July 2019 - openSUSE Kubic - openSUSE Mailing Lists

[opensuse-kubic] New MicroOS snapshot 20190730 released!
by Richard Brown 31 Jul '19

31 Jul '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bind dhcp kernel-source (5.2.2 -> 5.2.3) libpciaccess (0.15 -> 0.16) libsolv ncurses openssh python-base python-certifi (2019.3.9 -> 2019.6.16) python-networkx (2.2 -> 2.3) python-oauthlib (3.0.1 -> 3.0.2) python-requests python-six python-urllib3 ucode-intel (20190514 -> 20190618) vim (8.1.1694 -> 8.1.1741) zstd (1.4.0 -> 1.4.1) === Details === ==== bind ==== Subpackages: bind-utils libbind9-160 libdns169 libirs160 libisc166 libisccc160 libisccfg160 liblwres160 python3-bind - removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been replaced by firewalld, see [1]. [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html ==== dhcp ==== Subpackages: dhcp-client - Remove SuSEfirewall2 services since SuSEfirewall2 has been replaced by firewalld (which already provides a service for dhcp). ==== kernel-source ==== Version update (5.2.2 -> 5.2.3) Subpackages: kernel-debug kernel-default - Linux 5.2.3 (bnc#1012628). - dm bufio: fix deadlock with loop device (bnc#1012628). - dm thin metadata: check if in fail_io mode when setting needs_check (bnc#1012628). - phy: qcom-qmp: Correct READY_STATUS poll break condition (bnc#1012628). - pstore: Fix double-free in pstore_mkfile() failure path (bnc#1012628). - dt-bindings: allow up to four clocks for orion-mdio (bnc#1012628). - net: mvmdio: allow up to four clocks to be specified for orion-mdio (bnc#1012628). - blkcg: update blkcg_print_stat() to handle larger outputs (bnc#1012628). - blk-iolatency: clear use_delay when io.latency is set to zero (bnc#1012628). - clk: imx: imx8mm: correct audio_pll2_clk to audio_pll2_out (bnc#1012628). - blk-throttle: fix zero wait time for iops throttled group (bnc#1012628). - usb: Handle USB3 remote wakeup for LPM enabled devices correctly (bnc#1012628). - dax: Fix missed wakeup with PMD faults (bnc#1012628). - Bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug (bnc#1012628). - intel_th: msu: Fix single mode with disabled IOMMU (bnc#1012628). - intel_th: msu: Remove set but not used variable 'last' (bnc#1012628). - mtd: spinand: read returns badly if the last page has bitflips (bnc#1012628). - mtd: rawnand: mtk: Correct low level time calculation of r/w cycle (bnc#1012628). - eCryptfs: fix a couple type promotion bugs (bnc#1012628). - mmc: sdhci-msm: fix mutex while in spinlock (bnc#1012628). - powerpc/pseries: Fix oops in hotplug memory notifier (bnc#1012628). - powerpc/pseries: Fix xive=off command line (bnc#1012628). - powerpc/powernv: Fix stale iommu table base after VFIO (bnc#1012628). - powerpc/powernv/idle: Fix restore of SPRN_LDBAR for POWER9 stop state (bnc#1012628). - powerpc/powernv/npu: Fix reference leak (bnc#1012628). - powerpc/watchpoint: Restore NV GPRs while returning from exception (bnc#1012628). - powerpc/mm/32s: fix condition that is always true (bnc#1012628). - powerpc/32s: fix suspend/resume when IBATs 4-7 are used (bnc#1012628). - parisc: Fix kernel panic due invalid values in IAOQ0 or IAOQ1 (bnc#1012628). - parisc: Avoid kernel panic triggered by invalid kprobe (bnc#1012628). - parisc: Ensure userspace privilege for ptraced processes in regset functions (bnc#1012628). - gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM (bnc#1012628). - resource: fix locking in find_next_iomem_res() (bnc#1012628). - include/asm-generic/bug.h: fix "cut here" for WARN_ON for __WARN_TAINT architectures (bnc#1012628). - coda: pass the host file in vma->vm_file on mmap (bnc#1012628). - mm/z3fold.c: lock z3fold page before __SetPageMovable() (bnc#1012628). - mm/memcontrol: fix wrong statistics in memory.stat (bnc#1012628). - libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields (bnc#1012628). - mm/nvdimm: add is_ioremap_addr and use that to check ioremap address (bnc#1012628). - mm: vmscan: scan anonymous pages on file refaults (bnc#1012628). - HID: wacom: correct touch resolution x/y typo (bnc#1012628). - HID: wacom: generic: Correct pad syncing (bnc#1012628). - HID: wacom: generic: only switch the mode on devices with LEDs (bnc#1012628). - IB/mlx5: Report correctly tag matching rendezvous capability (bnc#1012628). - Btrfs: add missing inode version, ctime and mtime updates when punching hole (bnc#1012628). - Btrfs: fix fsync not persisting dentry deletions due to inode evictions (bnc#1012628). - Btrfs: fix data loss after inode eviction, renaming it, and fsync it (bnc#1012628). - btrfs: correctly validate compression type (bnc#1012628). - PCI: qcom: Ensure that PERST is asserted for at least 100 ms (bnc#1012628). - PCI: Do not poll for PME if the device is in D3cold (bnc#1012628). - PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (bnc#1012628). - intel_th: pci: Add Ice Lake NNPI support (bnc#1012628). - RDMA/odp: Fix missed unlock in non-blocking invalidate_start (bnc#1012628). - RDMA/srp: Accept again source addresses that do not have a port number (bnc#1012628). - block: Fix potential overflow in blk_report_zones() (bnc#1012628). - block: Allow mapping of vmalloc-ed buffers (bnc#1012628). - drm/edid: parse CEA blocks embedded in DisplayID (bnc#1012628). - x86/stacktrace: Prevent infinite loop in arch_stack_walk_user() (bnc#1012628). - perf/x86/amd/uncore: Set the thread mask for F17h L3 PMCs (bnc#1012628). - perf/x86/amd/uncore: Do not set 'ThreadMask' and 'SliceMask' for non-L3 PMCs (bnc#1012628). - perf/x86/intel: Fix spurious NMI on fixed counter (bnc#1012628). - x86/boot: Fix memory leak in default_get_smp_config() (bnc#1012628). - x86/hyper-v: Zero out the VP ASSIST PAGE on allocation (bnc#1012628). - rt2x00usb: fix rx queue hang (bnc#1012628). - 9p/virtio: Add cleanup path in p9_virtio_init (bnc#1012628). - 9p/xen: Add cleanup path in p9_trans_xen_init (bnc#1012628). - xen/events: fix binding user event channels to cpus (bnc#1012628). - dm zoned: fix zone state management race (bnc#1012628). - padata: use smp_mb in padata_reorder to avoid orphaned padata jobs (bnc#1012628). - drm/nouveau/i2c: Enable i2c pads & busses during preinit (bnc#1012628). - ARM: dts: gemini: Set DIR-685 SPI CS as active low (bnc#1012628). - i3c: fix i2c and i3c scl rate by bus mode (bnc#1012628). - fs/proc/proc_sysctl.c: fix the default values of i_uid/i_gid on /proc/sys inodes (bnc#1012628). - signal: Correct namespace fixups of si_pid and si_uid (bnc#1012628). - signal/usb: Replace kill_pid_info_as_cred with kill_pid_usb_asyncio (bnc#1012628). - intel_th: msu: Fix unused variable warning on arm64 platform (bnc#1012628). - arm64: Fix incorrect irqflag restore for priority masking (bnc#1012628). - arm64: irqflags: Add condition flags to inline asm clobber list (bnc#1012628). - arm64: tegra: Fix AGIC register range (bnc#1012628). - KVM: x86/vPMU: refine kvm_pmu err msg when event creation failed (bnc#1012628). - KVM: PPC: Book3S HV: Fix CR0 setting in TM emulation (bnc#1012628). - KVM: PPC: Book3S HV: Clear pending decrementer exceptions on nested guest entry (bnc#1012628). - KVM: PPC: Book3S HV: Signed extend decrementer value if not using large decrementer (bnc#1012628). - KVM: Properly check if "page" is valid in kvm_vcpu_unmap (bnc#1012628). - KVM: VMX: check CPUID before allowing read/write of IA32_XSS (bnc#1012628). - KVM: VMX: Fix handling of #MC that occurs during VM-Entry (bnc#1012628). - KVM: nVMX: Always sync GUEST_BNDCFGS when it comes from vmcs01 (bnc#1012628). - KVM: VMX: Always signal #GP on WRMSR to MSR_IA32_CR_PAT with bad value (bnc#1012628). - KVM: nVMX: Don't dump VMCS if virtual APIC page can't be mapped (bnc#1012628). - media: videobuf2-dma-sg: Prevent size from overflowing (bnc#1012628). - media: videobuf2-core: Prevent size alignment wrapping buffer size to 0 (bnc#1012628). - media: coda: Remove unbalanced and unneeded mutex unlock (bnc#1012628). - media: v4l2: Test type instead of cfg->type in v4l2_ctrl_new_custom() (bnc#1012628). - ceph: use ceph_evict_inode to cleanup inode's resource (bnc#1012628). - ceph: fix end offset in truncate_inode_pages_range call (bnc#1012628). - ALSA: hda/hdmi - Fix i915 reverse port/pin mapping (bnc#1012628). - ALSA: hda/hdmi - Remove duplicated define (bnc#1012628). - ALSA: hda/realtek: apply ALC891 headset fixup to one Dell machine (bnc#1012628). - ALSA: hda/realtek - Fixed Headphone Mic can't record on Dell platform (bnc#1012628). - ALSA: hda - Don't resume forcibly i915 HDMI/DP codec (bnc#1012628). - ALSA: seq: Break too long mutex context in the write loop (bnc#1012628). - kconfig: fix missing choice values in auto.conf (bnc#1012628). - raid5-cache: Need to do start() part job after adding journal device (bnc#1012628). - ASoC: core: Adapt for debugfs API change (bnc#1012628). - ASoC: dapm: Adapt for debugfs API change (bnc#1012628). - lib/scatterlist: Fix mapping iterator when sg->offset is greater than PAGE_SIZE (bnc#1012628). - SUNRPC: Ensure the bvecs are reset when we re-encode the RPC request (bnc#1012628). - pnfs: Fix a problem where we gratuitously start doing I/O through the MDS (bnc#1012628). - pnfs/flexfiles: Fix PTR_ERR() dereferences in ff_layout_track_ds_error (bnc#1012628). - Revert "NFS: readdirplus optimization by cache mechanism" (memleak) (bnc#1012628). - NFSv4: Handle the special Linux file open access mode (bnc#1012628). - tracing: Fix user stack trace "??" output (bnc#1012628). - arm64: Fix interrupt tracing in the presence of NMIs (bnc#1012628). - opp: Don't use IS_ERR on invalid supplies (bnc#1012628). - iwlwifi: mvm: clear rfkill_safe_init_done when we start the firmware (bnc#1012628). - iwlwifi: mvm: delay GTK setting in FW in AP mode (bnc#1012628). - iwlwifi: fix RF-Kill interrupt while FW load for gen2 devices (bnc#1012628). - iwlwifi: don't WARN when calling iwl_get_shared_mem_conf with RF-Kill (bnc#1012628). - iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X (bnc#1012628). - iwlwifi: pcie: don't service an interrupt that was masked (bnc#1012628). - iwlwifi: add support for hr1 RF ID (bnc#1012628). - arm64: tegra: Fix Jetson Nano GPU regulator (bnc#1012628). - arm64: tegra: Update Jetson TX1 GPU regulator timings (bnc#1012628). - regulator: s2mps11: Fix buck7 and buck8 wrong voltages (bnc#1012628). - regulator: s2mps11: Fix ERR_PTR dereference on GPIO lookup failure (bnc#1012628). - Input: alps - fix a mismatch between a condition check and its comment (bnc#1012628). - Input: synaptics - whitelist Lenovo T580 SMBus intertouch (bnc#1012628). - Input: alps - don't handle ALPS cs19 trackpoint-only device (bnc#1012628). - Input: gtco - bounds check collection indent level (bnc#1012628). - bcache: destroy dc->writeback_write_wq if failed to create dc->writeback_thread (bnc#1012628). - bcache: fix mistaken sysfs entry for io_error counter (bnc#1012628). - bcache: ignore read-ahead request failure on backing device (bnc#1012628). - bcache: Revert "bcache: free heap cache_set->flush_btree in bch_journal_free" (bnc#1012628). - bcache: Revert "bcache: fix high CPU occupancy during journal" (bnc#1012628). - Revert "bcache: set CACHE_SET_IO_DISABLE in bch_cached_dev_error()" (bnc#1012628). - CIFS: fix deadlock in cached root handling (bnc#1012628). - cifs: flush before set-info if we have writeable handles (bnc#1012628). - cifs: Properly handle auto disabling of serverino option (bnc#1012628). - cifs: fix crash in smb2_compound_op()/smb2_set_next_command() (bnc#1012628). - cifs: always add credits back for unsolicited PDUs (bnc#1012628). - crypto: crypto4xx - fix a potential double free in ppc4xx_trng_probe (bnc#1012628). - crypto: ccp/gcm - use const time tag comparison (bnc#1012628). - crypto: ccp - memset structure fields to zero before reuse (bnc#1012628). - crypto: crypto4xx - block ciphers should only accept complete blocks (bnc#1012628). - crypto: crypto4xx - fix blocksize for cfb and ofb (bnc#1012628). - crypto: crypto4xx - fix AES CTR blocksize value (bnc#1012628). - crypto: chacha20poly1305 - fix atomic sleep when using async algorithm (bnc#1012628). - crypto: arm64/sha2-ce - correct digest for empty data in finup (bnc#1012628). - crypto: arm64/sha1-ce - correct digest for empty data in finup (bnc#1012628). - crypto: ccp - Validate the the error value used to index error messages (bnc#1012628). - crypto: caam - limit output IV to CBC to work around CTR mode DMA issue (bnc#1012628). - crypto: ghash - fix unaligned memory access in ghash_setkey() (bnc#1012628). - scsi: mac_scsi: Fix pseudo DMA implementation, take 2 (bnc#1012628). - scsi: mac_scsi: Increase PIO/PDMA transfer length threshold (bnc#1012628). - scsi: megaraid_sas: Fix calculation of target ID (bnc#1012628). - scsi: zfcp: fix request object use-after-free in send path causing wrong traces (bnc#1012628). - scsi: zfcp: fix request object use-after-free in send path causing seqno errors (bnc#1012628). - scsi: sd_zbc: Fix compilation warning (bnc#1012628). - scsi: core: Fix race on creating sense cache (bnc#1012628). - Revert "scsi: ncr5380: Increase register polling limit" (bnc#1012628). - scsi: NCR5380: Handle PDMA failure reliably (bnc#1012628). - scsi: NCR5380: Always re-enable reselection interrupt (bnc#1012628). - xen: let alloc_xenballooned_pages() fail if not enough memory free (bnc#1012628). - floppy: fix out-of-bounds read in copy_buffer (bnc#1012628). - floppy: fix invalid pointer dereference in drive_name (bnc#1012628). - floppy: fix out-of-bounds read in next_valid_format (bnc#1012628). - floppy: fix div-by-zero in setup_format_params (bnc#1012628). - libbpf: fix another GCC8 warning for strncpy (bnc#1012628). - blk-iolatency: fix STS_AGAIN handling (bnc#1012628). - iavf: fix dereference of null rx_buffer pointer (bnc#1012628). - net: hns3: fix __QUEUE_STATE_STACK_XOFF not cleared issue (bnc#1012628). - net: mvmdio: defer probe of orion-mdio if a clock is not ready (bnc#1012628). - xdp: fix race on generic receive path (bnc#1012628). - gtp: fix use-after-free in gtp_newlink() (bnc#1012628). - gtp: fix use-after-free in gtp_encap_destroy() (bnc#1012628). - gtp: fix Illegal context switch in RCU read-side critical section (bnc#1012628). - gtp: fix suspicious RCU usage (bnc#1012628). - Bluetooth: validate BLE connection interval updates (bnc#1012628). - gtp: add missing gtp_encap_disable_sock() in gtp_encap_enable() (bnc#1012628). - Bluetooth: hidp: NUL terminate a string in the compat ioctl (bnc#1012628). - Bluetooth: Check state in l2cap_disconnect_rsp (bnc#1012628). - perf tests: Fix record+probe_libc_inet_pton.sh for powerpc64 (bnc#1012628). - genirq: Update irq stats from NMI handlers (bnc#1012628). - Bluetooth: 6lowpan: search for destination address in all peers (bnc#1012628). - Bluetooth: Add new 13d3:3501 QCA_ROME device (bnc#1012628). - Bluetooth: Add new 13d3:3491 QCA_ROME device (bnc#1012628). - Bluetooth: hci_bcsp: Fix memory leak in rx_skb (bnc#1012628). - net: hns3: fix port capbility updating issue (bnc#1012628). - net: hns3: enable broadcast promisc mode when initializing VF (bnc#1012628). - tools: bpftool: Fix json dump crash on powerpc (bnc#1012628). - ASoC: audio-graph-card: fix use-after-free in graph_for_each_link (bnc#1012628). - iommu/arm-smmu-v3: Invalidate ATC when detaching a device (bnc#1012628). - gpiolib: Fix references to gpiod_[gs]et_*value_cansleep() variants (bnc#1012628). - bonding: validate ip header before check IPPROTO_IGMP (bnc#1012628). - selftests: bpf: fix inlines in test_lwt_seg6local (bnc#1012628). - bpf, libbpf, smatch: Fix potential NULL pointer dereference (bnc#1012628). - libbpf: fix GCC8 warning for strncpy (bnc#1012628). - rxrpc: Fix oops in tracepoint (bnc#1012628). - net: usb: asix: init MAC address buffers (bnc#1012628). - bnx2x: Prevent ptp_task to be rescheduled indefinitely (bnc#1012628). - vxlan: do not destroy fdb if register_netdevice() is failed (bnc#1012628). - perf stat: Fix group lookup for metric group (bnc#1012628). - perf stat: Don't merge events in the same PMU (bnc#1012628). - perf stat: Fix metrics with --no-merge (bnc#1012628). - perf stat: Make metric event lookup more robust (bnc#1012628). - ALSA: hda: Fix a headphone detection issue when using SOF (bnc#1012628). - bnxt_en: Cap the returned MSIX vectors to the RDMA driver (bnc#1012628). - bnxt_en: Fix statistics context reservation logic for RDMA driver (bnc#1012628). - bnxt_en: Disable bus master during PCI shutdown and driver unload (bnc#1012628). - iwlwifi: dbg: fix debug monitor stop and restart delays (bnc#1012628). - netfilter: Fix remainder of pseudo-header protocol 0 (bnc#1012628). - bpf: fix uapi bpf_prog_info fields alignment (bnc#1012628). - iwlwifi: mvm: Drop large non sta frames (bnc#1012628). - ixgbe: Avoid NULL pointer dereference with VF on non-IPsec hw (bnc#1012628). - net: ethernet: ti: cpsw: Assign OF node to slave devices (bnc#1012628). - net: hns3: add Asym Pause support to fix autoneg problem (bnc#1012628). - igb: clear out skb->tstamp after reading the txtime (bnc#1012628). - net: mvpp2: prs: Don't override the sign bit in SRAM parser shift (bnc#1012628). - ath10k: destroy sdio workqueue while remove sdio module (bnc#1012628). - ath10k: Fix memory leak in qmi (bnc#1012628). - net: hns3: add some error checking in hclge_tm module (bnc#1012628). - net: hns3: fix a -Wformat-nonliteral compile warning (bnc#1012628). - bcache: fix potential deadlock in cached_def_free() (bnc#1012628). - bcache: avoid a deadlock in bcache_reboot() (bnc#1012628). - bcache: check c->gc_thread by IS_ERR_OR_NULL in cache_set_flush() (bnc#1012628). - bcache: acquire bch_register_lock later in cached_dev_free() (bnc#1012628). - bcache: check CACHE_SET_IO_DISABLE bit in bch_journal() (bnc#1012628). - bcache: check CACHE_SET_IO_DISABLE in allocator code (bnc#1012628). - bcache: fix return value error in bch_journal_read() (bnc#1012628). - net/mlx5e: Attach/detach XDP program safely (bnc#1012628). - EDAC: Fix global-out-of-bounds write when setting edac_mc_poll_msec (bnc#1012628). - wil6210: drop old event after wmi_call timeout (bnc#1012628). - ath9k: correctly handle short radar pulses (bnc#1012628). - crypto: asymmetric_keys - select CRYPTO_HASH where needed (bnc#1012628). - crypto: serpent - mark __serpent_setkey_sbox noinline (bnc#1012628). - ixgbe: Check DDM existence in transceiver before access (bnc#1012628). - net/mlx5: Get vport ACL namespace by vport index (bnc#1012628). - net: hns3: restore the MAC autoneg state after reset (bnc#1012628). - gpio: Fix return value mismatch of function gpiod_get_from_of_node() (bnc#1012628). - rslib: Fix handling of of caller provided syndrome (bnc#1012628). - bpf: fix BPF_ALU32 | BPF_ARSH on BE arches (bnc#1012628). - rslib: Fix decoding of shortened codes (bnc#1012628). - xsk: Properly terminate assignment in xskq_produce_flush_desc (bnc#1012628). - netfilter: ctnetlink: Fix regression in conntrack entry deletion (bnc#1012628). - clocksource/drivers/exynos_mct: Increase priority over ARM arch timer (bnc#1012628). - clocksource/drivers/tegra: Restore base address before cleanup (bnc#1012628). - libata: don't request sense data on !ZAC ATA devices (bnc#1012628). - clocksource/drivers/tegra: Release all IRQ's on request_irq() error (bnc#1012628). - block, bfq: fix rq_in_driver check in bfq_update_inject_limit (bnc#1012628). - ASoC: Intel: hdac_hdmi: Set ops to NULL on remove (bnc#1012628). - perf tools: Increase MAX_NR_CPUS and MAX_CACHES (bnc#1012628). - ALSA: hdac: Fix codec name after machine driver is unloaded and reloaded (bnc#1012628). - ath10k: fix PCIE device wake up failed (bnc#1012628). - ath10k: fix fw crash by moving chip reset after napi disabled (bnc#1012628). - ath10k: add missing error handling (bnc#1012628). - mt76: mt7615: do not process rx packets if the device is not initialized (bnc#1012628). - ipvs: fix tinfo memory leak in start_sync_thread (bnc#1012628). - mt7601u: fix possible memory leak when the device is disconnected (bnc#1012628). - x86/build: Add 'set -e' to mkcapflags.sh to delete broken capflags.c (bnc#1012628). - mt7601u: do not schedule rx_tasklet when the device has been disconnected (bnc#1012628). - rtlwifi: rtl8192cu: fix error handle when usb probe failed (bnc#1012628). - net: stmmac: sun8i: force select external PHY when no internal one (bnc#1012628). - media: hdpvr: fix locking and a missing msleep (bnc#1012628). - media: vimc: cap: check v4l2_fill_pixfmt return value (bnc#1012628). - media: coda: increment sequence offset for the last returned frame (bnc#1012628). - media: coda: fix last buffer handling in V4L2_ENC_CMD_STOP (bnc#1012628). - media: coda: fix mpeg2 sequence number handling (bnc#1012628). - acpi/arm64: ignore 5.1 FADTs that are reported as 5.0 (bnc#1012628). - ASoC: soc-core: call snd_soc_unbind_card() under mutex_lock; (bnc#1012628). - media: mt9m111: fix fw-node refactoring (bnc#1012628). - timer_list: Guard procfs specific code (bnc#1012628). - ntp: Limit TAI-UTC offset (bnc#1012628). - media: i2c: fix warning same module names (bnc#1012628). - media: s5p-mfc: Make additional clocks optional (bnc#1012628). - ipvs: defer hook registration to avoid leaks (bnc#1012628). - media: staging: davinci: fix memory leaks and check for allocation failure (bnc#1012628). - ipsec: select crypto ciphers for xfrm_algo (bnc#1012628). - arm64: Do not enable IRQs for ct_user_exit (bnc#1012628). - nvme-pci: adjust irq max_vector using num_possible_cpus() (bnc#1012628). - lightnvm: fix uninitialized pointer in nvm_remove_tgt() (bnc#1012628). - lightnvm: pblk: fix freeing of merged pages (bnc#1012628). - nvme-pci: set the errno on ctrl state change error (bnc#1012628). - nvme-pci: properly report state change failure in nvme_reset_work (bnc#1012628). - nvme: fix possible io failures when removing multipathed ns (bnc#1012628). - EDAC/sysfs: Fix memory leak when creating a csrow object (bnc#1012628). - EDAC/sysfs: Drop device references properly (bnc#1012628). - spi: fix ctrl->num_chipselect constraint (bnc#1012628). - ACPICA: Clear status of GPEs on first direct enable (bnc#1012628). - blk-iolatency: only account submitted bios (bnc#1012628). - x86/cacheinfo: Fix a -Wtype-limits warning (bnc#1012628). - net: netsec: initialize tx ring on ndo_open (bnc#1012628). - PCI: Add missing link delays required by the PCIe spec (bnc#1012628). - perf build: Handle slang being in /usr/include and in /usr/include/slang/ (bnc#1012628). - bpf: fix callees pruning callers (bnc#1012628). - tools build: Fix the zstd test in the test-all.c common case feature test (bnc#1012628). - ASoC: rsnd: fixup mod ID calculation in rsnd_ctu_probe_ (bnc#1012628). - ipoib: correcly show a VF hardware address (bnc#1012628). - iavf: allow null RX descriptors (bnc#1012628). - vhost_net: disable zerocopy by default (bnc#1012628). - perf evsel: Make perf_evsel__name() accept a NULL argument (bnc#1012628). - x86/atomic: Fix smp_mb__{before,after}_atomic() (bnc#1012628). - integrity: Fix __integrity_init_keyring() section mismatch (bnc#1012628). - perf/x86/intel/uncore: Handle invalid event coding for free-running counter (bnc#1012628). - perf/x86/intel: Disable check_msr for real HW (bnc#1012628). - sched/fair: Fix "runnable_avg_yN_inv" not used warnings (bnc#1012628). - perf/x86/intel: Add more Icelake CPUIDs (bnc#1012628). - sched/core: Add __sched tag for io_schedule() (bnc#1012628). - xfrm: fix sa selector validation (bnc#1012628). - blkcg, writeback: dead memcgs shouldn't contribute to writeback ownership arbitration (bnc#1012628). - block: null_blk: fix race condition for null_del_dev (bnc#1012628). - net: hns3: delay ring buffer clearing during reset (bnc#1012628). - net: hns3: fix for skb leak when doing selftest (bnc#1012628). - net: hns3: fix for dereferencing before null checking (bnc#1012628). - qed: iWARP - Fix tc for MPA ll2 connection (bnc#1012628). - x86/cpufeatures: Add FDP_EXCPTN_ONLY and ZERO_FCS_FDS (bnc#1012628). - perf/x86: Add Intel Ice Lake NNPI uncore support (bnc#1012628). - rcu: Force inlining of rcu_read_lock() (bnc#1012628). - ASoC: meson: axg-tdm: fix sample clock inversion (bnc#1012628). - x86/cpu: Add Ice Lake NNPI to Intel family (bnc#1012628). - crypto: testmgr - add some more preemption points (bnc#1012628). - selinux: fix empty write to keycreate file (bnc#1012628). - media: s5p-mfc: fix reading min scratch buffer size on MFC v6/v7 (bnc#1012628). - bpf: silence warning messages in core (bnc#1012628). - media: davinci: vpif_capture: fix memory leak in vpif_probe() (bnc#1012628). - gpio: omap: Fix lost edge wake-up interrupts (bnc#1012628). - regmap: fix bulk writes on paged registers (bnc#1012628). - gpio: omap: ensure irq is enabled before wakeup (bnc#1012628). - gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bnc#1012628). - iommu: Fix a leak in iommu_insert_resv_region (bnc#1012628). - media: fdp1: Support M3N and E3 platforms (bnc#1012628). - media: uvcvideo: Fix access to uninitialized fields on probe error (bnc#1012628). - irqchip/meson-gpio: Add support for Meson-G12A SoC (bnc#1012628). - selftests/bpf : clean up feature/ when make clean (bnc#1012628). - perf report: Fix OOM error in TUI mode on s390 (bnc#1012628). - perf test 6: Fix missing kvm module load for s390 (bnc#1012628). - perf cs-etm: Properly set the value of 'old' and 'head' in snapshot mode (bnc#1012628). - ipset: Fix memory accounting for hash types on resize (bnc#1012628). - netfilter: ipset: fix a missing check of nla_parse (bnc#1012628). - net: sfp: add mutex to prevent concurrent state checks (bnc#1012628). - RAS/CEC: Fix pfn insertion (bnc#1012628). - s390/qdio: handle PENDING state for QEBSM devices (bnc#1012628). - net: axienet: Fix race condition causing TX hang (bnc#1012628). - net: fec: Do not use netdev messages too early (bnc#1012628). - crypto: inside-secure - do not rely on the hardware last bit for result descriptors (bnc#1012628). - net: stmmac: modify default value of tx-frames (bnc#1012628). - net: stmmac: dwmac4: fix flow control issue (bnc#1012628). - media: aspeed: fix a kernel warning on clk control (bnc#1012628). - media: aspeed: change irq to threaded irq (bnc#1012628). - perf jvmti: Address gcc string overflow warning for strncpy() (bnc#1012628). - media: imx7-mipi-csis: Propagate the error if clock enabling fails (bnc#1012628). - arm64: mm: make CONFIG_ZONE_DMA32 configurable (bnc#1012628). - cpupower : frequency-set -r option misses the last cpu in related cpu list (bnc#1012628). - net: hns3: set ops to null when unregister ad_dev (bnc#1012628). - net: hns3: add a check to pointer in error_detected and slot_reset (bnc#1012628). - media: wl128x: Fix some error handling in fm_v4l2_init_video_device() (bnc#1012628). - media: platform: ao-cec-g12a: disable regmap fast_io for cec bus regmap (bnc#1012628). - locking/lockdep: Fix merging of hlocks with non-zero references (bnc#1012628). - locking/lockdep: Fix OOO unlock when hlocks need merging (bnc#1012628). - batman-adv: Fix duplicated OGMs on NETDEV_UP (bnc#1012628). - tua6100: Avoid build warnings (bnc#1012628). - crypto: talitos - Align SEC1 accesses to 32 bits boundaries (bnc#1012628). - crypto: talitos - properly handle split ICV (bnc#1012628). - net: dsa: sja1105: Fix broken fixed-link interfaces on user ports (bnc#1012628). - net: phy: Check against net_device being NULL (bnc#1012628). - media: staging: media: davinci_vpfe: - Fix for memory leak if decoder initialization fails (bnc#1012628). - ASoC: Intel: sof-rt5682: fix undefined references with Baytrail-only support (bnc#1012628). - media: saa7164: fix remove_proc_entry warning (bnc#1012628). - media: mc-device.c: don't memset __user pointer contents (bnc#1012628). - ice: Check all VFs for MDD activity, don't disable (bnc#1012628). - perf annotate TUI browser: Do not use member from variable within its own initialization (bnc#1012628). - media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap (bnc#1012628). - fscrypt: clean up some BUG_ON()s in block encryption/decryption (bnc#1012628). - media: v4l2-core: fix use-after-free error (bnc#1012628). - media: vim2m: fix two double-free issues (bnc#1012628). - xfrm: Fix xfrm sel prefix length validation (bnc#1012628). - af_key: fix leaks in key_pol_get_resp and dump_sp (bnc#1012628). - signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig (bnc#1012628). - qed: Set the doorbell address correctly (bnc#1012628). - net: hns3: fix for FEC configuration (bnc#1012628). - net: hns3: initialize CPU reverse mapping (bnc#1012628). - net: mvpp2: cls: Extract the RSS context when parsing the ethtool rule (bnc#1012628). - ice: Fix couple of issues in ice_vsi_release (bnc#1012628). - net: stmmac: Prevent missing interrupts when running NAPI (bnc#1012628). - net: stmmac: dwmac4/5: Clear unused address entries (bnc#1012628). - net: stmmac: dwmac1000: Clear unused address entries (bnc#1012628). - crypto: caam - avoid S/G table fetching for AEAD zero-length output (bnc#1012628). - media: venus: firmware: fix leaked of_node references (bnc#1012628). - ice: Gracefully handle reset failure in ice_alloc_vfs() (bnc#1012628). - media: media_device_enum_links32: clean a reserved field (bnc#1012628). - media: vpss: fix a potential NULL pointer dereference (bnc#1012628). - selftests/bpf: adjust verifier scale test (bnc#1012628). - media: marvell-ccic: fix DMA s/g desc number calculation (bnc#1012628). - media: ov7740: avoid invalid framesize setting (bnc#1012628). - crypto: talitos - fix skcipher failure due to wrong output IV (bnc#1012628). - media: spi: IR LED: add missing of table registration (bnc#1012628). - media: dvb: usb: fix use after free in dvb_usb_device_exit (bnc#1012628). - batman-adv: fix for leaked TVLV handler (bnc#1012628). - regmap: debugfs: Fix memory leak in regmap_debugfs_init (bnc#1012628). - ath10k: Fix encoding for protected management frames (bnc#1012628). - ath: DFS JP domain W56 fixed pulse type 3 RADAR detection (bnc#1012628). - wil6210: fix spurious interrupts in 3-msi (bnc#1012628). - ath10k: add peer id check in ath10k_peer_find_by_id (bnc#1012628). - ath6kl: add some bounds checking (bnc#1012628). - wil6210: fix missed MISC mbox interrupt (bnc#1012628). - ath10k: Fix the wrong value of enums for wmi tlv stats id (bnc#1012628). - ath9k: Check for errors when reading SREV register (bnc#1012628). - spi: rockchip: turn down tx dma bursts (bnc#1012628). - ath10k: Do not send probe response template for mesh (bnc#1012628). - wil6210: fix potential out-of-bounds read (bnc#1012628). - ath9k: Don't trust TX status TID number when reporting airtime (bnc#1012628). - ath10k: fix incorrect multicast/broadcast rate setting (bnc#1012628). - ath10k: htt: don't use txdone_fifo with SDIO (bnc#1012628). - ath10k: Check tx_stats before use it (bnc#1012628). - commit f5296b5 - Add kernel module compression support (bsc#1135854) For enabling the kernel module compress, add the item COMPRESS_MODULES="xz" in config.sh, then mkspec will pass it to the spec file. - commit cdf5806 - config: enable PPPoE for kvmsmall (bsc#1133945). - commit 72c928d - rpm/klp-symbols: update to work with kernel >= 5.3 Since mainline commit b7dca6dd1e59 ("kbuild: create *.mod with full directory path and remove MODVERDIR") in v5.3-rc1, *.mod files are created in the build tree rather than in a single directory .tmp_versions ($MODVERDIR). They also do not provide path to the *.ko module file on their first line as the path is the same (except for the suffix). Update klp-symbols script to handle this new layout and format of *.mod files to fix build of 5.3-rc1 and newer kernel. Note: this is a quick band-aid to fix master branch build without risk of breaking any other branch. A more proper cleanup will follow. - commit c32f8e7 ==== libpciaccess ==== Version update (0.15 -> 0.16) - Update to version 0.16 * This release brings a compilation fix on 32-bit arm with newer glibc, and fixes the raw x86 backend's memory mapping to handle writes correctly. ==== libsolv ==== - Add -ffat-lto-objects to $optflags as the package provides static libraries - Remove NO_BRP_STRIP_DEBUG=true as brp-15-strip-debug will not strip debug info for archives ==== ncurses ==== Subpackages: libncurses6 ncurses-utils terminfo terminfo-base - Add ncurses patch 20190713 + change reset's behavior for margins to simply clear soft-margins if possible, rather than clearing and then setting them according to the terminal's width (suggested by Thomas Wolff). + correct order of one wbkgd versus start_color call in test/padview.c - Add ncurses patch 20190706 + add domterm -TD + improve comments for recent changes, add alias xterm.js -TD - Add ncurses patch 20190630 + add --with-tic-path and --with-infocmp-path to work around problems building fallback source using pre-6.0 tic/infocmp. + add a check in tic for paired indn/rin + correct a buffer-limit in write_entry.c for systems that use caseless filenames. + add ms-terminal -TD + add vscode, vscode-direct -TD * Adopt patch ncurses-5.9-ibm327x.dif and ncurses-6.1.dif ==== openssh ==== - ssh-askpass: Try a fallback if the other option is not available ==== python-base ==== Subpackages: libpython2_7-1_0 - boo#1141853 (CVE-2018-20852) add CVE-2018-20852-cookie-domain-check.patch fixing http.cookiejar.DefaultPolicy.domain_return_ok which did not correctly validate the domain: it could be tricked into sending cookies to the wrong server. - Skip test_urllib2_localnet that randomly fails in OBS ==== python-certifi ==== Version update (2019.3.9 -> 2019.6.16) - version update to 2019.6.16 * remove Certinomis Root CA ==== python-networkx ==== Version update (2.2 -> 2.3) - Update to version 2.3 Highlights: * Dropped support for Python 2. We are no longer supporting Python 2.7 and we will start changing code to take advantage of Python 3 features we couldn't before. * Added some Moral Graph analysis functions. * Enable matplotlib drawing using curved arrows via connectionstyle parameter. * Remove ticks and axes labels from matplotlib plots. * Two new generators of Harary Graphs. * Added Dual Barabasi-Albert model * Added VoteRank algorithm * Added Equitable coloring algorithms * Added planar layout algorithms * Les Miserables network example * Javascript example update ==== python-oauthlib ==== Version update (3.0.1 -> 3.0.2) - specfile: * be more specific in %files section - update to version 3.0.2: * #650: Fixed space encoding in base string URI used in the signature base string. * #652: Fixed OIDC /token response which wrongly returned "&state=None" * #654: Doc: The value state must not be stored by the AS, only returned in /authorize response. * #656: Fixed OIDC "nonce" checks: raise errors when it's mandatory ==== python-requests ==== - Hardcode pytest 3.x series as upstream even in git does not work with newer versions (they pinned the release) ==== python-six ==== - Simplify the pytest call ==== python-urllib3 ==== - Use old pytest 3.x as newer do not work with this release * this will be fixed with next release, just spread among numerous fixes in the git for quick backporting ==== ucode-intel ==== Version update (20190514 -> 20190618) - Updated to 20190618 release (bsc#1111331 CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091) - --- updated platforms ------------------------------------ SNB-E/EN/EP C1/M0 6-2d-6/6d 0000061d->0000061f Xeon E3/E5, Core X SNB-E/EN/EP C2/M1 6-2d-7/6d 00000714->00000718 Xeon E3/E5, Core X ==== vim ==== Version update (8.1.1694 -> 8.1.1741) Subpackages: vim-data-common - Update to version 8.1.1741, fixes the following problems * Cleared/added match highlighting not updated in other window. * Exepath() doesn't work for "bin/cat". * Deleted match highlighting not updated in other window. * Testing lambda with timer is slow. * :args command that outputs one line gives more prompt. * Viminfo support is spread out. * Can't build with tiny features. * The evalfunc.c file is too big. * The man ftplugin leaves an empty buffer behind. * Completion in cmdwin does not work for buffer-local commands. * Command line history not read from viminfo on startup. * Wrong place for mark viminfo support. * Heredoc with trim not properly handled in function. * Wrong place for command line history viminfo support. * Code for viminfo support is spread out. * The eval.txt help file is too big. * MS-Windows: E325 message may use incorrect date format. * Too much overhead checking for CTRL-C while processing text. * Heredoc assignment has no room for new features. * Error when scriptversion is 2 a making a dictionary access. * Build failure with normal features without netbeans interface. * Crash with very long %[] pattern. * Popup too wide when 'showbreak' is set. * Popup menu highlighting does not look good. * Last char in menu popup window highlighted. * Old style comments are wasting space * Emoji characters are seen as word characters for spelling. * Cannot preview a file in a popup window. * Highlighting cursor line only works with popup_menu(). * Signs in number column cause text to be misaligned. * Listener callback called at the wrong moment * Coverity found dead code. * Coverity warns for possibly using a NULL pointer. * Coverity warns for using uninitialized variable. * Coverity warns for possibly using a NULL pointer. * Typo in #ifdef. * Using ~{} for a literal dict is not nice. * C-R C-W does not work after C-G when using 'incsearch'. * Breaking out of loop by checking window pointer is insufficient. * Compiler warning for uninitialized variable. * Appveyor build with MSVC fails puts progress bar in log. * Listener callback called for the wrong buffer. * Highlight_ga can be local instead of global. * Appveyor build with MSVC fails. * Cannot build with MSVC. * MSVC: link command line is too long. * Windows 10: crash when cursor is at bottom of terminal. ==== zstd ==== Version update (1.4.0 -> 1.4.1) - Update to version 1.4.1: * bug: Fix data corruption in niche use cases by @terrelln (#1659) * bug: Fuzz legacy modes, fix uncovered bugs by @terrelln (#1593, #1594, #1595) * bug: Fix out of bounds read by @terrelln (#1590) * perf: Improve decode speed by ~7% @mgrice (#1668) * perf: Slightly improved compression ratio of level 3 and 4 (ZSTD_dfast) by @cyan4973 (#1681) * perf: Slightly faster compression speed when re-using a context by @cyan4973 (#1658) * perf: Improve compression ratio for small windowLog by @cyan4973 (#1624) * perf: Faster compression speed in high compression mode for repetitive data by @terrelln (#1635) * api: Add parameter to generate smaller dictionaries by @tyler-tran (#1656) * cli: Recognize symlinks when built in C99 mode by @felixhandte (#1640) * cli: Expose cpu load indicator for each file on -vv mode by @ephiepark (#1631) * cli: Restrict read permissions on destination files by @chungy (#1644) * cli: zstdgrep: handle -f flag by @felixhandte (#1618) * cli: zstdcat: follow symlinks by @vejnar (#1604) * doc: Remove extra size limit on compressed blocks by @felixhandte (#1689) * doc: Fix typo by @yk-tanigawa (#1633) * doc: Improve documentation on streaming buffer sizes by @cyan4973 (#1629) * build: CMake: support building with LZ4 @leeyoung624 (#1626) * build: CMake: install zstdless and zstdgrep by @leeyoung624 (#1647) * build: CMake: respect existing uninstall target by @j301scott (#1619) * build: Make: skip multithread tests when built without support by @michaelforney (#1620) * build: Make: Fix examples/ test target by @sjnam (#1603) * build: Meson: rename options out of deprecated namespace by @lzutao (#1665) * build: Meson: fix build by @lzutao (#1602) * build: Visual Studio: don't export symbols in static lib by @scharan (#1650) * build: Visual Studio: fix linking by @absotively (#1639) * build: Fix MinGW-W64 build by @myzhang1029 (#1600) * misc: Expand decodecorpus coverage by @ephiepark (#1664) -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20190730 released!
by Richard Brown 31 Jul '19

31 Jul '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bind dhcp kernel-source (5.2.2 -> 5.2.3) kubic-control (0.6.2 -> 0.7.0) libpciaccess (0.15 -> 0.16) libsolv metallb (0.7.3 -> 0.8.0) ncurses openssh python-base python-certifi (2019.3.9 -> 2019.6.16) python-networkx (2.2 -> 2.3) python-oauthlib (3.0.1 -> 3.0.2) python-pyzmq (18.0.1 -> 18.0.2) python-requests python-six python-urllib3 ucode-intel (20190514 -> 20190618) vim (8.1.1694 -> 8.1.1741) zstd (1.4.0 -> 1.4.1) === Details === ==== bind ==== Subpackages: bind-utils libbind9-160 libdns169 libirs160 libisc166 libisccc160 libisccfg160 liblwres160 python3-bind - removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been replaced by firewalld, see [1]. [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html ==== dhcp ==== Subpackages: dhcp-client - Remove SuSEfirewall2 services since SuSEfirewall2 has been replaced by firewalld (which already provides a service for dhcp). ==== kernel-source ==== Version update (5.2.2 -> 5.2.3) Subpackages: kernel-debug kernel-default - Linux 5.2.3 (bnc#1012628). - dm bufio: fix deadlock with loop device (bnc#1012628). - dm thin metadata: check if in fail_io mode when setting needs_check (bnc#1012628). - phy: qcom-qmp: Correct READY_STATUS poll break condition (bnc#1012628). - pstore: Fix double-free in pstore_mkfile() failure path (bnc#1012628). - dt-bindings: allow up to four clocks for orion-mdio (bnc#1012628). - net: mvmdio: allow up to four clocks to be specified for orion-mdio (bnc#1012628). - blkcg: update blkcg_print_stat() to handle larger outputs (bnc#1012628). - blk-iolatency: clear use_delay when io.latency is set to zero (bnc#1012628). - clk: imx: imx8mm: correct audio_pll2_clk to audio_pll2_out (bnc#1012628). - blk-throttle: fix zero wait time for iops throttled group (bnc#1012628). - usb: Handle USB3 remote wakeup for LPM enabled devices correctly (bnc#1012628). - dax: Fix missed wakeup with PMD faults (bnc#1012628). - Bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug (bnc#1012628). - intel_th: msu: Fix single mode with disabled IOMMU (bnc#1012628). - intel_th: msu: Remove set but not used variable 'last' (bnc#1012628). - mtd: spinand: read returns badly if the last page has bitflips (bnc#1012628). - mtd: rawnand: mtk: Correct low level time calculation of r/w cycle (bnc#1012628). - eCryptfs: fix a couple type promotion bugs (bnc#1012628). - mmc: sdhci-msm: fix mutex while in spinlock (bnc#1012628). - powerpc/pseries: Fix oops in hotplug memory notifier (bnc#1012628). - powerpc/pseries: Fix xive=off command line (bnc#1012628). - powerpc/powernv: Fix stale iommu table base after VFIO (bnc#1012628). - powerpc/powernv/idle: Fix restore of SPRN_LDBAR for POWER9 stop state (bnc#1012628). - powerpc/powernv/npu: Fix reference leak (bnc#1012628). - powerpc/watchpoint: Restore NV GPRs while returning from exception (bnc#1012628). - powerpc/mm/32s: fix condition that is always true (bnc#1012628). - powerpc/32s: fix suspend/resume when IBATs 4-7 are used (bnc#1012628). - parisc: Fix kernel panic due invalid values in IAOQ0 or IAOQ1 (bnc#1012628). - parisc: Avoid kernel panic triggered by invalid kprobe (bnc#1012628). - parisc: Ensure userspace privilege for ptraced processes in regset functions (bnc#1012628). - gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM (bnc#1012628). - resource: fix locking in find_next_iomem_res() (bnc#1012628). - include/asm-generic/bug.h: fix "cut here" for WARN_ON for __WARN_TAINT architectures (bnc#1012628). - coda: pass the host file in vma->vm_file on mmap (bnc#1012628). - mm/z3fold.c: lock z3fold page before __SetPageMovable() (bnc#1012628). - mm/memcontrol: fix wrong statistics in memory.stat (bnc#1012628). - libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields (bnc#1012628). - mm/nvdimm: add is_ioremap_addr and use that to check ioremap address (bnc#1012628). - mm: vmscan: scan anonymous pages on file refaults (bnc#1012628). - HID: wacom: correct touch resolution x/y typo (bnc#1012628). - HID: wacom: generic: Correct pad syncing (bnc#1012628). - HID: wacom: generic: only switch the mode on devices with LEDs (bnc#1012628). - IB/mlx5: Report correctly tag matching rendezvous capability (bnc#1012628). - Btrfs: add missing inode version, ctime and mtime updates when punching hole (bnc#1012628). - Btrfs: fix fsync not persisting dentry deletions due to inode evictions (bnc#1012628). - Btrfs: fix data loss after inode eviction, renaming it, and fsync it (bnc#1012628). - btrfs: correctly validate compression type (bnc#1012628). - PCI: qcom: Ensure that PERST is asserted for at least 100 ms (bnc#1012628). - PCI: Do not poll for PME if the device is in D3cold (bnc#1012628). - PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (bnc#1012628). - intel_th: pci: Add Ice Lake NNPI support (bnc#1012628). - RDMA/odp: Fix missed unlock in non-blocking invalidate_start (bnc#1012628). - RDMA/srp: Accept again source addresses that do not have a port number (bnc#1012628). - block: Fix potential overflow in blk_report_zones() (bnc#1012628). - block: Allow mapping of vmalloc-ed buffers (bnc#1012628). - drm/edid: parse CEA blocks embedded in DisplayID (bnc#1012628). - x86/stacktrace: Prevent infinite loop in arch_stack_walk_user() (bnc#1012628). - perf/x86/amd/uncore: Set the thread mask for F17h L3 PMCs (bnc#1012628). - perf/x86/amd/uncore: Do not set 'ThreadMask' and 'SliceMask' for non-L3 PMCs (bnc#1012628). - perf/x86/intel: Fix spurious NMI on fixed counter (bnc#1012628). - x86/boot: Fix memory leak in default_get_smp_config() (bnc#1012628). - x86/hyper-v: Zero out the VP ASSIST PAGE on allocation (bnc#1012628). - rt2x00usb: fix rx queue hang (bnc#1012628). - 9p/virtio: Add cleanup path in p9_virtio_init (bnc#1012628). - 9p/xen: Add cleanup path in p9_trans_xen_init (bnc#1012628). - xen/events: fix binding user event channels to cpus (bnc#1012628). - dm zoned: fix zone state management race (bnc#1012628). - padata: use smp_mb in padata_reorder to avoid orphaned padata jobs (bnc#1012628). - drm/nouveau/i2c: Enable i2c pads & busses during preinit (bnc#1012628). - ARM: dts: gemini: Set DIR-685 SPI CS as active low (bnc#1012628). - i3c: fix i2c and i3c scl rate by bus mode (bnc#1012628). - fs/proc/proc_sysctl.c: fix the default values of i_uid/i_gid on /proc/sys inodes (bnc#1012628). - signal: Correct namespace fixups of si_pid and si_uid (bnc#1012628). - signal/usb: Replace kill_pid_info_as_cred with kill_pid_usb_asyncio (bnc#1012628). - intel_th: msu: Fix unused variable warning on arm64 platform (bnc#1012628). - arm64: Fix incorrect irqflag restore for priority masking (bnc#1012628). - arm64: irqflags: Add condition flags to inline asm clobber list (bnc#1012628). - arm64: tegra: Fix AGIC register range (bnc#1012628). - KVM: x86/vPMU: refine kvm_pmu err msg when event creation failed (bnc#1012628). - KVM: PPC: Book3S HV: Fix CR0 setting in TM emulation (bnc#1012628). - KVM: PPC: Book3S HV: Clear pending decrementer exceptions on nested guest entry (bnc#1012628). - KVM: PPC: Book3S HV: Signed extend decrementer value if not using large decrementer (bnc#1012628). - KVM: Properly check if "page" is valid in kvm_vcpu_unmap (bnc#1012628). - KVM: VMX: check CPUID before allowing read/write of IA32_XSS (bnc#1012628). - KVM: VMX: Fix handling of #MC that occurs during VM-Entry (bnc#1012628). - KVM: nVMX: Always sync GUEST_BNDCFGS when it comes from vmcs01 (bnc#1012628). - KVM: VMX: Always signal #GP on WRMSR to MSR_IA32_CR_PAT with bad value (bnc#1012628). - KVM: nVMX: Don't dump VMCS if virtual APIC page can't be mapped (bnc#1012628). - media: videobuf2-dma-sg: Prevent size from overflowing (bnc#1012628). - media: videobuf2-core: Prevent size alignment wrapping buffer size to 0 (bnc#1012628). - media: coda: Remove unbalanced and unneeded mutex unlock (bnc#1012628). - media: v4l2: Test type instead of cfg->type in v4l2_ctrl_new_custom() (bnc#1012628). - ceph: use ceph_evict_inode to cleanup inode's resource (bnc#1012628). - ceph: fix end offset in truncate_inode_pages_range call (bnc#1012628). - ALSA: hda/hdmi - Fix i915 reverse port/pin mapping (bnc#1012628). - ALSA: hda/hdmi - Remove duplicated define (bnc#1012628). - ALSA: hda/realtek: apply ALC891 headset fixup to one Dell machine (bnc#1012628). - ALSA: hda/realtek - Fixed Headphone Mic can't record on Dell platform (bnc#1012628). - ALSA: hda - Don't resume forcibly i915 HDMI/DP codec (bnc#1012628). - ALSA: seq: Break too long mutex context in the write loop (bnc#1012628). - kconfig: fix missing choice values in auto.conf (bnc#1012628). - raid5-cache: Need to do start() part job after adding journal device (bnc#1012628). - ASoC: core: Adapt for debugfs API change (bnc#1012628). - ASoC: dapm: Adapt for debugfs API change (bnc#1012628). - lib/scatterlist: Fix mapping iterator when sg->offset is greater than PAGE_SIZE (bnc#1012628). - SUNRPC: Ensure the bvecs are reset when we re-encode the RPC request (bnc#1012628). - pnfs: Fix a problem where we gratuitously start doing I/O through the MDS (bnc#1012628). - pnfs/flexfiles: Fix PTR_ERR() dereferences in ff_layout_track_ds_error (bnc#1012628). - Revert "NFS: readdirplus optimization by cache mechanism" (memleak) (bnc#1012628). - NFSv4: Handle the special Linux file open access mode (bnc#1012628). - tracing: Fix user stack trace "??" output (bnc#1012628). - arm64: Fix interrupt tracing in the presence of NMIs (bnc#1012628). - opp: Don't use IS_ERR on invalid supplies (bnc#1012628). - iwlwifi: mvm: clear rfkill_safe_init_done when we start the firmware (bnc#1012628). - iwlwifi: mvm: delay GTK setting in FW in AP mode (bnc#1012628). - iwlwifi: fix RF-Kill interrupt while FW load for gen2 devices (bnc#1012628). - iwlwifi: don't WARN when calling iwl_get_shared_mem_conf with RF-Kill (bnc#1012628). - iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X (bnc#1012628). - iwlwifi: pcie: don't service an interrupt that was masked (bnc#1012628). - iwlwifi: add support for hr1 RF ID (bnc#1012628). - arm64: tegra: Fix Jetson Nano GPU regulator (bnc#1012628). - arm64: tegra: Update Jetson TX1 GPU regulator timings (bnc#1012628). - regulator: s2mps11: Fix buck7 and buck8 wrong voltages (bnc#1012628). - regulator: s2mps11: Fix ERR_PTR dereference on GPIO lookup failure (bnc#1012628). - Input: alps - fix a mismatch between a condition check and its comment (bnc#1012628). - Input: synaptics - whitelist Lenovo T580 SMBus intertouch (bnc#1012628). - Input: alps - don't handle ALPS cs19 trackpoint-only device (bnc#1012628). - Input: gtco - bounds check collection indent level (bnc#1012628). - bcache: destroy dc->writeback_write_wq if failed to create dc->writeback_thread (bnc#1012628). - bcache: fix mistaken sysfs entry for io_error counter (bnc#1012628). - bcache: ignore read-ahead request failure on backing device (bnc#1012628). - bcache: Revert "bcache: free heap cache_set->flush_btree in bch_journal_free" (bnc#1012628). - bcache: Revert "bcache: fix high CPU occupancy during journal" (bnc#1012628). - Revert "bcache: set CACHE_SET_IO_DISABLE in bch_cached_dev_error()" (bnc#1012628). - CIFS: fix deadlock in cached root handling (bnc#1012628). - cifs: flush before set-info if we have writeable handles (bnc#1012628). - cifs: Properly handle auto disabling of serverino option (bnc#1012628). - cifs: fix crash in smb2_compound_op()/smb2_set_next_command() (bnc#1012628). - cifs: always add credits back for unsolicited PDUs (bnc#1012628). - crypto: crypto4xx - fix a potential double free in ppc4xx_trng_probe (bnc#1012628). - crypto: ccp/gcm - use const time tag comparison (bnc#1012628). - crypto: ccp - memset structure fields to zero before reuse (bnc#1012628). - crypto: crypto4xx - block ciphers should only accept complete blocks (bnc#1012628). - crypto: crypto4xx - fix blocksize for cfb and ofb (bnc#1012628). - crypto: crypto4xx - fix AES CTR blocksize value (bnc#1012628). - crypto: chacha20poly1305 - fix atomic sleep when using async algorithm (bnc#1012628). - crypto: arm64/sha2-ce - correct digest for empty data in finup (bnc#1012628). - crypto: arm64/sha1-ce - correct digest for empty data in finup (bnc#1012628). - crypto: ccp - Validate the the error value used to index error messages (bnc#1012628). - crypto: caam - limit output IV to CBC to work around CTR mode DMA issue (bnc#1012628). - crypto: ghash - fix unaligned memory access in ghash_setkey() (bnc#1012628). - scsi: mac_scsi: Fix pseudo DMA implementation, take 2 (bnc#1012628). - scsi: mac_scsi: Increase PIO/PDMA transfer length threshold (bnc#1012628). - scsi: megaraid_sas: Fix calculation of target ID (bnc#1012628). - scsi: zfcp: fix request object use-after-free in send path causing wrong traces (bnc#1012628). - scsi: zfcp: fix request object use-after-free in send path causing seqno errors (bnc#1012628). - scsi: sd_zbc: Fix compilation warning (bnc#1012628). - scsi: core: Fix race on creating sense cache (bnc#1012628). - Revert "scsi: ncr5380: Increase register polling limit" (bnc#1012628). - scsi: NCR5380: Handle PDMA failure reliably (bnc#1012628). - scsi: NCR5380: Always re-enable reselection interrupt (bnc#1012628). - xen: let alloc_xenballooned_pages() fail if not enough memory free (bnc#1012628). - floppy: fix out-of-bounds read in copy_buffer (bnc#1012628). - floppy: fix invalid pointer dereference in drive_name (bnc#1012628). - floppy: fix out-of-bounds read in next_valid_format (bnc#1012628). - floppy: fix div-by-zero in setup_format_params (bnc#1012628). - libbpf: fix another GCC8 warning for strncpy (bnc#1012628). - blk-iolatency: fix STS_AGAIN handling (bnc#1012628). - iavf: fix dereference of null rx_buffer pointer (bnc#1012628). - net: hns3: fix __QUEUE_STATE_STACK_XOFF not cleared issue (bnc#1012628). - net: mvmdio: defer probe of orion-mdio if a clock is not ready (bnc#1012628). - xdp: fix race on generic receive path (bnc#1012628). - gtp: fix use-after-free in gtp_newlink() (bnc#1012628). - gtp: fix use-after-free in gtp_encap_destroy() (bnc#1012628). - gtp: fix Illegal context switch in RCU read-side critical section (bnc#1012628). - gtp: fix suspicious RCU usage (bnc#1012628). - Bluetooth: validate BLE connection interval updates (bnc#1012628). - gtp: add missing gtp_encap_disable_sock() in gtp_encap_enable() (bnc#1012628). - Bluetooth: hidp: NUL terminate a string in the compat ioctl (bnc#1012628). - Bluetooth: Check state in l2cap_disconnect_rsp (bnc#1012628). - perf tests: Fix record+probe_libc_inet_pton.sh for powerpc64 (bnc#1012628). - genirq: Update irq stats from NMI handlers (bnc#1012628). - Bluetooth: 6lowpan: search for destination address in all peers (bnc#1012628). - Bluetooth: Add new 13d3:3501 QCA_ROME device (bnc#1012628). - Bluetooth: Add new 13d3:3491 QCA_ROME device (bnc#1012628). - Bluetooth: hci_bcsp: Fix memory leak in rx_skb (bnc#1012628). - net: hns3: fix port capbility updating issue (bnc#1012628). - net: hns3: enable broadcast promisc mode when initializing VF (bnc#1012628). - tools: bpftool: Fix json dump crash on powerpc (bnc#1012628). - ASoC: audio-graph-card: fix use-after-free in graph_for_each_link (bnc#1012628). - iommu/arm-smmu-v3: Invalidate ATC when detaching a device (bnc#1012628). - gpiolib: Fix references to gpiod_[gs]et_*value_cansleep() variants (bnc#1012628). - bonding: validate ip header before check IPPROTO_IGMP (bnc#1012628). - selftests: bpf: fix inlines in test_lwt_seg6local (bnc#1012628). - bpf, libbpf, smatch: Fix potential NULL pointer dereference (bnc#1012628). - libbpf: fix GCC8 warning for strncpy (bnc#1012628). - rxrpc: Fix oops in tracepoint (bnc#1012628). - net: usb: asix: init MAC address buffers (bnc#1012628). - bnx2x: Prevent ptp_task to be rescheduled indefinitely (bnc#1012628). - vxlan: do not destroy fdb if register_netdevice() is failed (bnc#1012628). - perf stat: Fix group lookup for metric group (bnc#1012628). - perf stat: Don't merge events in the same PMU (bnc#1012628). - perf stat: Fix metrics with --no-merge (bnc#1012628). - perf stat: Make metric event lookup more robust (bnc#1012628). - ALSA: hda: Fix a headphone detection issue when using SOF (bnc#1012628). - bnxt_en: Cap the returned MSIX vectors to the RDMA driver (bnc#1012628). - bnxt_en: Fix statistics context reservation logic for RDMA driver (bnc#1012628). - bnxt_en: Disable bus master during PCI shutdown and driver unload (bnc#1012628). - iwlwifi: dbg: fix debug monitor stop and restart delays (bnc#1012628). - netfilter: Fix remainder of pseudo-header protocol 0 (bnc#1012628). - bpf: fix uapi bpf_prog_info fields alignment (bnc#1012628). - iwlwifi: mvm: Drop large non sta frames (bnc#1012628). - ixgbe: Avoid NULL pointer dereference with VF on non-IPsec hw (bnc#1012628). - net: ethernet: ti: cpsw: Assign OF node to slave devices (bnc#1012628). - net: hns3: add Asym Pause support to fix autoneg problem (bnc#1012628). - igb: clear out skb->tstamp after reading the txtime (bnc#1012628). - net: mvpp2: prs: Don't override the sign bit in SRAM parser shift (bnc#1012628). - ath10k: destroy sdio workqueue while remove sdio module (bnc#1012628). - ath10k: Fix memory leak in qmi (bnc#1012628). - net: hns3: add some error checking in hclge_tm module (bnc#1012628). - net: hns3: fix a -Wformat-nonliteral compile warning (bnc#1012628). - bcache: fix potential deadlock in cached_def_free() (bnc#1012628). - bcache: avoid a deadlock in bcache_reboot() (bnc#1012628). - bcache: check c->gc_thread by IS_ERR_OR_NULL in cache_set_flush() (bnc#1012628). - bcache: acquire bch_register_lock later in cached_dev_free() (bnc#1012628). - bcache: check CACHE_SET_IO_DISABLE bit in bch_journal() (bnc#1012628). - bcache: check CACHE_SET_IO_DISABLE in allocator code (bnc#1012628). - bcache: fix return value error in bch_journal_read() (bnc#1012628). - net/mlx5e: Attach/detach XDP program safely (bnc#1012628). - EDAC: Fix global-out-of-bounds write when setting edac_mc_poll_msec (bnc#1012628). - wil6210: drop old event after wmi_call timeout (bnc#1012628). - ath9k: correctly handle short radar pulses (bnc#1012628). - crypto: asymmetric_keys - select CRYPTO_HASH where needed (bnc#1012628). - crypto: serpent - mark __serpent_setkey_sbox noinline (bnc#1012628). - ixgbe: Check DDM existence in transceiver before access (bnc#1012628). - net/mlx5: Get vport ACL namespace by vport index (bnc#1012628). - net: hns3: restore the MAC autoneg state after reset (bnc#1012628). - gpio: Fix return value mismatch of function gpiod_get_from_of_node() (bnc#1012628). - rslib: Fix handling of of caller provided syndrome (bnc#1012628). - bpf: fix BPF_ALU32 | BPF_ARSH on BE arches (bnc#1012628). - rslib: Fix decoding of shortened codes (bnc#1012628). - xsk: Properly terminate assignment in xskq_produce_flush_desc (bnc#1012628). - netfilter: ctnetlink: Fix regression in conntrack entry deletion (bnc#1012628). - clocksource/drivers/exynos_mct: Increase priority over ARM arch timer (bnc#1012628). - clocksource/drivers/tegra: Restore base address before cleanup (bnc#1012628). - libata: don't request sense data on !ZAC ATA devices (bnc#1012628). - clocksource/drivers/tegra: Release all IRQ's on request_irq() error (bnc#1012628). - block, bfq: fix rq_in_driver check in bfq_update_inject_limit (bnc#1012628). - ASoC: Intel: hdac_hdmi: Set ops to NULL on remove (bnc#1012628). - perf tools: Increase MAX_NR_CPUS and MAX_CACHES (bnc#1012628). - ALSA: hdac: Fix codec name after machine driver is unloaded and reloaded (bnc#1012628). - ath10k: fix PCIE device wake up failed (bnc#1012628). - ath10k: fix fw crash by moving chip reset after napi disabled (bnc#1012628). - ath10k: add missing error handling (bnc#1012628). - mt76: mt7615: do not process rx packets if the device is not initialized (bnc#1012628). - ipvs: fix tinfo memory leak in start_sync_thread (bnc#1012628). - mt7601u: fix possible memory leak when the device is disconnected (bnc#1012628). - x86/build: Add 'set -e' to mkcapflags.sh to delete broken capflags.c (bnc#1012628). - mt7601u: do not schedule rx_tasklet when the device has been disconnected (bnc#1012628). - rtlwifi: rtl8192cu: fix error handle when usb probe failed (bnc#1012628). - net: stmmac: sun8i: force select external PHY when no internal one (bnc#1012628). - media: hdpvr: fix locking and a missing msleep (bnc#1012628). - media: vimc: cap: check v4l2_fill_pixfmt return value (bnc#1012628). - media: coda: increment sequence offset for the last returned frame (bnc#1012628). - media: coda: fix last buffer handling in V4L2_ENC_CMD_STOP (bnc#1012628). - media: coda: fix mpeg2 sequence number handling (bnc#1012628). - acpi/arm64: ignore 5.1 FADTs that are reported as 5.0 (bnc#1012628). - ASoC: soc-core: call snd_soc_unbind_card() under mutex_lock; (bnc#1012628). - media: mt9m111: fix fw-node refactoring (bnc#1012628). - timer_list: Guard procfs specific code (bnc#1012628). - ntp: Limit TAI-UTC offset (bnc#1012628). - media: i2c: fix warning same module names (bnc#1012628). - media: s5p-mfc: Make additional clocks optional (bnc#1012628). - ipvs: defer hook registration to avoid leaks (bnc#1012628). - media: staging: davinci: fix memory leaks and check for allocation failure (bnc#1012628). - ipsec: select crypto ciphers for xfrm_algo (bnc#1012628). - arm64: Do not enable IRQs for ct_user_exit (bnc#1012628). - nvme-pci: adjust irq max_vector using num_possible_cpus() (bnc#1012628). - lightnvm: fix uninitialized pointer in nvm_remove_tgt() (bnc#1012628). - lightnvm: pblk: fix freeing of merged pages (bnc#1012628). - nvme-pci: set the errno on ctrl state change error (bnc#1012628). - nvme-pci: properly report state change failure in nvme_reset_work (bnc#1012628). - nvme: fix possible io failures when removing multipathed ns (bnc#1012628). - EDAC/sysfs: Fix memory leak when creating a csrow object (bnc#1012628). - EDAC/sysfs: Drop device references properly (bnc#1012628). - spi: fix ctrl->num_chipselect constraint (bnc#1012628). - ACPICA: Clear status of GPEs on first direct enable (bnc#1012628). - blk-iolatency: only account submitted bios (bnc#1012628). - x86/cacheinfo: Fix a -Wtype-limits warning (bnc#1012628). - net: netsec: initialize tx ring on ndo_open (bnc#1012628). - PCI: Add missing link delays required by the PCIe spec (bnc#1012628). - perf build: Handle slang being in /usr/include and in /usr/include/slang/ (bnc#1012628). - bpf: fix callees pruning callers (bnc#1012628). - tools build: Fix the zstd test in the test-all.c common case feature test (bnc#1012628). - ASoC: rsnd: fixup mod ID calculation in rsnd_ctu_probe_ (bnc#1012628). - ipoib: correcly show a VF hardware address (bnc#1012628). - iavf: allow null RX descriptors (bnc#1012628). - vhost_net: disable zerocopy by default (bnc#1012628). - perf evsel: Make perf_evsel__name() accept a NULL argument (bnc#1012628). - x86/atomic: Fix smp_mb__{before,after}_atomic() (bnc#1012628). - integrity: Fix __integrity_init_keyring() section mismatch (bnc#1012628). - perf/x86/intel/uncore: Handle invalid event coding for free-running counter (bnc#1012628). - perf/x86/intel: Disable check_msr for real HW (bnc#1012628). - sched/fair: Fix "runnable_avg_yN_inv" not used warnings (bnc#1012628). - perf/x86/intel: Add more Icelake CPUIDs (bnc#1012628). - sched/core: Add __sched tag for io_schedule() (bnc#1012628). - xfrm: fix sa selector validation (bnc#1012628). - blkcg, writeback: dead memcgs shouldn't contribute to writeback ownership arbitration (bnc#1012628). - block: null_blk: fix race condition for null_del_dev (bnc#1012628). - net: hns3: delay ring buffer clearing during reset (bnc#1012628). - net: hns3: fix for skb leak when doing selftest (bnc#1012628). - net: hns3: fix for dereferencing before null checking (bnc#1012628). - qed: iWARP - Fix tc for MPA ll2 connection (bnc#1012628). - x86/cpufeatures: Add FDP_EXCPTN_ONLY and ZERO_FCS_FDS (bnc#1012628). - perf/x86: Add Intel Ice Lake NNPI uncore support (bnc#1012628). - rcu: Force inlining of rcu_read_lock() (bnc#1012628). - ASoC: meson: axg-tdm: fix sample clock inversion (bnc#1012628). - x86/cpu: Add Ice Lake NNPI to Intel family (bnc#1012628). - crypto: testmgr - add some more preemption points (bnc#1012628). - selinux: fix empty write to keycreate file (bnc#1012628). - media: s5p-mfc: fix reading min scratch buffer size on MFC v6/v7 (bnc#1012628). - bpf: silence warning messages in core (bnc#1012628). - media: davinci: vpif_capture: fix memory leak in vpif_probe() (bnc#1012628). - gpio: omap: Fix lost edge wake-up interrupts (bnc#1012628). - regmap: fix bulk writes on paged registers (bnc#1012628). - gpio: omap: ensure irq is enabled before wakeup (bnc#1012628). - gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bnc#1012628). - iommu: Fix a leak in iommu_insert_resv_region (bnc#1012628). - media: fdp1: Support M3N and E3 platforms (bnc#1012628). - media: uvcvideo: Fix access to uninitialized fields on probe error (bnc#1012628). - irqchip/meson-gpio: Add support for Meson-G12A SoC (bnc#1012628). - selftests/bpf : clean up feature/ when make clean (bnc#1012628). - perf report: Fix OOM error in TUI mode on s390 (bnc#1012628). - perf test 6: Fix missing kvm module load for s390 (bnc#1012628). - perf cs-etm: Properly set the value of 'old' and 'head' in snapshot mode (bnc#1012628). - ipset: Fix memory accounting for hash types on resize (bnc#1012628). - netfilter: ipset: fix a missing check of nla_parse (bnc#1012628). - net: sfp: add mutex to prevent concurrent state checks (bnc#1012628). - RAS/CEC: Fix pfn insertion (bnc#1012628). - s390/qdio: handle PENDING state for QEBSM devices (bnc#1012628). - net: axienet: Fix race condition causing TX hang (bnc#1012628). - net: fec: Do not use netdev messages too early (bnc#1012628). - crypto: inside-secure - do not rely on the hardware last bit for result descriptors (bnc#1012628). - net: stmmac: modify default value of tx-frames (bnc#1012628). - net: stmmac: dwmac4: fix flow control issue (bnc#1012628). - media: aspeed: fix a kernel warning on clk control (bnc#1012628). - media: aspeed: change irq to threaded irq (bnc#1012628). - perf jvmti: Address gcc string overflow warning for strncpy() (bnc#1012628). - media: imx7-mipi-csis: Propagate the error if clock enabling fails (bnc#1012628). - arm64: mm: make CONFIG_ZONE_DMA32 configurable (bnc#1012628). - cpupower : frequency-set -r option misses the last cpu in related cpu list (bnc#1012628). - net: hns3: set ops to null when unregister ad_dev (bnc#1012628). - net: hns3: add a check to pointer in error_detected and slot_reset (bnc#1012628). - media: wl128x: Fix some error handling in fm_v4l2_init_video_device() (bnc#1012628). - media: platform: ao-cec-g12a: disable regmap fast_io for cec bus regmap (bnc#1012628). - locking/lockdep: Fix merging of hlocks with non-zero references (bnc#1012628). - locking/lockdep: Fix OOO unlock when hlocks need merging (bnc#1012628). - batman-adv: Fix duplicated OGMs on NETDEV_UP (bnc#1012628). - tua6100: Avoid build warnings (bnc#1012628). - crypto: talitos - Align SEC1 accesses to 32 bits boundaries (bnc#1012628). - crypto: talitos - properly handle split ICV (bnc#1012628). - net: dsa: sja1105: Fix broken fixed-link interfaces on user ports (bnc#1012628). - net: phy: Check against net_device being NULL (bnc#1012628). - media: staging: media: davinci_vpfe: - Fix for memory leak if decoder initialization fails (bnc#1012628). - ASoC: Intel: sof-rt5682: fix undefined references with Baytrail-only support (bnc#1012628). - media: saa7164: fix remove_proc_entry warning (bnc#1012628). - media: mc-device.c: don't memset __user pointer contents (bnc#1012628). - ice: Check all VFs for MDD activity, don't disable (bnc#1012628). - perf annotate TUI browser: Do not use member from variable within its own initialization (bnc#1012628). - media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap (bnc#1012628). - fscrypt: clean up some BUG_ON()s in block encryption/decryption (bnc#1012628). - media: v4l2-core: fix use-after-free error (bnc#1012628). - media: vim2m: fix two double-free issues (bnc#1012628). - xfrm: Fix xfrm sel prefix length validation (bnc#1012628). - af_key: fix leaks in key_pol_get_resp and dump_sp (bnc#1012628). - signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig (bnc#1012628). - qed: Set the doorbell address correctly (bnc#1012628). - net: hns3: fix for FEC configuration (bnc#1012628). - net: hns3: initialize CPU reverse mapping (bnc#1012628). - net: mvpp2: cls: Extract the RSS context when parsing the ethtool rule (bnc#1012628). - ice: Fix couple of issues in ice_vsi_release (bnc#1012628). - net: stmmac: Prevent missing interrupts when running NAPI (bnc#1012628). - net: stmmac: dwmac4/5: Clear unused address entries (bnc#1012628). - net: stmmac: dwmac1000: Clear unused address entries (bnc#1012628). - crypto: caam - avoid S/G table fetching for AEAD zero-length output (bnc#1012628). - media: venus: firmware: fix leaked of_node references (bnc#1012628). - ice: Gracefully handle reset failure in ice_alloc_vfs() (bnc#1012628). - media: media_device_enum_links32: clean a reserved field (bnc#1012628). - media: vpss: fix a potential NULL pointer dereference (bnc#1012628). - selftests/bpf: adjust verifier scale test (bnc#1012628). - media: marvell-ccic: fix DMA s/g desc number calculation (bnc#1012628). - media: ov7740: avoid invalid framesize setting (bnc#1012628). - crypto: talitos - fix skcipher failure due to wrong output IV (bnc#1012628). - media: spi: IR LED: add missing of table registration (bnc#1012628). - media: dvb: usb: fix use after free in dvb_usb_device_exit (bnc#1012628). - batman-adv: fix for leaked TVLV handler (bnc#1012628). - regmap: debugfs: Fix memory leak in regmap_debugfs_init (bnc#1012628). - ath10k: Fix encoding for protected management frames (bnc#1012628). - ath: DFS JP domain W56 fixed pulse type 3 RADAR detection (bnc#1012628). - wil6210: fix spurious interrupts in 3-msi (bnc#1012628). - ath10k: add peer id check in ath10k_peer_find_by_id (bnc#1012628). - ath6kl: add some bounds checking (bnc#1012628). - wil6210: fix missed MISC mbox interrupt (bnc#1012628). - ath10k: Fix the wrong value of enums for wmi tlv stats id (bnc#1012628). - ath9k: Check for errors when reading SREV register (bnc#1012628). - spi: rockchip: turn down tx dma bursts (bnc#1012628). - ath10k: Do not send probe response template for mesh (bnc#1012628). - wil6210: fix potential out-of-bounds read (bnc#1012628). - ath9k: Don't trust TX status TID number when reporting airtime (bnc#1012628). - ath10k: fix incorrect multicast/broadcast rate setting (bnc#1012628). - ath10k: htt: don't use txdone_fifo with SDIO (bnc#1012628). - ath10k: Check tx_stats before use it (bnc#1012628). - commit f5296b5 - Add kernel module compression support (bsc#1135854) For enabling the kernel module compress, add the item COMPRESS_MODULES="xz" in config.sh, then mkspec will pass it to the spec file. - commit cdf5806 - config: enable PPPoE for kvmsmall (bsc#1133945). - commit 72c928d - rpm/klp-symbols: update to work with kernel >= 5.3 Since mainline commit b7dca6dd1e59 ("kbuild: create *.mod with full directory path and remove MODVERDIR") in v5.3-rc1, *.mod files are created in the build tree rather than in a single directory .tmp_versions ($MODVERDIR). They also do not provide path to the *.ko module file on their first line as the path is the same (except for the suffix). Update klp-symbols script to handle this new layout and format of *.mod files to fix build of 5.3-rc1 and newer kernel. Note: this is a quick band-aid to fix master branch build without risk of breaking any other branch. A more proper cleanup will follow. - commit c32f8e7 ==== kubic-control ==== Version update (0.6.2 -> 0.7.0) Subpackages: kubicctl kubicd - Update to version 0.7.0 - Add multi master support - Update to version 0.6.3 - Unifiy function to reset the master - Cleanup behind kubeadm reset, else kubeadm init will fail - Add support for weave and make it the default pod network ==== libpciaccess ==== Version update (0.15 -> 0.16) - Update to version 0.16 * This release brings a compilation fix on 32-bit arm with newer glibc, and fixes the raw x86 backend's memory mapping to handle writes correctly. ==== libsolv ==== - Add -ffat-lto-objects to $optflags as the package provides static libraries - Remove NO_BRP_STRIP_DEBUG=true as brp-15-strip-debug will not strip debug info for archives ==== metallb ==== Version update (0.7.3 -> 0.8.0) - Update to version 0.8.0 - add PodSecurityPolicy for speaker - speaker now tolerates running on Kubernetes control plane nodes - Removed metallb-pie.patch ==== ncurses ==== Subpackages: libncurses6 ncurses-utils terminfo terminfo-base - Add ncurses patch 20190713 + change reset's behavior for margins to simply clear soft-margins if possible, rather than clearing and then setting them according to the terminal's width (suggested by Thomas Wolff). + correct order of one wbkgd versus start_color call in test/padview.c - Add ncurses patch 20190706 + add domterm -TD + improve comments for recent changes, add alias xterm.js -TD - Add ncurses patch 20190630 + add --with-tic-path and --with-infocmp-path to work around problems building fallback source using pre-6.0 tic/infocmp. + add a check in tic for paired indn/rin + correct a buffer-limit in write_entry.c for systems that use caseless filenames. + add ms-terminal -TD + add vscode, vscode-direct -TD * Adopt patch ncurses-5.9-ibm327x.dif and ncurses-6.1.dif ==== openssh ==== - ssh-askpass: Try a fallback if the other option is not available ==== python-base ==== Subpackages: libpython2_7-1_0 - boo#1141853 (CVE-2018-20852) add CVE-2018-20852-cookie-domain-check.patch fixing http.cookiejar.DefaultPolicy.domain_return_ok which did not correctly validate the domain: it could be tricked into sending cookies to the wrong server. - Skip test_urllib2_localnet that randomly fails in OBS ==== python-certifi ==== Version update (2019.3.9 -> 2019.6.16) - version update to 2019.6.16 * remove Certinomis Root CA ==== python-networkx ==== Version update (2.2 -> 2.3) - Update to version 2.3 Highlights: * Dropped support for Python 2. We are no longer supporting Python 2.7 and we will start changing code to take advantage of Python 3 features we couldn't before. * Added some Moral Graph analysis functions. * Enable matplotlib drawing using curved arrows via connectionstyle parameter. * Remove ticks and axes labels from matplotlib plots. * Two new generators of Harary Graphs. * Added Dual Barabasi-Albert model * Added VoteRank algorithm * Added Equitable coloring algorithms * Added planar layout algorithms * Les Miserables network example * Javascript example update ==== python-oauthlib ==== Version update (3.0.1 -> 3.0.2) - specfile: * be more specific in %files section - update to version 3.0.2: * #650: Fixed space encoding in base string URI used in the signature base string. * #652: Fixed OIDC /token response which wrongly returned "&state=None" * #654: Doc: The value state must not be stored by the AS, only returned in /authorize response. * #656: Fixed OIDC "nonce" checks: raise errors when it's mandatory ==== python-pyzmq ==== Version update (18.0.1 -> 18.0.2) - update to version 18.0.2: * Compatibility with Python 3.8 prerelease by regenerating Cython sources with Cython 0.29.10. * Fix language_level=2 in Cython sources, for compatibility with Cython 0.30 * Show missing path for ENOENT errors on ipc connections. ==== python-requests ==== - Hardcode pytest 3.x series as upstream even in git does not work with newer versions (they pinned the release) ==== python-six ==== - Simplify the pytest call ==== python-urllib3 ==== - Use old pytest 3.x as newer do not work with this release * this will be fixed with next release, just spread among numerous fixes in the git for quick backporting ==== ucode-intel ==== Version update (20190514 -> 20190618) - Updated to 20190618 release (bsc#1111331 CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091) - --- updated platforms ------------------------------------ SNB-E/EN/EP C1/M0 6-2d-6/6d 0000061d->0000061f Xeon E3/E5, Core X SNB-E/EN/EP C2/M1 6-2d-7/6d 00000714->00000718 Xeon E3/E5, Core X ==== vim ==== Version update (8.1.1694 -> 8.1.1741) Subpackages: vim-data-common - Update to version 8.1.1741, fixes the following problems * Cleared/added match highlighting not updated in other window. * Exepath() doesn't work for "bin/cat". * Deleted match highlighting not updated in other window. * Testing lambda with timer is slow. * :args command that outputs one line gives more prompt. * Viminfo support is spread out. * Can't build with tiny features. * The evalfunc.c file is too big. * The man ftplugin leaves an empty buffer behind. * Completion in cmdwin does not work for buffer-local commands. * Command line history not read from viminfo on startup. * Wrong place for mark viminfo support. * Heredoc with trim not properly handled in function. * Wrong place for command line history viminfo support. * Code for viminfo support is spread out. * The eval.txt help file is too big. * MS-Windows: E325 message may use incorrect date format. * Too much overhead checking for CTRL-C while processing text. * Heredoc assignment has no room for new features. * Error when scriptversion is 2 a making a dictionary access. * Build failure with normal features without netbeans interface. * Crash with very long %[] pattern. * Popup too wide when 'showbreak' is set. * Popup menu highlighting does not look good. * Last char in menu popup window highlighted. * Old style comments are wasting space * Emoji characters are seen as word characters for spelling. * Cannot preview a file in a popup window. * Highlighting cursor line only works with popup_menu(). * Signs in number column cause text to be misaligned. * Listener callback called at the wrong moment * Coverity found dead code. * Coverity warns for possibly using a NULL pointer. * Coverity warns for using uninitialized variable. * Coverity warns for possibly using a NULL pointer. * Typo in #ifdef. * Using ~{} for a literal dict is not nice. * C-R C-W does not work after C-G when using 'incsearch'. * Breaking out of loop by checking window pointer is insufficient. * Compiler warning for uninitialized variable. * Appveyor build with MSVC fails puts progress bar in log. * Listener callback called for the wrong buffer. * Highlight_ga can be local instead of global. * Appveyor build with MSVC fails. * Cannot build with MSVC. * MSVC: link command line is too long. * Windows 10: crash when cursor is at bottom of terminal. ==== zstd ==== Version update (1.4.0 -> 1.4.1) - Update to version 1.4.1: * bug: Fix data corruption in niche use cases by @terrelln (#1659) * bug: Fuzz legacy modes, fix uncovered bugs by @terrelln (#1593, #1594, #1595) * bug: Fix out of bounds read by @terrelln (#1590) * perf: Improve decode speed by ~7% @mgrice (#1668) * perf: Slightly improved compression ratio of level 3 and 4 (ZSTD_dfast) by @cyan4973 (#1681) * perf: Slightly faster compression speed when re-using a context by @cyan4973 (#1658) * perf: Improve compression ratio for small windowLog by @cyan4973 (#1624) * perf: Faster compression speed in high compression mode for repetitive data by @terrelln (#1635) * api: Add parameter to generate smaller dictionaries by @tyler-tran (#1656) * cli: Recognize symlinks when built in C99 mode by @felixhandte (#1640) * cli: Expose cpu load indicator for each file on -vv mode by @ephiepark (#1631) * cli: Restrict read permissions on destination files by @chungy (#1644) * cli: zstdgrep: handle -f flag by @felixhandte (#1618) * cli: zstdcat: follow symlinks by @vejnar (#1604) * doc: Remove extra size limit on compressed blocks by @felixhandte (#1689) * doc: Fix typo by @yk-tanigawa (#1633) * doc: Improve documentation on streaming buffer sizes by @cyan4973 (#1629) * build: CMake: support building with LZ4 @leeyoung624 (#1626) * build: CMake: install zstdless and zstdgrep by @leeyoung624 (#1647) * build: CMake: respect existing uninstall target by @j301scott (#1619) * build: Make: skip multithread tests when built without support by @michaelforney (#1620) * build: Make: Fix examples/ test target by @sjnam (#1603) * build: Meson: rename options out of deprecated namespace by @lzutao (#1665) * build: Meson: fix build by @lzutao (#1602) * build: Visual Studio: don't export symbols in static lib by @scharan (#1650) * build: Visual Studio: fix linking by @absotively (#1639) * build: Fix MinGW-W64 build by @myzhang1029 (#1600) * misc: Expand decodecorpus coverage by @ephiepark (#1664) -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20190726 released!
by Richard Brown 28 Jul '19

28 Jul '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: cni (0.7.0 -> 0.7.1) curl (7.65.1 -> 7.65.3) kernel-source (5.2.1 -> 5.2.2) podman (1.4.2 -> 1.4.4) systemd === Details === ==== cni ==== Version update (0.7.0 -> 0.7.1) - Update to version 0.7.1: * Library changes: + invoke : ensure custom envs of CNIArgs are prepended to process envs + add GetNetworkListCachedResult to CNI interface + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance * Documentation & Convention changes: + Update cnitool documentation for spec v0.4.0 + Add cni-route-override to CNI plugin list * Build and test changes: + Release: bump go to v1.12 ==== curl ==== Version update (7.65.1 -> 7.65.3) Subpackages: libcurl4 - Update to 7.65.3 * progress: make the progress meter appear again - Update to 7.65.2 * Bugfixes: - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH - CMake: Fix finding Brotli on case-sensitive file systems - CURLOPT_RANGE.3: Caution against using it for HTTP PUT - CURLOPT_SEEKDATA.3: fix variable name - bindlocal: detect and avoid IP version mismatches in bind() - build: fix Codacy warnings - c-ares: honor port numbers in CURLOPT_DNS_SERVERS - config-os400: add getpeername and getsockname defines - configure: --disable-progress-meter - configure: fix --disable-code-coverage - configure: more --disable switches to toggle off individual features - configure: remove CURL_DISABLE_TLS_SRP - conn_maxage: move the check to prune_dead_connections() - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds - docs: Explain behavior change in --tlsv1. options since 7.54 - docs: Fix links to OpenSSL docs - docs: fix string suggesting HTTP/2 is not the default - headers: Remove no longer exported functions - http2: call done_sending on end of upload - http2: don't call stream-close on already closed streams - http2: remove CURL_DISABLE_TYPECHECK define - http: allow overriding timecond with custom header - http: clarify header buffer size calculation - krb5: fix compiler warning - lib: Use UTF-8 encoding in comments - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS - multi: enable multiplexing by default (again) - multi: fix the transfer hashes in the socket hash entries - multi: make sure 'data' can present in several sockhash entries - netrc: Return the correct error code when out of memory - nss: don't set unused parameter - nss: inspect returnvalue of token check - nss: only cache valid CRL entries - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined - openssl: fix pubkey/signature algorithm detection in certinfo - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support - quote.d: asterisk prefix works for SFTP as well - runtests: keep logfiles around by default - runtests: report single test time + total duration - test1165: verify that CURL_DISABLE_ symbols are in sync - test1521: adapt to SLISTPOINT - test1523: test CURLOPT_LOW_SPEED_LIMIT - test153: fix content-length to avoid occasional hang - test188/189: fix Content-Length - tests: have runtests figure out disabled features - tests: support non-localhost HOSTIP for dict/smb servers - tests: update fixed IP for hostip/clientip split - tool_cb_prg: Fix integer overflow in progress bar - typecheck: CURLOPT_CONNECT_TO takes an slist too - typecheck: add 3 missing strings and a callback data pointer - unit1654: cleanup on memory failure - unpause: trigger a timeout for event-based transfers - url: Fix CURLOPT_MAXAGE_CONN time comparison - Rebased patch curl-use_OPENSSL_config.patch - Disable new added failing test1165 ==== kernel-source ==== Version update (5.2.1 -> 5.2.2) Subpackages: kernel-debug kernel-default - Revert "netfilter: conntrack: remove helper hook again" (http://lkml.kernel.org/r/20190718092128.zbw4qappq6jsb4ja@breakpoint.cc) - commit 8e9a006 - Linux 5.2.2 (bnc#1012628). - x86/entry/32: Fix ENDPROC of common_spurious (bnc#1012628). - crypto/NX: Set receive window credits to max number of CRBs in RxFIFO (bnc#1012628). - crypto: talitos - fix hash on SEC1 (bnc#1012628). - crypto: talitos - move struct talitos_edesc into talitos.h (bnc#1012628). - s390/qdio: don't touch the dsci in tiqdio_add_input_queues() (bnc#1012628). - s390/qdio: (re-)initialize tiqdio list entries (bnc#1012628). - s390: fix stfle zero padding (bnc#1012628). - s390/ipl: Fix detection of has_secure attribute (bnc#1012628). - ARC: hide unused function unw_hdr_alloc (bnc#1012628). - x86/irq: Seperate unused system vectors from spurious entry again (bnc#1012628). - x86/irq: Handle spurious interrupt after shutdown gracefully (bnc#1012628). - x86/ioapic: Implement irq_get_irqchip_state() callback (bnc#1012628). - genirq: Add optional hardware synchronization for shutdown (bnc#1012628). - genirq: Fix misleading synchronize_irq() documentation (bnc#1012628). - genirq: Delay deactivation in free_irq() (bnc#1012628). - firmware: improve LSM/IMA security behaviour (bnc#1012628). - drivers: base: cacheinfo: Ensure cpu hotplug work is done before Intel RDT (bnc#1012628). - nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header (bnc#1012628). - Input: synaptics - enable SMBUS on T480 thinkpad trackpad (bnc#1012628). - e1000e: start network tx queue only when link is up (bnc#1012628). - Revert "e1000e: fix cyclic resets at link up with active tx" (bnc#1012628). - commit 93f0a54 ==== podman ==== Version update (1.4.2 -> 1.4.4) Subpackages: podman-cni-config - Update libpod.conf to use correct infra_command - Update libpod.conf to use better versioned pause container - Update libpod.conf to use official kubic pause container - Update libpod.conf to match latest features set: detach_keys, lock_type, runtime_supports_json - Add podman-remote varlink client - Update podman to v1.4.4 * Features - Podman now has greatly improved support for containers using multiple OCI runtimes. Containers now remember if they were created with a different runtime using --runtime and will always use that runtime - The cached and delegated options for volume mounts are now allowed for Docker compatability (#3340) - The podman diff command now supports the --latest flag * Bugfixes - Fixed a bug where rootless Podman would attempt to use the entire root configuration if no rootless configuration was present for the user, breaking rootless Podman for new installations - Fixed a bug where rootless Podman's pause process would block SIGTERM, preventing graceful system shutdown and hanging until the system's init send SIGKILL - Fixed a bug where running Podman as root with sudo -E would not work after running rootless Podman at least once - Fixed a bug where options for tmpfs volumes added with the --tmpfs flag were being ignored - Fixed a bug where images with no layers could not properly be displayed and removed by Podman - Fixed a bug where locks were not properly freed on failure to create a container or pod - Fixed a bug where podman cp on a single file would create a directory at the target and place the file in it (#3384) - Fixed a bug where podman inspect --format '{{.Mounts}}' would print a hexadecimal address instead of a container's mounts - Fixed a bug where rootless Podman would not add an entry to container's /etc/hosts files for their own hostname (#3405) - Fixed a bug where podman ps --sync would segfault (#3411) - Fixed a bug where podman generate kube would produce an invalid ports configuration (#3408) * Misc - Updated containers/storage to v1.12.13 - Podman now performs much better on systems with heavy I/O load - The --cgroup-manager flag to podman now shows the correct default setting in help if the default was overridden by libpod.conf - For backwards compatability, setting --log-driver=json-file in podman run is now supported as an alias for --log-driver=k8s-file. This is considered deprecated, and json-file will be moved to a new implementation in the future ([#3363](https://github.com/containers/libpo\ d/issues/3363)) - Podman's default libpod.conf file now allows the crun OCI runtime to be used if it is installed ==== systemd ==== Subpackages: libsystemd0 libudev1 systemd-logger systemd-sysvinit udev - Import commit 0f9271c1336c5c9055e75389732a44745d796851 (changes from v242-stable) 07f0549ffe network: do not send ipv6 token to kernel 9d34e79ae8 systemd-mount: don't check for non-normalized WHAT for network FS 5af677680c core: set fs.file-max sysctl to LONG_MAX rather than ULONG_MAX (bsc#1142099) 29dda7597a random-util: eat up bad RDRAND values seen on AMD CPUs eb6c17c178 util-lib: fix a typo in rdrand 829c20dc8e random-util: rename "err" to "success" 5442366fbf man: rework the description of Aliases and .wants/.requires directories ae71c6f634 docs: typo in arg name replace-irreversible -> replace-irreversibly 09774a5fcb meson: make nologin path build time configurable 69ffeeb0b1 man: add note about systemctl stop return value 4cf14b5513 shared/conf-parser: say "key name" not "lvalue", add dot 4481ca7f86 shared/conf-parser: emit a nicer warning for something like "======" 46f3db894b shared/conf-parser: be nice and ignore lines without "=" 7d928995f7 nspawn: fix memleak in argument parsing 7727e6c0ae resolve: fix memleak 7f32a81976 journal: properly read unaligned le64 integers fa419099e5 activate: move array allocation to heap 815a9fef2a systemctl: print non-elapsing timers as "n/a" not "(null)" a4fc3c88f1 factory: include pam_keyinit.so in PAM factory configuration a453d63315 factory: add comment to PAM file, explaining that the defaults are not useful d9a5a70a59 factory: tighten PAM configuration 5e2d3bf80b test: make sure colors don't confuse our test 5fe3be1334 wait-online: change log level c49b6959d5 systemctl: emit warning when we get an invalid process entry from pid1 and continue 3c9f43eb03 systemctl: do not suggest passing --all if the user passed --state= 5964d1474e man: offline-updates: make dependence on system-update.target explicit a04dd26e03 alloc-util: drop _alloc_ decorator from memdup_suffix0() 7c46a694ca man: add example for setting multiple properties at once 1d72789271 man: CPUShares= is so 2015 45da304673 man: document that WakeSystem= requires privs bed58a06e4 man: document that "systemd-analyze blame/critical-chain" is not useful to track down job latency c5461f31b3 man: be more explicit that Type=oneshot services are not "active" after starting 455ee07abe man: document that the supplementary groups list is initialized from User='s database entry 5f0cb2616a alloc-util: drop _alloc_(2, 3) decorator from memdup_suffix0_multiply() 7bc336794d generator: downgrade Requires= ? Wants= of fsck from /usr mount unit 66465c4381 systemctl: allow "cat" on units with bad settings ca937b49da pid1: fix serialization/deserialization of commmands with spaces 4bb3113023 growfs: call crypt_set_debug_level() correctly, skip if not needed 0db716771e cryptsetup: enable libcryptsetup debug logging if we want it c8b9b3956f cryptsetup: set libcryptsetup global log callback too 679b3f6b7f basic/log: fix SYSTEMD_LOG_* parsing error messages 8d6b5158aa units: add SystemCallErrorNumber=EPERM to systemd-portabled.service 6681fcd445 network: fix the initial value of the counter for brvlan 853ec5f458 man: Add some notes about variable $prefix for StateDirectory= e6d23358e9 sd-netlink: fix inverted log message 6feb862407 blockdev: filter out invalid block devices early 9f7c0dbc75 blockdev-util: propagate actual error 3f5355bcb9 man: document tmpfiles.d/ user/group resolvability needs c15b92cd98 man: fix wrong udev property name 9768a900d6 meson: drop duplicated source 15194f22ed cryptsetup-generator: fix luks-* entry parsing from crypttab c2475390b4 core: skip whitespace after "|" and "!" in the condition parser fdc754aeb7 shared/condition: fix printing of ConditionNull= 572385e135 test: add testcase for issue #12883 9aa1edddb0 conf-parser: fix continuation handling 8fbc72f45f networkd: fix link_up() (#12505) - State directory of systemd-timesync might become inaccessible after upgrading to v240+ (bsc#1137341) This happens for users who had previously used systemd-timesync with DynamicUser=true, ie the ones who upgraded from a systemd version between v235 and v239 to systemd v240 and later (v240 was the version where DynamicUser was switched back to OFF). -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20190726 released!
by Richard Brown 28 Jul '19

28 Jul '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: cni (0.7.0 -> 0.7.1) cri-o curl (7.65.1 -> 7.65.3) flannel kernel-source (5.2.1 -> 5.2.2) kubernetes podman (1.4.2 -> 1.4.4) rook (1.0.0+git1697.ga265cdfd -> 1.0.0+git1783.g7a48482f) salt systemd === Details === ==== cni ==== Version update (0.7.0 -> 0.7.1) - Update to version 0.7.1: * Library changes: + invoke : ensure custom envs of CNIArgs are prepended to process envs + add GetNetworkListCachedResult to CNI interface + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance * Documentation & Convention changes: + Update cnitool documentation for spec v0.4.0 + Add cni-route-override to CNI plugin list * Build and test changes: + Release: bump go to v1.12 ==== cri-o ==== Subpackages: cri-o-kubeadm-criconfig - Update crio.conf to use correct pause_command - Update crio.conf to use better versioned pause container - Update crio.conf to use official kubic pause container ==== curl ==== Version update (7.65.1 -> 7.65.3) Subpackages: libcurl4 - Update to 7.65.3 * progress: make the progress meter appear again - Update to 7.65.2 * Bugfixes: - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH - CMake: Fix finding Brotli on case-sensitive file systems - CURLOPT_RANGE.3: Caution against using it for HTTP PUT - CURLOPT_SEEKDATA.3: fix variable name - bindlocal: detect and avoid IP version mismatches in bind() - build: fix Codacy warnings - c-ares: honor port numbers in CURLOPT_DNS_SERVERS - config-os400: add getpeername and getsockname defines - configure: --disable-progress-meter - configure: fix --disable-code-coverage - configure: more --disable switches to toggle off individual features - configure: remove CURL_DISABLE_TLS_SRP - conn_maxage: move the check to prune_dead_connections() - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds - docs: Explain behavior change in --tlsv1. options since 7.54 - docs: Fix links to OpenSSL docs - docs: fix string suggesting HTTP/2 is not the default - headers: Remove no longer exported functions - http2: call done_sending on end of upload - http2: don't call stream-close on already closed streams - http2: remove CURL_DISABLE_TYPECHECK define - http: allow overriding timecond with custom header - http: clarify header buffer size calculation - krb5: fix compiler warning - lib: Use UTF-8 encoding in comments - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS - multi: enable multiplexing by default (again) - multi: fix the transfer hashes in the socket hash entries - multi: make sure 'data' can present in several sockhash entries - netrc: Return the correct error code when out of memory - nss: don't set unused parameter - nss: inspect returnvalue of token check - nss: only cache valid CRL entries - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined - openssl: fix pubkey/signature algorithm detection in certinfo - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support - quote.d: asterisk prefix works for SFTP as well - runtests: keep logfiles around by default - runtests: report single test time + total duration - test1165: verify that CURL_DISABLE_ symbols are in sync - test1521: adapt to SLISTPOINT - test1523: test CURLOPT_LOW_SPEED_LIMIT - test153: fix content-length to avoid occasional hang - test188/189: fix Content-Length - tests: have runtests figure out disabled features - tests: support non-localhost HOSTIP for dict/smb servers - tests: update fixed IP for hostip/clientip split - tool_cb_prg: Fix integer overflow in progress bar - typecheck: CURLOPT_CONNECT_TO takes an slist too - typecheck: add 3 missing strings and a callback data pointer - unit1654: cleanup on memory failure - unpause: trigger a timeout for event-based transfers - url: Fix CURLOPT_MAXAGE_CONN time comparison - Rebased patch curl-use_OPENSSL_config.patch - Disable new added failing test1165 ==== flannel ==== - Set cni version in flannel manifest - Use current kube-flannel.yaml from git to fix DNS problems ==== kernel-source ==== Version update (5.2.1 -> 5.2.2) Subpackages: kernel-debug kernel-default - Revert "netfilter: conntrack: remove helper hook again" (http://lkml.kernel.org/r/20190718092128.zbw4qappq6jsb4ja@breakpoint.cc) - commit 8e9a006 - Linux 5.2.2 (bnc#1012628). - x86/entry/32: Fix ENDPROC of common_spurious (bnc#1012628). - crypto/NX: Set receive window credits to max number of CRBs in RxFIFO (bnc#1012628). - crypto: talitos - fix hash on SEC1 (bnc#1012628). - crypto: talitos - move struct talitos_edesc into talitos.h (bnc#1012628). - s390/qdio: don't touch the dsci in tiqdio_add_input_queues() (bnc#1012628). - s390/qdio: (re-)initialize tiqdio list entries (bnc#1012628). - s390: fix stfle zero padding (bnc#1012628). - s390/ipl: Fix detection of has_secure attribute (bnc#1012628). - ARC: hide unused function unw_hdr_alloc (bnc#1012628). - x86/irq: Seperate unused system vectors from spurious entry again (bnc#1012628). - x86/irq: Handle spurious interrupt after shutdown gracefully (bnc#1012628). - x86/ioapic: Implement irq_get_irqchip_state() callback (bnc#1012628). - genirq: Add optional hardware synchronization for shutdown (bnc#1012628). - genirq: Fix misleading synchronize_irq() documentation (bnc#1012628). - genirq: Delay deactivation in free_irq() (bnc#1012628). - firmware: improve LSM/IMA security behaviour (bnc#1012628). - drivers: base: cacheinfo: Ensure cpu hotplug work is done before Intel RDT (bnc#1012628). - nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header (bnc#1012628). - Input: synaptics - enable SMBUS on T480 thinkpad trackpad (bnc#1012628). - e1000e: start network tx queue only when link is up (bnc#1012628). - Revert "e1000e: fix cyclic resets at link up with active tx" (bnc#1012628). - commit 93f0a54 ==== kubernetes ==== Subpackages: kubernetes-client kubernetes-kubeadm kubernetes-kubelet - Don't create rckubeadm symlink, we don't have a kubeadm service - kubeadm does not need kubernetes-common - Don't build hyperkube binary on openSUSE, we need single binaries for the containerized control plane. ==== podman ==== Version update (1.4.2 -> 1.4.4) Subpackages: podman-cni-config - Update libpod.conf to use correct infra_command - Update libpod.conf to use better versioned pause container - Update libpod.conf to use official kubic pause container - Update libpod.conf to match latest features set: detach_keys, lock_type, runtime_supports_json - Add podman-remote varlink client - Update podman to v1.4.4 * Features - Podman now has greatly improved support for containers using multiple OCI runtimes. Containers now remember if they were created with a different runtime using --runtime and will always use that runtime - The cached and delegated options for volume mounts are now allowed for Docker compatability (#3340) - The podman diff command now supports the --latest flag * Bugfixes - Fixed a bug where rootless Podman would attempt to use the entire root configuration if no rootless configuration was present for the user, breaking rootless Podman for new installations - Fixed a bug where rootless Podman's pause process would block SIGTERM, preventing graceful system shutdown and hanging until the system's init send SIGKILL - Fixed a bug where running Podman as root with sudo -E would not work after running rootless Podman at least once - Fixed a bug where options for tmpfs volumes added with the --tmpfs flag were being ignored - Fixed a bug where images with no layers could not properly be displayed and removed by Podman - Fixed a bug where locks were not properly freed on failure to create a container or pod - Fixed a bug where podman cp on a single file would create a directory at the target and place the file in it (#3384) - Fixed a bug where podman inspect --format '{{.Mounts}}' would print a hexadecimal address instead of a container's mounts - Fixed a bug where rootless Podman would not add an entry to container's /etc/hosts files for their own hostname (#3405) - Fixed a bug where podman ps --sync would segfault (#3411) - Fixed a bug where podman generate kube would produce an invalid ports configuration (#3408) * Misc - Updated containers/storage to v1.12.13 - Podman now performs much better on systems with heavy I/O load - The --cgroup-manager flag to podman now shows the correct default setting in help if the default was overridden by libpod.conf - For backwards compatability, setting --log-driver=json-file in podman run is now supported as an alias for --log-driver=k8s-file. This is considered deprecated, and json-file will be moved to a new implementation in the future ([#3363](https://github.com/containers/libpo\ d/issues/3363)) - Podman's default libpod.conf file now allows the crun OCI runtime to be used if it is installed ==== rook ==== Version update (1.0.0+git1697.ga265cdfd -> 1.0.0+git1783.g7a48482f) - Correct toolbox location in manifest files - Update Rook to commit 7a48482f5cd92397eef068d097ad233739ceae06 + ceph: run ceph processes with the 'ceph' user + Correct typo about skipVolumeForDirectory's code comment + Fix: topologyAware does not pick up failure domains. + Correct typo about skipVolumeForDirectory's code comment - Update Rook to commit 0141cfea50a7f80ff1ee67aa8cc7ad28edc79a64 + OSD startup on SDN for error "Cannot assign requested address" + Change default frontend on nautilus to beast + RGW daemon updates: ~ Remove support for AllNodes where we would deploy one rgw per node on all the nodes ~ Each rgw deployed has its own cephx key ~ Upgrades will automatically transition these changes to the rgw daemons + Correct --ms-learn-addr-from-peer=false argument for ceph-osd + When updating the CephCluster CR to run unsupported octopus, fix operator panic + Add metrics for the flexvolume driver + Set the fully qualified apiVersion on the OwnerReferences for cleanup on OpenShift + Stop enforcing crush tunables for octopus warning + Apply the osd nautilus flag for upgrade + RGW: Set proper port syntax for beast in nautilus deployments + Stop creating initial crushmap to avoid incorrect crush map warning + Use correct rounding of PV size for binding of PVCs (for example G or Gi) - Add psp to common.yaml - Use ceph-base pattern instead of packages ==== salt ==== Subpackages: python3-salt salt-master salt-minion - virt.volume_infos: don't raise an error if there is no VM - Added: * virt-1.volume_infos-fix-for-single-vm.patch - Prevent ansiblegate unit tests to fail on Ubuntu - Added: * prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch ==== systemd ==== Subpackages: libsystemd0 libudev1 systemd-logger systemd-sysvinit udev - Import commit 0f9271c1336c5c9055e75389732a44745d796851 (changes from v242-stable) 07f0549ffe network: do not send ipv6 token to kernel 9d34e79ae8 systemd-mount: don't check for non-normalized WHAT for network FS 5af677680c core: set fs.file-max sysctl to LONG_MAX rather than ULONG_MAX (bsc#1142099) 29dda7597a random-util: eat up bad RDRAND values seen on AMD CPUs eb6c17c178 util-lib: fix a typo in rdrand 829c20dc8e random-util: rename "err" to "success" 5442366fbf man: rework the description of Aliases and .wants/.requires directories ae71c6f634 docs: typo in arg name replace-irreversible -> replace-irreversibly 09774a5fcb meson: make nologin path build time configurable 69ffeeb0b1 man: add note about systemctl stop return value 4cf14b5513 shared/conf-parser: say "key name" not "lvalue", add dot 4481ca7f86 shared/conf-parser: emit a nicer warning for something like "======" 46f3db894b shared/conf-parser: be nice and ignore lines without "=" 7d928995f7 nspawn: fix memleak in argument parsing 7727e6c0ae resolve: fix memleak 7f32a81976 journal: properly read unaligned le64 integers fa419099e5 activate: move array allocation to heap 815a9fef2a systemctl: print non-elapsing timers as "n/a" not "(null)" a4fc3c88f1 factory: include pam_keyinit.so in PAM factory configuration a453d63315 factory: add comment to PAM file, explaining that the defaults are not useful d9a5a70a59 factory: tighten PAM configuration 5e2d3bf80b test: make sure colors don't confuse our test 5fe3be1334 wait-online: change log level c49b6959d5 systemctl: emit warning when we get an invalid process entry from pid1 and continue 3c9f43eb03 systemctl: do not suggest passing --all if the user passed --state= 5964d1474e man: offline-updates: make dependence on system-update.target explicit a04dd26e03 alloc-util: drop _alloc_ decorator from memdup_suffix0() 7c46a694ca man: add example for setting multiple properties at once 1d72789271 man: CPUShares= is so 2015 45da304673 man: document that WakeSystem= requires privs bed58a06e4 man: document that "systemd-analyze blame/critical-chain" is not useful to track down job latency c5461f31b3 man: be more explicit that Type=oneshot services are not "active" after starting 455ee07abe man: document that the supplementary groups list is initialized from User='s database entry 5f0cb2616a alloc-util: drop _alloc_(2, 3) decorator from memdup_suffix0_multiply() 7bc336794d generator: downgrade Requires= ? Wants= of fsck from /usr mount unit 66465c4381 systemctl: allow "cat" on units with bad settings ca937b49da pid1: fix serialization/deserialization of commmands with spaces 4bb3113023 growfs: call crypt_set_debug_level() correctly, skip if not needed 0db716771e cryptsetup: enable libcryptsetup debug logging if we want it c8b9b3956f cryptsetup: set libcryptsetup global log callback too 679b3f6b7f basic/log: fix SYSTEMD_LOG_* parsing error messages 8d6b5158aa units: add SystemCallErrorNumber=EPERM to systemd-portabled.service 6681fcd445 network: fix the initial value of the counter for brvlan 853ec5f458 man: Add some notes about variable $prefix for StateDirectory= e6d23358e9 sd-netlink: fix inverted log message 6feb862407 blockdev: filter out invalid block devices early 9f7c0dbc75 blockdev-util: propagate actual error 3f5355bcb9 man: document tmpfiles.d/ user/group resolvability needs c15b92cd98 man: fix wrong udev property name 9768a900d6 meson: drop duplicated source 15194f22ed cryptsetup-generator: fix luks-* entry parsing from crypttab c2475390b4 core: skip whitespace after "|" and "!" in the condition parser fdc754aeb7 shared/condition: fix printing of ConditionNull= 572385e135 test: add testcase for issue #12883 9aa1edddb0 conf-parser: fix continuation handling 8fbc72f45f networkd: fix link_up() (#12505) - State directory of systemd-timesync might become inaccessible after upgrading to v240+ (bsc#1137341) This happens for users who had previously used systemd-timesync with DynamicUser=true, ie the ones who upgraded from a systemd version between v235 and v239 to systemd v240 and later (v240 was the version where DynamicUser was switched back to OFF). -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20190724 released!
by Richard Brown 26 Jul '19

26 Jul '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: gcc9 (9.1.1+r273003 -> 9.1.1+r273734) === Details === ==== gcc9 ==== Version update (9.1.1+r273003 -> 9.1.1+r273734) Subpackages: libgcc_s1 libstdc++6 - Update to gcc-9-branch head (r273734). * Includes fix for opencv3 build with LTO. [gcc#91231] - Update to gcc-9-branch head (r273566). * Includes fix for vector shift miscompilation on s390. [bsc#1141897] -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20190724 released!
by Richard Brown 26 Jul '19

26 Jul '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: gcc9 (9.1.1+r273003 -> 9.1.1+r273734) === Details === ==== gcc9 ==== Version update (9.1.1+r273003 -> 9.1.1+r273734) Subpackages: libgcc_s1 libstdc++6 - Update to gcc-9-branch head (r273734). * Includes fix for opencv3 build with LTO. [gcc#91231] - Update to gcc-9-branch head (r273566). * Includes fix for vector shift miscompilation on s390. [bsc#1141897] -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20190723 released!
by Richard Brown 25 Jul '19

25 Jul '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: diffutils grub2 hwinfo (21.66 -> 21.67) kernel-source (5.1.16 -> 5.2.1) libcontainers-common mozilla-nss (3.43 -> 3.44.1) open-iscsi parted transactional-update (2.14.2 -> 2.15) === Details === ==== diffutils ==== - ignore make check error for diff --color as tracked by https://debbugs.gnu.org/cgi/bugreport.cgi?bug=36488 ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-x86_64-efi - Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229). ==== hwinfo ==== Version update (21.66 -> 21.67) - merge gh#openSUSE/hwinfo#81 - fix DASD detection (bsc#1136475) - don't include bcache devices - 21.67 ==== kernel-source ==== Version update (5.1.16 -> 5.2.1) Subpackages: kernel-debug kernel-default - Linux 5.2.1 (bnc#1012628). - staging: rtl8712: reduce stack usage, again (bnc#1012628). - staging: bcm2835-camera: Handle empty EOS buffers whilst streaming (bnc#1012628). - staging: bcm2835-camera: Remove check of the number of buffers supplied (bnc#1012628). - staging: bcm2835-camera: Ensure all buffers are returned on disable (bnc#1012628). - staging: bcm2835-camera: Replace spinlock protecting context_map with mutex (bnc#1012628). - staging: fsl-dpaa2/ethsw: fix memory leak of switchdev_work (bnc#1012628). - staging: vchiq: revert "switch to wait_for_completion_killable" (bnc#1012628). - staging: vchiq: make wait events interruptible (bnc#1012628). - staging: vchiq_2835_arm: revert "quit using custom down_interruptible()" (bnc#1012628). - VMCI: Fix integer overflow in VMCI handle arrays (bnc#1012628). - Revert "x86/build: Move _etext to actual end of .text" (bnc#1012628). - carl9170: fix misuse of device driver API (bnc#1012628). - coresight: tmc-etf: Do not call smp_processor_id from preemptible (bnc#1012628). - coresight: tmc-etr: alloc_perf_buf: Do not call smp_processor_id from preemptible (bnc#1012628). - coresight: tmc-etr: Do not call smp_processor_id() from preemptible (bnc#1012628). - coresight: etb10: Do not call smp_processor_id from preemptible (bnc#1012628). - coresight: Potential uninitialized variable in probe() (bnc#1012628). - iio: adc: stm32-adc: add missing vdda-supply (bnc#1012628). - binder: return errors from buffer copy functions (bnc#1012628). - binder: fix memory leak in error path (bnc#1012628). - lkdtm: support llvm-objcopy (bnc#1012628). - HID: Add another Primax PIXART OEM mouse quirk (bnc#1012628). - staging: mt7621-pci: fix PCIE_FTS_NUM_LO macro (bnc#1012628). - staging: comedi: amplc_pci230: fix null pointer deref on interrupt (bnc#1012628). - staging: bcm2835-camera: Restore return behavior of ctrl_set_bitrate() (bnc#1012628). - staging: wilc1000: fix error path cleanup in wilc_wlan_initialize() (bnc#1012628). - staging: comedi: dt282x: fix a null pointer deref on interrupt (bnc#1012628). - p54: fix crash during initialization (bnc#1012628). - drivers/usb/typec/tps6598x.c: fix 4CC cmd write (bnc#1012628). - drivers/usb/typec/tps6598x.c: fix portinfo width (bnc#1012628). - usb: renesas_usbhs: add a workaround for a race condition of workqueue (bnc#1012628). - usb: dwc2: use a longer AHB idle timeout in dwc2_core_reset() (bnc#1012628). - usb: gadget: ether: Fix race between gether_disconnect and rx_submit (bnc#1012628). - usb: gadget: f_fs: data_len used before properly set (bnc#1012628). - p54usb: Fix race between disconnect and firmware loading (bnc#1012628). - Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled" (bnc#1012628). - USB: serial: option: add support for GosunCn ME3630 RNDIS mode (bnc#1012628). - USB: serial: ftdi_sio: add ID for isodebug v1 (bnc#1012628). - mwifiex: Don't abort on small, spec-compliant vendor IEs (bnc#1012628). - Documentation/admin: Remove the vsyscall=native documentation (bnc#1012628). - Documentation: Add section about CPU vulnerabilities for Spectre (bnc#1012628). - x86/tls: Fix possible spectre-v1 in do_get_thread_area() (bnc#1012628). - x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg() (bnc#1012628). - perf header: Assign proper ff->ph in perf_event__synthesize_features() (bnc#1012628). - perf thread-stack: Fix thread stack return from kernel for kernel-only case (bnc#1012628). - perf pmu: Fix uncore PMU alias list for ARM64 (bnc#1012628). - perf intel-pt: Fix itrace defaults for perf script intel-pt documentation (bnc#1012628). - perf auxtrace: Fix itrace defaults for perf script (bnc#1012628). - perf intel-pt: Fix itrace defaults for perf script (bnc#1012628). - block, bfq: NULL out the bic when it's no longer valid (bnc#1012628). - block: fix .bi_size overflow (bnc#1012628). - tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations (bnc#1012628). - tpm: Actually fail on TPM errors during "get random" (bnc#1012628). - ALSA: hda/realtek - Headphone Mic can't record after S3 (bnc#1012628). - ALSA: usb-audio: Fix parse of UAC2 Extension Units (bnc#1012628). - media: stv0297: fix frequency range limit (bnc#1012628). - udf: Fix incorrect final NOT_ALLOCATED (hole) extent length (bnc#1012628). - fscrypt: don't set policy for a dead directory (bnc#1012628). - crypto: talitos - rename alternative AEAD algos (bnc#1012628). - crypto: lrw - use correct alignmask (bnc#1012628). - commit 51ca500 - net: bpfilter: print umh messages to /dev/kmsg (bsc#1140221). - commit 139acc9 - series.conf: sync with master - commit 80522d2 - rpm/kernel-binary.spec.in: handle modules.builtin.modinfo It was added in 5.2. - commit eb88df3 - Disable CONFIG_OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW in config (bsc#1140494) - commit 8d950e4 - Delete patches.suse/Revert-ovl-detect-overlapping-layers.patch. - Delete patches.suse/Revert-ovl-don-t-fail-with-disconnected-lower-NFS.patch. - Delete patches.suse/Revert-ovl-fix-bogus-Wmaybe-unitialized-warning.patch. transactional-update was fixed, see sr#714110. - commit 927afc9 - Update to 5.2 final - Eliminated 1 patch - commit b36439f - Refresh tpm: tpm_ibm_vtpm: Fix unallocated banks (boo#1139244). - commit 99f9469 - config: align CONFIG_PHYSICAL_START and CONFIG_PHYSICAL_ALIGN to default values As suggested in bsc#1067593, our kconfig keeps the old default values while the upstream took different (actually swapped) values for x86 CONFIG_PHYSICAL_START and CONFIG_PHYSICAL_ALIGN. Let's follow the upstream default now. - commit baa2434 - Rename patches.suse/[PATCH]_tpm:_fixes_uninitialized_allocated_banks_for_IBM_vtpm_driver to patches.suse/tpm-fixes-uninitialized-allocated-banks-for-IBM-vtpm-driver.patch Let's not risk some tool somewhere does not handle special characters correctly. - commit 8a3fff9 - tpm: fixes uninitialized allocated banks for IBM vtpm driver (boo#1139244). - Delete patches.suse/Revert-tpm-pass-an-array-of-tpm_extend_digest-struct.patch. - commit 43ec0a5 ==== libcontainers-common ==== - Update to libpod v1.4.4 - Fixed a bug where rootless Podman would attempt to use the entire root configuration if no rootless configuration was present for the user, breaking rootless Podman for new installations - Fixed a bug where rootless Podman's pause process would block SIGTERM, preventing graceful system shutdown and hanging until the system's init send SIGKILL - Fixed a bug where running Podman as root with sudo -E would not work after running rootless Podman at least once - Fixed a bug where options for tmpfs volumes added with the - -tmpfs flag were being ignored - Fixed a bug where images with no layers could not properly be displayed and removed by Podman - Fixed a bug where locks were not properly freed on failure to create a container or pod - Podman now has greatly improved support for containers using multiple OCI runtimes. Containers now remember if they were created with a different runtime using --runtime and will always use that runtime - The cached and delegated options for volume mounts are now allowed for Docker compatability (#3340) - The podman diff command now supports the --latest flag - Fixed a bug where podman cp on a single file would create a directory at the target and place the file in it (#3384) - Fixed a bug where podman inspect --format '{{.Mounts}}' would print a hexadecimal address instead of a container's mounts - Fixed a bug where rootless Podman would not add an entry to container's /etc/hosts files for their own hostname (#3405) - Fixed a bug where podman ps --sync would segfault (#3411) - Fixed a bug where podman generate kube would produce an invalid ports configuration (#3408) - Podman now performs much better on systems with heavy I/O load - The --cgroup-manager flag to podman now shows the correct default setting in help if the default was overridden by libpod.conf - For backwards compatability, setting --log-driver=json-file in podman run is now supported as an alias for - -log-driver=k8s-file. This is considered deprecated, and json-file will be moved to a new implementation in the future ([#3363](https://github.com/containers/libpod/issues/3363)) - Podman's default libpod.conf file now allows the crun OCI runtime to be used if it is installed - Fixed a bug where Podman could not run containers using an older version of Systemd as init (#3295) - Updated vendored Buildah to v1.9.0 to resolve a critical bug with Dockerfile RUN instructions - The error message for running podman kill on containers that are not running has been improved - The Podman remote client can now log to a file if syslog is not available - The MacOS dmg file is experimental, use at your own risk. - The podman exec command now sets its error code differently based on whether the container does not exist, and the command in the container does not exist - The podman inspect command on containers now outputs Mounts JSON that matches that of docker inspect, only including user-specified volumes and differentiating bind mounts and named volumes - The podman inspect command now reports the path to a container's OCI spec with the OCIConfigPath key (only included when the container is initialized or running) - The podman run --mount command now supports the bind-nonrecursive option for bind mounts (#3314) - Fixed a bug where podman play kube would fail to create containers due to an unspecified log driver - Fixed a bug where Podman would fail to build with musl libc (#3284) - Fixed a bug where rootless Podman using slirp4netns networking in an environment with no nameservers on the host other than localhost would result in nonfunctional networking (#3277) - Fixed a bug where podman import would not properly set environment variables, discarding their values and retaining only keys - Fixed a bug where Podman would fail to run when built with Apparmor support but run on systems without the Apparmor kernel module loaded (#3331) - Remote Podman will now default the username it uses to log in to remote systems to the username of the current user - Podman now uses JSON logging with OCI runtimes that support it, allowing for better error reporting - Updated vendored Buildah to v1.8.4 - Updated vendored containers/image to v2.0 - Update to image v2.0.0 - Add registry mirror support - Include missing man pages (bsc#1139526) - Update to storage v1.12.10 - Add support for UID as well as UserName in /etc/subuid files. - utils: fix check for missing conf file - compression: add support for the zstd algorithm - overlay: cache the results of supported/using-metacopy/use-naive-diff feature tests ==== mozilla-nss ==== Version update (3.43 -> 3.44.1) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs - update to NSS 3.44.1 * required by Firefox 68.0 Bugs fixed * bmo#1554336 - Optimize away unneeded loop in mpi.c * bmo#1515342 - More thorough input checking * bmo#1540541 - Don't unnecessarily strip leading 0's from key material during PKCS11 import * bmo#1515236 - Add a SSLKEYLOGFILE enable/disable flag at build.sh * bmo#1546229 - Add IPSEC IKE support to softoken * bmo#1473806 - Fix SECKEY_ConvertToPublicKey handling of non-RSA keys * bmo#1546477 - Updates to testing for FIPS validation * bmo#1552208 - Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3 * bmo#1551041 - Unbreak build on GCC < 4.3 big-endian - update to NSS 3.44 * required by Firefox 68.0 New functions * CERT_GetCertificateDer - Access the DER-encoded form of a CERTCertificate Notable changes * It is now possible to build NSS as a static library (bmo#1543545) * Initial support for building for iOS Bugs fixed * full list https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.44_rele… - merge some baselibs fixes from SLE ==== open-iscsi ==== Subpackages: iscsiuio libopeniscsiusr0_2_0 - Ensure /etc/iscsi/initiatorname.iscsi has reproducible size works around https://github.com/rpm-software-management/rpm/pull/229, updating the SPEC file ==== parted ==== Subpackages: libparted0 - port fixes for various bugs from upstream (bsc#1136245) - add: libparted-dasd-correct-the-offset-where-the-first-pa.patch 4126d02, correct the offset where the first partition begins. This patch implements libparted-dasd-do-not-use-first-tracks.patch - remove: libparted-dasd-do-not-use-first-tracks.patch - add: parted-fix-crash-due-to-improper-partition-number-in.patch 149f009, fix crash due to improper partition number input, changed call to strtol, use base 0 to fit our parted-type.patch - modify: parted-type.patch (removed ui.c part) - add: parted-check-the-name-of-partition-first-when-to-nam.patch d7a2ff1, check the name of partition first when to name a partition - add: libparted-dasd-add-test-cases-for-the-new-fdasd-func.patch c11f5c0, 571e078, add test cases for the new fdasd functions - add: libparted-dasd-add-an-exception-for-changing-DASD-LD.patch ee2c0c2, add an exception for changing DASD-LDL partition table - add: libpartd-dasd-improve-flag-processing-for-DASD-LDL.patch 1545d6d, improve flag processing for DASD-LDL - add: clean-the-disk-information-when-commands-fail-in-int.patch 5a61f15, clean the disk information when commands fail in interactive mode - add: parted-ui-remove-unneccesary-information-of-command.patch 0b7946a, remove unneccesary information of command line - add: parted-fix-wrong-error-label-jump-in-mkpart.patch af150f6, fix wrong error label jump in mkpart - refresh: libparted-dasd-unify-vtoc-handling-for-cdl-ldl.patch 4f25d54, unify vtoc handling for cdl/ldl - refresh: libparted-dasd-update-and-improve-fdasd-functions.patch db37c8c, update and improve fdasd functions - refresh: libparted-dasd-add-new-fdasd-functions.patch b9e1281, add new fdasd functions ==== transactional-update ==== Version update (2.14.2 -> 2.15) Subpackages: transactional-update-zypp-config - Update to version 2.15 - Move description of interactiveness [boo#1132438] - Enable network during update [boo#1137890] - Add compatibilty with new overlayfs versions [boo#1140057] - Allow updates of the bootloader on EFI systems [boo#1139015] - Add support for /boot/writable [boo#1138725] -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20190723 released!
by Richard Brown 25 Jul '19

25 Jul '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: diffutils grub2 hwinfo (21.66 -> 21.67) kernel-source (5.1.16 -> 5.2.1) libcontainers-common mozilla-nss (3.43 -> 3.44.1) open-iscsi parted transactional-update (2.14.2 -> 2.15) === Details === ==== diffutils ==== - ignore make check error for diff --color as tracked by https://debbugs.gnu.org/cgi/bugreport.cgi?bug=36488 ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-x86_64-efi - Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229). ==== hwinfo ==== Version update (21.66 -> 21.67) - merge gh#openSUSE/hwinfo#81 - fix DASD detection (bsc#1136475) - don't include bcache devices - 21.67 ==== kernel-source ==== Version update (5.1.16 -> 5.2.1) Subpackages: kernel-debug kernel-default - Linux 5.2.1 (bnc#1012628). - staging: rtl8712: reduce stack usage, again (bnc#1012628). - staging: bcm2835-camera: Handle empty EOS buffers whilst streaming (bnc#1012628). - staging: bcm2835-camera: Remove check of the number of buffers supplied (bnc#1012628). - staging: bcm2835-camera: Ensure all buffers are returned on disable (bnc#1012628). - staging: bcm2835-camera: Replace spinlock protecting context_map with mutex (bnc#1012628). - staging: fsl-dpaa2/ethsw: fix memory leak of switchdev_work (bnc#1012628). - staging: vchiq: revert "switch to wait_for_completion_killable" (bnc#1012628). - staging: vchiq: make wait events interruptible (bnc#1012628). - staging: vchiq_2835_arm: revert "quit using custom down_interruptible()" (bnc#1012628). - VMCI: Fix integer overflow in VMCI handle arrays (bnc#1012628). - Revert "x86/build: Move _etext to actual end of .text" (bnc#1012628). - carl9170: fix misuse of device driver API (bnc#1012628). - coresight: tmc-etf: Do not call smp_processor_id from preemptible (bnc#1012628). - coresight: tmc-etr: alloc_perf_buf: Do not call smp_processor_id from preemptible (bnc#1012628). - coresight: tmc-etr: Do not call smp_processor_id() from preemptible (bnc#1012628). - coresight: etb10: Do not call smp_processor_id from preemptible (bnc#1012628). - coresight: Potential uninitialized variable in probe() (bnc#1012628). - iio: adc: stm32-adc: add missing vdda-supply (bnc#1012628). - binder: return errors from buffer copy functions (bnc#1012628). - binder: fix memory leak in error path (bnc#1012628). - lkdtm: support llvm-objcopy (bnc#1012628). - HID: Add another Primax PIXART OEM mouse quirk (bnc#1012628). - staging: mt7621-pci: fix PCIE_FTS_NUM_LO macro (bnc#1012628). - staging: comedi: amplc_pci230: fix null pointer deref on interrupt (bnc#1012628). - staging: bcm2835-camera: Restore return behavior of ctrl_set_bitrate() (bnc#1012628). - staging: wilc1000: fix error path cleanup in wilc_wlan_initialize() (bnc#1012628). - staging: comedi: dt282x: fix a null pointer deref on interrupt (bnc#1012628). - p54: fix crash during initialization (bnc#1012628). - drivers/usb/typec/tps6598x.c: fix 4CC cmd write (bnc#1012628). - drivers/usb/typec/tps6598x.c: fix portinfo width (bnc#1012628). - usb: renesas_usbhs: add a workaround for a race condition of workqueue (bnc#1012628). - usb: dwc2: use a longer AHB idle timeout in dwc2_core_reset() (bnc#1012628). - usb: gadget: ether: Fix race between gether_disconnect and rx_submit (bnc#1012628). - usb: gadget: f_fs: data_len used before properly set (bnc#1012628). - p54usb: Fix race between disconnect and firmware loading (bnc#1012628). - Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled" (bnc#1012628). - USB: serial: option: add support for GosunCn ME3630 RNDIS mode (bnc#1012628). - USB: serial: ftdi_sio: add ID for isodebug v1 (bnc#1012628). - mwifiex: Don't abort on small, spec-compliant vendor IEs (bnc#1012628). - Documentation/admin: Remove the vsyscall=native documentation (bnc#1012628). - Documentation: Add section about CPU vulnerabilities for Spectre (bnc#1012628). - x86/tls: Fix possible spectre-v1 in do_get_thread_area() (bnc#1012628). - x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg() (bnc#1012628). - perf header: Assign proper ff->ph in perf_event__synthesize_features() (bnc#1012628). - perf thread-stack: Fix thread stack return from kernel for kernel-only case (bnc#1012628). - perf pmu: Fix uncore PMU alias list for ARM64 (bnc#1012628). - perf intel-pt: Fix itrace defaults for perf script intel-pt documentation (bnc#1012628). - perf auxtrace: Fix itrace defaults for perf script (bnc#1012628). - perf intel-pt: Fix itrace defaults for perf script (bnc#1012628). - block, bfq: NULL out the bic when it's no longer valid (bnc#1012628). - block: fix .bi_size overflow (bnc#1012628). - tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations (bnc#1012628). - tpm: Actually fail on TPM errors during "get random" (bnc#1012628). - ALSA: hda/realtek - Headphone Mic can't record after S3 (bnc#1012628). - ALSA: usb-audio: Fix parse of UAC2 Extension Units (bnc#1012628). - media: stv0297: fix frequency range limit (bnc#1012628). - udf: Fix incorrect final NOT_ALLOCATED (hole) extent length (bnc#1012628). - fscrypt: don't set policy for a dead directory (bnc#1012628). - crypto: talitos - rename alternative AEAD algos (bnc#1012628). - crypto: lrw - use correct alignmask (bnc#1012628). - commit 51ca500 - net: bpfilter: print umh messages to /dev/kmsg (bsc#1140221). - commit 139acc9 - series.conf: sync with master - commit 80522d2 - rpm/kernel-binary.spec.in: handle modules.builtin.modinfo It was added in 5.2. - commit eb88df3 - Disable CONFIG_OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW in config (bsc#1140494) - commit 8d950e4 - Delete patches.suse/Revert-ovl-detect-overlapping-layers.patch. - Delete patches.suse/Revert-ovl-don-t-fail-with-disconnected-lower-NFS.patch. - Delete patches.suse/Revert-ovl-fix-bogus-Wmaybe-unitialized-warning.patch. transactional-update was fixed, see sr#714110. - commit 927afc9 - Update to 5.2 final - Eliminated 1 patch - commit b36439f - Refresh tpm: tpm_ibm_vtpm: Fix unallocated banks (boo#1139244). - commit 99f9469 - config: align CONFIG_PHYSICAL_START and CONFIG_PHYSICAL_ALIGN to default values As suggested in bsc#1067593, our kconfig keeps the old default values while the upstream took different (actually swapped) values for x86 CONFIG_PHYSICAL_START and CONFIG_PHYSICAL_ALIGN. Let's follow the upstream default now. - commit baa2434 - Rename patches.suse/[PATCH]_tpm:_fixes_uninitialized_allocated_banks_for_IBM_vtpm_driver to patches.suse/tpm-fixes-uninitialized-allocated-banks-for-IBM-vtpm-driver.patch Let's not risk some tool somewhere does not handle special characters correctly. - commit 8a3fff9 - tpm: fixes uninitialized allocated banks for IBM vtpm driver (boo#1139244). - Delete patches.suse/Revert-tpm-pass-an-array-of-tpm_extend_digest-struct.patch. - commit 43ec0a5 ==== libcontainers-common ==== - Update to libpod v1.4.4 - Fixed a bug where rootless Podman would attempt to use the entire root configuration if no rootless configuration was present for the user, breaking rootless Podman for new installations - Fixed a bug where rootless Podman's pause process would block SIGTERM, preventing graceful system shutdown and hanging until the system's init send SIGKILL - Fixed a bug where running Podman as root with sudo -E would not work after running rootless Podman at least once - Fixed a bug where options for tmpfs volumes added with the - -tmpfs flag were being ignored - Fixed a bug where images with no layers could not properly be displayed and removed by Podman - Fixed a bug where locks were not properly freed on failure to create a container or pod - Podman now has greatly improved support for containers using multiple OCI runtimes. Containers now remember if they were created with a different runtime using --runtime and will always use that runtime - The cached and delegated options for volume mounts are now allowed for Docker compatability (#3340) - The podman diff command now supports the --latest flag - Fixed a bug where podman cp on a single file would create a directory at the target and place the file in it (#3384) - Fixed a bug where podman inspect --format '{{.Mounts}}' would print a hexadecimal address instead of a container's mounts - Fixed a bug where rootless Podman would not add an entry to container's /etc/hosts files for their own hostname (#3405) - Fixed a bug where podman ps --sync would segfault (#3411) - Fixed a bug where podman generate kube would produce an invalid ports configuration (#3408) - Podman now performs much better on systems with heavy I/O load - The --cgroup-manager flag to podman now shows the correct default setting in help if the default was overridden by libpod.conf - For backwards compatability, setting --log-driver=json-file in podman run is now supported as an alias for - -log-driver=k8s-file. This is considered deprecated, and json-file will be moved to a new implementation in the future ([#3363](https://github.com/containers/libpod/issues/3363)) - Podman's default libpod.conf file now allows the crun OCI runtime to be used if it is installed - Fixed a bug where Podman could not run containers using an older version of Systemd as init (#3295) - Updated vendored Buildah to v1.9.0 to resolve a critical bug with Dockerfile RUN instructions - The error message for running podman kill on containers that are not running has been improved - The Podman remote client can now log to a file if syslog is not available - The MacOS dmg file is experimental, use at your own risk. - The podman exec command now sets its error code differently based on whether the container does not exist, and the command in the container does not exist - The podman inspect command on containers now outputs Mounts JSON that matches that of docker inspect, only including user-specified volumes and differentiating bind mounts and named volumes - The podman inspect command now reports the path to a container's OCI spec with the OCIConfigPath key (only included when the container is initialized or running) - The podman run --mount command now supports the bind-nonrecursive option for bind mounts (#3314) - Fixed a bug where podman play kube would fail to create containers due to an unspecified log driver - Fixed a bug where Podman would fail to build with musl libc (#3284) - Fixed a bug where rootless Podman using slirp4netns networking in an environment with no nameservers on the host other than localhost would result in nonfunctional networking (#3277) - Fixed a bug where podman import would not properly set environment variables, discarding their values and retaining only keys - Fixed a bug where Podman would fail to run when built with Apparmor support but run on systems without the Apparmor kernel module loaded (#3331) - Remote Podman will now default the username it uses to log in to remote systems to the username of the current user - Podman now uses JSON logging with OCI runtimes that support it, allowing for better error reporting - Updated vendored Buildah to v1.8.4 - Updated vendored containers/image to v2.0 - Update to image v2.0.0 - Add registry mirror support - Include missing man pages (bsc#1139526) - Update to storage v1.12.10 - Add support for UID as well as UserName in /etc/subuid files. - utils: fix check for missing conf file - compression: add support for the zstd algorithm - overlay: cache the results of supported/using-metacopy/use-naive-diff feature tests ==== mozilla-nss ==== Version update (3.43 -> 3.44.1) - update to NSS 3.44.1 * required by Firefox 68.0 Bugs fixed * bmo#1554336 - Optimize away unneeded loop in mpi.c * bmo#1515342 - More thorough input checking * bmo#1540541 - Don't unnecessarily strip leading 0's from key material during PKCS11 import * bmo#1515236 - Add a SSLKEYLOGFILE enable/disable flag at build.sh * bmo#1546229 - Add IPSEC IKE support to softoken * bmo#1473806 - Fix SECKEY_ConvertToPublicKey handling of non-RSA keys * bmo#1546477 - Updates to testing for FIPS validation * bmo#1552208 - Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3 * bmo#1551041 - Unbreak build on GCC < 4.3 big-endian - update to NSS 3.44 * required by Firefox 68.0 New functions * CERT_GetCertificateDer - Access the DER-encoded form of a CERTCertificate Notable changes * It is now possible to build NSS as a static library (bmo#1543545) * Initial support for building for iOS Bugs fixed * full list https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.44_rele… - merge some baselibs fixes from SLE ==== open-iscsi ==== Subpackages: iscsiuio libopeniscsiusr0_2_0 - Ensure /etc/iscsi/initiatorname.iscsi has reproducible size works around https://github.com/rpm-software-management/rpm/pull/229, updating the SPEC file ==== parted ==== Subpackages: libparted0 - port fixes for various bugs from upstream (bsc#1136245) - add: libparted-dasd-correct-the-offset-where-the-first-pa.patch 4126d02, correct the offset where the first partition begins. This patch implements libparted-dasd-do-not-use-first-tracks.patch - remove: libparted-dasd-do-not-use-first-tracks.patch - add: parted-fix-crash-due-to-improper-partition-number-in.patch 149f009, fix crash due to improper partition number input, changed call to strtol, use base 0 to fit our parted-type.patch - modify: parted-type.patch (removed ui.c part) - add: parted-check-the-name-of-partition-first-when-to-nam.patch d7a2ff1, check the name of partition first when to name a partition - add: libparted-dasd-add-test-cases-for-the-new-fdasd-func.patch c11f5c0, 571e078, add test cases for the new fdasd functions - add: libparted-dasd-add-an-exception-for-changing-DASD-LD.patch ee2c0c2, add an exception for changing DASD-LDL partition table - add: libpartd-dasd-improve-flag-processing-for-DASD-LDL.patch 1545d6d, improve flag processing for DASD-LDL - add: clean-the-disk-information-when-commands-fail-in-int.patch 5a61f15, clean the disk information when commands fail in interactive mode - add: parted-ui-remove-unneccesary-information-of-command.patch 0b7946a, remove unneccesary information of command line - add: parted-fix-wrong-error-label-jump-in-mkpart.patch af150f6, fix wrong error label jump in mkpart - refresh: libparted-dasd-unify-vtoc-handling-for-cdl-ldl.patch 4f25d54, unify vtoc handling for cdl/ldl - refresh: libparted-dasd-update-and-improve-fdasd-functions.patch db37c8c, update and improve fdasd functions - refresh: libparted-dasd-add-new-fdasd-functions.patch b9e1281, add new fdasd functions ==== transactional-update ==== Version update (2.14.2 -> 2.15) Subpackages: transactional-update-zypp-config - Update to version 2.15 - Move description of interactiveness [boo#1132438] - Enable network during update [boo#1137890] - Add compatibilty with new overlayfs versions [boo#1140057] - Allow updates of the bootloader on EFI systems [boo#1139015] - Add support for /boot/writable [boo#1138725] -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] weave for openSUSE Kubic now available in devel project
by Thorsten Kukuk 24 Jul '19

24 Jul '19

Hi, weave for openSUSE Kubic is now available in the devel:kubic devel project, if you want to test/use it already today. You need to fetch the weave-k8s-yaml RPM from https://download.opensuse.org/repositories/devel:/kubic/openSUSE_Tumbleweed… and install it instead of flannel or cilium. It will be hopefully available as official package in openSUSE and on the Kubic media in the near future. Thorsten -- Thorsten Kukuk, Distinguished Engineer, Senior Architect SLES & MicroOS SUSE Linux GmbH, Maxfeldstr. 5, 90409 Nuernberg, Germany GF: Felix Imendoerffer, Mary Higgins, Sri Rasiah, HRB 21284 (AG Nuernberg) -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20190721 released!
by Richard Brown 22 Jul '19

22 Jul '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: dracut (044.2 -> 049+git104.1244eed7) fuse3 (3.6.1 -> 3.6.2) gcc9 (9.1.1+r272147 -> 9.1.1+r273003) glib2 kernel-firmware (20190628 -> 20190712) multipath-tools (0.8.1+59+suse.f947184 -> 0.8.2+11+suse.0f6a649) pam-config (1.0 -> 1.1) suse-module-tools (15.2.3 -> 15.2.4) === Details === ==== dracut ==== Version update (044.2 -> 049+git104.1244eed7) Subpackages: dracut-ima - Update to version 049+git104.1244eed7: * mkinitrd-suse.sh: remove trailing "|" - Update to version 049+git103.c8d99b62: * Add support for compressed kernel modules (boo#1135854) - Update to version 049+git102.9ee0c387: * dracut-install: Add support for compressed firmware files (boo#1136677) - Update to version 049+git101.17c579a0: * call netroot on wicked dhcp setup * nfsroot follow ifcfg settings for boot protocol - Update to version 049+git99.76df40e7: * 95fcoe: Fix startup when fcoe module is included (boo#1136977) * tests: Ignore .testdir * Add support for riscv64 * mkinitrd-suse.sh: simplify get_kernel_version (bsc#1139939) * 95dasd-rules & 95zfcp_rules: Look for correct rule name (bsc#1137784) - Update to version 049+git94.aef7a52b: * ucode: properly include early only ucode * keep network device naming scheme on upgrade (bsc#1136927) - Bump to 049 - Patches are now maintained in git * Removed 0012-40network-Fix-race-condition-when-wait-for-networks.patch * Removed 0013-40network-always-start-netroot-in-ifup.sh.patch * Removed 0015-40network-replace-dhclient-with-wickedd-dhcp-supplic.patch * Removed 0016-Add-new-s390x-specific-rule-files.patch * Removed 0017-45ifcfg-use-distro-specific-scripts.patch * Removed 0020-00warpclock-Set-correct-timezone.patch * Removed 0021-95dcssblk-Add-new-module-for-DCSS-block-devices.patch * Removed 0048-40network-Only-enable-network-interfaces-if-explicit.patch * Removed 0053-01fips-fixup-loading-issues.patch * Removed 0056-81cio_ignore-handle-cio_ignore-commandline.patch * Removed 0057-01fips-Include-some-more-hmacs.patch * Removed 0058-dracut-add-warning-when-including-unsupported-module.patch * Removed 0059-99suse-Add-SUSE-specific-initrd-parsing.patch * Removed 0060-45ifcfg-Add-SUSE-specific-write-ifcfg-file.patch * Removed 0061-45ifcfg-Fixup-error-message-in-write-ifcfg-suse.patch * Removed 0075-95dasd_rules-enable-parsing-of-rd.dasd-commandline-p.patch * Removed 0076-Correctly-set-cio_ignore-for-dynamic-s390-rules.patch * Removed 0079-95dasd_rules-fixup-rd.dasd-parsing.patch * Removed 0080-95dasd_rules-print-out-rd.dasd-commandline.patch * Removed 0081-95dasd_mod-do-not-set-module-parameters-if-dasd_cio_.patch * Removed 0083-95zfcp_rules-Fixup-rd.zfcp-parsing.patch * Removed 0085-95zfcp_rules-print-out-rd.zfcp-commandline-parameter.patch * Removed 0086-95zfcp_rules-Auto-generate-udev-rule-for-ipl-device.patch * Removed 0087-95dasd_rules-Auto-generate-udev-rule-for-ipl-device.patch * Removed 0088-91zipl-Add-new-module-to-update-s390x-configuration.patch * Removed 0089-40network-create-var-lib-wicked-in-ifup.sh.patch * Removed 0090-dracut-caps-Remove-whole-caps-module.patch * Removed 0091-dracut-biosdevname-In-SUSE-biosdevname-package-is-in.patch * Removed 0094-Implement-shortcut-ip-ifname-static-for-static-confi.patch * Removed 0107-Fixup-typo-firmare-instead-of-firmware.patch * Removed 0108-91zipl-Store-commandline-correctly.patch * Removed 0109-95dasd_rules-Store-all-devices-in-commandline.patch * Removed 0110-95zfcp_rules-Store-all-devices-in-commandline.patch * Removed 0113-91zipl-Install-script-as-executable.patch * Removed 0114-91zipl-Translate-ext2-3-into-ext4.patch * Removed 0116-Mark-scripts-as-executable.patch * Removed 0117-95dasd_rules-Enable-the-device-before-checking-devic.patch * Removed 0118-95zfcp_rules-Enable-the-device-before-checking-devic.patch * Removed 0121-Adjust-initramfs-kernel.img-to-SUSE-default-initrd-k.patch * Removed 0123-95zfcp_rules-fix-typo-in-module_setup.patch * Removed 0124-40network-Update-iBFT-scanning-code-to-handle-IPv6.patch * Removed 0125-40network-separate-mask-and-prefix.patch * Removed 0126-01fips-Add-drbg-module-to-force-loaded-modules.patch * Removed 0128-90lvm-Install-dm-snapshot-module.patch * Removed 0130-nfs-Always-add-all-kernel-modules-for-kdump.patch * Removed 0131-40network-handle-prefixed-IP-addresses-correctly.patch * Removed 0132-40network-fixup-static-network-configuration.patch * Removed 0133-Allow-multiple-configurations-per-network-interface-.patch * Removed 0137-Switch-from-Mozilla-NSS-sha256hmac-checking-to-fipsc.patch * Removed 0138-fips_add_aesni-intel.patch * Removed 0139-fips-kernel-4.4-fixes.patch * Removed 0142-40network-Don-t-report-error-for-etc-sysconfig-netwo.patch * Removed 0144-90crypt-Fixed-crypttab_contains-to-also-work-with-de.patch * Removed 0145-40network-handle-ip-ifname-static-correctly.patch * Removed 0150-Find-kernel-modules-in-extra-and-weak-updates-path-a.patch * Removed 0157-Add-boot-zipl-to-host-devs-if-it-is-a-mount-point.patch * Removed 0158-Add-SUSE-kernel-module-dependencies-in-etc-modprobe.patch * Removed 0159-network-Try-to-load-xennet.patch * Removed 0160-s390-update_active_devices_initrd.patch * Removed 0161-95zfcp_rules-simplified-rd.zfcp-commandline-for-NPIV.patch * Removed 0162-network-Request-DHCP-lease-instead-of-getting-applyi.patch * Removed 0163-Install-etc-sysconfig-console-to-see-specific-fonts.patch * Removed 0164-Fix-initramfs-ver.img-vs-initrd-ver-in-dracut-initra.patch * Removed 0168-remove_plymouth_logo_file.patch * Removed 0169-network_set_mtu_macaddr_for_dhcp.patch * Removed 0170-iscsi-skip-ibft-invalid-dhcp.patch * Removed 0180-i18n_add_correct_fontmaps.patch * Removed 0182-fix-include-parsing.patch * Removed 0183-fix_add_drivers_hang.patch * Removed 0188-95dasd_rules-Install-collect-udev-helper-binary.patch * Removed 0190-replace-iscsistart-with-systemd-service-files.patch * Removed 0191-static_network_setup_return_zero.patch * Removed 0192-iscsi_set_boot_protocol_from_ifcfg.patch * Removed 0193-95iscsi-Set-number-of-login-retries.patch * Removed 0196-ibft-wait-for-session-on-all-paths.patch * Removed 0197-95iscsi-Do-not-require-network-for-qla4xxx-flash-ses.patch * Removed 0198-95iscsi-set-rd.iscsi.firmware-for-qla4xxx-sessions.patch * Removed 0199-rd-iscsi-waitnet-default-false.patch * Removed 0200-dracut_fix_multipath_without_config.patch * Removed 0201-fix_nfs_with_ip_instead_of_hostname.patch * Removed 0202-dracut_dmraid_use_udev.patch * Removed 0203-no-fail-builtin-module.patch * Removed 0204-mkinitrd-fix-monster.patch * Removed 0205-mdraid_ignore_hostonly.patch * Removed 0206-nfs_dns_alias.patch * Removed 0207-handle_module_aliases.patch * Removed 0208-no_forced_virtnet.patch * Removed 0209-fix_modules_load_d_hostonly.patch * Removed 0210-add_fcoe_uefi_check.patch * Removed 0212-fcoe_reorder_init_path.patch * Removed 0213-Fix-wrong-keymap-inclusion.patch * Removed 0214-95fcoe-Do-not-overwrite-FCoE-configuration.patch * Removed 0215-95fcoe-Do-not-complain-about-missing-etc-hba.conf.patch * Removed 0216-95fcoe-silence-lldpad-warnings.patch * Removed 0217-95fcoe-Allow-to-specify-the-FCoE-mode-via-the-fcoe-p.patch * Removed 0218-40network-allow-persistent-interface-names.patch * Removed 0219-95fcoe-use-interface-names-instead-of-MAC-addresses.patch * Removed 0220-95fcoe-always-set-AUTO_VLAN-for-fcoemon.patch * Removed 0221-95fcoe-Add-shutdown-script.patch * Removed 0222-90dm-Fixup-shutdown-script.patch * Removed 0223-90dm-fixup-dependency-cycle-between-MD-and-DM-shutdo.patch * Removed 0224-95iscsi-setup-bnx2i-offload-connections-properly.patch * Removed 0225-95fcoe-do-not-start-fcoemon-twice.patch * Removed 0300-dracut_dont_use_dpkg_defaults_on_SUSE.patch * Removed 0301-include_sysconfig_language.patch * Removed 0302-Revert-90multipath-add-hostonly-multipath.conf-in-ca.patch * Removed 0303-fix_multipath_check_hostonly.patch * Removed 0304-90multipath-Start-daemon-after-udev-settle.patch * Removed 0305-90multipath-load-dm_multipath-module-during-startup.patch * Removed 0306-90multipath-add-shutdown-script.patch * Removed 0307-90multipath-parse-kernel-commandline-option-multipat.patch * Removed 0308-mdraid_add_IMSM_NO_PLATFORM_env.patch * Removed 0309-90dmraid-do-not-delete-partitions.patch * Removed 0310-95resume-Do-not-resume-on-iSCSI.patch * Removed 0311-95iscsi-ip-ibft-is-deprecated.patch * Removed 0312-40network-Do-not-print-message-about-tmp-net.ibft0.c.patch * Removed 0313-90mdraid-Use-stock-MD-rules-to-assemble-RAID-arrays.patch * Removed 0314-nfs_do_not_pass_ifname_for_bonding_devices.patch * Removed 0402-driver-fail-summary.patch * Removed 0403-95lunmask-Add-module-to-handle-LUN-masking.patch * Removed 0404-dracut-emergency-optionally-print-fs-help.patch * Removed 0450-Strip-NUL-bytes-in-stream-before-push-in-string.patch * Removed 0451-systemd-initrd-add-initrd-root-device.target.patch * Removed 0452-Always-try-to-add-pinctrl-cherryview.patch * Removed 0453-Resolve-symbolic-links-for-i-and-k-parameters-bsc-90.patch * Removed 0454-Add-md4-and-arc4-modules-for-ntlm.patch * Removed 0500-Reset-IFS-variable.patch * Removed 0501-dasd_fix_ssid_bigger_zero.patch * Removed 0502-persistent_device_policy_param_enhance.patch * Removed 0503-dracut.sh-create-the-initramfs-non-world-readable-al.patch * Removed 0504-ibft-fix-boot-flag-check.patch * Removed 0505-Allow-booting-from-degraded-MD-RAID-arrays.patch * Removed 0506-Boot-on-s390x-with-fips-1-on-the-kernel-commnad-line.patch * Removed 0507-Set-TaskMax-inifinite-for-the-emergency-shell.patch * Removed 0508-90multipath-start-before-local-fs-pre.target.patch * Removed 0509-01fips-Remove-zlib-module-as-requirement.patch * Removed 0510-01fips-Some-modules-use-separators-other-than.patch * Removed 0511-01fips-ensure-fips-initialization-succeeds-on-s390-x.patch * Removed 0512-Make-binutils-optional-when-elfutils-are-available.patch * Removed 0513-Fix-regression-caused-by-6f9bf2b8ac436259bdccb110545.patch * Removed 0514-man-make-the-k-option-clear-using-mkinitrd.patch * Removed 0515-90kernel-modules-also-add-block-device-driver-revers.patch * Removed 0516-mkinitrd-suse.sh-Fix-prefix-calculation.patch * Removed 0517-95fcoe-fixup-fcoe-genrules.sh-for-VN2VN-mode.patch * Removed 0518-90kernel-modules-Fix-backlight-on-Cherrytrail-device.patch * Removed 0519-90kernel-modules-Ensure-phy-drivers-are-loaded-in-in.patch * Removed 0520-Ignore-module-resolution-errors.patch * Removed 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch * Removed 0522-Fix-typo-from-commit-3f1cdb520.patch * Removed 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch * Removed 0524-Suppress-nonsensical-error-message-bsc-1032029.patch * Removed 0525-backport-bail-out-if-module-directory-does-not-exist.patch * Removed 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch * Removed 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch * Removed 0528-Ensure-dracut.sh-responds-properly-to-hostonly_cmdli.patch * Removed 0529-systemd-add-missing-.slice-unit.patch * Removed 0530-dracut-systemd-dracut-cmdline-ask-fix-dracut-kernel-.patch * Removed 0531-dracut-systemd-.service-conflict-with-shutdown-targe.patch * Removed 0532-List-drivers-rather-than-looking-for-reverse-depende.patch * Removed 0533-instmods-check-modules.builtin-in-srcmods.patch * Removed 0534-ssh-client-Include-nss_-libraries.patch * Removed 0535-Sync-initramfs-after-creation.patch * Removed 0536-90multipath-drop-67-kpartx-compat.rules.patch * Removed 0537-dracut-init.sh-ignore-crc32.ko-in-builtin-test.patch * Removed 0538-Enable-core-dumps-with-systemd-from-initrd.patch * Removed 0539-Add-IMA-functionality-fate-323289.patch * Removed 0540-Check-the-proper-variable-for-a-custom-IMA-keys-dire.patch * Removed 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch * Removed 0542-Include-crc32c-intel-module-when-using-btrfs.patch * Removed 0543-Remove-00systemd-bootchart.patch * Removed 0544-40network-Make-ip-dhcp-work.patch * Removed 0545-Add-early-microcode-support-for-AMD-family-16h.patch * Removed 0546-Support-Microcode-Updates-for-AMD-CPU-Family-0x17.patch * Removed 0547-Fix-task-limit-in-emergency.service-the-same-change-.patch * Removed 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch * Removed 0549-fcoe-up-Increase-sleeptime-to-13s.patch * Removed 0550-95fcoe-add-timeout-initqueue-entries.patch * Removed 0551-fips-use-lib-modules-uname-r-modules.fips.patch * Removed 0552-98integrity-support-validating-the-IMA-policy-file-s.patch * Removed 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch * Removed 0554-98integrity-support-X.509-only-EVM-configuration.patch * Removed 0555-Avoid-executing-emergency-hooks-twice.patch * Removed 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch * Removed 0557-40network-make-arping-optional.patch * Removed 0558-40network-remove-brctl-dependency.patch * Removed 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch * Removed 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch * Removed 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch * Removed 0562-Adjust-driver-list-to-modern-kernels.patch * Removed 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch * Removed 0564-40network-Always-set-the-gw-variable.patch * Removed 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch * Removed 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch * Removed 0567-Fix-booting-with-fips-1-on-SLES-15.patch * Removed 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch * Removed 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch * Removed 0570-10i18n-Fix-possible-infinite-recursion.patch * Removed 0571-40network-Fix-static-network-setup.patch * Removed 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch * Removed 0573-lsinitrd.sh-quote-filename-in-extract_files.patch * Removed 0574-s-find_btrfs_devs-btrfs_devs.patch * Removed 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch * Removed 0581-kernel-modules-add-nfit.patch * Removed 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch * Removed 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch * Removed 0584-95dasd_rules-mark-dasd-rules-host_only.patch * Removed 0585-emergency-mode-use-sulogin.patch * Removed 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch * Removed 0587-Fix-a-missing-space-in-example-configs.patch * Removed 0588-Ensure-mmc-host-modules-get-included-properly.patch * Removed 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch * Removed 0590-00systemd-check-if-systemd-version-is-a-number.patch * Removed 0591-91zipl-Don-t-use-contents-of-commented-lines.patch * Removed 0592-95iscsi-handle-qedi-like-bnx2i.patch * Removed 0593-dracut-only-copy-xattr-if-root.patch * Removed 0594-Check-SUSE-kernel-module-dependencies-recursively.patch * Removed 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch * Removed 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch * Removed 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch * Removed 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch * Removed 0599-iscsiroot-try-targets-only-once.patch * Removed 0600-iscsiroot-remove-bashisms.patch * Removed 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch ==== fuse3 ==== Version update (3.6.1 -> 3.6.2) - Update to version 3.6.2 * The init script is now installed to /etc/ rather than /usr/local/etc by default. * Minor bugfixes - Drop fuse-install-fix.patch, not needed with -Duseroot=false - Add conf-rename.patch, which is split from the above now removed patch ==== gcc9 ==== Version update (9.1.1+r272147 -> 9.1.1+r273003) Subpackages: libgcc_s1 libstdc++6 - Update to gcc-9-branch head (r273003). - Fix default for ringdisabled: bcond_with means 'conditionally with': so only do so if explicitly specified. - Do not build cross-* variants in stagings/rings. - Add gcc9-value-prof.patch in order to provide more stable builds for single value counters. ==== glib2 ==== Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 - Add glib2-keyfile-handle-filename-being-null.patch: key file: Handle filename being NULL (glgo#GNOME/GLib!1825, glgo#GNOME/GLib#984). ==== kernel-firmware ==== Version update (20190628 -> 20190712) Subpackages: ucode-amd - Revert the iwlwifi 9000 and 9260 *-46.ucode firmware files that are broken on some machines to 20190618 state (bsc#1142128): WHENCE-iwlwifi-9xxx-46-revert.patch - Update to version 20190712: * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth 22161 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * amdgpu: update vega10 VCE firmware * amdgpu: update picasso vcn firmware * amdgpu: update raven vcn firmware * amdgpu: update tonga to latest 19.20 firmware * amdgpu: update vega12 to latest 19.20 firmware * amdgpu: partially revert 2579167548be33afb1fe2a9a5c141561ee5a8bbe * amdgpu: update vega10 to latest 19.20 firmware * amdgpu: update polaris12 to latest 19.20 firmware * amdgpu: update raven2 to latest 19.20 firmware * amdgpu: update raven to latest 19.20 firmware * amdgpu: update picasso to latest 19.20 firmware ==== multipath-tools ==== Version update (0.8.1+59+suse.f947184 -> 0.8.2+11+suse.0f6a649) Subpackages: kpartx libmpath0 - Update to version 0.8.2+11+suse.0f6a649: * kpartx: recognize DASD on loop devices again (bsc#1139775) * Bump version to 0.8.2 - most changes were already in SUSE tree * Man page improvements ==== pam-config ==== Version update (1.0 -> 1.1) - Update to version 1.1: - enhance comments in common-*-pc files ==== suse-module-tools ==== Version update (15.2.3 -> 15.2.4) - Update to version 15.2.4: * sg.conf: avoid file conflict with system-tuning-common-SUSE -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20190721 released!
by Richard Brown 22 Jul '19

22 Jul '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: dracut (044.2 -> 049+git104.1244eed7) fuse3 (3.6.1 -> 3.6.2) gcc9 (9.1.1+r272147 -> 9.1.1+r273003) glib2 kernel-firmware (20190628 -> 20190712) multipath-tools (0.8.1+59+suse.f947184 -> 0.8.2+11+suse.0f6a649) pam-config (1.0 -> 1.1) suse-module-tools (15.2.3 -> 15.2.4) === Details === ==== dracut ==== Version update (044.2 -> 049+git104.1244eed7) Subpackages: dracut-ima - Update to version 049+git104.1244eed7: * mkinitrd-suse.sh: remove trailing "|" - Update to version 049+git103.c8d99b62: * Add support for compressed kernel modules (boo#1135854) - Update to version 049+git102.9ee0c387: * dracut-install: Add support for compressed firmware files (boo#1136677) - Update to version 049+git101.17c579a0: * call netroot on wicked dhcp setup * nfsroot follow ifcfg settings for boot protocol - Update to version 049+git99.76df40e7: * 95fcoe: Fix startup when fcoe module is included (boo#1136977) * tests: Ignore .testdir * Add support for riscv64 * mkinitrd-suse.sh: simplify get_kernel_version (bsc#1139939) * 95dasd-rules & 95zfcp_rules: Look for correct rule name (bsc#1137784) - Update to version 049+git94.aef7a52b: * ucode: properly include early only ucode * keep network device naming scheme on upgrade (bsc#1136927) - Bump to 049 - Patches are now maintained in git * Removed 0012-40network-Fix-race-condition-when-wait-for-networks.patch * Removed 0013-40network-always-start-netroot-in-ifup.sh.patch * Removed 0015-40network-replace-dhclient-with-wickedd-dhcp-supplic.patch * Removed 0016-Add-new-s390x-specific-rule-files.patch * Removed 0017-45ifcfg-use-distro-specific-scripts.patch * Removed 0020-00warpclock-Set-correct-timezone.patch * Removed 0021-95dcssblk-Add-new-module-for-DCSS-block-devices.patch * Removed 0048-40network-Only-enable-network-interfaces-if-explicit.patch * Removed 0053-01fips-fixup-loading-issues.patch * Removed 0056-81cio_ignore-handle-cio_ignore-commandline.patch * Removed 0057-01fips-Include-some-more-hmacs.patch * Removed 0058-dracut-add-warning-when-including-unsupported-module.patch * Removed 0059-99suse-Add-SUSE-specific-initrd-parsing.patch * Removed 0060-45ifcfg-Add-SUSE-specific-write-ifcfg-file.patch * Removed 0061-45ifcfg-Fixup-error-message-in-write-ifcfg-suse.patch * Removed 0075-95dasd_rules-enable-parsing-of-rd.dasd-commandline-p.patch * Removed 0076-Correctly-set-cio_ignore-for-dynamic-s390-rules.patch * Removed 0079-95dasd_rules-fixup-rd.dasd-parsing.patch * Removed 0080-95dasd_rules-print-out-rd.dasd-commandline.patch * Removed 0081-95dasd_mod-do-not-set-module-parameters-if-dasd_cio_.patch * Removed 0083-95zfcp_rules-Fixup-rd.zfcp-parsing.patch * Removed 0085-95zfcp_rules-print-out-rd.zfcp-commandline-parameter.patch * Removed 0086-95zfcp_rules-Auto-generate-udev-rule-for-ipl-device.patch * Removed 0087-95dasd_rules-Auto-generate-udev-rule-for-ipl-device.patch * Removed 0088-91zipl-Add-new-module-to-update-s390x-configuration.patch * Removed 0089-40network-create-var-lib-wicked-in-ifup.sh.patch * Removed 0090-dracut-caps-Remove-whole-caps-module.patch * Removed 0091-dracut-biosdevname-In-SUSE-biosdevname-package-is-in.patch * Removed 0094-Implement-shortcut-ip-ifname-static-for-static-confi.patch * Removed 0107-Fixup-typo-firmare-instead-of-firmware.patch * Removed 0108-91zipl-Store-commandline-correctly.patch * Removed 0109-95dasd_rules-Store-all-devices-in-commandline.patch * Removed 0110-95zfcp_rules-Store-all-devices-in-commandline.patch * Removed 0113-91zipl-Install-script-as-executable.patch * Removed 0114-91zipl-Translate-ext2-3-into-ext4.patch * Removed 0116-Mark-scripts-as-executable.patch * Removed 0117-95dasd_rules-Enable-the-device-before-checking-devic.patch * Removed 0118-95zfcp_rules-Enable-the-device-before-checking-devic.patch * Removed 0121-Adjust-initramfs-kernel.img-to-SUSE-default-initrd-k.patch * Removed 0123-95zfcp_rules-fix-typo-in-module_setup.patch * Removed 0124-40network-Update-iBFT-scanning-code-to-handle-IPv6.patch * Removed 0125-40network-separate-mask-and-prefix.patch * Removed 0126-01fips-Add-drbg-module-to-force-loaded-modules.patch * Removed 0128-90lvm-Install-dm-snapshot-module.patch * Removed 0130-nfs-Always-add-all-kernel-modules-for-kdump.patch * Removed 0131-40network-handle-prefixed-IP-addresses-correctly.patch * Removed 0132-40network-fixup-static-network-configuration.patch * Removed 0133-Allow-multiple-configurations-per-network-interface-.patch * Removed 0137-Switch-from-Mozilla-NSS-sha256hmac-checking-to-fipsc.patch * Removed 0138-fips_add_aesni-intel.patch * Removed 0139-fips-kernel-4.4-fixes.patch * Removed 0142-40network-Don-t-report-error-for-etc-sysconfig-netwo.patch * Removed 0144-90crypt-Fixed-crypttab_contains-to-also-work-with-de.patch * Removed 0145-40network-handle-ip-ifname-static-correctly.patch * Removed 0150-Find-kernel-modules-in-extra-and-weak-updates-path-a.patch * Removed 0157-Add-boot-zipl-to-host-devs-if-it-is-a-mount-point.patch * Removed 0158-Add-SUSE-kernel-module-dependencies-in-etc-modprobe.patch * Removed 0159-network-Try-to-load-xennet.patch * Removed 0160-s390-update_active_devices_initrd.patch * Removed 0161-95zfcp_rules-simplified-rd.zfcp-commandline-for-NPIV.patch * Removed 0162-network-Request-DHCP-lease-instead-of-getting-applyi.patch * Removed 0163-Install-etc-sysconfig-console-to-see-specific-fonts.patch * Removed 0164-Fix-initramfs-ver.img-vs-initrd-ver-in-dracut-initra.patch * Removed 0168-remove_plymouth_logo_file.patch * Removed 0169-network_set_mtu_macaddr_for_dhcp.patch * Removed 0170-iscsi-skip-ibft-invalid-dhcp.patch * Removed 0180-i18n_add_correct_fontmaps.patch * Removed 0182-fix-include-parsing.patch * Removed 0183-fix_add_drivers_hang.patch * Removed 0188-95dasd_rules-Install-collect-udev-helper-binary.patch * Removed 0190-replace-iscsistart-with-systemd-service-files.patch * Removed 0191-static_network_setup_return_zero.patch * Removed 0192-iscsi_set_boot_protocol_from_ifcfg.patch * Removed 0193-95iscsi-Set-number-of-login-retries.patch * Removed 0196-ibft-wait-for-session-on-all-paths.patch * Removed 0197-95iscsi-Do-not-require-network-for-qla4xxx-flash-ses.patch * Removed 0198-95iscsi-set-rd.iscsi.firmware-for-qla4xxx-sessions.patch * Removed 0199-rd-iscsi-waitnet-default-false.patch * Removed 0200-dracut_fix_multipath_without_config.patch * Removed 0201-fix_nfs_with_ip_instead_of_hostname.patch * Removed 0202-dracut_dmraid_use_udev.patch * Removed 0203-no-fail-builtin-module.patch * Removed 0204-mkinitrd-fix-monster.patch * Removed 0205-mdraid_ignore_hostonly.patch * Removed 0206-nfs_dns_alias.patch * Removed 0207-handle_module_aliases.patch * Removed 0208-no_forced_virtnet.patch * Removed 0209-fix_modules_load_d_hostonly.patch * Removed 0210-add_fcoe_uefi_check.patch * Removed 0212-fcoe_reorder_init_path.patch * Removed 0213-Fix-wrong-keymap-inclusion.patch * Removed 0214-95fcoe-Do-not-overwrite-FCoE-configuration.patch * Removed 0215-95fcoe-Do-not-complain-about-missing-etc-hba.conf.patch * Removed 0216-95fcoe-silence-lldpad-warnings.patch * Removed 0217-95fcoe-Allow-to-specify-the-FCoE-mode-via-the-fcoe-p.patch * Removed 0218-40network-allow-persistent-interface-names.patch * Removed 0219-95fcoe-use-interface-names-instead-of-MAC-addresses.patch * Removed 0220-95fcoe-always-set-AUTO_VLAN-for-fcoemon.patch * Removed 0221-95fcoe-Add-shutdown-script.patch * Removed 0222-90dm-Fixup-shutdown-script.patch * Removed 0223-90dm-fixup-dependency-cycle-between-MD-and-DM-shutdo.patch * Removed 0224-95iscsi-setup-bnx2i-offload-connections-properly.patch * Removed 0225-95fcoe-do-not-start-fcoemon-twice.patch * Removed 0300-dracut_dont_use_dpkg_defaults_on_SUSE.patch * Removed 0301-include_sysconfig_language.patch * Removed 0302-Revert-90multipath-add-hostonly-multipath.conf-in-ca.patch * Removed 0303-fix_multipath_check_hostonly.patch * Removed 0304-90multipath-Start-daemon-after-udev-settle.patch * Removed 0305-90multipath-load-dm_multipath-module-during-startup.patch * Removed 0306-90multipath-add-shutdown-script.patch * Removed 0307-90multipath-parse-kernel-commandline-option-multipat.patch * Removed 0308-mdraid_add_IMSM_NO_PLATFORM_env.patch * Removed 0309-90dmraid-do-not-delete-partitions.patch * Removed 0310-95resume-Do-not-resume-on-iSCSI.patch * Removed 0311-95iscsi-ip-ibft-is-deprecated.patch * Removed 0312-40network-Do-not-print-message-about-tmp-net.ibft0.c.patch * Removed 0313-90mdraid-Use-stock-MD-rules-to-assemble-RAID-arrays.patch * Removed 0314-nfs_do_not_pass_ifname_for_bonding_devices.patch * Removed 0402-driver-fail-summary.patch * Removed 0403-95lunmask-Add-module-to-handle-LUN-masking.patch * Removed 0404-dracut-emergency-optionally-print-fs-help.patch * Removed 0450-Strip-NUL-bytes-in-stream-before-push-in-string.patch * Removed 0451-systemd-initrd-add-initrd-root-device.target.patch * Removed 0452-Always-try-to-add-pinctrl-cherryview.patch * Removed 0453-Resolve-symbolic-links-for-i-and-k-parameters-bsc-90.patch * Removed 0454-Add-md4-and-arc4-modules-for-ntlm.patch * Removed 0500-Reset-IFS-variable.patch * Removed 0501-dasd_fix_ssid_bigger_zero.patch * Removed 0502-persistent_device_policy_param_enhance.patch * Removed 0503-dracut.sh-create-the-initramfs-non-world-readable-al.patch * Removed 0504-ibft-fix-boot-flag-check.patch * Removed 0505-Allow-booting-from-degraded-MD-RAID-arrays.patch * Removed 0506-Boot-on-s390x-with-fips-1-on-the-kernel-commnad-line.patch * Removed 0507-Set-TaskMax-inifinite-for-the-emergency-shell.patch * Removed 0508-90multipath-start-before-local-fs-pre.target.patch * Removed 0509-01fips-Remove-zlib-module-as-requirement.patch * Removed 0510-01fips-Some-modules-use-separators-other-than.patch * Removed 0511-01fips-ensure-fips-initialization-succeeds-on-s390-x.patch * Removed 0512-Make-binutils-optional-when-elfutils-are-available.patch * Removed 0513-Fix-regression-caused-by-6f9bf2b8ac436259bdccb110545.patch * Removed 0514-man-make-the-k-option-clear-using-mkinitrd.patch * Removed 0515-90kernel-modules-also-add-block-device-driver-revers.patch * Removed 0516-mkinitrd-suse.sh-Fix-prefix-calculation.patch * Removed 0517-95fcoe-fixup-fcoe-genrules.sh-for-VN2VN-mode.patch * Removed 0518-90kernel-modules-Fix-backlight-on-Cherrytrail-device.patch * Removed 0519-90kernel-modules-Ensure-phy-drivers-are-loaded-in-in.patch * Removed 0520-Ignore-module-resolution-errors.patch * Removed 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch * Removed 0522-Fix-typo-from-commit-3f1cdb520.patch * Removed 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch * Removed 0524-Suppress-nonsensical-error-message-bsc-1032029.patch * Removed 0525-backport-bail-out-if-module-directory-does-not-exist.patch * Removed 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch * Removed 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch * Removed 0528-Ensure-dracut.sh-responds-properly-to-hostonly_cmdli.patch * Removed 0529-systemd-add-missing-.slice-unit.patch * Removed 0530-dracut-systemd-dracut-cmdline-ask-fix-dracut-kernel-.patch * Removed 0531-dracut-systemd-.service-conflict-with-shutdown-targe.patch * Removed 0532-List-drivers-rather-than-looking-for-reverse-depende.patch * Removed 0533-instmods-check-modules.builtin-in-srcmods.patch * Removed 0534-ssh-client-Include-nss_-libraries.patch * Removed 0535-Sync-initramfs-after-creation.patch * Removed 0536-90multipath-drop-67-kpartx-compat.rules.patch * Removed 0537-dracut-init.sh-ignore-crc32.ko-in-builtin-test.patch * Removed 0538-Enable-core-dumps-with-systemd-from-initrd.patch * Removed 0539-Add-IMA-functionality-fate-323289.patch * Removed 0540-Check-the-proper-variable-for-a-custom-IMA-keys-dire.patch * Removed 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch * Removed 0542-Include-crc32c-intel-module-when-using-btrfs.patch * Removed 0543-Remove-00systemd-bootchart.patch * Removed 0544-40network-Make-ip-dhcp-work.patch * Removed 0545-Add-early-microcode-support-for-AMD-family-16h.patch * Removed 0546-Support-Microcode-Updates-for-AMD-CPU-Family-0x17.patch * Removed 0547-Fix-task-limit-in-emergency.service-the-same-change-.patch * Removed 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch * Removed 0549-fcoe-up-Increase-sleeptime-to-13s.patch * Removed 0550-95fcoe-add-timeout-initqueue-entries.patch * Removed 0551-fips-use-lib-modules-uname-r-modules.fips.patch * Removed 0552-98integrity-support-validating-the-IMA-policy-file-s.patch * Removed 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch * Removed 0554-98integrity-support-X.509-only-EVM-configuration.patch * Removed 0555-Avoid-executing-emergency-hooks-twice.patch * Removed 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch * Removed 0557-40network-make-arping-optional.patch * Removed 0558-40network-remove-brctl-dependency.patch * Removed 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch * Removed 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch * Removed 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch * Removed 0562-Adjust-driver-list-to-modern-kernels.patch * Removed 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch * Removed 0564-40network-Always-set-the-gw-variable.patch * Removed 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch * Removed 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch * Removed 0567-Fix-booting-with-fips-1-on-SLES-15.patch * Removed 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch * Removed 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch * Removed 0570-10i18n-Fix-possible-infinite-recursion.patch * Removed 0571-40network-Fix-static-network-setup.patch * Removed 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch * Removed 0573-lsinitrd.sh-quote-filename-in-extract_files.patch * Removed 0574-s-find_btrfs_devs-btrfs_devs.patch * Removed 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch * Removed 0581-kernel-modules-add-nfit.patch * Removed 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch * Removed 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch * Removed 0584-95dasd_rules-mark-dasd-rules-host_only.patch * Removed 0585-emergency-mode-use-sulogin.patch * Removed 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch * Removed 0587-Fix-a-missing-space-in-example-configs.patch * Removed 0588-Ensure-mmc-host-modules-get-included-properly.patch * Removed 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch * Removed 0590-00systemd-check-if-systemd-version-is-a-number.patch * Removed 0591-91zipl-Don-t-use-contents-of-commented-lines.patch * Removed 0592-95iscsi-handle-qedi-like-bnx2i.patch * Removed 0593-dracut-only-copy-xattr-if-root.patch * Removed 0594-Check-SUSE-kernel-module-dependencies-recursively.patch * Removed 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch * Removed 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch * Removed 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch * Removed 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch * Removed 0599-iscsiroot-try-targets-only-once.patch * Removed 0600-iscsiroot-remove-bashisms.patch * Removed 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch ==== fuse3 ==== Version update (3.6.1 -> 3.6.2) - Update to version 3.6.2 * The init script is now installed to /etc/ rather than /usr/local/etc by default. * Minor bugfixes - Drop fuse-install-fix.patch, not needed with -Duseroot=false - Add conf-rename.patch, which is split from the above now removed patch ==== gcc9 ==== Version update (9.1.1+r272147 -> 9.1.1+r273003) Subpackages: libgcc_s1 libstdc++6 - Update to gcc-9-branch head (r273003). - Fix default for ringdisabled: bcond_with means 'conditionally with': so only do so if explicitly specified. - Do not build cross-* variants in stagings/rings. - Add gcc9-value-prof.patch in order to provide more stable builds for single value counters. ==== glib2 ==== Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 - Add glib2-keyfile-handle-filename-being-null.patch: key file: Handle filename being NULL (glgo#GNOME/GLib!1825, glgo#GNOME/GLib#984). ==== kernel-firmware ==== Version update (20190628 -> 20190712) Subpackages: ucode-amd - Revert the iwlwifi 9000 and 9260 *-46.ucode firmware files that are broken on some machines to 20190618 state (bsc#1142128): WHENCE-iwlwifi-9xxx-46-revert.patch - Update to version 20190712: * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth 22161 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * amdgpu: update vega10 VCE firmware * amdgpu: update picasso vcn firmware * amdgpu: update raven vcn firmware * amdgpu: update tonga to latest 19.20 firmware * amdgpu: update vega12 to latest 19.20 firmware * amdgpu: partially revert 2579167548be33afb1fe2a9a5c141561ee5a8bbe * amdgpu: update vega10 to latest 19.20 firmware * amdgpu: update polaris12 to latest 19.20 firmware * amdgpu: update raven2 to latest 19.20 firmware * amdgpu: update raven to latest 19.20 firmware * amdgpu: update picasso to latest 19.20 firmware ==== multipath-tools ==== Version update (0.8.1+59+suse.f947184 -> 0.8.2+11+suse.0f6a649) Subpackages: kpartx libmpath0 - Update to version 0.8.2+11+suse.0f6a649: * kpartx: recognize DASD on loop devices again (bsc#1139775) * Bump version to 0.8.2 - most changes were already in SUSE tree * Man page improvements ==== pam-config ==== Version update (1.0 -> 1.1) - Update to version 1.1: - enhance comments in common-*-pc files ==== suse-module-tools ==== Version update (15.2.3 -> 15.2.4) - Update to version 15.2.4: * sg.conf: avoid file conflict with system-tuning-common-SUSE -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

Re: [opensuse-kubic] DNS resolution not working
by Robert Munteanu 19 Jul '19

19 Jul '19

[note: resend due to mailing list outage] On Thu, 2019-07-18 at 10:09 +0200, Antonio Ojea wrote: > Glad to hear it! tldr; Use weave, flannel and cilium don't work properly on kubic. I spoke to soon ... My (test) cluster is still plagued by connectivity issues. Notably, DNS connectivity but generally any connection from a pod to an endpoint _running on another node_. At this point I became convinced that the problem is with the network plug-in, not with my setup. I was able to configure weave with zero problems, using the default instructions. # kubeadm init # mkdir $HOME/.kube && cp /etc/kubernetes/admin.conf $HOME/.kube/config # kubectl apply -f " https://cloud.weave.works/k8s/net?k8s-version=$(kubectl version | base64 | tr -d '\n')" At this point the cluster works just fine, including accessing services, DNS lookups, ingresses ( via ingress-nginx + metallb ). Thanks all for the help, Robert -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

3 4

[opensuse-kubic] New Kubic snapshot 20190717 released!
by Richard Brown 18 Jul '19

18 Jul '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ebtables kernel-firmware (20190618 -> 20190628) vim (8.1.1600 -> 8.1.1694) === Details === ==== ebtables ==== - fix path (/sbin -> /usr/sbin) in ebtables.systemd [bsc#1140898] ==== kernel-firmware ==== Version update (20190618 -> 20190628) Subpackages: ucode-amd - Update to version 20190628: * linux-firmware: rsi: add firmware image for redpine 9116 chipset * linux-firmware: Add firmware file for Intel Bluetooth AX201 * iwlwifi: add new firmwares for integrated 22000 series * iwlwifi: update FW for 22000 to Core45-96 * iwlwifi: update FWs for 9000 series to Core45-96 * iwlwifi: update Core45 FWs for 22260, 9000 and 9260 * iwlwifi: udpate -36 firmware for 8000 series ==== vim ==== Version update (8.1.1600 -> 8.1.1694) Subpackages: vim-data-common - Updated to version 8.1.1694, fixes the following problems * Cannot specify highlighting for popup window scrollbar. * Missing changes to popup window test file. * Popup window cannot overflow on the left or right. * Crash when using unknown highlighting in text property. * Popup window scroll test is flaky. * Vim may delay processing messages on a json channel. (Pontus Leitzler) * On a narrow screen ":hi" output is confusing. * Popup window scrollbar does not respond to click. * The evalfunc.c file is too big. * The user cannot easily close a popup window. * There is no way to add or load a buffer without side effects. * Bufadd() reuses existing buffer without a name. * Cannot show an existing buffer in a popup window. * Popup window test fails with Athena and Motif. * 'numberwidth' can only go up to 10. * Crash when passing buffer number to popup_create(). (Yasuhiro Matsumoto) * No test for popup window with mask and position fixed. * Amiga-like systems quickly run out of stack. * Tests are not run with GUI on Travis. * No test for popup window with border and mask. * Amiga: time.h included twice. * Wrong width if displaying a lot of lines in a popup window. * Display wrong with signs in narrow number column. * When testing in the GUI may try to run gvim in a terminal. * Script line numbers are not exactly right. * No test for closing a popup window with a modified buffer. * Header file contains mixed comment style. * Popup window functions not in list of functions. * Terminal function help is in the wrong file. * Various small problems. * Displaying signs is inefficient. * Build with EXITFREE but without +arabic fails. * Cannot generate prototypes with X11 but without GUI. * Terminal test fails when term_getansicolors() is missing. Diff test fails without +rightleft. (Dominique Pelle) * Warnings for unused variables in small version. (John Marriott) * Crash when popup has fitting scrollbar. (Trygve Aaberge) * After running tests and clean the XfakeHOME directory remains. * Running tests leaves some files behind. * Changing an autoload name into a script file name is inefficient. * The CursorHold autocommand takes down a balloon. (Paul Jolly) * Garbage collection may run at a wrong moment. (Trygve Aaberge) * May use uninitialized variable. (Patrick Palka) * Sign placement is wrong when 'foldcolumn' is set. * Sound test does not work on Travis. * Cannot use a popup window for a balloon. * build failure * Build error with GTK and hangulinput feature, im_get_status() defined twice. (Dominique Pelle) * Illegal memory access when closing popup window. * Warning for using uninitialized variable. (Tony Mechelynck) * Suspend test is flaky on some systems. * GUI: popup window doesn't close on mouse movement. (Paul Jolly) * Ubsan warns for possibly passing NULL pointer. * GUI: screen updates from 'balloonexpr' are not displayed. * Popup window border drawn wrong with multi-byte char. (Marcin Szamotulski) * Popup window width is wrong when using Tabs. (Paul Jolly) * Terminal: screen updates from 'balloonexpr' are not displayed. * Debug statements included in patch. * Popup window "mousemoved" values not correct. * Assert_fails() does not fail inside try/catch. * Cannot build with +textprop but without +balloon_eval. * Cannot build uninstal.exe with some version of MinGW. * Compiler warning for using size_t. * GUI resize may cause changing Rows at a bad time. (Dominique Pelle) * Crash when popup window with mask is below the screen. * Click in popup window scrollbar with border doesn't scroll. * Flags for Ex commands may clash with other symbols. * Popup window test is a bit flaky on some systems. * Travis: test results section is closed even when some tests failed. * Sign column not always properly aligned. * Copying a blob may result in it being locked. * "make cmdidxs" doesn't work. * Cannot easily find the popup window at a certain position. * Script to check a colorscheme can be improved. * Listener list not correctly updated on listener_remove(). * "maxwidth" of popup window does not always work properly. * Tests get stuck when running into an existing swapfile. * When using popup_menu() does not scroll to show the selected line. * Test using SwapExists autocommand file may fail. * The command table is not well aligned. * Insert stray "{" when listener gets buffer line. (Paul Jolly) * Placing a larger number of signs is slow. * Dictionary with string keys is longer than needed. * Profiling functionality is spread out. * Missing file in distributed file list. * "*" of "*{" is recognized as multipy operator. (Yasuhiro Matsumoto) * The evalfunc.c file is too big. * Old makefiles are no longer useful. * Profiling code is spread out. * Default padding for popup window menu is too much. * Diff test fails on some systems. (Elimar Riesebieter) * Using *{} for literal dict is not backwards compatible. (Yasuhiro Matsumoto) * Syntax coloring and highlighting is in one big file. * The RUN_VIM variable is longer than needed. -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20190717 released!
by Richard Brown 18 Jul '19

18 Jul '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: kernel-firmware (20190618 -> 20190628) vim (8.1.1600 -> 8.1.1694) === Details === ==== kernel-firmware ==== Version update (20190618 -> 20190628) Subpackages: ucode-amd - Update to version 20190628: * linux-firmware: rsi: add firmware image for redpine 9116 chipset * linux-firmware: Add firmware file for Intel Bluetooth AX201 * iwlwifi: add new firmwares for integrated 22000 series * iwlwifi: update FW for 22000 to Core45-96 * iwlwifi: update FWs for 9000 series to Core45-96 * iwlwifi: update Core45 FWs for 22260, 9000 and 9260 * iwlwifi: udpate -36 firmware for 8000 series ==== vim ==== Version update (8.1.1600 -> 8.1.1694) Subpackages: vim-data-common - Updated to version 8.1.1694, fixes the following problems * Cannot specify highlighting for popup window scrollbar. * Missing changes to popup window test file. * Popup window cannot overflow on the left or right. * Crash when using unknown highlighting in text property. * Popup window scroll test is flaky. * Vim may delay processing messages on a json channel. (Pontus Leitzler) * On a narrow screen ":hi" output is confusing. * Popup window scrollbar does not respond to click. * The evalfunc.c file is too big. * The user cannot easily close a popup window. * There is no way to add or load a buffer without side effects. * Bufadd() reuses existing buffer without a name. * Cannot show an existing buffer in a popup window. * Popup window test fails with Athena and Motif. * 'numberwidth' can only go up to 10. * Crash when passing buffer number to popup_create(). (Yasuhiro Matsumoto) * No test for popup window with mask and position fixed. * Amiga-like systems quickly run out of stack. * Tests are not run with GUI on Travis. * No test for popup window with border and mask. * Amiga: time.h included twice. * Wrong width if displaying a lot of lines in a popup window. * Display wrong with signs in narrow number column. * When testing in the GUI may try to run gvim in a terminal. * Script line numbers are not exactly right. * No test for closing a popup window with a modified buffer. * Header file contains mixed comment style. * Popup window functions not in list of functions. * Terminal function help is in the wrong file. * Various small problems. * Displaying signs is inefficient. * Build with EXITFREE but without +arabic fails. * Cannot generate prototypes with X11 but without GUI. * Terminal test fails when term_getansicolors() is missing. Diff test fails without +rightleft. (Dominique Pelle) * Warnings for unused variables in small version. (John Marriott) * Crash when popup has fitting scrollbar. (Trygve Aaberge) * After running tests and clean the XfakeHOME directory remains. * Running tests leaves some files behind. * Changing an autoload name into a script file name is inefficient. * The CursorHold autocommand takes down a balloon. (Paul Jolly) * Garbage collection may run at a wrong moment. (Trygve Aaberge) * May use uninitialized variable. (Patrick Palka) * Sign placement is wrong when 'foldcolumn' is set. * Sound test does not work on Travis. * Cannot use a popup window for a balloon. * build failure * Build error with GTK and hangulinput feature, im_get_status() defined twice. (Dominique Pelle) * Illegal memory access when closing popup window. * Warning for using uninitialized variable. (Tony Mechelynck) * Suspend test is flaky on some systems. * GUI: popup window doesn't close on mouse movement. (Paul Jolly) * Ubsan warns for possibly passing NULL pointer. * GUI: screen updates from 'balloonexpr' are not displayed. * Popup window border drawn wrong with multi-byte char. (Marcin Szamotulski) * Popup window width is wrong when using Tabs. (Paul Jolly) * Terminal: screen updates from 'balloonexpr' are not displayed. * Debug statements included in patch. * Popup window "mousemoved" values not correct. * Assert_fails() does not fail inside try/catch. * Cannot build with +textprop but without +balloon_eval. * Cannot build uninstal.exe with some version of MinGW. * Compiler warning for using size_t. * GUI resize may cause changing Rows at a bad time. (Dominique Pelle) * Crash when popup window with mask is below the screen. * Click in popup window scrollbar with border doesn't scroll. * Flags for Ex commands may clash with other symbols. * Popup window test is a bit flaky on some systems. * Travis: test results section is closed even when some tests failed. * Sign column not always properly aligned. * Copying a blob may result in it being locked. * "make cmdidxs" doesn't work. * Cannot easily find the popup window at a certain position. * Script to check a colorscheme can be improved. * Listener list not correctly updated on listener_remove(). * "maxwidth" of popup window does not always work properly. * Tests get stuck when running into an existing swapfile. * When using popup_menu() does not scroll to show the selected line. * Test using SwapExists autocommand file may fail. * The command table is not well aligned. * Insert stray "{" when listener gets buffer line. (Paul Jolly) * Placing a larger number of signs is slow. * Dictionary with string keys is longer than needed. * Profiling functionality is spread out. * Missing file in distributed file list. * "*" of "*{" is recognized as multipy operator. (Yasuhiro Matsumoto) * The evalfunc.c file is too big. * Old makefiles are no longer useful. * Profiling code is spread out. * Default padding for popup window menu is too much. * Diff test fails on some systems. (Elimar Riesebieter) * Using *{} for literal dict is not backwards compatible. (Yasuhiro Matsumoto) * Syntax coloring and highlighting is in one big file. * The RUN_VIM variable is longer than needed. -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] kubernetes packaging changes/own Kubic k8s control plane
by Thorsten Kukuk 18 Jul '19

18 Jul '19

Hi, we made some layout changes to the kubernetes package, which got into the devel:kubic project today and it's on the way to openSUSE Kubic now. What did we change and why? Currently, we use the upstream kubernetes container images for the containerized control plane. But of course, we want to provide our own. Additional, we use currently the fat hyperkube binary. This made sense when we didn't had the containerized control plane, but today, this is only a waste of disk space. E.g., with the changes, we reduced the by kubernetes required disk space by 25%. And if you want to install kubectl on openSUSE Tumbleweed to maintain a remote kubernetes cluster, we are down from 200MB to about 40MB. The second reason is, that this makes building of the required kubernetes container images much easier. If you want to test or use our own control plane already, here is the config file you need for kubeadm with flannel: apiVersion: kubeadm.k8s.io/v1beta1 kind: InitConfiguration --- apiVersion: kubeadm.k8s.io/v1beta1 kind: ClusterConfiguration dns: type: CoreDNS imageRepository: k8s.gcr.io imageTag: 1.2.6 etcd: local: imageRepository: k8s.gcr.io imageTag: 3.3.10 imageRepository: registry.opensuse.org/devel/kubic/containers/container/kubic kubernetesVersion: v1.15.0 networking: podSubnet: 10.244.0.0/16 And yes, coredns and etcd container images will follow the next days ;) Regards, Thorsten -- Thorsten Kukuk, Distinguished Engineer, Senior Architect SLES & MicroOS SUSE Linux GmbH, Maxfeldstr. 5, 90409 Nuernberg, Germany GF: Felix Imendoerffer, Mary Higgins, Sri Rasiah, HRB 21284 (AG Nuernberg) -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

Re: [opensuse-kubic] DNS resolution not working
by Thorsten Kukuk 18 Jul '19

18 Jul '19

On Thu, Jul 18, Robert Munteanu wrote: > That works, thank you. I tried to spot the relevant differences with a > diff, but they were too large. I think it's the new PodSecurityPolicy > Should I file a bug for this? I submitted a fix. Thorsten -- Thorsten Kukuk, Distinguished Engineer, Senior Architect SLES & MicroOS SUSE Linux GmbH, Maxfeldstr. 5, 90409 Nuernberg, Germany GF: Felix Imendoerffer, Mary Higgins, Sri Rasiah, HRB 21284 (AG Nuernberg) -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20190716 released!
by Richard Brown 18 Jul '19

18 Jul '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: device-mapper gpg2 (2.2.16 -> 2.2.17) grub2 hwdata (0.324 -> 0.325) iputils (s20190515 -> s20190709) irqbalance (1.4.0 -> 1.6.0+git20190711.f7fdebb) libpciaccess (0.14 -> 0.15) patterns-containers permissions (1550_20190521 -> 1550_20190711) rsync sqlite3 (3.28.0 -> 3.29.0) zlib === Details === ==== device-mapper ==== Subpackages: libdevmapper-event1_03 libdevmapper1_03 - Fix unknown feature in status message (bsc#1135984) + bug-1135984_cache-support-no_discard_passdown.patch ==== gpg2 ==== Version update (2.2.16 -> 2.2.17) - Update to 2.2.17 [bsc#1141093] * gpg: Do not try the import fallback if the options are already used. * gpg: Fix regression in option "self-sigs-only". * gpg: With --auto-key-retrieve prefer WKD over keyservers. * gpg: Add "self-sigs-only" and "import-clean" to the keyserver options. * gpg: Avoid printing false AKL error message. * gpg: New command --locate-external-key. * gpg: Make the get_pubkey_byname interface easier to understand. * gpg: Fallback to import with self-sigs-only on too large keyblocks. * gpg: New import and keyserver option "self-sigs-only" * gpg: Make read_block in import.c more flexible. * dirmngr: fix handling of HTTPS redirections during HKP. * dirmngr: Avoid endless loop in case of HTTP error 503. * dirmngr: Do not rewrite the redirection for the "openpgpkey" subdomain. * dirmngr: Support the new WKD draft with the openpgpkey subdomain. * wkd: Change client/server limit back to 64 KiB. * tools: gpgconf: Killing order is children-first. * Return better error code for some getinfo IPC commands. * po: Update Russian translation. ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-x86_64-efi - Fix iteration of FCP LUNs (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229). * Refresh grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch ==== hwdata ==== Version update (0.324 -> 0.325) - Update to version 0.325: * Updated pci, usb and vendor ids. ==== iputils ==== Version update (s20190515 -> s20190709) - Update to version s20190709 - Removed patches included in this upstream release: ping-Fix-unwanted-bell-on-unreachable-address.patch 0001-build-sys-doc-Fix-the-dependency-on-xsltproc.patch meson-remove-setcap-setuid.sh.patch - Add libcap-progs as a build dependency (setcap is needed) ==== irqbalance ==== Version update (1.4.0 -> 1.6.0+git20190711.f7fdebb) - Add git hash tag and date in version as source is derived from master/HEAD branch. Thanks to namtrac. This is done via _service file. Also add an example how to get back to a stable release version - Update to latest git master version: git commit f7fdebbaa4dbc27fcdeb7 - Use noun phrase in summaries. - Update to version 1.6.0 (b47eea84cbb93f533b0cba2f1aa): * fix balancing when numa information isn't available * Refine document about IRQBALANCE_BANNED_CPUS * Fix string truncation issues detected by GCC 8 * fix socket path creation * Update document for option --banmod and --deepestcache * Fix ambiguous parsing of *node* entries in /sys. * procinterrupts: check xen-dyn-event more flexible * misc: Add an example for policy script * policyscript: ignore non-executable files when specifying a directory remove because already mainline: D fix_buffer_overflow_compiler.patch ==== libpciaccess ==== Version update (0.14 -> 0.15) - Update to version 0.15 * Updates for FreeBSD and Hurd support * Fixed multifunction bridge enumeration * Fixed a crash when no PCI bus exists ==== patterns-containers ==== - Add Rook manifest files to Kubic ==== permissions ==== Version update (1550_20190521 -> 1550_20190711) Subpackages: chkstat permissions-config - Update to version 20190711: * iputils: Add capability permissions for clockdiff (bsc#1140994) - Update to version 20190710: * iputils/ping: Drop effective capability * iputils/ping6: Remove definitions ==== rsync ==== - Remove SuSEfirewall2 service since SuSEfirewall2 has been replaced by firewalld (which already provides a rsyncd service). ==== sqlite3 ==== Version update (3.28.0 -> 3.29.0) - Update to version 3.29.0 * Added the SQLITE_DBCONFIG_DQS_DML and SQLITE_DBCONFIG_DQS_DDL actions to sqlite3_db_config() for activating and deactivating the double-quoted string literal misfeature. Both default to "on" for legacy compatibility, but developers are encouraged to turn them "off", perhaps using the -DSQLITE_DQS=0 compile-time option. * -DSQLITE_DQS=0 is now a recommended compile-time option. * Improvements to the query planner: + Improved optimization of AND and OR operators when one or the other operand is a constant. + Enhancements to the LIKE optimization for cases when the left-hand side column has numeric affinity. * Added the "sqlite_dbdata" virtual table for extracting raw low-level content from an SQLite database, even a database that is corrupt. * Enhancements to the CLI: + Add the ".recover" command which tries to recover as much content as possible from a corrupt database file. + Add the ".filectrl" command useful for testing. + Add the long-standing ".testctrl" command to the ".help" menu. + Added the ".dbconfig" command ==== zlib ==== - Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum conform to usage bsc#1141059 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] DNS resolution not working
by Robert Munteanu 17 Jul '19

17 Jul '19

Hi, I have set up a minimal Kubic cluster using KVM VMs. I have been using the openSUSE-MicroOS.x86_64-16.0.0-Kubic-kubeadm-kvm-and-xen-Build3.60.qcow2 base image. $ kubectl get nodes NAME STATUS ROLES AGE VERSION master Ready master 16m v1.15.0 worker-1 Ready <none> 13m v1.15.0 I've used the 'standard' steps to set up the cluster - kubeadm init --pod-network-cidr=10.244.0.0/16 on master - set up ~/.kube/config on master - kubectl apply -f /usr/share/k8s-yaml/flannel/kube-flannel.yaml on master - kubeadm join on worker-1 I noticed that DNS resolution does not work for cluster-local services, which is quite problematic. The basic test I am running is $ kubectl apply -f https://k8s.io/examples/admin/dns/busybox.yaml $ time kubectl exec -ti busybox -- nslookup kubernetes.default This always fails within a minute Server: 10.96.0.10 Address 1: 10.96.0.10 nslookup: can't resolve 'kubernetes.default' command terminated with exit code 1 real 1m0.203s user 0m0.100s sys 0m0.025s I have started looking at the usual suspects: 1. dns pods are up $ kubectl -n kube-system get pods -ls NAME READY STATUS RESTARTS AGE coredns-5c98db65d4-r8ck8 1/1 Running 0 17m coredns-5c98db65d4-wpjc4 1/1 Running 0 17m 2. The DNS service is available $ kubectl -n kube-system describe svc Name: kube-dns Namespace: kube-system Labels: k8s-app=kube-dns kubernetes.io/cluster-service=true kubernetes.io/name=KubeDNS Annotations: prometheus.io/port: 9153 prometheus.io/scrape: true Selector: k8s-app=kube-dns Type: ClusterIP IP: 10.96.0.10 Port: dns 53/UDP TargetPort: 53/UDP Endpoints: 10.244.0.2:53,10.244.0.3:53 Port: dns-tcp 53/TCP TargetPort: 53/TCP Endpoints: 10.244.0.2:53,10.244.0.3:53 Port: metrics 9153/TCP TargetPort: 9153/TCP Endpoints: 10.244.0.2:9153,10.244.0.3:9153 Session Affinity: None Events: <none> 3. I noticed that trying to run queries against the endpoints themselves fails as well, e.g. $ kubectl -n default exec -ti busybox -- nslookup kubernetes.default 10.244.0.2 4. As the coredns pods are always scheduled on master, I tried to ping the address from the worker-1 node, but that does not work master:~ # ip r default via 10.24.0.1 dev eth0 proto dhcp 10.24.0.0/16 dev eth0 proto kernel scope link src 10.24.0.70 10.244.0.0/24 dev cni0 proto kernel scope link src 10.244.0.1 10.244.1.0/24 via 10.244.1.0 dev flannel.1 onlink worker-1:~ # ip r default via 10.24.0.1 dev eth0 proto dhcp 10.24.0.0/16 dev eth0 proto kernel scope link src 10.24.0.71 10.244.0.0/24 via 10.244.0.0 dev flannel.1 onlink 10.244.1.0/24 dev cni0 proto kernel scope link src 10.244.1.1 5. I have tried to use cilium, but then the pod is stuck in 'ContainerCreating'. I'm a bit at a loss here to be honest, any ideas about debugging this are more than welcome. Things usually work, I can access the internet from containers, the VMs can ping each other - it's just the 'virtual' IP access that does not work. Thanks, Robert -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

3 3

[opensuse-kubic] New kubernetes utilities and pattern
by Thorsten Kukuk 17 Jul '19

17 Jul '19

Hi, as some of you may have already seen, we added some especially for RBAC usefull utilities to our distribution. You can find a "Utilities to manage kubernetes" pattern on Kubic and Tumbleweed containing new tools like rakkess, kubectl-who-can and rbac-lookup. We have also packaged rbac-manager, the container image is currently only available in the devel/kubic/containers namespace of our registry. rbac-manager-k8s-yaml contains the manifest to deploy it. If you know more usefull tools, please speak up or add them to the pattern. Thorsten -- Thorsten Kukuk, Distinguished Engineer, Senior Architect SLES & MicroOS SUSE Linux GmbH, Maxfeldstr. 5, 90409 Nuernberg, Germany GF: Felix Imendoerffer, Mary Higgins, Sri Rasiah, HRB 21284 (AG Nuernberg) -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

2 2

[opensuse-kubic] New MicroOS snapshot 20190703 released!
by Richard Brown 04 Jul '19

04 Jul '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: kernel-source (5.1.10 -> 5.1.15) === Details === ==== kernel-source ==== Version update (5.1.10 -> 5.1.15) Subpackages: kernel-debug kernel-default - Revert "ovl: detect overlapping layers" (openqa tests failing). - Revert "ovl: don't fail with disconnected lower NFS" (openqa tests failing). - Revert "ovl: fix bogus -Wmaybe-unitialized warning" (openqa tests failing). - commit cb24bc9 - Linux 5.1.15 (bnc#1012628). - tracing: Silence GCC 9 array bounds warning (bnc#1012628). - mmc: sdhci: sdhci-pci-o2micro: Correctly set bus width when tuning (bnc#1012628). - mmc: sdhi: disallow HS400 for M3-W ES1.2, RZ/G2M, and V3H (bnc#1012628). - mmc: mediatek: fix SDIO IRQ interrupt handle flow (bnc#1012628). - mmc: mediatek: fix SDIO IRQ detection issue (bnc#1012628). - mmc: core: API to temporarily disable retuning for SDIO CRC errors (bnc#1012628). - mmc: core: Add sdio_retune_hold_now() and sdio_retune_release() (bnc#1012628). - mmc: core: Prevent processing SDIO IRQs when the card is suspended (bnc#1012628). - scsi: ufs: Avoid runtime suspend possibly being blocked forever (bnc#1012628). - usb: chipidea: udc: workaround for endpoint conflict issue (bnc#1012628). - xhci: detect USB 3.2 capable host controllers correctly (bnc#1012628). - usb: xhci: Don't try to recover an endpoint if port is in error state (bnc#1012628). - cifs: add spinlock for the openFileList to cifsInodeInfo (bnc#1012628). - cifs: fix GlobalMid_Lock bug in cifs_reconnect (bnc#1012628). - IB/hfi1: Validate fault injection opcode user input (bnc#1012628). - IB/hfi1: Close PSM sdma_progress sleep window (bnc#1012628). - IB/hfi1: Avoid hardlockup with flushlist_lock (bnc#1012628). - IB/hfi1: Correct tid qp rcd to match verbs context (bnc#1012628). - IB/hfi1: Silence txreq allocation warnings (bnc#1012628). - iio: imu: st_lsm6dsx: fix PM support for st_lsm6dsx i2c controller (bnc#1012628). - iio: temperature: mlx90632 Relax the compatibility check (bnc#1012628). - Input: synaptics - enable SMBus on ThinkPad E480 and E580 (bnc#1012628). - Input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD (bnc#1012628). - Input: silead - add MSSL0017 to acpi_device_id (bnc#1012628). - apparmor: fix PROFILE_MEDIATES for untrusted input (bnc#1012628). - apparmor: enforce nullbyte at end of tag string (bnc#1012628). - apparmor: reset pos on failure to unpack for various functions (bnc#1012628). - Revert "brcmfmac: disable command decode in sdio_aos" (bnc#1012628). - brcmfmac: sdio: Disable auto-tuning around commands expected to fail (bnc#1012628). - brcmfmac: sdio: Don't tune while the card is off (bnc#1012628). - lkdtm/usercopy: Moves the KERNEL_DS test to non-canonical (bnc#1012628). - ARC: fix build warnings (bnc#1012628). - dmaengine: jz4780: Fix transfers being ACKed too soon (bnc#1012628). - dmaengine: dw-axi-dmac: fix null dereference when pointer first is null (bnc#1012628). - dmaengine: mediatek-cqdma: sleeping in atomic context (bnc#1012628). - dmaengine: sprd: Fix the possible crash when getting descriptor status (bnc#1012628). - dmaengine: sprd: Add validation of current descriptor in irq handler (bnc#1012628). - dmaengine: sprd: Fix the incorrect start for 2-stage destination channels (bnc#1012628). - dmaengine: sprd: Fix block length overflow (bnc#1012628). - dmaengine: sprd: Fix the right place to configure 2-stage transfer (bnc#1012628). - ARC: [plat-hsdk]: Add missing multicast filter bins number to GMAC node (bnc#1012628). - ARC: [plat-hsdk]: Add missing FIFO size entry in GMAC node (bnc#1012628). - MIPS: mark ginvt() as __always_inline (bnc#1012628). - fpga: stratix10-soc: fix use-after-free on s10_init() (bnc#1012628). - fpga: dfl: afu: Pass the correct device to dma_mapping_error() (bnc#1012628). - fpga: dfl: Add lockdep classes for pdata->lock (bnc#1012628). - parport: Fix mem leak in parport_register_dev_model (bnc#1012628). - parisc: Fix compiler warnings in float emulation code (bnc#1012628). - habanalabs: fix bug in checking huge page optimization (bnc#1012628). - IB/rdmavt: Fix alloc_qpn() WARN_ON() (bnc#1012628). - IB/hfi1: Insure freeze_work work_struct is canceled on shutdown (bnc#1012628). - IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value (bnc#1012628). - IB/hfi1: Validate page aligned for a given virtual address (bnc#1012628). - MIPS: uprobes: remove set but not used variable 'epc' (bnc#1012628). - crypto: hmac - fix memory leak in hmac_init_tfm() (bnc#1012628). - xtensa: Fix section mismatch between memblock_reserve and mem_reserve (bnc#1012628). - kselftest/cgroup: fix unexpected testing failure on test_memcontrol (bnc#1012628). - kselftest/cgroup: fix unexpected testing failure on test_core (bnc#1012628). - kselftest/cgroup: fix incorrect test_core skip (bnc#1012628). - userfaultfd: selftest: fix compiler warning (bnc#1012628). - selftests: vm: install test_vmalloc.sh for run_vmtests (bnc#1012628). - net: dsa: mv88e6xxx: avoid error message on remove from VLAN 0 (bnc#1012628). - net: hns: Fix loopback test failed at copper ports (bnc#1012628). - mdesc: fix a missing-check bug in get_vdev_port_node_info() (bnc#1012628). - sparc: perf: fix updated event period in response to PERF_EVENT_IOC_PERIOD (bnc#1012628). - net: ethernet: mediatek: Use hw_feature to judge if HWLRO is supported (bnc#1012628). - net: ethernet: mediatek: Use NET_IP_ALIGN to judge if HW RX_2BYTE_OFFSET is enabled (bnc#1012628). - selftests: set sysctl bc_forwarding properly in router_broadcast.sh (bnc#1012628). - drm/arm/mali-dp: Add a loop around the second set CVAL and try 5 times (bnc#1012628). - drm/arm/hdlcd: Actually validate CRTC modes (bnc#1012628). - drm/arm/hdlcd: Allow a bit of clock tolerance (bnc#1012628). - nvmet: fix data_len to 0 for bdev-backed write_zeroes (bnc#1012628). - kbuild: tar-pkg: enable communication with jobserver (bnc#1012628). - scripts/checkstack.pl: Fix arm64 wrong or unknown architecture (bnc#1012628). - net: phylink: avoid reducing support mask (bnc#1012628). - scsi: ufs: Check that space was properly alloced in copy_query_response (bnc#1012628). - scsi: smartpqi: unlock on error in pqi_submit_raid_request_synchronous() (bnc#1012628). - net: ipvlan: Fix ipvlan device tso disabled while NETIF_F_IP_CSUM is set (bnc#1012628). - udmabuf: actually unmap the scatterlist (bnc#1012628). - tests: fix pidfd-test compilation (bnc#1012628). - s390/qeth: handle limited IPv4 broadcast in L3 TX path (bnc#1012628). - s390/qeth: check dst entry before use (bnc#1012628). - s390/qeth: fix VLAN attribute in bridge_hostnotify udev event (bnc#1012628). - hwmon: (core) add thermal sensors only if dev->of_node is present (bnc#1012628). - hwmon: (pmbus/core) Treat parameters as paged if on multiple pages (bnc#1012628). - arm64: Silence gcc warnings about arch ABI drift (bnc#1012628). - nvme: Fix u32 overflow in the number of namespace list calculation (bnc#1012628). - ovl: detect overlapping layers (bnc#1012628). - ovl: don't fail with disconnected lower NFS (bnc#1012628). - ovl: fix bogus -Wmaybe-unitialized warning (bnc#1012628). - btrfs: start readahead also in seed devices (bnc#1012628). - can: xilinx_can: use correct bittiming_const for CAN FD core (bnc#1012628). - can: flexcan: fix timeout when set small bitrate (bnc#1012628). - can: purge socket error queue on sock destruct (bnc#1012628). - riscv: mm: synchronize MMU after pte change (bnc#1012628). - powerpc/bpf: use unsigned division instruction for 64-bit operations (bnc#1012628). - ARM: imx: cpuidle-imx6sx: Restrict the SW2ISO increase to i.MX6SX (bnc#1012628). - ARM: mvebu_v7_defconfig: fix Ethernet on Clearfog (bnc#1012628). - ARM: dts: dra76x: Update MMC2_HS200_MANUAL1 iodelay values (bnc#1012628). - ARM: dts: am57xx-idk: Remove support for voltage switching for SD card (bnc#1012628). - arm64/sve: <uapi/asm/ptrace.h> should not depend on <uapi/linux/prctl.h> (bnc#1012628). - arm64: ssbd: explicitly depend on <linux/prctl.h> (bnc#1012628). - KVM: x86/mmu: Allocate PAE root array when using SVM's 32-bit NPT (bnc#1012628). - ovl: make i_ino consistent with st_ino in more cases (bnc#1012628). - drm/vmwgfx: Use the backdoor port if the HB port is not available (bnc#1012628). - drm/i915: Don't clobber M/N values during fastset check (bnc#1012628). - binder: fix possible UAF when freeing buffer (bnc#1012628). - staging: erofs: add requirements field in superblock (bnc#1012628). - Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (bnc#1012628). - Bluetooth: Fix regression with minimum encryption key size alignment (bnc#1012628). - SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (bnc#1012628). - x86/vdso: Prevent segfaults due to hoisted vclock reads (bnc#1012628). - fs/namespace: fix unprivileged mount propagation (bnc#1012628). - cfg80211: fix memory leak of wiphy device name (bnc#1012628). - mac80211: drop robust management frames from unknown TA (bnc#1012628). - {nl,mac}80211: allow 4addr AP operation on crypto controlled devices (bnc#1012628). - mac80211: handle deauthentication/disassociation from TDLS peer (bnc#1012628). - nl80211: fix station_info pertid memory leak (bnc#1012628). - mac80211: Do not use stack memory with scatterlist for GMAC (bnc#1012628). - x86/resctrl: Don't stop walking closids when a locksetup group is found (bnc#1012628). - powerpc/mm/64s/hash: Reallocate context ids on fork (bnc#1012628). - Refresh patches.suse/apparmor-compatibility-with-v2.x-net.patch. - commit e222743 - Linux 5.1.14 (bnc#1012628). - tcp: refine memory limit test in tcp_fragment() (bnc#1012628). - commit f291042 - Linux 5.1.13 (bnc#1012628). - coredump: fix race condition between collapse_huge_page() and core dumping (bnc#1012628). - nvme-tcp: fix queue mapping when queue count is limited (bnc#1012628). - nvme-tcp: fix possible null deref on a timed out io queue connect (bnc#1012628). - nvme-tcp: rename function to have nvme_tcp prefix (bnc#1012628). - mm: mmu_gather: remove __tlb_reset_range() for force flush (bnc#1012628). - ocfs2: fix error path kobject memory leak (bnc#1012628). - mlxsw: spectrum: Prevent force of 56G (bnc#1012628). - scsi: libsas: delete sas port if expander discover failed (bnc#1012628). - scsi: scsi_dh_alua: Fix possible null-ptr-deref (bnc#1012628). - scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask (bnc#1012628). - scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route() (bnc#1012628). - net: phy: dp83867: Set up RGMII TX delay (bnc#1012628). - net: phy: dp83867: increase SGMII autoneg timer duration (bnc#1012628). - net: phy: dp83867: fix speed 10 in sgmii mode (bnc#1012628). - net: phylink: ensure consistent phy interface mode (bnc#1012628). - blk-mq: Fix memory leak in error handling (bnc#1012628). - net: sh_eth: fix mdio access in sh_eth_close() for R-Car Gen2 and RZ/A1 SoCs (bnc#1012628). - arm64: use the correct function type for __arm64_sys_ni_syscall (bnc#1012628). - arm64: use the correct function type in SYSCALL_DEFINE0 (bnc#1012628). - arm64: fix syscall_fn_t type (bnc#1012628). - ALSA: fireface: Use ULL suffixes for 64-bit constants (bnc#1012628). - KVM: PPC: Book3S HV: Don't take kvm->lock around kvm_for_each_vcpu (bnc#1012628). - KVM: PPC: Book3S: Use new mutex to synchronize access to rtas token list (bnc#1012628). - KVM: PPC: Book3S HV: Use new mutex to synchronize MMU setup (bnc#1012628). - dfs_cache: fix a wrong use of kfree in flush_cache_ent() (bnc#1012628). - xenbus: Avoid deadlock during suspend due to open transactions (bnc#1012628). - xen/pvcalls: Remove set but not used variable (bnc#1012628). - dpaa_eth: use only online CPU portals (bnc#1012628). - ia64: fix build errors by exporting paddr_to_nid() (bnc#1012628). - perf record: Fix s390 missing module symbol and warning for non-root users (bnc#1012628). - perf namespace: Protect reading thread's namespace (bnc#1012628). - s390/zcrypt: Fix wrong dispatching for control domain CPRBs (bnc#1012628). - perf data: Fix 'strncat may truncate' build failure with recent gcc (bnc#1012628). - configfs: Fix use-after-free when accessing sd->s_dentry (bnc#1012628). - ALSA: hda - Force polling mode on CNL for fixing codec communication (bnc#1012628). - i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr (bnc#1012628). - net: aquantia: fix LRO with FCS error (bnc#1012628). - net: aquantia: tx clean budget logic error (bnc#1012628). - drm/etnaviv: lock MMU while dumping core (bnc#1012628). - ACPI/PCI: PM: Add missing wakeup.flags.valid checks (bnc#1012628). - net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE() (bnc#1012628). - dpaa2-eth: Use PTR_ERR_OR_ZERO where appropriate (bnc#1012628). - dpaa2-eth: Fix potential spectre issue (bnc#1012628). - io_uring: Fix __io_uring_register() false success (bnc#1012628). - net: stmmac: dwmac-mediatek: modify csr_clk value to fix mdio read/write fail (bnc#1012628). - net: stmmac: fix csr_clk can't be zero issue (bnc#1012628). - net: stmmac: update rx tail pointer register to fix rx dma hang issue (bnc#1012628). - gpio: fix gpio-adp5588 build errors (bnc#1012628). - perf/ring-buffer: Always use {READ,WRITE}_ONCE() for rb->user_page data (bnc#1012628). - perf/ring_buffer: Add ordering to rb->nest increment (bnc#1012628). - perf/ring_buffer: Fix exposing a temporarily decreased data_head (bnc#1012628). - x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor (bnc#1012628). - mISDN: make sure device name is NUL terminated (bnc#1012628). - usb: xhci: Fix a potential null pointer dereference in xhci_debugfs_create_endpoint() (bnc#1012628). - powerpc/powernv: Return for invalid IMC domain (bnc#1012628). - clk: ti: clkctrl: Fix clkdm_clk handling (bnc#1012628). - selftests: netfilter: missing error check when setting up veth interface (bnc#1012628). - ipvs: Fix use-after-free in ip_vs_in (bnc#1012628). - netfilter: nft_fib: Fix existence check support (bnc#1012628). - netfilter: nf_queue: fix reinject verdict handling (bnc#1012628). - perf/x86/intel/ds: Fix EVENT vs. UEVENT PEBS constraints (bnc#1012628). - netfilter: nf_tables: fix oops during rule dump (bnc#1012628). - pinctrl: intel: Clear interrupt status in mask/unmask callback (bnc#1012628). - staging: wilc1000: Fix some double unlock bugs in wilc_wlan_cleanup() (bnc#1012628). - Staging: vc04_services: Fix a couple error codes (bnc#1012628). - staging: erofs: set sb->s_root to NULL when failing from __getname() (bnc#1012628). - iio: imu: mpu6050: Fix FIFO layout for ICM20602 (bnc#1012628). - net/mlx5e: Avoid detaching non-existing netdev under switchdev mode (bnc#1012628). - net: correct udp zerocopy refcnt also when zerocopy only on append (bnc#1012628). - net/mlx5e: Support tagged tunnel over bond (bnc#1012628). - mlxsw: spectrum_buffers: Reduce pool size on Spectrum-2 (bnc#1012628). - net/mlx5e: Fix source port matching in fdb peer flow rule (bnc#1012628). - mlxsw: spectrum_flower: Fix TOS matching (bnc#1012628). - net/mlx5e: Add ndo_set_feature for uplink representor (bnc#1012628). - mlxsw: spectrum_router: Refresh nexthop neighbour when it becomes dead (bnc#1012628). - net/mlx5: Update pci error handler entries and command translation (bnc#1012628). - net: ethtool: Allow matching on vlan DEI bit (bnc#1012628). - net: dsa: microchip: Don't try to read stats for unused ports (bnc#1012628). - net: mvpp2: prs: Use the correct helpers when removing all VID filters (bnc#1012628). - net: mvpp2: prs: Fix parser range for VID filtering (bnc#1012628). - geneve: Don't assume linear buffers in error handler (bnc#1012628). - vxlan: Don't assume linear buffers in error handler (bnc#1012628). - net/mlx5: Avoid reloading already removed devices (bnc#1012628). - vsock/virtio: set SOCK_DONE on peer shutdown (bnc#1012628). - tipc: purge deferredq list for each grp member in tipc_group_delete (bnc#1012628). - sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg (bnc#1012628). - sctp: Free cookie before we memdup a new one (bnc#1012628). - nfc: Ensure presence of required attributes in the deactivate_target handler (bnc#1012628). - net: tls, correctly account for copied bytes with multiple sk_msgs (bnc#1012628). - net: openvswitch: do not free vport if register_netdevice() is failed (bnc#1012628). - net: dsa: rtl8366: Fix up VLAN filtering (bnc#1012628). - neigh: fix use-after-free read in pneigh_get_next (bnc#1012628). - lapb: fixed leak of control-blocks (bnc#1012628). - ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero (bnc#1012628). - hv_netvsc: Set probe mode to sync (bnc#1012628). - be2net: Fix number of Rx queues used for flow hashing (bnc#1012628). - ax25: fix inconsistent lock state in ax25_destroy_timer (bnc#1012628). - netfilter: nat: fix udp checksum corruption (bnc#1012628). - commit 5fe336c - Update patches.kernel.org/5.1.8-025-btrfs-qgroup-Check-bg-while-resuming-relocatio… (bnc#1012628 bnc#1134806). - commit e868173 - Linux 5.1.12 (bnc#1012628). - powerpc/64s: Fix THP PMD collapse serialisation (bnc#1012628). - powerpc: Fix kexec failure on book3s/32 (bnc#1012628). - drm: add fallback override/firmware EDID modes workaround (bnc#1012628). - drm/edid: abstract override/firmware EDID retrieval (bnc#1012628). - x86/resctrl: Prevent NULL pointer dereference when local MBM is disabled (bnc#1012628). - x86/mm/KASLR: Compute the size of the vmemmap section properly (bnc#1012628). - x86/kasan: Fix boot with 5-level paging and KASAN (bnc#1012628). - x86/microcode, cpuhotplug: Add a microcode loader CPU hotplug callback (bnc#1012628). - RAS/CEC: Fix binary search function (bnc#1012628). - RAS/CEC: Convert the timer callback to a workqueue (bnc#1012628). - timekeeping: Repair ktime_get_coarse*() granularity (bnc#1012628). - tracing/uprobe: Fix NULL pointer dereference in trace_uprobe_create() (bnc#1012628). - USB: serial: option: add Telit 0x1260 and 0x1261 compositions (bnc#1012628). - USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode (bnc#1012628). - USB: serial: pl2303: add Allied Telesis VT-Kit3 (bnc#1012628). - USB: usb-storage: Add new ID to ums-realtek (bnc#1012628). - USB: Fix chipmunk-like voice when using Logitech C270 for recording audio (bnc#1012628). - usb: dwc2: host: Fix wMaxPacketSize handling (fix webcam regression) (bnc#1012628). - usb: dwc2: Fix DMA cache alignment issues (bnc#1012628). - drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define() (bnc#1012628). - drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read (bnc#1012628). - tools/kvm_stat: fix fields filter for child events (bnc#1012628). - kvm: selftests: aarch64: fix default vm mode (bnc#1012628). - kvm: selftests: aarch64: dirty_log_test: fix unaligned memslot size (bnc#1012628). - KVM: s390: fix memory slot handling for KVM_SET_USER_MEMORY_REGION (bnc#1012628). - KVM: x86/pmu: do not mask the value that is written to fixed PMUs (bnc#1012628). - KVM: x86/pmu: mask the result of rdpmc according to the width of the counters (bnc#1012628). - KVM: x86: do not spam dmesg with VMCS/VMCB dumps (bnc#1012628). - KVM: LAPIC: Fix lapic_timer_advance_ns parameter overflow (bnc#1012628). - kvm: vmx: Fix -Wmissing-prototypes warnings (bnc#1012628). - KVM: selftests: Fix a condition in test_hv_cpuid() (bnc#1012628). - KVM: nVMX: really fix the size checks on KVM_SET_NESTED_STATE (bnc#1012628). - KVM: arm/arm64: Move cc/it checks under hyp's Makefile to avoid instrumentation (bnc#1012628). - tools/io_uring: fix Makefile for pthread library link (bnc#1012628). - nvme-pci: use blk-mq mapping for unmanaged irqs (bnc#1012628). - usbnet: ipheth: fix racing condition (bnc#1012628). - tracing: Prevent hist_field_var_ref() from accessing NULL tracing_map_elts (bnc#1012628). - selftests/timers: Add missing fflush(stdout) calls (bnc#1012628). - selftests: fib_rule_tests: fix local IPv4 address typo (bnc#1012628). - libnvdimm: Fix compilation warnings with W=1 (bnc#1012628). - drm/amdgpu: keep stolen memory on picasso (bnc#1012628). - scsi: bnx2fc: fix incorrect cast to u64 on shift operation (bnc#1012628). - scsi: myrs: Fix uninitialized variable (bnc#1012628). - platform/x86: pmc_atom: Add several Beckhoff Automation boards to critclk_systems DMI table (bnc#1012628). - platform/x86: pmc_atom: Add Lex 3I380D industrial PC to critclk_systems DMI table (bnc#1012628). - nvme: fix memory leak for power latency tolerance (bnc#1012628). - nvme: release namespace SRCU protection before performing controller ioctls (bnc#1012628). - nvme: merge nvme_ns_ioctl into nvme_ioctl (bnc#1012628). - nvme: remove the ifdef around nvme_nvm_ioctl (bnc#1012628). - nvme: fix srcu locking on error return in nvme_get_ns_from_disk (bnc#1012628). - nvme-pci: Fix controller freeze wait disabling (bnc#1012628). - selftests/bpf: fix bpf_get_current_task (bnc#1012628). - tools/bpftool: move set_max_rlimit() before __bpf_object__open_xattr() (bnc#1012628). - arm64/mm: Inhibit huge-vmap with ptdump (bnc#1012628). - bpf, tcp: correctly handle DONT_WAIT flags and timeo == 0 (bnc#1012628). - enetc: Fix NULL dma address unmap for Tx BD extensions (bnc#1012628). - net: macb: fix error format in dev_err() (bnc#1012628). - arm64: Print physical address of page table base in show_pte() (bnc#1012628). - scsi: lpfc: add check for loss of ndlp when sending RRQ (bnc#1012628). - scsi: lpfc: correct rcu unlock issue in lpfc_nvme_info_show (bnc#1012628). - scsi: lpfc: resolve lockdep warnings (bnc#1012628). - scsi: qedi: remove set but not used variables 'cdev' and 'udev' (bnc#1012628). - scsi: qedi: remove memset/memcpy to nfunc and use func instead (bnc#1012628). - scsi: qla2xxx: Add cleanup for PCI EEH recovery (bnc#1012628). - bpf: sockmap fix msg->sg.size account on ingress skb (bnc#1012628). - bpf: sockmap remove duplicate queue free (bnc#1012628). - bpf: sockmap, only stop/flush strp if it was enabled at some point (bnc#1012628). - drivers/perf: arm_spe: Don't error on high-order pages for aux buf (bnc#1012628). - f2fs: fix to avoid accessing xattr across the boundary (bnc#1012628). - Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var (bnc#1012628). - Revert "ALSA: seq: Protect in-kernel ioctl calls with mutex" (bnc#1012628). - ALSA: seq: Fix race of get-subscription call vs port-delete ioctls (bnc#1012628). - ALSA: seq: Protect in-kernel ioctl calls with mutex (bnc#1012628). - x86/uaccess, kcov: Disable stack protector (bnc#1012628). - drm/i915/dmc: protect against reading random memory (bnc#1012628). - drm/i915: Fix per-pixel alpha with CCS (bnc#1012628). - drm/i915/dsi: Use a fuzzy check for burst mode clock check (bnc#1012628). - drm/i915/sdvo: Implement proper HDMI audio support for SDVO (bnc#1012628). - drm/amdgpu/{uvd,vcn}: fetch ring's read_ptr after alloc (bnc#1012628). - ASoC: soc-core: fixup references at soc_cleanup_card_resources() (bnc#1012628). - ASoC: fsl_asrc: Fix the issue about unsupported rate (bnc#1012628). - ASoC: cs42xx8: Add regcache mask dirty (bnc#1012628). - cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() (bnc#1012628). - bcache: only set BCACHE_DEV_WB_RUNNING when cached device attached (bnc#1012628). - bcache: fix stack corruption by PRECEDING_KEY() (bnc#1012628). - i2c: acorn: fix i2c warning (bnc#1012628). - Smack: Restore the smackfsdef mount option and add missing prefixes (bnc#1012628). - iommu/arm-smmu: Avoid constant zero in TLBI writes (bnc#1012628). - media: dvb: warning about dvb frequency limits produces too much noise (bnc#1012628). - ptrace: restore smp_rmb() in __ptrace_may_access() (bnc#1012628). - signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO (bnc#1012628). - mm/vmscan.c: fix trying to reclaim unevictable LRU page (bnc#1012628). - fs/ocfs2: fix race in ocfs2_dentry_attach_lock() (bnc#1012628). - mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node (bnc#1012628). - io_uring: fix memory leak of UNIX domain socket inode (bnc#1012628). - libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk (bnc#1012628). - selinux: fix a missing-check bug in selinux_sb_eat_lsm_opts() (bnc#1012628). - selinux: fix a missing-check bug in selinux_add_mnt_opt( ) (bnc#1012628). - selinux: log raw contexts as untrusted strings (bnc#1012628). - ALSA: firewire-motu: fix destruction of data for isochronous resources (bnc#1012628). - ALSA: hda/realtek - Update headset mode for ALC256 (bnc#1012628). - ALSA: ice1712: Check correct return value to snd_i2c_sendbytes (EWS/DMX 6Fire) (bnc#1012628). - ALSA: oxfw: allow PCM capture for Stanton SCS.1m (bnc#1012628). - Revert "ALSA: hda/realtek - Improve the headset mic for Acer Aspire laptops" (bnc#1012628). - HID: wacom: Sync INTUOSP2_BT touch state after each frame if necessary (bnc#1012628). - HID: wacom: Correct button numbering 2nd-gen Intuos Pro over Bluetooth (bnc#1012628). - HID: wacom: Send BTN_TOUCH in response to INTUOSP2_BT eraser contact (bnc#1012628). - HID: wacom: Don't report anything prior to the tool entering range (bnc#1012628). - HID: wacom: Don't set tool type until we're in range (bnc#1012628). - HID: multitouch: handle faulty Elo touch device (bnc#1012628). - Revert "HID: Increase maximum report size allowed by hid_field_extract()" (bnc#1012628). - HID: input: fix assignment of .value (bnc#1012628). - HID: input: make sure the wheel high resolution multiplier is set (bnc#1012628). - nouveau: Fix build with CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT disabled (bnc#1012628). - drm/nouveau: add kconfig option to turn off nouveau legacy contexts. (v3) (bnc#1012628). - commit c3db4a3 - Update config files. Enable SECURITY_YAMA to allow protection against ptrace attacks (bnc#1128245). - commit fb39868 - Update config files. Set HARDENED_USERCOPY=y (bnc#1127808). This can be disabled on the commandline using hardened_usercopy=n. - commit 04b86aa -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20190703 released!
by Richard Brown 04 Jul '19

04 Jul '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: kernel-source (5.1.10 -> 5.1.15) === Details === ==== kernel-source ==== Version update (5.1.10 -> 5.1.15) Subpackages: kernel-debug kernel-default - Revert "ovl: detect overlapping layers" (openqa tests failing). - Revert "ovl: don't fail with disconnected lower NFS" (openqa tests failing). - Revert "ovl: fix bogus -Wmaybe-unitialized warning" (openqa tests failing). - commit cb24bc9 - Linux 5.1.15 (bnc#1012628). - tracing: Silence GCC 9 array bounds warning (bnc#1012628). - mmc: sdhci: sdhci-pci-o2micro: Correctly set bus width when tuning (bnc#1012628). - mmc: sdhi: disallow HS400 for M3-W ES1.2, RZ/G2M, and V3H (bnc#1012628). - mmc: mediatek: fix SDIO IRQ interrupt handle flow (bnc#1012628). - mmc: mediatek: fix SDIO IRQ detection issue (bnc#1012628). - mmc: core: API to temporarily disable retuning for SDIO CRC errors (bnc#1012628). - mmc: core: Add sdio_retune_hold_now() and sdio_retune_release() (bnc#1012628). - mmc: core: Prevent processing SDIO IRQs when the card is suspended (bnc#1012628). - scsi: ufs: Avoid runtime suspend possibly being blocked forever (bnc#1012628). - usb: chipidea: udc: workaround for endpoint conflict issue (bnc#1012628). - xhci: detect USB 3.2 capable host controllers correctly (bnc#1012628). - usb: xhci: Don't try to recover an endpoint if port is in error state (bnc#1012628). - cifs: add spinlock for the openFileList to cifsInodeInfo (bnc#1012628). - cifs: fix GlobalMid_Lock bug in cifs_reconnect (bnc#1012628). - IB/hfi1: Validate fault injection opcode user input (bnc#1012628). - IB/hfi1: Close PSM sdma_progress sleep window (bnc#1012628). - IB/hfi1: Avoid hardlockup with flushlist_lock (bnc#1012628). - IB/hfi1: Correct tid qp rcd to match verbs context (bnc#1012628). - IB/hfi1: Silence txreq allocation warnings (bnc#1012628). - iio: imu: st_lsm6dsx: fix PM support for st_lsm6dsx i2c controller (bnc#1012628). - iio: temperature: mlx90632 Relax the compatibility check (bnc#1012628). - Input: synaptics - enable SMBus on ThinkPad E480 and E580 (bnc#1012628). - Input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD (bnc#1012628). - Input: silead - add MSSL0017 to acpi_device_id (bnc#1012628). - apparmor: fix PROFILE_MEDIATES for untrusted input (bnc#1012628). - apparmor: enforce nullbyte at end of tag string (bnc#1012628). - apparmor: reset pos on failure to unpack for various functions (bnc#1012628). - Revert "brcmfmac: disable command decode in sdio_aos" (bnc#1012628). - brcmfmac: sdio: Disable auto-tuning around commands expected to fail (bnc#1012628). - brcmfmac: sdio: Don't tune while the card is off (bnc#1012628). - lkdtm/usercopy: Moves the KERNEL_DS test to non-canonical (bnc#1012628). - ARC: fix build warnings (bnc#1012628). - dmaengine: jz4780: Fix transfers being ACKed too soon (bnc#1012628). - dmaengine: dw-axi-dmac: fix null dereference when pointer first is null (bnc#1012628). - dmaengine: mediatek-cqdma: sleeping in atomic context (bnc#1012628). - dmaengine: sprd: Fix the possible crash when getting descriptor status (bnc#1012628). - dmaengine: sprd: Add validation of current descriptor in irq handler (bnc#1012628). - dmaengine: sprd: Fix the incorrect start for 2-stage destination channels (bnc#1012628). - dmaengine: sprd: Fix block length overflow (bnc#1012628). - dmaengine: sprd: Fix the right place to configure 2-stage transfer (bnc#1012628). - ARC: [plat-hsdk]: Add missing multicast filter bins number to GMAC node (bnc#1012628). - ARC: [plat-hsdk]: Add missing FIFO size entry in GMAC node (bnc#1012628). - MIPS: mark ginvt() as __always_inline (bnc#1012628). - fpga: stratix10-soc: fix use-after-free on s10_init() (bnc#1012628). - fpga: dfl: afu: Pass the correct device to dma_mapping_error() (bnc#1012628). - fpga: dfl: Add lockdep classes for pdata->lock (bnc#1012628). - parport: Fix mem leak in parport_register_dev_model (bnc#1012628). - parisc: Fix compiler warnings in float emulation code (bnc#1012628). - habanalabs: fix bug in checking huge page optimization (bnc#1012628). - IB/rdmavt: Fix alloc_qpn() WARN_ON() (bnc#1012628). - IB/hfi1: Insure freeze_work work_struct is canceled on shutdown (bnc#1012628). - IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value (bnc#1012628). - IB/hfi1: Validate page aligned for a given virtual address (bnc#1012628). - MIPS: uprobes: remove set but not used variable 'epc' (bnc#1012628). - crypto: hmac - fix memory leak in hmac_init_tfm() (bnc#1012628). - xtensa: Fix section mismatch between memblock_reserve and mem_reserve (bnc#1012628). - kselftest/cgroup: fix unexpected testing failure on test_memcontrol (bnc#1012628). - kselftest/cgroup: fix unexpected testing failure on test_core (bnc#1012628). - kselftest/cgroup: fix incorrect test_core skip (bnc#1012628). - userfaultfd: selftest: fix compiler warning (bnc#1012628). - selftests: vm: install test_vmalloc.sh for run_vmtests (bnc#1012628). - net: dsa: mv88e6xxx: avoid error message on remove from VLAN 0 (bnc#1012628). - net: hns: Fix loopback test failed at copper ports (bnc#1012628). - mdesc: fix a missing-check bug in get_vdev_port_node_info() (bnc#1012628). - sparc: perf: fix updated event period in response to PERF_EVENT_IOC_PERIOD (bnc#1012628). - net: ethernet: mediatek: Use hw_feature to judge if HWLRO is supported (bnc#1012628). - net: ethernet: mediatek: Use NET_IP_ALIGN to judge if HW RX_2BYTE_OFFSET is enabled (bnc#1012628). - selftests: set sysctl bc_forwarding properly in router_broadcast.sh (bnc#1012628). - drm/arm/mali-dp: Add a loop around the second set CVAL and try 5 times (bnc#1012628). - drm/arm/hdlcd: Actually validate CRTC modes (bnc#1012628). - drm/arm/hdlcd: Allow a bit of clock tolerance (bnc#1012628). - nvmet: fix data_len to 0 for bdev-backed write_zeroes (bnc#1012628). - kbuild: tar-pkg: enable communication with jobserver (bnc#1012628). - scripts/checkstack.pl: Fix arm64 wrong or unknown architecture (bnc#1012628). - net: phylink: avoid reducing support mask (bnc#1012628). - scsi: ufs: Check that space was properly alloced in copy_query_response (bnc#1012628). - scsi: smartpqi: unlock on error in pqi_submit_raid_request_synchronous() (bnc#1012628). - net: ipvlan: Fix ipvlan device tso disabled while NETIF_F_IP_CSUM is set (bnc#1012628). - udmabuf: actually unmap the scatterlist (bnc#1012628). - tests: fix pidfd-test compilation (bnc#1012628). - s390/qeth: handle limited IPv4 broadcast in L3 TX path (bnc#1012628). - s390/qeth: check dst entry before use (bnc#1012628). - s390/qeth: fix VLAN attribute in bridge_hostnotify udev event (bnc#1012628). - hwmon: (core) add thermal sensors only if dev->of_node is present (bnc#1012628). - hwmon: (pmbus/core) Treat parameters as paged if on multiple pages (bnc#1012628). - arm64: Silence gcc warnings about arch ABI drift (bnc#1012628). - nvme: Fix u32 overflow in the number of namespace list calculation (bnc#1012628). - ovl: detect overlapping layers (bnc#1012628). - ovl: don't fail with disconnected lower NFS (bnc#1012628). - ovl: fix bogus -Wmaybe-unitialized warning (bnc#1012628). - btrfs: start readahead also in seed devices (bnc#1012628). - can: xilinx_can: use correct bittiming_const for CAN FD core (bnc#1012628). - can: flexcan: fix timeout when set small bitrate (bnc#1012628). - can: purge socket error queue on sock destruct (bnc#1012628). - riscv: mm: synchronize MMU after pte change (bnc#1012628). - powerpc/bpf: use unsigned division instruction for 64-bit operations (bnc#1012628). - ARM: imx: cpuidle-imx6sx: Restrict the SW2ISO increase to i.MX6SX (bnc#1012628). - ARM: mvebu_v7_defconfig: fix Ethernet on Clearfog (bnc#1012628). - ARM: dts: dra76x: Update MMC2_HS200_MANUAL1 iodelay values (bnc#1012628). - ARM: dts: am57xx-idk: Remove support for voltage switching for SD card (bnc#1012628). - arm64/sve: <uapi/asm/ptrace.h> should not depend on <uapi/linux/prctl.h> (bnc#1012628). - arm64: ssbd: explicitly depend on <linux/prctl.h> (bnc#1012628). - KVM: x86/mmu: Allocate PAE root array when using SVM's 32-bit NPT (bnc#1012628). - ovl: make i_ino consistent with st_ino in more cases (bnc#1012628). - drm/vmwgfx: Use the backdoor port if the HB port is not available (bnc#1012628). - drm/i915: Don't clobber M/N values during fastset check (bnc#1012628). - binder: fix possible UAF when freeing buffer (bnc#1012628). - staging: erofs: add requirements field in superblock (bnc#1012628). - Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (bnc#1012628). - Bluetooth: Fix regression with minimum encryption key size alignment (bnc#1012628). - SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (bnc#1012628). - x86/vdso: Prevent segfaults due to hoisted vclock reads (bnc#1012628). - fs/namespace: fix unprivileged mount propagation (bnc#1012628). - cfg80211: fix memory leak of wiphy device name (bnc#1012628). - mac80211: drop robust management frames from unknown TA (bnc#1012628). - {nl,mac}80211: allow 4addr AP operation on crypto controlled devices (bnc#1012628). - mac80211: handle deauthentication/disassociation from TDLS peer (bnc#1012628). - nl80211: fix station_info pertid memory leak (bnc#1012628). - mac80211: Do not use stack memory with scatterlist for GMAC (bnc#1012628). - x86/resctrl: Don't stop walking closids when a locksetup group is found (bnc#1012628). - powerpc/mm/64s/hash: Reallocate context ids on fork (bnc#1012628). - Refresh patches.suse/apparmor-compatibility-with-v2.x-net.patch. - commit e222743 - Linux 5.1.14 (bnc#1012628). - tcp: refine memory limit test in tcp_fragment() (bnc#1012628). - commit f291042 - Linux 5.1.13 (bnc#1012628). - coredump: fix race condition between collapse_huge_page() and core dumping (bnc#1012628). - nvme-tcp: fix queue mapping when queue count is limited (bnc#1012628). - nvme-tcp: fix possible null deref on a timed out io queue connect (bnc#1012628). - nvme-tcp: rename function to have nvme_tcp prefix (bnc#1012628). - mm: mmu_gather: remove __tlb_reset_range() for force flush (bnc#1012628). - ocfs2: fix error path kobject memory leak (bnc#1012628). - mlxsw: spectrum: Prevent force of 56G (bnc#1012628). - scsi: libsas: delete sas port if expander discover failed (bnc#1012628). - scsi: scsi_dh_alua: Fix possible null-ptr-deref (bnc#1012628). - scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask (bnc#1012628). - scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route() (bnc#1012628). - net: phy: dp83867: Set up RGMII TX delay (bnc#1012628). - net: phy: dp83867: increase SGMII autoneg timer duration (bnc#1012628). - net: phy: dp83867: fix speed 10 in sgmii mode (bnc#1012628). - net: phylink: ensure consistent phy interface mode (bnc#1012628). - blk-mq: Fix memory leak in error handling (bnc#1012628). - net: sh_eth: fix mdio access in sh_eth_close() for R-Car Gen2 and RZ/A1 SoCs (bnc#1012628). - arm64: use the correct function type for __arm64_sys_ni_syscall (bnc#1012628). - arm64: use the correct function type in SYSCALL_DEFINE0 (bnc#1012628). - arm64: fix syscall_fn_t type (bnc#1012628). - ALSA: fireface: Use ULL suffixes for 64-bit constants (bnc#1012628). - KVM: PPC: Book3S HV: Don't take kvm->lock around kvm_for_each_vcpu (bnc#1012628). - KVM: PPC: Book3S: Use new mutex to synchronize access to rtas token list (bnc#1012628). - KVM: PPC: Book3S HV: Use new mutex to synchronize MMU setup (bnc#1012628). - dfs_cache: fix a wrong use of kfree in flush_cache_ent() (bnc#1012628). - xenbus: Avoid deadlock during suspend due to open transactions (bnc#1012628). - xen/pvcalls: Remove set but not used variable (bnc#1012628). - dpaa_eth: use only online CPU portals (bnc#1012628). - ia64: fix build errors by exporting paddr_to_nid() (bnc#1012628). - perf record: Fix s390 missing module symbol and warning for non-root users (bnc#1012628). - perf namespace: Protect reading thread's namespace (bnc#1012628). - s390/zcrypt: Fix wrong dispatching for control domain CPRBs (bnc#1012628). - perf data: Fix 'strncat may truncate' build failure with recent gcc (bnc#1012628). - configfs: Fix use-after-free when accessing sd->s_dentry (bnc#1012628). - ALSA: hda - Force polling mode on CNL for fixing codec communication (bnc#1012628). - i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr (bnc#1012628). - net: aquantia: fix LRO with FCS error (bnc#1012628). - net: aquantia: tx clean budget logic error (bnc#1012628). - drm/etnaviv: lock MMU while dumping core (bnc#1012628). - ACPI/PCI: PM: Add missing wakeup.flags.valid checks (bnc#1012628). - net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE() (bnc#1012628). - dpaa2-eth: Use PTR_ERR_OR_ZERO where appropriate (bnc#1012628). - dpaa2-eth: Fix potential spectre issue (bnc#1012628). - io_uring: Fix __io_uring_register() false success (bnc#1012628). - net: stmmac: dwmac-mediatek: modify csr_clk value to fix mdio read/write fail (bnc#1012628). - net: stmmac: fix csr_clk can't be zero issue (bnc#1012628). - net: stmmac: update rx tail pointer register to fix rx dma hang issue (bnc#1012628). - gpio: fix gpio-adp5588 build errors (bnc#1012628). - perf/ring-buffer: Always use {READ,WRITE}_ONCE() for rb->user_page data (bnc#1012628). - perf/ring_buffer: Add ordering to rb->nest increment (bnc#1012628). - perf/ring_buffer: Fix exposing a temporarily decreased data_head (bnc#1012628). - x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor (bnc#1012628). - mISDN: make sure device name is NUL terminated (bnc#1012628). - usb: xhci: Fix a potential null pointer dereference in xhci_debugfs_create_endpoint() (bnc#1012628). - powerpc/powernv: Return for invalid IMC domain (bnc#1012628). - clk: ti: clkctrl: Fix clkdm_clk handling (bnc#1012628). - selftests: netfilter: missing error check when setting up veth interface (bnc#1012628). - ipvs: Fix use-after-free in ip_vs_in (bnc#1012628). - netfilter: nft_fib: Fix existence check support (bnc#1012628). - netfilter: nf_queue: fix reinject verdict handling (bnc#1012628). - perf/x86/intel/ds: Fix EVENT vs. UEVENT PEBS constraints (bnc#1012628). - netfilter: nf_tables: fix oops during rule dump (bnc#1012628). - pinctrl: intel: Clear interrupt status in mask/unmask callback (bnc#1012628). - staging: wilc1000: Fix some double unlock bugs in wilc_wlan_cleanup() (bnc#1012628). - Staging: vc04_services: Fix a couple error codes (bnc#1012628). - staging: erofs: set sb->s_root to NULL when failing from __getname() (bnc#1012628). - iio: imu: mpu6050: Fix FIFO layout for ICM20602 (bnc#1012628). - net/mlx5e: Avoid detaching non-existing netdev under switchdev mode (bnc#1012628). - net: correct udp zerocopy refcnt also when zerocopy only on append (bnc#1012628). - net/mlx5e: Support tagged tunnel over bond (bnc#1012628). - mlxsw: spectrum_buffers: Reduce pool size on Spectrum-2 (bnc#1012628). - net/mlx5e: Fix source port matching in fdb peer flow rule (bnc#1012628). - mlxsw: spectrum_flower: Fix TOS matching (bnc#1012628). - net/mlx5e: Add ndo_set_feature for uplink representor (bnc#1012628). - mlxsw: spectrum_router: Refresh nexthop neighbour when it becomes dead (bnc#1012628). - net/mlx5: Update pci error handler entries and command translation (bnc#1012628). - net: ethtool: Allow matching on vlan DEI bit (bnc#1012628). - net: dsa: microchip: Don't try to read stats for unused ports (bnc#1012628). - net: mvpp2: prs: Use the correct helpers when removing all VID filters (bnc#1012628). - net: mvpp2: prs: Fix parser range for VID filtering (bnc#1012628). - geneve: Don't assume linear buffers in error handler (bnc#1012628). - vxlan: Don't assume linear buffers in error handler (bnc#1012628). - net/mlx5: Avoid reloading already removed devices (bnc#1012628). - vsock/virtio: set SOCK_DONE on peer shutdown (bnc#1012628). - tipc: purge deferredq list for each grp member in tipc_group_delete (bnc#1012628). - sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg (bnc#1012628). - sctp: Free cookie before we memdup a new one (bnc#1012628). - nfc: Ensure presence of required attributes in the deactivate_target handler (bnc#1012628). - net: tls, correctly account for copied bytes with multiple sk_msgs (bnc#1012628). - net: openvswitch: do not free vport if register_netdevice() is failed (bnc#1012628). - net: dsa: rtl8366: Fix up VLAN filtering (bnc#1012628). - neigh: fix use-after-free read in pneigh_get_next (bnc#1012628). - lapb: fixed leak of control-blocks (bnc#1012628). - ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero (bnc#1012628). - hv_netvsc: Set probe mode to sync (bnc#1012628). - be2net: Fix number of Rx queues used for flow hashing (bnc#1012628). - ax25: fix inconsistent lock state in ax25_destroy_timer (bnc#1012628). - netfilter: nat: fix udp checksum corruption (bnc#1012628). - commit 5fe336c - Update patches.kernel.org/5.1.8-025-btrfs-qgroup-Check-bg-while-resuming-relocatio… (bnc#1012628 bnc#1134806). - commit e868173 - Linux 5.1.12 (bnc#1012628). - powerpc/64s: Fix THP PMD collapse serialisation (bnc#1012628). - powerpc: Fix kexec failure on book3s/32 (bnc#1012628). - drm: add fallback override/firmware EDID modes workaround (bnc#1012628). - drm/edid: abstract override/firmware EDID retrieval (bnc#1012628). - x86/resctrl: Prevent NULL pointer dereference when local MBM is disabled (bnc#1012628). - x86/mm/KASLR: Compute the size of the vmemmap section properly (bnc#1012628). - x86/kasan: Fix boot with 5-level paging and KASAN (bnc#1012628). - x86/microcode, cpuhotplug: Add a microcode loader CPU hotplug callback (bnc#1012628). - RAS/CEC: Fix binary search function (bnc#1012628). - RAS/CEC: Convert the timer callback to a workqueue (bnc#1012628). - timekeeping: Repair ktime_get_coarse*() granularity (bnc#1012628). - tracing/uprobe: Fix NULL pointer dereference in trace_uprobe_create() (bnc#1012628). - USB: serial: option: add Telit 0x1260 and 0x1261 compositions (bnc#1012628). - USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode (bnc#1012628). - USB: serial: pl2303: add Allied Telesis VT-Kit3 (bnc#1012628). - USB: usb-storage: Add new ID to ums-realtek (bnc#1012628). - USB: Fix chipmunk-like voice when using Logitech C270 for recording audio (bnc#1012628). - usb: dwc2: host: Fix wMaxPacketSize handling (fix webcam regression) (bnc#1012628). - usb: dwc2: Fix DMA cache alignment issues (bnc#1012628). - drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define() (bnc#1012628). - drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read (bnc#1012628). - tools/kvm_stat: fix fields filter for child events (bnc#1012628). - kvm: selftests: aarch64: fix default vm mode (bnc#1012628). - kvm: selftests: aarch64: dirty_log_test: fix unaligned memslot size (bnc#1012628). - KVM: s390: fix memory slot handling for KVM_SET_USER_MEMORY_REGION (bnc#1012628). - KVM: x86/pmu: do not mask the value that is written to fixed PMUs (bnc#1012628). - KVM: x86/pmu: mask the result of rdpmc according to the width of the counters (bnc#1012628). - KVM: x86: do not spam dmesg with VMCS/VMCB dumps (bnc#1012628). - KVM: LAPIC: Fix lapic_timer_advance_ns parameter overflow (bnc#1012628). - kvm: vmx: Fix -Wmissing-prototypes warnings (bnc#1012628). - KVM: selftests: Fix a condition in test_hv_cpuid() (bnc#1012628). - KVM: nVMX: really fix the size checks on KVM_SET_NESTED_STATE (bnc#1012628). - KVM: arm/arm64: Move cc/it checks under hyp's Makefile to avoid instrumentation (bnc#1012628). - tools/io_uring: fix Makefile for pthread library link (bnc#1012628). - nvme-pci: use blk-mq mapping for unmanaged irqs (bnc#1012628). - usbnet: ipheth: fix racing condition (bnc#1012628). - tracing: Prevent hist_field_var_ref() from accessing NULL tracing_map_elts (bnc#1012628). - selftests/timers: Add missing fflush(stdout) calls (bnc#1012628). - selftests: fib_rule_tests: fix local IPv4 address typo (bnc#1012628). - libnvdimm: Fix compilation warnings with W=1 (bnc#1012628). - drm/amdgpu: keep stolen memory on picasso (bnc#1012628). - scsi: bnx2fc: fix incorrect cast to u64 on shift operation (bnc#1012628). - scsi: myrs: Fix uninitialized variable (bnc#1012628). - platform/x86: pmc_atom: Add several Beckhoff Automation boards to critclk_systems DMI table (bnc#1012628). - platform/x86: pmc_atom: Add Lex 3I380D industrial PC to critclk_systems DMI table (bnc#1012628). - nvme: fix memory leak for power latency tolerance (bnc#1012628). - nvme: release namespace SRCU protection before performing controller ioctls (bnc#1012628). - nvme: merge nvme_ns_ioctl into nvme_ioctl (bnc#1012628). - nvme: remove the ifdef around nvme_nvm_ioctl (bnc#1012628). - nvme: fix srcu locking on error return in nvme_get_ns_from_disk (bnc#1012628). - nvme-pci: Fix controller freeze wait disabling (bnc#1012628). - selftests/bpf: fix bpf_get_current_task (bnc#1012628). - tools/bpftool: move set_max_rlimit() before __bpf_object__open_xattr() (bnc#1012628). - arm64/mm: Inhibit huge-vmap with ptdump (bnc#1012628). - bpf, tcp: correctly handle DONT_WAIT flags and timeo == 0 (bnc#1012628). - enetc: Fix NULL dma address unmap for Tx BD extensions (bnc#1012628). - net: macb: fix error format in dev_err() (bnc#1012628). - arm64: Print physical address of page table base in show_pte() (bnc#1012628). - scsi: lpfc: add check for loss of ndlp when sending RRQ (bnc#1012628). - scsi: lpfc: correct rcu unlock issue in lpfc_nvme_info_show (bnc#1012628). - scsi: lpfc: resolve lockdep warnings (bnc#1012628). - scsi: qedi: remove set but not used variables 'cdev' and 'udev' (bnc#1012628). - scsi: qedi: remove memset/memcpy to nfunc and use func instead (bnc#1012628). - scsi: qla2xxx: Add cleanup for PCI EEH recovery (bnc#1012628). - bpf: sockmap fix msg->sg.size account on ingress skb (bnc#1012628). - bpf: sockmap remove duplicate queue free (bnc#1012628). - bpf: sockmap, only stop/flush strp if it was enabled at some point (bnc#1012628). - drivers/perf: arm_spe: Don't error on high-order pages for aux buf (bnc#1012628). - f2fs: fix to avoid accessing xattr across the boundary (bnc#1012628). - Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var (bnc#1012628). - Revert "ALSA: seq: Protect in-kernel ioctl calls with mutex" (bnc#1012628). - ALSA: seq: Fix race of get-subscription call vs port-delete ioctls (bnc#1012628). - ALSA: seq: Protect in-kernel ioctl calls with mutex (bnc#1012628). - x86/uaccess, kcov: Disable stack protector (bnc#1012628). - drm/i915/dmc: protect against reading random memory (bnc#1012628). - drm/i915: Fix per-pixel alpha with CCS (bnc#1012628). - drm/i915/dsi: Use a fuzzy check for burst mode clock check (bnc#1012628). - drm/i915/sdvo: Implement proper HDMI audio support for SDVO (bnc#1012628). - drm/amdgpu/{uvd,vcn}: fetch ring's read_ptr after alloc (bnc#1012628). - ASoC: soc-core: fixup references at soc_cleanup_card_resources() (bnc#1012628). - ASoC: fsl_asrc: Fix the issue about unsupported rate (bnc#1012628). - ASoC: cs42xx8: Add regcache mask dirty (bnc#1012628). - cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() (bnc#1012628). - bcache: only set BCACHE_DEV_WB_RUNNING when cached device attached (bnc#1012628). - bcache: fix stack corruption by PRECEDING_KEY() (bnc#1012628). - i2c: acorn: fix i2c warning (bnc#1012628). - Smack: Restore the smackfsdef mount option and add missing prefixes (bnc#1012628). - iommu/arm-smmu: Avoid constant zero in TLBI writes (bnc#1012628). - media: dvb: warning about dvb frequency limits produces too much noise (bnc#1012628). - ptrace: restore smp_rmb() in __ptrace_may_access() (bnc#1012628). - signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO (bnc#1012628). - mm/vmscan.c: fix trying to reclaim unevictable LRU page (bnc#1012628). - fs/ocfs2: fix race in ocfs2_dentry_attach_lock() (bnc#1012628). - mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node (bnc#1012628). - io_uring: fix memory leak of UNIX domain socket inode (bnc#1012628). - libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk (bnc#1012628). - selinux: fix a missing-check bug in selinux_sb_eat_lsm_opts() (bnc#1012628). - selinux: fix a missing-check bug in selinux_add_mnt_opt( ) (bnc#1012628). - selinux: log raw contexts as untrusted strings (bnc#1012628). - ALSA: firewire-motu: fix destruction of data for isochronous resources (bnc#1012628). - ALSA: hda/realtek - Update headset mode for ALC256 (bnc#1012628). - ALSA: ice1712: Check correct return value to snd_i2c_sendbytes (EWS/DMX 6Fire) (bnc#1012628). - ALSA: oxfw: allow PCM capture for Stanton SCS.1m (bnc#1012628). - Revert "ALSA: hda/realtek - Improve the headset mic for Acer Aspire laptops" (bnc#1012628). - HID: wacom: Sync INTUOSP2_BT touch state after each frame if necessary (bnc#1012628). - HID: wacom: Correct button numbering 2nd-gen Intuos Pro over Bluetooth (bnc#1012628). - HID: wacom: Send BTN_TOUCH in response to INTUOSP2_BT eraser contact (bnc#1012628). - HID: wacom: Don't report anything prior to the tool entering range (bnc#1012628). - HID: wacom: Don't set tool type until we're in range (bnc#1012628). - HID: multitouch: handle faulty Elo touch device (bnc#1012628). - Revert "HID: Increase maximum report size allowed by hid_field_extract()" (bnc#1012628). - HID: input: fix assignment of .value (bnc#1012628). - HID: input: make sure the wheel high resolution multiplier is set (bnc#1012628). - nouveau: Fix build with CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT disabled (bnc#1012628). - drm/nouveau: add kconfig option to turn off nouveau legacy contexts. (v3) (bnc#1012628). - commit c3db4a3 - Update config files. Enable SECURITY_YAMA to allow protection against ptrace attacks (bnc#1128245). - commit fb39868 - Update config files. Set HARDENED_USERCOPY=y (bnc#1127808). This can be disabled on the commandline using hardened_usercopy=n. - commit 04b86aa -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20190702 released!
by Richard Brown 03 Jul '19

03 Jul '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bzip2 (1.0.6 -> 1.0.7) === Details === ==== bzip2 ==== Version update (1.0.6 -> 1.0.7) - Update bug reference - Fix downloaded patches - Update to version 1.0.7: * Fix undefined behavior in the macros SET_BH, CLEAR_BH, & ISSET_BH. * bzip2: Fix return value when combining --test,-t and -q. * bzip2recover: Fix buffer overflow for large argv[0]. * bzip2recover: Fix use after free issue with outFile (CVE-2016-3189). * Make sure nSelectors is not out of range (CVE-2019-12900 bsc#1139083) - Drop patches fixed upstream: * bzip2-unsafe_strcpy.patch. * bzip2-1.0.6-CVE-2016-3189.patch. - Refresh patches with quilt. -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20190702 released!
by Richard Brown 03 Jul '19

03 Jul '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bzip2 (1.0.6 -> 1.0.7) libsodium (1.0.17 -> 1.0.18) === Details === ==== bzip2 ==== Version update (1.0.6 -> 1.0.7) - Update bug reference - Fix downloaded patches - Update to version 1.0.7: * Fix undefined behavior in the macros SET_BH, CLEAR_BH, & ISSET_BH. * bzip2: Fix return value when combining --test,-t and -q. * bzip2recover: Fix buffer overflow for large argv[0]. * bzip2recover: Fix use after free issue with outFile (CVE-2016-3189). * Make sure nSelectors is not out of range (CVE-2019-12900 bsc#1139083) - Drop patches fixed upstream: * bzip2-unsafe_strcpy.patch. * bzip2-1.0.6-CVE-2016-3189.patch. - Refresh patches with quilt. ==== libsodium ==== Version update (1.0.17 -> 1.0.18) - Update to 1.0.18 - Enterprise versions of Visual Studio are now supported. - Visual Studio 2019 is now supported. - 32-bit binaries for Visual Studio 2010 are now provided. - A test designed to trigger an OOM condition didn't work on Linux systems with memory overcommit turned on. It has been removed in order to fix Ansible builds. - Emscripten: print and printErr functions are overridden to send errors to the console, if there is one. - Emscripten: UTF8ToString() is now exported since Pointer_stringify() has been deprecated. - Libsodium version detection has been fixed in the CMake recipe. - Generic hashing got a 10% speedup on AVX2. - New target: WebAssembly/WASI (compile with dist-builds/wasm32-wasi.sh). - New functions to map a hash to an edwards25519 point or get a random point: core_ed25519_from_hash() and core_ed25519_random(). - crypto_core_ed25519_scalar_mul() has been implemented for scalar*scalar (mod L) multiplication. - Support for the Ristretto group has been implemented for interoperability with wasm-crypto. - Improvements have been made to the test suite. - Portability improvements have been made. - getentropy() is now used on systems providing this system call. - randombytes_salsa20 has been renamed to randombytes_internal. - Support for NativeClient has been removed. - Most ((nonnull)) attributes have been relaxed to allow 0-length inputs to be NULL. - The -ftree-vectorize and -ftree-slp-vectorize compiler switches are now used, if available, for optimized builds. -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20190701 released!
by Richard Brown 02 Jul '19

02 Jul '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: device-mapper fcoe-utils === Details === ==== device-mapper ==== Subpackages: libdevmapper-event1_03 libdevmapper1_03 - Fix using device aliases with lvmetad (bsc#1137296) + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch - Fix devices drop open error message (bsc#1122666) + bug-1122666_devices-drop-open-error-message.patch ==== fcoe-utils ==== - BuildRequire pkgconfig(libsystemd) instead of systemd-devel: allow OBS to shortcut by using systemd-devel-mini. -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20190701 released!
by Richard Brown 02 Jul '19

02 Jul '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: device-mapper fcoe-utils lvm2 === Details === ==== device-mapper ==== Subpackages: libdevmapper-event1_03 libdevmapper1_03 - Fix using device aliases with lvmetad (bsc#1137296) + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch - Fix devices drop open error message (bsc#1122666) + bug-1122666_devices-drop-open-error-message.patch ==== fcoe-utils ==== - BuildRequire pkgconfig(libsystemd) instead of systemd-devel: allow OBS to shortcut by using systemd-devel-mini. ==== lvm2 ==== Subpackages: liblvm2app2_2 liblvm2cmd2_02 - Fix using device aliases with lvmetad (bsc#1137296) + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch - Fix devices drop open error message (bsc#1122666) + bug-1122666_devices-drop-open-error-message.patch -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20190630 released!
by Richard Brown 01 Jul '19

01 Jul '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: libgcrypt patterns-containers podman (1.4.0 -> 1.4.2) === Details === ==== libgcrypt ==== - Fixed redundant fips tests in some situations causing sudo to stop working when pam-kwallet is installed. bsc#1133808 * Added libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch * Removed libgcrypt-fips_run_selftest_at_constructor.patch because it was obsoleted by libgcrypt-1.8.3-fips-ctor.patch * Removed libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch because it was obsoleted by libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch - Fixed env-script-interpreter in cavs_driver.pl - Security fix: [bsc#1138939, CVE-2019-12904] * The C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an assembly-language implementation is unavailable.) * Added patches: - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch - libgcrypt-CVE-2019-12904-GCM.patch - libgcrypt-CVE-2019-12904-AES.patch ==== patterns-containers ==== - Add new pattern for kubernetes utilities ==== podman ==== Version update (1.4.0 -> 1.4.2) Subpackages: podman-cni-config - Update podman to v1.4.2 - Fixed a bug where Podman could not run containers using an older version of Systemd as init - Updated vendored Buildah to v1.9.0 to resolve a critical bug with Dockerfile RUN instructions - The error message for running podman kill on containers that are not running has been improved - Podman remote client can now log to a file if syslog is not available - The podman exec command now sets its error code differently based on whether the container does not exist, and the command in the container does not exist - The podman inspect command on containers now outputs Mounts JSON that matches that of docker inspect, only including user-specified volumes and differentiating bind mounts and named volumes - The podman inspect command now reports the path to a container's OCI spec with the OCIConfigPath key (only included when the container is initialized or running) - The podman run --mount command now supports the bind-nonrecursive option for bind mounts - Fixed a bug where podman play kube would fail to create containers due to an unspecified log driver - Fixed a bug where Podman would fail to build with musl libc - Fixed a bug where rootless Podman using slirp4netns networking in an environment with no nameservers on the host other than localhost would result in nonfunctional networking - Fixed a bug where podman import would not properly set environment variables, discarding their values and retaining only keys - Fixed a bug where Podman would fail to run when built with Apparmor support but run on systems without the Apparmor kernel module loaded - Remote Podman will now default the username it uses to log in to remote systems to the username of the current user - Podman now uses JSON logging with OCI runtimes that support it, allowing for better error reporting - Updated vendored containers/image to v2.0 - Update conmon to v0.3.0 - Support OOM Monitor under cgroup V2 - Add config binary and make target for configuring conmon with a go library for importing values - update dependency for slirp4netns to 0.3.0 or newer -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20190630 released!
by Richard Brown 01 Jul '19

01 Jul '19

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: kured libgcrypt patterns-containers podman (1.4.0 -> 1.4.2) === Details === ==== kured ==== - k8s-1.14.diff: kubernetes 1.14.1 support from git ==== libgcrypt ==== - Fixed redundant fips tests in some situations causing sudo to stop working when pam-kwallet is installed. bsc#1133808 * Added libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch * Removed libgcrypt-fips_run_selftest_at_constructor.patch because it was obsoleted by libgcrypt-1.8.3-fips-ctor.patch * Removed libgcrypt-fips_ignore_FIPS_MODULE_PATH.patch because it was obsoleted by libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch - Fixed env-script-interpreter in cavs_driver.pl - Security fix: [bsc#1138939, CVE-2019-12904] * The C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an assembly-language implementation is unavailable.) * Added patches: - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch - libgcrypt-CVE-2019-12904-GCM.patch - libgcrypt-CVE-2019-12904-AES.patch ==== patterns-containers ==== Subpackages: patterns-containers-container_runtime patterns-containers-container_runtime_kubernetes patterns-containers-kubeadm patterns-containers-kubic_admin patterns-containers-kubic_worker - Add new pattern for kubernetes utilities ==== podman ==== Version update (1.4.0 -> 1.4.2) Subpackages: podman-cni-config - Update podman to v1.4.2 - Fixed a bug where Podman could not run containers using an older version of Systemd as init - Updated vendored Buildah to v1.9.0 to resolve a critical bug with Dockerfile RUN instructions - The error message for running podman kill on containers that are not running has been improved - Podman remote client can now log to a file if syslog is not available - The podman exec command now sets its error code differently based on whether the container does not exist, and the command in the container does not exist - The podman inspect command on containers now outputs Mounts JSON that matches that of docker inspect, only including user-specified volumes and differentiating bind mounts and named volumes - The podman inspect command now reports the path to a container's OCI spec with the OCIConfigPath key (only included when the container is initialized or running) - The podman run --mount command now supports the bind-nonrecursive option for bind mounts - Fixed a bug where podman play kube would fail to create containers due to an unspecified log driver - Fixed a bug where Podman would fail to build with musl libc - Fixed a bug where rootless Podman using slirp4netns networking in an environment with no nameservers on the host other than localhost would result in nonfunctional networking - Fixed a bug where podman import would not properly set environment variables, discarding their values and retaining only keys - Fixed a bug where Podman would fail to run when built with Apparmor support but run on systems without the Apparmor kernel module loaded - Remote Podman will now default the username it uses to log in to remote systems to the username of the current user - Podman now uses JSON logging with OCI runtimes that support it, allowing for better error reporting - Updated vendored containers/image to v2.0 - Update conmon to v0.3.0 - Support OOM Monitor under cgroup V2 - Add config binary and make target for configuring conmon with a go library for importing values - update dependency for slirp4netns to 0.3.0 or newer -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0