Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20200526 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bind (9.16.1 -> 9.16.3) dracut (050+suse.61.g0fe0e854 -> 050+suse.63.g796e020e) evince (3.36.0 -> 3.36.1) flatpak freeipmi (1.6.4 -> 1.6.5) gfbgraph (0.2.3 -> 0.2.4) glib2-branding-openSUSE grub2 kernel-source (5.6.12 -> 5.6.14) libarchive (3.4.2 -> 3.4.3) libpwquality libressl (3.1.1 -> 3.1.2) lzop mutt (1.14.0 -> 1.14.1) nss-mdns openconnect (8.09 -> 8.10) pipewire (0.3.2 -> 0.3.5) ppp python-linux-procfs python-mailman python-pyftpdlib remmina (1.4.3 -> 1.4.5) shotwell (0.30.9 -> 0.30.10) thunar (1.8.14 -> 1.8.15) usbutils (010 -> 012) vala (0.48.5 -> 0.48.6) wireshark (3.2.3 -> 3.2.4) === Details === ==== bind ==== Version update (9.16.1 -> 9.16.3) Subpackages: bind-chrootenv bind-doc bind-utils libbind9-1600 libisccc1600 libisccfg1600 python3-bind - Upgrade to version bind-9.16.3 Fixing two security problems: * Further limit the number of queries that can be triggered from a request. Root and TLD servers are no longer exempt from max-recursion-queries. Fetches for missing name server address records are limited to 4 for any domain. (CVE-2020-8616) * Replaying a TSIG BADTIME response as a request could trigger an assertion failure. (CVE-2020-8617) Also * Add engine support to OpenSSL EdDSA implementation. * Add engine support to OpenSSL ECDSA implementation. * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0. * Warn about AXFR streams with inconsistent message IDs. * Make ISC rwlock implementation the default again. For more see CHANGS file in source RPM. [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz] ==== dracut ==== Version update (050+suse.61.g0fe0e854 -> 050+suse.63.g796e020e) - Update to version 050+suse.63.g796e020e: * suse.spec: Move /bin/* and /sbin/* to /usr * suse.spec: Remove long unused mkinitrd_setup file ==== evince ==== Version update (3.36.0 -> 3.36.1) Subpackages: evince-lang evince-plugin-comicsdocument evince-plugin-djvudocument evince-plugin-dvidocument evince-plugin-pdfdocument evince-plugin-tiffdocument evince-plugin-xpsdocument libevdocument3-4 libevview3-3 nautilus-evince typelib-1_0-EvinceDocument-3_0 typelib-1_0-EvinceView-3_0 - Update to version 3.36.1: + backends: Support 'de facto' tooltip feature. + help: - Add Ukrainian screenshots for the docs. - Fix incorrect markup in Czech UI translation. - Update French help image. + libdocument: - Allow text entries to handle clicks. - Ignore deprecation warnings in headers. + libview: - Fix "can-have-popup" prop when creating markup annotations. - Move annotation popup window to new position. + shell: - Set menu button to not focus-on-click. - Fix too large slides on scaled display. + Updated translations. ==== flatpak ==== Subpackages: libflatpak0 system-user-flatpak typelib-1_0-Flatpak-1_0 - When SLE uses GNOME desktop environment, GNOME Software is automatically started to provide key update features. During the startup, it setups flatpak repository so that related features can function properly. In a system environment of no flatpak repository has ever been setup before, this triggers "org.freedesktop.Flatpak.modify-repo" polkit action. Therefore in systems which use a restrictive security policy (eg. SLES) for the aforementioned policy action, a polkit authentication dialog will pop up without any user interaction for the first time login. This is not user friendly. This submission creates /var/lib/flatpak/repo at package installation to avoid such a confusing authentication pop-up, at nearly 0 cost of security compromise (bsc#1169619, bsc#1170416). ==== freeipmi ==== Version update (1.6.4 -> 1.6.5) Subpackages: libfreeipmi17 libipmiconsole2 libipmidetect0 libipmimonitoring6 - Update to 1.6.5 o Add FRU parsing workaround for Fujitsu Primergy RX1330, in which a CEh is used to indicate that no FRU data is available. o Misc minor fixes. ==== gfbgraph ==== Version update (0.2.3 -> 0.2.4) Subpackages: libgfbgraph-0_2-0 typelib-1_0-GFBGraph-0_2 - Update to version 0.2.4: + Change Facebook Graph API version to v2.10. + Fix memory leaks of GFBGraphNode class. + Support g_autoptr for GFBGraphAlbum, GFBGraphNode, GFBGraphPhoto, GFBGraphUser. + Fix memory leaks of GFBGraphUser, GFBGraphSimpleAuthorizer, GFBGraphAlbum. - Add libtool and gtk-doc BuildRequires and bootstrap package, the tarball is not bootstrapped. - Modernize spec, update URL to new home, use correct description for typelib subpackage. ==== glib2-branding-openSUSE ==== - Only recommend wallpaper-branding-%{branding_name} when gnome-shell is present. Allows gio to be installed on text-only systems without pulling wallpapers in (boo#1162600). ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Skip zfcpdump kernel from the grub boot menu (bsc#1166513) * grub2-s390x-skip-zfcpdump-image.patch ==== kernel-source ==== Version update (5.6.12 -> 5.6.14) - Linux 5.6.14 (bnc#1012628). - KVM: nVMX: Consolidate nested MTF checks to helper function (bnc#1012628). - kvm: nVMX: reflect MTF VM-exits if injected by L1 (bnc#1012628). - xprtrdma: Clean up the post_send path (bnc#1012628). - xprtrdma: Fix trace point use-after-free race (bnc#1012628). - drm/i915/tgl: Add Wa_14010477008:tgl (bnc#1012628). - drm/i915/tgl: TBT AUX should use TC power well ops (bnc#1012628). - drm/i915/display: Load DP_TP_CTL/STATUS offset before use it (bnc#1012628). - shmem: fix possible deadlocks on shmlock_user_lock (bnc#1012628). - net: phy: microchip_t1: add lan87xx_phy_init to initialize the lan87xx phy (bnc#1012628). - KVM: arm: vgic: Synchronize the whole guest on GIC{D,R}_I{S,C}ACTIVER read (bnc#1012628). - KVM: arm: vgic-v2: Only use the virtual state when userspace accesses pending bits (bnc#1012628). - gpio: pca953x: Fix pca953x_gpio_set_config (bnc#1012628). - SUNRPC: Add "@len" parameter to gss_unwrap() (bnc#1012628). - SUNRPC: Fix GSS privacy computation of auth->au_ralign (bnc#1012628). - net/sonic: Fix a resource leak in an error handling path in 'jazz_sonic_probe()' (bnc#1012628). - net: moxa: Fix a potential double 'free_irq()' (bnc#1012628). - ftrace/selftests: workaround cgroup RT scheduling issues (bnc#1012628). - hv_netvsc: Fix netvsc_start_xmit's return type (bnc#1012628). - drop_monitor: work around gcc-10 stringop-overflow warning (bnc#1012628). - virtio-blk: handle block_device_operations callbacks after hot unplug (bnc#1012628). - sun6i: dsi: fix gcc-4.8 (bnc#1012628). - net_sched: fix tcm_parent in tc filter dump (bnc#1012628). - net: stmmac: gmac5+: fix potential integer overflow on 32 bit multiply (bnc#1012628). - iommu/amd: Fix race in increase_address_space()/fetch_pte() (bnc#1012628). - iommu/amd: Update Device Table in increase_address_space() (bnc#1012628). - net: dsa: ocelot: the MAC table on Felix is twice as large (bnc#1012628). - net: mscc: ocelot: ANA_AUTOAGE_AGE_PERIOD holds a value in seconds, not ms (bnc#1012628). - mmc: sdhci-acpi: Add SDHCI_QUIRK2_BROKEN_64_BIT_DMA for AMDI0040 (bnc#1012628). - dpaa2-eth: properly handle buffer size restrictions (bnc#1012628). - mptcp: set correct vfs info for subflows (bnc#1012628). - net: fix a potential recursive NETDEV_FEAT_CHANGE (bnc#1012628). - netlabel: cope with NULL catmap (bnc#1012628). - net: phy: fix aneg restart in phy_ethtool_set_eee (bnc#1012628). - net: stmmac: fix num_por initialization (bnc#1012628). - pppoe: only process PADT targeted at local interfaces (bnc#1012628). - Revert "ipv6: add mtu lock check in __ip6_rt_update_pmtu" (bnc#1012628). - tcp: fix error recovery in tcp_zerocopy_receive() (bnc#1012628). - tcp: fix SO_RCVLOWAT hangs with fat skbs (bnc#1012628). - virtio_net: fix lockdep warning on 32 bit (bnc#1012628). - dpaa2-eth: prevent array underflow in update_cls_rule() (bnc#1012628). - hinic: fix a bug of ndo_stop (bnc#1012628). - net: dsa: loop: Add module soft dependency (bnc#1012628). - net: ipv4: really enforce backoff for redirects (bnc#1012628). - netprio_cgroup: Fix unlimited memory leak of v2 cgroups (bnc#1012628). - net: tcp: fix rx timestamp behavior for tcp_recvmsg (bnc#1012628). - nfp: abm: fix error return code in nfp_abm_vnic_alloc() (bnc#1012628). - r8169: re-establish support for RTL8401 chip version (bnc#1012628). - umh: fix memory leak on execve failure (bnc#1012628). - net: broadcom: Select BROADCOM_PHY for BCMGENET (bnc#1012628). - dmaengine: xilinx_dma: Add missing check for empty list (bnc#1012628). - riscv: fix vdso build with lld (bnc#1012628). - dmaengine: pch_dma.c: Avoid data race between probe and irq handler (bnc#1012628). - dmaengine: mmp_tdma: Do not ignore slave config validation errors (bnc#1012628). - dmaengine: mmp_tdma: Reset channel error on release (bnc#1012628). - drm/amd/display: blank dp stream before re-train the link (bnc#1012628). - selftests/ftrace: Check the first record for kprobe_args_type.tc (bnc#1012628). - cpufreq: intel_pstate: Only mention the BIOS disabling turbo mode once (bnc#1012628). - ALSA: hda/hdmi: fix race in monitor detection during probe (bnc#1012628). - drm/amd/powerplay: avoid using pm_en before it is initialized revised (bnc#1012628). - drm/amd/display: check if REFCLK_CNTL register is present (bnc#1012628). - drm/amd/display: Defer cursor update around VUPDATE for all ASIC (bnc#1012628). - drm/amd/display: Update downspread percent to match spreadsheet for DCN2.1 (bnc#1012628). - drm/qxl: lost qxl_bo_kunmap_atomic_page in qxl_image_init_helper() (bnc#1012628). - fibmap: Warn and return an error in case of block > INT_MAX (bnc#1012628). - io_uring: use cond_resched() in io_ring_ctx_wait_and_kill() (bnc#1012628). - io_uring: check non-sync defer_list carefully (bnc#1012628). - ALSA: hda/realtek - Fix S3 pop noise on Dell Wyse (bnc#1012628). - gfs2: Another gfs2_walk_metadata fix (bnc#1012628). - mmc: sdhci-pci-gli: Fix no irq handler from suspend (bnc#1012628). - IB/hfi1: Fix another case where pq is left on waitlist (bnc#1012628). - ACPI: EC: PM: Avoid premature returns from acpi_s2idle_wake() (bnc#1012628). - pinctrl: sunrisepoint: Fix PAD lock register offset for SPT-H (bnc#1012628). - pinctrl: baytrail: Enable pin configuration setting for GPIO chip (bnc#1012628). - pinctrl: qcom: fix wrong write in update_dual_edge (bnc#1012628). - pinctrl: cherryview: Add missing spinlock usage in chv_gpio_irq_handler (bnc#1012628). - drm/tegra: Fix SMMU support on Tegra124 and Tegra210 (bnc#1012628). - bpf: Fix error return code in map_lookup_and_delete_elem() (bnc#1012628). - ALSA: firewire-lib: fix 'function sizeof not defined' error of tracepoints format (bnc#1012628). - cachefiles: Fix corruption of the return value in cachefiles_read_or_alloc_pages() (bnc#1012628 boo#1168841). - i40iw: Fix error handling in i40iw_manage_arp_cache() (bnc#1012628). - drm/i915/gt: Make timeslicing an explicit engine property (bnc#1012628). - drm/i915: Don't enable WaIncreaseLatencyIPCEnabled when IPC is disabled (bnc#1012628). - bpf, sockmap: msg_pop_data can incorrecty set an sge length (bnc#1012628). - bpf, sockmap: bpf_tcp_ingress needs to subtract bytes from sg.size (bnc#1012628). - drm/i915/gem: Remove object_is_locked assertion from unpin_from_display_plane (bnc#1012628). - mmc: alcor: Fix a resource leak in the error path for ->probe() (bnc#1012628). - mmc: sdhci-pci-gli: Fix can not access GL9750 after reboot from Windows 10 (bnc#1012628). - mmc: core: Check request type before completing the request (bnc#1012628). - mmc: core: Fix recursive locking issue in CQE recovery path (bnc#1012628). - mmc: block: Fix request completion in the CQE timeout path (bnc#1012628). - gfs2: More gfs2_find_jhead fixes (bnc#1012628). - fork: prevent accidental access to clone3 features (bnc#1012628). - drm/amdgpu: force fbdev into vram (bnc#1012628). - NFS: Fix fscache super_cookie index_key from changing after umount (bnc#1012628). - NFS: Fix fscache super_cookie allocation (bnc#1012628). - NFSv4: Fix fscache cookie aux_data to ensure change_attr is included (bnc#1012628). - hwmon: (drivetemp) Fix SCT support if SCT data tables are not supported (bnc#1012628). - netfilter: conntrack: avoid gcc-10 zero-length-bounds warning (bnc#1012628). - drm/i915/gvt: Fix kernel oops for 3-level ppgtt guest (bnc#1012628). - arm64: fix the flush_icache_range arguments in machine_kexec (bnc#1012628). - netfilter: conntrack: fix infinite loop on rmmod (bnc#1012628). - drm/i915: Mark concurrent submissions with a weak-dependency (bnc#1012628). - nfs: fix NULL deference in nfs4_get_valid_delegation (bnc#1012628). - SUNRPC: Signalled ASYNC tasks need to exit (bnc#1012628). - netfilter: flowtable: set NF_FLOW_TEARDOWN flag on entry expiration (bnc#1012628). - netfilter: nft_set_rbtree: Add missing expired checks (bnc#1012628). - RDMA/rxe: Always return ERR_PTR from rxe_create_mmap_info() (bnc#1012628). - IB/mlx4: Test return value of calls to ib_get_cached_pkey (bnc#1012628). - IB/core: Fix potential NULL pointer dereference in pkey cache (bnc#1012628). - RDMA/core: Fix double put of resource (bnc#1012628). - RDMA/iw_cxgb4: Fix incorrect function parameters (bnc#1012628). - x86/ftrace: Have ftrace trampolines turn read-only at the end of system boot up (bnc#1012628). - hwmon: (da9052) Synchronize access with mfd (bnc#1012628). - s390/ism: fix error return code in ism_probe() (bnc#1012628). - drm/i915: Handle idling during i915_gem_evict_something busy loops (bnc#1012628). - mm, memcg: fix inconsistent oom event behavior (bnc#1012628). - epoll: call final ep_events_available() check under the lock (bnc#1012628). - bpf: Fix bug in mmap() implementation for BPF array map (bnc#1012628). - NFSv3: fix rpc receive buffer size for MOUNT call (bnc#1012628). - pnp: Use list_for_each_entry() instead of open coding (bnc#1012628). - net/rds: Use ERR_PTR for rds_message_alloc_sgs() (bnc#1012628). - Stop the ad-hoc games with -Wno-maybe-initialized (bnc#1012628). - gcc-10: disable 'zero-length-bounds' warning for now (bnc#1012628). - gcc-10: disable 'array-bounds' warning for now (bnc#1012628). - gcc-10: disable 'stringop-overflow' warning for now (bnc#1012628). - gcc-10: disable 'restrict' warning for now (bnc#1012628). - gcc-10 warnings: fix low-hanging fruit (bnc#1012628). - gcc-10: mark more functions __init to avoid section mismatch warnings (bnc#1012628). - gcc-10: avoid shadowing standard library 'free()' in crypto (bnc#1012628). - bootconfig: Fix to remove bootconfig data from initrd while boot (bnc#1012628). - bootconfig: Fix to prevent warning message if no bootconfig option (bnc#1012628). - usb: usbfs: correct kernel->user page attribute mismatch (bnc#1012628). - USB: usbfs: fix mmap dma mismatch (bnc#1012628). - ALSA: hda/realtek - Add COEF workaround for ASUS ZenBook UX431DA (bnc#1012628). - ALSA: rawmidi: Fix racy buffer resize under concurrent accesses (bnc#1012628). - ALSA: usb-audio: Add control message quirk delay for Kingston HyperX headset (bnc#1012628). - usb: core: hub: limit HUB_QUIRK_DISABLE_AUTOSUSPEND to USB5534B (bnc#1012628). - usb: host: xhci-plat: keep runtime active when removing host (bnc#1012628). - usb: cdns3: gadget: prev_req->trb is NULL for ep0 (bnc#1012628). - USB: gadget: fix illegal array access in binding with UDC (bnc#1012628). - usb: xhci: Fix NULL pointer dereference when enqueuing trbs from urb sg list (bnc#1012628). - ARM: dts: dra7: Fix bus_dma_limit for PCIe (bnc#1012628). - ARM: dts: imx27-phytec-phycard-s-rdk: Fix the I2C1 pinctrl entries (bnc#1012628). - ARM: dts: imx6dl-yapp4: Fix Ursa board Ethernet connection (bnc#1012628). - drm/amd/display: add basic atomic check for cursor plane (bnc#1012628). - drm/amd/amdgpu: add raven1 part to the gfxoff quirk list (bnc#1012628). - drm/i915/tgl+: Fix interrupt handling for DP AUX transactions (bnc#1012628). - powerpc/vdso32: Fallback on getres syscall when clock is unknown (bnc#1012628). - powerpc/32s: Fix build failure with CONFIG_PPC_KUAP_DEBUG (bnc#1012628). - cifs: fix leaked reference on requeued write (bnc#1012628). - KVM: x86: Fix pkru save/restore when guest CR4.PKE=0, move it to x86.c (bnc#1012628). - x86/unwind/orc: Fix error handling in __unwind_start() (bnc#1012628). - exec: Move would_dump into flush_old_exec (bnc#1012628). - clk: rockchip: fix incorrect configuration of rk3228 aclk_gpu* clocks (bnc#1012628). - dwc3: Remove check for HWO flag in dwc3_gadget_ep_reclaim_trb_sg() (bnc#1012628). - fanotify: fix merging marks masks with FAN_ONDIR (bnc#1012628). - arm64: dts: meson-g12b-ugoos-am6: fix usb vbus-supply (bnc#1012628). - usb: gadget: tegra-xudc: Fix idle suspend/resume (bnc#1012628). - usb: gadget: net2272: Fix a memory leak in an error handling path in 'net2272_plat_probe()' (bnc#1012628). - usb: gadget: audio: Fix a missing error return value in audio_bind() (bnc#1012628). - usb: gadget: legacy: fix error return code in gncm_bind() (bnc#1012628). - usb: gadget: legacy: fix error return code in cdc_bind() (bnc#1012628). - Revert "ALSA: hda/realtek: Fix pop noise on ALC225" (bnc#1012628). - clk: ti: clkctrl: Fix Bad of_node_put within clkctrl_get_name (bnc#1012628). - clk: Unlink clock if failed to prepare or enable (bnc#1012628). - arm64: dts: meson-g12b-khadas-vim3: add missing frddr_a status property (bnc#1012628). - arm64: dts: qcom: msm8996: Reduce vdd_apc voltage (bnc#1012628). - arm64: dts: meson-g12-common: fix dwc2 clock names (bnc#1012628). - arm64: dts: rockchip: Replace RK805 PMIC node name with "pmic" on rk3328 boards (bnc#1012628). - arm64: dts: rockchip: Rename dwc3 device nodes on rk3399 to make dtc happy (bnc#1012628). - arm64: dts: imx8mn: Change SDMA1 ahb clock for imx8mn (bnc#1012628). - ARM: dts: r8a73a4: Add missing CMT1 interrupts (bnc#1012628). - arm64: dts: renesas: r8a77980: Fix IPMMU VIP[01] nodes (bnc#1012628). - ARM: dts: r8a7740: Add missing extal2 to CPG node (bnc#1012628). - dt-bindings: dma: fsl-edma: fix ls1028a-edma compatible (bnc#1012628). - SUNRPC: Revert 241b1f419f0e ("SUNRPC: Remove xdr_buf_trim()") (bnc#1012628). - bpf: Fix sk_psock refcnt leak when receiving message (bnc#1012628). - powerpc/uaccess: Evaluate macro arguments once, before user access is allowed (bnc#1012628). - powerpc/ima: Fix secure boot rules in ima arch policy (bnc#1012628). - RDMA/uverbs: Do not discard the IB_EVENT_DEVICE_FATAL event (bnc#1012628). - RDMA/uverbs: Move IB_EVENT_DEVICE_FATAL to destroy_uobj (bnc#1012628). - riscv: perf: RISCV_BASE_PMU should be independent (bnc#1012628). - KVM: x86: Fix off-by-one error in kvm_vcpu_ioctl_x86_setup_mce (bnc#1012628). - bpf: Enforce returning 0 for fentry/fexit progs (bnc#1012628). - selftests/bpf: Enforce returning 0 for fentry/fexit programs (bnc#1012628). - bpf: Restrict bpf_trace_printk()'s %s usage and add %pks, %pus specifier (bnc#1012628). - Delete patches.suse/cachefiles-fix.patch. - commit b0ab48a - Makefile: disallow data races on gcc-10 as well (gcc 10). - commit 3c26bf7 - Replace gcc10 fix with the upstream one - commit 1adb363 - Refresh patches.suse/ipc-util.c-sysvipc_find_ipc-incorrectly-updates-posi.patch. Update upstream status. - commit f322baa - ALSA: hda/realtek - Limit int mic boost for Thinkpad T530 (bsc#1171293). - commit 60a84bf - tracing: Wait for preempt irq delay thread to execute (git-fixes). - commit 5f84268 - Linux 5.6.13 (bnc#1012628). - thunderbolt: Check return value of tb_sw_read() in usb4_switch_op() (bnc#1012628). - USB: serial: qcserial: Add DW5816e support (bnc#1012628). - drm/amdgpu: move kfd suspend after ip_suspend_phase1 (bnc#1012628). - drm/amdgpu: drop redundant cg/pg ungate on runpm enter (bnc#1012628). - vt: fix unicode console freeing with a common interface (bnc#1012628). - tty: xilinx_uartps: Fix missing id assignment to the console (bnc#1012628). - ext4: don't set dioread_nolock by default for blocksize < pagesize (bnc#1012628). - ext4: disable dioread_nolock whenever delayed allocation is disabled (bnc#1012628). - nvme: refactor nvme_identify_ns_descs error handling (bnc#1012628). - nvme: fix possible hang when ns scanning fails during error recovery (bnc#1012628). - tracing/kprobes: Fix a double initialization typo (bnc#1012628). - net: macb: Fix runtime PM refcounting (bnc#1012628). - cxgb4: fix EOTID leak when disabling TC-MQPRIO offload (bnc#1012628). - devlink: Fix reporter's recovery condition (bnc#1012628). - devlink: fix return value after hitting end in region read (bnc#1012628). - dp83640: reverse arguments to list_add_tail (bnc#1012628). - fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks (bnc#1012628). - ipv6: Use global sernum for dst validation with nexthop objects (bnc#1012628). - mlxsw: spectrum_acl_tcam: Position vchunk in a vregion list properly (bnc#1012628). - neigh: send protocol value in neighbor create notification (bnc#1012628). - net: bridge: vlan: Add a schedule point during VLAN processing (bnc#1012628). - net: dsa: Do not leave DSA master with NULL netdev_ops (bnc#1012628). - net: dsa: Do not make user port errors fatal (bnc#1012628). - net: macb: fix an issue about leak related system resources (bnc#1012628). - net: macsec: preserve ingress frame ordering (bnc#1012628). - net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc() (bnc#1012628). - net: phy: marvell10g: fix temperature sensor on 2110 (bnc#1012628). - net_sched: sch_skbprio: add message validation to skbprio_change() (bnc#1012628). - net: stricter validation of untrusted gso packets (bnc#1012628). - net: tc35815: Fix phydev supported/advertising mask (bnc#1012628). - net/tls: Fix sk_psock refcnt leak in bpf_exec_tx_verdict() (bnc#1012628). - net/tls: Fix sk_psock refcnt leak when in tls_data_ready() (bnc#1012628). - net: usb: qmi_wwan: add support for DW5816e (bnc#1012628). - nfp: abm: fix a memory leak bug (bnc#1012628). - sch_choke: avoid potential panic in choke_reset() (bnc#1012628). - sch_sfq: validate silly quantum values (bnc#1012628). - selftests: net: tcp_mmap: clear whole tcp_zerocopy_receive struct (bnc#1012628). - selftests: net: tcp_mmap: fix SO_RCVLOWAT setting (bnc#1012628). - tipc: fix partial topology connection closure (bnc#1012628). - tunnel: Propagate ECT(1) when decapsulating as recommended by RFC6040 (bnc#1012628). - bnxt_en: Fix VF anti-spoof filter setup (bnc#1012628). - bnxt_en: Reduce BNXT_MSIX_VEC_MAX value to supported CQs per PF (bnc#1012628). - bnxt_en: Improve AER slot reset (bnc#1012628). - bnxt_en: Return error when allocating zero size context memory (bnc#1012628). - bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features() (bnc#1012628). - net/mlx5: DR, On creation set CQ's arm_db member to right value (bnc#1012628). - net/mlx5: Fix forced completion access non initialized command entry (bnc#1012628). - net/mlx5: Fix command entry leak in Internal Error State (bnc#1012628). - net/mlx5e: Fix q counters on uplink representors (bnc#1012628). - net: mvpp2: prevent buffer overflow in mvpp22_rss_ctx() (bnc#1012628). - net: mvpp2: cls: Prevent buffer overflow in mvpp2_ethtool_cls_rule_del() (bnc#1012628). - wireguard: queueing: cleanup ptr_ring in error path of packet_queue_init (bnc#1012628). - wireguard: receive: use tunnel helpers for decapsulating ECN markings (bnc#1012628). - net: enetc: fix an issue about leak system resources (bnc#1012628). - wireguard: socket: remove errant restriction on looping to self (bnc#1012628). - wireguard: send/receive: cond_resched() when processing worker ringbuffers (bnc#1012628). - HID: wacom: Read HID_DG_CONTACTMAX directly for non-generic devices (bnc#1012628). - sctp: Fix bundling of SHUTDOWN with COOKIE-ACK (bnc#1012628). - Revert "HID: wacom: generic: read the number of expected touches on a per collection basis" (bnc#1012628). - HID: usbhid: Fix race between usbhid_close() and usbhid_stop() (bnc#1012628). - HID: wacom: Report 2nd-gen Intuos Pro S center button status over BT (bnc#1012628). - USB: uas: add quirk for LaCie 2Big Quadra (bnc#1012628). - usb: chipidea: msm: Ensure proper controller reset using role switch API (bnc#1012628). - USB: serial: garmin_gps: add sanity checking for data length (bnc#1012628). - tracing/boottime: Fix kprobe event API usage (bnc#1012628). - tracing/kprobes: Reject new event if loc is NULL (bnc#1012628). - tracing: Wait for preempt irq delay thread to finish (bnc#1012628). - tracing: Add a vmalloc_sync_mappings() for safe measure (bnc#1012628). - crypto: arch/nhpoly1305 - process in explicit 4k chunks (bnc#1012628). - crypto: arch/lib - limit simd usage to 4k chunks (bnc#1012628). - KVM: s390: Remove false WARN_ON_ONCE for the PQAP instruction (bnc#1012628). - KVM: VMX: Explicitly clear RFLAGS.CF and RFLAGS.ZF in VM-Exit RSB path (bnc#1012628). - KVM: arm: vgic: Fix limit condition when writing to GICD_I[CS]ACTIVER (bnc#1012628). - KVM: arm64: Fix 32bit PC wrap-around (bnc#1012628). - arm64: hugetlb: avoid potential NULL dereference (bnc#1012628). - driver core: platform: Initialize dma_parms for platform devices (bnc#1012628). - amba: Initialize dma_parms for amba devices (bnc#1012628). - mei: me: disable mei interface on LBG servers (bnc#1012628). - drm: ingenic-drm: add MODULE_DEVICE_TABLE (bnc#1012628). - drm/amd/display: work around fp code being emitted outside of DC_FP_START/END (bnc#1012628). - ipc/mqueue.c: change __do_notify() to bypass check_kill_permission() (bnc#1012628). - epoll: atomically remove wait entry on wake up (bnc#1012628). - eventpoll: fix missing wakeup for ovflist in ep_poll_callback (bnc#1012628). - mm/page_alloc: fix watchdog soft lockups during set_zone_contiguous() (bnc#1012628). - mm: limit boost_watermark on small zones (bnc#1012628). - ceph: fix endianness bug when handling MDS session feature bits (bnc#1012628). - ceph: demote quotarealm lookup warning to a debug message (bnc#1012628). - staging: gasket: Check the return value of gasket_get_bar_index() (bnc#1012628). - coredump: fix crash when umh is disabled (bnc#1012628). - riscv: set max_pfn to the PFN of the last page (bnc#1012628). - iocost: protect iocg->abs_vdebt with iocg->waitq.lock (bnc#1012628). - batman-adv: fix batadv_nc_random_weight_tq (bnc#1012628). - batman-adv: Fix refcnt leak in batadv_show_throughput_override (bnc#1012628). - batman-adv: Fix refcnt leak in batadv_store_throughput_override (bnc#1012628). - batman-adv: Fix refcnt leak in batadv_v_ogm_process (bnc#1012628). - x86/mm/cpa: Flush direct map alias during cpa (bnc#1012628). - x86/entry/64: Fix unwind hints in register clearing code (bnc#1012628). - x86/entry/64: Fix unwind hints in kernel exit path (bnc#1012628). - x86/entry/64: Fix unwind hints in __switch_to_asm() (bnc#1012628). - x86/entry/64: Fix unwind hints in rewind_stack_do_exit() (bnc#1012628). - x86/unwind/orc: Don't skip the first frame for inactive tasks (bnc#1012628). - x86/unwind/orc: Prevent unwinding before ORC initialization (bnc#1012628). - x86/unwind/orc: Fix error path for bad ORC entry type (bnc#1012628). - x86/unwind/orc: Fix premature unwind stoppage due to IRET frames (bnc#1012628). - KVM: x86: Fixes posted interrupt check for IRQs delivery modes (bnc#1012628). - arch/x86/kvm/svm/sev.c: change flag passed to GUP fast in sev_pin_memory() (bnc#1012628). - netfilter: nat: never update the UDP checksum when it's 0 (bnc#1012628). - netfilter: nf_osf: avoid passing pointer to local var (bnc#1012628). - objtool: Fix stack offset tracking for indirect CFAs (bnc#1012628). - iommu/virtio: Reverse arguments to list_add (bnc#1012628). - scripts/decodecode: fix trapping instruction formatting (bnc#1012628). - mm, memcg: fix error return value of mem_cgroup_css_alloc() (bnc#1012628). - bdi: move bdi_dev_name out of line (bnc#1012628). - bdi: add a ->dev_name field to struct backing_dev_info (bnc#1012628). - io_uring: don't use 'fd' for openat/openat2/statx (bnc#1012628). - fsnotify: replace inode pointer with an object id (bnc#1012628). - fanotify: merge duplicate events on parent and child (bnc#1012628). - Refresh patches.suse/Revert-ext4-make-dioread_nolock-the-default.patch. - commit 77f44b9 - rpm/check-for-config-changes: Ignore CONFIG_CC_VERSION_TEXT - commit 8e6b05f ==== libarchive ==== Version update (3.4.2 -> 3.4.3) Subpackages: bsdtar libarchive13 - Update to version 3.4.3 * support for pzstd compressed files (#1357) * support for RHT.security.selinux tar extended attribute (#1348) * various zstd fixes and improvements (#1342 #1352 #1359) * child process handling fixes (#1372) ==== libpwquality ==== Subpackages: libpwquality-lang libpwquality1 libpwquality1-32bit pam_pwquality pam_pwquality-32bit - Register with pam-config in %post(un) ==== libressl ==== Version update (3.1.1 -> 3.1.2) Subpackages: libcrypto46 libssl48 libtls20 - Update to release 3.1.2 * A TLS client with peer verification disabled may crash when contacting a server that sends an empty certificate list. ==== lzop ==== - Packaging cleanup: * Use modern macros * Use latests SPDX style of license strings ==== mutt ==== Version update (1.14.0 -> 1.14.1) Subpackages: mutt-doc mutt-lang - Update to 1.14.1: * bug-fix release, fixing a documentation build issue and a few other small bugs ==== nss-mdns ==== Subpackages: nss-mdns-32bit - nss-mdns-config: Use /usr/etc/nsswitch.conf as input if /etc/nsswitch.conf doesn't exist yet ==== openconnect ==== Version update (8.09 -> 8.10) Subpackages: libopenconnect5 openconnect-bash-completion openconnect-lang - Update to version 8.10: * Install bash completion script to ${datadir}/bash-completion/completions/openconnect. * Improve compatibility of csd-post.sh trojan. * Fix potential buffer overflow with GnuTLS describing local certs (CVE-2020-12823). ==== pipewire ==== Version update (0.3.2 -> 0.3.5) Subpackages: libpipewire-0_3-0 pipewire-modules pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Filter out libpulse.so.0 and libjack.so.0 automatic provides so this is not considered an alternative when resolving dependencies in the distribution. - Add patch to fix build in SLE/Leap where alsa doesn't have a snd_pcm_ioplug_hw_avail function: * do-not-use-snd_pcm_ioplug_hw_avail.patch - Update to version 0.3.5: * Compiler fixes * Add pw-midiplay and pw-midirecord aliases * Add pw-mididump tool * Add pw-metadata tool to inspect, add and remove metadata for objects. * Docs updates, man pages * install alsa config files * Fix linked sink/source in pulseaudio * ratelimit graph processing warnings * improve buffer handling in GStreamer elements * Fix power usage by removing the queue for the alsa sequencer system announce messages. * Fix metadata clear() method dispatch. * Improve parameter enumeration, make it possible to detect missing parameters vs no-compatible parameters so that we can use defaults in the first case and error in the second case. * Fix cleanup of proxy objects. Stability improvements on plug/unplug in session manager. * Make it possible to set log level from config file * improve debug of param negotiation errors. Log the parameters to stderr/journal. * Make it possible to configure global logger implementation. * Fix NEON detection * JACK and PulseAudio compatibility improvements - Update to version 0.3.4: * A quick update with some important stability fixes. - Update to version 0.3.3: * NEON optimizations for audio conversion (32 and 64 bits) * rework of session manager implementation * Add option to disable modules in the session manager * Release midi hardware devices when suspended * various build fixes * Clean up options of various utils * Stability improvements * Mayor improvements in pulseaudio emulation. Improved timings and compatibility. * Implementation of drain and flush in pulse and alsa emulation. * Implement poll on file descriptors. * Improvement of metadata for jack emulation. * Fix memory and thread problems in jack emulation. * Simplification of state changes. Should make more use cases work in the jack emulation. * Improvements in the gstreamer elements. Removal of extra internal queue. pipewiresink can now be used to play audio. * Add pw-jack and pw-pulse scripts to run pulseaudio and jack applications with the right library path. - Replace libpulse* replacement packages with a single pipewire-libpulse-0_3 package that includes all libraries installed in the non-standard directory %{_libdir}/pipewire-0.3/pulse and a new pw-pulse wrapper script. Likewise for the jack replacement libraries in a new pipewire-libjack-0_3 package. - Use update-alternatives for the wrapper scripts. ==== ppp ==== - Fixup previous fix: use the defined macro %_unitdir for the systemd unit. - /usr/lib/systemd instead %{_libexecdir}/systemd ==== python-linux-procfs ==== - %python3_only -> %python_alternative ==== python-mailman ==== - %python3_only -> %python_alternative ==== python-pyftpdlib ==== - %python3_only -> %python_alternative ==== remmina ==== Version update (1.4.3 -> 1.4.5) Subpackages: remmina-lang remmina-plugin-rdp remmina-plugin-secret remmina-plugin-vnc remmina-plugin-xdmcp - Update to release 1.4.5 * SSH plugin - adding font resize - closes #2201 (closed) !2059 (merged) @antenore * Fixing keyboard grabbing issues with screenshot tool !2062 (merged) @giox069 * Refactoring remmina_debug to avoid memory leaks and overhead, should fix #2202 (closed) !2061 (merged) @antenore * Using directory only to expose artifacts !2060 (merged) @antenore - removed remmina-bug-2061.patch now integrated in upstream - Update to release 1.4.4 * RDP Plugin - Adding UDP support, implements #2153 !2038 @antenore; * Adding proxy and local storage support !2039 @antenore; * RDP option to prefer IPv6 AAAA record over IPv4 A records !2040 @antenore; * Allow users to override the app ID !2044 @garymoon; * Use icon name instead of localizable string in gtk_image_new_from_icon_name() !2045 @yurchor; * Fix minor typos !2046 @yurchor; * Don't grab when window has no focus, issue #2165 !2047 @giox069; * SSH tunnel and VNC fixes !2048 @antenore; * Adding explicitly trueColour in the client format structure. Fixes #2181 and #810 !2049 @antenore; * Code refactoring. !2050 @antenore; * Extract subtitle for translation !2051 @yurchor; * [SSH] Connection pre/post command not replacing SSH tunnel parameters !2053 @antenore; * SNAP: Remove libssh, available in distro !2052 @ed10vi; * Create floating toolbar when ftb is set to off, 2189 !2054 @giox069; * Adding Remmina_debug function to simplify log reporting !2055 @antenore; * Removing OnlyShowIn as deprecated in the latest freedesktop spec. Closes #2198 !2056 @antenore; * Cleaning up GLib deprecations !2058 @antenore; * And much more committed directly in the master branch; * Polish is a new language. * Thousands of new strings have been translated with Weblate; - added remmina-bug-2061.patch to fix for build issue in remmina issue #2202 ==== shotwell ==== Version update (0.30.9 -> 0.30.10) Subpackages: shotwell-lang - Update to version 0.30.10: + Modify web publishing authentication to comply with Google's requirements. ==== thunar ==== Version update (1.8.14 -> 1.8.15) Subpackages: libthunarx-3-0 thunar-lang - Update to version 1.8.15 * Only open devices after successful mount attempt (bxo#16831) * Fix shortcut support for addressbar (bxo#4537 and bxo#13680) * Fix crash in bulk renamer on repeated rename (bxo#16824) * Add checks for thumbnailer 0 handles (bxo#14122) * Replace 'thunar_return_if_fail (THUNAR_IS_DEVICE (device))' with standard 'if (..)' to prevent possible crashes. (bxo#13404) * Fix check if folder is fully loaded when expanding path in tree view. * Prevents 100% CPU load and loosing sync with main view in some cases. (bxo#15762) * Fixes 100%CPU on tree-view in some rare cases (bxo#16024) * Delete native files faster (bxo#16641) * Support libxfce4ui XfceTitledDialog new API (bxo#16616) * Translation Updates ==== usbutils ==== Version update (010 -> 012) - Update to version 012: * Merge usbhid-dump into main usbutils repository - Changes for version 011: * Add usbreset.c as noinst_PROGRAMS target. * lsusb: Read unkown names from sysfs device desc. * Remove a small hack that no longer has any effect. * Cleanup grammar * lsusb-t: Emit USB IDs and other handy info when verbosity is increased * Require newer version of libusb * lsusb.py: fix up Python 3 conversion * SPDX bill-of-material is supposed to be project_name.spdx * usbutils.spdx: rerun report, it is properly sorted. * desc-dump.c: fix compiler warning about unused variable * add usbreset to .gitignore * usbreset: fix some build warnings * usbhid-dump: update to latest version * fix up standard int types * update usbhid-dump git id * usbhid-dump: update to a newer version of usbhid-dump again. * usbutils.spdx: update with latest information * lsusb.py: Search multiple paths for usb.ids. * lsusb.py: Usb enum for parser state machine. * lsusb.py: Add driver names for usbhid. * lsusb.py: python2 compatibility * Makefile.am: add files with licenses to archive * lsusb.py: sort devices and interfaces numerically * lsusb.py: sort toplevel entries * lsusb.py: improve usage text * lsusb.py: replace fake deepcopy() * lsusb.py: remove -w (warn if usb.ids not sorted) option * lsusb.py: ensure all error messages are written to stderr * lsusb.py: support long options * lsusb.py: use regular print() instead of hand-rolling the same thing * lsusb.py: avoid shadowing Python's built-in 'str' * lsusb.py: replace usb.ids binary search with dict lookup * lsusb.py: remove now-unused bin_search() * lsusb.py: avoid manual calls to __foo__() * lsusb.py: replace __repr__() for USB IDs with __str__() * lsusb.py: insert class FF:FF:FF into usbclasses to avoid special casing * lsusb.py: entirely remove Usb* classes * lsusb.py: cosmetic - replace tuples-as-"immutable lists" with regular lists * lsusb.py: use 'elif' where suitable * lsusb.py: remove dead code * lsusb.py: move unrelated code out of try..except * lsusb.py: allow - as well as _ when matching hci module names * lsusb.py: use a constant for the magic class number 9 * lsusb.py: Usb* classes: call read() automatically from constructor * lsusb.py: UsbEndpoint: indent is a class implementation detail * lsusb.py: a few cosmetic changes * lsusb.py: shorten find_usb_class() * lsusb.py: give all Usb* objects a .path attribute * lsusb.py: add an actual __repr__() to classes * lsusb.py: give all Usb* classes a superclass * lsusb.py: convert readattr() and readlink() to methods of the container * lsusb.py: use color by default * lsusb.py: rework output for more consistent indent of both columns * lsusb.py: fix endpoint interval spacing * lsusb.py: visually group USB-version-related fields * lsusb: Split out routine that fetches value for given field. * lsusb: Split out field name rendering. * lsusb: Add support for descriptor extensions. * lsusb: Add support for audio processing unit type-specific fields. * lsusb: Added support for Billboard Alternate Mode Capability descriptor * lsusb.py: Fix formatting of 10Gbps speeds * usb-devices: use /bin/sh hashbang * lsusb: Add support for decoding IPP printer descriptors * Depend on libusb 1.0.14 * man pages: add information on verbosity levels of -t option * fix typo - Drop no longer needed fix-shebang.patch ==== vala ==== Version update (0.48.5 -> 0.48.6) Subpackages: libvala-0_48-0 - Update to version 0.48.6: + Regression and bug fixes: - codegen: . Correctly handle cast-expression of real struct to nullable struct. . Use loop index instead of get_ccode_pos() for ellipsis parameter. - vala: . Allow node_ref being null in SemanticAnalyzer.get_instance_base_type(). . SemanticAnalyzer.get_instance_base_type() is not allowed to return null. . params-array parameter is not allowed in abstract/virtual method. . Use stable hash for methods in HashMap of implicit_implementations and Use "str_equal" as equal_func for ArrayList<string> instances. . Set value_type of undefined member-access to avoid further criticals. . Transform cast from floating-type to boxed-type. . Transform cast from integer-type to boxed-type. . Explicit "new" method may be incompatible with a posssible base method. - valadoc: Add implicit "Posix" using-directive for POSIX profile. - girparser: Add support for boolean "new" argument for methods. + Bindings: gtk4: Update to 3.98.3+028942c8. ==== wireshark ==== Version update (3.2.3 -> 3.2.4) Subpackages: libwireshark13 libwiretap10 libwsutil11 wireshark-ui-qt - wireshark 3.2.4 * CVE-2020-13164: NFS dissector crash (boo#1171899) - Further features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org