernel-firmware (20200122 -> 20200207)
  kernel-source (5.5.2 -> 5.5.4)
  libarchive (3.4.1 -> 3.4.2)
  libeconf (0.3.3+git20191028.3ac14ce -> 0.3.5+git20200203.3144b69)
  libreoffice
  libxcrypt (4.4.10 -> 4.4.12)
  llvm9
  mariadb-connector-c (3.1.6 -> 3.1.7)
  mdadm
  meld (3.20.1 -> 3.20.2)
  mutt (1.13.3 -> 1.13.4)
  nfs-utils
  openssh
  perl-Convert-UUlib (1.6 -> 1.62)
  ppp
  psqlODBC (11.01.0000 -> 12.01.0000)
  python
  python-base
  rtl_433 (19.08+git.20190829 -> 20.02+git.20200218)
  strace (5.4 -> 5.5)
  sudo (1.8.28p1 -> 1.8.31)
  tigervnc
  whois (5.5.4 -> 5.5.5)
  wireguard (0.0.20200205_k5.5.2_1 -> 0.0.20200214_k5.5.4_1)
  xdg-user-dirs
  xerces-c
  xfce4-whiskermenu-plugin (2.4.1 -> 2.4.2)
  xfconf
  yast2-nis-client (4.2.1 -> 4.2.2)
  yast2-python-bindings (4.1.1 -> 4.1.2)
  zsh (5.8~pre2 -> 5.8~pre3)

=== Details ===

==== ModemManager ====
Version update (1.12.0 -> 1.12.6)
Subpackages: ModemManager-bash-completion ModemManager-lang libmm-glib0

- Update to version 1.12.6:
  + SIM: Updated logic to avoid sending PIN/PUK to the SIM card
    when not required (e.g. if already unlocked).
  + Simple interface: Avoid aborting connection if SIM-PUK2 locked,
    as PIN2/PUK2 doesn't prevent us from getting connected.
  + Location interface: Fixed memory leak happening as soon as a
    position fix was obtained and gps-raw location source was
    enabled.
  + Core:
  - Fixed handling of 0x00 bytes at the end of GSM encoded
    strings.
  - Fixed cleaning up 'timed-out' signal on the serial port
    objects.
  - Fixed logic that closes MBIM ports during cleanup.
  + Several other minor fixes and memory leak plugs.
- Changes from version 1.12.4:
  + Core: Added missing ME error codes when building GError
    variables for the MM_MOBILE_EQUIPMENT_ERROR domain.
  + Bearer: Avoid connection checks or stats updates while
    disconnecting.
  + Serial port: Fix segfault when port flash operation gets
    cancelled.
  + Simple interface: Fix the ongoing connection cancellable
    handling.
  + Voice interface: Fix segfault when voice support check fails.
  + QMI: Fixed several memory leaks, including a severe one
    happening when multiple GPS sources (e.g. raw and nmea) were
    enabled at the same time.
  + Plugins: ublox: ignore errors when attempting to disconnect
    last bearer.
  + mmcli: Allow "yes" and "no" as boolean strings.
  + Several other minor fixes and memory leak plugs.
- Changes from version 1.12.2:
  + Simple interface: Avoid assertion on the ongoing connect
    cancellable.
  + Plugin manager:
  - Fix waiting the minimum probing time.
  - Explicitly cancel timeouts when device probing is cancelled.
  - Disable lazy plugin loading, we now require all missing
    symbols to be resolved at loading time for a plugin to
    correctly be loaded.
  + Bearer: Avoid reporting disconnection error if trying to
    disconnect a bearer that is already disconnected.
  + MBIM: Completely skip LTE attach config/status if unsupported.
  + QMI:
  - Make current settings mandatory when using 'static'
    addressing.
  - Handle disconnection indications during connection attempt.
  - Explicitly close QMI port during disconnection if it was
    opened during a connection attempt.
  + Plugins:
  - huawei: avoid using QCDM port during a voice call.
  - sierra: added port type hints for the EM7565.
  - dell,dw5821e: added support for the DW5821e with eSIM
    variant.
  + mmcli: Fix printing empty value lists in human-friendly output.
  + Several other minor fixes and memory leak plugs.

==== apache2-mod_dnssd ====

- removing %apache_test_* macros, do not test module just by
  loading the module

==== btrfsprogs ====
Version update (5.4 -> 5.4.1)
Subpackages: btrfsprogs-udev-rules libbtrfs0

- Update to 5.4.1
  * build: fix docbook5 build
  * check: do extra verification of extent items, inode items and chunks
  * qgroup: return ENOTCONN if quotas not running (needs updated kernel)
  * other: various test fixups

==== busybox ====
Version update (1.30.1 -> 1.31.1)

- Eanble FEATURE_TFTP_HPA_COMPAT and SH_MATH_BASE
- Update to version 1.31.1:
  + Bug fix release. 1.30.1 has fixes for dc, ash (PS1 expansion
    fix), hush, dpkg-deb, telnet and wget.
- Changes from version 1.31.0:
  + many bugfixes and new features.
- Add busybox-no-stime.patch: stime() has been deprecated in glibc
  2.31 and replaced with clock_settime().

==== chrony ====

- Add chrony-test-update-processing-of-packet-log.patch in order
  to fix test-suite failure.
- Update clknetsim to version 79ffe44 (fixes boo#1162964).
- Backport chrony-test-fix-util-unit-test-for-NTP-era-split.patch.

==== dconf-editor ====
Version update (3.34.3 -> 3.34.4)
Subpackages: dconf-editor-lang

- Update to version 3.34.4:
  + Updated translations.

==== dialog ====
Subpackages: dialog-lang libdialog15

- No longer recommend -lang: supplements are in use.

==== double-conversion ====

- Use proper cmake calls
- Do not pull in py2 that is EOL but use python3 for build

==== epiphany ====
Version update (3.34.3.1 -> 3.34.4)
Subpackages: epiphany-lang gnome-shell-search-provider-epiphany

- Update to version 3.34.4:
  + Changing web app icon in preferences dialog should copy icon.
  + Fix new tab page with few items in history.
  + Fix Favorites and Mobile bookmarks not tagged correctly when
    localized.
  + Fix password manager user account selector.
  + Hide view source context menu item when on view source page.
  + Fix memory corruption in view source mode.
  + Fix crash when parsing session state.
  + Fix improper warning when closing multiple tabs.
  + Fix occasional failure to start up.
  + Fix memory corruption when loading adblock filters.

==== evolution ====
Version update (3.34.3 -> 3.34.4)
Subpackages: evolution-lang evolution-plugin-bogofilter evolution-plugin-pst-import evolution-plugin-spamassassin evolution-plugin-text-highlight

- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.

==== evolution-data-server ====
Version update (3.34.3 -> 3.34.4)
Subpackages: evolution-data-server-lang libcamel-1_2-62 libebackend-1_2-10 libebook-1_2-20 libebook-contacts-1_2-3 libecal-2_0-1 libedata-book-1_2-26 libedata-cal-2_0-1 libedataserver-1_2-24 libedataserverui-1_2-2

- Update to version 3.34.4:
  + EDBusServer: Delay new module load.
  + alarm-notify: Double-free with certain types of the reminder.
  + Bugs fixed:
  - Calendar: Handle errors in file backend's refresh thread
    gracefully.
  - WebDAV: Privilege with multiple child elements not handled
    properly.
  - Broken search folder that includes all mails from other
    search folders.
  + Updated translations.

==== evolution-ews ====
Version update (3.34.3 -> 3.34.4)
Subpackages: evolution-ews-lang

- Update to version 3.34.4:
  + Bugs fixed:
  - Fails to create event with no duration.
  - Map 'tzone://Microsoft/Utc' to libical's 'UTC'.

==== flatpak ====
Version update (1.6.1 -> 1.6.2)
Subpackages: libflatpak0 system-user-flatpak typelib-1_0-Flatpak-1_0

- Update to version 1.6.2:
  + Due to a combination of some behaviour in flatpak and recent versions of
    ostree we at some point lost the use of deltas for the initial install
    case, instead always falling back to a full ostree operation which is
    a lot less efficient for pulls with many small files like a runtime. This
    caused some very slow installs from e.g. flathub, so it's recommended to
    update to this version to get better install performance.
  + We now correctly handle TMPDIR env var overrides when bwrap is setuid
  + Disallow running "flatpak run" under sudo (as it doesn't work and causes issues)
  + Fix build with older versions of glib
  + Minor documentation updates
  + Updated translations

==== glibc ====
Version update (2.30 -> 2.31)
Subpackages: glibc-32bit glibc-devel glibc-extra glibc-info glibc-locale glibc-locale-base nscd

- nsswitch.conf: comment out initgroups setting, so that it defaults to
  the group setting (bsc#1164075)
- fix-locking-in-_IO_cleanup.patch: update to latest version
- Update to glibc 2.31
  * The GNU C Library now supports a feature test macro _ISOC2X_SOURCE to
    enable features from the draft ISO C2X standard
  * The <math.h> functions that round their results to a narrower type now
    have corresponding type-generic macros in <tgmath.h>
  * The function pthread_clockjoin_np has been added, enabling join with a
    terminated thread with a specific clock
  * New locale added: mnw_MM (Mon language spoken in Myanmar).
  * The DNS stub resolver will optionally send the AD (authenticated data) bit
    in queries if the trust-ad option is set via the options directive in
    /etc/resolv.conf (or if RES_TRUSTAD is set in _res.options)
  * The totalorder and totalordermag functions, and the corresponding
    functions for other floating-point types, now take pointer arguments to
    avoid signaling NaNs possibly being converted to quiet NaNs in argument
    passing
  * The obsolete function stime is no longer available to newly linked
    binaries, and its declaration has been removed from <time.h>
  * The gettimeofday function no longer reports information about a
    system-wide time zone
  * If a lazy binding failure happens during dlopen, during the execution of
    an ELF constructor, the process is now terminated
- malloc-info-whitespace.patch, riscv-vfork.patch,
  prefer-map-32bit-exec.patch, backtrace-powerpc.patch,
  ldconfig-dynstr.patch: Removed.
- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (bsc#1158996, BZ #25423)
- Drop support for pluggable gconv modules (bsc#1159851)

==== gnome-control-center ====
Version update (3.34.2 -> 3.34.4)
Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-lang gnome-control-center-user-faces

- Update to version 3.34.4:
  + Thunderbolt: Fix memory leak.
  + Printers: Fix read of freed memory.
  + User Accounts:
  - Use absolute path of command usermod.
  - Fix carousel arrow location when animations are disabled.
  - Fix memory leak.
  - Fix uninitialized variable.
  + Region & Language: Fix LC_* variables not being correctly
    reset.
  + Sound: Add missing subwoofer icons.
  + Updated translations.
- Drop gnome-control-center-can-not-find-usermod.patch: Fixed
  upstream.

==== gnome-shell-extensions ====
Subpackages: gnome-shell-classic gnome-shell-classic-session

- Enable packaging of user-theme extension: Despite its name, this
  extension is also used to enable 'system themes' in GMOME Tweaks.
  And since we have multiple themes in the repository, we should
  also provide the needed extension to enable them.
- No longer obsolete gnome-shell-extension-user-theme.

==== grep ====
Version update (3.3 -> 3.4)
Subpackages: grep-lang

- Switch back to system regex to avoid undefined behaviour
- grep 3.4:
  * new --no-ignore-case option causes grep to observe case
    distinctions, overriding any previous -i (--ignore-case) option
  * '.' no longer matches some invalid byte sequences in UTF-8 locales
  * grep -Fw can no longer false match in non-UTF-8 multibyte locales
  * The exit status of 'grep -L' is no longer incorrect when standard
    output is /dev/null
  * fix some performance bugs
- drop test-pcre-jitstack.diff

==== hylafax+ ====
Version update (7.0.1 -> 7.0.2)
Subpackages: hylafax+-client

- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)

==== iagno ====
Version update (3.34.4 -> 3.34.5)
Subpackages: iagno-lang

- Update to version 3.34.5:
  + Metadata fixes.
  + Updated translations.

==== intel-vaapi-driver ====
Version update (2.3.0 -> 2.4.0)

- Update to version 2.4.0
  * Fix the dependency on libEGL (boo#1163093)
  * Fix ROI support
  * Fix FD leaks on Wayland
  * Fix BRC setting
  * Fix VP8 encoder
  * Fix VP9 encoder
  * Fix meson build
- supersedes patches:
  * U_vaapi_Check-interface-from-libva.patch
  * U_vaapi_Revert-VPP-clear-surface.patch
  * U_vaapi_Return-false-instead-assertion-fail.patch
  * U_vaapi_HEVC-encoder-correct-minimal-bitrate.patch
  * U_vaapi_Remove-dep-on-EncRoi-attr.patch
  * U_vaapi_Fix-off-by-one-in-ROI-regions.patch

==== issue-generator ====
Version update (1.7 -> 1.8)

- Update to version 1.8
  - Handle network interface renames

==== jsoncpp ====

- Fix build on non-x86 architectures - boo#1163385
  * jsoncpp-f11611c8785082ead760494cba06196f14a06dcb.patch
- From 1.9.1 to 1.9.2, features.h has been renamed json_features.h
  so, add a symlink for compatibility - boo#1163385

==== kernel-firmware ====
Version update (20200122 -> 20200207)
Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd

- Update to version 20200207 (git commit 6f89735800fe):
  * rtl_nic: update firmware for RTL8153A
  * rtl_bt: Update RTL8822C BT FW to V0x0998_C2B4
  * linux-firmware: add firmware for MT7622
  * linux-firmware: add version 2 for MT7615E
  * amdgpu: update to latest navi10 firmware from 19.50
  * Revert "radeon: update oland rlc microcode from amdgpu"
  * amlogic: update video decoder firmwares
  * amdgpu: add renoir firmware for 19.50
  * amdgpu: update raven2 firmware for 19.50
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.12.A.13
  * qca: update bluetooth firmware for QCA6174
- Update topics and alias list

==== kernel-source ====
Version update (5.5.2 -> 5.5.4)
Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms

- bcache: fix incorrect data type usage in btree_flush_write()
  (git-fixes).
- commit 119f9ca
- Linux 5.5.4 (bnc#1012628).
- selinux: fall back to ref-walk if audit is required
  (bnc#1012628).
- libertas: make lbs_ibss_join_existing() return error code on
  rates overflow (bnc#1012628).
- libertas: don't exit from lbs_ibss_join_existing() with RCU
  read lock held (bnc#1012628).
- mwifiex: Fix possible buffer overflows in
  mwifiex_cmd_append_vsie_tlv() (bnc#1012628).
- mwifiex: Fix possible buffer overflows in
  mwifiex_ret_wmm_get_status() (bnc#1012628).
- dmaengine: axi-dmac: add a check for devm_regmap_init_mmio
  (bnc#1012628).
- clk: meson: g12a: fix missing uart2 in regmap table
  (bnc#1012628).
- mfd: max77650: Select REGMAP_IRQ in Kconfig (bnc#1012628).
- regmap: fix writes to non incrementing registers (bnc#1012628).
- pinctrl: qcom: Don't lock around irq_set_irq_wake()
  (bnc#1012628).
- pinctrl: sh-pfc: r8a7778: Fix duplicate SDSELF_B and SD1_CLK_B
  (bnc#1012628).
- pinctrl: sh-pfc: r8a77965: Fix DU_DOTCLKIN3 drive/bias control
  (bnc#1012628).
- pinctrl: baytrail: Allocate IRQ chip dynamic (bnc#1012628).
- selinux: fix regression introduced by move_mount(2) syscall
  (bnc#1012628).
- selinux: revert "stop passing MAY_NOT_BLOCK to the AVC upon
  follow_link" (bnc#1012628).
- x86/alternatives: add missing insn.h include (bnc#1012628).
- bcache: avoid unnecessary btree nodes flushing in
  btree_flush_write() (bnc#1012628).
- ASoC: soc-generic-dmaengine-pcm: Fix error handling
  (bnc#1012628).
- dt-bindings: iio: adc: ad7606: Fix wrong maxItems value
  (bnc#1012628).
- i2c: cros-ec-tunnel: Fix ACPI identifier (bnc#1012628).
- i2c: cros-ec-tunnel: Fix slave device enumeration (bnc#1012628).
- media: i2c: adv748x: Fix unsafe macros (bnc#1012628).
- drivers: watchdog: stm32_iwdg: set WDOG_HW_RUNNING at probe
  (bnc#1012628).
- crypto: caam/qi2 - fix typo in algorithm's driver name
  (bnc#1012628).
- crypto: atmel-sha - fix error handling when setting hmac key
  (bnc#1012628).
- crypto: artpec6 - return correct error code for failed setkey()
  (bnc#1012628).
- crypto: testmgr - don't try to decrypt uninitialized buffers
  (bnc#1012628).
- mtd: sharpslpart: Fix unsigned comparison to zero (bnc#1012628).
- mtd: onenand_base: Adjust indentation in onenand_read_ops_nolock
  (bnc#1012628).
- arm64: kvm: Fix IDMAP overlap with HYP VA (bnc#1012628).
- arm64: nofpsmid: Handle TIF_FOREIGN_FPSTATE flag cleanly
  (bnc#1012628).
- KVM: arm64: Treat emulated TVAL TimerValue as a signed 32-bit
  integer (bnc#1012628).
- KVM: arm64: pmu: Fix chained SW_INCR counters (bnc#1012628).
- KVM: arm64: pmu: Don't increment SW_INCR if PMCR.E is unset
  (bnc#1012628).
- KVM: arm: Make inject_abt32() inject an external abort instead
  (bnc#1012628).
- KVM: arm: Fix DFSR setting for non-LPAE aarch32 guests
  (bnc#1012628).
- KVM: arm/arm64: Fix young bit from mmu notifier (bnc#1012628).
- crypto: arm/chacha - fix build failured when kernel mode NEON
  is disabled (bnc#1012628).
- arm64: ptrace: nofpsimd: Fail FP/SIMD regset operations
  (bnc#1012628).
- arm64: cpufeature: Set the FP/SIMD compat HWCAP bits properly
  (bnc#1012628).
- arm64: cpufeature: Fix the type of no FP/SIMD capability
  (bnc#1012628).
- arm64: kernel: Correct annotation of end of el0_sync
  (bnc#1012628).
- sched/uclamp: Fix a bug in propagating uclamp value in new
  cgroups (bnc#1012628).
- ARM: 8949/1: mm: mark free_memmap as __init (bnc#1012628).
- KVM: arm/arm64: vgic-its: Fix restoration of unmapped
  collections (bnc#1012628).
- ARM: at91: pm: use of_device_id array to find the proper shdwc
  node (bnc#1012628).
- ARM: at91: pm: use SAM9X60 PMC's compatible (bnc#1012628).
- iommu/arm-smmu-v3: Populate VMID field for CMDQ_OP_TLBI_NH_VA
  (bnc#1012628).
- powerpc/pseries: Allow not having ibm,
  hypertas-functions::hcall-multi-tce for DDW (bnc#1012628).
- powerpc/pseries/vio: Fix iommu_table use-after-free refcount
  warning (bnc#1012628).
- powerpc/papr_scm: Fix leaking 'bus_desc.provider_name' in some
  paths (bnc#1012628).
- powerpc/ptdump: Only enable PPC_CHECK_WX with STRICT_KERNEL_RWX
  (bnc#1012628).
- powerpc/ptdump: Fix W+X verification call in mark_rodata_ro()
  (bnc#1012628).
- Revert "powerpc/pseries/iommu: Don't use dma_iommu_ops on
  secure guests" (bnc#1012628).
- soc: qcom: rpmhpd: Set 'active_only' for active only power
  domains (bnc#1012628).
- tools/power/acpi: fix compilation error (bnc#1012628).
- ARM: dts: at91: sama5d3: define clock rate range for tcb1
  (bnc#1012628).
- ARM: dts: at91: sama5d3: fix maximum peripheral clock rates
  (bnc#1012628).
- ARM: dts: meson8b: use the actual frequency for the GPU's
  364MHz OPP (bnc#1012628).
- ARM: dts: meson8: use the actual frequency for the GPU's
  182.1MHz OPP (bnc#1012628).
- arm64: dts: marvell: clearfog-gt-8k: fix switch cpu port node
  (bnc#1012628).
- arm64: dts: renesas: r8a77990: ebisu: Remove
  clkout-lr-synchronous from sound (bnc#1012628).
- ARM: dts: am43xx: add support for clkout1 clock (bnc#1012628).
- ARM: dts: at91: Reenable UART TX pull-ups (bnc#1012628).
- arm64: dts: qcom: msm8998-mtp: Add alias for blsp1_uart3
  (bnc#1012628).
- arm64: dts: uDPU: fix broken ethernet (bnc#1012628).
- arm64: dts: qcom: msm8998: Fix tcsr syscon size (bnc#1012628).
- platform/x86: intel_mid_powerbtn: Take a copy of ddata
  (bnc#1012628).
- ARC: [plat-axs10x]: Add missing multicast filter number to
  GMAC node (bnc#1012628).
- MIPS: Loongson: Fix potential NULL dereference in
  loongson3_platform_init() (bnc#1012628).
- watchdog: qcom: Use platform_get_irq_optional() for bark irq
  (bnc#1012628).
- rtc: cmos: Stop using shared IRQ (bnc#1012628).
- rtc: hym8563: Return -EINVAL if the time is known to be invalid
  (bnc#1012628).
- rtc: mt6397: drop free_irq of devm_ allocated irq (bnc#1012628).
- netdevsim: use __GFP_NOWARN to avoid memalloc warning
  (bnc#1012628).
- netdevsim: fix panic in nsim_dev_take_snapshot_write()
  (bnc#1012628).
- netdevsim: disable devlink reload when resources are being used
  (bnc#1012628).
- netdevsim: fix using uninitialized resources (bnc#1012628).
- mt76: mt7615: fix max_nss in mt7615_eeprom_parse_hw_cap
  (bnc#1012628).
- bpf, sockmap: Check update requirements after locking
  (bnc#1012628).
- bpf: Improve bucket_log calculation logic (bnc#1012628).
- selftests/bpf: Test freeing sockmap/sockhash with a socket in it
  (bnc#1012628).
- bpf, sockhash: Synchronize_rcu before free'ing map
  (bnc#1012628).
- bpf, sockmap: Don't sleep while holding RCU lock on tear-down
  (bnc#1012628).
- bpftool: Don't crash on missing xlated program instructions
  (bnc#1012628).
- x86/boot: Handle malformed SRAT tables during early ACPI parsing
  (bnc#1012628).
- NFSv4.0: nfs4_do_fsinfo() should not do implicit lease renewals
  (bnc#1012628).
- NFSv4: try lease recovery on NFS4ERR_EXPIRED (bnc#1012628).
- NFSv4: pnfs_roc() must use cred_fscmp() to compare creds
  (bnc#1012628).
- NFS: Fix fix of show_nfs_errors (bnc#1012628).
- NFS/pnfs: Fix pnfs_generic_prepare_to_resend_writes()
  (bnc#1012628).
- NFS: Revalidate the file size on a fatal write error
  (bnc#1012628).
- nfs: NFS_SWAP should depend on SWAP (bnc#1012628).
- NFSv4.x recover from pre-mature loss of openstateid
  (bnc#1012628).
- netfilter: flowtable: Fix missing flush hardware on table free
  (bnc#1012628).
- netfilter: flowtable: Fix hardware flush order on
  nf_flow_table_cleanup (bnc#1012628).
- netfilter: flowtable: restrict flow dissector match on meta
  ingress device (bnc#1012628).
- netfilter: flowtable: fetch stats only if flow is still alive
  (bnc#1012628).
- iwlwifi: mvm: fix TDLS discovery with the new firmware API
  (bnc#1012628).
- iwlwifi: mvm: avoid use after free for pmsr request
  (bnc#1012628).
- PCI/AER: Initialize aer_fifo (bnc#1012628).
- PCI: Don't disable bridge BARs when assigning bus resources
  (bnc#1012628).
- PCI: tegra: Fix afi_pex2_ctrl reg offset for Tegra30
  (bnc#1012628).
- PCI/switchtec: Fix vep_vector_number ioread width (bnc#1012628).
- PCI/switchtec: Use dma_set_mask_and_coherent() (bnc#1012628).
- ath10k: pci: Only dump ATH10K_MEM_REGION_TYPE_IOREG when safe
  (bnc#1012628).
- PCI/IOV: Fix memory leak in pci_iov_add_virtfn() (bnc#1012628).
- scsi: ufs: Fix ufshcd_probe_hba() reture value in case
  ufshcd_scsi_add_wlus() fails (bnc#1012628).
- RDMA/umem: Fix ib_umem_find_best_pgsz() (bnc#1012628).
- RDMA/cma: Fix unbalanced cm_id reference count during address
  resolve (bnc#1012628).
- RDMA/core: Ensure that rdma_user_mmap_entry_remove() is a fence
  (bnc#1012628).
- RDMA/mlx5: Fix handling of IOVA != user_va in ODP paths
  (bnc#1012628).
- RDMA/uverbs: Verify MR access flags (bnc#1012628).
- RDMA/core: Fix locking in ib_uverbs_event_read (bnc#1012628).
- RDMA/i40iw: fix a potential NULL pointer dereference
  (bnc#1012628).
- RDMA/netlink: Do not always generate an ACK for some netlink
  operations (bnc#1012628).
- IB/mlx4: Fix leak in id_map_find_del (bnc#1012628).
- IB/mlx5: Return the administrative GUID if exists (bnc#1012628).
- IB/srp: Never use immediate data if it is disabled by a user
  (bnc#1012628).
- IB/mlx4: Fix memory leak in add_gid error flow (bnc#1012628).
- commit 271ee1b
- Update config files: enable CONFIG_FW_CFG_SYSFS for arm64 (bsc#1163521)
- commit d888576
- Update config files: CONFIG_NVME_HWMON=y
  When the config files were updated for kernel v5.5, the commit
  message claimed CONFIG_NVME_HWMON was to be enabled, however the
  configuration files themselves had the option disabled. We definitely
  want hardware monitoring enabled on NVME devices, so fix the
  configuration files to match the original intent.
- commit d654690
- Linux 5.5.3 (bnc#1012628).
- sparc32: fix struct ipc64_perm type definition (bnc#1012628).
- bnxt_en: Move devlink_register before registering netdev
  (bnc#1012628).
- gtp: use __GFP_NOWARN to avoid memalloc warning (bnc#1012628).
- l2tp: Allow duplicate session creation with UDP (bnc#1012628).
- net: hsr: fix possible NULL deref in hsr_handle_frame()
  (bnc#1012628).
- net_sched: fix an OOB access in cls_tcindex (bnc#1012628).
- net/core: Do not clear VF index for node/port GUIDs query
  (bnc#1012628).
- net: mvneta: fix XDP support if sw bm is used as fallback
  (bnc#1012628).
- bnxt_en: Fix TC queue mapping (bnc#1012628).
- net: stmmac: Delete txtimer in suspend() (bnc#1012628).
- tcp: clear tp->total_retrans in tcp_disconnect() (bnc#1012628).
- tcp: clear tp->delivered in tcp_disconnect() (bnc#1012628).
- tcp: clear tp->data_segs{in|out} in tcp_disconnect()
  (bnc#1012628).
- tcp: clear tp->segs_{in|out} in tcp_disconnect() (bnc#1012628).
- cls_rsvp: fix rsvp_policy (bnc#1012628).
- rxrpc: Fix use-after-free in rxrpc_put_local() (bnc#1012628).
- rxrpc: Fix insufficient receive notification generation
  (bnc#1012628).
- rxrpc: Fix missing active use pinning of rxrpc_local object
  (bnc#1012628).
- rxrpc: Fix NULL pointer deref due to call->conn being cleared
  on disconnect (bnc#1012628).
- bnxt_en: Refactor logic to re-enable SRIOV after firmware
  reset detected (bnc#1012628).
- net: phy: at803x: disable vddio regulator (bnc#1012628).
- bnxt_en: Fix RDMA driver failure with SRIOV after firmware reset
  (bnc#1012628).
- ionic: fix rxq comp packet type mask (bnc#1012628).
- MAINTAINERS: correct entries for ISDN/mISDN section
  (bnc#1012628).
- netdevsim: fix stack-out-of-bounds in nsim_dev_debugfs_init()
  (bnc#1012628).
- bnxt_en: Fix logic that disables Bus Master during firmware
  reset (bnc#1012628).
- media: uvcvideo: Avoid cyclic entity chains due to malformed
  USB descriptors (bnc#1012628).
- mfd: dln2: More sanity checking for endpoints (bnc#1012628).
- netfilter: ipset: fix suspicious RCU usage in find_set_and_id
  (bnc#1012628).
- ALSA: pcm: Fix memory leak at closing a stream without hw_free
  (bnc#1012628).
- ipc/msg.c: consolidate all xxxctl_down() functions
  (bnc#1012628).
- tracing/kprobes: Have uname use __get_str() in print_fmt
  (bnc#1012628).
- tracing: Fix sched switch start/stop refcount racy updates
  (bnc#1012628).
- rcu: Use *_ONCE() to protect lockless ->expmask accesses
  (bnc#1012628).
- rcu: Avoid data-race in rcu_gp_fqs_check_wake() (bnc#1012628).
- srcu: Apply *_ONCE() to ->srcu_last_gp_end (bnc#1012628).
- rcu: Use READ_ONCE() for ->expmask in rcu_read_unlock_special()
  (bnc#1012628).
- nvmet: Fix error print message at nvmet_install_queue function
  (bnc#1012628).
- nvmet: Fix controller use after free (bnc#1012628).
- Bluetooth: btusb: fix memory leak on fw (bnc#1012628).
- Bluetooth: btusb: Disable runtime suspend on Realtek devices
  (bnc#1012628).
- brcmfmac: Fix memory leak in brcmf_usbdev_qinit (bnc#1012628).
- usb: dwc3: gadget: Check END_TRANSFER completion (bnc#1012628).
- usb: dwc3: gadget: Delay starting transfer (bnc#1012628).
- usb: typec: tcpci: mask event interrupts when remove driver
  (bnc#1012628).
- objtool: Silence build output (bnc#1012628).
- usb: gadget: f_fs: set req->num_sgs as 0 for non-sg transfer
  (bnc#1012628).
- usb: gadget: legacy: set max_speed to super-speed (bnc#1012628).
- usb: gadget: f_ncm: Use atomic_t to track in-flight request
  (bnc#1012628).
- usb: gadget: f_ecm: Use atomic_t to track in-flight request
  (bnc#1012628).
- ALSA: usb-audio: Fix endianess in descriptor validation
  (bnc#1012628).
- ALSA: usb-audio: Annotate endianess in Scarlett gen2 quirk
  (bnc#1012628).
- ALSA: dummy: Fix PCM format loop in proc output (bnc#1012628).
- memcg: fix a crash in wb_workfn when a device disappears
  (bnc#1012628).
- mm/sparse.c: reset section's mem_map when fully deactivated
  (bnc#1012628).
- utimes: Clamp the timestamps in notify_change() (bnc#1012628).
- mm/migrate.c: also overwrite error when it is bigger than zero
  (bnc#1012628).
- mm/memory_hotplug: fix remove_memory() lockdep splat
  (bnc#1012628).
- mm: thp: don't need care deferred split queue in memcg charge
  move path (bnc#1012628).
- mm: move_pages: report the number of non-attempted pages
  (bnc#1012628).
- media/v4l2-core: set pages dirty upon releasing DMA buffers
  (bnc#1012628).
- media: v4l2-core: compat: ignore native command codes
  (bnc#1012628).
- media: v4l2-rect.h: fix v4l2_rect_map_inside() top/left
  adjustments (bnc#1012628).
- lib/test_kasan.c: fix memory leak in kmalloc_oob_krealloc_more()
  (bnc#1012628).
- irqdomain: Fix a memory leak in irq_domain_push_irq()
  (bnc#1012628).
- x86/cpu: Update cached HLE state on write to
  TSX_CTRL_CPUID_CLEAR (bnc#1012628).
- platform/x86: intel_scu_ipc: Fix interrupt support
  (bnc#1012628).
- ALSA: hda: Add Clevo W65_67SB the power_save blacklist
  (bnc#1012628).
- ALSA: hda: Add JasperLake PCI ID and codec vid (bnc#1012628).
- ALSA: hda - Fix DP-MST support for NVIDIA codecs (bnc#1012628).
- arm64: acpi: fix DAIF manipulation with pNMI (bnc#1012628).
- KVM: arm64: Correct PSTATE on exception entry (bnc#1012628).
- KVM: arm/arm64: Correct CPSR on exception entry (bnc#1012628).
- KVM: arm/arm64: Correct AArch32 SPSR on exception entry
  (bnc#1012628).
- KVM: arm64: Only sign-extend MMIO up to register width
  (bnc#1012628).
- MIPS: syscalls: fix indentation of the 'SYSNR' message
  (bnc#1012628).
- MIPS: fix indentation of the 'RELOCS' message (bnc#1012628).
- MIPS: boot: fix typo in 'vmlinux.lzma.its' target (bnc#1012628).
- MIPS: SGI-IP30: Check for valid pointer before using it
  (bnc#1012628).
- MIPS: asm: local: add barriers for Loongson (bnc#1012628).
- s390/mm: fix dynamic pagetable upgrade for hugetlbfs
  (bnc#1012628).
- powerpc/mmu_gather: enable RCU_TABLE_FREE even for !SMP case
  (bnc#1012628).
- powerpc/ptdump: Fix W+X verification (bnc#1012628).
- powerpc/xmon: don't access ASDR in VMs (bnc#1012628).
- powerpc/pseries: Advance pfn if section is not present in
  lmb_is_removable() (bnc#1012628).
- powerpc/32s: Fix bad_kuap_fault() (bnc#1012628).
- powerpc/32s: Fix CPU wake-up from sleep mode (bnc#1012628).
- PCI/ATS: Use PF PASID for VFs (bnc#1012628).
- PCI: tegra: Fix return value check of pm_runtime_get_sync()
  (bnc#1012628).
- PCI: keystone: Fix outbound region mapping (bnc#1012628).
- PCI: keystone: Fix link training retries initiation
  (bnc#1012628).
- PCI: keystone: Fix error handling when "num-viewport" DT
  property is not populated (bnc#1012628).
- mmc: spi: Toggle SPI polarity, do not hardcode it (bnc#1012628).
- ACPI: video: Do not export a non working backlight interface
  on MSI MS-7721 boards (bnc#1012628).
- ACPI / battery: Deal with design or full capacity being reported
  as -1 (bnc#1012628).
- ACPI / battery: Use design-cap for capacity calculations if
  full-cap is not available (bnc#1012628).
- ACPI / battery: Deal better with neither design nor full
  capacity not being reported (bnc#1012628).
- smb3: fix default permissions on new files when mounting with
  modefromsid (bnc#1012628).
- alarmtimer: Unregister wakeup source when module get fails
  (bnc#1012628).
- fscrypt: don't print name of busy file when removing key
  (bnc#1012628).
- ubifs: don't trigger assertion on invalid no-key filename
  (bnc#1012628).
- ubifs: Fix wrong memory allocation (bnc#1012628).
- ubifs: Fix FS_IOC_SETFLAGS unexpectedly clearing encrypt flag
  (bnc#1012628).
- ubifs: Fix deadlock in concurrent bulk-read and writepage
  (bnc#1012628).
- mmc: sdhci-of-at91: fix memleak on clk_get failure
  (bnc#1012628).
- ASoC: tegra: Revert 24 and 32 bit support (bnc#1012628).
- ASoC: topology: fix soc_tplg_fe_link_create() - link->dobj
  initialization order (bnc#1012628).
- hv_balloon: Balloon up according to request page number
  (bnc#1012628).
- mfd: axp20x: Mark AXP20X_VBUS_IPSOUT_MGMT as volatile
  (bnc#1012628).
- nvmem: imx: scu: fix write SIP (bnc#1012628).
- nvmem: core: fix memory abort in cleanup path (bnc#1012628).
- crypto: api - Check spawn->alg under lock in crypto_drop_spawn
  (bnc#1012628).
- crypto: ccree - fix backlog memory leak (bnc#1012628).
- crypto: ccree - fix AEAD decrypt auth fail (bnc#1012628).
- crypto: ccree - fix pm wrongful error reporting (bnc#1012628).
- crypto: ccree - fix FDE descriptor sequence (bnc#1012628).
- crypto: ccree - fix PM race condition (bnc#1012628).
- padata: Remove broken queue flushing (bnc#1012628).
- fs: allow deduplication of eof block into the end of the
  destination file (bnc#1012628).
- scripts/find-unused-docs: Fix massive false positives
  (bnc#1012628).
- erofs: fix out-of-bound read for shifted uncompressed block
  (bnc#1012628).
- scsi: megaraid_sas: Do not initiate OCR if controller is not
  in ready state (bnc#1012628).
- scsi: qla2xxx: Fix stuck login session using prli_pend_timer
  (bnc#1012628).
- scsi: qla2xxx: Fix mtcp dump collection failure (bnc#1012628).
- cpupower: Revert library ABI changes from commit
  ae2917093fb60bdc1ed3e (bnc#1012628).
- power: supply: axp20x_ac_power: Fix reporting online status
  (bnc#1012628).
- power: supply: ltc2941-battery-gauge: fix use-after-free
  (bnc#1012628).
- ovl: fix wrong WARN_ON() in ovl_cache_update_ino()
  (bnc#1012628).
- ovl: fix lseek overflow on 32bit (bnc#1012628).
- f2fs: fix miscounted block limit in f2fs_statfs_project()
  (bnc#1012628).
- f2fs: code cleanup for f2fs_statfs_project() (bnc#1012628).
- f2fs: fix dcache lookup of !casefolded directories
  (bnc#1012628).
- f2fs: fix race conditions in ->d_compare() and ->d_hash()
  (bnc#1012628).
- PM: core: Fix handling of devices deleted during system-wide
  resume (bnc#1012628).
- cpufreq: Avoid creating excessively large stack frames
  (bnc#1012628).
- of: Add OF_DMA_DEFAULT_COHERENT & select it on powerpc
  (bnc#1012628).
- ARM: dma-api: fix max_pfn off-by-one error in __dma_supported()
  (bnc#1012628).
- dm zoned: support zone sizes smaller than 128MiB (bnc#1012628).
- dm space map common: fix to ensure new block isn't already in
  use (bnc#1012628).
- dm writecache: fix incorrect flush sequence when doing SSD
  mode commit (bnc#1012628).
- dm crypt: fix GFP flags passed to skcipher_request_alloc()
  (bnc#1012628).
- dm crypt: fix benbi IV constructor crash if used in
  authenticated mode (bnc#1012628).
- dm thin metadata: use pool locking at end of
  dm_pool_metadata_close (bnc#1012628).
- dm thin: fix use-after-free in metadata_pre_commit_callback
  (bnc#1012628).
- dm: fix potential for q->make_request_fn NULL pointer
  (bnc#1012628).
- tracing: Annotate ftrace_graph_hash pointer with __rcu
  (bnc#1012628).
- tracing: Annotate ftrace_graph_notrace_hash pointer with __rcu
  (bnc#1012628).
- ftrace: Add comment to why rcu_dereference_sched() is open coded
  (bnc#1012628).
- ftrace: Protect ftrace_graph_hash with ftrace_sync
  (bnc#1012628).
- crypto: pcrypt - Avoid deadlock by using per-instance padata
  queues (bnc#1012628).
- btrfs: fix improper setting of scanned for range cyclic write
  cache pages (bnc#1012628).
- btrfs: Handle another split brain scenario with metadata uuid
  feature (bnc#1012628).
- riscv, bpf: Fix broken BPF tail calls (bnc#1012628).
- libbpf: Fix readelf output parsing for Fedora (bnc#1012628).
- libbpf: Fix printf compilation warnings on ppc64le arch
  (bnc#1012628).
- libbpf: Don't attach perf_buffer to offline/missing CPUs
  (bnc#1012628).
- selftests/bpf: Fix perf_buffer test on systems w/ offline CPUs
  (bnc#1012628).
- flow_dissector: Fix to use new variables for port ranges in
  bpf hook (bnc#1012628).
- bpf, devmap: Pass lockdep expression to RCU lists (bnc#1012628).
- libbpf: Add missing newline in opts validation macro
  (bnc#1012628).
- libbpf: Fix realloc usage in bpf_core_find_cands (bnc#1012628).
- tc-testing: fix eBPF tests failure on linux fresh clones
  (bnc#1012628).
- samples/bpf: Don't try to remove user's homedir on clean
  (bnc#1012628).
- samples/bpf: Xdp_redirect_cpu fix missing tracepoint attach
  (bnc#1012628).
- samples/bpf: Reintroduce missed build targets (bnc#1012628).
- selftests/bpf: Fix test_attach_probe (bnc#1012628).
- selftests/bpf: Skip perf hw events test if the setup disabled it
  (bnc#1012628).
- selftests: bpf: Use a temporary file in test_sockmap
  (bnc#1012628).
- selftests: bpf: Ignore FIN packets for reuseport tests
  (bnc#1012628).
- crypto: sun8i-ss - fix removal of module (bnc#1012628).
- crypto: amlogic - fix removal of module (bnc#1012628).
- crypto: sun8i-ce - fix removal of module (bnc#1012628).
- crypto: api - fix unexpectedly getting generic implementation
  (bnc#1012628).
- crypto: hisilicon - Fix issue with wrong number of sg elements
  after dma map (bnc#1012628).
- crypto: hisilicon - Use the offset fields in sqe to avoid need
  to split scatterlists (bnc#1012628).
- crypto: ccp - set max RSA modulus size for v3 platform devices
  as well (bnc#1012628).
- crypto: arm64/ghash-neon - bump priority to 150 (bnc#1012628).
- crypto: pcrypt - Do not clear MAY_SLEEP flag in original request
  (bnc#1012628).
- crypto: hisilicon - select CRYPTO_SKCIPHER, not CRYPTO_BLKCIPHER
  (bnc#1012628).
- crypto: atmel-aes - Fix counter overflow in CTR mode
  (bnc#1012628).
- crypto: api - Fix race condition in crypto_spawn_alg
  (bnc#1012628).
- crypto: picoxcell - adjust the position of tasklet_init and
  fix missed tasklet_kill (bnc#1012628).
- powerpc/futex: Fix incorrect user access blocking (bnc#1012628).
- scsi: qla2xxx: Fix unbound NVME response length (bnc#1012628).
- NFS: Fix memory leaks and corruption in readdir (bnc#1012628).
- NFS: Directory page cache pages need to be locked when read
  (bnc#1012628).
- nfsd: fix filecache lookup (bnc#1012628).
- jbd2_seq_info_next should increase position index (bnc#1012628).
- ext4: fix deadlock allocating crypto bounce page from mempool
  (bnc#1012628).
- ext4: fix race conditions in ->d_compare() and ->d_hash()
  (bnc#1012628).
- Btrfs: fix missing hole after hole punching and fsync when
  using NO_HOLES (bnc#1012628).
- Btrfs: make deduplication with range including the last block
  work (bnc#1012628).
- Btrfs: fix infinite loop during fsync after rename operations
  (bnc#1012628).
- btrfs: set trans->drity in btrfs_commit_transaction
  (bnc#1012628).
- btrfs: drop log root for dropped roots (bnc#1012628).
- btrfs: free block groups after free'ing fs trees (bnc#1012628).
- Btrfs: fix race between adding and putting tree mod seq elements
  and nodes (bnc#1012628).
- btrfs: flush write bio if we loop in extent_write_cache_pages
  (bnc#1012628).
- btrfs: Correctly handle empty trees in
  find_first_clear_extent_bit (bnc#1012628).
- Btrfs: send, fix emission of invalid clone operations within
  the same file (bnc#1012628).
- ARM: tegra: Enable PLLP bypass during Tegra124 LP1
  (bnc#1012628).
- iwlwifi: don't throw error when trying to remove IGTK
  (bnc#1012628).
- mwifiex: fix unbalanced locking in mwifiex_process_country_ie()
  (bnc#1012628).
- sunrpc: expiry_time should be seconds not timeval (bnc#1012628).
- gfs2: fix gfs2_find_jhead that returns uninitialized jhead
  with seq 0 (bnc#1012628).
- gfs2: move setting current->backing_dev_info (bnc#1012628).
- gfs2: fix O_SYNC write handling (bnc#1012628).
- drm: atmel-hlcdc: use double rate for pixel clock only if
  supported (bnc#1012628).
- drm: atmel-hlcdc: enable clock before configuring timing engine
  (bnc#1012628).
- drm: atmel-hlcdc: prefer a lower pixel-clock than requested
  (bnc#1012628).
- drm/rect: Avoid division by zero (bnc#1012628).
- media: iguanair: fix endpoint sanity check (bnc#1012628).
- media: rc: ensure lirc is initialized before registering input
  device (bnc#1012628).
- tools/kvm_stat: Fix kvm_exit filter name (bnc#1012628).
- xen/balloon: Support xend-based toolstack take two
  (bnc#1012628).
- xen/gntdev: Do not use mm notifiers with autotranslating guests
  (bnc#1012628).
- watchdog: fix UAF in reboot notifier handling in watchdog core
  code (bnc#1012628).
- bcache: add readahead cache policy options via sysfs interface
  (bnc#1012628).
- io_uring: don't map read/write iovec potentially twice
  (bnc#1012628).
- io_uring: spin for sq thread to idle on shutdown (bnc#1012628).
- eventfd: track eventfd_signal() recursion depth (bnc#1012628).
- aio: prevent potential eventfd recursion on poll (bnc#1012628).
- KVM: x86: Refactor picdev_write() to prevent Spectre-v1/L1TF
  attacks (bnc#1012628).
- KVM: x86: Refactor prefix decoding to prevent Spectre-v1/L1TF
  attacks (bnc#1012628).
- KVM: x86: Protect pmu_intel.c from Spectre-v1/L1TF attacks
  (bnc#1012628).
- KVM: x86: Protect DR-based index computations from
  Spectre-v1/L1TF attacks (bnc#1012628).
- KVM: x86: Protect kvm_lapic_reg_write() from Spectre-v1/L1TF
  attacks (bnc#1012628).
- KVM: x86: Protect kvm_hv_msr_[get|set]_crash_data() from
  Spectre-v1/L1TF attacks (bnc#1012628).
- KVM: x86: Protect ioapic_write_indirect() from Spectre-v1/L1TF
  attacks (bnc#1012628).
- KVM: x86: Protect MSR-based index computations in pmu.h from
  Spectre-v1/L1TF attacks (bnc#1012628).
- KVM: x86: Protect ioapic_read_indirect() from Spectre-v1/L1TF
  attacks (bnc#1012628).
- KVM: x86: Protect MSR-based index computations from
  Spectre-v1/L1TF attacks in x86.c (bnc#1012628).
- KVM: x86: Protect x86_decode_insn from Spectre-v1/L1TF attacks
  (bnc#1012628).
- KVM: x86: Protect MSR-based index computations in
  fixed_msr_to_seg_unit() from Spectre-v1/L1TF attacks
  (bnc#1012628).
- KVM: x86: Fix potential put_fpu() w/o load_fpu() on MPX platform
  (bnc#1012628).
- KVM: PPC: Book3S HV: Uninit vCPU if vcore creation fails
  (bnc#1012628).
- KVM: PPC: Book3S PR: Free shared page if mmu initialization
  fails (bnc#1012628).
- kvm/svm: PKU not currently supported (bnc#1012628).
- KVM: x86/mmu: Apply max PA check for MMIO sptes to 32-bit KVM
  (bnc#1012628).
- KVM: x86: use CPUID to locate host page table reserved bits
  (bnc#1012628).
- KVM: x86: Use gpa_t for cr2/gpa to fix TDP support on 32-bit
  KVM (bnc#1012628).
- KVM: VMX: Add non-canonical check on writes to RTIT address MSRs
  (bnc#1012628).
- KVM: x86: Don't let userspace set host-reserved cr4 bits
  (bnc#1012628).
- KVM: x86: Free wbinvd_dirty_mask if vCPU creation fails
  (bnc#1012628).
- KVM: x86: fix overlap between SPTE_MMIO_MASK and generation
  (bnc#1012628).
- KVM: x86: Handle TIF_NEED_FPU_LOAD in kvm_{load,put}_guest_fpu()
  (bnc#1012628).
- KVM: x86: Ensure guest's FPU state is loaded when accessing
  for emulation (bnc#1012628).
- KVM: x86: Revert "KVM: X86: Fix fpu state crash in kvm guest"
  (bnc#1012628).
- KVM: s390: do not clobber registers during guest reset/store
  status (bnc#1012628).
- KVM: x86: reorganize pvclock_gtod_data members (bnc#1012628).
- KVM: x86: use raw clock values consistently (bnc#1012628).
- ocfs2: fix oops when writing cloned file (bnc#1012628).
- mm/page_alloc.c: fix uninitialized memmaps on a partially
  populated last section (bnc#1012628).
- arm64: dts: qcom: qcs404-evb: Set vdd_apc regulator in high
  power mode (bnc#1012628).
- mm/mmu_gather: invalidate TLB correctly on batch allocation
  failure and flush (bnc#1012628).
- clk: tegra: Mark fuse clock as critical (bnc#1012628).
- drm/amdgpu/navi: fix index for OD MCLK (bnc#1012628).
- drm/tegra: Relax IOMMU usage criteria on old Tegra
  (bnc#1012628).
- drm/tegra: Reuse IOVA mapping where possible (bnc#1012628).
- drm/amd/powerplay: fix navi10 system intermittent reboot issue
  V2 (bnc#1012628).
- drm/amd/dm/mst: Ignore payload update failures (bnc#1012628).
- drm/amdgpu: fetch default VDDC curve voltages (v2)
  (bnc#1012628).
- drm/amdgpu/navi10: add OD_RANGE for navi overclocking
  (bnc#1012628).
- drm/amdgpu/smu_v11_0: Correct behavior of restoring default
  tables (v2) (bnc#1012628).
- virtio-balloon: initialize all vq callbacks (bnc#1012628).
- virtio-pci: check name when counting MSI-X vectors
  (bnc#1012628).
- fix up iter on short count in fuse_direct_io() (bnc#1012628).
- broken ping to ipv6 linklocal addresses on debian buster
  (bnc#1012628).
- percpu: Separate decrypted varaibles anytime encryption can
  be enabled (bnc#1012628).
- ASoC: meson: axg-fifo: fix fifo threshold setup (bnc#1012628).
- scsi: qla2xxx: Fix the endianness of the qla82xx_get_fw_size()
  return type (bnc#1012628).
- scsi: csiostor: Adjust indentation in csio_device_reset
  (bnc#1012628).
- scsi: qla4xxx: Adjust indentation in qla4xxx_mem_free
  (bnc#1012628).
- scsi: ufs: Recheck bkops level if bkops is disabled
  (bnc#1012628).
- compat: scsi: sg: fix v3 compat read/write interface
  (bnc#1012628).
- mtd: spi-nor: Split mt25qu512a (n25q512a) entry into two
  (bnc#1012628).
- phy: qualcomm: Adjust indentation in read_poll_timeout
  (bnc#1012628).
- ext2: Adjust indentation in ext2_fill_super (bnc#1012628).
- powerpc/44x: Adjust indentation in ibm4xx_denali_fixup_memsize
  (bnc#1012628).
- drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable
  (bnc#1012628).
- NFC: pn544: Adjust indentation in pn544_hci_check_presence
  (bnc#1012628).
- ppp: Adjust indentation into ppp_async_input (bnc#1012628).
- net: smc911x: Adjust indentation in smc911x_phy_configure
  (bnc#1012628).
- net: tulip: Adjust indentation in {dmfe, uli526x}_init_module
  (bnc#1012628).
- IB/mlx5: Fix outstanding_pi index for GSI qps (bnc#1012628).
- IB/core: Fix ODP get user pages flow (bnc#1012628).
- IB/core: Fix ODP with IB_ACCESS_HUGETLB handling (bnc#1012628).
- staging: wfx: revert unexpected change in debugfs output
  (bnc#1012628).
- nfsd: fix delay timer on 32-bit architectures (bnc#1012628).
- nfsd: fix jiffies/time_t mixup in LRU list (bnc#1012628).
- nfsd: Return the correct number of bytes written to the file
  (bnc#1012628).
- virtio-balloon: Fix memory leak when unloading while hinting
  is in progress (bnc#1012628).
- virtio_balloon: Fix memory leaks on errors in
  virtballoon_probe() (bnc#1012628).
- ubi: fastmap: Fix inverted logic in seen selfcheck
  (bnc#1012628).
- ubi: Fix an error pointer dereference in error handling code
  (bnc#1012628).
- ubifs: Fix memory leak from c->sup_node (bnc#1012628).
- regulator: core: Add regulator_is_equal() helper (bnc#1012628).
- ASoC: sgtl5000: Fix VDDA and VDDIO comparison (bnc#1012628).
- ASoC: Intel: skl_hda_dsp_common: Fix global-out-of-bounds bug
  (bnc#1012628).
- mfd: da9062: Fix watchdog compatible string (bnc#1012628).
- mfd: rn5t618: Mark ADC control register volatile (bnc#1012628).
- mfd: bd70528: Fix hour register mask (bnc#1012628).
- mfd: ab8500: Fix ab8500-clk typo (bnc#1012628).
- bpf: Fix trampoline usage in preempt (bnc#1012628).
- libbpf: Extract and generalize CPU mask parsing logic
  (bnc#1012628).
- x86/timer: Don't skip PIT setup when APIC is disabled or in
  legacy mode (bnc#1012628).
- bonding/alb: properly access headers in bond_alb_xmit()
  (bnc#1012628).
- devlink: report 0 after hitting end in region read
  (bnc#1012628).
- dpaa_eth: support all modes with rate adapting PHYs
  (bnc#1012628).
- net: dsa: b53: Always use dev->vlan_enabled in
  b53_configure_vlan() (bnc#1012628).
- net: dsa: bcm_sf2: Only 7278 supports 2Gb/sec IMP port
  (bnc#1012628).
- net: dsa: microchip: enable module autoprobe (bnc#1012628).
- net: mvneta: move rx_dropped and rx_errors in per-cpu stats
  (bnc#1012628).
- net_sched: fix a resource leak in tcindex_set_parms()
  (bnc#1012628).
- net: stmmac: fix a possible endless loop (bnc#1012628).
- net: systemport: Avoid RBUF stuck in Wake-on-LAN mode
  (bnc#1012628).
- net/mlx5: IPsec, Fix esp modify function attribute
  (bnc#1012628).
- net/mlx5: IPsec, fix memory leak at
  mlx5_fpga_ipsec_delete_sa_ctx (bnc#1012628).
- net: macb: Remove unnecessary alignment check for TSO
  (bnc#1012628).
- net: macb: Limit maximum GEM TX length in TSO (bnc#1012628).
- net: stmmac: fix incorrect GMAC_VLAN_TAG register writting in
  GMAC4+ (bnc#1012628).
- net: stmmac: xgmac: fix incorrect XGMAC_VLAN_TAG register
  writting (bnc#1012628).
- net: stmmac: fix missing IFF_MULTICAST check in
  dwmac4_set_filter (bnc#1012628).
- net: stmmac: xgmac: fix missing IFF_MULTICAST checki in
  dwxgmac2_set_filter (bnc#1012628).
- net: stmmac: update pci platform data to use phy_interface
  (bnc#1012628).
- taprio: Fix enabling offload with wrong number of traffic
  classes (bnc#1012628).
- taprio: Fix still allowing changing the flags during runtime
  (bnc#1012628).
- taprio: Add missing policy validation for flags (bnc#1012628).
- taprio: Use taprio_reset_tc() to reset Traffic Classes
  configuration (bnc#1012628).
- taprio: Fix dropping packets when using taprio + ETF offloading
  (bnc#1012628).
- ipv6/addrconf: fix potential NULL deref in inet6_set_link_af()
  (bnc#1012628).
- qed: Fix timestamping issue for L2 unicast ptp packets
  (bnc#1012628).
- drop_monitor: Do not cancel uninitialized work item
  (bnc#1012628).
- net/mlx5: Fix deadlock in fs_core (bnc#1012628).
- net/mlx5: Deprecate usage of generic TLS HW capability bit
  (bnc#1012628).
- r8169: fix performance regression related to PCIe max read
  request size (bnc#1012628).
- net/mlx5e: TX, Error completion is for last WQE in batch
  (bnc#1012628).
- cifs: fail i/o on soft mounts if sessionsetup errors out
  (bnc#1012628).
- cifs: fix mode bits from dir listing when mounted with
  modefromsid (bnc#1012628).
- x86/apic/msi: Plug non-maskable MSI affinity race (bnc#1012628).
- clocksource: Prevent double add_timer_on() for watchdog_timer
  (bnc#1012628).
- perf/core: Fix mlock accounting in perf_mmap() (bnc#1012628).
- perf/cgroups: Install cgroup events to correct cpuctx
  (bnc#1012628).
- drm/dp_mst: Remove VCPI while disabling topology mgr
  (bnc#1012628).
- io_uring: enable option to only trigger eventfd for async
  completions (bnc#1012628).
- io_uring: prevent potential eventfd recursion on poll
  (bnc#1012628).
- KVM: x86: Protect exit_reason from being used in Spectre-v1/L1TF
  attacks (bnc#1012628).
- KVM: nVMX: vmread should not set rflags to specify success in
  case of #PF (bnc#1012628).
- KVM: Use vcpu-specific gva->hva translation when querying host
  page size (bnc#1012628).
- KVM: Play nice with read-only memslots when querying host page
  size (bnc#1012628).
- rxrpc: Fix service call disconnection (bnc#1012628).
- IB/core: Fix build failure without hugepages (bnc#1012628).
- crypto: atmel-{aes,tdes} - Do not save IV for ECB mode
  (bnc#1012628).
- crypto: atmel-aes - Fix saving of IV for CTR mode (bnc#1012628).
- crypto: atmel-aes - Fix CTR counter overflow when multiple
  fragments (bnc#1012628).
- crypto: atmel-tdes - Map driver data flags to Mode Register
  (bnc#1012628).
- regulator fix for "regulator: core: Add regulator_is_equal()
  helper" (bnc#1012628).
- powerpc/kuap: Fix set direction in allow/prevent_user_access()
  (bnc#1012628).
- compat: ARM64: always include asm-generic/compat.h
  (bnc#1012628).
- Update config files.
- commit ffbbfe8
- cgroup: init_tasks shouldn't be linked to the root cgroup
  (bsc#1163370).
- commit 00b4c73
- ipmi_si: Avoid spurious errors for optional IRQs (bsc#1161943).
- commit 481e5b9
- media: go7007: Fix URB type for interrupt handling
  (bsc#1162583).
- commit ae333f8
- iwlwifi: mvm: Do not require PHY_SKU NVM section for 3168
  devices (bsc#1163213).
- commit f4b8e5e

==== libarchive ====
Version update (3.4.1 -> 3.4.2)
Subpackages: bsdtar libarchive13

- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)

==== libeconf ====
Version update (0.3.3+git20191028.3ac14ce -> 0.3.5+git20200203.3144b69)
Subpackages: libeconf0 libeconf0-32bit

- Update to version 0.3.5+git20200203.3144b69:
  * Release version 0.3.5
  * Use float.h instead of obsolete gnuism values.h
  * Remove gnuism (strdupa)
  * Check for empty value (NULL pointer) before calling strdup.
- Update to version 0.3.4+git20200121.febebf2:
  * Release version 0.3.4
  * Fix buffer overflow in econf_readDirs
  * Fix parsing of quoted strings, and values starting with delimiters
  * tests: add test for quoted strings
  * tests: tst-configdirs5: fix config dir paths

==== libreoffice ====
Subpackages: libreoffice-base libreoffice-base-drivers-firebird libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-cs libreoffice-l10n-da libreoffice-l10n-de libreoffice-l10n-el libreoffice-l10n-en libreoffice-l10n-en_GB libreoffice-l10n-es libreoffice-l10n-fr libreoffice-l10n-hu libreoffice-l10n-it libreoffice-l10n-ja libreoffice-l10n-pl libreoffice-l10n-pt_BR libreoffice-l10n-ru libreoffice-l10n-zh_CN libreoffice-l10n-zh_TW libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit

- Fix autocorrect names for Italian
  In Italian there are also other locales that should be included
  in this list like fur_IT lld_IT sc_IT and vec_IT
- Remove unneeded (and counterintuitive) mysql/mariadb dep from core
  RPMs. Move it instead to the -base package, where it's really used.
- Add soffice.sh_Avoid-exporting-empty-LC_ALL.patch to fix broken
  handling of non-ASCII characters in the KDE filedialog
  (boo#1161816)

==== libxcrypt ====
Version update (4.4.10 -> 4.4.12)
Subpackages: libcrypt1 libcrypt1-32bit libxcrypt-devel

- Update to version 4.4.12
  * Another fix for GCC v10.x, which occurs on s390 architectures only.
- Update to version 4.4.11
  * Fixes for GCC v10.x
  * Change how the known-answer tests are parallelized
- gcc10.patch: remove

==== llvm9 ====
Subpackages: clang9 clang9-checker clang9-doc libLLVM9 libLTO9 libc++-devel libc++1 libc++abi-devel libc++abi1 libclang9

- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.
- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.
- Add clang5-devel to clang9-doc conflicts.
- Add compiler-rt-sanitizer-ipc-perm.patch: Fix sanitizer-common
  build with glibc 2.31.

==== mariadb-connector-c ====
Version update (3.1.6 -> 3.1.7)

- Update to release 3.1.7
  * TLS/SSL: when the client doesn't procide a CA file and the
    option ssl_verify_server_cert was set, the peer cerificate
    will be validated against the system CA.

==== mdadm ====

- Create: add support for RAID0 layouts. (bsc#1162479)
  0015-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0016-Assemble-add-support-for-RAID0-layouts.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  1002-mdadm.8-add-note-information-for-raid0-growing-opera.patch

==== meld ====
Version update (3.20.1 -> 3.20.2)
Subpackages: meld-lang

- Update to version 3.20.2:
  + Fix display of large file sizes.
  + Set file chooser encoding to autodetect by default.
  + Fix ignoring blank lines on text-filtered files in folder
    comparison.
  + Fix expand/collapse actions for missing folders.
  + Fix some incorrect action sensitivity settings.
  + Fix height of commit dialog.
  + Fix install support for Python 3.8.
  + Updated translations.

==== mutt ====
Version update (1.13.3 -> 1.13.4)
Subpackages: mutt-doc mutt-lang

- Update to version 1.13.4 (2020-02-15)
  * $ssl_force_tls reverted to default unset. Defaulting this set
    was overly optimistic, and caused breakage.

==== nfs-utils ====
Subpackages: libnfsidmap1 nfs-client nfs-doc nfs-kernel-server

-  Update to version 2.4.3
  Dropped patches (accepted upstream):
  - 0001-nfs.conf-allow-empty-assignments.patch
  - 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  - 0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  - 0004-nfsidmap-honour-with-pluginpath-for-instalation.patch
  - 0005-nfs.conf-fail-to-disable-major-NFS-version-4-using-v.patch
  - 0006-conffile-allow-optional-include-files.patch
  - 0007-statd-user-from-sm
  - 0008-mountd-Initialize-logging-early.patch
  Dropped patches (upstream used different solution):
  - 0009-Allow-compilation-to-succeed-with-fno-common.patch (btw this used
  Patch0: instead of Patch10:) (boo#1160405)
  Add nfsdcld - NFSv4 Client Tracking Daemon, add nfsdcld.service and enable it
  for nfs-kernel-server, add man page
  Add clddb-tool - tool for downgrading the nfsdcld sqlite database schema,
  add man page
  Removed osd_login (dropped in upstream in 2.3.4 rc1)
- 0009-Allow-compilation-to-succeed-with-fno-common.patch
  Allow compilation to success with -fno-common
  (boo#1160405)

==== openssh ====
Subpackages: openssh-helpers

- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch

==== perl-Convert-UUlib ====
Version update (1.6 -> 1.62)

- updated to 1.62
  see /usr/share/doc/packages/perl-Convert-UUlib/Changes
  1.62 Mon Feb 17 23:19:42 CET 2020
  - major performance improvement by simplifying code in _FP_gets
    to not use fscanf. This might slow things down on platforms
    with very slow fgetc.
  1.61 Sun Feb  9 18:38:29 CET 2020
  - lint uulib: fix some format string type mismatches
    and some other minor issues.

==== ppp ====

- CVE-2020-8597, bsc#1162610, ppp-CVE-2020-8597.patch: rhostname
  buffer overflow in the  eap_request and eap_response functions.

==== psqlODBC ====
Version update (11.01.0000 -> 12.01.0000)

- Update to 12.01.0000:
  * Fix result-conversions regression test.
    + Remove tests for abstime type because the type was removed
    in PG12.
    + Update results for PG12's new floating point output format.
  * Fix the bug that causes Error : A parameter cannot be found
    that matches parameter name?ene'.
    + Check BuildResult(the result of drivers build) before
    building installers.
    + Enclose the command part * Find_VSDir $vc_ver * with
    parentheses so that the subsequent * -ne "" * isn't
    considered to be a parameter.
  * Cope with the removal of pg_class.relhasoids in PG12 correctly
    when retrieving updatable cursors.
- Changes in 12.00.0000:
  * Fix the bug that SQLGetDescField() for Field SQL_DESC_COUNT
    returns SQLINTEGER value which should be of type SQLSMALLINT.
  * SQLGetTypeInfo() filters SQL_TYPE_DATE, SQL_TYPE_TIME and
    SQL_TYPE_TIMESTAMP for ODBC 2.x applications.
  * Added support for scalar functions TIMESTAMPADD(),
    TIMESTAMPDIFF() and EXTRACT() functions.
  * The macro IS_NOT_SPACE() is used for not pointers but integers.
  * Fix a crash bug when SQLProcedureColumns() handles
    satisfies_hash_partition(). The proargmodes column of
    satisfies_hash_partition()'s pg_proc entry is not null but the
    proallargtypes column is null.

==== python ====
Subpackages: python-tk

- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).
- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)

==== python-base ====
Subpackages: libpython2_7-1_0 python-xml

- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)
- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).
- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)

==== rtl_433 ====
Version update (19.08+git.20190829 -> 20.02+git.20200218)

- Update to version 20.02+git.20200218:
  Highlights
  * Added InfluxDB output
  * Added native Sigrok writer
  * Changed to newmodel keys default
  * Fixed SoapySDR for 0.8 API
  * Added new minmax FSK pulse detector
  * Changed default to use new minmax detector and sample rate
    of 1MS/s for frequency above 800MHz
  * Changed -a and -G option to discourage usage
  * Improvements and support for many more sensors
- Build with support for SoapySDR

==== strace ====
Version update (5.4 -> 5.5)

- Update to strace 5.5
  * Improvements
  * Added -e trace=%creds option for tracing syscalls related to process
    credentials.
  * Enhanced decoding of arch_prctl, keyctl, io_uring_register,
    io_uring_setup, and perf_event_open syscalls.
  * Enhanced decoding of BPF_PROG_LOAD bpf syscall command.
  * Updated decoding of clone3 syscall to match Linux 5.5.
  * Implemented decoding of TCA_ACT_FLAGS and TCA_STATS_PKT64 netlink
    attributes.
  * Updated lists of AUDIT_*, BPF_*, CLONE_*, KEY_*, KVM_*, PPC_PTRACE_*,
    SCTP_*, STATX_*, TIPC_*, V4L2_*, and *_MAGIC constants.
  * Updated lists of ioctl commands from Linux 5.5.
  * Enhanced manual page and "strace --help" output.
  * Bug fixes
  * Fixed stack trace printing for early syscalls when strace is configured
    to use libdw backend for stack tracing (addresses Fedora bug #1788636).
  * Fixed stack trace caching when --seccomp-bpf option is specified.
  * Fixed potentially unaligned access in decoder of SO_TIMESTAMP*_NEW
    control messages.
  * Fixed decoding of NDA_LLADDR netlink neighbor table attribute.
  * Fixed build of mpers support when CFLAGS contains -flto.
  * Fixed build on no-MMU architectures.
  * Fixed build with glibc-2.31 and Linux kernel headers < 5.3.
  * Fixed tests for glibc-2.31.

==== sudo ====
Version update (1.8.28p1 -> 1.8.31)

- Update to 1.8.31
  Major changes between version 1.8.31 and 1.8.30:
  * This version fixes a potential security issue that can lead to
    a buffer overflow if the pwfeedback option is enabled in
    sudoers [CVE-2019-18634] [bsc#1162202]
  * The sudoedit_checkdir option now treats a user-owned directory
    as writable, even if it does not have the write bit set at the
    time of check. Symbolic links will no longer be followed by
    sudoedit in any user-owned directory. Bug #912.
  * Fixed a crash introduced in sudo 1.8.30 when suspending sudo
    at the password prompt. Bug #914.
  * Fixed compilation on systems where the mmap MAP_ANON flag is
    not available. Bug #915.
  Major changes between version 1.8.30 and 1.8.29:
  * Sudo now closes file descriptors before changing uids. This
    prevents a non-root process from interfering with sudo's ability
    to close file descriptors on systems that support the prlimit(2)
    system call.
  * Sudo now treats an attempt to run sudo sudoedit as simply
    sudoedit If the sudoers file contains a fully-qualified path
    to sudoedit, sudo will now treat it simply as sudoedit
    (with no path). Visudo will will now treat a fully-qualified
    path to sudoedit as an error. Bug #871.
  * Fixed a bug introduced in sudo 1.8.28 where sudo would warn
    about a missing /etc/environment file on AIX and Linux when
    PAM is not enabled. Bug #907.
  * Fixed a bug on Linux introduced in sudo 1.8.29 that prevented
    the askpass program from running due to an unlimited stack size
    resource limit. Bug #908.
  * If a group provider plugin has optional arguments, the argument
    list passed to the plugin is now NULL terminated as per the
    documentation.
  * The user's time stamp file is now only updated if both authentication
    and approval phases succeed. This is consistent with the behavior
    of sudo prior to version 1.8.23. Bug #910.
  * The new allow_unknown_runas_id sudoers setting can be used to
    enable or disable the use of unknown user or group IDs.
    Previously, sudo would always allow unknown user or group IDs if
    the sudoers entry permitted it, including via the ALL alias.
    As of sudo 1.8.30, the admin must explicitly enable support for
    unknown IDs.
  * The new runas_check_shell sudoers setting can be used to require
    that the runas user have a shell listed in the /etc/shells file.
    On many systems, users such as bin, do not have a valid shell and
    this flag can be used to prevent commands from being run as
    those users.
  * Fixed a problem restoring the SELinux tty context during reboot
    if mctransd is killed before sudo finishes. GitHub Issue #17.
  * Fixed an intermittent warning on NetBSD when sudo restores the
    initial stack size limit.
  Major changes between version 1.8.29 and 1.8.28p1:
  * The cvtsudoers command will now reject non-LDIF input when
    converting from LDIF format to sudoers or JSON formats.
  * The new log_allowed and log_denied sudoers settings make it
    possible to disable logging and auditing of allowed and/or
    denied commands.
  * The umask is now handled differently on systems with PAM or
    login.conf. If the umask is explicitly set in sudoers, that
    value is used regardless of what PAM or login.conf may specify.
    However, if the umask is not explicitly set in sudoers, PAM or
    login.conf may now override the default sudoers umask. Bug #900.
  * For make install, the sudoers file is no longer checked for syntax
    errors when DESTDIR is set. The default sudoers file includes the
    contents of /etc/sudoers.d which may not be readable as non-root.
    Bug #902.
  * Sudo now sets most resource limits to their maximum value to avoid
    problems caused by insufficient resources, such as an inability to
    allocate memory or open files and pipes. Fixed a regression introduced
    in sudo 1.8.28 where sudo would refuse to run if the parent process was
    not associated with a session. This was due to sudo passing a session
    ID of -1 to the plugin.
- refresh sudo-sudoers.patch

==== tigervnc ====
Subpackages: libXvnc1 xorg-x11-Xvnc xorg-x11-Xvnc-module

- added a reference to bsc#1162951 about the reasoning why adding
  the vnc user to the shadow group

==== whois ====
Version update (5.5.4 -> 5.5.5)

- whois 5.5.5:
  * Fix the hide string for .sx, which broke many others

==== wireguard ====
Version update (0.0.20200205_k5.5.2_1 -> 0.0.20200214_k5.5.4_1)

- Update to version 0.0.20200214
  * chacha20poly1305: defensively protect against large inputs
  * netns: ensure that icmp src address is correct with nat
  * receive: reset last_under_load to zero
  * send: account for mtu=0 devices

==== xdg-user-dirs ====
Subpackages: xdg-user-dirs-lang

- No longer recommend -lang: supplements are in use.

==== xerces-c ====

- Fixup rpmlint warning about installed Makefiles

==== xfce4-whiskermenu-plugin ====
Version update (2.4.1 -> 2.4.2)
Subpackages: xfce4-whiskermenu-plugin-lang

- Update to 2.4.2
  * Fix crash when selecting desktop action. (bxo#16445)
  * Translation updates

==== xfconf ====
Subpackages: libxfconf-0-3 xfconf-lang

- xfconfd needs to be a hard dependency to libxfconf (boo#1163214)

==== yast2-nis-client ====
Version update (4.2.1 -> 4.2.2)

- Preserve NSS database sources when adding nis to nsswitch.conf
  file (bsc#1162916).
- 4.2.2

==== yast2-python-bindings ====
Version update (4.1.1 -> 4.1.2)

- Don't overwrite CPPFLAGS/LDFLAGS/LIBADD during build; (bsc#1163310);
- 4.1.2
- Switch to python3 on new releases of openSUSE as we no longer
  support python2 at all
- Cleanup the spec file to adhere to current packaging guidelines

==== zsh ====
Version update (5.8~pre2 -> 5.8~pre3)

- Update to version 5.8~pre3 (5.7.1-test-3)
  * Minor bugfixes compared to pre2

-- 
To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org
To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

[opensuse-factory] New Tumbleweed snapshot 20200218 released!

Dominique Leuenberger