November 2019 - openSUSE Kubic - openSUSE Mailing Lists

[opensuse-kubic] deployment questions
by Bryan Gartner 11 Dec '19

11 Dec '19

Have a few questions around possible deployment options ... a) Can one effectively do a multi-arch cluster deployment, say some x86_64 and some aarch64 nodes? - this might be relevant mostly to have designated (labeled) worker nodes of the respective variety for targeted workloads b) Parallel to above, would it be possible, given the kubeadm-based approach to include a worker node based on another Linux (with Kubernetes installed) distribution? - as above, this might enable usage of other enabled devices like Jetson/RPi4 which don't yet have openSUSE images available c) From the https://en.opensuse.org/Kubic:kubeadm wiki page, it cites being able to have a single master node (and untaint to allow workload scheduling there). For edge computing (aka gateways), this might be a quite valid usage scenario. Other than potential resource conflicts of such a single node "cluster", any other considerations/caveats? And a couple of issues ... 1) on the same wiki page cited above, for Cilium it cites using /usr/share/k8s-yaml/cilium/cilium.yaml but the file currently residing there is /usr/share/k8s-yaml/cilium/quick-install.yaml. Is this the correct one to now use? 2) for some reason, all of the nodes in a recent deployed cluster show Status = NotReady (which may be related to previously listed issue and my assumption to use the file in that directory), since kubectl describe node <name> shows an error ... "Missing CNI default network" Thanks for any help / guidance -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

3 3

[opensuse-kubic] New MicroOS snapshot 20191128 released!
by Richard Brown 29 Nov '19

29 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: patterns-microos === Details === ==== patterns-microos ==== Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-basesystem patterns-microos-cloud patterns-microos-defaults patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-selinux patterns-microos-sssd_ldap - Install libnss_usrfiles2 by default for /usr/etc support -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191128 released!
by Richard Brown 29 Nov '19

29 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: patterns-microos rdma-core (25.1 -> 26.1) === Details === ==== patterns-microos ==== Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-basesystem patterns-microos-cloud patterns-microos-defaults patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-selinux patterns-microos-sssd_ldap - Install libnss_usrfiles2 by default for /usr/etc support ==== rdma-core ==== Version update (25.1 -> 26.1) Subpackages: libefa1 libibverbs libibverbs1 libmlx4-1 libmlx5-1 librdmacm1 - Update to rdma-core v26.1 (jsc#SLE-8388, jsc#SLE-8394, jsc#SLE-8463, jsc#SLE-8399, jsc#SLE-8254, jsc#SLE-9840, jsc#SLE-9763, jsc#SLE-9925, jsc#SLE-9846, jsc#SLE-9913, jsc#SLE-9729, jsc#SLE-8666) -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191126 released!
by Richard Brown 27 Nov '19

27 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: python-jsonschema (3.0.2 -> 3.2.0) python-networkx (2.3 -> 2.4) === Details === ==== python-jsonschema ==== Version update (3.0.2 -> 3.2.0) - update to version 3.2.0: * Added a format_nongpl setuptools extra, which installs only format dependencies that are non-GPL (#619). - specfile: * be more explicit in %files section * require python-importlib-metadata - update to version 3.1.1: * Temporarily revert the switch to js-regex until #611 and #612 are resolved. - changes from version 3.1.0: * Regular expressions throughout schemas now respect the ECMA 262 dialect, as recommended by the specification (#609). ==== python-networkx ==== Version update (2.3 -> 2.4) - Drop incorrectly calculated dependency on python33 - Switch to using %pytest macro - Update to version 2.4 Highlights: * Remove deprecated code from 1.x * Support for Python 3.8 * Switched to pytest for testing * Last release to support Python 3.5 * Fifteen new fuctions, including onion decomposition and linear prufing * Three new generators, such as a directed joint degree generator - Add numpy-38-test.patch, to correct test failure under Python 3.8 - Update URL, upstream changed to tarballs from zipfiles. -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191126 released!
by Richard Brown 27 Nov '19

27 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: python-jsonschema (3.0.2 -> 3.2.0) python-networkx (2.3 -> 2.4) === Details === ==== python-jsonschema ==== Version update (3.0.2 -> 3.2.0) - update to version 3.2.0: * Added a format_nongpl setuptools extra, which installs only format dependencies that are non-GPL (#619). - specfile: * be more explicit in %files section * require python-importlib-metadata - update to version 3.1.1: * Temporarily revert the switch to js-regex until #611 and #612 are resolved. - changes from version 3.1.0: * Regular expressions throughout schemas now respect the ECMA 262 dialect, as recommended by the specification (#609). ==== python-networkx ==== Version update (2.3 -> 2.4) - Drop incorrectly calculated dependency on python33 - Switch to using %pytest macro - Update to version 2.4 Highlights: * Remove deprecated code from 1.x * Support for Python 3.8 * Switched to pytest for testing * Last release to support Python 3.5 * Fifteen new fuctions, including onion decomposition and linear prufing * Three new generators, such as a directed joint degree generator - Add numpy-38-test.patch, to correct test failure under Python 3.8 - Update URL, upstream changed to tarballs from zipfiles. -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] FYI Kubernetes 1.6.3 is on the way to Factory
by Richard Brown 27 Nov '19

27 Nov '19

Hi All, Kubernetes 1.6.3 was released some weeks ago. Today I got around to packaging it. It's on the way to Factory. Regards, -- Richard Brown Linux Distribution Engineer - Future Technology Team Phone +4991174053-361 SUSE Software Solutions Germany GmbH, Maxfeldstr. 5, D-90409 Nuernberg (HRB 36809, AG Nürnberg) Geschäftsführer: Felix Imendörffer -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191124 released!
by Richard Brown 26 Nov '19

26 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: kernel-source (5.3.11 -> 5.3.12) === Details === ==== kernel-source ==== Version update (5.3.11 -> 5.3.12) - Linux 5.3.12 (bnc#1151927). - slcan: Fix memory leak in error path (bnc#1151927). - mmc: sdhci-of-at91: fix quirk2 overwrite (bnc#1151927). - mm/page_io.c: do not free shared swap slots (bnc#1151927). - mm/memory_hotplug: fix try_offline_node() (bnc#1151927). - mm: slub: really fix slab walking for init_on_free (bnc#1151927). - mm: hugetlb: switch to css_tryget() in hugetlb_cgroup_charge_cgroup() (bnc#1151927). - mm: memcg: switch to css_tryget() in get_mem_cgroup_from_mm() (bnc#1151927). - mm: mempolicy: fix the wrong return value and potential pages leak of mbind (bnc#1151927). - iommu/vt-d: Fix QI_DEV_IOTLB_PFSID and QI_DEV_EIOTLB_PFSID macros (bnc#1151927). - net: ethernet: dwmac-sun8i: Use the correct function in exit path (bnc#1151927). - ntp/y2038: Remove incorrect time_t truncation (bnc#1151927). - Revert "drm/i915/ehl: Update MOCS table for EHL" (bnc#1151927). - drm/i915: update rawclk also on resume (bnc#1151927). - io_uring: ensure registered buffer import returns the IO length (bnc#1151927). - ecryptfs_lookup_interpose(): lower_dentry->d_parent is not stable either (bnc#1151927). - ecryptfs_lookup_interpose(): lower_dentry->d_inode is not stable (bnc#1151927). - x86/quirks: Disable HPET on Intel Coffe Lake platforms (bnc#1151927). - i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present (bnc#1151927). - IB/hfi1: Use a common pad buffer for 9B and 16B packets (bnc#1151927). - IB/hfi1: Ensure full Gen3 speed in a Gen4 system (bnc#1151927). - IB/hfi1: TID RDMA WRITE should not return IB_WC_RNR_RETRY_EXC_ERR (bnc#1151927). - IB/hfi1: Calculate flow weight based on QP MTU for TID RDMA (bnc#1151927). - IB/hfi1: Ensure r_tid_ack is valid before building TID RDMA ACK packet (bnc#1151927). - KVM: MMU: Do not treat ZONE_DEVICE pages as being reserved (bnc#1151927). - Input: synaptics-rmi4 - destroy F54 poller workqueue when removing (bnc#1151927). - Input: synaptics-rmi4 - clear IRQ enables for F54 (bnc#1151927). - Input: synaptics-rmi4 - do not consume more data than we have (F11, F12) (bnc#1151927). - Input: synaptics-rmi4 - disable the relative position IRQ in the F12 driver (bnc#1151927). - Input: synaptics-rmi4 - fix video buffer size (bnc#1151927). - Input: ff-memless - kill timer in destroy() (bnc#1151927). - cgroup: freezer: call cgroup_enter_frozen() with preemption disabled in ptrace_stop() (bnc#1151927). - Btrfs: fix log context list corruption after rename exchange operation (bnc#1151927). - ALSA: usb-audio: Fix incorrect size check for processing/extension units (bnc#1151927). - ALSA: usb-audio: Fix incorrect NULL check in create_yamaha_midi_quirk() (bnc#1151927). - ALSA: usb-audio: not submit urb for stopped endpoint (bnc#1151927). - ALSA: usb-audio: Fix missing error check at mixer resolution test (bnc#1151927). - net/smc: fix refcount non-blocking connect() -part 2 (bnc#1151927). - devlink: Add method for time-stamp on reporter's dump (bnc#1151927). - dpaa2-eth: free already allocated channels on probe defer (bnc#1151927). - tcp: remove redundant new line from tcp_event_sk_skb (bnc#1151927). - slip: Fix memory leak in slip_open error path (bnc#1151927). - net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules (bnc#1151927). - net/smc: fix fastopen for non-blocking connect() (bnc#1151927). - net: gemini: add missed free_netdev (bnc#1151927). - mlxsw: core: Enable devlink reload only on probe (bnc#1151927). - ipmr: Fix skb headroom in ipmr_get_route() (bnc#1151927). - devlink: disallow reload operation during device cleanup (bnc#1151927). - ax88172a: fix information leak on short answers (bnc#1151927). - scsi: core: Handle drivers which set sg_tablesize to zero (bnc#1151927). - commit a6f6081 - arm64: Enable CONFIG_IR_GPIO_CIR (boo#1156748) - commit f47e51f -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191124 released!
by Richard Brown 26 Nov '19

26 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: kernel-source (5.3.11 -> 5.3.12) === Details === ==== kernel-source ==== Version update (5.3.11 -> 5.3.12) - Linux 5.3.12 (bnc#1151927). - slcan: Fix memory leak in error path (bnc#1151927). - mmc: sdhci-of-at91: fix quirk2 overwrite (bnc#1151927). - mm/page_io.c: do not free shared swap slots (bnc#1151927). - mm/memory_hotplug: fix try_offline_node() (bnc#1151927). - mm: slub: really fix slab walking for init_on_free (bnc#1151927). - mm: hugetlb: switch to css_tryget() in hugetlb_cgroup_charge_cgroup() (bnc#1151927). - mm: memcg: switch to css_tryget() in get_mem_cgroup_from_mm() (bnc#1151927). - mm: mempolicy: fix the wrong return value and potential pages leak of mbind (bnc#1151927). - iommu/vt-d: Fix QI_DEV_IOTLB_PFSID and QI_DEV_EIOTLB_PFSID macros (bnc#1151927). - net: ethernet: dwmac-sun8i: Use the correct function in exit path (bnc#1151927). - ntp/y2038: Remove incorrect time_t truncation (bnc#1151927). - Revert "drm/i915/ehl: Update MOCS table for EHL" (bnc#1151927). - drm/i915: update rawclk also on resume (bnc#1151927). - io_uring: ensure registered buffer import returns the IO length (bnc#1151927). - ecryptfs_lookup_interpose(): lower_dentry->d_parent is not stable either (bnc#1151927). - ecryptfs_lookup_interpose(): lower_dentry->d_inode is not stable (bnc#1151927). - x86/quirks: Disable HPET on Intel Coffe Lake platforms (bnc#1151927). - i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present (bnc#1151927). - IB/hfi1: Use a common pad buffer for 9B and 16B packets (bnc#1151927). - IB/hfi1: Ensure full Gen3 speed in a Gen4 system (bnc#1151927). - IB/hfi1: TID RDMA WRITE should not return IB_WC_RNR_RETRY_EXC_ERR (bnc#1151927). - IB/hfi1: Calculate flow weight based on QP MTU for TID RDMA (bnc#1151927). - IB/hfi1: Ensure r_tid_ack is valid before building TID RDMA ACK packet (bnc#1151927). - KVM: MMU: Do not treat ZONE_DEVICE pages as being reserved (bnc#1151927). - Input: synaptics-rmi4 - destroy F54 poller workqueue when removing (bnc#1151927). - Input: synaptics-rmi4 - clear IRQ enables for F54 (bnc#1151927). - Input: synaptics-rmi4 - do not consume more data than we have (F11, F12) (bnc#1151927). - Input: synaptics-rmi4 - disable the relative position IRQ in the F12 driver (bnc#1151927). - Input: synaptics-rmi4 - fix video buffer size (bnc#1151927). - Input: ff-memless - kill timer in destroy() (bnc#1151927). - cgroup: freezer: call cgroup_enter_frozen() with preemption disabled in ptrace_stop() (bnc#1151927). - Btrfs: fix log context list corruption after rename exchange operation (bnc#1151927). - ALSA: usb-audio: Fix incorrect size check for processing/extension units (bnc#1151927). - ALSA: usb-audio: Fix incorrect NULL check in create_yamaha_midi_quirk() (bnc#1151927). - ALSA: usb-audio: not submit urb for stopped endpoint (bnc#1151927). - ALSA: usb-audio: Fix missing error check at mixer resolution test (bnc#1151927). - net/smc: fix refcount non-blocking connect() -part 2 (bnc#1151927). - devlink: Add method for time-stamp on reporter's dump (bnc#1151927). - dpaa2-eth: free already allocated channels on probe defer (bnc#1151927). - tcp: remove redundant new line from tcp_event_sk_skb (bnc#1151927). - slip: Fix memory leak in slip_open error path (bnc#1151927). - net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules (bnc#1151927). - net/smc: fix fastopen for non-blocking connect() (bnc#1151927). - net: gemini: add missed free_netdev (bnc#1151927). - mlxsw: core: Enable devlink reload only on probe (bnc#1151927). - ipmr: Fix skb headroom in ipmr_get_route() (bnc#1151927). - devlink: disallow reload operation during device cleanup (bnc#1151927). - ax88172a: fix information leak on short answers (bnc#1151927). - scsi: core: Handle drivers which set sg_tablesize to zero (bnc#1151927). - commit a6f6081 - arm64: Enable CONFIG_IR_GPIO_CIR (boo#1156748) - commit f47e51f -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191123 released!
by Richard Brown 25 Nov '19

25 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: dbus-1 kernel-firmware (20191108 -> 20191118) libidn2 (2.2.0 -> 2.3.0) open-iscsi (0.7.8.4 -> 0.7.8.6) permissions (1550_20190913 -> 1550_20191118) === Details === ==== dbus-1 ==== Subpackages: libdbus-1-3 - Fix two inconsistencies with _libexecdir, sysusers.d and tmpfiles.d are always in %{_prefix}/lib/. - Drop update-desktop-files BuildRequires, once added for mimetypes.prov which is no longer part of update-desktop-files, and dbus-1.desktop does not even handles a single mimetype. ==== kernel-firmware ==== Version update (20191108 -> 20191118) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd - Update to version 20191118 (git commit e8a0f4c93147): * rtl_nic: add firmware rtl8168fp-3 * linux-firmware: Update NXP Management Complex firmware to version 10.18.0 - Update to version 20191113 (git commit c62c3c26a5e7): * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX200 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * amdgpu: update navi14 vcn firmware * amdgpu: update navi10 vcn firmware ==== libidn2 ==== Version update (2.2.0 -> 2.3.0) - update to 2.3.0: * Update the data tables from Unicode 6.3.0 to Unicode 11.0 * Turn _idn2_punycode_encode, _idn2_punycode_decode into compat symbols ==== open-iscsi ==== Version update (0.7.8.4 -> 0.7.8.6) Subpackages: iscsiuio libopeniscsiusr0_2_0 - Merged in latest upstream (2.1.0), including more fixes for iscsiuio, and cleanup/bug-fixes of new CHAP code. This replaces open-iscsi-2.0.878-suse.tar.bz2 with open-iscsi-2.1.0-suse.tar.bz2, and it resets open-iscsi-SUSE-latest.diff.bz2 with fixes after 2.1.0-suse. Also, updated the Summary lines in the spec file that started with "iSCSI ...", since rpmlint didn't like them starting with a non-capital letter, and updated the version number for iscsiuio to match the code. - Use SPEC-file macro for systemd generator directory, since the libexec macro is changing from /usr/lib to /usr/libexec. ==== permissions ==== Version update (1550_20190913 -> 1550_20191118) Subpackages: chkstat permissions-config - Update to version 20191118: * whitelist ksysguard network helper (bsc#1151190) - Update to version 20191112: * fix syntax of paranoid profile * fix squid permissions (bsc#1093414, CVE-2019-3688) -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191123 released!
by Richard Brown 25 Nov '19

25 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: dbus-1 kernel-firmware (20191108 -> 20191118) libidn2 (2.2.0 -> 2.3.0) nfs-utils open-iscsi (0.7.8.4 -> 0.7.8.6) permissions (1550_20190913 -> 1550_20191118) === Details === ==== dbus-1 ==== Subpackages: libdbus-1-3 - Fix two inconsistencies with _libexecdir, sysusers.d and tmpfiles.d are always in %{_prefix}/lib/. - Drop update-desktop-files BuildRequires, once added for mimetypes.prov which is no longer part of update-desktop-files, and dbus-1.desktop does not even handles a single mimetype. ==== kernel-firmware ==== Version update (20191108 -> 20191118) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd - Update to version 20191118 (git commit e8a0f4c93147): * rtl_nic: add firmware rtl8168fp-3 * linux-firmware: Update NXP Management Complex firmware to version 10.18.0 - Update to version 20191113 (git commit c62c3c26a5e7): * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX200 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * amdgpu: update navi14 vcn firmware * amdgpu: update navi10 vcn firmware ==== libidn2 ==== Version update (2.2.0 -> 2.3.0) - update to 2.3.0: * Update the data tables from Unicode 6.3.0 to Unicode 11.0 * Turn _idn2_punycode_encode, _idn2_punycode_decode into compat symbols ==== nfs-utils ==== Subpackages: libnfsidmap1 nfs-client - nfs-utils.spec - don't chown when not needed. Only chown directories in /var/lib/nfs to statd if they are currently owned by root. The chown is needed for some upgrades, but if the dirs are already owned by statd, an vulnerability in statd could be escalated to root. (bsc#1157321) ==== open-iscsi ==== Version update (0.7.8.4 -> 0.7.8.6) Subpackages: iscsiuio libopeniscsiusr0_2_0 - Merged in latest upstream (2.1.0), including more fixes for iscsiuio, and cleanup/bug-fixes of new CHAP code. This replaces open-iscsi-2.0.878-suse.tar.bz2 with open-iscsi-2.1.0-suse.tar.bz2, and it resets open-iscsi-SUSE-latest.diff.bz2 with fixes after 2.1.0-suse. Also, updated the Summary lines in the spec file that started with "iSCSI ...", since rpmlint didn't like them starting with a non-capital letter, and updated the version number for iscsiuio to match the code. - Use SPEC-file macro for systemd generator directory, since the libexec macro is changing from /usr/lib to /usr/libexec. ==== permissions ==== Version update (1550_20190913 -> 1550_20191118) Subpackages: chkstat permissions-config - Update to version 20191118: * whitelist ksysguard network helper (bsc#1151190) - Update to version 20191112: * fix syntax of paranoid profile * fix squid permissions (bsc#1093414, CVE-2019-3688) -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191122 released!
by Richard Brown 23 Nov '19

23 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apparmor python-appdirs python-cffi (1.13.0 -> 1.13.2) python-pyasn1 (0.4.7 -> 0.4.8) python-pyparsing (2.4.2 -> 2.4.5) === Details === ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils perl-apparmor python3-apparmor - Properly pull in full python3 interpreter ==== python-appdirs ==== - Format with spec-cleaner ==== python-cffi ==== Version update (1.13.0 -> 1.13.2) - Update to 1.13.2: * re-release because the Linux wheels came with an attached version of libffi that was very old and buggy - Update to 1.13.1: * deprecate the way to declare in cdef() a global variable with only void *foo;. You should always use a storage class, like extern void *foo; or maybe static void *foo;. These are all equivalent for the purposes of cdef(), but the reason for deprecating the bare version is that (as far as I know) it would always be mistake in a real C header. * fix the regression RuntimeError: found a situation in which we try to build a type recursively. * fixed issue #427 where a multithreading mistake in the embedding logic initialization code would cause deadlocks on CPython 3.7. ==== python-pyasn1 ==== Version update (0.4.7 -> 0.4.8) - Update to 0.4.8: * Added ability of combining `SingleValueConstraint` and `PermittedAlphabetConstraint` objects into one for proper modeling `FROM ... EXCEPT ...` ASN.1 clause. ==== python-pyparsing ==== Version update (2.4.2 -> 2.4.5) - update to version 2.4.5: * Fixed encoding when setup.py reads README.rst to include the project long description when uploading to PyPI. A stray unicode space in README.rst prevented the source install on systems whose default encoding is not 'utf-8'. - changes from version 2.4.4: * Unresolved symbol reference in 2.4.3 release was masked by stdout buffering in unit tests, thanks for the prompt heads-up, Ned Batchelder! - changes from version 2.4.3: * Fixed a bug in ParserElement.__eq__ that would for some parsers create a recursion error at parser definition time. Thanks to Michael Clerx for the assist. (Addresses issue #123) * Fixed bug in indentedBlock where a block that ended at the end of the input string could cause pyaprsing to loop forever. Raised as part of discussion on StackOverflow with geckos. * Backports from pyparsing 3.0.0: + __diag__.enable_all_warnings() + Fixed bug in PrecededBy which caused infinite recursion, issue [#127] + support for using regex-compiled RE to construct Regex expressions -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191122 released!
by Richard Brown 23 Nov '19

23 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apparmor python-PrettyTable python-appdirs python-cffi (1.13.0 -> 1.13.2) python-psutil (5.6.3 -> 5.6.5) python-pyasn1 (0.4.7 -> 0.4.8) python-pycryptodome (3.9.0 -> 3.9.2) python-pyparsing (2.4.2 -> 2.4.5) python-pyzmq (18.1.0 -> 18.1.1) === Details === ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils perl-apparmor python3-apparmor - Properly pull in full python3 interpreter ==== python-PrettyTable ==== - Run through spec-cleaner ==== python-appdirs ==== - Format with spec-cleaner ==== python-cffi ==== Version update (1.13.0 -> 1.13.2) - Update to 1.13.2: * re-release because the Linux wheels came with an attached version of libffi that was very old and buggy - Update to 1.13.1: * deprecate the way to declare in cdef() a global variable with only void *foo;. You should always use a storage class, like extern void *foo; or maybe static void *foo;. These are all equivalent for the purposes of cdef(), but the reason for deprecating the bare version is that (as far as I know) it would always be mistake in a real C header. * fix the regression RuntimeError: found a situation in which we try to build a type recursively. * fixed issue #427 where a multithreading mistake in the embedding logic initialization code would cause deadlocks on CPython 3.7. ==== python-psutil ==== Version update (5.6.3 -> 5.6.5) - update to version 5.6.5: * Bug fixes + 1615: remove pyproject.toml as it was causing installation issues. - changes from version 5.6.4: * Enhancements + 1527: [Linux] added Process.cpu_times().iowait counter, which is the time spent waiting for blocking I/O to complete. + 1565: add PEP 517/8 build backend and requirements specification for better pip integration. (patch by Bernát Gábor) * Bug fixes + 875: [Windows] Process' cmdline(), environ() or cwd() may occasionally fail with ERROR_PARTIAL_COPY which now gets translated to AccessDenied. + 1126: [Linux] cpu_affinity() segfaults on CentOS 5 / manylinux. cpu_affinity() support for CentOS 5 was removed. + 1528: [AIX] compilation error on AIX 7.2 due to 32 vs 64 bit differences. (patch by Arnon Yaari) + 1535: 'type' and 'family' fields returned by net_connections() are not always turned into enums. + 1536: [NetBSD] process cmdline() erroneously raise ZombieProcess error if cmdline has non encodable chars. + 1546: usage percent may be rounded to 0 on Python 2. + 1552: [Windows] getloadavg() math for calculating 5 and 15 mins values is incorrect. + 1568: [Linux] use CC compiler env var if defined. + 1570: [Windows] NtWow64* syscalls fail to raise the proper error code + 1585: [OSX] calling close() (in C) on possible negative integers. (patch by Athos Ribeiro) + 1606: [SunOS] compilation fails on SunOS 5.10. (patch by vser1) ==== python-pyasn1 ==== Version update (0.4.7 -> 0.4.8) - Update to 0.4.8: * Added ability of combining `SingleValueConstraint` and `PermittedAlphabetConstraint` objects into one for proper modeling `FROM ... EXCEPT ...` ASN.1 clause. ==== python-pycryptodome ==== Version update (3.9.0 -> 3.9.2) - Update to 3.9.2 (10 November 2019): + New features * Add Python 3.8 wheels for Mac. + Resolved issues * GH#308: Avoid allocating arrays of __m128i on the stack, to cope with buggy compilers. * GH#322: Remove blanket -O3 optimization for gcc and clang, to cope with buggy compilers. * GH#337: Fix typing stubs for signatures. * GH#338: Deal with gcc installations that don't have x86intrin.h. - Update to version 3.9.1 (1 November 2019): + New features * Add Python 3.8 wheels for Linux and Windows. + Resolved issues * GH#328: minor speed-up when importing RSA. - Add export LC_ALL=en_US.UTF-8 to %build, %install and %check to fix the build on older distros (as done from Thomas Bechtold in python-pycryptodomex) ==== python-pyparsing ==== Version update (2.4.2 -> 2.4.5) - update to version 2.4.5: * Fixed encoding when setup.py reads README.rst to include the project long description when uploading to PyPI. A stray unicode space in README.rst prevented the source install on systems whose default encoding is not 'utf-8'. - changes from version 2.4.4: * Unresolved symbol reference in 2.4.3 release was masked by stdout buffering in unit tests, thanks for the prompt heads-up, Ned Batchelder! - changes from version 2.4.3: * Fixed a bug in ParserElement.__eq__ that would for some parsers create a recursion error at parser definition time. Thanks to Michael Clerx for the assist. (Addresses issue #123) * Fixed bug in indentedBlock where a block that ended at the end of the input string could cause pyaprsing to loop forever. Raised as part of discussion on StackOverflow with geckos. * Backports from pyparsing 3.0.0: + __diag__.enable_all_warnings() + Fixed bug in PrecededBy which caused infinite recursion, issue [#127] + support for using regex-compiled RE to construct Regex expressions ==== python-pyzmq ==== Version update (18.1.0 -> 18.1.1) - update to version 18.1.1: * Fix race condition when shutting down ZAP thread while events are still processing (only affects tests) * Publish wheels for Python 3.8 on all platforms * Stop publishing wheels for Python 3.4 on Windows * Sources generated with Cython 0.29.14

1 0

[opensuse-kubic] New MicroOS snapshot 20191121 released!
by Richard Brown 23 Nov '19

23 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: elfutils installation-images-MicroOS (14.443 -> 14.447) ncurses open-lldp (1.0.1+56.cb81e95 -> 1.0.1+102.4c7fcc3) openssl (1.1.1c -> 1.1.1d) openssl-1_1 (1.1.1c -> 1.1.1d) ucode-intel (20191112 -> 20191115) yast2 (4.2.30 -> 4.2.34) === Details === ==== elfutils ==== Subpackages: libasm1 libdw1 libebl-plugins libelf1 - disable-tests-with-ptrace.patch: Remove, set XFAIL_TESTS instead - dwelf_elf_e_machine_string.patch: Avoid spurious failure ==== installation-images-MicroOS ==== Version update (14.443 -> 14.447) - merge gh#openSUSE/installation-images#343 - Revert "Include KacstOne font for Persian (boo#1092920)" - Use Noto Naskh Arabic instead of KacstBook (boo#1092920) - another attempt to fix fonts - 14.447 - merge gh#openSUSE/installation-images#344 - Added linuxrc reboot_timeout option (bsc1122493) - 14.446 - merge gh#openSUSE/installation-images#342 - Include KacstOne font for Persian (boo#1092920) - 14.445 ==== ncurses ==== Subpackages: libncurses6 ncurses-utils terminfo terminfo-base - Do not add has size to linker flags of any pkg-config - Add ncurses patch 20191109 + add warning-check in tic for terminals with parm_dch vs parm_ich. + drop ich1 from rxvt-basic, Eterm and mlterm to improve compatibility with old non-curses programs -TD + reviewed st 0.8.2, updated some details -TD + use ansi+rep several places -TD + corrected tic's check for ich1 (report by Sebastian J. Bronner, cf: 20020901). - Add ncurses patch 20191102 + check parameter of set_escdelay, return ERR if negative. + check parameter of set_tabsize, return ERR if not greater than zero (report/patch by Anthony Sottile). + revise CF_ADD_LIBS macro to prepend rather than append libraries. + add "xterm-mono" to help packagers (report by Sven Joachim) -TD ==== open-lldp ==== Version update (1.0.1+56.cb81e95 -> 1.0.1+102.4c7fcc3) Subpackages: liblldp_clif1 - Update to version v1.0.1+102.4c7fcc3: * l2_packet: Guard ETH_P_LLDP define * lldp_mand: retrieve permanent mac address in get_mac() * lldp_util: use netlink to fetch mac address * lldp_util: drop get_macstr() * linux/if_link.h: Update and add bonding netlink definitions - Update to version v1.0.1+95.3168e11: * Test with newer GCC 8 and 9 versions * RPM build is broken, so skip * Place the tarball in the right place * A tarball needs to be built after bootstrap.sh for use with RPM * Added missing steps for building an RPM * Finish off with testing building the RPM * Test package installation as well * Test under multiple GCC releases * Drop requirement for Travis CI testing with Clang * Support checking build with Travis CI * vdp-netlink: account for sizes properly * qbg: avoid warning for extra parens * qbg: port name is always a valid pointer * dcbx-nl: drop run_cmd * ecp: allow for failure to create * lldp_util: allow for null ifa_addr element * lldpad: Do not enable port if already enabled * Silent -Werror=address-of-packed-member warnings. * Come up with STRNCPY_TERMINATED (#25). * vdptool: fixed compile error for getline() * Fix #23 by off by one strncpy value. * 8021qaz: Block lldptool set operations if read only mode is on * 8021qaz: Add read only option for 8021qaz module * lldp: Allow lldptool to modify optional TLV's content * 8021qaz: Print dscp2prio map * autoconf: Add systemd support in configure.ac * rpm-spec: Add vdp22 man files to lldpad.spec.in ==== openssl ==== Version update (1.1.1c -> 1.1.1d) - Update to 1.1.1d release ==== openssl-1_1 ==== Version update (1.1.1c -> 1.1.1d) Subpackages: libopenssl1_1 - Merged upstream changes to allow NULL salt values in EVP_PBE_scrypt(). * Revealed by nodejs12 during bsc#1149572. * Modified openssl-jsc-SLE-8789-backport_KDF.patch - openssl-jsc-SLE-8789-backport_KDF.patch: retain old behaviour of EVP_PBE_scrypt. When key output buffer is not provided, only check if the input parameters are in valid range and ignore passphrase/salt fields as they are only used in the actual calculation. - Update to 1.1.1d (bsc#1133925, jsc#SLE-6430) * Fixed a fork protection issue. OpenSSL 1.1.1 introduced a rewritten random number generator (RNG). This was intended to include protection in the event of a fork() system call in order to ensure that the parent and child processes did not share the same RNG state. However this protection was not being used in the default case. (bsc#1150247, CVE-2019-1549) * Compute ECC cofactors if not provided during EC_GROUP construction. Before this change, EC_GROUP_set_generator would accept order and/or cofactor as NULL. After this change, only the cofactor parameter can be NULL. (bsc#1150003, CVE-2019-1547) * Fixed a padding oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey. (bsc#1150250, CVE-2019-1563) * For built-in EC curves, ensure an EC_GROUP built from the curve name is used even when parsing explicit parameters, when loading a serialized key or calling EC_GROUP_new_from_ecpkparameters()/EC_GROUP_new_from_ecparameters(). * Early start up entropy quality from the DEVRANDOM seed source has been improved for older Linux systems. * Changed DH_check to accept parameters with order q and 2q subgroups. With order 2q subgroups the bit 0 of the private key is not secret but DH_generate_key works around that by clearing bit 0 of the private key for those. This avoids leaking bit 0 of the private key. * Significantly reduce secure memory usage by the randomness pools. * Revert the DEVRANDOM_WAIT feature for Linux systems - drop 0001-build_SYS_str_reasons-Fix-a-crash-caused-by-overlong.patch (upstream) - refresh patches * openssl-1.1.0-no-html.patch * openssl-jsc-SLE-8789-backport_KDF.patch - To avoid seperate certification of openssh server / client move the SSH KDF (Key Derivation Function) into openssl. * jsc#SLE-8789 * Sourced from commit 8d76481b189b7195ef932e0fb8f0e23ab0120771#diff-a9562bc75317360a2e6b8b0748956e34 in openssl master (introduce the SSH KDF) and commit 5a285addbf39f91d567f95f04b2b41764127950d in openssl master (backport EVP/KDF API framework) * added openssl-jsc-SLE-8789-backport_KDF.patch ==== ucode-intel ==== Version update (20191112 -> 20191115) - Updated to 20191115 release (bsc#1157004) - Processor Identifier Version Products - Model Stepping F-MO-S/PI Old->New - ---- updated platforms ------------------------------------ - SKL-U/Y D0 6-4e-3/c0 000000d4->000000d6 Core Gen6 Mobile - SKL-U23e K1 6-4e-3/c0 000000d4->000000d6 Core Gen6 Mobile - SKL-H/S/E3 N0/R0/S0 6-5e-3/36 000000d4->000000d6 Core Gen6 - AML-Y22 H0 6-8e-9/10 000000c6->000000ca Core Gen8 Mobile - KBL-U/Y H0 6-8e-9/c0 000000c6->000000ca Core Gen7 Mobile - KBL-U23e J1 6-8e-9/c0 000000c6->000000ca Core Gen7 Mobile - CFL-U43e D0 6-8e-a/c0 000000c6->000000ca Core Gen8 Mobile - KBL-R U Y0 6-8e-a/c0 000000c6->000000ca Core Gen8 Mobile - WHL-U W0 6-8e-b/d0 000000c6->000000ca Core Gen8 Mobile - AML-Y42 V0 6-8e-c/94 000000c6->000000ca Core Gen10 Mobile - WHL-U V0 6-8e-c/94 000000c6->000000ca Core Gen8 Mobile - CML-U42 V0 6-8e-c/94 000000c6->000000ca Core Gen10 Mobile - KBL-G/H/S/X/E3 B0 6-9e-9/2a 000000c6->000000ca Core Gen7 Desktop, Mobile, Xeon E3 v6 - CFL-H/S/E3 U0 6-9e-a/22 000000c6->000000ca Core Gen8 Desktop, Mobile, Xeon E - CFL-S B0 6-9e-b/02 000000c6->000000ca Core Gen8 - CFL-S P0 6-9e-c/22 000000c6->000000ca Core Gen9 Desktop - CFL-H/S/E3 R0 6-9e-d/22 000000c6->000000ca Core Gen9 Desktop, Mobile, Xeon E - CML-U62 A0 6-a6-0/80 000000c6->000000ca Core Gen10 Mobile - Updated to 20191113 release - Processor Identifier Version Products - Model Stepping F-MO-S/PI Old->New - ---- updated platforms ------------------------------------ - CFL-S P0 6-9e-c/22 000000a2->000000c6 Core Gen9 Desktop ==== yast2 ==== Version update (4.2.30 -> 4.2.34) - Fix crash in upgrade caused by wrong parameter to snapper (bsc#1156819) - 4.2.34 - Use new snapper machine-readable output to retrieve snapshots information (related to bsc#1149322). - 4.2.33 - Add linuxrc option "reboot_timeout" to configure the timeout before reboot (bsc#1122493) - 4.2.32 - Network: During an installation, check which backend is in use when Systemd is running. (bsc#1151291) - 4.2.31 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191121 released!
by Richard Brown 23 Nov '19

23 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: elfutils haproxy (2.0.7+git0.1909aa1e -> 2.0.9+git6.26b7b800) installation-images-MicroOS (14.443 -> 14.447) ncurses open-lldp (1.0.1+56.cb81e95 -> 1.0.1+102.4c7fcc3) openssl (1.1.1c -> 1.1.1d) openssl-1_1 (1.1.1c -> 1.1.1d) ucode-intel (20191112 -> 20191115) yast2 (4.2.30 -> 4.2.34) === Details === ==== elfutils ==== Subpackages: libasm1 libdw1 libebl-plugins libelf1 - disable-tests-with-ptrace.patch: Remove, set XFAIL_TESTS instead - dwelf_elf_e_machine_string.patch: Avoid spurious failure ==== haproxy ==== Version update (2.0.7+git0.1909aa1e -> 2.0.9+git6.26b7b800) - Update to version 2.0.9+git6.26b7b800: * BUG/MINOR: ssl: fix crt-list neg filter for openssl < 1.1.1 * BUG/MINOR: peers: Wrong null "server_name" data field handling. * MINOR: peers: Add debugging information to "show peers". * MINOR: peers: Add TX/RX heartbeat counters. * MINOR: peers: Alway show the table info for disconnected peers. - Update to version 2.0.9+git1.caf02113: * BUG/MINOR: init: fix set-dumpable when using uid/gid - Update to version 2.0.9+git0.efac87ee: * [RELEASE] Released version 2.0.9 * BUG/MINOR: mux-h1: Don't set CS_FL_EOS on a read0 when receiving data to pipe * BUG/MEDIUM: filters: Don't call TCP callbacks for HTX streams * BUG/MINOR: log: limit the size of the startup-logs * BUILD: contrib/da: remove an "unused" warning * MINOR: memory: also poison the area on freeing * CLEANUP: session: slightly simplify idle connection cleanup logic * BUG/MEDIUM: Make sure we leave the session list in session_free(). * BUG/MEDIUM: listeners: always pause a listener on out-of-resource condition * BUG/MINOR: queue/threads: make the queue unlinking atomic * DOC: management: fix typo on "cache_lookups" stats output * DOC: management: document cache_hits and cache_lookups in the CSV format * DOC: management: document reuse and connect counters in the CSV format * BUG: dns: timeout resolve not applied for valid resolutions * BUG/MINOR: action: do-resolve now use cached response * BUG/MEDIUM: stream: Be sure to release allocated captures for TCP streams * MINOR: doc: http-reuse connection pool fix * BUG/MEDIUM: stream: Be sure to support splicing at the mux level to enable it * BUG/MEDIUM: mux-h1: Disable splicing for chunked messages * BUG/MEDIUM: mux-h2: immediately report connection errors on streams * BUG/MEDIUM: mux-h2: immediately remove a failed connection from the idle list * BUG/MEDIUM: mux-h2: report no available stream on a connection having errors * BUG/MINOR: config: Update cookie domain warn to RFC6265 * BUG/MEDIUM: servers: Only set SF_SRV_REUSED if the connection if fully ready. * BUG/MEDIUM: stream_interface: Only use SI_ST_RDY when the mux is ready. * MINOR: mux: Add a new method to get informations about a mux. * BUG/MINOR: spoe: fix off-by-one length in UUID format string * BUG/MAJOR: stream-int: Don't receive data from mux until SI_ST_EST is reached * BUG/MINOR: mux-h2: Don't pretend mux buffers aren't full anymore if nothing sent * BUG/MINOR: cli: don't call the kw->io_release if kw->parse failed * MINOR: tcp: avoid confusion in time parsing init * BUG/MINOR: mux-h2: do not emit logs on backend connections * MINOR: config: warn on presence of "\n" in header values/replacements - Update to version 2.0.8+git0.60e6020c: * [RELEASE] Released version 2.0.8 * BUG/MEDIUM: pattern: make the pattern LRU cache thread-local and lockless * BUG/MINOR: stick-table: fix an incorrect 32 to 64 bit key conversion * BUG/MINOR: ssl: fix memcpy overlap without consequences. * BUG/MEDIUM: http: unbreak redirects in legacy mode * BUG/MINOR: mux-h2: also make sure blocked legacy connections may expire * BUG/MINOR: sample: Make the `field` converter compatible with `-m found` * BUG/MINOR: cache: alloc shctx after check config * BUG/MINOR: stick-table: Never exceed (MAX_SESS_STKCTR-1) when fetching a stkctr * BUG/MINOR: ssl: Fix fd leak on error path when a TLS ticket keys file is parsed * BUG/MINOR: mworker/cli: reload fail with inherited FD * BUG/MEDIUM: ssl: 'tune.ssl.default-dh-param' value ignored with openssl > 1.1.1 * CLEANUP: bind: handle warning label on bind keywords parsing. * CLEANUP: ssl: make ssl_sock_load_dh_params handle errcode/warn * CLEANUP: ssl: make ssl_sock_put_ckch_into_ctx handle errcode/warn * CLEANUP: ssl: make ssl_sock_load_cert*() return real error codes * REGTEST: mcli/mcli_show_info: launch a 'show info' on the master CLI * BUG/MEDIUM: mux_pt: Only call the wake emthod if nobody subscribed to receive. * BUG/MEDIUM: mux_pt: Don't destroy the connection if we have a stream attached. * Revert e8826ded5fea3593d89da2be5c2d81c522070995. * BUG/MAJOR: idle conns: schedule the cleanup task on the correct threads * BUG/MEDIUM: mux_pt: Make sure we don't have a conn_stream before freeing. * BUG/MINOR: tcp: Don't alter counters returned by tcp info fetchers * BUG/MINOR: mworker/ssl: close openssl FDs unconditionally * BUG/MINOR: http-htx: Properly set htx flags on error files to support keep-alive * MINOR: version: make the version strings variables, not constants * BUG/MINOR: WURFL: fix send_log() function arguments * BUG/MINOR: mux-h1: Capture ignored parsing errors * BUG/MINOR: mux-h1: Mark the output buffer as full when the xfer is interrupted * BUG/MINOR: chunk: Fix tests on the chunk size in functions copying data * BUG/MEDIUM: htx: Catch chunk_memcat() failures when HTX data are formatted to h1 * BUILD: ssl: wrong #ifdef for SSL engines code * BUG/MINOR: ssl: abort on sni_keytypes allocation failure * BUG/MINOR: ssl: free the sni_keytype nodes * BUG/MINOR: ssl: abort on sni allocation failure * BUG/MEDIUM: applet: always check a fast running applet's activity before killing * MINOR: stats: mention in the help message support for "json" and "typed" * DOC: fix typo in Prometheus exporter doc * DOC: clarify some points around http-send-name-header's behavior * BUG/MEDIUM: cache: make sure not to cache requests with absolute-uri * BUG/MINOR: peers: crash on reload without local peer. * BUG/MEDIUM: mux-h2: do not enforce timeout on long connections * BUILD: ebtree: make eb_is_empty() and eb_is_dup() take a const * MINOR: mux-h2: add a per-connection list of blocked streams * BUG/MINOR: action: do-resolve does not yield on requests with body * BUG/MEDIUM: lua: Store stick tables into the sample's `t` field * BUG/MINOR: lua: Properly initialize the buffer's fields for string samples in hlua_lua2(smp|arg) * BUG/MINOR: stats: Add a missing break in a switch statement ==== installation-images-MicroOS ==== Version update (14.443 -> 14.447) - merge gh#openSUSE/installation-images#343 - Revert "Include KacstOne font for Persian (boo#1092920)" - Use Noto Naskh Arabic instead of KacstBook (boo#1092920) - another attempt to fix fonts - 14.447 - merge gh#openSUSE/installation-images#344 - Added linuxrc reboot_timeout option (bsc1122493) - 14.446 - merge gh#openSUSE/installation-images#342 - Include KacstOne font for Persian (boo#1092920) - 14.445 ==== ncurses ==== Subpackages: libncurses6 ncurses-utils terminfo terminfo-base - Do not add has size to linker flags of any pkg-config - Add ncurses patch 20191109 + add warning-check in tic for terminals with parm_dch vs parm_ich. + drop ich1 from rxvt-basic, Eterm and mlterm to improve compatibility with old non-curses programs -TD + reviewed st 0.8.2, updated some details -TD + use ansi+rep several places -TD + corrected tic's check for ich1 (report by Sebastian J. Bronner, cf: 20020901). - Add ncurses patch 20191102 + check parameter of set_escdelay, return ERR if negative. + check parameter of set_tabsize, return ERR if not greater than zero (report/patch by Anthony Sottile). + revise CF_ADD_LIBS macro to prepend rather than append libraries. + add "xterm-mono" to help packagers (report by Sven Joachim) -TD ==== open-lldp ==== Version update (1.0.1+56.cb81e95 -> 1.0.1+102.4c7fcc3) Subpackages: liblldp_clif1 - Update to version v1.0.1+102.4c7fcc3: * l2_packet: Guard ETH_P_LLDP define * lldp_mand: retrieve permanent mac address in get_mac() * lldp_util: use netlink to fetch mac address * lldp_util: drop get_macstr() * linux/if_link.h: Update and add bonding netlink definitions - Update to version v1.0.1+95.3168e11: * Test with newer GCC 8 and 9 versions * RPM build is broken, so skip * Place the tarball in the right place * A tarball needs to be built after bootstrap.sh for use with RPM * Added missing steps for building an RPM * Finish off with testing building the RPM * Test package installation as well * Test under multiple GCC releases * Drop requirement for Travis CI testing with Clang * Support checking build with Travis CI * vdp-netlink: account for sizes properly * qbg: avoid warning for extra parens * qbg: port name is always a valid pointer * dcbx-nl: drop run_cmd * ecp: allow for failure to create * lldp_util: allow for null ifa_addr element * lldpad: Do not enable port if already enabled * Silent -Werror=address-of-packed-member warnings. * Come up with STRNCPY_TERMINATED (#25). * vdptool: fixed compile error for getline() * Fix #23 by off by one strncpy value. * 8021qaz: Block lldptool set operations if read only mode is on * 8021qaz: Add read only option for 8021qaz module * lldp: Allow lldptool to modify optional TLV's content * 8021qaz: Print dscp2prio map * autoconf: Add systemd support in configure.ac * rpm-spec: Add vdp22 man files to lldpad.spec.in ==== openssl ==== Version update (1.1.1c -> 1.1.1d) - Update to 1.1.1d release ==== openssl-1_1 ==== Version update (1.1.1c -> 1.1.1d) Subpackages: libopenssl1_1 - Merged upstream changes to allow NULL salt values in EVP_PBE_scrypt(). * Revealed by nodejs12 during bsc#1149572. * Modified openssl-jsc-SLE-8789-backport_KDF.patch - openssl-jsc-SLE-8789-backport_KDF.patch: retain old behaviour of EVP_PBE_scrypt. When key output buffer is not provided, only check if the input parameters are in valid range and ignore passphrase/salt fields as they are only used in the actual calculation. - Update to 1.1.1d (bsc#1133925, jsc#SLE-6430) * Fixed a fork protection issue. OpenSSL 1.1.1 introduced a rewritten random number generator (RNG). This was intended to include protection in the event of a fork() system call in order to ensure that the parent and child processes did not share the same RNG state. However this protection was not being used in the default case. (bsc#1150247, CVE-2019-1549) * Compute ECC cofactors if not provided during EC_GROUP construction. Before this change, EC_GROUP_set_generator would accept order and/or cofactor as NULL. After this change, only the cofactor parameter can be NULL. (bsc#1150003, CVE-2019-1547) * Fixed a padding oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey. (bsc#1150250, CVE-2019-1563) * For built-in EC curves, ensure an EC_GROUP built from the curve name is used even when parsing explicit parameters, when loading a serialized key or calling EC_GROUP_new_from_ecpkparameters()/EC_GROUP_new_from_ecparameters(). * Early start up entropy quality from the DEVRANDOM seed source has been improved for older Linux systems. * Changed DH_check to accept parameters with order q and 2q subgroups. With order 2q subgroups the bit 0 of the private key is not secret but DH_generate_key works around that by clearing bit 0 of the private key for those. This avoids leaking bit 0 of the private key. * Significantly reduce secure memory usage by the randomness pools. * Revert the DEVRANDOM_WAIT feature for Linux systems - drop 0001-build_SYS_str_reasons-Fix-a-crash-caused-by-overlong.patch (upstream) - refresh patches * openssl-1.1.0-no-html.patch * openssl-jsc-SLE-8789-backport_KDF.patch - To avoid seperate certification of openssh server / client move the SSH KDF (Key Derivation Function) into openssl. * jsc#SLE-8789 * Sourced from commit 8d76481b189b7195ef932e0fb8f0e23ab0120771#diff-a9562bc75317360a2e6b8b0748956e34 in openssl master (introduce the SSH KDF) and commit 5a285addbf39f91d567f95f04b2b41764127950d in openssl master (backport EVP/KDF API framework) * added openssl-jsc-SLE-8789-backport_KDF.patch ==== ucode-intel ==== Version update (20191112 -> 20191115) - Updated to 20191115 release (bsc#1157004) - Processor Identifier Version Products - Model Stepping F-MO-S/PI Old->New - ---- updated platforms ------------------------------------ - SKL-U/Y D0 6-4e-3/c0 000000d4->000000d6 Core Gen6 Mobile - SKL-U23e K1 6-4e-3/c0 000000d4->000000d6 Core Gen6 Mobile - SKL-H/S/E3 N0/R0/S0 6-5e-3/36 000000d4->000000d6 Core Gen6 - AML-Y22 H0 6-8e-9/10 000000c6->000000ca Core Gen8 Mobile - KBL-U/Y H0 6-8e-9/c0 000000c6->000000ca Core Gen7 Mobile - KBL-U23e J1 6-8e-9/c0 000000c6->000000ca Core Gen7 Mobile - CFL-U43e D0 6-8e-a/c0 000000c6->000000ca Core Gen8 Mobile - KBL-R U Y0 6-8e-a/c0 000000c6->000000ca Core Gen8 Mobile - WHL-U W0 6-8e-b/d0 000000c6->000000ca Core Gen8 Mobile - AML-Y42 V0 6-8e-c/94 000000c6->000000ca Core Gen10 Mobile - WHL-U V0 6-8e-c/94 000000c6->000000ca Core Gen8 Mobile - CML-U42 V0 6-8e-c/94 000000c6->000000ca Core Gen10 Mobile - KBL-G/H/S/X/E3 B0 6-9e-9/2a 000000c6->000000ca Core Gen7 Desktop, Mobile, Xeon E3 v6 - CFL-H/S/E3 U0 6-9e-a/22 000000c6->000000ca Core Gen8 Desktop, Mobile, Xeon E - CFL-S B0 6-9e-b/02 000000c6->000000ca Core Gen8 - CFL-S P0 6-9e-c/22 000000c6->000000ca Core Gen9 Desktop - CFL-H/S/E3 R0 6-9e-d/22 000000c6->000000ca Core Gen9 Desktop, Mobile, Xeon E - CML-U62 A0 6-a6-0/80 000000c6->000000ca Core Gen10 Mobile - Updated to 20191113 release - Processor Identifier Version Products - Model Stepping F-MO-S/PI Old->New - ---- updated platforms ------------------------------------ - CFL-S P0 6-9e-c/22 000000a2->000000c6 Core Gen9 Desktop ==== yast2 ==== Version update (4.2.30 -> 4.2.34) - Fix crash in upgrade caused by wrong parameter to snapper (bsc#1156819) - 4.2.34 - Use new snapper machine-readable output to retrieve snapshots information (related to bsc#1149322). - 4.2.33 - Add linuxrc option "reboot_timeout" to configure the timeout before reboot (bsc#1122493) - 4.2.32 - Network: During an installation, check which backend is in use when Systemd is running. (bsc#1151291) - 4.2.31 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New ARM MicroOS snapshot 20191119 released!
by Guillaume Gardet 21 Nov '19

21 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apparmor boost-base btrfsprogs (5.2.2 -> 5.3.1) kernel-firmware (20191023 -> 20191108) podman (1.6.1 -> 1.6.2) read-only-root-fs (1.0+git20190607.11f8587 -> 1.0+git20191112.42add9e) rpm-config-SUSE (0.g42 -> 0.g45) === Details === ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-profiles apparmor-utils - add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657) ==== boost-base ==== - Make sure openmpi-macros-devel is not required for base flavor -- consolidate build_mpi/mpi macro into just one. - Remove BuildArch guards, no longer relevant since SuSE 11.2 ==== btrfsprogs ==== Version update (5.2.2 -> 5.3.1) - Update to 5.3.1: * libbtrfs: fix link breakage due to missing symbols - Updaet to 5.3: * mkfs: * new option to specify checksum algorithm (only crc32c) * fix xattr enumeration * dump-tree: BFS (breadth-first) traversal now default * libbtrfsutil: remove stale BTRFS_DEV_REPLACE_ITEM_STATE_x defines * ci: add support for gitlab * other: * preparatory work for more checksum algorithms * docs update * switch to docbook5 backend for asciidoc * fix build on uClibc due to missing backtrace() * lots of printf format fixups ==== kernel-firmware ==== Version update (20191023 -> 20191108) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20191108 (git commit f1100ddf581f): * i915: Add HuC firmware v7.0.3 for TGL * i915: Add GuC firmware v35.2.0 for TGL * i915: Add HuC firmware v9.0.0 for EHL * i915: Add GuC firmware v33.0.4 for EHL * rtw88: RTL8723D: add firmware file v48 * qed: Add firmware 8.40.33.0 * amdgpu: add new navi14 wks gfx firmware for 19.30 * amdgpu: update navi14 firmware for 19.30 * amdgpu: update raven firmware for 19.30 * linux-firmware: Add firmware file for Intel Bluetooth AX201 ==== podman ==== Version update (1.6.1 -> 1.6.2) - Add container-start-fix.patch to correct output of container-start to show container_name, not _id. - Update podman to v1.6.2 * Features - Added a --runtime flag to podman system migrate to allow the OCI runtime for all containers to be reset, to ease transition to the crun runtime on CGroups V2 systems until runc gains full support - The podman rm command can now remove containers in broken states which previously could not be removed - The podman info command, when run without root, now shows information on UID and GID mappings in the rootless user namespace - Added podman build --squash-all flag, which squashes all layers (including those of the base image) into one layer - The --systemd flag to podman run and podman create now accepts a string argument and allows a new value, always, which forces systemd support without checking if the the container entrypoint is systemd * Bugfixes - Fixed a bug where the podman top command did not work on systems using CGroups V2 (#4192) - Fixed a bug where rootless Podman could double-close a file, leading to a panic - Fixed a bug where rootless Podman could fail to retrieve some containers while refreshing the state - Fixed a bug where podman start --attach --sig-proxy=false would still proxy signals into the container - Fixed a bug where Podman would unconditionally use a non-default path for authentication credentials (auth.json), breaking podman login integration with skopeo and other tools using the containers/image library - Fixed a bug where podman ps --format=json and podman images - -format=json would display null when no results were returned, instead of valid JSON - Fixed a bug where podman build --squash was incorrectly squashing all layers into one, instead of only new layers - Fixed a bug where rootless Podman would allow volumes with options to be mounted (mounting volumes requires root), creating an inconsistent state where volumes reported as mounted but were not (#4248) - Fixed a bug where volumes which failed to unmount could not be removed (#4247) - Fixed a bug where Podman incorrectly handled some errors relating to unmounted or missing containers in containers/storage - Fixed a bug where podman stats was broken on systems running CGroups V2 when run rootless (#4268) - Fixed a bug where the podman start command would print the short container ID, instead of the full ID - Fixed a bug where containers created with an OCI runtime that is no longer available (uninstalled or removed from the config file) would not appear in podman ps and could not be removed via podman rm - Fixed a bug where containers restored via podman container restore --import would retain the CGroup path of the original container, even if their container ID changed; thus, multiple containers created from the same checkpoint would all share the same CGroup * Misc - The default PID limit for containers is now set to 4096. It can be adjusted back to the old default (unlimited) by passing - -pids-limit 0 to podman create and podman run - The podman start --attach command now automatically attaches STDIN if the container was created with -i - The podman network create command now validates network names using the same regular expression as container and pod names - The --systemd flag to podman run and podman create will now only enable systemd mode when the binary being run inside the container is /sbin/init, /usr/sbin/init, or ends in systemd (previously detected any path ending in init or systemd) - Updated vendored Buildah to 1.11.3 - Updated vendored containers/storage to 1.13.5 - Updated vendored containers/image to 4.0.1 ==== read-only-root-fs ==== Version update (1.0+git20190607.11f8587 -> 1.0+git20191112.42add9e) - Update to version 1.0+git20191112.42add9e: * Add RequiresMountsFor=/etc override for systemd-udevd.service ==== rpm-config-SUSE ==== Version update (0.g42 -> 0.g45) - Update to version 0.g45: * Use -flto=auto for _lto_cflags for now - Update to version 0.g44: * Sync specfile changes * Add _lto_cflags to suse_macros for now -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New ARM Kubic snapshot 20191119 released!
by Guillaume Gardet 21 Nov '19

21 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=3&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apparmor boost-base btrfsprogs (5.2.2 -> 5.3.1) hello-kubic (1.1 -> 1.2) kernel-firmware (20191023 -> 20191108) podman (1.6.1 -> 1.6.2) read-only-root-fs (1.0+git20190607.11f8587 -> 1.0+git20191112.42add9e) rook (1.1.1+git0.g9a2641a6 -> 1.1.6+git0.g91d6f635) rpm-config-SUSE (0.g42 -> 0.g45) weave (2.5.2 -> 2.6.0) === Details === ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-profiles apparmor-utils - add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657) ==== boost-base ==== - Make sure openmpi-macros-devel is not required for base flavor -- consolidate build_mpi/mpi macro into just one. - Remove BuildArch guards, no longer relevant since SuSE 11.2 ==== btrfsprogs ==== Version update (5.2.2 -> 5.3.1) - Update to 5.3.1: * libbtrfs: fix link breakage due to missing symbols - Updaet to 5.3: * mkfs: * new option to specify checksum algorithm (only crc32c) * fix xattr enumeration * dump-tree: BFS (breadth-first) traversal now default * libbtrfsutil: remove stale BTRFS_DEV_REPLACE_ITEM_STATE_x defines * ci: add support for gitlab * other: * preparatory work for more checksum algorithms * docs update * switch to docbook5 backend for asciidoc * fix build on uClibc due to missing backtrace() * lots of printf format fixups ==== hello-kubic ==== Version update (1.1 -> 1.2) - Update to version 1.2 - use official openSUSE container image ==== kernel-firmware ==== Version update (20191023 -> 20191108) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20191108 (git commit f1100ddf581f): * i915: Add HuC firmware v7.0.3 for TGL * i915: Add GuC firmware v35.2.0 for TGL * i915: Add HuC firmware v9.0.0 for EHL * i915: Add GuC firmware v33.0.4 for EHL * rtw88: RTL8723D: add firmware file v48 * qed: Add firmware 8.40.33.0 * amdgpu: add new navi14 wks gfx firmware for 19.30 * amdgpu: update navi14 firmware for 19.30 * amdgpu: update raven firmware for 19.30 * linux-firmware: Add firmware file for Intel Bluetooth AX201 ==== podman ==== Version update (1.6.1 -> 1.6.2) - Add container-start-fix.patch to correct output of container-start to show container_name, not _id. - Update podman to v1.6.2 * Features - Added a --runtime flag to podman system migrate to allow the OCI runtime for all containers to be reset, to ease transition to the crun runtime on CGroups V2 systems until runc gains full support - The podman rm command can now remove containers in broken states which previously could not be removed - The podman info command, when run without root, now shows information on UID and GID mappings in the rootless user namespace - Added podman build --squash-all flag, which squashes all layers (including those of the base image) into one layer - The --systemd flag to podman run and podman create now accepts a string argument and allows a new value, always, which forces systemd support without checking if the the container entrypoint is systemd * Bugfixes - Fixed a bug where the podman top command did not work on systems using CGroups V2 (#4192) - Fixed a bug where rootless Podman could double-close a file, leading to a panic - Fixed a bug where rootless Podman could fail to retrieve some containers while refreshing the state - Fixed a bug where podman start --attach --sig-proxy=false would still proxy signals into the container - Fixed a bug where Podman would unconditionally use a non-default path for authentication credentials (auth.json), breaking podman login integration with skopeo and other tools using the containers/image library - Fixed a bug where podman ps --format=json and podman images - -format=json would display null when no results were returned, instead of valid JSON - Fixed a bug where podman build --squash was incorrectly squashing all layers into one, instead of only new layers - Fixed a bug where rootless Podman would allow volumes with options to be mounted (mounting volumes requires root), creating an inconsistent state where volumes reported as mounted but were not (#4248) - Fixed a bug where volumes which failed to unmount could not be removed (#4247) - Fixed a bug where Podman incorrectly handled some errors relating to unmounted or missing containers in containers/storage - Fixed a bug where podman stats was broken on systems running CGroups V2 when run rootless (#4268) - Fixed a bug where the podman start command would print the short container ID, instead of the full ID - Fixed a bug where containers created with an OCI runtime that is no longer available (uninstalled or removed from the config file) would not appear in podman ps and could not be removed via podman rm - Fixed a bug where containers restored via podman container restore --import would retain the CGroup path of the original container, even if their container ID changed; thus, multiple containers created from the same checkpoint would all share the same CGroup * Misc - The default PID limit for containers is now set to 4096. It can be adjusted back to the old default (unlimited) by passing - -pids-limit 0 to podman create and podman run - The podman start --attach command now automatically attaches STDIN if the container was created with -i - The podman network create command now validates network names using the same regular expression as container and pod names - The --systemd flag to podman run and podman create will now only enable systemd mode when the binary being run inside the container is /sbin/init, /usr/sbin/init, or ends in systemd (previously detected any path ending in init or systemd) - Updated vendored Buildah to 1.11.3 - Updated vendored containers/storage to 1.13.5 - Updated vendored containers/image to 4.0.1 ==== read-only-root-fs ==== Version update (1.0+git20190607.11f8587 -> 1.0+git20191112.42add9e) - Update to version 1.0+git20191112.42add9e: * Add RequiresMountsFor=/etc override for systemd-udevd.service ==== rook ==== Version update (1.1.1+git0.g9a2641a6 -> 1.1.6+git0.g91d6f635) - Update rook to v1.1.6: * Flex driver should not allow attach before detach on a different node (#3582) * Properly set the ceph-mgr annotations (#4195) * Only trigger an orchestration if the cluster CR changed (#4252) * Fix setting rbdGrpcMetricsPort in the helm chart (#4202) * Document all helm chart settings (#4202) * Support all layers of CRUSH map with node labels (#4236) * Skip orchestration restart on device config map update for osd on pvc (#4124) * Deduplicate tolerations collected for the drain canary pods (#4220) * Role bindings are missing for pod security policies (#3851) * Continue with orchestration if a single mon pod fails to start (#4146) * OSDs cannot call 'restorecon' when selinux is enabled (#4214) * Use the rook image for drain canary pods (#4213) * Allow setting of osd prepare resource limits (#4182) * Documentation for object bucket provisioning (#3882) - Update rook to v1.1.4: * OSD config overrides were ignored for some upgraded OSDs (#4161) * Enable restoring a cluster after disaster recovery (#4021) * Enable upgrade of OSDs configured on PVCs (#3996) * Automatically removing OSDs requires setting: removeOSDsIfOutAndSafeToRemove(#4116) * Rework csi keys and secrets to use minimal privileges (#4086) * Expose OSD prepare pod resource limits (#4083) * Minimum K8s version for running OSDs on PVCs is 1.13 (#4009) * Add 'rgw.buckets.non-ec' to list of RGW metadataPools (#4087) * Hide wrong error for clusterdisruption controller (#4094) * Multiple integration test fixes to improve CI stability (#4098) * Detect mount fstype more accurately in the flex driver (#4109) * Do not override mgr annotations (#4110) * Add OSDs to proper buckets in crush hierarchy with topology awareness (#4099) * More robust removal of cluster finalizer (#4090) * Take activeStandby into account for the CephFileSystem disruption budget (#4075) * Update the CSI CephFS registration directory name (#4070) * Fix incorrect Ceph CSI doc links (#4081) * Remove decimal places for osdMemoryTargetValue monitoring setting (#4046) * Relax pre-requisites for external cluster to allow connections to Luminous (#4025) * Avoid nodes getting stuck in OrchestrationStatusStarting during OSD config (#3817) * Make metrics and liveness port configurable (#4005) * Correct system namespace for CSI driver settings during upgrade (#4040) - Update csi-dummy-images.patch - Update csi-template-paths.patch - Update 0001-bsc-1152690-ceph-csi-Driver-will-fail-with-error.patch ==== rpm-config-SUSE ==== Version update (0.g42 -> 0.g45) - Update to version 0.g45: * Use -flto=auto for _lto_cflags for now - Update to version 0.g44: * Sync specfile changes * Add _lto_cflags to suse_macros for now ==== weave ==== Version update (2.5.2 -> 2.6.0) - Update weave to 2.6.0 - Fix a race condition in Kubernetes addon when reclaiming IP addresses after node deletion #3724, #3716 - Buffer events so Docker won't drop them, and Weave Net can clean up after dead containers #3432, #3705 - Weave reconnect occasionally fails after network interface disconnect #3666, #3669, #3676 - Ingress NetworkPolicy would accepts all traffic when specifying both IPBlock and port #3653, #3654 - Support both podSelector and namespaceSelector in NetworkPolicy #3312, #3647 - Only add default-drop egress rule if network policies are in use #3639 - Manifests use 'apps/v1' rather than deprecated 'apps/v1beta1' #3660 - Avoid Weave Net pods being evicted by setting priorityClassName: system-node-critical #3697 - Manifests use recommended DNS policy ClusterFirstWithHostNet #3692 - Weave Net now tolerates 'NoExecute' taint #3655 - Allow extra arguments to NetworkPolicy controller to be set in an environment variable #3683 - Stop reporting a failure to connect to self #3454, #3585 - Minor reduction in log noise when reclaiming IPs #3710 - Update weave.yaml for kubernetes 1.16 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191119 released!
by Richard Brown 20 Nov '19

20 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: boost-base === Details === ==== boost-base ==== Subpackages: boost-license1_71_0 libboost_thread1_71_0 - Make sure openmpi-macros-devel is not required for base flavor -- consolidate build_mpi/mpi macro into just one. - Remove BuildArch guards, no longer relevant since SuSE 11.2 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191119 released!
by Richard Brown 20 Nov '19

20 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: boost-base === Details === ==== boost-base ==== Subpackages: boost-license1_71_0 libboost_thread1_71_0 - Make sure openmpi-macros-devel is not required for base flavor -- consolidate build_mpi/mpi macro into just one. - Remove BuildArch guards, no longer relevant since SuSE 11.2 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191118 released!
by Richard Brown 20 Nov '19

20 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: c-ares (1.15.0~20191108 -> 1.15.0+20191108) conmon (2.0.2 -> 2.0.3) curl kdump kernel-firmware (20191023 -> 20191108) libselinux libselinux-bindings libssh (0.9.0 -> 0.9.2) openssh patterns-microos read-only-root-fs (1.0+git20190607.11f8587 -> 1.0+git20191112.42add9e) rpm-config-SUSE (0.g44 -> 0.g45) systemd ucode-intel (20190918 -> 20191112) xen (4.13.0_01 -> 4.13.0_02) === Details === ==== c-ares ==== Version update (1.15.0~20191108 -> 1.15.0+20191108) - Fix version number of the snapshot to not be downgrade: bsc#1156601 ==== conmon ==== Version update (2.0.2 -> 2.0.3) - Add log level trace - Separate handling of log reopen events and terminal resize events ==== curl ==== Subpackages: libcurl4 - Fix segfault in zypper ref: [bsc#1156481] * remove_handle: clear expire timers after multi_done() * Add patch curl-expire-clear.patch ==== kdump ==== - add kdump-savedump-search-also-for-vmlinux.xz.patch (bnc#1155921) ==== kernel-firmware ==== Version update (20191023 -> 20191108) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd - Update to version 20191108 (git commit f1100ddf581f): * i915: Add HuC firmware v7.0.3 for TGL * i915: Add GuC firmware v35.2.0 for TGL * i915: Add HuC firmware v9.0.0 for EHL * i915: Add GuC firmware v33.0.4 for EHL * rtw88: RTL8723D: add firmware file v48 * qed: Add firmware 8.40.33.0 * amdgpu: add new navi14 wks gfx firmware for 19.30 * amdgpu: update navi14 firmware for 19.30 * amdgpu: update raven firmware for 19.30 * linux-firmware: Add firmware file for Intel Bluetooth AX201 ==== libselinux ==== Subpackages: libselinux1 selinux-tools - Added Use-Python-distutils-to-install-SELinux.patch to use Python's distutils instead of building and installing python bindings manually ==== libselinux-bindings ==== - Add python3.8-compat.patch which makes build possible even with Python 3.8, which doesn?t automatically adds -lpython<ver> ==== libssh ==== Version update (0.9.0 -> 0.9.2) Subpackages: libssh-config libssh4 - Update to version 0.9.2 * Fixed libssh-config.cmake * Fixed issues with rsa algorithm negotiation (T191) * Fixed detection of OpenSSL ed25519 support (T197) - Update to version 0.9.1 * Added support for Ed25519 via OpenSSL * Added support for X25519 via OpenSSL * Added support for localuser in Match keyword * Fixed Match keyword to be case sensitive * Fixed compilation with LibreSSL * Fixed error report of channel open (T75) * Fixed sftp documentation (T137) * Fixed known_hosts parsing (T156) * Fixed build issue with MinGW (T157) * Fixed build with gcc 9 (T164) * Fixed deprecation issues (T165) * Fixed known_hosts directory creation (T166) ==== openssh ==== - Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep glibc master implements multiple functions using that syscall making the privsep sandbox kill the preauth process. ==== patterns-microos ==== Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-basesystem patterns-microos-cloud patterns-microos-defaults patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-selinux patterns-microos-sssd_ldap - Don't install open-iscsi by default [bsc#1156660] ==== read-only-root-fs ==== Version update (1.0+git20190607.11f8587 -> 1.0+git20191112.42add9e) - Update to version 1.0+git20191112.42add9e: * Add RequiresMountsFor=/etc override for systemd-udevd.service ==== rpm-config-SUSE ==== Version update (0.g44 -> 0.g45) - Update to version 0.g45: * Use -flto=auto for _lto_cflags for now ==== systemd ==== Subpackages: libsystemd0 libudev1 systemd-logger systemd-sysvinit udev - Import commit 0b715187a87907e18edf98eab9d0a50fced4a424 9dbdbc2f10 logind: fix (again) the race that might happen when logind restores VT (bsc#1101591 bsc#1140081) c848bec110 libblkid: open device in nonblock mode. (bsc#1084671) b70ad6c927 resolved: check for IP in certificate when using DoT with GnuTLS (bsc#1155539 CVE-2018-21029) bbedf3d557 resolved: require at least version 3.6.0 of GnuTLS for DNS-over-TLS eb732c2e29 resolved: fix connection failures with TLS 1.3 and GnuTLS 4e45084ac5 shared/install: failing with -ELOOP can be due to the use of an alias in install_error() 2e297f0d87 shared/install: fix error codes returned by install_context_apply() dd29d70d32 man: alias names can't be used with enable command - Fix %{_libexecdir} misuses of /usr/lib ==== ucode-intel ==== Version update (20190918 -> 20191112) - Updated to 20191112 security release (bsc#1155988) - Processor Identifier Version Products - Model Stepping F-MO-S/PI Old->New - ---- new platforms ---------------------------------------- - AVN B0/C0 6-4d-8/01 0000012d Atom C2xxx - CNL-U D0 6-66-3/80 0000002a Core Gen8 Mobile - SKX-SP B1 6-55-3/97 01000151 Xeon Scalable - CLX-SP B0 6-55-6/bf 0400002c Xeon Scalable Gen2 - GLK-R R0 6-7a-8/01 00000016 Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 - ICL-U/Y D1 6-7e-5/80 00000046 Core Gen10 Mobile - CML-U62 A0 6-a6-0/80 000000c6 Core Gen10 Mobile - ---- updated platforms ------------------------------------ - SKL-U/Y D0 6-4e-3/c0 000000cc->000000d4 Core Gen6 Mobile - SKX-SP H0/M0/U0 6-55-4/b7 02000064->02000065 Xeon Scalable - SKX-D M1 6-55-4/b7 02000064->02000065 Xeon D-21xx - CLX-SP B1 6-55-7/bf 0500002b->0500002c Xeon Scalable Gen2 - SKL-H/S/E3 R0/N0 6-5e-3/36 000000cc->000000d4 Core Gen6 - GLK B0 6-7a-1/01 0000002e->00000032 Pentium J5005/N5000, Celeron J4005/J4105/N4000/N4100 - AML-Y22 H0 6-8e-9/10 000000b4->000000c6 Core Gen8 Mobile - KBL-U/Y H0 6-8e-9/c0 000000b4->000000c6 Core Gen7 Mobile - CFL-U43e D0 6-8e-a/c0 000000b4->000000c6 Core Gen8 Mobile - WHL-U W0 6-8e-b/d0 000000b8->000000c6 Core Gen8 Mobile - AML-Y V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile - CML-U42 V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile - WHL-U V0 6-8e-c/94 000000b8->000000c6 Core Gen8 Mobile - KBL-G/X H0 6-9e-9/2a 000000b4->000000c6 Core Gen7/Gen8 - KBL-H/S/E3 B0 6-9e-9/2a 000000b4->000000c6 Core Gen7; Xeon E3 v6 - CFL-H/S/E3 U0 6-9e-a/22 000000b4->000000c6 Core Gen8 Desktop, Mobile, Xeon E - CFL-S B0 6-9e-b/02 000000b4->000000c6 Core Gen8 - CFL-H R0 6-9e-d/22 000000b8->000000c6 Core Gen9 Mobile - ---- removed platforms ------------------------------------ - CFL-H/S P0 6-9e-c/22 000000a2 Core Gen9 - Includes security fixes for: - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073) - CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035) ==== xen ==== Version update (4.13.0_01 -> 4.13.0_02) - Update to Xen 4.13.0 RC2 release xen-4.13.0-testing-src.tar.bz2 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191118 released!
by Richard Brown 20 Nov '19

20 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: c-ares (1.15.0~20191108 -> 1.15.0+20191108) conmon (2.0.2 -> 2.0.3) curl kdump kernel-firmware (20191023 -> 20191108) libselinux libselinux-bindings libssh (0.9.0 -> 0.9.2) openssh patterns-microos read-only-root-fs (1.0+git20190607.11f8587 -> 1.0+git20191112.42add9e) rpm-config-SUSE (0.g44 -> 0.g45) systemd ucode-intel (20190918 -> 20191112) xen (4.13.0_01 -> 4.13.0_02) === Details === ==== c-ares ==== Version update (1.15.0~20191108 -> 1.15.0+20191108) - Fix version number of the snapshot to not be downgrade: bsc#1156601 ==== conmon ==== Version update (2.0.2 -> 2.0.3) - Add log level trace - Separate handling of log reopen events and terminal resize events ==== curl ==== Subpackages: libcurl4 - Fix segfault in zypper ref: [bsc#1156481] * remove_handle: clear expire timers after multi_done() * Add patch curl-expire-clear.patch ==== kdump ==== - add kdump-savedump-search-also-for-vmlinux.xz.patch (bnc#1155921) ==== kernel-firmware ==== Version update (20191023 -> 20191108) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd - Update to version 20191108 (git commit f1100ddf581f): * i915: Add HuC firmware v7.0.3 for TGL * i915: Add GuC firmware v35.2.0 for TGL * i915: Add HuC firmware v9.0.0 for EHL * i915: Add GuC firmware v33.0.4 for EHL * rtw88: RTL8723D: add firmware file v48 * qed: Add firmware 8.40.33.0 * amdgpu: add new navi14 wks gfx firmware for 19.30 * amdgpu: update navi14 firmware for 19.30 * amdgpu: update raven firmware for 19.30 * linux-firmware: Add firmware file for Intel Bluetooth AX201 ==== libselinux ==== Subpackages: libselinux1 selinux-tools - Added Use-Python-distutils-to-install-SELinux.patch to use Python's distutils instead of building and installing python bindings manually ==== libselinux-bindings ==== - Add python3.8-compat.patch which makes build possible even with Python 3.8, which doesn?t automatically adds -lpython<ver> ==== libssh ==== Version update (0.9.0 -> 0.9.2) Subpackages: libssh-config libssh4 - Update to version 0.9.2 * Fixed libssh-config.cmake * Fixed issues with rsa algorithm negotiation (T191) * Fixed detection of OpenSSL ed25519 support (T197) - Update to version 0.9.1 * Added support for Ed25519 via OpenSSL * Added support for X25519 via OpenSSL * Added support for localuser in Match keyword * Fixed Match keyword to be case sensitive * Fixed compilation with LibreSSL * Fixed error report of channel open (T75) * Fixed sftp documentation (T137) * Fixed known_hosts parsing (T156) * Fixed build issue with MinGW (T157) * Fixed build with gcc 9 (T164) * Fixed deprecation issues (T165) * Fixed known_hosts directory creation (T166) ==== openssh ==== - Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep glibc master implements multiple functions using that syscall making the privsep sandbox kill the preauth process. ==== patterns-microos ==== Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-basesystem patterns-microos-cloud patterns-microos-defaults patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-selinux patterns-microos-sssd_ldap - Don't install open-iscsi by default [bsc#1156660] ==== read-only-root-fs ==== Version update (1.0+git20190607.11f8587 -> 1.0+git20191112.42add9e) - Update to version 1.0+git20191112.42add9e: * Add RequiresMountsFor=/etc override for systemd-udevd.service ==== rpm-config-SUSE ==== Version update (0.g44 -> 0.g45) - Update to version 0.g45: * Use -flto=auto for _lto_cflags for now ==== systemd ==== Subpackages: libsystemd0 libudev1 systemd-logger systemd-sysvinit udev - Import commit 0b715187a87907e18edf98eab9d0a50fced4a424 9dbdbc2f10 logind: fix (again) the race that might happen when logind restores VT (bsc#1101591 bsc#1140081) c848bec110 libblkid: open device in nonblock mode. (bsc#1084671) b70ad6c927 resolved: check for IP in certificate when using DoT with GnuTLS (bsc#1155539 CVE-2018-21029) bbedf3d557 resolved: require at least version 3.6.0 of GnuTLS for DNS-over-TLS eb732c2e29 resolved: fix connection failures with TLS 1.3 and GnuTLS 4e45084ac5 shared/install: failing with -ELOOP can be due to the use of an alias in install_error() 2e297f0d87 shared/install: fix error codes returned by install_context_apply() dd29d70d32 man: alias names can't be used with enable command - Fix %{_libexecdir} misuses of /usr/lib ==== ucode-intel ==== Version update (20190918 -> 20191112) - Updated to 20191112 security release (bsc#1155988) - Processor Identifier Version Products - Model Stepping F-MO-S/PI Old->New - ---- new platforms ---------------------------------------- - AVN B0/C0 6-4d-8/01 0000012d Atom C2xxx - CNL-U D0 6-66-3/80 0000002a Core Gen8 Mobile - SKX-SP B1 6-55-3/97 01000151 Xeon Scalable - CLX-SP B0 6-55-6/bf 0400002c Xeon Scalable Gen2 - GLK-R R0 6-7a-8/01 00000016 Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 - ICL-U/Y D1 6-7e-5/80 00000046 Core Gen10 Mobile - CML-U62 A0 6-a6-0/80 000000c6 Core Gen10 Mobile - ---- updated platforms ------------------------------------ - SKL-U/Y D0 6-4e-3/c0 000000cc->000000d4 Core Gen6 Mobile - SKX-SP H0/M0/U0 6-55-4/b7 02000064->02000065 Xeon Scalable - SKX-D M1 6-55-4/b7 02000064->02000065 Xeon D-21xx - CLX-SP B1 6-55-7/bf 0500002b->0500002c Xeon Scalable Gen2 - SKL-H/S/E3 R0/N0 6-5e-3/36 000000cc->000000d4 Core Gen6 - GLK B0 6-7a-1/01 0000002e->00000032 Pentium J5005/N5000, Celeron J4005/J4105/N4000/N4100 - AML-Y22 H0 6-8e-9/10 000000b4->000000c6 Core Gen8 Mobile - KBL-U/Y H0 6-8e-9/c0 000000b4->000000c6 Core Gen7 Mobile - CFL-U43e D0 6-8e-a/c0 000000b4->000000c6 Core Gen8 Mobile - WHL-U W0 6-8e-b/d0 000000b8->000000c6 Core Gen8 Mobile - AML-Y V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile - CML-U42 V0 6-8e-c/94 000000b8->000000c6 Core Gen10 Mobile - WHL-U V0 6-8e-c/94 000000b8->000000c6 Core Gen8 Mobile - KBL-G/X H0 6-9e-9/2a 000000b4->000000c6 Core Gen7/Gen8 - KBL-H/S/E3 B0 6-9e-9/2a 000000b4->000000c6 Core Gen7; Xeon E3 v6 - CFL-H/S/E3 U0 6-9e-a/22 000000b4->000000c6 Core Gen8 Desktop, Mobile, Xeon E - CFL-S B0 6-9e-b/02 000000b4->000000c6 Core Gen8 - CFL-H R0 6-9e-d/22 000000b8->000000c6 Core Gen9 Mobile - ---- removed platforms ------------------------------------ - CFL-H/S P0 6-9e-c/22 000000a2 Core Gen9 - Includes security fixes for: - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073) - CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035) ==== xen ==== Version update (4.13.0_01 -> 4.13.0_02) - Update to Xen 4.13.0 RC2 release xen-4.13.0-testing-src.tar.bz2 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191116 released!
by Richard Brown 18 Nov '19

18 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apparmor btrfsprogs (5.2.2 -> 5.3.1) cni-plugins (0.8.2 -> 0.8.3) kernel-source (5.3.9 -> 5.3.11) setools (4.2.1 -> 4.2.2) suse-module-tools (15.2.5 -> 15.2.7) === Details === ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils perl-apparmor python3-apparmor - add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657) ==== btrfsprogs ==== Version update (5.2.2 -> 5.3.1) Subpackages: btrfsprogs-udev-rules libbtrfs0 - Update to 5.3.1: * libbtrfs: fix link breakage due to missing symbols - Updaet to 5.3: * mkfs: * new option to specify checksum algorithm (only crc32c) * fix xattr enumeration * dump-tree: BFS (breadth-first) traversal now default * libbtrfsutil: remove stale BTRFS_DEV_REPLACE_ITEM_STATE_x defines * ci: add support for gitlab * other: * preparatory work for more checksum algorithms * docs update * switch to docbook5 backend for asciidoc * fix build on uClibc due to missing backtrace() * lots of printf format fixups ==== cni-plugins ==== Version update (0.8.2 -> 0.8.3) - Update to version 0.8.3: * Enhancements: * static: prioritize the input sources for IPs (#400). * tuning: send gratuitous ARP in case of MAC address update (#403). * bandwidth: use uint64 for Bandwidth value (#389). * ptp: only override DNS conf if DNS settings provided (#388). * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383). * loopback support CNI CHECK and result cache (#374). * Better input validation: * vlan: add MTU validation to loadNetConf (#405). * macvlan: add MTU validation to loadNetConf (#404). * bridge: check vlan id when loading net conf (#394). * Bugfixes: * bugfix: defer after err check, or it may panic (#391). * portmap: Fix dual-stack support (#379). * firewall: don't return error in DEL if prevResult is not found (#390). * bump up libcni back to v0.7.1 (#377). * Tests: * integration: fix ip address collision in integration tests (#409). * testutils: newNS() works in a rootless user namespace (#401). * Bump Go version (#386). * Cleanup netns after test suite (#375). * Docs: * contributing doc: revise test script name to run (#396). * contributing doc: describe cnitool installation (#397). ==== kernel-source ==== Version update (5.3.9 -> 5.3.11) - Linux 5.3.11 (bnc#1151927). - bonding: fix state transition issue in link monitoring (bnc#1151927). - CDC-NCM: handle incomplete transfer of MTU (bnc#1151927). - ipv4: Fix table id reference in fib_sync_down_addr (bnc#1151927). - net: ethernet: octeon_mgmt: Account for second possible VLAN header (bnc#1151927). - net: fix data-race in neigh_event_send() (bnc#1151927). - net: qualcomm: rmnet: Fix potential UAF when unregistering (bnc#1151927). - net/tls: fix sk_msg trim on fallback to copy mode (bnc#1151927). - net: usb: qmi_wwan: add support for DW5821e with eSIM support (bnc#1151927). - NFC: fdp: fix incorrect free object (bnc#1151927). - nfc: netlink: fix double device reference drop (bnc#1151927). - NFC: st21nfca: fix double free (bnc#1151927). - qede: fix NULL pointer deref in __qede_remove() (bnc#1151927). - net: mscc: ocelot: don't handle netdev events for other netdevs (bnc#1151927). - net: mscc: ocelot: fix NULL pointer on LAG slave removal (bnc#1151927). - net/tls: don't pay attention to sk_write_pending when pushing partial records (bnc#1151927). - net/tls: add a TX lock (bnc#1151927). - selftests/tls: add test for concurrent recv and send (bnc#1151927). - ipv6: fixes rt6_probe() and fib6_nh->last_probe init (bnc#1151927). - net: hns: Fix the stray netpoll locks causing deadlock in NAPI path (bnc#1151927). - net: prevent load/store tearing on sk->sk_stamp (bnc#1151927). - net: sched: prevent duplicate flower rules from tcf_proto destroy race (bnc#1151927). - net/smc: fix ethernet interface refcounting (bnc#1151927). - vsock/virtio: fix sock refcnt holding during the shutdown (bnc#1151927). - r8169: fix page read in r8168g_mdio_read (bnc#1151927). - ALSA: timer: Fix incorrectly assigned timer instance (bnc#1151927). - ALSA: bebob: fix to detect configured source of sampling clock for Focusrite Saffire Pro i/o series (bnc#1151927). - mm: memcontrol: fix NULL-ptr deref in percpu stats flush (bnc#1151927). - mm: memcontrol: fix network errors from failing __GFP_ATOMIC charges (bnc#1151927). - mm, meminit: recalculate pcpu batch and high limits after init completes (bnc#1151927). - mm: thp: handle page cache THP correctly in PageTransCompoundMap (bnc#1151927). - mm, vmstat: hide /proc/pagetypeinfo from normal users (bnc#1151927). - dump_stack: avoid the livelock of the dump_lock (bnc#1151927). - mm: slab: make page_cgroup_ino() to recognize non-compound slab pages properly (bnc#1151927). - btrfs: Consider system chunk array size for new SYSTEM chunks (bnc#1151927). - btrfs: tree-checker: Fix wrong check on max devid (bnc#1151927). - btrfs: save i_size to avoid double evaluation of i_size_read in compress_file_range (bnc#1151927). - tools: gpio: Use !building_out_of_srctree to determine srctree (bnc#1151927). - pinctrl: intel: Avoid potential glitches if pin is in GPIO mode (bnc#1151927). - perf tools: Fix time sorting (bnc#1151927). - perf map: Use zalloc for map_groups (bnc#1151927). - drm/radeon: fix si_enable_smc_cac() failed issue (bnc#1151927). - HID: wacom: generic: Treat serial number and related fields as unsigned (bnc#1151927). - mm/khugepaged: fix might_sleep() warn with CONFIG_HIGHPTE=y (bnc#1151927). - soundwire: depend on ACPI (bnc#1151927). - soundwire: depend on ACPI || OF (bnc#1151927). - soundwire: bus: set initial value to port_status (bnc#1151927). - blkcg: make blkcg_print_stat() print stats only for online blkgs (bnc#1151927). - arm64: Do not mask out PTE_RDONLY in pte_same() (bnc#1151927). - ASoC: rsnd: dma: fix SSI9 4/5/6/7 busif dma address (bnc#1151927). - ceph: fix use-after-free in __ceph_remove_cap() (bnc#1151927). - ceph: fix RCU case handling in ceph_d_revalidate() (bnc#1151927). - ceph: add missing check in d_revalidate snapdir handling (bnc#1151927). - ceph: don't try to handle hashed dentries in non-O_CREAT atomic_open (bnc#1151927). - ceph: don't allow copy_file_range when stripe_count != 1 (bnc#1151927). - iio: adc: stm32-adc: fix stopping dma (bnc#1151927). - iio: imu: adis16480: make sure provided frequency is positive (bnc#1151927). - iio: imu: inv_mpu6050: fix no data on MPU6050 (bnc#1151927). - iio: srf04: fix wrong limitation in distance measuring (bnc#1151927). - ARM: sunxi: Fix CPU powerdown on A83T (bnc#1151927). - ARM: dts: imx6-logicpd: Re-enable SNVS power key (bnc#1151927). - cpufreq: intel_pstate: Fix invalid EPB setting (bnc#1151927). - clone3: validate stack arguments (bnc#1151927). - netfilter: nf_tables: Align nft_expr private data to 64-bit (bnc#1151927). - netfilter: ipset: Fix an error code in ip_set_sockfn_get() (bnc#1151927). - intel_th: gth: Fix the window switching sequence (bnc#1151927). - intel_th: pci: Add Comet Lake PCH support (bnc#1151927). - intel_th: pci: Add Jasper Lake PCH support (bnc#1151927). - x86/dumpstack/64: Don't evaluate exception stacks before setup (bnc#1151927). - x86/apic/32: Avoid bogus LDR warnings (bnc#1151927). - SMB3: Fix persistent handles reconnect (bnc#1151927). - can: usb_8dev: fix use-after-free on disconnect (bnc#1151927). - can: flexcan: disable completely the ECC mechanism (bnc#1151927). - can: c_can: c_can_poll(): only read status register after status IRQ (bnc#1151927). - can: peak_usb: fix a potential out-of-sync while decoding packets (bnc#1151927). - can: rx-offload: can_rx_offload_queue_sorted(): fix error handling, avoid skb mem leak (bnc#1151927). - can: gs_usb: gs_can_open(): prevent memory leak (bnc#1151927). - can: dev: add missing of_node_put() after calling of_get_child_by_name() (bnc#1151927). - can: mcba_usb: fix use-after-free on disconnect (bnc#1151927). - can: peak_usb: fix slab info leak (bnc#1151927). - configfs: fix a deadlock in configfs_symlink() (bnc#1151927). - ALSA: usb-audio: More validations of descriptor units (bnc#1151927). - ALSA: usb-audio: Simplify parse_audio_unit() (bnc#1151927). - ALSA: usb-audio: Unify the release of usb_mixer_elem_info objects (bnc#1151927). - ALSA: usb-audio: Remove superfluous bLength checks (bnc#1151927). - ALSA: usb-audio: Clean up check_input_term() (bnc#1151927). - ALSA: usb-audio: Fix possible NULL dereference at create_yamaha_midi_quirk() (bnc#1151927). - ALSA: usb-audio: remove some dead code (bnc#1151927). - ALSA: usb-audio: Fix copy&paste error in the validator (bnc#1151927). - usbip: Implement SG support to vhci-hcd and stub driver (bnc#1151927). - HID: google: add magnemite/masterball USB ids (bnc#1151927). - dmaengine: sprd: Fix the link-list pointer register configuration issue (bnc#1151927). - bpf: lwtunnel: Fix reroute supplying invalid dst (bnc#1151927). - dmaengine: xilinx_dma: Fix 64-bit simple AXIDMA transfer (bnc#1151927). - dmaengine: xilinx_dma: Fix control reg update in vdma_channel_set_config (bnc#1151927). - dmaengine: sprd: Fix the possible memory leak issue (bnc#1151927). - HID: intel-ish-hid: fix wrong error handling in ishtp_cl_alloc_tx_ring() (bnc#1151927). - powerpc/32s: fix allow/prevent_user_access() when crossing segment boundaries (bnc#1151927). - RDMA/mlx5: Clear old rate limit when closing QP (bnc#1151927). - iw_cxgb4: fix ECN check on the passive accept (bnc#1151927). - RDMA/siw: free siw_base_qp in kref release routine (bnc#1151927). - RDMA/qedr: Fix reported firmware version (bnc#1151927). - IB/core: Use rdma_read_gid_l2_fields to compare GID L2 fields (bnc#1151927). - net/mlx5e: Tx, Fix assumption of single WQEBB of NOP in cleanup flow (bnc#1151927). - net/mlx5e: kTLS, Release reference on DUMPed fragments in shutdown flow (bnc#1151927). - net/mlx5e: TX, Fix consumer index of error cqe dump (bnc#1151927). - net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq (bnc#1151927). - net/mlx5: fix memory leak in mlx5_fw_fatal_reporter_dump (bnc#1151927). - selftests/bpf: More compatible nc options in test_tc_edt (bnc#1151927). - scsi: qla2xxx: fixup incorrect usage of host_byte (bnc#1151927). - scsi: lpfc: Check queue pointer before use (bnc#1151927). - scsi: ufs-bsg: Wake the device before sending raw upiu commands (bnc#1151927). - ARC: [plat-hsdk]: Enable on-board SPI NOR flash IC (bnc#1151927). - RDMA/uverbs: Prevent potential underflow (bnc#1151927). - bpf: Fix use after free in subprog's jited symbol removal (bnc#1151927). - net: stmmac: Fix the problem of tso_xmit (bnc#1151927). - net: openvswitch: free vport unless register_netdevice() succeeds (bnc#1151927). - scsi: lpfc: Honor module parameter lpfc_use_adisc (bnc#1151927). - scsi: qla2xxx: Initialized mailbox to prevent driver load failure (bnc#1151927). - bpf: Fix use after free in bpf_get_prog_name (bnc#1151927). - iwlwifi: pcie: fix PCI ID 0x2720 configs that should be soc (bnc#1151927). - iwlwifi: pcie: fix all 9460 entries for qnj (bnc#1151927). - iwlwifi: pcie: 0x2720 is qu and 0x30DC is not (bnc#1151927). - netfilter: nf_flow_table: set timeout before insertion into hashes (bnc#1151927). - drm/v3d: Fix memory leak in v3d_submit_cl_ioctl (bnc#1151927). - xsk: Fix registration of Rx-only sockets (bnc#1151927). - net: phy: smsc: LAN8740: add PHY_RST_AFTER_CLK_EN flag (bnc#1151927). - ipvs: don't ignore errors in case refcounting ip_vs module fails (bnc#1151927). - ipvs: move old_secure_tcp into struct netns_ipvs (bnc#1151927). - netfilter: nft_payload: fix missing check for matching length in offloads (bnc#1151927). - RDMA/nldev: Skip counter if port doesn't match (bnc#1151927). - bonding: fix unexpected IFF_BONDING bit unset (bnc#1151927). - bonding: use dynamic lockdep key instead of subclass (bnc#1151927). - macsec: fix refcnt leak in module exit routine (bnc#1151927). - virt_wifi: fix refcnt leak in module exit routine (bnc#1151927). - scsi: sd: define variable dif as unsigned int instead of bool (bnc#1151927). - usb: dwc3: select CONFIG_REGMAP_MMIO (bnc#1151927). - usb: fsl: Check memory resource before releasing it (bnc#1151927). - usb: gadget: udc: atmel: Fix interrupt storm in FIFO mode (bnc#1151927). - usb: gadget: composite: Fix possible double free memory bug (bnc#1151927). - usb: gadget: configfs: fix concurrent issue between composite APIs (bnc#1151927). - usb: dwc3: remove the call trace of USBx_GFLADJ (bnc#1151927). - perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise RIP validity (bnc#1151927). - perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family (10h) (bnc#1151927). - perf/x86/uncore: Fix event group support (bnc#1151927). - USB: Skip endpoints with 0 maxpacket length (bnc#1151927). - USB: ldusb: use unsigned size format specifiers (bnc#1151927). - usbip: tools: Fix read_usb_vudc_device() error path handling (bnc#1151927). - RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case (bnc#1151927). - RDMA/hns: Prevent memory leaks of eq->buf_list (bnc#1151927). - hwmon: (ina3221) Fix read timeout issue (bnc#1151927). - scsi: qla2xxx: stop timer in shutdown path (bnc#1151927). - sched/topology: Don't try to build empty sched domains (bnc#1151927). - sched/topology: Allow sched_asym_cpucapacity to be disabled (bnc#1151927). - nvme-multipath: fix possible io hang after ctrl reconnect (bnc#1151927). - net: hisilicon: Fix "Trying to free already-free IRQ" (bnc#1151927). - wimax: i2400: Fix memory leak in i2400m_op_rfkill_sw_toggle (bnc#1151927). - net: mscc: ocelot: fix vlan_filtering when enslaving to bridge before link is up (bnc#1151927). - net: mscc: ocelot: refuse to overwrite the port's native vlan (bnc#1151927). - iommu/amd: Apply the same IVRS IOAPIC workaround to Acer Aspire A315-41 (bnc#1151927). - mt76: dma: fix buffer unmap with non-linear skbs (bnc#1151927). - drm/amdgpu/sdma5: do not execute 0-sized IBs (v2) (bnc#1151927). - drm/sched: Set error to s_fence if HW job submission failed (bnc#1151927). - drm/amdgpu: If amdgpu_ib_schedule fails return back the error (bnc#1151927). - drm/amd/display: do not synchronize "drr" displays (bnc#1151927). - drm/amd/display: add 50us buffer as WA for pstate switch in active (bnc#1151927). - drm/amd/display: Passive DP->HDMI dongle detection fix (bnc#1151927). - dc.c:use kzalloc without test (bnc#1151927). - SUNRPC: The TCP back channel mustn't disappear while requests are outstanding (bnc#1151927). - SUNRPC: The RDMA back channel mustn't disappear while requests are outstanding (bnc#1151927). - SUNRPC: Destroy the back channel when we destroy the host transport (bnc#1151927). - hv_netvsc: Fix error handling in netvsc_attach() (bnc#1151927). - efi/tpm: Return -EINVAL when determining tpm final events log size fails (bnc#1151927). - efi: libstub/arm: Account for firmware reserved memory at the base of RAM (bnc#1151927). - x86, efi: Never relocate kernel below lowest acceptable address (bnc#1151927). - arm64: cpufeature: Enable Qualcomm Falkor errata 1009 for Kryo (bnc#1151927). - usb: dwc3: gadget: fix race when disabling ep with cancelled xfers (bnc#1151927). - arm64: apply ARM64_ERRATUM_845719 workaround for Brahma-B53 core (bnc#1151927). - arm64: Brahma-B53 is SSB and spectre v2 safe (bnc#1151927). - arm64: apply ARM64_ERRATUM_843419 workaround for Brahma-B53 core (bnc#1151927). - NFSv4: Don't allow a cached open with a revoked delegation (bnc#1151927). - net: ethernet: arc: add the missed clk_disable_unprepare (bnc#1151927). - igb: Fix constant media auto sense switching when no cable is connected (bnc#1151927). - e1000: fix memory leaks (bnc#1151927). - gve: Fixes DMA synchronization (bnc#1151927). - ocfs2: protect extent tree in ocfs2_prepare_inode_for_write() (bnc#1151927). - pinctrl: cherryview: Fix irq_valid_mask calculation (bnc#1151927). - clk: imx8m: Use SYS_PLL1_800M as intermediate parent of CLK_ARM (bnc#1151927). - timekeeping/vsyscall: Update VDSO data unconditionally (bnc#1151927). - mm/filemap.c: don't initiate writeback if mapping has no dirty pages (bnc#1151927). - cgroup,writeback: don't switch wbs immediately on dead wbs if the memcg is dead (bnc#1151927). - ARM: dts: stm32: change joystick pinctrl definition on stm32mp157c-ev1 (bnc#1151927). - ASoC: SOF: Intel: hda-stream: fix the CONFIG_ prefix missing (bnc#1151927). - usbip: Fix free of unallocated memory in vhci tx (bnc#1151927). - bonding: fix using uninitialized mode_lock (bnc#1151927). - netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 sets (bnc#1151927). - arm64: errata: Update stale comment (bnc#1151927). - net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (bnc#1151927). - drm/i915: Rename gen7 cmdparser tables (bnc#1151927). - drm/i915: Disable Secure Batches for gen6+ (bnc#1151927). - drm/i915: Remove Master tables from cmdparser (bnc#1151927). - drm/i915: Add support for mandatory cmdparsing (bnc#1151927). - drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (bnc#1151927). - drm/i915: Allow parsing of unsized batches (bnc#1151927). - drm/i915: Add gen9 BCS cmdparsing (bnc#1151927). - drm/i915/cmdparser: Use explicit goto for error paths (bnc#1151927). - drm/i915/cmdparser: Add support for backward jumps (bnc#1151927). - drm/i915/cmdparser: Ignore Length operands during command matching (bnc#1151927). - drm/i915: Lower RM timeout to avoid DSI hard hangs (bnc#1151927). - drm/i915/gen8+: Add RC6 CTX corruption WA (bnc#1151927). - drm/i915/cmdparser: Fix jump whitelist clearing (bnc#1151927). - x86/msr: Add the IA32_TSX_CTRL MSR (bnc#1151927). - x86/cpu: Add a helper function x86_read_arch_cap_msr() (bnc#1151927). - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (bnc#1151927). - x86/speculation/taa: Add mitigation for TSX Async Abort (bnc#1151927). - x86/speculation/taa: Add sysfs reporting for TSX Async Abort (bnc#1151927). - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (bnc#1151927). - x86/tsx: Add "auto" option to the tsx= cmdline parameter (bnc#1151927). - x86/speculation/taa: Add documentation for TSX Async Abort (bnc#1151927). - x86/tsx: Add config options to set tsx=on|off|auto (bnc#1151927). - x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs (bnc#1151927). - x86/bugs: Add ITLB_MULTIHIT bug infrastructure (bnc#1151927). - x86/cpu: Add Tremont to the cpu vulnerability whitelist (bnc#1151927). - cpu/speculation: Uninline and export CPU mitigations helpers (bnc#1151927). - Documentation: Add ITLB_MULTIHIT documentation (bnc#1151927). - kvm: x86, powerpc: do not allow clearing largepages debugfs entry (bnc#1151927). - kvm: mmu: ITLB_MULTIHIT mitigation (bnc#1151927). - kvm: Add helper function for creating VM worker threads (bnc#1151927). - kvm: x86: mmu: Recovery of shattered NX large pages (bnc#1151927). - Update config files. Set X86_INTEL_TSX_MODE_OFF=y (the default) - commit 0a195a8 - usb: dwc3: pci: prevent memory leak in dwc3_pci_probe (CVE-2019-18813,bsc#1156278). - ASoC: SOF: Fix memory leak in sof_dfsentry_write (CVE-2019-18812,bsc#1156277). - commit 8a126f1 - Refresh patches.suse/stacktrace-don-t-skip-first-entry-on-noncurrent-task.patch. Update upstream status. - commit baac78a - Linux 5.3.10 (bnc#1151927). - usb: gadget: udc: core: Fix segfault if udc_bind_to_driver() for pending driver fails (bnc#1151927). - arm64: dts: ti: k3-am65-main: Fix gic-its node unit-address (bnc#1151927). - ASoC: pcm3168a: The codec does not support S32_LE (bnc#1151927). - selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (bnc#1151927). - selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (bnc#1151927). - CIFS: Fix retry mid list corruption on reconnects (bnc#1151927). - platform/x86: pmc_atom: Add Siemens SIMATIC IPC227E to critclk_systems DMI table (bnc#1151927). - net/flow_dissector: switch to siphash (bnc#1151927). - net: bcmgenet: reset 40nm EPHY on energy detect (bnc#1151927). - net: phy: bcm7xxx: define soft_reset for 40nm EPHY (bnc#1151927). - net: netem: correct the parent's backlog when corrupted packet was dropped (bnc#1151927). - r8152: add device id for Lenovo ThinkPad USB-C Dock Gen 2 (bnc#1151927). - net: usb: lan78xx: Connect PHY before registering MAC (bnc#1151927). - net: reorder 'struct net' fields to avoid false sharing (bnc#1151927). - net: netem: fix error path for corrupted GSO frames (bnc#1151927). - net: hns3: fix mis-counting IRQ vector numbers issue (bnc#1151927). - net: ensure correct skb->tstamp in various fragmenters (bnc#1151927). - net: dsa: fix switch tree list (bnc#1151927). - net: dsa: b53: Do not clear existing mirrored port mask (bnc#1151927). - net: bcmgenet: don't set phydev->link from MAC (bnc#1151927). - ipv4: fix IPSKB_FRAG_PMTU handling with fragmentation (bnc#1151927). - net/mlx5e: Fix handling of compressed CQEs in case of low NAPI budget (bnc#1151927). - net/mlx5e: Fix ethtool self test: link speed (bnc#1151927). - r8169: fix wrong PHY ID issue with RTL8168dp (bnc#1151927). - mlxsw: core: Unpublish devlink parameters during reload (bnc#1151927). - net/mlx5: Fix rtable reference leak (bnc#1151927). - net/smc: fix refcounting for non-blocking connect() (bnc#1151927). - net/mlx5: Fix flow counter list auto bits struct (bnc#1151927). - net/mlx5e: Initialize on stack link modes bitmap (bnc#1151927). - net/mlx5e: Remove incorrect match criteria assignment line (bnc#1151927). - net/mlx5e: Determine source port properly for vlan push action (bnc#1151927). - rxrpc: Fix handling of last subpacket of jumbo packet (bnc#1151927). - net: phylink: Fix phylink_dbg() macro (bnc#1151927). - keys: Fix memory leak in copy_net_ns (bnc#1151927). - net/smc: keep vlan_id for SMC-R in smc_listen_work() (bnc#1151927). - net/smc: fix closing of fallback SMC sockets (bnc#1151927). - selftests: fib_tests: add more tests for metric update (bnc#1151927). - ipv4: fix route update on metric change (bnc#1151927). - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (bnc#1151927). - net: use skb_queue_empty_lockless() in busy poll contexts (bnc#1151927). - net: use skb_queue_empty_lockless() in poll() handlers (bnc#1151927). - udp: use skb_queue_empty_lockless() (bnc#1151927). - net: add skb_queue_empty_lockless() (bnc#1151927). - vxlan: check tun_info options_len properly (bnc#1151927). - udp: fix data-race in udp_set_dev_scratch() (bnc#1151927). - selftests: net: reuseport_dualstack: fix uninitalized parameter (bnc#1151927). - net: Zeroing the structure ethtool_wolinfo in ethtool_get_wol() (bnc#1151927). - net: usb: lan78xx: Disable interrupts before calling generic_handle_irq() (bnc#1151927). - net: rtnetlink: fix a typo fbd -> fdb (bnc#1151927). - netns: fix GFP flags in rtnl_net_notifyid() (bnc#1151927). - net/mlx4_core: Dynamically set guaranteed amount of counters per VF (bnc#1151927). - net: hisilicon: Fix ping latency when deal with high throughput (bnc#1151927). - net: fix sk_page_frag() recursion from memory reclaim (bnc#1151927). - net: ethernet: ftgmac100: Fix DMA coherency issue with SW checksum (bnc#1151927). - net: dsa: bcm_sf2: Fix IMP setup for port different than 8 (bnc#1151927). - net: annotate lockless accesses to sk->sk_napi_id (bnc#1151927). - net: annotate accesses to sk->sk_incoming_cpu (bnc#1151927). - inet: stop leaking jiffies on the wire (bnc#1151927). - erspan: fix the tun_info options_len check for erspan (bnc#1151927). - dccp: do not leak jiffies on the wire (bnc#1151927). - cxgb4: request the TX CIDX updates to status page (bnc#1151927). - cxgb4: fix panic when attaching to ULD fail (bnc#1151927). - nbd: handle racing with error'ed out commands (bnc#1151927). - nbd: protect cmd->status with cmd->lock (bnc#1151927). - irqchip/sifive-plic: Skip contexts except supervisor in plic_init() (bnc#1151927). - cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (bnc#1151927). - i2c: stm32f7: remove warning when compiling with W=1 (bnc#1151927). - i2c: stm32f7: fix a race in slave mode with arbitration loss irq (bnc#1151927). - i2c: stm32f7: fix first byte to send in slave mode (bnc#1151927). - i2c: mt65xx: fix NULL ptr dereference (bnc#1151927). - irqchip/gic-v3-its: Use the exact ITSList for VMOVP (bnc#1151927). - MIPS: bmips: mark exception vectors as char arrays (bnc#1151927). - of: unittest: fix memory leak in unittest_data_add (bnc#1151927). - ALSA: hda: Add Tigerlake/Jasperlake PCI ID (bnc#1151927). - selftests: kvm: fix sync_regs_test with newer gccs (bnc#1151927). - selftests: kvm: vmx_set_nested_state_test: don't check for VMX support twice (bnc#1151927). - ARM: 8926/1: v7m: remove register save to stack before svc (bnc#1151927). - drm/komeda: Don't flush inactive pipes (bnc#1151927). - i2c: aspeed: fix master pending state handling (bnc#1151927). - ARM: dts: bcm2837-rpi-cm3: Avoid leds-gpio probing issue (bnc#1151927). - tracing: Fix "gfp_t" format for synthetic events (bnc#1151927). - ASoC: SOF: control: return true when kcontrol values change (bnc#1151927). - ASoC: Intel: sof-rt5682: add a check for devm_clk_get (bnc#1151927). - scsi: hpsa: add missing hunks in reset-patch (bnc#1151927). - scsi: target: core: Do not overwrite CDB byte 1 (bnc#1151927). - drm/amdgpu: fix error handling in amdgpu_bo_list_create (bnc#1151927). - drm/amdgpu: fix potential VM faults (bnc#1151927). - ARM: davinci: dm365: Fix McBSP dma_slave_map entry (bnc#1151927). - perf kmem: Fix memory leak in compact_gfp_flags() (bnc#1151927). - 8250-men-mcb: fix error checking when get_num_ports returns - ENODEV (bnc#1151927). - perf c2c: Fix memory leak in build_cl_output() (bnc#1151927). - perf tools: Fix resource leak of closedir() on the error paths (bnc#1151927). - arm64: dts: imx8mm: Use correct clock for usdhc's ipg clk (bnc#1151927). - arm64: dts: imx8mq: Use correct clock for usdhc's ipg clk (bnc#1151927). - ARM: dts: imx7s: Correct GPT's ipg clock source (bnc#1151927). - ARM: dts: vf610-zii-scu4-aib: Specify 'i2c-mux-idle-disconnect' (bnc#1151927). - ARM: dts: imx6q-logicpd: Re-Enable SNVS power key (bnc#1151927). - arm64: dts: lx2160a: Correct CPU core idle state name (bnc#1151927). - arm64: dts: rockchip: Fix usb-c on Hugsun X99 TV Box (bnc#1151927). - arm64: dts: rockchip: fix RockPro64 sdmmc settings (bnc#1151927). - ARM: 8914/1: NOMMU: Fix exc_ret for XIP (bnc#1151927). - ARM: 8908/1: add __always_inline to functions called from __get_user_check() (bnc#1151927). - scsi: fix kconfig dependency warning related to 53C700_LE_ON_BE (bnc#1151927). - scsi: sni_53c710: fix compilation error (bnc#1151927). - scsi: scsi_dh_alua: handle RTPG sense code correctly during state transitions (bnc#1151927). - scsi: qla2xxx: fix a potential NULL pointer dereference (bnc#1151927). - ARM: mm: fix alignment handler faults under memory pressure (bnc#1151927). - ARM: dts: Use level interrupt for omap4 & 5 wlcore (bnc#1151927). - ASoC: simple_card_utils.h: Fix potential multiple redefinition error (bnc#1151927). - ASoC: msm8916-wcd-digital: add missing MIX2 path for RX1/2 (bnc#1151927). - ARM: dts: am3874-iceboard: Fix 'i2c-mux-idle-disconnect' usage (bnc#1151927). - arm64: dts: zii-ultra: fix ARM regulator states (bnc#1151927). - pinctrl: stmfx: fix null pointer on remove (bnc#1151927). - pinctrl: ns2: Fix off by one bugs in ns2_pinmux_enable() (bnc#1151927). - arm64: dts: rockchip: fix RockPro64 sdhci settings (bnc#1151927). - arm64: dts: rockchip: fix RockPro64 vdd-log regulator settings (bnc#1151927). - ARM: dts: logicpd-torpedo-som: Remove twl_keypad (bnc#1151927). - arm64: dts: rockchip: fix Rockpro64 RK808 interrupt line (bnc#1151927). - ASoc: rockchip: i2s: Fix RPM imbalance (bnc#1151927). - ASoC: wm_adsp: Don't generate kcontrols without READ flags (bnc#1151927). - regulator: pfuze100-regulator: Variable "val" in pfuze100_regulator_probe() could be uninitialized (bnc#1151927). - ASoC: intel: bytcr_rt5651: add null check to support_button_press (bnc#1151927). - ASoC: intel: sof_rt5682: add remove function to disable jack (bnc#1151927). - ASoC: rt5682: add NULL handler to set_jack function (bnc#1151927). - ASoC: SOF: Intel: hda: Disable DMI L1 entry during capture (bnc#1151927). - Update config files. CONFIG_SND_SOC_SOF_HDA_ALWAYS_ENABLE_DMI_L1=n as per default. - ASoC: SOF: Intel: initialise and verify FW crash dump data (bnc#1151927). - ASoC: SOF: Intel: hda: fix warnings during FW load (bnc#1151927). - ASoC: SOF: topology: fix parse fail issue for byte/bool tuple types (bnc#1151927). - ASoC: SOF: loader: fix kernel oops on firmware boot failure (bnc#1151927). - pinctrl: intel: Allocate IRQ chip dynamic (bnc#1151927). - regulator: ti-abb: Fix timeout in ti_abb_wait_txdone/ti_abb_clear_all_txdone (bnc#1151927). - arm64: dts: Fix gpio to pinmux mapping (bnc#1151927). - arm64: dts: allwinner: a64: sopine-baseboard: Add PHY regulator delay (bnc#1151927). - arm64: dts: allwinner: a64: Drop PMU node (bnc#1151927). - arm64: dts: allwinner: a64: pine64-plus: Add PHY regulator delay (bnc#1151927). - ASoC: topology: Fix a signedness bug in soc_tplg_dapm_widget_create() (bnc#1151927). - regulator: da9062: fix suspend_enable/disable preparation (bnc#1151927). - ASoC: wm8994: Do not register inapplicable controls for WM1811 (bnc#1151927). - ASoC: samsung: arndale: Add missing OF node dereferencing (bnc#1151927). - regulator: of: fix suspend-min/max-voltage parsing (bnc#1151927). - commit eedf3c5 - fjes: Handle workqueue allocation failure (CVE-2019-16231,bsc#1150466). - commit 3bf0c5a ==== setools ==== Version update (4.2.1 -> 4.2.2) - Add python3.8-compat.patch to allow build with Python 3.8 Still doesn't work though because of gh#SELinuxProject/setools#31 - Update to the upstream version 4.2.2: - Remove source policy references from man pages, as loading source policies is no longer supported. - Fixed a performance regression in alias loading after alias dereferencing fixes in 4.2.1. ==== suse-module-tools ==== Version update (15.2.5 -> 15.2.7) - Update to version 15.2.7: * spec file: avoid %{_libexecdir} - Update to version 15.2.6: * modprobe.conf: add dependency of papr_scm on libnvdimm (bsc#1142152, ltc#176292, FATE#327775). -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191116 released!
by Richard Brown 18 Nov '19

18 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apparmor btrfsprogs (5.2.2 -> 5.3.1) cni-plugins (0.8.2 -> 0.8.3) cri-o (1.15.2 -> 1.16.0) kernel-source (5.3.9 -> 5.3.11) rdma-core setools (4.2.1 -> 4.2.2) suse-module-tools (15.2.5 -> 15.2.7) === Details === ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils perl-apparmor python3-apparmor - add libapparmor-python3.8.diff to fix building the libapparmor python bindings (deb#943657) ==== btrfsprogs ==== Version update (5.2.2 -> 5.3.1) Subpackages: btrfsprogs-udev-rules libbtrfs0 - Update to 5.3.1: * libbtrfs: fix link breakage due to missing symbols - Updaet to 5.3: * mkfs: * new option to specify checksum algorithm (only crc32c) * fix xattr enumeration * dump-tree: BFS (breadth-first) traversal now default * libbtrfsutil: remove stale BTRFS_DEV_REPLACE_ITEM_STATE_x defines * ci: add support for gitlab * other: * preparatory work for more checksum algorithms * docs update * switch to docbook5 backend for asciidoc * fix build on uClibc due to missing backtrace() * lots of printf format fixups ==== cni-plugins ==== Version update (0.8.2 -> 0.8.3) - Update to version 0.8.3: * Enhancements: * static: prioritize the input sources for IPs (#400). * tuning: send gratuitous ARP in case of MAC address update (#403). * bandwidth: use uint64 for Bandwidth value (#389). * ptp: only override DNS conf if DNS settings provided (#388). * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383). * loopback support CNI CHECK and result cache (#374). * Better input validation: * vlan: add MTU validation to loadNetConf (#405). * macvlan: add MTU validation to loadNetConf (#404). * bridge: check vlan id when loading net conf (#394). * Bugfixes: * bugfix: defer after err check, or it may panic (#391). * portmap: Fix dual-stack support (#379). * firewall: don't return error in DEL if prevResult is not found (#390). * bump up libcni back to v0.7.1 (#377). * Tests: * integration: fix ip address collision in integration tests (#409). * testutils: newNS() works in a rootless user namespace (#401). * Bump Go version (#386). * Cleanup netns after test suite (#375). * Docs: * contributing doc: revise test script name to run (#396). * contributing doc: describe cnitool installation (#397). ==== cri-o ==== Version update (1.15.2 -> 1.16.0) Subpackages: cri-o-kubeadm-criconfig - Use single service macro invocation - Add shell completions directories to files - Add crio and crio-status shell completions - Add crio-wipe and crio-shutdown services - Update kubelet verbosity to `-v=2` - Update conmon cgroup to `system.slice` - Update crio.conf to match latest version - Update to v1.16.0: * Major Changes * Add support for manifest lists * Dual stack IPv6 support * HUP reload of SystemRegistries * file_locking is no longer a supported option in the configuration file * Hooks are no longer found implicitally. * conmon now lives in a separate repository and must be downloaded separately. * Minor * All OCI mounts are mounted as rw when a pod is privileged * CRI-O can now run on a cgroupv2 system (only with the runtime crun) * Add environment variables to CLI flags * Add crio-status client to conveniently query status of crio or a container * Conmon is now found in $PATH if a path isn't specified or is empty * Add metrics to configuration file * Bandwidth burst can only be 4GB * If another container manager shares CRI-O's storage (like podman), CRI-O no longer attempts to restore them * Increase validation for log_dir and runtime_type in configuration * Allow usage of short container ID in ContainerStats * Make image volumes writeable by the container user * Various man page fixes * The crio-wipe script is now included in the crio binary (as crio wipe), and only removes CRI-O containers and images. * Set some previously public packages as internal (client, lib, oci, pkg, tools, version) * infra container now spawned as not privileged ==== kernel-source ==== Version update (5.3.9 -> 5.3.11) - Linux 5.3.11 (bnc#1151927). - bonding: fix state transition issue in link monitoring (bnc#1151927). - CDC-NCM: handle incomplete transfer of MTU (bnc#1151927). - ipv4: Fix table id reference in fib_sync_down_addr (bnc#1151927). - net: ethernet: octeon_mgmt: Account for second possible VLAN header (bnc#1151927). - net: fix data-race in neigh_event_send() (bnc#1151927). - net: qualcomm: rmnet: Fix potential UAF when unregistering (bnc#1151927). - net/tls: fix sk_msg trim on fallback to copy mode (bnc#1151927). - net: usb: qmi_wwan: add support for DW5821e with eSIM support (bnc#1151927). - NFC: fdp: fix incorrect free object (bnc#1151927). - nfc: netlink: fix double device reference drop (bnc#1151927). - NFC: st21nfca: fix double free (bnc#1151927). - qede: fix NULL pointer deref in __qede_remove() (bnc#1151927). - net: mscc: ocelot: don't handle netdev events for other netdevs (bnc#1151927). - net: mscc: ocelot: fix NULL pointer on LAG slave removal (bnc#1151927). - net/tls: don't pay attention to sk_write_pending when pushing partial records (bnc#1151927). - net/tls: add a TX lock (bnc#1151927). - selftests/tls: add test for concurrent recv and send (bnc#1151927). - ipv6: fixes rt6_probe() and fib6_nh->last_probe init (bnc#1151927). - net: hns: Fix the stray netpoll locks causing deadlock in NAPI path (bnc#1151927). - net: prevent load/store tearing on sk->sk_stamp (bnc#1151927). - net: sched: prevent duplicate flower rules from tcf_proto destroy race (bnc#1151927). - net/smc: fix ethernet interface refcounting (bnc#1151927). - vsock/virtio: fix sock refcnt holding during the shutdown (bnc#1151927). - r8169: fix page read in r8168g_mdio_read (bnc#1151927). - ALSA: timer: Fix incorrectly assigned timer instance (bnc#1151927). - ALSA: bebob: fix to detect configured source of sampling clock for Focusrite Saffire Pro i/o series (bnc#1151927). - mm: memcontrol: fix NULL-ptr deref in percpu stats flush (bnc#1151927). - mm: memcontrol: fix network errors from failing __GFP_ATOMIC charges (bnc#1151927). - mm, meminit: recalculate pcpu batch and high limits after init completes (bnc#1151927). - mm: thp: handle page cache THP correctly in PageTransCompoundMap (bnc#1151927). - mm, vmstat: hide /proc/pagetypeinfo from normal users (bnc#1151927). - dump_stack: avoid the livelock of the dump_lock (bnc#1151927). - mm: slab: make page_cgroup_ino() to recognize non-compound slab pages properly (bnc#1151927). - btrfs: Consider system chunk array size for new SYSTEM chunks (bnc#1151927). - btrfs: tree-checker: Fix wrong check on max devid (bnc#1151927). - btrfs: save i_size to avoid double evaluation of i_size_read in compress_file_range (bnc#1151927). - tools: gpio: Use !building_out_of_srctree to determine srctree (bnc#1151927). - pinctrl: intel: Avoid potential glitches if pin is in GPIO mode (bnc#1151927). - perf tools: Fix time sorting (bnc#1151927). - perf map: Use zalloc for map_groups (bnc#1151927). - drm/radeon: fix si_enable_smc_cac() failed issue (bnc#1151927). - HID: wacom: generic: Treat serial number and related fields as unsigned (bnc#1151927). - mm/khugepaged: fix might_sleep() warn with CONFIG_HIGHPTE=y (bnc#1151927). - soundwire: depend on ACPI (bnc#1151927). - soundwire: depend on ACPI || OF (bnc#1151927). - soundwire: bus: set initial value to port_status (bnc#1151927). - blkcg: make blkcg_print_stat() print stats only for online blkgs (bnc#1151927). - arm64: Do not mask out PTE_RDONLY in pte_same() (bnc#1151927). - ASoC: rsnd: dma: fix SSI9 4/5/6/7 busif dma address (bnc#1151927). - ceph: fix use-after-free in __ceph_remove_cap() (bnc#1151927). - ceph: fix RCU case handling in ceph_d_revalidate() (bnc#1151927). - ceph: add missing check in d_revalidate snapdir handling (bnc#1151927). - ceph: don't try to handle hashed dentries in non-O_CREAT atomic_open (bnc#1151927). - ceph: don't allow copy_file_range when stripe_count != 1 (bnc#1151927). - iio: adc: stm32-adc: fix stopping dma (bnc#1151927). - iio: imu: adis16480: make sure provided frequency is positive (bnc#1151927). - iio: imu: inv_mpu6050: fix no data on MPU6050 (bnc#1151927). - iio: srf04: fix wrong limitation in distance measuring (bnc#1151927). - ARM: sunxi: Fix CPU powerdown on A83T (bnc#1151927). - ARM: dts: imx6-logicpd: Re-enable SNVS power key (bnc#1151927). - cpufreq: intel_pstate: Fix invalid EPB setting (bnc#1151927). - clone3: validate stack arguments (bnc#1151927). - netfilter: nf_tables: Align nft_expr private data to 64-bit (bnc#1151927). - netfilter: ipset: Fix an error code in ip_set_sockfn_get() (bnc#1151927). - intel_th: gth: Fix the window switching sequence (bnc#1151927). - intel_th: pci: Add Comet Lake PCH support (bnc#1151927). - intel_th: pci: Add Jasper Lake PCH support (bnc#1151927). - x86/dumpstack/64: Don't evaluate exception stacks before setup (bnc#1151927). - x86/apic/32: Avoid bogus LDR warnings (bnc#1151927). - SMB3: Fix persistent handles reconnect (bnc#1151927). - can: usb_8dev: fix use-after-free on disconnect (bnc#1151927). - can: flexcan: disable completely the ECC mechanism (bnc#1151927). - can: c_can: c_can_poll(): only read status register after status IRQ (bnc#1151927). - can: peak_usb: fix a potential out-of-sync while decoding packets (bnc#1151927). - can: rx-offload: can_rx_offload_queue_sorted(): fix error handling, avoid skb mem leak (bnc#1151927). - can: gs_usb: gs_can_open(): prevent memory leak (bnc#1151927). - can: dev: add missing of_node_put() after calling of_get_child_by_name() (bnc#1151927). - can: mcba_usb: fix use-after-free on disconnect (bnc#1151927). - can: peak_usb: fix slab info leak (bnc#1151927). - configfs: fix a deadlock in configfs_symlink() (bnc#1151927). - ALSA: usb-audio: More validations of descriptor units (bnc#1151927). - ALSA: usb-audio: Simplify parse_audio_unit() (bnc#1151927). - ALSA: usb-audio: Unify the release of usb_mixer_elem_info objects (bnc#1151927). - ALSA: usb-audio: Remove superfluous bLength checks (bnc#1151927). - ALSA: usb-audio: Clean up check_input_term() (bnc#1151927). - ALSA: usb-audio: Fix possible NULL dereference at create_yamaha_midi_quirk() (bnc#1151927). - ALSA: usb-audio: remove some dead code (bnc#1151927). - ALSA: usb-audio: Fix copy&paste error in the validator (bnc#1151927). - usbip: Implement SG support to vhci-hcd and stub driver (bnc#1151927). - HID: google: add magnemite/masterball USB ids (bnc#1151927). - dmaengine: sprd: Fix the link-list pointer register configuration issue (bnc#1151927). - bpf: lwtunnel: Fix reroute supplying invalid dst (bnc#1151927). - dmaengine: xilinx_dma: Fix 64-bit simple AXIDMA transfer (bnc#1151927). - dmaengine: xilinx_dma: Fix control reg update in vdma_channel_set_config (bnc#1151927). - dmaengine: sprd: Fix the possible memory leak issue (bnc#1151927). - HID: intel-ish-hid: fix wrong error handling in ishtp_cl_alloc_tx_ring() (bnc#1151927). - powerpc/32s: fix allow/prevent_user_access() when crossing segment boundaries (bnc#1151927). - RDMA/mlx5: Clear old rate limit when closing QP (bnc#1151927). - iw_cxgb4: fix ECN check on the passive accept (bnc#1151927). - RDMA/siw: free siw_base_qp in kref release routine (bnc#1151927). - RDMA/qedr: Fix reported firmware version (bnc#1151927). - IB/core: Use rdma_read_gid_l2_fields to compare GID L2 fields (bnc#1151927). - net/mlx5e: Tx, Fix assumption of single WQEBB of NOP in cleanup flow (bnc#1151927). - net/mlx5e: kTLS, Release reference on DUMPed fragments in shutdown flow (bnc#1151927). - net/mlx5e: TX, Fix consumer index of error cqe dump (bnc#1151927). - net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq (bnc#1151927). - net/mlx5: fix memory leak in mlx5_fw_fatal_reporter_dump (bnc#1151927). - selftests/bpf: More compatible nc options in test_tc_edt (bnc#1151927). - scsi: qla2xxx: fixup incorrect usage of host_byte (bnc#1151927). - scsi: lpfc: Check queue pointer before use (bnc#1151927). - scsi: ufs-bsg: Wake the device before sending raw upiu commands (bnc#1151927). - ARC: [plat-hsdk]: Enable on-board SPI NOR flash IC (bnc#1151927). - RDMA/uverbs: Prevent potential underflow (bnc#1151927). - bpf: Fix use after free in subprog's jited symbol removal (bnc#1151927). - net: stmmac: Fix the problem of tso_xmit (bnc#1151927). - net: openvswitch: free vport unless register_netdevice() succeeds (bnc#1151927). - scsi: lpfc: Honor module parameter lpfc_use_adisc (bnc#1151927). - scsi: qla2xxx: Initialized mailbox to prevent driver load failure (bnc#1151927). - bpf: Fix use after free in bpf_get_prog_name (bnc#1151927). - iwlwifi: pcie: fix PCI ID 0x2720 configs that should be soc (bnc#1151927). - iwlwifi: pcie: fix all 9460 entries for qnj (bnc#1151927). - iwlwifi: pcie: 0x2720 is qu and 0x30DC is not (bnc#1151927). - netfilter: nf_flow_table: set timeout before insertion into hashes (bnc#1151927). - drm/v3d: Fix memory leak in v3d_submit_cl_ioctl (bnc#1151927). - xsk: Fix registration of Rx-only sockets (bnc#1151927). - net: phy: smsc: LAN8740: add PHY_RST_AFTER_CLK_EN flag (bnc#1151927). - ipvs: don't ignore errors in case refcounting ip_vs module fails (bnc#1151927). - ipvs: move old_secure_tcp into struct netns_ipvs (bnc#1151927). - netfilter: nft_payload: fix missing check for matching length in offloads (bnc#1151927). - RDMA/nldev: Skip counter if port doesn't match (bnc#1151927). - bonding: fix unexpected IFF_BONDING bit unset (bnc#1151927). - bonding: use dynamic lockdep key instead of subclass (bnc#1151927). - macsec: fix refcnt leak in module exit routine (bnc#1151927). - virt_wifi: fix refcnt leak in module exit routine (bnc#1151927). - scsi: sd: define variable dif as unsigned int instead of bool (bnc#1151927). - usb: dwc3: select CONFIG_REGMAP_MMIO (bnc#1151927). - usb: fsl: Check memory resource before releasing it (bnc#1151927). - usb: gadget: udc: atmel: Fix interrupt storm in FIFO mode (bnc#1151927). - usb: gadget: composite: Fix possible double free memory bug (bnc#1151927). - usb: gadget: configfs: fix concurrent issue between composite APIs (bnc#1151927). - usb: dwc3: remove the call trace of USBx_GFLADJ (bnc#1151927). - perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise RIP validity (bnc#1151927). - perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family (10h) (bnc#1151927). - perf/x86/uncore: Fix event group support (bnc#1151927). - USB: Skip endpoints with 0 maxpacket length (bnc#1151927). - USB: ldusb: use unsigned size format specifiers (bnc#1151927). - usbip: tools: Fix read_usb_vudc_device() error path handling (bnc#1151927). - RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case (bnc#1151927). - RDMA/hns: Prevent memory leaks of eq->buf_list (bnc#1151927). - hwmon: (ina3221) Fix read timeout issue (bnc#1151927). - scsi: qla2xxx: stop timer in shutdown path (bnc#1151927). - sched/topology: Don't try to build empty sched domains (bnc#1151927). - sched/topology: Allow sched_asym_cpucapacity to be disabled (bnc#1151927). - nvme-multipath: fix possible io hang after ctrl reconnect (bnc#1151927). - net: hisilicon: Fix "Trying to free already-free IRQ" (bnc#1151927). - wimax: i2400: Fix memory leak in i2400m_op_rfkill_sw_toggle (bnc#1151927). - net: mscc: ocelot: fix vlan_filtering when enslaving to bridge before link is up (bnc#1151927). - net: mscc: ocelot: refuse to overwrite the port's native vlan (bnc#1151927). - iommu/amd: Apply the same IVRS IOAPIC workaround to Acer Aspire A315-41 (bnc#1151927). - mt76: dma: fix buffer unmap with non-linear skbs (bnc#1151927). - drm/amdgpu/sdma5: do not execute 0-sized IBs (v2) (bnc#1151927). - drm/sched: Set error to s_fence if HW job submission failed (bnc#1151927). - drm/amdgpu: If amdgpu_ib_schedule fails return back the error (bnc#1151927). - drm/amd/display: do not synchronize "drr" displays (bnc#1151927). - drm/amd/display: add 50us buffer as WA for pstate switch in active (bnc#1151927). - drm/amd/display: Passive DP->HDMI dongle detection fix (bnc#1151927). - dc.c:use kzalloc without test (bnc#1151927). - SUNRPC: The TCP back channel mustn't disappear while requests are outstanding (bnc#1151927). - SUNRPC: The RDMA back channel mustn't disappear while requests are outstanding (bnc#1151927). - SUNRPC: Destroy the back channel when we destroy the host transport (bnc#1151927). - hv_netvsc: Fix error handling in netvsc_attach() (bnc#1151927). - efi/tpm: Return -EINVAL when determining tpm final events log size fails (bnc#1151927). - efi: libstub/arm: Account for firmware reserved memory at the base of RAM (bnc#1151927). - x86, efi: Never relocate kernel below lowest acceptable address (bnc#1151927). - arm64: cpufeature: Enable Qualcomm Falkor errata 1009 for Kryo (bnc#1151927). - usb: dwc3: gadget: fix race when disabling ep with cancelled xfers (bnc#1151927). - arm64: apply ARM64_ERRATUM_845719 workaround for Brahma-B53 core (bnc#1151927). - arm64: Brahma-B53 is SSB and spectre v2 safe (bnc#1151927). - arm64: apply ARM64_ERRATUM_843419 workaround for Brahma-B53 core (bnc#1151927). - NFSv4: Don't allow a cached open with a revoked delegation (bnc#1151927). - net: ethernet: arc: add the missed clk_disable_unprepare (bnc#1151927). - igb: Fix constant media auto sense switching when no cable is connected (bnc#1151927). - e1000: fix memory leaks (bnc#1151927). - gve: Fixes DMA synchronization (bnc#1151927). - ocfs2: protect extent tree in ocfs2_prepare_inode_for_write() (bnc#1151927). - pinctrl: cherryview: Fix irq_valid_mask calculation (bnc#1151927). - clk: imx8m: Use SYS_PLL1_800M as intermediate parent of CLK_ARM (bnc#1151927). - timekeeping/vsyscall: Update VDSO data unconditionally (bnc#1151927). - mm/filemap.c: don't initiate writeback if mapping has no dirty pages (bnc#1151927). - cgroup,writeback: don't switch wbs immediately on dead wbs if the memcg is dead (bnc#1151927). - ARM: dts: stm32: change joystick pinctrl definition on stm32mp157c-ev1 (bnc#1151927). - ASoC: SOF: Intel: hda-stream: fix the CONFIG_ prefix missing (bnc#1151927). - usbip: Fix free of unallocated memory in vhci tx (bnc#1151927). - bonding: fix using uninitialized mode_lock (bnc#1151927). - netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 sets (bnc#1151927). - arm64: errata: Update stale comment (bnc#1151927). - net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (bnc#1151927). - drm/i915: Rename gen7 cmdparser tables (bnc#1151927). - drm/i915: Disable Secure Batches for gen6+ (bnc#1151927). - drm/i915: Remove Master tables from cmdparser (bnc#1151927). - drm/i915: Add support for mandatory cmdparsing (bnc#1151927). - drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (bnc#1151927). - drm/i915: Allow parsing of unsized batches (bnc#1151927). - drm/i915: Add gen9 BCS cmdparsing (bnc#1151927). - drm/i915/cmdparser: Use explicit goto for error paths (bnc#1151927). - drm/i915/cmdparser: Add support for backward jumps (bnc#1151927). - drm/i915/cmdparser: Ignore Length operands during command matching (bnc#1151927). - drm/i915: Lower RM timeout to avoid DSI hard hangs (bnc#1151927). - drm/i915/gen8+: Add RC6 CTX corruption WA (bnc#1151927). - drm/i915/cmdparser: Fix jump whitelist clearing (bnc#1151927). - x86/msr: Add the IA32_TSX_CTRL MSR (bnc#1151927). - x86/cpu: Add a helper function x86_read_arch_cap_msr() (bnc#1151927). - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (bnc#1151927). - x86/speculation/taa: Add mitigation for TSX Async Abort (bnc#1151927). - x86/speculation/taa: Add sysfs reporting for TSX Async Abort (bnc#1151927). - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (bnc#1151927). - x86/tsx: Add "auto" option to the tsx= cmdline parameter (bnc#1151927). - x86/speculation/taa: Add documentation for TSX Async Abort (bnc#1151927). - x86/tsx: Add config options to set tsx=on|off|auto (bnc#1151927). - x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs (bnc#1151927). - x86/bugs: Add ITLB_MULTIHIT bug infrastructure (bnc#1151927). - x86/cpu: Add Tremont to the cpu vulnerability whitelist (bnc#1151927). - cpu/speculation: Uninline and export CPU mitigations helpers (bnc#1151927). - Documentation: Add ITLB_MULTIHIT documentation (bnc#1151927). - kvm: x86, powerpc: do not allow clearing largepages debugfs entry (bnc#1151927). - kvm: mmu: ITLB_MULTIHIT mitigation (bnc#1151927). - kvm: Add helper function for creating VM worker threads (bnc#1151927). - kvm: x86: mmu: Recovery of shattered NX large pages (bnc#1151927). - Update config files. Set X86_INTEL_TSX_MODE_OFF=y (the default) - commit 0a195a8 - usb: dwc3: pci: prevent memory leak in dwc3_pci_probe (CVE-2019-18813,bsc#1156278). - ASoC: SOF: Fix memory leak in sof_dfsentry_write (CVE-2019-18812,bsc#1156277). - commit 8a126f1 - Refresh patches.suse/stacktrace-don-t-skip-first-entry-on-noncurrent-task.patch. Update upstream status. - commit baac78a - Linux 5.3.10 (bnc#1151927). - usb: gadget: udc: core: Fix segfault if udc_bind_to_driver() for pending driver fails (bnc#1151927). - arm64: dts: ti: k3-am65-main: Fix gic-its node unit-address (bnc#1151927). - ASoC: pcm3168a: The codec does not support S32_LE (bnc#1151927). - selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (bnc#1151927). - selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (bnc#1151927). - CIFS: Fix retry mid list corruption on reconnects (bnc#1151927). - platform/x86: pmc_atom: Add Siemens SIMATIC IPC227E to critclk_systems DMI table (bnc#1151927). - net/flow_dissector: switch to siphash (bnc#1151927). - net: bcmgenet: reset 40nm EPHY on energy detect (bnc#1151927). - net: phy: bcm7xxx: define soft_reset for 40nm EPHY (bnc#1151927). - net: netem: correct the parent's backlog when corrupted packet was dropped (bnc#1151927). - r8152: add device id for Lenovo ThinkPad USB-C Dock Gen 2 (bnc#1151927). - net: usb: lan78xx: Connect PHY before registering MAC (bnc#1151927). - net: reorder 'struct net' fields to avoid false sharing (bnc#1151927). - net: netem: fix error path for corrupted GSO frames (bnc#1151927). - net: hns3: fix mis-counting IRQ vector numbers issue (bnc#1151927). - net: ensure correct skb->tstamp in various fragmenters (bnc#1151927). - net: dsa: fix switch tree list (bnc#1151927). - net: dsa: b53: Do not clear existing mirrored port mask (bnc#1151927). - net: bcmgenet: don't set phydev->link from MAC (bnc#1151927). - ipv4: fix IPSKB_FRAG_PMTU handling with fragmentation (bnc#1151927). - net/mlx5e: Fix handling of compressed CQEs in case of low NAPI budget (bnc#1151927). - net/mlx5e: Fix ethtool self test: link speed (bnc#1151927). - r8169: fix wrong PHY ID issue with RTL8168dp (bnc#1151927). - mlxsw: core: Unpublish devlink parameters during reload (bnc#1151927). - net/mlx5: Fix rtable reference leak (bnc#1151927). - net/smc: fix refcounting for non-blocking connect() (bnc#1151927). - net/mlx5: Fix flow counter list auto bits struct (bnc#1151927). - net/mlx5e: Initialize on stack link modes bitmap (bnc#1151927). - net/mlx5e: Remove incorrect match criteria assignment line (bnc#1151927). - net/mlx5e: Determine source port properly for vlan push action (bnc#1151927). - rxrpc: Fix handling of last subpacket of jumbo packet (bnc#1151927). - net: phylink: Fix phylink_dbg() macro (bnc#1151927). - keys: Fix memory leak in copy_net_ns (bnc#1151927). - net/smc: keep vlan_id for SMC-R in smc_listen_work() (bnc#1151927). - net/smc: fix closing of fallback SMC sockets (bnc#1151927). - selftests: fib_tests: add more tests for metric update (bnc#1151927). - ipv4: fix route update on metric change (bnc#1151927). - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (bnc#1151927). - net: use skb_queue_empty_lockless() in busy poll contexts (bnc#1151927). - net: use skb_queue_empty_lockless() in poll() handlers (bnc#1151927). - udp: use skb_queue_empty_lockless() (bnc#1151927). - net: add skb_queue_empty_lockless() (bnc#1151927). - vxlan: check tun_info options_len properly (bnc#1151927). - udp: fix data-race in udp_set_dev_scratch() (bnc#1151927). - selftests: net: reuseport_dualstack: fix uninitalized parameter (bnc#1151927). - net: Zeroing the structure ethtool_wolinfo in ethtool_get_wol() (bnc#1151927). - net: usb: lan78xx: Disable interrupts before calling generic_handle_irq() (bnc#1151927). - net: rtnetlink: fix a typo fbd -> fdb (bnc#1151927). - netns: fix GFP flags in rtnl_net_notifyid() (bnc#1151927). - net/mlx4_core: Dynamically set guaranteed amount of counters per VF (bnc#1151927). - net: hisilicon: Fix ping latency when deal with high throughput (bnc#1151927). - net: fix sk_page_frag() recursion from memory reclaim (bnc#1151927). - net: ethernet: ftgmac100: Fix DMA coherency issue with SW checksum (bnc#1151927). - net: dsa: bcm_sf2: Fix IMP setup for port different than 8 (bnc#1151927). - net: annotate lockless accesses to sk->sk_napi_id (bnc#1151927). - net: annotate accesses to sk->sk_incoming_cpu (bnc#1151927). - inet: stop leaking jiffies on the wire (bnc#1151927). - erspan: fix the tun_info options_len check for erspan (bnc#1151927). - dccp: do not leak jiffies on the wire (bnc#1151927). - cxgb4: request the TX CIDX updates to status page (bnc#1151927). - cxgb4: fix panic when attaching to ULD fail (bnc#1151927). - nbd: handle racing with error'ed out commands (bnc#1151927). - nbd: protect cmd->status with cmd->lock (bnc#1151927). - irqchip/sifive-plic: Skip contexts except supervisor in plic_init() (bnc#1151927). - cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (bnc#1151927). - i2c: stm32f7: remove warning when compiling with W=1 (bnc#1151927). - i2c: stm32f7: fix a race in slave mode with arbitration loss irq (bnc#1151927). - i2c: stm32f7: fix first byte to send in slave mode (bnc#1151927). - i2c: mt65xx: fix NULL ptr dereference (bnc#1151927). - irqchip/gic-v3-its: Use the exact ITSList for VMOVP (bnc#1151927). - MIPS: bmips: mark exception vectors as char arrays (bnc#1151927). - of: unittest: fix memory leak in unittest_data_add (bnc#1151927). - ALSA: hda: Add Tigerlake/Jasperlake PCI ID (bnc#1151927). - selftests: kvm: fix sync_regs_test with newer gccs (bnc#1151927). - selftests: kvm: vmx_set_nested_state_test: don't check for VMX support twice (bnc#1151927). - ARM: 8926/1: v7m: remove register save to stack before svc (bnc#1151927). - drm/komeda: Don't flush inactive pipes (bnc#1151927). - i2c: aspeed: fix master pending state handling (bnc#1151927). - ARM: dts: bcm2837-rpi-cm3: Avoid leds-gpio probing issue (bnc#1151927). - tracing: Fix "gfp_t" format for synthetic events (bnc#1151927). - ASoC: SOF: control: return true when kcontrol values change (bnc#1151927). - ASoC: Intel: sof-rt5682: add a check for devm_clk_get (bnc#1151927). - scsi: hpsa: add missing hunks in reset-patch (bnc#1151927). - scsi: target: core: Do not overwrite CDB byte 1 (bnc#1151927). - drm/amdgpu: fix error handling in amdgpu_bo_list_create (bnc#1151927). - drm/amdgpu: fix potential VM faults (bnc#1151927). - ARM: davinci: dm365: Fix McBSP dma_slave_map entry (bnc#1151927). - perf kmem: Fix memory leak in compact_gfp_flags() (bnc#1151927). - 8250-men-mcb: fix error checking when get_num_ports returns - ENODEV (bnc#1151927). - perf c2c: Fix memory leak in build_cl_output() (bnc#1151927). - perf tools: Fix resource leak of closedir() on the error paths (bnc#1151927). - arm64: dts: imx8mm: Use correct clock for usdhc's ipg clk (bnc#1151927). - arm64: dts: imx8mq: Use correct clock for usdhc's ipg clk (bnc#1151927). - ARM: dts: imx7s: Correct GPT's ipg clock source (bnc#1151927). - ARM: dts: vf610-zii-scu4-aib: Specify 'i2c-mux-idle-disconnect' (bnc#1151927). - ARM: dts: imx6q-logicpd: Re-Enable SNVS power key (bnc#1151927). - arm64: dts: lx2160a: Correct CPU core idle state name (bnc#1151927). - arm64: dts: rockchip: Fix usb-c on Hugsun X99 TV Box (bnc#1151927). - arm64: dts: rockchip: fix RockPro64 sdmmc settings (bnc#1151927). - ARM: 8914/1: NOMMU: Fix exc_ret for XIP (bnc#1151927). - ARM: 8908/1: add __always_inline to functions called from __get_user_check() (bnc#1151927). - scsi: fix kconfig dependency warning related to 53C700_LE_ON_BE (bnc#1151927). - scsi: sni_53c710: fix compilation error (bnc#1151927). - scsi: scsi_dh_alua: handle RTPG sense code correctly during state transitions (bnc#1151927). - scsi: qla2xxx: fix a potential NULL pointer dereference (bnc#1151927). - ARM: mm: fix alignment handler faults under memory pressure (bnc#1151927). - ARM: dts: Use level interrupt for omap4 & 5 wlcore (bnc#1151927). - ASoC: simple_card_utils.h: Fix potential multiple redefinition error (bnc#1151927). - ASoC: msm8916-wcd-digital: add missing MIX2 path for RX1/2 (bnc#1151927). - ARM: dts: am3874-iceboard: Fix 'i2c-mux-idle-disconnect' usage (bnc#1151927). - arm64: dts: zii-ultra: fix ARM regulator states (bnc#1151927). - pinctrl: stmfx: fix null pointer on remove (bnc#1151927). - pinctrl: ns2: Fix off by one bugs in ns2_pinmux_enable() (bnc#1151927). - arm64: dts: rockchip: fix RockPro64 sdhci settings (bnc#1151927). - arm64: dts: rockchip: fix RockPro64 vdd-log regulator settings (bnc#1151927). - ARM: dts: logicpd-torpedo-som: Remove twl_keypad (bnc#1151927). - arm64: dts: rockchip: fix Rockpro64 RK808 interrupt line (bnc#1151927). - ASoc: rockchip: i2s: Fix RPM imbalance (bnc#1151927). - ASoC: wm_adsp: Don't generate kcontrols without READ flags (bnc#1151927). - regulator: pfuze100-regulator: Variable "val" in pfuze100_regulator_probe() could be uninitialized (bnc#1151927). - ASoC: intel: bytcr_rt5651: add null check to support_button_press (bnc#1151927). - ASoC: intel: sof_rt5682: add remove function to disable jack (bnc#1151927). - ASoC: rt5682: add NULL handler to set_jack function (bnc#1151927). - ASoC: SOF: Intel: hda: Disable DMI L1 entry during capture (bnc#1151927). - Update config files. CONFIG_SND_SOC_SOF_HDA_ALWAYS_ENABLE_DMI_L1=n as per default. - ASoC: SOF: Intel: initialise and verify FW crash dump data (bnc#1151927). - ASoC: SOF: Intel: hda: fix warnings during FW load (bnc#1151927). - ASoC: SOF: topology: fix parse fail issue for byte/bool tuple types (bnc#1151927). - ASoC: SOF: loader: fix kernel oops on firmware boot failure (bnc#1151927). - pinctrl: intel: Allocate IRQ chip dynamic (bnc#1151927). - regulator: ti-abb: Fix timeout in ti_abb_wait_txdone/ti_abb_clear_all_txdone (bnc#1151927). - arm64: dts: Fix gpio to pinmux mapping (bnc#1151927). - arm64: dts: allwinner: a64: sopine-baseboard: Add PHY regulator delay (bnc#1151927). - arm64: dts: allwinner: a64: Drop PMU node (bnc#1151927). - arm64: dts: allwinner: a64: pine64-plus: Add PHY regulator delay (bnc#1151927). - ASoC: topology: Fix a signedness bug in soc_tplg_dapm_widget_create() (bnc#1151927). - regulator: da9062: fix suspend_enable/disable preparation (bnc#1151927). - ASoC: wm8994: Do not register inapplicable controls for WM1811 (bnc#1151927). - ASoC: samsung: arndale: Add missing OF node dereferencing (bnc#1151927). - regulator: of: fix suspend-min/max-voltage parsing (bnc#1151927). - commit eedf3c5 - fjes: Handle workqueue allocation failure (CVE-2019-16231,bsc#1150466). - commit 3bf0c5a ==== rdma-core ==== Subpackages: libefa1 libibverbs libibverbs1 libmlx4-1 libmlx5-1 librdmacm1 - Add libefa1 to baselibs.conf - Fix baselibs.conf - BuildRequire valgrind-client-headers instead of full valgrind-devel where available. ==== setools ==== Version update (4.2.1 -> 4.2.2) - Add python3.8-compat.patch to allow build with Python 3.8 Still doesn't work though because of gh#SELinuxProject/setools#31 - Update to the upstream version 4.2.2: - Remove source policy references from man pages, as loading source policies is no longer supported. - Fixed a performance regression in alias loading after alias dereferencing fixes in 4.2.1. ==== suse-module-tools ==== Version update (15.2.5 -> 15.2.7) - Update to version 15.2.7: * spec file: avoid %{_libexecdir} - Update to version 15.2.6: * modprobe.conf: add dependency of papr_scm on libnvdimm (bsc#1142152, ltc#176292, FATE#327775). -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191112 released!
by Richard Brown 18 Nov '19

18 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: podman (1.6.1 -> 1.6.2) === Details === ==== podman ==== Version update (1.6.1 -> 1.6.2) Subpackages: podman-cni-config - Add container-start-fix.patch to correct output of container-start to show container_name, not _id. - Update podman to v1.6.2 * Features - Added a --runtime flag to podman system migrate to allow the OCI runtime for all containers to be reset, to ease transition to the crun runtime on CGroups V2 systems until runc gains full support - The podman rm command can now remove containers in broken states which previously could not be removed - The podman info command, when run without root, now shows information on UID and GID mappings in the rootless user namespace - Added podman build --squash-all flag, which squashes all layers (including those of the base image) into one layer - The --systemd flag to podman run and podman create now accepts a string argument and allows a new value, always, which forces systemd support without checking if the the container entrypoint is systemd * Bugfixes - Fixed a bug where the podman top command did not work on systems using CGroups V2 (#4192) - Fixed a bug where rootless Podman could double-close a file, leading to a panic - Fixed a bug where rootless Podman could fail to retrieve some containers while refreshing the state - Fixed a bug where podman start --attach --sig-proxy=false would still proxy signals into the container - Fixed a bug where Podman would unconditionally use a non-default path for authentication credentials (auth.json), breaking podman login integration with skopeo and other tools using the containers/image library - Fixed a bug where podman ps --format=json and podman images - -format=json would display null when no results were returned, instead of valid JSON - Fixed a bug where podman build --squash was incorrectly squashing all layers into one, instead of only new layers - Fixed a bug where rootless Podman would allow volumes with options to be mounted (mounting volumes requires root), creating an inconsistent state where volumes reported as mounted but were not (#4248) - Fixed a bug where volumes which failed to unmount could not be removed (#4247) - Fixed a bug where Podman incorrectly handled some errors relating to unmounted or missing containers in containers/storage - Fixed a bug where podman stats was broken on systems running CGroups V2 when run rootless (#4268) - Fixed a bug where the podman start command would print the short container ID, instead of the full ID - Fixed a bug where containers created with an OCI runtime that is no longer available (uninstalled or removed from the config file) would not appear in podman ps and could not be removed via podman rm - Fixed a bug where containers restored via podman container restore --import would retain the CGroup path of the original container, even if their container ID changed; thus, multiple containers created from the same checkpoint would all share the same CGroup * Misc - The default PID limit for containers is now set to 4096. It can be adjusted back to the old default (unlimited) by passing - -pids-limit 0 to podman create and podman run - The podman start --attach command now automatically attaches STDIN if the container was created with -i - The podman network create command now validates network names using the same regular expression as container and pod names - The --systemd flag to podman run and podman create will now only enable systemd mode when the binary being run inside the container is /sbin/init, /usr/sbin/init, or ends in systemd (previously detected any path ending in init or systemd) - Updated vendored Buildah to 1.11.3 - Updated vendored containers/storage to 1.13.5 - Updated vendored containers/image to 4.0.1 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191112 released!
by Richard Brown 18 Nov '19

18 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: cri-o kubernetes kubic-control podman (1.6.1 -> 1.6.2) weave (2.5.2 -> 2.6.0) === Details === ==== cri-o ==== Subpackages: cri-o-kubeadm-criconfig - Switch to `systemd` cgroup driver in kubelet config also - Switch to `systemd` cgroup manager in replacement for `cgroupfs` - Remove obsolete Groups tag (fate#326485) ==== kubernetes ==== Subpackages: kubernetes-client kubernetes-kubeadm kubernetes-kubelet - Ensure that BPPFS is mounted before starting kubelet (bsc#1146991) ==== kubic-control ==== Subpackages: kubicctl kubicd - Fix path of /usr/etc/kubicd ==== podman ==== Version update (1.6.1 -> 1.6.2) Subpackages: podman-cni-config - Add container-start-fix.patch to correct output of container-start to show container_name, not _id. - Update podman to v1.6.2 * Features - Added a --runtime flag to podman system migrate to allow the OCI runtime for all containers to be reset, to ease transition to the crun runtime on CGroups V2 systems until runc gains full support - The podman rm command can now remove containers in broken states which previously could not be removed - The podman info command, when run without root, now shows information on UID and GID mappings in the rootless user namespace - Added podman build --squash-all flag, which squashes all layers (including those of the base image) into one layer - The --systemd flag to podman run and podman create now accepts a string argument and allows a new value, always, which forces systemd support without checking if the the container entrypoint is systemd * Bugfixes - Fixed a bug where the podman top command did not work on systems using CGroups V2 (#4192) - Fixed a bug where rootless Podman could double-close a file, leading to a panic - Fixed a bug where rootless Podman could fail to retrieve some containers while refreshing the state - Fixed a bug where podman start --attach --sig-proxy=false would still proxy signals into the container - Fixed a bug where Podman would unconditionally use a non-default path for authentication credentials (auth.json), breaking podman login integration with skopeo and other tools using the containers/image library - Fixed a bug where podman ps --format=json and podman images - -format=json would display null when no results were returned, instead of valid JSON - Fixed a bug where podman build --squash was incorrectly squashing all layers into one, instead of only new layers - Fixed a bug where rootless Podman would allow volumes with options to be mounted (mounting volumes requires root), creating an inconsistent state where volumes reported as mounted but were not (#4248) - Fixed a bug where volumes which failed to unmount could not be removed (#4247) - Fixed a bug where Podman incorrectly handled some errors relating to unmounted or missing containers in containers/storage - Fixed a bug where podman stats was broken on systems running CGroups V2 when run rootless (#4268) - Fixed a bug where the podman start command would print the short container ID, instead of the full ID - Fixed a bug where containers created with an OCI runtime that is no longer available (uninstalled or removed from the config file) would not appear in podman ps and could not be removed via podman rm - Fixed a bug where containers restored via podman container restore --import would retain the CGroup path of the original container, even if their container ID changed; thus, multiple containers created from the same checkpoint would all share the same CGroup * Misc - The default PID limit for containers is now set to 4096. It can be adjusted back to the old default (unlimited) by passing - -pids-limit 0 to podman create and podman run - The podman start --attach command now automatically attaches STDIN if the container was created with -i - The podman network create command now validates network names using the same regular expression as container and pod names - The --systemd flag to podman run and podman create will now only enable systemd mode when the binary being run inside the container is /sbin/init, /usr/sbin/init, or ends in systemd (previously detected any path ending in init or systemd) - Updated vendored Buildah to 1.11.3 - Updated vendored containers/storage to 1.13.5 - Updated vendored containers/image to 4.0.1 ==== weave ==== Version update (2.5.2 -> 2.6.0) - Update weave to 2.6.0 - Fix a race condition in Kubernetes addon when reclaiming IP addresses after node deletion #3724, #3716 - Buffer events so Docker won't drop them, and Weave Net can clean up after dead containers #3432, #3705 - Weave reconnect occasionally fails after network interface disconnect #3666, #3669, #3676 - Ingress NetworkPolicy would accepts all traffic when specifying both IPBlock and port #3653, #3654 - Support both podSelector and namespaceSelector in NetworkPolicy #3312, #3647 - Only add default-drop egress rule if network policies are in use #3639 - Manifests use 'apps/v1' rather than deprecated 'apps/v1beta1' #3660 - Avoid Weave Net pods being evicted by setting priorityClassName: system-node-critical #3697 - Manifests use recommended DNS policy ClusterFirstWithHostNet #3692 - Weave Net now tolerates 'NoExecute' taint #3655 - Allow extra arguments to NetworkPolicy controller to be set in an environment variable #3683 - Stop reporting a failure to connect to self #3454, #3585 - Minor reduction in log noise when reclaiming IPs #3710 - Update weave.yaml for kubernetes 1.16 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191112 released!
by Richard Brown 18 Nov '19

18 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: podman (1.6.1 -> 1.6.2) === Details === ==== podman ==== Version update (1.6.1 -> 1.6.2) Subpackages: podman-cni-config - Add container-start-fix.patch to correct output of container-start to show container_name, not _id. - Update podman to v1.6.2 * Features - Added a --runtime flag to podman system migrate to allow the OCI runtime for all containers to be reset, to ease transition to the crun runtime on CGroups V2 systems until runc gains full support - The podman rm command can now remove containers in broken states which previously could not be removed - The podman info command, when run without root, now shows information on UID and GID mappings in the rootless user namespace - Added podman build --squash-all flag, which squashes all layers (including those of the base image) into one layer - The --systemd flag to podman run and podman create now accepts a string argument and allows a new value, always, which forces systemd support without checking if the the container entrypoint is systemd * Bugfixes - Fixed a bug where the podman top command did not work on systems using CGroups V2 (#4192) - Fixed a bug where rootless Podman could double-close a file, leading to a panic - Fixed a bug where rootless Podman could fail to retrieve some containers while refreshing the state - Fixed a bug where podman start --attach --sig-proxy=false would still proxy signals into the container - Fixed a bug where Podman would unconditionally use a non-default path for authentication credentials (auth.json), breaking podman login integration with skopeo and other tools using the containers/image library - Fixed a bug where podman ps --format=json and podman images - -format=json would display null when no results were returned, instead of valid JSON - Fixed a bug where podman build --squash was incorrectly squashing all layers into one, instead of only new layers - Fixed a bug where rootless Podman would allow volumes with options to be mounted (mounting volumes requires root), creating an inconsistent state where volumes reported as mounted but were not (#4248) - Fixed a bug where volumes which failed to unmount could not be removed (#4247) - Fixed a bug where Podman incorrectly handled some errors relating to unmounted or missing containers in containers/storage - Fixed a bug where podman stats was broken on systems running CGroups V2 when run rootless (#4268) - Fixed a bug where the podman start command would print the short container ID, instead of the full ID - Fixed a bug where containers created with an OCI runtime that is no longer available (uninstalled or removed from the config file) would not appear in podman ps and could not be removed via podman rm - Fixed a bug where containers restored via podman container restore --import would retain the CGroup path of the original container, even if their container ID changed; thus, multiple containers created from the same checkpoint would all share the same CGroup * Misc - The default PID limit for containers is now set to 4096. It can be adjusted back to the old default (unlimited) by passing - -pids-limit 0 to podman create and podman run - The podman start --attach command now automatically attaches STDIN if the container was created with -i - The podman network create command now validates network names using the same regular expression as container and pod names - The --systemd flag to podman run and podman create will now only enable systemd mode when the binary being run inside the container is /sbin/init, /usr/sbin/init, or ends in systemd (previously detected any path ending in init or systemd) - Updated vendored Buildah to 1.11.3 - Updated vendored containers/storage to 1.13.5 - Updated vendored containers/image to 4.0.1 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191112 released!
by Richard Brown 18 Nov '19

18 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: cri-o kubernetes kubic-control podman (1.6.1 -> 1.6.2) weave (2.5.2 -> 2.6.0) === Details === ==== cri-o ==== Subpackages: cri-o-kubeadm-criconfig - Switch to `systemd` cgroup driver in kubelet config also - Switch to `systemd` cgroup manager in replacement for `cgroupfs` - Remove obsolete Groups tag (fate#326485) ==== kubernetes ==== Subpackages: kubernetes-client kubernetes-kubeadm kubernetes-kubelet - Ensure that BPPFS is mounted before starting kubelet (bsc#1146991) ==== kubic-control ==== Subpackages: kubicctl kubicd - Fix path of /usr/etc/kubicd ==== podman ==== Version update (1.6.1 -> 1.6.2) Subpackages: podman-cni-config - Add container-start-fix.patch to correct output of container-start to show container_name, not _id. - Update podman to v1.6.2 * Features - Added a --runtime flag to podman system migrate to allow the OCI runtime for all containers to be reset, to ease transition to the crun runtime on CGroups V2 systems until runc gains full support - The podman rm command can now remove containers in broken states which previously could not be removed - The podman info command, when run without root, now shows information on UID and GID mappings in the rootless user namespace - Added podman build --squash-all flag, which squashes all layers (including those of the base image) into one layer - The --systemd flag to podman run and podman create now accepts a string argument and allows a new value, always, which forces systemd support without checking if the the container entrypoint is systemd * Bugfixes - Fixed a bug where the podman top command did not work on systems using CGroups V2 (#4192) - Fixed a bug where rootless Podman could double-close a file, leading to a panic - Fixed a bug where rootless Podman could fail to retrieve some containers while refreshing the state - Fixed a bug where podman start --attach --sig-proxy=false would still proxy signals into the container - Fixed a bug where Podman would unconditionally use a non-default path for authentication credentials (auth.json), breaking podman login integration with skopeo and other tools using the containers/image library - Fixed a bug where podman ps --format=json and podman images - -format=json would display null when no results were returned, instead of valid JSON - Fixed a bug where podman build --squash was incorrectly squashing all layers into one, instead of only new layers - Fixed a bug where rootless Podman would allow volumes with options to be mounted (mounting volumes requires root), creating an inconsistent state where volumes reported as mounted but were not (#4248) - Fixed a bug where volumes which failed to unmount could not be removed (#4247) - Fixed a bug where Podman incorrectly handled some errors relating to unmounted or missing containers in containers/storage - Fixed a bug where podman stats was broken on systems running CGroups V2 when run rootless (#4268) - Fixed a bug where the podman start command would print the short container ID, instead of the full ID - Fixed a bug where containers created with an OCI runtime that is no longer available (uninstalled or removed from the config file) would not appear in podman ps and could not be removed via podman rm - Fixed a bug where containers restored via podman container restore --import would retain the CGroup path of the original container, even if their container ID changed; thus, multiple containers created from the same checkpoint would all share the same CGroup * Misc - The default PID limit for containers is now set to 4096. It can be adjusted back to the old default (unlimited) by passing - -pids-limit 0 to podman create and podman run - The podman start --attach command now automatically attaches STDIN if the container was created with -i - The podman network create command now validates network names using the same regular expression as container and pod names - The --systemd flag to podman run and podman create will now only enable systemd mode when the binary being run inside the container is /sbin/init, /usr/sbin/init, or ends in systemd (previously detected any path ending in init or systemd) - Updated vendored Buildah to 1.11.3 - Updated vendored containers/storage to 1.13.5 - Updated vendored containers/image to 4.0.1 ==== weave ==== Version update (2.5.2 -> 2.6.0) - Update weave to 2.6.0 - Fix a race condition in Kubernetes addon when reclaiming IP addresses after node deletion #3724, #3716 - Buffer events so Docker won't drop them, and Weave Net can clean up after dead containers #3432, #3705 - Weave reconnect occasionally fails after network interface disconnect #3666, #3669, #3676 - Ingress NetworkPolicy would accepts all traffic when specifying both IPBlock and port #3653, #3654 - Support both podSelector and namespaceSelector in NetworkPolicy #3312, #3647 - Only add default-drop egress rule if network policies are in use #3639 - Manifests use 'apps/v1' rather than deprecated 'apps/v1beta1' #3660 - Avoid Weave Net pods being evicted by setting priorityClassName: system-node-critical #3697 - Manifests use recommended DNS policy ClusterFirstWithHostNet #3692 - Weave Net now tolerates 'NoExecute' taint #3655 - Allow extra arguments to NetworkPolicy controller to be set in an environment variable #3683 - Stop reporting a failure to connect to self #3454, #3585 - Minor reduction in log noise when reclaiming IPs #3710 - Update weave.yaml for kubernetes 1.16 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] Can we have vagrant boxes for kubic and MicroOS?
by Johannes Kastl 15 Nov '19

15 Nov '19

Hi all, I just had a chat with Dan Čermák because I think it would be great to not only have Tumbleweed and (hopefully soon) Leap vagrant boxes, but rather all of our "products". So, can we have official vagrant boxes for Kubic and MicroOS? Kind Regards, Johannes -- Johannes Kastl Linux Consultant & Trainer Tel.: +49 (0) 151 2372 5802 Mail: kastl(a)b1-systems.de B1 Systems GmbH Osterfeldstraße 7 / 85088 Vohburg http://www.b1-systems.de GF: Ralph Dehner Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537

4 8

[opensuse-kubic] New MicroOS snapshot 20191112 released!
by Richard Brown 13 Nov '19

13 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: podman (1.6.1 -> 1.6.2) === Details === ==== podman ==== Version update (1.6.1 -> 1.6.2) Subpackages: podman-cni-config - Add container-start-fix.patch to correct output of container-start to show container_name, not _id. - Update podman to v1.6.2 * Features - Added a --runtime flag to podman system migrate to allow the OCI runtime for all containers to be reset, to ease transition to the crun runtime on CGroups V2 systems until runc gains full support - The podman rm command can now remove containers in broken states which previously could not be removed - The podman info command, when run without root, now shows information on UID and GID mappings in the rootless user namespace - Added podman build --squash-all flag, which squashes all layers (including those of the base image) into one layer - The --systemd flag to podman run and podman create now accepts a string argument and allows a new value, always, which forces systemd support without checking if the the container entrypoint is systemd * Bugfixes - Fixed a bug where the podman top command did not work on systems using CGroups V2 (#4192) - Fixed a bug where rootless Podman could double-close a file, leading to a panic - Fixed a bug where rootless Podman could fail to retrieve some containers while refreshing the state - Fixed a bug where podman start --attach --sig-proxy=false would still proxy signals into the container - Fixed a bug where Podman would unconditionally use a non-default path for authentication credentials (auth.json), breaking podman login integration with skopeo and other tools using the containers/image library - Fixed a bug where podman ps --format=json and podman images - -format=json would display null when no results were returned, instead of valid JSON - Fixed a bug where podman build --squash was incorrectly squashing all layers into one, instead of only new layers - Fixed a bug where rootless Podman would allow volumes with options to be mounted (mounting volumes requires root), creating an inconsistent state where volumes reported as mounted but were not (#4248) - Fixed a bug where volumes which failed to unmount could not be removed (#4247) - Fixed a bug where Podman incorrectly handled some errors relating to unmounted or missing containers in containers/storage - Fixed a bug where podman stats was broken on systems running CGroups V2 when run rootless (#4268) - Fixed a bug where the podman start command would print the short container ID, instead of the full ID - Fixed a bug where containers created with an OCI runtime that is no longer available (uninstalled or removed from the config file) would not appear in podman ps and could not be removed via podman rm - Fixed a bug where containers restored via podman container restore --import would retain the CGroup path of the original container, even if their container ID changed; thus, multiple containers created from the same checkpoint would all share the same CGroup * Misc - The default PID limit for containers is now set to 4096. It can be adjusted back to the old default (unlimited) by passing - -pids-limit 0 to podman create and podman run - The podman start --attach command now automatically attaches STDIN if the container was created with -i - The podman network create command now validates network names using the same regular expression as container and pod names - The --systemd flag to podman run and podman create will now only enable systemd mode when the binary being run inside the container is /sbin/init, /usr/sbin/init, or ends in systemd (previously detected any path ending in init or systemd) - Updated vendored Buildah to 1.11.3 - Updated vendored containers/storage to 1.13.5 - Updated vendored containers/image to 4.0.1 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191112 released!
by Richard Brown 13 Nov '19

13 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: cri-o kubernetes kubic-control podman (1.6.1 -> 1.6.2) weave (2.5.2 -> 2.6.0) === Details === ==== cri-o ==== Subpackages: cri-o-kubeadm-criconfig - Switch to `systemd` cgroup driver in kubelet config also - Switch to `systemd` cgroup manager in replacement for `cgroupfs` - Remove obsolete Groups tag (fate#326485) ==== kubernetes ==== Subpackages: kubernetes-client kubernetes-kubeadm kubernetes-kubelet - Ensure that BPPFS is mounted before starting kubelet (bsc#1146991) ==== kubic-control ==== Subpackages: kubicctl kubicd - Fix path of /usr/etc/kubicd ==== podman ==== Version update (1.6.1 -> 1.6.2) Subpackages: podman-cni-config - Add container-start-fix.patch to correct output of container-start to show container_name, not _id. - Update podman to v1.6.2 * Features - Added a --runtime flag to podman system migrate to allow the OCI runtime for all containers to be reset, to ease transition to the crun runtime on CGroups V2 systems until runc gains full support - The podman rm command can now remove containers in broken states which previously could not be removed - The podman info command, when run without root, now shows information on UID and GID mappings in the rootless user namespace - Added podman build --squash-all flag, which squashes all layers (including those of the base image) into one layer - The --systemd flag to podman run and podman create now accepts a string argument and allows a new value, always, which forces systemd support without checking if the the container entrypoint is systemd * Bugfixes - Fixed a bug where the podman top command did not work on systems using CGroups V2 (#4192) - Fixed a bug where rootless Podman could double-close a file, leading to a panic - Fixed a bug where rootless Podman could fail to retrieve some containers while refreshing the state - Fixed a bug where podman start --attach --sig-proxy=false would still proxy signals into the container - Fixed a bug where Podman would unconditionally use a non-default path for authentication credentials (auth.json), breaking podman login integration with skopeo and other tools using the containers/image library - Fixed a bug where podman ps --format=json and podman images - -format=json would display null when no results were returned, instead of valid JSON - Fixed a bug where podman build --squash was incorrectly squashing all layers into one, instead of only new layers - Fixed a bug where rootless Podman would allow volumes with options to be mounted (mounting volumes requires root), creating an inconsistent state where volumes reported as mounted but were not (#4248) - Fixed a bug where volumes which failed to unmount could not be removed (#4247) - Fixed a bug where Podman incorrectly handled some errors relating to unmounted or missing containers in containers/storage - Fixed a bug where podman stats was broken on systems running CGroups V2 when run rootless (#4268) - Fixed a bug where the podman start command would print the short container ID, instead of the full ID - Fixed a bug where containers created with an OCI runtime that is no longer available (uninstalled or removed from the config file) would not appear in podman ps and could not be removed via podman rm - Fixed a bug where containers restored via podman container restore --import would retain the CGroup path of the original container, even if their container ID changed; thus, multiple containers created from the same checkpoint would all share the same CGroup * Misc - The default PID limit for containers is now set to 4096. It can be adjusted back to the old default (unlimited) by passing - -pids-limit 0 to podman create and podman run - The podman start --attach command now automatically attaches STDIN if the container was created with -i - The podman network create command now validates network names using the same regular expression as container and pod names - The --systemd flag to podman run and podman create will now only enable systemd mode when the binary being run inside the container is /sbin/init, /usr/sbin/init, or ends in systemd (previously detected any path ending in init or systemd) - Updated vendored Buildah to 1.11.3 - Updated vendored containers/storage to 1.13.5 - Updated vendored containers/image to 4.0.1 ==== weave ==== Version update (2.5.2 -> 2.6.0) - Update weave to 2.6.0 - Fix a race condition in Kubernetes addon when reclaiming IP addresses after node deletion #3724, #3716 - Buffer events so Docker won't drop them, and Weave Net can clean up after dead containers #3432, #3705 - Weave reconnect occasionally fails after network interface disconnect #3666, #3669, #3676 - Ingress NetworkPolicy would accepts all traffic when specifying both IPBlock and port #3653, #3654 - Support both podSelector and namespaceSelector in NetworkPolicy #3312, #3647 - Only add default-drop egress rule if network policies are in use #3639 - Manifests use 'apps/v1' rather than deprecated 'apps/v1beta1' #3660 - Avoid Weave Net pods being evicted by setting priorityClassName: system-node-critical #3697 - Manifests use recommended DNS policy ClusterFirstWithHostNet #3692 - Weave Net now tolerates 'NoExecute' taint #3655 - Allow extra arguments to NetworkPolicy controller to be set in an environment variable #3683 - Stop reporting a failure to connect to self #3454, #3585 - Minor reduction in log noise when reclaiming IPs #3710 - Update weave.yaml for kubernetes 1.16 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] Explanation on the different Kubic and MicroOS images
by Johannes Kastl 13 Nov '19

13 Nov '19

Hi all, is there a explanation somewhere (that I did not find?) on what the heap of different images is? I was looking for e.g. a list of packages that are included in one image, but not in the other. In other words, what makes the kubeadm one a better choice than the "Tumbleweed kubic" image for my use case? What is either offering or missing, in comparison? When to choose one over the other? I could look into the kiwi templates, I guess, but I was hoping there was a wiki page or presentation or similar... ;-) Kind Regards, Johannes Taking OpenStack qcow2 images as example: openSUSE-MicroOS.x86_64-16.0.0-ContainerHost-OpenStack-Cloud-Snapshot20191110.qcow2 This would be "Tumbleweed Kubic - Multi-purpose Standalone & Kubernetes Container Operating System based on openSUSE MicroOS " openSUSE-MicroOS.x86_64-16.0.0-Kubic-kubeadm-OpenStack-Cloud-Snapshot20191110.qcow2 This would be "kubeadm Certified Kubernetes - Certified Kubernetes Distribution using kubeadm atop an openSUSE MicroOS base system" And then we have the plain MicroOS: openSUSE-MicroOS.x86_64-16.0.0-OpenStack-Cloud-Snapshot20191110.qcow2 -- Johannes Kastl Linux Consultant & Trainer Tel.: +49 (0) 151 2372 5802 Mail: kastl(a)b1-systems.de B1 Systems GmbH Osterfeldstraße 7 / 85088 Vohburg http://www.b1-systems.de GF: Ralph Dehner Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537

3 6

[opensuse-kubic] New MicroOS snapshot 20191111 released!
by Richard Brown 12 Nov '19

12 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: cpio curl (7.66.0 -> 7.67.0) kernel-source (5.3.8 -> 5.3.9) rpm-config-SUSE (0.g42 -> 0.g44) snapper (0.8.5 -> 0.8.6) wpa_supplicant (2.6 -> 2.9) zstd (1.4.3 -> 1.4.4) === Details === ==== cpio ==== - add cpio-2.12-CVE-2019-14866.patch to fix a security issue where cpio does not properly validate the values written in the header of a TAR file through the to_oct() function [bsc#1155199] [CVE-2019-14866] ==== curl ==== Version update (7.66.0 -> 7.67.0) Subpackages: libcurl4 - Update spec file with spec-cleaner - Update to 7.67.0 * Changes: - curl: added --no-progress-meter - setopt: CURLMOPT_MAX_CONCURRENT_STREAMS is new - urlapi: CURLU_NO_AUTHORITY allows empty authority/host part * Bugfixes: - BINDINGS: five new bindings addded - CURLOPT_TIMEOUT.3: Clarify transfer timeout time includes queue time - CURLOPT_TIMEOUT.3: remove the mention of "minutes" - ESNI: initial build/setup support - FTP: FTPFILE_NOCWD: avoid redundant CWDs - FTP: allow "rubbish" prepended to the SIZE response - FTP: remove trailing slash from path for LIST/MLSD - FTP: skip CWD to entry dir when target is absolute - FTP: url-decode path before evaluation - HTTP3.md: move -p for mkdir, remove -j for make - HTTP3: fix invalid use of sendto for connected UDP socket - HTTP3: fix prefix parameter for ngtcp2 build - HTTP3: show an --alt-svc using example too - INSTALL: add missing space for configure commands - INSTALL: add vcpkg installation instructions - altsvc: accept quoted ma and persist values - altsvc: both backends run h3-23 now - appveyor: Add MSVC ARM64 build - appveyor: Use two parallel compilation on appveyor with CMake - appveyor: add --disable-proxy autotools build - appveyor: publish artifacts on appveyor - appveyor: upgrade VS2017 to VS2019 - asyn-thread: make use of Curl_socketpair() where available - asyn-thread: s/AF_LOCAL/AF_UNIX for Solaris - build: Remove unused HAVE_LIBSSL and HAVE_LIBCRYPTO defines - checksrc: fix uninitialized variable warning - chunked-encoding: stop hiding the CURLE_BAD_CONTENT_ENCODING error - cirrus: Switch the FreeBSD 11.x build to 11.3 and add a 13.0 build - cirrus: switch off blackhole status on the freebsd CI machines - cleanups: 21 various PVS-Studio warnings - configure: only say ipv6 enabled when the variable is set - configure: remove all cyassl references - conn-reuse: requests wanting NTLM can reuse non-NTLM connections - connect: return CURLE_OPERATION_TIMEDOUT for errno == ETIMEDOUT - connect: silence sign-compare warning - cookie: avoid harmless use after free - cookie: pass in the correct cookie amount to qsort() - cookies: change argument type for Curl_flush_cookies - cookies: using a share with cookies shouldn't enable the cookie engine - copyrights: update copyright notices to 2019 - curl: create easy handles on-demand and not ahead of time - curl: ensure HTTP 429 triggers --retry - curl: exit the create_transfers loop on errors - curl: fix memory leaked by parse_metalink() - curl: load large files with -d @ much faster - docs/HTTP3: fix `--with-ssl` ngtcp2 configure flag - docs: added multi-event.c example - docs: disambiguate CURLUPART_HOST is for host name (ie no port) - docs: note on failed handles not being counted by curl_multi_perform - doh: allow only http and https in debug mode - doh: avoid truncating DNS QTYPE to lower octet - doh: clean up dangling DOH memory on easy close - doh: fix (harmless) buffer overrun - doh: fix undefined behaviour and open up for gcc and clang optimization - doh: return early if there is no time left - examples/sslbackend: fix -Wchar-subscripts warning - gnutls: make gnutls_bye() not wait for response on shutdown - http2: expire a timeout at end of stream - http2: prevent dup'ed handles to send dummy PRIORITY frames - http2: relax verification of :authority in push promise requests - http2_recv: a closed stream trumps pause state - http: lowercase headernames for HTTP/2 and HTTP/3 - ldap: Stop using wide char version of ldapp_err2string - ldap: fix OOM error on missing query string - mbedtls: add error message for cert validity starting in the future - mime: when disabled, avoid C99 macro - ngtcp2: adapt to API change - ngtcp2: compile with latest ngtcp2 + nghttp3 draft-23 - ngtcp2: remove fprintf() calls - openssl: close_notify on the FTP data connection doesn't mean closure - openssl: use strerror on SSL_ERROR_SYSCALL - os400: getpeername() and getsockname() return ebcdic AF_UNIX sockaddr - parsedate: fix date parsing disabled builds - quiche: don't close connection at end of stream - quiche: persist connection details (fixes -I with --http3) - quiche: set 'drain' when returning without having drained the queues - quiche: update HTTP/3 config creation to new API - redirect: handle redirects to absolute URLs containing spaces - runtests: get textaware info from curl instead of perl - schannel: reverse the order of certinfo insertions - schannel_verify: Fix concurrent openings of CA file - security: silence conversion warning - setopt: handle ALTSVC set to NULL - setopt: make it easier to add new enum values - setopt: store CURLOPT_RTSP_SERVER_CSEQ correctly - smb: check for full size message before reading message details - smbserver: fix Python 3 compatibility - socks: Fix destination host shown on SOCKS5 error - test1162: disable MSYS2's POSIX path conversion - test1591: fix spelling of http feature - tests: add 'connect to non-listen' keywords - tests: fix narrowing conversion warnings - tests: fix the test 3001 cert failures - tests: makes tests succeed when using --disable-proxy - tests: use %FILE_PWD for file:// URLs - tests: use port 2 instead of 60000 for a safer non-listening port - tool_operate: Fix retry sleep time shown to user when Retry-After - url: Curl_free_request_state() should also free doh handles - url: don't set appconnect time for non-ssl/non-ssh connections - url: fix the NULL hostname compiler warning - url: normalize CURLINFO_EFFECTIVE_URL - url: only reuse TLS connections with matching pinning - urlapi: avoid index underflow for short ipv6 hostnames - urlapi: fix URL encoding when setting a full URL - urlapi: question mark within fragment is still fragment - urldata: use 'bool' for the bit type on MSVC compilers - vtls: fix narrowing conversion warnings ==== kernel-source ==== Version update (5.3.8 -> 5.3.9) - Linux 5.3.9 (bnc#11519). - io_uring: fix up O_NONBLOCK handling for sockets (bnc#1151927). - dm snapshot: introduce account_start_copy() and account_end_copy() (bnc#1151927). - dm snapshot: rework COW throttling to fix deadlock (bnc#1151927). - Btrfs: fix inode cache block reserve leak on failure to allocate data space (bnc#1151927). - btrfs: qgroup: Always free PREALLOC META reserve in btrfs_delalloc_release_extents() (bnc#1151927). - iio: adc: meson_saradc: Fix memory allocation order (bnc#1151927). - iio: fix center temperature of bmc150-accel-core (bnc#1151927). - libsubcmd: Make _FORTIFY_SOURCE defines dependent on the feature (bnc#1151927). - perf tests: Avoid raising SEGV using an obvious NULL dereference (bnc#1151927). - perf map: Fix overlapped map handling (bnc#1151927). - perf script brstackinsn: Fix recovery from LBR/binary mismatch (bnc#1151927). - perf jevents: Fix period for Intel fixed counters (bnc#1151927). - perf tools: Propagate get_cpuid() error (bnc#1151927). - perf annotate: Propagate perf_env__arch() error (bnc#1151927). - perf annotate: Fix the signedness of failure returns (bnc#1151927). - perf annotate: Propagate the symbol__annotate() error return (bnc#1151927). - perf annotate: Fix arch specific ->init() failure errors (bnc#1151927). - perf annotate: Return appropriate error code for allocation failures (bnc#1151927). - perf annotate: Don't return -1 for error when doing BPF disassembly (bnc#1151927). - staging: rtl8188eu: fix null dereference when kzalloc fails (bnc#1151927). - RDMA/siw: Fix serialization issue in write_space() (bnc#1151927). - RDMA/hfi1: Prevent memory leak in sdma_init (bnc#1151927). - RDMA/iw_cxgb4: fix SRQ access from dump_qp() (bnc#1151927). - RDMA/iwcm: Fix a lock inversion issue (bnc#1151927). - HID: hyperv: Use in-place iterator API in the channel callback (bnc#1151927). - kselftest: exclude failed TARGETS from runlist (bnc#1151927). - selftests/kselftest/runner.sh: Add 45 second timeout per test (bnc#1151927). - nfs: Fix nfsi->nrequests count error on nfs_inode_remove_request (bnc#1151927). - arm64: cpufeature: Effectively expose FRINT capability to userspace (bnc#1151927). - arm64: Fix incorrect irqflag restore for priority masking for compat (bnc#1151927). - arm64: ftrace: Ensure synchronisation in PLT setup for Neoverse-N1 #1542419 (bnc#1151927). - tty: serial: owl: Fix the link time qualifier of 'owl_uart_exit()' (bnc#1151927). - tty: serial: rda: Fix the link time qualifier of 'rda_uart_exit()' (bnc#1151927). - serial/sifive: select SERIAL_EARLYCON (bnc#1151927). - tty: n_hdlc: fix build on SPARC (bnc#1151927). - misc: fastrpc: prevent memory leak in fastrpc_dma_buf_attach (bnc#1151927). - RDMA/core: Fix an error handling path in 'res_get_common_doit()' (bnc#1151927). - RDMA/cm: Fix memory leak in cm_add/remove_one (bnc#1151927). - RDMA/nldev: Reshuffle the code to avoid need to rebind QP in error path (bnc#1151927). - RDMA/mlx5: Do not allow rereg of a ODP MR (bnc#1151927). - RDMA/mlx5: Order num_pending_prefetch properly with synchronize_srcu (bnc#1151927). - RDMA/mlx5: Add missing synchronize_srcu() for MW cases (bnc#1151927). - gpio: max77620: Use correct unit for debounce times (bnc#1151927). - fs: cifs: mute -Wunused-const-variable message (bnc#1151927). - arm64: vdso32: Fix broken compat vDSO build warnings (bnc#1151927). - arm64: vdso32: Detect binutils support for dmb ishld (bnc#1151927). - serial: mctrl_gpio: Check for NULL pointer (bnc#1151927). - serial: 8250_omap: Fix gpio check for auto RTS/CTS (bnc#1151927). - arm64: Default to building compat vDSO with clang when CONFIG_CC_IS_CLANG (bnc#1151927). - arm64: vdso32: Don't use KBUILD_CPPFLAGS unconditionally (bnc#1151927). - efi/cper: Fix endianness of PCIe class code (bnc#1151927). - efi/x86: Do not clean dummy variable in kexec path (bnc#1151927). - MIPS: include: Mark __cmpxchg as __always_inline (bnc#1151927). - riscv: avoid kernel hangs when trapped in BUG() (bnc#1151927). - riscv: avoid sending a SIGTRAP to a user thread trapped in WARN() (bnc#1151927). - riscv: Correct the handling of unexpected ebreak in do_trap_break() (bnc#1151927). - x86/xen: Return from panic notifier (bnc#1151927). - ocfs2: clear zero in unaligned direct IO (bnc#1151927). - fs: ocfs2: fix possible null-pointer dereferences in ocfs2_xa_prepare_entry() (bnc#1151927). - fs: ocfs2: fix a possible null-pointer dereference in ocfs2_write_end_nolock() (bnc#1151927). - fs: ocfs2: fix a possible null-pointer dereference in ocfs2_info_scan_inode_alloc() (bnc#1151927). - btrfs: silence maybe-uninitialized warning in clone_range (bnc#1151927). - arm64: armv8_deprecated: Checking return value for memory allocation (bnc#1151927). - x86/cpu: Add Comet Lake to the Intel CPU models header (bnc#1151927). - sched/fair: Scale bandwidth quota and period without losing quota/period ratio precision (bnc#1151927). - sched/vtime: Fix guest/system mis-accounting on task switch (bnc#1151927). - perf/core: Rework memory accounting in perf_mmap() (bnc#1151927). - perf/core: Fix corner case in perf_rotate_context() (bnc#1151927). - perf/x86/amd: Change/fix NMI latency mitigation to use a timestamp (bnc#1151927). - drm/amdgpu: fix memory leak (bnc#1151927). - iio: imu: adis16400: release allocated memory on failure (bnc#1151927). - iio: imu: adis16400: fix memory leak (bnc#1151927). - iio: imu: st_lsm6dsx: fix waitime for st_lsm6dsx i2c controller (bnc#1151927). - MIPS: include: Mark __xchg as __always_inline (bnc#1151927). - MIPS: fw: sni: Fix out of bounds init of o32 stack (bnc#1151927). - s390/cio: fix virtio-ccw DMA without PV (bnc#1151927). - virt: vbox: fix memory leak in hgcm_call_preprocess_linaddr (bnc#1151927). - nbd: fix possible sysfs duplicate warning (bnc#1151927). - NFSv4: Fix leak of clp->cl_acceptor string (bnc#1151927). - SUNRPC: fix race to sk_err after xs_error_report (bnc#1151927). - s390/uaccess: avoid (false positive) compiler warnings (bnc#1151927). - tracing: Initialize iter->seq after zeroing in tracing_read_pipe() (bnc#1151927). - perf annotate: Fix multiple memory and file descriptor leaks (bnc#1151927). - perf/aux: Fix tracking of auxiliary trace buffer allocation (bnc#1151927). - USB: legousbtower: fix a signedness bug in tower_probe() (bnc#1151927). - nbd: verify socket is supported during setup (bnc#1151927). - arm64: dts: qcom: Add Lenovo Miix 630 (bnc#1151927). - arm64: dts: qcom: Add HP Envy x2 (bnc#1151927). - arm64: dts: qcom: Add Asus NovaGo TP370QL (bnc#1151927). - rtw88: Fix misuse of GENMASK macro (bnc#1151927). - s390/pci: fix MSI message data (bnc#1151927). - thunderbolt: Correct path indices for PCIe tunnel (bnc#1151927). - thunderbolt: Use 32-bit writes when writing ring producer/consumer (bnc#1151927). - fuse: flush dirty data/metadata before non-truncate setattr (bnc#1151927). - fuse: truncate pending writes on O_TRUNC (bnc#1151927). - ALSA: bebob: Fix prototype of helper function to return negative value (bnc#1151927). - ALSA: timer: Fix mutex deadlock at releasing card (bnc#1151927). - ALSA: hda/realtek - Fix 2 front mics of codec 0x623 (bnc#1151927). - ALSA: hda/realtek - Add support for ALC623 (bnc#1151927). - ath10k: fix latency issue for QCA988x (bnc#1151927). - UAS: Revert commit 3ae62a42090f ("UAS: fix alignment of scatter/gather segments") (bnc#1151927). - nl80211: fix validation of mesh path nexthop (bnc#1151927). - USB: gadget: Reject endpoints with 0 maxpacket value (bnc#1151927). - usb-storage: Revert commit 747668dbc061 ("usb-storage: Set virt_boundary_mask to avoid SG overflows") (bnc#1151927). - USB: ldusb: fix ring-buffer locking (bnc#1151927). - USB: ldusb: fix control-message timeout (bnc#1151927). - usb: xhci: fix Immediate Data Transfer endianness (bnc#1151927). - usb: xhci: fix __le32/__le64 accessors in debugfs code (bnc#1151927). - USB: serial: whiteheat: fix potential slab corruption (bnc#1151927). - USB: serial: whiteheat: fix line-speed endianness (bnc#1151927). - xhci: Fix use-after-free regression in xhci clear hub TT implementation (bnc#1151927). - scsi: qla2xxx: Fix partial flash write of MBI (bnc#1151927). - scsi: target: cxgbit: Fix cxgbit_fw4_ack() (bnc#1151927). - HID: i2c-hid: add Trekstor Primebook C11B to descriptor override (bnc#1151927). - HID: Fix assumption that devices have inputs (bnc#1151927). - HID: fix error message in hid_open_report() (bnc#1151927). - HID: logitech-hidpp: split g920_get_config() (bnc#1151927). - HID: logitech-hidpp: rework device validation (bnc#1151927). - HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy() (bnc#1151927). - um-ubd: Entrust re-queue to the upper layers (bnc#1151927). - s390/unwind: fix mixing regs and sp (bnc#1151927). - s390/cmm: fix information leak in cmm_timeout_handler() (bnc#1151927). - s390/idle: fix cpu idle time calculation (bnc#1151927). - ARC: perf: Accommodate big-endian CPU (bnc#1151927). - IB/hfi1: Avoid excessive retry for TID RDMA READ request (bnc#1151927). - arm64: Ensure VM_WRITE|VM_SHARED ptes are clean by default (bnc#1151927). - arm64: cpufeature: Enable Qualcomm Falkor/Kryo errata 1003 (bnc#1151927). - virtio_ring: fix stalls for packed rings (bnc#1151927). - rtlwifi: rtl_pci: Fix problem of too small skb->len (bnc#1151927). - KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (bnc#1151927). - dmaengine: qcom: bam_dma: Fix resource leak (bnc#1151927). - dmaengine: tegra210-adma: fix transfer failure (bnc#1151927). - dmaengine: imx-sdma: fix size check for sdma script_number (bnc#1151927). - dmaengine: cppi41: Fix cppi41_dma_prep_slave_sg() when idle (bnc#1151927). - drm/amdgpu/gmc10: properly set BANK_SELECT and FRAGMENT_SIZE (bnc#1151927). - drm/i915: Fix PCH reference clock for FDI on HSW/BDW (bnc#1151927). - drm/amdgpu/gfx10: update gfx golden settings (bnc#1151927). - drm/amdgpu/powerplay/vega10: allow undervolting in p7 (bnc#1151927). - drm/amdgpu: Fix SDMA hang when performing VKexample test (bnc#1151927). - NFS: Fix an RCU lock leak in nfs4_refresh_delegation_stateid() (bnc#1151927). - io_uring: ensure we clear io_kiocb->result before each issue (bnc#1151927). - iommu/vt-d: Fix panic after kexec -p for kdump (bnc#1151927). - batman-adv: Avoid free/alloc race when handling OGM buffer (bnc#1151927). - llc: fix sk_buff leak in llc_sap_state_process() (bnc#1151927). - llc: fix sk_buff leak in llc_conn_service() (bnc#1151927). - rxrpc: Fix call ref leak (bnc#1151927). - rxrpc: rxrpc_peer needs to hold a ref on the rxrpc_local record (bnc#1151927). - rxrpc: Fix trace-after-put looking at the put peer record (bnc#1151927). - NFC: pn533: fix use-after-free and memleaks (bnc#1151927). - bonding: fix potential NULL deref in bond_update_slave_arr (bnc#1151927). - netfilter: conntrack: avoid possible false sharing (bnc#1151927). - net: usb: sr9800: fix uninitialized local variable (bnc#1151927). - sch_netem: fix rcu splat in netem_enqueue() (bnc#1151927). - net: sched: sch_sfb: don't call qdisc_put() while holding tree lock (bnc#1151927). - iwlwifi: exclude GEO SAR support for 3168 (bnc#1151927). - sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (bnc#1151927). - ALSA: usb-audio: DSD auto-detection for Playback Designs (bnc#1151927). - ALSA: usb-audio: Update DSD support quirks for Oppo and Rotel (bnc#1151927). - ALSA: usb-audio: Add DSD support for Gustard U16/X26 USB Interface (bnc#1151927). - RDMA/mlx5: Use irq xarray locking for mkey_table (bnc#1151927). - sched/fair: Fix -Wunused-but-set-variable warnings (bnc#1151927). - powerpc/powernv: Fix CPU idle to be called with IRQs disabled (bnc#1151927). - Revert "nvme: allow 64-bit results in passthru commands" (bnc#1151927). - Revert "ALSA: hda: Flush interrupts on disabling" (bnc#1151927). - commit b0d4923 - rpm/kernel-binary.spec.in: add COMPRESS_VMLINUX (bnc#1155921) Let COMPRESS_VMLINUX determine the compression used for vmlinux. By default (historically), it is gz. - commit c8b2d9f - ALSA: hda/ca0132 - Fix possible workqueue stall (bsc#1155836). - commit 98ead79 - stacktrace: Don't skip first entry on noncurrent tasks (bnc#1154866). Update upstream status. - commit f4d9b5e - rpm/kernel-subpackage-spec: Mention debuginfo in the subpackage description (bsc#1149119). - commit 525ec92 - ata: make qc_prep return ata_completion_errors (bnc#1110252). - ata: define AC_ERR_OK (bnc#1110252). - ata: sata_mv, avoid trigerrable BUG_ON (bnc#1110252). - commit 8bf663b ==== rpm-config-SUSE ==== Version update (0.g42 -> 0.g44) - Update to version 0.g44: * Sync specfile changes * Add _lto_cflags to suse_macros for now ==== snapper ==== Version update (0.8.5 -> 0.8.6) Subpackages: libsnapper4 - add --machine-readable option for CSV and JSON outputs. - add --columns option for selecting columns in the commands list, list-configs and get-config. - bsc#1149322 - version 0.8.6 ==== wpa_supplicant ==== Version update (2.6 -> 2.9) - Update to 2.9 release: * SAE changes - disable use of groups using Brainpool curves - improved protection against side channel attacks [https://w1.fi/security/2019-6/] * EAP-pwd changes - disable use of groups using Brainpool curves - allow the set of groups to be configured (eap_pwd_groups) - improved protection against side channel attacks [https://w1.fi/security/2019-6/] * fixed FT-EAP initial mobility domain association using PMKSA caching (disabled by default for backwards compatibility; can be enabled with ft_eap_pmksa_caching=1) * fixed a regression in OpenSSL 1.1+ engine loading * added validation of RSNE in (Re)Association Response frames * fixed DPP bootstrapping URI parser of channel list * extended EAP-SIM/AKA fast re-authentication to allow use with FILS * extended ca_cert_blob to support PEM format * improved robustness of P2P Action frame scheduling * added support for EAP-SIM/AKA using anonymous@realm identity * fixed Hotspot 2.0 credential selection based on roaming consortium to ignore credentials without a specific EAP method * added experimental support for EAP-TEAP peer (RFC 7170) * added experimental support for EAP-TLS peer with TLS v1.3 * fixed a regression in WMM parameter configuration for a TDLS peer * fixed a regression in operation with drivers that offload 802.1X 4-way handshake * fixed an ECDH operation corner case with OpenSSL * SAE changes - added support for SAE Password Identifier - changed default configuration to enable only groups 19, 20, 21 (i.e., disable groups 25 and 26) and disable all unsuitable groups completely based on REVmd changes - do not regenerate PWE unnecessarily when the AP uses the anti-clogging token mechanisms - fixed some association cases where both SAE and FT-SAE were enabled on both the station and the selected AP - started to prefer FT-SAE over SAE AKM if both are enabled - started to prefer FT-SAE over FT-PSK if both are enabled - fixed FT-SAE when SAE PMKSA caching is used - reject use of unsuitable groups based on new implementation guidance in REVmd (allow only FFC groups with prime >= 3072 bits and ECC groups with prime >= 256) - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-1/] (CVE-2019-9494) * EAP-pwd changes - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-2/] (CVE-2019-9495) - verify server scalar/element [https://w1.fi/security/2019-4/] (CVE-2019-9499) - fix message reassembly issue with unexpected fragment [https://w1.fi/security/2019-5/] - enforce rand,mask generation rules more strictly - fix a memory leak in PWE derivation - disallow ECC groups with a prime under 256 bits (groups 25, 26, and 27) * fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y * Hotspot 2.0 changes - do not indicate release number that is higher than the one AP supports - added support for release number 3 - enable PMF automatically for network profiles created from credentials * fixed OWE network profile saving * fixed DPP network profile saving * added support for RSN operating channel validation (CONFIG_OCV=y and network profile parameter ocv=1) * added Multi-AP backhaul STA support * fixed build with LibreSSL * number of MKA/MACsec fixes and extensions * extended domain_match and domain_suffix_match to allow list of values * fixed dNSName matching in domain_match and domain_suffix_match when using wolfSSL * started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both are enabled * extended nl80211 Connect and external authentication to support SAE, FT-SAE, FT-EAP-SHA384 * fixed KEK2 derivation for FILS+FT * extended client_cert file to allow loading of a chain of PEM encoded certificates * extended beacon reporting functionality * extended D-Bus interface with number of new properties * fixed a regression in FT-over-DS with mac80211-based drivers * OpenSSL: allow systemwide policies to be overridden * extended driver flags indication for separate 802.1X and PSK 4-way handshake offload capability * added support for random P2P Device/Interface Address use * extended PEAP to derive EMSK to enable use with ERP/FILS * extended WPS to allow SAE configuration to be added automatically for PSK (wps_cred_add_sae=1) * removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS) * extended domain_match and domain_suffix_match to allow list of values * added a RSN workaround for misbehaving PMF APs that advertise IGTK/BIP KeyID using incorrect byte order * fixed PTK rekeying with FILS and FT * fixed WPA packet number reuse with replayed messages and key reinstallation [https://w1.fi/security/2017-1/] (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088) * fixed unauthenticated EAPOL-Key decryption in wpa_supplicant [https://w1.fi/security/2018-1/] (CVE-2018-14526) * added support for FILS (IEEE 802.11ai) shared key authentication * added support for OWE (Opportunistic Wireless Encryption, RFC 8110; and transition mode defined by WFA) * added support for DPP (Wi-Fi Device Provisioning Protocol) * added support for RSA 3k key case with Suite B 192-bit level * fixed Suite B PMKSA caching not to update PMKID during each 4-way handshake * fixed EAP-pwd pre-processing with PasswordHashHash * added EAP-pwd client support for salted passwords * fixed a regression in TDLS prohibited bit validation * started to use estimated throughput to avoid undesired signal strength based roaming decision * MACsec/MKA: - new macsec_linux driver interface support for the Linux kernel macsec module - number of fixes and extensions * added support for external persistent storage of PMKSA cache (PMKSA_GET/PMKSA_ADD control interface commands; and MESH_PMKSA_GET/MESH_PMKSA_SET for the mesh case) * fixed mesh channel configuration pri/sec switch case * added support for beacon report * large number of other fixes, cleanup, and extensions * added support for randomizing local address for GAS queries (gas_rand_mac_addr parameter) * fixed EAP-SIM/AKA/AKA' ext auth cases within TLS tunnel * added option for using random WPS UUID (auto_uuid=1) * added SHA256-hash support for OCSP certificate matching * fixed EAP-AKA' to add AT_KDF into Synchronization-Failure * fixed a regression in RSN pre-authentication candidate selection * added option to configure allowed group management cipher suites (group_mgmt network profile parameter) * removed all PeerKey functionality * fixed nl80211 AP and mesh mode configuration regression with Linux 4.15 and newer * added ap_isolate configuration option for AP mode * added support for nl80211 to offload 4-way handshake into the driver * added support for using wolfSSL cryptographic library * SAE - added support for configuring SAE password separately of the WPA2 PSK/passphrase - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection for SAE; note: this is not backwards compatible, i.e., both the AP and station side implementations will need to be update at the same time to maintain interoperability - added support for Password Identifier - fixed FT-SAE PMKID matching * Hotspot 2.0 - added support for fetching of Operator Icon Metadata ANQP-element - added support for Roaming Consortium Selection element - added support for Terms and Conditions - added support for OSEN connection in a shared RSN BSS - added support for fetching Venue URL information * added support for using OpenSSL 1.1.1 * FT - disabled PMKSA caching with FT since it is not fully functional - added support for SHA384 based AKM - added support for BIP ciphers BIP-CMAC-256, BIP-GMAC-128, BIP-GMAC-256 in addition to previously supported BIP-CMAC-128 - fixed additional IE inclusion in Reassociation Request frame when using FT protocol - Drop merged patches: * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch * rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch * rebased-v2.6-0009-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch * wpa_supplicant-bnc-1099835-fix-private-key-password.patch * wpa_supplicant-bnc-1099835-clear-default_passwd_cb.patch * wpa_supplicant-log-file-permission.patch * wpa_supplicant-log-file-cloexec.patch * wpa_supplicant-git-fa67debf4c6ddbc881a212b175faa6d5d0d90c8c.patch * wpa_supplicant-git-f5b74b966c942feb95a8ddbb7d130540b15b796d.patch - Rebase patches: * wpa_supplicant-getrandom.patch ==== zstd ==== Version update (1.4.3 -> 1.4.4) - Update to version 1.4.4 * perf: Improved decompression speed, by > 10% * perf: Better compression speed when re-using a context * perf: Fix compression ratio when compressing large files with small dictionary * perf: zstd reference encoder can generate RLE blocks * perf: minor generic speed optimization * api: new ability to extract sequences from the parser for analysis * api: fixed decoding of magic-less frames * api: fixed ZSTD_initCStream_advanced() performance with fast modes * cli: Named pipes support * cli: short tar's extension support * cli: command --output-dir-flat=DIE , generates target files into requested directory * cli: commands --stream-size=# and --size-hint=# * cli: command --exclude-compressed * cli: faster -t test mode * cli: improved some error messages * cli: fix rare deadlock condition within dictionary builder * misc: Improved documentation : ZSTD_CLEVEL, DYNAMIC_BMI2, ZSTD_CDict, function deprecation, zstd format * misc: fixed educational decoder : accept larger literals section, and removed UNALIGNED() macro - Refresh pzstd.1.patch -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191111 released!
by Richard Brown 12 Nov '19

12 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: cpio curl (7.66.0 -> 7.67.0) hello-kubic (1.1 -> 1.2) kernel-source (5.3.8 -> 5.3.9) rook (1.1.1+git0.g9a2641a6 -> 1.1.6+git0.g91d6f635) rpm-config-SUSE (0.g42 -> 0.g44) snapper (0.8.5 -> 0.8.6) wpa_supplicant (2.6 -> 2.9) zstd (1.4.3 -> 1.4.4) === Details === ==== cpio ==== - add cpio-2.12-CVE-2019-14866.patch to fix a security issue where cpio does not properly validate the values written in the header of a TAR file through the to_oct() function [bsc#1155199] [CVE-2019-14866] ==== curl ==== Version update (7.66.0 -> 7.67.0) Subpackages: libcurl4 - Update spec file with spec-cleaner - Update to 7.67.0 * Changes: - curl: added --no-progress-meter - setopt: CURLMOPT_MAX_CONCURRENT_STREAMS is new - urlapi: CURLU_NO_AUTHORITY allows empty authority/host part * Bugfixes: - BINDINGS: five new bindings addded - CURLOPT_TIMEOUT.3: Clarify transfer timeout time includes queue time - CURLOPT_TIMEOUT.3: remove the mention of "minutes" - ESNI: initial build/setup support - FTP: FTPFILE_NOCWD: avoid redundant CWDs - FTP: allow "rubbish" prepended to the SIZE response - FTP: remove trailing slash from path for LIST/MLSD - FTP: skip CWD to entry dir when target is absolute - FTP: url-decode path before evaluation - HTTP3.md: move -p for mkdir, remove -j for make - HTTP3: fix invalid use of sendto for connected UDP socket - HTTP3: fix prefix parameter for ngtcp2 build - HTTP3: show an --alt-svc using example too - INSTALL: add missing space for configure commands - INSTALL: add vcpkg installation instructions - altsvc: accept quoted ma and persist values - altsvc: both backends run h3-23 now - appveyor: Add MSVC ARM64 build - appveyor: Use two parallel compilation on appveyor with CMake - appveyor: add --disable-proxy autotools build - appveyor: publish artifacts on appveyor - appveyor: upgrade VS2017 to VS2019 - asyn-thread: make use of Curl_socketpair() where available - asyn-thread: s/AF_LOCAL/AF_UNIX for Solaris - build: Remove unused HAVE_LIBSSL and HAVE_LIBCRYPTO defines - checksrc: fix uninitialized variable warning - chunked-encoding: stop hiding the CURLE_BAD_CONTENT_ENCODING error - cirrus: Switch the FreeBSD 11.x build to 11.3 and add a 13.0 build - cirrus: switch off blackhole status on the freebsd CI machines - cleanups: 21 various PVS-Studio warnings - configure: only say ipv6 enabled when the variable is set - configure: remove all cyassl references - conn-reuse: requests wanting NTLM can reuse non-NTLM connections - connect: return CURLE_OPERATION_TIMEDOUT for errno == ETIMEDOUT - connect: silence sign-compare warning - cookie: avoid harmless use after free - cookie: pass in the correct cookie amount to qsort() - cookies: change argument type for Curl_flush_cookies - cookies: using a share with cookies shouldn't enable the cookie engine - copyrights: update copyright notices to 2019 - curl: create easy handles on-demand and not ahead of time - curl: ensure HTTP 429 triggers --retry - curl: exit the create_transfers loop on errors - curl: fix memory leaked by parse_metalink() - curl: load large files with -d @ much faster - docs/HTTP3: fix `--with-ssl` ngtcp2 configure flag - docs: added multi-event.c example - docs: disambiguate CURLUPART_HOST is for host name (ie no port) - docs: note on failed handles not being counted by curl_multi_perform - doh: allow only http and https in debug mode - doh: avoid truncating DNS QTYPE to lower octet - doh: clean up dangling DOH memory on easy close - doh: fix (harmless) buffer overrun - doh: fix undefined behaviour and open up for gcc and clang optimization - doh: return early if there is no time left - examples/sslbackend: fix -Wchar-subscripts warning - gnutls: make gnutls_bye() not wait for response on shutdown - http2: expire a timeout at end of stream - http2: prevent dup'ed handles to send dummy PRIORITY frames - http2: relax verification of :authority in push promise requests - http2_recv: a closed stream trumps pause state - http: lowercase headernames for HTTP/2 and HTTP/3 - ldap: Stop using wide char version of ldapp_err2string - ldap: fix OOM error on missing query string - mbedtls: add error message for cert validity starting in the future - mime: when disabled, avoid C99 macro - ngtcp2: adapt to API change - ngtcp2: compile with latest ngtcp2 + nghttp3 draft-23 - ngtcp2: remove fprintf() calls - openssl: close_notify on the FTP data connection doesn't mean closure - openssl: use strerror on SSL_ERROR_SYSCALL - os400: getpeername() and getsockname() return ebcdic AF_UNIX sockaddr - parsedate: fix date parsing disabled builds - quiche: don't close connection at end of stream - quiche: persist connection details (fixes -I with --http3) - quiche: set 'drain' when returning without having drained the queues - quiche: update HTTP/3 config creation to new API - redirect: handle redirects to absolute URLs containing spaces - runtests: get textaware info from curl instead of perl - schannel: reverse the order of certinfo insertions - schannel_verify: Fix concurrent openings of CA file - security: silence conversion warning - setopt: handle ALTSVC set to NULL - setopt: make it easier to add new enum values - setopt: store CURLOPT_RTSP_SERVER_CSEQ correctly - smb: check for full size message before reading message details - smbserver: fix Python 3 compatibility - socks: Fix destination host shown on SOCKS5 error - test1162: disable MSYS2's POSIX path conversion - test1591: fix spelling of http feature - tests: add 'connect to non-listen' keywords - tests: fix narrowing conversion warnings - tests: fix the test 3001 cert failures - tests: makes tests succeed when using --disable-proxy - tests: use %FILE_PWD for file:// URLs - tests: use port 2 instead of 60000 for a safer non-listening port - tool_operate: Fix retry sleep time shown to user when Retry-After - url: Curl_free_request_state() should also free doh handles - url: don't set appconnect time for non-ssl/non-ssh connections - url: fix the NULL hostname compiler warning - url: normalize CURLINFO_EFFECTIVE_URL - url: only reuse TLS connections with matching pinning - urlapi: avoid index underflow for short ipv6 hostnames - urlapi: fix URL encoding when setting a full URL - urlapi: question mark within fragment is still fragment - urldata: use 'bool' for the bit type on MSVC compilers - vtls: fix narrowing conversion warnings ==== hello-kubic ==== Version update (1.1 -> 1.2) - Update to version 1.2 - use official openSUSE container image ==== kernel-source ==== Version update (5.3.8 -> 5.3.9) - Linux 5.3.9 (bnc#11519). - io_uring: fix up O_NONBLOCK handling for sockets (bnc#1151927). - dm snapshot: introduce account_start_copy() and account_end_copy() (bnc#1151927). - dm snapshot: rework COW throttling to fix deadlock (bnc#1151927). - Btrfs: fix inode cache block reserve leak on failure to allocate data space (bnc#1151927). - btrfs: qgroup: Always free PREALLOC META reserve in btrfs_delalloc_release_extents() (bnc#1151927). - iio: adc: meson_saradc: Fix memory allocation order (bnc#1151927). - iio: fix center temperature of bmc150-accel-core (bnc#1151927). - libsubcmd: Make _FORTIFY_SOURCE defines dependent on the feature (bnc#1151927). - perf tests: Avoid raising SEGV using an obvious NULL dereference (bnc#1151927). - perf map: Fix overlapped map handling (bnc#1151927). - perf script brstackinsn: Fix recovery from LBR/binary mismatch (bnc#1151927). - perf jevents: Fix period for Intel fixed counters (bnc#1151927). - perf tools: Propagate get_cpuid() error (bnc#1151927). - perf annotate: Propagate perf_env__arch() error (bnc#1151927). - perf annotate: Fix the signedness of failure returns (bnc#1151927). - perf annotate: Propagate the symbol__annotate() error return (bnc#1151927). - perf annotate: Fix arch specific ->init() failure errors (bnc#1151927). - perf annotate: Return appropriate error code for allocation failures (bnc#1151927). - perf annotate: Don't return -1 for error when doing BPF disassembly (bnc#1151927). - staging: rtl8188eu: fix null dereference when kzalloc fails (bnc#1151927). - RDMA/siw: Fix serialization issue in write_space() (bnc#1151927). - RDMA/hfi1: Prevent memory leak in sdma_init (bnc#1151927). - RDMA/iw_cxgb4: fix SRQ access from dump_qp() (bnc#1151927). - RDMA/iwcm: Fix a lock inversion issue (bnc#1151927). - HID: hyperv: Use in-place iterator API in the channel callback (bnc#1151927). - kselftest: exclude failed TARGETS from runlist (bnc#1151927). - selftests/kselftest/runner.sh: Add 45 second timeout per test (bnc#1151927). - nfs: Fix nfsi->nrequests count error on nfs_inode_remove_request (bnc#1151927). - arm64: cpufeature: Effectively expose FRINT capability to userspace (bnc#1151927). - arm64: Fix incorrect irqflag restore for priority masking for compat (bnc#1151927). - arm64: ftrace: Ensure synchronisation in PLT setup for Neoverse-N1 #1542419 (bnc#1151927). - tty: serial: owl: Fix the link time qualifier of 'owl_uart_exit()' (bnc#1151927). - tty: serial: rda: Fix the link time qualifier of 'rda_uart_exit()' (bnc#1151927). - serial/sifive: select SERIAL_EARLYCON (bnc#1151927). - tty: n_hdlc: fix build on SPARC (bnc#1151927). - misc: fastrpc: prevent memory leak in fastrpc_dma_buf_attach (bnc#1151927). - RDMA/core: Fix an error handling path in 'res_get_common_doit()' (bnc#1151927). - RDMA/cm: Fix memory leak in cm_add/remove_one (bnc#1151927). - RDMA/nldev: Reshuffle the code to avoid need to rebind QP in error path (bnc#1151927). - RDMA/mlx5: Do not allow rereg of a ODP MR (bnc#1151927). - RDMA/mlx5: Order num_pending_prefetch properly with synchronize_srcu (bnc#1151927). - RDMA/mlx5: Add missing synchronize_srcu() for MW cases (bnc#1151927). - gpio: max77620: Use correct unit for debounce times (bnc#1151927). - fs: cifs: mute -Wunused-const-variable message (bnc#1151927). - arm64: vdso32: Fix broken compat vDSO build warnings (bnc#1151927). - arm64: vdso32: Detect binutils support for dmb ishld (bnc#1151927). - serial: mctrl_gpio: Check for NULL pointer (bnc#1151927). - serial: 8250_omap: Fix gpio check for auto RTS/CTS (bnc#1151927). - arm64: Default to building compat vDSO with clang when CONFIG_CC_IS_CLANG (bnc#1151927). - arm64: vdso32: Don't use KBUILD_CPPFLAGS unconditionally (bnc#1151927). - efi/cper: Fix endianness of PCIe class code (bnc#1151927). - efi/x86: Do not clean dummy variable in kexec path (bnc#1151927). - MIPS: include: Mark __cmpxchg as __always_inline (bnc#1151927). - riscv: avoid kernel hangs when trapped in BUG() (bnc#1151927). - riscv: avoid sending a SIGTRAP to a user thread trapped in WARN() (bnc#1151927). - riscv: Correct the handling of unexpected ebreak in do_trap_break() (bnc#1151927). - x86/xen: Return from panic notifier (bnc#1151927). - ocfs2: clear zero in unaligned direct IO (bnc#1151927). - fs: ocfs2: fix possible null-pointer dereferences in ocfs2_xa_prepare_entry() (bnc#1151927). - fs: ocfs2: fix a possible null-pointer dereference in ocfs2_write_end_nolock() (bnc#1151927). - fs: ocfs2: fix a possible null-pointer dereference in ocfs2_info_scan_inode_alloc() (bnc#1151927). - btrfs: silence maybe-uninitialized warning in clone_range (bnc#1151927). - arm64: armv8_deprecated: Checking return value for memory allocation (bnc#1151927). - x86/cpu: Add Comet Lake to the Intel CPU models header (bnc#1151927). - sched/fair: Scale bandwidth quota and period without losing quota/period ratio precision (bnc#1151927). - sched/vtime: Fix guest/system mis-accounting on task switch (bnc#1151927). - perf/core: Rework memory accounting in perf_mmap() (bnc#1151927). - perf/core: Fix corner case in perf_rotate_context() (bnc#1151927). - perf/x86/amd: Change/fix NMI latency mitigation to use a timestamp (bnc#1151927). - drm/amdgpu: fix memory leak (bnc#1151927). - iio: imu: adis16400: release allocated memory on failure (bnc#1151927). - iio: imu: adis16400: fix memory leak (bnc#1151927). - iio: imu: st_lsm6dsx: fix waitime for st_lsm6dsx i2c controller (bnc#1151927). - MIPS: include: Mark __xchg as __always_inline (bnc#1151927). - MIPS: fw: sni: Fix out of bounds init of o32 stack (bnc#1151927). - s390/cio: fix virtio-ccw DMA without PV (bnc#1151927). - virt: vbox: fix memory leak in hgcm_call_preprocess_linaddr (bnc#1151927). - nbd: fix possible sysfs duplicate warning (bnc#1151927). - NFSv4: Fix leak of clp->cl_acceptor string (bnc#1151927). - SUNRPC: fix race to sk_err after xs_error_report (bnc#1151927). - s390/uaccess: avoid (false positive) compiler warnings (bnc#1151927). - tracing: Initialize iter->seq after zeroing in tracing_read_pipe() (bnc#1151927). - perf annotate: Fix multiple memory and file descriptor leaks (bnc#1151927). - perf/aux: Fix tracking of auxiliary trace buffer allocation (bnc#1151927). - USB: legousbtower: fix a signedness bug in tower_probe() (bnc#1151927). - nbd: verify socket is supported during setup (bnc#1151927). - arm64: dts: qcom: Add Lenovo Miix 630 (bnc#1151927). - arm64: dts: qcom: Add HP Envy x2 (bnc#1151927). - arm64: dts: qcom: Add Asus NovaGo TP370QL (bnc#1151927). - rtw88: Fix misuse of GENMASK macro (bnc#1151927). - s390/pci: fix MSI message data (bnc#1151927). - thunderbolt: Correct path indices for PCIe tunnel (bnc#1151927). - thunderbolt: Use 32-bit writes when writing ring producer/consumer (bnc#1151927). - fuse: flush dirty data/metadata before non-truncate setattr (bnc#1151927). - fuse: truncate pending writes on O_TRUNC (bnc#1151927). - ALSA: bebob: Fix prototype of helper function to return negative value (bnc#1151927). - ALSA: timer: Fix mutex deadlock at releasing card (bnc#1151927). - ALSA: hda/realtek - Fix 2 front mics of codec 0x623 (bnc#1151927). - ALSA: hda/realtek - Add support for ALC623 (bnc#1151927). - ath10k: fix latency issue for QCA988x (bnc#1151927). - UAS: Revert commit 3ae62a42090f ("UAS: fix alignment of scatter/gather segments") (bnc#1151927). - nl80211: fix validation of mesh path nexthop (bnc#1151927). - USB: gadget: Reject endpoints with 0 maxpacket value (bnc#1151927). - usb-storage: Revert commit 747668dbc061 ("usb-storage: Set virt_boundary_mask to avoid SG overflows") (bnc#1151927). - USB: ldusb: fix ring-buffer locking (bnc#1151927). - USB: ldusb: fix control-message timeout (bnc#1151927). - usb: xhci: fix Immediate Data Transfer endianness (bnc#1151927). - usb: xhci: fix __le32/__le64 accessors in debugfs code (bnc#1151927). - USB: serial: whiteheat: fix potential slab corruption (bnc#1151927). - USB: serial: whiteheat: fix line-speed endianness (bnc#1151927). - xhci: Fix use-after-free regression in xhci clear hub TT implementation (bnc#1151927). - scsi: qla2xxx: Fix partial flash write of MBI (bnc#1151927). - scsi: target: cxgbit: Fix cxgbit_fw4_ack() (bnc#1151927). - HID: i2c-hid: add Trekstor Primebook C11B to descriptor override (bnc#1151927). - HID: Fix assumption that devices have inputs (bnc#1151927). - HID: fix error message in hid_open_report() (bnc#1151927). - HID: logitech-hidpp: split g920_get_config() (bnc#1151927). - HID: logitech-hidpp: rework device validation (bnc#1151927). - HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy() (bnc#1151927). - um-ubd: Entrust re-queue to the upper layers (bnc#1151927). - s390/unwind: fix mixing regs and sp (bnc#1151927). - s390/cmm: fix information leak in cmm_timeout_handler() (bnc#1151927). - s390/idle: fix cpu idle time calculation (bnc#1151927). - ARC: perf: Accommodate big-endian CPU (bnc#1151927). - IB/hfi1: Avoid excessive retry for TID RDMA READ request (bnc#1151927). - arm64: Ensure VM_WRITE|VM_SHARED ptes are clean by default (bnc#1151927). - arm64: cpufeature: Enable Qualcomm Falkor/Kryo errata 1003 (bnc#1151927). - virtio_ring: fix stalls for packed rings (bnc#1151927). - rtlwifi: rtl_pci: Fix problem of too small skb->len (bnc#1151927). - KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (bnc#1151927). - dmaengine: qcom: bam_dma: Fix resource leak (bnc#1151927). - dmaengine: tegra210-adma: fix transfer failure (bnc#1151927). - dmaengine: imx-sdma: fix size check for sdma script_number (bnc#1151927). - dmaengine: cppi41: Fix cppi41_dma_prep_slave_sg() when idle (bnc#1151927). - drm/amdgpu/gmc10: properly set BANK_SELECT and FRAGMENT_SIZE (bnc#1151927). - drm/i915: Fix PCH reference clock for FDI on HSW/BDW (bnc#1151927). - drm/amdgpu/gfx10: update gfx golden settings (bnc#1151927). - drm/amdgpu/powerplay/vega10: allow undervolting in p7 (bnc#1151927). - drm/amdgpu: Fix SDMA hang when performing VKexample test (bnc#1151927). - NFS: Fix an RCU lock leak in nfs4_refresh_delegation_stateid() (bnc#1151927). - io_uring: ensure we clear io_kiocb->result before each issue (bnc#1151927). - iommu/vt-d: Fix panic after kexec -p for kdump (bnc#1151927). - batman-adv: Avoid free/alloc race when handling OGM buffer (bnc#1151927). - llc: fix sk_buff leak in llc_sap_state_process() (bnc#1151927). - llc: fix sk_buff leak in llc_conn_service() (bnc#1151927). - rxrpc: Fix call ref leak (bnc#1151927). - rxrpc: rxrpc_peer needs to hold a ref on the rxrpc_local record (bnc#1151927). - rxrpc: Fix trace-after-put looking at the put peer record (bnc#1151927). - NFC: pn533: fix use-after-free and memleaks (bnc#1151927). - bonding: fix potential NULL deref in bond_update_slave_arr (bnc#1151927). - netfilter: conntrack: avoid possible false sharing (bnc#1151927). - net: usb: sr9800: fix uninitialized local variable (bnc#1151927). - sch_netem: fix rcu splat in netem_enqueue() (bnc#1151927). - net: sched: sch_sfb: don't call qdisc_put() while holding tree lock (bnc#1151927). - iwlwifi: exclude GEO SAR support for 3168 (bnc#1151927). - sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (bnc#1151927). - ALSA: usb-audio: DSD auto-detection for Playback Designs (bnc#1151927). - ALSA: usb-audio: Update DSD support quirks for Oppo and Rotel (bnc#1151927). - ALSA: usb-audio: Add DSD support for Gustard U16/X26 USB Interface (bnc#1151927). - RDMA/mlx5: Use irq xarray locking for mkey_table (bnc#1151927). - sched/fair: Fix -Wunused-but-set-variable warnings (bnc#1151927). - powerpc/powernv: Fix CPU idle to be called with IRQs disabled (bnc#1151927). - Revert "nvme: allow 64-bit results in passthru commands" (bnc#1151927). - Revert "ALSA: hda: Flush interrupts on disabling" (bnc#1151927). - commit b0d4923 - rpm/kernel-binary.spec.in: add COMPRESS_VMLINUX (bnc#1155921) Let COMPRESS_VMLINUX determine the compression used for vmlinux. By default (historically), it is gz. - commit c8b2d9f - ALSA: hda/ca0132 - Fix possible workqueue stall (bsc#1155836). - commit 98ead79 - stacktrace: Don't skip first entry on noncurrent tasks (bnc#1154866). Update upstream status. - commit f4d9b5e - rpm/kernel-subpackage-spec: Mention debuginfo in the subpackage description (bsc#1149119). - commit 525ec92 - ata: make qc_prep return ata_completion_errors (bnc#1110252). - ata: define AC_ERR_OK (bnc#1110252). - ata: sata_mv, avoid trigerrable BUG_ON (bnc#1110252). - commit 8bf663b ==== rook ==== Version update (1.1.1+git0.g9a2641a6 -> 1.1.6+git0.g91d6f635) - Update rook to v1.1.6: * Flex driver should not allow attach before detach on a different node (#3582) * Properly set the ceph-mgr annotations (#4195) * Only trigger an orchestration if the cluster CR changed (#4252) * Fix setting rbdGrpcMetricsPort in the helm chart (#4202) * Document all helm chart settings (#4202) * Support all layers of CRUSH map with node labels (#4236) * Skip orchestration restart on device config map update for osd on pvc (#4124) * Deduplicate tolerations collected for the drain canary pods (#4220) * Role bindings are missing for pod security policies (#3851) * Continue with orchestration if a single mon pod fails to start (#4146) * OSDs cannot call 'restorecon' when selinux is enabled (#4214) * Use the rook image for drain canary pods (#4213) * Allow setting of osd prepare resource limits (#4182) * Documentation for object bucket provisioning (#3882) - Update rook to v1.1.4: * OSD config overrides were ignored for some upgraded OSDs (#4161) * Enable restoring a cluster after disaster recovery (#4021) * Enable upgrade of OSDs configured on PVCs (#3996) * Automatically removing OSDs requires setting: removeOSDsIfOutAndSafeToRemove(#4116) * Rework csi keys and secrets to use minimal privileges (#4086) * Expose OSD prepare pod resource limits (#4083) * Minimum K8s version for running OSDs on PVCs is 1.13 (#4009) * Add 'rgw.buckets.non-ec' to list of RGW metadataPools (#4087) * Hide wrong error for clusterdisruption controller (#4094) * Multiple integration test fixes to improve CI stability (#4098) * Detect mount fstype more accurately in the flex driver (#4109) * Do not override mgr annotations (#4110) * Add OSDs to proper buckets in crush hierarchy with topology awareness (#4099) * More robust removal of cluster finalizer (#4090) * Take activeStandby into account for the CephFileSystem disruption budget (#4075) * Update the CSI CephFS registration directory name (#4070) * Fix incorrect Ceph CSI doc links (#4081) * Remove decimal places for osdMemoryTargetValue monitoring setting (#4046) * Relax pre-requisites for external cluster to allow connections to Luminous (#4025) * Avoid nodes getting stuck in OrchestrationStatusStarting during OSD config (#3817) * Make metrics and liveness port configurable (#4005) * Correct system namespace for CSI driver settings during upgrade (#4040) - Update csi-dummy-images.patch - Update csi-template-paths.patch - Update 0001-bsc-1152690-ceph-csi-Driver-will-fail-with-error.patch ==== rpm-config-SUSE ==== Version update (0.g42 -> 0.g44) - Update to version 0.g44: * Sync specfile changes * Add _lto_cflags to suse_macros for now ==== snapper ==== Version update (0.8.5 -> 0.8.6) Subpackages: libsnapper4 - add --machine-readable option for CSV and JSON outputs. - add --columns option for selecting columns in the commands list, list-configs and get-config. - bsc#1149322 - version 0.8.6 ==== wpa_supplicant ==== Version update (2.6 -> 2.9) - Update to 2.9 release: * SAE changes - disable use of groups using Brainpool curves - improved protection against side channel attacks [https://w1.fi/security/2019-6/] * EAP-pwd changes - disable use of groups using Brainpool curves - allow the set of groups to be configured (eap_pwd_groups) - improved protection against side channel attacks [https://w1.fi/security/2019-6/] * fixed FT-EAP initial mobility domain association using PMKSA caching (disabled by default for backwards compatibility; can be enabled with ft_eap_pmksa_caching=1) * fixed a regression in OpenSSL 1.1+ engine loading * added validation of RSNE in (Re)Association Response frames * fixed DPP bootstrapping URI parser of channel list * extended EAP-SIM/AKA fast re-authentication to allow use with FILS * extended ca_cert_blob to support PEM format * improved robustness of P2P Action frame scheduling * added support for EAP-SIM/AKA using anonymous@realm identity * fixed Hotspot 2.0 credential selection based on roaming consortium to ignore credentials without a specific EAP method * added experimental support for EAP-TEAP peer (RFC 7170) * added experimental support for EAP-TLS peer with TLS v1.3 * fixed a regression in WMM parameter configuration for a TDLS peer * fixed a regression in operation with drivers that offload 802.1X 4-way handshake * fixed an ECDH operation corner case with OpenSSL * SAE changes - added support for SAE Password Identifier - changed default configuration to enable only groups 19, 20, 21 (i.e., disable groups 25 and 26) and disable all unsuitable groups completely based on REVmd changes - do not regenerate PWE unnecessarily when the AP uses the anti-clogging token mechanisms - fixed some association cases where both SAE and FT-SAE were enabled on both the station and the selected AP - started to prefer FT-SAE over SAE AKM if both are enabled - started to prefer FT-SAE over FT-PSK if both are enabled - fixed FT-SAE when SAE PMKSA caching is used - reject use of unsuitable groups based on new implementation guidance in REVmd (allow only FFC groups with prime >= 3072 bits and ECC groups with prime >= 256) - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-1/] (CVE-2019-9494) * EAP-pwd changes - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-2/] (CVE-2019-9495) - verify server scalar/element [https://w1.fi/security/2019-4/] (CVE-2019-9499) - fix message reassembly issue with unexpected fragment [https://w1.fi/security/2019-5/] - enforce rand,mask generation rules more strictly - fix a memory leak in PWE derivation - disallow ECC groups with a prime under 256 bits (groups 25, 26, and 27) * fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y * Hotspot 2.0 changes - do not indicate release number that is higher than the one AP supports - added support for release number 3 - enable PMF automatically for network profiles created from credentials * fixed OWE network profile saving * fixed DPP network profile saving * added support for RSN operating channel validation (CONFIG_OCV=y and network profile parameter ocv=1) * added Multi-AP backhaul STA support * fixed build with LibreSSL * number of MKA/MACsec fixes and extensions * extended domain_match and domain_suffix_match to allow list of values * fixed dNSName matching in domain_match and domain_suffix_match when using wolfSSL * started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both are enabled * extended nl80211 Connect and external authentication to support SAE, FT-SAE, FT-EAP-SHA384 * fixed KEK2 derivation for FILS+FT * extended client_cert file to allow loading of a chain of PEM encoded certificates * extended beacon reporting functionality * extended D-Bus interface with number of new properties * fixed a regression in FT-over-DS with mac80211-based drivers * OpenSSL: allow systemwide policies to be overridden * extended driver flags indication for separate 802.1X and PSK 4-way handshake offload capability * added support for random P2P Device/Interface Address use * extended PEAP to derive EMSK to enable use with ERP/FILS * extended WPS to allow SAE configuration to be added automatically for PSK (wps_cred_add_sae=1) * removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS) * extended domain_match and domain_suffix_match to allow list of values * added a RSN workaround for misbehaving PMF APs that advertise IGTK/BIP KeyID using incorrect byte order * fixed PTK rekeying with FILS and FT * fixed WPA packet number reuse with replayed messages and key reinstallation [https://w1.fi/security/2017-1/] (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088) * fixed unauthenticated EAPOL-Key decryption in wpa_supplicant [https://w1.fi/security/2018-1/] (CVE-2018-14526) * added support for FILS (IEEE 802.11ai) shared key authentication * added support for OWE (Opportunistic Wireless Encryption, RFC 8110; and transition mode defined by WFA) * added support for DPP (Wi-Fi Device Provisioning Protocol) * added support for RSA 3k key case with Suite B 192-bit level * fixed Suite B PMKSA caching not to update PMKID during each 4-way handshake * fixed EAP-pwd pre-processing with PasswordHashHash * added EAP-pwd client support for salted passwords * fixed a regression in TDLS prohibited bit validation * started to use estimated throughput to avoid undesired signal strength based roaming decision * MACsec/MKA: - new macsec_linux driver interface support for the Linux kernel macsec module - number of fixes and extensions * added support for external persistent storage of PMKSA cache (PMKSA_GET/PMKSA_ADD control interface commands; and MESH_PMKSA_GET/MESH_PMKSA_SET for the mesh case) * fixed mesh channel configuration pri/sec switch case * added support for beacon report * large number of other fixes, cleanup, and extensions * added support for randomizing local address for GAS queries (gas_rand_mac_addr parameter) * fixed EAP-SIM/AKA/AKA' ext auth cases within TLS tunnel * added option for using random WPS UUID (auto_uuid=1) * added SHA256-hash support for OCSP certificate matching * fixed EAP-AKA' to add AT_KDF into Synchronization-Failure * fixed a regression in RSN pre-authentication candidate selection * added option to configure allowed group management cipher suites (group_mgmt network profile parameter) * removed all PeerKey functionality * fixed nl80211 AP and mesh mode configuration regression with Linux 4.15 and newer * added ap_isolate configuration option for AP mode * added support for nl80211 to offload 4-way handshake into the driver * added support for using wolfSSL cryptographic library * SAE - added support for configuring SAE password separately of the WPA2 PSK/passphrase - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection for SAE; note: this is not backwards compatible, i.e., both the AP and station side implementations will need to be update at the same time to maintain interoperability - added support for Password Identifier - fixed FT-SAE PMKID matching * Hotspot 2.0 - added support for fetching of Operator Icon Metadata ANQP-element - added support for Roaming Consortium Selection element - added support for Terms and Conditions - added support for OSEN connection in a shared RSN BSS - added support for fetching Venue URL information * added support for using OpenSSL 1.1.1 * FT - disabled PMKSA caching with FT since it is not fully functional - added support for SHA384 based AKM - added support for BIP ciphers BIP-CMAC-256, BIP-GMAC-128, BIP-GMAC-256 in addition to previously supported BIP-CMAC-128 - fixed additional IE inclusion in Reassociation Request frame when using FT protocol - Drop merged patches: * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch * rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch * rebased-v2.6-0009-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch * wpa_supplicant-bnc-1099835-fix-private-key-password.patch * wpa_supplicant-bnc-1099835-clear-default_passwd_cb.patch * wpa_supplicant-log-file-permission.patch * wpa_supplicant-log-file-cloexec.patch * wpa_supplicant-git-fa67debf4c6ddbc881a212b175faa6d5d0d90c8c.patch * wpa_supplicant-git-f5b74b966c942feb95a8ddbb7d130540b15b796d.patch - Rebase patches: * wpa_supplicant-getrandom.patch ==== zstd ==== Version update (1.4.3 -> 1.4.4) - Update to version 1.4.4 * perf: Improved decompression speed, by > 10% * perf: Better compression speed when re-using a context * perf: Fix compression ratio when compressing large files with small dictionary * perf: zstd reference encoder can generate RLE blocks * perf: minor generic speed optimization * api: new ability to extract sequences from the parser for analysis * api: fixed decoding of magic-less frames * api: fixed ZSTD_initCStream_advanced() performance with fast modes * cli: Named pipes support * cli: short tar's extension support * cli: command --output-dir-flat=DIE , generates target files into requested directory * cli: commands --stream-size=# and --size-hint=# * cli: command --exclude-compressed * cli: faster -t test mode * cli: improved some error messages * cli: fix rare deadlock condition within dictionary builder * misc: Improved documentation : ZSTD_CLEVEL, DYNAMIC_BMI2, ZSTD_CDict, function deprecation, zstd format * misc: fixed educational decoder : accept larger literals section, and removed UNALIGNED() macro - Refresh pzstd.1.patch -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191110 released!
by Richard Brown 12 Nov '19

12 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: c-ares (1.15.0 -> 1.15.0~20191108) cloud-init glib2 === Details === ==== c-ares ==== Version update (1.15.0 -> 1.15.0~20191108) - Update to upstream snapshot 20191108 * getaddrinfo - avoid infinite loop in case of NXDOMAIN * ares_getenv - return NULL in all cases * implement ares_getaddrinfo - onion-crash.patch: removed, upstreamed. - removed upstream patches that are part of the snapshot: 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch 0007-getaddrinfo-enhancements-257.patch 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch 0010-Disable-failing-test.patch - disable-live-tests.patch - updated ==== cloud-init ==== - Update cloud-init-write-routes.patch (bsc#1155376) + Write a route's destination network in CIDR notation instead of using the netmask. This provides support for correctly recording IPv6 routes. ==== glib2 ==== Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 - Re-enable systemtap, and require systemtap-headers and systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build cycle (boo#1145438). - Own /usr/share/systemtap{|tapset} directories, since we no longer have systemtap-sdt-devel in BuildRequires. - Disable lto if systemtap is enabled: build fails otherwise. -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191110 released!
by Richard Brown 12 Nov '19

12 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: c-ares (1.15.0 -> 1.15.0~20191108) cloud-init glib2 salt === Details === ==== c-ares ==== Version update (1.15.0 -> 1.15.0~20191108) - Update to upstream snapshot 20191108 * getaddrinfo - avoid infinite loop in case of NXDOMAIN * ares_getenv - return NULL in all cases * implement ares_getaddrinfo - onion-crash.patch: removed, upstreamed. - removed upstream patches that are part of the snapshot: 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch 0007-getaddrinfo-enhancements-257.patch 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch 0010-Disable-failing-test.patch - disable-live-tests.patch - updated ==== cloud-init ==== - Update cloud-init-write-routes.patch (bsc#1155376) + Write a route's destination network in CIDR notation instead of using the netmask. This provides support for correctly recording IPv6 routes. ==== glib2 ==== Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 - Re-enable systemtap, and require systemtap-headers and systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build cycle (boo#1145438). - Own /usr/share/systemtap{|tapset} directories, since we no longer have systemtap-sdt-devel in BuildRequires. - Disable lto if systemtap is enabled: build fails otherwise. ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-standalone-formulas-configuration - Remove virt.pool_delete fast parameter (U#54474) - Added: * remove-virt.pool_delete-fast-parameter-178.patch - Remove unnecessary yield causing BadYieldError (bsc#1154620) - Added: * remove-unnecessary-yield-causing-badyielderror-bsc-1.patch - Prevent 'Already reading' continuous exception message (bsc#1137642) - Added: * prevent-already-reading-continuous-exception-message.patch -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191109 released!
by Richard Brown 11 Nov '19

11 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bzip2 chrony kernel-default-base python-rpm-macros (20190610.2ee3233 -> 20191104.08e6493) rebootmgr (0.20 -> 0.20.1) texinfo (6.6 -> 6.7) === Details === ==== bzip2 ==== - Use correct version in autotools patchset M bzip2-1.0.6.2-autoconfiscated.patch ==== chrony ==== - Change to BuildRequires: rubygem(asciidoctor) and remove conditional (is available in SLE12-SP4 and SLE15* as well) - Fix typo in %install ==== kernel-default-base ==== - Add efivarfs required by mokutil (bsc#1154858). - Add Ceph modules (bsc#1149605) ==== python-rpm-macros ==== Version update (20190610.2ee3233 -> 20191104.08e6493) - Update to version 20191104.08e6493: * %pyproject_install macro should include --no-compile. * Recognise the _ for the macro arguments too ==== rebootmgr ==== Version update (0.20 -> 0.20.1) - Update to version 0.20.1 - added a memory allocation check ==== texinfo ==== Version update (6.6 -> 6.7) - update to 6.7: * support of index subentries and sub-subentries with @subentry * new commands @seeentry and @seealso in index entries * UTF-8 is the default input encoding * updates to HTML output of texi2any * support of noderename.cnf files has been removed * INPUT_PERL_ENCODING, INPUT_ENCODING_NAME, NODE_FILE_EXTENSION, NODE_FILENAMES, SHORTEXTN and TOP_NODE_FILE removed as customization variables * TOP_NODE_FILE_TARGET now contains the extension * texi2dvi: unconditionally run in --batch mode, ignore TeX errors * info: for a tree search (with M-/), '}' and '{' work as well as 'M-}' and 'M-{' to go through the results -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191109 released!
by Richard Brown 11 Nov '19

11 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bzip2 chrony kernel-default-base python-rpm-macros (20190610.2ee3233 -> 20191104.08e6493) rebootmgr (0.20 -> 0.20.1) texinfo (6.6 -> 6.7) === Details === ==== bzip2 ==== - Use correct version in autotools patchset M bzip2-1.0.6.2-autoconfiscated.patch ==== chrony ==== - Change to BuildRequires: rubygem(asciidoctor) and remove conditional (is available in SLE12-SP4 and SLE15* as well) - Fix typo in %install ==== kernel-default-base ==== - Add efivarfs required by mokutil (bsc#1154858). - Add Ceph modules (bsc#1149605) ==== python-rpm-macros ==== Version update (20190610.2ee3233 -> 20191104.08e6493) - Update to version 20191104.08e6493: * %pyproject_install macro should include --no-compile. * Recognise the _ for the macro arguments too ==== rebootmgr ==== Version update (0.20 -> 0.20.1) - Update to version 0.20.1 - added a memory allocation check ==== texinfo ==== Version update (6.6 -> 6.7) - update to 6.7: * support of index subentries and sub-subentries with @subentry * new commands @seeentry and @seealso in index entries * UTF-8 is the default input encoding * updates to HTML output of texi2any * support of noderename.cnf files has been removed * INPUT_PERL_ENCODING, INPUT_ENCODING_NAME, NODE_FILE_EXTENSION, NODE_FILENAMES, SHORTEXTN and TOP_NODE_FILE removed as customization variables * TOP_NODE_FILE_TARGET now contains the extension * texi2dvi: unconditionally run in --batch mode, ignore TeX errors * info: for a tree search (with M-/), '}' and '{' work as well as 'M-}' and 'M-{' to go through the results -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191107 released!
by Richard Brown 09 Nov '19

09 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: fuse3 (3.6.2 -> 3.8.0) hwdata (0.328 -> 0.329) tallow (16+git20190425.e4b3977 -> 19+git20191104.5dfb982) === Details === ==== fuse3 ==== Version update (3.6.2 -> 3.8.0) - Update to version 3.8.0 * Added support for FUSE_LSEEK operation which can be used to report holes in sparse files. ==== hwdata ==== Version update (0.328 -> 0.329) - Update to version 0.329: * Updated pci, usb and vendor ids. ==== tallow ==== Version update (16+git20190425.e4b3977 -> 19+git20191104.5dfb982) - Update to version 19+git20191104.5dfb982: * v19 * Fixed signedness. - Update to version 18+git20191028.83201e8: * v18 * Hide unwanted firewalld-cmd error messages. * v17 * Add firewalld support * Fix command order in tallow.conf man page * Add json-c to travis. * make older compilers a bit happier * add dovecot as postfix auth backend parsing -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191107 released!
by Richard Brown 09 Nov '19

09 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ethtool (5.2 -> 5.3) fuse3 (3.6.2 -> 3.8.0) hwdata (0.328 -> 0.329) python-tornado4 salt tallow (16+git20190425.e4b3977 -> 19+git20191104.5dfb982) yomi-formula === Details === ==== ethtool ==== Version update (5.2 -> 5.3) - Update to new upstream release 5.3 * igb: dump RR2DCDELAY register * support for dumping nested registers (e.g. CPU port) ==== fuse3 ==== Version update (3.6.2 -> 3.8.0) - Update to version 3.8.0 * Added support for FUSE_LSEEK operation which can be used to report holes in sparse files. ==== hwdata ==== Version update (0.328 -> 0.329) - Update to version 0.329: * Updated pci, usb and vendor ids. ==== python-tornado4 ==== - Replace %fdupes -s with plain %fdupes; hardlinks are better. - Provide versioned python-tornado symbol, making this package a full option in case the meta package is not applicable. - Per discussion with RM switch back to python-tornado<version> system with python-tornado standing in as a metapkg - Provide also python-tornado symbol not just py2/py3-tornado - Add tornado-impl provide to fix the collision for OBS resolver in dlpy before new python-torando containing version 6 is included in openSUSE TW - Switch to pytest like approach for tornado - Do not install tests - Reduce the conflicts even more ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-standalone-formulas-configuration - Fix for aptpkg test with older mock modules - Added: * fix-for-older-mock-module.patch - Remove wrong tests for core grain and improve debug logging - Use rich RPM deps to get a compatible version of tornado into the buildroot. - Added: * fix-a-wrong-rebase-in-test_core.py-180.patch - core.py: ignore wrong product_name files - zypperpkg: understand product type - Added: * accumulated-changes-from-yomi-167.patch - Enable usage of downloadonly parameter for apt module - Added: * adds-the-possibility-to-also-use-downloadonly-in-kwa.patch - Add missing 'fun' on events coming from salt-ssh wfunc executions (bsc#1151947) - Added: * add-missing-fun-for-returns-from-wfunc-executions.patch - Fix failing unit tests for batch async - Added: * fix-failing-unit-tests-for-batch-async.patch - Fix memory consumption problem on BatchAsync (bsc#1137642) - Added: * use-current-ioloop-for-the-localclient-instance-of-b.patch - Fix dependencies for RHEL 8 - Prevent systemd-run description issue when running aptpkg (bsc#1152366) - Added: * prevent-systemd-run-description-issue-when-running-a.patch ==== tallow ==== Version update (16+git20190425.e4b3977 -> 19+git20191104.5dfb982) - Update to version 19+git20191104.5dfb982: * v19 * Fixed signedness. - Update to version 18+git20191028.83201e8: * v18 * Hide unwanted firewalld-cmd error messages. * v17 * Add firewalld support * Fix command order in tallow.conf man page * Add json-c to travis. * make older compilers a bit happier * add dovecot as postfix auth backend parsing ==== yomi-formula ==== - Change /usr/share/yomi to root:root, but readable for others -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191106 released!
by Richard Brown 08 Nov '19

08 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: boost-base conmon (2.0.1 -> 2.0.2) ipset (7.3 -> 7.4) ncurses open-iscsi === Details === ==== boost-base ==== Subpackages: boost-license1_71_0 libboost_thread1_71_0 - Use new openmpi-macros-devel package ==== conmon ==== Version update (2.0.1 -> 2.0.2) - Add CONN_SOCK_BUF_SIZE to config - Fix bug to close the sync pipe before exit command ==== ipset ==== Version update (7.3 -> 7.4) Subpackages: libipset13 - Update to release 7.4 * Wildcard support for the "hash:net,iface" type. ==== ncurses ==== Subpackages: libncurses6 ncurses-utils terminfo terminfo-base - Add tack patch 1.08-20190721 * tack.c, edit.c, tack.h: gcc-8.x-warnings * init.c, edit.c: gcc 4.x warning * charset.c: update copyright * charset.c: rewrite of set_attr resulted in off-by-one loop limit * aclocal.m4: add CF_CURSES_TERM_H to get proper ifdef's for the boolnames arrays * configure.in: add CF_CURSES_TERM_H * aclocal.m4: add CF_TERMIOS_TYPES, from xterm * sysdep.c: use termios types such as tcflag_t * configure.in: use CF_TERMIOS_TYPES * tack.h: update copyright * aclocal.m4: resync with my-autoconf * package/debian/changelog, package/tack.spec, tack.h: bump * config.sub: 2019-06-30 * config.guess: 2019-06-10 - Add ncurses patch 20191026 + add a note in man/curs_add_wch.3x about Unicode terminology for the line-drawing characters (report by Nick Black). + improve comment in lib_tgoto.c regarding the use of \200 where a \0 would be intended by the caller (report by "64 bit", cf: 20000923). + modify linux-16color to accommodate Linux console driver change in early 2018 (report by Dino Petrucci). - Correct offsets of hunks of patch ncurses-6.1.dif for misc/terminfo.src ==== open-iscsi ==== Subpackages: iscsiuio libopeniscsiusr0_2_0 - Fix issue where CHAP was not working after latest update (bsc#1155510), updating: * open-iscsi-SUSE-latest.diff.bz2 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191106 released!
by Richard Brown 08 Nov '19

08 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: boost-base conmon (2.0.1 -> 2.0.2) ipset (7.3 -> 7.4) ncurses open-iscsi === Details === ==== boost-base ==== Subpackages: boost-license1_71_0 libboost_thread1_71_0 - Use new openmpi-macros-devel package ==== conmon ==== Version update (2.0.1 -> 2.0.2) - Add CONN_SOCK_BUF_SIZE to config - Fix bug to close the sync pipe before exit command ==== ipset ==== Version update (7.3 -> 7.4) Subpackages: libipset13 - Update to release 7.4 * Wildcard support for the "hash:net,iface" type. ==== ncurses ==== Subpackages: libncurses6 ncurses-utils terminfo terminfo-base - Add tack patch 1.08-20190721 * tack.c, edit.c, tack.h: gcc-8.x-warnings * init.c, edit.c: gcc 4.x warning * charset.c: update copyright * charset.c: rewrite of set_attr resulted in off-by-one loop limit * aclocal.m4: add CF_CURSES_TERM_H to get proper ifdef's for the boolnames arrays * configure.in: add CF_CURSES_TERM_H * aclocal.m4: add CF_TERMIOS_TYPES, from xterm * sysdep.c: use termios types such as tcflag_t * configure.in: use CF_TERMIOS_TYPES * tack.h: update copyright * aclocal.m4: resync with my-autoconf * package/debian/changelog, package/tack.spec, tack.h: bump * config.sub: 2019-06-30 * config.guess: 2019-06-10 - Add ncurses patch 20191026 + add a note in man/curs_add_wch.3x about Unicode terminology for the line-drawing characters (report by Nick Black). + improve comment in lib_tgoto.c regarding the use of \200 where a \0 would be intended by the caller (report by "64 bit", cf: 20000923). + modify linux-16color to accommodate Linux console driver change in early 2018 (report by Dino Petrucci). - Correct offsets of hunks of patch ncurses-6.1.dif for misc/terminfo.src ==== open-iscsi ==== Subpackages: iscsiuio libopeniscsiusr0_2_0 - Fix issue where CHAP was not working after latest update (bsc#1155510), updating: * open-iscsi-SUSE-latest.diff.bz2 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] envoy-proxy and cilium-proxy
by Michal Rostecki 07 Nov '19

07 Nov '19

Hi, As many of you already know and were engaged in that - we have two packages related to Cilium and needed for Cilium container images - envoy-proxy and cilium-proxy. They are failing since some time due to Bazel being, let's say, a quite problematic build system for people who want to do packaging of C/C++ software properly and do not like downloading random stuff from Github during the build. Recently we aimed to fix those packages in the following Factory staging project: https://build.opensuse.org/project/show/openSUSE:Factory:Staging:adi:54 But the main submit request got rejected (which I don't mind and agree with): https://build.opensuse.org/request/show/744892 It's almost a week since the rejection and I finally managed to have green builds of cilium-proxy and envoy-proxy packages which do not bundle any dependencies. The project is here: https://build.opensuse.org/project/show/home:mrostecki:branches:devel:kubic The most important package here: https://build.opensuse.org/package/show/home:mrostecki:branches:devel:kubic… As you can see, the home:mrostecki:branches:devel:kubic project has quite a lot of packages. Some of them are new, some of them are just modified packages which already exist in Factory or devel projects. We will most probably need to either: - add them all to adi:54 - start some new staging project when we will start everything from scratch @DimStar, @sysrich - WDYT? I will start creating submit requests to devel projects and Factory tomorrow and today I will just let all the stuff to rebuild on OBS - to be sure that I really did my job. I'm starting this email thread to share awarness of what I'm going to do tomorrow, coordinate the whole effort of fixing *-proxy packages and... hopefully... prove that I managed to solve the whole Bazel nightmare in the way acceptable for Linux distro packaging (although in future I will try to add some macros and try to make those specs less ugly). Cheers, Michal -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191104 released!
by Richard Brown 06 Nov '19

06 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: gawk glib2-branding-openSUSE grub2 (2.02 -> 2.04) hwdata (0.326 -> 0.328) installation-images-MicroOS (14.442 -> 14.443) kernel-source (5.3.7 -> 5.3.8) mozilla-nss (3.45 -> 3.46.1) python-Jinja2 (2.10.1 -> 2.10.3) python-PyJWT python-attrs (19.1.0 -> 19.3.0) python-base (2.7.16 -> 2.7.17) python-cffi (1.12.3 -> 1.13.0) python-chardet python-cryptography (2.7 -> 2.8) python-ecdsa (0.13.2 -> 0.13.3) python-jsonschema python-pyparsing python-requests python-urllib3 systemd vim (8.1.2148 -> 8.1.2233) xen yast2 (4.2.29 -> 4.2.30) zlib === Details === ==== gawk ==== - Fix typo in Summary - Stop overriding %_libexecdir with %_libdir - Fix the backward compatibility of the inplace extension: * Add gawk-inplace-namespace-part1.patch * Add gawk-inplace-namespace-part2.patch * Add gawk-inplace-namespace-part3.patch - Run autoreconf as part of the build process ==== glib2-branding-openSUSE ==== - Add super+f1 key binding for help to match GNOME default. ==== grub2 ==== Version update (2.02 -> 2.04) Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-x86_64-efi - Disable btrfs zstd support for i386-pc to workaround core.img too large to be embedded in btrfs bootloader area or MBR gap (boo#1154809) * 0001-btrfs-disable-zstd-support-for-i386-pc.patch - Fix grub2.sleep to load old kernel after hibernation (boo#1154783) - Enable support for riscv64 - Backports from upstream: * risc-v-fix-computation-of-pc-relative-relocation-offset.patch * risc-v-add-clzdi2-symbol.patch * grub-install-define-default-platform-for-risc-v.patch - Version bump to 2.04 * removed - translations-20170427.tar.xz * grub2.spec - Make signed grub-tpm.efi specific to x86_64-efi build, the platform currently shipped with tpm module from upstream codebase - Add shim_lock to signed grub.efi in x86_64-efi build - x86_64: linuxefi now depends on linux, both will verify kernel via shim_lock - Remove translation tarball and po file hacks as it's been included in upstream tarball * rediff - grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch - grub2-commands-introduce-read_file-subcommand.patch - grub2-secureboot-add-linuxefi.patch - 0001-add-support-for-UEFI-network-protocols.patch - grub2-efi-HP-workaround.patch - grub2-secureboot-install-signed-grub.patch - grub2-linux.patch - use-grub2-as-a-package-name.patch - grub2-pass-corret-root-for-nfsroot.patch - grub2-secureboot-use-linuxefi-on-uefi.patch - grub2-secureboot-no-insmod-on-sb.patch - grub2-secureboot-provide-linuxefi-config.patch - grub2-secureboot-chainloader.patch - grub2-s390x-01-Changes-made-and-files-added-in-order-to-allow-s390x.patch - grub2-s390x-02-kexec-module-added-to-emu.patch - grub2-s390x-04-grub2-install.patch - grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch - grub2-efi-chainloader-root.patch - grub2-ppc64le-disable-video.patch - grub2-ppc64-cas-reboot-support.patch - grub2-Fix-incorrect-netmask-on-ppc64.patch - 0003-bootp-New-net_bootp6-command.patch - 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch - 0012-tpm-Build-tpm-as-module.patch - grub2-emu-4-all.patch - grub2-btrfs-09-get-default-subvolume.patch - grub2-ppc64le-memory-map.patch - grub2-ppc64-cas-fix-double-free.patch - 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch * drop upstream patches - grub2-fix-locale-en.mo.gz-not-found-error-message.patch - grub2-fix-build-with-flex-2.6.4.patch - grub2-accept-empty-module.patch - 0001-Fix-packed-not-aligned-error-on-GCC-8.patch - 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch - unix-exec-avoid-atexit-handlers-when-child-exits.patch - 0001-xfs-Accept-filesystem-with-sparse-inodes.patch - grub2-binutils2.31.patch - grub2-msdos-fix-overflow.patch - 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch - grub2-efi-Move-grub_reboot-into-kernel.patch - grub2-efi-Free-malloc-regions-on-exit.patch - grub2-move-initrd-upper.patch - 0002-Add-Virtual-LAN-support.patch - 0001-ofnet-Initialize-structs-in-bootpath-parser.patch - 0001-misc-fix-invalid-character-recongition-in-strto-l.patch - 0001-tpm-Core-TPM-support.patch - 0002-tpm-Measure-kernel-initrd.patch - 0003-tpm-Add-BIOS-boot-measurement.patch - 0004-tpm-Rework-linux-command.patch - 0005-tpm-Rework-linux16-command.patch - 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch - 0007-tpm-Measure-the-kernel-commandline.patch - 0008-tpm-Measure-commands.patch - 0009-tpm-Measure-multiboot-images-and-modules.patch - 0010-tpm-Fix-boot-when-there-s-no-TPM.patch - 0011-tpm-Fix-build-error.patch - 0013-tpm-i386-pc-diskboot-img.patch - grub2-freetype-pkgconfig.patch - 0001-cpio-Disable-gcc9-Waddress-of-packed-member.patch - 0002-jfs-Disable-gcc9-Waddress-of-packed-member.patch - 0003-hfs-Fix-gcc9-error-Waddress-of-packed-member.patch - 0004-hfsplus-Fix-gcc9-error-with-Waddress-of-packed-membe.patch - 0005-acpi-Fix-gcc9-error-Waddress-of-packed-member.patch - 0006-usbtest-Disable-gcc9-Waddress-of-packed-member.patch - 0007-chainloader-Fix-gcc9-error-Waddress-of-packed-member.patch - 0008-efi-Fix-gcc9-error-Waddress-of-packed-member.patch - Consistently find btrfs snapshots on s390x. (bsc#1136970) * grub2-s390x-04-grub2-install.patch ==== hwdata ==== Version update (0.326 -> 0.328) - Update to version 0.328: * Updated pci, usb and vendor ids. ==== installation-images-MicroOS ==== Version update (14.442 -> 14.443) - merge gh#openSUSE/installation-images#340 - fix initial sshd key generation - setup /etc/sysconfig/ssh in rescue system - 14.443 ==== kernel-source ==== Version update (5.3.7 -> 5.3.8) - Refresh patches.suse/stacktrace-don-t-skip-first-entry-on-noncurrent-task.patch. v3 of the patch - commit ea4c828 - Linux 5.3.8 (bnc#1151927). - drm: Free the writeback_job when it with an empty fb (bnc#1151927). - drm: Clear the fence pointer when writeback job signaled (bnc#1151927). - clk: ti: dra7: Fix mcasp8 clock bits (bnc#1151927). - ARM: dts: Fix wrong clocks for dra7 mcasp (bnc#1151927). - nvme-pci: Fix a race in controller removal (bnc#1151927). - scsi: ufs: skip shutdown if hba is not powered (bnc#1151927). - scsi: megaraid: disable device when probe failed after enabled device (bnc#1151927). - scsi: qla2xxx: Silence fwdump template message (bnc#1151927). - scsi: qla2xxx: Fix unbound sleep in fcport delete path (bnc#1151927). - scsi: qla2xxx: Fix stale mem access on driver unload (bnc#1151927). - scsi: qla2xxx: Fix N2N link reset (bnc#1151927). - scsi: qla2xxx: Fix N2N link up fail (bnc#1151927). - ARM: dts: Fix gpio0 flags for am335x-icev2 (bnc#1151927). - ARM: OMAP2+: Fix missing reset done flag for am3 and am43 (bnc#1151927). - ARM: OMAP2+: Add missing LCDC midlemode for am335x (bnc#1151927). - ARM: OMAP2+: Fix warnings with broken omap2_set_init_voltage() (bnc#1151927). - nvme-tcp: fix wrong stop condition in io_work (bnc#1151927). - nvme-pci: Save PCI state before putting drive into deepest state (bnc#1151927). - nvme: fix an error code in nvme_init_subsystem() (bnc#1151927). - nvme-rdma: Fix max_hw_sectors calculation (bnc#1151927). - Added QUIRKs for ADATA XPG SX8200 Pro 512GB (bnc#1151927). - nvme: Add quirk for Kingston NVME SSD running FW E8FK11.T (bnc#1151927). - nvme: allow 64-bit results in passthru commands (bnc#1151927). - drm/komeda: prevent memory leak in komeda_wb_connector_add (bnc#1151927). - nvme-rdma: fix possible use-after-free in connect timeout (bnc#1151927). - blk-mq: honor IO scheduler for multiqueue devices (bnc#1151927). - ieee802154: ca8210: prevent memory leak (bnc#1151927). - ARM: dts: am4372: Set memory bandwidth limit for DISPC (bnc#1151927). - net: dsa: qca8k: Use up to 7 ports for all operations (bnc#1151927). - MIPS: dts: ar9331: fix interrupt-controller size (bnc#1151927). - xen/efi: Set nonblocking callbacks (bnc#1151927). - loop: change queue block size to match when using DIO (bnc#1151927). - nl80211: fix null pointer dereference (bnc#1151927). - mac80211: fix txq null pointer dereference (bnc#1151927). - netfilter: nft_connlimit: disable bh on garbage collection (bnc#1151927). - net: mscc: ocelot: add missing of_node_put after calling of_get_child_by_name (bnc#1151927). - net: dsa: rtl8366rb: add missing of_node_put after calling of_get_child_by_name (bnc#1151927). - net: stmmac: xgmac: Not all Unicast addresses may be available (bnc#1151927). - net: stmmac: dwmac4: Always update the MAC Hash Filter (bnc#1151927). - net: stmmac: Correctly take timestamp for PTPv2 (bnc#1151927). - net: stmmac: Do not stop PHY if WoL is enabled (bnc#1151927). - net: ag71xx: fix mdio subnode support (bnc#1151927). - RISC-V: Clear load reservations while restoring hart contexts (bnc#1151927). - riscv: Fix memblock reservation for device tree blob (bnc#1151927). - drm/amdgpu: fix multiple memory leaks in acp_hw_init (bnc#1151927). - drm/amd/display: memory leak (bnc#1151927). - mips: Loongson: Fix the link time qualifier of 'serial_exit()' (bnc#1151927). - net: hisilicon: Fix usage of uninitialized variable in function mdio_sc_cfg_reg_write() (bnc#1151927). - net: stmmac: Avoid deadlock on suspend/resume (bnc#1151927). - selftests: kvm: Fix libkvm build error (bnc#1151927). - lib: textsearch: fix escapes in example code (bnc#1151927). - s390/mm: fix -Wunused-but-set-variable warnings (bnc#1151927). - r8152: Set macpassthru in reset_resume callback (bnc#1151927). - net: phy: allow for reset line to be tied to a sleepy GPIO controller (bnc#1151927). - net: phy: fix write to mii-ctrl1000 register (bnc#1151927). - namespace: fix namespace.pl script to support relative paths (bnc#1151927). - Convert filldir[64]() from __put_user() to unsafe_put_user() (bnc#1151927). - elf: don't use MAP_FIXED_NOREPLACE for elf executable mappings (bnc#1151927). - Make filldir[64]() verify the directory entry filename is valid (bnc#1151927). - uaccess: implement a proper unsafe_copy_to_user() and switch filldir over to it (bnc#1151927). - filldir[64]: remove WARN_ON_ONCE() for bad directory entries (bnc#1151927). - net_sched: fix backward compatibility for TCA_KIND (bnc#1151927). - net_sched: fix backward compatibility for TCA_ACT_KIND (bnc#1151927). - libata/ahci: Fix PCS quirk application (bnc#1151927). - md/raid0: fix warning message for parameter default_layout (bnc#1151927). - Revert "drm/radeon: Fix EEH during kexec" (bnc#1151927). - ocfs2: fix panic due to ocfs2_wq is null (bnc#1151927). - nvme-pci: Set the prp2 correctly when using more than 4k page (bnc#1151927). - ipv4: fix race condition between route lookup and invalidation (bnc#1151927). - ipv4: Return -ENETUNREACH if we can't create route but saddr is valid (bnc#1151927). - net: avoid potential infinite loop in tc_ctl_action() (bnc#1151927). - net: bcmgenet: Fix RGMII_MODE_EN value for GENET v1/2/3 (bnc#1151927). - net: bcmgenet: Set phydev->dev_flags only for internal PHYs (bnc#1151927). - net: i82596: fix dma_alloc_attr for sni_82596 (bnc#1151927). - net/ibmvnic: Fix EOI when running in XIVE mode (bnc#1151927). - net: ipv6: fix listify ip6_rcv_finish in case of forwarding (bnc#1151927). - net: stmmac: disable/enable ptp_ref_clk in suspend/resume flow (bnc#1151927). - rxrpc: Fix possible NULL pointer access in ICMP handling (bnc#1151927). - sched: etf: Fix ordering of packets with same txtime (bnc#1151927). - sctp: change sctp_prot .no_autobind with true (bnc#1151927). - net: aquantia: temperature retrieval fix (bnc#1151927). - net: aquantia: when cleaning hw cache it should be toggled (bnc#1151927). - net: aquantia: do not pass lro session with invalid tcp checksum (bnc#1151927). - net: aquantia: correctly handle macvlan and multicast coexistence (bnc#1151927). - net: phy: micrel: Discern KSZ8051 and KSZ8795 PHYs (bnc#1151927). - net: phy: micrel: Update KSZ87xx PHY name (bnc#1151927). - net: avoid errors when trying to pop MLPS header on non-MPLS packets (bnc#1151927). - net/sched: fix corrupted L2 header with MPLS 'push' and 'pop' actions (bnc#1151927). - netdevsim: Fix error handling in nsim_fib_init and nsim_fib_exit (bnc#1151927). - net: ethernet: broadcom: have drivers select DIMLIB as needed (bnc#1151927). - net: phy: Fix "link partner" information disappear issue (bnc#1151927). - LSM: SafeSetID: Stop releasing uninitialized ruleset (bnc#1151927). - rxrpc: use rcu protection while reading sk->sk_user_data (bnc#1151927). - io_uring: fix bad inflight accounting for SETUP_IOPOLL|SETUP_SQTHREAD (bnc#1151927). - io_uring: Fix corrupted user_data (bnc#1151927). - USB: legousbtower: fix memleak on disconnect (bnc#1151927). - ALSA: hda/realtek - Add support for ALC711 (bnc#1151927). - ALSA: hda/realtek - Enable headset mic on Asus MJ401TA (bnc#1151927). - ALSA: usb-audio: Disable quirks for BOSS Katana amplifiers (bnc#1151927). - ALSA: hda - Force runtime PM on Nvidia HDMI codecs (bnc#1151927). - usb: udc: lpc32xx: fix bad bit shift operation (bnc#1151927). - USB: serial: ti_usb_3410_5052: fix port-close races (bnc#1151927). - USB: ldusb: fix memleak on disconnect (bnc#1151927). - USB: usblp: fix use-after-free on disconnect (bnc#1151927). - USB: ldusb: fix read info leaks (bnc#1151927). - binder: Don't modify VMA bounds in ->mmap handler (bnc#1151927). - MIPS: tlbex: Fix build_restore_pagemask KScratch restore (bnc#1151927). - staging: wlan-ng: fix exit return when sme->key_idx >= NUM_WEPKEYS (bnc#1151927). - scsi: zfcp: fix reaction on bit error threshold notification (bnc#1151927). - scsi: sd: Ignore a failure to sync cache due to lack of authorization (bnc#1151927). - scsi: core: save/restore command resid for error handling (bnc#1151927). - scsi: core: try to get module before removing device (bnc#1151927). - scsi: ch: Make it possible to open a ch device multiple times again (bnc#1151927). - Revert "Input: elantech - enable SMBus on new (2018+) systems" (bnc#1151927). - Input: da9063 - fix capability and drop KEY_SLEEP (bnc#1151927). - Input: synaptics-rmi4 - avoid processing unknown IRQs (bnc#1151927). - Input: st1232 - fix reporting multitouch coordinates (bnc#1151927). - ASoC: rsnd: Reinitialize bit clock inversion flag for every format setting (bnc#1151927). - ACPI: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() (bnc#1151927). - ACPI: NFIT: Fix unlock on error in scrub_show() (bnc#1151927). - iwlwifi: pcie: change qu with jf devices to use qu configuration (bnc#1151927). - mac80211: Reject malformed SSID elements (bnc#1151927). - drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50 (bnc#1151927). - drm/ttm: Restore ttm prefaulting (bnc#1151927). - drm/panfrost: Handle resetting on timeout better (bnc#1151927). - drm/amdgpu: Bail earlier when amdgpu.cik_/si_support is not set to 1 (bnc#1151927). - drm/amdgpu/sdma5: fix mask value of POLL_REGMEM packet for pipe sync (bnc#1151927). - drm/i915/userptr: Never allow userptr into the mappable GGTT (bnc#1151927). - drm/i915: Favor last VBT child device with conflicting AUX ch/DDC pin (bnc#1151927 bnc#1152971 fdo#112028). - drm/amdgpu/vce: fix allocation size in enc ring test (bnc#1151927). - drm/amdgpu/vcn: fix allocation size in enc ring test (bnc#1151927). - drm/amdgpu/uvd6: fix allocation size in enc ring test (v2) (bnc#1151927). - drm/amdgpu/uvd7: fix allocation size in enc ring test (v2) (bnc#1151927). - drm/amdgpu: user pages array memory leak fix (bnc#1151927). - drivers/base/memory.c: don't access uninitialized memmaps in soft_offline_page_store() (bnc#1151927). - fs/proc/page.c: don't access uninitialized memmaps in fs/proc/page.c (bnc#1151927). - io_uring: Fix broken links with offloading (bnc#1151927). - io_uring: Fix race for sqes with userspace (bnc#1151927). - io_uring: used cached copies of sq->dropped and cq->overflow (bnc#1151927). - mmc: mxs: fix flags passed to dmaengine_prep_slave_sg (bnc#1151927). - mmc: cqhci: Commit descriptors before setting the doorbell (bnc#1151927). - mmc: sdhci-omap: Fix Tuning procedure for temperatures < -20C (bnc#1151927). - mm/memory-failure.c: don't access uninitialized memmaps in memory_failure() (bnc#1151927). - mm/slub: fix a deadlock in show_slab_objects() (bnc#1151927). - mm/page_owner: don't access uninitialized memmaps when reading /proc/pagetypeinfo (bnc#1151927). - mm/memunmap: don't access uninitialized memmap in memunmap_pages() (bnc#1151927). - mm: memcg/slab: fix panic in __free_slab() caused by premature memcg pointer release (bnc#1151927). - mm, compaction: fix wrong pfn handling in __reset_isolation_pfn() (bnc#1151927). - mm: memcg: get number of pages on the LRU list in memcgroup base on lru_zone_size (bnc#1151927). - mm: memblock: do not enforce current limit for memblock_phys* family (bnc#1151927). - hugetlbfs: don't access uninitialized memmaps in pfn_range_valid_gigantic() (bnc#1151927). - mm/memory-failure: poison read receives SIGKILL instead of SIGBUS if mmaped more than once (bnc#1151927). - zram: fix race between backing_dev_show and backing_dev_store (bnc#1151927). - xtensa: drop EXPORT_SYMBOL for outs*/ins* (bnc#1151927). - xtensa: fix change_bit in exclusive access option (bnc#1151927). - s390/zcrypt: fix memleak at release (bnc#1151927). - s390/kaslr: add support for R_390_GLOB_DAT relocation type (bnc#1151927). - lib/vdso: Make clock_getres() POSIX compliant again (bnc#1151927). - parisc: Fix vmap memory leak in ioremap()/iounmap() (bnc#1151927). - EDAC/ghes: Fix Use after free in ghes_edac remove path (bnc#1151927). - arm64: KVM: Trap VM ops when ARM64_WORKAROUND_CAVIUM_TX2_219_TVM is set (bnc#1151927). - arm64: Avoid Cavium TX2 erratum 219 when switching TTBR (bnc#1151927). - arm64: Enable workaround for Cavium TX2 erratum 219 when running SMT (bnc#1151927). - arm64: Allow CAVIUM_TX2_ERRATUM_219 to be selected (bnc#1151927). - CIFS: avoid using MID 0xFFFF (bnc#1151927). - cifs: Fix missed free operations (bnc#1151927). - CIFS: Fix use after free of file info structures (bnc#1151927). - perf/aux: Fix AUX output stopping (bnc#1151927). - tracing: Fix race in perf_trace_buf initialization (bnc#1151927). - fs/dax: Fix pmd vs pte conflict detection (bnc#1151927). - dm cache: fix bugs when a GFP_NOWAIT allocation fails (bnc#1151927). - irqchip/sifive-plic: Switch to fasteoi flow (bnc#1151927). - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (bnc#1151927). - x86/hyperv: Make vapic support x2apic mode (bnc#1151927). - pinctrl: cherryview: restore Strago DMI workaround for all versions (bnc#1151927). - pinctrl: armada-37xx: fix control of pins 32 and up (bnc#1151927). - pinctrl: armada-37xx: swap polarity on LED group (bnc#1151927). - btrfs: block-group: Fix a memory leak due to missing btrfs_put_block_group() (bnc#1151927). - Btrfs: add missing extents release on file extent cluster relocation error (bnc#1151927). - btrfs: don't needlessly create extent-refs kernel thread (bnc#1151927). - Btrfs: fix qgroup double free after failure to reserve metadata for delalloc (bnc#1151927). - Btrfs: check for the full sync flag while holding the inode lock during fsync (bnc#1151927). - btrfs: tracepoints: Fix wrong parameter order for qgroup events (bnc#1151927). - btrfs: tracepoints: Fix bad entry members of qgroup events (bnc#1151927). - KVM: PPC: Book3S HV: XIVE: Ensure VP isn't already in use (bnc#1151927). - memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()' (bnc#1151927). - cpufreq: Avoid cpufreq_suspend() deadlock on system shutdown (bnc#1151927). - ceph: just skip unrecognized info in ceph_reply_info_extra (bnc#1151927). - xen/netback: fix error path of xenvif_connect_data() (bnc#1151927). - PCI: PM: Fix pci_power_up() (bnc#1151927). - opp: of: drop incorrect lockdep_assert_held() (bnc#1151927). - of: reserved_mem: add missing of_node_put() for proper ref-counting (bnc#1151927). - blk-rq-qos: fix first node deletion of rq_qos_del() (bnc#1151927). - RDMA/cxgb4: Do not dma memory off of the stack (bnc#1151927). - Delete patches.suse/Revert-drm-i915-bios-make-child-device-order-the-pri.patch. - Update config files. CAVIUM_TX2_ERRATUM_219=y (default) - commit f0ffcb7 - x86/boot/64: Make level2_kernel_pgt pages invalid outside kernel area (bnc#1153969). - x86/boot/64: Round memory hole size up to next PMD page (bnc#1153969). - commit 3501dc2 - drm/amdgpu: Add DC feature mask to disable fractional pwm (bsc#1154010). - commit 6ffba6e - stacktrace: don't skip first entry on noncurrent tasks (bnc#1154866). - commit 387f2bb - kernel-binary.spec.in: Fix build of non-modular kernels (boo#1154578). - commit 7f1e881 - ARM: 8904/1: skip nomap memblocks while finding the lowmem/highmem boundary (bsc#1122614). - commit 9f59038 - rtlwifi: Fix potential overflow on P2P code (bsc#1154372 CVE-2019-17666). - cfg80211: wext: avoid copying malformed SSIDs (bsc#1153158 CVE-2019-17133). - commit e229e3d - libertas: fix a potential NULL pointer dereference (CVE-2019-16232,bsc#1150465). - iwlwifi: pcie: fix rb_allocator workqueue allocation (CVE-2019-16234,bsc#1150452). - commit 23c6b73 - kernel-binary.spec.in: Obsolete kgraft packages only when not building them. - commit 25f7690 - kernel-subpackage-build: create zero size ghost for uncompressed vmlinux (bsc#1154354). It is not strictly necessary to uncompress it so maybe the ghost file can be 0 size in this case. - commit 4bf73c8 ==== mozilla-nss ==== Version update (3.45 -> 3.46.1) - update to NSS 3.46.1 * required by Firefox 70.0 Notable changes in 3.46 * The following CA certificates were Removed: expired Class 2 Primary root certificate expired UTN-USERFirst-Client root certificate expired Deutsche Telekom Root CA 2 root certificate Swisscom Root CA 2 root certificate * Significant improvements to AES-GCM performance on ARM Many bugfixes Bug fixes in 3.46.1 * Soft token MAC verification not constant time (bmo#1582343) * Remove arbitrary HKDF output limit by allocating space as needed (bmo#1577953) - requires NSPR 4.22 ==== python-Jinja2 ==== Version update (2.10.1 -> 2.10.3) - Update to 2.10.3: * Fix Python 3.7 deprecation warnings. * Using range in the sandboxed environment uses xrange on Python 2 to avoid memory use. :issue:`933` * Use Python 3.7's better traceback support to avoid a core dump when using debug builds of Python 3.7. :issue:`1050` * Fix a typo in Babel entry point in setup.py that was preventing installation. - Remove merged python38.patch ==== python-PyJWT ==== - Fix build with ecdsa >= 0.13.3, #447 * 0001-Catch-BadSignatureError-raised-by-ecdsa-0.13.3.patch ==== python-attrs ==== Version update (19.1.0 -> 19.3.0) - update to 19.3.0 * Fixed auto_attribs usage when default values cannot be compared directly with ==, such as numpy arrays. - update to version 19.2.0: * Backward-incompatible Changes + Removed deprecated "Attribute" attribute "convert" per scheduled removal on 2019/1. This planned deprecation is tracked in issue `#307 <https://github.com/python-attrs/attrs/issues/307>`_. `#504 <https://github.com/python-attrs/attrs/issues/504>`_ + "__lt__", "__le__", "__gt__", and "__ge__" do not consider subclasses comparable anymore. This has been deprecated since 18.2.0 and was raising a "DeprecationWarning" for over a year. `#570 <https://github.com/python-attrs/attrs/issues/570>`_ * Deprecations + The "cmp" argument to "attr.s()" and "attr.ib()" is now deprecated. Please use "eq" to add equality methods ("__eq__" and "__ne__") and "order" to add ordering methods ("__lt__", "__le__", "__gt__", and "__ge__") instead ? just like with `dataclasses <https://docs.python.org/3/library/dataclasses.html>`_. Both are effectively "True" by default but it's enough to set "eq=False" to disable both at once. Passing "eq=False, order=True" explicitly will raise a "ValueError" though. Since this is arguably a deeper backward-compatibility break, it will have an extended deprecation period until 2021-06-01. After that day, the "cmp" argument will be removed. "attr.Attribute" also isn't orderable anymore. `#574 <https://github.com/python-attrs/attrs/issues/574>`_ * Changes + Updated "attr.validators.__all__" to include new validators added in `#425`_. `#517 <https://github.com/python-attrs/attrs/issues/517>`_ + Slotted classes now use a pure Python mechanism to rewrite the "__class__" cell when rebuilding the class, so "super()" works even on environments where "ctypes" is not installed. `#522 <https://github.com/python-attrs/attrs/issues/522>`_ + When collecting attributes using "@attr.s(auto_attribs=True)", attributes with a default of "None" are now deleted too. `#523 <https://github.com/python-attrs/attrs/issues/523>`_, `#556 <https://github.com/python-attrs/attrs/issues/556>`_ + Fixed "attr.validators.deep_iterable()" and "attr.validators.deep_mapping()" type stubs. `#533 <https://github.com/python-attrs/attrs/issues/533>`_ + "attr.validators.is_callable()" validator now raises an exception "attr.exceptions.NotCallableError", a subclass of "TypeError", informing the received value. `#536 <https://github.com/python-attrs/attrs/issues/536>`_ + "@attr.s(auto_exc=True)" now generates classes that are hashable by ID, as the documentation always claimed it would. `#543 <https://github.com/python-attrs/attrs/issues/543>`_, `#563 <https://github.com/python-attrs/attrs/issues/563>`_ + Added "attr.validators.matches_re()" that checks string attributes whether they match a regular expression. `#552 <https://github.com/python-attrs/attrs/issues/552>`_ + Keyword-only attributes ("kw_only=True") and attributes that are excluded from the "attrs"'s "__init__" ("init=False") now can appear before mandatory attributes. `#559 <https://github.com/python-attrs/attrs/issues/559>`_ + The fake filename for generated methods is now more stable. It won't change when you restart the process. `#560 <https://github.com/python-attrs/attrs/issues/560>`_ + The value passed to "@attr.ib(repr=?)" can now be either a boolean (as before) or a callable. That callable must return a string and is then used for formatting the attribute by the generated "__repr__()" method. `#568 <https://github.com/python-attrs/attrs/issues/568>`_ + Added "attr.__version_info__" that can be used to reliably check the version of "attrs" and write forward- and backward-compatible code. Please check out the `section on deprecated APIs <http://www.attrs.org/en/stable/api.html#deprecated-apis>`_ on how to use it. `#580 <https://github.com/python-attrs/attrs/issues/580>`_ ==== python-base ==== Version update (2.7.16 -> 2.7.17) Subpackages: libpython2_7-1_0 - Update to 2.7.17: - a bug fix release in the Python 2.7.x series. It is expected to be the penultimate release for Python 2.7. - Removed patches included upstream: - CVE-2018-20852-cookie-domain-check.patch - CVE-2019-16935-xmlrpc-doc-server_title.patch - CVE-2019-9636-netloc-no-decompose-characters.patch - CVE-2019-9947-no-ctrl-char-http.patch - CVE-2019-9948-avoid_local-file.patch ==== python-cffi ==== Version update (1.12.3 -> 1.13.0) - Update to 1.13.0: * No changelog provided upstream ==== python-chardet ==== - Replace %fdupes -s with plain %fdupes; hardlinks are better. ==== python-cryptography ==== Version update (2.7 -> 2.8) - update to 2.8 * Added support for Python 3.8. * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations. * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9. * We now ship manylinux2010 wheels in addition to our manylinux1 wheels. * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder. * cryptography no longer depends on asn1crypto. * FreshestCRL is now allowed as a CertificateRevocationList extension. ==== python-ecdsa ==== Version update (0.13.2 -> 0.13.3) - updated to 0.13.3 (bsc#1153165) + CVE-2019-14853 DOS atack during signature decoding + CVE-2019-14859 signature malleability caused by insufficient checks of DER encoding ==== python-jsonschema ==== - Replace %fdupes -s with plain %fdupes; hardlinks are better. ==== python-pyparsing ==== - Do not pull in setuptools dependency at all to avoid cycles ==== python-requests ==== - Add two patches only updating test logic to remove pytest 3 pin - merged_pr_5049.patch - pr_5251-pytest5.patch ==== python-urllib3 ==== - Require a new enough release of python-six. 1.25.6 needs at least 1.12.0 for ensure_text() and friends. ==== systemd ==== Subpackages: libsystemd0 libudev1 systemd-logger systemd-sysvinit udev - Drop 0001-compat-rules-escape-when-used-for-shell-expansion.patch It's part of the previous import. - Import commit b7467b7b553d6d0d6f92758d966b69f1a88b6b42 441f44f371 fileio: introduce read_full_virtual_file() for reading virtual files in sysfs, procfs (bsc#1133495) 8a1bb5c66b swap: do not make swap units wanted by its device unit anymore - Import commit 5df9000899ef7d45ddbcacd0fdf73afa07a40f6b f0ed7237e4 udev/cdrom_id: Do not open CD-rom in exclusive mode. (bsc#1154256) b37054aa5a compat-rules: escape '$' when used for shell expansion Changes from the v243-stable: ef677436aa test: Pass personality test even when i686 userland runs on x86_64 kernel 3f6398c450 docs: fix inadvertent change in uid range 25bb377a73 cgroup: fix typo in BPF firewall support warning message 6d97aca0d5 fix build with compilers with default stack-protector enabled fbad077cec nspawn: surrender controlling terminal to PID2 when using the PID1 stub 0553c3c668 pid1: fix DefaultTasksMax initialization f406a691a7 src/core/automount: use DirectoryMode when calling mkdir -p 20438f96c3 udevadm trigger: do not propagate EACCES and ENODEV 6480630bc3 hwdb: Correct WWWW Pattern In Documentation Comment 9d8e889810 nspawn: consistenly fail if parsing the environment fails 40e169b304 nspawn: default to unified hierarchy if --as-pid2 is used b5df1037a0 cgroup: Mark memory protections as explicitly set in transient units f14e3e02cc cgroup: Respect DefaultMemoryMin when setting memory.min ea248e53bf cgroup: Check ancestor memory min for unified memory config de1d25a506 cgroup: docs: memory.high doc fixups 2ab45f38d8 cgroup: docs: Mention unbounded protection for memory.{low,min} 19a43dc38a Consider smb3 as remote filesystem 5c0224c7bf Handle d_type == DT_UNKNOWN correctly 8282bc61df util-lib: Don't propagate EACCES from find_binary PATH lookup to caller 9d0ae987a6 network: drop noisy log message f67f0e4ec4 Updated log message when the timesync happens for the first time (#13624) e151bf4674 units: make systemd-binfmt.service easier to work with no autofs 2b8e574d82 Corect man page reference in systemd-nologin.conf comments a0577353f1 man: Add a missing space in machinectl(1) 693e983988 log: Add missing "%" in "%m" log format strings ea7151b8c4 pid1: do not warn if /run/systemd/relabel-extra.d/ doesn't exist b90549290e man: fix typo - Remove intltool BuildRequires, not needed since v237 - Use python3-base BuildRequires instead of full python3 ==== vim ==== Version update (8.1.2148 -> 8.1.2233) Subpackages: vim-data-common - Updated to version 8.1.2233, fixes the following problems - dropped python38-config.patch (upstream merged) - refreshed disable-unreliable-tests.patch and vim-8.0.1568-defaults.patch * No test for right click extending Visual area. * Crash when running out of memory very early. * No test for 'ttymouse' set from xterm version response. * State test is a bit flaky. * Combining text property and syntax highlight is wrong. (Nick Jensen) * Quickfix window height wrong when there is a tabline. (Daniel Hahler) * In a terminal window 'cursorlineopt' does not work properly. * First character after Tab is not highlighted. * Libvterm source files missing from distribution. * Terminal attributes missing in Terminal-normal mode. * Some mappings are listed twice. * Cannot build with +syntax but without +terminal. * Mapping test fails. * Popup resize test is flaky. (Christian Brabandt) * Cannot build with +spell but without +syntax. * Stuck when using "j" in a popupwin with popup_filter_menu if a line wraps. * Rubyeval() not tested as a method. * Mapping test fails on MS-Windows. * Heredoc assignment not skipped in if block. * Terminal flags are never reset. * Cannot build without the +termresponse feature. * Mouse support not always available. * Spell highlight is wrong at start of the line. * Searchit() has too many arguments. * Screen not recognized as supporting "sgr" mouse codes. * Meson files are not recognized. * Syntax attributes not combined with Visual highlighting. (Arseny Nasokin) * Dart files are not recognized. * Accessing uninitialized memory in test. * Pressing "q" at the more prompt doesn't stop Python output. (Daniel Hahler) * Error E303 is not useful when 'directory' is empty. * Highlighting wrong when item follows tab. * Test42 seen as binary by git diff. * Running a test is a bit verbose. * Option context is not copied when splitting a window. (Daniel Hahler) * Syntax test fails. * Cannot build without the +eval feature. * Error for bad regexp even though regexp is not used when writing a file. (Arseny Nasokin) * Build error for missing define. * Syntax highlighting wrong for tab. * Syntax test fails on Mac. * When using modifyOtherKeys CTRL-X mode may not work. * Cannot easily fill the info popup asynchronously. * Popup_setoptions(popup_getoptions()) does not work. * ModifyOtherKeys is not enabled by default. * Vim does not exit when closing a terminal window and it is the last window. * ExitPre autocommand may cause accessing freed memory. * Crash when using :center in autocommand. * Build failure when using normal features without GUI and EXITFREE defined. * Crash when memory allocation fails. * Cannot build with dynamically linked Python 3.8. * Running libvterm tests without the +terminal feature. * Crash on exit when closing terminals. (Corey Hickey) * Sign entry structure has confusing name. * No test for fixed issue #3893. * "gn" doesn't work quite right. (Jaehwang Jerry Jung) * Unix: Tabs in output might be expanded to spaces. * LF in escape codes may be expanded to CR-LF. * Using negative offset for popup_create() does not work. * Listener callback "added" argument is not the total. (Andy Massimino) * Cannot see the selection type in :reg output. (Ayberk Ayd?n) * Popup_textprop tests fail. * Too much is redrawn when 'cursorline' is set. * Unreachable code in adjusting text prop columns. * Text property in wrong place after :substitute. * Compiler warning for unused variable. * "gN" is off by one in Visual mode. * No autocommand for open window with terminal. * :cfile does not abort like other quickfix commands. * Cannot filter :disp output. * Accessing invalid memory. (Dominique Pelle) * Cannot see what buffer an ml_get error is for. * Cannot build Amiga version. * The "last used" info of a buffer is under used. * Cannot use system copy/paste in non-xterm terminals. * Layout wrong if 'lines' changes while cmdline window is open. * screenpos() returns wrong values when 'number' is set. (Ben Jackson) * Cannot color number column above/below cursor differently. * Not easy to move to the middle of a text line. * Cannot get the Vim command line arguments. ==== xen ==== - Add python38-build.patch fixing build with Python 3.8 (add - -embed to python-config call) ==== yast2 ==== Version update (4.2.29 -> 4.2.30) - fix showing release notes for online upgrade (bsc#1155134) - 4.2.30 ==== zlib ==== - Update the zlib-no-version-check.patch to be even more forgiving with the versions on the zlib to allow updates without rebuilds -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191104 released!
by Richard Brown 06 Nov '19

06 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: flannel gawk glib2-branding-openSUSE grub2 (2.02 -> 2.04) hwdata (0.326 -> 0.328) installation-images-MicroOS (14.442 -> 14.443) kail (0.11.0 -> 0.12.0) kernel-source (5.3.7 -> 5.3.8) metallb (0.8.1 -> 0.8.2) mozilla-nspr (4.21 -> 4.22) mozilla-nss (3.45 -> 3.46.1) python-Jinja2 (2.10.1 -> 2.10.3) python-PyJWT python-attrs (19.1.0 -> 19.3.0) python-base (2.7.16 -> 2.7.17) python-cffi (1.12.3 -> 1.13.0) python-chardet python-cryptography (2.7 -> 2.8) python-ecdsa (0.13.2 -> 0.13.3) python-jsonschema python-pyparsing python-requests python-urllib3 systemd vim (8.1.2148 -> 8.1.2233) xen yast2 (4.2.29 -> 4.2.30) zlib === Details === ==== flannel ==== - Use Tumbleweed Kubic flannel containers instead of devel:kubic containers. This fixes aarch64 and ppc64* (boo#1152185) ==== gawk ==== - Fix typo in Summary - Stop overriding %_libexecdir with %_libdir - Fix the backward compatibility of the inplace extension: * Add gawk-inplace-namespace-part1.patch * Add gawk-inplace-namespace-part2.patch * Add gawk-inplace-namespace-part3.patch - Run autoreconf as part of the build process ==== glib2-branding-openSUSE ==== - Add super+f1 key binding for help to match GNOME default. ==== grub2 ==== Version update (2.02 -> 2.04) Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-x86_64-efi - Disable btrfs zstd support for i386-pc to workaround core.img too large to be embedded in btrfs bootloader area or MBR gap (boo#1154809) * 0001-btrfs-disable-zstd-support-for-i386-pc.patch - Fix grub2.sleep to load old kernel after hibernation (boo#1154783) - Enable support for riscv64 - Backports from upstream: * risc-v-fix-computation-of-pc-relative-relocation-offset.patch * risc-v-add-clzdi2-symbol.patch * grub-install-define-default-platform-for-risc-v.patch - Version bump to 2.04 * removed - translations-20170427.tar.xz * grub2.spec - Make signed grub-tpm.efi specific to x86_64-efi build, the platform currently shipped with tpm module from upstream codebase - Add shim_lock to signed grub.efi in x86_64-efi build - x86_64: linuxefi now depends on linux, both will verify kernel via shim_lock - Remove translation tarball and po file hacks as it's been included in upstream tarball * rediff - grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch - grub2-commands-introduce-read_file-subcommand.patch - grub2-secureboot-add-linuxefi.patch - 0001-add-support-for-UEFI-network-protocols.patch - grub2-efi-HP-workaround.patch - grub2-secureboot-install-signed-grub.patch - grub2-linux.patch - use-grub2-as-a-package-name.patch - grub2-pass-corret-root-for-nfsroot.patch - grub2-secureboot-use-linuxefi-on-uefi.patch - grub2-secureboot-no-insmod-on-sb.patch - grub2-secureboot-provide-linuxefi-config.patch - grub2-secureboot-chainloader.patch - grub2-s390x-01-Changes-made-and-files-added-in-order-to-allow-s390x.patch - grub2-s390x-02-kexec-module-added-to-emu.patch - grub2-s390x-04-grub2-install.patch - grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch - grub2-efi-chainloader-root.patch - grub2-ppc64le-disable-video.patch - grub2-ppc64-cas-reboot-support.patch - grub2-Fix-incorrect-netmask-on-ppc64.patch - 0003-bootp-New-net_bootp6-command.patch - 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch - 0012-tpm-Build-tpm-as-module.patch - grub2-emu-4-all.patch - grub2-btrfs-09-get-default-subvolume.patch - grub2-ppc64le-memory-map.patch - grub2-ppc64-cas-fix-double-free.patch - 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch * drop upstream patches - grub2-fix-locale-en.mo.gz-not-found-error-message.patch - grub2-fix-build-with-flex-2.6.4.patch - grub2-accept-empty-module.patch - 0001-Fix-packed-not-aligned-error-on-GCC-8.patch - 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch - unix-exec-avoid-atexit-handlers-when-child-exits.patch - 0001-xfs-Accept-filesystem-with-sparse-inodes.patch - grub2-binutils2.31.patch - grub2-msdos-fix-overflow.patch - 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch - grub2-efi-Move-grub_reboot-into-kernel.patch - grub2-efi-Free-malloc-regions-on-exit.patch - grub2-move-initrd-upper.patch - 0002-Add-Virtual-LAN-support.patch - 0001-ofnet-Initialize-structs-in-bootpath-parser.patch - 0001-misc-fix-invalid-character-recongition-in-strto-l.patch - 0001-tpm-Core-TPM-support.patch - 0002-tpm-Measure-kernel-initrd.patch - 0003-tpm-Add-BIOS-boot-measurement.patch - 0004-tpm-Rework-linux-command.patch - 0005-tpm-Rework-linux16-command.patch - 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch - 0007-tpm-Measure-the-kernel-commandline.patch - 0008-tpm-Measure-commands.patch - 0009-tpm-Measure-multiboot-images-and-modules.patch - 0010-tpm-Fix-boot-when-there-s-no-TPM.patch - 0011-tpm-Fix-build-error.patch - 0013-tpm-i386-pc-diskboot-img.patch - grub2-freetype-pkgconfig.patch - 0001-cpio-Disable-gcc9-Waddress-of-packed-member.patch - 0002-jfs-Disable-gcc9-Waddress-of-packed-member.patch - 0003-hfs-Fix-gcc9-error-Waddress-of-packed-member.patch - 0004-hfsplus-Fix-gcc9-error-with-Waddress-of-packed-membe.patch - 0005-acpi-Fix-gcc9-error-Waddress-of-packed-member.patch - 0006-usbtest-Disable-gcc9-Waddress-of-packed-member.patch - 0007-chainloader-Fix-gcc9-error-Waddress-of-packed-member.patch - 0008-efi-Fix-gcc9-error-Waddress-of-packed-member.patch - Consistently find btrfs snapshots on s390x. (bsc#1136970) * grub2-s390x-04-grub2-install.patch ==== hwdata ==== Version update (0.326 -> 0.328) - Update to version 0.328: * Updated pci, usb and vendor ids. ==== installation-images-MicroOS ==== Version update (14.442 -> 14.443) - merge gh#openSUSE/installation-images#340 - fix initial sshd key generation - setup /etc/sysconfig/ssh in rescue system - 14.443 ==== kail ==== Version update (0.11.0 -> 0.12.0) - Update to version 0.12.0 - Handle the case when listing namespaces is forbidden (#42) - Update vendor.tar.gz ==== kernel-source ==== Version update (5.3.7 -> 5.3.8) - Refresh patches.suse/stacktrace-don-t-skip-first-entry-on-noncurrent-task.patch. v3 of the patch - commit ea4c828 - Linux 5.3.8 (bnc#1151927). - drm: Free the writeback_job when it with an empty fb (bnc#1151927). - drm: Clear the fence pointer when writeback job signaled (bnc#1151927). - clk: ti: dra7: Fix mcasp8 clock bits (bnc#1151927). - ARM: dts: Fix wrong clocks for dra7 mcasp (bnc#1151927). - nvme-pci: Fix a race in controller removal (bnc#1151927). - scsi: ufs: skip shutdown if hba is not powered (bnc#1151927). - scsi: megaraid: disable device when probe failed after enabled device (bnc#1151927). - scsi: qla2xxx: Silence fwdump template message (bnc#1151927). - scsi: qla2xxx: Fix unbound sleep in fcport delete path (bnc#1151927). - scsi: qla2xxx: Fix stale mem access on driver unload (bnc#1151927). - scsi: qla2xxx: Fix N2N link reset (bnc#1151927). - scsi: qla2xxx: Fix N2N link up fail (bnc#1151927). - ARM: dts: Fix gpio0 flags for am335x-icev2 (bnc#1151927). - ARM: OMAP2+: Fix missing reset done flag for am3 and am43 (bnc#1151927). - ARM: OMAP2+: Add missing LCDC midlemode for am335x (bnc#1151927). - ARM: OMAP2+: Fix warnings with broken omap2_set_init_voltage() (bnc#1151927). - nvme-tcp: fix wrong stop condition in io_work (bnc#1151927). - nvme-pci: Save PCI state before putting drive into deepest state (bnc#1151927). - nvme: fix an error code in nvme_init_subsystem() (bnc#1151927). - nvme-rdma: Fix max_hw_sectors calculation (bnc#1151927). - Added QUIRKs for ADATA XPG SX8200 Pro 512GB (bnc#1151927). - nvme: Add quirk for Kingston NVME SSD running FW E8FK11.T (bnc#1151927). - nvme: allow 64-bit results in passthru commands (bnc#1151927). - drm/komeda: prevent memory leak in komeda_wb_connector_add (bnc#1151927). - nvme-rdma: fix possible use-after-free in connect timeout (bnc#1151927). - blk-mq: honor IO scheduler for multiqueue devices (bnc#1151927). - ieee802154: ca8210: prevent memory leak (bnc#1151927). - ARM: dts: am4372: Set memory bandwidth limit for DISPC (bnc#1151927). - net: dsa: qca8k: Use up to 7 ports for all operations (bnc#1151927). - MIPS: dts: ar9331: fix interrupt-controller size (bnc#1151927). - xen/efi: Set nonblocking callbacks (bnc#1151927). - loop: change queue block size to match when using DIO (bnc#1151927). - nl80211: fix null pointer dereference (bnc#1151927). - mac80211: fix txq null pointer dereference (bnc#1151927). - netfilter: nft_connlimit: disable bh on garbage collection (bnc#1151927). - net: mscc: ocelot: add missing of_node_put after calling of_get_child_by_name (bnc#1151927). - net: dsa: rtl8366rb: add missing of_node_put after calling of_get_child_by_name (bnc#1151927). - net: stmmac: xgmac: Not all Unicast addresses may be available (bnc#1151927). - net: stmmac: dwmac4: Always update the MAC Hash Filter (bnc#1151927). - net: stmmac: Correctly take timestamp for PTPv2 (bnc#1151927). - net: stmmac: Do not stop PHY if WoL is enabled (bnc#1151927). - net: ag71xx: fix mdio subnode support (bnc#1151927). - RISC-V: Clear load reservations while restoring hart contexts (bnc#1151927). - riscv: Fix memblock reservation for device tree blob (bnc#1151927). - drm/amdgpu: fix multiple memory leaks in acp_hw_init (bnc#1151927). - drm/amd/display: memory leak (bnc#1151927). - mips: Loongson: Fix the link time qualifier of 'serial_exit()' (bnc#1151927). - net: hisilicon: Fix usage of uninitialized variable in function mdio_sc_cfg_reg_write() (bnc#1151927). - net: stmmac: Avoid deadlock on suspend/resume (bnc#1151927). - selftests: kvm: Fix libkvm build error (bnc#1151927). - lib: textsearch: fix escapes in example code (bnc#1151927). - s390/mm: fix -Wunused-but-set-variable warnings (bnc#1151927). - r8152: Set macpassthru in reset_resume callback (bnc#1151927). - net: phy: allow for reset line to be tied to a sleepy GPIO controller (bnc#1151927). - net: phy: fix write to mii-ctrl1000 register (bnc#1151927). - namespace: fix namespace.pl script to support relative paths (bnc#1151927). - Convert filldir[64]() from __put_user() to unsafe_put_user() (bnc#1151927). - elf: don't use MAP_FIXED_NOREPLACE for elf executable mappings (bnc#1151927). - Make filldir[64]() verify the directory entry filename is valid (bnc#1151927). - uaccess: implement a proper unsafe_copy_to_user() and switch filldir over to it (bnc#1151927). - filldir[64]: remove WARN_ON_ONCE() for bad directory entries (bnc#1151927). - net_sched: fix backward compatibility for TCA_KIND (bnc#1151927). - net_sched: fix backward compatibility for TCA_ACT_KIND (bnc#1151927). - libata/ahci: Fix PCS quirk application (bnc#1151927). - md/raid0: fix warning message for parameter default_layout (bnc#1151927). - Revert "drm/radeon: Fix EEH during kexec" (bnc#1151927). - ocfs2: fix panic due to ocfs2_wq is null (bnc#1151927). - nvme-pci: Set the prp2 correctly when using more than 4k page (bnc#1151927). - ipv4: fix race condition between route lookup and invalidation (bnc#1151927). - ipv4: Return -ENETUNREACH if we can't create route but saddr is valid (bnc#1151927). - net: avoid potential infinite loop in tc_ctl_action() (bnc#1151927). - net: bcmgenet: Fix RGMII_MODE_EN value for GENET v1/2/3 (bnc#1151927). - net: bcmgenet: Set phydev->dev_flags only for internal PHYs (bnc#1151927). - net: i82596: fix dma_alloc_attr for sni_82596 (bnc#1151927). - net/ibmvnic: Fix EOI when running in XIVE mode (bnc#1151927). - net: ipv6: fix listify ip6_rcv_finish in case of forwarding (bnc#1151927). - net: stmmac: disable/enable ptp_ref_clk in suspend/resume flow (bnc#1151927). - rxrpc: Fix possible NULL pointer access in ICMP handling (bnc#1151927). - sched: etf: Fix ordering of packets with same txtime (bnc#1151927). - sctp: change sctp_prot .no_autobind with true (bnc#1151927). - net: aquantia: temperature retrieval fix (bnc#1151927). - net: aquantia: when cleaning hw cache it should be toggled (bnc#1151927). - net: aquantia: do not pass lro session with invalid tcp checksum (bnc#1151927). - net: aquantia: correctly handle macvlan and multicast coexistence (bnc#1151927). - net: phy: micrel: Discern KSZ8051 and KSZ8795 PHYs (bnc#1151927). - net: phy: micrel: Update KSZ87xx PHY name (bnc#1151927). - net: avoid errors when trying to pop MLPS header on non-MPLS packets (bnc#1151927). - net/sched: fix corrupted L2 header with MPLS 'push' and 'pop' actions (bnc#1151927). - netdevsim: Fix error handling in nsim_fib_init and nsim_fib_exit (bnc#1151927). - net: ethernet: broadcom: have drivers select DIMLIB as needed (bnc#1151927). - net: phy: Fix "link partner" information disappear issue (bnc#1151927). - LSM: SafeSetID: Stop releasing uninitialized ruleset (bnc#1151927). - rxrpc: use rcu protection while reading sk->sk_user_data (bnc#1151927). - io_uring: fix bad inflight accounting for SETUP_IOPOLL|SETUP_SQTHREAD (bnc#1151927). - io_uring: Fix corrupted user_data (bnc#1151927). - USB: legousbtower: fix memleak on disconnect (bnc#1151927). - ALSA: hda/realtek - Add support for ALC711 (bnc#1151927). - ALSA: hda/realtek - Enable headset mic on Asus MJ401TA (bnc#1151927). - ALSA: usb-audio: Disable quirks for BOSS Katana amplifiers (bnc#1151927). - ALSA: hda - Force runtime PM on Nvidia HDMI codecs (bnc#1151927). - usb: udc: lpc32xx: fix bad bit shift operation (bnc#1151927). - USB: serial: ti_usb_3410_5052: fix port-close races (bnc#1151927). - USB: ldusb: fix memleak on disconnect (bnc#1151927). - USB: usblp: fix use-after-free on disconnect (bnc#1151927). - USB: ldusb: fix read info leaks (bnc#1151927). - binder: Don't modify VMA bounds in ->mmap handler (bnc#1151927). - MIPS: tlbex: Fix build_restore_pagemask KScratch restore (bnc#1151927). - staging: wlan-ng: fix exit return when sme->key_idx >= NUM_WEPKEYS (bnc#1151927). - scsi: zfcp: fix reaction on bit error threshold notification (bnc#1151927). - scsi: sd: Ignore a failure to sync cache due to lack of authorization (bnc#1151927). - scsi: core: save/restore command resid for error handling (bnc#1151927). - scsi: core: try to get module before removing device (bnc#1151927). - scsi: ch: Make it possible to open a ch device multiple times again (bnc#1151927). - Revert "Input: elantech - enable SMBus on new (2018+) systems" (bnc#1151927). - Input: da9063 - fix capability and drop KEY_SLEEP (bnc#1151927). - Input: synaptics-rmi4 - avoid processing unknown IRQs (bnc#1151927). - Input: st1232 - fix reporting multitouch coordinates (bnc#1151927). - ASoC: rsnd: Reinitialize bit clock inversion flag for every format setting (bnc#1151927). - ACPI: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() (bnc#1151927). - ACPI: NFIT: Fix unlock on error in scrub_show() (bnc#1151927). - iwlwifi: pcie: change qu with jf devices to use qu configuration (bnc#1151927). - mac80211: Reject malformed SSID elements (bnc#1151927). - drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50 (bnc#1151927). - drm/ttm: Restore ttm prefaulting (bnc#1151927). - drm/panfrost: Handle resetting on timeout better (bnc#1151927). - drm/amdgpu: Bail earlier when amdgpu.cik_/si_support is not set to 1 (bnc#1151927). - drm/amdgpu/sdma5: fix mask value of POLL_REGMEM packet for pipe sync (bnc#1151927). - drm/i915/userptr: Never allow userptr into the mappable GGTT (bnc#1151927). - drm/i915: Favor last VBT child device with conflicting AUX ch/DDC pin (bnc#1151927 bnc#1152971 fdo#112028). - drm/amdgpu/vce: fix allocation size in enc ring test (bnc#1151927). - drm/amdgpu/vcn: fix allocation size in enc ring test (bnc#1151927). - drm/amdgpu/uvd6: fix allocation size in enc ring test (v2) (bnc#1151927). - drm/amdgpu/uvd7: fix allocation size in enc ring test (v2) (bnc#1151927). - drm/amdgpu: user pages array memory leak fix (bnc#1151927). - drivers/base/memory.c: don't access uninitialized memmaps in soft_offline_page_store() (bnc#1151927). - fs/proc/page.c: don't access uninitialized memmaps in fs/proc/page.c (bnc#1151927). - io_uring: Fix broken links with offloading (bnc#1151927). - io_uring: Fix race for sqes with userspace (bnc#1151927). - io_uring: used cached copies of sq->dropped and cq->overflow (bnc#1151927). - mmc: mxs: fix flags passed to dmaengine_prep_slave_sg (bnc#1151927). - mmc: cqhci: Commit descriptors before setting the doorbell (bnc#1151927). - mmc: sdhci-omap: Fix Tuning procedure for temperatures < -20C (bnc#1151927). - mm/memory-failure.c: don't access uninitialized memmaps in memory_failure() (bnc#1151927). - mm/slub: fix a deadlock in show_slab_objects() (bnc#1151927). - mm/page_owner: don't access uninitialized memmaps when reading /proc/pagetypeinfo (bnc#1151927). - mm/memunmap: don't access uninitialized memmap in memunmap_pages() (bnc#1151927). - mm: memcg/slab: fix panic in __free_slab() caused by premature memcg pointer release (bnc#1151927). - mm, compaction: fix wrong pfn handling in __reset_isolation_pfn() (bnc#1151927). - mm: memcg: get number of pages on the LRU list in memcgroup base on lru_zone_size (bnc#1151927). - mm: memblock: do not enforce current limit for memblock_phys* family (bnc#1151927). - hugetlbfs: don't access uninitialized memmaps in pfn_range_valid_gigantic() (bnc#1151927). - mm/memory-failure: poison read receives SIGKILL instead of SIGBUS if mmaped more than once (bnc#1151927). - zram: fix race between backing_dev_show and backing_dev_store (bnc#1151927). - xtensa: drop EXPORT_SYMBOL for outs*/ins* (bnc#1151927). - xtensa: fix change_bit in exclusive access option (bnc#1151927). - s390/zcrypt: fix memleak at release (bnc#1151927). - s390/kaslr: add support for R_390_GLOB_DAT relocation type (bnc#1151927). - lib/vdso: Make clock_getres() POSIX compliant again (bnc#1151927). - parisc: Fix vmap memory leak in ioremap()/iounmap() (bnc#1151927). - EDAC/ghes: Fix Use after free in ghes_edac remove path (bnc#1151927). - arm64: KVM: Trap VM ops when ARM64_WORKAROUND_CAVIUM_TX2_219_TVM is set (bnc#1151927). - arm64: Avoid Cavium TX2 erratum 219 when switching TTBR (bnc#1151927). - arm64: Enable workaround for Cavium TX2 erratum 219 when running SMT (bnc#1151927). - arm64: Allow CAVIUM_TX2_ERRATUM_219 to be selected (bnc#1151927). - CIFS: avoid using MID 0xFFFF (bnc#1151927). - cifs: Fix missed free operations (bnc#1151927). - CIFS: Fix use after free of file info structures (bnc#1151927). - perf/aux: Fix AUX output stopping (bnc#1151927). - tracing: Fix race in perf_trace_buf initialization (bnc#1151927). - fs/dax: Fix pmd vs pte conflict detection (bnc#1151927). - dm cache: fix bugs when a GFP_NOWAIT allocation fails (bnc#1151927). - irqchip/sifive-plic: Switch to fasteoi flow (bnc#1151927). - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (bnc#1151927). - x86/hyperv: Make vapic support x2apic mode (bnc#1151927). - pinctrl: cherryview: restore Strago DMI workaround for all versions (bnc#1151927). - pinctrl: armada-37xx: fix control of pins 32 and up (bnc#1151927). - pinctrl: armada-37xx: swap polarity on LED group (bnc#1151927). - btrfs: block-group: Fix a memory leak due to missing btrfs_put_block_group() (bnc#1151927). - Btrfs: add missing extents release on file extent cluster relocation error (bnc#1151927). - btrfs: don't needlessly create extent-refs kernel thread (bnc#1151927). - Btrfs: fix qgroup double free after failure to reserve metadata for delalloc (bnc#1151927). - Btrfs: check for the full sync flag while holding the inode lock during fsync (bnc#1151927). - btrfs: tracepoints: Fix wrong parameter order for qgroup events (bnc#1151927). - btrfs: tracepoints: Fix bad entry members of qgroup events (bnc#1151927). - KVM: PPC: Book3S HV: XIVE: Ensure VP isn't already in use (bnc#1151927). - memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()' (bnc#1151927). - cpufreq: Avoid cpufreq_suspend() deadlock on system shutdown (bnc#1151927). - ceph: just skip unrecognized info in ceph_reply_info_extra (bnc#1151927). - xen/netback: fix error path of xenvif_connect_data() (bnc#1151927). - PCI: PM: Fix pci_power_up() (bnc#1151927). - opp: of: drop incorrect lockdep_assert_held() (bnc#1151927). - of: reserved_mem: add missing of_node_put() for proper ref-counting (bnc#1151927). - blk-rq-qos: fix first node deletion of rq_qos_del() (bnc#1151927). - RDMA/cxgb4: Do not dma memory off of the stack (bnc#1151927). - Delete patches.suse/Revert-drm-i915-bios-make-child-device-order-the-pri.patch. - Update config files. CAVIUM_TX2_ERRATUM_219=y (default) - commit f0ffcb7 - x86/boot/64: Make level2_kernel_pgt pages invalid outside kernel area (bnc#1153969). - x86/boot/64: Round memory hole size up to next PMD page (bnc#1153969). - commit 3501dc2 - drm/amdgpu: Add DC feature mask to disable fractional pwm (bsc#1154010). - commit 6ffba6e - stacktrace: don't skip first entry on noncurrent tasks (bnc#1154866). - commit 387f2bb - kernel-binary.spec.in: Fix build of non-modular kernels (boo#1154578). - commit 7f1e881 - ARM: 8904/1: skip nomap memblocks while finding the lowmem/highmem boundary (bsc#1122614). - commit 9f59038 - rtlwifi: Fix potential overflow on P2P code (bsc#1154372 CVE-2019-17666). - cfg80211: wext: avoid copying malformed SSIDs (bsc#1153158 CVE-2019-17133). - commit e229e3d - libertas: fix a potential NULL pointer dereference (CVE-2019-16232,bsc#1150465). - iwlwifi: pcie: fix rb_allocator workqueue allocation (CVE-2019-16234,bsc#1150452). - commit 23c6b73 - kernel-binary.spec.in: Obsolete kgraft packages only when not building them. - commit 25f7690 - kernel-subpackage-build: create zero size ghost for uncompressed vmlinux (bsc#1154354). It is not strictly necessary to uncompress it so maybe the ghost file can be 0 size in this case. - commit 4bf73c8 ==== metallb ==== Version update (0.8.1 -> 0.8.2) - Update to version 0.8.2 - Fix layer2 node selection when healthy and unhealthy replicas are colocated on a single node. (#474) - Drop support for helm chart installation - Refresh vendor.tar.gz ==== mozilla-nspr ==== Version update (4.21 -> 4.22) - update to version 4.22 * added support for the ARC architecture * removed support for the following platforms: OSF1/Tru64, DGUX, IRIX, Symbian, BeOS * correctness and build fixes ==== mozilla-nss ==== Version update (3.45 -> 3.46.1) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs - update to NSS 3.46.1 * required by Firefox 70.0 Notable changes in 3.46 * The following CA certificates were Removed: expired Class 2 Primary root certificate expired UTN-USERFirst-Client root certificate expired Deutsche Telekom Root CA 2 root certificate Swisscom Root CA 2 root certificate * Significant improvements to AES-GCM performance on ARM Many bugfixes Bug fixes in 3.46.1 * Soft token MAC verification not constant time (bmo#1582343) * Remove arbitrary HKDF output limit by allocating space as needed (bmo#1577953) - requires NSPR 4.22 ==== python-Jinja2 ==== Version update (2.10.1 -> 2.10.3) - Update to 2.10.3: * Fix Python 3.7 deprecation warnings. * Using range in the sandboxed environment uses xrange on Python 2 to avoid memory use. :issue:`933` * Use Python 3.7's better traceback support to avoid a core dump when using debug builds of Python 3.7. :issue:`1050` * Fix a typo in Babel entry point in setup.py that was preventing installation. - Remove merged python38.patch ==== python-PyJWT ==== - Fix build with ecdsa >= 0.13.3, #447 * 0001-Catch-BadSignatureError-raised-by-ecdsa-0.13.3.patch ==== python-attrs ==== Version update (19.1.0 -> 19.3.0) - update to 19.3.0 * Fixed auto_attribs usage when default values cannot be compared directly with ==, such as numpy arrays. - update to version 19.2.0: * Backward-incompatible Changes + Removed deprecated "Attribute" attribute "convert" per scheduled removal on 2019/1. This planned deprecation is tracked in issue `#307 <https://github.com/python-attrs/attrs/issues/307>`_. `#504 <https://github.com/python-attrs/attrs/issues/504>`_ + "__lt__", "__le__", "__gt__", and "__ge__" do not consider subclasses comparable anymore. This has been deprecated since 18.2.0 and was raising a "DeprecationWarning" for over a year. `#570 <https://github.com/python-attrs/attrs/issues/570>`_ * Deprecations + The "cmp" argument to "attr.s()" and "attr.ib()" is now deprecated. Please use "eq" to add equality methods ("__eq__" and "__ne__") and "order" to add ordering methods ("__lt__", "__le__", "__gt__", and "__ge__") instead ? just like with `dataclasses <https://docs.python.org/3/library/dataclasses.html>`_. Both are effectively "True" by default but it's enough to set "eq=False" to disable both at once. Passing "eq=False, order=True" explicitly will raise a "ValueError" though. Since this is arguably a deeper backward-compatibility break, it will have an extended deprecation period until 2021-06-01. After that day, the "cmp" argument will be removed. "attr.Attribute" also isn't orderable anymore. `#574 <https://github.com/python-attrs/attrs/issues/574>`_ * Changes + Updated "attr.validators.__all__" to include new validators added in `#425`_. `#517 <https://github.com/python-attrs/attrs/issues/517>`_ + Slotted classes now use a pure Python mechanism to rewrite the "__class__" cell when rebuilding the class, so "super()" works even on environments where "ctypes" is not installed. `#522 <https://github.com/python-attrs/attrs/issues/522>`_ + When collecting attributes using "@attr.s(auto_attribs=True)", attributes with a default of "None" are now deleted too. `#523 <https://github.com/python-attrs/attrs/issues/523>`_, `#556 <https://github.com/python-attrs/attrs/issues/556>`_ + Fixed "attr.validators.deep_iterable()" and "attr.validators.deep_mapping()" type stubs. `#533 <https://github.com/python-attrs/attrs/issues/533>`_ + "attr.validators.is_callable()" validator now raises an exception "attr.exceptions.NotCallableError", a subclass of "TypeError", informing the received value. `#536 <https://github.com/python-attrs/attrs/issues/536>`_ + "@attr.s(auto_exc=True)" now generates classes that are hashable by ID, as the documentation always claimed it would. `#543 <https://github.com/python-attrs/attrs/issues/543>`_, `#563 <https://github.com/python-attrs/attrs/issues/563>`_ + Added "attr.validators.matches_re()" that checks string attributes whether they match a regular expression. `#552 <https://github.com/python-attrs/attrs/issues/552>`_ + Keyword-only attributes ("kw_only=True") and attributes that are excluded from the "attrs"'s "__init__" ("init=False") now can appear before mandatory attributes. `#559 <https://github.com/python-attrs/attrs/issues/559>`_ + The fake filename for generated methods is now more stable. It won't change when you restart the process. `#560 <https://github.com/python-attrs/attrs/issues/560>`_ + The value passed to "@attr.ib(repr=?)" can now be either a boolean (as before) or a callable. That callable must return a string and is then used for formatting the attribute by the generated "__repr__()" method. `#568 <https://github.com/python-attrs/attrs/issues/568>`_ + Added "attr.__version_info__" that can be used to reliably check the version of "attrs" and write forward- and backward-compatible code. Please check out the `section on deprecated APIs <http://www.attrs.org/en/stable/api.html#deprecated-apis>`_ on how to use it. `#580 <https://github.com/python-attrs/attrs/issues/580>`_ ==== python-base ==== Version update (2.7.16 -> 2.7.17) Subpackages: libpython2_7-1_0 - Update to 2.7.17: - a bug fix release in the Python 2.7.x series. It is expected to be the penultimate release for Python 2.7. - Removed patches included upstream: - CVE-2018-20852-cookie-domain-check.patch - CVE-2019-16935-xmlrpc-doc-server_title.patch - CVE-2019-9636-netloc-no-decompose-characters.patch - CVE-2019-9947-no-ctrl-char-http.patch - CVE-2019-9948-avoid_local-file.patch ==== python-cffi ==== Version update (1.12.3 -> 1.13.0) - Update to 1.13.0: * No changelog provided upstream ==== python-chardet ==== - Replace %fdupes -s with plain %fdupes; hardlinks are better. ==== python-cryptography ==== Version update (2.7 -> 2.8) - update to 2.8 * Added support for Python 3.8. * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations. * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9. * We now ship manylinux2010 wheels in addition to our manylinux1 wheels. * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder. * cryptography no longer depends on asn1crypto. * FreshestCRL is now allowed as a CertificateRevocationList extension. ==== python-ecdsa ==== Version update (0.13.2 -> 0.13.3) - updated to 0.13.3 (bsc#1153165) + CVE-2019-14853 DOS atack during signature decoding + CVE-2019-14859 signature malleability caused by insufficient checks of DER encoding ==== python-jsonschema ==== - Replace %fdupes -s with plain %fdupes; hardlinks are better. ==== python-pyparsing ==== - Do not pull in setuptools dependency at all to avoid cycles ==== python-requests ==== - Add two patches only updating test logic to remove pytest 3 pin - merged_pr_5049.patch - pr_5251-pytest5.patch ==== python-urllib3 ==== - Require a new enough release of python-six. 1.25.6 needs at least 1.12.0 for ensure_text() and friends. ==== systemd ==== Subpackages: libsystemd0 libudev1 systemd-logger systemd-sysvinit udev - Drop 0001-compat-rules-escape-when-used-for-shell-expansion.patch It's part of the previous import. - Import commit b7467b7b553d6d0d6f92758d966b69f1a88b6b42 441f44f371 fileio: introduce read_full_virtual_file() for reading virtual files in sysfs, procfs (bsc#1133495) 8a1bb5c66b swap: do not make swap units wanted by its device unit anymore - Import commit 5df9000899ef7d45ddbcacd0fdf73afa07a40f6b f0ed7237e4 udev/cdrom_id: Do not open CD-rom in exclusive mode. (bsc#1154256) b37054aa5a compat-rules: escape '$' when used for shell expansion Changes from the v243-stable: ef677436aa test: Pass personality test even when i686 userland runs on x86_64 kernel 3f6398c450 docs: fix inadvertent change in uid range 25bb377a73 cgroup: fix typo in BPF firewall support warning message 6d97aca0d5 fix build with compilers with default stack-protector enabled fbad077cec nspawn: surrender controlling terminal to PID2 when using the PID1 stub 0553c3c668 pid1: fix DefaultTasksMax initialization f406a691a7 src/core/automount: use DirectoryMode when calling mkdir -p 20438f96c3 udevadm trigger: do not propagate EACCES and ENODEV 6480630bc3 hwdb: Correct WWWW Pattern In Documentation Comment 9d8e889810 nspawn: consistenly fail if parsing the environment fails 40e169b304 nspawn: default to unified hierarchy if --as-pid2 is used b5df1037a0 cgroup: Mark memory protections as explicitly set in transient units f14e3e02cc cgroup: Respect DefaultMemoryMin when setting memory.min ea248e53bf cgroup: Check ancestor memory min for unified memory config de1d25a506 cgroup: docs: memory.high doc fixups 2ab45f38d8 cgroup: docs: Mention unbounded protection for memory.{low,min} 19a43dc38a Consider smb3 as remote filesystem 5c0224c7bf Handle d_type == DT_UNKNOWN correctly 8282bc61df util-lib: Don't propagate EACCES from find_binary PATH lookup to caller 9d0ae987a6 network: drop noisy log message f67f0e4ec4 Updated log message when the timesync happens for the first time (#13624) e151bf4674 units: make systemd-binfmt.service easier to work with no autofs 2b8e574d82 Corect man page reference in systemd-nologin.conf comments a0577353f1 man: Add a missing space in machinectl(1) 693e983988 log: Add missing "%" in "%m" log format strings ea7151b8c4 pid1: do not warn if /run/systemd/relabel-extra.d/ doesn't exist b90549290e man: fix typo - Remove intltool BuildRequires, not needed since v237 - Use python3-base BuildRequires instead of full python3 ==== vim ==== Version update (8.1.2148 -> 8.1.2233) Subpackages: vim-data-common - Updated to version 8.1.2233, fixes the following problems - dropped python38-config.patch (upstream merged) - refreshed disable-unreliable-tests.patch and vim-8.0.1568-defaults.patch * No test for right click extending Visual area. * Crash when running out of memory very early. * No test for 'ttymouse' set from xterm version response. * State test is a bit flaky. * Combining text property and syntax highlight is wrong. (Nick Jensen) * Quickfix window height wrong when there is a tabline. (Daniel Hahler) * In a terminal window 'cursorlineopt' does not work properly. * First character after Tab is not highlighted. * Libvterm source files missing from distribution. * Terminal attributes missing in Terminal-normal mode. * Some mappings are listed twice. * Cannot build with +syntax but without +terminal. * Mapping test fails. * Popup resize test is flaky. (Christian Brabandt) * Cannot build with +spell but without +syntax. * Stuck when using "j" in a popupwin with popup_filter_menu if a line wraps. * Rubyeval() not tested as a method. * Mapping test fails on MS-Windows. * Heredoc assignment not skipped in if block. * Terminal flags are never reset. * Cannot build without the +termresponse feature. * Mouse support not always available. * Spell highlight is wrong at start of the line. * Searchit() has too many arguments. * Screen not recognized as supporting "sgr" mouse codes. * Meson files are not recognized. * Syntax attributes not combined with Visual highlighting. (Arseny Nasokin) * Dart files are not recognized. * Accessing uninitialized memory in test. * Pressing "q" at the more prompt doesn't stop Python output. (Daniel Hahler) * Error E303 is not useful when 'directory' is empty. * Highlighting wrong when item follows tab. * Test42 seen as binary by git diff. * Running a test is a bit verbose. * Option context is not copied when splitting a window. (Daniel Hahler) * Syntax test fails. * Cannot build without the +eval feature. * Error for bad regexp even though regexp is not used when writing a file. (Arseny Nasokin) * Build error for missing define. * Syntax highlighting wrong for tab. * Syntax test fails on Mac. * When using modifyOtherKeys CTRL-X mode may not work. * Cannot easily fill the info popup asynchronously. * Popup_setoptions(popup_getoptions()) does not work. * ModifyOtherKeys is not enabled by default. * Vim does not exit when closing a terminal window and it is the last window. * ExitPre autocommand may cause accessing freed memory. * Crash when using :center in autocommand. * Build failure when using normal features without GUI and EXITFREE defined. * Crash when memory allocation fails. * Cannot build with dynamically linked Python 3.8. * Running libvterm tests without the +terminal feature. * Crash on exit when closing terminals. (Corey Hickey) * Sign entry structure has confusing name. * No test for fixed issue #3893. * "gn" doesn't work quite right. (Jaehwang Jerry Jung) * Unix: Tabs in output might be expanded to spaces. * LF in escape codes may be expanded to CR-LF. * Using negative offset for popup_create() does not work. * Listener callback "added" argument is not the total. (Andy Massimino) * Cannot see the selection type in :reg output. (Ayberk Ayd?n) * Popup_textprop tests fail. * Too much is redrawn when 'cursorline' is set. * Unreachable code in adjusting text prop columns. * Text property in wrong place after :substitute. * Compiler warning for unused variable. * "gN" is off by one in Visual mode. * No autocommand for open window with terminal. * :cfile does not abort like other quickfix commands. * Cannot filter :disp output. * Accessing invalid memory. (Dominique Pelle) * Cannot see what buffer an ml_get error is for. * Cannot build Amiga version. * The "last used" info of a buffer is under used. * Cannot use system copy/paste in non-xterm terminals. * Layout wrong if 'lines' changes while cmdline window is open. * screenpos() returns wrong values when 'number' is set. (Ben Jackson) * Cannot color number column above/below cursor differently. * Not easy to move to the middle of a text line. * Cannot get the Vim command line arguments. ==== xen ==== - Add python38-build.patch fixing build with Python 3.8 (add - -embed to python-config call) ==== yast2 ==== Version update (4.2.29 -> 4.2.30) - fix showing release notes for online upgrade (bsc#1155134) - 4.2.30 ==== zlib ==== - Update the zlib-no-version-check.patch to be even more forgiving with the versions on the zlib to allow updates without rebuilds -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191101 released!
by Richard Brown 03 Nov '19

03 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: libeconf (0.3.2+git20190926.fea4a03 -> 0.3.3+git20191028.3ac14ce) util-linux util-linux-systemd === Details === ==== libeconf ==== Version update (0.3.2+git20190926.fea4a03 -> 0.3.3+git20191028.3ac14ce) - Update to version 0.3.3+git20191028.3ac14ce: * Release version 0.3.3 * Reset *key_file to NULL after free ==== util-linux ==== Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 - libeconf.patch: fix a long int error on 32bit - libeconf.patch: Add support for libeconf - Move /etc/pam.d/* to /usr/etc/pam.d - Remove migration code for su from coreutils to util-linux, not needed anymore ==== util-linux-systemd ==== - libeconf.patch: fix a long int error on 32bit - libeconf.patch: Add support for libeconf - Move /etc/pam.d/* to /usr/etc/pam.d - Remove migration code for su from coreutils to util-linux, not needed anymore -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191101 released!
by Richard Brown 03 Nov '19

03 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: libeconf (0.3.2+git20190926.fea4a03 -> 0.3.3+git20191028.3ac14ce) util-linux util-linux-systemd === Details === ==== libeconf ==== Version update (0.3.2+git20190926.fea4a03 -> 0.3.3+git20191028.3ac14ce) - Update to version 0.3.3+git20191028.3ac14ce: * Release version 0.3.3 * Reset *key_file to NULL after free ==== util-linux ==== Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 - libeconf.patch: fix a long int error on 32bit - libeconf.patch: Add support for libeconf - Move /etc/pam.d/* to /usr/etc/pam.d - Remove migration code for su from coreutils to util-linux, not needed anymore ==== util-linux-systemd ==== - libeconf.patch: fix a long int error on 32bit - libeconf.patch: Add support for libeconf - Move /etc/pam.d/* to /usr/etc/pam.d - Remove migration code for su from coreutils to util-linux, not needed anymore -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20191030 released!
by Richard Brown 01 Nov '19

01 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: branding-openSUSE glib2 (2.62.1 -> 2.62.2) glib2-branding-openSUSE sudo (1.8.27 -> 1.8.28p1) === Details === ==== branding-openSUSE ==== - Don't set the theme on install/uninstall - Remove obsolete Groups tag (fate#326485) ==== glib2 ==== Version update (2.62.1 -> 2.62.2) Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 - Update to version 2.62.2: + Bugs fixed: - glgo#GNOME/GLib#1896: Use after free when calling g_dbus_connection_flush_sync() in a dedicated thread. - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152 ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to glib-2-62. - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris fixes to glib-2-62. ==== glib2-branding-openSUSE ==== - Fix keyassignment for help: the schema was changed to array of strings, as multiple keys can now be bound. ==== sudo ==== Version update (1.8.27 -> 1.8.28p1) - Update to 1.8,28p1 * The fix for Bug #869 caused "sudo -v" to prompt for a password when "verifypw" is set to "all" (the default) and all of the user's sudoers entries are marked with NOPASSWD. Bug #901. - Update to 1.8.28 * Fixed CVE-2019-14287 (bsc#1153674), a bug where a sudo user may be able to run a command as root when the Runas specification explicitly disallows root access as long as the ALL keyword is listed first. * Sudo will now only set PAM_TTY to the empty string when no terminal is present on Solaris and Linux. This workaround is only needed on those systems which may have PAM modules that misbehave when PAM_TTY is not set. * The mailerflags sudoers option now has a default value even if sendmail support was disabled at configure time. Fixes a crash when the mailerpath sudoers option is set but mailerflags is not. Bug #878. * Sudo will now filter out last login messages on HP-UX unless it a shell is being run via "sudo -s" or "sudo -i". Otherwise, when trusted mode is enabled, these messages will be displayed for each command. * Sudo has a new -B command line option that will ring the terminal bell when prompting for a password. * Sudo no longer refuses to prompt for a password when it cannot determine the user's terminal as long as it can open /dev/tty. This allows sudo to function on systems where /proc is unavailable, such as when running in a chroot environment. * The "env_editor" sudoers flag is now on by default. This makes source builds more consistent with the packages generated by sudo's mkpkg script. * Fixed a bad interaction with configure's --prefix and - -disable-shared options. Bug #886. * More verbose error message when a password is required and no terminal is present. Bug #828. * Command tags, such as NOPASSWD, are honored when a user tries to run a command that is allowed by sudoers but which does not actually exist on the file system. Bug #888. * I/O log timing files now store signal suspend and resume information in the form of a signal name instead of a number. * Fixed a bug introduced in 1.8.24 that prevented sudo from honoring the value of "ipa_hostname" from sssd.conf, if specified, when matching the host name. * Fixed a bug introduced in 1.8.21 that prevented the core dump resource limit set in the pam_limits module from taking effect. Bug #894. * Fixed parsing of double-quoted Defaults group and netgroup bindings. * The user ID is now used when matching sudoUser attributes in LDAP. Previously, the user name, group name and group IDs were used when matching but not the user ID. * Sudo now writes PAM messages to the user's terminal, if available, instead of the standard output or standard error. This prevents PAM output from being intermixed with that of the command when output is sent to a file or pipe. Bug #895. * Sudoedit now honors the umask and umask_override settings in sudoers. Previously, the user's umask was used as-is. * Fixed a bug where the terminal's file context was not restored when using SELinux RBAC. Bug #898. - refresh sudo-sudoers.patch -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20191030 released!
by Richard Brown 01 Nov '19

01 Nov '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: branding-openSUSE glib2 (2.62.1 -> 2.62.2) glib2-branding-openSUSE sudo (1.8.27 -> 1.8.28p1) === Details === ==== branding-openSUSE ==== Subpackages: grub2-branding-openSUSE - Don't set the theme on install/uninstall - Remove obsolete Groups tag (fate#326485) ==== glib2 ==== Version update (2.62.1 -> 2.62.2) Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 - Update to version 2.62.2: + Bugs fixed: - glgo#GNOME/GLib#1896: Use after free when calling g_dbus_connection_flush_sync() in a dedicated thread. - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152 ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to glib-2-62. - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris fixes to glib-2-62. ==== glib2-branding-openSUSE ==== - Fix keyassignment for help: the schema was changed to array of strings, as multiple keys can now be bound. ==== sudo ==== Version update (1.8.27 -> 1.8.28p1) - Update to 1.8,28p1 * The fix for Bug #869 caused "sudo -v" to prompt for a password when "verifypw" is set to "all" (the default) and all of the user's sudoers entries are marked with NOPASSWD. Bug #901. - Update to 1.8.28 * Fixed CVE-2019-14287 (bsc#1153674), a bug where a sudo user may be able to run a command as root when the Runas specification explicitly disallows root access as long as the ALL keyword is listed first. * Sudo will now only set PAM_TTY to the empty string when no terminal is present on Solaris and Linux. This workaround is only needed on those systems which may have PAM modules that misbehave when PAM_TTY is not set. * The mailerflags sudoers option now has a default value even if sendmail support was disabled at configure time. Fixes a crash when the mailerpath sudoers option is set but mailerflags is not. Bug #878. * Sudo will now filter out last login messages on HP-UX unless it a shell is being run via "sudo -s" or "sudo -i". Otherwise, when trusted mode is enabled, these messages will be displayed for each command. * Sudo has a new -B command line option that will ring the terminal bell when prompting for a password. * Sudo no longer refuses to prompt for a password when it cannot determine the user's terminal as long as it can open /dev/tty. This allows sudo to function on systems where /proc is unavailable, such as when running in a chroot environment. * The "env_editor" sudoers flag is now on by default. This makes source builds more consistent with the packages generated by sudo's mkpkg script. * Fixed a bad interaction with configure's --prefix and - -disable-shared options. Bug #886. * More verbose error message when a password is required and no terminal is present. Bug #828. * Command tags, such as NOPASSWD, are honored when a user tries to run a command that is allowed by sudoers but which does not actually exist on the file system. Bug #888. * I/O log timing files now store signal suspend and resume information in the form of a signal name instead of a number. * Fixed a bug introduced in 1.8.24 that prevented sudo from honoring the value of "ipa_hostname" from sssd.conf, if specified, when matching the host name. * Fixed a bug introduced in 1.8.21 that prevented the core dump resource limit set in the pam_limits module from taking effect. Bug #894. * Fixed parsing of double-quoted Defaults group and netgroup bindings. * The user ID is now used when matching sudoUser attributes in LDAP. Previously, the user name, group name and group IDs were used when matching but not the user ID. * Sudo now writes PAM messages to the user's terminal, if available, instead of the standard output or standard error. This prevents PAM output from being intermixed with that of the command when output is sent to a file or pipe. Bug #895. * Sudoedit now honors the umask and umask_override settings in sudoers. Previously, the user's umask was used as-is. * Fixed a bug where the terminal's file context was not restored when using SELinux RBAC. Bug #898. - refresh sudo-sudoers.patch -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0