openSUSE Kubic
Threads by month
- ----- 2024 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2023 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2022 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
October 2021
- 7 participants
- 42 discussions
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
avahi
avahi-glib2
bluedevil5 (5.23.1 -> 5.23.2)
boost-base
breeze (5.23.1 -> 5.23.2)
cairo
colord-gtk (0.1.26 -> 0.2.0)
discover (5.23.1 -> 5.23.2)
drkonqi5 (5.23.1 -> 5.23.2)
flatpak (1.12.1 -> 1.12.2)
gtk2
kactivitymanagerd (5.23.1 -> 5.23.2)
kde-cli-tools5 (5.23.1 -> 5.23.2)
kernel-firmware (20210928 -> 20211027)
kgamma5 (5.23.1 -> 5.23.2)
khotkeys5 (5.23.1 -> 5.23.2)
kinfocenter5 (5.23.1 -> 5.23.2)
kmenuedit5 (5.23.1 -> 5.23.2)
kscreen5 (5.23.1 -> 5.23.2)
kscreenlocker (5.23.1 -> 5.23.2)
ksystemstats5 (5.23.1 -> 5.23.2)
kwayland-integration (5.23.1 -> 5.23.2)
kwayland-server (5.23.1 -> 5.23.2)
kwin5 (5.23.1 -> 5.23.2)
kwrited5 (5.23.1 -> 5.23.2)
layer-shell-qt (5.23.1 -> 5.23.2)
libkdecoration2 (5.23.1 -> 5.23.2)
libkscreen2 (5.23.1 -> 5.23.2)
libksysguard5 (5.23.1 -> 5.23.2)
libopenmpt (0.5.11 -> 0.5.12)
libsoup (3.0.1 -> 3.0.2)
libsoup2 (2.74.0 -> 2.74.1)
milou5 (5.23.1 -> 5.23.2)
net-snmp (5.9 -> 5.9.1)
osinfo-db (20210903 -> 20211013)
patterns-base
patterns-containers
patterns-microos
plasma-browser-integration (5.23.1 -> 5.23.2)
plasma-nm5 (5.23.1 -> 5.23.2)
plasma5-addons (5.23.1 -> 5.23.2)
plasma5-desktop (5.23.1 -> 5.23.2.1)
plasma5-integration (5.23.1 -> 5.23.2)
plasma5-pa (5.23.1 -> 5.23.2)
plasma5-workspace (5.23.1 -> 5.23.2)
polkit-kde-agent-5 (5.23.1 -> 5.23.2)
powerdevil5 (5.23.1 -> 5.23.2)
python-matplotlib (3.4.2 -> 3.4.3)
qemu
systemsettings5 (5.23.1 -> 5.23.2)
timezone (2021d -> 2021e)
xdg-desktop-portal-kde (5.23.1 -> 5.23.2)
=== Details ===
==== avahi ====
Subpackages: libavahi-client3 libavahi-common3 libavahi-core7
- Change %python38_version_nodots to %suse_version which is
compatible with Leap and SLE. See also:
https://github.com/openSUSE/python-rpm-macros/issues/107
==== avahi-glib2 ====
- Change %python38_version_nodots to %suse_version which is
compatible with Leap and SLE. See also:
https://github.com/openSUSE/python-rpm-macros/issues/107
==== bluedevil5 ====
Version update (5.23.1 -> 5.23.2)
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
* Update version number for 5.23.1
==== boost-base ====
Subpackages: boost-license1_77_0 libboost_thread1_77_0
- Fix boost nowide development not requiring the library itself
==== breeze ====
Version update (5.23.1 -> 5.23.2)
Subpackages: breeze5-cursors breeze5-decoration breeze5-style breeze5-wallpapers libbreezecommon5-5
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
* fix paint for standalone buttons with dynamic size
* Update version number for 5.23.1
- Drop patches, now upstream:
* 0001-Update-version-number-for-5.23.1.patch
==== cairo ====
Subpackages: libcairo-gobject2 libcairo-script-interpreter2 libcairo2
- Add upstream patch
+ cairo-do-not-override-explicitly-requested-grayscale-aa.patch
Do not replace explicitly set applications settings by user
settings for font antialiasing.
See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114
==== colord-gtk ====
Version update (0.1.26 -> 0.2.0)
- Update to version 0.2.0:
+ New Features:
- Migrate to gettext
- Port to DocBook 5
- Port to the Meson build system
+ Bugfixes:
- Do not leak plug_name
- Fix gtk-doc build when srcdir != builddir
- Add meson BuildRequires and macros following upstreams port to
meson buildsystem.
- Add gtk-doc and docbook5-xsl-stylesheets BuildRequires, build
gtk-doc development documentation and manpages. Following this
split out new -doc sub-package.
- Drop intltool, no longer needed.
- Package COPYING as license, as this was somehow missed in the
past.
- Modernize spec/cleanup.
==== discover ====
Version update (5.23.1 -> 5.23.2)
Subpackages: discover-backend-flatpak discover-backend-packagekit discover-notifier
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
* pk: Properly resolve package ids after a transactions is done (kde#443615)
* packagekit: Do not re-create sources list on refresh
* pk: Allow enabling/disabling repositories
* pk: Try to detect if a local file we are trying to install already is installed (kde#443612)
* Fix InstallApplicationButton against KF 5.86 (kde#444022)
==== drkonqi5 ====
Version update (5.23.1 -> 5.23.2)
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1
==== flatpak ====
Version update (1.12.1 -> 1.12.2)
Subpackages: libflatpak0 system-user-flatpak
- Update to 1.12.2:
+ Install translations referenced by LANG, LANGUAGE or LC_ALL
+ Fix error handling for the syscalls that are blocked when not
using --devel
+ Improve diagnostic messages when seccomp rules cannot be
applied
+ Updated translations.
==== gtk2 ====
Subpackages: gtk2-tools libgtk-2_0-0
- Add gtk2-rpmlintrc (boo#1191758):
+ Filter wrong split request for libgdk-x11-2.0.so.0: the
library shares the version info with gtk2 and is allowed to be
in the same library package.
+ Filter libgail.so.18 split request: the error is actually
correct, but gtk2 being a legacy package does not justify the
extra efort. The libgtk-2_0-0 package is the only consumer.
==== kactivitymanagerd ====
Version update (5.23.1 -> 5.23.2)
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1
==== kde-cli-tools5 ====
Version update (5.23.1 -> 5.23.2)
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1
==== kernel-firmware ====
Version update (20210928 -> 20211027)
Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd
- Update to version 20211027 (git commit 1d00989a6596):
* linux-firmware: Update AMD cpu microcode
* QCA: Update Bluetooth firmware for WCN685x
* bnx2x: Add FW 7.13.20.0
* Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
* linux-firmware: Update NXP Management Complex firmware to version 10.28.1
* linux-firmware: update firmware for MT7921 WiFi device
* rtw89: 8852a: update fw to v0.13.30.0
* linux-firmware: Update firmware file for Intel Bluetooth 9462
* linux-firmware: Update firmware file for Intel Bluetooth 9462
* linux-firmware: Update firmware file for Intel Bluetooth 9560
* linux-firmware: Update firmware file for Intel Bluetooth 9560
* linux-firmware: Update firmware file for Intel Bluetooth AX201
* linux-firmware: Update firmware file for Intel Bluetooth AX201
* linux-firmware: Update firmware file for Intel Bluetooth AX211
* linux-firmware: Update firmware file for Intel Bluetooth AX211
* linux-firmware: Update firmware file for Intel Bluetooth AX210
* linux-firmware: Update firmware file for Intel Bluetooth 9560
* linux-firmware: Update firmware file for Intel Bluetooth 9260
* linux-firmware: Update firmware file for Intel Bluetooth AX200
* linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89
==== kgamma5 ====
Version update (5.23.1 -> 5.23.2)
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1
==== khotkeys5 ====
Version update (5.23.1 -> 5.23.2)
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1
==== kinfocenter5 ====
Version update (5.23.1 -> 5.23.2)
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1
==== kmenuedit5 ====
Version update (5.23.1 -> 5.23.2)
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1
==== kscreen5 ====
Version update (5.23.1 -> 5.23.2)
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
* kcm: Fix removal of Xft.dpi from Xresources
==== kscreenlocker ====
Version update (5.23.1 -> 5.23.2)
Subpackages: libKScreenLocker5
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1
==== ksystemstats5 ====
Version update (5.23.1 -> 5.23.2)
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1
==== kwayland-integration ====
Version update (5.23.1 -> 5.23.2)
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1
==== kwayland-server ====
Version update (5.23.1 -> 5.23.2)
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1
==== kwin5 ====
Version update (5.23.1 -> 5.23.2)
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
* [wayland] fix ignored keyboard RepeatRate (kde#443721)
* kwineffects: Fix destruction of s_fbo with shared GLTexture objects (kde#443951)
* WaylandOutput: schedule update on mode change (kde#444303)
* platforms/drm: fix direct scanout check
* Fix focus loss on decoration destruction (kde#411884)
* input: fix crash on touch quicktile
* platforms/drm: fix init with explicit modifiers
* platforms/drm: allow overriding eglstream choice
* platforms/drm: set draw buffer for gbm
* platforms/drm: use gbm with NVidia driver 495+
==== kwrited5 ====
Version update (5.23.1 -> 5.23.2)
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1
==== layer-shell-qt ====
Version update (5.23.1 -> 5.23.2)
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1
==== libkdecoration2 ====
Version update (5.23.1 -> 5.23.2)
Subpackages: libkdecorations2-5 libkdecorations2private9
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1
==== libkscreen2 ====
Version update (5.23.1 -> 5.23.2)
Subpackages: libKF5Screen7 libkscreen2-plugin
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1
==== libksysguard5 ====
Version update (5.23.1 -> 5.23.2)
Subpackages: ksysguardsystemstats-data libKSysGuardSystemStats1 libksysguard5-imports
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1
==== libopenmpt ====
Version update (0.5.11 -> 0.5.12)
- Update to 0.5.12:
* [Sec] Possible crash when loading malformed MDL files. (r15603)
* [Bug] Fixed various undefined behaviour found with ubsan.
* Seeking with sample sync sometimes didn?t compute the correct
sample position with pingpong-looped samples.
* IT: Tremor command I11 erroneously behaved like I00 (use previous
parameter) unless IT Old Effects were enabled.
* PTM: Panning was translated wrong in some edge cases.
* IMF / PTM: Note Slide commands were sometimes slightly off.
* OKT: Better support for fine note slides.
* DBM: Echo enable effect parameter range checks were incorrect.
* XM: Sample texts in XMs made with MadTracker are now also
decoded using Windows-1252 encoding.
* in_openmpt: Song metadata is no longer reverted when viewing
file info.
* mpg123: Update to v1.29.0 (2021-09-06).
==== libsoup ====
Version update (3.0.1 -> 3.0.2)
Subpackages: libsoup-3_0-0 typelib-1_0-Soup-3_0
- Update to version 3.0.2:
+ Add support for multiple auth challenges in one response.
+ Fix SoupCache test failures on 32bit
+ Don't treat `-Wincompatible-pointer-types` as error. The
`glib-mkenums` tool sometimes triggered this.
+ Improve `gssapi` dependency handling.
+ Fix undefined `ssize_t` on Windows.
+ Updated translations.
- No longer ignore test failure on 32-bit arches, fixed upstream.
==== libsoup2 ====
Version update (2.74.0 -> 2.74.1)
Subpackages: libsoup-2_4-1 typelib-1_0-Soup-2_4
- Update to version 2.74.1:
+ Fix support for older versions of Vala.
+ Fix trying to build sysprof as a subproject on Windows.
+ Fix missing `extern "C"` in an installed header.
+ Improve `gssapi` dependency handling.
+ Fix `libsoup-doc` build target.
+ Updated translations.
==== milou5 ====
Version update (5.23.1 -> 5.23.2)
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1
==== net-snmp ====
Version update (5.9 -> 5.9.1)
- fix shlib-policy-name-error for SLPP boo#1191774
- update to 5.9.1:
- General: Many bug fixes
- Change to use systemd service files directly from net-snmp package.
Patch clean-up and renaming.
Add:
* net-snmp-5.9.1-suse-systemd-service-files.patch
* net-snmp-5.9.1-harden_snmpd.service.patch
* net-snmp-5.9.1-harden_snmptrapd.service.patch
* net-snmp-5.9.1-add-lustre-fs-support.patch
Remove:
* snmpd.service
* snmptrapd.service
* harden_snmpd.service.patch
* harden_snmptrapd.service.patch
* net-snmp-5.8-add-lustre-fs-support.patch
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_snmpd.service.patch
* harden_snmptrapd.service.patch
Modified:
* snmpd.service
* snmptrapd.service
==== osinfo-db ====
Version update (20210903 -> 20211013)
- Update to database version 20211013
osinfo-db-20211013.tar.xz
==== patterns-base ====
Subpackages: patterns-base-base patterns-base-bootloader patterns-base-minimal_base patterns-base-x11
- remove mention of "Minimal" from the base pattern
==== patterns-containers ====
- Only require rook on architectures it's available on
==== patterns-microos ====
Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-base-microdnf patterns-microos-base-packagekit patterns-microos-base-zypper patterns-microos-basesystem patterns-microos-cloud patterns-microos-cockpit patterns-microos-defaults patterns-microos-desktop-common patterns-microos-desktop-gnome patterns-microos-desktop-kde patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-ra_agent patterns-microos-ra_verifier patterns-microos-selinux patterns-microos-sssd_ldap
- Install dmidecode only on archs where it is available
- Add NetworkManager-openvpn-gnome to gnome pattern
==== plasma-browser-integration ====
Version update (5.23.1 -> 5.23.2)
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
* [History Runner] Skip blob URLs
==== plasma-nm5 ====
Version update (5.23.1 -> 5.23.2)
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
* Set Qt.ImhNoPredictiveText for text field that acts as a search field
* openconnect: Adjust version check in CMake and allow version 3.99 again
==== plasma5-addons ====
Version update (5.23.1 -> 5.23.2)
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
* [applets/notes] Fix Binding::restoreMode deprecation warning
==== plasma5-desktop ====
Version update (5.23.1 -> 5.23.2.1)
- Update to 5.23.2.1
* New bugfix release
- Changes since 5.23.2:
* kickoff: Fix drag and drop causing delegates to reset to a 0 X position and overlap (kde#443975)
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
* [Folder View] Fix executing file without prompting (kde#435560)
* KCM Touchpad: Load config for touchpad on init (kde#443011)
* Remove defunct check for proxyAction in foldermodel (kde#444128)
* taskmanager: Show highlight before ToolTipInstance starts loading for grouped tooltips
* Fix updating apps model (kde#444101)
* Fix pinned applet closes (kde#443589)
* taskmanager: Prevent useless component creation/destruction for grouped tooltips
* applets/taskmanager: Always set mprisSourceName to parentPid
* Make Applet config window a tiny bit smaller and reduce minimum size (kde#443712)
* Set Qt.ImhNoPredictiveText for text fields that act as search fields (kde#439914)
* Desktop as folder: restore functionality of the "delete" action (kde#442765)
* Fix create-folder-shortcut (F10) (kde#443512)
==== plasma5-integration ====
Version update (5.23.1 -> 5.23.2)
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1
==== plasma5-pa ====
Version update (5.23.1 -> 5.23.2)
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1
==== plasma5-workspace ====
Version update (5.23.1 -> 5.23.2)
Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-libs xembedsniproxy
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
* Hide KRunner window when pressing escape (kde#444240)
* [applets/clipboard] Fix selecting clipboard entries with Enter
* Set Qt.ImhNoPredictiveText for text fields that act as search fields
* [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)
==== polkit-kde-agent-5 ====
Version update (5.23.1 -> 5.23.2)
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1
==== powerdevil5 ====
Version update (5.23.1 -> 5.23.2)
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1
==== python-matplotlib ====
Version update (3.4.2 -> 3.4.3)
- version 3.4.3
Patches removed (in version 3.4.3):
inkscape11.patch
0001-FIX-Pillow-asarray-bug.patch
0002-Dont-modify-arrays-when-masking-values-for-log.patch
==== qemu ====
- qemu: virtio-net: heap use-after-free in virtio_net_receive_rcu
(bsc#1189938 CVE-2021-3748)
solved by virtio-net-fix-use-after-unmap-free-for-.patch
- kvm,qemu: out-of-bounds write in UAS (USB Attached SCSI) device emulation
(bsc#1189702 CVE-2021-3713)
* Patches added:
uas-add-stream-number-sanity-checks.patch
==== systemsettings5 ====
Version update (5.23.1 -> 5.23.2)
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1
==== timezone ====
Version update (2021d -> 2021e)
- timezone update 2021e:
* Palestine will fall back 10-29 (not 10-30) at 01:00
==== xdg-desktop-portal-kde ====
Version update (5.23.1 -> 5.23.2)
- Update to 5.23.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.2
- No code changes since 5.23.1
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
avahi
boost-base
cairo
kernel-firmware (20210928 -> 20211027)
libsoup2 (2.74.0 -> 2.74.1)
nfs-utils
patterns-base
patterns-containers
patterns-microos
python-matplotlib (3.4.2 -> 3.4.3)
qemu
timezone (2021d -> 2021e)
=== Details ===
==== avahi ====
Subpackages: libavahi-client3 libavahi-common3
- Change %python38_version_nodots to %suse_version which is
compatible with Leap and SLE. See also:
https://github.com/openSUSE/python-rpm-macros/issues/107
==== boost-base ====
Subpackages: boost-license1_77_0 libboost_thread1_77_0
- Fix boost nowide development not requiring the library itself
==== cairo ====
Subpackages: libcairo-gobject2 libcairo2
- Add upstream patch
+ cairo-do-not-override-explicitly-requested-grayscale-aa.patch
Do not replace explicitly set applications settings by user
settings for font antialiasing.
See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114
==== kernel-firmware ====
Version update (20210928 -> 20211027)
Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd
- Update to version 20211027 (git commit 1d00989a6596):
* linux-firmware: Update AMD cpu microcode
* QCA: Update Bluetooth firmware for WCN685x
* bnx2x: Add FW 7.13.20.0
* Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
* linux-firmware: Update NXP Management Complex firmware to version 10.28.1
* linux-firmware: update firmware for MT7921 WiFi device
* rtw89: 8852a: update fw to v0.13.30.0
* linux-firmware: Update firmware file for Intel Bluetooth 9462
* linux-firmware: Update firmware file for Intel Bluetooth 9462
* linux-firmware: Update firmware file for Intel Bluetooth 9560
* linux-firmware: Update firmware file for Intel Bluetooth 9560
* linux-firmware: Update firmware file for Intel Bluetooth AX201
* linux-firmware: Update firmware file for Intel Bluetooth AX201
* linux-firmware: Update firmware file for Intel Bluetooth AX211
* linux-firmware: Update firmware file for Intel Bluetooth AX211
* linux-firmware: Update firmware file for Intel Bluetooth AX210
* linux-firmware: Update firmware file for Intel Bluetooth 9560
* linux-firmware: Update firmware file for Intel Bluetooth 9260
* linux-firmware: Update firmware file for Intel Bluetooth AX200
* linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89
==== libsoup2 ====
Version update (2.74.0 -> 2.74.1)
- Update to version 2.74.1:
+ Fix support for older versions of Vala.
+ Fix trying to build sysprof as a subproject on Windows.
+ Fix missing `extern "C"` in an installed header.
+ Improve `gssapi` dependency handling.
+ Fix `libsoup-doc` build target.
+ Updated translations.
==== nfs-utils ====
Subpackages: libnfsidmap1 nfs-client
- add Add-disable-sbin-override-for-when-sbin-is-a-symlink.patch
and use it to move last few binaries from /sbin to /usr/sbin
(bsc#1191082)
- Move nfsdclddb and nfsdclnts from nfs-client to
nfs-kernel-server and fix their permissions.
==== patterns-base ====
Subpackages: patterns-base-apparmor patterns-base-bootloader patterns-base-minimal_base
- remove mention of "Minimal" from the base pattern
==== patterns-containers ====
Subpackages: patterns-containers-container_runtime patterns-containers-container_runtime_kubernetes patterns-containers-kubeadm patterns-containers-kubernetes_utilities patterns-containers-kubic_admin patterns-containers-kubic_loadbalancer patterns-containers-kubic_worker
- Only require rook on architectures it's available on
==== patterns-microos ====
Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-base-microdnf patterns-microos-base-packagekit patterns-microos-base-zypper patterns-microos-basesystem patterns-microos-cloud patterns-microos-cockpit patterns-microos-defaults patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-ra_agent patterns-microos-ra_verifier patterns-microos-selinux patterns-microos-sssd_ldap
- Install dmidecode only on archs where it is available
- Add NetworkManager-openvpn-gnome to gnome pattern
==== python-matplotlib ====
Version update (3.4.2 -> 3.4.3)
- version 3.4.3
Patches removed (in version 3.4.3):
inkscape11.patch
0001-FIX-Pillow-asarray-bug.patch
0002-Dont-modify-arrays-when-masking-values-for-log.patch
==== qemu ====
- qemu: virtio-net: heap use-after-free in virtio_net_receive_rcu
(bsc#1189938 CVE-2021-3748)
solved by virtio-net-fix-use-after-unmap-free-for-.patch
- kvm,qemu: out-of-bounds write in UAS (USB Attached SCSI) device emulation
(bsc#1189702 CVE-2021-3713)
* Patches added:
uas-add-stream-number-sanity-checks.patch
==== timezone ====
Version update (2021d -> 2021e)
- timezone update 2021e:
* Palestine will fall back 10-29 (not 10-30) at 01:00
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the aarch64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
AppStream (0.14.4 -> 0.14.6)
grub2
kernel-source (5.14.11 -> 5.14.14)
logrotate
mpg123 (1.29.1 -> 1.29.2)
ncurses (6.2.20211002 -> 6.3.20211021)
parted
pcre2 (10.37 -> 10.38)
plasma5-openSUSE
podman (3.3.1 -> 3.4.1)
polkit
python-Mako (1.1.4 -> 1.1.5)
python-cryptography (3.3.2 -> 3.4.8)
python-jsonpatch
python-numpy
python-pandas (1.3.3 -> 1.3.4)
python38
python38-core
qca-qt5
rpm (4.16.1.3 -> 4.17.0)
rpm-config-SUSE (0.g83 -> 0.g89)
suse-module-tools (16.0.11 -> 16.0.13)
systemd-rpm-macros
transactional-update (3.5.6 -> 3.6.0)
u-boot-rpiarm64
=== Details ===
==== AppStream ====
Version update (0.14.4 -> 0.14.6)
Subpackages: libAppStreamQt2 libappstream4
- Update to 0.14.6. Check the NEWS file for the list of changes.
- Only install the license files once.
==== grub2 ====
Subpackages: grub2-arm64-efi grub2-snapper-plugin
- Fix installation on usrmerged s390x
==== kernel-source ====
Version update (5.14.11 -> 5.14.14)
- Update
patches.kernel.org/5.14.14-060-x86-fpu-Mask-out-the-invalid-MXCSR-bits-prop…
(bsc#1012628 bsc#1191855).
- commit 2b5383f
- Linux 5.14.14 (bsc#1012628).
- ALSA: usb-audio: Add quirk for VF0770 (bsc#1012628).
- ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat
ioctl (bsc#1012628).
- ALSA: usb-audio: Fix a missing error check in scarlett gen2
mixer (bsc#1012628).
- ALSA: seq: Fix a potential UAF by wrong private_free call order
(bsc#1012628).
- ALSA: hda/realtek: Enable 4-speaker output for Dell Precision
5560 laptop (bsc#1012628).
- ALSA: hda - Enable headphone mic on Dell Latitude laptops with
ALC3254 (bsc#1012628).
- ALSA: hda/realtek: Complete partial device name to avoid
ambiguity (bsc#1012628).
- ALSA: hda/realtek: Add quirk for Clevo X170KM-G (bsc#1012628).
- ALSA: hda/realtek - ALC236 headset MIC recording issue
(bsc#1012628).
- ALSA: hda/realtek: Add quirk for TongFang PHxTxX1 (bsc#1012628).
- ALSA: hda/realtek: Fix for quirk to enable speaker output on
the Lenovo 13s Gen2 (bsc#1012628).
- ALSA: hda/realtek: Fix the mic type detection issue for ASUS
G551JW (bsc#1012628).
- platform/x86: gigabyte-wmi: add support for B550 AORUS ELITE
AX V2 (bsc#1012628).
- platform/x86: amd-pmc: Add alternative acpi id for PMC
controller (bsc#1012628).
- spi: atmel: Fix PDC transfer setup bug (bsc#1012628).
- mtd: rawnand: qcom: Update code word value for raw read
(bsc#1012628).
- nds32/ftrace: Fix Error: invalid operands (*UND* and *UND*
sections) for `^' (bsc#1012628).
- dm: fix mempool NULL pointer race when completing IO
(bsc#1012628).
- ACPI: PM: Include alternate AMDI0005 id in special behaviour
(bsc#1012628).
- dm rq: don't queue request to blk-mq during DM suspend
(bsc#1012628).
- s390: fix strrchr() implementation (bsc#1012628).
- clk: socfpga: agilex: fix duplicate s2f_user0_clk (bsc#1012628).
- csky: don't let sigreturn play with priveleged bits of status
register (bsc#1012628).
- csky: Fixup regs.sr broken in ptrace (bsc#1012628).
- drm/fbdev: Clamp fbdev surface size if too large (bsc#1012628).
- arm64/hugetlb: fix CMA gigantic page order for non-4K PAGE_SIZE
(bsc#1012628).
- drm/nouveau/fifo: Reinstate the correct engine bit programming
(bsc#1012628).
- drm/msm: Do not run snapshot on non-DPU devices (bsc#1012628).
- drm/msm: Avoid potential overflow in timeout_to_jiffies()
(bsc#1012628).
- btrfs: unlock newly allocated extent buffer after error
(bsc#1012628).
- btrfs: deal with errors when replaying dir entry during log
replay (bsc#1012628).
- btrfs: deal with errors when adding inode reference during
log replay (bsc#1012628).
- btrfs: check for error when looking up inode during dir entry
replay (bsc#1012628).
- btrfs: update refs for any root except tree log roots
(bsc#1012628).
- btrfs: fix abort logic in btrfs_replace_file_extents
(bsc#1012628).
- module: fix clang CFI with MODULE_UNLOAD=n (bsc#1012628).
- x86/resctrl: Free the ctrlval arrays when
domain_setup_mon_state() fails (bsc#1012628).
- mei: me: add Ice Lake-N device id (bsc#1012628).
- mei: hbm: drop hbm responses on early shutdown (bsc#1012628).
- USB: xhci: dbc: fix tty registration race (bsc#1012628).
- xhci: guard accesses to ep_state in xhci_endpoint_reset()
(bsc#1012628).
- xhci: add quirk for host controllers that don't update endpoint
DCS (bsc#1012628).
- xhci: Fix command ring pointer corruption while aborting a
command (bsc#1012628).
- xhci: Enable trust tx length quirk for Fresco FL11 USB
controller (bsc#1012628).
- cb710: avoid NULL pointer subtraction (bsc#1012628).
- efi/cper: use stack buffer for error record decoding
(bsc#1012628).
- efi: Change down_interruptible() in virt_efi_reset_system()
to down_trylock() (bsc#1012628).
- usb: musb: dsps: Fix the probe error path (bsc#1012628).
- Input: xpad - add support for another USB ID of Nacon GC-100
(bsc#1012628).
- USB: serial: qcserial: add EM9191 QDL support (bsc#1012628).
- USB: serial: option: add Quectel EC200S-CN module support
(bsc#1012628).
- USB: serial: option: add Telit LE910Cx composition 0x1204
(bsc#1012628).
- USB: serial: option: add prod. id for Quectel EG91
(bsc#1012628).
- misc: fastrpc: Add missing lock before accessing find_vma()
(bsc#1012628).
- virtio: write back F_VERSION_1 before validate (bsc#1012628).
- EDAC/armada-xp: Fix output of uncorrectable error counter
(bsc#1012628).
- nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
(bsc#1012628).
- virtio-blk: remove unneeded "likely" statements (bsc#1012628).
- Revert "virtio-blk: Add validation for block size in config
space" (bsc#1012628).
- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT
automatically (bsc#1012628).
- powerpc/xive: Discard disabled interrupts in get_irqchip_state()
(bsc#1012628).
- iio: adc: aspeed: set driver data when adc probe (bsc#1012628).
- drivers: bus: simple-pm-bus: Add support for probing simple
bus only devices (bsc#1012628).
- driver core: Reject pointless SYNC_STATE_ONLY device links
(bsc#1012628).
- iio: adc: ad7192: Add IRQ flag (bsc#1012628).
- iio: adc: ad7780: Fix IRQ flag (bsc#1012628).
- iio: adc: ad7793: Fix IRQ flag (bsc#1012628).
- iio: adis16480: fix devices that do not support sleep mode
(bsc#1012628).
- iio: adc128s052: Fix the error handling path of 'adc128_probe()'
(bsc#1012628).
- iio: adc: max1027: Fix wrong shift with 12-bit devices
(bsc#1012628).
- iio: adis16475: fix deadlock on frequency set (bsc#1012628).
- iio: mtk-auxadc: fix case IIO_CHAN_INFO_PROCESSED (bsc#1012628).
- iio: light: opt3001: Fixed timeout error when 0 lux
(bsc#1012628).
- iio: accel: fxls8962af: return IRQ_HANDLED when fifo is flushed
(bsc#1012628).
- iio: adc: max1027: Fix the number of max1X31 channels
(bsc#1012628).
- iio: ssp_sensors: add more range checking in
ssp_parse_dataframe() (bsc#1012628).
- iio: ssp_sensors: fix error code in ssp_print_mcu_debug()
(bsc#1012628).
- Input: resistive-adc-touch - fix division by zero error on z1 ==
0 (bsc#1012628).
- eeprom: 93xx46: Add SPI device ID table (bsc#1012628).
- eeprom: 93xx46: fix MODULE_DEVICE_TABLE (bsc#1012628).
- eeprom: at25: Add SPI ID table (bsc#1012628).
- fpga: ice40-spi: Add SPI device ID table (bsc#1012628).
- iio: dac: ti-dac5571: fix an error code in probe()
(bsc#1012628).
- tracing: Fix missing osnoise tracer on max_latency
(bsc#1012628).
- tee: optee: Fix missing devices unregister during optee_remove
(bsc#1012628).
- ARM: dts: bcm2711-rpi-4-b: Fix usb's unit address (bsc#1012628).
- ARM: dts: bcm283x: Fix VEC address for BCM2711 (bsc#1012628).
- ARM: dts: bcm2711: fix MDIO #address- and #size-cells
(bsc#1012628).
- firmware: arm_ffa: Fix __ffa_devices_unregister (bsc#1012628).
- firmware: arm_ffa: Add missing remove callback to ffa_bus_type
(bsc#1012628).
- ARM: dts: bcm2711-rpi-4-b: fix sd_io_1v8_reg regulator states
(bsc#1012628).
- ARM: dts: bcm2711-rpi-4-b: Fix pcie0's unit address formatting
(bsc#1012628).
- clk: renesas: rzg2l: Fix clk status function (bsc#1012628).
- nvme-pci: Fix abort command id (bsc#1012628).
- sctp: account stream padding length for reconf chunk
(bsc#1012628).
- gpio: 74x164: Add SPI device ID table (bsc#1012628).
- gpio: pca953x: Improve bias setting (bsc#1012628).
- net: arc: select CRC32 (bsc#1012628).
- net: korina: select CRC32 (bsc#1012628).
- net/smc: improved fix wait on already cleared link
(bsc#1012628).
- net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
(bsc#1012628).
- net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp
(bsc#1012628).
- net/mlx5e: Switchdev representors are not vlan challenged
(bsc#1012628).
- net: stmmac: fix get_hw_feature() on old hardware (bsc#1012628).
- net: phy: Do not shutdown PHYs in READY state (bsc#1012628).
- net: dsa: mv88e6xxx: don't use PHY_DETECT on internal PHY's
(bsc#1012628).
- net: dsa: microchip: Added the condition for scheduling
ksz_mib_read_work (bsc#1012628).
- net: dsa: fix spurious error message when unoffloaded port
leaves bridge (bsc#1012628).
- net: encx24j600: check error in devm_regmap_init_encx24j600
(bsc#1012628).
- ethernet: s2io: fix setting mac address during resume
(bsc#1012628).
- vhost-vdpa: Fix the wrong input in config_cb (bsc#1012628).
- nfc: fix error handling of nfc_proto_register() (bsc#1012628).
- NFC: digital: fix possible memory leak in
digital_tg_listen_mdaa() (bsc#1012628).
- NFC: digital: fix possible memory leak in
digital_in_send_sdd_req() (bsc#1012628).
- pata_legacy: fix a couple uninitialized variable bugs
(bsc#1012628).
- ata: ahci_platform: fix null-ptr-deref in
ahci_platform_enable_regulators() (bsc#1012628).
- mlxsw: thermal: Fix out-of-bounds memory accesses (bsc#1012628).
- platform/mellanox: mlxreg-io: Fix argument base in kstrtou32()
call (bsc#1012628).
- platform/mellanox: mlxreg-io: Fix read access of n-bytes size
attributes (bsc#1012628).
- spi: spidev: Add SPI ID table (bsc#1012628).
- spi: bcm-qspi: clear MSPI spifie interrupt during probe
(bsc#1012628).
- drm/panel: olimex-lcd-olinuxino: select CRC32 (bsc#1012628).
- drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks
read (bsc#1012628).
- drm/msm: Fix null pointer dereference on pointer edp
(bsc#1012628).
- drm/msm/mdp5: fix cursor-related warnings (bsc#1012628).
- drm/msm/submit: fix overflow check on 64-bit architectures
(bsc#1012628).
- drm/msm/a6xx: Track current ctx by seqno (bsc#1012628).
- drm/msm/a4xx: fix error handling in a4xx_gpu_init()
(bsc#1012628).
- drm/msm/a3xx: fix error handling in a3xx_gpu_init()
(bsc#1012628).
- drm/msm/dsi: dsi_phy_14nm: Take ready-bit into account in
poll_for_ready (bsc#1012628).
- drm/msm/dsi: Fix an error code in msm_dsi_modeset_init()
(bsc#1012628).
- drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling
(bsc#1012628).
- acpi/arm64: fix next_platform_timer() section mismatch error
(bsc#1012628).
- platform/x86: intel_scu_ipc: Fix busy loop expiry time
(bsc#1012628).
- mqprio: Correct stats in mqprio_dump_class_stats()
(bsc#1012628).
- mptcp: fix possible stall on recvmsg() (bsc#1012628).
- qed: Fix missing error code in qed_slowpath_start()
(bsc#1012628).
- r8152: select CRC32 and CRYPTO/CRYPTO_HASH/CRYPTO_SHA256
(bsc#1012628).
- ice: fix locking for Tx timestamp tracking flush (bsc#1012628).
- block/rnbd-clt-sysfs: fix a couple uninitialized variable bugs
(bsc#1012628).
- nfp: flow_offload: move flow_indr_dev_register from app init
to app start (bsc#1012628).
- net: mscc: ocelot: make use of all 63 PTP timestamp identifiers
(bsc#1012628).
- net: mscc: ocelot: avoid overflowing the PTP timestamp FIFO
(bsc#1012628).
- net: mscc: ocelot: warn when a PTP IRQ is raised for an unknown
skb (bsc#1012628).
- net: mscc: ocelot: deny TX timestamping of non-PTP packets
(bsc#1012628).
- net: mscc: ocelot: cross-check the sequence id from the
timestamp FIFO with the skb PTP header (bsc#1012628).
- net: dsa: felix: break at first CPU port during init and
teardown (bsc#1012628).
- ionic: don't remove netdev->dev_addr when syncing uc list
(bsc#1012628).
- commit 6859230
- media: firewire: firedtv-avc: fix a buffer overflow in
avc_ca_pmt() (CVE-2021-3542 bsc#1184673).
- commit 08ab8da
- x86/fpu: Mask out the invalid MXCSR bits properly (x86_32
breakage).
- commit 565cd48
- rpm/kernel-obs-build.spec.in: reduce initrd functionality
For building in OBS, we always build inside a virtual machine
that gets a new, freshly created scratch filesystem image. So
we do not need to handle fscks because that ain't gonna happen,
as well as not we do not need to handle microcode update in the
initrd as these only can be run on the host system anyway. We
can also strip and hardlink as an additional optimisation that
should not significantly hurt.
- commit c72c6fc
- Update upstream commit id for rtw89 patch (bsc#1191321)
- commit 8dccb66
- Linux 5.14.13 (bsc#1012628).
- hwmon: (pmbus/ibm-cffps) max_power_out swap changes
(bsc#1012628).
- io_uring: kill fasync (bsc#1012628).
- sched: Always inline is_percpu_thread() (bsc#1012628).
- perf/core: fix userpage->time_enabled of inactive events
(bsc#1012628).
- scsi: qla2xxx: Fix excessive messages during device logout
(bsc#1012628).
- scsi: virtio_scsi: Fix spelling mistake "Unsupport" ->
"Unsupported" (bsc#1012628).
- scsi: ses: Fix unsigned comparison with less than zero
(bsc#1012628).
- drm/amdgpu: fix gart.bo pin_count leak (bsc#1012628).
- net: sun: SUNVNET_COMMON should depend on INET (bsc#1012628).
- vboxfs: fix broken legacy mount signature checking
(bsc#1012628).
- net: bgmac-platform: handle mac-address deferral (bsc#1012628).
- mac80211: check return value of rhashtable_init (bsc#1012628).
- net: prevent user from passing illegal stab size (bsc#1012628).
- hwmon: (ltc2947) Properly handle errors when looking for the
external clock (bsc#1012628).
- m68k: Handle arrivals of multiple signals correctly
(bsc#1012628).
- pinctrl: qcom: sc7280: Add PM suspend callbacks (bsc#1012628).
- mac80211: Drop frames from invalid MAC address in ad-hoc mode
(bsc#1012628).
- netfilter: nf_nat_masquerade: defer conntrack walk to work queue
(bsc#1012628).
- netfilter: nf_nat_masquerade: make async masq_inet6_event
handling generic (bsc#1012628).
- KVM: arm64: nvhe: Fix missing FORCE for hyp-reloc.S build rule
(bsc#1012628).
- ASoC: SOF: loader: release_firmware() on load failure to avoid
batching (bsc#1012628).
- HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device
IDs (bsc#1012628).
- netfilter: ip6_tables: zero-initialize fragment offset
(bsc#1012628).
- HID: apple: Fix logical maximum and usage maximum of Magic
Keyboard JIS (bsc#1012628).
- ALSA: usb-audio: Unify mixer resume and reset_resume procedure
(bsc#1012628).
- ALSA: oxfw: fix transmission method for Loud models based on
OXFW971 (bsc#1012628).
- ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic
(bsc#1012628).
- ext4: correct the error path of ext4_write_inline_data_end()
(bsc#1012628).
- ext4: check and update i_disksize properly (bsc#1012628).
- commit ab3ca44
- kernel-spec-macros: Since rpm 4.17 %verbose is unusable (bsc#1191229).
The semantic changed in an incompatible way so invoking the macro now
causes a build failure.
- commit 3e55f55
- Linux 5.14.12 (bsc#1012628).
- dsa: tag_dsa: Fix mask for trunked packets (bsc#1012628).
- x86/hpet: Use another crystalball to evaluate HPET usability
(bsc#1012628).
- x86/entry: Clear X86_FEATURE_SMAP when CONFIG_X86_SMAP=n
(bsc#1012628).
- x86/entry: Correct reference to intended CONFIG_64_BIT
(bsc#1012628).
- x86/fpu: Restore the masking out of reserved MXCSR bits
(bsc#1012628).
- x86/sev: Return an error on a returned non-zero
SW_EXITINFO1[31:0] (bsc#1012628).
- x86/Kconfig: Correct reference to MWINCHIP3D (bsc#1012628).
- x86/platform/olpc: Correct ifdef symbol to intended
CONFIG_OLPC_XO15_SCI (bsc#1012628).
- pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init
(bsc#1012628).
- powerpc/32s: Fix kuap_kernel_restore() (bsc#1012628).
- powerpc/64s: Fix unrecoverable MCE calling async handler from
NMI (bsc#1012628).
- powerpc/traps: do not enable irqs in _exception (bsc#1012628).
- powerpc/64s: fix program check interrupt emergency stack path
(bsc#1012628).
- powerpc/bpf ppc32: Fix BPF_SUB when imm == 0x80000000
(bsc#1012628).
- powerpc/bpf ppc32: Do not emit zero extend instruction for
64-bit BPF_END (bsc#1012628).
- powerpc/bpf ppc32: Fix JMP32_JSET_K (bsc#1012628).
- powerpc/bpf ppc32: Fix ALU32 BPF_ARSH operation (bsc#1012628).
- powerpc/bpf: Fix BPF_SUB when imm == 0x80000000 (bsc#1012628).
- powerpc/bpf: Fix BPF_MOD when imm == 1 (bsc#1012628).
- objtool: Make .altinstructions section entry size consistent
(bsc#1012628).
- objtool: Remove reloc symbol type checks in get_alt_entry()
(bsc#1012628).
- scsi: iscsi: Fix iscsi_task use after free (bsc#1012628).
- RISC-V: Include clone3() on rv32 (bsc#1012628).
- i2c: mlxcpld: Modify register setting for 400KHz frequency
(bsc#1012628).
- i2c: mlxcpld: Fix criteria for frequency setting (bsc#1012628).
- bpf, s390: Fix potential memory leak about jit_data
(bsc#1012628).
- riscv/vdso: make arch_setup_additional_pages wait for mmap_sem
for write killable (bsc#1012628).
- riscv/vdso: Move vdso data page up front (bsc#1012628).
- riscv/vdso: Refactor asm/vdso.h (bsc#1012628).
- RISC-V: Fix VDSO build for !MMU (bsc#1012628).
- riscv: explicitly use symbol offsets for VDSO (bsc#1012628).
- i2c: mediatek: Add OFFSET_EXT_CONF setting back (bsc#1012628).
- i2c: acpi: fix resource leak in reconfiguration device addition
(bsc#1012628).
- powerpc/iommu: Report the correct most efficient DMA mask for
PCI devices (bsc#1012628).
- net: prefer socket bound to interface when not in VRF
(bsc#1012628).
- iavf: fix double unlock of crit_lock (bsc#1012628).
- i40e: Fix freeing of uninitialized misc IRQ vector
(bsc#1012628).
- i40e: fix endless loop under rtnl (bsc#1012628).
- gve: report 64bit tx_bytes counter from
gve_handle_report_stats() (bsc#1012628).
- gve: fix gve_get_stats() (bsc#1012628).
- rtnetlink: fix if_nlmsg_stats_size() under estimation
(bsc#1012628).
- gve: Properly handle errors in gve_assign_qpl (bsc#1012628).
- gve: Avoid freeing NULL pointer (bsc#1012628).
- gve: Correct available tx qpl check (bsc#1012628).
- net: stmmac: trigger PCS EEE to turn off on link down
(bsc#1012628).
- net: pcs: xpcs: fix incorrect steps on disable EEE
(bsc#1012628).
- drm/nouveau/debugfs: fix file release memory leak (bsc#1012628).
- drm/nouveau/kms/nv50-: fix file release memory leak
(bsc#1012628).
- drm/nouveau: avoid a use-after-free when BO init fails
(bsc#1012628).
- video: fbdev: gbefb: Only instantiate device when built for IP32
(bsc#1012628).
- drm/panel: abt-y030xx067a: yellow tint fix (bsc#1012628).
- drm/nouveau/fifo/ga102: initialise chid on return from channel
creation (bsc#1012628).
- drm/sun4i: dw-hdmi: Fix HDMI PHY clock setup (bsc#1012628).
- bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893
(bsc#1012628).
- perf jevents: Free the sys_event_tables list after processing
entries (bsc#1012628).
- drm/amdgpu: handle the case of pci_channel_io_frozen only in
amdgpu_pci_resume (bsc#1012628).
- drm/amdkfd: fix a potential ttm->sg memory leak (bsc#1012628).
- ARM: defconfig: gemini: Restore framebuffer (bsc#1012628).
- netlink: annotate data races around nlk->bound (bsc#1012628).
- net: pcs: xpcs: fix incorrect CL37 AN sequence (bsc#1012628).
- net: sfp: Fix typo in state machine debug string (bsc#1012628).
- net/sched: sch_taprio: properly cancel timer from
taprio_destroy() (bsc#1012628).
- net: bridge: fix under estimation in br_get_linkxstats_size()
(bsc#1012628).
- net: bridge: use nla_total_size_64bit() in
br_get_linkxstats_size() (bsc#1012628).
- afs: Fix afs_launder_page() to set correct start file position
(bsc#1012628).
- netfs: Fix READ/WRITE confusion when calling iov_iter_xarray()
(bsc#1012628).
- drm/i915/bdb: Fix version check (bsc#1012628).
- drm/i915/tc: Fix TypeC port init/resume time sanitization
(bsc#1012628).
- drm/i915/jsl: Add W/A 1409054076 for JSL (bsc#1012628).
- drm/i915/audio: Use BIOS provided value for RKL HDA link
(bsc#1012628).
- ARM: imx6: disable the GIC CPU interface before calling
stby-poweroff sequence (bsc#1012628).
- dt-bindings: drm/bridge: ti-sn65dsi86: Fix reg value
(bsc#1012628).
- arm64: dts: ls1028a: fix eSDHC2 node (bsc#1012628).
- arm64: dts: imx8mm-kontron-n801x-som: do not allow to switch
off buck2 (bsc#1012628).
- arm64: dts: imx8: change the spi-nor tx (bsc#1012628).
- ARM: dts: imx: change the spi-nor tx (bsc#1012628).
- ptp_pch: Load module automatically if ID matches (bsc#1012628).
- powerpc/fsl/dts: Fix phy-connection-type for fm1mac3
(bsc#1012628).
- netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in
event notification (bsc#1012628).
- MIPS: Revert "add support for buggy MT7621S core detection"
(bsc#1012628).
- net: stmmac: dwmac-rk: Fix ethernet on rk3399 based devices
(bsc#1012628).
- net: mscc: ocelot: fix VCAP filters remaining active after
being deleted (bsc#1012628).
- net_sched: fix NULL deref in fifo_set_limit() (bsc#1012628).
- libbpf: Fix memory leak in strset (bsc#1012628).
- phy: mdio: fix memory leak (bsc#1012628).
- libbpf: Fix segfault in light skeleton for objects without BTF
(bsc#1012628).
- net/mlx5e: Fix the presented RQ index in PTP stats
(bsc#1012628).
- net/mlx5: Fix setting number of EQs of SFs (bsc#1012628).
- net/mlx5: Fix length of irq_index in chars (bsc#1012628).
- net/mlx5: Avoid generating event after PPS out in Real time mode
(bsc#1012628).
- net/mlx5: Force round second at 1PPS out start time
(bsc#1012628).
- net/mlx5: E-Switch, Fix double allocation of acl flow counter
(bsc#1012628).
- net/mlx5e: Keep the value for maximum number of channels in-sync
(bsc#1012628).
- net/mlx5e: IPSEC RX, enable checksum complete (bsc#1012628).
- bpf: Fix integer overflow in prealloc_elems_and_freelist()
(bsc#1012628).
- soc: ti: omap-prm: Fix external abort for am335x pruss
(bsc#1012628).
- bpf, arm: Fix register clobbering in div/mod implementation
(bsc#1012628).
- netfilter: nf_tables: reverse order in rule replacement
expansion (bsc#1012628).
- netfilter: nf_tables: add position handle in event notification
(bsc#1012628).
- netfilter: conntrack: fix boot failure with
nf_conntrack.enable_hooks=1 (bsc#1012628).
- iwlwifi: pcie: add configuration of a Wi-Fi adapter on Dell
XPS 15 (bsc#1012628).
- xtensa: call irqchip_init only when CONFIG_USE_OF is selected
(bsc#1012628).
- xtensa: use CONFIG_USE_OF instead of CONFIG_OF (bsc#1012628).
- arm64: dts: qcom: pm8150: use qcom,pm8998-pon binding
(bsc#1012628).
- ath5k: fix building with LEDS=m (bsc#1012628).
- PCI: hv: Fix sleep while in non-sleep context when removing
child devices from the bus (bsc#1012628).
- ARM: dts: imx6qdl-pico: Fix Ethernet support (bsc#1012628).
- ARM: dts: imx: Fix USB host power regulator polarity on M53Menlo
(bsc#1012628).
- ARM: dts: imx: Add missing pinctrl-names for panel on M53Menlo
(bsc#1012628).
- soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment
(bsc#1012628).
- iwlwifi: mvm: Fix possible NULL dereference (bsc#1012628).
- ARM: at91: pm: do not panic if ram controllers are not enabled
(bsc#1012628).
- Revert "arm64: dts: qcom: sc7280: Fixup the cpufreq node"
(bsc#1012628).
- ARM: dts: qcom: apq8064: Use 27MHz PXO clock as DSI PLL
reference (bsc#1012628).
- soc: qcom: socinfo: Fixed argument passed to platform_set_data()
(bsc#1012628).
- bus: ti-sysc: Add break in switch statement in sysc_init_soc()
(bsc#1012628).
- riscv: Flush current cpu icache before other cpus (bsc#1012628).
- scsi: ufs: core: Fix task management completion (bsc#1012628).
- ARM: dts: qcom: apq8064: use compatible which contains chipid
(bsc#1012628).
- ARM: dts: imx6dl-yapp4: Fix lp5562 LED driver probe
(bsc#1012628).
- ARM: dts: omap3430-sdp: Fix NAND device node (bsc#1012628).
- xen/balloon: fix cancelled balloon action (bsc#1012628).
- SUNRPC: fix sign error causing rpcsec_gss drops (bsc#1012628).
- nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero
(bsc#1012628).
- nfsd: fix error handling of register_pernet_subsys() in
init_nfsd() (bsc#1012628).
- ovl: fix IOCB_DIRECT if underlying fs doesn't support direct IO
(bsc#1012628).
- ovl: fix missing negative dentry check in ovl_rename()
(bsc#1012628).
- fbdev: simplefb: fix Kconfig dependencies (bsc#1012628).
- Update config files.
- mmc: sdhci-of-at91: replace while loop with read_poll_timeout
(bsc#1012628).
- mmc: sdhci-of-at91: wait for calibration done before proceed
(bsc#1012628).
- mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk
(bsc#1012628).
- xen/privcmd: fix error handling in mmap-resource processing
(bsc#1012628).
- drm/i915: Extend the async flip VT-d w/a to skl/bxt
(bsc#1012628).
- drm/i915: Fix runtime pm handling in i915_gem_shrink
(bsc#1012628).
- drm/amd/display: Fix DCN3 B0 DP Alt Mapping (bsc#1012628).
- drm/amd/display: Fix detection of 4 lane for DPALT
(bsc#1012628).
- drm/amd/display: Limit display scaling to up to 4k for DCN 3.1
(bsc#1012628).
- drm/nouveau/ga102-: support ttm buffer moves via copy engine
(bsc#1012628).
- drm/nouveau/kms/tu102-: delay enabling cursor until after
assign_windows (bsc#1012628).
- drm/amdgpu: During s0ix don't wait to signal GFXOFF
(bsc#1012628).
- drm/amd/display: USB4 bring up set correct address
(bsc#1012628).
- drm/amd/display: Fix B0 USB-C DP Alt mode (bsc#1012628).
- usb: typec: tipd: Remove dependency on "connector" child fwnode
(bsc#1012628).
- usb: typec: tcpm: handle SRC_STARTUP state if cc changes
(bsc#1012628).
- usb: typec: tcpci: don't handle vSafe0V event if it's not
enabled (bsc#1012628).
- USB: cdc-acm: fix break reporting (bsc#1012628).
- USB: cdc-acm: fix racy tty buffer accesses (bsc#1012628).
- usb: gadget: f_uac2: fixed EP-IN wMaxPacketSize (bsc#1012628).
- usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle
(bsc#1012628).
- usb: cdc-wdm: Fix check for WWAN (bsc#1012628).
- Partially revert "usb: Kconfig: using select for USB_COMMON
dependency" (bsc#1012628).
- Update config files.
- commit 7246625
- rtw89: add Realtek 802.11ax driver (bsc#1191321).
- commit 4c399ab
- Enable CONFIG_RTW88_DEBUG and CONFIG_RTW89_DEBUG on debug flavors (bsc#1191321)
- commit a76143b
==== logrotate ====
- Add patch:
* logrotate-dont_warn_on_size=_syntax.patch (boo#1191816)
==== mpg123 ====
Version update (1.29.1 -> 1.29.2)
- Update to version 1.29.2
* libmpg123: Fix non-live-decoder safeguard for
mpg123_framebyframe_decode() (was a no-op in practice).
==== ncurses ====
Version update (6.2.20211002 -> 6.3.20211021)
Subpackages: libncurses6 ncurses-utils terminfo-base
- Update to ncurses 6.3 (patch 20211021)
+ update release notes
+ add "ncu2openbsd" script, to illustrate how to update an OpenBSD
system to use a current ncurses release.
- Add upstream keyring to verify source signatures of both ncurses
and tack tar ball with their ASC (armored ASCii signature) counterpart
- Add ncurses patch 20211018
+ check for screen size-change in scr_init() and scr_restore(), in case
a screen dump does not match the current screen dimensions (report by
Frank Tkalcevic).
- Add ncurses patch 20211017
+ amend change for pkg-config to account for "none" being returned in
the libdir-path result rather than "no" (report by Gabriele Balducci).
- Add ncurses patch 20211016
+ build-fix for pmake with libtool.
+ improve make-tar.sh scripts, adding COPYING to tar file, and clean up
shellcheck warnings.
+ add link for "reset6" manpage in test-package ncurses6-doc
+ revise configure option --with-pkg-config-libdir, using the actual
search path from pkg-config or pkgconf using the output from --debug
(report by Pascal Pignard).
+ freeze ABI in ".map" files.
- Correct offsets of patch ncurses-6.2.dif
- Add ncurses patch 20211009
+ implement "+m" option in tabs program.
+ fill in some details for infoton -TD
+ fix spelling/consistency in several descriptions -TD
+ use vt420+lrmm in vt420 -TD
+ modify save_tty_settings() to avoid opening /dev/tty for cases other
than reset/init, e.g., for clear.
+ modify output of "toe -as" to show first description found rather
than the last.
+ improve tic checks for number of parameters of smglp, smgrp, smgtp,
and smgbp (cf: 20020525).
+ correct off-by-one comparison in last_char(), which did not allow
special case of ":" in a terminfo description field (cf: 20120407).
+ remove check in tic that assumes that none or both parameterized and
non-parameterized margin-setting capabilities are present
(cf: 20101002).
==== parted ====
- BuildRequire python3-base: Fix execution of test suite. Otherwise
we fail with
./t0282-gpt-move-backup.sh: /usr/bin/python3: bad interpreter: No
such file or directory.
- run checks during build
- added patches:
tests-disable.patch
==== pcre2 ====
Version update (10.37 -> 10.38)
Subpackages: libpcre2-16-0 libpcre2-8-0
- pcre2 10.38:
* Following Perl's lead, \K is now locked out in lookaround
assertions by default, but an option is provided to re-enable
the previous behaviour
==== plasma5-openSUSE ====
Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE sddm-theme-openSUSE
- Update to 5.23.2
==== podman ====
Version update (3.3.1 -> 3.4.1)
Subpackages: podman-cni-config
- Update to version 3.4.1:
* Bugfixes
- Fixed a bug where podman machine init could, under some circumstances,
create invalid machine configurations which could not be started (#11824).
- Fixed a bug where the podman machine list command would not properly
populate some output fields.
- Fixed a bug where podman machine rm could leave dangling sockets from
the removed machine (#11393).
- Fixed a bug where podman run --pids-limit=-1 was not supported (it now
sets the PID limit in the container to unlimited) (#11782).
- Fixed a bug where podman run and podman attach could throw errors about
a closed network connection when STDIN was closed by the client (#11856).
- Fixed a bug where the podman stop command could fail when run on a
container that had another podman stop command run on it previously.
- Fixed a bug where the --sync flag to podman ps was nonfunctional.
- Fixed a bug where the Windows and OS X remote clients' podman stats
command would fail (#11909).
- Fixed a bug where the podman play kube command did not properly handle
environment variables whose values contained an = (#11891).
- Fixed a bug where the podman generate kube command could generate
invalid annotations when run on containers with volumes that use SELinux
relabelling (:z or :Z) (#11929).
- Fixed a bug where the podman generate kube command would generate YAML
including some unnecessary (set to default) fields (e.g. user and group,
entrypoint, default protocol for forwarded ports) (#11914, #11915, and #11965).
- Fixed a bug where the podman generate kube command could, under some
circumstances, generate YAML including an invalid targetPort field for
forwarded ports (#11930).
- Fixed a bug where rootless Podman's podman info command could, under
some circumstances, not read available CGroup controllers (#11931).
- Fixed a bug where podman container checkpoint --export would fail to
checkpoint any container created with --log-driver=none (#11974).
* API
- Fixed a bug where the Compat Create endpoint for Containers could panic
when no options were passed to a bind mount of tmpfs (#11961).
- Update to version 3.4.0:
* Features
- Pods now support init containers! Init containers are containers which run before the rest of the pod starts. There are two types of init containers: "always", which always run before the pod is started, and "once", which only run the first time the pod starts and are subsequently removed. They can be added using the podman create command's --init-ctr option.
- Support for init containers has also been added to podman play kube and podman generate kube - init containers contained in Kubernetes YAML will be created as Podman init containers, and YAML generated by Podman will include any init containers created.
- The podman play kube command now supports building images. If the --build option is given and a directory with the name of the specified image exists in the current working directory and contains a valid Containerfile or Dockerfile, the image will be built and used for the container.
- The podman play kube command now supports a new option, --teardown, which removes any pods and containers created by the given Kubernetes YAML.
- The podman generate kube command now generates annotations for SELinux mount options on volume (:z and :Z) that are respected by the podman play kube command.
- A new command has been added, podman pod logs, to return logs for all containers in a pod at the same time.
- Two new commands have been added, podman volume export (to export a volume to a tar file) and podman volume import) (to populate a volume from a given tar file).
- The podman auto-update command now supports simple rollbacks. If a container fails to start after an automatic update, it will be rolled back to the previous image and restarted again.
- Pods now share their user namespace by default, and the podman pod create command now supports the --userns option. This allows rootless pods to be created with the --userns=keep-id option.
- The podman pod ps command now supports a new filter with its --filter option, until, which returns pods created before a given timestamp.
- The podman image scp command has been added. This command allows images to be transferred between different hosts.
- The podman stats command supports a new option, --interval, to specify the amount of time before the information is refreshed.
- The podman inspect command now includes ports exposed (but not published) by containers (e.g. ports from --expose when --publish-all is not specified).
- The podman inspect command now has a new boolean value, Checkpointed, which indicates that a container was stopped as a result of a podman container checkpoint operation.
- Volumes created by podman volume create now support setting quotas when run atop XFS. The size and inode options allow the maximum size and maximum number of inodes consumed by a volume to be limited.
- The podman info command now outputs information on what log drivers, network drivers, and volume plugins are available for use (#11265).
- The podman info command now outputs the current log driver in use, and the variant and codename of the distribution in use.
- The parameters of the VM created by podman machine init (amount of disk space, memory, CPUs) can now be set in containers.conf.
- The podman machine ls command now shows additional information (CPUs, memory, disk size) about VMs managed by podman machine.
- The podman ps command now includes healthcheck status in container state for containers that have healthchecks (#11527).
* Changes
- The podman build command has a new alias, podman buildx, to improve compatibility with Docker. We have already added support for many docker buildx flags to podman build and aim to continue to do so.
- Cases where Podman is run without a user session or a writable temporary files directory will now produce better error messages.
- The default log driver has been changed from file to journald. The file driver did not properly support log rotation, so this should lead to a better experience. If journald is not available on the system, Podman will automatically revert to the file.
- Podman no longer depends on ip for removing networks (#11403).
- The deprecated --macvlan flag to podman network create now warns when it is used. It will be removed entirely in the Podman 4.0 release.
- The podman machine start command now prints a message when the VM is successfully started.
- The podman stats command can now be used on containers that are paused.
- The podman unshare command will now return the exit code of the command that was run in the user namespace (assuming the command was successfully run).
- Successful healthchecks will no longer add a healthy line to the system log to reduce log spam.
- As a temporary workaround for a lack of shortname prompts in the Podman remote client, VMs created by podman machine now default to only using the docker.io registry.
* Bugfixes
- Fixed a bug where whitespace in the definition of sysctls (particularly default sysctls specified in containers.conf) would cause them to be parsed incorrectly.
- Fixed a bug where the Windows remote client improperly validated volume paths (#10900).
- Fixed a bug where the first line of logs from a container run with the journald log driver could be skipped.
- Fixed a bug where images created by podman commit did not include ports exposed by the container.
- Fixed a bug where the podman auto-update command would ignore the io.containers.autoupdate.authfile label when pulling images (#11171).
- Fixed a bug where the --workdir option to podman create and podman run could not be set to a directory where a volume was mounted (#11352).
- Fixed a bug where systemd socket-activation did not properly work with systemd-managed Podman containers (#10443).
- Fixed a bug where environment variable secrets added to a container were not available to exec sessions launched in the container.
- Fixed a bug where rootless containers could fail to start the rootlessport port-forwarding service when XDG_RUNTIME_DIR was set to a long path.
- Fixed a bug where arguments to the --systemd option to podman create and podman run were case-sensitive (#11387).
- Fixed a bug where the podman manifest rm command would also remove images referenced by the manifest, not just the manifest itself (#11344).
- Fixed a bug where the Podman remote client on OS X would not function properly if the TMPDIR environment variable was not set (#11418).
- Fixed a bug where the /etc/hosts file was not guaranteed to contain an entry for localhost (this is still not guaranteed if --net=host is used; such containers will exactly match the host's /etc/hosts) (#11411).
- Fixed a bug where the podman machine start command could print warnings about unsupported CPU features (#11421).
- Fixed a bug where the podman info command could segfault when accessing cgroup information.
- Fixed a bug where the podman logs -f command could hang when a container exited (#11461).
- Fixed a bug where the podman generate systemd command could not be used on containers that specified a restart policy (#11438).
- Fixed a bug where the remote Podman client's podman build command would fail to build containers if the UID and GID on the client were higher than 65536 (#11474).
- Fixed a bug where the remote Podman client's podman build command would fail to build containers if the context directory was a symlink (#11732).
- Fixed a bug where the --network flag to podman play kube was not properly parsed when a non-bridge network configuration was specified.
- Fixed a bug where the podman inspect command could error when the container being inspected was removed as it was being inspected (#11392).
- Fixed a bug where the podman play kube command ignored the default pod infra image specified in containers.conf.
- Fixed a bug where the --format option to podman inspect was nonfunctional under some circumstances (#8785).
- Fixed a bug where the remote Podman client's podman run and podman exec commands could skip a byte of output every 8192 bytes (#11496).
- Fixed a bug where the podman stats command would print nonsensical results if the container restarted while it was running (#11469).
- Fixed a bug where the remote Podman client would error when STDOUT was redirected on a Windows client (#11444).
- Fixed a bug where the podman run command could return 0 when the application in the container exited with 125 (#11540).
- Fixed a bug where containers with --restart=always set using the rootlessport port-forwarding service could not be restarted automatically.
- Fixed a bug where the --cgroups=split option to podman create and podman run was silently discarded if the container was part of a pod.
- Fixed a bug where the podman container runlabel command could fail if the image name given included a tag.
- Fixed a bug where Podman could add an extra 127.0.0.1 entry to /etc/hosts under some circumstances (#11596).
- Fixed a bug where the remote Podman client's podman untag command did not properly handle tags including a digest (#11557).
- Fixed a bug where the --format option to podman ps did not properly support the table argument for tabular output.
- Fixed a bug where the --filter option to podman ps did not properly handle filtering by healthcheck status (#11687).
- Fixed a bug where the podman run and podman start --attach commands could race when retrieving the exit code of a container that had already been removed resulting in an error (e.g. by an external podman rm -f) (#11633).
- Fixed a bug where the podman generate kube command would add default environment variables to generated YAML.
- Fixed a bug where the podman generate kube command would add the default CMD from the image to generated YAML (#11672).
- Fixed a bug where the podman rm --storage command could fail to remove containers under some circumstances (#11207).
- Fixed a bug where the podman machine ssh command could fail when run on Linux (#11731).
- Fixed a bug where the podman stop command would error when used on a container that was already stopped (#11740).
- Fixed a bug where renaming a container in a pod using the podman rename command, then removing the pod using podman pod rm, could cause Podman to believe the new name of the container was permanently in use, despite the container being removed (#11750).
* API
- The Libpod Pull endpoint for Images now has a new query parameter, quiet, which (when set to true) suppresses image pull progress reports (#10612).
- The Compat Events endpoint now includes several deprecated fields from the Docker v1.21 API for improved compatibility with older clients.
- The Compat List and Inspect endpoints for Images now prefix image IDs with sha256: for improved Docker compatibility (#11623).
- The Compat Create endpoint for Containers now properly sets defaults for healthcheck-related fields (#11225).
- The Compat Create endpoint for Containers now supports volume options provided by the Mounts field (#10831).
- The Compat List endpoint for Secrets now supports a new query parameter, filter, which allows returned results to be filtered.
- The Compat Auth endpoint now returns the correct response code (500 instead of 400) when logging into a registry fails.
- The Version endpoint now includes information about the OCI runtime and Conmon in use (#11227).
- Fixed a bug where the X-Registry-Config header was not properly handled, leading to errors when pulling images (#11235).
- Fixed a bug where invalid query parameters could cause a null pointer dereference when creating error messages.
- Logging of API requests and responses at trace level has been greatly improved, including the addition of an X-Reference-Id header to correlate requests and responses (#10053).
* Misc
- Updated Buildah to v1.23.0
- Updated the containers/storage library to v1.36.0
- Updated the containers/image library to v5.16.0
- Updated the containers/common library to v0.44.0
==== polkit ====
Subpackages: typelib-1_0-Polkit-1_0
- fork libpolkit0 package into libpolkit-agent-1-0 and libpolkit-gobject-1-0
as mandated. bsc#1191781
==== python-Mako ====
Version update (1.1.4 -> 1.1.5)
- update to 1.1.5:
* Fixed some issues with running the test suite which would
be revealed by running tests in random order.
- Remove obsolete %suse_version %if
- Added BuildRequires: alts
- Use libalternatives instead of update-alternatives.
==== python-cryptography ====
Version update (3.3.2 -> 3.4.8)
- Add disable-RustExtension.patch in order to avoid a build
requirement setuptools_rust
- Next version (35.0) needs a full Rust toolchain.
- Clean runtime, build and test requirements
- Disable python2 build: Not supported anymore
- update to 3.4.8
- keep new rust support disabled for now to avoid new dependencies
==== python-jsonpatch ====
- Fix requirements
- Added BuildRequires: alts
- Use libalternatives instead of update-alternatives.
==== python-numpy ====
- The update- and libalternatives logic is required in the standard
build, not the hpc flavor
- Use libalternatives instead of update-alternatives.
==== python-pandas ====
Version update (1.3.3 -> 1.3.4)
- Update to version 1.3.4
* Fixed regression in DataFrame.convert_dtypes() incorrectly
converts byte strings to strings (GH43183)
* Fixed regression in GroupBy.agg() where it was failing
silently with mixed data types along axis=1 and MultiIndex (GH43209)
* Fixed regression in merge() with integer and NaN keys
failing with outer merge (GH43550)
* Fixed regression in DataFrame.corr() raising ValueError with
method="spearman" on 32-bit platforms (GH43588)
* Fixed performance regression in MultiIndex.equals() (GH43549)
* Fixed performance regression in GroupBy.first() and GroupBy.last()
with StringDtype (GH41596)
* Fixed regression in Series.cat.reorder_categories() failing to
update the categories on the Series (GH43232)
* Fixed regression in Series.cat.categories() setter failing to
update the categories on the Series (GH43334)
* Fixed regression in read_csv() raising UnicodeDecodeError exception
when memory_map=True (GH43540)
* Fixed regression in DataFrame.explode() raising AssertionError
when column is any scalar which is not a string (GH43314)
* Fixed regression in Series.aggregate() attempting to pass args
and kwargs multiple times to the user supplied func in certain cases (GH43357)
* Fixed regression when iterating over a DataFrame.groupby.rolling
object causing the resulting DataFrames to have an incorrect index if the input groupings were not sorted (GH43386)
* Fixed regression in DataFrame.groupby.rolling.cov() and
DataFrame.groupby.rolling.corr() computing incorrect results if the
input groupings were not sorted (GH43386)
* Fixed bug in pandas.DataFrame.groupby.rolling() and
pandas.api.indexers.FixedForwardWindowIndexer leading to
segfaults and window endpoints being mixed across groups (GH43267)
* Fixed bug in GroupBy.mean() with datetimelike values
including NaT values returning incorrect results (GH43132)
* Fixed bug in Series.aggregate() not passing the first args
to the user supplied func in certain cases (GH43357)
* Fixed memory leaks in Series.rolling.quantile() and
Series.rolling.median() (GH43339)
==== python38 ====
- BuildRequire rpm-build-python: The provider to inject python(abi)
has been moved there. rpm-build pulls rpm-build-python
automatically in when building anything against python3-base, but
this implies that the initial build of python3-base does not
trigger the automatic installation.
==== python38-core ====
Subpackages: libpython3_8-1_0 python38-base
- BuildRequire rpm-build-python: The provider to inject python(abi)
has been moved there. rpm-build pulls rpm-build-python
automatically in when building anything against python3-base, but
this implies that the initial build of python3-base does not
trigger the automatic installation.
==== qca-qt5 ====
Subpackages: libqca-qt5-2
- Set LD_LIBRARY_PATH before running tests.
==== rpm ====
Version update (4.16.1.3 -> 4.17.0)
- update to rpm-4.17.0
- dropped support for berkeley db
- archive unpacking failures no longer leave garbage
- unified built-in and user-define macro syntax and calling conventions
- python generators and debuginfo extraction has been split into a
separate upstream project
- support for ed25519 signatures
- easier rpm macro access in lua
- new patches:
* python-rpm-packaging.diff
* singlefilemode.diff
* verbosearg.diff
- modified patches:
* usr-lib-sysimage-rpm.patch
* localetag.diff
* brp.diff
* findlang.diff
* macrosin.diff
* rpmqpack.diff
* build.diff
* whatrequires-doc.diff
* remove-brp-strips.diff
* fileattrs.diff
* langnoc.diff
* find-lang-qt-qm.patch
* findsupplements.diff
* finddebuginfo.diff
* finddebuginfo-absolute-links.diff
* debugsubpkg.diff
* debuglink.diff
* debuginfo-mono.patch
- dropped patches:
* db.diff
* dbfsync.diff
* dbprivate.diff
* dwarf5.diff
* ndbglue.diff
* pythondistdeps.diff
* suspendlock.diff
* taggedfileindex.diff
* waitlock.diff
* add-dwz-single-file-mode-option.patch
==== rpm-config-SUSE ====
Version update (0.g83 -> 0.g89)
- Update to version 0.g89:
* find-provides.ksyms: Do not set IFS - it is not needed for anything.
* find-provides.ksyms: Fix compressed modules.
* Allow locale directory to be named "locales" too
==== suse-module-tools ====
Version update (16.0.11 -> 16.0.13)
- Update to version 16.0.13:
* fixup "rpm-script: fix bad exit status in OpenQA (bsc#1191922)"
- Update to version 16.0.12:
* rpm-script: fix bad exit status in OpenQA (bsc#1191922)
* cert-script: Deal with existing $cert.delete file (bsc#1191804).
* cert-script: Ignore kernel keyring for kernel certificates (bsc#1191480).
* cert-script: Only print mokutil output in verbose mode.
==== systemd-rpm-macros ====
- Use %{load:} instead of %{?load:}: fix build with RPM 4.17.
==== transactional-update ====
Version update (3.5.6 -> 3.6.0)
Subpackages: dracut-transactional-update libtukit0 transactional-update-zypp-config tukit
- Version 3.6.0
- Simplify mount hierarchy by just using a single slave bind
mount as the root of the update environment; this may avoid the
error messages of failed unmounts
May fix [boo#1191945]
- Version 3.5.7
Various fixes affecting Salt support:
- t-u: Don't squash stderr messages into stdout
- t-u: Correctly handle case when the snapshot has been deleted due to
using --drop-if-no-change: Don't show reboot messages and avoid an awk
error message [bsc#1191475]
- tukit: Make inotify handler less sensitive / ignore more directories
[bsc#1191475]
==== u-boot-rpiarm64 ====
Subpackages: u-boot-rpiarm64-doc
Patch queue updated from https://github.com/openSUSE/u-boot.git tumbleweed-2021.10
* Patches added:
0015-Enable-EFI-and-ISO-partitions-suppo.patch - boo#1191966
0016-Revert-video-backlight-fix-pwm-s-du.patch - boo#1187573
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the aarch64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=3&version=T…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
grub2
kernel-source (5.14.11 -> 5.14.14)
logrotate
ncurses (6.2.20211002 -> 6.3.20211021)
pcre2 (10.37 -> 10.38)
podman (3.3.1 -> 3.4.1)
polkit
python-Mako (1.1.4 -> 1.1.5)
python-cryptography (3.3.2 -> 3.4.8)
python-jsonpatch
python-numpy
python-pandas (1.3.3 -> 1.3.4)
python-rpm (4.16.1.3 -> 4.17.0)
python38
python38-core
rpm (4.16.1.3 -> 4.17.0)
rpm-config-SUSE (0.g83 -> 0.g89)
suse-module-tools (16.0.11 -> 16.0.13)
systemd-rpm-macros
transactional-update (3.5.6 -> 3.6.0)
u-boot-rpiarm64
=== Details ===
==== grub2 ====
Subpackages: grub2-arm64-efi grub2-snapper-plugin
- Fix installation on usrmerged s390x
==== kernel-source ====
Version update (5.14.11 -> 5.14.14)
- Update
patches.kernel.org/5.14.14-060-x86-fpu-Mask-out-the-invalid-MXCSR-bits-prop…
(bsc#1012628 bsc#1191855).
- commit 2b5383f
- Linux 5.14.14 (bsc#1012628).
- ALSA: usb-audio: Add quirk for VF0770 (bsc#1012628).
- ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat
ioctl (bsc#1012628).
- ALSA: usb-audio: Fix a missing error check in scarlett gen2
mixer (bsc#1012628).
- ALSA: seq: Fix a potential UAF by wrong private_free call order
(bsc#1012628).
- ALSA: hda/realtek: Enable 4-speaker output for Dell Precision
5560 laptop (bsc#1012628).
- ALSA: hda - Enable headphone mic on Dell Latitude laptops with
ALC3254 (bsc#1012628).
- ALSA: hda/realtek: Complete partial device name to avoid
ambiguity (bsc#1012628).
- ALSA: hda/realtek: Add quirk for Clevo X170KM-G (bsc#1012628).
- ALSA: hda/realtek - ALC236 headset MIC recording issue
(bsc#1012628).
- ALSA: hda/realtek: Add quirk for TongFang PHxTxX1 (bsc#1012628).
- ALSA: hda/realtek: Fix for quirk to enable speaker output on
the Lenovo 13s Gen2 (bsc#1012628).
- ALSA: hda/realtek: Fix the mic type detection issue for ASUS
G551JW (bsc#1012628).
- platform/x86: gigabyte-wmi: add support for B550 AORUS ELITE
AX V2 (bsc#1012628).
- platform/x86: amd-pmc: Add alternative acpi id for PMC
controller (bsc#1012628).
- spi: atmel: Fix PDC transfer setup bug (bsc#1012628).
- mtd: rawnand: qcom: Update code word value for raw read
(bsc#1012628).
- nds32/ftrace: Fix Error: invalid operands (*UND* and *UND*
sections) for `^' (bsc#1012628).
- dm: fix mempool NULL pointer race when completing IO
(bsc#1012628).
- ACPI: PM: Include alternate AMDI0005 id in special behaviour
(bsc#1012628).
- dm rq: don't queue request to blk-mq during DM suspend
(bsc#1012628).
- s390: fix strrchr() implementation (bsc#1012628).
- clk: socfpga: agilex: fix duplicate s2f_user0_clk (bsc#1012628).
- csky: don't let sigreturn play with priveleged bits of status
register (bsc#1012628).
- csky: Fixup regs.sr broken in ptrace (bsc#1012628).
- drm/fbdev: Clamp fbdev surface size if too large (bsc#1012628).
- arm64/hugetlb: fix CMA gigantic page order for non-4K PAGE_SIZE
(bsc#1012628).
- drm/nouveau/fifo: Reinstate the correct engine bit programming
(bsc#1012628).
- drm/msm: Do not run snapshot on non-DPU devices (bsc#1012628).
- drm/msm: Avoid potential overflow in timeout_to_jiffies()
(bsc#1012628).
- btrfs: unlock newly allocated extent buffer after error
(bsc#1012628).
- btrfs: deal with errors when replaying dir entry during log
replay (bsc#1012628).
- btrfs: deal with errors when adding inode reference during
log replay (bsc#1012628).
- btrfs: check for error when looking up inode during dir entry
replay (bsc#1012628).
- btrfs: update refs for any root except tree log roots
(bsc#1012628).
- btrfs: fix abort logic in btrfs_replace_file_extents
(bsc#1012628).
- module: fix clang CFI with MODULE_UNLOAD=n (bsc#1012628).
- x86/resctrl: Free the ctrlval arrays when
domain_setup_mon_state() fails (bsc#1012628).
- mei: me: add Ice Lake-N device id (bsc#1012628).
- mei: hbm: drop hbm responses on early shutdown (bsc#1012628).
- USB: xhci: dbc: fix tty registration race (bsc#1012628).
- xhci: guard accesses to ep_state in xhci_endpoint_reset()
(bsc#1012628).
- xhci: add quirk for host controllers that don't update endpoint
DCS (bsc#1012628).
- xhci: Fix command ring pointer corruption while aborting a
command (bsc#1012628).
- xhci: Enable trust tx length quirk for Fresco FL11 USB
controller (bsc#1012628).
- cb710: avoid NULL pointer subtraction (bsc#1012628).
- efi/cper: use stack buffer for error record decoding
(bsc#1012628).
- efi: Change down_interruptible() in virt_efi_reset_system()
to down_trylock() (bsc#1012628).
- usb: musb: dsps: Fix the probe error path (bsc#1012628).
- Input: xpad - add support for another USB ID of Nacon GC-100
(bsc#1012628).
- USB: serial: qcserial: add EM9191 QDL support (bsc#1012628).
- USB: serial: option: add Quectel EC200S-CN module support
(bsc#1012628).
- USB: serial: option: add Telit LE910Cx composition 0x1204
(bsc#1012628).
- USB: serial: option: add prod. id for Quectel EG91
(bsc#1012628).
- misc: fastrpc: Add missing lock before accessing find_vma()
(bsc#1012628).
- virtio: write back F_VERSION_1 before validate (bsc#1012628).
- EDAC/armada-xp: Fix output of uncorrectable error counter
(bsc#1012628).
- nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
(bsc#1012628).
- virtio-blk: remove unneeded "likely" statements (bsc#1012628).
- Revert "virtio-blk: Add validation for block size in config
space" (bsc#1012628).
- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT
automatically (bsc#1012628).
- powerpc/xive: Discard disabled interrupts in get_irqchip_state()
(bsc#1012628).
- iio: adc: aspeed: set driver data when adc probe (bsc#1012628).
- drivers: bus: simple-pm-bus: Add support for probing simple
bus only devices (bsc#1012628).
- driver core: Reject pointless SYNC_STATE_ONLY device links
(bsc#1012628).
- iio: adc: ad7192: Add IRQ flag (bsc#1012628).
- iio: adc: ad7780: Fix IRQ flag (bsc#1012628).
- iio: adc: ad7793: Fix IRQ flag (bsc#1012628).
- iio: adis16480: fix devices that do not support sleep mode
(bsc#1012628).
- iio: adc128s052: Fix the error handling path of 'adc128_probe()'
(bsc#1012628).
- iio: adc: max1027: Fix wrong shift with 12-bit devices
(bsc#1012628).
- iio: adis16475: fix deadlock on frequency set (bsc#1012628).
- iio: mtk-auxadc: fix case IIO_CHAN_INFO_PROCESSED (bsc#1012628).
- iio: light: opt3001: Fixed timeout error when 0 lux
(bsc#1012628).
- iio: accel: fxls8962af: return IRQ_HANDLED when fifo is flushed
(bsc#1012628).
- iio: adc: max1027: Fix the number of max1X31 channels
(bsc#1012628).
- iio: ssp_sensors: add more range checking in
ssp_parse_dataframe() (bsc#1012628).
- iio: ssp_sensors: fix error code in ssp_print_mcu_debug()
(bsc#1012628).
- Input: resistive-adc-touch - fix division by zero error on z1 ==
0 (bsc#1012628).
- eeprom: 93xx46: Add SPI device ID table (bsc#1012628).
- eeprom: 93xx46: fix MODULE_DEVICE_TABLE (bsc#1012628).
- eeprom: at25: Add SPI ID table (bsc#1012628).
- fpga: ice40-spi: Add SPI device ID table (bsc#1012628).
- iio: dac: ti-dac5571: fix an error code in probe()
(bsc#1012628).
- tracing: Fix missing osnoise tracer on max_latency
(bsc#1012628).
- tee: optee: Fix missing devices unregister during optee_remove
(bsc#1012628).
- ARM: dts: bcm2711-rpi-4-b: Fix usb's unit address (bsc#1012628).
- ARM: dts: bcm283x: Fix VEC address for BCM2711 (bsc#1012628).
- ARM: dts: bcm2711: fix MDIO #address- and #size-cells
(bsc#1012628).
- firmware: arm_ffa: Fix __ffa_devices_unregister (bsc#1012628).
- firmware: arm_ffa: Add missing remove callback to ffa_bus_type
(bsc#1012628).
- ARM: dts: bcm2711-rpi-4-b: fix sd_io_1v8_reg regulator states
(bsc#1012628).
- ARM: dts: bcm2711-rpi-4-b: Fix pcie0's unit address formatting
(bsc#1012628).
- clk: renesas: rzg2l: Fix clk status function (bsc#1012628).
- nvme-pci: Fix abort command id (bsc#1012628).
- sctp: account stream padding length for reconf chunk
(bsc#1012628).
- gpio: 74x164: Add SPI device ID table (bsc#1012628).
- gpio: pca953x: Improve bias setting (bsc#1012628).
- net: arc: select CRC32 (bsc#1012628).
- net: korina: select CRC32 (bsc#1012628).
- net/smc: improved fix wait on already cleared link
(bsc#1012628).
- net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
(bsc#1012628).
- net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp
(bsc#1012628).
- net/mlx5e: Switchdev representors are not vlan challenged
(bsc#1012628).
- net: stmmac: fix get_hw_feature() on old hardware (bsc#1012628).
- net: phy: Do not shutdown PHYs in READY state (bsc#1012628).
- net: dsa: mv88e6xxx: don't use PHY_DETECT on internal PHY's
(bsc#1012628).
- net: dsa: microchip: Added the condition for scheduling
ksz_mib_read_work (bsc#1012628).
- net: dsa: fix spurious error message when unoffloaded port
leaves bridge (bsc#1012628).
- net: encx24j600: check error in devm_regmap_init_encx24j600
(bsc#1012628).
- ethernet: s2io: fix setting mac address during resume
(bsc#1012628).
- vhost-vdpa: Fix the wrong input in config_cb (bsc#1012628).
- nfc: fix error handling of nfc_proto_register() (bsc#1012628).
- NFC: digital: fix possible memory leak in
digital_tg_listen_mdaa() (bsc#1012628).
- NFC: digital: fix possible memory leak in
digital_in_send_sdd_req() (bsc#1012628).
- pata_legacy: fix a couple uninitialized variable bugs
(bsc#1012628).
- ata: ahci_platform: fix null-ptr-deref in
ahci_platform_enable_regulators() (bsc#1012628).
- mlxsw: thermal: Fix out-of-bounds memory accesses (bsc#1012628).
- platform/mellanox: mlxreg-io: Fix argument base in kstrtou32()
call (bsc#1012628).
- platform/mellanox: mlxreg-io: Fix read access of n-bytes size
attributes (bsc#1012628).
- spi: spidev: Add SPI ID table (bsc#1012628).
- spi: bcm-qspi: clear MSPI spifie interrupt during probe
(bsc#1012628).
- drm/panel: olimex-lcd-olinuxino: select CRC32 (bsc#1012628).
- drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks
read (bsc#1012628).
- drm/msm: Fix null pointer dereference on pointer edp
(bsc#1012628).
- drm/msm/mdp5: fix cursor-related warnings (bsc#1012628).
- drm/msm/submit: fix overflow check on 64-bit architectures
(bsc#1012628).
- drm/msm/a6xx: Track current ctx by seqno (bsc#1012628).
- drm/msm/a4xx: fix error handling in a4xx_gpu_init()
(bsc#1012628).
- drm/msm/a3xx: fix error handling in a3xx_gpu_init()
(bsc#1012628).
- drm/msm/dsi: dsi_phy_14nm: Take ready-bit into account in
poll_for_ready (bsc#1012628).
- drm/msm/dsi: Fix an error code in msm_dsi_modeset_init()
(bsc#1012628).
- drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling
(bsc#1012628).
- acpi/arm64: fix next_platform_timer() section mismatch error
(bsc#1012628).
- platform/x86: intel_scu_ipc: Fix busy loop expiry time
(bsc#1012628).
- mqprio: Correct stats in mqprio_dump_class_stats()
(bsc#1012628).
- mptcp: fix possible stall on recvmsg() (bsc#1012628).
- qed: Fix missing error code in qed_slowpath_start()
(bsc#1012628).
- r8152: select CRC32 and CRYPTO/CRYPTO_HASH/CRYPTO_SHA256
(bsc#1012628).
- ice: fix locking for Tx timestamp tracking flush (bsc#1012628).
- block/rnbd-clt-sysfs: fix a couple uninitialized variable bugs
(bsc#1012628).
- nfp: flow_offload: move flow_indr_dev_register from app init
to app start (bsc#1012628).
- net: mscc: ocelot: make use of all 63 PTP timestamp identifiers
(bsc#1012628).
- net: mscc: ocelot: avoid overflowing the PTP timestamp FIFO
(bsc#1012628).
- net: mscc: ocelot: warn when a PTP IRQ is raised for an unknown
skb (bsc#1012628).
- net: mscc: ocelot: deny TX timestamping of non-PTP packets
(bsc#1012628).
- net: mscc: ocelot: cross-check the sequence id from the
timestamp FIFO with the skb PTP header (bsc#1012628).
- net: dsa: felix: break at first CPU port during init and
teardown (bsc#1012628).
- ionic: don't remove netdev->dev_addr when syncing uc list
(bsc#1012628).
- commit 6859230
- media: firewire: firedtv-avc: fix a buffer overflow in
avc_ca_pmt() (CVE-2021-3542 bsc#1184673).
- commit 08ab8da
- x86/fpu: Mask out the invalid MXCSR bits properly (x86_32
breakage).
- commit 565cd48
- rpm/kernel-obs-build.spec.in: reduce initrd functionality
For building in OBS, we always build inside a virtual machine
that gets a new, freshly created scratch filesystem image. So
we do not need to handle fscks because that ain't gonna happen,
as well as not we do not need to handle microcode update in the
initrd as these only can be run on the host system anyway. We
can also strip and hardlink as an additional optimisation that
should not significantly hurt.
- commit c72c6fc
- Update upstream commit id for rtw89 patch (bsc#1191321)
- commit 8dccb66
- Linux 5.14.13 (bsc#1012628).
- hwmon: (pmbus/ibm-cffps) max_power_out swap changes
(bsc#1012628).
- io_uring: kill fasync (bsc#1012628).
- sched: Always inline is_percpu_thread() (bsc#1012628).
- perf/core: fix userpage->time_enabled of inactive events
(bsc#1012628).
- scsi: qla2xxx: Fix excessive messages during device logout
(bsc#1012628).
- scsi: virtio_scsi: Fix spelling mistake "Unsupport" ->
"Unsupported" (bsc#1012628).
- scsi: ses: Fix unsigned comparison with less than zero
(bsc#1012628).
- drm/amdgpu: fix gart.bo pin_count leak (bsc#1012628).
- net: sun: SUNVNET_COMMON should depend on INET (bsc#1012628).
- vboxfs: fix broken legacy mount signature checking
(bsc#1012628).
- net: bgmac-platform: handle mac-address deferral (bsc#1012628).
- mac80211: check return value of rhashtable_init (bsc#1012628).
- net: prevent user from passing illegal stab size (bsc#1012628).
- hwmon: (ltc2947) Properly handle errors when looking for the
external clock (bsc#1012628).
- m68k: Handle arrivals of multiple signals correctly
(bsc#1012628).
- pinctrl: qcom: sc7280: Add PM suspend callbacks (bsc#1012628).
- mac80211: Drop frames from invalid MAC address in ad-hoc mode
(bsc#1012628).
- netfilter: nf_nat_masquerade: defer conntrack walk to work queue
(bsc#1012628).
- netfilter: nf_nat_masquerade: make async masq_inet6_event
handling generic (bsc#1012628).
- KVM: arm64: nvhe: Fix missing FORCE for hyp-reloc.S build rule
(bsc#1012628).
- ASoC: SOF: loader: release_firmware() on load failure to avoid
batching (bsc#1012628).
- HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device
IDs (bsc#1012628).
- netfilter: ip6_tables: zero-initialize fragment offset
(bsc#1012628).
- HID: apple: Fix logical maximum and usage maximum of Magic
Keyboard JIS (bsc#1012628).
- ALSA: usb-audio: Unify mixer resume and reset_resume procedure
(bsc#1012628).
- ALSA: oxfw: fix transmission method for Loud models based on
OXFW971 (bsc#1012628).
- ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic
(bsc#1012628).
- ext4: correct the error path of ext4_write_inline_data_end()
(bsc#1012628).
- ext4: check and update i_disksize properly (bsc#1012628).
- commit ab3ca44
- kernel-spec-macros: Since rpm 4.17 %verbose is unusable (bsc#1191229).
The semantic changed in an incompatible way so invoking the macro now
causes a build failure.
- commit 3e55f55
- Linux 5.14.12 (bsc#1012628).
- dsa: tag_dsa: Fix mask for trunked packets (bsc#1012628).
- x86/hpet: Use another crystalball to evaluate HPET usability
(bsc#1012628).
- x86/entry: Clear X86_FEATURE_SMAP when CONFIG_X86_SMAP=n
(bsc#1012628).
- x86/entry: Correct reference to intended CONFIG_64_BIT
(bsc#1012628).
- x86/fpu: Restore the masking out of reserved MXCSR bits
(bsc#1012628).
- x86/sev: Return an error on a returned non-zero
SW_EXITINFO1[31:0] (bsc#1012628).
- x86/Kconfig: Correct reference to MWINCHIP3D (bsc#1012628).
- x86/platform/olpc: Correct ifdef symbol to intended
CONFIG_OLPC_XO15_SCI (bsc#1012628).
- pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init
(bsc#1012628).
- powerpc/32s: Fix kuap_kernel_restore() (bsc#1012628).
- powerpc/64s: Fix unrecoverable MCE calling async handler from
NMI (bsc#1012628).
- powerpc/traps: do not enable irqs in _exception (bsc#1012628).
- powerpc/64s: fix program check interrupt emergency stack path
(bsc#1012628).
- powerpc/bpf ppc32: Fix BPF_SUB when imm == 0x80000000
(bsc#1012628).
- powerpc/bpf ppc32: Do not emit zero extend instruction for
64-bit BPF_END (bsc#1012628).
- powerpc/bpf ppc32: Fix JMP32_JSET_K (bsc#1012628).
- powerpc/bpf ppc32: Fix ALU32 BPF_ARSH operation (bsc#1012628).
- powerpc/bpf: Fix BPF_SUB when imm == 0x80000000 (bsc#1012628).
- powerpc/bpf: Fix BPF_MOD when imm == 1 (bsc#1012628).
- objtool: Make .altinstructions section entry size consistent
(bsc#1012628).
- objtool: Remove reloc symbol type checks in get_alt_entry()
(bsc#1012628).
- scsi: iscsi: Fix iscsi_task use after free (bsc#1012628).
- RISC-V: Include clone3() on rv32 (bsc#1012628).
- i2c: mlxcpld: Modify register setting for 400KHz frequency
(bsc#1012628).
- i2c: mlxcpld: Fix criteria for frequency setting (bsc#1012628).
- bpf, s390: Fix potential memory leak about jit_data
(bsc#1012628).
- riscv/vdso: make arch_setup_additional_pages wait for mmap_sem
for write killable (bsc#1012628).
- riscv/vdso: Move vdso data page up front (bsc#1012628).
- riscv/vdso: Refactor asm/vdso.h (bsc#1012628).
- RISC-V: Fix VDSO build for !MMU (bsc#1012628).
- riscv: explicitly use symbol offsets for VDSO (bsc#1012628).
- i2c: mediatek: Add OFFSET_EXT_CONF setting back (bsc#1012628).
- i2c: acpi: fix resource leak in reconfiguration device addition
(bsc#1012628).
- powerpc/iommu: Report the correct most efficient DMA mask for
PCI devices (bsc#1012628).
- net: prefer socket bound to interface when not in VRF
(bsc#1012628).
- iavf: fix double unlock of crit_lock (bsc#1012628).
- i40e: Fix freeing of uninitialized misc IRQ vector
(bsc#1012628).
- i40e: fix endless loop under rtnl (bsc#1012628).
- gve: report 64bit tx_bytes counter from
gve_handle_report_stats() (bsc#1012628).
- gve: fix gve_get_stats() (bsc#1012628).
- rtnetlink: fix if_nlmsg_stats_size() under estimation
(bsc#1012628).
- gve: Properly handle errors in gve_assign_qpl (bsc#1012628).
- gve: Avoid freeing NULL pointer (bsc#1012628).
- gve: Correct available tx qpl check (bsc#1012628).
- net: stmmac: trigger PCS EEE to turn off on link down
(bsc#1012628).
- net: pcs: xpcs: fix incorrect steps on disable EEE
(bsc#1012628).
- drm/nouveau/debugfs: fix file release memory leak (bsc#1012628).
- drm/nouveau/kms/nv50-: fix file release memory leak
(bsc#1012628).
- drm/nouveau: avoid a use-after-free when BO init fails
(bsc#1012628).
- video: fbdev: gbefb: Only instantiate device when built for IP32
(bsc#1012628).
- drm/panel: abt-y030xx067a: yellow tint fix (bsc#1012628).
- drm/nouveau/fifo/ga102: initialise chid on return from channel
creation (bsc#1012628).
- drm/sun4i: dw-hdmi: Fix HDMI PHY clock setup (bsc#1012628).
- bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893
(bsc#1012628).
- perf jevents: Free the sys_event_tables list after processing
entries (bsc#1012628).
- drm/amdgpu: handle the case of pci_channel_io_frozen only in
amdgpu_pci_resume (bsc#1012628).
- drm/amdkfd: fix a potential ttm->sg memory leak (bsc#1012628).
- ARM: defconfig: gemini: Restore framebuffer (bsc#1012628).
- netlink: annotate data races around nlk->bound (bsc#1012628).
- net: pcs: xpcs: fix incorrect CL37 AN sequence (bsc#1012628).
- net: sfp: Fix typo in state machine debug string (bsc#1012628).
- net/sched: sch_taprio: properly cancel timer from
taprio_destroy() (bsc#1012628).
- net: bridge: fix under estimation in br_get_linkxstats_size()
(bsc#1012628).
- net: bridge: use nla_total_size_64bit() in
br_get_linkxstats_size() (bsc#1012628).
- afs: Fix afs_launder_page() to set correct start file position
(bsc#1012628).
- netfs: Fix READ/WRITE confusion when calling iov_iter_xarray()
(bsc#1012628).
- drm/i915/bdb: Fix version check (bsc#1012628).
- drm/i915/tc: Fix TypeC port init/resume time sanitization
(bsc#1012628).
- drm/i915/jsl: Add W/A 1409054076 for JSL (bsc#1012628).
- drm/i915/audio: Use BIOS provided value for RKL HDA link
(bsc#1012628).
- ARM: imx6: disable the GIC CPU interface before calling
stby-poweroff sequence (bsc#1012628).
- dt-bindings: drm/bridge: ti-sn65dsi86: Fix reg value
(bsc#1012628).
- arm64: dts: ls1028a: fix eSDHC2 node (bsc#1012628).
- arm64: dts: imx8mm-kontron-n801x-som: do not allow to switch
off buck2 (bsc#1012628).
- arm64: dts: imx8: change the spi-nor tx (bsc#1012628).
- ARM: dts: imx: change the spi-nor tx (bsc#1012628).
- ptp_pch: Load module automatically if ID matches (bsc#1012628).
- powerpc/fsl/dts: Fix phy-connection-type for fm1mac3
(bsc#1012628).
- netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in
event notification (bsc#1012628).
- MIPS: Revert "add support for buggy MT7621S core detection"
(bsc#1012628).
- net: stmmac: dwmac-rk: Fix ethernet on rk3399 based devices
(bsc#1012628).
- net: mscc: ocelot: fix VCAP filters remaining active after
being deleted (bsc#1012628).
- net_sched: fix NULL deref in fifo_set_limit() (bsc#1012628).
- libbpf: Fix memory leak in strset (bsc#1012628).
- phy: mdio: fix memory leak (bsc#1012628).
- libbpf: Fix segfault in light skeleton for objects without BTF
(bsc#1012628).
- net/mlx5e: Fix the presented RQ index in PTP stats
(bsc#1012628).
- net/mlx5: Fix setting number of EQs of SFs (bsc#1012628).
- net/mlx5: Fix length of irq_index in chars (bsc#1012628).
- net/mlx5: Avoid generating event after PPS out in Real time mode
(bsc#1012628).
- net/mlx5: Force round second at 1PPS out start time
(bsc#1012628).
- net/mlx5: E-Switch, Fix double allocation of acl flow counter
(bsc#1012628).
- net/mlx5e: Keep the value for maximum number of channels in-sync
(bsc#1012628).
- net/mlx5e: IPSEC RX, enable checksum complete (bsc#1012628).
- bpf: Fix integer overflow in prealloc_elems_and_freelist()
(bsc#1012628).
- soc: ti: omap-prm: Fix external abort for am335x pruss
(bsc#1012628).
- bpf, arm: Fix register clobbering in div/mod implementation
(bsc#1012628).
- netfilter: nf_tables: reverse order in rule replacement
expansion (bsc#1012628).
- netfilter: nf_tables: add position handle in event notification
(bsc#1012628).
- netfilter: conntrack: fix boot failure with
nf_conntrack.enable_hooks=1 (bsc#1012628).
- iwlwifi: pcie: add configuration of a Wi-Fi adapter on Dell
XPS 15 (bsc#1012628).
- xtensa: call irqchip_init only when CONFIG_USE_OF is selected
(bsc#1012628).
- xtensa: use CONFIG_USE_OF instead of CONFIG_OF (bsc#1012628).
- arm64: dts: qcom: pm8150: use qcom,pm8998-pon binding
(bsc#1012628).
- ath5k: fix building with LEDS=m (bsc#1012628).
- PCI: hv: Fix sleep while in non-sleep context when removing
child devices from the bus (bsc#1012628).
- ARM: dts: imx6qdl-pico: Fix Ethernet support (bsc#1012628).
- ARM: dts: imx: Fix USB host power regulator polarity on M53Menlo
(bsc#1012628).
- ARM: dts: imx: Add missing pinctrl-names for panel on M53Menlo
(bsc#1012628).
- soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment
(bsc#1012628).
- iwlwifi: mvm: Fix possible NULL dereference (bsc#1012628).
- ARM: at91: pm: do not panic if ram controllers are not enabled
(bsc#1012628).
- Revert "arm64: dts: qcom: sc7280: Fixup the cpufreq node"
(bsc#1012628).
- ARM: dts: qcom: apq8064: Use 27MHz PXO clock as DSI PLL
reference (bsc#1012628).
- soc: qcom: socinfo: Fixed argument passed to platform_set_data()
(bsc#1012628).
- bus: ti-sysc: Add break in switch statement in sysc_init_soc()
(bsc#1012628).
- riscv: Flush current cpu icache before other cpus (bsc#1012628).
- scsi: ufs: core: Fix task management completion (bsc#1012628).
- ARM: dts: qcom: apq8064: use compatible which contains chipid
(bsc#1012628).
- ARM: dts: imx6dl-yapp4: Fix lp5562 LED driver probe
(bsc#1012628).
- ARM: dts: omap3430-sdp: Fix NAND device node (bsc#1012628).
- xen/balloon: fix cancelled balloon action (bsc#1012628).
- SUNRPC: fix sign error causing rpcsec_gss drops (bsc#1012628).
- nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero
(bsc#1012628).
- nfsd: fix error handling of register_pernet_subsys() in
init_nfsd() (bsc#1012628).
- ovl: fix IOCB_DIRECT if underlying fs doesn't support direct IO
(bsc#1012628).
- ovl: fix missing negative dentry check in ovl_rename()
(bsc#1012628).
- fbdev: simplefb: fix Kconfig dependencies (bsc#1012628).
- Update config files.
- mmc: sdhci-of-at91: replace while loop with read_poll_timeout
(bsc#1012628).
- mmc: sdhci-of-at91: wait for calibration done before proceed
(bsc#1012628).
- mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk
(bsc#1012628).
- xen/privcmd: fix error handling in mmap-resource processing
(bsc#1012628).
- drm/i915: Extend the async flip VT-d w/a to skl/bxt
(bsc#1012628).
- drm/i915: Fix runtime pm handling in i915_gem_shrink
(bsc#1012628).
- drm/amd/display: Fix DCN3 B0 DP Alt Mapping (bsc#1012628).
- drm/amd/display: Fix detection of 4 lane for DPALT
(bsc#1012628).
- drm/amd/display: Limit display scaling to up to 4k for DCN 3.1
(bsc#1012628).
- drm/nouveau/ga102-: support ttm buffer moves via copy engine
(bsc#1012628).
- drm/nouveau/kms/tu102-: delay enabling cursor until after
assign_windows (bsc#1012628).
- drm/amdgpu: During s0ix don't wait to signal GFXOFF
(bsc#1012628).
- drm/amd/display: USB4 bring up set correct address
(bsc#1012628).
- drm/amd/display: Fix B0 USB-C DP Alt mode (bsc#1012628).
- usb: typec: tipd: Remove dependency on "connector" child fwnode
(bsc#1012628).
- usb: typec: tcpm: handle SRC_STARTUP state if cc changes
(bsc#1012628).
- usb: typec: tcpci: don't handle vSafe0V event if it's not
enabled (bsc#1012628).
- USB: cdc-acm: fix break reporting (bsc#1012628).
- USB: cdc-acm: fix racy tty buffer accesses (bsc#1012628).
- usb: gadget: f_uac2: fixed EP-IN wMaxPacketSize (bsc#1012628).
- usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle
(bsc#1012628).
- usb: cdc-wdm: Fix check for WWAN (bsc#1012628).
- Partially revert "usb: Kconfig: using select for USB_COMMON
dependency" (bsc#1012628).
- Update config files.
- commit 7246625
- rtw89: add Realtek 802.11ax driver (bsc#1191321).
- commit 4c399ab
- Enable CONFIG_RTW88_DEBUG and CONFIG_RTW89_DEBUG on debug flavors (bsc#1191321)
- commit a76143b
==== logrotate ====
- Add patch:
* logrotate-dont_warn_on_size=_syntax.patch (boo#1191816)
==== ncurses ====
Version update (6.2.20211002 -> 6.3.20211021)
Subpackages: libncurses6 ncurses-utils terminfo-base
- Update to ncurses 6.3 (patch 20211021)
+ update release notes
+ add "ncu2openbsd" script, to illustrate how to update an OpenBSD
system to use a current ncurses release.
- Add upstream keyring to verify source signatures of both ncurses
and tack tar ball with their ASC (armored ASCii signature) counterpart
- Add ncurses patch 20211018
+ check for screen size-change in scr_init() and scr_restore(), in case
a screen dump does not match the current screen dimensions (report by
Frank Tkalcevic).
- Add ncurses patch 20211017
+ amend change for pkg-config to account for "none" being returned in
the libdir-path result rather than "no" (report by Gabriele Balducci).
- Add ncurses patch 20211016
+ build-fix for pmake with libtool.
+ improve make-tar.sh scripts, adding COPYING to tar file, and clean up
shellcheck warnings.
+ add link for "reset6" manpage in test-package ncurses6-doc
+ revise configure option --with-pkg-config-libdir, using the actual
search path from pkg-config or pkgconf using the output from --debug
(report by Pascal Pignard).
+ freeze ABI in ".map" files.
- Correct offsets of patch ncurses-6.2.dif
- Add ncurses patch 20211009
+ implement "+m" option in tabs program.
+ fill in some details for infoton -TD
+ fix spelling/consistency in several descriptions -TD
+ use vt420+lrmm in vt420 -TD
+ modify save_tty_settings() to avoid opening /dev/tty for cases other
than reset/init, e.g., for clear.
+ modify output of "toe -as" to show first description found rather
than the last.
+ improve tic checks for number of parameters of smglp, smgrp, smgtp,
and smgbp (cf: 20020525).
+ correct off-by-one comparison in last_char(), which did not allow
special case of ":" in a terminfo description field (cf: 20120407).
+ remove check in tic that assumes that none or both parameterized and
non-parameterized margin-setting capabilities are present
(cf: 20101002).
==== pcre2 ====
Version update (10.37 -> 10.38)
- pcre2 10.38:
* Following Perl's lead, \K is now locked out in lookaround
assertions by default, but an option is provided to re-enable
the previous behaviour
==== podman ====
Version update (3.3.1 -> 3.4.1)
Subpackages: podman-cni-config
- Update to version 3.4.1:
* Bugfixes
- Fixed a bug where podman machine init could, under some circumstances,
create invalid machine configurations which could not be started (#11824).
- Fixed a bug where the podman machine list command would not properly
populate some output fields.
- Fixed a bug where podman machine rm could leave dangling sockets from
the removed machine (#11393).
- Fixed a bug where podman run --pids-limit=-1 was not supported (it now
sets the PID limit in the container to unlimited) (#11782).
- Fixed a bug where podman run and podman attach could throw errors about
a closed network connection when STDIN was closed by the client (#11856).
- Fixed a bug where the podman stop command could fail when run on a
container that had another podman stop command run on it previously.
- Fixed a bug where the --sync flag to podman ps was nonfunctional.
- Fixed a bug where the Windows and OS X remote clients' podman stats
command would fail (#11909).
- Fixed a bug where the podman play kube command did not properly handle
environment variables whose values contained an = (#11891).
- Fixed a bug where the podman generate kube command could generate
invalid annotations when run on containers with volumes that use SELinux
relabelling (:z or :Z) (#11929).
- Fixed a bug where the podman generate kube command would generate YAML
including some unnecessary (set to default) fields (e.g. user and group,
entrypoint, default protocol for forwarded ports) (#11914, #11915, and #11965).
- Fixed a bug where the podman generate kube command could, under some
circumstances, generate YAML including an invalid targetPort field for
forwarded ports (#11930).
- Fixed a bug where rootless Podman's podman info command could, under
some circumstances, not read available CGroup controllers (#11931).
- Fixed a bug where podman container checkpoint --export would fail to
checkpoint any container created with --log-driver=none (#11974).
* API
- Fixed a bug where the Compat Create endpoint for Containers could panic
when no options were passed to a bind mount of tmpfs (#11961).
- Update to version 3.4.0:
* Features
- Pods now support init containers! Init containers are containers which run before the rest of the pod starts. There are two types of init containers: "always", which always run before the pod is started, and "once", which only run the first time the pod starts and are subsequently removed. They can be added using the podman create command's --init-ctr option.
- Support for init containers has also been added to podman play kube and podman generate kube - init containers contained in Kubernetes YAML will be created as Podman init containers, and YAML generated by Podman will include any init containers created.
- The podman play kube command now supports building images. If the --build option is given and a directory with the name of the specified image exists in the current working directory and contains a valid Containerfile or Dockerfile, the image will be built and used for the container.
- The podman play kube command now supports a new option, --teardown, which removes any pods and containers created by the given Kubernetes YAML.
- The podman generate kube command now generates annotations for SELinux mount options on volume (:z and :Z) that are respected by the podman play kube command.
- A new command has been added, podman pod logs, to return logs for all containers in a pod at the same time.
- Two new commands have been added, podman volume export (to export a volume to a tar file) and podman volume import) (to populate a volume from a given tar file).
- The podman auto-update command now supports simple rollbacks. If a container fails to start after an automatic update, it will be rolled back to the previous image and restarted again.
- Pods now share their user namespace by default, and the podman pod create command now supports the --userns option. This allows rootless pods to be created with the --userns=keep-id option.
- The podman pod ps command now supports a new filter with its --filter option, until, which returns pods created before a given timestamp.
- The podman image scp command has been added. This command allows images to be transferred between different hosts.
- The podman stats command supports a new option, --interval, to specify the amount of time before the information is refreshed.
- The podman inspect command now includes ports exposed (but not published) by containers (e.g. ports from --expose when --publish-all is not specified).
- The podman inspect command now has a new boolean value, Checkpointed, which indicates that a container was stopped as a result of a podman container checkpoint operation.
- Volumes created by podman volume create now support setting quotas when run atop XFS. The size and inode options allow the maximum size and maximum number of inodes consumed by a volume to be limited.
- The podman info command now outputs information on what log drivers, network drivers, and volume plugins are available for use (#11265).
- The podman info command now outputs the current log driver in use, and the variant and codename of the distribution in use.
- The parameters of the VM created by podman machine init (amount of disk space, memory, CPUs) can now be set in containers.conf.
- The podman machine ls command now shows additional information (CPUs, memory, disk size) about VMs managed by podman machine.
- The podman ps command now includes healthcheck status in container state for containers that have healthchecks (#11527).
* Changes
- The podman build command has a new alias, podman buildx, to improve compatibility with Docker. We have already added support for many docker buildx flags to podman build and aim to continue to do so.
- Cases where Podman is run without a user session or a writable temporary files directory will now produce better error messages.
- The default log driver has been changed from file to journald. The file driver did not properly support log rotation, so this should lead to a better experience. If journald is not available on the system, Podman will automatically revert to the file.
- Podman no longer depends on ip for removing networks (#11403).
- The deprecated --macvlan flag to podman network create now warns when it is used. It will be removed entirely in the Podman 4.0 release.
- The podman machine start command now prints a message when the VM is successfully started.
- The podman stats command can now be used on containers that are paused.
- The podman unshare command will now return the exit code of the command that was run in the user namespace (assuming the command was successfully run).
- Successful healthchecks will no longer add a healthy line to the system log to reduce log spam.
- As a temporary workaround for a lack of shortname prompts in the Podman remote client, VMs created by podman machine now default to only using the docker.io registry.
* Bugfixes
- Fixed a bug where whitespace in the definition of sysctls (particularly default sysctls specified in containers.conf) would cause them to be parsed incorrectly.
- Fixed a bug where the Windows remote client improperly validated volume paths (#10900).
- Fixed a bug where the first line of logs from a container run with the journald log driver could be skipped.
- Fixed a bug where images created by podman commit did not include ports exposed by the container.
- Fixed a bug where the podman auto-update command would ignore the io.containers.autoupdate.authfile label when pulling images (#11171).
- Fixed a bug where the --workdir option to podman create and podman run could not be set to a directory where a volume was mounted (#11352).
- Fixed a bug where systemd socket-activation did not properly work with systemd-managed Podman containers (#10443).
- Fixed a bug where environment variable secrets added to a container were not available to exec sessions launched in the container.
- Fixed a bug where rootless containers could fail to start the rootlessport port-forwarding service when XDG_RUNTIME_DIR was set to a long path.
- Fixed a bug where arguments to the --systemd option to podman create and podman run were case-sensitive (#11387).
- Fixed a bug where the podman manifest rm command would also remove images referenced by the manifest, not just the manifest itself (#11344).
- Fixed a bug where the Podman remote client on OS X would not function properly if the TMPDIR environment variable was not set (#11418).
- Fixed a bug where the /etc/hosts file was not guaranteed to contain an entry for localhost (this is still not guaranteed if --net=host is used; such containers will exactly match the host's /etc/hosts) (#11411).
- Fixed a bug where the podman machine start command could print warnings about unsupported CPU features (#11421).
- Fixed a bug where the podman info command could segfault when accessing cgroup information.
- Fixed a bug where the podman logs -f command could hang when a container exited (#11461).
- Fixed a bug where the podman generate systemd command could not be used on containers that specified a restart policy (#11438).
- Fixed a bug where the remote Podman client's podman build command would fail to build containers if the UID and GID on the client were higher than 65536 (#11474).
- Fixed a bug where the remote Podman client's podman build command would fail to build containers if the context directory was a symlink (#11732).
- Fixed a bug where the --network flag to podman play kube was not properly parsed when a non-bridge network configuration was specified.
- Fixed a bug where the podman inspect command could error when the container being inspected was removed as it was being inspected (#11392).
- Fixed a bug where the podman play kube command ignored the default pod infra image specified in containers.conf.
- Fixed a bug where the --format option to podman inspect was nonfunctional under some circumstances (#8785).
- Fixed a bug where the remote Podman client's podman run and podman exec commands could skip a byte of output every 8192 bytes (#11496).
- Fixed a bug where the podman stats command would print nonsensical results if the container restarted while it was running (#11469).
- Fixed a bug where the remote Podman client would error when STDOUT was redirected on a Windows client (#11444).
- Fixed a bug where the podman run command could return 0 when the application in the container exited with 125 (#11540).
- Fixed a bug where containers with --restart=always set using the rootlessport port-forwarding service could not be restarted automatically.
- Fixed a bug where the --cgroups=split option to podman create and podman run was silently discarded if the container was part of a pod.
- Fixed a bug where the podman container runlabel command could fail if the image name given included a tag.
- Fixed a bug where Podman could add an extra 127.0.0.1 entry to /etc/hosts under some circumstances (#11596).
- Fixed a bug where the remote Podman client's podman untag command did not properly handle tags including a digest (#11557).
- Fixed a bug where the --format option to podman ps did not properly support the table argument for tabular output.
- Fixed a bug where the --filter option to podman ps did not properly handle filtering by healthcheck status (#11687).
- Fixed a bug where the podman run and podman start --attach commands could race when retrieving the exit code of a container that had already been removed resulting in an error (e.g. by an external podman rm -f) (#11633).
- Fixed a bug where the podman generate kube command would add default environment variables to generated YAML.
- Fixed a bug where the podman generate kube command would add the default CMD from the image to generated YAML (#11672).
- Fixed a bug where the podman rm --storage command could fail to remove containers under some circumstances (#11207).
- Fixed a bug where the podman machine ssh command could fail when run on Linux (#11731).
- Fixed a bug where the podman stop command would error when used on a container that was already stopped (#11740).
- Fixed a bug where renaming a container in a pod using the podman rename command, then removing the pod using podman pod rm, could cause Podman to believe the new name of the container was permanently in use, despite the container being removed (#11750).
* API
- The Libpod Pull endpoint for Images now has a new query parameter, quiet, which (when set to true) suppresses image pull progress reports (#10612).
- The Compat Events endpoint now includes several deprecated fields from the Docker v1.21 API for improved compatibility with older clients.
- The Compat List and Inspect endpoints for Images now prefix image IDs with sha256: for improved Docker compatibility (#11623).
- The Compat Create endpoint for Containers now properly sets defaults for healthcheck-related fields (#11225).
- The Compat Create endpoint for Containers now supports volume options provided by the Mounts field (#10831).
- The Compat List endpoint for Secrets now supports a new query parameter, filter, which allows returned results to be filtered.
- The Compat Auth endpoint now returns the correct response code (500 instead of 400) when logging into a registry fails.
- The Version endpoint now includes information about the OCI runtime and Conmon in use (#11227).
- Fixed a bug where the X-Registry-Config header was not properly handled, leading to errors when pulling images (#11235).
- Fixed a bug where invalid query parameters could cause a null pointer dereference when creating error messages.
- Logging of API requests and responses at trace level has been greatly improved, including the addition of an X-Reference-Id header to correlate requests and responses (#10053).
* Misc
- Updated Buildah to v1.23.0
- Updated the containers/storage library to v1.36.0
- Updated the containers/image library to v5.16.0
- Updated the containers/common library to v0.44.0
==== polkit ====
- fork libpolkit0 package into libpolkit-agent-1-0 and libpolkit-gobject-1-0
as mandated. bsc#1191781
==== python-Mako ====
Version update (1.1.4 -> 1.1.5)
- update to 1.1.5:
* Fixed some issues with running the test suite which would
be revealed by running tests in random order.
- Remove obsolete %suse_version %if
- Added BuildRequires: alts
- Use libalternatives instead of update-alternatives.
==== python-cryptography ====
Version update (3.3.2 -> 3.4.8)
- Add disable-RustExtension.patch in order to avoid a build
requirement setuptools_rust
- Next version (35.0) needs a full Rust toolchain.
- Clean runtime, build and test requirements
- Disable python2 build: Not supported anymore
- update to 3.4.8
- keep new rust support disabled for now to avoid new dependencies
==== python-jsonpatch ====
- Fix requirements
- Added BuildRequires: alts
- Use libalternatives instead of update-alternatives.
==== python-numpy ====
- The update- and libalternatives logic is required in the standard
build, not the hpc flavor
- Use libalternatives instead of update-alternatives.
==== python-pandas ====
Version update (1.3.3 -> 1.3.4)
- Update to version 1.3.4
* Fixed regression in DataFrame.convert_dtypes() incorrectly
converts byte strings to strings (GH43183)
* Fixed regression in GroupBy.agg() where it was failing
silently with mixed data types along axis=1 and MultiIndex (GH43209)
* Fixed regression in merge() with integer and NaN keys
failing with outer merge (GH43550)
* Fixed regression in DataFrame.corr() raising ValueError with
method="spearman" on 32-bit platforms (GH43588)
* Fixed performance regression in MultiIndex.equals() (GH43549)
* Fixed performance regression in GroupBy.first() and GroupBy.last()
with StringDtype (GH41596)
* Fixed regression in Series.cat.reorder_categories() failing to
update the categories on the Series (GH43232)
* Fixed regression in Series.cat.categories() setter failing to
update the categories on the Series (GH43334)
* Fixed regression in read_csv() raising UnicodeDecodeError exception
when memory_map=True (GH43540)
* Fixed regression in DataFrame.explode() raising AssertionError
when column is any scalar which is not a string (GH43314)
* Fixed regression in Series.aggregate() attempting to pass args
and kwargs multiple times to the user supplied func in certain cases (GH43357)
* Fixed regression when iterating over a DataFrame.groupby.rolling
object causing the resulting DataFrames to have an incorrect index if the input groupings were not sorted (GH43386)
* Fixed regression in DataFrame.groupby.rolling.cov() and
DataFrame.groupby.rolling.corr() computing incorrect results if the
input groupings were not sorted (GH43386)
* Fixed bug in pandas.DataFrame.groupby.rolling() and
pandas.api.indexers.FixedForwardWindowIndexer leading to
segfaults and window endpoints being mixed across groups (GH43267)
* Fixed bug in GroupBy.mean() with datetimelike values
including NaT values returning incorrect results (GH43132)
* Fixed bug in Series.aggregate() not passing the first args
to the user supplied func in certain cases (GH43357)
* Fixed memory leaks in Series.rolling.quantile() and
Series.rolling.median() (GH43339)
==== python-rpm ====
Version update (4.16.1.3 -> 4.17.0)
- update to rpm-4.17.0
==== python38 ====
- BuildRequire rpm-build-python: The provider to inject python(abi)
has been moved there. rpm-build pulls rpm-build-python
automatically in when building anything against python3-base, but
this implies that the initial build of python3-base does not
trigger the automatic installation.
==== python38-core ====
Subpackages: libpython3_8-1_0 python38-base
- BuildRequire rpm-build-python: The provider to inject python(abi)
has been moved there. rpm-build pulls rpm-build-python
automatically in when building anything against python3-base, but
this implies that the initial build of python3-base does not
trigger the automatic installation.
==== rpm ====
Version update (4.16.1.3 -> 4.17.0)
Subpackages: librpmbuild9
- update to rpm-4.17.0
- dropped support for berkeley db
- archive unpacking failures no longer leave garbage
- unified built-in and user-define macro syntax and calling conventions
- python generators and debuginfo extraction has been split into a
separate upstream project
- support for ed25519 signatures
- easier rpm macro access in lua
- new patches:
* python-rpm-packaging.diff
* singlefilemode.diff
* verbosearg.diff
- modified patches:
* usr-lib-sysimage-rpm.patch
* localetag.diff
* brp.diff
* findlang.diff
* macrosin.diff
* rpmqpack.diff
* build.diff
* whatrequires-doc.diff
* remove-brp-strips.diff
* fileattrs.diff
* langnoc.diff
* find-lang-qt-qm.patch
* findsupplements.diff
* finddebuginfo.diff
* finddebuginfo-absolute-links.diff
* debugsubpkg.diff
* debuglink.diff
* debuginfo-mono.patch
- dropped patches:
* db.diff
* dbfsync.diff
* dbprivate.diff
* dwarf5.diff
* ndbglue.diff
* pythondistdeps.diff
* suspendlock.diff
* taggedfileindex.diff
* waitlock.diff
* add-dwz-single-file-mode-option.patch
==== rpm-config-SUSE ====
Version update (0.g83 -> 0.g89)
- Update to version 0.g89:
* find-provides.ksyms: Do not set IFS - it is not needed for anything.
* find-provides.ksyms: Fix compressed modules.
* Allow locale directory to be named "locales" too
==== suse-module-tools ====
Version update (16.0.11 -> 16.0.13)
- Update to version 16.0.13:
* fixup "rpm-script: fix bad exit status in OpenQA (bsc#1191922)"
- Update to version 16.0.12:
* rpm-script: fix bad exit status in OpenQA (bsc#1191922)
* cert-script: Deal with existing $cert.delete file (bsc#1191804).
* cert-script: Ignore kernel keyring for kernel certificates (bsc#1191480).
* cert-script: Only print mokutil output in verbose mode.
==== systemd-rpm-macros ====
- Use %{load:} instead of %{?load:}: fix build with RPM 4.17.
==== transactional-update ====
Version update (3.5.6 -> 3.6.0)
Subpackages: dracut-transactional-update libtukit0 transactional-update-zypp-config tukit
- Version 3.6.0
- Simplify mount hierarchy by just using a single slave bind
mount as the root of the update environment; this may avoid the
error messages of failed unmounts
May fix [boo#1191945]
- Version 3.5.7
Various fixes affecting Salt support:
- t-u: Don't squash stderr messages into stdout
- t-u: Correctly handle case when the snapshot has been deleted due to
using --drop-if-no-change: Don't show reboot messages and avoid an awk
error message [bsc#1191475]
- tukit: Make inotify handler less sensitive / ignore more directories
[bsc#1191475]
==== u-boot-rpiarm64 ====
Subpackages: u-boot-rpiarm64-doc
Patch queue updated from https://github.com/openSUSE/u-boot.git tumbleweed-2021.10
* Patches added:
0015-Enable-EFI-and-ISO-partitions-suppo.patch - boo#1191966
0016-Revert-video-backlight-fix-pwm-s-du.patch - boo#1187573
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
ncurses (6.2.20211002 -> 6.3.20211021)
pcre2 (10.37 -> 10.38)
=== Details ===
==== ncurses ====
Version update (6.2.20211002 -> 6.3.20211021)
Subpackages: libncurses6 ncurses-utils terminfo-base
- Update to ncurses 6.3 (patch 20211021)
+ update release notes
+ add "ncu2openbsd" script, to illustrate how to update an OpenBSD
system to use a current ncurses release.
- Add upstream keyring to verify source signatures of both ncurses
and tack tar ball with their ASC (armored ASCii signature) counterpart
- Add ncurses patch 20211018
+ check for screen size-change in scr_init() and scr_restore(), in case
a screen dump does not match the current screen dimensions (report by
Frank Tkalcevic).
- Add ncurses patch 20211017
+ amend change for pkg-config to account for "none" being returned in
the libdir-path result rather than "no" (report by Gabriele Balducci).
- Add ncurses patch 20211016
+ build-fix for pmake with libtool.
+ improve make-tar.sh scripts, adding COPYING to tar file, and clean up
shellcheck warnings.
+ add link for "reset6" manpage in test-package ncurses6-doc
+ revise configure option --with-pkg-config-libdir, using the actual
search path from pkg-config or pkgconf using the output from --debug
(report by Pascal Pignard).
+ freeze ABI in ".map" files.
- Correct offsets of patch ncurses-6.2.dif
- Add ncurses patch 20211009
+ implement "+m" option in tabs program.
+ fill in some details for infoton -TD
+ fix spelling/consistency in several descriptions -TD
+ use vt420+lrmm in vt420 -TD
+ modify save_tty_settings() to avoid opening /dev/tty for cases other
than reset/init, e.g., for clear.
+ modify output of "toe -as" to show first description found rather
than the last.
+ improve tic checks for number of parameters of smglp, smgrp, smgtp,
and smgbp (cf: 20020525).
+ correct off-by-one comparison in last_char(), which did not allow
special case of ":" in a terminfo description field (cf: 20120407).
+ remove check in tic that assumes that none or both parameterized and
non-parameterized margin-setting capabilities are present
(cf: 20101002).
==== pcre2 ====
Version update (10.37 -> 10.38)
Subpackages: libpcre2-16-0 libpcre2-8-0
- pcre2 10.38:
* Following Perl's lead, \K is now locked out in lookaround
assertions by default, but an option is provided to re-enable
the previous behaviour
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
ncurses (6.2.20211002 -> 6.3.20211021)
pcre2 (10.37 -> 10.38)
=== Details ===
==== ncurses ====
Version update (6.2.20211002 -> 6.3.20211021)
Subpackages: libncurses6 ncurses-utils terminfo-base
- Update to ncurses 6.3 (patch 20211021)
+ update release notes
+ add "ncu2openbsd" script, to illustrate how to update an OpenBSD
system to use a current ncurses release.
- Add upstream keyring to verify source signatures of both ncurses
and tack tar ball with their ASC (armored ASCii signature) counterpart
- Add ncurses patch 20211018
+ check for screen size-change in scr_init() and scr_restore(), in case
a screen dump does not match the current screen dimensions (report by
Frank Tkalcevic).
- Add ncurses patch 20211017
+ amend change for pkg-config to account for "none" being returned in
the libdir-path result rather than "no" (report by Gabriele Balducci).
- Add ncurses patch 20211016
+ build-fix for pmake with libtool.
+ improve make-tar.sh scripts, adding COPYING to tar file, and clean up
shellcheck warnings.
+ add link for "reset6" manpage in test-package ncurses6-doc
+ revise configure option --with-pkg-config-libdir, using the actual
search path from pkg-config or pkgconf using the output from --debug
(report by Pascal Pignard).
+ freeze ABI in ".map" files.
- Correct offsets of patch ncurses-6.2.dif
- Add ncurses patch 20211009
+ implement "+m" option in tabs program.
+ fill in some details for infoton -TD
+ fix spelling/consistency in several descriptions -TD
+ use vt420+lrmm in vt420 -TD
+ modify save_tty_settings() to avoid opening /dev/tty for cases other
than reset/init, e.g., for clear.
+ modify output of "toe -as" to show first description found rather
than the last.
+ improve tic checks for number of parameters of smglp, smgrp, smgtp,
and smgbp (cf: 20020525).
+ correct off-by-one comparison in last_char(), which did not allow
special case of ":" in a terminfo description field (cf: 20120407).
+ remove check in tic that assumes that none or both parameterized and
non-parameterized margin-setting capabilities are present
(cf: 20101002).
==== pcre2 ====
Version update (10.37 -> 10.38)
- pcre2 10.38:
* Following Perl's lead, \K is now locked out in lookaround
assertions by default, but an option is provided to re-enable
the previous behaviour
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
AppStream (0.14.4 -> 0.14.6)
logrotate
mpg123 (1.29.1 -> 1.29.2)
plasma5-openSUSE
qca-qt5
suse-module-tools (16.0.11 -> 16.0.13)
transactional-update (3.5.6 -> 3.6.0)
=== Details ===
==== AppStream ====
Version update (0.14.4 -> 0.14.6)
Subpackages: libAppStreamQt2 libappstream4
- Update to 0.14.6. Check the NEWS file for the list of changes.
- Only install the license files once.
==== logrotate ====
- Add patch:
* logrotate-dont_warn_on_size=_syntax.patch (boo#1191816)
==== mpg123 ====
Version update (1.29.1 -> 1.29.2)
- Update to version 1.29.2
* libmpg123: Fix non-live-decoder safeguard for
mpg123_framebyframe_decode() (was a no-op in practice).
==== plasma5-openSUSE ====
Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE sddm-theme-openSUSE
- Update to 5.23.2
==== qca-qt5 ====
Subpackages: libqca-qt5-2
- Set LD_LIBRARY_PATH before running tests.
==== suse-module-tools ====
Version update (16.0.11 -> 16.0.13)
- Update to version 16.0.13:
* fixup "rpm-script: fix bad exit status in OpenQA (bsc#1191922)"
- Update to version 16.0.12:
* rpm-script: fix bad exit status in OpenQA (bsc#1191922)
* cert-script: Deal with existing $cert.delete file (bsc#1191804).
* cert-script: Ignore kernel keyring for kernel certificates (bsc#1191480).
* cert-script: Only print mokutil output in verbose mode.
==== transactional-update ====
Version update (3.5.6 -> 3.6.0)
Subpackages: dracut-transactional-update libtukit0 transactional-update-zypp-config tukit
- Version 3.6.0
- Simplify mount hierarchy by just using a single slave bind
mount as the root of the update environment; this may avoid the
error messages of failed unmounts
May fix [boo#1191945]
- Version 3.5.7
Various fixes affecting Salt support:
- t-u: Don't squash stderr messages into stdout
- t-u: Correctly handle case when the snapshot has been deleted due to
using --drop-if-no-change: Don't show reboot messages and avoid an awk
error message [bsc#1191475]
- tukit: Make inotify handler less sensitive / ignore more directories
[bsc#1191475]
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
logrotate
suse-module-tools (16.0.11 -> 16.0.13)
transactional-update (3.5.6 -> 3.6.0)
=== Details ===
==== logrotate ====
- Add patch:
* logrotate-dont_warn_on_size=_syntax.patch (boo#1191816)
==== suse-module-tools ====
Version update (16.0.11 -> 16.0.13)
- Update to version 16.0.13:
* fixup "rpm-script: fix bad exit status in OpenQA (bsc#1191922)"
- Update to version 16.0.12:
* rpm-script: fix bad exit status in OpenQA (bsc#1191922)
* cert-script: Deal with existing $cert.delete file (bsc#1191804).
* cert-script: Ignore kernel keyring for kernel certificates (bsc#1191480).
* cert-script: Only print mokutil output in verbose mode.
==== transactional-update ====
Version update (3.5.6 -> 3.6.0)
Subpackages: dracut-transactional-update libtukit0 transactional-update-zypp-config tukit
- Version 3.6.0
- Simplify mount hierarchy by just using a single slave bind
mount as the root of the update environment; this may avoid the
error messages of failed unmounts
May fix [boo#1191945]
- Version 3.5.7
Various fixes affecting Salt support:
- t-u: Don't squash stderr messages into stdout
- t-u: Correctly handle case when the snapshot has been deleted due to
using --drop-if-no-change: Don't show reboot messages and avoid an awk
error message [bsc#1191475]
- tukit: Make inotify handler less sensitive / ignore more directories
[bsc#1191475]
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
grub2
kernel-source (5.14.11 -> 5.14.14)
parted
podman (3.3.1 -> 3.4.1)
polkit
python-Mako (1.1.4 -> 1.1.5)
python-cryptography (3.3.2 -> 3.4.8)
python-jsonpatch
python-numpy
python-pandas (1.3.3 -> 1.3.4)
python38
python38-core
rpm (4.16.1.3 -> 4.17.0)
rpm-config-SUSE (0.g83 -> 0.g89)
systemd-rpm-macros
=== Details ===
==== grub2 ====
Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-x86_64-efi
- Fix installation on usrmerged s390x
==== kernel-source ====
Version update (5.14.11 -> 5.14.14)
- Update
patches.kernel.org/5.14.14-060-x86-fpu-Mask-out-the-invalid-MXCSR-bits-prop…
(bsc#1012628 bsc#1191855).
- commit 2b5383f
- Linux 5.14.14 (bsc#1012628).
- ALSA: usb-audio: Add quirk for VF0770 (bsc#1012628).
- ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat
ioctl (bsc#1012628).
- ALSA: usb-audio: Fix a missing error check in scarlett gen2
mixer (bsc#1012628).
- ALSA: seq: Fix a potential UAF by wrong private_free call order
(bsc#1012628).
- ALSA: hda/realtek: Enable 4-speaker output for Dell Precision
5560 laptop (bsc#1012628).
- ALSA: hda - Enable headphone mic on Dell Latitude laptops with
ALC3254 (bsc#1012628).
- ALSA: hda/realtek: Complete partial device name to avoid
ambiguity (bsc#1012628).
- ALSA: hda/realtek: Add quirk for Clevo X170KM-G (bsc#1012628).
- ALSA: hda/realtek - ALC236 headset MIC recording issue
(bsc#1012628).
- ALSA: hda/realtek: Add quirk for TongFang PHxTxX1 (bsc#1012628).
- ALSA: hda/realtek: Fix for quirk to enable speaker output on
the Lenovo 13s Gen2 (bsc#1012628).
- ALSA: hda/realtek: Fix the mic type detection issue for ASUS
G551JW (bsc#1012628).
- platform/x86: gigabyte-wmi: add support for B550 AORUS ELITE
AX V2 (bsc#1012628).
- platform/x86: amd-pmc: Add alternative acpi id for PMC
controller (bsc#1012628).
- spi: atmel: Fix PDC transfer setup bug (bsc#1012628).
- mtd: rawnand: qcom: Update code word value for raw read
(bsc#1012628).
- nds32/ftrace: Fix Error: invalid operands (*UND* and *UND*
sections) for `^' (bsc#1012628).
- dm: fix mempool NULL pointer race when completing IO
(bsc#1012628).
- ACPI: PM: Include alternate AMDI0005 id in special behaviour
(bsc#1012628).
- dm rq: don't queue request to blk-mq during DM suspend
(bsc#1012628).
- s390: fix strrchr() implementation (bsc#1012628).
- clk: socfpga: agilex: fix duplicate s2f_user0_clk (bsc#1012628).
- csky: don't let sigreturn play with priveleged bits of status
register (bsc#1012628).
- csky: Fixup regs.sr broken in ptrace (bsc#1012628).
- drm/fbdev: Clamp fbdev surface size if too large (bsc#1012628).
- arm64/hugetlb: fix CMA gigantic page order for non-4K PAGE_SIZE
(bsc#1012628).
- drm/nouveau/fifo: Reinstate the correct engine bit programming
(bsc#1012628).
- drm/msm: Do not run snapshot on non-DPU devices (bsc#1012628).
- drm/msm: Avoid potential overflow in timeout_to_jiffies()
(bsc#1012628).
- btrfs: unlock newly allocated extent buffer after error
(bsc#1012628).
- btrfs: deal with errors when replaying dir entry during log
replay (bsc#1012628).
- btrfs: deal with errors when adding inode reference during
log replay (bsc#1012628).
- btrfs: check for error when looking up inode during dir entry
replay (bsc#1012628).
- btrfs: update refs for any root except tree log roots
(bsc#1012628).
- btrfs: fix abort logic in btrfs_replace_file_extents
(bsc#1012628).
- module: fix clang CFI with MODULE_UNLOAD=n (bsc#1012628).
- x86/resctrl: Free the ctrlval arrays when
domain_setup_mon_state() fails (bsc#1012628).
- mei: me: add Ice Lake-N device id (bsc#1012628).
- mei: hbm: drop hbm responses on early shutdown (bsc#1012628).
- USB: xhci: dbc: fix tty registration race (bsc#1012628).
- xhci: guard accesses to ep_state in xhci_endpoint_reset()
(bsc#1012628).
- xhci: add quirk for host controllers that don't update endpoint
DCS (bsc#1012628).
- xhci: Fix command ring pointer corruption while aborting a
command (bsc#1012628).
- xhci: Enable trust tx length quirk for Fresco FL11 USB
controller (bsc#1012628).
- cb710: avoid NULL pointer subtraction (bsc#1012628).
- efi/cper: use stack buffer for error record decoding
(bsc#1012628).
- efi: Change down_interruptible() in virt_efi_reset_system()
to down_trylock() (bsc#1012628).
- usb: musb: dsps: Fix the probe error path (bsc#1012628).
- Input: xpad - add support for another USB ID of Nacon GC-100
(bsc#1012628).
- USB: serial: qcserial: add EM9191 QDL support (bsc#1012628).
- USB: serial: option: add Quectel EC200S-CN module support
(bsc#1012628).
- USB: serial: option: add Telit LE910Cx composition 0x1204
(bsc#1012628).
- USB: serial: option: add prod. id for Quectel EG91
(bsc#1012628).
- misc: fastrpc: Add missing lock before accessing find_vma()
(bsc#1012628).
- virtio: write back F_VERSION_1 before validate (bsc#1012628).
- EDAC/armada-xp: Fix output of uncorrectable error counter
(bsc#1012628).
- nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
(bsc#1012628).
- virtio-blk: remove unneeded "likely" statements (bsc#1012628).
- Revert "virtio-blk: Add validation for block size in config
space" (bsc#1012628).
- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT
automatically (bsc#1012628).
- powerpc/xive: Discard disabled interrupts in get_irqchip_state()
(bsc#1012628).
- iio: adc: aspeed: set driver data when adc probe (bsc#1012628).
- drivers: bus: simple-pm-bus: Add support for probing simple
bus only devices (bsc#1012628).
- driver core: Reject pointless SYNC_STATE_ONLY device links
(bsc#1012628).
- iio: adc: ad7192: Add IRQ flag (bsc#1012628).
- iio: adc: ad7780: Fix IRQ flag (bsc#1012628).
- iio: adc: ad7793: Fix IRQ flag (bsc#1012628).
- iio: adis16480: fix devices that do not support sleep mode
(bsc#1012628).
- iio: adc128s052: Fix the error handling path of 'adc128_probe()'
(bsc#1012628).
- iio: adc: max1027: Fix wrong shift with 12-bit devices
(bsc#1012628).
- iio: adis16475: fix deadlock on frequency set (bsc#1012628).
- iio: mtk-auxadc: fix case IIO_CHAN_INFO_PROCESSED (bsc#1012628).
- iio: light: opt3001: Fixed timeout error when 0 lux
(bsc#1012628).
- iio: accel: fxls8962af: return IRQ_HANDLED when fifo is flushed
(bsc#1012628).
- iio: adc: max1027: Fix the number of max1X31 channels
(bsc#1012628).
- iio: ssp_sensors: add more range checking in
ssp_parse_dataframe() (bsc#1012628).
- iio: ssp_sensors: fix error code in ssp_print_mcu_debug()
(bsc#1012628).
- Input: resistive-adc-touch - fix division by zero error on z1 ==
0 (bsc#1012628).
- eeprom: 93xx46: Add SPI device ID table (bsc#1012628).
- eeprom: 93xx46: fix MODULE_DEVICE_TABLE (bsc#1012628).
- eeprom: at25: Add SPI ID table (bsc#1012628).
- fpga: ice40-spi: Add SPI device ID table (bsc#1012628).
- iio: dac: ti-dac5571: fix an error code in probe()
(bsc#1012628).
- tracing: Fix missing osnoise tracer on max_latency
(bsc#1012628).
- tee: optee: Fix missing devices unregister during optee_remove
(bsc#1012628).
- ARM: dts: bcm2711-rpi-4-b: Fix usb's unit address (bsc#1012628).
- ARM: dts: bcm283x: Fix VEC address for BCM2711 (bsc#1012628).
- ARM: dts: bcm2711: fix MDIO #address- and #size-cells
(bsc#1012628).
- firmware: arm_ffa: Fix __ffa_devices_unregister (bsc#1012628).
- firmware: arm_ffa: Add missing remove callback to ffa_bus_type
(bsc#1012628).
- ARM: dts: bcm2711-rpi-4-b: fix sd_io_1v8_reg regulator states
(bsc#1012628).
- ARM: dts: bcm2711-rpi-4-b: Fix pcie0's unit address formatting
(bsc#1012628).
- clk: renesas: rzg2l: Fix clk status function (bsc#1012628).
- nvme-pci: Fix abort command id (bsc#1012628).
- sctp: account stream padding length for reconf chunk
(bsc#1012628).
- gpio: 74x164: Add SPI device ID table (bsc#1012628).
- gpio: pca953x: Improve bias setting (bsc#1012628).
- net: arc: select CRC32 (bsc#1012628).
- net: korina: select CRC32 (bsc#1012628).
- net/smc: improved fix wait on already cleared link
(bsc#1012628).
- net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
(bsc#1012628).
- net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp
(bsc#1012628).
- net/mlx5e: Switchdev representors are not vlan challenged
(bsc#1012628).
- net: stmmac: fix get_hw_feature() on old hardware (bsc#1012628).
- net: phy: Do not shutdown PHYs in READY state (bsc#1012628).
- net: dsa: mv88e6xxx: don't use PHY_DETECT on internal PHY's
(bsc#1012628).
- net: dsa: microchip: Added the condition for scheduling
ksz_mib_read_work (bsc#1012628).
- net: dsa: fix spurious error message when unoffloaded port
leaves bridge (bsc#1012628).
- net: encx24j600: check error in devm_regmap_init_encx24j600
(bsc#1012628).
- ethernet: s2io: fix setting mac address during resume
(bsc#1012628).
- vhost-vdpa: Fix the wrong input in config_cb (bsc#1012628).
- nfc: fix error handling of nfc_proto_register() (bsc#1012628).
- NFC: digital: fix possible memory leak in
digital_tg_listen_mdaa() (bsc#1012628).
- NFC: digital: fix possible memory leak in
digital_in_send_sdd_req() (bsc#1012628).
- pata_legacy: fix a couple uninitialized variable bugs
(bsc#1012628).
- ata: ahci_platform: fix null-ptr-deref in
ahci_platform_enable_regulators() (bsc#1012628).
- mlxsw: thermal: Fix out-of-bounds memory accesses (bsc#1012628).
- platform/mellanox: mlxreg-io: Fix argument base in kstrtou32()
call (bsc#1012628).
- platform/mellanox: mlxreg-io: Fix read access of n-bytes size
attributes (bsc#1012628).
- spi: spidev: Add SPI ID table (bsc#1012628).
- spi: bcm-qspi: clear MSPI spifie interrupt during probe
(bsc#1012628).
- drm/panel: olimex-lcd-olinuxino: select CRC32 (bsc#1012628).
- drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks
read (bsc#1012628).
- drm/msm: Fix null pointer dereference on pointer edp
(bsc#1012628).
- drm/msm/mdp5: fix cursor-related warnings (bsc#1012628).
- drm/msm/submit: fix overflow check on 64-bit architectures
(bsc#1012628).
- drm/msm/a6xx: Track current ctx by seqno (bsc#1012628).
- drm/msm/a4xx: fix error handling in a4xx_gpu_init()
(bsc#1012628).
- drm/msm/a3xx: fix error handling in a3xx_gpu_init()
(bsc#1012628).
- drm/msm/dsi: dsi_phy_14nm: Take ready-bit into account in
poll_for_ready (bsc#1012628).
- drm/msm/dsi: Fix an error code in msm_dsi_modeset_init()
(bsc#1012628).
- drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling
(bsc#1012628).
- acpi/arm64: fix next_platform_timer() section mismatch error
(bsc#1012628).
- platform/x86: intel_scu_ipc: Fix busy loop expiry time
(bsc#1012628).
- mqprio: Correct stats in mqprio_dump_class_stats()
(bsc#1012628).
- mptcp: fix possible stall on recvmsg() (bsc#1012628).
- qed: Fix missing error code in qed_slowpath_start()
(bsc#1012628).
- r8152: select CRC32 and CRYPTO/CRYPTO_HASH/CRYPTO_SHA256
(bsc#1012628).
- ice: fix locking for Tx timestamp tracking flush (bsc#1012628).
- block/rnbd-clt-sysfs: fix a couple uninitialized variable bugs
(bsc#1012628).
- nfp: flow_offload: move flow_indr_dev_register from app init
to app start (bsc#1012628).
- net: mscc: ocelot: make use of all 63 PTP timestamp identifiers
(bsc#1012628).
- net: mscc: ocelot: avoid overflowing the PTP timestamp FIFO
(bsc#1012628).
- net: mscc: ocelot: warn when a PTP IRQ is raised for an unknown
skb (bsc#1012628).
- net: mscc: ocelot: deny TX timestamping of non-PTP packets
(bsc#1012628).
- net: mscc: ocelot: cross-check the sequence id from the
timestamp FIFO with the skb PTP header (bsc#1012628).
- net: dsa: felix: break at first CPU port during init and
teardown (bsc#1012628).
- ionic: don't remove netdev->dev_addr when syncing uc list
(bsc#1012628).
- commit 6859230
- media: firewire: firedtv-avc: fix a buffer overflow in
avc_ca_pmt() (CVE-2021-3542 bsc#1184673).
- commit 08ab8da
- x86/fpu: Mask out the invalid MXCSR bits properly (x86_32
breakage).
- commit 565cd48
- rpm/kernel-obs-build.spec.in: reduce initrd functionality
For building in OBS, we always build inside a virtual machine
that gets a new, freshly created scratch filesystem image. So
we do not need to handle fscks because that ain't gonna happen,
as well as not we do not need to handle microcode update in the
initrd as these only can be run on the host system anyway. We
can also strip and hardlink as an additional optimisation that
should not significantly hurt.
- commit c72c6fc
- Update upstream commit id for rtw89 patch (bsc#1191321)
- commit 8dccb66
- Linux 5.14.13 (bsc#1012628).
- hwmon: (pmbus/ibm-cffps) max_power_out swap changes
(bsc#1012628).
- io_uring: kill fasync (bsc#1012628).
- sched: Always inline is_percpu_thread() (bsc#1012628).
- perf/core: fix userpage->time_enabled of inactive events
(bsc#1012628).
- scsi: qla2xxx: Fix excessive messages during device logout
(bsc#1012628).
- scsi: virtio_scsi: Fix spelling mistake "Unsupport" ->
"Unsupported" (bsc#1012628).
- scsi: ses: Fix unsigned comparison with less than zero
(bsc#1012628).
- drm/amdgpu: fix gart.bo pin_count leak (bsc#1012628).
- net: sun: SUNVNET_COMMON should depend on INET (bsc#1012628).
- vboxfs: fix broken legacy mount signature checking
(bsc#1012628).
- net: bgmac-platform: handle mac-address deferral (bsc#1012628).
- mac80211: check return value of rhashtable_init (bsc#1012628).
- net: prevent user from passing illegal stab size (bsc#1012628).
- hwmon: (ltc2947) Properly handle errors when looking for the
external clock (bsc#1012628).
- m68k: Handle arrivals of multiple signals correctly
(bsc#1012628).
- pinctrl: qcom: sc7280: Add PM suspend callbacks (bsc#1012628).
- mac80211: Drop frames from invalid MAC address in ad-hoc mode
(bsc#1012628).
- netfilter: nf_nat_masquerade: defer conntrack walk to work queue
(bsc#1012628).
- netfilter: nf_nat_masquerade: make async masq_inet6_event
handling generic (bsc#1012628).
- KVM: arm64: nvhe: Fix missing FORCE for hyp-reloc.S build rule
(bsc#1012628).
- ASoC: SOF: loader: release_firmware() on load failure to avoid
batching (bsc#1012628).
- HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device
IDs (bsc#1012628).
- netfilter: ip6_tables: zero-initialize fragment offset
(bsc#1012628).
- HID: apple: Fix logical maximum and usage maximum of Magic
Keyboard JIS (bsc#1012628).
- ALSA: usb-audio: Unify mixer resume and reset_resume procedure
(bsc#1012628).
- ALSA: oxfw: fix transmission method for Loud models based on
OXFW971 (bsc#1012628).
- ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic
(bsc#1012628).
- ext4: correct the error path of ext4_write_inline_data_end()
(bsc#1012628).
- ext4: check and update i_disksize properly (bsc#1012628).
- commit ab3ca44
- kernel-spec-macros: Since rpm 4.17 %verbose is unusable (bsc#1191229).
The semantic changed in an incompatible way so invoking the macro now
causes a build failure.
- commit 3e55f55
- Linux 5.14.12 (bsc#1012628).
- dsa: tag_dsa: Fix mask for trunked packets (bsc#1012628).
- x86/hpet: Use another crystalball to evaluate HPET usability
(bsc#1012628).
- x86/entry: Clear X86_FEATURE_SMAP when CONFIG_X86_SMAP=n
(bsc#1012628).
- x86/entry: Correct reference to intended CONFIG_64_BIT
(bsc#1012628).
- x86/fpu: Restore the masking out of reserved MXCSR bits
(bsc#1012628).
- x86/sev: Return an error on a returned non-zero
SW_EXITINFO1[31:0] (bsc#1012628).
- x86/Kconfig: Correct reference to MWINCHIP3D (bsc#1012628).
- x86/platform/olpc: Correct ifdef symbol to intended
CONFIG_OLPC_XO15_SCI (bsc#1012628).
- pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init
(bsc#1012628).
- powerpc/32s: Fix kuap_kernel_restore() (bsc#1012628).
- powerpc/64s: Fix unrecoverable MCE calling async handler from
NMI (bsc#1012628).
- powerpc/traps: do not enable irqs in _exception (bsc#1012628).
- powerpc/64s: fix program check interrupt emergency stack path
(bsc#1012628).
- powerpc/bpf ppc32: Fix BPF_SUB when imm == 0x80000000
(bsc#1012628).
- powerpc/bpf ppc32: Do not emit zero extend instruction for
64-bit BPF_END (bsc#1012628).
- powerpc/bpf ppc32: Fix JMP32_JSET_K (bsc#1012628).
- powerpc/bpf ppc32: Fix ALU32 BPF_ARSH operation (bsc#1012628).
- powerpc/bpf: Fix BPF_SUB when imm == 0x80000000 (bsc#1012628).
- powerpc/bpf: Fix BPF_MOD when imm == 1 (bsc#1012628).
- objtool: Make .altinstructions section entry size consistent
(bsc#1012628).
- objtool: Remove reloc symbol type checks in get_alt_entry()
(bsc#1012628).
- scsi: iscsi: Fix iscsi_task use after free (bsc#1012628).
- RISC-V: Include clone3() on rv32 (bsc#1012628).
- i2c: mlxcpld: Modify register setting for 400KHz frequency
(bsc#1012628).
- i2c: mlxcpld: Fix criteria for frequency setting (bsc#1012628).
- bpf, s390: Fix potential memory leak about jit_data
(bsc#1012628).
- riscv/vdso: make arch_setup_additional_pages wait for mmap_sem
for write killable (bsc#1012628).
- riscv/vdso: Move vdso data page up front (bsc#1012628).
- riscv/vdso: Refactor asm/vdso.h (bsc#1012628).
- RISC-V: Fix VDSO build for !MMU (bsc#1012628).
- riscv: explicitly use symbol offsets for VDSO (bsc#1012628).
- i2c: mediatek: Add OFFSET_EXT_CONF setting back (bsc#1012628).
- i2c: acpi: fix resource leak in reconfiguration device addition
(bsc#1012628).
- powerpc/iommu: Report the correct most efficient DMA mask for
PCI devices (bsc#1012628).
- net: prefer socket bound to interface when not in VRF
(bsc#1012628).
- iavf: fix double unlock of crit_lock (bsc#1012628).
- i40e: Fix freeing of uninitialized misc IRQ vector
(bsc#1012628).
- i40e: fix endless loop under rtnl (bsc#1012628).
- gve: report 64bit tx_bytes counter from
gve_handle_report_stats() (bsc#1012628).
- gve: fix gve_get_stats() (bsc#1012628).
- rtnetlink: fix if_nlmsg_stats_size() under estimation
(bsc#1012628).
- gve: Properly handle errors in gve_assign_qpl (bsc#1012628).
- gve: Avoid freeing NULL pointer (bsc#1012628).
- gve: Correct available tx qpl check (bsc#1012628).
- net: stmmac: trigger PCS EEE to turn off on link down
(bsc#1012628).
- net: pcs: xpcs: fix incorrect steps on disable EEE
(bsc#1012628).
- drm/nouveau/debugfs: fix file release memory leak (bsc#1012628).
- drm/nouveau/kms/nv50-: fix file release memory leak
(bsc#1012628).
- drm/nouveau: avoid a use-after-free when BO init fails
(bsc#1012628).
- video: fbdev: gbefb: Only instantiate device when built for IP32
(bsc#1012628).
- drm/panel: abt-y030xx067a: yellow tint fix (bsc#1012628).
- drm/nouveau/fifo/ga102: initialise chid on return from channel
creation (bsc#1012628).
- drm/sun4i: dw-hdmi: Fix HDMI PHY clock setup (bsc#1012628).
- bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893
(bsc#1012628).
- perf jevents: Free the sys_event_tables list after processing
entries (bsc#1012628).
- drm/amdgpu: handle the case of pci_channel_io_frozen only in
amdgpu_pci_resume (bsc#1012628).
- drm/amdkfd: fix a potential ttm->sg memory leak (bsc#1012628).
- ARM: defconfig: gemini: Restore framebuffer (bsc#1012628).
- netlink: annotate data races around nlk->bound (bsc#1012628).
- net: pcs: xpcs: fix incorrect CL37 AN sequence (bsc#1012628).
- net: sfp: Fix typo in state machine debug string (bsc#1012628).
- net/sched: sch_taprio: properly cancel timer from
taprio_destroy() (bsc#1012628).
- net: bridge: fix under estimation in br_get_linkxstats_size()
(bsc#1012628).
- net: bridge: use nla_total_size_64bit() in
br_get_linkxstats_size() (bsc#1012628).
- afs: Fix afs_launder_page() to set correct start file position
(bsc#1012628).
- netfs: Fix READ/WRITE confusion when calling iov_iter_xarray()
(bsc#1012628).
- drm/i915/bdb: Fix version check (bsc#1012628).
- drm/i915/tc: Fix TypeC port init/resume time sanitization
(bsc#1012628).
- drm/i915/jsl: Add W/A 1409054076 for JSL (bsc#1012628).
- drm/i915/audio: Use BIOS provided value for RKL HDA link
(bsc#1012628).
- ARM: imx6: disable the GIC CPU interface before calling
stby-poweroff sequence (bsc#1012628).
- dt-bindings: drm/bridge: ti-sn65dsi86: Fix reg value
(bsc#1012628).
- arm64: dts: ls1028a: fix eSDHC2 node (bsc#1012628).
- arm64: dts: imx8mm-kontron-n801x-som: do not allow to switch
off buck2 (bsc#1012628).
- arm64: dts: imx8: change the spi-nor tx (bsc#1012628).
- ARM: dts: imx: change the spi-nor tx (bsc#1012628).
- ptp_pch: Load module automatically if ID matches (bsc#1012628).
- powerpc/fsl/dts: Fix phy-connection-type for fm1mac3
(bsc#1012628).
- netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in
event notification (bsc#1012628).
- MIPS: Revert "add support for buggy MT7621S core detection"
(bsc#1012628).
- net: stmmac: dwmac-rk: Fix ethernet on rk3399 based devices
(bsc#1012628).
- net: mscc: ocelot: fix VCAP filters remaining active after
being deleted (bsc#1012628).
- net_sched: fix NULL deref in fifo_set_limit() (bsc#1012628).
- libbpf: Fix memory leak in strset (bsc#1012628).
- phy: mdio: fix memory leak (bsc#1012628).
- libbpf: Fix segfault in light skeleton for objects without BTF
(bsc#1012628).
- net/mlx5e: Fix the presented RQ index in PTP stats
(bsc#1012628).
- net/mlx5: Fix setting number of EQs of SFs (bsc#1012628).
- net/mlx5: Fix length of irq_index in chars (bsc#1012628).
- net/mlx5: Avoid generating event after PPS out in Real time mode
(bsc#1012628).
- net/mlx5: Force round second at 1PPS out start time
(bsc#1012628).
- net/mlx5: E-Switch, Fix double allocation of acl flow counter
(bsc#1012628).
- net/mlx5e: Keep the value for maximum number of channels in-sync
(bsc#1012628).
- net/mlx5e: IPSEC RX, enable checksum complete (bsc#1012628).
- bpf: Fix integer overflow in prealloc_elems_and_freelist()
(bsc#1012628).
- soc: ti: omap-prm: Fix external abort for am335x pruss
(bsc#1012628).
- bpf, arm: Fix register clobbering in div/mod implementation
(bsc#1012628).
- netfilter: nf_tables: reverse order in rule replacement
expansion (bsc#1012628).
- netfilter: nf_tables: add position handle in event notification
(bsc#1012628).
- netfilter: conntrack: fix boot failure with
nf_conntrack.enable_hooks=1 (bsc#1012628).
- iwlwifi: pcie: add configuration of a Wi-Fi adapter on Dell
XPS 15 (bsc#1012628).
- xtensa: call irqchip_init only when CONFIG_USE_OF is selected
(bsc#1012628).
- xtensa: use CONFIG_USE_OF instead of CONFIG_OF (bsc#1012628).
- arm64: dts: qcom: pm8150: use qcom,pm8998-pon binding
(bsc#1012628).
- ath5k: fix building with LEDS=m (bsc#1012628).
- PCI: hv: Fix sleep while in non-sleep context when removing
child devices from the bus (bsc#1012628).
- ARM: dts: imx6qdl-pico: Fix Ethernet support (bsc#1012628).
- ARM: dts: imx: Fix USB host power regulator polarity on M53Menlo
(bsc#1012628).
- ARM: dts: imx: Add missing pinctrl-names for panel on M53Menlo
(bsc#1012628).
- soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment
(bsc#1012628).
- iwlwifi: mvm: Fix possible NULL dereference (bsc#1012628).
- ARM: at91: pm: do not panic if ram controllers are not enabled
(bsc#1012628).
- Revert "arm64: dts: qcom: sc7280: Fixup the cpufreq node"
(bsc#1012628).
- ARM: dts: qcom: apq8064: Use 27MHz PXO clock as DSI PLL
reference (bsc#1012628).
- soc: qcom: socinfo: Fixed argument passed to platform_set_data()
(bsc#1012628).
- bus: ti-sysc: Add break in switch statement in sysc_init_soc()
(bsc#1012628).
- riscv: Flush current cpu icache before other cpus (bsc#1012628).
- scsi: ufs: core: Fix task management completion (bsc#1012628).
- ARM: dts: qcom: apq8064: use compatible which contains chipid
(bsc#1012628).
- ARM: dts: imx6dl-yapp4: Fix lp5562 LED driver probe
(bsc#1012628).
- ARM: dts: omap3430-sdp: Fix NAND device node (bsc#1012628).
- xen/balloon: fix cancelled balloon action (bsc#1012628).
- SUNRPC: fix sign error causing rpcsec_gss drops (bsc#1012628).
- nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero
(bsc#1012628).
- nfsd: fix error handling of register_pernet_subsys() in
init_nfsd() (bsc#1012628).
- ovl: fix IOCB_DIRECT if underlying fs doesn't support direct IO
(bsc#1012628).
- ovl: fix missing negative dentry check in ovl_rename()
(bsc#1012628).
- fbdev: simplefb: fix Kconfig dependencies (bsc#1012628).
- Update config files.
- mmc: sdhci-of-at91: replace while loop with read_poll_timeout
(bsc#1012628).
- mmc: sdhci-of-at91: wait for calibration done before proceed
(bsc#1012628).
- mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk
(bsc#1012628).
- xen/privcmd: fix error handling in mmap-resource processing
(bsc#1012628).
- drm/i915: Extend the async flip VT-d w/a to skl/bxt
(bsc#1012628).
- drm/i915: Fix runtime pm handling in i915_gem_shrink
(bsc#1012628).
- drm/amd/display: Fix DCN3 B0 DP Alt Mapping (bsc#1012628).
- drm/amd/display: Fix detection of 4 lane for DPALT
(bsc#1012628).
- drm/amd/display: Limit display scaling to up to 4k for DCN 3.1
(bsc#1012628).
- drm/nouveau/ga102-: support ttm buffer moves via copy engine
(bsc#1012628).
- drm/nouveau/kms/tu102-: delay enabling cursor until after
assign_windows (bsc#1012628).
- drm/amdgpu: During s0ix don't wait to signal GFXOFF
(bsc#1012628).
- drm/amd/display: USB4 bring up set correct address
(bsc#1012628).
- drm/amd/display: Fix B0 USB-C DP Alt mode (bsc#1012628).
- usb: typec: tipd: Remove dependency on "connector" child fwnode
(bsc#1012628).
- usb: typec: tcpm: handle SRC_STARTUP state if cc changes
(bsc#1012628).
- usb: typec: tcpci: don't handle vSafe0V event if it's not
enabled (bsc#1012628).
- USB: cdc-acm: fix break reporting (bsc#1012628).
- USB: cdc-acm: fix racy tty buffer accesses (bsc#1012628).
- usb: gadget: f_uac2: fixed EP-IN wMaxPacketSize (bsc#1012628).
- usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle
(bsc#1012628).
- usb: cdc-wdm: Fix check for WWAN (bsc#1012628).
- Partially revert "usb: Kconfig: using select for USB_COMMON
dependency" (bsc#1012628).
- Update config files.
- commit 7246625
- rtw89: add Realtek 802.11ax driver (bsc#1191321).
- commit 4c399ab
- Enable CONFIG_RTW88_DEBUG and CONFIG_RTW89_DEBUG on debug flavors (bsc#1191321)
- commit a76143b
==== parted ====
- BuildRequire python3-base: Fix execution of test suite. Otherwise
we fail with
./t0282-gpt-move-backup.sh: /usr/bin/python3: bad interpreter: No
such file or directory.
- run checks during build
- added patches:
tests-disable.patch
==== podman ====
Version update (3.3.1 -> 3.4.1)
Subpackages: podman-cni-config
- Update to version 3.4.1:
* Bugfixes
- Fixed a bug where podman machine init could, under some circumstances,
create invalid machine configurations which could not be started (#11824).
- Fixed a bug where the podman machine list command would not properly
populate some output fields.
- Fixed a bug where podman machine rm could leave dangling sockets from
the removed machine (#11393).
- Fixed a bug where podman run --pids-limit=-1 was not supported (it now
sets the PID limit in the container to unlimited) (#11782).
- Fixed a bug where podman run and podman attach could throw errors about
a closed network connection when STDIN was closed by the client (#11856).
- Fixed a bug where the podman stop command could fail when run on a
container that had another podman stop command run on it previously.
- Fixed a bug where the --sync flag to podman ps was nonfunctional.
- Fixed a bug where the Windows and OS X remote clients' podman stats
command would fail (#11909).
- Fixed a bug where the podman play kube command did not properly handle
environment variables whose values contained an = (#11891).
- Fixed a bug where the podman generate kube command could generate
invalid annotations when run on containers with volumes that use SELinux
relabelling (:z or :Z) (#11929).
- Fixed a bug where the podman generate kube command would generate YAML
including some unnecessary (set to default) fields (e.g. user and group,
entrypoint, default protocol for forwarded ports) (#11914, #11915, and #11965).
- Fixed a bug where the podman generate kube command could, under some
circumstances, generate YAML including an invalid targetPort field for
forwarded ports (#11930).
- Fixed a bug where rootless Podman's podman info command could, under
some circumstances, not read available CGroup controllers (#11931).
- Fixed a bug where podman container checkpoint --export would fail to
checkpoint any container created with --log-driver=none (#11974).
* API
- Fixed a bug where the Compat Create endpoint for Containers could panic
when no options were passed to a bind mount of tmpfs (#11961).
- Update to version 3.4.0:
* Features
- Pods now support init containers! Init containers are containers which run before the rest of the pod starts. There are two types of init containers: "always", which always run before the pod is started, and "once", which only run the first time the pod starts and are subsequently removed. They can be added using the podman create command's --init-ctr option.
- Support for init containers has also been added to podman play kube and podman generate kube - init containers contained in Kubernetes YAML will be created as Podman init containers, and YAML generated by Podman will include any init containers created.
- The podman play kube command now supports building images. If the --build option is given and a directory with the name of the specified image exists in the current working directory and contains a valid Containerfile or Dockerfile, the image will be built and used for the container.
- The podman play kube command now supports a new option, --teardown, which removes any pods and containers created by the given Kubernetes YAML.
- The podman generate kube command now generates annotations for SELinux mount options on volume (:z and :Z) that are respected by the podman play kube command.
- A new command has been added, podman pod logs, to return logs for all containers in a pod at the same time.
- Two new commands have been added, podman volume export (to export a volume to a tar file) and podman volume import) (to populate a volume from a given tar file).
- The podman auto-update command now supports simple rollbacks. If a container fails to start after an automatic update, it will be rolled back to the previous image and restarted again.
- Pods now share their user namespace by default, and the podman pod create command now supports the --userns option. This allows rootless pods to be created with the --userns=keep-id option.
- The podman pod ps command now supports a new filter with its --filter option, until, which returns pods created before a given timestamp.
- The podman image scp command has been added. This command allows images to be transferred between different hosts.
- The podman stats command supports a new option, --interval, to specify the amount of time before the information is refreshed.
- The podman inspect command now includes ports exposed (but not published) by containers (e.g. ports from --expose when --publish-all is not specified).
- The podman inspect command now has a new boolean value, Checkpointed, which indicates that a container was stopped as a result of a podman container checkpoint operation.
- Volumes created by podman volume create now support setting quotas when run atop XFS. The size and inode options allow the maximum size and maximum number of inodes consumed by a volume to be limited.
- The podman info command now outputs information on what log drivers, network drivers, and volume plugins are available for use (#11265).
- The podman info command now outputs the current log driver in use, and the variant and codename of the distribution in use.
- The parameters of the VM created by podman machine init (amount of disk space, memory, CPUs) can now be set in containers.conf.
- The podman machine ls command now shows additional information (CPUs, memory, disk size) about VMs managed by podman machine.
- The podman ps command now includes healthcheck status in container state for containers that have healthchecks (#11527).
* Changes
- The podman build command has a new alias, podman buildx, to improve compatibility with Docker. We have already added support for many docker buildx flags to podman build and aim to continue to do so.
- Cases where Podman is run without a user session or a writable temporary files directory will now produce better error messages.
- The default log driver has been changed from file to journald. The file driver did not properly support log rotation, so this should lead to a better experience. If journald is not available on the system, Podman will automatically revert to the file.
- Podman no longer depends on ip for removing networks (#11403).
- The deprecated --macvlan flag to podman network create now warns when it is used. It will be removed entirely in the Podman 4.0 release.
- The podman machine start command now prints a message when the VM is successfully started.
- The podman stats command can now be used on containers that are paused.
- The podman unshare command will now return the exit code of the command that was run in the user namespace (assuming the command was successfully run).
- Successful healthchecks will no longer add a healthy line to the system log to reduce log spam.
- As a temporary workaround for a lack of shortname prompts in the Podman remote client, VMs created by podman machine now default to only using the docker.io registry.
* Bugfixes
- Fixed a bug where whitespace in the definition of sysctls (particularly default sysctls specified in containers.conf) would cause them to be parsed incorrectly.
- Fixed a bug where the Windows remote client improperly validated volume paths (#10900).
- Fixed a bug where the first line of logs from a container run with the journald log driver could be skipped.
- Fixed a bug where images created by podman commit did not include ports exposed by the container.
- Fixed a bug where the podman auto-update command would ignore the io.containers.autoupdate.authfile label when pulling images (#11171).
- Fixed a bug where the --workdir option to podman create and podman run could not be set to a directory where a volume was mounted (#11352).
- Fixed a bug where systemd socket-activation did not properly work with systemd-managed Podman containers (#10443).
- Fixed a bug where environment variable secrets added to a container were not available to exec sessions launched in the container.
- Fixed a bug where rootless containers could fail to start the rootlessport port-forwarding service when XDG_RUNTIME_DIR was set to a long path.
- Fixed a bug where arguments to the --systemd option to podman create and podman run were case-sensitive (#11387).
- Fixed a bug where the podman manifest rm command would also remove images referenced by the manifest, not just the manifest itself (#11344).
- Fixed a bug where the Podman remote client on OS X would not function properly if the TMPDIR environment variable was not set (#11418).
- Fixed a bug where the /etc/hosts file was not guaranteed to contain an entry for localhost (this is still not guaranteed if --net=host is used; such containers will exactly match the host's /etc/hosts) (#11411).
- Fixed a bug where the podman machine start command could print warnings about unsupported CPU features (#11421).
- Fixed a bug where the podman info command could segfault when accessing cgroup information.
- Fixed a bug where the podman logs -f command could hang when a container exited (#11461).
- Fixed a bug where the podman generate systemd command could not be used on containers that specified a restart policy (#11438).
- Fixed a bug where the remote Podman client's podman build command would fail to build containers if the UID and GID on the client were higher than 65536 (#11474).
- Fixed a bug where the remote Podman client's podman build command would fail to build containers if the context directory was a symlink (#11732).
- Fixed a bug where the --network flag to podman play kube was not properly parsed when a non-bridge network configuration was specified.
- Fixed a bug where the podman inspect command could error when the container being inspected was removed as it was being inspected (#11392).
- Fixed a bug where the podman play kube command ignored the default pod infra image specified in containers.conf.
- Fixed a bug where the --format option to podman inspect was nonfunctional under some circumstances (#8785).
- Fixed a bug where the remote Podman client's podman run and podman exec commands could skip a byte of output every 8192 bytes (#11496).
- Fixed a bug where the podman stats command would print nonsensical results if the container restarted while it was running (#11469).
- Fixed a bug where the remote Podman client would error when STDOUT was redirected on a Windows client (#11444).
- Fixed a bug where the podman run command could return 0 when the application in the container exited with 125 (#11540).
- Fixed a bug where containers with --restart=always set using the rootlessport port-forwarding service could not be restarted automatically.
- Fixed a bug where the --cgroups=split option to podman create and podman run was silently discarded if the container was part of a pod.
- Fixed a bug where the podman container runlabel command could fail if the image name given included a tag.
- Fixed a bug where Podman could add an extra 127.0.0.1 entry to /etc/hosts under some circumstances (#11596).
- Fixed a bug where the remote Podman client's podman untag command did not properly handle tags including a digest (#11557).
- Fixed a bug where the --format option to podman ps did not properly support the table argument for tabular output.
- Fixed a bug where the --filter option to podman ps did not properly handle filtering by healthcheck status (#11687).
- Fixed a bug where the podman run and podman start --attach commands could race when retrieving the exit code of a container that had already been removed resulting in an error (e.g. by an external podman rm -f) (#11633).
- Fixed a bug where the podman generate kube command would add default environment variables to generated YAML.
- Fixed a bug where the podman generate kube command would add the default CMD from the image to generated YAML (#11672).
- Fixed a bug where the podman rm --storage command could fail to remove containers under some circumstances (#11207).
- Fixed a bug where the podman machine ssh command could fail when run on Linux (#11731).
- Fixed a bug where the podman stop command would error when used on a container that was already stopped (#11740).
- Fixed a bug where renaming a container in a pod using the podman rename command, then removing the pod using podman pod rm, could cause Podman to believe the new name of the container was permanently in use, despite the container being removed (#11750).
* API
- The Libpod Pull endpoint for Images now has a new query parameter, quiet, which (when set to true) suppresses image pull progress reports (#10612).
- The Compat Events endpoint now includes several deprecated fields from the Docker v1.21 API for improved compatibility with older clients.
- The Compat List and Inspect endpoints for Images now prefix image IDs with sha256: for improved Docker compatibility (#11623).
- The Compat Create endpoint for Containers now properly sets defaults for healthcheck-related fields (#11225).
- The Compat Create endpoint for Containers now supports volume options provided by the Mounts field (#10831).
- The Compat List endpoint for Secrets now supports a new query parameter, filter, which allows returned results to be filtered.
- The Compat Auth endpoint now returns the correct response code (500 instead of 400) when logging into a registry fails.
- The Version endpoint now includes information about the OCI runtime and Conmon in use (#11227).
- Fixed a bug where the X-Registry-Config header was not properly handled, leading to errors when pulling images (#11235).
- Fixed a bug where invalid query parameters could cause a null pointer dereference when creating error messages.
- Logging of API requests and responses at trace level has been greatly improved, including the addition of an X-Reference-Id header to correlate requests and responses (#10053).
* Misc
- Updated Buildah to v1.23.0
- Updated the containers/storage library to v1.36.0
- Updated the containers/image library to v5.16.0
- Updated the containers/common library to v0.44.0
==== polkit ====
Subpackages: typelib-1_0-Polkit-1_0
- fork libpolkit0 package into libpolkit-agent-1-0 and libpolkit-gobject-1-0
as mandated. bsc#1191781
==== python-Mako ====
Version update (1.1.4 -> 1.1.5)
- update to 1.1.5:
* Fixed some issues with running the test suite which would
be revealed by running tests in random order.
- Remove obsolete %suse_version %if
- Added BuildRequires: alts
- Use libalternatives instead of update-alternatives.
==== python-cryptography ====
Version update (3.3.2 -> 3.4.8)
- Add disable-RustExtension.patch in order to avoid a build
requirement setuptools_rust
- Next version (35.0) needs a full Rust toolchain.
- Clean runtime, build and test requirements
- Disable python2 build: Not supported anymore
- update to 3.4.8
- keep new rust support disabled for now to avoid new dependencies
==== python-jsonpatch ====
- Fix requirements
- Added BuildRequires: alts
- Use libalternatives instead of update-alternatives.
==== python-numpy ====
- The update- and libalternatives logic is required in the standard
build, not the hpc flavor
- Use libalternatives instead of update-alternatives.
==== python-pandas ====
Version update (1.3.3 -> 1.3.4)
- Update to version 1.3.4
* Fixed regression in DataFrame.convert_dtypes() incorrectly
converts byte strings to strings (GH43183)
* Fixed regression in GroupBy.agg() where it was failing
silently with mixed data types along axis=1 and MultiIndex (GH43209)
* Fixed regression in merge() with integer and NaN keys
failing with outer merge (GH43550)
* Fixed regression in DataFrame.corr() raising ValueError with
method="spearman" on 32-bit platforms (GH43588)
* Fixed performance regression in MultiIndex.equals() (GH43549)
* Fixed performance regression in GroupBy.first() and GroupBy.last()
with StringDtype (GH41596)
* Fixed regression in Series.cat.reorder_categories() failing to
update the categories on the Series (GH43232)
* Fixed regression in Series.cat.categories() setter failing to
update the categories on the Series (GH43334)
* Fixed regression in read_csv() raising UnicodeDecodeError exception
when memory_map=True (GH43540)
* Fixed regression in DataFrame.explode() raising AssertionError
when column is any scalar which is not a string (GH43314)
* Fixed regression in Series.aggregate() attempting to pass args
and kwargs multiple times to the user supplied func in certain cases (GH43357)
* Fixed regression when iterating over a DataFrame.groupby.rolling
object causing the resulting DataFrames to have an incorrect index if the input groupings were not sorted (GH43386)
* Fixed regression in DataFrame.groupby.rolling.cov() and
DataFrame.groupby.rolling.corr() computing incorrect results if the
input groupings were not sorted (GH43386)
* Fixed bug in pandas.DataFrame.groupby.rolling() and
pandas.api.indexers.FixedForwardWindowIndexer leading to
segfaults and window endpoints being mixed across groups (GH43267)
* Fixed bug in GroupBy.mean() with datetimelike values
including NaT values returning incorrect results (GH43132)
* Fixed bug in Series.aggregate() not passing the first args
to the user supplied func in certain cases (GH43357)
* Fixed memory leaks in Series.rolling.quantile() and
Series.rolling.median() (GH43339)
==== python38 ====
- BuildRequire rpm-build-python: The provider to inject python(abi)
has been moved there. rpm-build pulls rpm-build-python
automatically in when building anything against python3-base, but
this implies that the initial build of python3-base does not
trigger the automatic installation.
==== python38-core ====
Subpackages: libpython3_8-1_0 python38-base
- BuildRequire rpm-build-python: The provider to inject python(abi)
has been moved there. rpm-build pulls rpm-build-python
automatically in when building anything against python3-base, but
this implies that the initial build of python3-base does not
trigger the automatic installation.
==== rpm ====
Version update (4.16.1.3 -> 4.17.0)
- update to rpm-4.17.0
- dropped support for berkeley db
- archive unpacking failures no longer leave garbage
- unified built-in and user-define macro syntax and calling conventions
- python generators and debuginfo extraction has been split into a
separate upstream project
- support for ed25519 signatures
- easier rpm macro access in lua
- new patches:
* python-rpm-packaging.diff
* singlefilemode.diff
* verbosearg.diff
- modified patches:
* usr-lib-sysimage-rpm.patch
* localetag.diff
* brp.diff
* findlang.diff
* macrosin.diff
* rpmqpack.diff
* build.diff
* whatrequires-doc.diff
* remove-brp-strips.diff
* fileattrs.diff
* langnoc.diff
* find-lang-qt-qm.patch
* findsupplements.diff
* finddebuginfo.diff
* finddebuginfo-absolute-links.diff
* debugsubpkg.diff
* debuglink.diff
* debuginfo-mono.patch
- dropped patches:
* db.diff
* dbfsync.diff
* dbprivate.diff
* dwarf5.diff
* ndbglue.diff
* pythondistdeps.diff
* suspendlock.diff
* taggedfileindex.diff
* waitlock.diff
* add-dwz-single-file-mode-option.patch
==== rpm-config-SUSE ====
Version update (0.g83 -> 0.g89)
- Update to version 0.g89:
* find-provides.ksyms: Do not set IFS - it is not needed for anything.
* find-provides.ksyms: Fix compressed modules.
* Allow locale directory to be named "locales" too
==== systemd-rpm-macros ====
- Use %{load:} instead of %{?load:}: fix build with RPM 4.17.
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
grub2
kernel-source (5.14.11 -> 5.14.14)
podman (3.3.1 -> 3.4.1)
polkit
python-Mako (1.1.4 -> 1.1.5)
python-cryptography (3.3.2 -> 3.4.8)
python-jsonpatch
python-numpy
python-pandas (1.3.3 -> 1.3.4)
python-rpm (4.16.1.3 -> 4.17.0)
python38
python38-core
rpm (4.16.1.3 -> 4.17.0)
rpm-config-SUSE (0.g83 -> 0.g89)
systemd-rpm-macros
=== Details ===
==== grub2 ====
Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-x86_64-efi
- Fix installation on usrmerged s390x
==== kernel-source ====
Version update (5.14.11 -> 5.14.14)
- Update
patches.kernel.org/5.14.14-060-x86-fpu-Mask-out-the-invalid-MXCSR-bits-prop…
(bsc#1012628 bsc#1191855).
- commit 2b5383f
- Linux 5.14.14 (bsc#1012628).
- ALSA: usb-audio: Add quirk for VF0770 (bsc#1012628).
- ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat
ioctl (bsc#1012628).
- ALSA: usb-audio: Fix a missing error check in scarlett gen2
mixer (bsc#1012628).
- ALSA: seq: Fix a potential UAF by wrong private_free call order
(bsc#1012628).
- ALSA: hda/realtek: Enable 4-speaker output for Dell Precision
5560 laptop (bsc#1012628).
- ALSA: hda - Enable headphone mic on Dell Latitude laptops with
ALC3254 (bsc#1012628).
- ALSA: hda/realtek: Complete partial device name to avoid
ambiguity (bsc#1012628).
- ALSA: hda/realtek: Add quirk for Clevo X170KM-G (bsc#1012628).
- ALSA: hda/realtek - ALC236 headset MIC recording issue
(bsc#1012628).
- ALSA: hda/realtek: Add quirk for TongFang PHxTxX1 (bsc#1012628).
- ALSA: hda/realtek: Fix for quirk to enable speaker output on
the Lenovo 13s Gen2 (bsc#1012628).
- ALSA: hda/realtek: Fix the mic type detection issue for ASUS
G551JW (bsc#1012628).
- platform/x86: gigabyte-wmi: add support for B550 AORUS ELITE
AX V2 (bsc#1012628).
- platform/x86: amd-pmc: Add alternative acpi id for PMC
controller (bsc#1012628).
- spi: atmel: Fix PDC transfer setup bug (bsc#1012628).
- mtd: rawnand: qcom: Update code word value for raw read
(bsc#1012628).
- nds32/ftrace: Fix Error: invalid operands (*UND* and *UND*
sections) for `^' (bsc#1012628).
- dm: fix mempool NULL pointer race when completing IO
(bsc#1012628).
- ACPI: PM: Include alternate AMDI0005 id in special behaviour
(bsc#1012628).
- dm rq: don't queue request to blk-mq during DM suspend
(bsc#1012628).
- s390: fix strrchr() implementation (bsc#1012628).
- clk: socfpga: agilex: fix duplicate s2f_user0_clk (bsc#1012628).
- csky: don't let sigreturn play with priveleged bits of status
register (bsc#1012628).
- csky: Fixup regs.sr broken in ptrace (bsc#1012628).
- drm/fbdev: Clamp fbdev surface size if too large (bsc#1012628).
- arm64/hugetlb: fix CMA gigantic page order for non-4K PAGE_SIZE
(bsc#1012628).
- drm/nouveau/fifo: Reinstate the correct engine bit programming
(bsc#1012628).
- drm/msm: Do not run snapshot on non-DPU devices (bsc#1012628).
- drm/msm: Avoid potential overflow in timeout_to_jiffies()
(bsc#1012628).
- btrfs: unlock newly allocated extent buffer after error
(bsc#1012628).
- btrfs: deal with errors when replaying dir entry during log
replay (bsc#1012628).
- btrfs: deal with errors when adding inode reference during
log replay (bsc#1012628).
- btrfs: check for error when looking up inode during dir entry
replay (bsc#1012628).
- btrfs: update refs for any root except tree log roots
(bsc#1012628).
- btrfs: fix abort logic in btrfs_replace_file_extents
(bsc#1012628).
- module: fix clang CFI with MODULE_UNLOAD=n (bsc#1012628).
- x86/resctrl: Free the ctrlval arrays when
domain_setup_mon_state() fails (bsc#1012628).
- mei: me: add Ice Lake-N device id (bsc#1012628).
- mei: hbm: drop hbm responses on early shutdown (bsc#1012628).
- USB: xhci: dbc: fix tty registration race (bsc#1012628).
- xhci: guard accesses to ep_state in xhci_endpoint_reset()
(bsc#1012628).
- xhci: add quirk for host controllers that don't update endpoint
DCS (bsc#1012628).
- xhci: Fix command ring pointer corruption while aborting a
command (bsc#1012628).
- xhci: Enable trust tx length quirk for Fresco FL11 USB
controller (bsc#1012628).
- cb710: avoid NULL pointer subtraction (bsc#1012628).
- efi/cper: use stack buffer for error record decoding
(bsc#1012628).
- efi: Change down_interruptible() in virt_efi_reset_system()
to down_trylock() (bsc#1012628).
- usb: musb: dsps: Fix the probe error path (bsc#1012628).
- Input: xpad - add support for another USB ID of Nacon GC-100
(bsc#1012628).
- USB: serial: qcserial: add EM9191 QDL support (bsc#1012628).
- USB: serial: option: add Quectel EC200S-CN module support
(bsc#1012628).
- USB: serial: option: add Telit LE910Cx composition 0x1204
(bsc#1012628).
- USB: serial: option: add prod. id for Quectel EG91
(bsc#1012628).
- misc: fastrpc: Add missing lock before accessing find_vma()
(bsc#1012628).
- virtio: write back F_VERSION_1 before validate (bsc#1012628).
- EDAC/armada-xp: Fix output of uncorrectable error counter
(bsc#1012628).
- nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
(bsc#1012628).
- virtio-blk: remove unneeded "likely" statements (bsc#1012628).
- Revert "virtio-blk: Add validation for block size in config
space" (bsc#1012628).
- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT
automatically (bsc#1012628).
- powerpc/xive: Discard disabled interrupts in get_irqchip_state()
(bsc#1012628).
- iio: adc: aspeed: set driver data when adc probe (bsc#1012628).
- drivers: bus: simple-pm-bus: Add support for probing simple
bus only devices (bsc#1012628).
- driver core: Reject pointless SYNC_STATE_ONLY device links
(bsc#1012628).
- iio: adc: ad7192: Add IRQ flag (bsc#1012628).
- iio: adc: ad7780: Fix IRQ flag (bsc#1012628).
- iio: adc: ad7793: Fix IRQ flag (bsc#1012628).
- iio: adis16480: fix devices that do not support sleep mode
(bsc#1012628).
- iio: adc128s052: Fix the error handling path of 'adc128_probe()'
(bsc#1012628).
- iio: adc: max1027: Fix wrong shift with 12-bit devices
(bsc#1012628).
- iio: adis16475: fix deadlock on frequency set (bsc#1012628).
- iio: mtk-auxadc: fix case IIO_CHAN_INFO_PROCESSED (bsc#1012628).
- iio: light: opt3001: Fixed timeout error when 0 lux
(bsc#1012628).
- iio: accel: fxls8962af: return IRQ_HANDLED when fifo is flushed
(bsc#1012628).
- iio: adc: max1027: Fix the number of max1X31 channels
(bsc#1012628).
- iio: ssp_sensors: add more range checking in
ssp_parse_dataframe() (bsc#1012628).
- iio: ssp_sensors: fix error code in ssp_print_mcu_debug()
(bsc#1012628).
- Input: resistive-adc-touch - fix division by zero error on z1 ==
0 (bsc#1012628).
- eeprom: 93xx46: Add SPI device ID table (bsc#1012628).
- eeprom: 93xx46: fix MODULE_DEVICE_TABLE (bsc#1012628).
- eeprom: at25: Add SPI ID table (bsc#1012628).
- fpga: ice40-spi: Add SPI device ID table (bsc#1012628).
- iio: dac: ti-dac5571: fix an error code in probe()
(bsc#1012628).
- tracing: Fix missing osnoise tracer on max_latency
(bsc#1012628).
- tee: optee: Fix missing devices unregister during optee_remove
(bsc#1012628).
- ARM: dts: bcm2711-rpi-4-b: Fix usb's unit address (bsc#1012628).
- ARM: dts: bcm283x: Fix VEC address for BCM2711 (bsc#1012628).
- ARM: dts: bcm2711: fix MDIO #address- and #size-cells
(bsc#1012628).
- firmware: arm_ffa: Fix __ffa_devices_unregister (bsc#1012628).
- firmware: arm_ffa: Add missing remove callback to ffa_bus_type
(bsc#1012628).
- ARM: dts: bcm2711-rpi-4-b: fix sd_io_1v8_reg regulator states
(bsc#1012628).
- ARM: dts: bcm2711-rpi-4-b: Fix pcie0's unit address formatting
(bsc#1012628).
- clk: renesas: rzg2l: Fix clk status function (bsc#1012628).
- nvme-pci: Fix abort command id (bsc#1012628).
- sctp: account stream padding length for reconf chunk
(bsc#1012628).
- gpio: 74x164: Add SPI device ID table (bsc#1012628).
- gpio: pca953x: Improve bias setting (bsc#1012628).
- net: arc: select CRC32 (bsc#1012628).
- net: korina: select CRC32 (bsc#1012628).
- net/smc: improved fix wait on already cleared link
(bsc#1012628).
- net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
(bsc#1012628).
- net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp
(bsc#1012628).
- net/mlx5e: Switchdev representors are not vlan challenged
(bsc#1012628).
- net: stmmac: fix get_hw_feature() on old hardware (bsc#1012628).
- net: phy: Do not shutdown PHYs in READY state (bsc#1012628).
- net: dsa: mv88e6xxx: don't use PHY_DETECT on internal PHY's
(bsc#1012628).
- net: dsa: microchip: Added the condition for scheduling
ksz_mib_read_work (bsc#1012628).
- net: dsa: fix spurious error message when unoffloaded port
leaves bridge (bsc#1012628).
- net: encx24j600: check error in devm_regmap_init_encx24j600
(bsc#1012628).
- ethernet: s2io: fix setting mac address during resume
(bsc#1012628).
- vhost-vdpa: Fix the wrong input in config_cb (bsc#1012628).
- nfc: fix error handling of nfc_proto_register() (bsc#1012628).
- NFC: digital: fix possible memory leak in
digital_tg_listen_mdaa() (bsc#1012628).
- NFC: digital: fix possible memory leak in
digital_in_send_sdd_req() (bsc#1012628).
- pata_legacy: fix a couple uninitialized variable bugs
(bsc#1012628).
- ata: ahci_platform: fix null-ptr-deref in
ahci_platform_enable_regulators() (bsc#1012628).
- mlxsw: thermal: Fix out-of-bounds memory accesses (bsc#1012628).
- platform/mellanox: mlxreg-io: Fix argument base in kstrtou32()
call (bsc#1012628).
- platform/mellanox: mlxreg-io: Fix read access of n-bytes size
attributes (bsc#1012628).
- spi: spidev: Add SPI ID table (bsc#1012628).
- spi: bcm-qspi: clear MSPI spifie interrupt during probe
(bsc#1012628).
- drm/panel: olimex-lcd-olinuxino: select CRC32 (bsc#1012628).
- drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks
read (bsc#1012628).
- drm/msm: Fix null pointer dereference on pointer edp
(bsc#1012628).
- drm/msm/mdp5: fix cursor-related warnings (bsc#1012628).
- drm/msm/submit: fix overflow check on 64-bit architectures
(bsc#1012628).
- drm/msm/a6xx: Track current ctx by seqno (bsc#1012628).
- drm/msm/a4xx: fix error handling in a4xx_gpu_init()
(bsc#1012628).
- drm/msm/a3xx: fix error handling in a3xx_gpu_init()
(bsc#1012628).
- drm/msm/dsi: dsi_phy_14nm: Take ready-bit into account in
poll_for_ready (bsc#1012628).
- drm/msm/dsi: Fix an error code in msm_dsi_modeset_init()
(bsc#1012628).
- drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling
(bsc#1012628).
- acpi/arm64: fix next_platform_timer() section mismatch error
(bsc#1012628).
- platform/x86: intel_scu_ipc: Fix busy loop expiry time
(bsc#1012628).
- mqprio: Correct stats in mqprio_dump_class_stats()
(bsc#1012628).
- mptcp: fix possible stall on recvmsg() (bsc#1012628).
- qed: Fix missing error code in qed_slowpath_start()
(bsc#1012628).
- r8152: select CRC32 and CRYPTO/CRYPTO_HASH/CRYPTO_SHA256
(bsc#1012628).
- ice: fix locking for Tx timestamp tracking flush (bsc#1012628).
- block/rnbd-clt-sysfs: fix a couple uninitialized variable bugs
(bsc#1012628).
- nfp: flow_offload: move flow_indr_dev_register from app init
to app start (bsc#1012628).
- net: mscc: ocelot: make use of all 63 PTP timestamp identifiers
(bsc#1012628).
- net: mscc: ocelot: avoid overflowing the PTP timestamp FIFO
(bsc#1012628).
- net: mscc: ocelot: warn when a PTP IRQ is raised for an unknown
skb (bsc#1012628).
- net: mscc: ocelot: deny TX timestamping of non-PTP packets
(bsc#1012628).
- net: mscc: ocelot: cross-check the sequence id from the
timestamp FIFO with the skb PTP header (bsc#1012628).
- net: dsa: felix: break at first CPU port during init and
teardown (bsc#1012628).
- ionic: don't remove netdev->dev_addr when syncing uc list
(bsc#1012628).
- commit 6859230
- media: firewire: firedtv-avc: fix a buffer overflow in
avc_ca_pmt() (CVE-2021-3542 bsc#1184673).
- commit 08ab8da
- x86/fpu: Mask out the invalid MXCSR bits properly (x86_32
breakage).
- commit 565cd48
- rpm/kernel-obs-build.spec.in: reduce initrd functionality
For building in OBS, we always build inside a virtual machine
that gets a new, freshly created scratch filesystem image. So
we do not need to handle fscks because that ain't gonna happen,
as well as not we do not need to handle microcode update in the
initrd as these only can be run on the host system anyway. We
can also strip and hardlink as an additional optimisation that
should not significantly hurt.
- commit c72c6fc
- Update upstream commit id for rtw89 patch (bsc#1191321)
- commit 8dccb66
- Linux 5.14.13 (bsc#1012628).
- hwmon: (pmbus/ibm-cffps) max_power_out swap changes
(bsc#1012628).
- io_uring: kill fasync (bsc#1012628).
- sched: Always inline is_percpu_thread() (bsc#1012628).
- perf/core: fix userpage->time_enabled of inactive events
(bsc#1012628).
- scsi: qla2xxx: Fix excessive messages during device logout
(bsc#1012628).
- scsi: virtio_scsi: Fix spelling mistake "Unsupport" ->
"Unsupported" (bsc#1012628).
- scsi: ses: Fix unsigned comparison with less than zero
(bsc#1012628).
- drm/amdgpu: fix gart.bo pin_count leak (bsc#1012628).
- net: sun: SUNVNET_COMMON should depend on INET (bsc#1012628).
- vboxfs: fix broken legacy mount signature checking
(bsc#1012628).
- net: bgmac-platform: handle mac-address deferral (bsc#1012628).
- mac80211: check return value of rhashtable_init (bsc#1012628).
- net: prevent user from passing illegal stab size (bsc#1012628).
- hwmon: (ltc2947) Properly handle errors when looking for the
external clock (bsc#1012628).
- m68k: Handle arrivals of multiple signals correctly
(bsc#1012628).
- pinctrl: qcom: sc7280: Add PM suspend callbacks (bsc#1012628).
- mac80211: Drop frames from invalid MAC address in ad-hoc mode
(bsc#1012628).
- netfilter: nf_nat_masquerade: defer conntrack walk to work queue
(bsc#1012628).
- netfilter: nf_nat_masquerade: make async masq_inet6_event
handling generic (bsc#1012628).
- KVM: arm64: nvhe: Fix missing FORCE for hyp-reloc.S build rule
(bsc#1012628).
- ASoC: SOF: loader: release_firmware() on load failure to avoid
batching (bsc#1012628).
- HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device
IDs (bsc#1012628).
- netfilter: ip6_tables: zero-initialize fragment offset
(bsc#1012628).
- HID: apple: Fix logical maximum and usage maximum of Magic
Keyboard JIS (bsc#1012628).
- ALSA: usb-audio: Unify mixer resume and reset_resume procedure
(bsc#1012628).
- ALSA: oxfw: fix transmission method for Loud models based on
OXFW971 (bsc#1012628).
- ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic
(bsc#1012628).
- ext4: correct the error path of ext4_write_inline_data_end()
(bsc#1012628).
- ext4: check and update i_disksize properly (bsc#1012628).
- commit ab3ca44
- kernel-spec-macros: Since rpm 4.17 %verbose is unusable (bsc#1191229).
The semantic changed in an incompatible way so invoking the macro now
causes a build failure.
- commit 3e55f55
- Linux 5.14.12 (bsc#1012628).
- dsa: tag_dsa: Fix mask for trunked packets (bsc#1012628).
- x86/hpet: Use another crystalball to evaluate HPET usability
(bsc#1012628).
- x86/entry: Clear X86_FEATURE_SMAP when CONFIG_X86_SMAP=n
(bsc#1012628).
- x86/entry: Correct reference to intended CONFIG_64_BIT
(bsc#1012628).
- x86/fpu: Restore the masking out of reserved MXCSR bits
(bsc#1012628).
- x86/sev: Return an error on a returned non-zero
SW_EXITINFO1[31:0] (bsc#1012628).
- x86/Kconfig: Correct reference to MWINCHIP3D (bsc#1012628).
- x86/platform/olpc: Correct ifdef symbol to intended
CONFIG_OLPC_XO15_SCI (bsc#1012628).
- pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init
(bsc#1012628).
- powerpc/32s: Fix kuap_kernel_restore() (bsc#1012628).
- powerpc/64s: Fix unrecoverable MCE calling async handler from
NMI (bsc#1012628).
- powerpc/traps: do not enable irqs in _exception (bsc#1012628).
- powerpc/64s: fix program check interrupt emergency stack path
(bsc#1012628).
- powerpc/bpf ppc32: Fix BPF_SUB when imm == 0x80000000
(bsc#1012628).
- powerpc/bpf ppc32: Do not emit zero extend instruction for
64-bit BPF_END (bsc#1012628).
- powerpc/bpf ppc32: Fix JMP32_JSET_K (bsc#1012628).
- powerpc/bpf ppc32: Fix ALU32 BPF_ARSH operation (bsc#1012628).
- powerpc/bpf: Fix BPF_SUB when imm == 0x80000000 (bsc#1012628).
- powerpc/bpf: Fix BPF_MOD when imm == 1 (bsc#1012628).
- objtool: Make .altinstructions section entry size consistent
(bsc#1012628).
- objtool: Remove reloc symbol type checks in get_alt_entry()
(bsc#1012628).
- scsi: iscsi: Fix iscsi_task use after free (bsc#1012628).
- RISC-V: Include clone3() on rv32 (bsc#1012628).
- i2c: mlxcpld: Modify register setting for 400KHz frequency
(bsc#1012628).
- i2c: mlxcpld: Fix criteria for frequency setting (bsc#1012628).
- bpf, s390: Fix potential memory leak about jit_data
(bsc#1012628).
- riscv/vdso: make arch_setup_additional_pages wait for mmap_sem
for write killable (bsc#1012628).
- riscv/vdso: Move vdso data page up front (bsc#1012628).
- riscv/vdso: Refactor asm/vdso.h (bsc#1012628).
- RISC-V: Fix VDSO build for !MMU (bsc#1012628).
- riscv: explicitly use symbol offsets for VDSO (bsc#1012628).
- i2c: mediatek: Add OFFSET_EXT_CONF setting back (bsc#1012628).
- i2c: acpi: fix resource leak in reconfiguration device addition
(bsc#1012628).
- powerpc/iommu: Report the correct most efficient DMA mask for
PCI devices (bsc#1012628).
- net: prefer socket bound to interface when not in VRF
(bsc#1012628).
- iavf: fix double unlock of crit_lock (bsc#1012628).
- i40e: Fix freeing of uninitialized misc IRQ vector
(bsc#1012628).
- i40e: fix endless loop under rtnl (bsc#1012628).
- gve: report 64bit tx_bytes counter from
gve_handle_report_stats() (bsc#1012628).
- gve: fix gve_get_stats() (bsc#1012628).
- rtnetlink: fix if_nlmsg_stats_size() under estimation
(bsc#1012628).
- gve: Properly handle errors in gve_assign_qpl (bsc#1012628).
- gve: Avoid freeing NULL pointer (bsc#1012628).
- gve: Correct available tx qpl check (bsc#1012628).
- net: stmmac: trigger PCS EEE to turn off on link down
(bsc#1012628).
- net: pcs: xpcs: fix incorrect steps on disable EEE
(bsc#1012628).
- drm/nouveau/debugfs: fix file release memory leak (bsc#1012628).
- drm/nouveau/kms/nv50-: fix file release memory leak
(bsc#1012628).
- drm/nouveau: avoid a use-after-free when BO init fails
(bsc#1012628).
- video: fbdev: gbefb: Only instantiate device when built for IP32
(bsc#1012628).
- drm/panel: abt-y030xx067a: yellow tint fix (bsc#1012628).
- drm/nouveau/fifo/ga102: initialise chid on return from channel
creation (bsc#1012628).
- drm/sun4i: dw-hdmi: Fix HDMI PHY clock setup (bsc#1012628).
- bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893
(bsc#1012628).
- perf jevents: Free the sys_event_tables list after processing
entries (bsc#1012628).
- drm/amdgpu: handle the case of pci_channel_io_frozen only in
amdgpu_pci_resume (bsc#1012628).
- drm/amdkfd: fix a potential ttm->sg memory leak (bsc#1012628).
- ARM: defconfig: gemini: Restore framebuffer (bsc#1012628).
- netlink: annotate data races around nlk->bound (bsc#1012628).
- net: pcs: xpcs: fix incorrect CL37 AN sequence (bsc#1012628).
- net: sfp: Fix typo in state machine debug string (bsc#1012628).
- net/sched: sch_taprio: properly cancel timer from
taprio_destroy() (bsc#1012628).
- net: bridge: fix under estimation in br_get_linkxstats_size()
(bsc#1012628).
- net: bridge: use nla_total_size_64bit() in
br_get_linkxstats_size() (bsc#1012628).
- afs: Fix afs_launder_page() to set correct start file position
(bsc#1012628).
- netfs: Fix READ/WRITE confusion when calling iov_iter_xarray()
(bsc#1012628).
- drm/i915/bdb: Fix version check (bsc#1012628).
- drm/i915/tc: Fix TypeC port init/resume time sanitization
(bsc#1012628).
- drm/i915/jsl: Add W/A 1409054076 for JSL (bsc#1012628).
- drm/i915/audio: Use BIOS provided value for RKL HDA link
(bsc#1012628).
- ARM: imx6: disable the GIC CPU interface before calling
stby-poweroff sequence (bsc#1012628).
- dt-bindings: drm/bridge: ti-sn65dsi86: Fix reg value
(bsc#1012628).
- arm64: dts: ls1028a: fix eSDHC2 node (bsc#1012628).
- arm64: dts: imx8mm-kontron-n801x-som: do not allow to switch
off buck2 (bsc#1012628).
- arm64: dts: imx8: change the spi-nor tx (bsc#1012628).
- ARM: dts: imx: change the spi-nor tx (bsc#1012628).
- ptp_pch: Load module automatically if ID matches (bsc#1012628).
- powerpc/fsl/dts: Fix phy-connection-type for fm1mac3
(bsc#1012628).
- netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in
event notification (bsc#1012628).
- MIPS: Revert "add support for buggy MT7621S core detection"
(bsc#1012628).
- net: stmmac: dwmac-rk: Fix ethernet on rk3399 based devices
(bsc#1012628).
- net: mscc: ocelot: fix VCAP filters remaining active after
being deleted (bsc#1012628).
- net_sched: fix NULL deref in fifo_set_limit() (bsc#1012628).
- libbpf: Fix memory leak in strset (bsc#1012628).
- phy: mdio: fix memory leak (bsc#1012628).
- libbpf: Fix segfault in light skeleton for objects without BTF
(bsc#1012628).
- net/mlx5e: Fix the presented RQ index in PTP stats
(bsc#1012628).
- net/mlx5: Fix setting number of EQs of SFs (bsc#1012628).
- net/mlx5: Fix length of irq_index in chars (bsc#1012628).
- net/mlx5: Avoid generating event after PPS out in Real time mode
(bsc#1012628).
- net/mlx5: Force round second at 1PPS out start time
(bsc#1012628).
- net/mlx5: E-Switch, Fix double allocation of acl flow counter
(bsc#1012628).
- net/mlx5e: Keep the value for maximum number of channels in-sync
(bsc#1012628).
- net/mlx5e: IPSEC RX, enable checksum complete (bsc#1012628).
- bpf: Fix integer overflow in prealloc_elems_and_freelist()
(bsc#1012628).
- soc: ti: omap-prm: Fix external abort for am335x pruss
(bsc#1012628).
- bpf, arm: Fix register clobbering in div/mod implementation
(bsc#1012628).
- netfilter: nf_tables: reverse order in rule replacement
expansion (bsc#1012628).
- netfilter: nf_tables: add position handle in event notification
(bsc#1012628).
- netfilter: conntrack: fix boot failure with
nf_conntrack.enable_hooks=1 (bsc#1012628).
- iwlwifi: pcie: add configuration of a Wi-Fi adapter on Dell
XPS 15 (bsc#1012628).
- xtensa: call irqchip_init only when CONFIG_USE_OF is selected
(bsc#1012628).
- xtensa: use CONFIG_USE_OF instead of CONFIG_OF (bsc#1012628).
- arm64: dts: qcom: pm8150: use qcom,pm8998-pon binding
(bsc#1012628).
- ath5k: fix building with LEDS=m (bsc#1012628).
- PCI: hv: Fix sleep while in non-sleep context when removing
child devices from the bus (bsc#1012628).
- ARM: dts: imx6qdl-pico: Fix Ethernet support (bsc#1012628).
- ARM: dts: imx: Fix USB host power regulator polarity on M53Menlo
(bsc#1012628).
- ARM: dts: imx: Add missing pinctrl-names for panel on M53Menlo
(bsc#1012628).
- soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment
(bsc#1012628).
- iwlwifi: mvm: Fix possible NULL dereference (bsc#1012628).
- ARM: at91: pm: do not panic if ram controllers are not enabled
(bsc#1012628).
- Revert "arm64: dts: qcom: sc7280: Fixup the cpufreq node"
(bsc#1012628).
- ARM: dts: qcom: apq8064: Use 27MHz PXO clock as DSI PLL
reference (bsc#1012628).
- soc: qcom: socinfo: Fixed argument passed to platform_set_data()
(bsc#1012628).
- bus: ti-sysc: Add break in switch statement in sysc_init_soc()
(bsc#1012628).
- riscv: Flush current cpu icache before other cpus (bsc#1012628).
- scsi: ufs: core: Fix task management completion (bsc#1012628).
- ARM: dts: qcom: apq8064: use compatible which contains chipid
(bsc#1012628).
- ARM: dts: imx6dl-yapp4: Fix lp5562 LED driver probe
(bsc#1012628).
- ARM: dts: omap3430-sdp: Fix NAND device node (bsc#1012628).
- xen/balloon: fix cancelled balloon action (bsc#1012628).
- SUNRPC: fix sign error causing rpcsec_gss drops (bsc#1012628).
- nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero
(bsc#1012628).
- nfsd: fix error handling of register_pernet_subsys() in
init_nfsd() (bsc#1012628).
- ovl: fix IOCB_DIRECT if underlying fs doesn't support direct IO
(bsc#1012628).
- ovl: fix missing negative dentry check in ovl_rename()
(bsc#1012628).
- fbdev: simplefb: fix Kconfig dependencies (bsc#1012628).
- Update config files.
- mmc: sdhci-of-at91: replace while loop with read_poll_timeout
(bsc#1012628).
- mmc: sdhci-of-at91: wait for calibration done before proceed
(bsc#1012628).
- mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk
(bsc#1012628).
- xen/privcmd: fix error handling in mmap-resource processing
(bsc#1012628).
- drm/i915: Extend the async flip VT-d w/a to skl/bxt
(bsc#1012628).
- drm/i915: Fix runtime pm handling in i915_gem_shrink
(bsc#1012628).
- drm/amd/display: Fix DCN3 B0 DP Alt Mapping (bsc#1012628).
- drm/amd/display: Fix detection of 4 lane for DPALT
(bsc#1012628).
- drm/amd/display: Limit display scaling to up to 4k for DCN 3.1
(bsc#1012628).
- drm/nouveau/ga102-: support ttm buffer moves via copy engine
(bsc#1012628).
- drm/nouveau/kms/tu102-: delay enabling cursor until after
assign_windows (bsc#1012628).
- drm/amdgpu: During s0ix don't wait to signal GFXOFF
(bsc#1012628).
- drm/amd/display: USB4 bring up set correct address
(bsc#1012628).
- drm/amd/display: Fix B0 USB-C DP Alt mode (bsc#1012628).
- usb: typec: tipd: Remove dependency on "connector" child fwnode
(bsc#1012628).
- usb: typec: tcpm: handle SRC_STARTUP state if cc changes
(bsc#1012628).
- usb: typec: tcpci: don't handle vSafe0V event if it's not
enabled (bsc#1012628).
- USB: cdc-acm: fix break reporting (bsc#1012628).
- USB: cdc-acm: fix racy tty buffer accesses (bsc#1012628).
- usb: gadget: f_uac2: fixed EP-IN wMaxPacketSize (bsc#1012628).
- usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle
(bsc#1012628).
- usb: cdc-wdm: Fix check for WWAN (bsc#1012628).
- Partially revert "usb: Kconfig: using select for USB_COMMON
dependency" (bsc#1012628).
- Update config files.
- commit 7246625
- rtw89: add Realtek 802.11ax driver (bsc#1191321).
- commit 4c399ab
- Enable CONFIG_RTW88_DEBUG and CONFIG_RTW89_DEBUG on debug flavors (bsc#1191321)
- commit a76143b
==== podman ====
Version update (3.3.1 -> 3.4.1)
Subpackages: podman-cni-config
- Update to version 3.4.1:
* Bugfixes
- Fixed a bug where podman machine init could, under some circumstances,
create invalid machine configurations which could not be started (#11824).
- Fixed a bug where the podman machine list command would not properly
populate some output fields.
- Fixed a bug where podman machine rm could leave dangling sockets from
the removed machine (#11393).
- Fixed a bug where podman run --pids-limit=-1 was not supported (it now
sets the PID limit in the container to unlimited) (#11782).
- Fixed a bug where podman run and podman attach could throw errors about
a closed network connection when STDIN was closed by the client (#11856).
- Fixed a bug where the podman stop command could fail when run on a
container that had another podman stop command run on it previously.
- Fixed a bug where the --sync flag to podman ps was nonfunctional.
- Fixed a bug where the Windows and OS X remote clients' podman stats
command would fail (#11909).
- Fixed a bug where the podman play kube command did not properly handle
environment variables whose values contained an = (#11891).
- Fixed a bug where the podman generate kube command could generate
invalid annotations when run on containers with volumes that use SELinux
relabelling (:z or :Z) (#11929).
- Fixed a bug where the podman generate kube command would generate YAML
including some unnecessary (set to default) fields (e.g. user and group,
entrypoint, default protocol for forwarded ports) (#11914, #11915, and #11965).
- Fixed a bug where the podman generate kube command could, under some
circumstances, generate YAML including an invalid targetPort field for
forwarded ports (#11930).
- Fixed a bug where rootless Podman's podman info command could, under
some circumstances, not read available CGroup controllers (#11931).
- Fixed a bug where podman container checkpoint --export would fail to
checkpoint any container created with --log-driver=none (#11974).
* API
- Fixed a bug where the Compat Create endpoint for Containers could panic
when no options were passed to a bind mount of tmpfs (#11961).
- Update to version 3.4.0:
* Features
- Pods now support init containers! Init containers are containers which run before the rest of the pod starts. There are two types of init containers: "always", which always run before the pod is started, and "once", which only run the first time the pod starts and are subsequently removed. They can be added using the podman create command's --init-ctr option.
- Support for init containers has also been added to podman play kube and podman generate kube - init containers contained in Kubernetes YAML will be created as Podman init containers, and YAML generated by Podman will include any init containers created.
- The podman play kube command now supports building images. If the --build option is given and a directory with the name of the specified image exists in the current working directory and contains a valid Containerfile or Dockerfile, the image will be built and used for the container.
- The podman play kube command now supports a new option, --teardown, which removes any pods and containers created by the given Kubernetes YAML.
- The podman generate kube command now generates annotations for SELinux mount options on volume (:z and :Z) that are respected by the podman play kube command.
- A new command has been added, podman pod logs, to return logs for all containers in a pod at the same time.
- Two new commands have been added, podman volume export (to export a volume to a tar file) and podman volume import) (to populate a volume from a given tar file).
- The podman auto-update command now supports simple rollbacks. If a container fails to start after an automatic update, it will be rolled back to the previous image and restarted again.
- Pods now share their user namespace by default, and the podman pod create command now supports the --userns option. This allows rootless pods to be created with the --userns=keep-id option.
- The podman pod ps command now supports a new filter with its --filter option, until, which returns pods created before a given timestamp.
- The podman image scp command has been added. This command allows images to be transferred between different hosts.
- The podman stats command supports a new option, --interval, to specify the amount of time before the information is refreshed.
- The podman inspect command now includes ports exposed (but not published) by containers (e.g. ports from --expose when --publish-all is not specified).
- The podman inspect command now has a new boolean value, Checkpointed, which indicates that a container was stopped as a result of a podman container checkpoint operation.
- Volumes created by podman volume create now support setting quotas when run atop XFS. The size and inode options allow the maximum size and maximum number of inodes consumed by a volume to be limited.
- The podman info command now outputs information on what log drivers, network drivers, and volume plugins are available for use (#11265).
- The podman info command now outputs the current log driver in use, and the variant and codename of the distribution in use.
- The parameters of the VM created by podman machine init (amount of disk space, memory, CPUs) can now be set in containers.conf.
- The podman machine ls command now shows additional information (CPUs, memory, disk size) about VMs managed by podman machine.
- The podman ps command now includes healthcheck status in container state for containers that have healthchecks (#11527).
* Changes
- The podman build command has a new alias, podman buildx, to improve compatibility with Docker. We have already added support for many docker buildx flags to podman build and aim to continue to do so.
- Cases where Podman is run without a user session or a writable temporary files directory will now produce better error messages.
- The default log driver has been changed from file to journald. The file driver did not properly support log rotation, so this should lead to a better experience. If journald is not available on the system, Podman will automatically revert to the file.
- Podman no longer depends on ip for removing networks (#11403).
- The deprecated --macvlan flag to podman network create now warns when it is used. It will be removed entirely in the Podman 4.0 release.
- The podman machine start command now prints a message when the VM is successfully started.
- The podman stats command can now be used on containers that are paused.
- The podman unshare command will now return the exit code of the command that was run in the user namespace (assuming the command was successfully run).
- Successful healthchecks will no longer add a healthy line to the system log to reduce log spam.
- As a temporary workaround for a lack of shortname prompts in the Podman remote client, VMs created by podman machine now default to only using the docker.io registry.
* Bugfixes
- Fixed a bug where whitespace in the definition of sysctls (particularly default sysctls specified in containers.conf) would cause them to be parsed incorrectly.
- Fixed a bug where the Windows remote client improperly validated volume paths (#10900).
- Fixed a bug where the first line of logs from a container run with the journald log driver could be skipped.
- Fixed a bug where images created by podman commit did not include ports exposed by the container.
- Fixed a bug where the podman auto-update command would ignore the io.containers.autoupdate.authfile label when pulling images (#11171).
- Fixed a bug where the --workdir option to podman create and podman run could not be set to a directory where a volume was mounted (#11352).
- Fixed a bug where systemd socket-activation did not properly work with systemd-managed Podman containers (#10443).
- Fixed a bug where environment variable secrets added to a container were not available to exec sessions launched in the container.
- Fixed a bug where rootless containers could fail to start the rootlessport port-forwarding service when XDG_RUNTIME_DIR was set to a long path.
- Fixed a bug where arguments to the --systemd option to podman create and podman run were case-sensitive (#11387).
- Fixed a bug where the podman manifest rm command would also remove images referenced by the manifest, not just the manifest itself (#11344).
- Fixed a bug where the Podman remote client on OS X would not function properly if the TMPDIR environment variable was not set (#11418).
- Fixed a bug where the /etc/hosts file was not guaranteed to contain an entry for localhost (this is still not guaranteed if --net=host is used; such containers will exactly match the host's /etc/hosts) (#11411).
- Fixed a bug where the podman machine start command could print warnings about unsupported CPU features (#11421).
- Fixed a bug where the podman info command could segfault when accessing cgroup information.
- Fixed a bug where the podman logs -f command could hang when a container exited (#11461).
- Fixed a bug where the podman generate systemd command could not be used on containers that specified a restart policy (#11438).
- Fixed a bug where the remote Podman client's podman build command would fail to build containers if the UID and GID on the client were higher than 65536 (#11474).
- Fixed a bug where the remote Podman client's podman build command would fail to build containers if the context directory was a symlink (#11732).
- Fixed a bug where the --network flag to podman play kube was not properly parsed when a non-bridge network configuration was specified.
- Fixed a bug where the podman inspect command could error when the container being inspected was removed as it was being inspected (#11392).
- Fixed a bug where the podman play kube command ignored the default pod infra image specified in containers.conf.
- Fixed a bug where the --format option to podman inspect was nonfunctional under some circumstances (#8785).
- Fixed a bug where the remote Podman client's podman run and podman exec commands could skip a byte of output every 8192 bytes (#11496).
- Fixed a bug where the podman stats command would print nonsensical results if the container restarted while it was running (#11469).
- Fixed a bug where the remote Podman client would error when STDOUT was redirected on a Windows client (#11444).
- Fixed a bug where the podman run command could return 0 when the application in the container exited with 125 (#11540).
- Fixed a bug where containers with --restart=always set using the rootlessport port-forwarding service could not be restarted automatically.
- Fixed a bug where the --cgroups=split option to podman create and podman run was silently discarded if the container was part of a pod.
- Fixed a bug where the podman container runlabel command could fail if the image name given included a tag.
- Fixed a bug where Podman could add an extra 127.0.0.1 entry to /etc/hosts under some circumstances (#11596).
- Fixed a bug where the remote Podman client's podman untag command did not properly handle tags including a digest (#11557).
- Fixed a bug where the --format option to podman ps did not properly support the table argument for tabular output.
- Fixed a bug where the --filter option to podman ps did not properly handle filtering by healthcheck status (#11687).
- Fixed a bug where the podman run and podman start --attach commands could race when retrieving the exit code of a container that had already been removed resulting in an error (e.g. by an external podman rm -f) (#11633).
- Fixed a bug where the podman generate kube command would add default environment variables to generated YAML.
- Fixed a bug where the podman generate kube command would add the default CMD from the image to generated YAML (#11672).
- Fixed a bug where the podman rm --storage command could fail to remove containers under some circumstances (#11207).
- Fixed a bug where the podman machine ssh command could fail when run on Linux (#11731).
- Fixed a bug where the podman stop command would error when used on a container that was already stopped (#11740).
- Fixed a bug where renaming a container in a pod using the podman rename command, then removing the pod using podman pod rm, could cause Podman to believe the new name of the container was permanently in use, despite the container being removed (#11750).
* API
- The Libpod Pull endpoint for Images now has a new query parameter, quiet, which (when set to true) suppresses image pull progress reports (#10612).
- The Compat Events endpoint now includes several deprecated fields from the Docker v1.21 API for improved compatibility with older clients.
- The Compat List and Inspect endpoints for Images now prefix image IDs with sha256: for improved Docker compatibility (#11623).
- The Compat Create endpoint for Containers now properly sets defaults for healthcheck-related fields (#11225).
- The Compat Create endpoint for Containers now supports volume options provided by the Mounts field (#10831).
- The Compat List endpoint for Secrets now supports a new query parameter, filter, which allows returned results to be filtered.
- The Compat Auth endpoint now returns the correct response code (500 instead of 400) when logging into a registry fails.
- The Version endpoint now includes information about the OCI runtime and Conmon in use (#11227).
- Fixed a bug where the X-Registry-Config header was not properly handled, leading to errors when pulling images (#11235).
- Fixed a bug where invalid query parameters could cause a null pointer dereference when creating error messages.
- Logging of API requests and responses at trace level has been greatly improved, including the addition of an X-Reference-Id header to correlate requests and responses (#10053).
* Misc
- Updated Buildah to v1.23.0
- Updated the containers/storage library to v1.36.0
- Updated the containers/image library to v5.16.0
- Updated the containers/common library to v0.44.0
==== polkit ====
- fork libpolkit0 package into libpolkit-agent-1-0 and libpolkit-gobject-1-0
as mandated. bsc#1191781
==== python-Mako ====
Version update (1.1.4 -> 1.1.5)
- update to 1.1.5:
* Fixed some issues with running the test suite which would
be revealed by running tests in random order.
- Remove obsolete %suse_version %if
- Added BuildRequires: alts
- Use libalternatives instead of update-alternatives.
==== python-cryptography ====
Version update (3.3.2 -> 3.4.8)
- Add disable-RustExtension.patch in order to avoid a build
requirement setuptools_rust
- Next version (35.0) needs a full Rust toolchain.
- Clean runtime, build and test requirements
- Disable python2 build: Not supported anymore
- update to 3.4.8
- keep new rust support disabled for now to avoid new dependencies
==== python-jsonpatch ====
- Fix requirements
- Added BuildRequires: alts
- Use libalternatives instead of update-alternatives.
==== python-numpy ====
- The update- and libalternatives logic is required in the standard
build, not the hpc flavor
- Use libalternatives instead of update-alternatives.
==== python-pandas ====
Version update (1.3.3 -> 1.3.4)
- Update to version 1.3.4
* Fixed regression in DataFrame.convert_dtypes() incorrectly
converts byte strings to strings (GH43183)
* Fixed regression in GroupBy.agg() where it was failing
silently with mixed data types along axis=1 and MultiIndex (GH43209)
* Fixed regression in merge() with integer and NaN keys
failing with outer merge (GH43550)
* Fixed regression in DataFrame.corr() raising ValueError with
method="spearman" on 32-bit platforms (GH43588)
* Fixed performance regression in MultiIndex.equals() (GH43549)
* Fixed performance regression in GroupBy.first() and GroupBy.last()
with StringDtype (GH41596)
* Fixed regression in Series.cat.reorder_categories() failing to
update the categories on the Series (GH43232)
* Fixed regression in Series.cat.categories() setter failing to
update the categories on the Series (GH43334)
* Fixed regression in read_csv() raising UnicodeDecodeError exception
when memory_map=True (GH43540)
* Fixed regression in DataFrame.explode() raising AssertionError
when column is any scalar which is not a string (GH43314)
* Fixed regression in Series.aggregate() attempting to pass args
and kwargs multiple times to the user supplied func in certain cases (GH43357)
* Fixed regression when iterating over a DataFrame.groupby.rolling
object causing the resulting DataFrames to have an incorrect index if the input groupings were not sorted (GH43386)
* Fixed regression in DataFrame.groupby.rolling.cov() and
DataFrame.groupby.rolling.corr() computing incorrect results if the
input groupings were not sorted (GH43386)
* Fixed bug in pandas.DataFrame.groupby.rolling() and
pandas.api.indexers.FixedForwardWindowIndexer leading to
segfaults and window endpoints being mixed across groups (GH43267)
* Fixed bug in GroupBy.mean() with datetimelike values
including NaT values returning incorrect results (GH43132)
* Fixed bug in Series.aggregate() not passing the first args
to the user supplied func in certain cases (GH43357)
* Fixed memory leaks in Series.rolling.quantile() and
Series.rolling.median() (GH43339)
==== python-rpm ====
Version update (4.16.1.3 -> 4.17.0)
- update to rpm-4.17.0
==== python38 ====
- BuildRequire rpm-build-python: The provider to inject python(abi)
has been moved there. rpm-build pulls rpm-build-python
automatically in when building anything against python3-base, but
this implies that the initial build of python3-base does not
trigger the automatic installation.
==== python38-core ====
Subpackages: libpython3_8-1_0 python38-base
- BuildRequire rpm-build-python: The provider to inject python(abi)
has been moved there. rpm-build pulls rpm-build-python
automatically in when building anything against python3-base, but
this implies that the initial build of python3-base does not
trigger the automatic installation.
==== rpm ====
Version update (4.16.1.3 -> 4.17.0)
Subpackages: librpmbuild9
- update to rpm-4.17.0
- dropped support for berkeley db
- archive unpacking failures no longer leave garbage
- unified built-in and user-define macro syntax and calling conventions
- python generators and debuginfo extraction has been split into a
separate upstream project
- support for ed25519 signatures
- easier rpm macro access in lua
- new patches:
* python-rpm-packaging.diff
* singlefilemode.diff
* verbosearg.diff
- modified patches:
* usr-lib-sysimage-rpm.patch
* localetag.diff
* brp.diff
* findlang.diff
* macrosin.diff
* rpmqpack.diff
* build.diff
* whatrequires-doc.diff
* remove-brp-strips.diff
* fileattrs.diff
* langnoc.diff
* find-lang-qt-qm.patch
* findsupplements.diff
* finddebuginfo.diff
* finddebuginfo-absolute-links.diff
* debugsubpkg.diff
* debuglink.diff
* debuginfo-mono.patch
- dropped patches:
* db.diff
* dbfsync.diff
* dbprivate.diff
* dwarf5.diff
* ndbglue.diff
* pythondistdeps.diff
* suspendlock.diff
* taggedfileindex.diff
* waitlock.diff
* add-dwz-single-file-mode-option.patch
==== rpm-config-SUSE ====
Version update (0.g83 -> 0.g89)
- Update to version 0.g89:
* find-provides.ksyms: Do not set IFS - it is not needed for anything.
* find-provides.ksyms: Fix compressed modules.
* Allow locale directory to be named "locales" too
==== systemd-rpm-macros ====
- Use %{load:} instead of %{?load:}: fix build with RPM 4.17.
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the aarch64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
Mesa (21.2.3 -> 21.2.4)
Mesa-drivers (21.2.3 -> 21.2.4)
apparmor
atkmm1_6
attica-qt5 (5.86.0 -> 5.87.0)
audit-secondary
avahi
avahi-glib2
baloo5 (5.86.0 -> 5.87.0)
baloo5-widgets (21.08.1 -> 21.08.2)
bash-completion
bluedevil5 (5.22.5 -> 5.23.1)
bluez-qt (5.86.0 -> 5.87.0)
boost-base
breeze (5.22.5 -> 5.23.1)
breeze5-icons (5.86.0 -> 5.87.0)
busybox
ca-certificates (2+git20210723.27a0476 -> 2+git20211004.3efbea9)
chrony
codec2
compat-usrmerge
discover (5.22.5 -> 5.23.1)
dolphin (21.08.1 -> 21.08.2)
dracut (055+suse.119.g6c4187af -> 055+suse.129.g7d8c3ce3)
drkonqi5 (5.22.5 -> 5.23.1)
e2fsprogs
fcoe-utils
file (5.40 -> 5.41)
flatpak (1.11.3 -> 1.12.1)
frameworkintegration (5.86.0 -> 5.87.0)
fwupd (1.5.8 -> 1.6.2)
gcr (3.40.0 -> 3.41.0)
gdm
gjs
glibc
glibmm2_4 (2.66.1 -> 2.66.2)
gnome-branding-MicroOS
gnome-online-accounts (3.40.0 -> 3.40.1)
gnome-shell
gnome-shell-extensions
gpsd (3.23 -> 3.23.1)
hwdata (0.351 -> 0.352)
hwinfo (21.76 -> 21.77)
iputils
iso-codes (4.6.0 -> 4.7.0)
jack (1.9.18 -> 1.9.19)
kaccounts-integration (21.08.1 -> 21.08.2)
kactivities-stats (5.86.0 -> 5.87.0)
kactivities5 (5.86.0 -> 5.87.0)
kactivitymanagerd (5.22.5 -> 5.23.1)
karchive (5.86.0 -> 5.87.0)
kate (21.08.1 -> 21.08.2)
kauth (5.86.0 -> 5.87.0)
kbd
kbookmarks (5.86.0 -> 5.87.0)
kcmutils (5.86.0 -> 5.87.0)
kcodecs (5.86.0 -> 5.87.0)
kcompletion (5.86.0 -> 5.87.0)
kconfig (5.86.0 -> 5.87.0)
kconfigwidgets (5.86.0 -> 5.87.0)
kcoreaddons (5.86.0 -> 5.87.0)
kcrash (5.86.0 -> 5.87.0)
kdbusaddons (5.86.0 -> 5.87.0)
kde-cli-tools5 (5.22.5 -> 5.23.1)
kde-print-manager (21.08.1 -> 21.08.2)
kdeclarative (5.86.0 -> 5.87.0)
kded (5.86.0 -> 5.87.0)
kdelibs4support (5.86.0 -> 5.87.0)
kdesu (5.86.0 -> 5.87.0)
kdialog (21.08.1 -> 21.08.2)
kdnssd-framework (5.86.0 -> 5.87.0)
kdoctools (5.86.0 -> 5.87.0)
kernel-source (5.14.9 -> 5.14.11)
kfilemetadata5 (5.86.0 -> 5.87.0)
kgamma5 (5.22.5 -> 5.23.1)
kglobalaccel (5.86.0 -> 5.87.0)
kguiaddons (5.86.0 -> 5.87.0)
kholidays (5.86.0 -> 5.87.0)
khotkeys5 (5.22.5 -> 5.23.1)
ki18n (5.86.0 -> 5.87.0)
kiconthemes (5.86.0 -> 5.87.0)
kidletime (5.86.0 -> 5.87.0)
kinfocenter5 (5.22.5 -> 5.23.1)
kinit (5.86.0 -> 5.87.0)
kio (5.86.0 -> 5.87.0)
kio-extras5 (21.08.1 -> 21.08.2)
kirigami2 (5.86.0 -> 5.87.0)
kitemmodels (5.86.0 -> 5.87.0)
kitemviews (5.86.0 -> 5.87.0)
kjobwidgets (5.86.0 -> 5.87.0)
kmenuedit5 (5.22.5 -> 5.23.1)
knewstuff (5.86.0 -> 5.87.0)
knotifications (5.86.0 -> 5.87.0)
knotifyconfig (5.86.0 -> 5.87.0)
konsole (21.08.1 -> 21.08.2)
kpackage (5.86.0 -> 5.87.0)
kparts (5.86.0 -> 5.87.0)
kpeople5 (5.86.0 -> 5.87.0)
kpty (5.86.0 -> 5.87.0)
kquickcharts (5.86.0 -> 5.87.0)
kscreen5 (5.22.5 -> 5.23.1)
kscreenlocker (5.22.5 -> 5.23.1)
kservice (5.86.0 -> 5.87.0)
ksystemstats5 (5.22.5 -> 5.23.1)
ktexteditor (5.86.0 -> 5.87.0)
ktextwidgets (5.86.0 -> 5.87.0)
kunitconversion (5.86.0 -> 5.87.0)
kwallet (5.86.0 -> 5.87.0)
kwalletmanager5 (21.08.1 -> 21.08.2)
kwayland (5.86.0 -> 5.87.0)
kwayland-integration (5.22.5 -> 5.23.1)
kwayland-server (5.22.5 -> 5.23.1)
kwidgetsaddons (5.86.0 -> 5.87.0)
kwin5 (5.22.5 -> 5.23.1)
kwindowsystem (5.86.0 -> 5.87.0)
kwrited5 (5.22.5 -> 5.23.1)
kxmlgui (5.86.0 -> 5.87.0)
layer-shell-qt (5.22.5 -> 5.23.1)
libKF5ModemManagerQt (5.86.0 -> 5.87.0)
libKF5NetworkManagerQt (5.86.0 -> 5.87.0)
libaom (3.1.2 -> 3.2.0)
libapparmor
libcap (2.51 -> 2.59)
libcdio
libglvnd
libgphoto2
libinput (1.19.1 -> 1.19.2)
libkdecoration2 (5.22.5 -> 5.23.1)
libkscreen2 (5.22.5 -> 5.23.1)
libksysguard5 (5.22.5 -> 5.23.1)
librsvg (2.52.0 -> 2.52.2)
libteam
liburing (2.0 -> 2.1)
libwebp (1.2.0 -> 1.2.1)
libzypp (17.28.4 -> 17.28.6)
libzypp-plugin-appdata
mdadm
milou5 (5.22.5 -> 5.23.1)
mpg123 (1.29.0 -> 1.29.1)
mutter
ncurses (6.2.20210911 -> 6.2.20211002)
nvme-cli
open-iscsi
open-vm-tools (11.3.0 -> 11.3.5)
openssh (8.4p1 -> 8.8p1)
pam-config (1.4 -> 1.5)
pangomm1_4
patterns-gnome
patterns-microos
pipewire (0.3.37 -> 0.3.38)
plasma-browser-integration (5.22.5 -> 5.23.1)
plasma-framework (5.86.0 -> 5.87.0)
plasma-nm5 (5.22.5 -> 5.23.1)
plasma5-addons (5.22.5 -> 5.23.1)
plasma5-desktop (5.22.5 -> 5.23.1)
plasma5-integration (5.22.5 -> 5.23.1)
plasma5-openSUSE
plasma5-pa (5.22.5 -> 5.23.1)
plasma5-workspace (5.22.5 -> 5.23.1)
polkit-default-privs (1550+20210818.b0c41fd -> 1550+20211008.9751669)
polkit-kde-agent-5 (5.22.5 -> 5.23.1)
poppler (21.08.0 -> 21.10.0)
poppler-qt5 (21.08.0 -> 21.10.0)
powerdevil5 (5.22.5 -> 5.23.1)
prison-qt5 (5.86.0 -> 5.87.0)
pulseaudio
purpose (5.86.0 -> 5.87.0)
python-Jinja2 (3.0.1 -> 3.0.2)
python-alembic (1.6.5 -> 1.7.4)
python-apipkg (1.5 -> 2.1.0)
python-greenlet (1.1.0 -> 1.1.2)
python-idna (3.2 -> 3.3)
python-more-itertools (8.8.0 -> 8.10.0)
python-networkx (2.6.1 -> 2.6.3)
python-pyrsistent (0.17.3 -> 0.18.0)
python-pytz (2021.1 -> 2021.3)
python-zipp (3.5.0 -> 3.6.0)
qemu
qqc2-desktop-style (5.86.0 -> 5.87.0)
raspberrypi-firmware (2021.03.10 -> 2021.09.30)
raspberrypi-firmware-config (2021.03.10 -> 2021.09.30)
raspberrypi-firmware-dt (2021.03.15 -> 2021.09.17)
solid (5.86.0 -> 5.87.0)
sonnet (5.86.0 -> 5.87.0)
syntax-highlighting (5.86.0 -> 5.87.0)
systemd (249.4 -> 249.5)
systemd-presets-common-SUSE
systemsettings5 (5.22.5 -> 5.23.1)
threadweaver (5.86.0 -> 5.87.0)
timezone (2021c -> 2021d)
tpm2.0-tools (5.1.1 -> 5.2)
webkit2gtk3 (2.34.0 -> 2.34.1)
webkit2gtk3-soup2 (2.34.0 -> 2.34.1)
wireless-regdb (20210421 -> 20210828)
xdg-desktop-portal (1.10.0 -> 1.10.1)
xdg-desktop-portal-kde (5.22.5 -> 5.23.1)
xdg-user-dirs
xf86-input-libinput
xfsprogs
xkeyboard-config (2.33 -> 2.34)
xwayland
zypper (1.14.49 -> 1.14.50)
=== Details ===
==== Mesa ====
Version update (21.2.3 -> 21.2.4)
Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1
- update to 21.2.4
* fourth bugfix release
* 300 fixes from the new r300 maintainer! Additionally, panfrost,
lots of crocus, some freedreno, intel, radv, core meas, gallivum,
anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch
- u_fix-build-on-ppc64le.patch
* fixes build on ppc64le (boo#1191569)
==== Mesa-drivers ====
Version update (21.2.3 -> 21.2.4)
Subpackages: Mesa-dri Mesa-gallium
- update to 21.2.4
* fourth bugfix release
* 300 fixes from the new r300 maintainer! Additionally, panfrost,
lots of crocus, some freedreno, intel, radv, core meas, gallivum,
anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch
- u_fix-build-on-ppc64le.patch
* fixes build on ppc64le (boo#1191569)
==== apparmor ====
Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils python3-apparmor
- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)
==== atkmm1_6 ====
- turn off doc build, it does not work with new doxygen
==== attica-qt5 ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Attica5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Do not mark jobs that have been aborted as errored
* Add Gitlab CI configuration
* Ensure categories.xml is only fetched once in parallel
* Do not start basejobs twice
* Add CI configuration file
- Drop upstream patch:
* 0001-Ensure-categories.xml-is-only-fetched-once-in-parall.patch
- Add upstream patch to avoid unnecessary network traffic:
* 0001-Ensure-categories.xml-is-only-fetched-once-in-parall.patch
==== audit-secondary ====
Subpackages: audit python3-audit system-group-audit
- Add CONFIG parameter to %sysusers_generate_pre
- Create separate service for augenrules (bsc#1191614, bsc#1181400)
* add create-augenrules-service.patch
Remove ReadWritePaths=/etc/audit from auditd.service, also removes
augenrules call from ExecStartPost.
Create augenrules.service with the ReadWritePaths directive above.
This makes /etc/audit only accessible by augenrules.service and
let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.
==== avahi ====
Subpackages: libavahi-client3 libavahi-common3 libavahi-core7
- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
(boo#1191750).
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== avahi-glib2 ====
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== baloo5 ====
Version update (5.86.0 -> 5.87.0)
Subpackages: baloo5-imports baloo5-kioslaves libKF5Baloo5 libKF5BalooEngine5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Native Gitlab CI configuration
==== baloo5-widgets ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== bash-completion ====
- Add patch boo1190929-9af4afd0.patch for boo#1190929
add support for compeletion modinfo completion recognize .ko.zst
as well as .ko.bz2
==== bluedevil5 ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Remove applet list item animations
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Confirm deleting a bluetooth device pairing.
* Add keywords to bluetooth KCM
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Let the user choose Bluetooth status on login (kde#440493)
* [applet] Show the text "Connected" for connected devices (kde#440423)
* [applet] Give FullRepresentation an implicit size (kde#439981)
* Embed JSON metadata in KIOSlaves
* Remove obsolete .protocol files
* Convert protocol files to JSON
* Use version-less qt DBus macros
* Use ellipses instead of triple period
==== bluez-qt ====
Version update (5.86.0 -> 5.87.0)
Subpackages: bluez-qt-imports bluez-qt-udev libKF5BluezQt6
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== boost-base ====
Subpackages: boost-license1_77_0 libboost_thread1_77_0
- make boost-json-devel require boost-container-devel (bsc#1191822)
==== breeze ====
Version update (5.22.5 -> 5.23.1)
Subpackages: breeze5-cursors breeze5-decoration breeze5-style breeze5-wallpapers libbreezecommon5-5
- Add patch to fix the version number:
* 0001-Update-version-number-for-5.23.1.patch
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* Don't set alignment for spinboxes (kde#443769)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* kstyle: Limit what kinds of QPushButtons can use autoDefault
* Revert accidental revert of f763f27ebf3bbb21235ab3df0f7b9ef035cc71b5
* kstyle: Clean up tab painting and tweak tab highlight
* Don't reserve room for spinbox buttons if buttons disabled (kde#440718)
* kstyle: use checked color consistent with button down color for checkboxes and radiobuttons
* kstyle: visible neutral highlight on not hovered checkboxes and radio buttons
* KTitleWidget: Make background transparent again (kde#442860)
* Revert "kstyle: make spinboxes look like qqc2-breeze-style"
* Revert "kstyle: centre spinbox text"
* Revert "Don't reserve room for spinbox buttons if buttons disabled"
* Revert "Center all QAbstractSpinBox, not just integer QSpinBox"
* Revert "kstyle: make spinbox buttons consistently widthed"
* Revert "kstyle: fix misalignment of spinbox item sizes"
* Darken hard-to-read positive, negative, and neutral selection colors (kde#406239)
* Fix incorrect link selection color in Breeze Light color scheme (kde#419960)
* Fix incorrect active selection color in Breeze Light color scheme (kde#442478)
* Restore auto default button behavior (kde#438994)
* kstyle: use antialiasing on combobox items
- Add new key + signature to plasma.keyring
- Drop patches, now upstream:
* 0001-Restore-auto-default-button-behavior.patch
- Add patch to automatically set a default button again (kde#438994):
* 0001-Restore-auto-default-button-behavior.patch
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
==== breeze5-icons ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Native Gitlab CI configuration
* Fix KTimeTracker icon sizes (kde#442993)
* Tweaks to AnyDesk icons
* Fix index.theme issues from !124
* Add 22px variants of the preferences icons
* Add AnyDesk icons
* Add more Godot MIME icons
* Add symlink for skanlite's new icon name
* Add process-working-symbolic, overhaul 22px animation
==== busybox ====
- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
flavor of busybox with the
additional setting:
CONFIG_REBOOT=y
CONFIG_SWITCH_ROOT=y
CONFIG_CTTYHACK=y
(bsc#1191514).
==== ca-certificates ====
Version update (2+git20210723.27a0476 -> 2+git20211004.3efbea9)
- Update to version 2+git20211004.3efbea9:
* Ensure --root option propagates prefix properly to other scripts
==== chrony ====
Subpackages: chrony-pool-openSUSE
- boo#1190926: PrivateDevices is too strict, we might need to
access the rtc and ptp devices.
- Add back support to build chrony on SLE12.
- Drop dependency on asciidoctor. It is only needed for building
the HTML documentation which we don't package anyway.
==== codec2 ====
- Added a patch moved-freedv_callback_rx_sym-into-internal-header.patch
to fix building gnuradio (patch taken from upstream)
- Drop handcrafted generation of the pkgconfig file
- Remove "-Wno-dev"
==== compat-usrmerge ====
- Fix logic for detecting conflicts with directories (boo#1191111)
==== discover ====
Version update (5.22.5 -> 5.23.1)
Subpackages: discover-backend-flatpak discover-backend-packagekit discover-notifier
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* flatpak: Don't reuse GError instances (kde#426565)
* flatpak: Set the real value of the remotes (kde#443455)
* SourcesPage: Address how we show the checked state (kde#406295)
* Suggest correct words in the search field (kde#443945)
* SourcesPage: Use ItemIsUserCheckable to check if a source is checkable
* flatpak: Do not crash when a source is disabled
* Remove pointless tooltip from Labelbackground
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* flatpak: Also show the installed version (kde#443256)
* Improve margins around Updates page messages
* Do not show tooltips when fetching updates (kde#443050)
* snap: Don't mark as cancelled until we get the reply (kde#425680)
* flatpak: Also search flatpakref files where the id doesn't include .desktop
* flatpak: Fix installing sources
* flatpak: Reuse remote when opening a well-known flatpakref file
* flatpak: Do not crash when using a flatpakref file (kde#442709)
* Explicitly set the interactive flag for PackageKit transactions (kde#442383)
* Link against Qt::Widgets (kde#442866)
* Sources: Fix displaying sources (kde#442604)
* kns: Do not process entries from invalid backends
* Stop bringing kxmlgui
* Port away from KIO::AccessManager
* Fix the InstallApplicationButton with QQC2 Breeze
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
==== dolphin ====
Version update (21.08.1 -> 21.08.2)
Subpackages: dolphin-part libdolphinvcs5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* Fix closing a secondary viewContainer on startup settings change (kde#426221)
* Don't force icon for preferred search tool action if one is manually configured (kde#442815)
* Fixed a missing bracket.
* Make "Empties Trash to create free space" translatable.
==== dracut ====
Version update (055+suse.119.g6c4187af -> 055+suse.129.g7d8c3ce3)
Subpackages: dracut-ima dracut-mkinitrd-deprecated
- Update to version 055+suse.129.g7d8c3ce3:
* fix(kernel-modules): add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs (bsc#1190326)
* docs: update SUSE maintainers doc
* fix(suse): add 60-io-scheduler.rules (bsc#1188713)
* revert: remove /sbin/installkernel script from dracut package
* spec: modernize specfile constructs
==== drkonqi5 ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
==== e2fsprogs ====
Subpackages: libcom_err2 libext2fs2
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
==== fcoe-utils ====
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
==== file ====
Version update (5.40 -> 5.41)
Subpackages: file-magic libmagic1
- Remove file-5.38-allow-readlinkat.dif as already doen in latest
file 5.41
- Update to 5.41:
* Avinash Sonawane: Fix tzname detection
* Fix relationship tests with "search" magic, don't short circuit
logic
* Fix memory leak in compile mode
* PR/272: kiefermat: Only set returnval = 1 when we printed something
(in all cases print or !print). This simplifies the logic and fixes
the issue in the PR with -k and --mime-type there was no continuation
printed before the default case.
* PR/270: Don't translate unprintable characters in %s magic formats
when -r
* PR/269: Avoid undefined behavior with clang (adding offset to NULL)
* Add a new flag (f) that requires that the match is a full word,
not a partial word match.
* Add varint types (unused)
* PR/256: mutableVoid: If the file is less than 3 bytes, use the file
length to determine type
* PR/259: aleksandr.v.novichkov: mime printing through indirect magic
is not taken into account, use match directly so that it does.
- Remove patches now upstream
* file-5.40-1c677c04.patch
* file-5.40-3096f87f.patch
* file-5.40-4c5fe1ad.patch
* file-5.40-6b34436a.patch
* file-5.40-749e1ecf.patch
* file-5.40-9b0459af.patch
* file-5.40-9e2becec.patch
* file-5.40-ascii.patch
* file-5.40-f0601504.patch
* file-5.40-f7705dca.patch
- Port patches
* file-5.19-biorad.dif
* file-5.19-printf.dif
* file-5.19-zip2.0.dif
* file-5.23-endian.patch
* file-5.28-btrfs-image.dif
* file-5.38-allow-readlinkat.dif
* file-secure_getenv.patch
- Port and rename patch file-5.39.dif which is now file-5.41.dif
==== flatpak ====
Version update (1.11.3 -> 1.12.1)
Subpackages: libflatpak0 system-user-flatpak
- Update to version 1.12.1:
+ The security fix in the 1.12.0 release failed when used with
some older versions of libseccomp (that don't know about the
new syscalls).
- Update to version 1.12.0:
+ This is the first stable release in the 1.12.x series. The
major changes in this series is the support for better control
of sub-sandboxes, as used by the steam flatpak.
+ In addition, this release fixes a security vulnerability in the
portal support. Some recently added syscalls were not blocked
by the seccomp rules which allowed the application to create
sub-sandboxes which can confuse the sandboxing verification
mechanisms of the portal. This has been fixed by extending the
seccomp rules (boo#1191507, CVE-2021-41133)
+ Some test fixes
+ Support for specifying the flatpak binary to use during exports
+ Install translations for all languages in the locale, not just
the ones in LC_MESSAGES.
+ Fix progress reporting in flatpak fsck
+ Handle cases where /var/tmp is a symlink
+ Expose /etc/gai.conf to the sandbox
+ Fix the parental control checks for root
+ Handle missing /etc/ld.so.cache (musl)
+ Updated translations
==== frameworkintegration ====
Version update (5.86.0 -> 5.87.0)
Subpackages: frameworkintegration-plugin libKF5Style5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== fwupd ====
Version update (1.5.8 -> 1.6.2)
Subpackages: libfwupd2 typelib-1_0-Fwupd-2_0
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_fwupd-offline-update.service.patch
* harden_fwupd-refresh.service.patch
- Update to version 1.6.2
- The fwupd efi program be separated to fwupd-efi package.
- Removed pesign-obs-integration, moved needssslcertforbuild
, SBAT and EFI signing stuff to fwupd-efi.
- Moved libfwupdplugin1 to libfwupdplugin2
- Change log from upstream:
https://github.com/fwupd/fwupd/blob/main/data/org.freedesktop.fwupd.metainf…
- This release adds the following features:
* Add a plugin to check Lenovo firmware settings
* Add initial support for the powerd daemon
* Add support for CapsuleOnDisk
* Add support for installing UEFI updates from GRUB
* Add support for soft-requirements that can be ignored with --force
* Allow devices to only accept version upgrades
* Allow discovery of Redfish BMCs specified by VID-PID or MAC
* Allow the daemon to request interactive action from the end user
* Automatically connect the BMC network interface at startup
* Show the build timestamp if set on the device
* Show the user how to switch out of Wacom tablet Android-mode
- This release fixes the following bugs:
* Add the alternate vendor name into the 8BitDo allowlist
* Allow multiple devices to set WAIT_FOR_REPLUG
* Allow the client to watch for more property changes
* Always ensure the SuperIO version string is NUL terminated
* Automatically clear the update error as required
* Disable all UX capsules for Lenovo hardware
* Do not assume the metainfo file is NUL-terminated
* Do not save invalid files on LVFS server error
* Fix a VLI regression in enumerating the PD device
* Fix a VLI regression when installing VL820Q7 firmware
* Fix enumeration of the Synaptics Prometheus config child
* Fix parsing Redfish USB/PCI network VID/PIDs
* Fix the fwupdmgr progressbar spinner to actually work
* Fix version number for legacy Wacom Bluetooth modules
* Ignore virtual M.2 ATA devices
* Preserve NEEDS_REBOOT on successful update
* Prevent a corrupt PHAT table from allocating lots of memory
* Read the Redfish SMBIOS table when required
* Remove the vendor string from the device name where required
* Save the update state to the database correctly all of the time
* Switch from sysctl to ioctl for ESRT on FreeBSD
* Try reading from /sys/class/dmi if SMBIOS direct access fails
* Watch for children added or removed after setup has been completed
* Work around a XCC-ism on Lenovo hardware
- This release adds support for the following hardware:
* ModemManager devices supporting Firehose or MBIM QDU
* More models of RTS54HUB
* More Poly DFU devices
* Parade LSPCON
* PixArt receiver and wireless hardware
* Realtek MST with RTD2142
* SuperIO IT5570
* USB4 Dell dock
==== gcr ====
Version update (3.40.0 -> 3.41.0)
Subpackages: gcr-data gcr-prompter gcr-ssh-askpass libgck-1-0 libgcr-3-1 typelib-1_0-Gck-1 typelib-1_0-Gcr-3
- Update to version 3.41.0:
+ Port ssh-agent from gnome-keyring.
+ build: Fix parallel build failure due to missing marshal
dependency.
+ Fix warnings by dropping `volatile` for g_once_init_inter
locations.
+ tests: More robust against GTask unref race condition.
+ Updated translations.
- Add pkgconfig(libsecret-1), pkgconfig(libsystemd),
pkgconfig(systemd) and openssh-clients BuildRequires: Build new
standalone ssh-agent, and split it out in own sub-package.
==== gdm ====
Subpackages: gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0
- Add gdm-daemon-Infer-session-type-from-desktop-file.patch
(bsc#1191809, bsc#1191248)
- Rebase gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch
(bsc#1191014).
==== gjs ====
Subpackages: libgjs0 typelib-1_0-GjsPrivate-1_0
- Add upstream crash fixer patches from stable branch:
+ b9e122044a7ccc1e2a3374c680b6ea82066bfa59.patch: arg: Replace
gsize with size_t
+ 62025d4a2738a36ea5f1a7cebef08b22b5eef613.patch: Handle optional
out parameters in callbacks
- Stop disabling lto: Following this, stop passing dtrace=true and
systemtap=true to meson, aswell as dropping systemtap-sdt-devel
BuildRequires, follow upstream default.
- Add optional pkgconfig(gtk4) BuildRequires: meson checks for it.
==== glibc ====
Subpackages: glibc-locale glibc-locale-base
- ld-show-auxv-colon.patch: elf: Fix missing colon in LD_SHOW_AUXV output
(BZ #282539
- x86-string-control-test.patch: x86-64: Use testl to check
__x86_string_control
- pthread-kill-fail-after-exit.patch: nptl: pthread_kill, pthread_cancel
should not fail after exit (BZ #19193)
- pthread-kill-race-thread-exit.patch: nptl: Fix race between pthread_kill
and thread exit (BZ #12889)
- getcwd-attribute-access.patch: posix: Fix attribute access mode on
getcwd (BZ #27476)
- pthread-kill-return-esrch.patch: nptl: pthread_kill needs to return
ESRCH for old programs (BZ #19193)
- pthread-mutexattr-getrobust-np-type.patch: nptl: Fix type of
pthread_mutexattr_getrobust_np, pthread_mutexattr_setrobust_np (BZ
[#28036])
- setxid-deadlock-blocked-signals.patch: nptl: Avoid setxid deadlock with
blocked signals in thread exit (BZ #28361)
- pthread-kill-send-specific-thread.patch: nptl: pthread_kill must send
signals to a specific thread (BZ #28407)
- sysconf-nprocessors-affinity.patch: linux: Revert the use of
sched_getaffinity on get_nproc (BZ #28310)
- iconv-charmap-close-output.patch: renamed from
icon-charmap-close-output.patch
==== glibmm2_4 ====
Version update (2.66.1 -> 2.66.2)
Subpackages: libgiomm-2_4-1 libglibmm-2_4-1
- Update to version 2.66.2:
+ Glib, Gio: Replace all g_quark_from_static_string() by
g_quark_from_string()
+ Gio:
- FileEnumerator: Remove refreturn to avoid memory leak
- ListModel::get_object(): Make it work for interface classes
+ Build: MSVC build: Remove extraneous GLIBMM_API in
Glib::ustring
==== gnome-branding-MicroOS ====
- Use "Text Editor" instead of the less-supported "gEdit"
==== gnome-online-accounts ====
Version update (3.40.0 -> 3.40.1)
Subpackages: libgoa-1_0-0 libgoa-backend-1_0-1
- Update to version 3.40.1:
+ Bugs fixed: glgo#GNOME/gnome-online-accounts!68 dbus: Add
missing since tag for IsSupportedProvider.
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== gnome-shell ====
Subpackages: gnome-shell-calendar
- Add 380d2db1d9047ecffcef7d78f00184963b403efc.patch: inputMethod:
Clear preeditStr before reset. Previously, these were performed
in a different order before GNOME 41. During some other changes
they were swapped.
However, this causes both GTK 3 and GTK 4 applications to scroll
to incorrect positions from the preedit change.
==== gnome-shell-extensions ====
Subpackages: gnome-shell-classic gnome-shell-extensions-common
- Update sle-classic to version 41
+ Update gse-sle-classic-ext.patch
+ Update sle-classic(a)suse.com.tar.gz
==== gpsd ====
Version update (3.23 -> 3.23.1)
- Re-enable LTO on aarch64
- Set ProtectClock to false or gpsd will not start
- Don't use gpsd version in patches (will break with every update)
% harden_gpsd.service.patch
% harden_gpsdctl@.service.patch
- Update to version 3.23.1
* Improve ubx cycle detection.
* Add quirks for Jackson Labs nonstandard NMEA
* Change STATUS_NO_FIX to STATUS_UNK to avoid confusion with fix
mode.
* Change STATUS_FIX to STATUS_GPS to avoid confusion with fix
mode.
* Change STATUS_DGPS_FIX to STATUS_DGPS to avoid confusion with
fix mode.
* Split SOURCE_ACM from SOURCE_USB. ACM has no speeds.
* Add speeds 1 mbps, 1.152 mbps, 1.5 mbps, and higher. When libc
supports them.
* Improve autobaud.
* Add new u-blox M10 messages.
* Fix u-blox M6, M7 initialization issues.
* Various ubxtool and gpxlogger updates.
* Add mtk3301_speed_switcher()
* No API, ABI changes.
* Fallback to "python3" if "python" not found.
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_gpsd.service.patch
* harden_gpsdctl@.service.patch
==== hwdata ====
Version update (0.351 -> 0.352)
- Update to version 0.352 (bsc#1191375:
+ Updated pci, usb and vendor ids.
==== hwinfo ====
Version update (21.76 -> 21.77)
- merge gh#openSUSE/hwinfo#105
- Use license file from gnu.org
- Fix spelling
- Add missing final newline
- Trim excess whitespace
- Simple maintenance improvements
- 21.77
==== iputils ====
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
==== iso-codes ====
Version update (4.6.0 -> 4.7.0)
- update to 4.7.0:
* Fix weblate check: Remove double spaces
* Rename ku.po to kmr.po.
* Add common names for South and North Korea.
* Updates for Indonesia
* ISO 3166-1 translations
* ISO 3166-2 translations
* ISO 3166-3 translations
* ISO 639-2 translations
* ISO 639-3 translations
* ISO 639-5 translations
* ISO 4217 translations
* ISO 15924 translations
==== jack ====
Version update (1.9.18 -> 1.9.19)
- drop 0001-Fix-compilation-of-documentation.patch (upstream).
- update to 1.9.19:
* Add jack_position_t::tick_double, and flags around it
* Add zalsa "-w" argument to wait for soundcard to be available
* Bump internal protocol version to 9 (due to struct alignment)
* Fix alignment of fields for atomic accesses
* Fix build for platforms needing __STDC_FORMAT_MACROS
* Fix compilation of documentation
==== kaccounts-integration ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kactivities-stats ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kactivities5 ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kactivities5-imports libKF5Activities5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kactivitymanagerd ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* Fix build by lowering KDE_COMPILERSETTINGS_LEVEL
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* desktop switch support for wayland (kde#439183)
* Port away from deprecated KPluginLoader
* krunner plugin: Avoid querying DBus runner unnecessarily
* Clean up unneeded JSON parameter in kcoreaddons_add_plugin
* Port from KPluginLoader::pluginsById to KPluginMetaData::pluginById
* Use version-less qt DBus macros
* Clean up ServiceType property usage for JSON based plugins
* Remove empty dependencies value of JSON plugin metadata
==== karchive ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kate ====
Version update (21.08.1 -> 21.08.2)
Subpackages: kate-plugins
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* Fix replicode plugin not deleting its toolview (kde#441859)
* Fix commit dialog width
- Change the license tag to LGPL-2.0-only AND LGPL-2.1-or-later.
There are no GPL-3.0 files.
==== kauth ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Auth5 libKF5AuthCore5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kbd ====
Subpackages: kbd-legacy
- regenerated cz-map.patch needed for xkeyboard-config 2.34 update
==== kbookmarks ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kcmutils ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Fix Warning: Property type "Int" is not a known QVariant type
* Add support for static builds
* Add compat code for KService based plugin loading
* Introduce KCModuleProxy::isChanged method
* Un-overload KCModuleProxy:changed signal
==== kcodecs ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* KCodecs::decodeRFC2047String(): return "UTF-8" when multiple charsets used
* Add CI configuration file
==== kcompletion ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* New shouldAutoSuggest property on KCompletion.
* Fix typo in argument name (autosubject -> autoSuggest)
==== kconfig ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kconf_update5 libKF5ConfigCore5 libKF5ConfigGui5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Android: Fix writing to config if path is a content:// Uri
* Add Gitlab CI configuration
* kconfigini: Only open the file once to write
* Allow KConfigXT to use KSharedConfig::openStateConfig
==== kconfigwidgets ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Do not emit deprecation warnings for overload which gets chosen by compiler
==== kcoreaddons ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* KStringHandler: add a new perlSplit() overload that takes a QStringView
* ktexttohtml: port QStringRef (deprecated) to QStringView and minor refactor
* Port QStringRef (deprected) to QStringView
* Deprecate KPluginMetaData::extraInformation
* Don't forward-declare QVector
* Fix python bindings generation
==== kcrash ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kdbusaddons ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kdbusaddons-tools libKF5DBusAddons5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Introduce UpdateLaunchEnvJob
* Correct to make sure we use the matching ECM version
* Add CI configuration file
==== kde-cli-tools5 ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* kioclient: Add a 'stat' command
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* kcmshell: Allow loading KCMs using plugin path
* kcmshell: general code cleanup
* General code cleanup
* kcmshell: Re-group includes
* Replace QtDBus include with includes for specific classes
* plasma-open-settings: support both systemsettings:// and :///
* Include settings-open that allows summoning system settings from a URL
* Relicense file to LGPL-2.0-or-later
==== kde-print-manager ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kdeclarative ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kdeclarative-components libKF5CalendarEvents5 libKF5Declarative5 libKF5QuickAddons5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Make sure the object gets destroyed before the view
* Add support for static builds
* SimpleKCM: Remove last vestiges of previously-removed properties
* SimpleKCM: remove custom header and footer handling
==== kded ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kdelibs4support ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5KDELibs4Support5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kdesu ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kdialog ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kdnssd-framework ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kdoctools ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kernel-source ====
Version update (5.14.9 -> 5.14.11)
- Linux 5.14.11 (bsc#1012628).
- Revert "ARM: imx6q: drop of_platform_default_populate() from
init_machine" (bsc#1012628).
- Revert "brcmfmac: use ISO3166 country code and 0 rev as
fallback" (bsc#1012628).
- libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870
SSD (bsc#1012628).
- perf/x86: Reset destroy callback on event init failure
(bsc#1012628).
- KVM: x86: nSVM: restore int_vector in svm_clear_vintr
(bsc#1012628).
- kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[] (bsc#1012628).
- KVM: x86: reset pdptrs_from_userspace when exiting smm
(bsc#1012628).
- KVM: do not shrink halt_poll_ns below grow_start (bsc#1012628).
- selftests: KVM: Align SMCCC call with the spec in steal_time
(bsc#1012628).
- kasan: always respect CONFIG_KASAN_STACK (bsc#1012628).
- tools/vm/page-types: remove dependency on opt_file for idle
page tracking (bsc#1012628).
- block: don't call rq_qos_ops->done_bio if the bio isn't tracked
(bsc#1012628).
- io_uring: allow conditional reschedule for intensive iterators
(bsc#1012628).
- x86/insn, tools/x86: Fix undefined behavior due to potential
unaligned accesses (bsc#1012628).
- smb3: correct smb3 ACL security descriptor (bsc#1012628).
- irqchip/gic: Work around broken Renesas integration
(bsc#1012628).
- scsi: ses: Retry failed Send/Receive Diagnostic commands
(bsc#1012628).
- thermal/drivers/tsens: Fix wrong check for tzd in irq handlers
(bsc#1012628).
- nvme-fc: avoid race between time out and tear down
(bsc#1012628).
- nvme-fc: update hardware queues before using them (bsc#1012628).
- swiotlb-xen: ensure to issue well-formed XENMEM_exchange
requests (bsc#1012628).
- Xen/gntdev: don't ignore kernel unmapping error (bsc#1012628).
- selftests: kvm: fix get_run_delay() ignoring fscanf() return
warn (bsc#1012628).
- selftests: kvm: move get_run_delay() into lib/test_util
(bsc#1012628).
- selftests:kvm: fix get_trans_hugepagesz() ignoring fscanf()
return warn (bsc#1012628).
- selftests:kvm: fix get_warnings_count() ignoring fscanf()
return warn (bsc#1012628).
- selftests: be sure to make khdr before other targets
(bsc#1012628).
- habanalabs/gaudi: fix LBW RR configuration (bsc#1012628).
- habanalabs: fail collective wait when not supported
(bsc#1012628).
- habanalabs/gaudi: use direct MSI in single mode (bsc#1012628).
- usb: dwc2: check return value after calling
platform_get_resource() (bsc#1012628).
- usb: testusb: Fix for showing the connection speed
(bsc#1012628).
- scsi: elx: efct: Do not hold lock while calling
fc_vport_terminate() (bsc#1012628).
- scsi: sd: Free scsi_disk device via put_device() (bsc#1012628).
- drm/amdkfd: fix svm_migrate_fini warning (bsc#1012628).
- drm/amdkfd: handle svm migrate init error (bsc#1012628).
- ext2: fix sleeping in atomic bugs on error (bsc#1012628).
- platform/x86: gigabyte-wmi: add support for B550I Aorus Pro AX
(bsc#1012628).
- sparc64: fix pci_iounmap() when CONFIG_PCI is not set
(bsc#1012628).
- xen-netback: correct success/error reporting for the
SKB-with-fraglist case (bsc#1012628).
- net: mdio: introduce a shutdown method to mdio device drivers
(bsc#1012628).
- btrfs: fix mount failure due to past and transient device
flush error (bsc#1012628).
- btrfs: replace BUG_ON() in btrfs_csum_one_bio() with proper
error handling (bsc#1012628).
- nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN
(bsc#1012628).
- platform/x86: touchscreen_dmi: Update info for the Chuwi Hi10
Plus (CWI527) tablet (bsc#1012628).
- platform/x86: touchscreen_dmi: Add info for the Chuwi HiBook
(CWI514) tablet (bsc#1012628).
- afs: Add missing vnode validation checks (bsc#1012628).
- spi: rockchip: handle zero length transfers without timing out
(bsc#1012628).
- commit 834dddd
- iwlwifi: Fix MODULE_FIRMWARE() for non-existing ucode version
(boo#1191417).
- commit 6597512
- Linux 5.14.10 (bsc#1012628).
- media: hantro: Fix check for single irq (bsc#1012628).
- media: cedrus: Fix SUNXI tile size calculation (bsc#1012628).
- media: s5p-jpeg: rename JPEG marker constants to prevent build
warnings (bsc#1012628).
- ASoC: fsl_sai: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: fsl_esai: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: fsl_micfil: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: fsl_spdif: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: fsl_xcvr: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: mediatek: common: handle NULL case in suspend/resume
function (bsc#1012628).
- scsi: elx: efct: Fix void-pointer-to-enum-cast warning for
efc_nport_topology (bsc#1012628).
- ASoC: SOF: Fix DSP oops stack dump output contents
(bsc#1012628).
- ASoC: SOF: imx: imx8: Bar index is only valid for IRAM and
SRAM types (bsc#1012628).
- ASoC: SOF: imx: imx8m: Bar index is only valid for IRAM and
SRAM types (bsc#1012628).
- pinctrl: qcom: spmi-gpio: correct parent irqspec translation
(bsc#1012628).
- net/mlx4_en: Resolve bad operstate value (bsc#1012628).
- s390/qeth: Fix deadlock in remove_discipline (bsc#1012628).
- s390/qeth: fix deadlock during failing recovery (bsc#1012628).
- m68k: Update ->thread.esp0 before calling syscall_trace()
in ret_from_signal (bsc#1012628).
- NIOS2: fix kconfig unmet dependency warning for
SERIAL_CORE_CONSOLE (bsc#1012628).
- kasan: fix Kconfig check of CC_HAS_WORKING_NOSANITIZE_ADDRESS
(bsc#1012628).
- HID: amd_sfh: Fix potential NULL pointer dereference
(bsc#1012628).
- perf test: Fix DWARF unwind for optimized builds (bsc#1012628).
- perf iostat: Use system-wide mode if the target cpu_list is
unspecified (bsc#1012628).
- perf iostat: Fix Segmentation fault from NULL 'struct
perf_counts_values *' (bsc#1012628).
- watchdog/sb_watchdog: fix compilation problem due to
COMPILE_TEST (bsc#1012628).
- tty: Fix out-of-bound vmalloc access in imageblit (bsc#1012628).
- cpufreq: schedutil: Use kobject release() method to free
sugov_tunables (bsc#1012628).
- scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS
(bsc#1012628).
- drm/amdgpu: adjust fence driver enable sequence (bsc#1012628).
- drm/amdgpu: avoid over-handle of fence driver fini in s3 test
(v2) (bsc#1012628).
- drm/amdgpu: stop scheduler when calling hw_fini (v2)
(bsc#1012628).
- cpufreq: schedutil: Destroy mutex before kobject_put() frees
the memory (bsc#1012628).
- scsi: ufs: ufs-pci: Fix Intel LKF link stability (bsc#1012628).
- ALSA: rawmidi: introduce SNDRV_RAWMIDI_IOCTL_USER_PVERSION
(bsc#1012628).
- ALSA: firewire-motu: fix truncated bytes in message tracepoints
(bsc#1012628).
- ALSA: hda/realtek: Quirks to enable speaker output for Lenovo
Legion 7i 15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops
(bsc#1012628).
- ACPI: NFIT: Use fallback node id when numa info in NFIT table
is incorrect (bsc#1012628).
- fs-verity: fix signed integer overflow with i_size near S64_MAX
(bsc#1012628).
- hwmon: (tmp421) handle I2C errors (bsc#1012628).
- hwmon: (w83793) Fix NULL pointer dereference by removing
unnecessary structure field (bsc#1012628).
- hwmon: (w83792d) Fix NULL pointer dereference by removing
unnecessary structure field (bsc#1012628).
- hwmon: (w83791d) Fix NULL pointer dereference by removing
unnecessary structure field (bsc#1012628).
- gpio: pca953x: do not ignore i2c errors (bsc#1012628).
- scsi: ufs: Fix illegal offset in UPIU event trace (bsc#1012628).
- mac80211: fix use-after-free in CCMP/GCMP RX (bsc#1012628).
- platform/x86/intel: hid: Add DMI switches allow list
(bsc#1012628).
- x86/kvmclock: Move this_cpu_pvti into kvmclock.h (bsc#1012628).
- ptp: Fix ptp_kvm_getcrosststamp issue for x86 ptp_kvm
(bsc#1012628).
- KVM: x86: Fix stack-out-of-bounds memory access from
ioapic_write_indirect() (bsc#1012628).
- KVM: x86: nSVM: don't copy virt_ext from vmcb12 (bsc#1012628).
- KVM: x86: Clear KVM's cached guest CR3 at RESET/INIT
(bsc#1012628).
- KVM: x86: Swap order of CPUID entry "index" vs. "significant
flag" checks (bsc#1012628).
- KVM: nVMX: Filter out all unsupported controls when eVMCS was
activated (bsc#1012628).
- KVM: SEV: Update svm_vm_copy_asid_from for SEV-ES (bsc#1012628).
- KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
(bsc#1012628).
- KVM: SEV: Acquire vcpu mutex when updating VMSA (bsc#1012628).
- KVM: SEV: Allow some commands for mirror VM (bsc#1012628).
- KVM: SVM: fix missing sev_decommission in sev_receive_start
(bsc#1012628).
- KVM: nVMX: Fix nested bus lock VM exit (bsc#1012628).
- KVM: VMX: Fix a TSX_CTRL_CPUID_CLEAR field mask issue
(bsc#1012628).
- mmc: renesas_sdhi: fix regression with hard reset on old SDHIs
(bsc#1012628).
- media: ir_toy: prevent device from hanging during transmit
(bsc#1012628).
- RDMA/cma: Do not change route.addr.src_addr.ss_family
(bsc#1012628).
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing
more requests (bsc#1012628).
- nbd: use shifts rather than multiplies (bsc#1012628).
- drm/amd/display: initialize backlight_ramping_override to false
(bsc#1012628).
- drm/amd/display: Pass PCI deviceid into DC (bsc#1012628).
- drm/amd/display: Fix Display Flicker on embedded panels
(bsc#1012628).
- drm/amdgpu: force exit gfxoff on sdma resume for rmb s0ix
(bsc#1012628).
- drm/amdgpu: check tiling flags when creating FB on GFX8-
(bsc#1012628).
- drm/amdgpu: correct initial cp_hqd_quantum for gfx9
(bsc#1012628).
- interconnect: qcom: sdm660: Fix id of slv_cnoc_mnoc_cfg
(bsc#1012628).
- interconnect: qcom: sdm660: Correct NOC_QOS_PRIORITY shift
and mask (bsc#1012628).
- drm/i915/gvt: fix the usage of ww lock in gvt scheduler
(bsc#1012628).
- ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
(bsc#1012628).
- bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog
(bsc#1012628).
- IB/cma: Do not send IGMP leaves for sendonly Multicast groups
(bsc#1012628).
- RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure
(bsc#1012628).
- bpf, mips: Validate conditional branch offsets (bsc#1012628).
- hwmon: (mlxreg-fan) Return non-zero value when fan current
state is enforced from sysfs (bsc#1012628).
- RDMA/irdma: Skip CQP ring during a reset (bsc#1012628).
- RDMA/irdma: Validate number of CQ entries on create CQ
(bsc#1012628).
- RDMA/irdma: Report correct WC error when transport retry
counter is exceeded (bsc#1012628).
- RDMA/irdma: Report correct WC error when there are MW bind
errors (bsc#1012628).
- netfilter: nf_tables: unlink table before deleting it
(bsc#1012628).
- netfilter: log: work around missing softdep backend module
(bsc#1012628).
- Revert "mac80211: do not use low data rates for data frames
with no ack flag" (bsc#1012628).
- mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
(bsc#1012628).
- mac80211: limit injected vht mcs/nss in
ieee80211_parse_tx_radiotap (bsc#1012628).
- mac80211: mesh: fix potentially unaligned access (bsc#1012628).
- mac80211-hwsim: fix late beacon hrtimer handling (bsc#1012628).
- driver core: fw_devlink: Add support for
FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD (bsc#1012628).
- net: mdiobus: Set FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD for
mdiobus parents (bsc#1012628).
- sctp: break out if skb_header_pointer returns NULL in
sctp_rcv_ootb (bsc#1012628).
- mptcp: don't return sockets in foreign netns (bsc#1012628).
- mptcp: allow changing the 'backup' bit when no sockets are open
(bsc#1012628).
- RDMA/hns: Work around broken constant propagation in gcc 8
(bsc#1012628).
- hwmon: (tmp421) report /PVLD condition as fault (bsc#1012628).
- hwmon: (tmp421) fix rounding for negative values (bsc#1012628).
- net: enetc: fix the incorrect clearing of IF_MODE bits
(bsc#1012628).
- net: ipv4: Fix rtnexthop len when RTA_FLOW is present
(bsc#1012628).
- smsc95xx: fix stalled rx after link change (bsc#1012628).
- drm/i915/request: fix early tracepoints (bsc#1012628).
- drm/i915: Remove warning from the rps worker (bsc#1012628).
- dsa: mv88e6xxx: 6161: Use chip wide MAX MTU (bsc#1012628).
- dsa: mv88e6xxx: Fix MTU definition (bsc#1012628).
- dsa: mv88e6xxx: Include tagger overhead when setting MTU for
DSA and CPU ports (bsc#1012628).
- e100: fix length calculation in e100_get_regs_len (bsc#1012628).
- e100: fix buffer overrun in e100_get_regs (bsc#1012628).
- RDMA/hfi1: Fix kernel pointer leak (bsc#1012628).
- RDMA/hns: Fix the size setting error when copying CQE in
clean_cq() (bsc#1012628).
- RDMA/hns: Add the check of the CQE size of the user space
(bsc#1012628).
- bpf: Exempt CAP_BPF from checks against bpf_jit_limit
(bsc#1012628).
- libbpf: Fix segfault in static linker for objects without BTF
(bsc#1012628).
- selftests, bpf: Fix makefile dependencies on libbpf
(bsc#1012628).
- selftests, bpf: test_lwt_ip_encap: Really disable rp_filter
(bsc#1012628).
- bpf, x86: Fix bpf mapping of atomic fetch implementation
(bsc#1012628).
- net: ks8851: fix link error (bsc#1012628).
- ionic: fix gathering of debug stats (bsc#1012628).
- Revert "block, bfq: honor already-setup queue merges"
(bsc#1012628).
- scsi: csiostor: Add module softdep on cxgb4 (bsc#1012628).
- ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup
(bsc#1012628).
- net: hns3: do not allow call hns3_nic_net_open repeatedly
(bsc#1012628).
- net: hns3: remove tc enable checking (bsc#1012628).
- net: hns3: don't rollback when destroy mqprio fail
(bsc#1012628).
- net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and
HCLGE_FLAG_DCB_ENABLE (bsc#1012628).
- net: hns3: fix show wrong state when add existing uc mac address
(bsc#1012628).
- net: hns3: reconstruct function hns3_self_test (bsc#1012628).
- net: hns3: fix always enable rx vlan filter problem after
selftest (bsc#1012628).
- net: hns3: disable firmware compatible features when uninstall
PF (bsc#1012628).
- net: phy: bcm7xxx: Fixed indirect MMD operations (bsc#1012628).
- net: sched: flower: protect fl_walk() with rcu (bsc#1012628).
- net: stmmac: fix EEE init issue when paired with EEE capable
PHYs (bsc#1012628).
- af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
(bsc#1012628).
- objtool: Teach get_alt_entry() about more relocation types
(bsc#1012628).
- perf/x86/intel: Update event constraints for ICX (bsc#1012628).
- sched/fair: Add ancestors of unthrottled undecayed cfs_rq
(bsc#1012628).
- sched/fair: Null terminate buffer when updating tunable_scaling
(bsc#1012628).
- hwmon: (occ) Fix P10 VRM temp sensors (bsc#1012628).
- hwmon: (pmbus/mp2975) Add missed POUT attribute for page 1
mp2975 controller (bsc#1012628).
- kvm: fix objtool relocation warning (bsc#1012628).
- nvme: add command id quirk for apple controllers (bsc#1012628).
- elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
(bsc#1012628).
- driver core: fw_devlink: Improve handling of cyclic dependencies
(bsc#1012628).
- debugfs: debugfs_create_file_size(): use IS_ERR to check for
error (bsc#1012628).
- ipack: ipoctal: fix stack information leak (bsc#1012628).
- ipack: ipoctal: fix tty registration race (bsc#1012628).
- ipack: ipoctal: fix tty-registration error handling
(bsc#1012628).
- ipack: ipoctal: fix missing allocation-failure check
(bsc#1012628).
- ipack: ipoctal: fix module reference leak (bsc#1012628).
- ext4: fix loff_t overflow in ext4_max_bitmap_size()
(bsc#1012628).
- ext4: limit the number of blocks in one ADD_RANGE TLV
(bsc#1012628).
- ext4: fix reserved space counter leakage (bsc#1012628).
- ext4: add error checking to ext4_ext_replay_set_iblocks()
(bsc#1012628).
- ext4: fix potential infinite loop in ext4_dx_readdir()
(bsc#1012628).
- ext4: flush s_error_work before journal destroy in
ext4_fill_super (bsc#1012628).
- HID: u2fzero: ignore incomplete packets without data
(bsc#1012628).
- net: udp: annotate data race around udp_sk(sk)->corkflag
(bsc#1012628).
- NIOS2: setup.c: drop unused variable 'dram_start' (bsc#1012628).
- usb: hso: remove the bailout parameter (bsc#1012628).
- HID: betop: fix slab-out-of-bounds Write in betop_probe
(bsc#1012628).
- netfilter: ipset: Fix oversized kvmalloc() calls (bsc#1012628).
- mm: don't allow oversized kvmalloc() calls (bsc#1012628).
- HID: usbhid: free raw_report buffers in usbhid_stop
(bsc#1012628).
- crypto: aesni - xts_crypt() return if walk.nbytes is 0
(bsc#1012628).
- KVM: x86: Handle SRCU initialization failure during page track
init (bsc#1012628).
- netfilter: conntrack: serialize hash resizes and cleanups
(bsc#1012628).
- netfilter: nf_tables: Fix oversized kvmalloc() calls
(bsc#1012628).
- drivers: net: mhi: fix error path in mhi_net_newlink
(bsc#1012628).
- objtool: print out the symbol type when complaining about it
(bsc#1012628).
- HID: amd_sfh: Fix potential NULL pointer dereference - take 2
(bsc#1012628).
- commit 7c980ba
- ALSA: hda: intel: Allow repeatedly probing on codec
configuration errors (bsc#1190801).
- commit 924f4be
- rpm: use _rpmmacrodir (boo#1191384)
- commit e350c14
==== kfilemetadata5 ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kgamma5 ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
==== kglobalaccel ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kglobalaccel5 libKF5GlobalAccel5 libKF5GlobalAccelPrivate5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Remove obsolete LGPL-2.0-only license text
* Relicense remaining LGPL-2.0-only file
* Remove unneeded header
==== kguiaddons ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Use imported target for X11 libs
* Add explicit option for controlling X11 support
* Relicense remaining files away from LGPL-2.0-only
* Add missing static dependency to Config.cmake.in
==== kholidays ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Update Canadian holidays
* Update README.md
==== khotkeys5 ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Make unused variables anonymous or Q_UNUSED
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Remove autotests
* replace klineedit
* helper: fix warning from .ui file
* app: the kded library needn't link directly to kdelibs4 or xtest either
* testing: the standalone (test)app needs no kdelibs4 or XTest
* helpers: tidy up
* lib: replace use of KApplication
* KCM: use KF5-era UI-wrangling
* CMake: fix up FindKF5 bits
* Arts: one more ARTS-related file (was not hooked to build anymore)
* Arts: fix build after ARTS-removal
* Arts: remove ARTS-related files
* lib: replace deprecated methods
* Use version-less qt DBus macros
==== ki18n ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kiconthemes ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kidletime ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kinfocenter5 ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* fix up about-distro exec
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
- Drop patches, now upstream:
* 0001-Handle-libpci-errors-gracefully.patch
* 0002-Enable-the-PCI-module-everywhere.patch
- Drop patch, now longer necessary:
* plasma-session-name.patch
==== kinit ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Fix KDE shutdown bug
==== kio ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kio-core
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
* KUrlCompletion blocks autosuggestion from happening if the
input is an exact directory path. (kde#420966)
* KDirOperator: provide an option to enable showing open-with item actions (kde#440748)
* Fix permissions when copying files (kde#404777)
* KFileItem: refresh() shouldn't discard ACL attributes (kde#299155)
* KPropertiesDialog: show text label with item name for readonly items too (kde#442237)
==== kio-extras5 ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libkioarchive5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* Fix kio-mtp with libmtp 1.1.19
==== kirigami2 ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Kirigami2-5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
* PageRow: Do not async load the global header (kde#442660)
==== kitemmodels ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kitemmodels-imports libKF5ItemModels5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kitemviews ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Relicense files from LGPL-2.0-only to LGPL-2.0-or-later
==== kjobwidgets ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Add CI configuration file
==== kmenuedit5 ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* mimeData signature was changed in qt6 (scripted)
* Add build support + clazy
==== knewstuff ====
Version update (5.86.0 -> 5.87.0)
Subpackages: knewstuff-imports libKF5NewStuff5 libKF5NewStuffCore5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
* Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
* 0001-Include-a-user-agent-on-KNS-requests.patch
* fix-crash.patch
==== knotifications ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Add support for static builds
* Fix HIG URL
* Correct the version of Phonon that we use
* Remove non-KDE project
==== knotifyconfig ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== konsole ====
Version update (21.08.1 -> 21.08.2)
Subpackages: konsole-part
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* Update copyright year to 2021 (kde#442016)
* improve session closing behavior (kde#401898)
* Hide the Plugins menu if no plugins were loaded (kde#441199)
* Fix the maximum port number in the SSH Manager plugin (kde#441889)
* The default navigation method should be TabbedNavigation
* Don't resize window when switching virtual desktops in OpenBox (kde#441610)
- Drop upstream patch:
* 0001-Don-t-resize-window-when-switching-virtual-desktops-.patch
==== kpackage ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kparts ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kpeople5 ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kpty ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kquickcharts ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kscreen5 ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* Fix algorithm for common sizes in Generator::cloneScreens (kde#442822)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* fix all the new settings
* kcm: Use more conventional parent/background for OverlaySheet (kde#442563)
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Remove obsolete COPYING files
* Improve formatting of license headers
* Clarify sponsoring note
* Convert license headers to SPDX
* Add keywords to display KCM to improve search
* Do not bind "keep" to enter key
* support rgb range setting
* Allow to refresh view when modes change
* feat(kcm): add revert timer
* Import QtQuick 2.15 to enable Connection's items function onFoo Syntax
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* [kcm] Correct punctuation of "only when in tablet mode" string
* [kcm] Sort output's refresh rates descending (kde#439515)
* plasmoid: Use K_PLUGIN_CLASS_WITH_JSON directly
* Update IRC network name in CONTRIBUTING.md
* Use version-less qt DBus macros
* [kcm] Show on mobile
* [kcm] Align right edges of all comboboxes
==== kscreenlocker ====
Version update (5.22.5 -> 5.23.1)
Subpackages: libKScreenLocker5
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* Fix sleep and hibernate actions
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Add keywords to KScreenLocker to improve search
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Avoid creating windows for placeholder screens. (kde#439096)
* Simplify multi-screen handling
* Move DBus logic back into the greeter
* Use imported targets for X11 libs
* kcheckpass: Fix incorrect kevent() argument
* Handle ConvPutAuthAbort as an authentication failure (kde#438099)
* Make it compile with last ecm
* Remind people to log out of the VT after they unlock the session (kde#410772)
* --warning: use non-deprecated API
* Properly define Q_ENUM()
* [kcm] Fix icon name in metadata.desktop
* Use version-less qt DBus macros
* Show kcm on mobile
* Remove plasmashell protocol leftovers
* Fix logind test
==== kservice ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Deprecate KAutostart class
* Deprecate KService::parentApp
* Deprecate KService::pluginKeyword property
==== ksystemstats5 ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Fix ksystemstatstest failure
* Add description for the Sensors package
* Move find_package line
* Fix missing "Hardware Sensors" on Linux (kde#442528)
* Read extra amd gpu sensors
* Correct discoverSensors chip detection (kde#442042)
* Initialize some more pointer members to nullptr
- Drop patches, now upstream:
* 0001-Initialize-some-more-pointer-members-to-nullptr.patch
* 0001-Fix-ksystemstatstest-failure.patch
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* [plugins/gpu] Initialise properties (kde#442023)
* Discover more hardware gpu sensors (kde#438318)
* Use sensors to read amd gpu temperature
* Use SensorFeatureSensor in CPU plugin
* Use SensorsFeatureSensor from libksysguard
* Make libsensors required on Linux
* Do not dereference iterator that has been invalidated
* Only add a new VolumeObject if there's no other one with the same mounting point (kde#440477)
* Add maximum for total GPU usage (kde#441148)
* viewer: expand README with usage examples
* viewer: drop the "rolling" display, expand diagnostics
* daemon: log successfully loaded plugins, too
* freebsd-cpu: fix CPU load data retrieval
* freebsd-cpu: fix sysctl name of temperature sensor
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Fix handling of IPV6 addresses (kde#436296)
* gpu: Only scan pci devices
* Add load averages sensors
* Don't crash if there's no input subfeature (kde#439615)
* Only add "All GPUs" sensors when there is at least one GPU with statistics (kde#436770)
* Use 500ms update rate for network traffic sensors in NetworkManager backend
* Filter duplicate provider names
* Simplify plugin loading
* Use version-less qt DBus macros
* Init lib sensors centrally in the daemon (kde#437523)
* Update .gitignore
- Add patch to fix autotest failure:
* 0001-Fix-ksystemstatstest-failure.patch
- Add patch to fix crash on startup:
* 0001-Initialize-some-more-pointer-members-to-nullptr.patch
==== ktexteditor ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* The user is not selecting as soon as we clearSelection
* fix missing i18n (kde#442071)
==== ktextwidgets ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Handle RTL text selection the same way as Qt (kde#397922)
==== kunitconversion ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kwallet ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kwalletd5 libKF5Wallet5 libkwalletbackend5-5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kwalletmanager5 ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kwayland ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* KWayland depends on libraries/plasma-wayland-protocols
==== kwayland-integration ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* fix: Kicker's sub-menus are covered up by Plasma panels (kde#378694)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* fix a dirty shadows (kde#439408)
* Implement setting frost
* Add pre-commit hook for clang-format
* Add .git-blame-ignore-revs file
* Run clang-format
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Guard use of activation proxy (kde#440448)
* Fix compile with last ecm
* Fix build with GCC
* Be more explicit about types, hopefully fix CI builds
* Improve the behaviour when we are requesting without a window
* Also link against xkb and fix build
* Provide an implementation for the xdg_activation_v1 API
==== kwayland-server ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Automatically close fds for inert resources (kde#438097)
* outputdevice: add missing done events
* Send kde_output_device_v1.current_mode to the right resource
* Fix texture format handling for Nvidia driver
* fix rgb range sending (kde#442548)
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
==== kwidgetsaddons ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Make lupdate happier
* KCharSelect: Added option to show all blocks found in the data file (in the section menu).
* KFontChooser: the widget shouldn't become wider when toggling show fixed only
* KMessageDialog: disconnect default buttonbox signals as we emit done() manually
==== kwin5 ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* platforms/drm: fix disabled outputs with legacy drivers
* platforms/drm: reverse output creation order
* x11: Properly unredirect windows if compositing is not possible (kde#443953)
* Restore old behavior of Workspace::clientArea(clientOpt, Toplevel) (kde#443787)
* Do not ask for decoration settings without guarding
* scripting: Guard against nullptr m_client in WindowThumbnailItem (kde#443765)
* Properly update parent item's bounding rect when moving item (kde#443756)
* Fix AbstractClient::adjustedSize() for wayland windows with no committed buffer (kde#443705)
* Set KDE_COMPILERSETTINGS_LEVEL
* pipewire: Fix downloading software-rotated textures
* [wayland] fix crash on startup with lv3:ralt_alt XKB option (kde#440027)
- Drop patches, now upstream:
* kde443953.patch
- Add patch to fix black screen when compositing fails to initialize
(kde#443953):
* kde443953.patch
- Make pipewire-devel BR versioned
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Too many changes to list here
- Drop patches, now upstream:
* 0001-Fix-build-on-32bit-platforms.patch
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
- Adjust 0001-Export-consistent-hostname-as-XAUTHLOCALHOSTNAME.patch
- Add patch to fix build on 32bit:
* 0001-Fix-build-on-32bit-platforms.patch
==== kwindowsystem ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kwrited5 ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
==== kxmlgui ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Add missing Q_INIT_RESOURCE(kxmlgui)
* Replace "Libraries" by "Components" to show KAboutComponents info
==== layer-shell-qt ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Fix a crash when creating views on the placeholder screen
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Fix compile with last ecm.
* Mark .gitignore file as non-copyrightable
==== libKF5ModemManagerQt ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Introduce countryCode Modem3gpp API
==== libKF5NetworkManagerQt ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== libaom ====
Version update (3.1.2 -> 3.2.0)
- Update to version 3.2.0:
* This release includes compression efficiency and perceptual
quality improvements, speedup and memory optimizations, as well
as some new features.
* New Features:
+ Introduced speeds 7, 8, and 9 for all intra mode.
+ Introduced speed 10 for real time mode.
+ Introduced an API that allows external partition decisions.
+ SVC: added support for compound prediction.
+ SVC: added support for fixed SVC modes.
* Compression Efficiency Improvements:
+ Intra-mode search improvement.
+ Improved real time (RT) mode BDrate savings by ~5% (RT speed
5) and ~12% (RT speed 6). The improvement was measured on the
video conference set.
+ Improved real time mode for nonrd path (speed 7, 8, 9):
BDrate gains of ~3-5%.
+ Rate control and RD adjustments based on ML research in VP9.
Gains of ~0.5-1.0% for HD.
* Perceptual Quality Improvements:
+ Added a new mode --deltaq-mode=3 to improve perceptual
quality based on a differential contrast model for still
images.
+ Added a new mode ?deltaq-mode=4 to improve perceptual quality
based on user rated cq_level data set for still images.
+ Weighting of some intra mode and partition size choices to
better manage and retain texture.
* Speedup and Memory Optimizations:
+ Further improved 2-pass good quality encoder speed:
. Speed 2 speedup: 18%
. Speed 3 speedup: 22%
. Speed 4 speedup: 37%
. Speed 5 speedup: 30%
. Speed 6 speedup: 20%
+ Optimized the real time encoder (measured on the video
conference set):
. RT speed 5 speedup: 110%
. RT speed 6 speedup: 77%
* Bug Fixes
+ Issue 3069: Fix one-pass mode keyframe placement off-by-one
error.
+ Issue 3156: Fix a bug in av1_quantize_lp AVX2 optimization.
- Drop libaom-CVE-2021-30475.patch: Fixed upstream.
- Remove changesgenerate option from _service file, use data from
CHANGELOG to fill .changes instead as it it much nicer and human
readable than just a list of commit messages.
- fix service data
- Update to version 3.1.3:
* Update CHANGELOG for v3.1.3-rc2
* Detect chroma subsampling more directly
* Detect chroma subsampling more directly
* image2yuvconfig() should calculate uv_crop_width
* aom/aom_encoder.h: remove configure option reference
* aom_encoder.h: fix rc_overshoot_pct range
* Update AUTHORS,CHANGELOG,CMakeLists.txt for v3.1.3
* aom_install: don't exclude msvc from install
* aom_install: use relpath for install
* aom_install: Install lib dlls to bindir
==== libapparmor ====
- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)
==== libcap ====
Version update (2.51 -> 2.59)
- update to 2.59:
* Fixed a potential libcap memory leak by adding a destructor
* Major improvement is that there is a path for Linux-PAM compliant
applications to support setting Ambient vector Capabilities via pam_cap.so now
* Added libcap cap_proc_root() API function
* Added color support to captree
* Fixed contrib/sucap/su to correctly handle the Inheritable flag
* capsh enhancements
* getcap -r / now generates readable output
* The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
runnable as standalone binaries
* The module pam_cap.so now contains support for a default=<IAB> module argument
* Enhanced capsh --suggest to also compare against the capability value names
and not just their descriptions
* Added capsh --current support
* Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
* Fix for a corner case infinite loop handling long strings
* Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
* Added a Go utility, captree, to display the process (and thread) graph along with
the POSIX.1e and IAB capabilities of each PID{TID} tree.
==== libcdio ====
- Bump cdiopp_name libcdio++0 to libcdio++1, this was missed when
it was bumped by upstream. Followup change in baselibs.conf to.
- Split out new subpackage libiso9660++0, add needed Requires and
entry in baselibs.conf.
==== libglvnd ====
- libglvnd.rpmlintrc
* workaround for future buildcheck (boo#1191763)
==== libgphoto2 ====
- split out libgphoto2_port for now to meet new shared library policy
requirements. bsc#1191764
==== libinput ====
Version update (1.19.1 -> 1.19.2)
- Update to release 1.19.2:
* quirks: add quirk for GPD Win Max
* evdev: disable button scroll timeout for extra mouse buttons
* evdev: avoid usage of bogus BTN_FORWARD name
* gestures: avoid processing the last hold and
motion event twice
* quirks: Add quirk for StarLabs clickpads with two
phyisical buttons
* quirks: Update dmi for StarBook Mk V
* quirks: relax DMI modalias match for Purism Librem 14v1
==== libkdecoration2 ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Add kdecoration to plasma group for documentation purpose
* Build KDecoration with -DQT_NO_KEYWORDS
* Replace emit with Q_EMIT
* Introduce Decoration::damaged signal
==== libkscreen2 ====
Version update (5.22.5 -> 5.23.1)
Subpackages: libKF5Screen7 libkscreen2-plugin
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Fix autorotate when "only in tablet mode" is selected (kde#428626)
* fix all the new settings (kde#442520)
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* wayland: Fix output hotplugging
* wayland: Fix output transforms
* add rgb range setting
* Add support for plasma wayland protocol kde_output_device_v2
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Natural sort the outputs modes in kscreen-doctor
* Use qEnvironmentVariable() with a default instead of qgetenv()
* dpms: Remove boilerplatey code
* dpms: Do not hardcode the wayland socket
* Update IRC network name in CONTRIBUTING.md
* Use version-less qt DBus macros
* We depend against 5.82
* Use the same wayland connection to fetch screen information
==== libksysguard5 ====
Version update (5.22.5 -> 5.23.1)
Subpackages: ksysguardsystemstats-data libKSysGuardSystemStats1 libksysguard5-imports
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Add Plasma System Monitor to "Tools" menu
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
==== librsvg ====
Version update (2.52.0 -> 2.52.2)
Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0
- Update to version 2.52.2:
+ New features:
- rsvg-convert now supports generating multi-page PDFs in a
sensible way.
- With one SVG document per page, each page with the SVG's
natural size:
- rsvg-convert --format=pdf -o out.pdf a.svg b.svg c.svg
- With all pages sized as portrait US Letter, and each SVG
scaled to fit so that there is a 1in margin around each page:
rsvg-convert --format=pdf -o out.pdf \
- -page-width=8.5in --page-height=11in \
- -width=6.5in --height=8.5in --keep-aspect-ratio \
- -top=1in --left=1in a.svg b.svg c.svg
Please see the man page for details.
- Support <a> elements inside <text>. Also, support the CSS
:link pseudo-class for matching against links.
- Support the CSS :lang() pseudo-class for matching against an
element's xml:lang attribute.
- Support the mask-type property from SVG2.
+ Bugs fixed:
- Don't panic when a shorthand property is set to inherit.
- Fix regression with the viewport size of interior <svg>
elements.
- Allow length units to be case-insensitive, per SVG2.
+ Documentation:
- There is now a FEATURES.md in the repository, where you can
see all the elements, attributes, and properties that librsvg
supports. We will be adding detail to this gradually.
- For developers, there is now devel-docs/adding-a-property.md
with a tutorial on how to add support for new CSS properties.
- Update to version 2.52.1:
+ Fix ordering of tspan inside text elements for right-to-left
languages.
+ Fix text-anchor positioning for right-to-left languages.
+ Fix regression in computing sizes when an SVG has only one of
width/height and a viewBox.
+ Spec compliance - the writing-mode property applies only to
text elements, no to individual tspan elements.
+ Fix build on big-endian platforms.
+ Clarify documentation for the rsvg_handle_write() /
rsvg_handle_close() deprecated APIs.
==== libteam ====
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_teamd@.service.patch
==== liburing ====
Version update (2.0 -> 2.1)
- update to 2.1:
* Ignore spurious fadvise/madvise failures
* build: add -D_GNU_SOURCE to all CPPFLAGS/CFLAGS.
* man: clean up spelling
* man/io_uring_enter.2: add notes about direct open/accept
* io_uring.h: sync with 5.15 kernel
* Fix IORING_REGISTER_IOWQ_MAX_WORKERS name
* man: document new register/update API
* liburing: add helpers for direct open/accept
* liburing.h: correct max_worker name
* Change IORING_REGISTER_IOWQ_MAX_UNBOUND_WORKERS
* src/syscall.h: get rid of useless externs
* man/io_uring_enter.2: document IORING_ENTER_EXT_ARG
* Add io_uring_register_iowq_max_unbound() helper
* Get rid of useless 'extern' on function declarations in liburing.h
* Add (UN)REGISTER_IOWQ_AFF helpers
* man/io_uring_register.2: note when MAX_UNBOUND became available
* man/io_uring_register.2: add missing punctuation
* man/io_uring_register.2: document IORING_REGISTER_IOWQ_MAX_UNBOUND
* man/io_uring_enter.2: add IORING_OP_TIMEOUT clock sources
* man/io_uring_enter.2: improve timeout entry
* man/io_uring_enter.2: update SQE
* man/io_uring_enter.2: note that not all requests support fixed files
* man/io_uring_enter.2: add new 5.15 opcodes
* man/io_uring_enter.2: note that cqe->flags is indeed used
* man/io_uring_enter.2: add poll update and multishot mode
* man/io_uring_register.2: add IORING_(UN)REGISTER_IOWQ
* man: update notes on register quiesce
* man: fix io_uring_sqe alignment
* register: add tagging and buf update helpers
* liburing.h: make header clean for implicit sign and size conversions
* configure: document --cc and --cxx options
* io_uring: update buffer update feature testing
* liburing.h: dedup poll mask conversion
* liburing.h: add a multipoll helper
* Update io_uring.h
* examples: disable ucontext-cp for elbrus (e2k) architecture
* Update io_uring_setup.2
* man/io_uring_setup.2: document the two most recent FEAT flags
* man/io_uring_setup.2: make sure FEAT flags are kernel versioned
* correct syscall NR in mips
* Fix 32-bit compile warnings
* liburing.h: make all file/IO offset __u64
* src/queue: don't flush SQ ring for new wait interface
* man/io_uring_enter.2: further clarify what cqe->res holds
* Clarify information about error results
* Refer to the accept_flags in io_uring_enter manual
* Fix a bug due to the unreleased lock before function returns
* debian/rules: add missing slash for relativelibdir
* man/io_uring_enter.2: clarify io_uring_enter(2) SQPOLL return value
* liburing.h: add linkat prep helper
* io_uring.h: add linkat opcode
* liburing.h: add symlinkat prep helper
* io_uring.h: add symlinkat opcode
* liburing.h: add mkdirat prep helper
* update rsrc register/update ABI and tests
* queue: clean up SQ flushing
* io_uring_enter(2): Clarify how to read from and write to non-seekable files
* clarify an edge case of IORING_SETUP_SQ_AFF
* io_uring_enter(2): clarify OP_READ and OP_WRITE
* sync io_uring.h API file with Linux 5.13
* man: Fix typo in man io_uring_queue_exit
* examples/link-cp: fix a couple of strerror negations
* src/setup: don't treat dummy ring init as failure
* src/setup: add some documentation to the memlock helpers
* examples/ucontext-cp.c: cope with variable SIGSTKSZ
* setup: provide helpers to inquire about necessary mlock sizes
* examples/io_uring-cp: wait for pending writes before exit copy loop
* spec: add explicit build dependency on make
* spec: bump version to 2.0
* man/io_uring_enter.2: note that -EBUSY can also happen for getevents
==== libwebp ====
Version update (1.2.0 -> 1.2.1)
Subpackages: libwebp7 libwebpdemux2 libwebpmux3
- update to 1.2.1:
* minor lossless encoder improvements and x86 color conversion
speed up
* further security related hardening in libwebp & examples
* toolchain updates and bug fixes
* use more inclusive language within the source
==== libzypp ====
Version update (17.28.4 -> 17.28.6)
- Zypper should keep cached files if transaction is aborted
(bsc#1190356)
Singletrans mode currently does not keep files around if the
transaction is aborted. This patch fixes the problem.
- Require a minimum number of mirrors for multicurl (bsc#1191609)
- Use procfs to detect nr of open fd's if rlimit is too high
(bsc#1191324)
Especially in a VM iterating over all possible fd's to close open
ones right before a exec() slows down zypper unnecessarily. This
patch uses /proc/self/fd to iterate over open fd's in case rlimit
is above 1024.
- po: Fix some lost '%' signs in positional args (bsc#1191370)
- RepoManager: Don't probe for plaindir repo if URL schema is
plugin: (bsc#1191286)
- version 17.28.6 (22)
- Downloader does not respect checkExistsOnly flag (bsc#1190712)
A missing check causes zyppng::Downloader to always download full
files even if the checkExistsOnly flag is set. This patch adds
the missing logic.
- Fix kernel-*-livepatch removal in purge-kernels (bsc#1190815)
The kernel-*-livepatch packages are supposed to serve as a stable
handle for the ephemeral kernel livepatch packages. See
FATE#320268 for details. As part of the kernel live patching
ecosystem, kernel-*-livepatch packages should not block the
purge-kernels step.
- version 17.28.5 (22)
==== libzypp-plugin-appdata ====
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_appstream-sync-cache.service.patch
==== mdadm ====
- Install mdadm in _sbindir rather than /sbin. This is more
appropriate now that we have a merged-/usr.
(bsc#1191076)
==== milou5 ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Remove no longer needed CMake code
* Remove Preview stuff
* Fix error about "reversed" not being defined
* Make results delegate list items a bit taller with bigger icons (kde#422567)
==== mpg123 ====
Version update (1.29.0 -> 1.29.1)
- Update to version 1.29.1
mpg123:
* Keep default output encoding of s16 for raw and file outputs
also with the new resampler. This reverts the unintentional
change in 1.26.0 of switching to f32 for forced output rate
unless the NtoM resampler is selected. In any case, you
should make sure to specify your desired --encoding if you
depend on it.
* Catch error in indexing (mpg123_scan() return value was
ignored before, bug 322).
mpg123-strip:
* Lift the resync limit, as it should be to clean up really
dirty streams.
mpg123-id3dump:
* Also lift resync limit for the same reasons.
libout123:
* Fix reporting of device property flags for buffer
libmpg123:
* More safeguarding against attempts to decode if decoder
setup failed and user ignored the returned error code (bug
322)
==== mutter ====
- Rebase mutter-SLE-bsc984738-grab-display.patch.
==== ncurses ====
Version update (6.2.20210911 -> 6.2.20211002)
Subpackages: libncurses6 ncurses-utils terminfo-base
- Add ncurses patch 20211002
+ use return-value from vsnprintf to reallocate as needed to allow for
buffers larger than the screen size (report by "_RuRo_").
+ modify tset "-q" option to refrain from modifying terminal modes, to
match the documentation.
+ add section on margins to terminfo.5, adapted from X/Open Curses.
+ make tput/tset warning messages consistently using alias names when
those are used, rather than the underlying program's name.
+ improve tput usage message for aliases such as clear, by eliminating
tput-specific portions.
+ add a check in toe to ensure that a "termcap file" is text rather
than binary.
+ further build-fixes for OpenBSD 6.9, whose header files differ from
- Add ncurses patch 20210925
+ add kbeg to xterm+keypad to accommodate termcap applications -TD
+ add smglp and smgrp to vt420+lrmm, to provide useful data for the
"tabs" +m option -TD
+ build-fix for gcc 3.4.3 with Solaris10, which does not allow forward
reference of anonymous struct typedef.
+ modify tput to allow multiple commands per line.
+ minor fixes for tset manpage.
- Correct offsets of patch ncurses-6.2.dif
==== nvme-cli ====
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_nvmf-connect@.service.patch
==== open-iscsi ====
Subpackages: iscsiuio libopeniscsiusr0_2_0
- Fix possible systemd cycle by adding an "obsoletes" for
the old libopeniscsiusr for older versions.
==== open-vm-tools ====
Version update (11.3.0 -> 11.3.5)
Subpackages: libvmtools0
- Update to 11.3.5 (build 18557794) (boo#1190987)
+ New/Updated features:
- Added a configurable logging capability to the network script.
The network script has been updated to:
use vmware-toolbox-cmd to query any network logging configuration from
the tools.conf file. Use vmtoolsd --cmd "log ..." to log a message to
the vmx logfile when the logging handler is configured to "vmx" or when
the logfile is full or is not writeable.
- The hgfsmounter (mount.vmhgfs) command has been removed from
open-vm-tools.
The hgfsmounter (mount.vmhgfs) command is no longer used in
Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
removing all references to the hgfsmounter in Linux builds.
+ Resolved issues:
- Customization: Retry the Linux reboot if telinit is a soft link to
systemctl.
- Open-vm-tools commands would hang if configured with "--enable-valgrind".
+ Spec file updates for:
- rpmlint errors
- arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.
==== openssh ====
Version update (8.4p1 -> 8.8p1)
Subpackages: openssh-clients openssh-common openssh-server
- Version update to 8.8p1:
= Security
* sshd(8) from OpenSSH 6.2 through 8.7 failed to correctly initialise
supplemental groups when executing an AuthorizedKeysCommand or
AuthorizedPrincipalsCommand, where a AuthorizedKeysCommandUser or
AuthorizedPrincipalsCommandUser directive has been set to run the
command as a different user. Instead these commands would inherit
the groups that sshd(8) was started with.
Depending on system configuration, inherited groups may allow
AuthorizedKeysCommand/AuthorizedPrincipalsCommand helper programs to
gain unintended privilege.
Neither AuthorizedKeysCommand nor AuthorizedPrincipalsCommand are
enabled by default in sshd_config(5).
= Potentially-incompatible changes
* This release disables RSA signatures using the SHA-1 hash algorithm
by default. This change has been made as the SHA-1 hash algorithm is
cryptographically broken, and it is possible to create chosen-prefix
hash collisions for <USD$50K.
For most users, this change should be invisible and there is
no need to replace ssh-rsa keys. OpenSSH has supported RFC8332
RSA/SHA-256/512 signatures since release 7.2 and existing ssh-rsa keys
will automatically use the stronger algorithm where possible.
Incompatibility is more likely when connecting to older SSH
implementations that have not been upgraded or have not closely tracked
improvements in the SSH protocol. For these cases, it may be necessary
to selectively re-enable RSA/SHA1 to allow connection and/or user
authentication via the HostkeyAlgorithms and PubkeyAcceptedAlgorithms
options.
= New features
* ssh(1): allow the ssh_config(5) CanonicalizePermittedCNAMEs
directive to accept a "none" argument to specify the default
behaviour.
= Bugfixes
* scp(1): when using the SFTP protocol, continue transferring files
after a transfer error occurs, better matching original scp/rcp
behaviour.
* ssh(1): fixed a number of memory leaks in multiplexing,
* ssh-keygen(1): avoid crash when using the -Y find-principals
command.
* A number of documentation and manual improvements, including
bz#3340, PR139, PR215, PR241, PR257
- Additional changes from 8.7p1 release:
= Potentially-incompatible changes
* scp(1): this release changes the behaviour of remote to remote
copies (e.g. "scp host-a:/path host-b:") to transfer through the
local host by default. This was previously available via the -3
flag. This mode avoids the need to expose credentials on the
origin hop, avoids triplicate interpretation of filenames by the
shell (by the local system, the copy origin and the destination)
and, in conjunction with the SFTP support for scp(1) mentioned
below, allows use of all authentication methods to the remote
hosts (previously, only non-interactive methods could be used).
A -R flag has been added to select the old behaviour.
* ssh(1)/sshd(8): both the client and server are now using a
stricter configuration file parser. The new parser uses more
shell-like rules for quotes, space and escape characters. It is
also more strict in rejecting configurations that include options
lacking arguments. Previously some options (e.g. DenyUsers) could
appear on a line with no subsequent arguments. This release will
reject such configurations. The new parser will also reject
configurations with unterminated quotes and multiple '='
characters after the option name.
* ssh(1): when using SSHFP DNS records for host key verification,
ssh(1) will verify all matching records instead of just those
with the specific signature type requested. This may cause host
key verification problems if stale SSHFP records of a different
or legacy signature type exist alongside other records for a
particular host. bz#3322
* ssh-keygen(1): when generating a FIDO key and specifying an
explicit attestation challenge (using -Ochallenge), the challenge
will now be hashed by the builtin security key middleware. This
removes the (undocumented) requirement that challenges be exactly
32 bytes in length and matches the expectations of libfido2.
* sshd(8): environment="..." directives in authorized_keys files are
now first-match-wins and limited to 1024 discrete environment
variable names.
= New features
* scp(1): experimental support for transfers using the SFTP protocol
as a replacement for the venerable SCP/RCP protocol that it has
traditionally used. SFTP offers more predictable filename handling
and does not require expansion of glob(3) patterns via the shell
on the remote side.
* sftp-server(8): add a protocol extension to support expansion of
~/ and ~user/ prefixed paths. This was added to support these
paths when used by scp(1) while in SFTP mode.
* ssh(1): add a ForkAfterAuthentication ssh_config(5) counterpart to
the ssh(1) -f flag. GHPR231
* ssh(1): add a StdinNull directive to ssh_config(5) that allows the
config file to do the same thing as -n does on the ssh(1) command-
line. GHPR231
* ssh(1): add a SessionType directive to ssh_config, allowing the
configuration file to offer equivalent control to the -N (no
session) and -s (subsystem) command-line flags. GHPR231
* ssh-keygen(1): allowed signers files used by ssh-keygen(1)
signatures now support listing key validity intervals alongside
they key, and ssh-keygen(1) can optionally check during signature
verification whether a specified time falls inside this interval.
This feature is intended for use by git to support signing and
verifying objects using ssh keys.
* ssh-keygen(8): support printing of the full public key in a sshsig
signature via a -Oprint-pubkey flag.
= Bugfixes
* ssh(1)/sshd(8): start time-based re-keying exactly on schedule in
the client and server mainloops. Previously the re-key timeout
could expire but re-keying would not start until a packet was sent
or received, causing a spin in select() if the connection was
quiescent.
* ssh-keygen(1): avoid Y2038 problem in printing certificate
validity lifetimes. Dates past 2^31-1 seconds since epoch were
displayed incorrectly on some platforms. bz#3329
* scp(1): allow spaces to appear in usernames for local to remote
and scp -3 remote to remote copies. bz#1164
* ssh(1)/sshd(8): remove references to ChallengeResponseAuthentication
in favour of KbdInteractiveAuthentication. The former is what was in
SSHv1, the latter is what is in SSHv2 (RFC4256) and they were
treated as somewhat but not entirely equivalent. We retain the old
name as a deprecated alias so configuration files continue to work
as well as a reference in the man page for people looking for it.
bz#3303
* ssh(1)/ssh-add(1)/ssh-keygen(1): fix decoding of X.509 subject name
when extracting a key from a PKCS#11 certificate. bz#3327
* ssh(1): restore blocking status on stdio fds before close. ssh(1)
needs file descriptors in non-blocking mode to operate but it was
not restoring the original state on exit. This could cause
problems with fds shared with other programs via the shell,
bz#3280 and GHPR246
* ssh(1)/sshd(8): switch both client and server mainloops from
select(3) to pselect(3). Avoids race conditions where a signal
may arrive immediately before select(3) and not be processed until
an event fires. bz#2158
* ssh(1): sessions started with ControlPersist were incorrectly
executing a shell when the -N (no shell) option was specified.
bz#3290
* ssh(1): check if IPQoS or TunnelDevice are already set before
overriding. Prevents values in config files from overriding values
supplied on the command line. bz#3319
* ssh(1): fix debug message when finding a private key to match a
certificate being attempted for user authentication. Previously it
would print the certificate's path, whereas it was supposed to be
showing the private key's path. GHPR247
* sshd(8): match host certificates against host public keys, not
private keys. Allows use of certificates with private keys held in
a ssh-agent. bz#3524
* ssh(1): add a workaround for a bug in OpenSSH 7.4 sshd(8), which
allows RSA/SHA2 signatures for public key authentication but fails
to advertise this correctly via SSH2_MSG_EXT_INFO. This causes
clients of these server to incorrectly match
PubkeyAcceptedAlgorithmse and potentially refuse to offer valid
keys. bz#3213
* sftp(1)/scp(1): degrade gracefully if a sftp-server offers the
limits(a)openssh.com extension but fails when the client tries to
invoke it. bz#3318
* ssh(1): allow ssh_config SetEnv to override $TERM, which is
otherwise handled specially by the protocol. Useful in ~/.ssh/config
to set TERM to something generic (e.g. "xterm" instead of
"xterm-256color") for destinations that lack terminfo entries.
* sftp-server(8): the limits(a)openssh.com extension was incorrectly
marked as an operation that writes to the filesystem, which made it
unavailable in sftp-server read-only mode. bz#3318
* ssh(1): fix SEGV in UpdateHostkeys debug() message, triggered when
the update removed more host keys than remain present.
* Many manual page fixes.
- Additional changes from 8.6p1 release:
= Security
* sshd(8): OpenSSH 8.5 introduced the LogVerbose keyword. When this
option was enabled with a set of patterns that activated logging
in code that runs in the low-privilege sandboxed sshd process, the
log messages were constructed in such a way that printf(3) format
strings could effectively be specified the low-privilege code.
= New features
* sftp-server(8): add a new limits(a)openssh.com protocol extension
that allows a client to discover various server limits, including
maximum packet size and maximum read/write length.
* sftp(1): use the new limits(a)openssh.com extension (when available)
to select better transfer lengths in the client.
* sshd(8): Add ModuliFile keyword to sshd_config to specify the
location of the "moduli" file containing the groups for DH-GEX.
* unit tests: Add a TEST_SSH_ELAPSED_TIMES environment variable to
enable printing of the elapsed time in seconds of each test.
= Bugfixes
* ssh_config(5), sshd_config(5): sync CASignatureAlgorithms lists in
manual pages with the current default. GHPR174
* ssh(1): ensure that pkcs11_del_provider() is called before exit.
GHPR234
* ssh(1), sshd(8): fix problems in string->argv conversion. Multiple
backslashes were not being dequoted correctly and quoted space in
the middle of a string was being incorrectly split. GHPR223
* ssh(1): return non-zero exit status when killed by signal; bz#3281
* sftp-server(8): increase maximum SSH2_FXP_READ to match the maximum
packet size. Also handle zero-length reads that are not explicitly
banned by the spec.
- Additional changes from 8.5p1 release:
= Security
* ssh-agent(1): fixed a double-free memory corruption that was
introduced in OpenSSH 8.2 . We treat all such memory faults as
potentially exploitable. This bug could be reached by an attacker
with access to the agent socket.
= Potentially-incompatible changes
* ssh(1), sshd(8): this release changes the first-preference signature
algorithm from ECDSA to ED25519.
* ssh(1), sshd(8): set the TOS/DSCP specified in the configuration
for interactive use prior to TCP connect. The connection phase of
the SSH session is time-sensitive and often explicitly interactive.
The ultimate interactive/bulk TOS/DSCP will be set after
authentication completes.
* ssh(1), sshd(8): remove the pre-standardization cipher
rijndael-cbc(a)lysator.liu.se. It is an alias for aes256-cbc before
it was standardized in RFC4253 (2006), has been deprecated and
disabled by default since OpenSSH 7.2 (2016) and was only briefly
documented in ssh.1 in 2001.
* ssh(1), sshd(8): update/replace the experimental post-quantum
hybrid key exchange method based on Streamlined NTRU Prime coupled
with X25519. The previous sntrup4591761x25519-sha512(a)tinyssh.org
method is replaced with sntrup761x25519-sha512(a)openssh.com.
* ssh(1): disable CheckHostIP by default. It provides insignificant
benefits while making key rotation significantly more difficult,
especially for hosts behind IP-based load-balancers.
= New features
* ssh(1): this release enables UpdateHostkeys by default subject to
some conservative preconditions:
- The key was matched in the UserKnownHostsFile (and not in the
GlobalKnownHostsFile).
- The same key does not exist under another name.
- A certificate host key is not in use.
- known_hosts contains no matching wildcard hostname pattern.
- VerifyHostKeyDNS is not enabled.
- The default UserKnownHostsFile is in use.
* ssh(1), sshd(8): add a new LogVerbose configuration directive for
that allows forcing maximum debug logging by file/function/line
pattern-lists.
* ssh(1): when prompting the user to accept a new hostkey, display
any other host names/addresses already associated with the key.
* ssh(1): allow UserKnownHostsFile=none to indicate that no
known_hosts file should be used to identify host keys.
* ssh(1): add a ssh_config KnownHostsCommand option that allows the
client to obtain known_hosts data from a command in addition to
the usual files.
* ssh(1): add a ssh_config PermitRemoteOpen option that allows the
client to restrict the destination when RemoteForward is used
with SOCKS.
* ssh(1): for FIDO keys, if a signature operation fails with a
"incorrect PIN" reason and no PIN was initially requested from the
user, then request a PIN and retry the operation. This supports
some biometric devices that fall back to requiring PIN when reading
of the biometric failed, and devices that require PINs for all
hosted credentials.
* sshd(8): implement client address-based rate-limiting via new
sshd_config(5) PerSourceMaxStartups and PerSourceNetBlockSize
directives that provide more fine-grained control on a per-origin
address basis than the global MaxStartups limit.
= Bugfixes
* ssh(1): Prefix keyboard interactive prompts with "(user@host)" to
make it easier to determine which connection they are associated
with in cases like scp -3, ProxyJump, etc. bz#3224
* sshd(8): fix sshd_config SetEnv directives located inside Match
blocks. GHPR201
* ssh(1): when requesting a FIDO token touch on stderr, inform the
user once the touch has been recorded.
* ssh(1): prevent integer overflow when ridiculously large
ConnectTimeout values are specified, capping the effective value
(for most platforms) at 24 days. bz#3229
* ssh(1): consider the ECDSA key subtype when ordering host key
algorithms in the client.
* ssh(1), sshd(8): rename the PubkeyAcceptedKeyTypes keyword to
PubkeyAcceptedAlgorithms. The previous name incorrectly suggested
that it control allowed key algorithms, when this option actually
specifies the signature algorithms that are accepted. The previous
name remains available as an alias. bz#3253
* ssh(1), sshd(8): similarly, rename HostbasedKeyTypes (ssh) and
HostbasedAcceptedKeyTypes (sshd) to HostbasedAcceptedAlgorithms.
* sftp-server(8): add missing lsetstat(a)openssh.com documentation
and advertisement in the server's SSH2_FXP_VERSION hello packet.
* ssh(1), sshd(8): more strictly enforce KEX state-machine by
banning packet types once they are received. Fixes memleak caused
by duplicate SSH2_MSG_KEX_DH_GEX_REQUEST (oss-fuzz #30078).
* sftp(1): allow the full range of UIDs/GIDs for chown/chgrp on 32bit
platforms instead of being limited by LONG_MAX. bz#3206
* Minor man page fixes (capitalization, commas, etc.) bz#3223
* sftp(1): when doing an sftp recursive upload or download of a
read-only directory, ensure that the directory is created with
write and execute permissions in the interim so that the transfer
can actually complete, then set the directory permission as the
final step. bz#3222
* ssh-keygen(1): document the -Z, check the validity of its argument
earlier and provide a better error message if it's not correct.
bz#2879
* ssh(1): ignore comments at the end of config lines in ssh_config,
similar to what we already do for sshd_config. bz#2320
* sshd_config(5): mention that DisableForwarding is valid in a
sshd_config Match block. bz3239
* sftp(1): fix incorrect sorting of "ls -ltr" under some
circumstances. bz3248.
* ssh(1), sshd(8): fix potential integer truncation of (unlikely)
timeout values. bz#3250
* ssh(1): make hostbased authentication send the signature algorithm
in its SSH2_MSG_USERAUTH_REQUEST packets instead of the key type.
This make HostbasedAcceptedAlgorithms do what it is supposed to -
filter on signature algorithm and not key type.
- Rebased patches:
* openssh-7.7p1-IPv6_X_forwarding.patch
* openssh-7.7p1-X11_trusted_forwarding.patch
* openssh-7.7p1-X_forward_with_disabled_ipv6.patch
* openssh-7.7p1-cavstest-ctr.patch
* openssh-7.7p1-cavstest-kdf.patch
* openssh-7.7p1-disable_openssl_abi_check.patch
* openssh-7.7p1-eal3.patch
* openssh-7.7p1-enable_PAM_by_default.patch
* openssh-7.7p1-fips.patch
* openssh-7.7p1-fips_checks.patch
* openssh-7.7p1-host_ident.patch
* openssh-7.7p1-hostname_changes_when_forwarding_X.patch
* openssh-7.7p1-ldap.patch
* openssh-7.7p1-no_fork-no_pid_file.patch
* openssh-7.7p1-pam_check_locks.patch
* openssh-7.7p1-pts_names_formatting.patch
* openssh-7.7p1-remove_xauth_cookies_on_exit.patch
* openssh-7.7p1-seccomp_ipc_flock.patch
* openssh-7.7p1-seccomp_stat.patch
* openssh-7.7p1-send_locale.patch
* openssh-7.7p1-sftp_force_permissions.patch
* openssh-7.7p1-sftp_print_diagnostic_messages.patch
* openssh-7.7p1-systemd-notify.patch
* openssh-7.9p1-keygen-preserve-perms.patch
* openssh-7.9p1-revert-new-qos-defaults.patch
* openssh-8.0p1-gssapi-keyex.patch
* openssh-8.1p1-audit.patch
* openssh-8.1p1-seccomp-clock_gettime64.patch
* openssh-8.1p1-seccomp-clock_nanosleep.patch
* openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
* openssh-8.1p1-use-openssl-kdf.patch
* openssh-8.4p1-vendordir.patch
* openssh-fips-ensure-approved-moduli.patch
* openssh-link-with-sk.patch
* openssh-reenable-dh-group14-sha1-default.patch
* openssh-whitelist-syscalls.patch
- Removed openssh-fix-ssh-copy-id.patch (fixed upstream).
- openssh.keyring: rotated to new key from https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/RELEASE_KEY.asc
- sshd-gen-keys-start:
- only source sysconfig file if it exists.
- create /etc/ssh if it does not exists.
Required for image based installation/updates.
==== pam-config ====
Version update (1.4 -> 1.5)
- Update to Version 1.5
- Don't print an error message if one of the systemd PAM modules
does not exist if creating the *-pc files [bsc#1191528]
- Drop pam_systemd_home again [bsc#1191528]
==== pangomm1_4 ====
- turn off doc build, it does not work with new doxygen
==== patterns-gnome ====
Subpackages: patterns-gnome-gnome_basic patterns-gnome-gnome_basis
- Drop gnome-power-manager Recommends: Package is dormant upstream
and on its way to be replaced by new features inside of
gnome-control-center.
==== patterns-microos ====
Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-base-microdnf patterns-microos-base-packagekit patterns-microos-base-zypper patterns-microos-basesystem patterns-microos-cloud patterns-microos-cockpit patterns-microos-defaults patterns-microos-desktop-common patterns-microos-desktop-gnome patterns-microos-desktop-kde patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-ra_agent patterns-microos-ra_verifier patterns-microos-selinux patterns-microos-sssd_ldap
- Add xdg-desktop-portal-gnome to gnome pattern
- Drop gnome-power-manager Requires: Package is dormant upstream
and on it's way to be replaced by new features inside of
gnome-control-center.
==== pipewire ====
Version update (0.3.37 -> 0.3.38)
Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-media-session pipewire-modules pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools
- Add patch from upstream to fix compilation on ARM (boo#1191600):
* 0001-fix-compilation-on-ARM.patch
- Update to version 0.3.38:
* Highlights
- Topic based logging was added to improve debugging.
- An off-by-one error was fixed in the audio resampler that could
cause distortion when downsampling.
- Various bluetooth compatibility improvements.
- More fixes and improvements.
* PipeWire
- module-pulse-tunnel now has better default latency to make it work
better in more cases. There is also an option to configure the
desired latency.
- pw-cli now has readline support.
- Topic based logging was added. Log lines can now be filtered by
topic using wildcards. This should improve debugging.
- The systemd service files should now have better descriptions.
- Fix a crash in module-zeroconf-discover when unloading.
- Fix a crash in filter-chain when using unaligned memory.
* ALSA
- Sync the udev rules and profiles with pulseaudio.
- Fix a memory leak.
* SPA plugins
- An off-by-one error was fixed in the resampler that could cause
distortion when downsampling. (#1646)
* Bluetooth
- Avoid probing the native backend because it might block for DBus
activation. This fixes some long startup times.
- Fix the kernel version check, 5.14.x kernels should also support
mSBC.
- Fix FastStream microphone support in more cases.
- Add workaround for Intel AX200.
- SCO sink should now also work in follower mode.
* PulseAudio server
- Make the service file require a session manager.
- Add BuildRequires: pkgconfig(readline) so pw-cli is built with
readline support
==== plasma-browser-integration ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Add .git-blame-ignore-revs file
* Add pre-commit hook for clang-format
* Run clang-format
* Prevent clang-format uglification
* [purpose] Use ShareUrl plugin type instead of Export
* [History Runner] Request favicon with device pixel ratio
* Use version-less qt DBus macros
==== plasma-framework ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Plasma5 plasma-framework-components
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
* Revert "Change busywidget to a gear" (kde#442525)
* ExpandableListitem: Correct expanded view height calculation (kde#442537)
==== plasma-nm5 ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* openconnect: Adjust version check in CMake and allow version 3.99 again
* openconnect widget: Default to "anyconnect" when protocol is not set.
* openconnect: Make FSID passphrase + empty private key combination work. (kde#443770)
* Only include mobileproviderstest with ModemManager
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Remove applet list item animations
- Add new key + signature to plasma.keyring
- Drop hard requirement on NM-fortisslvpn for now to avoid
installcheck failure in staging
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
==== plasma5-addons ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Make colors in color picker respond properly to right click and Menu key
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
==== plasma5-desktop ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* Fix "clear emoji history" action (kde#443974)
* kickoff: Replace Kicker DragHelper with Qt Quick Drag (kde#443708)
* Make tooltip interactive when there is a player but no window is present (kde#443425)
* taskmanager: Disconnect from backend.showAllPlaces on destruction (kde#443820)
* Add systemsettings runner to hardcoded list of allowed runners for kicker (kde#443776)
* Folder View: Don't cancel multi-selection with right-click (kde#443743)
* [applets/kicker] Explicitly set visible property when opacity is 0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* [wayland] fix activity switching shortcut (Meta+Tab) (kde#443323)
* kickoff: Fix dragEnabled error for KickoffItemDelegates in singleton
* [applets/taskmanger] Do not overlay scrollbars over contents (kde#443173)
* kickoff: Fix null width/height error for some app grid view delegates
* kickoff: re-add drag and drop for favorites (kde#440308)
* kickoff: center align GridView
* kickoff: move isSearchDelegate binding to where search view is
* kickoff: simplify KickoffItemDelegate MouseArea anchor margins
* kickoff: fix hover changing index when moving between search and normal pages (kde#443076)
* kickoff: fix wrong activefocus being used in KickoffItemDelegate
* kickoff: Fix misspelled module qualifier
* Make clicking one item when multiple are selected deselect everything else (kde#424152)
* kcm_touchpad: fix translation for scroll speed setting slider
* Indicate when one of the thumbnails on the quick settings kcm has focus
* Check for currentApplet existence (kde#443287)
* KCM Touchpad: hide right and middle click sections when unavailable
* Open context menu under the cursor again (kde#443278)
* Adjust position of panel config bar when Enter is pressed (kde#443280)
* CompactApplet: Only draw separator line for panel applets (kde#439374)
* [keyboardlayout applet] fix non-working context menu (kde#441239)
* [Emojier] Set highlightMoveDuration to zero
* applets/kickoff: Improve list item touch targets and general aesthetics (kde#442661)
* Use Kirigami.Avatar in Kickoff Header bar (kde#442776)
* [kcms/activities] Fix QML i18n calls (kde#442514)
* kickoff: implement directional navigation
* kickoff: keep delegate highlight visible more often
* kickoff: Use attached tooltip for leave buttons
- Drop patches, now upstream:
* 0001-Use-Kirigami.Avatar-in-Kickoff-Header-bar.patch
- Add new key + signature to plasma.keyring
- Add patch to fix fallback user icon in Kickoff (kde#442776):
* 0001-Use-Kirigami.Avatar-in-Kickoff-Header-bar.patch
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
==== plasma5-integration ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Backport "FileChooser portal: send window id in hex" from qtbase
* QXdgDesktopPortalFileDialog: use QUrl to store directory & selection
* More p-m-f connect() signal/slot syntax
* Use pointer-to-member-function signal/slot syntax
* Add pre-commit hook for clang-format
* Add .git-blame-ignore-revs file
* Run clang-format
* Add trailing commas
* Remove obsolete COPYING file
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Make it compile without deprecated enum
* Convert license headers to SPDX
* Stop advertising titlebar "What's This?" help button
* Remove wayland roundtrip
* Use version-less qt DBus macros
==== plasma5-openSUSE ====
Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE sddm-theme-openSUSE
- Update to 5.23.1
- Update to 5.23.0
- Update to 5.22.90
==== plasma5-pa ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* [speakertest] Force canberra driver to PulseAudio (kde#442781)
* Fix a bug that caused the handle of the volume slider to show artifacts (kde#434927)
* Fix balance setting (kde#439751)
- Add supplements for pipewire-pulseaudio as well
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Add keywords to audio KCM
* Integrate the advanced options under `Configure...` in the main page
* Disable global mute when changing volume
* [kcm] Avoid string puzzle
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Remove unneeded target
* [applet] Don't install as bundled package
* [ListItemBase] Open menu on press
* Remove unneeded X-KDE-PluginKeyword
* [applet] Only set VolumeMonitor object if it's valid
* Always disconnect streams (kde#439347)
* [applet] Fix QML error
* Use version-less qt DBus macros
* Use ellipses instead of triple period
* Set meta + mute as a default shortcut to mute the microphone
* Support multiple default shortcuts
* Fix crash when target is destroyed before monitor (kde#437184)
* Indicate when application is "corked" (kde#398476)
==== plasma5-workspace ====
Version update (5.22.5 -> 5.23.1)
Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-libs xembedsniproxy
- Add back X11 root window properties until firefox is adjusted
(boo#1191825):
* 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
* 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* [freespacenotifier] impr: no notification for ro filesystems
* kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
* [kcms/colors] Notify global settings change after saving
* krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
* sddm-theme: fix missing password field on "Other" page (kde#443737)
* pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
* [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
* 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch
- Add patch to show password input on the "Other" page in SDDM (kde#443737):
* 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Revert "xembed: adapt to changes in KNotifications" (kde#442758)
* sddm-theme: Fix using mouse movements to show the UI
* [systemtray] Check for menuItemFactory.object existence (kde#443377)
* applets/devicenotifier: Remove applet list item animations
* sddm-theme: Fix use of needsPassword and related button layout
* [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
* Fix Kickoff context menu actions for System Settings results (kde#442522)
* klipper: Fix reading from plasma on wayland
* Fix build with gpsd 3.23.1
* Unbreak fontinst KCM (kde#442748)
* Address regression in VT switching code (kde#442852)
* libtaskmanager: Don't request dmabuf if not supported (kde#428284)
* Port away from Kirigami.Units.devicePixelRatio
* lookandfeel: don't nuke accent colour (kde#442812)
* kcm/colors: Improve some bindings on accent colors
* sddm-theme: fix default username font size
* PipeWire: Include defines for older PipeWire versions
* pipewire: Properly compare pipewire versions using QVersionNumber
* [Klipper] Guard against broken data fetches
* [Klipper] Handle incoming UTF-8 mime types (kde#424694)
* PipeWire: Make sure thumbnails properly use dmabuf again
* [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
* 0001-Fix-build-with-gpsd-3.23.1.patch
* 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
* 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
* 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
* 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
* 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
* 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
* 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
* 0007-Klipper-Guard-against-broken-data-fetches.patch
* 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
* 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
* 0010-sddm-theme-fix-default-username-font-size.patch
* 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring
- Add patch to fix build with gpsd:
* 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
* 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
- Add patches from Plasma/5.23 branch:
* 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
* 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
* 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
* 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
* 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
* 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
* 0007-Klipper-Guard-against-broken-data-fetches.patch
* 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
* 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
* 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
* 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
- Refresh patches:
* 0001-Revert-No-icons-on-the-desktop-by-default.patch
* 0001-Use-qdbus-qt5.patch
- Drop patches, now upstream:
* Call-UnInhibit-with-correct-signature-in-powermanagement-dataengine.patch
==== polkit-default-privs ====
Version update (1550+20210818.b0c41fd -> 1550+20211008.9751669)
- drop backward compatibility symlink in /etc/polkit-default-privs.standard.
rpmlint 2.0 is now in Factory and the check there directly uses the profile
in /usr/etc/polkit-default-privs/profiles/standard.
- drop polkit-whitelisting sub-package. This is now handled in rpmlint 2.0
internally.
- Update to version 1550+20211008.9751669:
* whitelist power-profiles-daemon actions (bsc#1189900)
* cleanup: remove polkit-rules-whitelist.json
==== polkit-kde-agent-5 ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Clean up CMake code
* Build with QT_NO_KEYWORDS
* Use version-less qt DBus macros
* Remove obsolete COPYING file
* Add license information to non-copyrightable files
* Convert license headers to SPDX
==== poppler ====
Version update (21.08.0 -> 21.10.0)
Subpackages: libpoppler-cpp0 libpoppler-glib8
- Update to 21.10.0:
core:
* Add support for setting custom stamp annotations
* Add default appearance for the well known stamp names
* Correct encoding of signature's properties Reason & Location
* Splash: Fix rendering of some odd patterns
* SignatureHandler::validateCertificate: Add option to not do OCSP revocation check
* SignatureHandler::validateCertificate: Add support for AIA fetching to verify certificates
* greallocn: if memory allocation fails, free the previous pointer to avoid memory leak
* Fix issues with malformed files
utils:
* pdfsig: Add a way to list certificate nicknames
* pdfsig: You can now add signatures from pdfsig
* pdfsig: Add option to not do OCSP revocation check
* pdfsig: Add option for AIA fetching to verify certificates
* pdfinfo: Add -custom option to print custom metadata
* pdfinfo: add metadata flags
qt:
* Add support for setting custom stamp annotations
* Add getters for signature's properties Reason & Location
glib:
* Remove incorrect PopplerAttachment deprecation
- Update to 21.09.0:
core:
* Splash: Massive speed improvement on files that use lots of save/restore (q/Q) operators
* Correct decoding of signature properties Reason & Location when they are Unicode
* Fix issues with malformed files
==== poppler-qt5 ====
Version update (21.08.0 -> 21.10.0)
- Update to 21.10.0:
core:
* Add support for setting custom stamp annotations
* Add default appearance for the well known stamp names
* Correct encoding of signature's properties Reason & Location
* Splash: Fix rendering of some odd patterns
* SignatureHandler::validateCertificate: Add option to not do OCSP revocation check
* SignatureHandler::validateCertificate: Add support for AIA fetching to verify certificates
* greallocn: if memory allocation fails, free the previous pointer to avoid memory leak
* Fix issues with malformed files
utils:
* pdfsig: Add a way to list certificate nicknames
* pdfsig: You can now add signatures from pdfsig
* pdfsig: Add option to not do OCSP revocation check
* pdfsig: Add option for AIA fetching to verify certificates
* pdfinfo: Add -custom option to print custom metadata
* pdfinfo: add metadata flags
qt:
* Add support for setting custom stamp annotations
* Add getters for signature's properties Reason & Location
glib:
* Remove incorrect PopplerAttachment deprecation
- Update to 21.09.0:
core:
* Splash: Massive speed improvement on files that use lots of save/restore (q/Q) operators
* Correct decoding of signature properties Reason & Location when they are Unicode
* Fix issues with malformed files
==== powerdevil5 ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Clear alwaysActionBox before filling (kde#443114)
* Remove inappropriate low maximum width for spinboxes (kde#442556)
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Add keywords to power KCMs
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* powerprofiles: Add support for ProfileHolds
* powerprofiles: expose PerformanceDegraded property
* Fix crash if dbus call finishes before we have a valid config group (kde#440338)
* Handle DBus call finishing before buildUI is called (kde#440223)
* Integrate power-profiles daemon
* Use version-less qt DBus macros
* Use ellipses instead of triple period
==== prison-qt5 ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Prison5 prison-qt5-imports
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Select the most efficient QR encoding mode rather than always using 8bit
* Only build and run datamatrixtest if libdmtx is available
==== pulseaudio ====
Subpackages: libpulse-mainloop-glib0 libpulse0
- Make system-user-pulse noarch
- Split sysusers.d file to separate package as needed by brltty
(bsc#1191465)
==== purpose ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Purpose5 libKF5PurposeWidgets5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* plugins/barcode: Call it a "QR code" in the UI
* Add Barcode plugin
==== python-Jinja2 ====
Version update (3.0.1 -> 3.0.2)
- dropped obsolete no-warnings-as-errors.patch
- update to 3.0.2
* Fix a loop scoping bug that caused assignments in nested loops to still
be referenced outside of it. #1427
* Make compile_templates deterministic for filter and import names. #1452, #1453
* Revert an unintended change that caused Undefined to act like
StrictUndefined for the in operator. #1448
* Imported macros have access to the current template globals in async
environments. #1494
* PackageLoader will not include a current directory (.) path segment.
This allows loading templates from the root of a zip import. #1467
==== python-alembic ====
Version update (1.6.5 -> 1.7.4)
- update to 1.7.4:
* Fixed a regression that prevented the use of post write hooks on python
version lower than 3.9
* Added missing attributes from context stubs.
* Fixed issue where registration of custom ops was prone to failure due to
the registration process running exec() on generated code that as of the
1.7 series includes pep-484 annotations, which in the case of end user code
would result in name resolution errors when the exec occurs
- specfile:
* skip python 2 builds
* require importlib-resources
- update to version 1.7.1:
* Corrected "universal wheel" directive in setup.cfg so that
building a wheel does not target Python 2. The PyPi files index
for 1.7.0 was corrected manually. Pull request courtesy layday.
* Fixed issue in generated .pyi files where default values for
"Optional" arguments were missing, thereby causing mypy to
consider them as required.
* Fixed regression in batch mode due to :ticket:`883` where the
"auto" mode of batch would fail to accommodate any additional
migration directives beyond encountering an "add_column()"
directive, due to a mis-application of the conditional logic that
was added as part of this change, leading to "recreate" mode not
being used in cases where it is required for SQLite such as for
unique constraints.
- changes from version 1.7.0:
* Fixed regression due to :ticket:`803` where the ".info" and
".comment" attributes of "Table" would be lost inside of the
:class:`.DropTableOp` class, which when "reversed" into a
:class:`.CreateTableOp` would then have lost these elements. Pull
request courtesy Nicolas CANIART.
* Enhance "version_locations" parsing to handle paths containing
spaces. The new configuration option "version_path_separator"
specifies the character to use when splitting the
"version_locations" string. The default for new configurations is
"version_path_separator = os", which will use "os.pathsep" (e.g.,
";" on Windows).
* Alembic 1.7 now supports Python 3.6 and above; support for prior
versions including Python 2.7 has been dropped.
* Batch "auto" mode will now select for "recreate" if the
"add_column()" operation is used on SQLite, and the column itself
meets the criteria for SQLite where ADD COLUMN is not allowed, in
this case a functional or parenthesized SQL expression or a
"Computed" (i.e. generated) column.
* Make the "python-dateutil" library an optional dependency. This
library is only required if the "timezone" option is used in the
Alembic configuration. An extra require named "tz" is available
with "pip install alembic[tz]" to install it.
* Re-implemented the "python-editor" dependency as a small internal
function to avoid the need for external dependencies.
* Named CHECK constraints are now supported by batch mode, and will
automatically be part of the recreated table assuming they are
named. They also can be explicitly dropped using
"op.drop_constraint()". For "unnamed" CHECK constraints, these are
still skipped as they cannot be distinguished from the CHECK
constraints that are generated by the "Boolean" and "Enum"
datatypes. Note that this change may require adjustments to
migrations that drop or rename columns which feature an associated
named check constraint, such that an additional
"op.drop_constraint()" directive should be added for that named
constraint as there will no longer be an associated column for it;
for the "Boolean" and "Enum" datatypes, an "existing_type" keyword
may be passed to "BatchOperations.drop_constraint" as well.
* The dependency on "pkg_resources" which is part of "setuptools"
has been removed, so there is no longer any runtime dependency on
"setuptools". The functionality has been replaced with
"importlib.metadata" and "importlib.resources" which are both part
of Python std.lib, or via pypy dependency "importlib-metadata" for
Python version < 3.8 and "importlib-resources" for Python version
< 3.9 (while importlib.resources was added to Python in 3.7, it
did not include the "files" API until 3.9).
* Created a "test suite" similar to the one for SQLAlchemy, allowing
developers of third-party dialects to test their code against a
set of Alembic tests that have been specially selected to exercise
back-end database operations. At the time of release, third-party
dialects that have adopted the Alembic test suite to verify
compatibility include `CockroachDB
<https://pypi.org/project/sqlalchemy-cockroachdb/>`_ and `SAP ASE
(Sybase) <https://pypi.org/project/sqlalchemy-sybase/>`_.
* Fixed issue where usage of the PostgreSQL "postgresql_include"
option within a :meth:`.Operations.create_index` would raise a
KeyError, as the additional column(s) need to be added to the
table object used by the construct internally. The issue is
equivalent to the SQL Server issue fixed in :ticket:`513`. Pull
request courtesy Steven Bronson.
* pep-484 type annotations have been added throughout the library.
Additionally, stub .pyi files have been added for the
"dynamically" generated Alembic modules "alembic.op" and
"alembic.config", which include complete function signatures and
docstrings, so that the functions in these namespaces will have
both IDE support (vscode, pycharm, etc) as well as support for
typing tools like Mypy. The files themselves are statically
generated from their source functions within the source tree.
==== python-apipkg ====
Version update (1.5 -> 2.1.0)
- Update to v2.1.0
* fix race condition for import of modules using apipkg.initpkg
in Python 3.3+ by updating existing modules in-place rather
than replacing in sys.modules with an apipkg.ApiModule
instances. This race condition exists for import statements
(and __import__) in Python 3.3+ where sys.modules is checked
before obtaining an import lock, and for
importlib.import_module in Python 3.11+ for the same reason.
- Release 2.0.1
* fix race conditions for attribute creation
- Release 2.0.0
* also transfer __spec__ attribute
* make py.test hack more specific to avoid hiding real errors
* switch from Travis CI to GitHub Actions
* modernize package build
* reformat code with black
- Drop pytest4.patch
==== python-greenlet ====
Version update (1.1.0 -> 1.1.2)
- update to 1.1.2:
- Fix a potential crash due to a reference counting error when Python
subclasses of ``greenlet.greenlet`` were deallocated. The crash
became more common on Python 3.10; on earlier versions, silent
memory corruption could result.
- Fix a leak of a list object when the last reference to a greenlet
was deleted from some other thread than the one to which it
belonged. For this to work correctly, you must call a greenlet API
like ``getcurrent()`` before the thread owning the greenlet exits:
this is a long-standing limitation that can also lead to the leak of
a thread's main greenlet if not called; we hope to lift this
limitation. Note that in some cases this may also fix leaks of
greenlet objects themselves. See `issue 251
- Python 3.10: Tracing or profiling into a spawned greenlet didn't
work as expected. See `issue 256
==== python-idna ====
Version update (3.2 -> 3.3)
- update to 3.3:
- Update to Unicode 14.0.0
- Update to in-line type annotations
- Throw IDNAError exception correctly for some malformed input
- Advertise support for Python 3.10
- Improve testing regime on Github
- Fix Russian typo in documentation
==== python-more-itertools ====
Version update (8.8.0 -> 8.10.0)
- update to 8.10.0:
* The type stub for :func:`iter_except` was improved (thanks to MarcinKonowalczyk)
* Type stubs now ship with the source release (thanks to saaketp)
* The Sphinx docs were improved (thanks to MarcinKonowalczyk)
* New functions
* :func:`interleave_evenly` (thanks to mbugert)
* :func:`repeat_each` (thanks to FinalSh4re)
* :func:`chunked_even` (thanks to valtron)
* :func:`map_if` (thanks to sassbalint)
* :func:`zip_broadcast` (thanks to kalekundert)
* Changes to existing functions
* The type stub for :func:`chunked` was improved (thanks to PhilMacKay)
* The type stubs for :func:`zip_equal` and `zip_offset` were improved (thanks to maffoo)
* Building Sphinx docs locally was improved (thanks to MarcinKonowalczyk)
==== python-networkx ====
Version update (2.6.1 -> 2.6.3)
- update to 2.6.3:
* Fix modularity functions (gh#networkx/networkx#5072)
* CI/MAINT: drop gdal tests (gh#networkx/networkx#5068)
* modularity_max: provide labels to get_edge_data (gh#networkx/networkx#4965)
* Improvements to greedy_modularity_community (gh#networkx/networkx#4996)
* use weight arg instead of 'weight' key at greedy_modularity_communities()
* modularity_max: breaking the loop when given community size is reached (gh#networkx/networkx#4950)
* modularity_max: allow input of desired number of communities
* greedy_modularity_communities with digraphs and multi(di)graphs (gh#networkx/networkx#5007) (gh#networkx/networkx#5007)
* Allow greedy_modularity_communities to use floating point weights or resolution (gh#networkx/networkx#5065)
* change i,j,k notation to u,v,w (no indexes since gh#networkx/networkx#5007)
==== python-pyrsistent ====
Version update (0.17.3 -> 0.18.0)
- update to 0.18.0:
* Fix #209 Update freeze recurse into pyrsistent data structures and thaw to
recurse into lists and dicts
* Fix #226, stop using deprecated exception.message.
* Fix #211, add union operator to persistent maps.
* Fix #194, declare build dependencies through pyproject.toml.
* Officially drop Python 3.5 support.
* Fix #223, release wheels for all major platforms.
* Fix #221, KeyError obscured by TypeError if key is a tuple.
* Fix LICENSE file name spelling.
* Fix #216, add abstractmethod decorator for CheckedType and ABCMeta for
_CheckedTypeMeta.
* Fix #228, rename example classes in tests to avoid name clashes with pytest.
==== python-pytz ====
Version update (2021.1 -> 2021.3)
- update to 2021.3
* matches tzdata 2021c
==== python-zipp ====
Version update (3.5.0 -> 3.6.0)
- update to 3.6.0:
* Only ``Path`` is exposed in the public API.
* Remove news file intended only for CPython.
==== qemu ====
- Stable fixes from upstream
* Patches added:
block-introduce-max_hw_iov-for-use-in-sc.patch
hmp-Unbreak-change-vnc.patch
qemu-nbd-Change-default-cache-mode-to-wr.patch
target-arm-Don-t-skip-M-profile-reset-en.patch
vhost-vsock-fix-migration-issue-when-seq.patch
virtio-mem-pci-Fix-memory-leak-when-crea.patch
virtio-net-fix-use-after-unmap-free-for-.patch
==== qqc2-desktop-style ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Properly get the path from a QUrl
* Port away from devicePixelRatio
* MenuSeparator: fix height being wrong, rewrite whole file to be more correct
* Button, ToolButton: improve implicit sizing, correctly set default button state
* Use more process-working-symbolic icon for busy spinner
==== raspberrypi-firmware ====
Version update (2021.03.10 -> 2021.09.30)
- Update to b5257da58c (2021-09-30):
* firmware: arm_loader: Allow non-optional reads of current clock
See: #1619
* firmware: dispmanx: Demote null eptr from vcos_verify to no warning
See: raspberrypi/linux#4592
* firmware: filesystem: sdcard: Probe FAT type in GPT ESD partitions
* firmware: tvservice: Add check to warn when running with kms
* firmware: filesystem: sdcard: Fix Hybrid GPT partitions
See: #1465
* firmware: video_decode: Ensure all buffers are flushed before
port disable completes
* firmware: arm_loader: Allow hvs interrupt during SET_NOTIFY_DISPLAY_DONE
* firmware: arm_display: Allow null buffer in successful call
See: raspberrypi/linux#4540
- Update to b80f36b3fb (2021-09-13):
* firmware: hdmi_2711: Use HDMI block REPEAT_PIXEL instead of PV
See: https://forum.libreelec.tv/thread/24415-le-10-beta-for-i4-force-hdmi-resolu…
* firmware: DSI display autodetection for kms
* firmware: arm_dt: Load overlays for detected cameras
* firmware: Make more use of the user-warnings DT property
* firmware: arm_loader: Consider required flags from GET_CLOCK_RATE
See: #1598
* firmware: arm_loader: Make most arm clock requests required
See: #1598
* firmware: firmware: Disable VLL loading from file system
See: #1605
* firmware: video_decode: Use the ISP instead of vc_image_convert
* firmware: video_decode: Correct support for YVU formats using ISP
* firmware: arm_dt: Limit CMA to 256MB if total_mem < 2GB or gpu_mem > 256MB
See: #1603
* firmware: hdmi_cec: Remove TX/RX SW_INIT on power_on
See: Hexxeh/rpi-firmware#267
See: https://www.raspberrypi.org/forums/viewtopic.php?p=1895082#p1895082
* firmware: cec: Avoid sending messages with kms
See: raspberrypi/linux#4460
* firmware: Revert: video_decode: Use the ISP instead of vc_image_convert
* firmware: isp: Set the YUV420/YVU420 format stride to 64 byte
* arm_loader: Add message to release firmware framebuffer
* firmware: video_decode: Use the ISP instead of vc_image_convert
* firmware: hdmi-2711: Wait for HDMI hardware scheduler to activate in HDMI mode
* firmware: bcm_host: Recognise all Pi 4 variants, add BCM2711
See: raspberrypi/userland#695
* firmware: PoE+ HAT support
See: raspberrypi/linux#4367
* firmware: arm_loader: Use Pi4 bootloader MAC_ADDRESS if set
* firmware: platform: Apply ARM thermal throttling rules on BCM2711
* firmware: dt-blob.dts: Correct HDMI HPD and EMMC_ENABLE for CM4
See: https://www.raspberrypi.org/forums/viewtopic.php?f=29&p=1858516
* firmware: vcfw/hdmi: CUSTOM modes used for FKMS didn't set RGB quant range correctly
See: #1580
* firmware: platform: Remove build-time constant for MICROVOLTS_PER_PIP
* firmware: Pi400: Reduce MII clock freq when probing ethernet PHY
* firmware: isp: Ensure the VRF is locked when setting up video colour denoise
See: raspberrypi/libcamera-apps#19
* firmware: isp: Remove custom EV mappings from camera tunings
* firmware: Add support for board-type=0xXX conditional filters in bootloader, bootcode and firmware
* firmware: Two UART1 patches
See: #1566
* firmware: arm_loader: kernel_old=1 should force kernel_address=0
See: #1561
* firmware: scalerlib: Fix offset applied to x coordinate of YUV10COL image
See: https://forum.kodi.tv/showthread.php?tid=361164&pid=3024654#pid3024654
* firmware: vcfw/power: Add a new latch for power_pad_control
See: #1552
* firmware: board-info: Fix memsize on 3B+
* firmware: Move core to PLLA and support accurate clk108
See: xbmc/xbmc#19263
* firmware: board_info: Separate memory size from OTP field encoding
* firmware: power: Swap DA9090 ADC assignments to match XR77004
* firmware: vl805: Remove redundant log statement and fix warning
* firmware: power: Fix DA9090 ADC1 register definition
* firmware: arm_loader: Only report clocks arm has set, not siblings
* firmware: arm_loader: Don't report clocks set as turbo side effect of arm clock
* firmware: arm_loader: 2711: gpu clocks are not dependant
* firmware: platform: Need to clear cached versions of get_max_clock_internal vars
* firmware: video_decode: For VC1/WMV with no signalled header bytes, use start of 1st buffer
See: raspberrypi/linux#4113
- Use smbios overlay to get minimal SMBIOS information through dmidecode (bsc#1183079)
==== raspberrypi-firmware-config ====
Version update (2021.03.10 -> 2021.09.30)
- Update to b5257da58c (2021-09-30):
* firmware: arm_loader: Allow non-optional reads of current clock
See: #1619
* firmware: dispmanx: Demote null eptr from vcos_verify to no warning
See: raspberrypi/linux#4592
* firmware: filesystem: sdcard: Probe FAT type in GPT ESD partitions
* firmware: tvservice: Add check to warn when running with kms
* firmware: filesystem: sdcard: Fix Hybrid GPT partitions
See: #1465
* firmware: video_decode: Ensure all buffers are flushed before
port disable completes
* firmware: arm_loader: Allow hvs interrupt during SET_NOTIFY_DISPLAY_DONE
* firmware: arm_display: Allow null buffer in successful call
See: raspberrypi/linux#4540
- Update to b80f36b3fb (2021-09-13):
* firmware: hdmi_2711: Use HDMI block REPEAT_PIXEL instead of PV
See: https://forum.libreelec.tv/thread/24415-le-10-beta-for-i4-force-hdmi-resolu…
* firmware: DSI display autodetection for kms
* firmware: arm_dt: Load overlays for detected cameras
* firmware: Make more use of the user-warnings DT property
* firmware: arm_loader: Consider required flags from GET_CLOCK_RATE
See: #1598
* firmware: arm_loader: Make most arm clock requests required
See: #1598
* firmware: firmware: Disable VLL loading from file system
See: #1605
* firmware: video_decode: Use the ISP instead of vc_image_convert
* firmware: video_decode: Correct support for YVU formats using ISP
* firmware: arm_dt: Limit CMA to 256MB if total_mem < 2GB or gpu_mem > 256MB
See: #1603
* firmware: hdmi_cec: Remove TX/RX SW_INIT on power_on
See: Hexxeh/rpi-firmware#267
See: https://www.raspberrypi.org/forums/viewtopic.php?p=1895082#p1895082
* firmware: cec: Avoid sending messages with kms
See: raspberrypi/linux#4460
* firmware: Revert: video_decode: Use the ISP instead of vc_image_convert
* firmware: isp: Set the YUV420/YVU420 format stride to 64 byte
* arm_loader: Add message to release firmware framebuffer
* firmware: video_decode: Use the ISP instead of vc_image_convert
* firmware: hdmi-2711: Wait for HDMI hardware scheduler to activate in HDMI mode
* firmware: bcm_host: Recognise all Pi 4 variants, add BCM2711
See: raspberrypi/userland#695
* firmware: PoE+ HAT support
See: raspberrypi/linux#4367
* firmware: arm_loader: Use Pi4 bootloader MAC_ADDRESS if set
* firmware: platform: Apply ARM thermal throttling rules on BCM2711
* firmware: dt-blob.dts: Correct HDMI HPD and EMMC_ENABLE for CM4
See: https://www.raspberrypi.org/forums/viewtopic.php?f=29&p=1858516
* firmware: vcfw/hdmi: CUSTOM modes used for FKMS didn't set RGB quant range correctly
See: #1580
* firmware: platform: Remove build-time constant for MICROVOLTS_PER_PIP
* firmware: Pi400: Reduce MII clock freq when probing ethernet PHY
* firmware: isp: Ensure the VRF is locked when setting up video colour denoise
See: raspberrypi/libcamera-apps#19
* firmware: isp: Remove custom EV mappings from camera tunings
* firmware: Add support for board-type=0xXX conditional filters in bootloader, bootcode and firmware
* firmware: Two UART1 patches
See: #1566
* firmware: arm_loader: kernel_old=1 should force kernel_address=0
See: #1561
* firmware: scalerlib: Fix offset applied to x coordinate of YUV10COL image
See: https://forum.kodi.tv/showthread.php?tid=361164&pid=3024654#pid3024654
* firmware: vcfw/power: Add a new latch for power_pad_control
See: #1552
* firmware: board-info: Fix memsize on 3B+
* firmware: Move core to PLLA and support accurate clk108
See: xbmc/xbmc#19263
* firmware: board_info: Separate memory size from OTP field encoding
* firmware: power: Swap DA9090 ADC assignments to match XR77004
* firmware: vl805: Remove redundant log statement and fix warning
* firmware: power: Fix DA9090 ADC1 register definition
* firmware: arm_loader: Only report clocks arm has set, not siblings
* firmware: arm_loader: Don't report clocks set as turbo side effect of arm clock
* firmware: arm_loader: 2711: gpu clocks are not dependant
* firmware: platform: Need to clear cached versions of get_max_clock_internal vars
* firmware: video_decode: For VC1/WMV with no signalled header bytes, use start of 1st buffer
See: raspberrypi/linux#4113
==== raspberrypi-firmware-dt ====
Version update (2021.03.15 -> 2021.09.17)
- Update to 2425833c7ff5 (2021-09-17)
* Switch to 5.14 branch
* Drop upstream-overlay-rpi-poe.patch
==== solid ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Solid5 solid-imports
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Add support for static builds
* support extracting cpu model on ppc64
==== sonnet ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5SonnetCore5 libKF5SonnetUi5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== syntax-highlighting ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5SyntaxHighlighting5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Add basic QML API docs
* yara - add new 4.x keywords
* Tests result
* Fix operators and included more blocks on test
* Change license to MIT
* Included test reference
* Removed items that are generating errors for now
* initial work on terraform syntax highlight
* Port AbstractHighlighter::highlightLine to QStringView
==== systemd ====
Version update (249.4 -> 249.5)
Subpackages: libsystemd0 libudev1 systemd-sysvinit udev
- Import commit 8521f8d22fd44400289fcea03493ebd7f8b1487d (merge of v249.5)
For a complete list of changes, visit:
https://github.com/openSUSE/systemd/compare/355e113ce193e5e2d195278c57d47f9…
- Import commit 355e113ce193e5e2d195278c57d47f9a1b00ae46
3b4a005095 meson: add missing include directory when using xkbcommon
4c4e642712 meson: allow extra net naming schemes to be defined during configuration (jsc#SLE-18514)
78466e4464 meson: drop the list of valid net naming schemes
b9a2098f9d netif-naming: inline one iterator variable
d7fbbc5e74 Add remaining supported schemes as options for default-net-naming-scheme
- Rename %{gnu-efi} into %{sd_boot}
Build conditionals (%bcond_with and %bcond_without) are used to
define a specific feature of systemd. "gnu-efi" is rather an
implemenation detail. Also not really sure what "efi" option alone
is useful for since systemd-boot & co depends on "gnu-efi".
- Enable sd_boot support for aarch64
- Ghost own directories /var/log/journal and /var/log/journal/remote again
rpmlint no more complain about the setgid bit, see sr#923496.
- Overwriting rootprefix= is only required when split-usr is enabled
- Rename %usrmerged into %split_usr
- Suppress PAM warning when the credentials for user@.service service
are established (bsc#1190515)
systemd-user PAM service needs to define a default implementation of
pam_setcred() otherwise the fallback (defined by /etc/pam.d/other)
is used, which consists of pam_warn.so + pam_deny.so, and will throw
a warning each time a user logs in.
- No need to install upstream pam configuration file "systemd-user"
It's overwritten by the SUSE version anyway.
==== systemd-presets-common-SUSE ====
- Haveged as a daemon is no longer required since kernel 5.6
do not enable by default.
==== systemsettings5 ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Revert "Use level 2 header"
* sidebar: make placeholder message non-visible when at 0 opacity (kde#443016)
* Use level 2 header
* Support left/right and escape for key navigation in the sidebar
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Swap the position of the hamburger menu and home buttons
* Don't load all subpages of a category when clicked (kde#438362)
* Sidebar: set background colors in the correct way
* Sidebar: Unify "Show Changed Settings" button toolbar implementations
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Clean up leftovers from systemsettingsrunner import
* Port deprecated setDelayed
* Use explicit + use override
* [sidebar] Enable/disable mousearea instead of changing accepted buttons
* [sidebar] Refactor subcategory button to use rectangle as its base item
* Don't request context help titlebar button
* Remove About Current Module
* Import services runner & strip out unneeded parts
* Fix highlight default for category owner children and when changing data from landing page
* Allow compiling without KF5DocTools
* Create simple getter to check if KCM is an SystemSettingsExternalApp
* Port ExternalAppModule away from KCModuleInfo
* Port loading of categories away from KServiceTypeTrader
* [sidebar] Port away from KDeclarative
* Remove old category files
* [sidebar] Add missing subcategory header spacing for widescreen view (kde#438377)
* only update the global header reacting to the active page (kde#437088)
* Use ellipses instead of triple period
* make sure we have 2 columns when loading a category (kde#435461)
* [sidebar] Don't show back button for subcategory header in widescreen view
==== threadweaver ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== timezone ====
Version update (2021c -> 2021d)
- timezone update 2021d:
* Fiji suspends DST for the 2021/2022 season
* 'zic -r' marks unspecified timestamps with "-00"
==== tpm2.0-tools ====
Version update (5.1.1 -> 5.2)
- Update to version 5.2:
+ tpm2_nvextend:
* Added option -n, --name to specify the name of the nvindex in
hex bytes. This is used when cpHash ought to be calculated
without dispatching the TPM2_NV_Extend command to the TPM.
+ tpm2_nvread:
* Added option --rphash=FILE to specify ile path to record the
hash of the response parameters. This is commonly termed as
rpHash.
* Added option -n, --name to specify the name of the nvindex in
hex bytes. This is used when cpHash ought to be calculated
without dispatching the TPM2_NVRead command to the TPM.
* Added option -S, --session to specify to specify an auxiliary
session for auditing and or encryption/decryption of the
parameters.
+ tpm2_nvsetbits:
* Added option --rphash=FILE to specify file path to record the
hash of the response parameters. This is commonly termed as
rpHash.
* Added option -S, --session to specify to specify an auxiliary
session for auditing and or encryption/decryption of the
parameters.
* Added option -n, --name to specify the name of the nvindex in
hex bytes. This is used when cpHash ought to be calculated
without dispatching the TPM2_NV_SetBits command to the TPM.
+ tpm2_createprimary:
* Support public-key output at creation time in various public-key
formats.
+ tpm2_create:
* Support public-key output at creation time in various public-key
formats.
+ tpm2_print:
* Support outputing public key in various public key formats over
the default YAML output. Supports taking -u output from
tpm2_create and converting it to a PEM or DER file format.
+ tpm2_import:
* Add support for importing keys with sealed-data-blobs.
+ tpm2_rsaencrypt, tpm2_rsadecrypt:
* Add support for specifying the hash algorithm with oaep.
+ tpm2_pcrread, tpm2_quote:
* Add option -F, --pcrs_format to specify PCR format selection for
the binary blob in the PCR output file. 'values' will output a
binary blob of the PCR values. 'serialized' will output a binary
blob of the PCR values in the form of serialized data structure
in little endian format.
+ tpm2_eventlog:
* Add support for decoding StartupLocality.
* Add support for printing the partition information.
* Add support for reading eventlogs longer than 64kb including
from /sys/kernel/security/tpm0/binary_bios-measurements.
+ tpm2_duplicate:
* Add option -L, --policy to specify an authorization policy to be
associated with the duplicated object.
* Added support for external key duplication without needing the
TCTI.
+ tools:
* Enhance error message on invalid passwords when sessions cannot
be used.
+ lib/tpm2_options:
* Add option to specify fake tcti which is required in cases where
sapi ctx is required to be initialized for retrieving command
parameters without invoking the tcti to talk to the TPM.
+ openssl:
* Dropped support for OpenSSL < 1.1.0
* Add support for OpenSSL 3.0.0
+ Support added to make the repository documentation and man pages
available live on readthedocs.
+ Bug-fixes:
* tpm2_import: Don't allow setting passwords for imported object
with -p option as the tool doesn't modify the TPM2B_SENSITIVE
structure. Added appropriate logging to indicate using
tpm2_changeauth after import.
* lib/tpm2_util.c: The function to calculate pHash algorithm
returned error when input session is a password session and the
only session in the command.
* lib/tpm2_alg_util.c: Fix an error where oaep was parsed under
ECC.
* tpm2_sign: Fix segfaults when tool does not find TPM resources
(TPM or RM).
* tpm2_makecredential: Fix an issue where reading input from stdin
could result in unsupported data size larger than the largest
digest size.
* tpm2_loadexternal: Fix an issue where restricted attribute could
not be set.
* lib/tpm2_nv_util.h: The NV index size is dependent on different
data sets read from the GetCapability structures because there
is a dependency on the NV operation type: Define vs Read vs
Write vs Extend. Fix a sane default in the case where
GetCapability fails or fails to report the specific property/
data set. This is especially true because some properties are
TPM implementation dependent.
* tpm2_createpolicy: Fix an issue where tool exited silently
without reporting an error if wrong pcr string is specified.
* lib/tpm2_alg_util: add error message on public init to prevent
tools from dying silently, add an error message.
* tpm2_import: fix an issue where an imported hmac object scheme
was NULL. While allowed, it was inconsistent with other tools
like tpm2_create which set the scheme as hmac->sha256 when
generating a keyedhash object.
- Drop patches already in upstream:
+ 0001-tpm2_checkquote-fix-uninitialized-variable.patch
+ 0001-tpm2_eventlog-fix-buffer-offset-when-reading-the-eve.patch
+ 0001-tpm2_eventlog-read-eventlog-file-in-chunks.patch
==== webkit2gtk3 ====
Version update (2.34.0 -> 2.34.1)
Subpackages: libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 webkit2gtk-4_1-injected-bundles
- Update to version 2.34.1:
+ Update user agent browser versions.
+ Fix a crash with GTK >= 3.24.30.
+ Fix a crash when loading videos on reddit.
+ Fix file type detection when application calls
g_desktop_app_info_set_as_default_for_extension() passing html.
==== webkit2gtk3-soup2 ====
Version update (2.34.0 -> 2.34.1)
Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles
- Update to version 2.34.1:
+ Update user agent browser versions.
+ Fix a crash with GTK >= 3.24.30.
+ Fix a crash when loading videos on reddit.
+ Fix file type detection when application calls
g_desktop_app_info_set_as_default_for_extension() passing html.
==== wireless-regdb ====
Version update (20210421 -> 20210828)
- Update to version 20210828:
* wireless-regdb: update regulatory database based on preceding changes
* Update regulatory rules for Ecuador (EC)
* wireless-regdb: Update regulatory rules for Norway (NO) on 6 and 60 GHz
* wireless-regdb: Update regulatory rules for Germany (DE) on 6GHz
* wireless-regdb: update regulatory database based on preceding changes
* wireless-regdb: reduce bandwidth for 5730-5850 and 5850-5895 MHz in US
* wireless-regdb: remove PTMP-ONLY from 5850-5895 MHz for US
* wireless-regdb: recent FCC report and order allows 5850-5895 immediately
* wireless-regdb: update 5725-5850 MHz rule for GB
==== xdg-desktop-portal ====
Version update (1.10.0 -> 1.10.1)
- Update to version 1.10.1:
+ Revert a breaking change to the screencast and inhibit portal.
==== xdg-desktop-portal-kde ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Update dbus-advertised screencast source types
* Inhibit portal: send reply to the Close() request to release inhibition
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Fix crash when in X11
* Remove unnecessary attribute
* Now we are using Qt's internal connection, we should not set an eventqueue
* Remove unused output initialisation
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Guard use of wayland connection
* Avoid second wayland connection in xdg-desktop-portal-kde
* Add missing properties for 2 dbus interfaces
* Background portal: avoid crash when allowing app to run in background (kde#438954)
* Fix compile with last ecm
* Pass the version to the project call
* Use version-less qt DBus macros
* Remove unused method
* Add a SNI for active screencasting sessions
==== xdg-user-dirs ====
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== xf86-input-libinput ====
- reverted previous change; the issue was broken ckb-next, not
the usage of libinput v120 API (boo#1190646)
- switch to libinput v120 API broke the driver, so disable it for
now via patching config.h in specfile after running configure
(boo#1190646)
==== xfsprogs ====
- move fsck.xfs, mkfs.xfs and xfs_repair from /sbin to /usr/sbin
(bsc#1191105)
The default rpmbuild %configure macro passes --sbindir=/usr/sbin to
every configure script, but the xfsprogs configure script ignores it
when --exec-prefix is also set. Unset --exec-prefix since it is not
really required (all other paths are explicitly passed via the rpm
configure macro), so that the --sbindir is respected.
==== xkeyboard-config ====
Version update (2.33 -> 2.34)
- update to version 2.34
* xml2lst: use dynamic Perl path
* Resolved 101key Old Hungarian II
* Old turkish f layout (with pc104 support) added.
* Fix wrong key symbol name
* Added International Phonetic Alphabet (QWERTY)
* gitlab CI: update to latest ci-templates
* Hellenic keyboard perfected.
* lt: Place sterling symbol on AD03, layer 4 (with E and euro)
* Use single guillemots on L4 (not less/greater) where L3 has guillemots
* Added English (Dvorak, Macintosh) based on the MacOS dvorak layout
* Accommodate uppercase/lowercase ß, long s, §; deduplicate ?
* Move left/right quotes one key to the right, place lower quotes on AB04
* Update symbols/it adding credits and reference for fur lang
* lt/us: Inherit AE09/AE10 from latin
* Add Russian GOST layouts
* Add Polish(lefty) layout
* Add Arabic(Ergoarabic) keyboard layout
* translation sync
* Hebrew translation added
==== xwayland ====
- Specfile cleanup
==== zypper ====
Version update (1.14.49 -> 1.14.50)
Subpackages: zypper-needs-restarting
- Fix compiler warning.
- zypper.conf: New option whether to collect subcommands found in
$PATH (fixes #379)
+[subcommand] i
+
+## Whether to look for subcommands in $PATH
+##
+## If a subcommand is not found in the zypper_execdir, the wrapper
+## will look in the rest of your $PATH for it. Thus, it's possible
+## to write local zypper extensions that don't live in system space.
+## See section SUBCOMMANDS in the zypper manpage.
+##
+## Valid values: boolean
+## Default value: yes
+##
+# seachSubcommandInPath = yes.
- help subcommand: show path of command found in $PATH.
- version 1.14.50
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the aarch64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=3&version=T…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
apparmor
audit-secondary
avahi
boost-base
busybox
ca-certificates (2+git20210723.27a0476 -> 2+git20211004.3efbea9)
chrony
compat-usrmerge
dracut (055+suse.119.g6c4187af -> 055+suse.129.g7d8c3ce3)
e2fsprogs
fcoe-utils
file (5.40 -> 5.41)
glibc
haproxy (2.4.4+git0.acb1d0bea -> 2.4.7+git0.b5e51a5e2)
helm
hwinfo (21.76 -> 21.77)
iputils
kbd
kernel-source (5.14.9 -> 5.14.11)
kubernetes1.21
libapparmor
libcap (2.51 -> 2.59)
libglvnd
librsvg (2.52.0 -> 2.52.2)
libwebp (1.2.0 -> 1.2.1)
libzypp (17.28.4 -> 17.28.6)
ncurses (6.2.20210911 -> 6.2.20211002)
ndctl
nvme-cli
open-iscsi
open-vm-tools (11.3.0 -> 11.3.5)
openssh (8.4p1 -> 8.8p1)
pam-config (1.4 -> 1.5)
patterns-microos
pmdk (1.11.0 -> 1.11.1)
python-Jinja2 (3.0.1 -> 3.0.2)
python-PrettyTable
python-alembic (1.6.5 -> 1.7.4)
python-apipkg (1.5 -> 2.1.0)
python-distro
python-greenlet (1.1.0 -> 1.1.2)
python-idna (3.2 -> 3.3)
python-more-itertools (8.8.0 -> 8.10.0)
python-networkx (2.6.1 -> 2.6.3)
python-pyrsistent (0.17.3 -> 0.18.0)
python-pytz (2021.1 -> 2021.3)
python-zipp (3.5.0 -> 3.6.0)
qemu
raspberrypi-firmware (2021.03.10 -> 2021.09.30)
raspberrypi-firmware-config (2021.03.10 -> 2021.09.30)
raspberrypi-firmware-dt (2021.03.15 -> 2021.09.17)
rbac-lookup (0.6.4 -> 0.7.1)
rdma-core (36.0 -> 37.1)
salt
systemd (249.4 -> 249.5)
systemd-presets-common-SUSE
timezone (2021c -> 2021d)
tpm2.0-tools (5.1.1 -> 5.2)
wireless-regdb (20210421 -> 20210828)
xfsprogs
xkeyboard-config (2.33 -> 2.34)
yomi-formula
zypper (1.14.49 -> 1.14.50)
=== Details ===
==== apparmor ====
Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils python3-apparmor
- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)
==== audit-secondary ====
Subpackages: audit python3-audit system-group-audit
- Add CONFIG parameter to %sysusers_generate_pre
- Create separate service for augenrules (bsc#1191614, bsc#1181400)
* add create-augenrules-service.patch
Remove ReadWritePaths=/etc/audit from auditd.service, also removes
augenrules call from ExecStartPost.
Create augenrules.service with the ReadWritePaths directive above.
This makes /etc/audit only accessible by augenrules.service and
let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.
==== avahi ====
Subpackages: libavahi-client3 libavahi-common3
- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
(boo#1191750).
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== boost-base ====
Subpackages: boost-license1_77_0 libboost_thread1_77_0
- make boost-json-devel require boost-container-devel (bsc#1191822)
==== busybox ====
- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
flavor of busybox with the
additional setting:
CONFIG_REBOOT=y
CONFIG_SWITCH_ROOT=y
CONFIG_CTTYHACK=y
(bsc#1191514).
==== ca-certificates ====
Version update (2+git20210723.27a0476 -> 2+git20211004.3efbea9)
- Update to version 2+git20211004.3efbea9:
* Ensure --root option propagates prefix properly to other scripts
==== chrony ====
Subpackages: chrony-pool-openSUSE
- boo#1190926: PrivateDevices is too strict, we might need to
access the rtc and ptp devices.
- Add back support to build chrony on SLE12.
- Drop dependency on asciidoctor. It is only needed for building
the HTML documentation which we don't package anyway.
==== compat-usrmerge ====
- Fix logic for detecting conflicts with directories (boo#1191111)
==== dracut ====
Version update (055+suse.119.g6c4187af -> 055+suse.129.g7d8c3ce3)
Subpackages: dracut-ima dracut-mkinitrd-deprecated
- Update to version 055+suse.129.g7d8c3ce3:
* fix(kernel-modules): add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs (bsc#1190326)
* docs: update SUSE maintainers doc
* fix(suse): add 60-io-scheduler.rules (bsc#1188713)
* revert: remove /sbin/installkernel script from dracut package
* spec: modernize specfile constructs
==== e2fsprogs ====
Subpackages: libcom_err2 libext2fs2
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
==== fcoe-utils ====
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
==== file ====
Version update (5.40 -> 5.41)
Subpackages: file-magic libmagic1
- Remove file-5.38-allow-readlinkat.dif as already doen in latest
file 5.41
- Update to 5.41:
* Avinash Sonawane: Fix tzname detection
* Fix relationship tests with "search" magic, don't short circuit
logic
* Fix memory leak in compile mode
* PR/272: kiefermat: Only set returnval = 1 when we printed something
(in all cases print or !print). This simplifies the logic and fixes
the issue in the PR with -k and --mime-type there was no continuation
printed before the default case.
* PR/270: Don't translate unprintable characters in %s magic formats
when -r
* PR/269: Avoid undefined behavior with clang (adding offset to NULL)
* Add a new flag (f) that requires that the match is a full word,
not a partial word match.
* Add varint types (unused)
* PR/256: mutableVoid: If the file is less than 3 bytes, use the file
length to determine type
* PR/259: aleksandr.v.novichkov: mime printing through indirect magic
is not taken into account, use match directly so that it does.
- Remove patches now upstream
* file-5.40-1c677c04.patch
* file-5.40-3096f87f.patch
* file-5.40-4c5fe1ad.patch
* file-5.40-6b34436a.patch
* file-5.40-749e1ecf.patch
* file-5.40-9b0459af.patch
* file-5.40-9e2becec.patch
* file-5.40-ascii.patch
* file-5.40-f0601504.patch
* file-5.40-f7705dca.patch
- Port patches
* file-5.19-biorad.dif
* file-5.19-printf.dif
* file-5.19-zip2.0.dif
* file-5.23-endian.patch
* file-5.28-btrfs-image.dif
* file-5.38-allow-readlinkat.dif
* file-secure_getenv.patch
- Port and rename patch file-5.39.dif which is now file-5.41.dif
==== glibc ====
Subpackages: glibc-locale-base
- ld-show-auxv-colon.patch: elf: Fix missing colon in LD_SHOW_AUXV output
(BZ #282539
- x86-string-control-test.patch: x86-64: Use testl to check
__x86_string_control
- pthread-kill-fail-after-exit.patch: nptl: pthread_kill, pthread_cancel
should not fail after exit (BZ #19193)
- pthread-kill-race-thread-exit.patch: nptl: Fix race between pthread_kill
and thread exit (BZ #12889)
- getcwd-attribute-access.patch: posix: Fix attribute access mode on
getcwd (BZ #27476)
- pthread-kill-return-esrch.patch: nptl: pthread_kill needs to return
ESRCH for old programs (BZ #19193)
- pthread-mutexattr-getrobust-np-type.patch: nptl: Fix type of
pthread_mutexattr_getrobust_np, pthread_mutexattr_setrobust_np (BZ
[#28036])
- setxid-deadlock-blocked-signals.patch: nptl: Avoid setxid deadlock with
blocked signals in thread exit (BZ #28361)
- pthread-kill-send-specific-thread.patch: nptl: pthread_kill must send
signals to a specific thread (BZ #28407)
- sysconf-nprocessors-affinity.patch: linux: Revert the use of
sched_getaffinity on get_nproc (BZ #28310)
- iconv-charmap-close-output.patch: renamed from
icon-charmap-close-output.patch
==== haproxy ====
Version update (2.4.4+git0.acb1d0bea -> 2.4.7+git0.b5e51a5e2)
- Update to version 2.4.7+git0.b5e51a5e2:
* [RELEASE] Released version 2.4.7
* BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule
- Update to version 2.4.6+git0.d83fd76a1:
* [RELEASE] Released version 2.4.6
* BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release
- Update to version 2.4.5+git0.e74a1b34b:
* [RELEASE] Released version 2.4.5
* MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue()
* BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input
* BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing
* MINOR: arg: Be able to forbid unresolved args when building an argument list
* BUG/MAJOR: lua: use task_wakeup() to properly run a task once
* BUG/MEDIUM: lua: fix wakeup condition from sleep()
* MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options
* DOC: peers: fix doc "enable" statement on "peers" sections
* BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers"
* MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf
* BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary
* MINOR: htx: Add a function to know if the free space wraps
* MINOR: htx: Add an HTX flag to know when a message is fragmented
* MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv()
* BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM
* BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data
* BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer
* BUG/MINOR: stats: use refcount to protect dynamic server on dump
* MINOR: server: return the next srv instance on free_server
* BUG/MINOR: server: do not use refcount in free_server in stopping mode
* MINOR: global: define MODE_STOPPING
* MINOR: server: implement a refcount for dynamic servers
* BUG/MINOR: http-ana: increment internal_errors counter on response error
* BUG/MINOR: h1-htx: Fix a typo when request parser is reset
* BUG/MEDIUM: leastconn: fix rare possibility of divide by zero
* BUG/MINOR: server: allow 'enable health' only if check configured
* BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl
* BUILD: halog: fix a -Wundef warning on non-glibc systems
* BUILD: compiler: fixed a missing test on defined(__GNUC__)
* BUILD: fix dragonfly build again on __read_mostly
* BUG/MINOR: vars: do not talk about global section in CLI errors for set-var
* BUG/MINOR: vars: truncate the variable name in error reports about scope.
* BUG/MINOR: vars: properly set the argument parsing context in the expression
* MINOR: sample: add missing ARGC_ entries
* BUG/MINOR: vars: improve accuracy of the rules used to check expression validity
* BUILD: tools: properly guard __GLIBC__ with defined()
* BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL
* BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER
* BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef
* IMPORT: slz: silence a build warning with -Wundef
* BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef
* BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef
* BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING
* MINOR: proc: setting the process to produce a core dump on FreeBSD.
* MINOR: tools: add FreeBSD support to get_exec_path()
* BUILD: tools: get the absolute path of the current binary on NetBSD.
* BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set
* BUG/MINOR: cli/payload: do not search for args inside payload
* BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc
* BUG/MINOR: connection: prevent null deref on mux cleanup task allocation
* DOC: management: certificate files must be sanitized before injection
* BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check
* BUG/MAJOR: mux-h1: Don't eval input data if an error was reported
* MINOR: pools: use mallinfo2() when available instead of mallinfo()
* MINOR: pools: automatically disable malloc_trim() with external allocators
* CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools()
* BUG/MINOR: compat: make sure __WORDSIZE is always defined
* BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached
* CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload
* MINOR: htx: Skip headers with no value when adding a header list to a message
* BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload
* BUG/MINOR: systemd: ExecStartPre must use -Ws
* BUG/MINOR: filters: Set right FLT_END analyser depending on channel
* BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set
* BUG/MEDIUM: http-ana: Reset channels analysers when returning an error
* BUG/MINOR: stream: Don't release a stream if FLT_END is still registered
* BUG/MINOR: lua: Don't yield in channel.append() and channel.set()
* BUG/MINOR: lua: Yield in channel functions only if lua context can yield
* MINOR: lua: Add a flag on lua context to know the yield capability at run time
==== helm ====
- use 'v' prefix for the version to match upstream builds
- package fish completions
==== hwinfo ====
Version update (21.76 -> 21.77)
- merge gh#openSUSE/hwinfo#105
- Use license file from gnu.org
- Fix spelling
- Add missing final newline
- Trim excess whitespace
- Simple maintenance improvements
- 21.77
==== iputils ====
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
==== kbd ====
Subpackages: kbd-legacy
- regenerated cz-map.patch needed for xkeyboard-config 2.34 update
==== kernel-source ====
Version update (5.14.9 -> 5.14.11)
- Linux 5.14.11 (bsc#1012628).
- Revert "ARM: imx6q: drop of_platform_default_populate() from
init_machine" (bsc#1012628).
- Revert "brcmfmac: use ISO3166 country code and 0 rev as
fallback" (bsc#1012628).
- libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870
SSD (bsc#1012628).
- perf/x86: Reset destroy callback on event init failure
(bsc#1012628).
- KVM: x86: nSVM: restore int_vector in svm_clear_vintr
(bsc#1012628).
- kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[] (bsc#1012628).
- KVM: x86: reset pdptrs_from_userspace when exiting smm
(bsc#1012628).
- KVM: do not shrink halt_poll_ns below grow_start (bsc#1012628).
- selftests: KVM: Align SMCCC call with the spec in steal_time
(bsc#1012628).
- kasan: always respect CONFIG_KASAN_STACK (bsc#1012628).
- tools/vm/page-types: remove dependency on opt_file for idle
page tracking (bsc#1012628).
- block: don't call rq_qos_ops->done_bio if the bio isn't tracked
(bsc#1012628).
- io_uring: allow conditional reschedule for intensive iterators
(bsc#1012628).
- x86/insn, tools/x86: Fix undefined behavior due to potential
unaligned accesses (bsc#1012628).
- smb3: correct smb3 ACL security descriptor (bsc#1012628).
- irqchip/gic: Work around broken Renesas integration
(bsc#1012628).
- scsi: ses: Retry failed Send/Receive Diagnostic commands
(bsc#1012628).
- thermal/drivers/tsens: Fix wrong check for tzd in irq handlers
(bsc#1012628).
- nvme-fc: avoid race between time out and tear down
(bsc#1012628).
- nvme-fc: update hardware queues before using them (bsc#1012628).
- swiotlb-xen: ensure to issue well-formed XENMEM_exchange
requests (bsc#1012628).
- Xen/gntdev: don't ignore kernel unmapping error (bsc#1012628).
- selftests: kvm: fix get_run_delay() ignoring fscanf() return
warn (bsc#1012628).
- selftests: kvm: move get_run_delay() into lib/test_util
(bsc#1012628).
- selftests:kvm: fix get_trans_hugepagesz() ignoring fscanf()
return warn (bsc#1012628).
- selftests:kvm: fix get_warnings_count() ignoring fscanf()
return warn (bsc#1012628).
- selftests: be sure to make khdr before other targets
(bsc#1012628).
- habanalabs/gaudi: fix LBW RR configuration (bsc#1012628).
- habanalabs: fail collective wait when not supported
(bsc#1012628).
- habanalabs/gaudi: use direct MSI in single mode (bsc#1012628).
- usb: dwc2: check return value after calling
platform_get_resource() (bsc#1012628).
- usb: testusb: Fix for showing the connection speed
(bsc#1012628).
- scsi: elx: efct: Do not hold lock while calling
fc_vport_terminate() (bsc#1012628).
- scsi: sd: Free scsi_disk device via put_device() (bsc#1012628).
- drm/amdkfd: fix svm_migrate_fini warning (bsc#1012628).
- drm/amdkfd: handle svm migrate init error (bsc#1012628).
- ext2: fix sleeping in atomic bugs on error (bsc#1012628).
- platform/x86: gigabyte-wmi: add support for B550I Aorus Pro AX
(bsc#1012628).
- sparc64: fix pci_iounmap() when CONFIG_PCI is not set
(bsc#1012628).
- xen-netback: correct success/error reporting for the
SKB-with-fraglist case (bsc#1012628).
- net: mdio: introduce a shutdown method to mdio device drivers
(bsc#1012628).
- btrfs: fix mount failure due to past and transient device
flush error (bsc#1012628).
- btrfs: replace BUG_ON() in btrfs_csum_one_bio() with proper
error handling (bsc#1012628).
- nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN
(bsc#1012628).
- platform/x86: touchscreen_dmi: Update info for the Chuwi Hi10
Plus (CWI527) tablet (bsc#1012628).
- platform/x86: touchscreen_dmi: Add info for the Chuwi HiBook
(CWI514) tablet (bsc#1012628).
- afs: Add missing vnode validation checks (bsc#1012628).
- spi: rockchip: handle zero length transfers without timing out
(bsc#1012628).
- commit 834dddd
- iwlwifi: Fix MODULE_FIRMWARE() for non-existing ucode version
(boo#1191417).
- commit 6597512
- Linux 5.14.10 (bsc#1012628).
- media: hantro: Fix check for single irq (bsc#1012628).
- media: cedrus: Fix SUNXI tile size calculation (bsc#1012628).
- media: s5p-jpeg: rename JPEG marker constants to prevent build
warnings (bsc#1012628).
- ASoC: fsl_sai: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: fsl_esai: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: fsl_micfil: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: fsl_spdif: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: fsl_xcvr: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: mediatek: common: handle NULL case in suspend/resume
function (bsc#1012628).
- scsi: elx: efct: Fix void-pointer-to-enum-cast warning for
efc_nport_topology (bsc#1012628).
- ASoC: SOF: Fix DSP oops stack dump output contents
(bsc#1012628).
- ASoC: SOF: imx: imx8: Bar index is only valid for IRAM and
SRAM types (bsc#1012628).
- ASoC: SOF: imx: imx8m: Bar index is only valid for IRAM and
SRAM types (bsc#1012628).
- pinctrl: qcom: spmi-gpio: correct parent irqspec translation
(bsc#1012628).
- net/mlx4_en: Resolve bad operstate value (bsc#1012628).
- s390/qeth: Fix deadlock in remove_discipline (bsc#1012628).
- s390/qeth: fix deadlock during failing recovery (bsc#1012628).
- m68k: Update ->thread.esp0 before calling syscall_trace()
in ret_from_signal (bsc#1012628).
- NIOS2: fix kconfig unmet dependency warning for
SERIAL_CORE_CONSOLE (bsc#1012628).
- kasan: fix Kconfig check of CC_HAS_WORKING_NOSANITIZE_ADDRESS
(bsc#1012628).
- HID: amd_sfh: Fix potential NULL pointer dereference
(bsc#1012628).
- perf test: Fix DWARF unwind for optimized builds (bsc#1012628).
- perf iostat: Use system-wide mode if the target cpu_list is
unspecified (bsc#1012628).
- perf iostat: Fix Segmentation fault from NULL 'struct
perf_counts_values *' (bsc#1012628).
- watchdog/sb_watchdog: fix compilation problem due to
COMPILE_TEST (bsc#1012628).
- tty: Fix out-of-bound vmalloc access in imageblit (bsc#1012628).
- cpufreq: schedutil: Use kobject release() method to free
sugov_tunables (bsc#1012628).
- scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS
(bsc#1012628).
- drm/amdgpu: adjust fence driver enable sequence (bsc#1012628).
- drm/amdgpu: avoid over-handle of fence driver fini in s3 test
(v2) (bsc#1012628).
- drm/amdgpu: stop scheduler when calling hw_fini (v2)
(bsc#1012628).
- cpufreq: schedutil: Destroy mutex before kobject_put() frees
the memory (bsc#1012628).
- scsi: ufs: ufs-pci: Fix Intel LKF link stability (bsc#1012628).
- ALSA: rawmidi: introduce SNDRV_RAWMIDI_IOCTL_USER_PVERSION
(bsc#1012628).
- ALSA: firewire-motu: fix truncated bytes in message tracepoints
(bsc#1012628).
- ALSA: hda/realtek: Quirks to enable speaker output for Lenovo
Legion 7i 15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops
(bsc#1012628).
- ACPI: NFIT: Use fallback node id when numa info in NFIT table
is incorrect (bsc#1012628).
- fs-verity: fix signed integer overflow with i_size near S64_MAX
(bsc#1012628).
- hwmon: (tmp421) handle I2C errors (bsc#1012628).
- hwmon: (w83793) Fix NULL pointer dereference by removing
unnecessary structure field (bsc#1012628).
- hwmon: (w83792d) Fix NULL pointer dereference by removing
unnecessary structure field (bsc#1012628).
- hwmon: (w83791d) Fix NULL pointer dereference by removing
unnecessary structure field (bsc#1012628).
- gpio: pca953x: do not ignore i2c errors (bsc#1012628).
- scsi: ufs: Fix illegal offset in UPIU event trace (bsc#1012628).
- mac80211: fix use-after-free in CCMP/GCMP RX (bsc#1012628).
- platform/x86/intel: hid: Add DMI switches allow list
(bsc#1012628).
- x86/kvmclock: Move this_cpu_pvti into kvmclock.h (bsc#1012628).
- ptp: Fix ptp_kvm_getcrosststamp issue for x86 ptp_kvm
(bsc#1012628).
- KVM: x86: Fix stack-out-of-bounds memory access from
ioapic_write_indirect() (bsc#1012628).
- KVM: x86: nSVM: don't copy virt_ext from vmcb12 (bsc#1012628).
- KVM: x86: Clear KVM's cached guest CR3 at RESET/INIT
(bsc#1012628).
- KVM: x86: Swap order of CPUID entry "index" vs. "significant
flag" checks (bsc#1012628).
- KVM: nVMX: Filter out all unsupported controls when eVMCS was
activated (bsc#1012628).
- KVM: SEV: Update svm_vm_copy_asid_from for SEV-ES (bsc#1012628).
- KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
(bsc#1012628).
- KVM: SEV: Acquire vcpu mutex when updating VMSA (bsc#1012628).
- KVM: SEV: Allow some commands for mirror VM (bsc#1012628).
- KVM: SVM: fix missing sev_decommission in sev_receive_start
(bsc#1012628).
- KVM: nVMX: Fix nested bus lock VM exit (bsc#1012628).
- KVM: VMX: Fix a TSX_CTRL_CPUID_CLEAR field mask issue
(bsc#1012628).
- mmc: renesas_sdhi: fix regression with hard reset on old SDHIs
(bsc#1012628).
- media: ir_toy: prevent device from hanging during transmit
(bsc#1012628).
- RDMA/cma: Do not change route.addr.src_addr.ss_family
(bsc#1012628).
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing
more requests (bsc#1012628).
- nbd: use shifts rather than multiplies (bsc#1012628).
- drm/amd/display: initialize backlight_ramping_override to false
(bsc#1012628).
- drm/amd/display: Pass PCI deviceid into DC (bsc#1012628).
- drm/amd/display: Fix Display Flicker on embedded panels
(bsc#1012628).
- drm/amdgpu: force exit gfxoff on sdma resume for rmb s0ix
(bsc#1012628).
- drm/amdgpu: check tiling flags when creating FB on GFX8-
(bsc#1012628).
- drm/amdgpu: correct initial cp_hqd_quantum for gfx9
(bsc#1012628).
- interconnect: qcom: sdm660: Fix id of slv_cnoc_mnoc_cfg
(bsc#1012628).
- interconnect: qcom: sdm660: Correct NOC_QOS_PRIORITY shift
and mask (bsc#1012628).
- drm/i915/gvt: fix the usage of ww lock in gvt scheduler
(bsc#1012628).
- ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
(bsc#1012628).
- bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog
(bsc#1012628).
- IB/cma: Do not send IGMP leaves for sendonly Multicast groups
(bsc#1012628).
- RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure
(bsc#1012628).
- bpf, mips: Validate conditional branch offsets (bsc#1012628).
- hwmon: (mlxreg-fan) Return non-zero value when fan current
state is enforced from sysfs (bsc#1012628).
- RDMA/irdma: Skip CQP ring during a reset (bsc#1012628).
- RDMA/irdma: Validate number of CQ entries on create CQ
(bsc#1012628).
- RDMA/irdma: Report correct WC error when transport retry
counter is exceeded (bsc#1012628).
- RDMA/irdma: Report correct WC error when there are MW bind
errors (bsc#1012628).
- netfilter: nf_tables: unlink table before deleting it
(bsc#1012628).
- netfilter: log: work around missing softdep backend module
(bsc#1012628).
- Revert "mac80211: do not use low data rates for data frames
with no ack flag" (bsc#1012628).
- mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
(bsc#1012628).
- mac80211: limit injected vht mcs/nss in
ieee80211_parse_tx_radiotap (bsc#1012628).
- mac80211: mesh: fix potentially unaligned access (bsc#1012628).
- mac80211-hwsim: fix late beacon hrtimer handling (bsc#1012628).
- driver core: fw_devlink: Add support for
FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD (bsc#1012628).
- net: mdiobus: Set FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD for
mdiobus parents (bsc#1012628).
- sctp: break out if skb_header_pointer returns NULL in
sctp_rcv_ootb (bsc#1012628).
- mptcp: don't return sockets in foreign netns (bsc#1012628).
- mptcp: allow changing the 'backup' bit when no sockets are open
(bsc#1012628).
- RDMA/hns: Work around broken constant propagation in gcc 8
(bsc#1012628).
- hwmon: (tmp421) report /PVLD condition as fault (bsc#1012628).
- hwmon: (tmp421) fix rounding for negative values (bsc#1012628).
- net: enetc: fix the incorrect clearing of IF_MODE bits
(bsc#1012628).
- net: ipv4: Fix rtnexthop len when RTA_FLOW is present
(bsc#1012628).
- smsc95xx: fix stalled rx after link change (bsc#1012628).
- drm/i915/request: fix early tracepoints (bsc#1012628).
- drm/i915: Remove warning from the rps worker (bsc#1012628).
- dsa: mv88e6xxx: 6161: Use chip wide MAX MTU (bsc#1012628).
- dsa: mv88e6xxx: Fix MTU definition (bsc#1012628).
- dsa: mv88e6xxx: Include tagger overhead when setting MTU for
DSA and CPU ports (bsc#1012628).
- e100: fix length calculation in e100_get_regs_len (bsc#1012628).
- e100: fix buffer overrun in e100_get_regs (bsc#1012628).
- RDMA/hfi1: Fix kernel pointer leak (bsc#1012628).
- RDMA/hns: Fix the size setting error when copying CQE in
clean_cq() (bsc#1012628).
- RDMA/hns: Add the check of the CQE size of the user space
(bsc#1012628).
- bpf: Exempt CAP_BPF from checks against bpf_jit_limit
(bsc#1012628).
- libbpf: Fix segfault in static linker for objects without BTF
(bsc#1012628).
- selftests, bpf: Fix makefile dependencies on libbpf
(bsc#1012628).
- selftests, bpf: test_lwt_ip_encap: Really disable rp_filter
(bsc#1012628).
- bpf, x86: Fix bpf mapping of atomic fetch implementation
(bsc#1012628).
- net: ks8851: fix link error (bsc#1012628).
- ionic: fix gathering of debug stats (bsc#1012628).
- Revert "block, bfq: honor already-setup queue merges"
(bsc#1012628).
- scsi: csiostor: Add module softdep on cxgb4 (bsc#1012628).
- ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup
(bsc#1012628).
- net: hns3: do not allow call hns3_nic_net_open repeatedly
(bsc#1012628).
- net: hns3: remove tc enable checking (bsc#1012628).
- net: hns3: don't rollback when destroy mqprio fail
(bsc#1012628).
- net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and
HCLGE_FLAG_DCB_ENABLE (bsc#1012628).
- net: hns3: fix show wrong state when add existing uc mac address
(bsc#1012628).
- net: hns3: reconstruct function hns3_self_test (bsc#1012628).
- net: hns3: fix always enable rx vlan filter problem after
selftest (bsc#1012628).
- net: hns3: disable firmware compatible features when uninstall
PF (bsc#1012628).
- net: phy: bcm7xxx: Fixed indirect MMD operations (bsc#1012628).
- net: sched: flower: protect fl_walk() with rcu (bsc#1012628).
- net: stmmac: fix EEE init issue when paired with EEE capable
PHYs (bsc#1012628).
- af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
(bsc#1012628).
- objtool: Teach get_alt_entry() about more relocation types
(bsc#1012628).
- perf/x86/intel: Update event constraints for ICX (bsc#1012628).
- sched/fair: Add ancestors of unthrottled undecayed cfs_rq
(bsc#1012628).
- sched/fair: Null terminate buffer when updating tunable_scaling
(bsc#1012628).
- hwmon: (occ) Fix P10 VRM temp sensors (bsc#1012628).
- hwmon: (pmbus/mp2975) Add missed POUT attribute for page 1
mp2975 controller (bsc#1012628).
- kvm: fix objtool relocation warning (bsc#1012628).
- nvme: add command id quirk for apple controllers (bsc#1012628).
- elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
(bsc#1012628).
- driver core: fw_devlink: Improve handling of cyclic dependencies
(bsc#1012628).
- debugfs: debugfs_create_file_size(): use IS_ERR to check for
error (bsc#1012628).
- ipack: ipoctal: fix stack information leak (bsc#1012628).
- ipack: ipoctal: fix tty registration race (bsc#1012628).
- ipack: ipoctal: fix tty-registration error handling
(bsc#1012628).
- ipack: ipoctal: fix missing allocation-failure check
(bsc#1012628).
- ipack: ipoctal: fix module reference leak (bsc#1012628).
- ext4: fix loff_t overflow in ext4_max_bitmap_size()
(bsc#1012628).
- ext4: limit the number of blocks in one ADD_RANGE TLV
(bsc#1012628).
- ext4: fix reserved space counter leakage (bsc#1012628).
- ext4: add error checking to ext4_ext_replay_set_iblocks()
(bsc#1012628).
- ext4: fix potential infinite loop in ext4_dx_readdir()
(bsc#1012628).
- ext4: flush s_error_work before journal destroy in
ext4_fill_super (bsc#1012628).
- HID: u2fzero: ignore incomplete packets without data
(bsc#1012628).
- net: udp: annotate data race around udp_sk(sk)->corkflag
(bsc#1012628).
- NIOS2: setup.c: drop unused variable 'dram_start' (bsc#1012628).
- usb: hso: remove the bailout parameter (bsc#1012628).
- HID: betop: fix slab-out-of-bounds Write in betop_probe
(bsc#1012628).
- netfilter: ipset: Fix oversized kvmalloc() calls (bsc#1012628).
- mm: don't allow oversized kvmalloc() calls (bsc#1012628).
- HID: usbhid: free raw_report buffers in usbhid_stop
(bsc#1012628).
- crypto: aesni - xts_crypt() return if walk.nbytes is 0
(bsc#1012628).
- KVM: x86: Handle SRCU initialization failure during page track
init (bsc#1012628).
- netfilter: conntrack: serialize hash resizes and cleanups
(bsc#1012628).
- netfilter: nf_tables: Fix oversized kvmalloc() calls
(bsc#1012628).
- drivers: net: mhi: fix error path in mhi_net_newlink
(bsc#1012628).
- objtool: print out the symbol type when complaining about it
(bsc#1012628).
- HID: amd_sfh: Fix potential NULL pointer dereference - take 2
(bsc#1012628).
- commit 7c980ba
- ALSA: hda: intel: Allow repeatedly probing on codec
configuration errors (bsc#1190801).
- commit 924f4be
- rpm: use _rpmmacrodir (boo#1191384)
- commit e350c14
==== kubernetes1.21 ====
- Bump disk requirements in _constraints to 12GB. Data based on the
last successful build consumed storage.
==== libapparmor ====
- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)
==== libcap ====
Version update (2.51 -> 2.59)
- update to 2.59:
* Fixed a potential libcap memory leak by adding a destructor
* Major improvement is that there is a path for Linux-PAM compliant
applications to support setting Ambient vector Capabilities via pam_cap.so now
* Added libcap cap_proc_root() API function
* Added color support to captree
* Fixed contrib/sucap/su to correctly handle the Inheritable flag
* capsh enhancements
* getcap -r / now generates readable output
* The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
runnable as standalone binaries
* The module pam_cap.so now contains support for a default=<IAB> module argument
* Enhanced capsh --suggest to also compare against the capability value names
and not just their descriptions
* Added capsh --current support
* Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
* Fix for a corner case infinite loop handling long strings
* Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
* Added a Go utility, captree, to display the process (and thread) graph along with
the POSIX.1e and IAB capabilities of each PID{TID} tree.
==== libglvnd ====
- libglvnd.rpmlintrc
* workaround for future buildcheck (boo#1191763)
==== librsvg ====
Version update (2.52.0 -> 2.52.2)
Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2
- Update to version 2.52.2:
+ New features:
- rsvg-convert now supports generating multi-page PDFs in a
sensible way.
- With one SVG document per page, each page with the SVG's
natural size:
- rsvg-convert --format=pdf -o out.pdf a.svg b.svg c.svg
- With all pages sized as portrait US Letter, and each SVG
scaled to fit so that there is a 1in margin around each page:
rsvg-convert --format=pdf -o out.pdf \
- -page-width=8.5in --page-height=11in \
- -width=6.5in --height=8.5in --keep-aspect-ratio \
- -top=1in --left=1in a.svg b.svg c.svg
Please see the man page for details.
- Support <a> elements inside <text>. Also, support the CSS
:link pseudo-class for matching against links.
- Support the CSS :lang() pseudo-class for matching against an
element's xml:lang attribute.
- Support the mask-type property from SVG2.
+ Bugs fixed:
- Don't panic when a shorthand property is set to inherit.
- Fix regression with the viewport size of interior <svg>
elements.
- Allow length units to be case-insensitive, per SVG2.
+ Documentation:
- There is now a FEATURES.md in the repository, where you can
see all the elements, attributes, and properties that librsvg
supports. We will be adding detail to this gradually.
- For developers, there is now devel-docs/adding-a-property.md
with a tutorial on how to add support for new CSS properties.
- Update to version 2.52.1:
+ Fix ordering of tspan inside text elements for right-to-left
languages.
+ Fix text-anchor positioning for right-to-left languages.
+ Fix regression in computing sizes when an SVG has only one of
width/height and a viewBox.
+ Spec compliance - the writing-mode property applies only to
text elements, no to individual tspan elements.
+ Fix build on big-endian platforms.
+ Clarify documentation for the rsvg_handle_write() /
rsvg_handle_close() deprecated APIs.
==== libwebp ====
Version update (1.2.0 -> 1.2.1)
Subpackages: libwebp7 libwebpdemux2 libwebpmux3
- update to 1.2.1:
* minor lossless encoder improvements and x86 color conversion
speed up
* further security related hardening in libwebp & examples
* toolchain updates and bug fixes
* use more inclusive language within the source
==== libzypp ====
Version update (17.28.4 -> 17.28.6)
- Zypper should keep cached files if transaction is aborted
(bsc#1190356)
Singletrans mode currently does not keep files around if the
transaction is aborted. This patch fixes the problem.
- Require a minimum number of mirrors for multicurl (bsc#1191609)
- Use procfs to detect nr of open fd's if rlimit is too high
(bsc#1191324)
Especially in a VM iterating over all possible fd's to close open
ones right before a exec() slows down zypper unnecessarily. This
patch uses /proc/self/fd to iterate over open fd's in case rlimit
is above 1024.
- po: Fix some lost '%' signs in positional args (bsc#1191370)
- RepoManager: Don't probe for plaindir repo if URL schema is
plugin: (bsc#1191286)
- version 17.28.6 (22)
- Downloader does not respect checkExistsOnly flag (bsc#1190712)
A missing check causes zyppng::Downloader to always download full
files even if the checkExistsOnly flag is set. This patch adds
the missing logic.
- Fix kernel-*-livepatch removal in purge-kernels (bsc#1190815)
The kernel-*-livepatch packages are supposed to serve as a stable
handle for the ephemeral kernel livepatch packages. See
FATE#320268 for details. As part of the kernel live patching
ecosystem, kernel-*-livepatch packages should not block the
purge-kernels step.
- version 17.28.5 (22)
==== ncurses ====
Version update (6.2.20210911 -> 6.2.20211002)
Subpackages: libncurses6 ncurses-utils terminfo-base
- Add ncurses patch 20211002
+ use return-value from vsnprintf to reallocate as needed to allow for
buffers larger than the screen size (report by "_RuRo_").
+ modify tset "-q" option to refrain from modifying terminal modes, to
match the documentation.
+ add section on margins to terminfo.5, adapted from X/Open Curses.
+ make tput/tset warning messages consistently using alias names when
those are used, rather than the underlying program's name.
+ improve tput usage message for aliases such as clear, by eliminating
tput-specific portions.
+ add a check in toe to ensure that a "termcap file" is text rather
than binary.
+ further build-fixes for OpenBSD 6.9, whose header files differ from
- Add ncurses patch 20210925
+ add kbeg to xterm+keypad to accommodate termcap applications -TD
+ add smglp and smgrp to vt420+lrmm, to provide useful data for the
"tabs" +m option -TD
+ build-fix for gcc 3.4.3 with Solaris10, which does not allow forward
reference of anonymous struct typedef.
+ modify tput to allow multiple commands per line.
+ minor fixes for tset manpage.
- Correct offsets of patch ncurses-6.2.dif
==== ndctl ====
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_ndctl-monitor.service.patch
==== nvme-cli ====
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_nvmf-connect@.service.patch
==== open-iscsi ====
Subpackages: iscsiuio libopeniscsiusr0_2_0
- Fix possible systemd cycle by adding an "obsoletes" for
the old libopeniscsiusr for older versions.
==== open-vm-tools ====
Version update (11.3.0 -> 11.3.5)
Subpackages: libvmtools0
- Update to 11.3.5 (build 18557794) (boo#1190987)
+ New/Updated features:
- Added a configurable logging capability to the network script.
The network script has been updated to:
use vmware-toolbox-cmd to query any network logging configuration from
the tools.conf file. Use vmtoolsd --cmd "log ..." to log a message to
the vmx logfile when the logging handler is configured to "vmx" or when
the logfile is full or is not writeable.
- The hgfsmounter (mount.vmhgfs) command has been removed from
open-vm-tools.
The hgfsmounter (mount.vmhgfs) command is no longer used in
Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
removing all references to the hgfsmounter in Linux builds.
+ Resolved issues:
- Customization: Retry the Linux reboot if telinit is a soft link to
systemctl.
- Open-vm-tools commands would hang if configured with "--enable-valgrind".
+ Spec file updates for:
- rpmlint errors
- arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.
==== openssh ====
Version update (8.4p1 -> 8.8p1)
Subpackages: openssh-clients openssh-common openssh-server
- Version update to 8.8p1:
= Security
* sshd(8) from OpenSSH 6.2 through 8.7 failed to correctly initialise
supplemental groups when executing an AuthorizedKeysCommand or
AuthorizedPrincipalsCommand, where a AuthorizedKeysCommandUser or
AuthorizedPrincipalsCommandUser directive has been set to run the
command as a different user. Instead these commands would inherit
the groups that sshd(8) was started with.
Depending on system configuration, inherited groups may allow
AuthorizedKeysCommand/AuthorizedPrincipalsCommand helper programs to
gain unintended privilege.
Neither AuthorizedKeysCommand nor AuthorizedPrincipalsCommand are
enabled by default in sshd_config(5).
= Potentially-incompatible changes
* This release disables RSA signatures using the SHA-1 hash algorithm
by default. This change has been made as the SHA-1 hash algorithm is
cryptographically broken, and it is possible to create chosen-prefix
hash collisions for <USD$50K.
For most users, this change should be invisible and there is
no need to replace ssh-rsa keys. OpenSSH has supported RFC8332
RSA/SHA-256/512 signatures since release 7.2 and existing ssh-rsa keys
will automatically use the stronger algorithm where possible.
Incompatibility is more likely when connecting to older SSH
implementations that have not been upgraded or have not closely tracked
improvements in the SSH protocol. For these cases, it may be necessary
to selectively re-enable RSA/SHA1 to allow connection and/or user
authentication via the HostkeyAlgorithms and PubkeyAcceptedAlgorithms
options.
= New features
* ssh(1): allow the ssh_config(5) CanonicalizePermittedCNAMEs
directive to accept a "none" argument to specify the default
behaviour.
= Bugfixes
* scp(1): when using the SFTP protocol, continue transferring files
after a transfer error occurs, better matching original scp/rcp
behaviour.
* ssh(1): fixed a number of memory leaks in multiplexing,
* ssh-keygen(1): avoid crash when using the -Y find-principals
command.
* A number of documentation and manual improvements, including
bz#3340, PR139, PR215, PR241, PR257
- Additional changes from 8.7p1 release:
= Potentially-incompatible changes
* scp(1): this release changes the behaviour of remote to remote
copies (e.g. "scp host-a:/path host-b:") to transfer through the
local host by default. This was previously available via the -3
flag. This mode avoids the need to expose credentials on the
origin hop, avoids triplicate interpretation of filenames by the
shell (by the local system, the copy origin and the destination)
and, in conjunction with the SFTP support for scp(1) mentioned
below, allows use of all authentication methods to the remote
hosts (previously, only non-interactive methods could be used).
A -R flag has been added to select the old behaviour.
* ssh(1)/sshd(8): both the client and server are now using a
stricter configuration file parser. The new parser uses more
shell-like rules for quotes, space and escape characters. It is
also more strict in rejecting configurations that include options
lacking arguments. Previously some options (e.g. DenyUsers) could
appear on a line with no subsequent arguments. This release will
reject such configurations. The new parser will also reject
configurations with unterminated quotes and multiple '='
characters after the option name.
* ssh(1): when using SSHFP DNS records for host key verification,
ssh(1) will verify all matching records instead of just those
with the specific signature type requested. This may cause host
key verification problems if stale SSHFP records of a different
or legacy signature type exist alongside other records for a
particular host. bz#3322
* ssh-keygen(1): when generating a FIDO key and specifying an
explicit attestation challenge (using -Ochallenge), the challenge
will now be hashed by the builtin security key middleware. This
removes the (undocumented) requirement that challenges be exactly
32 bytes in length and matches the expectations of libfido2.
* sshd(8): environment="..." directives in authorized_keys files are
now first-match-wins and limited to 1024 discrete environment
variable names.
= New features
* scp(1): experimental support for transfers using the SFTP protocol
as a replacement for the venerable SCP/RCP protocol that it has
traditionally used. SFTP offers more predictable filename handling
and does not require expansion of glob(3) patterns via the shell
on the remote side.
* sftp-server(8): add a protocol extension to support expansion of
~/ and ~user/ prefixed paths. This was added to support these
paths when used by scp(1) while in SFTP mode.
* ssh(1): add a ForkAfterAuthentication ssh_config(5) counterpart to
the ssh(1) -f flag. GHPR231
* ssh(1): add a StdinNull directive to ssh_config(5) that allows the
config file to do the same thing as -n does on the ssh(1) command-
line. GHPR231
* ssh(1): add a SessionType directive to ssh_config, allowing the
configuration file to offer equivalent control to the -N (no
session) and -s (subsystem) command-line flags. GHPR231
* ssh-keygen(1): allowed signers files used by ssh-keygen(1)
signatures now support listing key validity intervals alongside
they key, and ssh-keygen(1) can optionally check during signature
verification whether a specified time falls inside this interval.
This feature is intended for use by git to support signing and
verifying objects using ssh keys.
* ssh-keygen(8): support printing of the full public key in a sshsig
signature via a -Oprint-pubkey flag.
= Bugfixes
* ssh(1)/sshd(8): start time-based re-keying exactly on schedule in
the client and server mainloops. Previously the re-key timeout
could expire but re-keying would not start until a packet was sent
or received, causing a spin in select() if the connection was
quiescent.
* ssh-keygen(1): avoid Y2038 problem in printing certificate
validity lifetimes. Dates past 2^31-1 seconds since epoch were
displayed incorrectly on some platforms. bz#3329
* scp(1): allow spaces to appear in usernames for local to remote
and scp -3 remote to remote copies. bz#1164
* ssh(1)/sshd(8): remove references to ChallengeResponseAuthentication
in favour of KbdInteractiveAuthentication. The former is what was in
SSHv1, the latter is what is in SSHv2 (RFC4256) and they were
treated as somewhat but not entirely equivalent. We retain the old
name as a deprecated alias so configuration files continue to work
as well as a reference in the man page for people looking for it.
bz#3303
* ssh(1)/ssh-add(1)/ssh-keygen(1): fix decoding of X.509 subject name
when extracting a key from a PKCS#11 certificate. bz#3327
* ssh(1): restore blocking status on stdio fds before close. ssh(1)
needs file descriptors in non-blocking mode to operate but it was
not restoring the original state on exit. This could cause
problems with fds shared with other programs via the shell,
bz#3280 and GHPR246
* ssh(1)/sshd(8): switch both client and server mainloops from
select(3) to pselect(3). Avoids race conditions where a signal
may arrive immediately before select(3) and not be processed until
an event fires. bz#2158
* ssh(1): sessions started with ControlPersist were incorrectly
executing a shell when the -N (no shell) option was specified.
bz#3290
* ssh(1): check if IPQoS or TunnelDevice are already set before
overriding. Prevents values in config files from overriding values
supplied on the command line. bz#3319
* ssh(1): fix debug message when finding a private key to match a
certificate being attempted for user authentication. Previously it
would print the certificate's path, whereas it was supposed to be
showing the private key's path. GHPR247
* sshd(8): match host certificates against host public keys, not
private keys. Allows use of certificates with private keys held in
a ssh-agent. bz#3524
* ssh(1): add a workaround for a bug in OpenSSH 7.4 sshd(8), which
allows RSA/SHA2 signatures for public key authentication but fails
to advertise this correctly via SSH2_MSG_EXT_INFO. This causes
clients of these server to incorrectly match
PubkeyAcceptedAlgorithmse and potentially refuse to offer valid
keys. bz#3213
* sftp(1)/scp(1): degrade gracefully if a sftp-server offers the
limits(a)openssh.com extension but fails when the client tries to
invoke it. bz#3318
* ssh(1): allow ssh_config SetEnv to override $TERM, which is
otherwise handled specially by the protocol. Useful in ~/.ssh/config
to set TERM to something generic (e.g. "xterm" instead of
"xterm-256color") for destinations that lack terminfo entries.
* sftp-server(8): the limits(a)openssh.com extension was incorrectly
marked as an operation that writes to the filesystem, which made it
unavailable in sftp-server read-only mode. bz#3318
* ssh(1): fix SEGV in UpdateHostkeys debug() message, triggered when
the update removed more host keys than remain present.
* Many manual page fixes.
- Additional changes from 8.6p1 release:
= Security
* sshd(8): OpenSSH 8.5 introduced the LogVerbose keyword. When this
option was enabled with a set of patterns that activated logging
in code that runs in the low-privilege sandboxed sshd process, the
log messages were constructed in such a way that printf(3) format
strings could effectively be specified the low-privilege code.
= New features
* sftp-server(8): add a new limits(a)openssh.com protocol extension
that allows a client to discover various server limits, including
maximum packet size and maximum read/write length.
* sftp(1): use the new limits(a)openssh.com extension (when available)
to select better transfer lengths in the client.
* sshd(8): Add ModuliFile keyword to sshd_config to specify the
location of the "moduli" file containing the groups for DH-GEX.
* unit tests: Add a TEST_SSH_ELAPSED_TIMES environment variable to
enable printing of the elapsed time in seconds of each test.
= Bugfixes
* ssh_config(5), sshd_config(5): sync CASignatureAlgorithms lists in
manual pages with the current default. GHPR174
* ssh(1): ensure that pkcs11_del_provider() is called before exit.
GHPR234
* ssh(1), sshd(8): fix problems in string->argv conversion. Multiple
backslashes were not being dequoted correctly and quoted space in
the middle of a string was being incorrectly split. GHPR223
* ssh(1): return non-zero exit status when killed by signal; bz#3281
* sftp-server(8): increase maximum SSH2_FXP_READ to match the maximum
packet size. Also handle zero-length reads that are not explicitly
banned by the spec.
- Additional changes from 8.5p1 release:
= Security
* ssh-agent(1): fixed a double-free memory corruption that was
introduced in OpenSSH 8.2 . We treat all such memory faults as
potentially exploitable. This bug could be reached by an attacker
with access to the agent socket.
= Potentially-incompatible changes
* ssh(1), sshd(8): this release changes the first-preference signature
algorithm from ECDSA to ED25519.
* ssh(1), sshd(8): set the TOS/DSCP specified in the configuration
for interactive use prior to TCP connect. The connection phase of
the SSH session is time-sensitive and often explicitly interactive.
The ultimate interactive/bulk TOS/DSCP will be set after
authentication completes.
* ssh(1), sshd(8): remove the pre-standardization cipher
rijndael-cbc(a)lysator.liu.se. It is an alias for aes256-cbc before
it was standardized in RFC4253 (2006), has been deprecated and
disabled by default since OpenSSH 7.2 (2016) and was only briefly
documented in ssh.1 in 2001.
* ssh(1), sshd(8): update/replace the experimental post-quantum
hybrid key exchange method based on Streamlined NTRU Prime coupled
with X25519. The previous sntrup4591761x25519-sha512(a)tinyssh.org
method is replaced with sntrup761x25519-sha512(a)openssh.com.
* ssh(1): disable CheckHostIP by default. It provides insignificant
benefits while making key rotation significantly more difficult,
especially for hosts behind IP-based load-balancers.
= New features
* ssh(1): this release enables UpdateHostkeys by default subject to
some conservative preconditions:
- The key was matched in the UserKnownHostsFile (and not in the
GlobalKnownHostsFile).
- The same key does not exist under another name.
- A certificate host key is not in use.
- known_hosts contains no matching wildcard hostname pattern.
- VerifyHostKeyDNS is not enabled.
- The default UserKnownHostsFile is in use.
* ssh(1), sshd(8): add a new LogVerbose configuration directive for
that allows forcing maximum debug logging by file/function/line
pattern-lists.
* ssh(1): when prompting the user to accept a new hostkey, display
any other host names/addresses already associated with the key.
* ssh(1): allow UserKnownHostsFile=none to indicate that no
known_hosts file should be used to identify host keys.
* ssh(1): add a ssh_config KnownHostsCommand option that allows the
client to obtain known_hosts data from a command in addition to
the usual files.
* ssh(1): add a ssh_config PermitRemoteOpen option that allows the
client to restrict the destination when RemoteForward is used
with SOCKS.
* ssh(1): for FIDO keys, if a signature operation fails with a
"incorrect PIN" reason and no PIN was initially requested from the
user, then request a PIN and retry the operation. This supports
some biometric devices that fall back to requiring PIN when reading
of the biometric failed, and devices that require PINs for all
hosted credentials.
* sshd(8): implement client address-based rate-limiting via new
sshd_config(5) PerSourceMaxStartups and PerSourceNetBlockSize
directives that provide more fine-grained control on a per-origin
address basis than the global MaxStartups limit.
= Bugfixes
* ssh(1): Prefix keyboard interactive prompts with "(user@host)" to
make it easier to determine which connection they are associated
with in cases like scp -3, ProxyJump, etc. bz#3224
* sshd(8): fix sshd_config SetEnv directives located inside Match
blocks. GHPR201
* ssh(1): when requesting a FIDO token touch on stderr, inform the
user once the touch has been recorded.
* ssh(1): prevent integer overflow when ridiculously large
ConnectTimeout values are specified, capping the effective value
(for most platforms) at 24 days. bz#3229
* ssh(1): consider the ECDSA key subtype when ordering host key
algorithms in the client.
* ssh(1), sshd(8): rename the PubkeyAcceptedKeyTypes keyword to
PubkeyAcceptedAlgorithms. The previous name incorrectly suggested
that it control allowed key algorithms, when this option actually
specifies the signature algorithms that are accepted. The previous
name remains available as an alias. bz#3253
* ssh(1), sshd(8): similarly, rename HostbasedKeyTypes (ssh) and
HostbasedAcceptedKeyTypes (sshd) to HostbasedAcceptedAlgorithms.
* sftp-server(8): add missing lsetstat(a)openssh.com documentation
and advertisement in the server's SSH2_FXP_VERSION hello packet.
* ssh(1), sshd(8): more strictly enforce KEX state-machine by
banning packet types once they are received. Fixes memleak caused
by duplicate SSH2_MSG_KEX_DH_GEX_REQUEST (oss-fuzz #30078).
* sftp(1): allow the full range of UIDs/GIDs for chown/chgrp on 32bit
platforms instead of being limited by LONG_MAX. bz#3206
* Minor man page fixes (capitalization, commas, etc.) bz#3223
* sftp(1): when doing an sftp recursive upload or download of a
read-only directory, ensure that the directory is created with
write and execute permissions in the interim so that the transfer
can actually complete, then set the directory permission as the
final step. bz#3222
* ssh-keygen(1): document the -Z, check the validity of its argument
earlier and provide a better error message if it's not correct.
bz#2879
* ssh(1): ignore comments at the end of config lines in ssh_config,
similar to what we already do for sshd_config. bz#2320
* sshd_config(5): mention that DisableForwarding is valid in a
sshd_config Match block. bz3239
* sftp(1): fix incorrect sorting of "ls -ltr" under some
circumstances. bz3248.
* ssh(1), sshd(8): fix potential integer truncation of (unlikely)
timeout values. bz#3250
* ssh(1): make hostbased authentication send the signature algorithm
in its SSH2_MSG_USERAUTH_REQUEST packets instead of the key type.
This make HostbasedAcceptedAlgorithms do what it is supposed to -
filter on signature algorithm and not key type.
- Rebased patches:
* openssh-7.7p1-IPv6_X_forwarding.patch
* openssh-7.7p1-X11_trusted_forwarding.patch
* openssh-7.7p1-X_forward_with_disabled_ipv6.patch
* openssh-7.7p1-cavstest-ctr.patch
* openssh-7.7p1-cavstest-kdf.patch
* openssh-7.7p1-disable_openssl_abi_check.patch
* openssh-7.7p1-eal3.patch
* openssh-7.7p1-enable_PAM_by_default.patch
* openssh-7.7p1-fips.patch
* openssh-7.7p1-fips_checks.patch
* openssh-7.7p1-host_ident.patch
* openssh-7.7p1-hostname_changes_when_forwarding_X.patch
* openssh-7.7p1-ldap.patch
* openssh-7.7p1-no_fork-no_pid_file.patch
* openssh-7.7p1-pam_check_locks.patch
* openssh-7.7p1-pts_names_formatting.patch
* openssh-7.7p1-remove_xauth_cookies_on_exit.patch
* openssh-7.7p1-seccomp_ipc_flock.patch
* openssh-7.7p1-seccomp_stat.patch
* openssh-7.7p1-send_locale.patch
* openssh-7.7p1-sftp_force_permissions.patch
* openssh-7.7p1-sftp_print_diagnostic_messages.patch
* openssh-7.7p1-systemd-notify.patch
* openssh-7.9p1-keygen-preserve-perms.patch
* openssh-7.9p1-revert-new-qos-defaults.patch
* openssh-8.0p1-gssapi-keyex.patch
* openssh-8.1p1-audit.patch
* openssh-8.1p1-seccomp-clock_gettime64.patch
* openssh-8.1p1-seccomp-clock_nanosleep.patch
* openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
* openssh-8.1p1-use-openssl-kdf.patch
* openssh-8.4p1-vendordir.patch
* openssh-fips-ensure-approved-moduli.patch
* openssh-link-with-sk.patch
* openssh-reenable-dh-group14-sha1-default.patch
* openssh-whitelist-syscalls.patch
- Removed openssh-fix-ssh-copy-id.patch (fixed upstream).
- openssh.keyring: rotated to new key from https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/RELEASE_KEY.asc
- sshd-gen-keys-start:
- only source sysconfig file if it exists.
- create /etc/ssh if it does not exists.
Required for image based installation/updates.
==== pam-config ====
Version update (1.4 -> 1.5)
- Update to Version 1.5
- Don't print an error message if one of the systemd PAM modules
does not exist if creating the *-pc files [bsc#1191528]
- Drop pam_systemd_home again [bsc#1191528]
==== patterns-microos ====
Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-base-microdnf patterns-microos-base-packagekit patterns-microos-base-zypper patterns-microos-basesystem patterns-microos-cloud patterns-microos-cockpit patterns-microos-defaults patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-ra_agent patterns-microos-ra_verifier patterns-microos-selinux patterns-microos-sssd_ldap
- Add xdg-desktop-portal-gnome to gnome pattern
- Drop gnome-power-manager Requires: Package is dormant upstream
and on it's way to be replaced by new features inside of
gnome-control-center.
==== pmdk ====
Version update (1.11.0 -> 1.11.1)
Subpackages: libpmem1 libpmemobj1
- Update to PMDK 1.11.1
* Bugfixes:
* doc: remove exprimental moniker from libpmem2(7)
* common: fix missing sfence in non-temporal memcpy
* common: fix a mismatch between prototype and body
* common: fix mismatched function args
* obj: rename vars clashing with those of a containing block
* pmem2: don't force smaller alignment for fsdax mappings
* pool: don't trample upon users of localtime()
* rpmem: Fix RPMEM_RAW_BUFF_SIZE and LANE_ALIGN_SIZE for powerpc64le
==== python-Jinja2 ====
Version update (3.0.1 -> 3.0.2)
- dropped obsolete no-warnings-as-errors.patch
- update to 3.0.2
* Fix a loop scoping bug that caused assignments in nested loops to still
be referenced outside of it. #1427
* Make compile_templates deterministic for filter and import names. #1452, #1453
* Revert an unintended change that caused Undefined to act like
StrictUndefined for the in operator. #1448
* Imported macros have access to the current template globals in async
environments. #1494
* PackageLoader will not include a current directory (.) path segment.
This allows loading templates from the root of a zip import. #1467
==== python-PrettyTable ====
- %check: use %pyunittest rpm macro
==== python-alembic ====
Version update (1.6.5 -> 1.7.4)
- update to 1.7.4:
* Fixed a regression that prevented the use of post write hooks on python
version lower than 3.9
* Added missing attributes from context stubs.
* Fixed issue where registration of custom ops was prone to failure due to
the registration process running exec() on generated code that as of the
1.7 series includes pep-484 annotations, which in the case of end user code
would result in name resolution errors when the exec occurs
- specfile:
* skip python 2 builds
* require importlib-resources
- update to version 1.7.1:
* Corrected "universal wheel" directive in setup.cfg so that
building a wheel does not target Python 2. The PyPi files index
for 1.7.0 was corrected manually. Pull request courtesy layday.
* Fixed issue in generated .pyi files where default values for
"Optional" arguments were missing, thereby causing mypy to
consider them as required.
* Fixed regression in batch mode due to :ticket:`883` where the
"auto" mode of batch would fail to accommodate any additional
migration directives beyond encountering an "add_column()"
directive, due to a mis-application of the conditional logic that
was added as part of this change, leading to "recreate" mode not
being used in cases where it is required for SQLite such as for
unique constraints.
- changes from version 1.7.0:
* Fixed regression due to :ticket:`803` where the ".info" and
".comment" attributes of "Table" would be lost inside of the
:class:`.DropTableOp` class, which when "reversed" into a
:class:`.CreateTableOp` would then have lost these elements. Pull
request courtesy Nicolas CANIART.
* Enhance "version_locations" parsing to handle paths containing
spaces. The new configuration option "version_path_separator"
specifies the character to use when splitting the
"version_locations" string. The default for new configurations is
"version_path_separator = os", which will use "os.pathsep" (e.g.,
";" on Windows).
* Alembic 1.7 now supports Python 3.6 and above; support for prior
versions including Python 2.7 has been dropped.
* Batch "auto" mode will now select for "recreate" if the
"add_column()" operation is used on SQLite, and the column itself
meets the criteria for SQLite where ADD COLUMN is not allowed, in
this case a functional or parenthesized SQL expression or a
"Computed" (i.e. generated) column.
* Make the "python-dateutil" library an optional dependency. This
library is only required if the "timezone" option is used in the
Alembic configuration. An extra require named "tz" is available
with "pip install alembic[tz]" to install it.
* Re-implemented the "python-editor" dependency as a small internal
function to avoid the need for external dependencies.
* Named CHECK constraints are now supported by batch mode, and will
automatically be part of the recreated table assuming they are
named. They also can be explicitly dropped using
"op.drop_constraint()". For "unnamed" CHECK constraints, these are
still skipped as they cannot be distinguished from the CHECK
constraints that are generated by the "Boolean" and "Enum"
datatypes. Note that this change may require adjustments to
migrations that drop or rename columns which feature an associated
named check constraint, such that an additional
"op.drop_constraint()" directive should be added for that named
constraint as there will no longer be an associated column for it;
for the "Boolean" and "Enum" datatypes, an "existing_type" keyword
may be passed to "BatchOperations.drop_constraint" as well.
* The dependency on "pkg_resources" which is part of "setuptools"
has been removed, so there is no longer any runtime dependency on
"setuptools". The functionality has been replaced with
"importlib.metadata" and "importlib.resources" which are both part
of Python std.lib, or via pypy dependency "importlib-metadata" for
Python version < 3.8 and "importlib-resources" for Python version
< 3.9 (while importlib.resources was added to Python in 3.7, it
did not include the "files" API until 3.9).
* Created a "test suite" similar to the one for SQLAlchemy, allowing
developers of third-party dialects to test their code against a
set of Alembic tests that have been specially selected to exercise
back-end database operations. At the time of release, third-party
dialects that have adopted the Alembic test suite to verify
compatibility include `CockroachDB
<https://pypi.org/project/sqlalchemy-cockroachdb/>`_ and `SAP ASE
(Sybase) <https://pypi.org/project/sqlalchemy-sybase/>`_.
* Fixed issue where usage of the PostgreSQL "postgresql_include"
option within a :meth:`.Operations.create_index` would raise a
KeyError, as the additional column(s) need to be added to the
table object used by the construct internally. The issue is
equivalent to the SQL Server issue fixed in :ticket:`513`. Pull
request courtesy Steven Bronson.
* pep-484 type annotations have been added throughout the library.
Additionally, stub .pyi files have been added for the
"dynamically" generated Alembic modules "alembic.op" and
"alembic.config", which include complete function signatures and
docstrings, so that the functions in these namespaces will have
both IDE support (vscode, pycharm, etc) as well as support for
typing tools like Mypy. The files themselves are statically
generated from their source functions within the source tree.
==== python-apipkg ====
Version update (1.5 -> 2.1.0)
- Update to v2.1.0
* fix race condition for import of modules using apipkg.initpkg
in Python 3.3+ by updating existing modules in-place rather
than replacing in sys.modules with an apipkg.ApiModule
instances. This race condition exists for import statements
(and __import__) in Python 3.3+ where sys.modules is checked
before obtaining an import lock, and for
importlib.import_module in Python 3.11+ for the same reason.
- Release 2.0.1
* fix race conditions for attribute creation
- Release 2.0.0
* also transfer __spec__ attribute
* make py.test hack more specific to avoid hiding real errors
* switch from Travis CI to GitHub Actions
* modernize package build
* reformat code with black
- Drop pytest4.patch
==== python-distro ====
- Expliciting setting of locale is not necessary anymore
(gh#python-distro/distro#223).
==== python-greenlet ====
Version update (1.1.0 -> 1.1.2)
- update to 1.1.2:
- Fix a potential crash due to a reference counting error when Python
subclasses of ``greenlet.greenlet`` were deallocated. The crash
became more common on Python 3.10; on earlier versions, silent
memory corruption could result.
- Fix a leak of a list object when the last reference to a greenlet
was deleted from some other thread than the one to which it
belonged. For this to work correctly, you must call a greenlet API
like ``getcurrent()`` before the thread owning the greenlet exits:
this is a long-standing limitation that can also lead to the leak of
a thread's main greenlet if not called; we hope to lift this
limitation. Note that in some cases this may also fix leaks of
greenlet objects themselves. See `issue 251
- Python 3.10: Tracing or profiling into a spawned greenlet didn't
work as expected. See `issue 256
==== python-idna ====
Version update (3.2 -> 3.3)
- update to 3.3:
- Update to Unicode 14.0.0
- Update to in-line type annotations
- Throw IDNAError exception correctly for some malformed input
- Advertise support for Python 3.10
- Improve testing regime on Github
- Fix Russian typo in documentation
==== python-more-itertools ====
Version update (8.8.0 -> 8.10.0)
- update to 8.10.0:
* The type stub for :func:`iter_except` was improved (thanks to MarcinKonowalczyk)
* Type stubs now ship with the source release (thanks to saaketp)
* The Sphinx docs were improved (thanks to MarcinKonowalczyk)
* New functions
* :func:`interleave_evenly` (thanks to mbugert)
* :func:`repeat_each` (thanks to FinalSh4re)
* :func:`chunked_even` (thanks to valtron)
* :func:`map_if` (thanks to sassbalint)
* :func:`zip_broadcast` (thanks to kalekundert)
* Changes to existing functions
* The type stub for :func:`chunked` was improved (thanks to PhilMacKay)
* The type stubs for :func:`zip_equal` and `zip_offset` were improved (thanks to maffoo)
* Building Sphinx docs locally was improved (thanks to MarcinKonowalczyk)
==== python-networkx ====
Version update (2.6.1 -> 2.6.3)
- update to 2.6.3:
* Fix modularity functions (gh#networkx/networkx#5072)
* CI/MAINT: drop gdal tests (gh#networkx/networkx#5068)
* modularity_max: provide labels to get_edge_data (gh#networkx/networkx#4965)
* Improvements to greedy_modularity_community (gh#networkx/networkx#4996)
* use weight arg instead of 'weight' key at greedy_modularity_communities()
* modularity_max: breaking the loop when given community size is reached (gh#networkx/networkx#4950)
* modularity_max: allow input of desired number of communities
* greedy_modularity_communities with digraphs and multi(di)graphs (gh#networkx/networkx#5007) (gh#networkx/networkx#5007)
* Allow greedy_modularity_communities to use floating point weights or resolution (gh#networkx/networkx#5065)
* change i,j,k notation to u,v,w (no indexes since gh#networkx/networkx#5007)
==== python-pyrsistent ====
Version update (0.17.3 -> 0.18.0)
- update to 0.18.0:
* Fix #209 Update freeze recurse into pyrsistent data structures and thaw to
recurse into lists and dicts
* Fix #226, stop using deprecated exception.message.
* Fix #211, add union operator to persistent maps.
* Fix #194, declare build dependencies through pyproject.toml.
* Officially drop Python 3.5 support.
* Fix #223, release wheels for all major platforms.
* Fix #221, KeyError obscured by TypeError if key is a tuple.
* Fix LICENSE file name spelling.
* Fix #216, add abstractmethod decorator for CheckedType and ABCMeta for
_CheckedTypeMeta.
* Fix #228, rename example classes in tests to avoid name clashes with pytest.
==== python-pytz ====
Version update (2021.1 -> 2021.3)
- update to 2021.3
* matches tzdata 2021c
==== python-zipp ====
Version update (3.5.0 -> 3.6.0)
- update to 3.6.0:
* Only ``Path`` is exposed in the public API.
* Remove news file intended only for CPython.
==== qemu ====
- Stable fixes from upstream
* Patches added:
block-introduce-max_hw_iov-for-use-in-sc.patch
hmp-Unbreak-change-vnc.patch
qemu-nbd-Change-default-cache-mode-to-wr.patch
target-arm-Don-t-skip-M-profile-reset-en.patch
vhost-vsock-fix-migration-issue-when-seq.patch
virtio-mem-pci-Fix-memory-leak-when-crea.patch
virtio-net-fix-use-after-unmap-free-for-.patch
==== raspberrypi-firmware ====
Version update (2021.03.10 -> 2021.09.30)
- Update to b5257da58c (2021-09-30):
* firmware: arm_loader: Allow non-optional reads of current clock
See: #1619
* firmware: dispmanx: Demote null eptr from vcos_verify to no warning
See: raspberrypi/linux#4592
* firmware: filesystem: sdcard: Probe FAT type in GPT ESD partitions
* firmware: tvservice: Add check to warn when running with kms
* firmware: filesystem: sdcard: Fix Hybrid GPT partitions
See: #1465
* firmware: video_decode: Ensure all buffers are flushed before
port disable completes
* firmware: arm_loader: Allow hvs interrupt during SET_NOTIFY_DISPLAY_DONE
* firmware: arm_display: Allow null buffer in successful call
See: raspberrypi/linux#4540
- Update to b80f36b3fb (2021-09-13):
* firmware: hdmi_2711: Use HDMI block REPEAT_PIXEL instead of PV
See: https://forum.libreelec.tv/thread/24415-le-10-beta-for-i4-force-hdmi-resolu…
* firmware: DSI display autodetection for kms
* firmware: arm_dt: Load overlays for detected cameras
* firmware: Make more use of the user-warnings DT property
* firmware: arm_loader: Consider required flags from GET_CLOCK_RATE
See: #1598
* firmware: arm_loader: Make most arm clock requests required
See: #1598
* firmware: firmware: Disable VLL loading from file system
See: #1605
* firmware: video_decode: Use the ISP instead of vc_image_convert
* firmware: video_decode: Correct support for YVU formats using ISP
* firmware: arm_dt: Limit CMA to 256MB if total_mem < 2GB or gpu_mem > 256MB
See: #1603
* firmware: hdmi_cec: Remove TX/RX SW_INIT on power_on
See: Hexxeh/rpi-firmware#267
See: https://www.raspberrypi.org/forums/viewtopic.php?p=1895082#p1895082
* firmware: cec: Avoid sending messages with kms
See: raspberrypi/linux#4460
* firmware: Revert: video_decode: Use the ISP instead of vc_image_convert
* firmware: isp: Set the YUV420/YVU420 format stride to 64 byte
* arm_loader: Add message to release firmware framebuffer
* firmware: video_decode: Use the ISP instead of vc_image_convert
* firmware: hdmi-2711: Wait for HDMI hardware scheduler to activate in HDMI mode
* firmware: bcm_host: Recognise all Pi 4 variants, add BCM2711
See: raspberrypi/userland#695
* firmware: PoE+ HAT support
See: raspberrypi/linux#4367
* firmware: arm_loader: Use Pi4 bootloader MAC_ADDRESS if set
* firmware: platform: Apply ARM thermal throttling rules on BCM2711
* firmware: dt-blob.dts: Correct HDMI HPD and EMMC_ENABLE for CM4
See: https://www.raspberrypi.org/forums/viewtopic.php?f=29&p=1858516
* firmware: vcfw/hdmi: CUSTOM modes used for FKMS didn't set RGB quant range correctly
See: #1580
* firmware: platform: Remove build-time constant for MICROVOLTS_PER_PIP
* firmware: Pi400: Reduce MII clock freq when probing ethernet PHY
* firmware: isp: Ensure the VRF is locked when setting up video colour denoise
See: raspberrypi/libcamera-apps#19
* firmware: isp: Remove custom EV mappings from camera tunings
* firmware: Add support for board-type=0xXX conditional filters in bootloader, bootcode and firmware
* firmware: Two UART1 patches
See: #1566
* firmware: arm_loader: kernel_old=1 should force kernel_address=0
See: #1561
* firmware: scalerlib: Fix offset applied to x coordinate of YUV10COL image
See: https://forum.kodi.tv/showthread.php?tid=361164&pid=3024654#pid3024654
* firmware: vcfw/power: Add a new latch for power_pad_control
See: #1552
* firmware: board-info: Fix memsize on 3B+
* firmware: Move core to PLLA and support accurate clk108
See: xbmc/xbmc#19263
* firmware: board_info: Separate memory size from OTP field encoding
* firmware: power: Swap DA9090 ADC assignments to match XR77004
* firmware: vl805: Remove redundant log statement and fix warning
* firmware: power: Fix DA9090 ADC1 register definition
* firmware: arm_loader: Only report clocks arm has set, not siblings
* firmware: arm_loader: Don't report clocks set as turbo side effect of arm clock
* firmware: arm_loader: 2711: gpu clocks are not dependant
* firmware: platform: Need to clear cached versions of get_max_clock_internal vars
* firmware: video_decode: For VC1/WMV with no signalled header bytes, use start of 1st buffer
See: raspberrypi/linux#4113
- Use smbios overlay to get minimal SMBIOS information through dmidecode (bsc#1183079)
==== raspberrypi-firmware-config ====
Version update (2021.03.10 -> 2021.09.30)
- Update to b5257da58c (2021-09-30):
* firmware: arm_loader: Allow non-optional reads of current clock
See: #1619
* firmware: dispmanx: Demote null eptr from vcos_verify to no warning
See: raspberrypi/linux#4592
* firmware: filesystem: sdcard: Probe FAT type in GPT ESD partitions
* firmware: tvservice: Add check to warn when running with kms
* firmware: filesystem: sdcard: Fix Hybrid GPT partitions
See: #1465
* firmware: video_decode: Ensure all buffers are flushed before
port disable completes
* firmware: arm_loader: Allow hvs interrupt during SET_NOTIFY_DISPLAY_DONE
* firmware: arm_display: Allow null buffer in successful call
See: raspberrypi/linux#4540
- Update to b80f36b3fb (2021-09-13):
* firmware: hdmi_2711: Use HDMI block REPEAT_PIXEL instead of PV
See: https://forum.libreelec.tv/thread/24415-le-10-beta-for-i4-force-hdmi-resolu…
* firmware: DSI display autodetection for kms
* firmware: arm_dt: Load overlays for detected cameras
* firmware: Make more use of the user-warnings DT property
* firmware: arm_loader: Consider required flags from GET_CLOCK_RATE
See: #1598
* firmware: arm_loader: Make most arm clock requests required
See: #1598
* firmware: firmware: Disable VLL loading from file system
See: #1605
* firmware: video_decode: Use the ISP instead of vc_image_convert
* firmware: video_decode: Correct support for YVU formats using ISP
* firmware: arm_dt: Limit CMA to 256MB if total_mem < 2GB or gpu_mem > 256MB
See: #1603
* firmware: hdmi_cec: Remove TX/RX SW_INIT on power_on
See: Hexxeh/rpi-firmware#267
See: https://www.raspberrypi.org/forums/viewtopic.php?p=1895082#p1895082
* firmware: cec: Avoid sending messages with kms
See: raspberrypi/linux#4460
* firmware: Revert: video_decode: Use the ISP instead of vc_image_convert
* firmware: isp: Set the YUV420/YVU420 format stride to 64 byte
* arm_loader: Add message to release firmware framebuffer
* firmware: video_decode: Use the ISP instead of vc_image_convert
* firmware: hdmi-2711: Wait for HDMI hardware scheduler to activate in HDMI mode
* firmware: bcm_host: Recognise all Pi 4 variants, add BCM2711
See: raspberrypi/userland#695
* firmware: PoE+ HAT support
See: raspberrypi/linux#4367
* firmware: arm_loader: Use Pi4 bootloader MAC_ADDRESS if set
* firmware: platform: Apply ARM thermal throttling rules on BCM2711
* firmware: dt-blob.dts: Correct HDMI HPD and EMMC_ENABLE for CM4
See: https://www.raspberrypi.org/forums/viewtopic.php?f=29&p=1858516
* firmware: vcfw/hdmi: CUSTOM modes used for FKMS didn't set RGB quant range correctly
See: #1580
* firmware: platform: Remove build-time constant for MICROVOLTS_PER_PIP
* firmware: Pi400: Reduce MII clock freq when probing ethernet PHY
* firmware: isp: Ensure the VRF is locked when setting up video colour denoise
See: raspberrypi/libcamera-apps#19
* firmware: isp: Remove custom EV mappings from camera tunings
* firmware: Add support for board-type=0xXX conditional filters in bootloader, bootcode and firmware
* firmware: Two UART1 patches
See: #1566
* firmware: arm_loader: kernel_old=1 should force kernel_address=0
See: #1561
* firmware: scalerlib: Fix offset applied to x coordinate of YUV10COL image
See: https://forum.kodi.tv/showthread.php?tid=361164&pid=3024654#pid3024654
* firmware: vcfw/power: Add a new latch for power_pad_control
See: #1552
* firmware: board-info: Fix memsize on 3B+
* firmware: Move core to PLLA and support accurate clk108
See: xbmc/xbmc#19263
* firmware: board_info: Separate memory size from OTP field encoding
* firmware: power: Swap DA9090 ADC assignments to match XR77004
* firmware: vl805: Remove redundant log statement and fix warning
* firmware: power: Fix DA9090 ADC1 register definition
* firmware: arm_loader: Only report clocks arm has set, not siblings
* firmware: arm_loader: Don't report clocks set as turbo side effect of arm clock
* firmware: arm_loader: 2711: gpu clocks are not dependant
* firmware: platform: Need to clear cached versions of get_max_clock_internal vars
* firmware: video_decode: For VC1/WMV with no signalled header bytes, use start of 1st buffer
See: raspberrypi/linux#4113
==== raspberrypi-firmware-dt ====
Version update (2021.03.15 -> 2021.09.17)
- Update to 2425833c7ff5 (2021-09-17)
* Switch to 5.14 branch
* Drop upstream-overlay-rpi-poe.patch
==== rbac-lookup ====
Version update (0.6.4 -> 0.7.1)
- Update to version 0.7.1:
* Mac M1 Support
* Update documentation from template
* Update README.md
==== rdma-core ====
Version update (36.0 -> 37.1)
Subpackages: libefa1 libibverbs libibverbs1 libmlx4-1 libmlx5-1 librdmacm1
- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
- Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files
==== salt ====
Subpackages: python3-salt salt-master salt-minion salt-standalone-formulas-configuration salt-transactional-update
- Fix issues with salt-ssh's extra-filerefs
- Added:
* fix-issues-with-salt-ssh-s-extra-filerefs.patch
- Fix crash when calling manage.not_alive runners
- Added:
* fix-crash-when-calling-manage.not_alive-runners.patch
- Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
- Added:
* 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
==== systemd ====
Version update (249.4 -> 249.5)
Subpackages: libsystemd0 libudev1 systemd-sysvinit udev
- Import commit 8521f8d22fd44400289fcea03493ebd7f8b1487d (merge of v249.5)
For a complete list of changes, visit:
https://github.com/openSUSE/systemd/compare/355e113ce193e5e2d195278c57d47f9…
- Import commit 355e113ce193e5e2d195278c57d47f9a1b00ae46
3b4a005095 meson: add missing include directory when using xkbcommon
4c4e642712 meson: allow extra net naming schemes to be defined during configuration (jsc#SLE-18514)
78466e4464 meson: drop the list of valid net naming schemes
b9a2098f9d netif-naming: inline one iterator variable
d7fbbc5e74 Add remaining supported schemes as options for default-net-naming-scheme
- Rename %{gnu-efi} into %{sd_boot}
Build conditionals (%bcond_with and %bcond_without) are used to
define a specific feature of systemd. "gnu-efi" is rather an
implemenation detail. Also not really sure what "efi" option alone
is useful for since systemd-boot & co depends on "gnu-efi".
- Enable sd_boot support for aarch64
- Ghost own directories /var/log/journal and /var/log/journal/remote again
rpmlint no more complain about the setgid bit, see sr#923496.
- Overwriting rootprefix= is only required when split-usr is enabled
- Rename %usrmerged into %split_usr
- Suppress PAM warning when the credentials for user@.service service
are established (bsc#1190515)
systemd-user PAM service needs to define a default implementation of
pam_setcred() otherwise the fallback (defined by /etc/pam.d/other)
is used, which consists of pam_warn.so + pam_deny.so, and will throw
a warning each time a user logs in.
- No need to install upstream pam configuration file "systemd-user"
It's overwritten by the SUSE version anyway.
==== systemd-presets-common-SUSE ====
- Haveged as a daemon is no longer required since kernel 5.6
do not enable by default.
==== timezone ====
Version update (2021c -> 2021d)
- timezone update 2021d:
* Fiji suspends DST for the 2021/2022 season
* 'zic -r' marks unspecified timestamps with "-00"
==== tpm2.0-tools ====
Version update (5.1.1 -> 5.2)
- Update to version 5.2:
+ tpm2_nvextend:
* Added option -n, --name to specify the name of the nvindex in
hex bytes. This is used when cpHash ought to be calculated
without dispatching the TPM2_NV_Extend command to the TPM.
+ tpm2_nvread:
* Added option --rphash=FILE to specify ile path to record the
hash of the response parameters. This is commonly termed as
rpHash.
* Added option -n, --name to specify the name of the nvindex in
hex bytes. This is used when cpHash ought to be calculated
without dispatching the TPM2_NVRead command to the TPM.
* Added option -S, --session to specify to specify an auxiliary
session for auditing and or encryption/decryption of the
parameters.
+ tpm2_nvsetbits:
* Added option --rphash=FILE to specify file path to record the
hash of the response parameters. This is commonly termed as
rpHash.
* Added option -S, --session to specify to specify an auxiliary
session for auditing and or encryption/decryption of the
parameters.
* Added option -n, --name to specify the name of the nvindex in
hex bytes. This is used when cpHash ought to be calculated
without dispatching the TPM2_NV_SetBits command to the TPM.
+ tpm2_createprimary:
* Support public-key output at creation time in various public-key
formats.
+ tpm2_create:
* Support public-key output at creation time in various public-key
formats.
+ tpm2_print:
* Support outputing public key in various public key formats over
the default YAML output. Supports taking -u output from
tpm2_create and converting it to a PEM or DER file format.
+ tpm2_import:
* Add support for importing keys with sealed-data-blobs.
+ tpm2_rsaencrypt, tpm2_rsadecrypt:
* Add support for specifying the hash algorithm with oaep.
+ tpm2_pcrread, tpm2_quote:
* Add option -F, --pcrs_format to specify PCR format selection for
the binary blob in the PCR output file. 'values' will output a
binary blob of the PCR values. 'serialized' will output a binary
blob of the PCR values in the form of serialized data structure
in little endian format.
+ tpm2_eventlog:
* Add support for decoding StartupLocality.
* Add support for printing the partition information.
* Add support for reading eventlogs longer than 64kb including
from /sys/kernel/security/tpm0/binary_bios-measurements.
+ tpm2_duplicate:
* Add option -L, --policy to specify an authorization policy to be
associated with the duplicated object.
* Added support for external key duplication without needing the
TCTI.
+ tools:
* Enhance error message on invalid passwords when sessions cannot
be used.
+ lib/tpm2_options:
* Add option to specify fake tcti which is required in cases where
sapi ctx is required to be initialized for retrieving command
parameters without invoking the tcti to talk to the TPM.
+ openssl:
* Dropped support for OpenSSL < 1.1.0
* Add support for OpenSSL 3.0.0
+ Support added to make the repository documentation and man pages
available live on readthedocs.
+ Bug-fixes:
* tpm2_import: Don't allow setting passwords for imported object
with -p option as the tool doesn't modify the TPM2B_SENSITIVE
structure. Added appropriate logging to indicate using
tpm2_changeauth after import.
* lib/tpm2_util.c: The function to calculate pHash algorithm
returned error when input session is a password session and the
only session in the command.
* lib/tpm2_alg_util.c: Fix an error where oaep was parsed under
ECC.
* tpm2_sign: Fix segfaults when tool does not find TPM resources
(TPM or RM).
* tpm2_makecredential: Fix an issue where reading input from stdin
could result in unsupported data size larger than the largest
digest size.
* tpm2_loadexternal: Fix an issue where restricted attribute could
not be set.
* lib/tpm2_nv_util.h: The NV index size is dependent on different
data sets read from the GetCapability structures because there
is a dependency on the NV operation type: Define vs Read vs
Write vs Extend. Fix a sane default in the case where
GetCapability fails or fails to report the specific property/
data set. This is especially true because some properties are
TPM implementation dependent.
* tpm2_createpolicy: Fix an issue where tool exited silently
without reporting an error if wrong pcr string is specified.
* lib/tpm2_alg_util: add error message on public init to prevent
tools from dying silently, add an error message.
* tpm2_import: fix an issue where an imported hmac object scheme
was NULL. While allowed, it was inconsistent with other tools
like tpm2_create which set the scheme as hmac->sha256 when
generating a keyedhash object.
- Drop patches already in upstream:
+ 0001-tpm2_checkquote-fix-uninitialized-variable.patch
+ 0001-tpm2_eventlog-fix-buffer-offset-when-reading-the-eve.patch
+ 0001-tpm2_eventlog-read-eventlog-file-in-chunks.patch
==== wireless-regdb ====
Version update (20210421 -> 20210828)
- Update to version 20210828:
* wireless-regdb: update regulatory database based on preceding changes
* Update regulatory rules for Ecuador (EC)
* wireless-regdb: Update regulatory rules for Norway (NO) on 6 and 60 GHz
* wireless-regdb: Update regulatory rules for Germany (DE) on 6GHz
* wireless-regdb: update regulatory database based on preceding changes
* wireless-regdb: reduce bandwidth for 5730-5850 and 5850-5895 MHz in US
* wireless-regdb: remove PTMP-ONLY from 5850-5895 MHz for US
* wireless-regdb: recent FCC report and order allows 5850-5895 immediately
* wireless-regdb: update 5725-5850 MHz rule for GB
==== xfsprogs ====
- move fsck.xfs, mkfs.xfs and xfs_repair from /sbin to /usr/sbin
(bsc#1191105)
The default rpmbuild %configure macro passes --sbindir=/usr/sbin to
every configure script, but the xfsprogs configure script ignores it
when --exec-prefix is also set. Unset --exec-prefix since it is not
really required (all other paths are explicitly passed via the rpm
configure macro), so that the --sbindir is respected.
==== xkeyboard-config ====
Version update (2.33 -> 2.34)
- update to version 2.34
* xml2lst: use dynamic Perl path
* Resolved 101key Old Hungarian II
* Old turkish f layout (with pc104 support) added.
* Fix wrong key symbol name
* Added International Phonetic Alphabet (QWERTY)
* gitlab CI: update to latest ci-templates
* Hellenic keyboard perfected.
* lt: Place sterling symbol on AD03, layer 4 (with E and euro)
* Use single guillemots on L4 (not less/greater) where L3 has guillemots
* Added English (Dvorak, Macintosh) based on the MacOS dvorak layout
* Accommodate uppercase/lowercase ß, long s, §; deduplicate ?
* Move left/right quotes one key to the right, place lower quotes on AB04
* Update symbols/it adding credits and reference for fur lang
* lt/us: Inherit AE09/AE10 from latin
* Add Russian GOST layouts
* Add Polish(lefty) layout
* Add Arabic(Ergoarabic) keyboard layout
* translation sync
* Hebrew translation added
==== yomi-formula ====
- Ignore libudev1 dependency for Enterprise Linux.
==== zypper ====
Version update (1.14.49 -> 1.14.50)
Subpackages: zypper-needs-restarting
- Fix compiler warning.
- zypper.conf: New option whether to collect subcommands found in
$PATH (fixes #379)
+[subcommand] i
+
+## Whether to look for subcommands in $PATH
+##
+## If a subcommand is not found in the zypper_execdir, the wrapper
+## will look in the rest of your $PATH for it. Thus, it's possible
+## to write local zypper extensions that don't live in system space.
+## See section SUBCOMMANDS in the zypper manpage.
+##
+## Valid values: boolean
+## Default value: yes
+##
+# seachSubcommandInPath = yes.
- help subcommand: show path of command found in $PATH.
- version 1.14.50
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
bluedevil5 (5.23.0 -> 5.23.1)
boost-base
breeze (5.23.0 -> 5.23.1)
discover (5.23.0 -> 5.23.1)
drkonqi5 (5.23.0 -> 5.23.1)
file (5.40 -> 5.41)
kactivitymanagerd (5.23.0 -> 5.23.1)
kde-cli-tools5 (5.23.0 -> 5.23.1)
kgamma5 (5.23.0 -> 5.23.1)
khotkeys5 (5.23.0 -> 5.23.1)
kinfocenter5 (5.23.0 -> 5.23.1)
kmenuedit5 (5.23.0 -> 5.23.1)
kscreen5 (5.23.0 -> 5.23.1)
kscreenlocker (5.23.0 -> 5.23.1)
ksystemstats5 (5.23.0 -> 5.23.1)
kwayland-integration (5.23.0 -> 5.23.1)
kwayland-server (5.23.0 -> 5.23.1)
kwin5 (5.23.0 -> 5.23.1)
kwrited5 (5.23.0 -> 5.23.1)
layer-shell-qt (5.23.0 -> 5.23.1)
libglvnd
libinput (1.19.1 -> 1.19.2)
libkdecoration2 (5.23.0 -> 5.23.1)
libkscreen2 (5.23.0 -> 5.23.1)
libksysguard5 (5.23.0 -> 5.23.1)
milou5 (5.23.0 -> 5.23.1)
mutter
plasma-browser-integration (5.23.0 -> 5.23.1)
plasma-nm5 (5.23.0 -> 5.23.1)
plasma5-addons (5.23.0 -> 5.23.1)
plasma5-desktop (5.23.0 -> 5.23.1)
plasma5-integration (5.23.0 -> 5.23.1)
plasma5-pa (5.23.0 -> 5.23.1)
plasma5-workspace (5.23.0 -> 5.23.1)
polkit-kde-agent-5 (5.23.0 -> 5.23.1)
powerdevil5 (5.23.0 -> 5.23.1)
systemsettings5 (5.23.0 -> 5.23.1)
tpm2.0-tools (5.1.1 -> 5.2)
webkit2gtk3 (2.34.0 -> 2.34.1)
webkit2gtk3-soup2 (2.34.0 -> 2.34.1)
xdg-desktop-portal-kde (5.23.0 -> 5.23.1)
=== Details ===
==== bluedevil5 ====
Version update (5.23.0 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
==== boost-base ====
Subpackages: boost-license1_77_0 libboost_thread1_77_0
- make boost-json-devel require boost-container-devel (bsc#1191822)
==== breeze ====
Version update (5.23.0 -> 5.23.1)
Subpackages: breeze5-cursors breeze5-decoration breeze5-style breeze5-wallpapers libbreezecommon5-5
- Add patch to fix the version number:
* 0001-Update-version-number-for-5.23.1.patch
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* Don't set alignment for spinboxes (kde#443769)
==== discover ====
Version update (5.23.0 -> 5.23.1)
Subpackages: discover-backend-flatpak discover-backend-packagekit discover-notifier
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* flatpak: Don't reuse GError instances (kde#426565)
* flatpak: Set the real value of the remotes (kde#443455)
* SourcesPage: Address how we show the checked state (kde#406295)
* Suggest correct words in the search field (kde#443945)
* SourcesPage: Use ItemIsUserCheckable to check if a source is checkable
* flatpak: Do not crash when a source is disabled
* Remove pointless tooltip from Labelbackground
==== drkonqi5 ====
Version update (5.23.0 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
==== file ====
Version update (5.40 -> 5.41)
Subpackages: file-magic libmagic1
- Remove file-5.38-allow-readlinkat.dif as already doen in latest
file 5.41
- Update to 5.41:
* Avinash Sonawane: Fix tzname detection
* Fix relationship tests with "search" magic, don't short circuit
logic
* Fix memory leak in compile mode
* PR/272: kiefermat: Only set returnval = 1 when we printed something
(in all cases print or !print). This simplifies the logic and fixes
the issue in the PR with -k and --mime-type there was no continuation
printed before the default case.
* PR/270: Don't translate unprintable characters in %s magic formats
when -r
* PR/269: Avoid undefined behavior with clang (adding offset to NULL)
* Add a new flag (f) that requires that the match is a full word,
not a partial word match.
* Add varint types (unused)
* PR/256: mutableVoid: If the file is less than 3 bytes, use the file
length to determine type
* PR/259: aleksandr.v.novichkov: mime printing through indirect magic
is not taken into account, use match directly so that it does.
- Remove patches now upstream
* file-5.40-1c677c04.patch
* file-5.40-3096f87f.patch
* file-5.40-4c5fe1ad.patch
* file-5.40-6b34436a.patch
* file-5.40-749e1ecf.patch
* file-5.40-9b0459af.patch
* file-5.40-9e2becec.patch
* file-5.40-ascii.patch
* file-5.40-f0601504.patch
* file-5.40-f7705dca.patch
- Port patches
* file-5.19-biorad.dif
* file-5.19-printf.dif
* file-5.19-zip2.0.dif
* file-5.23-endian.patch
* file-5.28-btrfs-image.dif
* file-5.38-allow-readlinkat.dif
* file-secure_getenv.patch
- Port and rename patch file-5.39.dif which is now file-5.41.dif
==== kactivitymanagerd ====
Version update (5.23.0 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* Fix build by lowering KDE_COMPILERSETTINGS_LEVEL
==== kde-cli-tools5 ====
Version update (5.23.0 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
==== kgamma5 ====
Version update (5.23.0 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
==== khotkeys5 ====
Version update (5.23.0 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
==== kinfocenter5 ====
Version update (5.23.0 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
==== kmenuedit5 ====
Version update (5.23.0 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
==== kscreen5 ====
Version update (5.23.0 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* Fix algorithm for common sizes in Generator::cloneScreens (kde#442822)
==== kscreenlocker ====
Version update (5.23.0 -> 5.23.1)
Subpackages: libKScreenLocker5
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* Fix sleep and hibernate actions
==== ksystemstats5 ====
Version update (5.23.0 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
==== kwayland-integration ====
Version update (5.23.0 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* fix: Kicker's sub-menus are covered up by Plasma panels (kde#378694)
==== kwayland-server ====
Version update (5.23.0 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
==== kwin5 ====
Version update (5.23.0 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* platforms/drm: fix disabled outputs with legacy drivers
* platforms/drm: reverse output creation order
* x11: Properly unredirect windows if compositing is not possible (kde#443953)
* Restore old behavior of Workspace::clientArea(clientOpt, Toplevel) (kde#443787)
* Do not ask for decoration settings without guarding
* scripting: Guard against nullptr m_client in WindowThumbnailItem (kde#443765)
* Properly update parent item's bounding rect when moving item (kde#443756)
* Fix AbstractClient::adjustedSize() for wayland windows with no committed buffer (kde#443705)
* Set KDE_COMPILERSETTINGS_LEVEL
* pipewire: Fix downloading software-rotated textures
* [wayland] fix crash on startup with lv3:ralt_alt XKB option (kde#440027)
- Drop patches, now upstream:
* kde443953.patch
==== kwrited5 ====
Version update (5.23.0 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
==== layer-shell-qt ====
Version update (5.23.0 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
==== libglvnd ====
- libglvnd.rpmlintrc
* workaround for future buildcheck (boo#1191763)
==== libinput ====
Version update (1.19.1 -> 1.19.2)
- Update to release 1.19.2:
* quirks: add quirk for GPD Win Max
* evdev: disable button scroll timeout for extra mouse buttons
* evdev: avoid usage of bogus BTN_FORWARD name
* gestures: avoid processing the last hold and
motion event twice
* quirks: Add quirk for StarLabs clickpads with two
phyisical buttons
* quirks: Update dmi for StarBook Mk V
* quirks: relax DMI modalias match for Purism Librem 14v1
==== libkdecoration2 ====
Version update (5.23.0 -> 5.23.1)
Subpackages: libkdecorations2-5 libkdecorations2private9
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
==== libkscreen2 ====
Version update (5.23.0 -> 5.23.1)
Subpackages: libKF5Screen7 libkscreen2-plugin
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
==== libksysguard5 ====
Version update (5.23.0 -> 5.23.1)
Subpackages: ksysguardsystemstats-data libKSysGuardSystemStats1 libksysguard5-imports
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
==== milou5 ====
Version update (5.23.0 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
==== mutter ====
- Rebase mutter-SLE-bsc984738-grab-display.patch.
==== plasma-browser-integration ====
Version update (5.23.0 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
==== plasma-nm5 ====
Version update (5.23.0 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* openconnect: Adjust version check in CMake and allow version 3.99 again
* openconnect widget: Default to "anyconnect" when protocol is not set.
* openconnect: Make FSID passphrase + empty private key combination work. (kde#443770)
* Only include mobileproviderstest with ModemManager
==== plasma5-addons ====
Version update (5.23.0 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
==== plasma5-desktop ====
Version update (5.23.0 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* Fix "clear emoji history" action (kde#443974)
* kickoff: Replace Kicker DragHelper with Qt Quick Drag (kde#443708)
* Make tooltip interactive when there is a player but no window is present (kde#443425)
* taskmanager: Disconnect from backend.showAllPlaces on destruction (kde#443820)
* Add systemsettings runner to hardcoded list of allowed runners for kicker (kde#443776)
* Folder View: Don't cancel multi-selection with right-click (kde#443743)
* [applets/kicker] Explicitly set visible property when opacity is 0
==== plasma5-integration ====
Version update (5.23.0 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
==== plasma5-pa ====
Version update (5.23.0 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
==== plasma5-workspace ====
Version update (5.23.0 -> 5.23.1)
Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-libs xembedsniproxy
- Add back X11 root window properties until firefox is adjusted
(boo#1191825):
* 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
* 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* [freespacenotifier] impr: no notification for ro filesystems
* kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
* [kcms/colors] Notify global settings change after saving
* krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
* sddm-theme: fix missing password field on "Other" page (kde#443737)
* pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
* [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
* 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch
==== polkit-kde-agent-5 ====
Version update (5.23.0 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
==== powerdevil5 ====
Version update (5.23.0 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
==== systemsettings5 ====
Version update (5.23.0 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
==== tpm2.0-tools ====
Version update (5.1.1 -> 5.2)
- Update to version 5.2:
+ tpm2_nvextend:
* Added option -n, --name to specify the name of the nvindex in
hex bytes. This is used when cpHash ought to be calculated
without dispatching the TPM2_NV_Extend command to the TPM.
+ tpm2_nvread:
* Added option --rphash=FILE to specify ile path to record the
hash of the response parameters. This is commonly termed as
rpHash.
* Added option -n, --name to specify the name of the nvindex in
hex bytes. This is used when cpHash ought to be calculated
without dispatching the TPM2_NVRead command to the TPM.
* Added option -S, --session to specify to specify an auxiliary
session for auditing and or encryption/decryption of the
parameters.
+ tpm2_nvsetbits:
* Added option --rphash=FILE to specify file path to record the
hash of the response parameters. This is commonly termed as
rpHash.
* Added option -S, --session to specify to specify an auxiliary
session for auditing and or encryption/decryption of the
parameters.
* Added option -n, --name to specify the name of the nvindex in
hex bytes. This is used when cpHash ought to be calculated
without dispatching the TPM2_NV_SetBits command to the TPM.
+ tpm2_createprimary:
* Support public-key output at creation time in various public-key
formats.
+ tpm2_create:
* Support public-key output at creation time in various public-key
formats.
+ tpm2_print:
* Support outputing public key in various public key formats over
the default YAML output. Supports taking -u output from
tpm2_create and converting it to a PEM or DER file format.
+ tpm2_import:
* Add support for importing keys with sealed-data-blobs.
+ tpm2_rsaencrypt, tpm2_rsadecrypt:
* Add support for specifying the hash algorithm with oaep.
+ tpm2_pcrread, tpm2_quote:
* Add option -F, --pcrs_format to specify PCR format selection for
the binary blob in the PCR output file. 'values' will output a
binary blob of the PCR values. 'serialized' will output a binary
blob of the PCR values in the form of serialized data structure
in little endian format.
+ tpm2_eventlog:
* Add support for decoding StartupLocality.
* Add support for printing the partition information.
* Add support for reading eventlogs longer than 64kb including
from /sys/kernel/security/tpm0/binary_bios-measurements.
+ tpm2_duplicate:
* Add option -L, --policy to specify an authorization policy to be
associated with the duplicated object.
* Added support for external key duplication without needing the
TCTI.
+ tools:
* Enhance error message on invalid passwords when sessions cannot
be used.
+ lib/tpm2_options:
* Add option to specify fake tcti which is required in cases where
sapi ctx is required to be initialized for retrieving command
parameters without invoking the tcti to talk to the TPM.
+ openssl:
* Dropped support for OpenSSL < 1.1.0
* Add support for OpenSSL 3.0.0
+ Support added to make the repository documentation and man pages
available live on readthedocs.
+ Bug-fixes:
* tpm2_import: Don't allow setting passwords for imported object
with -p option as the tool doesn't modify the TPM2B_SENSITIVE
structure. Added appropriate logging to indicate using
tpm2_changeauth after import.
* lib/tpm2_util.c: The function to calculate pHash algorithm
returned error when input session is a password session and the
only session in the command.
* lib/tpm2_alg_util.c: Fix an error where oaep was parsed under
ECC.
* tpm2_sign: Fix segfaults when tool does not find TPM resources
(TPM or RM).
* tpm2_makecredential: Fix an issue where reading input from stdin
could result in unsupported data size larger than the largest
digest size.
* tpm2_loadexternal: Fix an issue where restricted attribute could
not be set.
* lib/tpm2_nv_util.h: The NV index size is dependent on different
data sets read from the GetCapability structures because there
is a dependency on the NV operation type: Define vs Read vs
Write vs Extend. Fix a sane default in the case where
GetCapability fails or fails to report the specific property/
data set. This is especially true because some properties are
TPM implementation dependent.
* tpm2_createpolicy: Fix an issue where tool exited silently
without reporting an error if wrong pcr string is specified.
* lib/tpm2_alg_util: add error message on public init to prevent
tools from dying silently, add an error message.
* tpm2_import: fix an issue where an imported hmac object scheme
was NULL. While allowed, it was inconsistent with other tools
like tpm2_create which set the scheme as hmac->sha256 when
generating a keyedhash object.
- Drop patches already in upstream:
+ 0001-tpm2_checkquote-fix-uninitialized-variable.patch
+ 0001-tpm2_eventlog-fix-buffer-offset-when-reading-the-eve.patch
+ 0001-tpm2_eventlog-read-eventlog-file-in-chunks.patch
==== webkit2gtk3 ====
Version update (2.34.0 -> 2.34.1)
Subpackages: libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 webkit2gtk-4_1-injected-bundles
- Update to version 2.34.1:
+ Update user agent browser versions.
+ Fix a crash with GTK >= 3.24.30.
+ Fix a crash when loading videos on reddit.
+ Fix file type detection when application calls
g_desktop_app_info_set_as_default_for_extension() passing html.
==== webkit2gtk3-soup2 ====
Version update (2.34.0 -> 2.34.1)
Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles
- Update to version 2.34.1:
+ Update user agent browser versions.
+ Fix a crash with GTK >= 3.24.30.
+ Fix a crash when loading videos on reddit.
+ Fix file type detection when application calls
g_desktop_app_info_set_as_default_for_extension() passing html.
==== xdg-desktop-portal-kde ====
Version update (5.23.0 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
boost-base
file (5.40 -> 5.41)
libglvnd
tpm2.0-tools (5.1.1 -> 5.2)
=== Details ===
==== boost-base ====
Subpackages: boost-license1_77_0 libboost_thread1_77_0
- make boost-json-devel require boost-container-devel (bsc#1191822)
==== file ====
Version update (5.40 -> 5.41)
Subpackages: file-magic libmagic1
- Remove file-5.38-allow-readlinkat.dif as already doen in latest
file 5.41
- Update to 5.41:
* Avinash Sonawane: Fix tzname detection
* Fix relationship tests with "search" magic, don't short circuit
logic
* Fix memory leak in compile mode
* PR/272: kiefermat: Only set returnval = 1 when we printed something
(in all cases print or !print). This simplifies the logic and fixes
the issue in the PR with -k and --mime-type there was no continuation
printed before the default case.
* PR/270: Don't translate unprintable characters in %s magic formats
when -r
* PR/269: Avoid undefined behavior with clang (adding offset to NULL)
* Add a new flag (f) that requires that the match is a full word,
not a partial word match.
* Add varint types (unused)
* PR/256: mutableVoid: If the file is less than 3 bytes, use the file
length to determine type
* PR/259: aleksandr.v.novichkov: mime printing through indirect magic
is not taken into account, use match directly so that it does.
- Remove patches now upstream
* file-5.40-1c677c04.patch
* file-5.40-3096f87f.patch
* file-5.40-4c5fe1ad.patch
* file-5.40-6b34436a.patch
* file-5.40-749e1ecf.patch
* file-5.40-9b0459af.patch
* file-5.40-9e2becec.patch
* file-5.40-ascii.patch
* file-5.40-f0601504.patch
* file-5.40-f7705dca.patch
- Port patches
* file-5.19-biorad.dif
* file-5.19-printf.dif
* file-5.19-zip2.0.dif
* file-5.23-endian.patch
* file-5.28-btrfs-image.dif
* file-5.38-allow-readlinkat.dif
* file-secure_getenv.patch
- Port and rename patch file-5.39.dif which is now file-5.41.dif
==== libglvnd ====
- libglvnd.rpmlintrc
* workaround for future buildcheck (boo#1191763)
==== tpm2.0-tools ====
Version update (5.1.1 -> 5.2)
- Update to version 5.2:
+ tpm2_nvextend:
* Added option -n, --name to specify the name of the nvindex in
hex bytes. This is used when cpHash ought to be calculated
without dispatching the TPM2_NV_Extend command to the TPM.
+ tpm2_nvread:
* Added option --rphash=FILE to specify ile path to record the
hash of the response parameters. This is commonly termed as
rpHash.
* Added option -n, --name to specify the name of the nvindex in
hex bytes. This is used when cpHash ought to be calculated
without dispatching the TPM2_NVRead command to the TPM.
* Added option -S, --session to specify to specify an auxiliary
session for auditing and or encryption/decryption of the
parameters.
+ tpm2_nvsetbits:
* Added option --rphash=FILE to specify file path to record the
hash of the response parameters. This is commonly termed as
rpHash.
* Added option -S, --session to specify to specify an auxiliary
session for auditing and or encryption/decryption of the
parameters.
* Added option -n, --name to specify the name of the nvindex in
hex bytes. This is used when cpHash ought to be calculated
without dispatching the TPM2_NV_SetBits command to the TPM.
+ tpm2_createprimary:
* Support public-key output at creation time in various public-key
formats.
+ tpm2_create:
* Support public-key output at creation time in various public-key
formats.
+ tpm2_print:
* Support outputing public key in various public key formats over
the default YAML output. Supports taking -u output from
tpm2_create and converting it to a PEM or DER file format.
+ tpm2_import:
* Add support for importing keys with sealed-data-blobs.
+ tpm2_rsaencrypt, tpm2_rsadecrypt:
* Add support for specifying the hash algorithm with oaep.
+ tpm2_pcrread, tpm2_quote:
* Add option -F, --pcrs_format to specify PCR format selection for
the binary blob in the PCR output file. 'values' will output a
binary blob of the PCR values. 'serialized' will output a binary
blob of the PCR values in the form of serialized data structure
in little endian format.
+ tpm2_eventlog:
* Add support for decoding StartupLocality.
* Add support for printing the partition information.
* Add support for reading eventlogs longer than 64kb including
from /sys/kernel/security/tpm0/binary_bios-measurements.
+ tpm2_duplicate:
* Add option -L, --policy to specify an authorization policy to be
associated with the duplicated object.
* Added support for external key duplication without needing the
TCTI.
+ tools:
* Enhance error message on invalid passwords when sessions cannot
be used.
+ lib/tpm2_options:
* Add option to specify fake tcti which is required in cases where
sapi ctx is required to be initialized for retrieving command
parameters without invoking the tcti to talk to the TPM.
+ openssl:
* Dropped support for OpenSSL < 1.1.0
* Add support for OpenSSL 3.0.0
+ Support added to make the repository documentation and man pages
available live on readthedocs.
+ Bug-fixes:
* tpm2_import: Don't allow setting passwords for imported object
with -p option as the tool doesn't modify the TPM2B_SENSITIVE
structure. Added appropriate logging to indicate using
tpm2_changeauth after import.
* lib/tpm2_util.c: The function to calculate pHash algorithm
returned error when input session is a password session and the
only session in the command.
* lib/tpm2_alg_util.c: Fix an error where oaep was parsed under
ECC.
* tpm2_sign: Fix segfaults when tool does not find TPM resources
(TPM or RM).
* tpm2_makecredential: Fix an issue where reading input from stdin
could result in unsupported data size larger than the largest
digest size.
* tpm2_loadexternal: Fix an issue where restricted attribute could
not be set.
* lib/tpm2_nv_util.h: The NV index size is dependent on different
data sets read from the GetCapability structures because there
is a dependency on the NV operation type: Define vs Read vs
Write vs Extend. Fix a sane default in the case where
GetCapability fails or fails to report the specific property/
data set. This is especially true because some properties are
TPM implementation dependent.
* tpm2_createpolicy: Fix an issue where tool exited silently
without reporting an error if wrong pcr string is specified.
* lib/tpm2_alg_util: add error message on public init to prevent
tools from dying silently, add an error message.
* tpm2_import: fix an issue where an imported hmac object scheme
was NULL. While allowed, it was inconsistent with other tools
like tpm2_create which set the scheme as hmac->sha256 when
generating a keyedhash object.
- Drop patches already in upstream:
+ 0001-tpm2_checkquote-fix-uninitialized-variable.patch
+ 0001-tpm2_eventlog-fix-buffer-offset-when-reading-the-eve.patch
+ 0001-tpm2_eventlog-read-eventlog-file-in-chunks.patch
1
0
Hi All,
Since last week I've been trying to get a MicroOS image running - with the intention of maintaining the image for the masses - in Google Cloud with not a lot of success. I'm currently at the stage where I have a ready image with google-guest-configs; google-osconfig-agent; google-guest-oslogin; google-guest-agent installed and enabled, but the image can't boot and stops looking for a disk by UUID (more here: https://paste.opensuse.org/34392008) Looking at GCP `btrfs` is not exactly supported, I assume this is the reason behind Leap 15.3 being installed on `XFS` as well, but I'm just making assumptions at this point. Does anybody has any ideas if this is possible at all or should I just skip this?
--
Br,
A.
2
6
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
baloo5-widgets (21.08.1 -> 21.08.2)
bluedevil5 (5.22.5 -> 5.23.0)
breeze (5.22.5 -> 5.23.0)
discover (5.22.5 -> 5.23.0)
dolphin (21.08.1 -> 21.08.2)
drkonqi5 (5.22.5 -> 5.23.0)
gpsd (3.23 -> 3.23.1)
kaccounts-integration (21.08.1 -> 21.08.2)
kactivitymanagerd (5.22.5 -> 5.23.0)
kate (21.08.1 -> 21.08.2)
kde-cli-tools5 (5.22.5 -> 5.23.0)
kde-print-manager (21.08.1 -> 21.08.2)
kdialog (21.08.1 -> 21.08.2)
kernel-source (5.14.9 -> 5.14.11)
kgamma5 (5.22.5 -> 5.23.0)
khotkeys5 (5.22.5 -> 5.23.0)
kinfocenter5 (5.22.5 -> 5.23.0)
kio-extras5 (21.08.1 -> 21.08.2)
kmenuedit5 (5.22.5 -> 5.23.0)
konsole (21.08.1 -> 21.08.2)
kscreen5 (5.22.5 -> 5.23.0)
kscreenlocker (5.22.5 -> 5.23.0)
ksystemstats5 (5.22.5 -> 5.23.0)
kwalletmanager5 (21.08.1 -> 21.08.2)
kwayland-integration (5.22.5 -> 5.23.0)
kwayland-server (5.22.5 -> 5.23.0)
kwin5 (5.22.5 -> 5.23.0)
kwrited5 (5.22.5 -> 5.23.0)
layer-shell-qt (5.22.5 -> 5.23.0)
libaom
libkdecoration2 (5.22.5 -> 5.23.0)
libkscreen2 (5.22.5 -> 5.23.0)
libksysguard5 (5.22.5 -> 5.23.0)
libwebp (1.2.0 -> 1.2.1)
milou5 (5.22.5 -> 5.23.0)
nvme-cli
pipewire
plasma-browser-integration (5.22.5 -> 5.23.0)
plasma-nm5 (5.22.5 -> 5.23.0)
plasma5-addons (5.22.5 -> 5.23.0)
plasma5-desktop (5.22.5 -> 5.23.0)
plasma5-integration (5.22.5 -> 5.23.0)
plasma5-openSUSE
plasma5-pa (5.22.5 -> 5.23.0)
plasma5-workspace (5.22.5 -> 5.23.0)
polkit-kde-agent-5 (5.22.5 -> 5.23.0)
powerdevil5 (5.22.5 -> 5.23.0)
systemsettings5 (5.22.5 -> 5.23.0)
xdg-desktop-portal-kde (5.22.5 -> 5.23.0)
=== Details ===
==== baloo5-widgets ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== bluedevil5 ====
Version update (5.22.5 -> 5.23.0)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Remove applet list item animations
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Confirm deleting a bluetooth device pairing.
* Add keywords to bluetooth KCM
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Let the user choose Bluetooth status on login (kde#440493)
* [applet] Show the text "Connected" for connected devices (kde#440423)
* [applet] Give FullRepresentation an implicit size (kde#439981)
* Embed JSON metadata in KIOSlaves
* Remove obsolete .protocol files
* Convert protocol files to JSON
* Use version-less qt DBus macros
* Use ellipses instead of triple period
==== breeze ====
Version update (5.22.5 -> 5.23.0)
Subpackages: breeze5-cursors breeze5-decoration breeze5-style breeze5-wallpapers libbreezecommon5-5
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* kstyle: Limit what kinds of QPushButtons can use autoDefault
* Revert accidental revert of f763f27ebf3bbb21235ab3df0f7b9ef035cc71b5
* kstyle: Clean up tab painting and tweak tab highlight
* Don't reserve room for spinbox buttons if buttons disabled (kde#440718)
* kstyle: use checked color consistent with button down color for checkboxes and radiobuttons
* kstyle: visible neutral highlight on not hovered checkboxes and radio buttons
* KTitleWidget: Make background transparent again (kde#442860)
* Revert "kstyle: make spinboxes look like qqc2-breeze-style"
* Revert "kstyle: centre spinbox text"
* Revert "Don't reserve room for spinbox buttons if buttons disabled"
* Revert "Center all QAbstractSpinBox, not just integer QSpinBox"
* Revert "kstyle: make spinbox buttons consistently widthed"
* Revert "kstyle: fix misalignment of spinbox item sizes"
* Darken hard-to-read positive, negative, and neutral selection colors (kde#406239)
* Fix incorrect link selection color in Breeze Light color scheme (kde#419960)
* Fix incorrect active selection color in Breeze Light color scheme (kde#442478)
* Restore auto default button behavior (kde#438994)
* kstyle: use antialiasing on combobox items
- Add new key + signature to plasma.keyring
- Drop patches, now upstream:
* 0001-Restore-auto-default-button-behavior.patch
- Add patch to automatically set a default button again (kde#438994):
* 0001-Restore-auto-default-button-behavior.patch
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
==== discover ====
Version update (5.22.5 -> 5.23.0)
Subpackages: discover-backend-flatpak discover-backend-packagekit discover-notifier
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* flatpak: Also show the installed version (kde#443256)
* Improve margins around Updates page messages
* Do not show tooltips when fetching updates (kde#443050)
* snap: Don't mark as cancelled until we get the reply (kde#425680)
* flatpak: Also search flatpakref files where the id doesn't include .desktop
* flatpak: Fix installing sources
* flatpak: Reuse remote when opening a well-known flatpakref file
* flatpak: Do not crash when using a flatpakref file (kde#442709)
* Explicitly set the interactive flag for PackageKit transactions (kde#442383)
* Link against Qt::Widgets (kde#442866)
* Sources: Fix displaying sources (kde#442604)
* kns: Do not process entries from invalid backends
* Stop bringing kxmlgui
* Port away from KIO::AccessManager
* Fix the InstallApplicationButton with QQC2 Breeze
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
==== dolphin ====
Version update (21.08.1 -> 21.08.2)
Subpackages: dolphin-part libdolphinvcs5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* Fix closing a secondary viewContainer on startup settings change (kde#426221)
* Don't force icon for preferred search tool action if one is manually configured (kde#442815)
* Fixed a missing bracket.
* Make "Empties Trash to create free space" translatable.
==== drkonqi5 ====
Version update (5.22.5 -> 5.23.0)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
==== gpsd ====
Version update (3.23 -> 3.23.1)
- Set ProtectClock to false or gpsd will not start
- Don't use gpsd version in patches (will break with every update)
% harden_gpsd.service.patch
% harden_gpsdctl@.service.patch
- Update to version 3.23.1
* Improve ubx cycle detection.
* Add quirks for Jackson Labs nonstandard NMEA
* Change STATUS_NO_FIX to STATUS_UNK to avoid confusion with fix
mode.
* Change STATUS_FIX to STATUS_GPS to avoid confusion with fix
mode.
* Change STATUS_DGPS_FIX to STATUS_DGPS to avoid confusion with
fix mode.
* Split SOURCE_ACM from SOURCE_USB. ACM has no speeds.
* Add speeds 1 mbps, 1.152 mbps, 1.5 mbps, and higher. When libc
supports them.
* Improve autobaud.
* Add new u-blox M10 messages.
* Fix u-blox M6, M7 initialization issues.
* Various ubxtool and gpxlogger updates.
* Add mtk3301_speed_switcher()
* No API, ABI changes.
* Fallback to "python3" if "python" not found.
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_gpsd.service.patch
* harden_gpsdctl@.service.patch
==== kaccounts-integration ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kactivitymanagerd ====
Version update (5.22.5 -> 5.23.0)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* desktop switch support for wayland (kde#439183)
* Port away from deprecated KPluginLoader
* krunner plugin: Avoid querying DBus runner unnecessarily
* Clean up unneeded JSON parameter in kcoreaddons_add_plugin
* Port from KPluginLoader::pluginsById to KPluginMetaData::pluginById
* Use version-less qt DBus macros
* Clean up ServiceType property usage for JSON based plugins
* Remove empty dependencies value of JSON plugin metadata
==== kate ====
Version update (21.08.1 -> 21.08.2)
Subpackages: kate-plugins
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* Fix replicode plugin not deleting its toolview (kde#441859)
* Fix commit dialog width
- Change the license tag to LGPL-2.0-only AND LGPL-2.1-or-later.
There are no GPL-3.0 files.
==== kde-cli-tools5 ====
Version update (5.22.5 -> 5.23.0)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* kioclient: Add a 'stat' command
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* kcmshell: Allow loading KCMs using plugin path
* kcmshell: general code cleanup
* General code cleanup
* kcmshell: Re-group includes
* Replace QtDBus include with includes for specific classes
* plasma-open-settings: support both systemsettings:// and :///
* Include settings-open that allows summoning system settings from a URL
* Relicense file to LGPL-2.0-or-later
==== kde-print-manager ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kdialog ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kernel-source ====
Version update (5.14.9 -> 5.14.11)
- Linux 5.14.11 (bsc#1012628).
- Revert "ARM: imx6q: drop of_platform_default_populate() from
init_machine" (bsc#1012628).
- Revert "brcmfmac: use ISO3166 country code and 0 rev as
fallback" (bsc#1012628).
- libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870
SSD (bsc#1012628).
- perf/x86: Reset destroy callback on event init failure
(bsc#1012628).
- KVM: x86: nSVM: restore int_vector in svm_clear_vintr
(bsc#1012628).
- kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[] (bsc#1012628).
- KVM: x86: reset pdptrs_from_userspace when exiting smm
(bsc#1012628).
- KVM: do not shrink halt_poll_ns below grow_start (bsc#1012628).
- selftests: KVM: Align SMCCC call with the spec in steal_time
(bsc#1012628).
- kasan: always respect CONFIG_KASAN_STACK (bsc#1012628).
- tools/vm/page-types: remove dependency on opt_file for idle
page tracking (bsc#1012628).
- block: don't call rq_qos_ops->done_bio if the bio isn't tracked
(bsc#1012628).
- io_uring: allow conditional reschedule for intensive iterators
(bsc#1012628).
- x86/insn, tools/x86: Fix undefined behavior due to potential
unaligned accesses (bsc#1012628).
- smb3: correct smb3 ACL security descriptor (bsc#1012628).
- irqchip/gic: Work around broken Renesas integration
(bsc#1012628).
- scsi: ses: Retry failed Send/Receive Diagnostic commands
(bsc#1012628).
- thermal/drivers/tsens: Fix wrong check for tzd in irq handlers
(bsc#1012628).
- nvme-fc: avoid race between time out and tear down
(bsc#1012628).
- nvme-fc: update hardware queues before using them (bsc#1012628).
- swiotlb-xen: ensure to issue well-formed XENMEM_exchange
requests (bsc#1012628).
- Xen/gntdev: don't ignore kernel unmapping error (bsc#1012628).
- selftests: kvm: fix get_run_delay() ignoring fscanf() return
warn (bsc#1012628).
- selftests: kvm: move get_run_delay() into lib/test_util
(bsc#1012628).
- selftests:kvm: fix get_trans_hugepagesz() ignoring fscanf()
return warn (bsc#1012628).
- selftests:kvm: fix get_warnings_count() ignoring fscanf()
return warn (bsc#1012628).
- selftests: be sure to make khdr before other targets
(bsc#1012628).
- habanalabs/gaudi: fix LBW RR configuration (bsc#1012628).
- habanalabs: fail collective wait when not supported
(bsc#1012628).
- habanalabs/gaudi: use direct MSI in single mode (bsc#1012628).
- usb: dwc2: check return value after calling
platform_get_resource() (bsc#1012628).
- usb: testusb: Fix for showing the connection speed
(bsc#1012628).
- scsi: elx: efct: Do not hold lock while calling
fc_vport_terminate() (bsc#1012628).
- scsi: sd: Free scsi_disk device via put_device() (bsc#1012628).
- drm/amdkfd: fix svm_migrate_fini warning (bsc#1012628).
- drm/amdkfd: handle svm migrate init error (bsc#1012628).
- ext2: fix sleeping in atomic bugs on error (bsc#1012628).
- platform/x86: gigabyte-wmi: add support for B550I Aorus Pro AX
(bsc#1012628).
- sparc64: fix pci_iounmap() when CONFIG_PCI is not set
(bsc#1012628).
- xen-netback: correct success/error reporting for the
SKB-with-fraglist case (bsc#1012628).
- net: mdio: introduce a shutdown method to mdio device drivers
(bsc#1012628).
- btrfs: fix mount failure due to past and transient device
flush error (bsc#1012628).
- btrfs: replace BUG_ON() in btrfs_csum_one_bio() with proper
error handling (bsc#1012628).
- nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN
(bsc#1012628).
- platform/x86: touchscreen_dmi: Update info for the Chuwi Hi10
Plus (CWI527) tablet (bsc#1012628).
- platform/x86: touchscreen_dmi: Add info for the Chuwi HiBook
(CWI514) tablet (bsc#1012628).
- afs: Add missing vnode validation checks (bsc#1012628).
- spi: rockchip: handle zero length transfers without timing out
(bsc#1012628).
- commit 834dddd
- iwlwifi: Fix MODULE_FIRMWARE() for non-existing ucode version
(boo#1191417).
- commit 6597512
- Linux 5.14.10 (bsc#1012628).
- media: hantro: Fix check for single irq (bsc#1012628).
- media: cedrus: Fix SUNXI tile size calculation (bsc#1012628).
- media: s5p-jpeg: rename JPEG marker constants to prevent build
warnings (bsc#1012628).
- ASoC: fsl_sai: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: fsl_esai: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: fsl_micfil: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: fsl_spdif: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: fsl_xcvr: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: mediatek: common: handle NULL case in suspend/resume
function (bsc#1012628).
- scsi: elx: efct: Fix void-pointer-to-enum-cast warning for
efc_nport_topology (bsc#1012628).
- ASoC: SOF: Fix DSP oops stack dump output contents
(bsc#1012628).
- ASoC: SOF: imx: imx8: Bar index is only valid for IRAM and
SRAM types (bsc#1012628).
- ASoC: SOF: imx: imx8m: Bar index is only valid for IRAM and
SRAM types (bsc#1012628).
- pinctrl: qcom: spmi-gpio: correct parent irqspec translation
(bsc#1012628).
- net/mlx4_en: Resolve bad operstate value (bsc#1012628).
- s390/qeth: Fix deadlock in remove_discipline (bsc#1012628).
- s390/qeth: fix deadlock during failing recovery (bsc#1012628).
- m68k: Update ->thread.esp0 before calling syscall_trace()
in ret_from_signal (bsc#1012628).
- NIOS2: fix kconfig unmet dependency warning for
SERIAL_CORE_CONSOLE (bsc#1012628).
- kasan: fix Kconfig check of CC_HAS_WORKING_NOSANITIZE_ADDRESS
(bsc#1012628).
- HID: amd_sfh: Fix potential NULL pointer dereference
(bsc#1012628).
- perf test: Fix DWARF unwind for optimized builds (bsc#1012628).
- perf iostat: Use system-wide mode if the target cpu_list is
unspecified (bsc#1012628).
- perf iostat: Fix Segmentation fault from NULL 'struct
perf_counts_values *' (bsc#1012628).
- watchdog/sb_watchdog: fix compilation problem due to
COMPILE_TEST (bsc#1012628).
- tty: Fix out-of-bound vmalloc access in imageblit (bsc#1012628).
- cpufreq: schedutil: Use kobject release() method to free
sugov_tunables (bsc#1012628).
- scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS
(bsc#1012628).
- drm/amdgpu: adjust fence driver enable sequence (bsc#1012628).
- drm/amdgpu: avoid over-handle of fence driver fini in s3 test
(v2) (bsc#1012628).
- drm/amdgpu: stop scheduler when calling hw_fini (v2)
(bsc#1012628).
- cpufreq: schedutil: Destroy mutex before kobject_put() frees
the memory (bsc#1012628).
- scsi: ufs: ufs-pci: Fix Intel LKF link stability (bsc#1012628).
- ALSA: rawmidi: introduce SNDRV_RAWMIDI_IOCTL_USER_PVERSION
(bsc#1012628).
- ALSA: firewire-motu: fix truncated bytes in message tracepoints
(bsc#1012628).
- ALSA: hda/realtek: Quirks to enable speaker output for Lenovo
Legion 7i 15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops
(bsc#1012628).
- ACPI: NFIT: Use fallback node id when numa info in NFIT table
is incorrect (bsc#1012628).
- fs-verity: fix signed integer overflow with i_size near S64_MAX
(bsc#1012628).
- hwmon: (tmp421) handle I2C errors (bsc#1012628).
- hwmon: (w83793) Fix NULL pointer dereference by removing
unnecessary structure field (bsc#1012628).
- hwmon: (w83792d) Fix NULL pointer dereference by removing
unnecessary structure field (bsc#1012628).
- hwmon: (w83791d) Fix NULL pointer dereference by removing
unnecessary structure field (bsc#1012628).
- gpio: pca953x: do not ignore i2c errors (bsc#1012628).
- scsi: ufs: Fix illegal offset in UPIU event trace (bsc#1012628).
- mac80211: fix use-after-free in CCMP/GCMP RX (bsc#1012628).
- platform/x86/intel: hid: Add DMI switches allow list
(bsc#1012628).
- x86/kvmclock: Move this_cpu_pvti into kvmclock.h (bsc#1012628).
- ptp: Fix ptp_kvm_getcrosststamp issue for x86 ptp_kvm
(bsc#1012628).
- KVM: x86: Fix stack-out-of-bounds memory access from
ioapic_write_indirect() (bsc#1012628).
- KVM: x86: nSVM: don't copy virt_ext from vmcb12 (bsc#1012628).
- KVM: x86: Clear KVM's cached guest CR3 at RESET/INIT
(bsc#1012628).
- KVM: x86: Swap order of CPUID entry "index" vs. "significant
flag" checks (bsc#1012628).
- KVM: nVMX: Filter out all unsupported controls when eVMCS was
activated (bsc#1012628).
- KVM: SEV: Update svm_vm_copy_asid_from for SEV-ES (bsc#1012628).
- KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
(bsc#1012628).
- KVM: SEV: Acquire vcpu mutex when updating VMSA (bsc#1012628).
- KVM: SEV: Allow some commands for mirror VM (bsc#1012628).
- KVM: SVM: fix missing sev_decommission in sev_receive_start
(bsc#1012628).
- KVM: nVMX: Fix nested bus lock VM exit (bsc#1012628).
- KVM: VMX: Fix a TSX_CTRL_CPUID_CLEAR field mask issue
(bsc#1012628).
- mmc: renesas_sdhi: fix regression with hard reset on old SDHIs
(bsc#1012628).
- media: ir_toy: prevent device from hanging during transmit
(bsc#1012628).
- RDMA/cma: Do not change route.addr.src_addr.ss_family
(bsc#1012628).
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing
more requests (bsc#1012628).
- nbd: use shifts rather than multiplies (bsc#1012628).
- drm/amd/display: initialize backlight_ramping_override to false
(bsc#1012628).
- drm/amd/display: Pass PCI deviceid into DC (bsc#1012628).
- drm/amd/display: Fix Display Flicker on embedded panels
(bsc#1012628).
- drm/amdgpu: force exit gfxoff on sdma resume for rmb s0ix
(bsc#1012628).
- drm/amdgpu: check tiling flags when creating FB on GFX8-
(bsc#1012628).
- drm/amdgpu: correct initial cp_hqd_quantum for gfx9
(bsc#1012628).
- interconnect: qcom: sdm660: Fix id of slv_cnoc_mnoc_cfg
(bsc#1012628).
- interconnect: qcom: sdm660: Correct NOC_QOS_PRIORITY shift
and mask (bsc#1012628).
- drm/i915/gvt: fix the usage of ww lock in gvt scheduler
(bsc#1012628).
- ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
(bsc#1012628).
- bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog
(bsc#1012628).
- IB/cma: Do not send IGMP leaves for sendonly Multicast groups
(bsc#1012628).
- RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure
(bsc#1012628).
- bpf, mips: Validate conditional branch offsets (bsc#1012628).
- hwmon: (mlxreg-fan) Return non-zero value when fan current
state is enforced from sysfs (bsc#1012628).
- RDMA/irdma: Skip CQP ring during a reset (bsc#1012628).
- RDMA/irdma: Validate number of CQ entries on create CQ
(bsc#1012628).
- RDMA/irdma: Report correct WC error when transport retry
counter is exceeded (bsc#1012628).
- RDMA/irdma: Report correct WC error when there are MW bind
errors (bsc#1012628).
- netfilter: nf_tables: unlink table before deleting it
(bsc#1012628).
- netfilter: log: work around missing softdep backend module
(bsc#1012628).
- Revert "mac80211: do not use low data rates for data frames
with no ack flag" (bsc#1012628).
- mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
(bsc#1012628).
- mac80211: limit injected vht mcs/nss in
ieee80211_parse_tx_radiotap (bsc#1012628).
- mac80211: mesh: fix potentially unaligned access (bsc#1012628).
- mac80211-hwsim: fix late beacon hrtimer handling (bsc#1012628).
- driver core: fw_devlink: Add support for
FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD (bsc#1012628).
- net: mdiobus: Set FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD for
mdiobus parents (bsc#1012628).
- sctp: break out if skb_header_pointer returns NULL in
sctp_rcv_ootb (bsc#1012628).
- mptcp: don't return sockets in foreign netns (bsc#1012628).
- mptcp: allow changing the 'backup' bit when no sockets are open
(bsc#1012628).
- RDMA/hns: Work around broken constant propagation in gcc 8
(bsc#1012628).
- hwmon: (tmp421) report /PVLD condition as fault (bsc#1012628).
- hwmon: (tmp421) fix rounding for negative values (bsc#1012628).
- net: enetc: fix the incorrect clearing of IF_MODE bits
(bsc#1012628).
- net: ipv4: Fix rtnexthop len when RTA_FLOW is present
(bsc#1012628).
- smsc95xx: fix stalled rx after link change (bsc#1012628).
- drm/i915/request: fix early tracepoints (bsc#1012628).
- drm/i915: Remove warning from the rps worker (bsc#1012628).
- dsa: mv88e6xxx: 6161: Use chip wide MAX MTU (bsc#1012628).
- dsa: mv88e6xxx: Fix MTU definition (bsc#1012628).
- dsa: mv88e6xxx: Include tagger overhead when setting MTU for
DSA and CPU ports (bsc#1012628).
- e100: fix length calculation in e100_get_regs_len (bsc#1012628).
- e100: fix buffer overrun in e100_get_regs (bsc#1012628).
- RDMA/hfi1: Fix kernel pointer leak (bsc#1012628).
- RDMA/hns: Fix the size setting error when copying CQE in
clean_cq() (bsc#1012628).
- RDMA/hns: Add the check of the CQE size of the user space
(bsc#1012628).
- bpf: Exempt CAP_BPF from checks against bpf_jit_limit
(bsc#1012628).
- libbpf: Fix segfault in static linker for objects without BTF
(bsc#1012628).
- selftests, bpf: Fix makefile dependencies on libbpf
(bsc#1012628).
- selftests, bpf: test_lwt_ip_encap: Really disable rp_filter
(bsc#1012628).
- bpf, x86: Fix bpf mapping of atomic fetch implementation
(bsc#1012628).
- net: ks8851: fix link error (bsc#1012628).
- ionic: fix gathering of debug stats (bsc#1012628).
- Revert "block, bfq: honor already-setup queue merges"
(bsc#1012628).
- scsi: csiostor: Add module softdep on cxgb4 (bsc#1012628).
- ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup
(bsc#1012628).
- net: hns3: do not allow call hns3_nic_net_open repeatedly
(bsc#1012628).
- net: hns3: remove tc enable checking (bsc#1012628).
- net: hns3: don't rollback when destroy mqprio fail
(bsc#1012628).
- net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and
HCLGE_FLAG_DCB_ENABLE (bsc#1012628).
- net: hns3: fix show wrong state when add existing uc mac address
(bsc#1012628).
- net: hns3: reconstruct function hns3_self_test (bsc#1012628).
- net: hns3: fix always enable rx vlan filter problem after
selftest (bsc#1012628).
- net: hns3: disable firmware compatible features when uninstall
PF (bsc#1012628).
- net: phy: bcm7xxx: Fixed indirect MMD operations (bsc#1012628).
- net: sched: flower: protect fl_walk() with rcu (bsc#1012628).
- net: stmmac: fix EEE init issue when paired with EEE capable
PHYs (bsc#1012628).
- af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
(bsc#1012628).
- objtool: Teach get_alt_entry() about more relocation types
(bsc#1012628).
- perf/x86/intel: Update event constraints for ICX (bsc#1012628).
- sched/fair: Add ancestors of unthrottled undecayed cfs_rq
(bsc#1012628).
- sched/fair: Null terminate buffer when updating tunable_scaling
(bsc#1012628).
- hwmon: (occ) Fix P10 VRM temp sensors (bsc#1012628).
- hwmon: (pmbus/mp2975) Add missed POUT attribute for page 1
mp2975 controller (bsc#1012628).
- kvm: fix objtool relocation warning (bsc#1012628).
- nvme: add command id quirk for apple controllers (bsc#1012628).
- elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
(bsc#1012628).
- driver core: fw_devlink: Improve handling of cyclic dependencies
(bsc#1012628).
- debugfs: debugfs_create_file_size(): use IS_ERR to check for
error (bsc#1012628).
- ipack: ipoctal: fix stack information leak (bsc#1012628).
- ipack: ipoctal: fix tty registration race (bsc#1012628).
- ipack: ipoctal: fix tty-registration error handling
(bsc#1012628).
- ipack: ipoctal: fix missing allocation-failure check
(bsc#1012628).
- ipack: ipoctal: fix module reference leak (bsc#1012628).
- ext4: fix loff_t overflow in ext4_max_bitmap_size()
(bsc#1012628).
- ext4: limit the number of blocks in one ADD_RANGE TLV
(bsc#1012628).
- ext4: fix reserved space counter leakage (bsc#1012628).
- ext4: add error checking to ext4_ext_replay_set_iblocks()
(bsc#1012628).
- ext4: fix potential infinite loop in ext4_dx_readdir()
(bsc#1012628).
- ext4: flush s_error_work before journal destroy in
ext4_fill_super (bsc#1012628).
- HID: u2fzero: ignore incomplete packets without data
(bsc#1012628).
- net: udp: annotate data race around udp_sk(sk)->corkflag
(bsc#1012628).
- NIOS2: setup.c: drop unused variable 'dram_start' (bsc#1012628).
- usb: hso: remove the bailout parameter (bsc#1012628).
- HID: betop: fix slab-out-of-bounds Write in betop_probe
(bsc#1012628).
- netfilter: ipset: Fix oversized kvmalloc() calls (bsc#1012628).
- mm: don't allow oversized kvmalloc() calls (bsc#1012628).
- HID: usbhid: free raw_report buffers in usbhid_stop
(bsc#1012628).
- crypto: aesni - xts_crypt() return if walk.nbytes is 0
(bsc#1012628).
- KVM: x86: Handle SRCU initialization failure during page track
init (bsc#1012628).
- netfilter: conntrack: serialize hash resizes and cleanups
(bsc#1012628).
- netfilter: nf_tables: Fix oversized kvmalloc() calls
(bsc#1012628).
- drivers: net: mhi: fix error path in mhi_net_newlink
(bsc#1012628).
- objtool: print out the symbol type when complaining about it
(bsc#1012628).
- HID: amd_sfh: Fix potential NULL pointer dereference - take 2
(bsc#1012628).
- commit 7c980ba
- ALSA: hda: intel: Allow repeatedly probing on codec
configuration errors (bsc#1190801).
- commit 924f4be
- rpm: use _rpmmacrodir (boo#1191384)
- commit e350c14
==== kgamma5 ====
Version update (5.22.5 -> 5.23.0)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
==== khotkeys5 ====
Version update (5.22.5 -> 5.23.0)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Make unused variables anonymous or Q_UNUSED
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Remove autotests
* replace klineedit
* helper: fix warning from .ui file
* app: the kded library needn't link directly to kdelibs4 or xtest either
* testing: the standalone (test)app needs no kdelibs4 or XTest
* helpers: tidy up
* lib: replace use of KApplication
* KCM: use KF5-era UI-wrangling
* CMake: fix up FindKF5 bits
* Arts: one more ARTS-related file (was not hooked to build anymore)
* Arts: fix build after ARTS-removal
* Arts: remove ARTS-related files
* lib: replace deprecated methods
* Use version-less qt DBus macros
==== kinfocenter5 ====
Version update (5.22.5 -> 5.23.0)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* fix up about-distro exec
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
- Drop patches, now upstream:
* 0001-Handle-libpci-errors-gracefully.patch
* 0002-Enable-the-PCI-module-everywhere.patch
- Drop patch, now longer necessary:
* plasma-session-name.patch
==== kio-extras5 ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libkioarchive5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* Fix kio-mtp with libmtp 1.1.19
==== kmenuedit5 ====
Version update (5.22.5 -> 5.23.0)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* mimeData signature was changed in qt6 (scripted)
* Add build support + clazy
==== konsole ====
Version update (21.08.1 -> 21.08.2)
Subpackages: konsole-part
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* Update copyright year to 2021 (kde#442016)
* improve session closing behavior (kde#401898)
* Hide the Plugins menu if no plugins were loaded (kde#441199)
* Fix the maximum port number in the SSH Manager plugin (kde#441889)
* The default navigation method should be TabbedNavigation
* Don't resize window when switching virtual desktops in OpenBox (kde#441610)
- Drop upstream patch:
* 0001-Don-t-resize-window-when-switching-virtual-desktops-.patch
==== kscreen5 ====
Version update (5.22.5 -> 5.23.0)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* fix all the new settings
* kcm: Use more conventional parent/background for OverlaySheet (kde#442563)
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Remove obsolete COPYING files
* Improve formatting of license headers
* Clarify sponsoring note
* Convert license headers to SPDX
* Add keywords to display KCM to improve search
* Do not bind "keep" to enter key
* support rgb range setting
* Allow to refresh view when modes change
* feat(kcm): add revert timer
* Import QtQuick 2.15 to enable Connection's items function onFoo Syntax
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* [kcm] Correct punctuation of "only when in tablet mode" string
* [kcm] Sort output's refresh rates descending (kde#439515)
* plasmoid: Use K_PLUGIN_CLASS_WITH_JSON directly
* Update IRC network name in CONTRIBUTING.md
* Use version-less qt DBus macros
* [kcm] Show on mobile
* [kcm] Align right edges of all comboboxes
==== kscreenlocker ====
Version update (5.22.5 -> 5.23.0)
Subpackages: libKScreenLocker5
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Add keywords to KScreenLocker to improve search
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Avoid creating windows for placeholder screens. (kde#439096)
* Simplify multi-screen handling
* Move DBus logic back into the greeter
* Use imported targets for X11 libs
* kcheckpass: Fix incorrect kevent() argument
* Handle ConvPutAuthAbort as an authentication failure (kde#438099)
* Make it compile with last ecm
* Remind people to log out of the VT after they unlock the session (kde#410772)
* --warning: use non-deprecated API
* Properly define Q_ENUM()
* [kcm] Fix icon name in metadata.desktop
* Use version-less qt DBus macros
* Show kcm on mobile
* Remove plasmashell protocol leftovers
* Fix logind test
==== ksystemstats5 ====
Version update (5.22.5 -> 5.23.0)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Fix ksystemstatstest failure
* Add description for the Sensors package
* Move find_package line
* Fix missing "Hardware Sensors" on Linux (kde#442528)
* Read extra amd gpu sensors
* Correct discoverSensors chip detection (kde#442042)
* Initialize some more pointer members to nullptr
- Drop patches, now upstream:
* 0001-Initialize-some-more-pointer-members-to-nullptr.patch
* 0001-Fix-ksystemstatstest-failure.patch
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* [plugins/gpu] Initialise properties (kde#442023)
* Discover more hardware gpu sensors (kde#438318)
* Use sensors to read amd gpu temperature
* Use SensorFeatureSensor in CPU plugin
* Use SensorsFeatureSensor from libksysguard
* Make libsensors required on Linux
* Do not dereference iterator that has been invalidated
* Only add a new VolumeObject if there's no other one with the same mounting point (kde#440477)
* Add maximum for total GPU usage (kde#441148)
* viewer: expand README with usage examples
* viewer: drop the "rolling" display, expand diagnostics
* daemon: log successfully loaded plugins, too
* freebsd-cpu: fix CPU load data retrieval
* freebsd-cpu: fix sysctl name of temperature sensor
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Fix handling of IPV6 addresses (kde#436296)
* gpu: Only scan pci devices
* Add load averages sensors
* Don't crash if there's no input subfeature (kde#439615)
* Only add "All GPUs" sensors when there is at least one GPU with statistics (kde#436770)
* Use 500ms update rate for network traffic sensors in NetworkManager backend
* Filter duplicate provider names
* Simplify plugin loading
* Use version-less qt DBus macros
* Init lib sensors centrally in the daemon (kde#437523)
* Update .gitignore
- Add patch to fix autotest failure:
* 0001-Fix-ksystemstatstest-failure.patch
- Add patch to fix crash on startup:
* 0001-Initialize-some-more-pointer-members-to-nullptr.patch
==== kwalletmanager5 ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kwayland-integration ====
Version update (5.22.5 -> 5.23.0)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* fix a dirty shadows (kde#439408)
* Implement setting frost
* Add pre-commit hook for clang-format
* Add .git-blame-ignore-revs file
* Run clang-format
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Guard use of activation proxy (kde#440448)
* Fix compile with last ecm
* Fix build with GCC
* Be more explicit about types, hopefully fix CI builds
* Improve the behaviour when we are requesting without a window
* Also link against xkb and fix build
* Provide an implementation for the xdg_activation_v1 API
==== kwayland-server ====
Version update (5.22.5 -> 5.23.0)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Automatically close fds for inert resources (kde#438097)
* outputdevice: add missing done events
* Send kde_output_device_v1.current_mode to the right resource
* Fix texture format handling for Nvidia driver
* fix rgb range sending (kde#442548)
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
==== kwin5 ====
Version update (5.22.5 -> 5.23.0)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Too many changes to list here
- Drop patches, now upstream:
* 0001-Fix-build-on-32bit-platforms.patch
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
- Adjust 0001-Export-consistent-hostname-as-XAUTHLOCALHOSTNAME.patch
- Add patch to fix build on 32bit:
* 0001-Fix-build-on-32bit-platforms.patch
==== kwrited5 ====
Version update (5.22.5 -> 5.23.0)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
==== layer-shell-qt ====
Version update (5.22.5 -> 5.23.0)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Fix a crash when creating views on the placeholder screen
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Fix compile with last ecm.
* Mark .gitignore file as non-copyrightable
==== libaom ====
- fix service data
==== libkdecoration2 ====
Version update (5.22.5 -> 5.23.0)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Add kdecoration to plasma group for documentation purpose
* Build KDecoration with -DQT_NO_KEYWORDS
* Replace emit with Q_EMIT
* Introduce Decoration::damaged signal
==== libkscreen2 ====
Version update (5.22.5 -> 5.23.0)
Subpackages: libKF5Screen7 libkscreen2-plugin
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Fix autorotate when "only in tablet mode" is selected (kde#428626)
* fix all the new settings (kde#442520)
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* wayland: Fix output hotplugging
* wayland: Fix output transforms
* add rgb range setting
* Add support for plasma wayland protocol kde_output_device_v2
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Natural sort the outputs modes in kscreen-doctor
* Use qEnvironmentVariable() with a default instead of qgetenv()
* dpms: Remove boilerplatey code
* dpms: Do not hardcode the wayland socket
* Update IRC network name in CONTRIBUTING.md
* Use version-less qt DBus macros
* We depend against 5.82
* Use the same wayland connection to fetch screen information
==== libksysguard5 ====
Version update (5.22.5 -> 5.23.0)
Subpackages: ksysguardsystemstats-data libKSysGuardSystemStats1 libksysguard5-imports
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Add Plasma System Monitor to "Tools" menu
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
==== libwebp ====
Version update (1.2.0 -> 1.2.1)
Subpackages: libwebp7 libwebpdemux2 libwebpmux3
- update to 1.2.1:
* minor lossless encoder improvements and x86 color conversion
speed up
* further security related hardening in libwebp & examples
* toolchain updates and bug fixes
* use more inclusive language within the source
==== milou5 ====
Version update (5.22.5 -> 5.23.0)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Remove no longer needed CMake code
* Remove Preview stuff
* Fix error about "reversed" not being defined
* Make results delegate list items a bit taller with bigger icons (kde#422567)
==== nvme-cli ====
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_nvmf-connect@.service.patch
==== pipewire ====
Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-media-session pipewire-modules pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools
- Add patch from upstream to fix compilation on ARM (boo#1191600):
* 0001-fix-compilation-on-ARM.patch
==== plasma-browser-integration ====
Version update (5.22.5 -> 5.23.0)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Add .git-blame-ignore-revs file
* Add pre-commit hook for clang-format
* Run clang-format
* Prevent clang-format uglification
* [purpose] Use ShareUrl plugin type instead of Export
* [History Runner] Request favicon with device pixel ratio
* Use version-less qt DBus macros
==== plasma-nm5 ====
Version update (5.22.5 -> 5.23.0)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Remove applet list item animations
- Add new key + signature to plasma.keyring
- Drop hard requirement on NM-fortisslvpn for now to avoid
installcheck failure in staging
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
==== plasma5-addons ====
Version update (5.22.5 -> 5.23.0)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Make colors in color picker respond properly to right click and Menu key
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
==== plasma5-desktop ====
Version update (5.22.5 -> 5.23.0)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* [wayland] fix activity switching shortcut (Meta+Tab) (kde#443323)
* kickoff: Fix dragEnabled error for KickoffItemDelegates in singleton
* [applets/taskmanger] Do not overlay scrollbars over contents (kde#443173)
* kickoff: Fix null width/height error for some app grid view delegates
* kickoff: re-add drag and drop for favorites (kde#440308)
* kickoff: center align GridView
* kickoff: move isSearchDelegate binding to where search view is
* kickoff: simplify KickoffItemDelegate MouseArea anchor margins
* kickoff: fix hover changing index when moving between search and normal pages (kde#443076)
* kickoff: fix wrong activefocus being used in KickoffItemDelegate
* kickoff: Fix misspelled module qualifier
* Make clicking one item when multiple are selected deselect everything else (kde#424152)
* kcm_touchpad: fix translation for scroll speed setting slider
* Indicate when one of the thumbnails on the quick settings kcm has focus
* Check for currentApplet existence (kde#443287)
* KCM Touchpad: hide right and middle click sections when unavailable
* Open context menu under the cursor again (kde#443278)
* Adjust position of panel config bar when Enter is pressed (kde#443280)
* CompactApplet: Only draw separator line for panel applets (kde#439374)
* [keyboardlayout applet] fix non-working context menu (kde#441239)
* [Emojier] Set highlightMoveDuration to zero
* applets/kickoff: Improve list item touch targets and general aesthetics (kde#442661)
* Use Kirigami.Avatar in Kickoff Header bar (kde#442776)
* [kcms/activities] Fix QML i18n calls (kde#442514)
* kickoff: implement directional navigation
* kickoff: keep delegate highlight visible more often
* kickoff: Use attached tooltip for leave buttons
- Drop patches, now upstream:
* 0001-Use-Kirigami.Avatar-in-Kickoff-Header-bar.patch
- Add new key + signature to plasma.keyring
- Add patch to fix fallback user icon in Kickoff (kde#442776):
* 0001-Use-Kirigami.Avatar-in-Kickoff-Header-bar.patch
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
==== plasma5-integration ====
Version update (5.22.5 -> 5.23.0)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Backport "FileChooser portal: send window id in hex" from qtbase
* QXdgDesktopPortalFileDialog: use QUrl to store directory & selection
* More p-m-f connect() signal/slot syntax
* Use pointer-to-member-function signal/slot syntax
* Add pre-commit hook for clang-format
* Add .git-blame-ignore-revs file
* Run clang-format
* Add trailing commas
* Remove obsolete COPYING file
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Make it compile without deprecated enum
* Convert license headers to SPDX
* Stop advertising titlebar "What's This?" help button
* Remove wayland roundtrip
* Use version-less qt DBus macros
==== plasma5-openSUSE ====
Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE sddm-theme-openSUSE
- Update to 5.23.0
- Update to 5.22.90
==== plasma5-pa ====
Version update (5.22.5 -> 5.23.0)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* [speakertest] Force canberra driver to PulseAudio (kde#442781)
* Fix a bug that caused the handle of the volume slider to show artifacts (kde#434927)
* Fix balance setting (kde#439751)
- Add supplements for pipewire-pulseaudio as well
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Add keywords to audio KCM
* Integrate the advanced options under `Configure...` in the main page
* Disable global mute when changing volume
* [kcm] Avoid string puzzle
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Remove unneeded target
* [applet] Don't install as bundled package
* [ListItemBase] Open menu on press
* Remove unneeded X-KDE-PluginKeyword
* [applet] Only set VolumeMonitor object if it's valid
* Always disconnect streams (kde#439347)
* [applet] Fix QML error
* Use version-less qt DBus macros
* Use ellipses instead of triple period
* Set meta + mute as a default shortcut to mute the microphone
* Support multiple default shortcuts
* Fix crash when target is destroyed before monitor (kde#437184)
* Indicate when application is "corked" (kde#398476)
==== plasma5-workspace ====
Version update (5.22.5 -> 5.23.0)
Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-libs xembedsniproxy
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Revert "xembed: adapt to changes in KNotifications" (kde#442758)
* sddm-theme: Fix using mouse movements to show the UI
* [systemtray] Check for menuItemFactory.object existence (kde#443377)
* applets/devicenotifier: Remove applet list item animations
* sddm-theme: Fix use of needsPassword and related button layout
* [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
* Fix Kickoff context menu actions for System Settings results (kde#442522)
* klipper: Fix reading from plasma on wayland
* Fix build with gpsd 3.23.1
* Unbreak fontinst KCM (kde#442748)
* Address regression in VT switching code (kde#442852)
* libtaskmanager: Don't request dmabuf if not supported (kde#428284)
* Port away from Kirigami.Units.devicePixelRatio
* lookandfeel: don't nuke accent colour (kde#442812)
* kcm/colors: Improve some bindings on accent colors
* sddm-theme: fix default username font size
* PipeWire: Include defines for older PipeWire versions
* pipewire: Properly compare pipewire versions using QVersionNumber
* [Klipper] Guard against broken data fetches
* [Klipper] Handle incoming UTF-8 mime types (kde#424694)
* PipeWire: Make sure thumbnails properly use dmabuf again
* [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
* 0001-Fix-build-with-gpsd-3.23.1.patch
* 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
* 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
* 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
* 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
* 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
* 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
* 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
* 0007-Klipper-Guard-against-broken-data-fetches.patch
* 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
* 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
* 0010-sddm-theme-fix-default-username-font-size.patch
* 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring
- Add patch to fix build with gpsd:
* 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
* 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
- Add patches from Plasma/5.23 branch:
* 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
* 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
* 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
* 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
* 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
* 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
* 0007-Klipper-Guard-against-broken-data-fetches.patch
* 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
* 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
* 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
* 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
- Refresh patches:
* 0001-Revert-No-icons-on-the-desktop-by-default.patch
* 0001-Use-qdbus-qt5.patch
- Drop patches, now upstream:
* Call-UnInhibit-with-correct-signature-in-powermanagement-dataengine.patch
==== polkit-kde-agent-5 ====
Version update (5.22.5 -> 5.23.0)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Clean up CMake code
* Build with QT_NO_KEYWORDS
* Use version-less qt DBus macros
* Remove obsolete COPYING file
* Add license information to non-copyrightable files
* Convert license headers to SPDX
==== powerdevil5 ====
Version update (5.22.5 -> 5.23.0)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Clear alwaysActionBox before filling (kde#443114)
* Remove inappropriate low maximum width for spinboxes (kde#442556)
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Add keywords to power KCMs
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* powerprofiles: Add support for ProfileHolds
* powerprofiles: expose PerformanceDegraded property
* Fix crash if dbus call finishes before we have a valid config group (kde#440338)
* Handle DBus call finishing before buildUI is called (kde#440223)
* Integrate power-profiles daemon
* Use version-less qt DBus macros
* Use ellipses instead of triple period
==== systemsettings5 ====
Version update (5.22.5 -> 5.23.0)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Revert "Use level 2 header"
* sidebar: make placeholder message non-visible when at 0 opacity (kde#443016)
* Use level 2 header
* Support left/right and escape for key navigation in the sidebar
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Swap the position of the hamburger menu and home buttons
* Don't load all subpages of a category when clicked (kde#438362)
* Sidebar: set background colors in the correct way
* Sidebar: Unify "Show Changed Settings" button toolbar implementations
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Clean up leftovers from systemsettingsrunner import
* Port deprecated setDelayed
* Use explicit + use override
* [sidebar] Enable/disable mousearea instead of changing accepted buttons
* [sidebar] Refactor subcategory button to use rectangle as its base item
* Don't request context help titlebar button
* Remove About Current Module
* Import services runner & strip out unneeded parts
* Fix highlight default for category owner children and when changing data from landing page
* Allow compiling without KF5DocTools
* Create simple getter to check if KCM is an SystemSettingsExternalApp
* Port ExternalAppModule away from KCModuleInfo
* Port loading of categories away from KServiceTypeTrader
* [sidebar] Port away from KDeclarative
* Remove old category files
* [sidebar] Add missing subcategory header spacing for widescreen view (kde#438377)
* only update the global header reacting to the active page (kde#437088)
* Use ellipses instead of triple period
* make sure we have 2 columns when loading a category (kde#435461)
* [sidebar] Don't show back button for subcategory header in widescreen view
==== xdg-desktop-portal-kde ====
Version update (5.22.5 -> 5.23.0)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Update dbus-advertised screencast source types
* Inhibit portal: send reply to the Close() request to release inhibition
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Fix crash when in X11
* Remove unnecessary attribute
* Now we are using Qt's internal connection, we should not set an eventqueue
* Remove unused output initialisation
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Guard use of wayland connection
* Avoid second wayland connection in xdg-desktop-portal-kde
* Add missing properties for 2 dbus interfaces
* Background portal: avoid crash when allowing app to run in background (kde#438954)
* Fix compile with last ecm
* Pass the version to the project call
* Use version-less qt DBus macros
* Remove unused method
* Add a SNI for active screencasting sessions
3
3
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
audit-secondary
avahi
avahi-glib2
dracut (055+suse.119.g6c4187af -> 055+suse.129.g7d8c3ce3)
e2fsprogs
fcoe-utils
fwupd
gdm
gnome-online-accounts (3.40.0 -> 3.40.1)
gpsd
iso-codes (4.6.0 -> 4.7.0)
jack (1.9.18 -> 1.9.19)
kbd
libaom (3.1.3 -> 3.2.0)
libcdio
libgphoto2
librsvg (2.52.1 -> 2.52.2)
libzypp (17.28.5 -> 17.28.6)
mpg123 (1.29.0 -> 1.29.1)
plasma5-openSUSE
python-Jinja2 (3.0.1 -> 3.0.2)
python-alembic (1.6.5 -> 1.7.4)
python-apipkg (1.5 -> 2.1.0)
python-greenlet (1.1.0 -> 1.1.2)
python-idna (3.2 -> 3.3)
python-more-itertools (8.8.0 -> 8.10.0)
python-pyrsistent (0.17.3 -> 0.18.0)
python-pytz (2021.1 -> 2021.3)
python-zipp (3.5.0 -> 3.6.0)
qemu
systemd (249.4 -> 249.5)
timezone (2021c -> 2021d)
wireless-regdb (20210421 -> 20210828)
xkeyboard-config (2.33 -> 2.34)
zypper (1.14.49 -> 1.14.50)
=== Details ===
==== audit-secondary ====
Subpackages: audit python3-audit system-group-audit
- Add CONFIG parameter to %sysusers_generate_pre
- Create separate service for augenrules (bsc#1191614, bsc#1181400)
* add create-augenrules-service.patch
Remove ReadWritePaths=/etc/audit from auditd.service, also removes
augenrules call from ExecStartPost.
Create augenrules.service with the ReadWritePaths directive above.
This makes /etc/audit only accessible by augenrules.service and
let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.
==== avahi ====
Subpackages: libavahi-client3 libavahi-common3 libavahi-core7
- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
(boo#1191750).
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== avahi-glib2 ====
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== dracut ====
Version update (055+suse.119.g6c4187af -> 055+suse.129.g7d8c3ce3)
Subpackages: dracut-ima dracut-mkinitrd-deprecated
- Update to version 055+suse.129.g7d8c3ce3:
* fix(kernel-modules): add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs (bsc#1190326)
* docs: update SUSE maintainers doc
* fix(suse): add 60-io-scheduler.rules (bsc#1188713)
* revert: remove /sbin/installkernel script from dracut package
* spec: modernize specfile constructs
==== e2fsprogs ====
Subpackages: libcom_err2 libext2fs2
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
==== fcoe-utils ====
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
==== fwupd ====
Subpackages: libfwupd2 libfwupdplugin2 typelib-1_0-Fwupd-2_0
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_fwupd-offline-update.service.patch
* harden_fwupd-refresh.service.patch
==== gdm ====
Subpackages: gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0
- Add gdm-daemon-Infer-session-type-from-desktop-file.patch
(bsc#1191809, bsc#1191248)
- Rebase gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch
(bsc#1191014).
==== gnome-online-accounts ====
Version update (3.40.0 -> 3.40.1)
Subpackages: libgoa-1_0-0 libgoa-backend-1_0-1
- Update to version 3.40.1:
+ Bugs fixed: glgo#GNOME/gnome-online-accounts!68 dbus: Add
missing since tag for IsSupportedProvider.
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== gpsd ====
- Re-enable LTO on aarch64
==== iso-codes ====
Version update (4.6.0 -> 4.7.0)
- update to 4.7.0:
* Fix weblate check: Remove double spaces
* Rename ku.po to kmr.po.
* Add common names for South and North Korea.
* Updates for Indonesia
* ISO 3166-1 translations
* ISO 3166-2 translations
* ISO 3166-3 translations
* ISO 639-2 translations
* ISO 639-3 translations
* ISO 639-5 translations
* ISO 4217 translations
* ISO 15924 translations
==== jack ====
Version update (1.9.18 -> 1.9.19)
- drop 0001-Fix-compilation-of-documentation.patch (upstream).
- update to 1.9.19:
* Add jack_position_t::tick_double, and flags around it
* Add zalsa "-w" argument to wait for soundcard to be available
* Bump internal protocol version to 9 (due to struct alignment)
* Fix alignment of fields for atomic accesses
* Fix build for platforms needing __STDC_FORMAT_MACROS
* Fix compilation of documentation
==== kbd ====
Subpackages: kbd-legacy
- regenerated cz-map.patch needed for xkeyboard-config 2.34 update
==== libaom ====
Version update (3.1.3 -> 3.2.0)
- Update to version 3.2.0:
* This release includes compression efficiency and perceptual
quality improvements, speedup and memory optimizations, as well
as some new features.
* New Features:
+ Introduced speeds 7, 8, and 9 for all intra mode.
+ Introduced speed 10 for real time mode.
+ Introduced an API that allows external partition decisions.
+ SVC: added support for compound prediction.
+ SVC: added support for fixed SVC modes.
* Compression Efficiency Improvements:
+ Intra-mode search improvement.
+ Improved real time (RT) mode BDrate savings by ~5% (RT speed
5) and ~12% (RT speed 6). The improvement was measured on the
video conference set.
+ Improved real time mode for nonrd path (speed 7, 8, 9):
BDrate gains of ~3-5%.
+ Rate control and RD adjustments based on ML research in VP9.
Gains of ~0.5-1.0% for HD.
* Perceptual Quality Improvements:
+ Added a new mode --deltaq-mode=3 to improve perceptual
quality based on a differential contrast model for still
images.
+ Added a new mode ?deltaq-mode=4 to improve perceptual quality
based on user rated cq_level data set for still images.
+ Weighting of some intra mode and partition size choices to
better manage and retain texture.
* Speedup and Memory Optimizations:
+ Further improved 2-pass good quality encoder speed:
. Speed 2 speedup: 18%
. Speed 3 speedup: 22%
. Speed 4 speedup: 37%
. Speed 5 speedup: 30%
. Speed 6 speedup: 20%
+ Optimized the real time encoder (measured on the video
conference set):
. RT speed 5 speedup: 110%
. RT speed 6 speedup: 77%
* Bug Fixes
+ Issue 3069: Fix one-pass mode keyframe placement off-by-one
error.
+ Issue 3156: Fix a bug in av1_quantize_lp AVX2 optimization.
- Drop libaom-CVE-2021-30475.patch: Fixed upstream.
- Remove changesgenerate option from _service file, use data from
CHANGELOG to fill .changes instead as it it much nicer and human
readable than just a list of commit messages.
==== libcdio ====
- Bump cdiopp_name libcdio++0 to libcdio++1, this was missed when
it was bumped by upstream. Followup change in baselibs.conf to.
- Split out new subpackage libiso9660++0, add needed Requires and
entry in baselibs.conf.
==== libgphoto2 ====
- split out libgphoto2_port for now to meet new shared library policy
requirements. bsc#1191764
==== librsvg ====
Version update (2.52.1 -> 2.52.2)
Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0
- Update to version 2.52.2:
+ New features:
- rsvg-convert now supports generating multi-page PDFs in a
sensible way.
- With one SVG document per page, each page with the SVG's
natural size:
- rsvg-convert --format=pdf -o out.pdf a.svg b.svg c.svg
- With all pages sized as portrait US Letter, and each SVG
scaled to fit so that there is a 1in margin around each page:
rsvg-convert --format=pdf -o out.pdf \
- -page-width=8.5in --page-height=11in \
- -width=6.5in --height=8.5in --keep-aspect-ratio \
- -top=1in --left=1in a.svg b.svg c.svg
Please see the man page for details.
- Support <a> elements inside <text>. Also, support the CSS
:link pseudo-class for matching against links.
- Support the CSS :lang() pseudo-class for matching against an
element's xml:lang attribute.
- Support the mask-type property from SVG2.
+ Bugs fixed:
- Don't panic when a shorthand property is set to inherit.
- Fix regression with the viewport size of interior <svg>
elements.
- Allow length units to be case-insensitive, per SVG2.
+ Documentation:
- There is now a FEATURES.md in the repository, where you can
see all the elements, attributes, and properties that librsvg
supports. We will be adding detail to this gradually.
- For developers, there is now devel-docs/adding-a-property.md
with a tutorial on how to add support for new CSS properties.
==== libzypp ====
Version update (17.28.5 -> 17.28.6)
- Zypper should keep cached files if transaction is aborted
(bsc#1190356)
Singletrans mode currently does not keep files around if the
transaction is aborted. This patch fixes the problem.
- Require a minimum number of mirrors for multicurl (bsc#1191609)
- Use procfs to detect nr of open fd's if rlimit is too high
(bsc#1191324)
Especially in a VM iterating over all possible fd's to close open
ones right before a exec() slows down zypper unnecessarily. This
patch uses /proc/self/fd to iterate over open fd's in case rlimit
is above 1024.
- po: Fix some lost '%' signs in positional args (bsc#1191370)
- RepoManager: Don't probe for plaindir repo if URL schema is
plugin: (bsc#1191286)
- version 17.28.6 (22)
==== mpg123 ====
Version update (1.29.0 -> 1.29.1)
- Update to version 1.29.1
mpg123:
* Keep default output encoding of s16 for raw and file outputs
also with the new resampler. This reverts the unintentional
change in 1.26.0 of switching to f32 for forced output rate
unless the NtoM resampler is selected. In any case, you
should make sure to specify your desired --encoding if you
depend on it.
* Catch error in indexing (mpg123_scan() return value was
ignored before, bug 322).
mpg123-strip:
* Lift the resync limit, as it should be to clean up really
dirty streams.
mpg123-id3dump:
* Also lift resync limit for the same reasons.
libout123:
* Fix reporting of device property flags for buffer
libmpg123:
* More safeguarding against attempts to decode if decoder
setup failed and user ignored the returned error code (bug
322)
==== plasma5-openSUSE ====
Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE sddm-theme-openSUSE
- Update to 5.23.1
==== python-Jinja2 ====
Version update (3.0.1 -> 3.0.2)
- dropped obsolete no-warnings-as-errors.patch
- update to 3.0.2
* Fix a loop scoping bug that caused assignments in nested loops to still
be referenced outside of it. #1427
* Make compile_templates deterministic for filter and import names. #1452, #1453
* Revert an unintended change that caused Undefined to act like
StrictUndefined for the in operator. #1448
* Imported macros have access to the current template globals in async
environments. #1494
* PackageLoader will not include a current directory (.) path segment.
This allows loading templates from the root of a zip import. #1467
==== python-alembic ====
Version update (1.6.5 -> 1.7.4)
- update to 1.7.4:
* Fixed a regression that prevented the use of post write hooks on python
version lower than 3.9
* Added missing attributes from context stubs.
* Fixed issue where registration of custom ops was prone to failure due to
the registration process running exec() on generated code that as of the
1.7 series includes pep-484 annotations, which in the case of end user code
would result in name resolution errors when the exec occurs
- specfile:
* skip python 2 builds
* require importlib-resources
- update to version 1.7.1:
* Corrected "universal wheel" directive in setup.cfg so that
building a wheel does not target Python 2. The PyPi files index
for 1.7.0 was corrected manually. Pull request courtesy layday.
* Fixed issue in generated .pyi files where default values for
"Optional" arguments were missing, thereby causing mypy to
consider them as required.
* Fixed regression in batch mode due to :ticket:`883` where the
"auto" mode of batch would fail to accommodate any additional
migration directives beyond encountering an "add_column()"
directive, due to a mis-application of the conditional logic that
was added as part of this change, leading to "recreate" mode not
being used in cases where it is required for SQLite such as for
unique constraints.
- changes from version 1.7.0:
* Fixed regression due to :ticket:`803` where the ".info" and
".comment" attributes of "Table" would be lost inside of the
:class:`.DropTableOp` class, which when "reversed" into a
:class:`.CreateTableOp` would then have lost these elements. Pull
request courtesy Nicolas CANIART.
* Enhance "version_locations" parsing to handle paths containing
spaces. The new configuration option "version_path_separator"
specifies the character to use when splitting the
"version_locations" string. The default for new configurations is
"version_path_separator = os", which will use "os.pathsep" (e.g.,
";" on Windows).
* Alembic 1.7 now supports Python 3.6 and above; support for prior
versions including Python 2.7 has been dropped.
* Batch "auto" mode will now select for "recreate" if the
"add_column()" operation is used on SQLite, and the column itself
meets the criteria for SQLite where ADD COLUMN is not allowed, in
this case a functional or parenthesized SQL expression or a
"Computed" (i.e. generated) column.
* Make the "python-dateutil" library an optional dependency. This
library is only required if the "timezone" option is used in the
Alembic configuration. An extra require named "tz" is available
with "pip install alembic[tz]" to install it.
* Re-implemented the "python-editor" dependency as a small internal
function to avoid the need for external dependencies.
* Named CHECK constraints are now supported by batch mode, and will
automatically be part of the recreated table assuming they are
named. They also can be explicitly dropped using
"op.drop_constraint()". For "unnamed" CHECK constraints, these are
still skipped as they cannot be distinguished from the CHECK
constraints that are generated by the "Boolean" and "Enum"
datatypes. Note that this change may require adjustments to
migrations that drop or rename columns which feature an associated
named check constraint, such that an additional
"op.drop_constraint()" directive should be added for that named
constraint as there will no longer be an associated column for it;
for the "Boolean" and "Enum" datatypes, an "existing_type" keyword
may be passed to "BatchOperations.drop_constraint" as well.
* The dependency on "pkg_resources" which is part of "setuptools"
has been removed, so there is no longer any runtime dependency on
"setuptools". The functionality has been replaced with
"importlib.metadata" and "importlib.resources" which are both part
of Python std.lib, or via pypy dependency "importlib-metadata" for
Python version < 3.8 and "importlib-resources" for Python version
< 3.9 (while importlib.resources was added to Python in 3.7, it
did not include the "files" API until 3.9).
* Created a "test suite" similar to the one for SQLAlchemy, allowing
developers of third-party dialects to test their code against a
set of Alembic tests that have been specially selected to exercise
back-end database operations. At the time of release, third-party
dialects that have adopted the Alembic test suite to verify
compatibility include `CockroachDB
<https://pypi.org/project/sqlalchemy-cockroachdb/>`_ and `SAP ASE
(Sybase) <https://pypi.org/project/sqlalchemy-sybase/>`_.
* Fixed issue where usage of the PostgreSQL "postgresql_include"
option within a :meth:`.Operations.create_index` would raise a
KeyError, as the additional column(s) need to be added to the
table object used by the construct internally. The issue is
equivalent to the SQL Server issue fixed in :ticket:`513`. Pull
request courtesy Steven Bronson.
* pep-484 type annotations have been added throughout the library.
Additionally, stub .pyi files have been added for the
"dynamically" generated Alembic modules "alembic.op" and
"alembic.config", which include complete function signatures and
docstrings, so that the functions in these namespaces will have
both IDE support (vscode, pycharm, etc) as well as support for
typing tools like Mypy. The files themselves are statically
generated from their source functions within the source tree.
==== python-apipkg ====
Version update (1.5 -> 2.1.0)
- Update to v2.1.0
* fix race condition for import of modules using apipkg.initpkg
in Python 3.3+ by updating existing modules in-place rather
than replacing in sys.modules with an apipkg.ApiModule
instances. This race condition exists for import statements
(and __import__) in Python 3.3+ where sys.modules is checked
before obtaining an import lock, and for
importlib.import_module in Python 3.11+ for the same reason.
- Release 2.0.1
* fix race conditions for attribute creation
- Release 2.0.0
* also transfer __spec__ attribute
* make py.test hack more specific to avoid hiding real errors
* switch from Travis CI to GitHub Actions
* modernize package build
* reformat code with black
- Drop pytest4.patch
==== python-greenlet ====
Version update (1.1.0 -> 1.1.2)
- update to 1.1.2:
- Fix a potential crash due to a reference counting error when Python
subclasses of ``greenlet.greenlet`` were deallocated. The crash
became more common on Python 3.10; on earlier versions, silent
memory corruption could result.
- Fix a leak of a list object when the last reference to a greenlet
was deleted from some other thread than the one to which it
belonged. For this to work correctly, you must call a greenlet API
like ``getcurrent()`` before the thread owning the greenlet exits:
this is a long-standing limitation that can also lead to the leak of
a thread's main greenlet if not called; we hope to lift this
limitation. Note that in some cases this may also fix leaks of
greenlet objects themselves. See `issue 251
- Python 3.10: Tracing or profiling into a spawned greenlet didn't
work as expected. See `issue 256
==== python-idna ====
Version update (3.2 -> 3.3)
- update to 3.3:
- Update to Unicode 14.0.0
- Update to in-line type annotations
- Throw IDNAError exception correctly for some malformed input
- Advertise support for Python 3.10
- Improve testing regime on Github
- Fix Russian typo in documentation
==== python-more-itertools ====
Version update (8.8.0 -> 8.10.0)
- update to 8.10.0:
* The type stub for :func:`iter_except` was improved (thanks to MarcinKonowalczyk)
* Type stubs now ship with the source release (thanks to saaketp)
* The Sphinx docs were improved (thanks to MarcinKonowalczyk)
* New functions
* :func:`interleave_evenly` (thanks to mbugert)
* :func:`repeat_each` (thanks to FinalSh4re)
* :func:`chunked_even` (thanks to valtron)
* :func:`map_if` (thanks to sassbalint)
* :func:`zip_broadcast` (thanks to kalekundert)
* Changes to existing functions
* The type stub for :func:`chunked` was improved (thanks to PhilMacKay)
* The type stubs for :func:`zip_equal` and `zip_offset` were improved (thanks to maffoo)
* Building Sphinx docs locally was improved (thanks to MarcinKonowalczyk)
==== python-pyrsistent ====
Version update (0.17.3 -> 0.18.0)
- update to 0.18.0:
* Fix #209 Update freeze recurse into pyrsistent data structures and thaw to
recurse into lists and dicts
* Fix #226, stop using deprecated exception.message.
* Fix #211, add union operator to persistent maps.
* Fix #194, declare build dependencies through pyproject.toml.
* Officially drop Python 3.5 support.
* Fix #223, release wheels for all major platforms.
* Fix #221, KeyError obscured by TypeError if key is a tuple.
* Fix LICENSE file name spelling.
* Fix #216, add abstractmethod decorator for CheckedType and ABCMeta for
_CheckedTypeMeta.
* Fix #228, rename example classes in tests to avoid name clashes with pytest.
==== python-pytz ====
Version update (2021.1 -> 2021.3)
- update to 2021.3
* matches tzdata 2021c
==== python-zipp ====
Version update (3.5.0 -> 3.6.0)
- update to 3.6.0:
* Only ``Path`` is exposed in the public API.
* Remove news file intended only for CPython.
==== qemu ====
- Stable fixes from upstream
* Patches added:
block-introduce-max_hw_iov-for-use-in-sc.patch
hmp-Unbreak-change-vnc.patch
qemu-nbd-Change-default-cache-mode-to-wr.patch
target-arm-Don-t-skip-M-profile-reset-en.patch
vhost-vsock-fix-migration-issue-when-seq.patch
virtio-mem-pci-Fix-memory-leak-when-crea.patch
virtio-net-fix-use-after-unmap-free-for-.patch
==== systemd ====
Version update (249.4 -> 249.5)
Subpackages: libsystemd0 libudev1 systemd-sysvinit udev
- Import commit 8521f8d22fd44400289fcea03493ebd7f8b1487d (merge of v249.5)
For a complete list of changes, visit:
https://github.com/openSUSE/systemd/compare/355e113ce193e5e2d195278c57d47f9…
- Import commit 355e113ce193e5e2d195278c57d47f9a1b00ae46
3b4a005095 meson: add missing include directory when using xkbcommon
4c4e642712 meson: allow extra net naming schemes to be defined during configuration (jsc#SLE-18514)
78466e4464 meson: drop the list of valid net naming schemes
b9a2098f9d netif-naming: inline one iterator variable
d7fbbc5e74 Add remaining supported schemes as options for default-net-naming-scheme
- Rename %{gnu-efi} into %{sd_boot}
Build conditionals (%bcond_with and %bcond_without) are used to
define a specific feature of systemd. "gnu-efi" is rather an
implemenation detail. Also not really sure what "efi" option alone
is useful for since systemd-boot & co depends on "gnu-efi".
- Enable sd_boot support for aarch64
- Ghost own directories /var/log/journal and /var/log/journal/remote again
rpmlint no more complain about the setgid bit, see sr#923496.
- Overwriting rootprefix= is only required when split-usr is enabled
- Rename %usrmerged into %split_usr
- Suppress PAM warning when the credentials for user@.service service
are established (bsc#1190515)
systemd-user PAM service needs to define a default implementation of
pam_setcred() otherwise the fallback (defined by /etc/pam.d/other)
is used, which consists of pam_warn.so + pam_deny.so, and will throw
a warning each time a user logs in.
- No need to install upstream pam configuration file "systemd-user"
It's overwritten by the SUSE version anyway.
==== timezone ====
Version update (2021c -> 2021d)
- timezone update 2021d:
* Fiji suspends DST for the 2021/2022 season
* 'zic -r' marks unspecified timestamps with "-00"
==== wireless-regdb ====
Version update (20210421 -> 20210828)
- Update to version 20210828:
* wireless-regdb: update regulatory database based on preceding changes
* Update regulatory rules for Ecuador (EC)
* wireless-regdb: Update regulatory rules for Norway (NO) on 6 and 60 GHz
* wireless-regdb: Update regulatory rules for Germany (DE) on 6GHz
* wireless-regdb: update regulatory database based on preceding changes
* wireless-regdb: reduce bandwidth for 5730-5850 and 5850-5895 MHz in US
* wireless-regdb: remove PTMP-ONLY from 5850-5895 MHz for US
* wireless-regdb: recent FCC report and order allows 5850-5895 immediately
* wireless-regdb: update 5725-5850 MHz rule for GB
==== xkeyboard-config ====
Version update (2.33 -> 2.34)
- update to version 2.34
* xml2lst: use dynamic Perl path
* Resolved 101key Old Hungarian II
* Old turkish f layout (with pc104 support) added.
* Fix wrong key symbol name
* Added International Phonetic Alphabet (QWERTY)
* gitlab CI: update to latest ci-templates
* Hellenic keyboard perfected.
* lt: Place sterling symbol on AD03, layer 4 (with E and euro)
* Use single guillemots on L4 (not less/greater) where L3 has guillemots
* Added English (Dvorak, Macintosh) based on the MacOS dvorak layout
* Accommodate uppercase/lowercase ß, long s, §; deduplicate ?
* Move left/right quotes one key to the right, place lower quotes on AB04
* Update symbols/it adding credits and reference for fur lang
* lt/us: Inherit AE09/AE10 from latin
* Add Russian GOST layouts
* Add Polish(lefty) layout
* Add Arabic(Ergoarabic) keyboard layout
* translation sync
* Hebrew translation added
==== zypper ====
Version update (1.14.49 -> 1.14.50)
Subpackages: zypper-needs-restarting
- Fix compiler warning.
- zypper.conf: New option whether to collect subcommands found in
$PATH (fixes #379)
+[subcommand] i
+
+## Whether to look for subcommands in $PATH
+##
+## If a subcommand is not found in the zypper_execdir, the wrapper
+## will look in the rest of your $PATH for it. Thus, it's possible
+## to write local zypper extensions that don't live in system space.
+## See section SUBCOMMANDS in the zypper manpage.
+##
+## Valid values: boolean
+## Default value: yes
+##
+# seachSubcommandInPath = yes.
- help subcommand: show path of command found in $PATH.
- version 1.14.50
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
audit-secondary
avahi
dracut (055+suse.119.g6c4187af -> 055+suse.129.g7d8c3ce3)
e2fsprogs
fcoe-utils
helm
kbd
librsvg (2.52.1 -> 2.52.2)
libzypp (17.28.5 -> 17.28.6)
python-Jinja2 (3.0.1 -> 3.0.2)
python-PrettyTable
python-alembic (1.6.5 -> 1.7.4)
python-apipkg (1.5 -> 2.1.0)
python-distro
python-greenlet (1.1.0 -> 1.1.2)
python-idna (3.2 -> 3.3)
python-more-itertools (8.8.0 -> 8.10.0)
python-pyrsistent (0.17.3 -> 0.18.0)
python-pytz (2021.1 -> 2021.3)
python-zipp (3.5.0 -> 3.6.0)
qemu
systemd (249.4 -> 249.5)
timezone (2021c -> 2021d)
wireless-regdb (20210421 -> 20210828)
xkeyboard-config (2.33 -> 2.34)
yomi-formula
zypper (1.14.49 -> 1.14.50)
=== Details ===
==== audit-secondary ====
Subpackages: audit python3-audit system-group-audit
- Add CONFIG parameter to %sysusers_generate_pre
- Create separate service for augenrules (bsc#1191614, bsc#1181400)
* add create-augenrules-service.patch
Remove ReadWritePaths=/etc/audit from auditd.service, also removes
augenrules call from ExecStartPost.
Create augenrules.service with the ReadWritePaths directive above.
This makes /etc/audit only accessible by augenrules.service and
let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.
==== avahi ====
Subpackages: libavahi-client3 libavahi-common3
- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
(boo#1191750).
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== dracut ====
Version update (055+suse.119.g6c4187af -> 055+suse.129.g7d8c3ce3)
Subpackages: dracut-ima dracut-mkinitrd-deprecated
- Update to version 055+suse.129.g7d8c3ce3:
* fix(kernel-modules): add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs (bsc#1190326)
* docs: update SUSE maintainers doc
* fix(suse): add 60-io-scheduler.rules (bsc#1188713)
* revert: remove /sbin/installkernel script from dracut package
* spec: modernize specfile constructs
==== e2fsprogs ====
Subpackages: libcom_err2 libext2fs2
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
==== fcoe-utils ====
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
==== helm ====
- use 'v' prefix for the version to match upstream builds
- package fish completions
==== kbd ====
Subpackages: kbd-legacy
- regenerated cz-map.patch needed for xkeyboard-config 2.34 update
==== librsvg ====
Version update (2.52.1 -> 2.52.2)
Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2
- Update to version 2.52.2:
+ New features:
- rsvg-convert now supports generating multi-page PDFs in a
sensible way.
- With one SVG document per page, each page with the SVG's
natural size:
- rsvg-convert --format=pdf -o out.pdf a.svg b.svg c.svg
- With all pages sized as portrait US Letter, and each SVG
scaled to fit so that there is a 1in margin around each page:
rsvg-convert --format=pdf -o out.pdf \
- -page-width=8.5in --page-height=11in \
- -width=6.5in --height=8.5in --keep-aspect-ratio \
- -top=1in --left=1in a.svg b.svg c.svg
Please see the man page for details.
- Support <a> elements inside <text>. Also, support the CSS
:link pseudo-class for matching against links.
- Support the CSS :lang() pseudo-class for matching against an
element's xml:lang attribute.
- Support the mask-type property from SVG2.
+ Bugs fixed:
- Don't panic when a shorthand property is set to inherit.
- Fix regression with the viewport size of interior <svg>
elements.
- Allow length units to be case-insensitive, per SVG2.
+ Documentation:
- There is now a FEATURES.md in the repository, where you can
see all the elements, attributes, and properties that librsvg
supports. We will be adding detail to this gradually.
- For developers, there is now devel-docs/adding-a-property.md
with a tutorial on how to add support for new CSS properties.
==== libzypp ====
Version update (17.28.5 -> 17.28.6)
- Zypper should keep cached files if transaction is aborted
(bsc#1190356)
Singletrans mode currently does not keep files around if the
transaction is aborted. This patch fixes the problem.
- Require a minimum number of mirrors for multicurl (bsc#1191609)
- Use procfs to detect nr of open fd's if rlimit is too high
(bsc#1191324)
Especially in a VM iterating over all possible fd's to close open
ones right before a exec() slows down zypper unnecessarily. This
patch uses /proc/self/fd to iterate over open fd's in case rlimit
is above 1024.
- po: Fix some lost '%' signs in positional args (bsc#1191370)
- RepoManager: Don't probe for plaindir repo if URL schema is
plugin: (bsc#1191286)
- version 17.28.6 (22)
==== python-Jinja2 ====
Version update (3.0.1 -> 3.0.2)
- dropped obsolete no-warnings-as-errors.patch
- update to 3.0.2
* Fix a loop scoping bug that caused assignments in nested loops to still
be referenced outside of it. #1427
* Make compile_templates deterministic for filter and import names. #1452, #1453
* Revert an unintended change that caused Undefined to act like
StrictUndefined for the in operator. #1448
* Imported macros have access to the current template globals in async
environments. #1494
* PackageLoader will not include a current directory (.) path segment.
This allows loading templates from the root of a zip import. #1467
==== python-PrettyTable ====
- %check: use %pyunittest rpm macro
==== python-alembic ====
Version update (1.6.5 -> 1.7.4)
- update to 1.7.4:
* Fixed a regression that prevented the use of post write hooks on python
version lower than 3.9
* Added missing attributes from context stubs.
* Fixed issue where registration of custom ops was prone to failure due to
the registration process running exec() on generated code that as of the
1.7 series includes pep-484 annotations, which in the case of end user code
would result in name resolution errors when the exec occurs
- specfile:
* skip python 2 builds
* require importlib-resources
- update to version 1.7.1:
* Corrected "universal wheel" directive in setup.cfg so that
building a wheel does not target Python 2. The PyPi files index
for 1.7.0 was corrected manually. Pull request courtesy layday.
* Fixed issue in generated .pyi files where default values for
"Optional" arguments were missing, thereby causing mypy to
consider them as required.
* Fixed regression in batch mode due to :ticket:`883` where the
"auto" mode of batch would fail to accommodate any additional
migration directives beyond encountering an "add_column()"
directive, due to a mis-application of the conditional logic that
was added as part of this change, leading to "recreate" mode not
being used in cases where it is required for SQLite such as for
unique constraints.
- changes from version 1.7.0:
* Fixed regression due to :ticket:`803` where the ".info" and
".comment" attributes of "Table" would be lost inside of the
:class:`.DropTableOp` class, which when "reversed" into a
:class:`.CreateTableOp` would then have lost these elements. Pull
request courtesy Nicolas CANIART.
* Enhance "version_locations" parsing to handle paths containing
spaces. The new configuration option "version_path_separator"
specifies the character to use when splitting the
"version_locations" string. The default for new configurations is
"version_path_separator = os", which will use "os.pathsep" (e.g.,
";" on Windows).
* Alembic 1.7 now supports Python 3.6 and above; support for prior
versions including Python 2.7 has been dropped.
* Batch "auto" mode will now select for "recreate" if the
"add_column()" operation is used on SQLite, and the column itself
meets the criteria for SQLite where ADD COLUMN is not allowed, in
this case a functional or parenthesized SQL expression or a
"Computed" (i.e. generated) column.
* Make the "python-dateutil" library an optional dependency. This
library is only required if the "timezone" option is used in the
Alembic configuration. An extra require named "tz" is available
with "pip install alembic[tz]" to install it.
* Re-implemented the "python-editor" dependency as a small internal
function to avoid the need for external dependencies.
* Named CHECK constraints are now supported by batch mode, and will
automatically be part of the recreated table assuming they are
named. They also can be explicitly dropped using
"op.drop_constraint()". For "unnamed" CHECK constraints, these are
still skipped as they cannot be distinguished from the CHECK
constraints that are generated by the "Boolean" and "Enum"
datatypes. Note that this change may require adjustments to
migrations that drop or rename columns which feature an associated
named check constraint, such that an additional
"op.drop_constraint()" directive should be added for that named
constraint as there will no longer be an associated column for it;
for the "Boolean" and "Enum" datatypes, an "existing_type" keyword
may be passed to "BatchOperations.drop_constraint" as well.
* The dependency on "pkg_resources" which is part of "setuptools"
has been removed, so there is no longer any runtime dependency on
"setuptools". The functionality has been replaced with
"importlib.metadata" and "importlib.resources" which are both part
of Python std.lib, or via pypy dependency "importlib-metadata" for
Python version < 3.8 and "importlib-resources" for Python version
< 3.9 (while importlib.resources was added to Python in 3.7, it
did not include the "files" API until 3.9).
* Created a "test suite" similar to the one for SQLAlchemy, allowing
developers of third-party dialects to test their code against a
set of Alembic tests that have been specially selected to exercise
back-end database operations. At the time of release, third-party
dialects that have adopted the Alembic test suite to verify
compatibility include `CockroachDB
<https://pypi.org/project/sqlalchemy-cockroachdb/>`_ and `SAP ASE
(Sybase) <https://pypi.org/project/sqlalchemy-sybase/>`_.
* Fixed issue where usage of the PostgreSQL "postgresql_include"
option within a :meth:`.Operations.create_index` would raise a
KeyError, as the additional column(s) need to be added to the
table object used by the construct internally. The issue is
equivalent to the SQL Server issue fixed in :ticket:`513`. Pull
request courtesy Steven Bronson.
* pep-484 type annotations have been added throughout the library.
Additionally, stub .pyi files have been added for the
"dynamically" generated Alembic modules "alembic.op" and
"alembic.config", which include complete function signatures and
docstrings, so that the functions in these namespaces will have
both IDE support (vscode, pycharm, etc) as well as support for
typing tools like Mypy. The files themselves are statically
generated from their source functions within the source tree.
==== python-apipkg ====
Version update (1.5 -> 2.1.0)
- Update to v2.1.0
* fix race condition for import of modules using apipkg.initpkg
in Python 3.3+ by updating existing modules in-place rather
than replacing in sys.modules with an apipkg.ApiModule
instances. This race condition exists for import statements
(and __import__) in Python 3.3+ where sys.modules is checked
before obtaining an import lock, and for
importlib.import_module in Python 3.11+ for the same reason.
- Release 2.0.1
* fix race conditions for attribute creation
- Release 2.0.0
* also transfer __spec__ attribute
* make py.test hack more specific to avoid hiding real errors
* switch from Travis CI to GitHub Actions
* modernize package build
* reformat code with black
- Drop pytest4.patch
==== python-distro ====
- Expliciting setting of locale is not necessary anymore
(gh#python-distro/distro#223).
==== python-greenlet ====
Version update (1.1.0 -> 1.1.2)
- update to 1.1.2:
- Fix a potential crash due to a reference counting error when Python
subclasses of ``greenlet.greenlet`` were deallocated. The crash
became more common on Python 3.10; on earlier versions, silent
memory corruption could result.
- Fix a leak of a list object when the last reference to a greenlet
was deleted from some other thread than the one to which it
belonged. For this to work correctly, you must call a greenlet API
like ``getcurrent()`` before the thread owning the greenlet exits:
this is a long-standing limitation that can also lead to the leak of
a thread's main greenlet if not called; we hope to lift this
limitation. Note that in some cases this may also fix leaks of
greenlet objects themselves. See `issue 251
- Python 3.10: Tracing or profiling into a spawned greenlet didn't
work as expected. See `issue 256
==== python-idna ====
Version update (3.2 -> 3.3)
- update to 3.3:
- Update to Unicode 14.0.0
- Update to in-line type annotations
- Throw IDNAError exception correctly for some malformed input
- Advertise support for Python 3.10
- Improve testing regime on Github
- Fix Russian typo in documentation
==== python-more-itertools ====
Version update (8.8.0 -> 8.10.0)
- update to 8.10.0:
* The type stub for :func:`iter_except` was improved (thanks to MarcinKonowalczyk)
* Type stubs now ship with the source release (thanks to saaketp)
* The Sphinx docs were improved (thanks to MarcinKonowalczyk)
* New functions
* :func:`interleave_evenly` (thanks to mbugert)
* :func:`repeat_each` (thanks to FinalSh4re)
* :func:`chunked_even` (thanks to valtron)
* :func:`map_if` (thanks to sassbalint)
* :func:`zip_broadcast` (thanks to kalekundert)
* Changes to existing functions
* The type stub for :func:`chunked` was improved (thanks to PhilMacKay)
* The type stubs for :func:`zip_equal` and `zip_offset` were improved (thanks to maffoo)
* Building Sphinx docs locally was improved (thanks to MarcinKonowalczyk)
==== python-pyrsistent ====
Version update (0.17.3 -> 0.18.0)
- update to 0.18.0:
* Fix #209 Update freeze recurse into pyrsistent data structures and thaw to
recurse into lists and dicts
* Fix #226, stop using deprecated exception.message.
* Fix #211, add union operator to persistent maps.
* Fix #194, declare build dependencies through pyproject.toml.
* Officially drop Python 3.5 support.
* Fix #223, release wheels for all major platforms.
* Fix #221, KeyError obscured by TypeError if key is a tuple.
* Fix LICENSE file name spelling.
* Fix #216, add abstractmethod decorator for CheckedType and ABCMeta for
_CheckedTypeMeta.
* Fix #228, rename example classes in tests to avoid name clashes with pytest.
==== python-pytz ====
Version update (2021.1 -> 2021.3)
- update to 2021.3
* matches tzdata 2021c
==== python-zipp ====
Version update (3.5.0 -> 3.6.0)
- update to 3.6.0:
* Only ``Path`` is exposed in the public API.
* Remove news file intended only for CPython.
==== qemu ====
- Stable fixes from upstream
* Patches added:
block-introduce-max_hw_iov-for-use-in-sc.patch
hmp-Unbreak-change-vnc.patch
qemu-nbd-Change-default-cache-mode-to-wr.patch
target-arm-Don-t-skip-M-profile-reset-en.patch
vhost-vsock-fix-migration-issue-when-seq.patch
virtio-mem-pci-Fix-memory-leak-when-crea.patch
virtio-net-fix-use-after-unmap-free-for-.patch
==== systemd ====
Version update (249.4 -> 249.5)
Subpackages: libsystemd0 libudev1 systemd-sysvinit udev
- Import commit 8521f8d22fd44400289fcea03493ebd7f8b1487d (merge of v249.5)
For a complete list of changes, visit:
https://github.com/openSUSE/systemd/compare/355e113ce193e5e2d195278c57d47f9…
- Import commit 355e113ce193e5e2d195278c57d47f9a1b00ae46
3b4a005095 meson: add missing include directory when using xkbcommon
4c4e642712 meson: allow extra net naming schemes to be defined during configuration (jsc#SLE-18514)
78466e4464 meson: drop the list of valid net naming schemes
b9a2098f9d netif-naming: inline one iterator variable
d7fbbc5e74 Add remaining supported schemes as options for default-net-naming-scheme
- Rename %{gnu-efi} into %{sd_boot}
Build conditionals (%bcond_with and %bcond_without) are used to
define a specific feature of systemd. "gnu-efi" is rather an
implemenation detail. Also not really sure what "efi" option alone
is useful for since systemd-boot & co depends on "gnu-efi".
- Enable sd_boot support for aarch64
- Ghost own directories /var/log/journal and /var/log/journal/remote again
rpmlint no more complain about the setgid bit, see sr#923496.
- Overwriting rootprefix= is only required when split-usr is enabled
- Rename %usrmerged into %split_usr
- Suppress PAM warning when the credentials for user@.service service
are established (bsc#1190515)
systemd-user PAM service needs to define a default implementation of
pam_setcred() otherwise the fallback (defined by /etc/pam.d/other)
is used, which consists of pam_warn.so + pam_deny.so, and will throw
a warning each time a user logs in.
- No need to install upstream pam configuration file "systemd-user"
It's overwritten by the SUSE version anyway.
==== timezone ====
Version update (2021c -> 2021d)
- timezone update 2021d:
* Fiji suspends DST for the 2021/2022 season
* 'zic -r' marks unspecified timestamps with "-00"
==== wireless-regdb ====
Version update (20210421 -> 20210828)
- Update to version 20210828:
* wireless-regdb: update regulatory database based on preceding changes
* Update regulatory rules for Ecuador (EC)
* wireless-regdb: Update regulatory rules for Norway (NO) on 6 and 60 GHz
* wireless-regdb: Update regulatory rules for Germany (DE) on 6GHz
* wireless-regdb: update regulatory database based on preceding changes
* wireless-regdb: reduce bandwidth for 5730-5850 and 5850-5895 MHz in US
* wireless-regdb: remove PTMP-ONLY from 5850-5895 MHz for US
* wireless-regdb: recent FCC report and order allows 5850-5895 immediately
* wireless-regdb: update 5725-5850 MHz rule for GB
==== xkeyboard-config ====
Version update (2.33 -> 2.34)
- update to version 2.34
* xml2lst: use dynamic Perl path
* Resolved 101key Old Hungarian II
* Old turkish f layout (with pc104 support) added.
* Fix wrong key symbol name
* Added International Phonetic Alphabet (QWERTY)
* gitlab CI: update to latest ci-templates
* Hellenic keyboard perfected.
* lt: Place sterling symbol on AD03, layer 4 (with E and euro)
* Use single guillemots on L4 (not less/greater) where L3 has guillemots
* Added English (Dvorak, Macintosh) based on the MacOS dvorak layout
* Accommodate uppercase/lowercase ß, long s, §; deduplicate ?
* Move left/right quotes one key to the right, place lower quotes on AB04
* Update symbols/it adding credits and reference for fur lang
* lt/us: Inherit AE09/AE10 from latin
* Add Russian GOST layouts
* Add Polish(lefty) layout
* Add Arabic(Ergoarabic) keyboard layout
* translation sync
* Hebrew translation added
==== yomi-formula ====
- Ignore libudev1 dependency for Enterprise Linux.
==== zypper ====
Version update (1.14.49 -> 1.14.50)
Subpackages: zypper-needs-restarting
- Fix compiler warning.
- zypper.conf: New option whether to collect subcommands found in
$PATH (fixes #379)
+[subcommand] i
+
+## Whether to look for subcommands in $PATH
+##
+## If a subcommand is not found in the zypper_execdir, the wrapper
+## will look in the rest of your $PATH for it. Thus, it's possible
+## to write local zypper extensions that don't live in system space.
+## See section SUBCOMMANDS in the zypper manpage.
+##
+## Valid values: boolean
+## Default value: yes
+##
+# seachSubcommandInPath = yes.
- help subcommand: show path of command found in $PATH.
- version 1.14.50
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
Mesa (21.2.3 -> 21.2.4)
Mesa-drivers (21.2.3 -> 21.2.4)
apparmor
attica-qt5 (5.86.0 -> 5.87.0)
baloo5 (5.86.0 -> 5.87.0)
bluez-qt (5.86.0 -> 5.87.0)
breeze5-icons (5.86.0 -> 5.87.0)
busybox
chrony
compat-usrmerge
frameworkintegration (5.86.0 -> 5.87.0)
iputils
kactivities-stats (5.86.0 -> 5.87.0)
kactivities5 (5.86.0 -> 5.87.0)
karchive (5.86.0 -> 5.87.0)
kauth (5.86.0 -> 5.87.0)
kbookmarks (5.86.0 -> 5.87.0)
kcmutils (5.86.0 -> 5.87.0)
kcodecs (5.86.0 -> 5.87.0)
kcompletion (5.86.0 -> 5.87.0)
kconfig (5.86.0 -> 5.87.0)
kconfigwidgets (5.86.0 -> 5.87.0)
kcoreaddons (5.86.0 -> 5.87.0)
kcrash (5.86.0 -> 5.87.0)
kdbusaddons (5.86.0 -> 5.87.0)
kdeclarative (5.86.0 -> 5.87.0)
kded (5.86.0 -> 5.87.0)
kdelibs4support (5.86.0 -> 5.87.0)
kdesu (5.86.0 -> 5.87.0)
kdnssd-framework (5.86.0 -> 5.87.0)
kdoctools (5.86.0 -> 5.87.0)
kfilemetadata5 (5.86.0 -> 5.87.0)
kglobalaccel (5.86.0 -> 5.87.0)
kguiaddons (5.86.0 -> 5.87.0)
kholidays (5.86.0 -> 5.87.0)
ki18n (5.86.0 -> 5.87.0)
kiconthemes (5.86.0 -> 5.87.0)
kidletime (5.86.0 -> 5.87.0)
kinit (5.86.0 -> 5.87.0)
kio (5.86.0 -> 5.87.0)
kirigami2 (5.86.0 -> 5.87.0)
kitemmodels (5.86.0 -> 5.87.0)
kitemviews (5.86.0 -> 5.87.0)
kjobwidgets (5.86.0 -> 5.87.0)
knewstuff (5.86.0 -> 5.87.0)
knotifications (5.86.0 -> 5.87.0)
knotifyconfig (5.86.0 -> 5.87.0)
kpackage (5.86.0 -> 5.87.0)
kparts (5.86.0 -> 5.87.0)
kpeople5 (5.86.0 -> 5.87.0)
kpty (5.86.0 -> 5.87.0)
kquickcharts (5.86.0 -> 5.87.0)
kservice (5.86.0 -> 5.87.0)
ktexteditor (5.86.0 -> 5.87.0)
ktextwidgets (5.86.0 -> 5.87.0)
kunitconversion (5.86.0 -> 5.87.0)
kwallet (5.86.0 -> 5.87.0)
kwayland (5.86.0 -> 5.87.0)
kwidgetsaddons (5.86.0 -> 5.87.0)
kwin5
kwindowsystem (5.86.0 -> 5.87.0)
kxmlgui (5.86.0 -> 5.87.0)
libKF5ModemManagerQt (5.86.0 -> 5.87.0)
libKF5NetworkManagerQt (5.86.0 -> 5.87.0)
libapparmor
libteam
liburing (2.0 -> 2.1)
ncurses (6.2.20210911 -> 6.2.20211002)
plasma-framework (5.86.0 -> 5.87.0)
plasma5-workspace
poppler (21.08.0 -> 21.10.0)
poppler-qt5 (21.08.0 -> 21.10.0)
prison-qt5 (5.86.0 -> 5.87.0)
purpose (5.86.0 -> 5.87.0)
python-networkx (2.6.1 -> 2.6.3)
qqc2-desktop-style (5.86.0 -> 5.87.0)
solid (5.86.0 -> 5.87.0)
sonnet (5.86.0 -> 5.87.0)
syntax-highlighting (5.86.0 -> 5.87.0)
systemd-presets-common-SUSE
threadweaver (5.86.0 -> 5.87.0)
xdg-user-dirs
xf86-input-libinput
=== Details ===
==== Mesa ====
Version update (21.2.3 -> 21.2.4)
Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1
- update to 21.2.4
* fourth bugfix release
* 300 fixes from the new r300 maintainer! Additionally, panfrost,
lots of crocus, some freedreno, intel, radv, core meas, gallivum,
anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch
- u_fix-build-on-ppc64le.patch
* fixes build on ppc64le (boo#1191569)
==== Mesa-drivers ====
Version update (21.2.3 -> 21.2.4)
Subpackages: Mesa-dri Mesa-gallium
- update to 21.2.4
* fourth bugfix release
* 300 fixes from the new r300 maintainer! Additionally, panfrost,
lots of crocus, some freedreno, intel, radv, core meas, gallivum,
anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch
- u_fix-build-on-ppc64le.patch
* fixes build on ppc64le (boo#1191569)
==== apparmor ====
Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils python3-apparmor
- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)
==== attica-qt5 ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Attica5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Do not mark jobs that have been aborted as errored
* Add Gitlab CI configuration
* Ensure categories.xml is only fetched once in parallel
* Do not start basejobs twice
* Add CI configuration file
- Drop upstream patch:
* 0001-Ensure-categories.xml-is-only-fetched-once-in-parall.patch
- Add upstream patch to avoid unnecessary network traffic:
* 0001-Ensure-categories.xml-is-only-fetched-once-in-parall.patch
==== baloo5 ====
Version update (5.86.0 -> 5.87.0)
Subpackages: baloo5-imports baloo5-kioslaves libKF5Baloo5 libKF5BalooEngine5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Native Gitlab CI configuration
==== bluez-qt ====
Version update (5.86.0 -> 5.87.0)
Subpackages: bluez-qt-imports bluez-qt-udev libKF5BluezQt6
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== breeze5-icons ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Native Gitlab CI configuration
* Fix KTimeTracker icon sizes (kde#442993)
* Tweaks to AnyDesk icons
* Fix index.theme issues from !124
* Add 22px variants of the preferences icons
* Add AnyDesk icons
* Add more Godot MIME icons
* Add symlink for skanlite's new icon name
* Add process-working-symbolic, overhaul 22px animation
==== busybox ====
- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
flavor of busybox with the
additional setting:
CONFIG_REBOOT=y
CONFIG_SWITCH_ROOT=y
CONFIG_CTTYHACK=y
(bsc#1191514).
==== chrony ====
Subpackages: chrony-pool-openSUSE
- boo#1190926: PrivateDevices is too strict, we might need to
access the rtc and ptp devices.
- Add back support to build chrony on SLE12.
- Drop dependency on asciidoctor. It is only needed for building
the HTML documentation which we don't package anyway.
==== compat-usrmerge ====
- Fix logic for detecting conflicts with directories (boo#1191111)
==== frameworkintegration ====
Version update (5.86.0 -> 5.87.0)
Subpackages: frameworkintegration-plugin libKF5Style5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== iputils ====
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
==== kactivities-stats ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kactivities5 ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kactivities5-imports libKF5Activities5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== karchive ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kauth ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Auth5 libKF5AuthCore5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kbookmarks ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kcmutils ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Fix Warning: Property type "Int" is not a known QVariant type
* Add support for static builds
* Add compat code for KService based plugin loading
* Introduce KCModuleProxy::isChanged method
* Un-overload KCModuleProxy:changed signal
==== kcodecs ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* KCodecs::decodeRFC2047String(): return "UTF-8" when multiple charsets used
* Add CI configuration file
==== kcompletion ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* New shouldAutoSuggest property on KCompletion.
* Fix typo in argument name (autosubject -> autoSuggest)
==== kconfig ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kconf_update5 libKF5ConfigCore5 libKF5ConfigGui5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Android: Fix writing to config if path is a content:// Uri
* Add Gitlab CI configuration
* kconfigini: Only open the file once to write
* Allow KConfigXT to use KSharedConfig::openStateConfig
==== kconfigwidgets ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Do not emit deprecation warnings for overload which gets chosen by compiler
==== kcoreaddons ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* KStringHandler: add a new perlSplit() overload that takes a QStringView
* ktexttohtml: port QStringRef (deprecated) to QStringView and minor refactor
* Port QStringRef (deprected) to QStringView
* Deprecate KPluginMetaData::extraInformation
* Don't forward-declare QVector
* Fix python bindings generation
==== kcrash ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kdbusaddons ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kdbusaddons-tools libKF5DBusAddons5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Introduce UpdateLaunchEnvJob
* Correct to make sure we use the matching ECM version
* Add CI configuration file
==== kdeclarative ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kdeclarative-components libKF5CalendarEvents5 libKF5Declarative5 libKF5QuickAddons5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Make sure the object gets destroyed before the view
* Add support for static builds
* SimpleKCM: Remove last vestiges of previously-removed properties
* SimpleKCM: remove custom header and footer handling
==== kded ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kdelibs4support ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5KDELibs4Support5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kdesu ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kdnssd-framework ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kdoctools ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kfilemetadata5 ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kglobalaccel ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kglobalaccel5 libKF5GlobalAccel5 libKF5GlobalAccelPrivate5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Remove obsolete LGPL-2.0-only license text
* Relicense remaining LGPL-2.0-only file
* Remove unneeded header
==== kguiaddons ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Use imported target for X11 libs
* Add explicit option for controlling X11 support
* Relicense remaining files away from LGPL-2.0-only
* Add missing static dependency to Config.cmake.in
==== kholidays ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Update Canadian holidays
* Update README.md
==== ki18n ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kiconthemes ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kidletime ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kinit ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Fix KDE shutdown bug
==== kio ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kio-core
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
* KUrlCompletion blocks autosuggestion from happening if the
input is an exact directory path. (kde#420966)
* KDirOperator: provide an option to enable showing open-with item actions (kde#440748)
* Fix permissions when copying files (kde#404777)
* KFileItem: refresh() shouldn't discard ACL attributes (kde#299155)
* KPropertiesDialog: show text label with item name for readonly items too (kde#442237)
==== kirigami2 ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Kirigami2-5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
* PageRow: Do not async load the global header (kde#442660)
==== kitemmodels ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kitemmodels-imports libKF5ItemModels5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kitemviews ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Relicense files from LGPL-2.0-only to LGPL-2.0-or-later
==== kjobwidgets ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Add CI configuration file
==== knewstuff ====
Version update (5.86.0 -> 5.87.0)
Subpackages: knewstuff-imports libKF5NewStuff5 libKF5NewStuffCore5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
* Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
* 0001-Include-a-user-agent-on-KNS-requests.patch
* fix-crash.patch
==== knotifications ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Add support for static builds
* Fix HIG URL
* Correct the version of Phonon that we use
* Remove non-KDE project
==== knotifyconfig ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kpackage ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kparts ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kpeople5 ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kpty ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kquickcharts ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kservice ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Deprecate KAutostart class
* Deprecate KService::parentApp
* Deprecate KService::pluginKeyword property
==== ktexteditor ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* The user is not selecting as soon as we clearSelection
* fix missing i18n (kde#442071)
==== ktextwidgets ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Handle RTL text selection the same way as Qt (kde#397922)
==== kunitconversion ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kwallet ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kwalletd5 libKF5Wallet5 libkwalletbackend5-5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kwayland ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* KWayland depends on libraries/plasma-wayland-protocols
==== kwidgetsaddons ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Make lupdate happier
* KCharSelect: Added option to show all blocks found in the data file (in the section menu).
* KFontChooser: the widget shouldn't become wider when toggling show fixed only
* KMessageDialog: disconnect default buttonbox signals as we emit done() manually
==== kwin5 ====
- Add patch to fix black screen when compositing fails to initialize
(kde#443953):
* kde443953.patch
- Make pipewire-devel BR versioned
==== kwindowsystem ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kxmlgui ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Add missing Q_INIT_RESOURCE(kxmlgui)
* Replace "Libraries" by "Components" to show KAboutComponents info
==== libKF5ModemManagerQt ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Introduce countryCode Modem3gpp API
==== libKF5NetworkManagerQt ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== libapparmor ====
- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)
==== libteam ====
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_teamd@.service.patch
==== liburing ====
Version update (2.0 -> 2.1)
- update to 2.1:
* Ignore spurious fadvise/madvise failures
* build: add -D_GNU_SOURCE to all CPPFLAGS/CFLAGS.
* man: clean up spelling
* man/io_uring_enter.2: add notes about direct open/accept
* io_uring.h: sync with 5.15 kernel
* Fix IORING_REGISTER_IOWQ_MAX_WORKERS name
* man: document new register/update API
* liburing: add helpers for direct open/accept
* liburing.h: correct max_worker name
* Change IORING_REGISTER_IOWQ_MAX_UNBOUND_WORKERS
* src/syscall.h: get rid of useless externs
* man/io_uring_enter.2: document IORING_ENTER_EXT_ARG
* Add io_uring_register_iowq_max_unbound() helper
* Get rid of useless 'extern' on function declarations in liburing.h
* Add (UN)REGISTER_IOWQ_AFF helpers
* man/io_uring_register.2: note when MAX_UNBOUND became available
* man/io_uring_register.2: add missing punctuation
* man/io_uring_register.2: document IORING_REGISTER_IOWQ_MAX_UNBOUND
* man/io_uring_enter.2: add IORING_OP_TIMEOUT clock sources
* man/io_uring_enter.2: improve timeout entry
* man/io_uring_enter.2: update SQE
* man/io_uring_enter.2: note that not all requests support fixed files
* man/io_uring_enter.2: add new 5.15 opcodes
* man/io_uring_enter.2: note that cqe->flags is indeed used
* man/io_uring_enter.2: add poll update and multishot mode
* man/io_uring_register.2: add IORING_(UN)REGISTER_IOWQ
* man: update notes on register quiesce
* man: fix io_uring_sqe alignment
* register: add tagging and buf update helpers
* liburing.h: make header clean for implicit sign and size conversions
* configure: document --cc and --cxx options
* io_uring: update buffer update feature testing
* liburing.h: dedup poll mask conversion
* liburing.h: add a multipoll helper
* Update io_uring.h
* examples: disable ucontext-cp for elbrus (e2k) architecture
* Update io_uring_setup.2
* man/io_uring_setup.2: document the two most recent FEAT flags
* man/io_uring_setup.2: make sure FEAT flags are kernel versioned
* correct syscall NR in mips
* Fix 32-bit compile warnings
* liburing.h: make all file/IO offset __u64
* src/queue: don't flush SQ ring for new wait interface
* man/io_uring_enter.2: further clarify what cqe->res holds
* Clarify information about error results
* Refer to the accept_flags in io_uring_enter manual
* Fix a bug due to the unreleased lock before function returns
* debian/rules: add missing slash for relativelibdir
* man/io_uring_enter.2: clarify io_uring_enter(2) SQPOLL return value
* liburing.h: add linkat prep helper
* io_uring.h: add linkat opcode
* liburing.h: add symlinkat prep helper
* io_uring.h: add symlinkat opcode
* liburing.h: add mkdirat prep helper
* update rsrc register/update ABI and tests
* queue: clean up SQ flushing
* io_uring_enter(2): Clarify how to read from and write to non-seekable files
* clarify an edge case of IORING_SETUP_SQ_AFF
* io_uring_enter(2): clarify OP_READ and OP_WRITE
* sync io_uring.h API file with Linux 5.13
* man: Fix typo in man io_uring_queue_exit
* examples/link-cp: fix a couple of strerror negations
* src/setup: don't treat dummy ring init as failure
* src/setup: add some documentation to the memlock helpers
* examples/ucontext-cp.c: cope with variable SIGSTKSZ
* setup: provide helpers to inquire about necessary mlock sizes
* examples/io_uring-cp: wait for pending writes before exit copy loop
* spec: add explicit build dependency on make
* spec: bump version to 2.0
* man/io_uring_enter.2: note that -EBUSY can also happen for getevents
==== ncurses ====
Version update (6.2.20210911 -> 6.2.20211002)
Subpackages: libncurses6 ncurses-utils terminfo-base
- Add ncurses patch 20211002
+ use return-value from vsnprintf to reallocate as needed to allow for
buffers larger than the screen size (report by "_RuRo_").
+ modify tset "-q" option to refrain from modifying terminal modes, to
match the documentation.
+ add section on margins to terminfo.5, adapted from X/Open Curses.
+ make tput/tset warning messages consistently using alias names when
those are used, rather than the underlying program's name.
+ improve tput usage message for aliases such as clear, by eliminating
tput-specific portions.
+ add a check in toe to ensure that a "termcap file" is text rather
than binary.
+ further build-fixes for OpenBSD 6.9, whose header files differ from
- Add ncurses patch 20210925
+ add kbeg to xterm+keypad to accommodate termcap applications -TD
+ add smglp and smgrp to vt420+lrmm, to provide useful data for the
"tabs" +m option -TD
+ build-fix for gcc 3.4.3 with Solaris10, which does not allow forward
reference of anonymous struct typedef.
+ modify tput to allow multiple commands per line.
+ minor fixes for tset manpage.
- Correct offsets of patch ncurses-6.2.dif
==== plasma-framework ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Plasma5 plasma-framework-components
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
* Revert "Change busywidget to a gear" (kde#442525)
* ExpandableListitem: Correct expanded view height calculation (kde#442537)
==== plasma5-workspace ====
Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-libs xembedsniproxy
- Add patch to show password input on the "Other" page in SDDM (kde#443737):
* 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch
==== poppler ====
Version update (21.08.0 -> 21.10.0)
Subpackages: libpoppler-cpp0 libpoppler-glib8
- Update to 21.10.0:
core:
* Add support for setting custom stamp annotations
* Add default appearance for the well known stamp names
* Correct encoding of signature's properties Reason & Location
* Splash: Fix rendering of some odd patterns
* SignatureHandler::validateCertificate: Add option to not do OCSP revocation check
* SignatureHandler::validateCertificate: Add support for AIA fetching to verify certificates
* greallocn: if memory allocation fails, free the previous pointer to avoid memory leak
* Fix issues with malformed files
utils:
* pdfsig: Add a way to list certificate nicknames
* pdfsig: You can now add signatures from pdfsig
* pdfsig: Add option to not do OCSP revocation check
* pdfsig: Add option for AIA fetching to verify certificates
* pdfinfo: Add -custom option to print custom metadata
* pdfinfo: add metadata flags
qt:
* Add support for setting custom stamp annotations
* Add getters for signature's properties Reason & Location
glib:
* Remove incorrect PopplerAttachment deprecation
- Update to 21.09.0:
core:
* Splash: Massive speed improvement on files that use lots of save/restore (q/Q) operators
* Correct decoding of signature properties Reason & Location when they are Unicode
* Fix issues with malformed files
==== poppler-qt5 ====
Version update (21.08.0 -> 21.10.0)
- Update to 21.10.0:
core:
* Add support for setting custom stamp annotations
* Add default appearance for the well known stamp names
* Correct encoding of signature's properties Reason & Location
* Splash: Fix rendering of some odd patterns
* SignatureHandler::validateCertificate: Add option to not do OCSP revocation check
* SignatureHandler::validateCertificate: Add support for AIA fetching to verify certificates
* greallocn: if memory allocation fails, free the previous pointer to avoid memory leak
* Fix issues with malformed files
utils:
* pdfsig: Add a way to list certificate nicknames
* pdfsig: You can now add signatures from pdfsig
* pdfsig: Add option to not do OCSP revocation check
* pdfsig: Add option for AIA fetching to verify certificates
* pdfinfo: Add -custom option to print custom metadata
* pdfinfo: add metadata flags
qt:
* Add support for setting custom stamp annotations
* Add getters for signature's properties Reason & Location
glib:
* Remove incorrect PopplerAttachment deprecation
- Update to 21.09.0:
core:
* Splash: Massive speed improvement on files that use lots of save/restore (q/Q) operators
* Correct decoding of signature properties Reason & Location when they are Unicode
* Fix issues with malformed files
==== prison-qt5 ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Prison5 prison-qt5-imports
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Select the most efficient QR encoding mode rather than always using 8bit
* Only build and run datamatrixtest if libdmtx is available
==== purpose ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Purpose5 libKF5PurposeWidgets5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* plugins/barcode: Call it a "QR code" in the UI
* Add Barcode plugin
==== python-networkx ====
Version update (2.6.1 -> 2.6.3)
- update to 2.6.3:
* Fix modularity functions (gh#networkx/networkx#5072)
* CI/MAINT: drop gdal tests (gh#networkx/networkx#5068)
* modularity_max: provide labels to get_edge_data (gh#networkx/networkx#4965)
* Improvements to greedy_modularity_community (gh#networkx/networkx#4996)
* use weight arg instead of 'weight' key at greedy_modularity_communities()
* modularity_max: breaking the loop when given community size is reached (gh#networkx/networkx#4950)
* modularity_max: allow input of desired number of communities
* greedy_modularity_communities with digraphs and multi(di)graphs (gh#networkx/networkx#5007) (gh#networkx/networkx#5007)
* Allow greedy_modularity_communities to use floating point weights or resolution (gh#networkx/networkx#5065)
* change i,j,k notation to u,v,w (no indexes since gh#networkx/networkx#5007)
==== qqc2-desktop-style ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Properly get the path from a QUrl
* Port away from devicePixelRatio
* MenuSeparator: fix height being wrong, rewrite whole file to be more correct
* Button, ToolButton: improve implicit sizing, correctly set default button state
* Use more process-working-symbolic icon for busy spinner
==== solid ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Solid5 solid-imports
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Add support for static builds
* support extracting cpu model on ppc64
==== sonnet ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5SonnetCore5 libKF5SonnetUi5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== syntax-highlighting ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5SyntaxHighlighting5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Add basic QML API docs
* yara - add new 4.x keywords
* Tests result
* Fix operators and included more blocks on test
* Change license to MIT
* Included test reference
* Removed items that are generating errors for now
* initial work on terraform syntax highlight
* Port AbstractHighlighter::highlightLine to QStringView
==== systemd-presets-common-SUSE ====
- Haveged as a daemon is no longer required since kernel 5.6
do not enable by default.
==== threadweaver ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== xdg-user-dirs ====
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== xf86-input-libinput ====
- reverted previous change; the issue was broken ckb-next, not
the usage of libinput v120 API (boo#1190646)
- switch to libinput v120 API broke the driver, so disable it for
now via patching config.h in specfile after running configure
(boo#1190646)
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
apparmor
busybox
chrony
compat-usrmerge
iputils
libapparmor
liburing (2.0 -> 2.1)
ncurses (6.2.20210911 -> 6.2.20211002)
pmdk (1.11.0 -> 1.11.1)
python-networkx (2.6.1 -> 2.6.3)
rdma-core (36.0 -> 37.1)
systemd-presets-common-SUSE
=== Details ===
==== apparmor ====
Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils python3-apparmor
- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)
==== busybox ====
- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
flavor of busybox with the
additional setting:
CONFIG_REBOOT=y
CONFIG_SWITCH_ROOT=y
CONFIG_CTTYHACK=y
(bsc#1191514).
==== chrony ====
Subpackages: chrony-pool-openSUSE
- boo#1190926: PrivateDevices is too strict, we might need to
access the rtc and ptp devices.
- Add back support to build chrony on SLE12.
- Drop dependency on asciidoctor. It is only needed for building
the HTML documentation which we don't package anyway.
==== compat-usrmerge ====
- Fix logic for detecting conflicts with directories (boo#1191111)
==== iputils ====
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
==== libapparmor ====
- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)
==== liburing ====
Version update (2.0 -> 2.1)
- update to 2.1:
* Ignore spurious fadvise/madvise failures
* build: add -D_GNU_SOURCE to all CPPFLAGS/CFLAGS.
* man: clean up spelling
* man/io_uring_enter.2: add notes about direct open/accept
* io_uring.h: sync with 5.15 kernel
* Fix IORING_REGISTER_IOWQ_MAX_WORKERS name
* man: document new register/update API
* liburing: add helpers for direct open/accept
* liburing.h: correct max_worker name
* Change IORING_REGISTER_IOWQ_MAX_UNBOUND_WORKERS
* src/syscall.h: get rid of useless externs
* man/io_uring_enter.2: document IORING_ENTER_EXT_ARG
* Add io_uring_register_iowq_max_unbound() helper
* Get rid of useless 'extern' on function declarations in liburing.h
* Add (UN)REGISTER_IOWQ_AFF helpers
* man/io_uring_register.2: note when MAX_UNBOUND became available
* man/io_uring_register.2: add missing punctuation
* man/io_uring_register.2: document IORING_REGISTER_IOWQ_MAX_UNBOUND
* man/io_uring_enter.2: add IORING_OP_TIMEOUT clock sources
* man/io_uring_enter.2: improve timeout entry
* man/io_uring_enter.2: update SQE
* man/io_uring_enter.2: note that not all requests support fixed files
* man/io_uring_enter.2: add new 5.15 opcodes
* man/io_uring_enter.2: note that cqe->flags is indeed used
* man/io_uring_enter.2: add poll update and multishot mode
* man/io_uring_register.2: add IORING_(UN)REGISTER_IOWQ
* man: update notes on register quiesce
* man: fix io_uring_sqe alignment
* register: add tagging and buf update helpers
* liburing.h: make header clean for implicit sign and size conversions
* configure: document --cc and --cxx options
* io_uring: update buffer update feature testing
* liburing.h: dedup poll mask conversion
* liburing.h: add a multipoll helper
* Update io_uring.h
* examples: disable ucontext-cp for elbrus (e2k) architecture
* Update io_uring_setup.2
* man/io_uring_setup.2: document the two most recent FEAT flags
* man/io_uring_setup.2: make sure FEAT flags are kernel versioned
* correct syscall NR in mips
* Fix 32-bit compile warnings
* liburing.h: make all file/IO offset __u64
* src/queue: don't flush SQ ring for new wait interface
* man/io_uring_enter.2: further clarify what cqe->res holds
* Clarify information about error results
* Refer to the accept_flags in io_uring_enter manual
* Fix a bug due to the unreleased lock before function returns
* debian/rules: add missing slash for relativelibdir
* man/io_uring_enter.2: clarify io_uring_enter(2) SQPOLL return value
* liburing.h: add linkat prep helper
* io_uring.h: add linkat opcode
* liburing.h: add symlinkat prep helper
* io_uring.h: add symlinkat opcode
* liburing.h: add mkdirat prep helper
* update rsrc register/update ABI and tests
* queue: clean up SQ flushing
* io_uring_enter(2): Clarify how to read from and write to non-seekable files
* clarify an edge case of IORING_SETUP_SQ_AFF
* io_uring_enter(2): clarify OP_READ and OP_WRITE
* sync io_uring.h API file with Linux 5.13
* man: Fix typo in man io_uring_queue_exit
* examples/link-cp: fix a couple of strerror negations
* src/setup: don't treat dummy ring init as failure
* src/setup: add some documentation to the memlock helpers
* examples/ucontext-cp.c: cope with variable SIGSTKSZ
* setup: provide helpers to inquire about necessary mlock sizes
* examples/io_uring-cp: wait for pending writes before exit copy loop
* spec: add explicit build dependency on make
* spec: bump version to 2.0
* man/io_uring_enter.2: note that -EBUSY can also happen for getevents
==== ncurses ====
Version update (6.2.20210911 -> 6.2.20211002)
Subpackages: libncurses6 ncurses-utils terminfo-base
- Add ncurses patch 20211002
+ use return-value from vsnprintf to reallocate as needed to allow for
buffers larger than the screen size (report by "_RuRo_").
+ modify tset "-q" option to refrain from modifying terminal modes, to
match the documentation.
+ add section on margins to terminfo.5, adapted from X/Open Curses.
+ make tput/tset warning messages consistently using alias names when
those are used, rather than the underlying program's name.
+ improve tput usage message for aliases such as clear, by eliminating
tput-specific portions.
+ add a check in toe to ensure that a "termcap file" is text rather
than binary.
+ further build-fixes for OpenBSD 6.9, whose header files differ from
- Add ncurses patch 20210925
+ add kbeg to xterm+keypad to accommodate termcap applications -TD
+ add smglp and smgrp to vt420+lrmm, to provide useful data for the
"tabs" +m option -TD
+ build-fix for gcc 3.4.3 with Solaris10, which does not allow forward
reference of anonymous struct typedef.
+ modify tput to allow multiple commands per line.
+ minor fixes for tset manpage.
- Correct offsets of patch ncurses-6.2.dif
==== pmdk ====
Version update (1.11.0 -> 1.11.1)
Subpackages: libpmem1 libpmemobj1
- Update to PMDK 1.11.1
* Bugfixes:
* doc: remove exprimental moniker from libpmem2(7)
* common: fix missing sfence in non-temporal memcpy
* common: fix a mismatch between prototype and body
* common: fix mismatched function args
* obj: rename vars clashing with those of a containing block
* pmem2: don't force smaller alignment for fsdax mappings
* pool: don't trample upon users of localtime()
* rpmem: Fix RPMEM_RAW_BUFF_SIZE and LANE_ALIGN_SIZE for powerpc64le
==== python-networkx ====
Version update (2.6.1 -> 2.6.3)
- update to 2.6.3:
* Fix modularity functions (gh#networkx/networkx#5072)
* CI/MAINT: drop gdal tests (gh#networkx/networkx#5068)
* modularity_max: provide labels to get_edge_data (gh#networkx/networkx#4965)
* Improvements to greedy_modularity_community (gh#networkx/networkx#4996)
* use weight arg instead of 'weight' key at greedy_modularity_communities()
* modularity_max: breaking the loop when given community size is reached (gh#networkx/networkx#4950)
* modularity_max: allow input of desired number of communities
* greedy_modularity_communities with digraphs and multi(di)graphs (gh#networkx/networkx#5007) (gh#networkx/networkx#5007)
* Allow greedy_modularity_communities to use floating point weights or resolution (gh#networkx/networkx#5065)
* change i,j,k notation to u,v,w (no indexes since gh#networkx/networkx#5007)
==== rdma-core ====
Version update (36.0 -> 37.1)
Subpackages: libefa1 libibverbs libibverbs1 libmlx4-1 libmlx5-1 librdmacm1
- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
- Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files
==== systemd-presets-common-SUSE ====
- Haveged as a daemon is no longer required since kernel 5.6
do not enable by default.
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
kernel-source (5.14.9 -> 5.14.11)
libwebp (1.2.0 -> 1.2.1)
ndctl
nvme-cli
salt
=== Details ===
==== kernel-source ====
Version update (5.14.9 -> 5.14.11)
- Linux 5.14.11 (bsc#1012628).
- Revert "ARM: imx6q: drop of_platform_default_populate() from
init_machine" (bsc#1012628).
- Revert "brcmfmac: use ISO3166 country code and 0 rev as
fallback" (bsc#1012628).
- libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870
SSD (bsc#1012628).
- perf/x86: Reset destroy callback on event init failure
(bsc#1012628).
- KVM: x86: nSVM: restore int_vector in svm_clear_vintr
(bsc#1012628).
- kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[] (bsc#1012628).
- KVM: x86: reset pdptrs_from_userspace when exiting smm
(bsc#1012628).
- KVM: do not shrink halt_poll_ns below grow_start (bsc#1012628).
- selftests: KVM: Align SMCCC call with the spec in steal_time
(bsc#1012628).
- kasan: always respect CONFIG_KASAN_STACK (bsc#1012628).
- tools/vm/page-types: remove dependency on opt_file for idle
page tracking (bsc#1012628).
- block: don't call rq_qos_ops->done_bio if the bio isn't tracked
(bsc#1012628).
- io_uring: allow conditional reschedule for intensive iterators
(bsc#1012628).
- x86/insn, tools/x86: Fix undefined behavior due to potential
unaligned accesses (bsc#1012628).
- smb3: correct smb3 ACL security descriptor (bsc#1012628).
- irqchip/gic: Work around broken Renesas integration
(bsc#1012628).
- scsi: ses: Retry failed Send/Receive Diagnostic commands
(bsc#1012628).
- thermal/drivers/tsens: Fix wrong check for tzd in irq handlers
(bsc#1012628).
- nvme-fc: avoid race between time out and tear down
(bsc#1012628).
- nvme-fc: update hardware queues before using them (bsc#1012628).
- swiotlb-xen: ensure to issue well-formed XENMEM_exchange
requests (bsc#1012628).
- Xen/gntdev: don't ignore kernel unmapping error (bsc#1012628).
- selftests: kvm: fix get_run_delay() ignoring fscanf() return
warn (bsc#1012628).
- selftests: kvm: move get_run_delay() into lib/test_util
(bsc#1012628).
- selftests:kvm: fix get_trans_hugepagesz() ignoring fscanf()
return warn (bsc#1012628).
- selftests:kvm: fix get_warnings_count() ignoring fscanf()
return warn (bsc#1012628).
- selftests: be sure to make khdr before other targets
(bsc#1012628).
- habanalabs/gaudi: fix LBW RR configuration (bsc#1012628).
- habanalabs: fail collective wait when not supported
(bsc#1012628).
- habanalabs/gaudi: use direct MSI in single mode (bsc#1012628).
- usb: dwc2: check return value after calling
platform_get_resource() (bsc#1012628).
- usb: testusb: Fix for showing the connection speed
(bsc#1012628).
- scsi: elx: efct: Do not hold lock while calling
fc_vport_terminate() (bsc#1012628).
- scsi: sd: Free scsi_disk device via put_device() (bsc#1012628).
- drm/amdkfd: fix svm_migrate_fini warning (bsc#1012628).
- drm/amdkfd: handle svm migrate init error (bsc#1012628).
- ext2: fix sleeping in atomic bugs on error (bsc#1012628).
- platform/x86: gigabyte-wmi: add support for B550I Aorus Pro AX
(bsc#1012628).
- sparc64: fix pci_iounmap() when CONFIG_PCI is not set
(bsc#1012628).
- xen-netback: correct success/error reporting for the
SKB-with-fraglist case (bsc#1012628).
- net: mdio: introduce a shutdown method to mdio device drivers
(bsc#1012628).
- btrfs: fix mount failure due to past and transient device
flush error (bsc#1012628).
- btrfs: replace BUG_ON() in btrfs_csum_one_bio() with proper
error handling (bsc#1012628).
- nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN
(bsc#1012628).
- platform/x86: touchscreen_dmi: Update info for the Chuwi Hi10
Plus (CWI527) tablet (bsc#1012628).
- platform/x86: touchscreen_dmi: Add info for the Chuwi HiBook
(CWI514) tablet (bsc#1012628).
- afs: Add missing vnode validation checks (bsc#1012628).
- spi: rockchip: handle zero length transfers without timing out
(bsc#1012628).
- commit 834dddd
- iwlwifi: Fix MODULE_FIRMWARE() for non-existing ucode version
(boo#1191417).
- commit 6597512
- Linux 5.14.10 (bsc#1012628).
- media: hantro: Fix check for single irq (bsc#1012628).
- media: cedrus: Fix SUNXI tile size calculation (bsc#1012628).
- media: s5p-jpeg: rename JPEG marker constants to prevent build
warnings (bsc#1012628).
- ASoC: fsl_sai: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: fsl_esai: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: fsl_micfil: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: fsl_spdif: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: fsl_xcvr: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: mediatek: common: handle NULL case in suspend/resume
function (bsc#1012628).
- scsi: elx: efct: Fix void-pointer-to-enum-cast warning for
efc_nport_topology (bsc#1012628).
- ASoC: SOF: Fix DSP oops stack dump output contents
(bsc#1012628).
- ASoC: SOF: imx: imx8: Bar index is only valid for IRAM and
SRAM types (bsc#1012628).
- ASoC: SOF: imx: imx8m: Bar index is only valid for IRAM and
SRAM types (bsc#1012628).
- pinctrl: qcom: spmi-gpio: correct parent irqspec translation
(bsc#1012628).
- net/mlx4_en: Resolve bad operstate value (bsc#1012628).
- s390/qeth: Fix deadlock in remove_discipline (bsc#1012628).
- s390/qeth: fix deadlock during failing recovery (bsc#1012628).
- m68k: Update ->thread.esp0 before calling syscall_trace()
in ret_from_signal (bsc#1012628).
- NIOS2: fix kconfig unmet dependency warning for
SERIAL_CORE_CONSOLE (bsc#1012628).
- kasan: fix Kconfig check of CC_HAS_WORKING_NOSANITIZE_ADDRESS
(bsc#1012628).
- HID: amd_sfh: Fix potential NULL pointer dereference
(bsc#1012628).
- perf test: Fix DWARF unwind for optimized builds (bsc#1012628).
- perf iostat: Use system-wide mode if the target cpu_list is
unspecified (bsc#1012628).
- perf iostat: Fix Segmentation fault from NULL 'struct
perf_counts_values *' (bsc#1012628).
- watchdog/sb_watchdog: fix compilation problem due to
COMPILE_TEST (bsc#1012628).
- tty: Fix out-of-bound vmalloc access in imageblit (bsc#1012628).
- cpufreq: schedutil: Use kobject release() method to free
sugov_tunables (bsc#1012628).
- scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS
(bsc#1012628).
- drm/amdgpu: adjust fence driver enable sequence (bsc#1012628).
- drm/amdgpu: avoid over-handle of fence driver fini in s3 test
(v2) (bsc#1012628).
- drm/amdgpu: stop scheduler when calling hw_fini (v2)
(bsc#1012628).
- cpufreq: schedutil: Destroy mutex before kobject_put() frees
the memory (bsc#1012628).
- scsi: ufs: ufs-pci: Fix Intel LKF link stability (bsc#1012628).
- ALSA: rawmidi: introduce SNDRV_RAWMIDI_IOCTL_USER_PVERSION
(bsc#1012628).
- ALSA: firewire-motu: fix truncated bytes in message tracepoints
(bsc#1012628).
- ALSA: hda/realtek: Quirks to enable speaker output for Lenovo
Legion 7i 15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops
(bsc#1012628).
- ACPI: NFIT: Use fallback node id when numa info in NFIT table
is incorrect (bsc#1012628).
- fs-verity: fix signed integer overflow with i_size near S64_MAX
(bsc#1012628).
- hwmon: (tmp421) handle I2C errors (bsc#1012628).
- hwmon: (w83793) Fix NULL pointer dereference by removing
unnecessary structure field (bsc#1012628).
- hwmon: (w83792d) Fix NULL pointer dereference by removing
unnecessary structure field (bsc#1012628).
- hwmon: (w83791d) Fix NULL pointer dereference by removing
unnecessary structure field (bsc#1012628).
- gpio: pca953x: do not ignore i2c errors (bsc#1012628).
- scsi: ufs: Fix illegal offset in UPIU event trace (bsc#1012628).
- mac80211: fix use-after-free in CCMP/GCMP RX (bsc#1012628).
- platform/x86/intel: hid: Add DMI switches allow list
(bsc#1012628).
- x86/kvmclock: Move this_cpu_pvti into kvmclock.h (bsc#1012628).
- ptp: Fix ptp_kvm_getcrosststamp issue for x86 ptp_kvm
(bsc#1012628).
- KVM: x86: Fix stack-out-of-bounds memory access from
ioapic_write_indirect() (bsc#1012628).
- KVM: x86: nSVM: don't copy virt_ext from vmcb12 (bsc#1012628).
- KVM: x86: Clear KVM's cached guest CR3 at RESET/INIT
(bsc#1012628).
- KVM: x86: Swap order of CPUID entry "index" vs. "significant
flag" checks (bsc#1012628).
- KVM: nVMX: Filter out all unsupported controls when eVMCS was
activated (bsc#1012628).
- KVM: SEV: Update svm_vm_copy_asid_from for SEV-ES (bsc#1012628).
- KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
(bsc#1012628).
- KVM: SEV: Acquire vcpu mutex when updating VMSA (bsc#1012628).
- KVM: SEV: Allow some commands for mirror VM (bsc#1012628).
- KVM: SVM: fix missing sev_decommission in sev_receive_start
(bsc#1012628).
- KVM: nVMX: Fix nested bus lock VM exit (bsc#1012628).
- KVM: VMX: Fix a TSX_CTRL_CPUID_CLEAR field mask issue
(bsc#1012628).
- mmc: renesas_sdhi: fix regression with hard reset on old SDHIs
(bsc#1012628).
- media: ir_toy: prevent device from hanging during transmit
(bsc#1012628).
- RDMA/cma: Do not change route.addr.src_addr.ss_family
(bsc#1012628).
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing
more requests (bsc#1012628).
- nbd: use shifts rather than multiplies (bsc#1012628).
- drm/amd/display: initialize backlight_ramping_override to false
(bsc#1012628).
- drm/amd/display: Pass PCI deviceid into DC (bsc#1012628).
- drm/amd/display: Fix Display Flicker on embedded panels
(bsc#1012628).
- drm/amdgpu: force exit gfxoff on sdma resume for rmb s0ix
(bsc#1012628).
- drm/amdgpu: check tiling flags when creating FB on GFX8-
(bsc#1012628).
- drm/amdgpu: correct initial cp_hqd_quantum for gfx9
(bsc#1012628).
- interconnect: qcom: sdm660: Fix id of slv_cnoc_mnoc_cfg
(bsc#1012628).
- interconnect: qcom: sdm660: Correct NOC_QOS_PRIORITY shift
and mask (bsc#1012628).
- drm/i915/gvt: fix the usage of ww lock in gvt scheduler
(bsc#1012628).
- ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
(bsc#1012628).
- bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog
(bsc#1012628).
- IB/cma: Do not send IGMP leaves for sendonly Multicast groups
(bsc#1012628).
- RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure
(bsc#1012628).
- bpf, mips: Validate conditional branch offsets (bsc#1012628).
- hwmon: (mlxreg-fan) Return non-zero value when fan current
state is enforced from sysfs (bsc#1012628).
- RDMA/irdma: Skip CQP ring during a reset (bsc#1012628).
- RDMA/irdma: Validate number of CQ entries on create CQ
(bsc#1012628).
- RDMA/irdma: Report correct WC error when transport retry
counter is exceeded (bsc#1012628).
- RDMA/irdma: Report correct WC error when there are MW bind
errors (bsc#1012628).
- netfilter: nf_tables: unlink table before deleting it
(bsc#1012628).
- netfilter: log: work around missing softdep backend module
(bsc#1012628).
- Revert "mac80211: do not use low data rates for data frames
with no ack flag" (bsc#1012628).
- mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
(bsc#1012628).
- mac80211: limit injected vht mcs/nss in
ieee80211_parse_tx_radiotap (bsc#1012628).
- mac80211: mesh: fix potentially unaligned access (bsc#1012628).
- mac80211-hwsim: fix late beacon hrtimer handling (bsc#1012628).
- driver core: fw_devlink: Add support for
FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD (bsc#1012628).
- net: mdiobus: Set FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD for
mdiobus parents (bsc#1012628).
- sctp: break out if skb_header_pointer returns NULL in
sctp_rcv_ootb (bsc#1012628).
- mptcp: don't return sockets in foreign netns (bsc#1012628).
- mptcp: allow changing the 'backup' bit when no sockets are open
(bsc#1012628).
- RDMA/hns: Work around broken constant propagation in gcc 8
(bsc#1012628).
- hwmon: (tmp421) report /PVLD condition as fault (bsc#1012628).
- hwmon: (tmp421) fix rounding for negative values (bsc#1012628).
- net: enetc: fix the incorrect clearing of IF_MODE bits
(bsc#1012628).
- net: ipv4: Fix rtnexthop len when RTA_FLOW is present
(bsc#1012628).
- smsc95xx: fix stalled rx after link change (bsc#1012628).
- drm/i915/request: fix early tracepoints (bsc#1012628).
- drm/i915: Remove warning from the rps worker (bsc#1012628).
- dsa: mv88e6xxx: 6161: Use chip wide MAX MTU (bsc#1012628).
- dsa: mv88e6xxx: Fix MTU definition (bsc#1012628).
- dsa: mv88e6xxx: Include tagger overhead when setting MTU for
DSA and CPU ports (bsc#1012628).
- e100: fix length calculation in e100_get_regs_len (bsc#1012628).
- e100: fix buffer overrun in e100_get_regs (bsc#1012628).
- RDMA/hfi1: Fix kernel pointer leak (bsc#1012628).
- RDMA/hns: Fix the size setting error when copying CQE in
clean_cq() (bsc#1012628).
- RDMA/hns: Add the check of the CQE size of the user space
(bsc#1012628).
- bpf: Exempt CAP_BPF from checks against bpf_jit_limit
(bsc#1012628).
- libbpf: Fix segfault in static linker for objects without BTF
(bsc#1012628).
- selftests, bpf: Fix makefile dependencies on libbpf
(bsc#1012628).
- selftests, bpf: test_lwt_ip_encap: Really disable rp_filter
(bsc#1012628).
- bpf, x86: Fix bpf mapping of atomic fetch implementation
(bsc#1012628).
- net: ks8851: fix link error (bsc#1012628).
- ionic: fix gathering of debug stats (bsc#1012628).
- Revert "block, bfq: honor already-setup queue merges"
(bsc#1012628).
- scsi: csiostor: Add module softdep on cxgb4 (bsc#1012628).
- ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup
(bsc#1012628).
- net: hns3: do not allow call hns3_nic_net_open repeatedly
(bsc#1012628).
- net: hns3: remove tc enable checking (bsc#1012628).
- net: hns3: don't rollback when destroy mqprio fail
(bsc#1012628).
- net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and
HCLGE_FLAG_DCB_ENABLE (bsc#1012628).
- net: hns3: fix show wrong state when add existing uc mac address
(bsc#1012628).
- net: hns3: reconstruct function hns3_self_test (bsc#1012628).
- net: hns3: fix always enable rx vlan filter problem after
selftest (bsc#1012628).
- net: hns3: disable firmware compatible features when uninstall
PF (bsc#1012628).
- net: phy: bcm7xxx: Fixed indirect MMD operations (bsc#1012628).
- net: sched: flower: protect fl_walk() with rcu (bsc#1012628).
- net: stmmac: fix EEE init issue when paired with EEE capable
PHYs (bsc#1012628).
- af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
(bsc#1012628).
- objtool: Teach get_alt_entry() about more relocation types
(bsc#1012628).
- perf/x86/intel: Update event constraints for ICX (bsc#1012628).
- sched/fair: Add ancestors of unthrottled undecayed cfs_rq
(bsc#1012628).
- sched/fair: Null terminate buffer when updating tunable_scaling
(bsc#1012628).
- hwmon: (occ) Fix P10 VRM temp sensors (bsc#1012628).
- hwmon: (pmbus/mp2975) Add missed POUT attribute for page 1
mp2975 controller (bsc#1012628).
- kvm: fix objtool relocation warning (bsc#1012628).
- nvme: add command id quirk for apple controllers (bsc#1012628).
- elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
(bsc#1012628).
- driver core: fw_devlink: Improve handling of cyclic dependencies
(bsc#1012628).
- debugfs: debugfs_create_file_size(): use IS_ERR to check for
error (bsc#1012628).
- ipack: ipoctal: fix stack information leak (bsc#1012628).
- ipack: ipoctal: fix tty registration race (bsc#1012628).
- ipack: ipoctal: fix tty-registration error handling
(bsc#1012628).
- ipack: ipoctal: fix missing allocation-failure check
(bsc#1012628).
- ipack: ipoctal: fix module reference leak (bsc#1012628).
- ext4: fix loff_t overflow in ext4_max_bitmap_size()
(bsc#1012628).
- ext4: limit the number of blocks in one ADD_RANGE TLV
(bsc#1012628).
- ext4: fix reserved space counter leakage (bsc#1012628).
- ext4: add error checking to ext4_ext_replay_set_iblocks()
(bsc#1012628).
- ext4: fix potential infinite loop in ext4_dx_readdir()
(bsc#1012628).
- ext4: flush s_error_work before journal destroy in
ext4_fill_super (bsc#1012628).
- HID: u2fzero: ignore incomplete packets without data
(bsc#1012628).
- net: udp: annotate data race around udp_sk(sk)->corkflag
(bsc#1012628).
- NIOS2: setup.c: drop unused variable 'dram_start' (bsc#1012628).
- usb: hso: remove the bailout parameter (bsc#1012628).
- HID: betop: fix slab-out-of-bounds Write in betop_probe
(bsc#1012628).
- netfilter: ipset: Fix oversized kvmalloc() calls (bsc#1012628).
- mm: don't allow oversized kvmalloc() calls (bsc#1012628).
- HID: usbhid: free raw_report buffers in usbhid_stop
(bsc#1012628).
- crypto: aesni - xts_crypt() return if walk.nbytes is 0
(bsc#1012628).
- KVM: x86: Handle SRCU initialization failure during page track
init (bsc#1012628).
- netfilter: conntrack: serialize hash resizes and cleanups
(bsc#1012628).
- netfilter: nf_tables: Fix oversized kvmalloc() calls
(bsc#1012628).
- drivers: net: mhi: fix error path in mhi_net_newlink
(bsc#1012628).
- objtool: print out the symbol type when complaining about it
(bsc#1012628).
- HID: amd_sfh: Fix potential NULL pointer dereference - take 2
(bsc#1012628).
- commit 7c980ba
- ALSA: hda: intel: Allow repeatedly probing on codec
configuration errors (bsc#1190801).
- commit 924f4be
- rpm: use _rpmmacrodir (boo#1191384)
- commit e350c14
==== libwebp ====
Version update (1.2.0 -> 1.2.1)
Subpackages: libwebp7 libwebpdemux2 libwebpmux3
- update to 1.2.1:
* minor lossless encoder improvements and x86 color conversion
speed up
* further security related hardening in libwebp & examples
* toolchain updates and bug fixes
* use more inclusive language within the source
==== ndctl ====
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_ndctl-monitor.service.patch
==== nvme-cli ====
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_nvmf-connect@.service.patch
==== salt ====
Subpackages: python3-salt salt-master salt-minion salt-standalone-formulas-configuration salt-transactional-update
- Fix issues with salt-ssh's extra-filerefs
- Added:
* fix-issues-with-salt-ssh-s-extra-filerefs.patch
- Fix crash when calling manage.not_alive runners
- Added:
* fix-crash-when-calling-manage.not_alive-runners.patch
- Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
- Added:
* 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
atkmm1_6
ca-certificates (2+git20210723.27a0476 -> 2+git20211004.3efbea9)
flatpak (1.11.3 -> 1.12.1)
fwupd (1.5.8 -> 1.6.2)
gjs
glibmm2_4 (2.66.1 -> 2.66.2)
gnome-branding-MicroOS
gnome-shell
gnome-shell-extensions
libaom (3.1.2 -> 3.1.3)
librsvg (2.52.0 -> 2.52.1)
libzypp-plugin-appdata
open-vm-tools (11.3.0 -> 11.3.5)
pam-config (1.4 -> 1.5)
pangomm1_4
xdg-desktop-portal (1.10.0 -> 1.10.1)
xfsprogs
=== Details ===
==== atkmm1_6 ====
- turn off doc build, it does not work with new doxygen
==== ca-certificates ====
Version update (2+git20210723.27a0476 -> 2+git20211004.3efbea9)
- Update to version 2+git20211004.3efbea9:
* Ensure --root option propagates prefix properly to other scripts
==== flatpak ====
Version update (1.11.3 -> 1.12.1)
Subpackages: libflatpak0 system-user-flatpak
- Update to version 1.12.1:
+ The security fix in the 1.12.0 release failed when used with
some older versions of libseccomp (that don't know about the
new syscalls).
- Update to version 1.12.0:
+ This is the first stable release in the 1.12.x series. The
major changes in this series is the support for better control
of sub-sandboxes, as used by the steam flatpak.
+ In addition, this release fixes a security vulnerability in the
portal support. Some recently added syscalls were not blocked
by the seccomp rules which allowed the application to create
sub-sandboxes which can confuse the sandboxing verification
mechanisms of the portal. This has been fixed by extending the
seccomp rules (boo#1191507, CVE-2021-41133)
+ Some test fixes
+ Support for specifying the flatpak binary to use during exports
+ Install translations for all languages in the locale, not just
the ones in LC_MESSAGES.
+ Fix progress reporting in flatpak fsck
+ Handle cases where /var/tmp is a symlink
+ Expose /etc/gai.conf to the sandbox
+ Fix the parental control checks for root
+ Handle missing /etc/ld.so.cache (musl)
+ Updated translations
==== fwupd ====
Version update (1.5.8 -> 1.6.2)
Subpackages: libfwupd2 typelib-1_0-Fwupd-2_0
- Update to version 1.6.2
- The fwupd efi program be separated to fwupd-efi package.
- Removed pesign-obs-integration, moved needssslcertforbuild
, SBAT and EFI signing stuff to fwupd-efi.
- Moved libfwupdplugin1 to libfwupdplugin2
- Change log from upstream:
https://github.com/fwupd/fwupd/blob/main/data/org.freedesktop.fwupd.metainf…
- This release adds the following features:
* Add a plugin to check Lenovo firmware settings
* Add initial support for the powerd daemon
* Add support for CapsuleOnDisk
* Add support for installing UEFI updates from GRUB
* Add support for soft-requirements that can be ignored with --force
* Allow devices to only accept version upgrades
* Allow discovery of Redfish BMCs specified by VID-PID or MAC
* Allow the daemon to request interactive action from the end user
* Automatically connect the BMC network interface at startup
* Show the build timestamp if set on the device
* Show the user how to switch out of Wacom tablet Android-mode
- This release fixes the following bugs:
* Add the alternate vendor name into the 8BitDo allowlist
* Allow multiple devices to set WAIT_FOR_REPLUG
* Allow the client to watch for more property changes
* Always ensure the SuperIO version string is NUL terminated
* Automatically clear the update error as required
* Disable all UX capsules for Lenovo hardware
* Do not assume the metainfo file is NUL-terminated
* Do not save invalid files on LVFS server error
* Fix a VLI regression in enumerating the PD device
* Fix a VLI regression when installing VL820Q7 firmware
* Fix enumeration of the Synaptics Prometheus config child
* Fix parsing Redfish USB/PCI network VID/PIDs
* Fix the fwupdmgr progressbar spinner to actually work
* Fix version number for legacy Wacom Bluetooth modules
* Ignore virtual M.2 ATA devices
* Preserve NEEDS_REBOOT on successful update
* Prevent a corrupt PHAT table from allocating lots of memory
* Read the Redfish SMBIOS table when required
* Remove the vendor string from the device name where required
* Save the update state to the database correctly all of the time
* Switch from sysctl to ioctl for ESRT on FreeBSD
* Try reading from /sys/class/dmi if SMBIOS direct access fails
* Watch for children added or removed after setup has been completed
* Work around a XCC-ism on Lenovo hardware
- This release adds support for the following hardware:
* ModemManager devices supporting Firehose or MBIM QDU
* More models of RTS54HUB
* More Poly DFU devices
* Parade LSPCON
* PixArt receiver and wireless hardware
* Realtek MST with RTD2142
* SuperIO IT5570
* USB4 Dell dock
==== gjs ====
Subpackages: libgjs0 typelib-1_0-GjsPrivate-1_0
- Add upstream crash fixer patches from stable branch:
+ b9e122044a7ccc1e2a3374c680b6ea82066bfa59.patch: arg: Replace
gsize with size_t
+ 62025d4a2738a36ea5f1a7cebef08b22b5eef613.patch: Handle optional
out parameters in callbacks
- Stop disabling lto: Following this, stop passing dtrace=true and
systemtap=true to meson, aswell as dropping systemtap-sdt-devel
BuildRequires, follow upstream default.
- Add optional pkgconfig(gtk4) BuildRequires: meson checks for it.
==== glibmm2_4 ====
Version update (2.66.1 -> 2.66.2)
Subpackages: libgiomm-2_4-1 libglibmm-2_4-1
- Update to version 2.66.2:
+ Glib, Gio: Replace all g_quark_from_static_string() by
g_quark_from_string()
+ Gio:
- FileEnumerator: Remove refreturn to avoid memory leak
- ListModel::get_object(): Make it work for interface classes
+ Build: MSVC build: Remove extraneous GLIBMM_API in
Glib::ustring
==== gnome-branding-MicroOS ====
- Use "Text Editor" instead of the less-supported "gEdit"
==== gnome-shell ====
Subpackages: gnome-shell-calendar
- Add 380d2db1d9047ecffcef7d78f00184963b403efc.patch: inputMethod:
Clear preeditStr before reset. Previously, these were performed
in a different order before GNOME 41. During some other changes
they were swapped.
However, this causes both GTK 3 and GTK 4 applications to scroll
to incorrect positions from the preedit change.
==== gnome-shell-extensions ====
Subpackages: gnome-shell-classic gnome-shell-extensions-common
- Update sle-classic to version 41
+ Update gse-sle-classic-ext.patch
+ Update sle-classic(a)suse.com.tar.gz
==== libaom ====
Version update (3.1.2 -> 3.1.3)
- Update to version 3.1.3:
* Update CHANGELOG for v3.1.3-rc2
* Detect chroma subsampling more directly
* Detect chroma subsampling more directly
* image2yuvconfig() should calculate uv_crop_width
* aom/aom_encoder.h: remove configure option reference
* aom_encoder.h: fix rc_overshoot_pct range
* Update AUTHORS,CHANGELOG,CMakeLists.txt for v3.1.3
* aom_install: don't exclude msvc from install
* aom_install: use relpath for install
* aom_install: Install lib dlls to bindir
==== librsvg ====
Version update (2.52.0 -> 2.52.1)
Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 typelib-1_0-Rsvg-2_0
- Update to version 2.52.1:
+ Fix ordering of tspan inside text elements for right-to-left
languages.
+ Fix text-anchor positioning for right-to-left languages.
+ Fix regression in computing sizes when an SVG has only one of
width/height and a viewBox.
+ Spec compliance - the writing-mode property applies only to
text elements, no to individual tspan elements.
+ Fix build on big-endian platforms.
+ Clarify documentation for the rsvg_handle_write() /
rsvg_handle_close() deprecated APIs.
==== libzypp-plugin-appdata ====
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_appstream-sync-cache.service.patch
==== open-vm-tools ====
Version update (11.3.0 -> 11.3.5)
Subpackages: libvmtools0
- Update to 11.3.5 (build 18557794) (boo#1190987)
+ New/Updated features:
- Added a configurable logging capability to the network script.
The network script has been updated to:
use vmware-toolbox-cmd to query any network logging configuration from
the tools.conf file. Use vmtoolsd --cmd "log ..." to log a message to
the vmx logfile when the logging handler is configured to "vmx" or when
the logfile is full or is not writeable.
- The hgfsmounter (mount.vmhgfs) command has been removed from
open-vm-tools.
The hgfsmounter (mount.vmhgfs) command is no longer used in
Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
removing all references to the hgfsmounter in Linux builds.
+ Resolved issues:
- Customization: Retry the Linux reboot if telinit is a soft link to
systemctl.
- Open-vm-tools commands would hang if configured with "--enable-valgrind".
+ Spec file updates for:
- rpmlint errors
- arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.
==== pam-config ====
Version update (1.4 -> 1.5)
- Update to Version 1.5
- Don't print an error message if one of the systemd PAM modules
does not exist if creating the *-pc files [bsc#1191528]
- Drop pam_systemd_home again [bsc#1191528]
==== pangomm1_4 ====
- turn off doc build, it does not work with new doxygen
==== xdg-desktop-portal ====
Version update (1.10.0 -> 1.10.1)
- Update to version 1.10.1:
+ Revert a breaking change to the screencast and inhibit portal.
==== xfsprogs ====
- move fsck.xfs, mkfs.xfs and xfs_repair from /sbin to /usr/sbin
(bsc#1191105)
The default rpmbuild %configure macro passes --sbindir=/usr/sbin to
every configure script, but the xfsprogs configure script ignores it
when --exec-prefix is also set. Unset --exec-prefix since it is not
really required (all other paths are explicitly passed via the rpm
configure macro), so that the --sbindir is respected.
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
ca-certificates (2+git20210723.27a0476 -> 2+git20211004.3efbea9)
librsvg (2.52.0 -> 2.52.1)
open-vm-tools (11.3.0 -> 11.3.5)
pam-config (1.4 -> 1.5)
rbac-lookup (0.6.4 -> 0.7.1)
xfsprogs
=== Details ===
==== ca-certificates ====
Version update (2+git20210723.27a0476 -> 2+git20211004.3efbea9)
- Update to version 2+git20211004.3efbea9:
* Ensure --root option propagates prefix properly to other scripts
==== librsvg ====
Version update (2.52.0 -> 2.52.1)
Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2
- Update to version 2.52.1:
+ Fix ordering of tspan inside text elements for right-to-left
languages.
+ Fix text-anchor positioning for right-to-left languages.
+ Fix regression in computing sizes when an SVG has only one of
width/height and a viewBox.
+ Spec compliance - the writing-mode property applies only to
text elements, no to individual tspan elements.
+ Fix build on big-endian platforms.
+ Clarify documentation for the rsvg_handle_write() /
rsvg_handle_close() deprecated APIs.
==== open-vm-tools ====
Version update (11.3.0 -> 11.3.5)
Subpackages: libvmtools0
- Update to 11.3.5 (build 18557794) (boo#1190987)
+ New/Updated features:
- Added a configurable logging capability to the network script.
The network script has been updated to:
use vmware-toolbox-cmd to query any network logging configuration from
the tools.conf file. Use vmtoolsd --cmd "log ..." to log a message to
the vmx logfile when the logging handler is configured to "vmx" or when
the logfile is full or is not writeable.
- The hgfsmounter (mount.vmhgfs) command has been removed from
open-vm-tools.
The hgfsmounter (mount.vmhgfs) command is no longer used in
Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
removing all references to the hgfsmounter in Linux builds.
+ Resolved issues:
- Customization: Retry the Linux reboot if telinit is a soft link to
systemctl.
- Open-vm-tools commands would hang if configured with "--enable-valgrind".
+ Spec file updates for:
- rpmlint errors
- arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.
==== pam-config ====
Version update (1.4 -> 1.5)
- Update to Version 1.5
- Don't print an error message if one of the systemd PAM modules
does not exist if creating the *-pc files [bsc#1191528]
- Drop pam_systemd_home again [bsc#1191528]
==== rbac-lookup ====
Version update (0.6.4 -> 0.7.1)
- Update to version 0.7.1:
* Mac M1 Support
* Update documentation from template
* Update README.md
==== xfsprogs ====
- move fsck.xfs, mkfs.xfs and xfs_repair from /sbin to /usr/sbin
(bsc#1191105)
The default rpmbuild %configure macro passes --sbindir=/usr/sbin to
every configure script, but the xfsprogs configure script ignores it
when --exec-prefix is also set. Unset --exec-prefix since it is not
really required (all other paths are explicitly passed via the rpm
configure macro), so that the --sbindir is respected.
1
0
root login with Combustion on MicroOS - any platform and RPi
by jimmypierre.rouen.france＠gmail.com 13 Oct '21
by jimmypierre.rouen.france＠gmail.com 13 Oct '21
13 Oct '21
Greetings,
I have been struggling alone on a concept issue. The issue has a strong
adherence to Combustion. I have received some input from one of our members
here and wish if someone else could come forward please as he might not like
to be disturbed if I am not very good with Combustion.
I can ssh to GreenGeeks, AWS, Digital Ocean, OVH, stackcp, etc. with keys
created with PuTTYgen for years.
For the last weeks, I have been perusing many many wikis but I seem to miss
something because after creating the config file on the USB key (labelled
COMBUSTION & under combustion directory), I cannot get RPi nor x64_86 images
to accept the keys. My non admin user is NUI. If someone could kindly send
me a working config file with xxxxxxx where the PUB key is to be
added/completed, I think that it will just work!
Why time is of essence, it's because we've got our monthly meeting this
coming Saturday (16th October) and I would like to get into the matter and
prepare some slides as well.
With best wishes and thanks in anticipation,
Jimmy Pierre
3
2
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
Mesa-drivers
bash-completion
codec2
gcr (3.40.0 -> 3.41.0)
glibc
hwdata (0.351 -> 0.352)
hwinfo (21.76 -> 21.77)
libx86emu (3.2 -> 3.3)
libzypp (17.28.4 -> 17.28.5)
mdadm
open-iscsi
openssh (8.4p1 -> 8.8p1)
patterns-gnome
patterns-microos
polkit-default-privs (1550+20210818.b0c41fd -> 1550+20211008.9751669)
pulseaudio
xwayland
=== Details ===
==== Mesa-drivers ====
Subpackages: Mesa-dri Mesa-gallium
- Fix build with LLVM 13:
* U_gallivm-add-new-wrapper-around-Module.patch
* U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch
==== bash-completion ====
- Add patch boo1190929-9af4afd0.patch for boo#1190929
add support for compeletion modinfo completion recognize .ko.zst
as well as .ko.bz2
==== codec2 ====
- Added a patch moved-freedv_callback_rx_sym-into-internal-header.patch
to fix building gnuradio (patch taken from upstream)
- Drop handcrafted generation of the pkgconfig file
- Remove "-Wno-dev"
==== gcr ====
Version update (3.40.0 -> 3.41.0)
Subpackages: gcr-data gcr-prompter gcr-ssh-askpass libgck-1-0 libgcr-3-1 typelib-1_0-Gck-1 typelib-1_0-Gcr-3
- Update to version 3.41.0:
+ Port ssh-agent from gnome-keyring.
+ build: Fix parallel build failure due to missing marshal
dependency.
+ Fix warnings by dropping `volatile` for g_once_init_inter
locations.
+ tests: More robust against GTask unref race condition.
+ Updated translations.
- Add pkgconfig(libsecret-1), pkgconfig(libsystemd),
pkgconfig(systemd) and openssh-clients BuildRequires: Build new
standalone ssh-agent, and split it out in own sub-package.
==== glibc ====
Subpackages: glibc-locale glibc-locale-base
- ld-show-auxv-colon.patch: elf: Fix missing colon in LD_SHOW_AUXV output
(BZ #282539
- x86-string-control-test.patch: x86-64: Use testl to check
__x86_string_control
- pthread-kill-fail-after-exit.patch: nptl: pthread_kill, pthread_cancel
should not fail after exit (BZ #19193)
- pthread-kill-race-thread-exit.patch: nptl: Fix race between pthread_kill
and thread exit (BZ #12889)
- getcwd-attribute-access.patch: posix: Fix attribute access mode on
getcwd (BZ #27476)
- pthread-kill-return-esrch.patch: nptl: pthread_kill needs to return
ESRCH for old programs (BZ #19193)
- pthread-mutexattr-getrobust-np-type.patch: nptl: Fix type of
pthread_mutexattr_getrobust_np, pthread_mutexattr_setrobust_np (BZ
[#28036])
- setxid-deadlock-blocked-signals.patch: nptl: Avoid setxid deadlock with
blocked signals in thread exit (BZ #28361)
- pthread-kill-send-specific-thread.patch: nptl: pthread_kill must send
signals to a specific thread (BZ #28407)
- sysconf-nprocessors-affinity.patch: linux: Revert the use of
sched_getaffinity on get_nproc (BZ #28310)
- iconv-charmap-close-output.patch: renamed from
icon-charmap-close-output.patch
==== hwdata ====
Version update (0.351 -> 0.352)
- Update to version 0.352 (bsc#1191375:
+ Updated pci, usb and vendor ids.
==== hwinfo ====
Version update (21.76 -> 21.77)
- merge gh#openSUSE/hwinfo#105
- Use license file from gnu.org
- Fix spelling
- Add missing final newline
- Trim excess whitespace
- Simple maintenance improvements
- 21.77
==== libx86emu ====
Version update (3.2 -> 3.3)
- merge gh#wfeldt/libx86emu#34
- Migrate CI to GitHub Actions
- 3.3
==== libzypp ====
Version update (17.28.4 -> 17.28.5)
- Downloader does not respect checkExistsOnly flag (bsc#1190712)
A missing check causes zyppng::Downloader to always download full
files even if the checkExistsOnly flag is set. This patch adds
the missing logic.
- Fix kernel-*-livepatch removal in purge-kernels (bsc#1190815)
The kernel-*-livepatch packages are supposed to serve as a stable
handle for the ephemeral kernel livepatch packages. See
FATE#320268 for details. As part of the kernel live patching
ecosystem, kernel-*-livepatch packages should not block the
purge-kernels step.
- version 17.28.5 (22)
==== mdadm ====
- Install mdadm in _sbindir rather than /sbin. This is more
appropriate now that we have a merged-/usr.
(bsc#1191076)
==== open-iscsi ====
Subpackages: iscsiuio libopeniscsiusr0_2_0
- Fix possible systemd cycle by adding an "obsoletes" for
the old libopeniscsiusr for older versions.
==== openssh ====
Version update (8.4p1 -> 8.8p1)
Subpackages: openssh-clients openssh-common openssh-server
- Version update to 8.8p1:
= Security
* sshd(8) from OpenSSH 6.2 through 8.7 failed to correctly initialise
supplemental groups when executing an AuthorizedKeysCommand or
AuthorizedPrincipalsCommand, where a AuthorizedKeysCommandUser or
AuthorizedPrincipalsCommandUser directive has been set to run the
command as a different user. Instead these commands would inherit
the groups that sshd(8) was started with.
Depending on system configuration, inherited groups may allow
AuthorizedKeysCommand/AuthorizedPrincipalsCommand helper programs to
gain unintended privilege.
Neither AuthorizedKeysCommand nor AuthorizedPrincipalsCommand are
enabled by default in sshd_config(5).
= Potentially-incompatible changes
* This release disables RSA signatures using the SHA-1 hash algorithm
by default. This change has been made as the SHA-1 hash algorithm is
cryptographically broken, and it is possible to create chosen-prefix
hash collisions for <USD$50K.
For most users, this change should be invisible and there is
no need to replace ssh-rsa keys. OpenSSH has supported RFC8332
RSA/SHA-256/512 signatures since release 7.2 and existing ssh-rsa keys
will automatically use the stronger algorithm where possible.
Incompatibility is more likely when connecting to older SSH
implementations that have not been upgraded or have not closely tracked
improvements in the SSH protocol. For these cases, it may be necessary
to selectively re-enable RSA/SHA1 to allow connection and/or user
authentication via the HostkeyAlgorithms and PubkeyAcceptedAlgorithms
options.
= New features
* ssh(1): allow the ssh_config(5) CanonicalizePermittedCNAMEs
directive to accept a "none" argument to specify the default
behaviour.
= Bugfixes
* scp(1): when using the SFTP protocol, continue transferring files
after a transfer error occurs, better matching original scp/rcp
behaviour.
* ssh(1): fixed a number of memory leaks in multiplexing,
* ssh-keygen(1): avoid crash when using the -Y find-principals
command.
* A number of documentation and manual improvements, including
bz#3340, PR139, PR215, PR241, PR257
- Additional changes from 8.7p1 release:
= Potentially-incompatible changes
* scp(1): this release changes the behaviour of remote to remote
copies (e.g. "scp host-a:/path host-b:") to transfer through the
local host by default. This was previously available via the -3
flag. This mode avoids the need to expose credentials on the
origin hop, avoids triplicate interpretation of filenames by the
shell (by the local system, the copy origin and the destination)
and, in conjunction with the SFTP support for scp(1) mentioned
below, allows use of all authentication methods to the remote
hosts (previously, only non-interactive methods could be used).
A -R flag has been added to select the old behaviour.
* ssh(1)/sshd(8): both the client and server are now using a
stricter configuration file parser. The new parser uses more
shell-like rules for quotes, space and escape characters. It is
also more strict in rejecting configurations that include options
lacking arguments. Previously some options (e.g. DenyUsers) could
appear on a line with no subsequent arguments. This release will
reject such configurations. The new parser will also reject
configurations with unterminated quotes and multiple '='
characters after the option name.
* ssh(1): when using SSHFP DNS records for host key verification,
ssh(1) will verify all matching records instead of just those
with the specific signature type requested. This may cause host
key verification problems if stale SSHFP records of a different
or legacy signature type exist alongside other records for a
particular host. bz#3322
* ssh-keygen(1): when generating a FIDO key and specifying an
explicit attestation challenge (using -Ochallenge), the challenge
will now be hashed by the builtin security key middleware. This
removes the (undocumented) requirement that challenges be exactly
32 bytes in length and matches the expectations of libfido2.
* sshd(8): environment="..." directives in authorized_keys files are
now first-match-wins and limited to 1024 discrete environment
variable names.
= New features
* scp(1): experimental support for transfers using the SFTP protocol
as a replacement for the venerable SCP/RCP protocol that it has
traditionally used. SFTP offers more predictable filename handling
and does not require expansion of glob(3) patterns via the shell
on the remote side.
* sftp-server(8): add a protocol extension to support expansion of
~/ and ~user/ prefixed paths. This was added to support these
paths when used by scp(1) while in SFTP mode.
* ssh(1): add a ForkAfterAuthentication ssh_config(5) counterpart to
the ssh(1) -f flag. GHPR231
* ssh(1): add a StdinNull directive to ssh_config(5) that allows the
config file to do the same thing as -n does on the ssh(1) command-
line. GHPR231
* ssh(1): add a SessionType directive to ssh_config, allowing the
configuration file to offer equivalent control to the -N (no
session) and -s (subsystem) command-line flags. GHPR231
* ssh-keygen(1): allowed signers files used by ssh-keygen(1)
signatures now support listing key validity intervals alongside
they key, and ssh-keygen(1) can optionally check during signature
verification whether a specified time falls inside this interval.
This feature is intended for use by git to support signing and
verifying objects using ssh keys.
* ssh-keygen(8): support printing of the full public key in a sshsig
signature via a -Oprint-pubkey flag.
= Bugfixes
* ssh(1)/sshd(8): start time-based re-keying exactly on schedule in
the client and server mainloops. Previously the re-key timeout
could expire but re-keying would not start until a packet was sent
or received, causing a spin in select() if the connection was
quiescent.
* ssh-keygen(1): avoid Y2038 problem in printing certificate
validity lifetimes. Dates past 2^31-1 seconds since epoch were
displayed incorrectly on some platforms. bz#3329
* scp(1): allow spaces to appear in usernames for local to remote
and scp -3 remote to remote copies. bz#1164
* ssh(1)/sshd(8): remove references to ChallengeResponseAuthentication
in favour of KbdInteractiveAuthentication. The former is what was in
SSHv1, the latter is what is in SSHv2 (RFC4256) and they were
treated as somewhat but not entirely equivalent. We retain the old
name as a deprecated alias so configuration files continue to work
as well as a reference in the man page for people looking for it.
bz#3303
* ssh(1)/ssh-add(1)/ssh-keygen(1): fix decoding of X.509 subject name
when extracting a key from a PKCS#11 certificate. bz#3327
* ssh(1): restore blocking status on stdio fds before close. ssh(1)
needs file descriptors in non-blocking mode to operate but it was
not restoring the original state on exit. This could cause
problems with fds shared with other programs via the shell,
bz#3280 and GHPR246
* ssh(1)/sshd(8): switch both client and server mainloops from
select(3) to pselect(3). Avoids race conditions where a signal
may arrive immediately before select(3) and not be processed until
an event fires. bz#2158
* ssh(1): sessions started with ControlPersist were incorrectly
executing a shell when the -N (no shell) option was specified.
bz#3290
* ssh(1): check if IPQoS or TunnelDevice are already set before
overriding. Prevents values in config files from overriding values
supplied on the command line. bz#3319
* ssh(1): fix debug message when finding a private key to match a
certificate being attempted for user authentication. Previously it
would print the certificate's path, whereas it was supposed to be
showing the private key's path. GHPR247
* sshd(8): match host certificates against host public keys, not
private keys. Allows use of certificates with private keys held in
a ssh-agent. bz#3524
* ssh(1): add a workaround for a bug in OpenSSH 7.4 sshd(8), which
allows RSA/SHA2 signatures for public key authentication but fails
to advertise this correctly via SSH2_MSG_EXT_INFO. This causes
clients of these server to incorrectly match
PubkeyAcceptedAlgorithmse and potentially refuse to offer valid
keys. bz#3213
* sftp(1)/scp(1): degrade gracefully if a sftp-server offers the
limits(a)openssh.com extension but fails when the client tries to
invoke it. bz#3318
* ssh(1): allow ssh_config SetEnv to override $TERM, which is
otherwise handled specially by the protocol. Useful in ~/.ssh/config
to set TERM to something generic (e.g. "xterm" instead of
"xterm-256color") for destinations that lack terminfo entries.
* sftp-server(8): the limits(a)openssh.com extension was incorrectly
marked as an operation that writes to the filesystem, which made it
unavailable in sftp-server read-only mode. bz#3318
* ssh(1): fix SEGV in UpdateHostkeys debug() message, triggered when
the update removed more host keys than remain present.
* Many manual page fixes.
- Additional changes from 8.6p1 release:
= Security
* sshd(8): OpenSSH 8.5 introduced the LogVerbose keyword. When this
option was enabled with a set of patterns that activated logging
in code that runs in the low-privilege sandboxed sshd process, the
log messages were constructed in such a way that printf(3) format
strings could effectively be specified the low-privilege code.
= New features
* sftp-server(8): add a new limits(a)openssh.com protocol extension
that allows a client to discover various server limits, including
maximum packet size and maximum read/write length.
* sftp(1): use the new limits(a)openssh.com extension (when available)
to select better transfer lengths in the client.
* sshd(8): Add ModuliFile keyword to sshd_config to specify the
location of the "moduli" file containing the groups for DH-GEX.
* unit tests: Add a TEST_SSH_ELAPSED_TIMES environment variable to
enable printing of the elapsed time in seconds of each test.
= Bugfixes
* ssh_config(5), sshd_config(5): sync CASignatureAlgorithms lists in
manual pages with the current default. GHPR174
* ssh(1): ensure that pkcs11_del_provider() is called before exit.
GHPR234
* ssh(1), sshd(8): fix problems in string->argv conversion. Multiple
backslashes were not being dequoted correctly and quoted space in
the middle of a string was being incorrectly split. GHPR223
* ssh(1): return non-zero exit status when killed by signal; bz#3281
* sftp-server(8): increase maximum SSH2_FXP_READ to match the maximum
packet size. Also handle zero-length reads that are not explicitly
banned by the spec.
- Additional changes from 8.5p1 release:
= Security
* ssh-agent(1): fixed a double-free memory corruption that was
introduced in OpenSSH 8.2 . We treat all such memory faults as
potentially exploitable. This bug could be reached by an attacker
with access to the agent socket.
= Potentially-incompatible changes
* ssh(1), sshd(8): this release changes the first-preference signature
algorithm from ECDSA to ED25519.
* ssh(1), sshd(8): set the TOS/DSCP specified in the configuration
for interactive use prior to TCP connect. The connection phase of
the SSH session is time-sensitive and often explicitly interactive.
The ultimate interactive/bulk TOS/DSCP will be set after
authentication completes.
* ssh(1), sshd(8): remove the pre-standardization cipher
rijndael-cbc(a)lysator.liu.se. It is an alias for aes256-cbc before
it was standardized in RFC4253 (2006), has been deprecated and
disabled by default since OpenSSH 7.2 (2016) and was only briefly
documented in ssh.1 in 2001.
* ssh(1), sshd(8): update/replace the experimental post-quantum
hybrid key exchange method based on Streamlined NTRU Prime coupled
with X25519. The previous sntrup4591761x25519-sha512(a)tinyssh.org
method is replaced with sntrup761x25519-sha512(a)openssh.com.
* ssh(1): disable CheckHostIP by default. It provides insignificant
benefits while making key rotation significantly more difficult,
especially for hosts behind IP-based load-balancers.
= New features
* ssh(1): this release enables UpdateHostkeys by default subject to
some conservative preconditions:
- The key was matched in the UserKnownHostsFile (and not in the
GlobalKnownHostsFile).
- The same key does not exist under another name.
- A certificate host key is not in use.
- known_hosts contains no matching wildcard hostname pattern.
- VerifyHostKeyDNS is not enabled.
- The default UserKnownHostsFile is in use.
* ssh(1), sshd(8): add a new LogVerbose configuration directive for
that allows forcing maximum debug logging by file/function/line
pattern-lists.
* ssh(1): when prompting the user to accept a new hostkey, display
any other host names/addresses already associated with the key.
* ssh(1): allow UserKnownHostsFile=none to indicate that no
known_hosts file should be used to identify host keys.
* ssh(1): add a ssh_config KnownHostsCommand option that allows the
client to obtain known_hosts data from a command in addition to
the usual files.
* ssh(1): add a ssh_config PermitRemoteOpen option that allows the
client to restrict the destination when RemoteForward is used
with SOCKS.
* ssh(1): for FIDO keys, if a signature operation fails with a
"incorrect PIN" reason and no PIN was initially requested from the
user, then request a PIN and retry the operation. This supports
some biometric devices that fall back to requiring PIN when reading
of the biometric failed, and devices that require PINs for all
hosted credentials.
* sshd(8): implement client address-based rate-limiting via new
sshd_config(5) PerSourceMaxStartups and PerSourceNetBlockSize
directives that provide more fine-grained control on a per-origin
address basis than the global MaxStartups limit.
= Bugfixes
* ssh(1): Prefix keyboard interactive prompts with "(user@host)" to
make it easier to determine which connection they are associated
with in cases like scp -3, ProxyJump, etc. bz#3224
* sshd(8): fix sshd_config SetEnv directives located inside Match
blocks. GHPR201
* ssh(1): when requesting a FIDO token touch on stderr, inform the
user once the touch has been recorded.
* ssh(1): prevent integer overflow when ridiculously large
ConnectTimeout values are specified, capping the effective value
(for most platforms) at 24 days. bz#3229
* ssh(1): consider the ECDSA key subtype when ordering host key
algorithms in the client.
* ssh(1), sshd(8): rename the PubkeyAcceptedKeyTypes keyword to
PubkeyAcceptedAlgorithms. The previous name incorrectly suggested
that it control allowed key algorithms, when this option actually
specifies the signature algorithms that are accepted. The previous
name remains available as an alias. bz#3253
* ssh(1), sshd(8): similarly, rename HostbasedKeyTypes (ssh) and
HostbasedAcceptedKeyTypes (sshd) to HostbasedAcceptedAlgorithms.
* sftp-server(8): add missing lsetstat(a)openssh.com documentation
and advertisement in the server's SSH2_FXP_VERSION hello packet.
* ssh(1), sshd(8): more strictly enforce KEX state-machine by
banning packet types once they are received. Fixes memleak caused
by duplicate SSH2_MSG_KEX_DH_GEX_REQUEST (oss-fuzz #30078).
* sftp(1): allow the full range of UIDs/GIDs for chown/chgrp on 32bit
platforms instead of being limited by LONG_MAX. bz#3206
* Minor man page fixes (capitalization, commas, etc.) bz#3223
* sftp(1): when doing an sftp recursive upload or download of a
read-only directory, ensure that the directory is created with
write and execute permissions in the interim so that the transfer
can actually complete, then set the directory permission as the
final step. bz#3222
* ssh-keygen(1): document the -Z, check the validity of its argument
earlier and provide a better error message if it's not correct.
bz#2879
* ssh(1): ignore comments at the end of config lines in ssh_config,
similar to what we already do for sshd_config. bz#2320
* sshd_config(5): mention that DisableForwarding is valid in a
sshd_config Match block. bz3239
* sftp(1): fix incorrect sorting of "ls -ltr" under some
circumstances. bz3248.
* ssh(1), sshd(8): fix potential integer truncation of (unlikely)
timeout values. bz#3250
* ssh(1): make hostbased authentication send the signature algorithm
in its SSH2_MSG_USERAUTH_REQUEST packets instead of the key type.
This make HostbasedAcceptedAlgorithms do what it is supposed to -
filter on signature algorithm and not key type.
- Rebased patches:
* openssh-7.7p1-IPv6_X_forwarding.patch
* openssh-7.7p1-X11_trusted_forwarding.patch
* openssh-7.7p1-X_forward_with_disabled_ipv6.patch
* openssh-7.7p1-cavstest-ctr.patch
* openssh-7.7p1-cavstest-kdf.patch
* openssh-7.7p1-disable_openssl_abi_check.patch
* openssh-7.7p1-eal3.patch
* openssh-7.7p1-enable_PAM_by_default.patch
* openssh-7.7p1-fips.patch
* openssh-7.7p1-fips_checks.patch
* openssh-7.7p1-host_ident.patch
* openssh-7.7p1-hostname_changes_when_forwarding_X.patch
* openssh-7.7p1-ldap.patch
* openssh-7.7p1-no_fork-no_pid_file.patch
* openssh-7.7p1-pam_check_locks.patch
* openssh-7.7p1-pts_names_formatting.patch
* openssh-7.7p1-remove_xauth_cookies_on_exit.patch
* openssh-7.7p1-seccomp_ipc_flock.patch
* openssh-7.7p1-seccomp_stat.patch
* openssh-7.7p1-send_locale.patch
* openssh-7.7p1-sftp_force_permissions.patch
* openssh-7.7p1-sftp_print_diagnostic_messages.patch
* openssh-7.7p1-systemd-notify.patch
* openssh-7.9p1-keygen-preserve-perms.patch
* openssh-7.9p1-revert-new-qos-defaults.patch
* openssh-8.0p1-gssapi-keyex.patch
* openssh-8.1p1-audit.patch
* openssh-8.1p1-seccomp-clock_gettime64.patch
* openssh-8.1p1-seccomp-clock_nanosleep.patch
* openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
* openssh-8.1p1-use-openssl-kdf.patch
* openssh-8.4p1-vendordir.patch
* openssh-fips-ensure-approved-moduli.patch
* openssh-link-with-sk.patch
* openssh-reenable-dh-group14-sha1-default.patch
* openssh-whitelist-syscalls.patch
- Removed openssh-fix-ssh-copy-id.patch (fixed upstream).
- openssh.keyring: rotated to new key from https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/RELEASE_KEY.asc
- sshd-gen-keys-start:
- only source sysconfig file if it exists.
- create /etc/ssh if it does not exists.
Required for image based installation/updates.
==== patterns-gnome ====
Subpackages: patterns-gnome-gnome_basic patterns-gnome-gnome_basis
- Drop gnome-power-manager Recommends: Package is dormant upstream
and on its way to be replaced by new features inside of
gnome-control-center.
==== patterns-microos ====
Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-base-microdnf patterns-microos-base-packagekit patterns-microos-base-zypper patterns-microos-basesystem patterns-microos-cloud patterns-microos-cockpit patterns-microos-defaults patterns-microos-desktop-common patterns-microos-desktop-gnome patterns-microos-desktop-kde patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-ra_agent patterns-microos-ra_verifier patterns-microos-selinux patterns-microos-sssd_ldap
- Add xdg-desktop-portal-gnome to gnome pattern
- Drop gnome-power-manager Requires: Package is dormant upstream
and on it's way to be replaced by new features inside of
gnome-control-center.
==== polkit-default-privs ====
Version update (1550+20210818.b0c41fd -> 1550+20211008.9751669)
- drop backward compatibility symlink in /etc/polkit-default-privs.standard.
rpmlint 2.0 is now in Factory and the check there directly uses the profile
in /usr/etc/polkit-default-privs/profiles/standard.
- drop polkit-whitelisting sub-package. This is now handled in rpmlint 2.0
internally.
- Update to version 1550+20211008.9751669:
* whitelist power-profiles-daemon actions (bsc#1189900)
* cleanup: remove polkit-rules-whitelist.json
==== pulseaudio ====
Subpackages: libpulse-mainloop-glib0 libpulse0
- Make system-user-pulse noarch
- Split sysusers.d file to separate package as needed by brltty
(bsc#1191465)
==== xwayland ====
- Specfile cleanup
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
glibc
haproxy (2.4.4+git0.acb1d0bea -> 2.4.7+git0.b5e51a5e2)
hwinfo (21.76 -> 21.77)
kubernetes1.21
libx86emu (3.2 -> 3.3)
libzypp (17.28.4 -> 17.28.5)
open-iscsi
openssh (8.4p1 -> 8.8p1)
patterns-microos
=== Details ===
==== glibc ====
Subpackages: glibc-locale-base
- ld-show-auxv-colon.patch: elf: Fix missing colon in LD_SHOW_AUXV output
(BZ #282539
- x86-string-control-test.patch: x86-64: Use testl to check
__x86_string_control
- pthread-kill-fail-after-exit.patch: nptl: pthread_kill, pthread_cancel
should not fail after exit (BZ #19193)
- pthread-kill-race-thread-exit.patch: nptl: Fix race between pthread_kill
and thread exit (BZ #12889)
- getcwd-attribute-access.patch: posix: Fix attribute access mode on
getcwd (BZ #27476)
- pthread-kill-return-esrch.patch: nptl: pthread_kill needs to return
ESRCH for old programs (BZ #19193)
- pthread-mutexattr-getrobust-np-type.patch: nptl: Fix type of
pthread_mutexattr_getrobust_np, pthread_mutexattr_setrobust_np (BZ
[#28036])
- setxid-deadlock-blocked-signals.patch: nptl: Avoid setxid deadlock with
blocked signals in thread exit (BZ #28361)
- pthread-kill-send-specific-thread.patch: nptl: pthread_kill must send
signals to a specific thread (BZ #28407)
- sysconf-nprocessors-affinity.patch: linux: Revert the use of
sched_getaffinity on get_nproc (BZ #28310)
- iconv-charmap-close-output.patch: renamed from
icon-charmap-close-output.patch
==== haproxy ====
Version update (2.4.4+git0.acb1d0bea -> 2.4.7+git0.b5e51a5e2)
- Update to version 2.4.7+git0.b5e51a5e2:
* [RELEASE] Released version 2.4.7
* BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule
- Update to version 2.4.6+git0.d83fd76a1:
* [RELEASE] Released version 2.4.6
* BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release
- Update to version 2.4.5+git0.e74a1b34b:
* [RELEASE] Released version 2.4.5
* MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue()
* BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input
* BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing
* MINOR: arg: Be able to forbid unresolved args when building an argument list
* BUG/MAJOR: lua: use task_wakeup() to properly run a task once
* BUG/MEDIUM: lua: fix wakeup condition from sleep()
* MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options
* DOC: peers: fix doc "enable" statement on "peers" sections
* BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers"
* MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf
* BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary
* MINOR: htx: Add a function to know if the free space wraps
* MINOR: htx: Add an HTX flag to know when a message is fragmented
* MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv()
* BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM
* BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data
* BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer
* BUG/MINOR: stats: use refcount to protect dynamic server on dump
* MINOR: server: return the next srv instance on free_server
* BUG/MINOR: server: do not use refcount in free_server in stopping mode
* MINOR: global: define MODE_STOPPING
* MINOR: server: implement a refcount for dynamic servers
* BUG/MINOR: http-ana: increment internal_errors counter on response error
* BUG/MINOR: h1-htx: Fix a typo when request parser is reset
* BUG/MEDIUM: leastconn: fix rare possibility of divide by zero
* BUG/MINOR: server: allow 'enable health' only if check configured
* BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl
* BUILD: halog: fix a -Wundef warning on non-glibc systems
* BUILD: compiler: fixed a missing test on defined(__GNUC__)
* BUILD: fix dragonfly build again on __read_mostly
* BUG/MINOR: vars: do not talk about global section in CLI errors for set-var
* BUG/MINOR: vars: truncate the variable name in error reports about scope.
* BUG/MINOR: vars: properly set the argument parsing context in the expression
* MINOR: sample: add missing ARGC_ entries
* BUG/MINOR: vars: improve accuracy of the rules used to check expression validity
* BUILD: tools: properly guard __GLIBC__ with defined()
* BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL
* BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER
* BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef
* IMPORT: slz: silence a build warning with -Wundef
* BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef
* BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef
* BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING
* MINOR: proc: setting the process to produce a core dump on FreeBSD.
* MINOR: tools: add FreeBSD support to get_exec_path()
* BUILD: tools: get the absolute path of the current binary on NetBSD.
* BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set
* BUG/MINOR: cli/payload: do not search for args inside payload
* BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc
* BUG/MINOR: connection: prevent null deref on mux cleanup task allocation
* DOC: management: certificate files must be sanitized before injection
* BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check
* BUG/MAJOR: mux-h1: Don't eval input data if an error was reported
* MINOR: pools: use mallinfo2() when available instead of mallinfo()
* MINOR: pools: automatically disable malloc_trim() with external allocators
* CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools()
* BUG/MINOR: compat: make sure __WORDSIZE is always defined
* BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached
* CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload
* MINOR: htx: Skip headers with no value when adding a header list to a message
* BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload
* BUG/MINOR: systemd: ExecStartPre must use -Ws
* BUG/MINOR: filters: Set right FLT_END analyser depending on channel
* BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set
* BUG/MEDIUM: http-ana: Reset channels analysers when returning an error
* BUG/MINOR: stream: Don't release a stream if FLT_END is still registered
* BUG/MINOR: lua: Don't yield in channel.append() and channel.set()
* BUG/MINOR: lua: Yield in channel functions only if lua context can yield
* MINOR: lua: Add a flag on lua context to know the yield capability at run time
==== hwinfo ====
Version update (21.76 -> 21.77)
- merge gh#openSUSE/hwinfo#105
- Use license file from gnu.org
- Fix spelling
- Add missing final newline
- Trim excess whitespace
- Simple maintenance improvements
- 21.77
==== kubernetes1.21 ====
- Bump disk requirements in _constraints to 12GB. Data based on the
last successful build consumed storage.
==== libx86emu ====
Version update (3.2 -> 3.3)
- merge gh#wfeldt/libx86emu#34
- Migrate CI to GitHub Actions
- 3.3
==== libzypp ====
Version update (17.28.4 -> 17.28.5)
- Downloader does not respect checkExistsOnly flag (bsc#1190712)
A missing check causes zyppng::Downloader to always download full
files even if the checkExistsOnly flag is set. This patch adds
the missing logic.
- Fix kernel-*-livepatch removal in purge-kernels (bsc#1190815)
The kernel-*-livepatch packages are supposed to serve as a stable
handle for the ephemeral kernel livepatch packages. See
FATE#320268 for details. As part of the kernel live patching
ecosystem, kernel-*-livepatch packages should not block the
purge-kernels step.
- version 17.28.5 (22)
==== open-iscsi ====
Subpackages: iscsiuio libopeniscsiusr0_2_0
- Fix possible systemd cycle by adding an "obsoletes" for
the old libopeniscsiusr for older versions.
==== openssh ====
Version update (8.4p1 -> 8.8p1)
Subpackages: openssh-clients openssh-common openssh-server
- Version update to 8.8p1:
= Security
* sshd(8) from OpenSSH 6.2 through 8.7 failed to correctly initialise
supplemental groups when executing an AuthorizedKeysCommand or
AuthorizedPrincipalsCommand, where a AuthorizedKeysCommandUser or
AuthorizedPrincipalsCommandUser directive has been set to run the
command as a different user. Instead these commands would inherit
the groups that sshd(8) was started with.
Depending on system configuration, inherited groups may allow
AuthorizedKeysCommand/AuthorizedPrincipalsCommand helper programs to
gain unintended privilege.
Neither AuthorizedKeysCommand nor AuthorizedPrincipalsCommand are
enabled by default in sshd_config(5).
= Potentially-incompatible changes
* This release disables RSA signatures using the SHA-1 hash algorithm
by default. This change has been made as the SHA-1 hash algorithm is
cryptographically broken, and it is possible to create chosen-prefix
hash collisions for <USD$50K.
For most users, this change should be invisible and there is
no need to replace ssh-rsa keys. OpenSSH has supported RFC8332
RSA/SHA-256/512 signatures since release 7.2 and existing ssh-rsa keys
will automatically use the stronger algorithm where possible.
Incompatibility is more likely when connecting to older SSH
implementations that have not been upgraded or have not closely tracked
improvements in the SSH protocol. For these cases, it may be necessary
to selectively re-enable RSA/SHA1 to allow connection and/or user
authentication via the HostkeyAlgorithms and PubkeyAcceptedAlgorithms
options.
= New features
* ssh(1): allow the ssh_config(5) CanonicalizePermittedCNAMEs
directive to accept a "none" argument to specify the default
behaviour.
= Bugfixes
* scp(1): when using the SFTP protocol, continue transferring files
after a transfer error occurs, better matching original scp/rcp
behaviour.
* ssh(1): fixed a number of memory leaks in multiplexing,
* ssh-keygen(1): avoid crash when using the -Y find-principals
command.
* A number of documentation and manual improvements, including
bz#3340, PR139, PR215, PR241, PR257
- Additional changes from 8.7p1 release:
= Potentially-incompatible changes
* scp(1): this release changes the behaviour of remote to remote
copies (e.g. "scp host-a:/path host-b:") to transfer through the
local host by default. This was previously available via the -3
flag. This mode avoids the need to expose credentials on the
origin hop, avoids triplicate interpretation of filenames by the
shell (by the local system, the copy origin and the destination)
and, in conjunction with the SFTP support for scp(1) mentioned
below, allows use of all authentication methods to the remote
hosts (previously, only non-interactive methods could be used).
A -R flag has been added to select the old behaviour.
* ssh(1)/sshd(8): both the client and server are now using a
stricter configuration file parser. The new parser uses more
shell-like rules for quotes, space and escape characters. It is
also more strict in rejecting configurations that include options
lacking arguments. Previously some options (e.g. DenyUsers) could
appear on a line with no subsequent arguments. This release will
reject such configurations. The new parser will also reject
configurations with unterminated quotes and multiple '='
characters after the option name.
* ssh(1): when using SSHFP DNS records for host key verification,
ssh(1) will verify all matching records instead of just those
with the specific signature type requested. This may cause host
key verification problems if stale SSHFP records of a different
or legacy signature type exist alongside other records for a
particular host. bz#3322
* ssh-keygen(1): when generating a FIDO key and specifying an
explicit attestation challenge (using -Ochallenge), the challenge
will now be hashed by the builtin security key middleware. This
removes the (undocumented) requirement that challenges be exactly
32 bytes in length and matches the expectations of libfido2.
* sshd(8): environment="..." directives in authorized_keys files are
now first-match-wins and limited to 1024 discrete environment
variable names.
= New features
* scp(1): experimental support for transfers using the SFTP protocol
as a replacement for the venerable SCP/RCP protocol that it has
traditionally used. SFTP offers more predictable filename handling
and does not require expansion of glob(3) patterns via the shell
on the remote side.
* sftp-server(8): add a protocol extension to support expansion of
~/ and ~user/ prefixed paths. This was added to support these
paths when used by scp(1) while in SFTP mode.
* ssh(1): add a ForkAfterAuthentication ssh_config(5) counterpart to
the ssh(1) -f flag. GHPR231
* ssh(1): add a StdinNull directive to ssh_config(5) that allows the
config file to do the same thing as -n does on the ssh(1) command-
line. GHPR231
* ssh(1): add a SessionType directive to ssh_config, allowing the
configuration file to offer equivalent control to the -N (no
session) and -s (subsystem) command-line flags. GHPR231
* ssh-keygen(1): allowed signers files used by ssh-keygen(1)
signatures now support listing key validity intervals alongside
they key, and ssh-keygen(1) can optionally check during signature
verification whether a specified time falls inside this interval.
This feature is intended for use by git to support signing and
verifying objects using ssh keys.
* ssh-keygen(8): support printing of the full public key in a sshsig
signature via a -Oprint-pubkey flag.
= Bugfixes
* ssh(1)/sshd(8): start time-based re-keying exactly on schedule in
the client and server mainloops. Previously the re-key timeout
could expire but re-keying would not start until a packet was sent
or received, causing a spin in select() if the connection was
quiescent.
* ssh-keygen(1): avoid Y2038 problem in printing certificate
validity lifetimes. Dates past 2^31-1 seconds since epoch were
displayed incorrectly on some platforms. bz#3329
* scp(1): allow spaces to appear in usernames for local to remote
and scp -3 remote to remote copies. bz#1164
* ssh(1)/sshd(8): remove references to ChallengeResponseAuthentication
in favour of KbdInteractiveAuthentication. The former is what was in
SSHv1, the latter is what is in SSHv2 (RFC4256) and they were
treated as somewhat but not entirely equivalent. We retain the old
name as a deprecated alias so configuration files continue to work
as well as a reference in the man page for people looking for it.
bz#3303
* ssh(1)/ssh-add(1)/ssh-keygen(1): fix decoding of X.509 subject name
when extracting a key from a PKCS#11 certificate. bz#3327
* ssh(1): restore blocking status on stdio fds before close. ssh(1)
needs file descriptors in non-blocking mode to operate but it was
not restoring the original state on exit. This could cause
problems with fds shared with other programs via the shell,
bz#3280 and GHPR246
* ssh(1)/sshd(8): switch both client and server mainloops from
select(3) to pselect(3). Avoids race conditions where a signal
may arrive immediately before select(3) and not be processed until
an event fires. bz#2158
* ssh(1): sessions started with ControlPersist were incorrectly
executing a shell when the -N (no shell) option was specified.
bz#3290
* ssh(1): check if IPQoS or TunnelDevice are already set before
overriding. Prevents values in config files from overriding values
supplied on the command line. bz#3319
* ssh(1): fix debug message when finding a private key to match a
certificate being attempted for user authentication. Previously it
would print the certificate's path, whereas it was supposed to be
showing the private key's path. GHPR247
* sshd(8): match host certificates against host public keys, not
private keys. Allows use of certificates with private keys held in
a ssh-agent. bz#3524
* ssh(1): add a workaround for a bug in OpenSSH 7.4 sshd(8), which
allows RSA/SHA2 signatures for public key authentication but fails
to advertise this correctly via SSH2_MSG_EXT_INFO. This causes
clients of these server to incorrectly match
PubkeyAcceptedAlgorithmse and potentially refuse to offer valid
keys. bz#3213
* sftp(1)/scp(1): degrade gracefully if a sftp-server offers the
limits(a)openssh.com extension but fails when the client tries to
invoke it. bz#3318
* ssh(1): allow ssh_config SetEnv to override $TERM, which is
otherwise handled specially by the protocol. Useful in ~/.ssh/config
to set TERM to something generic (e.g. "xterm" instead of
"xterm-256color") for destinations that lack terminfo entries.
* sftp-server(8): the limits(a)openssh.com extension was incorrectly
marked as an operation that writes to the filesystem, which made it
unavailable in sftp-server read-only mode. bz#3318
* ssh(1): fix SEGV in UpdateHostkeys debug() message, triggered when
the update removed more host keys than remain present.
* Many manual page fixes.
- Additional changes from 8.6p1 release:
= Security
* sshd(8): OpenSSH 8.5 introduced the LogVerbose keyword. When this
option was enabled with a set of patterns that activated logging
in code that runs in the low-privilege sandboxed sshd process, the
log messages were constructed in such a way that printf(3) format
strings could effectively be specified the low-privilege code.
= New features
* sftp-server(8): add a new limits(a)openssh.com protocol extension
that allows a client to discover various server limits, including
maximum packet size and maximum read/write length.
* sftp(1): use the new limits(a)openssh.com extension (when available)
to select better transfer lengths in the client.
* sshd(8): Add ModuliFile keyword to sshd_config to specify the
location of the "moduli" file containing the groups for DH-GEX.
* unit tests: Add a TEST_SSH_ELAPSED_TIMES environment variable to
enable printing of the elapsed time in seconds of each test.
= Bugfixes
* ssh_config(5), sshd_config(5): sync CASignatureAlgorithms lists in
manual pages with the current default. GHPR174
* ssh(1): ensure that pkcs11_del_provider() is called before exit.
GHPR234
* ssh(1), sshd(8): fix problems in string->argv conversion. Multiple
backslashes were not being dequoted correctly and quoted space in
the middle of a string was being incorrectly split. GHPR223
* ssh(1): return non-zero exit status when killed by signal; bz#3281
* sftp-server(8): increase maximum SSH2_FXP_READ to match the maximum
packet size. Also handle zero-length reads that are not explicitly
banned by the spec.
- Additional changes from 8.5p1 release:
= Security
* ssh-agent(1): fixed a double-free memory corruption that was
introduced in OpenSSH 8.2 . We treat all such memory faults as
potentially exploitable. This bug could be reached by an attacker
with access to the agent socket.
= Potentially-incompatible changes
* ssh(1), sshd(8): this release changes the first-preference signature
algorithm from ECDSA to ED25519.
* ssh(1), sshd(8): set the TOS/DSCP specified in the configuration
for interactive use prior to TCP connect. The connection phase of
the SSH session is time-sensitive and often explicitly interactive.
The ultimate interactive/bulk TOS/DSCP will be set after
authentication completes.
* ssh(1), sshd(8): remove the pre-standardization cipher
rijndael-cbc(a)lysator.liu.se. It is an alias for aes256-cbc before
it was standardized in RFC4253 (2006), has been deprecated and
disabled by default since OpenSSH 7.2 (2016) and was only briefly
documented in ssh.1 in 2001.
* ssh(1), sshd(8): update/replace the experimental post-quantum
hybrid key exchange method based on Streamlined NTRU Prime coupled
with X25519. The previous sntrup4591761x25519-sha512(a)tinyssh.org
method is replaced with sntrup761x25519-sha512(a)openssh.com.
* ssh(1): disable CheckHostIP by default. It provides insignificant
benefits while making key rotation significantly more difficult,
especially for hosts behind IP-based load-balancers.
= New features
* ssh(1): this release enables UpdateHostkeys by default subject to
some conservative preconditions:
- The key was matched in the UserKnownHostsFile (and not in the
GlobalKnownHostsFile).
- The same key does not exist under another name.
- A certificate host key is not in use.
- known_hosts contains no matching wildcard hostname pattern.
- VerifyHostKeyDNS is not enabled.
- The default UserKnownHostsFile is in use.
* ssh(1), sshd(8): add a new LogVerbose configuration directive for
that allows forcing maximum debug logging by file/function/line
pattern-lists.
* ssh(1): when prompting the user to accept a new hostkey, display
any other host names/addresses already associated with the key.
* ssh(1): allow UserKnownHostsFile=none to indicate that no
known_hosts file should be used to identify host keys.
* ssh(1): add a ssh_config KnownHostsCommand option that allows the
client to obtain known_hosts data from a command in addition to
the usual files.
* ssh(1): add a ssh_config PermitRemoteOpen option that allows the
client to restrict the destination when RemoteForward is used
with SOCKS.
* ssh(1): for FIDO keys, if a signature operation fails with a
"incorrect PIN" reason and no PIN was initially requested from the
user, then request a PIN and retry the operation. This supports
some biometric devices that fall back to requiring PIN when reading
of the biometric failed, and devices that require PINs for all
hosted credentials.
* sshd(8): implement client address-based rate-limiting via new
sshd_config(5) PerSourceMaxStartups and PerSourceNetBlockSize
directives that provide more fine-grained control on a per-origin
address basis than the global MaxStartups limit.
= Bugfixes
* ssh(1): Prefix keyboard interactive prompts with "(user@host)" to
make it easier to determine which connection they are associated
with in cases like scp -3, ProxyJump, etc. bz#3224
* sshd(8): fix sshd_config SetEnv directives located inside Match
blocks. GHPR201
* ssh(1): when requesting a FIDO token touch on stderr, inform the
user once the touch has been recorded.
* ssh(1): prevent integer overflow when ridiculously large
ConnectTimeout values are specified, capping the effective value
(for most platforms) at 24 days. bz#3229
* ssh(1): consider the ECDSA key subtype when ordering host key
algorithms in the client.
* ssh(1), sshd(8): rename the PubkeyAcceptedKeyTypes keyword to
PubkeyAcceptedAlgorithms. The previous name incorrectly suggested
that it control allowed key algorithms, when this option actually
specifies the signature algorithms that are accepted. The previous
name remains available as an alias. bz#3253
* ssh(1), sshd(8): similarly, rename HostbasedKeyTypes (ssh) and
HostbasedAcceptedKeyTypes (sshd) to HostbasedAcceptedAlgorithms.
* sftp-server(8): add missing lsetstat(a)openssh.com documentation
and advertisement in the server's SSH2_FXP_VERSION hello packet.
* ssh(1), sshd(8): more strictly enforce KEX state-machine by
banning packet types once they are received. Fixes memleak caused
by duplicate SSH2_MSG_KEX_DH_GEX_REQUEST (oss-fuzz #30078).
* sftp(1): allow the full range of UIDs/GIDs for chown/chgrp on 32bit
platforms instead of being limited by LONG_MAX. bz#3206
* Minor man page fixes (capitalization, commas, etc.) bz#3223
* sftp(1): when doing an sftp recursive upload or download of a
read-only directory, ensure that the directory is created with
write and execute permissions in the interim so that the transfer
can actually complete, then set the directory permission as the
final step. bz#3222
* ssh-keygen(1): document the -Z, check the validity of its argument
earlier and provide a better error message if it's not correct.
bz#2879
* ssh(1): ignore comments at the end of config lines in ssh_config,
similar to what we already do for sshd_config. bz#2320
* sshd_config(5): mention that DisableForwarding is valid in a
sshd_config Match block. bz3239
* sftp(1): fix incorrect sorting of "ls -ltr" under some
circumstances. bz3248.
* ssh(1), sshd(8): fix potential integer truncation of (unlikely)
timeout values. bz#3250
* ssh(1): make hostbased authentication send the signature algorithm
in its SSH2_MSG_USERAUTH_REQUEST packets instead of the key type.
This make HostbasedAcceptedAlgorithms do what it is supposed to -
filter on signature algorithm and not key type.
- Rebased patches:
* openssh-7.7p1-IPv6_X_forwarding.patch
* openssh-7.7p1-X11_trusted_forwarding.patch
* openssh-7.7p1-X_forward_with_disabled_ipv6.patch
* openssh-7.7p1-cavstest-ctr.patch
* openssh-7.7p1-cavstest-kdf.patch
* openssh-7.7p1-disable_openssl_abi_check.patch
* openssh-7.7p1-eal3.patch
* openssh-7.7p1-enable_PAM_by_default.patch
* openssh-7.7p1-fips.patch
* openssh-7.7p1-fips_checks.patch
* openssh-7.7p1-host_ident.patch
* openssh-7.7p1-hostname_changes_when_forwarding_X.patch
* openssh-7.7p1-ldap.patch
* openssh-7.7p1-no_fork-no_pid_file.patch
* openssh-7.7p1-pam_check_locks.patch
* openssh-7.7p1-pts_names_formatting.patch
* openssh-7.7p1-remove_xauth_cookies_on_exit.patch
* openssh-7.7p1-seccomp_ipc_flock.patch
* openssh-7.7p1-seccomp_stat.patch
* openssh-7.7p1-send_locale.patch
* openssh-7.7p1-sftp_force_permissions.patch
* openssh-7.7p1-sftp_print_diagnostic_messages.patch
* openssh-7.7p1-systemd-notify.patch
* openssh-7.9p1-keygen-preserve-perms.patch
* openssh-7.9p1-revert-new-qos-defaults.patch
* openssh-8.0p1-gssapi-keyex.patch
* openssh-8.1p1-audit.patch
* openssh-8.1p1-seccomp-clock_gettime64.patch
* openssh-8.1p1-seccomp-clock_nanosleep.patch
* openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
* openssh-8.1p1-use-openssl-kdf.patch
* openssh-8.4p1-vendordir.patch
* openssh-fips-ensure-approved-moduli.patch
* openssh-link-with-sk.patch
* openssh-reenable-dh-group14-sha1-default.patch
* openssh-whitelist-syscalls.patch
- Removed openssh-fix-ssh-copy-id.patch (fixed upstream).
- openssh.keyring: rotated to new key from https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/RELEASE_KEY.asc
- sshd-gen-keys-start:
- only source sysconfig file if it exists.
- create /etc/ssh if it does not exists.
Required for image based installation/updates.
==== patterns-microos ====
Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-base-microdnf patterns-microos-base-packagekit patterns-microos-base-zypper patterns-microos-basesystem patterns-microos-cloud patterns-microos-cockpit patterns-microos-defaults patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-ra_agent patterns-microos-ra_verifier patterns-microos-selinux patterns-microos-sssd_ldap
- Add xdg-desktop-portal-gnome to gnome pattern
- Drop gnome-power-manager Requires: Package is dormant upstream
and on it's way to be replaced by new features inside of
gnome-control-center.
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the aarch64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
Mesa
Mesa-drivers
bash
ca-certificates-mozilla (2.50 -> 2.52)
cogl
e2fsprogs
elfutils
filesystem
gawk
gtk4
ldb (2.3.0 -> 2.4.0)
libsolv (0.7.19 -> 0.7.20)
libsoup2
lz4
mozilla-nss (3.69.1 -> 3.70)
samba (4.14.6+git.182.2205d5224e3 -> 4.15.0+git.185.378416e547c)
tar
timezone (2021a -> 2021c)
transactional-update (3.5.5 -> 3.5.6)
u-boot-rpiarm64 (2021.07 -> 2021.10)
=== Details ===
==== Mesa ====
Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1
- Fix build with LLVM 13:
* U_gallivm-add-new-wrapper-around-Module.patch
* U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch
==== Mesa-drivers ====
Subpackages: Mesa-dri Mesa-gallium
- Fix build with LLVM 13:
* U_gallivm-add-new-wrapper-around-Module.patch
* U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch
==== bash ====
- Install bash_builtins manpage under the correct name
==== ca-certificates-mozilla ====
Version update (2.50 -> 2.52)
- updated to 2.50 state of the Mozilla NSS Certificate store (bsc#1188006)
- Added CAs:
+ HARICA Client ECC Root CA 2021
+ HARICA Client RSA Root CA 2021
+ HARICA TLS ECC Root CA 2021
+ HARICA TLS RSA Root CA 2021
+ TunTrust Root CA
- remove the DST_Root_CA_X3.pem trust, as it expires september 30th 2021.
(bsc#1190858)
==== cogl ====
Subpackages: libcogl-pango20 libcogl20
- Add 2bd3cbed45d633fb15625d58e6b7cb8721b0ba98.patch: cogl-gles2:
Fix undefined references. Following this, add libtool
BuildRequires and pass autoreconf call before configure as the
patch touches the buildsystem.
- Add patches from fedora that should have gone upstream:
+ 0001-egl-Use-eglGetPlatformDisplay-not-eglGetDisplay.patch:
egl: Use eglGetPlatformDisplay not eglGetDisplay.
+ 0002-add-GL_ARB_shader_texture_lod-support.patch: Add
GL_ARB_shader_texture_lod support.
+ 0003-texture-support-copy_sub_image.patch: texture: Support
copy_sub_image.
==== e2fsprogs ====
Subpackages: libcom_err2 libext2fs2
- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
version 0 quota format (jsc#SLE-17360)
quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
files (jsc#SLE-17360)
e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
trash user limits when processing orphan list (jsc#SLE-17360)
debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
commands (jsc#SLE-17360)
quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
with them
==== elfutils ====
Subpackages: libasm1 libdw1 libelf1
- Enhance license fields: all the libraries actually have a different
license to the tools. While the tools are GPL-3.0-or-later, the
libraries are (LGPL-3.0-or-later OR GPL-2.0-or-later)
SLE bug (for tracking the above) bsc#1191310
==== filesystem ====
- don't perform UsrMerge if ZYPP_SINGLE_RPMTRANS is set. Rely on
file trigger compat mode in that case and do it posttrans
(boo#1189788).
- generic %ghost handling instead of hardcoding
==== gawk ====
- remove update-alternatives support, as on linux systems GNU software
(i.e. gawk in this case) is usually considered the default implementation.
- use %make macros
==== gtk4 ====
Subpackages: gtk4-schema libgtk-4-1 typelib-1_0-Gtk-4_0
- Fix a syntax error in the gtk4_immodule_postun RPM macro
==== ldb ====
Version update (2.3.0 -> 2.4.0)
- Update to version 2.4.0
+ Improve calculate_popt_array_length()
+ Use C99 initializers for builtin_popt_options[]
+ pyldb: Fix Message.items() for a message containing elements
+ pyldb: Add test for Message.items()
+ tests: Use ldbsearch '--scope instead of '-s'
+ pyldb: fix a typo
+ Change page size of guidindexpackv1.ldb
+ Use a 1MiB lmdb so the test also passes on aarch64 CentOS stream
+ attrib_handler casefold: simplify space dropping
+ fix ldb_comparison_fold off-by-one overrun
+ CVE-2020-27840: pytests: move Dn.validate test to ldb
+ CVE-2020-27840 ldb_dn: avoid head corruption in ldb_dn_explode
+ CVE-2021-20277 ldb/attrib_handlers casefold: stay in bounds
+ CVE-2021-20277 ldb tests: ldb_match tests with extra spaces
+ improve comments for ldb_module_connect_backend()
+ test/ldb_tdb: correct introductory comments
+ ldb.h: remove undefined async_ctx function signatures
+ correct comments in attrib_handers val_to_int64
+ dn tests use cmocka print functions
+ ldb_match: remove redundant check
+ add tests for ldb_wildcard_compare
+ ldb_match: trailing chunk must match end of string
+ pyldb: catch potential overflow error in py_timestring
+ ldb: remove some 'if PY3's in tests
+ Add missing break in switch statement
==== libsolv ====
Version update (0.7.19 -> 0.7.20)
- fix misparsing of '&' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20
- Disable python2 usage on suse_version >= 1550 by default (still
possible to use osc build --with=python).
==== libsoup2 ====
Subpackages: libsoup-2_4-1 typelib-1_0-Soup-2_4
- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)
==== lz4 ====
- version 1.9.3 fixes also CVE-2021-3520 [bsc#1185438]
==== mozilla-nss ====
Version update (3.69.1 -> 3.70)
Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs
- update to NSS 3.70
* bmo#1726022 - Update test case to verify fix.
* bmo#1714579 - Explicitly disable downgrade check in TlsConnectStreamTls13.EchOuterWith12Max
* bmo#1714579 - Explicitly disable downgrade check in TlsConnectTest.DisableFalseStartOnFallback
* bmo#1681975 - Avoid using a lookup table in nssb64d.
* bmo#1724629 - Use HW accelerated SHA2 on AArch64 Big Endian.
* bmo#1714579 - Change default value of enableHelloDowngradeCheck to true.
* bmo#1726022 - Cache additional PBE entries.
* bmo#1709750 - Read HPKE vectors from official JSON.
- required for Firefox 93
==== samba ====
Version update (4.14.6+git.182.2205d5224e3 -> 4.15.0+git.185.378416e547c)
Subpackages: libdcerpc-binding0 libdcerpc0 libndr-krb5pac0 libndr-nbt0 libndr-standard0 libnetapi0 libsamba-credentials1 libsamba-errors0 libsamba-hostconfig0 libsamba-passdb0 libsamba-util0 libsamdb0 libsmbclient0 libsmbconf0 libsmbldap2 libtevent-util0 libwbclient0 samba-client samba-libs
- Adjust spec to use pam macros; (bsc#1191046).
- Adjust spec for size
* allow some Recommends instead Requires to be configured
for cifs-utils, samba-libs-python3 & samba-gpupdate;
(bsc#1182847).
* remove fam, undocumented and unneeded.
- Add missing build dependency on bison when building with the
embedded Heimdal Kerberos
- Update to 4.15.0
* Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10
* VFS layer modernized.
* Add the ability to set allow/deny lists for zone transfer clients
in Bind DLZ plugin
* Server multi-channel support no longer experimental
* Improved command line user experience, unifying the options in
different commands
* Winbindd no longer scans trusted domains on startup and will use
enterprise principals by default.
* The net utility is now able to support the offline domain join feature
* New options for 'samba-tool dns zoneoptions' for aging control
and to mark old records as static or dynamic
* DNS tombstones are now deleted as appropriate and use a consistent
timestamp format
* The 'samba-tool dns update' command validates and rejects now malformed
IPv4 and IPv6 addresses
* The 'samba-tool domain backup' command correctly takes out locks
against concurrent modification during backup when using the LMDB
backend
* TruACL support has been removed
* NIS support has been removed
- Update to 4.14.7
* smbd panic on force-close share during offload write; (bso#14769);
* smbd should support copy_file_range() for FSCTL_SRV_COPYCHUNK;
(bso#12033);
* Fix returned attributes on fake quota file handle and avoid hitting
the VFS; (bso#14731);
* vfs_shadow_copy2 fix inodes not correctly updating inode numbers;
(bso#14756);
* Fix build on Solaris; (bso#14774);
* Make dos attributes available for unreadable files; (bso#14654);
* Work around special SMB2 READ response behavior of NetApp Ontap
7.3.7; (bso#14607);
* Start the SMB encryption as soon as possible; (bso#14793);
==== tar ====
- The following issues have already been fixed in this package but
weren't previously mentioned in the changes file:
* bsc#1181131
* bsc#1120610
==== timezone ====
Version update (2021a -> 2021c)
- timezone update 2021c:
* Revert almost all of 2021b's changes to the 'backward' file
* Fix a bug in 'zic -b fat' that caused old timestamps to be
mishandled in 32-bit-only readers
- timezone update 2021b:
* Jordan now starts DST on February's last Thursday.
* Samoa no longer observes DST.
* Move some backward-compatibility links to 'backward'.
* Rename Pacific/Enderbury to Pacific/Kanton.
* Correct many pre-1993 transitions in Malawi, Portugal, etc.
* zic now creates each output file or link atomically.
* zic -L no longer omits the POSIX TZ string in its output.
* zic fixes for truncation and leap second table expiration.
* zic now follows POSIX for TZ strings using all-year DST.
* Fix some localtime crashes and bugs in obscure cases.
* zdump -v now outputs more-useful boundary cases.
* tzfile.5 better matches a draft successor to RFC 8536.
==== transactional-update ====
Version update (3.5.5 -> 3.5.6)
Subpackages: dracut-transactional-update libtukit0 transactional-update-zypp-config tukit
- Version 3.5.6
- tukit: Add S/390 bootloader support [bsc#1189807]
- t-u: support purge-kernels with t-u patch [bsc#1190788]
==== u-boot-rpiarm64 ====
Version update (2021.07 -> 2021.10)
Subpackages: u-boot-rpiarm64-doc
- Update to 2021.10
Fix Grub loading slowdown when connecting USB keyboard (bsc#1171222).
Enable BTRFS for Risc-V.
Patch queue updated from https://github.com/openSUSE/u-boot.git tumbleweed-2021.10
* Patches added:
0013-riscv-enable-CMD_BTRFS.patch
0014-Disable-timer-check-in-file-loading.patch
- Update to 2021.10-rc5
- Patch queue updated from https://github.com/openSUSE/u-boot.git tumbleweed-2021.10
* Patches dropped (upstreamed):
0013-configs-rpi-Enable-SMBIOS-sysinfo-d.patch
- Add hack to allow enabling CONFIG_CMD_BTRFS on riscv64
- Add sifiveunmatched flavor
- Update to 2021.10-rc4
- Patch queue updated from https://github.com/openSUSE/u-boot.git tumbleweed-2021.10
* Patches dropped:
0014-btrfs-Use-default-subvolume-as-file.patch
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the aarch64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=3&version=T…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
bash
ca-certificates-mozilla (2.50 -> 2.52)
e2fsprogs
elfutils
filesystem
gawk
ldb (2.3.0 -> 2.4.0)
libsolv (0.7.19 -> 0.7.20)
libsoup2
lz4
tar
timezone (2021a -> 2021c)
transactional-update (3.5.5 -> 3.5.6)
u-boot-rpiarm64 (2021.07 -> 2021.10)
=== Details ===
==== bash ====
- Install bash_builtins manpage under the correct name
==== ca-certificates-mozilla ====
Version update (2.50 -> 2.52)
- updated to 2.50 state of the Mozilla NSS Certificate store (bsc#1188006)
- Added CAs:
+ HARICA Client ECC Root CA 2021
+ HARICA Client RSA Root CA 2021
+ HARICA TLS ECC Root CA 2021
+ HARICA TLS RSA Root CA 2021
+ TunTrust Root CA
- remove the DST_Root_CA_X3.pem trust, as it expires september 30th 2021.
(bsc#1190858)
==== e2fsprogs ====
Subpackages: libcom_err2 libext2fs2
- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
version 0 quota format (jsc#SLE-17360)
quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
files (jsc#SLE-17360)
e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
trash user limits when processing orphan list (jsc#SLE-17360)
debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
commands (jsc#SLE-17360)
quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
with them
==== elfutils ====
Subpackages: libasm1 libdw1 libelf1
- Enhance license fields: all the libraries actually have a different
license to the tools. While the tools are GPL-3.0-or-later, the
libraries are (LGPL-3.0-or-later OR GPL-2.0-or-later)
SLE bug (for tracking the above) bsc#1191310
==== filesystem ====
- don't perform UsrMerge if ZYPP_SINGLE_RPMTRANS is set. Rely on
file trigger compat mode in that case and do it posttrans
(boo#1189788).
- generic %ghost handling instead of hardcoding
==== gawk ====
- remove update-alternatives support, as on linux systems GNU software
(i.e. gawk in this case) is usually considered the default implementation.
- use %make macros
==== ldb ====
Version update (2.3.0 -> 2.4.0)
- Update to version 2.4.0
+ Improve calculate_popt_array_length()
+ Use C99 initializers for builtin_popt_options[]
+ pyldb: Fix Message.items() for a message containing elements
+ pyldb: Add test for Message.items()
+ tests: Use ldbsearch '--scope instead of '-s'
+ pyldb: fix a typo
+ Change page size of guidindexpackv1.ldb
+ Use a 1MiB lmdb so the test also passes on aarch64 CentOS stream
+ attrib_handler casefold: simplify space dropping
+ fix ldb_comparison_fold off-by-one overrun
+ CVE-2020-27840: pytests: move Dn.validate test to ldb
+ CVE-2020-27840 ldb_dn: avoid head corruption in ldb_dn_explode
+ CVE-2021-20277 ldb/attrib_handlers casefold: stay in bounds
+ CVE-2021-20277 ldb tests: ldb_match tests with extra spaces
+ improve comments for ldb_module_connect_backend()
+ test/ldb_tdb: correct introductory comments
+ ldb.h: remove undefined async_ctx function signatures
+ correct comments in attrib_handers val_to_int64
+ dn tests use cmocka print functions
+ ldb_match: remove redundant check
+ add tests for ldb_wildcard_compare
+ ldb_match: trailing chunk must match end of string
+ pyldb: catch potential overflow error in py_timestring
+ ldb: remove some 'if PY3's in tests
+ Add missing break in switch statement
==== libsolv ====
Version update (0.7.19 -> 0.7.20)
- fix misparsing of '&' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20
- Disable python2 usage on suse_version >= 1550 by default (still
possible to use osc build --with=python).
==== libsoup2 ====
- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)
==== lz4 ====
- version 1.9.3 fixes also CVE-2021-3520 [bsc#1185438]
==== tar ====
- The following issues have already been fixed in this package but
weren't previously mentioned in the changes file:
* bsc#1181131
* bsc#1120610
==== timezone ====
Version update (2021a -> 2021c)
- timezone update 2021c:
* Revert almost all of 2021b's changes to the 'backward' file
* Fix a bug in 'zic -b fat' that caused old timestamps to be
mishandled in 32-bit-only readers
- timezone update 2021b:
* Jordan now starts DST on February's last Thursday.
* Samoa no longer observes DST.
* Move some backward-compatibility links to 'backward'.
* Rename Pacific/Enderbury to Pacific/Kanton.
* Correct many pre-1993 transitions in Malawi, Portugal, etc.
* zic now creates each output file or link atomically.
* zic -L no longer omits the POSIX TZ string in its output.
* zic fixes for truncation and leap second table expiration.
* zic now follows POSIX for TZ strings using all-year DST.
* Fix some localtime crashes and bugs in obscure cases.
* zdump -v now outputs more-useful boundary cases.
* tzfile.5 better matches a draft successor to RFC 8536.
==== transactional-update ====
Version update (3.5.5 -> 3.5.6)
Subpackages: dracut-transactional-update libtukit0 transactional-update-zypp-config tukit
- Version 3.5.6
- tukit: Add S/390 bootloader support [bsc#1189807]
- t-u: support purge-kernels with t-u patch [bsc#1190788]
==== u-boot-rpiarm64 ====
Version update (2021.07 -> 2021.10)
Subpackages: u-boot-rpiarm64-doc
- Update to 2021.10
Fix Grub loading slowdown when connecting USB keyboard (bsc#1171222).
Enable BTRFS for Risc-V.
Patch queue updated from https://github.com/openSUSE/u-boot.git tumbleweed-2021.10
* Patches added:
0013-riscv-enable-CMD_BTRFS.patch
0014-Disable-timer-check-in-file-loading.patch
- Update to 2021.10-rc5
- Patch queue updated from https://github.com/openSUSE/u-boot.git tumbleweed-2021.10
* Patches dropped (upstreamed):
0013-configs-rpi-Enable-SMBIOS-sysinfo-d.patch
- Add hack to allow enabling CONFIG_CMD_BTRFS on riscv64
- Add sifiveunmatched flavor
- Update to 2021.10-rc4
- Patch queue updated from https://github.com/openSUSE/u-boot.git tumbleweed-2021.10
* Patches dropped:
0014-btrfs-Use-default-subvolume-as-file.patch
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
Mesa
bash
ca-certificates-mozilla (2.50 -> 2.52)
cogl
e2fsprogs
elfutils
filesystem
gawk
gtk4
kernel-default-base (5.14.6 -> 5.14.9)
kernel-source (5.14.6 -> 5.14.9)
ldb (2.3.0 -> 2.4.0)
libcap (2.51 -> 2.59)
libjpeg-turbo
libsolv (0.7.19 -> 0.7.20)
libsoup2
llvm12
lz4
mozilla-nss (3.69.1 -> 3.70)
samba (4.14.6+git.182.2205d5224e3 -> 4.15.0+git.185.378416e547c)
suse-module-tools (16.0.10+7 -> 16.0.11)
tar
timezone (2021a -> 2021c)
transactional-update (3.5.5 -> 3.5.6)
=== Details ===
==== Mesa ====
Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1
- Fix build with LLVM 13:
* U_gallivm-add-new-wrapper-around-Module.patch
* U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch
==== bash ====
- Install bash_builtins manpage under the correct name
==== ca-certificates-mozilla ====
Version update (2.50 -> 2.52)
- updated to 2.50 state of the Mozilla NSS Certificate store (bsc#1188006)
- Added CAs:
+ HARICA Client ECC Root CA 2021
+ HARICA Client RSA Root CA 2021
+ HARICA TLS ECC Root CA 2021
+ HARICA TLS RSA Root CA 2021
+ TunTrust Root CA
- remove the DST_Root_CA_X3.pem trust, as it expires september 30th 2021.
(bsc#1190858)
==== cogl ====
Subpackages: libcogl-pango20 libcogl20
- Add 2bd3cbed45d633fb15625d58e6b7cb8721b0ba98.patch: cogl-gles2:
Fix undefined references. Following this, add libtool
BuildRequires and pass autoreconf call before configure as the
patch touches the buildsystem.
- Add patches from fedora that should have gone upstream:
+ 0001-egl-Use-eglGetPlatformDisplay-not-eglGetDisplay.patch:
egl: Use eglGetPlatformDisplay not eglGetDisplay.
+ 0002-add-GL_ARB_shader_texture_lod-support.patch: Add
GL_ARB_shader_texture_lod support.
+ 0003-texture-support-copy_sub_image.patch: texture: Support
copy_sub_image.
==== e2fsprogs ====
Subpackages: libcom_err2 libext2fs2
- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
version 0 quota format (jsc#SLE-17360)
quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
files (jsc#SLE-17360)
e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
trash user limits when processing orphan list (jsc#SLE-17360)
debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
commands (jsc#SLE-17360)
quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
with them
==== elfutils ====
Subpackages: libasm1 libdw1 libelf1
- Enhance license fields: all the libraries actually have a different
license to the tools. While the tools are GPL-3.0-or-later, the
libraries are (LGPL-3.0-or-later OR GPL-2.0-or-later)
SLE bug (for tracking the above) bsc#1191310
==== filesystem ====
- don't perform UsrMerge if ZYPP_SINGLE_RPMTRANS is set. Rely on
file trigger compat mode in that case and do it posttrans
(boo#1189788).
- generic %ghost handling instead of hardcoding
==== gawk ====
- remove update-alternatives support, as on linux systems GNU software
(i.e. gawk in this case) is usually considered the default implementation.
- use %make macros
==== gtk4 ====
Subpackages: gtk4-schema libgtk-4-1 typelib-1_0-Gtk-4_0
- Fix a syntax error in the gtk4_immodule_postun RPM macro
==== kernel-default-base ====
Version update (5.14.6 -> 5.14.9)
- Add nls_utf8 module (boo#1190797)
==== kernel-source ====
Version update (5.14.6 -> 5.14.9)
- ALSA: usb-audio: Restrict rates for the shared clocks
(bsc#1190418).
- commit d0ace7f
- Update
patches.kernel.org/5.14.9-147-Revert-drm-vc4-hdmi-runtime-PM-changes.patch
(bsc#1012628 bsc#1190469).
- Delete patches.suse/drm-vc4-hdmi-Fix-HPD-GPIO-detection.patch.
The former superseded the latter.
- commit 2bc4ba2
- Linux 5.14.9 (bsc#1012628).
- mm, hwpoison: add is_free_buddy_page() in HWPoisonHandlable()
(bsc#1012628).
- ocfs2: drop acl cache for directories too (bsc#1012628).
- mm/debug: sync up MR_CONTIG_RANGE and MR_LONGTERM_PIN
(bsc#1012628).
- mm: fix uninitialized use in overcommit_policy_handler
(bsc#1012628).
- usb: gadget: r8a66597: fix a loop in set_feature()
(bsc#1012628).
- usb: gadget: u_audio: EP-OUT bInterval in fback frequency
(bsc#1012628).
- usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave
(bsc#1012628).
- usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA
(bsc#1012628).
- usb: musb: tusb6010: uninitialized data in
tusb_fifo_write_unaligned() (bsc#1012628).
- cifs: Not to defer close on file when lock is set (bsc#1012628).
- cifs: Fix soft lockup during fsstress (bsc#1012628).
- cifs: fix incorrect check for null pointer in header_assemble
(bsc#1012628).
- xen/x86: fix PV trap handling on secondary processors
(bsc#1012628).
- usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c
(bsc#1012628).
- USB: serial: cp210x: add ID for GW Instek GDM-834x Digital
Multimeter (bsc#1012628).
- USB: cdc-acm: fix minor-number release (bsc#1012628).
- Revert "USB: bcma: Add a check for devm_gpiod_get"
(bsc#1012628).
- binder: make sure fd closes complete (bsc#1012628).
- binder: fix freeze race (bsc#1012628).
- staging: greybus: uart: fix tty use after free (bsc#1012628).
- usb: isp1760: do not sleep in field register poll (bsc#1012628).
- Re-enable UAS for LaCie Rugged USB3-FW with fk quirk
(bsc#1012628).
- usb: dwc3: core: balance phy init and exit (bsc#1012628).
- usb: cdns3: fix race condition before setting doorbell
(bsc#1012628).
- usb: core: hcd: Add support for deferring roothub registration
(bsc#1012628).
- USB: serial: mos7840: remove duplicated 0xac24 device ID
(bsc#1012628).
- USB: serial: option: add Telit LN920 compositions (bsc#1012628).
- USB: serial: option: remove duplicate USB device ID
(bsc#1012628).
- USB: serial: option: add device id for Foxconn T99W265
(bsc#1012628).
- misc: bcm-vk: fix tty registration race (bsc#1012628).
- misc: genwqe: Fixes DMA mask setting (bsc#1012628).
- mcb: fix error handling in mcb_alloc_bus() (bsc#1012628).
- KVM: rseq: Update rseq when processing NOTIFY_RESUME on xfer
to KVM guest (bsc#1012628).
- erofs: fix up erofs_lookup tracepoint (bsc#1012628).
- nexthop: Fix division by zero while replacing a resilient group
(bsc#1012628).
- btrfs: prevent __btrfs_dump_space_info() to underflow its free
space (bsc#1012628).
- xhci: Set HCD flag to defer primary roothub registration
(bsc#1012628).
- serial: 8250: 8250_omap: Fix RX_LVL register offset
(bsc#1012628).
- serial: mvebu-uart: fix driver's tx_empty callback
(bsc#1012628).
- scsi: sd_zbc: Ensure buffer size is aligned to SECTOR_SIZE
(bsc#1012628).
- drm/amd/pm: Update intermediate power state for SI
(bsc#1012628).
- net: hso: fix muxed tty registration (bsc#1012628).
- platform/x86: amd-pmc: Increase the response register timeout
(bsc#1012628).
- arm64: Restore forced disabling of KPTI on ThunderX
(bsc#1012628).
- arm64: Mitigate MTE issues with str{n}cmp() (bsc#1012628).
- comedi: Fix memory leak in compat_insnlist() (bsc#1012628).
- regulator: qcom-rpmh-regulator: fix pm8009-1 ldo7 resource name
(bsc#1012628).
- afs: Fix page leak (bsc#1012628).
- afs: Fix incorrect triggering of sillyrename on 3rd-party
invalidation (bsc#1012628).
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS
server (bsc#1012628).
- afs: Fix updating of i_blocks on file/dir extension
(bsc#1012628).
- platform/x86/intel: punit_ipc: Drop wrong use of ACPI_PTR()
(bsc#1012628).
- regulator: max14577: Revert "regulator: max14577: Add proper
module aliases strings" (bsc#1012628).
- NLM: Fix svcxdr_encode_owner() (bsc#1012628).
- virtio-net: fix pages leaking when building skb in big mode
(bsc#1012628).
- enetc: Fix illegal access when reading affinity_hint
(bsc#1012628).
- enetc: Fix uninitialized struct dim_sample field usage
(bsc#1012628).
- net: dsa: tear down devlink port regions when tearing down
the devlink port on error (bsc#1012628).
- net: bgmac-bcma: handle deferred probe error due to mac-address
(bsc#1012628).
- napi: fix race inside napi_enable (bsc#1012628).
- bnxt_en: Fix TX timeout when TX ring size is set to the smallest
(bsc#1012628).
- net: hns3: fix change RSS 'hfunc' ineffective issue
(bsc#1012628).
- net: hns3: fix inconsistent vf id print (bsc#1012628).
- net: hns3: fix misuse vf id and vport id in some logs
(bsc#1012628).
- net: hns3: check queue id range before using (bsc#1012628).
- net: hns3: check vlan id before using it (bsc#1012628).
- net: hns3: fix a return value error in hclge_get_reset_status()
(bsc#1012628).
- net/smc: add missing error check in smc_clc_prfx_set()
(bsc#1012628).
- net/smc: fix 'workqueue leaked lock' in smc_conn_abort_work
(bsc#1012628).
- net: dsa: fix dsa_tree_setup error path (bsc#1012628).
- net: dsa: don't allocate the slave_mii_bus using devres
(bsc#1012628).
- net: dsa: realtek: register the MDIO bus under devres
(bsc#1012628).
- platform/x86: dell: fix DELL_WMI_PRIVACY dependencies & build
error (bsc#1012628).
- kselftest/arm64: signal: Add SVE to the set of features we
can check for (bsc#1012628).
- kselftest/arm64: signal: Skip tests if required features are
missing (bsc#1012628).
- spi: Revert modalias changes (bsc#1012628).
- s390/qeth: fix NULL deref in qeth_clear_working_pool_list()
(bsc#1012628).
- gpiolib: acpi: Make set-debounce-timeout failures non fatal
(bsc#1012628).
- gpio: uniphier: Fix void functions to remove return value
(bsc#1012628).
- qed: rdma - don't wait for resources under hw error recovery
flow (bsc#1012628).
- mptcp: ensure tx skbs always have the MPTCP ext (bsc#1012628).
- nexthop: Fix memory leaks in nexthop notification chain
listeners (bsc#1012628).
- nfc: st-nci: Add SPI ID matching DT compatible (bsc#1012628).
- net: ethernet: mtk_eth_soc: avoid creating duplicate offload
entries (bsc#1012628).
- net: mscc: ocelot: fix forwarding from BLOCKING ports remaining
enabled (bsc#1012628).
- net/mlx4_en: Don't allow aRFS for encapsulated packets
(bsc#1012628).
- atlantic: Fix issue in the pm resume flow (bsc#1012628).
- drm/amdkfd: map SVM range with correct access permission
(bsc#1012628).
- drm/amdkfd: fix dma mapping leaking warning (bsc#1012628).
- scsi: iscsi: Adjust iface sysfs attr detection (bsc#1012628).
- scsi: target: Fix the pgr/alua_support_store functions
(bsc#1012628).
- tty: synclink_gt: rename a conflicting function name
(bsc#1012628).
- fpga: machxo2-spi: Return an error on failure (bsc#1012628).
- fpga: machxo2-spi: Fix missing error code in
machxo2_write_complete() (bsc#1012628).
- x86/fault: Fix wrong signal when vsyscall fails with pkey
(bsc#1012628).
- nvme-tcp: fix incorrect h2cdata pdu offset accounting
(bsc#1012628).
- nvme: keep ctrl->namespaces ordered (bsc#1012628).
- thermal/core: Potential buffer overflow in
thermal_build_list_of_policies() (bsc#1012628).
- cifs: fix a sign extension bug (bsc#1012628).
- scsi: sd_zbc: Support disks with more than 2**32 logical blocks
(bsc#1012628).
- scsi: ufs: Revert "Utilize Transfer Request List Completion
Notification Register" (bsc#1012628).
- scsi: ufs: Retry aborted SCSI commands instead of completing
these successfully (bsc#1012628).
- scsi: ufs: core: Unbreak the reset handler (bsc#1012628).
- scsi: qla2xxx: Restore initiator in dual mode (bsc#1012628).
- scsi: lpfc: Use correct scnprintf() limit (bsc#1012628).
- irqchip/goldfish-pic: Select GENERIC_IRQ_CHIP to fix build
(bsc#1012628).
- irqchip/gic-v3-its: Fix potential VPE leak on error
(bsc#1012628).
- md: fix a lock order reversal in md_alloc (bsc#1012628).
- x86/asm: Fix SETZ size enqcmds() build failure (bsc#1012628).
- io_uring: fix race between poll completion and cancel_hash
insertion (bsc#1012628).
- io_uring: fix missing set of EPOLLONESHOT for CQ ring overflow
(bsc#1012628).
- io_uring: put provided buffer meta data under memcg accounting
(bsc#1012628).
- io_uring: don't punt files update to io-wq unconditionally
(bsc#1012628).
- blktrace: Fix uaf in blk_trace access after removing by sysfs
(bsc#1012628).
- net: phylink: Update SFP selected interface on advertising
changes (bsc#1012628).
- net: macb: fix use after free on rmmod (bsc#1012628).
- net: stmmac: allow CSR clock of 300MHz (bsc#1012628).
- blk-mq: avoid to iterate over stale request (bsc#1012628).
- m68k: Double cast io functions to unsigned long (bsc#1012628).
- ipv6: delay fib6_sernum increase in fib6_add (bsc#1012628).
- dma-debug: prevent an error message from causing runtime
problems (bsc#1012628).
- cpufreq: intel_pstate: Override parameters if HWP forced by BIOS
(bsc#1012628).
- bpf: Add oversize check before call kvcalloc() (bsc#1012628).
- xen/balloon: use a kernel thread instead a workqueue
(bsc#1012628).
- nvme-multipath: fix ANA state updates when a namespace is not
present (bsc#1012628).
- nvme-rdma: destroy cm id before destroy qp to avoid use after
free (bsc#1012628).
- sparc32: page align size in arch_dma_alloc (bsc#1012628).
- amd/display: downgrade validation failure log level
(bsc#1012628).
- drm/ttm: fix type mismatch error on sparc64 (bsc#1012628).
- block: check if a profile is actually registered in
blk_integrity_unregister (bsc#1012628).
- block: flush the integrity workqueue in blk_integrity_unregister
(bsc#1012628).
- blk-cgroup: fix UAF by grabbing blkcg lock before destroying
blkg pd (bsc#1012628).
- compiler.h: Introduce absolute_pointer macro (bsc#1012628).
- net: i825xx: Use absolute_pointer for memcpy from fixed memory
location (bsc#1012628).
- sparc: avoid stringop-overread errors (bsc#1012628).
- qnx4: avoid stringop-overread errors (bsc#1012628).
- parisc: Use absolute_pointer() to define PAGE0 (bsc#1012628).
- drm/amdkfd: make needs_pcie_atomics FW-version dependent
(bsc#1012628).
- drm/amd/display: Fix unstable HPCP compliance on Chrome Barcelo
(bsc#1012628).
- drm/amd/display: Link training retry fix for abort case
(bsc#1012628).
- amd/display: enable panel orientation quirks (bsc#1012628).
- arm64: Mark __stack_chk_guard as __ro_after_init (bsc#1012628).
- alpha: Declare virt_to_phys and virt_to_bus parameter as
pointer to volatile (bsc#1012628).
- net: 6pack: Fix tx timeout and slot time (bsc#1012628).
- spi: Fix tegra20 build with CONFIG_PM=n (bsc#1012628).
- libperf evsel: Make use of FD robust (bsc#1012628).
- Revert drm/vc4 hdmi runtime PM changes (bsc#1012628).
- EDAC/synopsys: Fix wrong value type assignment for edac_mode
(bsc#1012628).
- EDAC/dmc520: Assign the proper type to dimm->edac_mode
(bsc#1012628).
- x86/setup: Call early_reserve_memory() earlier (bsc#1012628).
- thermal/drivers/int340x: Do not set a wrong tcc offset on resume
(bsc#1012628).
- irqchip/armada-370-xp: Fix ack/eoi breakage (bsc#1012628).
- arm64: add MTE supported check to thread switching and syscall
entry/exit (bsc#1012628).
- USB: serial: cp210x: fix dropped characters with CP2102
(bsc#1012628).
- software node: balance refcount for managed software nodes
(bsc#1012628).
- xen/balloon: fix balloon kthread freezing (bsc#1012628).
- qnx4: work around gcc false positive warning bug (bsc#1012628).
- usb: gadget: f_uac2: Add missing companion descriptor for
feedback EP (bsc#1012628).
- usb: gadget: f_uac2: Populate SS descriptors' wBytesPerInterval
(bsc#1012628).
- Refresh patches.suse/drm-vc4-hdmi-Fix-HPD-GPIO-detection.patch.
- commit 85f5318
- arm64: Update config files. (bsc#1185927)
Set PINCTRL_ZYNQMP as build-in.
- commit 4ae263c
- blacklist.conf: add idxd commit
- commit 06dbf6b
- nvmet: fix a width vs precision bug in
nvmet_subsys_attr_serial_show() (git-fixes).
- commit fef4ef0
- Linux 5.14.8 (bsc#1012628).
- drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV (bsc#1012628).
- selinux,smack: fix subjective/objective credential use mixups
(bsc#1012628).
- io_uring: fix off-by-one in BUILD_BUG_ON check of
__REQ_F_LAST_BIT (bsc#1012628).
- cifs: properly invalidate cached root handle when closing it
(bsc#1012628).
- sched/idle: Make the idle timer expire in hard interrupt context
(bsc#1012628).
- rtc: rx8010: select REGMAP_I2C (bsc#1012628).
- blk-mq: allow 4x BLK_MAX_REQUEST_COUNT at blk_plug for
multiple_queues (bsc#1012628).
- blk-throttle: fix UAF by deleteing timer in blk_throtl_exit()
(bsc#1012628).
- block: genhd: don't call blkdev_show() with major_names_lock
held (bsc#1012628).
- nvmet: fixup buffer overrun in nvmet_subsys_attr_serial()
(bsc#1012628).
- pwm: stm32-lp: Don't modify HW state in .remove() callback
(bsc#1012628).
- pwm: rockchip: Don't modify HW state in .remove() callback
(bsc#1012628).
- pwm: img: Don't modify HW state in .remove() callback
(bsc#1012628).
- habanalabs: cannot sleep while holding spinlock (bsc#1012628).
- habanalabs: add "in device creation" status (bsc#1012628).
- habanalabs: fix mmu node address resolution in debugfs
(bsc#1012628).
- habanalabs: add validity check for event ID received from F/W
(bsc#1012628).
- drm/amdgpu: fix fdinfo race with process exit (bsc#1012628).
- drm/amd/display: Fix memory leak reported by coverity
(bsc#1012628).
- drm/amdgpu: Fixes to returning VBIOS RAS EEPROM address
(bsc#1012628).
- habanalabs: fix nullifying of destroyed mmu pgt pool
(bsc#1012628).
- thermal/drivers/rcar_gen3_thermal: Store TSC id as unsigned int
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group
(bsc#1012628).
- nilfs2: fix NULL pointer in nilfs_##name##_attr_release
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_create_device_group
(bsc#1012628).
- btrfs: fix lockdep warning while mounting sprout fs
(bsc#1012628).
- btrfs: delay blkdev_put until after the device remove
(bsc#1012628).
- btrfs: update the bdev time directly when closing (bsc#1012628).
- s390/unwind: use current_frame_address() to unwind current task
(bsc#1012628).
- ceph: lockdep annotations for try_nonblocking_invalidate
(bsc#1012628).
- ceph: remove the capsnaps when removing caps (bsc#1012628).
- ceph: request Fw caps before updating the mtime in
ceph_write_iter (bsc#1012628).
- ceph: fix memory leak on decode error in ceph_handle_caps
(bsc#1012628).
- ACPI: PM: s2idle: Run both AMD and Microsoft methods if both
are supported (bsc#1012628).
- ASoC: audio-graph: respawn Platform Support (bsc#1012628).
- s390: add kmemleak annotation in stack_alloc() (bsc#1012628).
- dmaengine: xilinx_dma: Set DMA mask for coherent APIs
(bsc#1012628).
- dmaengine: ioat: depends on !UML (bsc#1012628).
- cxl/pci: Introduce cdevm_file_operations (bsc#1012628).
- cxl: Move cxl_core to new directory (bsc#1012628).
- dmaengine: sprd: Add missing MODULE_DEVICE_TABLE (bsc#1012628).
- dmaengine: idxd: depends on !UML (bsc#1012628).
- riscv: dts: microchip: mpfs-icicle: Fix serial console
(bsc#1012628).
- of: property: Disable fw_devlink DT support for X86
(bsc#1012628).
- drm/ttm: Fix a deadlock if the target BO is not idle during swap
(bsc#1012628).
- arm64: mm: limit linear region to 51 bits for KVM in nVHE mode
(bsc#1012628).
- iommu/vt-d: Fix a deadlock in intel_svm_drain_prq()
(bsc#1012628).
- iommu/vt-d: Fix PASID leak in intel_svm_unbind_mm()
(bsc#1012628).
- iommu/amd: Relocate GAMSup check to early_enable_iommus
(bsc#1012628).
- parisc: Move pci_dev_is_behind_card_dino to where it is used
(bsc#1012628).
- dma-buf: DMABUF_DEBUG should depend on DMA_SHARED_BUFFER
(bsc#1012628).
- Update config files.
- dma-buf: DMABUF_MOVE_NOTIFY should depend on DMA_SHARED_BUFFER
(bsc#1012628).
- Update config files.
- drivers: base: cacheinfo: Get rid of
DEFINE_SMP_CALL_CACHE_FUNCTION() (bsc#1012628).
- drm/amdgpu: Disable PCIE_DPM on Intel RKL Platform
(bsc#1012628).
- thermal/core: Fix thermal_cooling_device_register() prototype
(bsc#1012628).
- tracing/boot: Fix to loop on only subkeys (bsc#1012628).
- tools/bootconfig: Fix tracing_on option checking in
ftrace2bconf.sh (bsc#1012628).
- Kconfig.debug: drop selecting non-existing
HARDLOCKUP_DETECTOR_ARCH (bsc#1012628).
- init: move usermodehelper_enable() to populate_rootfs()
(bsc#1012628).
- math: RATIONAL_KUNIT_TEST should depend on RATIONAL instead
of selecting it (bsc#1012628).
- SUNRPC: don't pause on incomplete allocation (bsc#1012628).
- s390/entry: make oklabel within CHKSTG macro local
(bsc#1012628).
- platform/chrome: cros_ec_trace: Fix format warnings
(bsc#1012628).
- platform/chrome: sensorhub: Add trace events for sample
(bsc#1012628).
- dmaengine: idxd: clear block on fault flag when clear wq
(bsc#1012628).
- dmaengine: idxd: fix abort status check (bsc#1012628).
- dmaengine: idxd: fix wq slot allocation index check
(bsc#1012628).
- dmaengine: idxd: have command status always set (bsc#1012628).
- dmanegine: idxd: cleanup all device related bits after disabling
device (bsc#1012628).
- pwm: mxs: Don't modify HW state in .probe() after the PWM chip
was registered (bsc#1012628).
- pwm: lpc32xx: Don't modify HW state in .probe() after the PWM
chip was registered (bsc#1012628).
- ceph: cancel delayed work instead of flushing on mdsc teardown
(bsc#1012628).
- thermal/drivers/qcom/spmi-adc-tm5: Don't abort probing if a
sensor is not used (bsc#1012628).
- PM: sleep: core: Avoid setting power.must_resume to false
(bsc#1012628).
- profiling: fix shift-out-of-bounds bugs (bsc#1012628).
- nilfs2: use refcount_dec_and_lock() to fix potential UAF
(bsc#1012628).
- prctl: allow to setup brk for et_dyn executables (bsc#1012628).
- pwm: ab8500: Fix register offset calculation to not depend on
probe order (bsc#1012628).
- 9p/trans_virtio: Remove sysfs file on probe failure
(bsc#1012628).
- thermal/drivers/exynos: Fix an error code in exynos_tmu_probe()
(bsc#1012628).
- n64cart: fix return value check in n64cart_probe()
(bsc#1012628).
- staging: rtl8723bs: fix wpa_set_auth_algs() function
(bsc#1012628).
- perf tools: Allow build-id with trailing zeros (bsc#1012628).
- perf symbol: Look for ImageBase in PE file to compute .text
offset (bsc#1012628).
- perf test: Fix bpf test sample mismatch reporting (bsc#1012628).
- dmaengine: acpi: Avoid comparison GSI with Linux vIRQ
(bsc#1012628).
- RDMA/mlx5: Fix xlt_chunk_align calculation (bsc#1012628).
- RDMA/hns: Enable stash feature of HIP09 (bsc#1012628).
- um: virtio_uml: fix memory leak on init failures (bsc#1012628).
- coredump: fix memleak in dump_vma_snapshot() (bsc#1012628).
- um: fix stub location calculation (bsc#1012628).
- staging: rtl8192u: Fix bitwise vs logical operator in
TranslateRxSignalStuff819xUsb() (bsc#1012628).
- console: consume APC, DM, DCS (bsc#1012628).
- PCI: aardvark: Fix reporting CRS value (bsc#1012628).
- PCI: pci-bridge-emul: Add PCIe Root Capabilities Register
(bsc#1012628).
- commit 94242c6
- kernel-binary.spec: suse-kernel-rpm-scriptlets required for uninstall as
well.
Fixes: e98096d5cf85 ("rpm: Abolish scritplet templating (bsc#1189841).")
- commit e082fbf
- Linux 5.14.7 (bsc#1012628).
- net: stmmac: fix MAC not working when system resume back with
WoL active (bsc#1012628).
- io_uring: ensure symmetry in handling iter types in
loop_rw_iter() (bsc#1012628).
- swiotlb-xen: avoid double free (bsc#1012628).
- swiotlb-xen: fix late init retry (bsc#1012628).
- xen: reset legacy rtc flag for PV domU (bsc#1012628).
- xen: fix usage of pmd_populate in mremap for pv guests
(bsc#1012628).
- bnx2x: Fix enabling network interfaces without VFs
(bsc#1012628).
- arm64/sve: Use correct size when reinitialising SVE state
(bsc#1012628).
- PM: base: power: don't try to use non-existing RTC for storing
data (bsc#1012628).
- PCI: Add AMD GPU multi-function power dependencies
(bsc#1012628).
- drm/amd/display: Get backlight from PWM if DMCU is not
initialized (bsc#1012628).
- drm/amd/display: dsc mst 2 4K displays go dark with 2 lane HBR3
(bsc#1012628).
- drm/amd/display: Fix white screen page fault for gpuvm
(bsc#1012628).
- drm/amd/pm: fix runpm hang when amdgpu loaded prior to sound
driver (bsc#1012628).
- drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10 (bsc#1012628).
- drm/amdgpu: use IS_ERR for debugfs APIs (bsc#1012628).
- drm/amdgpu: fix use after free during BO move (bsc#1012628).
- drm/amdgpu: add amdgpu_amdkfd_resume_iommu (bsc#1012628).
- drm/amdgpu: move iommu_resume before ip init/resume
(bsc#1012628).
- drm/amd/pm: fix the issue of uploading powerplay table
(bsc#1012628).
- drm/amdkfd: separate kfd_iommu_resume from kfd_resume
(bsc#1012628).
- drm/radeon: pass drm dev radeon_agp_head_init directly
(bsc#1012628).
- io_uring: allow retry for O_NONBLOCK if async is supported
(bsc#1012628).
- drm/etnaviv: return context from etnaviv_iommu_context_get
(bsc#1012628).
- drm/etnaviv: put submit prev MMU context when it exists
(bsc#1012628).
- drm/etnaviv: stop abusing mmu_context as FE running marker
(bsc#1012628).
- drm/etnaviv: keep MMU context across runtime suspend/resume
(bsc#1012628).
- drm/etnaviv: exec and MMU state is lost when resetting the GPU
(bsc#1012628).
- drm/etnaviv: fix MMU context leak on GPU reset (bsc#1012628).
- drm/etnaviv: reference MMU context when setting up hardware
state (bsc#1012628).
- drm/etnaviv: add missing MMU context put when reaping MMU
mapping (bsc#1012628).
- s390/sclp: fix Secure-IPL facility detection (bsc#1012628).
- net: qrtr: revert check in qrtr_endpoint_post() (bsc#1012628).
- x86/pat: Pass valid address to sanitize_phys() (bsc#1012628).
- x86/mm: Fix kern_addr_valid() to cope with existing but not
present entries (bsc#1012628).
- x86/mce: Avoid infinite loop for copy from user recovery
(bsc#1012628).
- net: remove the unnecessary check in cipso_v4_doi_free
(bsc#1012628).
- net/{mlx5|nfp|bnxt}: Remove unnecessary RTNL lock assert
(bsc#1012628).
- net-caif: avoid user-triggerable WARN_ON(1) (bsc#1012628).
- ptp: dp83640: don't define PAGE0 (bsc#1012628).
- dccp: don't duplicate ccid when cloning dccp sock (bsc#1012628).
- net/l2tp: Fix reference count leak in l2tp_udp_recv_core
(bsc#1012628).
- r6040: Restore MDIO clock frequency after MAC reset
(bsc#1012628).
- tipc: increase timeout in tipc_sk_enqueue() (bsc#1012628).
- drm/rockchip: cdn-dp-core: Make cdn_dp_core_resume
__maybe_unused (bsc#1012628).
- rtc: cmos: Disable irq around direct invocation of
cmos_interrupt() (bsc#1012628).
- drm/i915/dp: return proper DPRX link training result
(bsc#1012628).
- perf machine: Initialize srcline string member in add_location
struct (bsc#1012628).
- net/mlx5: FWTrace, cancel work on alloc pd error flow
(bsc#1012628).
- net/mlx5: Fix potential sleeping in atomic context
(bsc#1012628).
- net: stmmac: fix system hang caused by eee_ctrl_timer during
suspend/resume (bsc#1012628).
- igc: fix tunnel offloading (bsc#1012628).
- nvme-tcp: fix io_work priority inversion (bsc#1012628).
- powerpc/64s: system call scv tabort fix for corrupt irq
soft-mask state (bsc#1012628).
- events: Reuse value read using READ_ONCE instead of re-reading
it (bsc#1012628).
- net: ipa: initialize all filter table slots (bsc#1012628).
- gen_compile_commands: fix missing 'sys' package (bsc#1012628).
- vhost_net: fix OoB on sendmsg() failure (bsc#1012628).
- net/af_unix: fix a data-race in unix_dgram_poll (bsc#1012628).
- net: dsa: destroy the phylink instance on any error in
dsa_slave_phy_setup (bsc#1012628).
- x86/uaccess: Fix 32-bit __get_user_asm_u64() when
CC_HAS_ASM_GOTO_OUTPUT=y (bsc#1012628).
- tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
(bsc#1012628).
- selftest: net: fix typo in altname test (bsc#1012628).
- qed: Handle management FW error (bsc#1012628).
- udp_tunnel: Fix udp_tunnel_nic work-queue type (bsc#1012628).
- dt-bindings: arm: Fix Toradex compatible typo (bsc#1012628).
- ibmvnic: check failover_pending in login response (bsc#1012628).
- KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode
changing registers (bsc#1012628).
- powerpc/64s: system call rfscv workaround for TM bugs
(bsc#1012628).
- powerpc/mce: Fix access error in mce handler (bsc#1012628).
- s390/pci_mmio: fully validate the VMA before calling
follow_pte() (bsc#1012628).
- bnxt_en: make bnxt_free_skbs() safe to call after
bnxt_free_mem() (bsc#1012628).
- net: hns3: pad the short tunnel frame before sending to hardware
(bsc#1012628).
- net: hns3: change affinity_mask to numa node range
(bsc#1012628).
- net: hns3: disable mac in flr process (bsc#1012628).
- net: hns3: fix the timing issue of VF clearing interrupt sources
(bsc#1012628).
- net: stmmac: platform: fix build warning when with
!CONFIG_PM_SLEEP (bsc#1012628).
- Drivers: hv: vmbus: Fix kernel crash upon unbinding a device
from uio_hv_generic driver (bsc#1012628).
- net/mlx5e: Fix mutual exclusion between CQE compression and
HW TS (bsc#1012628).
- ice: Correctly deal with PFs that do not support RDMA
(bsc#1012628).
- net: dsa: qca8k: fix kernel panic with legacy mdio mapping
(bsc#1012628).
- net: dsa: lantiq_gswip: Add 200ms assert delay (bsc#1012628).
- net: hns3: fix the exception when query imp info (bsc#1012628).
- nvme: avoid race in shutdown namespace removal (bsc#1012628).
- blkcg: fix memory leak in blk_iolatency_init (bsc#1012628).
- net: dsa: flush switchdev workqueue before tearing down CPU/DSA
ports (bsc#1012628).
- mlxbf_gige: clear valid_polarity upon open (bsc#1012628).
- dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
(bsc#1012628).
- remoteproc: qcom: wcnss: Fix race with iris probe (bsc#1012628).
- mfd: db8500-prcmu: Adjust map to reality (bsc#1012628).
- PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms
(bsc#1012628).
- fuse: fix use after free in fuse_read_interrupt() (bsc#1012628).
- PCI: tegra194: Fix handling BME_CHGED event (bsc#1012628).
- PCI: tegra194: Fix MSI-X programming (bsc#1012628).
- PCI: tegra: Fix OF node reference leak (bsc#1012628).
- mfd: Don't use irq_create_mapping() to resolve a mapping
(bsc#1012628).
- PCI: rcar: Fix runtime PM imbalance in rcar_pcie_ep_probe()
(bsc#1012628).
- riscv: fix the global name pfn_base confliction error
(bsc#1012628).
- KVM: arm64: Make hyp_panic() more robust when protected mode
is enabled (bsc#1012628).
- tracing/probes: Reject events which have the same name of
existing one (bsc#1012628).
- PCI: cadence: Use bitfield for *quirk_retrain_flag* instead
of bool (bsc#1012628).
- PCI: cadence: Add quirk flag to set minimum delay in LTSSM
Detect.Quiet state (bsc#1012628).
- PCI: j721e: Add PCIe support for J7200 (bsc#1012628).
- PCI: j721e: Add PCIe support for AM64 (bsc#1012628).
- PCI: Add ACS quirks for Cavium multi-function devices
(bsc#1012628).
- watchdog: Start watchdog in watchdog_set_last_hw_keepalive
only if appropriate (bsc#1012628).
- octeontx2-af: Add additional register check to rvu_poll_reg()
(bsc#1012628).
- Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6 (bsc#1012628).
- flow: fix object-size-mismatch warning in
flowi{4,6}_to_flowi_common() (bsc#1012628).
- net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
(bsc#1012628).
- block, bfq: honor already-setup queue merges (bsc#1012628).
- PCI: ibmphp: Fix double unmap of io_mem (bsc#1012628).
- loop: reduce the loop_ctl_mutex scope (bsc#1012628).
- ethtool: Fix an error code in cxgb2.c (bsc#1012628).
- NTB: Fix an error code in ntb_msit_probe() (bsc#1012628).
- NTB: perf: Fix an error code in perf_setup_inbuf()
(bsc#1012628).
- stmmac: dwmac-loongson:Fix missing return value (bsc#1012628).
- net: phylink: add suspend/resume support (bsc#1012628).
- mfd: axp20x: Update AXP288 volatile ranges (bsc#1012628).
- backlight: ktd253: Stabilize backlight (bsc#1012628).
- PCI: controller: PCI_IXP4XX should depend on ARCH_IXP4XX
(bsc#1012628).
- PCI: of: Don't fail devm_pci_alloc_host_bridge() on missing
'ranges' (bsc#1012628).
- PCI: iproc: Fix BCMA probe resource handling (bsc#1012628).
- netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with
mutex (bsc#1012628).
- KVM: arm64: Restrict IPA size to maximum 48 bits on 4K and
16K page size (bsc#1012628).
- PCI: Fix pci_dev_str_match_path() alloc while atomic bug
(bsc#1012628).
- mfd: tqmx86: Clear GPIO IRQ resource when no IRQ is set
(bsc#1012628).
- tracing/boot: Fix a hist trigger dependency for boot time
tracing (bsc#1012628).
- mtd: mtdconcat: Judge callback existence based on the master
(bsc#1012628).
- mtd: mtdconcat: Check _read, _write callbacks existence before
assignment (bsc#1012628).
- KVM: arm64: Fix read-side race on updates to vcpu reset state
(bsc#1012628).
- KVM: arm64: Handle PSCI resets before userspace touches vCPU
state (bsc#1012628).
- PCI/PTM: Remove error message at boot (bsc#1012628).
- PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
(bsc#1012628).
- mtd: rawnand: cafe: Fix a resource leak in the error handling
path of 'cafe_nand_probe()' (bsc#1012628).
- ARC: export clear_user_page() for modules (bsc#1012628).
- perf config: Fix caching and memory leak in
perf_home_perfconfig() (bsc#1012628).
- perf unwind: Do not overwrite
FEATURE_CHECK_LDFLAGS-libunwind-{x86,aarch64} (bsc#1012628).
- perf bench inject-buildid: Handle writen() errors (bsc#1012628).
- gpio: mpc8xxx: Fix a resources leak in the error handling path
of 'mpc8xxx_probe()' (bsc#1012628).
- gpio: mpc8xxx: Fix a potential double iounmap call in
'mpc8xxx_probe()' (bsc#1012628).
- gpio: mpc8xxx: Use 'devm_gpiochip_add_data()' to simplify the
code and avoid a leak (bsc#1012628).
- io_uring: retry in case of short read on block device
(bsc#1012628).
- net: dsa: tag_rtl4_a: Fix egress tags (bsc#1012628).
- tools build: Fix feature detect clean for out of source builds
(bsc#1012628).
- mptcp: fix possible divide by zero (bsc#1012628).
- selftests: mptcp: clean tmp files in simult_flows (bsc#1012628).
- net: hso: add failure handler for add_net_device (bsc#1012628).
- net: dsa: b53: Fix calculating number of switch ports
(bsc#1012628).
- net: dsa: b53: Set correct number of ports in the DSA struct
(bsc#1012628).
- mptcp: Only send extra TCP acks in eligible socket states
(bsc#1012628).
- netfilter: socket: icmp6: fix use-after-scope (bsc#1012628).
- fq_codel: reject silly quantum parameters (bsc#1012628).
- qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
(bsc#1012628).
- iwlwifi: move get pnvm file name to a separate function
(bsc#1012628).
- iwlwifi: pnvm: Fix a memory leak in 'iwl_pnvm_get_from_fs()'
(bsc#1012628).
- ip_gre: validate csum_start only on pull (bsc#1012628).
- net: dsa: b53: Fix IMP port setup on BCM5301x (bsc#1012628).
- bnxt_en: fix stored FW_PSID version masks (bsc#1012628).
- bnxt_en: Fix asic.rev in devlink dev info command (bsc#1012628).
- bnxt_en: Fix possible unintended driver initiated error recovery
(bsc#1012628).
- ip6_gre: Revert "ip6_gre: add validation for csum_start"
(bsc#1012628).
- mfd: lpc_sch: Rename GPIOBASE to prevent build error
(bsc#1012628).
- cxgb3: fix oops on module removal (bsc#1012628).
- net: renesas: sh_eth: Fix freeing wrong tx descriptor
(bsc#1012628).
- bnxt_en: Fix error recovery regression (bsc#1012628).
- net: dsa: bcm_sf2: Fix array overrun in
bcm_sf2_num_active_ports() (bsc#1012628).
- s390/bpf: Fix optimizing out zero-extensions (bsc#1012628).
- s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant
(bsc#1012628).
- s390/bpf: Fix branch shortening during codegen pass
(bsc#1012628).
- Update config files.
- commit aa9b3e1
- Revert "Revert "rpm: Abolish scritplet templating (bsc#1189841).""
This reverts commit f924054cc523527b52203e352adb073db0962f5f.
New suse-module-tools were accepted to factory:
https://build.opensuse.org/request/show/919089
- commit 6abad1e
==== ldb ====
Version update (2.3.0 -> 2.4.0)
- Update to version 2.4.0
+ Improve calculate_popt_array_length()
+ Use C99 initializers for builtin_popt_options[]
+ pyldb: Fix Message.items() for a message containing elements
+ pyldb: Add test for Message.items()
+ tests: Use ldbsearch '--scope instead of '-s'
+ pyldb: fix a typo
+ Change page size of guidindexpackv1.ldb
+ Use a 1MiB lmdb so the test also passes on aarch64 CentOS stream
+ attrib_handler casefold: simplify space dropping
+ fix ldb_comparison_fold off-by-one overrun
+ CVE-2020-27840: pytests: move Dn.validate test to ldb
+ CVE-2020-27840 ldb_dn: avoid head corruption in ldb_dn_explode
+ CVE-2021-20277 ldb/attrib_handlers casefold: stay in bounds
+ CVE-2021-20277 ldb tests: ldb_match tests with extra spaces
+ improve comments for ldb_module_connect_backend()
+ test/ldb_tdb: correct introductory comments
+ ldb.h: remove undefined async_ctx function signatures
+ correct comments in attrib_handers val_to_int64
+ dn tests use cmocka print functions
+ ldb_match: remove redundant check
+ add tests for ldb_wildcard_compare
+ ldb_match: trailing chunk must match end of string
+ pyldb: catch potential overflow error in py_timestring
+ ldb: remove some 'if PY3's in tests
+ Add missing break in switch statement
==== libcap ====
Version update (2.51 -> 2.59)
- update to 2.59:
* Fixed a potential libcap memory leak by adding a destructor
* Major improvement is that there is a path for Linux-PAM compliant
applications to support setting Ambient vector Capabilities via pam_cap.so now
* Added libcap cap_proc_root() API function
* Added color support to captree
* Fixed contrib/sucap/su to correctly handle the Inheritable flag
* capsh enhancements
* getcap -r / now generates readable output
* The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
runnable as standalone binaries
* The module pam_cap.so now contains support for a default=<IAB> module argument
* Enhanced capsh --suggest to also compare against the capability value names
and not just their descriptions
* Added capsh --current support
* Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
* Fix for a corner case infinite loop handling long strings
* Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
* Added a Go utility, captree, to display the process (and thread) graph along with
the POSIX.1e and IAB capabilities of each PID{TID} tree.
==== libjpeg-turbo ====
- previous version updates fixes following bugs:
CVE-2014-9092, CVE-2018-14498, CVE-2019-2201, CVE-2020-17541
(bsc#1128712, bsc#1186764, bsc#807183, bsc#906761)
==== libsolv ====
Version update (0.7.19 -> 0.7.20)
- fix misparsing of '&' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20
- Disable python2 usage on suse_version >= 1550 by default (still
possible to use osc build --with=python).
==== libsoup2 ====
Subpackages: libsoup-2_4-1 typelib-1_0-Soup-2_4
- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)
==== llvm12 ====
- Don't build clang-tools, libc++ and python3-clang anymore,
because they come from llvm13 now.
- Remove version requirement from clang-tools dependency.
==== lz4 ====
- version 1.9.3 fixes also CVE-2021-3520 [bsc#1185438]
==== mozilla-nss ====
Version update (3.69.1 -> 3.70)
Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs
- update to NSS 3.70
* bmo#1726022 - Update test case to verify fix.
* bmo#1714579 - Explicitly disable downgrade check in TlsConnectStreamTls13.EchOuterWith12Max
* bmo#1714579 - Explicitly disable downgrade check in TlsConnectTest.DisableFalseStartOnFallback
* bmo#1681975 - Avoid using a lookup table in nssb64d.
* bmo#1724629 - Use HW accelerated SHA2 on AArch64 Big Endian.
* bmo#1714579 - Change default value of enableHelloDowngradeCheck to true.
* bmo#1726022 - Cache additional PBE entries.
* bmo#1709750 - Read HPKE vectors from official JSON.
- required for Firefox 93
==== samba ====
Version update (4.14.6+git.182.2205d5224e3 -> 4.15.0+git.185.378416e547c)
Subpackages: libdcerpc-binding0 libdcerpc0 libndr-krb5pac0 libndr-nbt0 libndr-standard0 libnetapi0 libsamba-credentials1 libsamba-errors0 libsamba-hostconfig0 libsamba-passdb0 libsamba-util0 libsamdb0 libsmbclient0 libsmbconf0 libsmbldap2 libtevent-util0 libwbclient0 samba-client samba-libs
- Adjust spec to use pam macros; (bsc#1191046).
- Adjust spec for size
* allow some Recommends instead Requires to be configured
for cifs-utils, samba-libs-python3 & samba-gpupdate;
(bsc#1182847).
* remove fam, undocumented and unneeded.
- Add missing build dependency on bison when building with the
embedded Heimdal Kerberos
- Update to 4.15.0
* Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10
* VFS layer modernized.
* Add the ability to set allow/deny lists for zone transfer clients
in Bind DLZ plugin
* Server multi-channel support no longer experimental
* Improved command line user experience, unifying the options in
different commands
* Winbindd no longer scans trusted domains on startup and will use
enterprise principals by default.
* The net utility is now able to support the offline domain join feature
* New options for 'samba-tool dns zoneoptions' for aging control
and to mark old records as static or dynamic
* DNS tombstones are now deleted as appropriate and use a consistent
timestamp format
* The 'samba-tool dns update' command validates and rejects now malformed
IPv4 and IPv6 addresses
* The 'samba-tool domain backup' command correctly takes out locks
against concurrent modification during backup when using the LMDB
backend
* TruACL support has been removed
* NIS support has been removed
- Update to 4.14.7
* smbd panic on force-close share during offload write; (bso#14769);
* smbd should support copy_file_range() for FSCTL_SRV_COPYCHUNK;
(bso#12033);
* Fix returned attributes on fake quota file handle and avoid hitting
the VFS; (bso#14731);
* vfs_shadow_copy2 fix inodes not correctly updating inode numbers;
(bso#14756);
* Fix build on Solaris; (bso#14774);
* Make dos attributes available for unreadable files; (bso#14654);
* Work around special SMB2 READ response behavior of NetApp Ontap
7.3.7; (bso#14607);
* Start the SMB encryption as soon as possible; (bso#14793);
==== suse-module-tools ====
Version update (16.0.10+7 -> 16.0.11)
- Update to version 16.0.11:
* inkmp-script(postun): don't pass existing files to weak-modules2
(boo#1191200)
* kernel-scriptlets: skip cert scriptlet on non-UEFI systems
(boo#1191260)
==== tar ====
- The following issues have already been fixed in this package but
weren't previously mentioned in the changes file:
* bsc#1181131
* bsc#1120610
==== timezone ====
Version update (2021a -> 2021c)
- timezone update 2021c:
* Revert almost all of 2021b's changes to the 'backward' file
* Fix a bug in 'zic -b fat' that caused old timestamps to be
mishandled in 32-bit-only readers
- timezone update 2021b:
* Jordan now starts DST on February's last Thursday.
* Samoa no longer observes DST.
* Move some backward-compatibility links to 'backward'.
* Rename Pacific/Enderbury to Pacific/Kanton.
* Correct many pre-1993 transitions in Malawi, Portugal, etc.
* zic now creates each output file or link atomically.
* zic -L no longer omits the POSIX TZ string in its output.
* zic fixes for truncation and leap second table expiration.
* zic now follows POSIX for TZ strings using all-year DST.
* Fix some localtime crashes and bugs in obscure cases.
* zdump -v now outputs more-useful boundary cases.
* tzfile.5 better matches a draft successor to RFC 8536.
==== transactional-update ====
Version update (3.5.5 -> 3.5.6)
Subpackages: dracut-transactional-update libtukit0 transactional-update-zypp-config tukit
- Version 3.5.6
- tukit: Add S/390 bootloader support [bsc#1189807]
- t-u: support purge-kernels with t-u patch [bsc#1190788]
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
bash
ca-certificates-mozilla (2.50 -> 2.52)
e2fsprogs
elfutils
filesystem
gawk
kernel-default-base (5.14.6 -> 5.14.9)
kernel-source (5.14.6 -> 5.14.9)
ldb (2.3.0 -> 2.4.0)
libcap (2.51 -> 2.59)
libjpeg-turbo
libsolv (0.7.19 -> 0.7.20)
libsoup2
lz4
suse-module-tools (16.0.10+7 -> 16.0.11)
tar
timezone (2021a -> 2021c)
transactional-update (3.5.5 -> 3.5.6)
=== Details ===
==== bash ====
- Install bash_builtins manpage under the correct name
==== ca-certificates-mozilla ====
Version update (2.50 -> 2.52)
- updated to 2.50 state of the Mozilla NSS Certificate store (bsc#1188006)
- Added CAs:
+ HARICA Client ECC Root CA 2021
+ HARICA Client RSA Root CA 2021
+ HARICA TLS ECC Root CA 2021
+ HARICA TLS RSA Root CA 2021
+ TunTrust Root CA
- remove the DST_Root_CA_X3.pem trust, as it expires september 30th 2021.
(bsc#1190858)
==== e2fsprogs ====
Subpackages: libcom_err2 libext2fs2
- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
version 0 quota format (jsc#SLE-17360)
quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
files (jsc#SLE-17360)
e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
trash user limits when processing orphan list (jsc#SLE-17360)
debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
commands (jsc#SLE-17360)
quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
with them
==== elfutils ====
Subpackages: libasm1 libdw1 libelf1
- Enhance license fields: all the libraries actually have a different
license to the tools. While the tools are GPL-3.0-or-later, the
libraries are (LGPL-3.0-or-later OR GPL-2.0-or-later)
SLE bug (for tracking the above) bsc#1191310
==== filesystem ====
- don't perform UsrMerge if ZYPP_SINGLE_RPMTRANS is set. Rely on
file trigger compat mode in that case and do it posttrans
(boo#1189788).
- generic %ghost handling instead of hardcoding
==== gawk ====
- remove update-alternatives support, as on linux systems GNU software
(i.e. gawk in this case) is usually considered the default implementation.
- use %make macros
==== kernel-default-base ====
Version update (5.14.6 -> 5.14.9)
- Add nls_utf8 module (boo#1190797)
==== kernel-source ====
Version update (5.14.6 -> 5.14.9)
- ALSA: usb-audio: Restrict rates for the shared clocks
(bsc#1190418).
- commit d0ace7f
- Update
patches.kernel.org/5.14.9-147-Revert-drm-vc4-hdmi-runtime-PM-changes.patch
(bsc#1012628 bsc#1190469).
- Delete patches.suse/drm-vc4-hdmi-Fix-HPD-GPIO-detection.patch.
The former superseded the latter.
- commit 2bc4ba2
- Linux 5.14.9 (bsc#1012628).
- mm, hwpoison: add is_free_buddy_page() in HWPoisonHandlable()
(bsc#1012628).
- ocfs2: drop acl cache for directories too (bsc#1012628).
- mm/debug: sync up MR_CONTIG_RANGE and MR_LONGTERM_PIN
(bsc#1012628).
- mm: fix uninitialized use in overcommit_policy_handler
(bsc#1012628).
- usb: gadget: r8a66597: fix a loop in set_feature()
(bsc#1012628).
- usb: gadget: u_audio: EP-OUT bInterval in fback frequency
(bsc#1012628).
- usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave
(bsc#1012628).
- usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA
(bsc#1012628).
- usb: musb: tusb6010: uninitialized data in
tusb_fifo_write_unaligned() (bsc#1012628).
- cifs: Not to defer close on file when lock is set (bsc#1012628).
- cifs: Fix soft lockup during fsstress (bsc#1012628).
- cifs: fix incorrect check for null pointer in header_assemble
(bsc#1012628).
- xen/x86: fix PV trap handling on secondary processors
(bsc#1012628).
- usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c
(bsc#1012628).
- USB: serial: cp210x: add ID for GW Instek GDM-834x Digital
Multimeter (bsc#1012628).
- USB: cdc-acm: fix minor-number release (bsc#1012628).
- Revert "USB: bcma: Add a check for devm_gpiod_get"
(bsc#1012628).
- binder: make sure fd closes complete (bsc#1012628).
- binder: fix freeze race (bsc#1012628).
- staging: greybus: uart: fix tty use after free (bsc#1012628).
- usb: isp1760: do not sleep in field register poll (bsc#1012628).
- Re-enable UAS for LaCie Rugged USB3-FW with fk quirk
(bsc#1012628).
- usb: dwc3: core: balance phy init and exit (bsc#1012628).
- usb: cdns3: fix race condition before setting doorbell
(bsc#1012628).
- usb: core: hcd: Add support for deferring roothub registration
(bsc#1012628).
- USB: serial: mos7840: remove duplicated 0xac24 device ID
(bsc#1012628).
- USB: serial: option: add Telit LN920 compositions (bsc#1012628).
- USB: serial: option: remove duplicate USB device ID
(bsc#1012628).
- USB: serial: option: add device id for Foxconn T99W265
(bsc#1012628).
- misc: bcm-vk: fix tty registration race (bsc#1012628).
- misc: genwqe: Fixes DMA mask setting (bsc#1012628).
- mcb: fix error handling in mcb_alloc_bus() (bsc#1012628).
- KVM: rseq: Update rseq when processing NOTIFY_RESUME on xfer
to KVM guest (bsc#1012628).
- erofs: fix up erofs_lookup tracepoint (bsc#1012628).
- nexthop: Fix division by zero while replacing a resilient group
(bsc#1012628).
- btrfs: prevent __btrfs_dump_space_info() to underflow its free
space (bsc#1012628).
- xhci: Set HCD flag to defer primary roothub registration
(bsc#1012628).
- serial: 8250: 8250_omap: Fix RX_LVL register offset
(bsc#1012628).
- serial: mvebu-uart: fix driver's tx_empty callback
(bsc#1012628).
- scsi: sd_zbc: Ensure buffer size is aligned to SECTOR_SIZE
(bsc#1012628).
- drm/amd/pm: Update intermediate power state for SI
(bsc#1012628).
- net: hso: fix muxed tty registration (bsc#1012628).
- platform/x86: amd-pmc: Increase the response register timeout
(bsc#1012628).
- arm64: Restore forced disabling of KPTI on ThunderX
(bsc#1012628).
- arm64: Mitigate MTE issues with str{n}cmp() (bsc#1012628).
- comedi: Fix memory leak in compat_insnlist() (bsc#1012628).
- regulator: qcom-rpmh-regulator: fix pm8009-1 ldo7 resource name
(bsc#1012628).
- afs: Fix page leak (bsc#1012628).
- afs: Fix incorrect triggering of sillyrename on 3rd-party
invalidation (bsc#1012628).
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS
server (bsc#1012628).
- afs: Fix updating of i_blocks on file/dir extension
(bsc#1012628).
- platform/x86/intel: punit_ipc: Drop wrong use of ACPI_PTR()
(bsc#1012628).
- regulator: max14577: Revert "regulator: max14577: Add proper
module aliases strings" (bsc#1012628).
- NLM: Fix svcxdr_encode_owner() (bsc#1012628).
- virtio-net: fix pages leaking when building skb in big mode
(bsc#1012628).
- enetc: Fix illegal access when reading affinity_hint
(bsc#1012628).
- enetc: Fix uninitialized struct dim_sample field usage
(bsc#1012628).
- net: dsa: tear down devlink port regions when tearing down
the devlink port on error (bsc#1012628).
- net: bgmac-bcma: handle deferred probe error due to mac-address
(bsc#1012628).
- napi: fix race inside napi_enable (bsc#1012628).
- bnxt_en: Fix TX timeout when TX ring size is set to the smallest
(bsc#1012628).
- net: hns3: fix change RSS 'hfunc' ineffective issue
(bsc#1012628).
- net: hns3: fix inconsistent vf id print (bsc#1012628).
- net: hns3: fix misuse vf id and vport id in some logs
(bsc#1012628).
- net: hns3: check queue id range before using (bsc#1012628).
- net: hns3: check vlan id before using it (bsc#1012628).
- net: hns3: fix a return value error in hclge_get_reset_status()
(bsc#1012628).
- net/smc: add missing error check in smc_clc_prfx_set()
(bsc#1012628).
- net/smc: fix 'workqueue leaked lock' in smc_conn_abort_work
(bsc#1012628).
- net: dsa: fix dsa_tree_setup error path (bsc#1012628).
- net: dsa: don't allocate the slave_mii_bus using devres
(bsc#1012628).
- net: dsa: realtek: register the MDIO bus under devres
(bsc#1012628).
- platform/x86: dell: fix DELL_WMI_PRIVACY dependencies & build
error (bsc#1012628).
- kselftest/arm64: signal: Add SVE to the set of features we
can check for (bsc#1012628).
- kselftest/arm64: signal: Skip tests if required features are
missing (bsc#1012628).
- spi: Revert modalias changes (bsc#1012628).
- s390/qeth: fix NULL deref in qeth_clear_working_pool_list()
(bsc#1012628).
- gpiolib: acpi: Make set-debounce-timeout failures non fatal
(bsc#1012628).
- gpio: uniphier: Fix void functions to remove return value
(bsc#1012628).
- qed: rdma - don't wait for resources under hw error recovery
flow (bsc#1012628).
- mptcp: ensure tx skbs always have the MPTCP ext (bsc#1012628).
- nexthop: Fix memory leaks in nexthop notification chain
listeners (bsc#1012628).
- nfc: st-nci: Add SPI ID matching DT compatible (bsc#1012628).
- net: ethernet: mtk_eth_soc: avoid creating duplicate offload
entries (bsc#1012628).
- net: mscc: ocelot: fix forwarding from BLOCKING ports remaining
enabled (bsc#1012628).
- net/mlx4_en: Don't allow aRFS for encapsulated packets
(bsc#1012628).
- atlantic: Fix issue in the pm resume flow (bsc#1012628).
- drm/amdkfd: map SVM range with correct access permission
(bsc#1012628).
- drm/amdkfd: fix dma mapping leaking warning (bsc#1012628).
- scsi: iscsi: Adjust iface sysfs attr detection (bsc#1012628).
- scsi: target: Fix the pgr/alua_support_store functions
(bsc#1012628).
- tty: synclink_gt: rename a conflicting function name
(bsc#1012628).
- fpga: machxo2-spi: Return an error on failure (bsc#1012628).
- fpga: machxo2-spi: Fix missing error code in
machxo2_write_complete() (bsc#1012628).
- x86/fault: Fix wrong signal when vsyscall fails with pkey
(bsc#1012628).
- nvme-tcp: fix incorrect h2cdata pdu offset accounting
(bsc#1012628).
- nvme: keep ctrl->namespaces ordered (bsc#1012628).
- thermal/core: Potential buffer overflow in
thermal_build_list_of_policies() (bsc#1012628).
- cifs: fix a sign extension bug (bsc#1012628).
- scsi: sd_zbc: Support disks with more than 2**32 logical blocks
(bsc#1012628).
- scsi: ufs: Revert "Utilize Transfer Request List Completion
Notification Register" (bsc#1012628).
- scsi: ufs: Retry aborted SCSI commands instead of completing
these successfully (bsc#1012628).
- scsi: ufs: core: Unbreak the reset handler (bsc#1012628).
- scsi: qla2xxx: Restore initiator in dual mode (bsc#1012628).
- scsi: lpfc: Use correct scnprintf() limit (bsc#1012628).
- irqchip/goldfish-pic: Select GENERIC_IRQ_CHIP to fix build
(bsc#1012628).
- irqchip/gic-v3-its: Fix potential VPE leak on error
(bsc#1012628).
- md: fix a lock order reversal in md_alloc (bsc#1012628).
- x86/asm: Fix SETZ size enqcmds() build failure (bsc#1012628).
- io_uring: fix race between poll completion and cancel_hash
insertion (bsc#1012628).
- io_uring: fix missing set of EPOLLONESHOT for CQ ring overflow
(bsc#1012628).
- io_uring: put provided buffer meta data under memcg accounting
(bsc#1012628).
- io_uring: don't punt files update to io-wq unconditionally
(bsc#1012628).
- blktrace: Fix uaf in blk_trace access after removing by sysfs
(bsc#1012628).
- net: phylink: Update SFP selected interface on advertising
changes (bsc#1012628).
- net: macb: fix use after free on rmmod (bsc#1012628).
- net: stmmac: allow CSR clock of 300MHz (bsc#1012628).
- blk-mq: avoid to iterate over stale request (bsc#1012628).
- m68k: Double cast io functions to unsigned long (bsc#1012628).
- ipv6: delay fib6_sernum increase in fib6_add (bsc#1012628).
- dma-debug: prevent an error message from causing runtime
problems (bsc#1012628).
- cpufreq: intel_pstate: Override parameters if HWP forced by BIOS
(bsc#1012628).
- bpf: Add oversize check before call kvcalloc() (bsc#1012628).
- xen/balloon: use a kernel thread instead a workqueue
(bsc#1012628).
- nvme-multipath: fix ANA state updates when a namespace is not
present (bsc#1012628).
- nvme-rdma: destroy cm id before destroy qp to avoid use after
free (bsc#1012628).
- sparc32: page align size in arch_dma_alloc (bsc#1012628).
- amd/display: downgrade validation failure log level
(bsc#1012628).
- drm/ttm: fix type mismatch error on sparc64 (bsc#1012628).
- block: check if a profile is actually registered in
blk_integrity_unregister (bsc#1012628).
- block: flush the integrity workqueue in blk_integrity_unregister
(bsc#1012628).
- blk-cgroup: fix UAF by grabbing blkcg lock before destroying
blkg pd (bsc#1012628).
- compiler.h: Introduce absolute_pointer macro (bsc#1012628).
- net: i825xx: Use absolute_pointer for memcpy from fixed memory
location (bsc#1012628).
- sparc: avoid stringop-overread errors (bsc#1012628).
- qnx4: avoid stringop-overread errors (bsc#1012628).
- parisc: Use absolute_pointer() to define PAGE0 (bsc#1012628).
- drm/amdkfd: make needs_pcie_atomics FW-version dependent
(bsc#1012628).
- drm/amd/display: Fix unstable HPCP compliance on Chrome Barcelo
(bsc#1012628).
- drm/amd/display: Link training retry fix for abort case
(bsc#1012628).
- amd/display: enable panel orientation quirks (bsc#1012628).
- arm64: Mark __stack_chk_guard as __ro_after_init (bsc#1012628).
- alpha: Declare virt_to_phys and virt_to_bus parameter as
pointer to volatile (bsc#1012628).
- net: 6pack: Fix tx timeout and slot time (bsc#1012628).
- spi: Fix tegra20 build with CONFIG_PM=n (bsc#1012628).
- libperf evsel: Make use of FD robust (bsc#1012628).
- Revert drm/vc4 hdmi runtime PM changes (bsc#1012628).
- EDAC/synopsys: Fix wrong value type assignment for edac_mode
(bsc#1012628).
- EDAC/dmc520: Assign the proper type to dimm->edac_mode
(bsc#1012628).
- x86/setup: Call early_reserve_memory() earlier (bsc#1012628).
- thermal/drivers/int340x: Do not set a wrong tcc offset on resume
(bsc#1012628).
- irqchip/armada-370-xp: Fix ack/eoi breakage (bsc#1012628).
- arm64: add MTE supported check to thread switching and syscall
entry/exit (bsc#1012628).
- USB: serial: cp210x: fix dropped characters with CP2102
(bsc#1012628).
- software node: balance refcount for managed software nodes
(bsc#1012628).
- xen/balloon: fix balloon kthread freezing (bsc#1012628).
- qnx4: work around gcc false positive warning bug (bsc#1012628).
- usb: gadget: f_uac2: Add missing companion descriptor for
feedback EP (bsc#1012628).
- usb: gadget: f_uac2: Populate SS descriptors' wBytesPerInterval
(bsc#1012628).
- Refresh patches.suse/drm-vc4-hdmi-Fix-HPD-GPIO-detection.patch.
- commit 85f5318
- arm64: Update config files. (bsc#1185927)
Set PINCTRL_ZYNQMP as build-in.
- commit 4ae263c
- blacklist.conf: add idxd commit
- commit 06dbf6b
- nvmet: fix a width vs precision bug in
nvmet_subsys_attr_serial_show() (git-fixes).
- commit fef4ef0
- Linux 5.14.8 (bsc#1012628).
- drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV (bsc#1012628).
- selinux,smack: fix subjective/objective credential use mixups
(bsc#1012628).
- io_uring: fix off-by-one in BUILD_BUG_ON check of
__REQ_F_LAST_BIT (bsc#1012628).
- cifs: properly invalidate cached root handle when closing it
(bsc#1012628).
- sched/idle: Make the idle timer expire in hard interrupt context
(bsc#1012628).
- rtc: rx8010: select REGMAP_I2C (bsc#1012628).
- blk-mq: allow 4x BLK_MAX_REQUEST_COUNT at blk_plug for
multiple_queues (bsc#1012628).
- blk-throttle: fix UAF by deleteing timer in blk_throtl_exit()
(bsc#1012628).
- block: genhd: don't call blkdev_show() with major_names_lock
held (bsc#1012628).
- nvmet: fixup buffer overrun in nvmet_subsys_attr_serial()
(bsc#1012628).
- pwm: stm32-lp: Don't modify HW state in .remove() callback
(bsc#1012628).
- pwm: rockchip: Don't modify HW state in .remove() callback
(bsc#1012628).
- pwm: img: Don't modify HW state in .remove() callback
(bsc#1012628).
- habanalabs: cannot sleep while holding spinlock (bsc#1012628).
- habanalabs: add "in device creation" status (bsc#1012628).
- habanalabs: fix mmu node address resolution in debugfs
(bsc#1012628).
- habanalabs: add validity check for event ID received from F/W
(bsc#1012628).
- drm/amdgpu: fix fdinfo race with process exit (bsc#1012628).
- drm/amd/display: Fix memory leak reported by coverity
(bsc#1012628).
- drm/amdgpu: Fixes to returning VBIOS RAS EEPROM address
(bsc#1012628).
- habanalabs: fix nullifying of destroyed mmu pgt pool
(bsc#1012628).
- thermal/drivers/rcar_gen3_thermal: Store TSC id as unsigned int
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group
(bsc#1012628).
- nilfs2: fix NULL pointer in nilfs_##name##_attr_release
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_create_device_group
(bsc#1012628).
- btrfs: fix lockdep warning while mounting sprout fs
(bsc#1012628).
- btrfs: delay blkdev_put until after the device remove
(bsc#1012628).
- btrfs: update the bdev time directly when closing (bsc#1012628).
- s390/unwind: use current_frame_address() to unwind current task
(bsc#1012628).
- ceph: lockdep annotations for try_nonblocking_invalidate
(bsc#1012628).
- ceph: remove the capsnaps when removing caps (bsc#1012628).
- ceph: request Fw caps before updating the mtime in
ceph_write_iter (bsc#1012628).
- ceph: fix memory leak on decode error in ceph_handle_caps
(bsc#1012628).
- ACPI: PM: s2idle: Run both AMD and Microsoft methods if both
are supported (bsc#1012628).
- ASoC: audio-graph: respawn Platform Support (bsc#1012628).
- s390: add kmemleak annotation in stack_alloc() (bsc#1012628).
- dmaengine: xilinx_dma: Set DMA mask for coherent APIs
(bsc#1012628).
- dmaengine: ioat: depends on !UML (bsc#1012628).
- cxl/pci: Introduce cdevm_file_operations (bsc#1012628).
- cxl: Move cxl_core to new directory (bsc#1012628).
- dmaengine: sprd: Add missing MODULE_DEVICE_TABLE (bsc#1012628).
- dmaengine: idxd: depends on !UML (bsc#1012628).
- riscv: dts: microchip: mpfs-icicle: Fix serial console
(bsc#1012628).
- of: property: Disable fw_devlink DT support for X86
(bsc#1012628).
- drm/ttm: Fix a deadlock if the target BO is not idle during swap
(bsc#1012628).
- arm64: mm: limit linear region to 51 bits for KVM in nVHE mode
(bsc#1012628).
- iommu/vt-d: Fix a deadlock in intel_svm_drain_prq()
(bsc#1012628).
- iommu/vt-d: Fix PASID leak in intel_svm_unbind_mm()
(bsc#1012628).
- iommu/amd: Relocate GAMSup check to early_enable_iommus
(bsc#1012628).
- parisc: Move pci_dev_is_behind_card_dino to where it is used
(bsc#1012628).
- dma-buf: DMABUF_DEBUG should depend on DMA_SHARED_BUFFER
(bsc#1012628).
- Update config files.
- dma-buf: DMABUF_MOVE_NOTIFY should depend on DMA_SHARED_BUFFER
(bsc#1012628).
- Update config files.
- drivers: base: cacheinfo: Get rid of
DEFINE_SMP_CALL_CACHE_FUNCTION() (bsc#1012628).
- drm/amdgpu: Disable PCIE_DPM on Intel RKL Platform
(bsc#1012628).
- thermal/core: Fix thermal_cooling_device_register() prototype
(bsc#1012628).
- tracing/boot: Fix to loop on only subkeys (bsc#1012628).
- tools/bootconfig: Fix tracing_on option checking in
ftrace2bconf.sh (bsc#1012628).
- Kconfig.debug: drop selecting non-existing
HARDLOCKUP_DETECTOR_ARCH (bsc#1012628).
- init: move usermodehelper_enable() to populate_rootfs()
(bsc#1012628).
- math: RATIONAL_KUNIT_TEST should depend on RATIONAL instead
of selecting it (bsc#1012628).
- SUNRPC: don't pause on incomplete allocation (bsc#1012628).
- s390/entry: make oklabel within CHKSTG macro local
(bsc#1012628).
- platform/chrome: cros_ec_trace: Fix format warnings
(bsc#1012628).
- platform/chrome: sensorhub: Add trace events for sample
(bsc#1012628).
- dmaengine: idxd: clear block on fault flag when clear wq
(bsc#1012628).
- dmaengine: idxd: fix abort status check (bsc#1012628).
- dmaengine: idxd: fix wq slot allocation index check
(bsc#1012628).
- dmaengine: idxd: have command status always set (bsc#1012628).
- dmanegine: idxd: cleanup all device related bits after disabling
device (bsc#1012628).
- pwm: mxs: Don't modify HW state in .probe() after the PWM chip
was registered (bsc#1012628).
- pwm: lpc32xx: Don't modify HW state in .probe() after the PWM
chip was registered (bsc#1012628).
- ceph: cancel delayed work instead of flushing on mdsc teardown
(bsc#1012628).
- thermal/drivers/qcom/spmi-adc-tm5: Don't abort probing if a
sensor is not used (bsc#1012628).
- PM: sleep: core: Avoid setting power.must_resume to false
(bsc#1012628).
- profiling: fix shift-out-of-bounds bugs (bsc#1012628).
- nilfs2: use refcount_dec_and_lock() to fix potential UAF
(bsc#1012628).
- prctl: allow to setup brk for et_dyn executables (bsc#1012628).
- pwm: ab8500: Fix register offset calculation to not depend on
probe order (bsc#1012628).
- 9p/trans_virtio: Remove sysfs file on probe failure
(bsc#1012628).
- thermal/drivers/exynos: Fix an error code in exynos_tmu_probe()
(bsc#1012628).
- n64cart: fix return value check in n64cart_probe()
(bsc#1012628).
- staging: rtl8723bs: fix wpa_set_auth_algs() function
(bsc#1012628).
- perf tools: Allow build-id with trailing zeros (bsc#1012628).
- perf symbol: Look for ImageBase in PE file to compute .text
offset (bsc#1012628).
- perf test: Fix bpf test sample mismatch reporting (bsc#1012628).
- dmaengine: acpi: Avoid comparison GSI with Linux vIRQ
(bsc#1012628).
- RDMA/mlx5: Fix xlt_chunk_align calculation (bsc#1012628).
- RDMA/hns: Enable stash feature of HIP09 (bsc#1012628).
- um: virtio_uml: fix memory leak on init failures (bsc#1012628).
- coredump: fix memleak in dump_vma_snapshot() (bsc#1012628).
- um: fix stub location calculation (bsc#1012628).
- staging: rtl8192u: Fix bitwise vs logical operator in
TranslateRxSignalStuff819xUsb() (bsc#1012628).
- console: consume APC, DM, DCS (bsc#1012628).
- PCI: aardvark: Fix reporting CRS value (bsc#1012628).
- PCI: pci-bridge-emul: Add PCIe Root Capabilities Register
(bsc#1012628).
- commit 94242c6
- kernel-binary.spec: suse-kernel-rpm-scriptlets required for uninstall as
well.
Fixes: e98096d5cf85 ("rpm: Abolish scritplet templating (bsc#1189841).")
- commit e082fbf
- Linux 5.14.7 (bsc#1012628).
- net: stmmac: fix MAC not working when system resume back with
WoL active (bsc#1012628).
- io_uring: ensure symmetry in handling iter types in
loop_rw_iter() (bsc#1012628).
- swiotlb-xen: avoid double free (bsc#1012628).
- swiotlb-xen: fix late init retry (bsc#1012628).
- xen: reset legacy rtc flag for PV domU (bsc#1012628).
- xen: fix usage of pmd_populate in mremap for pv guests
(bsc#1012628).
- bnx2x: Fix enabling network interfaces without VFs
(bsc#1012628).
- arm64/sve: Use correct size when reinitialising SVE state
(bsc#1012628).
- PM: base: power: don't try to use non-existing RTC for storing
data (bsc#1012628).
- PCI: Add AMD GPU multi-function power dependencies
(bsc#1012628).
- drm/amd/display: Get backlight from PWM if DMCU is not
initialized (bsc#1012628).
- drm/amd/display: dsc mst 2 4K displays go dark with 2 lane HBR3
(bsc#1012628).
- drm/amd/display: Fix white screen page fault for gpuvm
(bsc#1012628).
- drm/amd/pm: fix runpm hang when amdgpu loaded prior to sound
driver (bsc#1012628).
- drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10 (bsc#1012628).
- drm/amdgpu: use IS_ERR for debugfs APIs (bsc#1012628).
- drm/amdgpu: fix use after free during BO move (bsc#1012628).
- drm/amdgpu: add amdgpu_amdkfd_resume_iommu (bsc#1012628).
- drm/amdgpu: move iommu_resume before ip init/resume
(bsc#1012628).
- drm/amd/pm: fix the issue of uploading powerplay table
(bsc#1012628).
- drm/amdkfd: separate kfd_iommu_resume from kfd_resume
(bsc#1012628).
- drm/radeon: pass drm dev radeon_agp_head_init directly
(bsc#1012628).
- io_uring: allow retry for O_NONBLOCK if async is supported
(bsc#1012628).
- drm/etnaviv: return context from etnaviv_iommu_context_get
(bsc#1012628).
- drm/etnaviv: put submit prev MMU context when it exists
(bsc#1012628).
- drm/etnaviv: stop abusing mmu_context as FE running marker
(bsc#1012628).
- drm/etnaviv: keep MMU context across runtime suspend/resume
(bsc#1012628).
- drm/etnaviv: exec and MMU state is lost when resetting the GPU
(bsc#1012628).
- drm/etnaviv: fix MMU context leak on GPU reset (bsc#1012628).
- drm/etnaviv: reference MMU context when setting up hardware
state (bsc#1012628).
- drm/etnaviv: add missing MMU context put when reaping MMU
mapping (bsc#1012628).
- s390/sclp: fix Secure-IPL facility detection (bsc#1012628).
- net: qrtr: revert check in qrtr_endpoint_post() (bsc#1012628).
- x86/pat: Pass valid address to sanitize_phys() (bsc#1012628).
- x86/mm: Fix kern_addr_valid() to cope with existing but not
present entries (bsc#1012628).
- x86/mce: Avoid infinite loop for copy from user recovery
(bsc#1012628).
- net: remove the unnecessary check in cipso_v4_doi_free
(bsc#1012628).
- net/{mlx5|nfp|bnxt}: Remove unnecessary RTNL lock assert
(bsc#1012628).
- net-caif: avoid user-triggerable WARN_ON(1) (bsc#1012628).
- ptp: dp83640: don't define PAGE0 (bsc#1012628).
- dccp: don't duplicate ccid when cloning dccp sock (bsc#1012628).
- net/l2tp: Fix reference count leak in l2tp_udp_recv_core
(bsc#1012628).
- r6040: Restore MDIO clock frequency after MAC reset
(bsc#1012628).
- tipc: increase timeout in tipc_sk_enqueue() (bsc#1012628).
- drm/rockchip: cdn-dp-core: Make cdn_dp_core_resume
__maybe_unused (bsc#1012628).
- rtc: cmos: Disable irq around direct invocation of
cmos_interrupt() (bsc#1012628).
- drm/i915/dp: return proper DPRX link training result
(bsc#1012628).
- perf machine: Initialize srcline string member in add_location
struct (bsc#1012628).
- net/mlx5: FWTrace, cancel work on alloc pd error flow
(bsc#1012628).
- net/mlx5: Fix potential sleeping in atomic context
(bsc#1012628).
- net: stmmac: fix system hang caused by eee_ctrl_timer during
suspend/resume (bsc#1012628).
- igc: fix tunnel offloading (bsc#1012628).
- nvme-tcp: fix io_work priority inversion (bsc#1012628).
- powerpc/64s: system call scv tabort fix for corrupt irq
soft-mask state (bsc#1012628).
- events: Reuse value read using READ_ONCE instead of re-reading
it (bsc#1012628).
- net: ipa: initialize all filter table slots (bsc#1012628).
- gen_compile_commands: fix missing 'sys' package (bsc#1012628).
- vhost_net: fix OoB on sendmsg() failure (bsc#1012628).
- net/af_unix: fix a data-race in unix_dgram_poll (bsc#1012628).
- net: dsa: destroy the phylink instance on any error in
dsa_slave_phy_setup (bsc#1012628).
- x86/uaccess: Fix 32-bit __get_user_asm_u64() when
CC_HAS_ASM_GOTO_OUTPUT=y (bsc#1012628).
- tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
(bsc#1012628).
- selftest: net: fix typo in altname test (bsc#1012628).
- qed: Handle management FW error (bsc#1012628).
- udp_tunnel: Fix udp_tunnel_nic work-queue type (bsc#1012628).
- dt-bindings: arm: Fix Toradex compatible typo (bsc#1012628).
- ibmvnic: check failover_pending in login response (bsc#1012628).
- KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode
changing registers (bsc#1012628).
- powerpc/64s: system call rfscv workaround for TM bugs
(bsc#1012628).
- powerpc/mce: Fix access error in mce handler (bsc#1012628).
- s390/pci_mmio: fully validate the VMA before calling
follow_pte() (bsc#1012628).
- bnxt_en: make bnxt_free_skbs() safe to call after
bnxt_free_mem() (bsc#1012628).
- net: hns3: pad the short tunnel frame before sending to hardware
(bsc#1012628).
- net: hns3: change affinity_mask to numa node range
(bsc#1012628).
- net: hns3: disable mac in flr process (bsc#1012628).
- net: hns3: fix the timing issue of VF clearing interrupt sources
(bsc#1012628).
- net: stmmac: platform: fix build warning when with
!CONFIG_PM_SLEEP (bsc#1012628).
- Drivers: hv: vmbus: Fix kernel crash upon unbinding a device
from uio_hv_generic driver (bsc#1012628).
- net/mlx5e: Fix mutual exclusion between CQE compression and
HW TS (bsc#1012628).
- ice: Correctly deal with PFs that do not support RDMA
(bsc#1012628).
- net: dsa: qca8k: fix kernel panic with legacy mdio mapping
(bsc#1012628).
- net: dsa: lantiq_gswip: Add 200ms assert delay (bsc#1012628).
- net: hns3: fix the exception when query imp info (bsc#1012628).
- nvme: avoid race in shutdown namespace removal (bsc#1012628).
- blkcg: fix memory leak in blk_iolatency_init (bsc#1012628).
- net: dsa: flush switchdev workqueue before tearing down CPU/DSA
ports (bsc#1012628).
- mlxbf_gige: clear valid_polarity upon open (bsc#1012628).
- dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
(bsc#1012628).
- remoteproc: qcom: wcnss: Fix race with iris probe (bsc#1012628).
- mfd: db8500-prcmu: Adjust map to reality (bsc#1012628).
- PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms
(bsc#1012628).
- fuse: fix use after free in fuse_read_interrupt() (bsc#1012628).
- PCI: tegra194: Fix handling BME_CHGED event (bsc#1012628).
- PCI: tegra194: Fix MSI-X programming (bsc#1012628).
- PCI: tegra: Fix OF node reference leak (bsc#1012628).
- mfd: Don't use irq_create_mapping() to resolve a mapping
(bsc#1012628).
- PCI: rcar: Fix runtime PM imbalance in rcar_pcie_ep_probe()
(bsc#1012628).
- riscv: fix the global name pfn_base confliction error
(bsc#1012628).
- KVM: arm64: Make hyp_panic() more robust when protected mode
is enabled (bsc#1012628).
- tracing/probes: Reject events which have the same name of
existing one (bsc#1012628).
- PCI: cadence: Use bitfield for *quirk_retrain_flag* instead
of bool (bsc#1012628).
- PCI: cadence: Add quirk flag to set minimum delay in LTSSM
Detect.Quiet state (bsc#1012628).
- PCI: j721e: Add PCIe support for J7200 (bsc#1012628).
- PCI: j721e: Add PCIe support for AM64 (bsc#1012628).
- PCI: Add ACS quirks for Cavium multi-function devices
(bsc#1012628).
- watchdog: Start watchdog in watchdog_set_last_hw_keepalive
only if appropriate (bsc#1012628).
- octeontx2-af: Add additional register check to rvu_poll_reg()
(bsc#1012628).
- Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6 (bsc#1012628).
- flow: fix object-size-mismatch warning in
flowi{4,6}_to_flowi_common() (bsc#1012628).
- net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
(bsc#1012628).
- block, bfq: honor already-setup queue merges (bsc#1012628).
- PCI: ibmphp: Fix double unmap of io_mem (bsc#1012628).
- loop: reduce the loop_ctl_mutex scope (bsc#1012628).
- ethtool: Fix an error code in cxgb2.c (bsc#1012628).
- NTB: Fix an error code in ntb_msit_probe() (bsc#1012628).
- NTB: perf: Fix an error code in perf_setup_inbuf()
(bsc#1012628).
- stmmac: dwmac-loongson:Fix missing return value (bsc#1012628).
- net: phylink: add suspend/resume support (bsc#1012628).
- mfd: axp20x: Update AXP288 volatile ranges (bsc#1012628).
- backlight: ktd253: Stabilize backlight (bsc#1012628).
- PCI: controller: PCI_IXP4XX should depend on ARCH_IXP4XX
(bsc#1012628).
- PCI: of: Don't fail devm_pci_alloc_host_bridge() on missing
'ranges' (bsc#1012628).
- PCI: iproc: Fix BCMA probe resource handling (bsc#1012628).
- netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with
mutex (bsc#1012628).
- KVM: arm64: Restrict IPA size to maximum 48 bits on 4K and
16K page size (bsc#1012628).
- PCI: Fix pci_dev_str_match_path() alloc while atomic bug
(bsc#1012628).
- mfd: tqmx86: Clear GPIO IRQ resource when no IRQ is set
(bsc#1012628).
- tracing/boot: Fix a hist trigger dependency for boot time
tracing (bsc#1012628).
- mtd: mtdconcat: Judge callback existence based on the master
(bsc#1012628).
- mtd: mtdconcat: Check _read, _write callbacks existence before
assignment (bsc#1012628).
- KVM: arm64: Fix read-side race on updates to vcpu reset state
(bsc#1012628).
- KVM: arm64: Handle PSCI resets before userspace touches vCPU
state (bsc#1012628).
- PCI/PTM: Remove error message at boot (bsc#1012628).
- PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
(bsc#1012628).
- mtd: rawnand: cafe: Fix a resource leak in the error handling
path of 'cafe_nand_probe()' (bsc#1012628).
- ARC: export clear_user_page() for modules (bsc#1012628).
- perf config: Fix caching and memory leak in
perf_home_perfconfig() (bsc#1012628).
- perf unwind: Do not overwrite
FEATURE_CHECK_LDFLAGS-libunwind-{x86,aarch64} (bsc#1012628).
- perf bench inject-buildid: Handle writen() errors (bsc#1012628).
- gpio: mpc8xxx: Fix a resources leak in the error handling path
of 'mpc8xxx_probe()' (bsc#1012628).
- gpio: mpc8xxx: Fix a potential double iounmap call in
'mpc8xxx_probe()' (bsc#1012628).
- gpio: mpc8xxx: Use 'devm_gpiochip_add_data()' to simplify the
code and avoid a leak (bsc#1012628).
- io_uring: retry in case of short read on block device
(bsc#1012628).
- net: dsa: tag_rtl4_a: Fix egress tags (bsc#1012628).
- tools build: Fix feature detect clean for out of source builds
(bsc#1012628).
- mptcp: fix possible divide by zero (bsc#1012628).
- selftests: mptcp: clean tmp files in simult_flows (bsc#1012628).
- net: hso: add failure handler for add_net_device (bsc#1012628).
- net: dsa: b53: Fix calculating number of switch ports
(bsc#1012628).
- net: dsa: b53: Set correct number of ports in the DSA struct
(bsc#1012628).
- mptcp: Only send extra TCP acks in eligible socket states
(bsc#1012628).
- netfilter: socket: icmp6: fix use-after-scope (bsc#1012628).
- fq_codel: reject silly quantum parameters (bsc#1012628).
- qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
(bsc#1012628).
- iwlwifi: move get pnvm file name to a separate function
(bsc#1012628).
- iwlwifi: pnvm: Fix a memory leak in 'iwl_pnvm_get_from_fs()'
(bsc#1012628).
- ip_gre: validate csum_start only on pull (bsc#1012628).
- net: dsa: b53: Fix IMP port setup on BCM5301x (bsc#1012628).
- bnxt_en: fix stored FW_PSID version masks (bsc#1012628).
- bnxt_en: Fix asic.rev in devlink dev info command (bsc#1012628).
- bnxt_en: Fix possible unintended driver initiated error recovery
(bsc#1012628).
- ip6_gre: Revert "ip6_gre: add validation for csum_start"
(bsc#1012628).
- mfd: lpc_sch: Rename GPIOBASE to prevent build error
(bsc#1012628).
- cxgb3: fix oops on module removal (bsc#1012628).
- net: renesas: sh_eth: Fix freeing wrong tx descriptor
(bsc#1012628).
- bnxt_en: Fix error recovery regression (bsc#1012628).
- net: dsa: bcm_sf2: Fix array overrun in
bcm_sf2_num_active_ports() (bsc#1012628).
- s390/bpf: Fix optimizing out zero-extensions (bsc#1012628).
- s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant
(bsc#1012628).
- s390/bpf: Fix branch shortening during codegen pass
(bsc#1012628).
- Update config files.
- commit aa9b3e1
- Revert "Revert "rpm: Abolish scritplet templating (bsc#1189841).""
This reverts commit f924054cc523527b52203e352adb073db0962f5f.
New suse-module-tools were accepted to factory:
https://build.opensuse.org/request/show/919089
- commit 6abad1e
==== ldb ====
Version update (2.3.0 -> 2.4.0)
- Update to version 2.4.0
+ Improve calculate_popt_array_length()
+ Use C99 initializers for builtin_popt_options[]
+ pyldb: Fix Message.items() for a message containing elements
+ pyldb: Add test for Message.items()
+ tests: Use ldbsearch '--scope instead of '-s'
+ pyldb: fix a typo
+ Change page size of guidindexpackv1.ldb
+ Use a 1MiB lmdb so the test also passes on aarch64 CentOS stream
+ attrib_handler casefold: simplify space dropping
+ fix ldb_comparison_fold off-by-one overrun
+ CVE-2020-27840: pytests: move Dn.validate test to ldb
+ CVE-2020-27840 ldb_dn: avoid head corruption in ldb_dn_explode
+ CVE-2021-20277 ldb/attrib_handlers casefold: stay in bounds
+ CVE-2021-20277 ldb tests: ldb_match tests with extra spaces
+ improve comments for ldb_module_connect_backend()
+ test/ldb_tdb: correct introductory comments
+ ldb.h: remove undefined async_ctx function signatures
+ correct comments in attrib_handers val_to_int64
+ dn tests use cmocka print functions
+ ldb_match: remove redundant check
+ add tests for ldb_wildcard_compare
+ ldb_match: trailing chunk must match end of string
+ pyldb: catch potential overflow error in py_timestring
+ ldb: remove some 'if PY3's in tests
+ Add missing break in switch statement
==== libcap ====
Version update (2.51 -> 2.59)
- update to 2.59:
* Fixed a potential libcap memory leak by adding a destructor
* Major improvement is that there is a path for Linux-PAM compliant
applications to support setting Ambient vector Capabilities via pam_cap.so now
* Added libcap cap_proc_root() API function
* Added color support to captree
* Fixed contrib/sucap/su to correctly handle the Inheritable flag
* capsh enhancements
* getcap -r / now generates readable output
* The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
runnable as standalone binaries
* The module pam_cap.so now contains support for a default=<IAB> module argument
* Enhanced capsh --suggest to also compare against the capability value names
and not just their descriptions
* Added capsh --current support
* Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
* Fix for a corner case infinite loop handling long strings
* Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
* Added a Go utility, captree, to display the process (and thread) graph along with
the POSIX.1e and IAB capabilities of each PID{TID} tree.
==== libjpeg-turbo ====
- previous version updates fixes following bugs:
CVE-2014-9092, CVE-2018-14498, CVE-2019-2201, CVE-2020-17541
(bsc#1128712, bsc#1186764, bsc#807183, bsc#906761)
==== libsolv ====
Version update (0.7.19 -> 0.7.20)
- fix misparsing of '&' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20
- Disable python2 usage on suse_version >= 1550 by default (still
possible to use osc build --with=python).
==== libsoup2 ====
- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)
==== lz4 ====
- version 1.9.3 fixes also CVE-2021-3520 [bsc#1185438]
==== suse-module-tools ====
Version update (16.0.10+7 -> 16.0.11)
- Update to version 16.0.11:
* inkmp-script(postun): don't pass existing files to weak-modules2
(boo#1191200)
* kernel-scriptlets: skip cert scriptlet on non-UEFI systems
(boo#1191260)
==== tar ====
- The following issues have already been fixed in this package but
weren't previously mentioned in the changes file:
* bsc#1181131
* bsc#1120610
==== timezone ====
Version update (2021a -> 2021c)
- timezone update 2021c:
* Revert almost all of 2021b's changes to the 'backward' file
* Fix a bug in 'zic -b fat' that caused old timestamps to be
mishandled in 32-bit-only readers
- timezone update 2021b:
* Jordan now starts DST on February's last Thursday.
* Samoa no longer observes DST.
* Move some backward-compatibility links to 'backward'.
* Rename Pacific/Enderbury to Pacific/Kanton.
* Correct many pre-1993 transitions in Malawi, Portugal, etc.
* zic now creates each output file or link atomically.
* zic -L no longer omits the POSIX TZ string in its output.
* zic fixes for truncation and leap second table expiration.
* zic now follows POSIX for TZ strings using all-year DST.
* Fix some localtime crashes and bugs in obscure cases.
* zdump -v now outputs more-useful boundary cases.
* tzfile.5 better matches a draft successor to RFC 8536.
==== transactional-update ====
Version update (3.5.5 -> 3.5.6)
Subpackages: dracut-transactional-update libtukit0 transactional-update-zypp-config tukit
- Version 3.5.6
- tukit: Add S/390 bootloader support [bsc#1189807]
- t-u: support purge-kernels with t-u patch [bsc#1190788]
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the aarch64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
kernel-default-base (5.14.6 -> 5.14.9)
kernel-source (5.14.6 -> 5.14.9)
libjpeg-turbo
suse-module-tools (16.0.10+7 -> 16.0.11)
=== Details ===
==== kernel-default-base ====
Version update (5.14.6 -> 5.14.9)
- Add nls_utf8 module (boo#1190797)
==== kernel-source ====
Version update (5.14.6 -> 5.14.9)
- ALSA: usb-audio: Restrict rates for the shared clocks
(bsc#1190418).
- commit d0ace7f
- Update
patches.kernel.org/5.14.9-147-Revert-drm-vc4-hdmi-runtime-PM-changes.patch
(bsc#1012628 bsc#1190469).
- Delete patches.suse/drm-vc4-hdmi-Fix-HPD-GPIO-detection.patch.
The former superseded the latter.
- commit 2bc4ba2
- Linux 5.14.9 (bsc#1012628).
- mm, hwpoison: add is_free_buddy_page() in HWPoisonHandlable()
(bsc#1012628).
- ocfs2: drop acl cache for directories too (bsc#1012628).
- mm/debug: sync up MR_CONTIG_RANGE and MR_LONGTERM_PIN
(bsc#1012628).
- mm: fix uninitialized use in overcommit_policy_handler
(bsc#1012628).
- usb: gadget: r8a66597: fix a loop in set_feature()
(bsc#1012628).
- usb: gadget: u_audio: EP-OUT bInterval in fback frequency
(bsc#1012628).
- usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave
(bsc#1012628).
- usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA
(bsc#1012628).
- usb: musb: tusb6010: uninitialized data in
tusb_fifo_write_unaligned() (bsc#1012628).
- cifs: Not to defer close on file when lock is set (bsc#1012628).
- cifs: Fix soft lockup during fsstress (bsc#1012628).
- cifs: fix incorrect check for null pointer in header_assemble
(bsc#1012628).
- xen/x86: fix PV trap handling on secondary processors
(bsc#1012628).
- usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c
(bsc#1012628).
- USB: serial: cp210x: add ID for GW Instek GDM-834x Digital
Multimeter (bsc#1012628).
- USB: cdc-acm: fix minor-number release (bsc#1012628).
- Revert "USB: bcma: Add a check for devm_gpiod_get"
(bsc#1012628).
- binder: make sure fd closes complete (bsc#1012628).
- binder: fix freeze race (bsc#1012628).
- staging: greybus: uart: fix tty use after free (bsc#1012628).
- usb: isp1760: do not sleep in field register poll (bsc#1012628).
- Re-enable UAS for LaCie Rugged USB3-FW with fk quirk
(bsc#1012628).
- usb: dwc3: core: balance phy init and exit (bsc#1012628).
- usb: cdns3: fix race condition before setting doorbell
(bsc#1012628).
- usb: core: hcd: Add support for deferring roothub registration
(bsc#1012628).
- USB: serial: mos7840: remove duplicated 0xac24 device ID
(bsc#1012628).
- USB: serial: option: add Telit LN920 compositions (bsc#1012628).
- USB: serial: option: remove duplicate USB device ID
(bsc#1012628).
- USB: serial: option: add device id for Foxconn T99W265
(bsc#1012628).
- misc: bcm-vk: fix tty registration race (bsc#1012628).
- misc: genwqe: Fixes DMA mask setting (bsc#1012628).
- mcb: fix error handling in mcb_alloc_bus() (bsc#1012628).
- KVM: rseq: Update rseq when processing NOTIFY_RESUME on xfer
to KVM guest (bsc#1012628).
- erofs: fix up erofs_lookup tracepoint (bsc#1012628).
- nexthop: Fix division by zero while replacing a resilient group
(bsc#1012628).
- btrfs: prevent __btrfs_dump_space_info() to underflow its free
space (bsc#1012628).
- xhci: Set HCD flag to defer primary roothub registration
(bsc#1012628).
- serial: 8250: 8250_omap: Fix RX_LVL register offset
(bsc#1012628).
- serial: mvebu-uart: fix driver's tx_empty callback
(bsc#1012628).
- scsi: sd_zbc: Ensure buffer size is aligned to SECTOR_SIZE
(bsc#1012628).
- drm/amd/pm: Update intermediate power state for SI
(bsc#1012628).
- net: hso: fix muxed tty registration (bsc#1012628).
- platform/x86: amd-pmc: Increase the response register timeout
(bsc#1012628).
- arm64: Restore forced disabling of KPTI on ThunderX
(bsc#1012628).
- arm64: Mitigate MTE issues with str{n}cmp() (bsc#1012628).
- comedi: Fix memory leak in compat_insnlist() (bsc#1012628).
- regulator: qcom-rpmh-regulator: fix pm8009-1 ldo7 resource name
(bsc#1012628).
- afs: Fix page leak (bsc#1012628).
- afs: Fix incorrect triggering of sillyrename on 3rd-party
invalidation (bsc#1012628).
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS
server (bsc#1012628).
- afs: Fix updating of i_blocks on file/dir extension
(bsc#1012628).
- platform/x86/intel: punit_ipc: Drop wrong use of ACPI_PTR()
(bsc#1012628).
- regulator: max14577: Revert "regulator: max14577: Add proper
module aliases strings" (bsc#1012628).
- NLM: Fix svcxdr_encode_owner() (bsc#1012628).
- virtio-net: fix pages leaking when building skb in big mode
(bsc#1012628).
- enetc: Fix illegal access when reading affinity_hint
(bsc#1012628).
- enetc: Fix uninitialized struct dim_sample field usage
(bsc#1012628).
- net: dsa: tear down devlink port regions when tearing down
the devlink port on error (bsc#1012628).
- net: bgmac-bcma: handle deferred probe error due to mac-address
(bsc#1012628).
- napi: fix race inside napi_enable (bsc#1012628).
- bnxt_en: Fix TX timeout when TX ring size is set to the smallest
(bsc#1012628).
- net: hns3: fix change RSS 'hfunc' ineffective issue
(bsc#1012628).
- net: hns3: fix inconsistent vf id print (bsc#1012628).
- net: hns3: fix misuse vf id and vport id in some logs
(bsc#1012628).
- net: hns3: check queue id range before using (bsc#1012628).
- net: hns3: check vlan id before using it (bsc#1012628).
- net: hns3: fix a return value error in hclge_get_reset_status()
(bsc#1012628).
- net/smc: add missing error check in smc_clc_prfx_set()
(bsc#1012628).
- net/smc: fix 'workqueue leaked lock' in smc_conn_abort_work
(bsc#1012628).
- net: dsa: fix dsa_tree_setup error path (bsc#1012628).
- net: dsa: don't allocate the slave_mii_bus using devres
(bsc#1012628).
- net: dsa: realtek: register the MDIO bus under devres
(bsc#1012628).
- platform/x86: dell: fix DELL_WMI_PRIVACY dependencies & build
error (bsc#1012628).
- kselftest/arm64: signal: Add SVE to the set of features we
can check for (bsc#1012628).
- kselftest/arm64: signal: Skip tests if required features are
missing (bsc#1012628).
- spi: Revert modalias changes (bsc#1012628).
- s390/qeth: fix NULL deref in qeth_clear_working_pool_list()
(bsc#1012628).
- gpiolib: acpi: Make set-debounce-timeout failures non fatal
(bsc#1012628).
- gpio: uniphier: Fix void functions to remove return value
(bsc#1012628).
- qed: rdma - don't wait for resources under hw error recovery
flow (bsc#1012628).
- mptcp: ensure tx skbs always have the MPTCP ext (bsc#1012628).
- nexthop: Fix memory leaks in nexthop notification chain
listeners (bsc#1012628).
- nfc: st-nci: Add SPI ID matching DT compatible (bsc#1012628).
- net: ethernet: mtk_eth_soc: avoid creating duplicate offload
entries (bsc#1012628).
- net: mscc: ocelot: fix forwarding from BLOCKING ports remaining
enabled (bsc#1012628).
- net/mlx4_en: Don't allow aRFS for encapsulated packets
(bsc#1012628).
- atlantic: Fix issue in the pm resume flow (bsc#1012628).
- drm/amdkfd: map SVM range with correct access permission
(bsc#1012628).
- drm/amdkfd: fix dma mapping leaking warning (bsc#1012628).
- scsi: iscsi: Adjust iface sysfs attr detection (bsc#1012628).
- scsi: target: Fix the pgr/alua_support_store functions
(bsc#1012628).
- tty: synclink_gt: rename a conflicting function name
(bsc#1012628).
- fpga: machxo2-spi: Return an error on failure (bsc#1012628).
- fpga: machxo2-spi: Fix missing error code in
machxo2_write_complete() (bsc#1012628).
- x86/fault: Fix wrong signal when vsyscall fails with pkey
(bsc#1012628).
- nvme-tcp: fix incorrect h2cdata pdu offset accounting
(bsc#1012628).
- nvme: keep ctrl->namespaces ordered (bsc#1012628).
- thermal/core: Potential buffer overflow in
thermal_build_list_of_policies() (bsc#1012628).
- cifs: fix a sign extension bug (bsc#1012628).
- scsi: sd_zbc: Support disks with more than 2**32 logical blocks
(bsc#1012628).
- scsi: ufs: Revert "Utilize Transfer Request List Completion
Notification Register" (bsc#1012628).
- scsi: ufs: Retry aborted SCSI commands instead of completing
these successfully (bsc#1012628).
- scsi: ufs: core: Unbreak the reset handler (bsc#1012628).
- scsi: qla2xxx: Restore initiator in dual mode (bsc#1012628).
- scsi: lpfc: Use correct scnprintf() limit (bsc#1012628).
- irqchip/goldfish-pic: Select GENERIC_IRQ_CHIP to fix build
(bsc#1012628).
- irqchip/gic-v3-its: Fix potential VPE leak on error
(bsc#1012628).
- md: fix a lock order reversal in md_alloc (bsc#1012628).
- x86/asm: Fix SETZ size enqcmds() build failure (bsc#1012628).
- io_uring: fix race between poll completion and cancel_hash
insertion (bsc#1012628).
- io_uring: fix missing set of EPOLLONESHOT for CQ ring overflow
(bsc#1012628).
- io_uring: put provided buffer meta data under memcg accounting
(bsc#1012628).
- io_uring: don't punt files update to io-wq unconditionally
(bsc#1012628).
- blktrace: Fix uaf in blk_trace access after removing by sysfs
(bsc#1012628).
- net: phylink: Update SFP selected interface on advertising
changes (bsc#1012628).
- net: macb: fix use after free on rmmod (bsc#1012628).
- net: stmmac: allow CSR clock of 300MHz (bsc#1012628).
- blk-mq: avoid to iterate over stale request (bsc#1012628).
- m68k: Double cast io functions to unsigned long (bsc#1012628).
- ipv6: delay fib6_sernum increase in fib6_add (bsc#1012628).
- dma-debug: prevent an error message from causing runtime
problems (bsc#1012628).
- cpufreq: intel_pstate: Override parameters if HWP forced by BIOS
(bsc#1012628).
- bpf: Add oversize check before call kvcalloc() (bsc#1012628).
- xen/balloon: use a kernel thread instead a workqueue
(bsc#1012628).
- nvme-multipath: fix ANA state updates when a namespace is not
present (bsc#1012628).
- nvme-rdma: destroy cm id before destroy qp to avoid use after
free (bsc#1012628).
- sparc32: page align size in arch_dma_alloc (bsc#1012628).
- amd/display: downgrade validation failure log level
(bsc#1012628).
- drm/ttm: fix type mismatch error on sparc64 (bsc#1012628).
- block: check if a profile is actually registered in
blk_integrity_unregister (bsc#1012628).
- block: flush the integrity workqueue in blk_integrity_unregister
(bsc#1012628).
- blk-cgroup: fix UAF by grabbing blkcg lock before destroying
blkg pd (bsc#1012628).
- compiler.h: Introduce absolute_pointer macro (bsc#1012628).
- net: i825xx: Use absolute_pointer for memcpy from fixed memory
location (bsc#1012628).
- sparc: avoid stringop-overread errors (bsc#1012628).
- qnx4: avoid stringop-overread errors (bsc#1012628).
- parisc: Use absolute_pointer() to define PAGE0 (bsc#1012628).
- drm/amdkfd: make needs_pcie_atomics FW-version dependent
(bsc#1012628).
- drm/amd/display: Fix unstable HPCP compliance on Chrome Barcelo
(bsc#1012628).
- drm/amd/display: Link training retry fix for abort case
(bsc#1012628).
- amd/display: enable panel orientation quirks (bsc#1012628).
- arm64: Mark __stack_chk_guard as __ro_after_init (bsc#1012628).
- alpha: Declare virt_to_phys and virt_to_bus parameter as
pointer to volatile (bsc#1012628).
- net: 6pack: Fix tx timeout and slot time (bsc#1012628).
- spi: Fix tegra20 build with CONFIG_PM=n (bsc#1012628).
- libperf evsel: Make use of FD robust (bsc#1012628).
- Revert drm/vc4 hdmi runtime PM changes (bsc#1012628).
- EDAC/synopsys: Fix wrong value type assignment for edac_mode
(bsc#1012628).
- EDAC/dmc520: Assign the proper type to dimm->edac_mode
(bsc#1012628).
- x86/setup: Call early_reserve_memory() earlier (bsc#1012628).
- thermal/drivers/int340x: Do not set a wrong tcc offset on resume
(bsc#1012628).
- irqchip/armada-370-xp: Fix ack/eoi breakage (bsc#1012628).
- arm64: add MTE supported check to thread switching and syscall
entry/exit (bsc#1012628).
- USB: serial: cp210x: fix dropped characters with CP2102
(bsc#1012628).
- software node: balance refcount for managed software nodes
(bsc#1012628).
- xen/balloon: fix balloon kthread freezing (bsc#1012628).
- qnx4: work around gcc false positive warning bug (bsc#1012628).
- usb: gadget: f_uac2: Add missing companion descriptor for
feedback EP (bsc#1012628).
- usb: gadget: f_uac2: Populate SS descriptors' wBytesPerInterval
(bsc#1012628).
- Refresh patches.suse/drm-vc4-hdmi-Fix-HPD-GPIO-detection.patch.
- commit 85f5318
- arm64: Update config files. (bsc#1185927)
Set PINCTRL_ZYNQMP as build-in.
- commit 4ae263c
- blacklist.conf: add idxd commit
- commit 06dbf6b
- nvmet: fix a width vs precision bug in
nvmet_subsys_attr_serial_show() (git-fixes).
- commit fef4ef0
- Linux 5.14.8 (bsc#1012628).
- drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV (bsc#1012628).
- selinux,smack: fix subjective/objective credential use mixups
(bsc#1012628).
- io_uring: fix off-by-one in BUILD_BUG_ON check of
__REQ_F_LAST_BIT (bsc#1012628).
- cifs: properly invalidate cached root handle when closing it
(bsc#1012628).
- sched/idle: Make the idle timer expire in hard interrupt context
(bsc#1012628).
- rtc: rx8010: select REGMAP_I2C (bsc#1012628).
- blk-mq: allow 4x BLK_MAX_REQUEST_COUNT at blk_plug for
multiple_queues (bsc#1012628).
- blk-throttle: fix UAF by deleteing timer in blk_throtl_exit()
(bsc#1012628).
- block: genhd: don't call blkdev_show() with major_names_lock
held (bsc#1012628).
- nvmet: fixup buffer overrun in nvmet_subsys_attr_serial()
(bsc#1012628).
- pwm: stm32-lp: Don't modify HW state in .remove() callback
(bsc#1012628).
- pwm: rockchip: Don't modify HW state in .remove() callback
(bsc#1012628).
- pwm: img: Don't modify HW state in .remove() callback
(bsc#1012628).
- habanalabs: cannot sleep while holding spinlock (bsc#1012628).
- habanalabs: add "in device creation" status (bsc#1012628).
- habanalabs: fix mmu node address resolution in debugfs
(bsc#1012628).
- habanalabs: add validity check for event ID received from F/W
(bsc#1012628).
- drm/amdgpu: fix fdinfo race with process exit (bsc#1012628).
- drm/amd/display: Fix memory leak reported by coverity
(bsc#1012628).
- drm/amdgpu: Fixes to returning VBIOS RAS EEPROM address
(bsc#1012628).
- habanalabs: fix nullifying of destroyed mmu pgt pool
(bsc#1012628).
- thermal/drivers/rcar_gen3_thermal: Store TSC id as unsigned int
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group
(bsc#1012628).
- nilfs2: fix NULL pointer in nilfs_##name##_attr_release
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_create_device_group
(bsc#1012628).
- btrfs: fix lockdep warning while mounting sprout fs
(bsc#1012628).
- btrfs: delay blkdev_put until after the device remove
(bsc#1012628).
- btrfs: update the bdev time directly when closing (bsc#1012628).
- s390/unwind: use current_frame_address() to unwind current task
(bsc#1012628).
- ceph: lockdep annotations for try_nonblocking_invalidate
(bsc#1012628).
- ceph: remove the capsnaps when removing caps (bsc#1012628).
- ceph: request Fw caps before updating the mtime in
ceph_write_iter (bsc#1012628).
- ceph: fix memory leak on decode error in ceph_handle_caps
(bsc#1012628).
- ACPI: PM: s2idle: Run both AMD and Microsoft methods if both
are supported (bsc#1012628).
- ASoC: audio-graph: respawn Platform Support (bsc#1012628).
- s390: add kmemleak annotation in stack_alloc() (bsc#1012628).
- dmaengine: xilinx_dma: Set DMA mask for coherent APIs
(bsc#1012628).
- dmaengine: ioat: depends on !UML (bsc#1012628).
- cxl/pci: Introduce cdevm_file_operations (bsc#1012628).
- cxl: Move cxl_core to new directory (bsc#1012628).
- dmaengine: sprd: Add missing MODULE_DEVICE_TABLE (bsc#1012628).
- dmaengine: idxd: depends on !UML (bsc#1012628).
- riscv: dts: microchip: mpfs-icicle: Fix serial console
(bsc#1012628).
- of: property: Disable fw_devlink DT support for X86
(bsc#1012628).
- drm/ttm: Fix a deadlock if the target BO is not idle during swap
(bsc#1012628).
- arm64: mm: limit linear region to 51 bits for KVM in nVHE mode
(bsc#1012628).
- iommu/vt-d: Fix a deadlock in intel_svm_drain_prq()
(bsc#1012628).
- iommu/vt-d: Fix PASID leak in intel_svm_unbind_mm()
(bsc#1012628).
- iommu/amd: Relocate GAMSup check to early_enable_iommus
(bsc#1012628).
- parisc: Move pci_dev_is_behind_card_dino to where it is used
(bsc#1012628).
- dma-buf: DMABUF_DEBUG should depend on DMA_SHARED_BUFFER
(bsc#1012628).
- Update config files.
- dma-buf: DMABUF_MOVE_NOTIFY should depend on DMA_SHARED_BUFFER
(bsc#1012628).
- Update config files.
- drivers: base: cacheinfo: Get rid of
DEFINE_SMP_CALL_CACHE_FUNCTION() (bsc#1012628).
- drm/amdgpu: Disable PCIE_DPM on Intel RKL Platform
(bsc#1012628).
- thermal/core: Fix thermal_cooling_device_register() prototype
(bsc#1012628).
- tracing/boot: Fix to loop on only subkeys (bsc#1012628).
- tools/bootconfig: Fix tracing_on option checking in
ftrace2bconf.sh (bsc#1012628).
- Kconfig.debug: drop selecting non-existing
HARDLOCKUP_DETECTOR_ARCH (bsc#1012628).
- init: move usermodehelper_enable() to populate_rootfs()
(bsc#1012628).
- math: RATIONAL_KUNIT_TEST should depend on RATIONAL instead
of selecting it (bsc#1012628).
- SUNRPC: don't pause on incomplete allocation (bsc#1012628).
- s390/entry: make oklabel within CHKSTG macro local
(bsc#1012628).
- platform/chrome: cros_ec_trace: Fix format warnings
(bsc#1012628).
- platform/chrome: sensorhub: Add trace events for sample
(bsc#1012628).
- dmaengine: idxd: clear block on fault flag when clear wq
(bsc#1012628).
- dmaengine: idxd: fix abort status check (bsc#1012628).
- dmaengine: idxd: fix wq slot allocation index check
(bsc#1012628).
- dmaengine: idxd: have command status always set (bsc#1012628).
- dmanegine: idxd: cleanup all device related bits after disabling
device (bsc#1012628).
- pwm: mxs: Don't modify HW state in .probe() after the PWM chip
was registered (bsc#1012628).
- pwm: lpc32xx: Don't modify HW state in .probe() after the PWM
chip was registered (bsc#1012628).
- ceph: cancel delayed work instead of flushing on mdsc teardown
(bsc#1012628).
- thermal/drivers/qcom/spmi-adc-tm5: Don't abort probing if a
sensor is not used (bsc#1012628).
- PM: sleep: core: Avoid setting power.must_resume to false
(bsc#1012628).
- profiling: fix shift-out-of-bounds bugs (bsc#1012628).
- nilfs2: use refcount_dec_and_lock() to fix potential UAF
(bsc#1012628).
- prctl: allow to setup brk for et_dyn executables (bsc#1012628).
- pwm: ab8500: Fix register offset calculation to not depend on
probe order (bsc#1012628).
- 9p/trans_virtio: Remove sysfs file on probe failure
(bsc#1012628).
- thermal/drivers/exynos: Fix an error code in exynos_tmu_probe()
(bsc#1012628).
- n64cart: fix return value check in n64cart_probe()
(bsc#1012628).
- staging: rtl8723bs: fix wpa_set_auth_algs() function
(bsc#1012628).
- perf tools: Allow build-id with trailing zeros (bsc#1012628).
- perf symbol: Look for ImageBase in PE file to compute .text
offset (bsc#1012628).
- perf test: Fix bpf test sample mismatch reporting (bsc#1012628).
- dmaengine: acpi: Avoid comparison GSI with Linux vIRQ
(bsc#1012628).
- RDMA/mlx5: Fix xlt_chunk_align calculation (bsc#1012628).
- RDMA/hns: Enable stash feature of HIP09 (bsc#1012628).
- um: virtio_uml: fix memory leak on init failures (bsc#1012628).
- coredump: fix memleak in dump_vma_snapshot() (bsc#1012628).
- um: fix stub location calculation (bsc#1012628).
- staging: rtl8192u: Fix bitwise vs logical operator in
TranslateRxSignalStuff819xUsb() (bsc#1012628).
- console: consume APC, DM, DCS (bsc#1012628).
- PCI: aardvark: Fix reporting CRS value (bsc#1012628).
- PCI: pci-bridge-emul: Add PCIe Root Capabilities Register
(bsc#1012628).
- commit 94242c6
- kernel-binary.spec: suse-kernel-rpm-scriptlets required for uninstall as
well.
Fixes: e98096d5cf85 ("rpm: Abolish scritplet templating (bsc#1189841).")
- commit e082fbf
- Linux 5.14.7 (bsc#1012628).
- net: stmmac: fix MAC not working when system resume back with
WoL active (bsc#1012628).
- io_uring: ensure symmetry in handling iter types in
loop_rw_iter() (bsc#1012628).
- swiotlb-xen: avoid double free (bsc#1012628).
- swiotlb-xen: fix late init retry (bsc#1012628).
- xen: reset legacy rtc flag for PV domU (bsc#1012628).
- xen: fix usage of pmd_populate in mremap for pv guests
(bsc#1012628).
- bnx2x: Fix enabling network interfaces without VFs
(bsc#1012628).
- arm64/sve: Use correct size when reinitialising SVE state
(bsc#1012628).
- PM: base: power: don't try to use non-existing RTC for storing
data (bsc#1012628).
- PCI: Add AMD GPU multi-function power dependencies
(bsc#1012628).
- drm/amd/display: Get backlight from PWM if DMCU is not
initialized (bsc#1012628).
- drm/amd/display: dsc mst 2 4K displays go dark with 2 lane HBR3
(bsc#1012628).
- drm/amd/display: Fix white screen page fault for gpuvm
(bsc#1012628).
- drm/amd/pm: fix runpm hang when amdgpu loaded prior to sound
driver (bsc#1012628).
- drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10 (bsc#1012628).
- drm/amdgpu: use IS_ERR for debugfs APIs (bsc#1012628).
- drm/amdgpu: fix use after free during BO move (bsc#1012628).
- drm/amdgpu: add amdgpu_amdkfd_resume_iommu (bsc#1012628).
- drm/amdgpu: move iommu_resume before ip init/resume
(bsc#1012628).
- drm/amd/pm: fix the issue of uploading powerplay table
(bsc#1012628).
- drm/amdkfd: separate kfd_iommu_resume from kfd_resume
(bsc#1012628).
- drm/radeon: pass drm dev radeon_agp_head_init directly
(bsc#1012628).
- io_uring: allow retry for O_NONBLOCK if async is supported
(bsc#1012628).
- drm/etnaviv: return context from etnaviv_iommu_context_get
(bsc#1012628).
- drm/etnaviv: put submit prev MMU context when it exists
(bsc#1012628).
- drm/etnaviv: stop abusing mmu_context as FE running marker
(bsc#1012628).
- drm/etnaviv: keep MMU context across runtime suspend/resume
(bsc#1012628).
- drm/etnaviv: exec and MMU state is lost when resetting the GPU
(bsc#1012628).
- drm/etnaviv: fix MMU context leak on GPU reset (bsc#1012628).
- drm/etnaviv: reference MMU context when setting up hardware
state (bsc#1012628).
- drm/etnaviv: add missing MMU context put when reaping MMU
mapping (bsc#1012628).
- s390/sclp: fix Secure-IPL facility detection (bsc#1012628).
- net: qrtr: revert check in qrtr_endpoint_post() (bsc#1012628).
- x86/pat: Pass valid address to sanitize_phys() (bsc#1012628).
- x86/mm: Fix kern_addr_valid() to cope with existing but not
present entries (bsc#1012628).
- x86/mce: Avoid infinite loop for copy from user recovery
(bsc#1012628).
- net: remove the unnecessary check in cipso_v4_doi_free
(bsc#1012628).
- net/{mlx5|nfp|bnxt}: Remove unnecessary RTNL lock assert
(bsc#1012628).
- net-caif: avoid user-triggerable WARN_ON(1) (bsc#1012628).
- ptp: dp83640: don't define PAGE0 (bsc#1012628).
- dccp: don't duplicate ccid when cloning dccp sock (bsc#1012628).
- net/l2tp: Fix reference count leak in l2tp_udp_recv_core
(bsc#1012628).
- r6040: Restore MDIO clock frequency after MAC reset
(bsc#1012628).
- tipc: increase timeout in tipc_sk_enqueue() (bsc#1012628).
- drm/rockchip: cdn-dp-core: Make cdn_dp_core_resume
__maybe_unused (bsc#1012628).
- rtc: cmos: Disable irq around direct invocation of
cmos_interrupt() (bsc#1012628).
- drm/i915/dp: return proper DPRX link training result
(bsc#1012628).
- perf machine: Initialize srcline string member in add_location
struct (bsc#1012628).
- net/mlx5: FWTrace, cancel work on alloc pd error flow
(bsc#1012628).
- net/mlx5: Fix potential sleeping in atomic context
(bsc#1012628).
- net: stmmac: fix system hang caused by eee_ctrl_timer during
suspend/resume (bsc#1012628).
- igc: fix tunnel offloading (bsc#1012628).
- nvme-tcp: fix io_work priority inversion (bsc#1012628).
- powerpc/64s: system call scv tabort fix for corrupt irq
soft-mask state (bsc#1012628).
- events: Reuse value read using READ_ONCE instead of re-reading
it (bsc#1012628).
- net: ipa: initialize all filter table slots (bsc#1012628).
- gen_compile_commands: fix missing 'sys' package (bsc#1012628).
- vhost_net: fix OoB on sendmsg() failure (bsc#1012628).
- net/af_unix: fix a data-race in unix_dgram_poll (bsc#1012628).
- net: dsa: destroy the phylink instance on any error in
dsa_slave_phy_setup (bsc#1012628).
- x86/uaccess: Fix 32-bit __get_user_asm_u64() when
CC_HAS_ASM_GOTO_OUTPUT=y (bsc#1012628).
- tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
(bsc#1012628).
- selftest: net: fix typo in altname test (bsc#1012628).
- qed: Handle management FW error (bsc#1012628).
- udp_tunnel: Fix udp_tunnel_nic work-queue type (bsc#1012628).
- dt-bindings: arm: Fix Toradex compatible typo (bsc#1012628).
- ibmvnic: check failover_pending in login response (bsc#1012628).
- KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode
changing registers (bsc#1012628).
- powerpc/64s: system call rfscv workaround for TM bugs
(bsc#1012628).
- powerpc/mce: Fix access error in mce handler (bsc#1012628).
- s390/pci_mmio: fully validate the VMA before calling
follow_pte() (bsc#1012628).
- bnxt_en: make bnxt_free_skbs() safe to call after
bnxt_free_mem() (bsc#1012628).
- net: hns3: pad the short tunnel frame before sending to hardware
(bsc#1012628).
- net: hns3: change affinity_mask to numa node range
(bsc#1012628).
- net: hns3: disable mac in flr process (bsc#1012628).
- net: hns3: fix the timing issue of VF clearing interrupt sources
(bsc#1012628).
- net: stmmac: platform: fix build warning when with
!CONFIG_PM_SLEEP (bsc#1012628).
- Drivers: hv: vmbus: Fix kernel crash upon unbinding a device
from uio_hv_generic driver (bsc#1012628).
- net/mlx5e: Fix mutual exclusion between CQE compression and
HW TS (bsc#1012628).
- ice: Correctly deal with PFs that do not support RDMA
(bsc#1012628).
- net: dsa: qca8k: fix kernel panic with legacy mdio mapping
(bsc#1012628).
- net: dsa: lantiq_gswip: Add 200ms assert delay (bsc#1012628).
- net: hns3: fix the exception when query imp info (bsc#1012628).
- nvme: avoid race in shutdown namespace removal (bsc#1012628).
- blkcg: fix memory leak in blk_iolatency_init (bsc#1012628).
- net: dsa: flush switchdev workqueue before tearing down CPU/DSA
ports (bsc#1012628).
- mlxbf_gige: clear valid_polarity upon open (bsc#1012628).
- dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
(bsc#1012628).
- remoteproc: qcom: wcnss: Fix race with iris probe (bsc#1012628).
- mfd: db8500-prcmu: Adjust map to reality (bsc#1012628).
- PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms
(bsc#1012628).
- fuse: fix use after free in fuse_read_interrupt() (bsc#1012628).
- PCI: tegra194: Fix handling BME_CHGED event (bsc#1012628).
- PCI: tegra194: Fix MSI-X programming (bsc#1012628).
- PCI: tegra: Fix OF node reference leak (bsc#1012628).
- mfd: Don't use irq_create_mapping() to resolve a mapping
(bsc#1012628).
- PCI: rcar: Fix runtime PM imbalance in rcar_pcie_ep_probe()
(bsc#1012628).
- riscv: fix the global name pfn_base confliction error
(bsc#1012628).
- KVM: arm64: Make hyp_panic() more robust when protected mode
is enabled (bsc#1012628).
- tracing/probes: Reject events which have the same name of
existing one (bsc#1012628).
- PCI: cadence: Use bitfield for *quirk_retrain_flag* instead
of bool (bsc#1012628).
- PCI: cadence: Add quirk flag to set minimum delay in LTSSM
Detect.Quiet state (bsc#1012628).
- PCI: j721e: Add PCIe support for J7200 (bsc#1012628).
- PCI: j721e: Add PCIe support for AM64 (bsc#1012628).
- PCI: Add ACS quirks for Cavium multi-function devices
(bsc#1012628).
- watchdog: Start watchdog in watchdog_set_last_hw_keepalive
only if appropriate (bsc#1012628).
- octeontx2-af: Add additional register check to rvu_poll_reg()
(bsc#1012628).
- Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6 (bsc#1012628).
- flow: fix object-size-mismatch warning in
flowi{4,6}_to_flowi_common() (bsc#1012628).
- net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
(bsc#1012628).
- block, bfq: honor already-setup queue merges (bsc#1012628).
- PCI: ibmphp: Fix double unmap of io_mem (bsc#1012628).
- loop: reduce the loop_ctl_mutex scope (bsc#1012628).
- ethtool: Fix an error code in cxgb2.c (bsc#1012628).
- NTB: Fix an error code in ntb_msit_probe() (bsc#1012628).
- NTB: perf: Fix an error code in perf_setup_inbuf()
(bsc#1012628).
- stmmac: dwmac-loongson:Fix missing return value (bsc#1012628).
- net: phylink: add suspend/resume support (bsc#1012628).
- mfd: axp20x: Update AXP288 volatile ranges (bsc#1012628).
- backlight: ktd253: Stabilize backlight (bsc#1012628).
- PCI: controller: PCI_IXP4XX should depend on ARCH_IXP4XX
(bsc#1012628).
- PCI: of: Don't fail devm_pci_alloc_host_bridge() on missing
'ranges' (bsc#1012628).
- PCI: iproc: Fix BCMA probe resource handling (bsc#1012628).
- netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with
mutex (bsc#1012628).
- KVM: arm64: Restrict IPA size to maximum 48 bits on 4K and
16K page size (bsc#1012628).
- PCI: Fix pci_dev_str_match_path() alloc while atomic bug
(bsc#1012628).
- mfd: tqmx86: Clear GPIO IRQ resource when no IRQ is set
(bsc#1012628).
- tracing/boot: Fix a hist trigger dependency for boot time
tracing (bsc#1012628).
- mtd: mtdconcat: Judge callback existence based on the master
(bsc#1012628).
- mtd: mtdconcat: Check _read, _write callbacks existence before
assignment (bsc#1012628).
- KVM: arm64: Fix read-side race on updates to vcpu reset state
(bsc#1012628).
- KVM: arm64: Handle PSCI resets before userspace touches vCPU
state (bsc#1012628).
- PCI/PTM: Remove error message at boot (bsc#1012628).
- PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
(bsc#1012628).
- mtd: rawnand: cafe: Fix a resource leak in the error handling
path of 'cafe_nand_probe()' (bsc#1012628).
- ARC: export clear_user_page() for modules (bsc#1012628).
- perf config: Fix caching and memory leak in
perf_home_perfconfig() (bsc#1012628).
- perf unwind: Do not overwrite
FEATURE_CHECK_LDFLAGS-libunwind-{x86,aarch64} (bsc#1012628).
- perf bench inject-buildid: Handle writen() errors (bsc#1012628).
- gpio: mpc8xxx: Fix a resources leak in the error handling path
of 'mpc8xxx_probe()' (bsc#1012628).
- gpio: mpc8xxx: Fix a potential double iounmap call in
'mpc8xxx_probe()' (bsc#1012628).
- gpio: mpc8xxx: Use 'devm_gpiochip_add_data()' to simplify the
code and avoid a leak (bsc#1012628).
- io_uring: retry in case of short read on block device
(bsc#1012628).
- net: dsa: tag_rtl4_a: Fix egress tags (bsc#1012628).
- tools build: Fix feature detect clean for out of source builds
(bsc#1012628).
- mptcp: fix possible divide by zero (bsc#1012628).
- selftests: mptcp: clean tmp files in simult_flows (bsc#1012628).
- net: hso: add failure handler for add_net_device (bsc#1012628).
- net: dsa: b53: Fix calculating number of switch ports
(bsc#1012628).
- net: dsa: b53: Set correct number of ports in the DSA struct
(bsc#1012628).
- mptcp: Only send extra TCP acks in eligible socket states
(bsc#1012628).
- netfilter: socket: icmp6: fix use-after-scope (bsc#1012628).
- fq_codel: reject silly quantum parameters (bsc#1012628).
- qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
(bsc#1012628).
- iwlwifi: move get pnvm file name to a separate function
(bsc#1012628).
- iwlwifi: pnvm: Fix a memory leak in 'iwl_pnvm_get_from_fs()'
(bsc#1012628).
- ip_gre: validate csum_start only on pull (bsc#1012628).
- net: dsa: b53: Fix IMP port setup on BCM5301x (bsc#1012628).
- bnxt_en: fix stored FW_PSID version masks (bsc#1012628).
- bnxt_en: Fix asic.rev in devlink dev info command (bsc#1012628).
- bnxt_en: Fix possible unintended driver initiated error recovery
(bsc#1012628).
- ip6_gre: Revert "ip6_gre: add validation for csum_start"
(bsc#1012628).
- mfd: lpc_sch: Rename GPIOBASE to prevent build error
(bsc#1012628).
- cxgb3: fix oops on module removal (bsc#1012628).
- net: renesas: sh_eth: Fix freeing wrong tx descriptor
(bsc#1012628).
- bnxt_en: Fix error recovery regression (bsc#1012628).
- net: dsa: bcm_sf2: Fix array overrun in
bcm_sf2_num_active_ports() (bsc#1012628).
- s390/bpf: Fix optimizing out zero-extensions (bsc#1012628).
- s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant
(bsc#1012628).
- s390/bpf: Fix branch shortening during codegen pass
(bsc#1012628).
- Update config files.
- commit aa9b3e1
- Revert "Revert "rpm: Abolish scritplet templating (bsc#1189841).""
This reverts commit f924054cc523527b52203e352adb073db0962f5f.
New suse-module-tools were accepted to factory:
https://build.opensuse.org/request/show/919089
- commit 6abad1e
==== libjpeg-turbo ====
- previous version updates fixes following bugs:
CVE-2014-9092, CVE-2018-14498, CVE-2019-2201, CVE-2020-17541
(bsc#1128712, bsc#1186764, bsc#807183, bsc#906761)
==== suse-module-tools ====
Version update (16.0.10+7 -> 16.0.11)
- Update to version 16.0.11:
* inkmp-script(postun): don't pass existing files to weak-modules2
(boo#1191200)
* kernel-scriptlets: skip cert scriptlet on non-UEFI systems
(boo#1191260)
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the aarch64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=3&version=T…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
kernel-default-base (5.14.6 -> 5.14.9)
kernel-source (5.14.6 -> 5.14.9)
libjpeg-turbo
suse-module-tools (16.0.10+7 -> 16.0.11)
=== Details ===
==== kernel-default-base ====
Version update (5.14.6 -> 5.14.9)
- Add nls_utf8 module (boo#1190797)
==== kernel-source ====
Version update (5.14.6 -> 5.14.9)
- ALSA: usb-audio: Restrict rates for the shared clocks
(bsc#1190418).
- commit d0ace7f
- Update
patches.kernel.org/5.14.9-147-Revert-drm-vc4-hdmi-runtime-PM-changes.patch
(bsc#1012628 bsc#1190469).
- Delete patches.suse/drm-vc4-hdmi-Fix-HPD-GPIO-detection.patch.
The former superseded the latter.
- commit 2bc4ba2
- Linux 5.14.9 (bsc#1012628).
- mm, hwpoison: add is_free_buddy_page() in HWPoisonHandlable()
(bsc#1012628).
- ocfs2: drop acl cache for directories too (bsc#1012628).
- mm/debug: sync up MR_CONTIG_RANGE and MR_LONGTERM_PIN
(bsc#1012628).
- mm: fix uninitialized use in overcommit_policy_handler
(bsc#1012628).
- usb: gadget: r8a66597: fix a loop in set_feature()
(bsc#1012628).
- usb: gadget: u_audio: EP-OUT bInterval in fback frequency
(bsc#1012628).
- usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave
(bsc#1012628).
- usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA
(bsc#1012628).
- usb: musb: tusb6010: uninitialized data in
tusb_fifo_write_unaligned() (bsc#1012628).
- cifs: Not to defer close on file when lock is set (bsc#1012628).
- cifs: Fix soft lockup during fsstress (bsc#1012628).
- cifs: fix incorrect check for null pointer in header_assemble
(bsc#1012628).
- xen/x86: fix PV trap handling on secondary processors
(bsc#1012628).
- usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c
(bsc#1012628).
- USB: serial: cp210x: add ID for GW Instek GDM-834x Digital
Multimeter (bsc#1012628).
- USB: cdc-acm: fix minor-number release (bsc#1012628).
- Revert "USB: bcma: Add a check for devm_gpiod_get"
(bsc#1012628).
- binder: make sure fd closes complete (bsc#1012628).
- binder: fix freeze race (bsc#1012628).
- staging: greybus: uart: fix tty use after free (bsc#1012628).
- usb: isp1760: do not sleep in field register poll (bsc#1012628).
- Re-enable UAS for LaCie Rugged USB3-FW with fk quirk
(bsc#1012628).
- usb: dwc3: core: balance phy init and exit (bsc#1012628).
- usb: cdns3: fix race condition before setting doorbell
(bsc#1012628).
- usb: core: hcd: Add support for deferring roothub registration
(bsc#1012628).
- USB: serial: mos7840: remove duplicated 0xac24 device ID
(bsc#1012628).
- USB: serial: option: add Telit LN920 compositions (bsc#1012628).
- USB: serial: option: remove duplicate USB device ID
(bsc#1012628).
- USB: serial: option: add device id for Foxconn T99W265
(bsc#1012628).
- misc: bcm-vk: fix tty registration race (bsc#1012628).
- misc: genwqe: Fixes DMA mask setting (bsc#1012628).
- mcb: fix error handling in mcb_alloc_bus() (bsc#1012628).
- KVM: rseq: Update rseq when processing NOTIFY_RESUME on xfer
to KVM guest (bsc#1012628).
- erofs: fix up erofs_lookup tracepoint (bsc#1012628).
- nexthop: Fix division by zero while replacing a resilient group
(bsc#1012628).
- btrfs: prevent __btrfs_dump_space_info() to underflow its free
space (bsc#1012628).
- xhci: Set HCD flag to defer primary roothub registration
(bsc#1012628).
- serial: 8250: 8250_omap: Fix RX_LVL register offset
(bsc#1012628).
- serial: mvebu-uart: fix driver's tx_empty callback
(bsc#1012628).
- scsi: sd_zbc: Ensure buffer size is aligned to SECTOR_SIZE
(bsc#1012628).
- drm/amd/pm: Update intermediate power state for SI
(bsc#1012628).
- net: hso: fix muxed tty registration (bsc#1012628).
- platform/x86: amd-pmc: Increase the response register timeout
(bsc#1012628).
- arm64: Restore forced disabling of KPTI on ThunderX
(bsc#1012628).
- arm64: Mitigate MTE issues with str{n}cmp() (bsc#1012628).
- comedi: Fix memory leak in compat_insnlist() (bsc#1012628).
- regulator: qcom-rpmh-regulator: fix pm8009-1 ldo7 resource name
(bsc#1012628).
- afs: Fix page leak (bsc#1012628).
- afs: Fix incorrect triggering of sillyrename on 3rd-party
invalidation (bsc#1012628).
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS
server (bsc#1012628).
- afs: Fix updating of i_blocks on file/dir extension
(bsc#1012628).
- platform/x86/intel: punit_ipc: Drop wrong use of ACPI_PTR()
(bsc#1012628).
- regulator: max14577: Revert "regulator: max14577: Add proper
module aliases strings" (bsc#1012628).
- NLM: Fix svcxdr_encode_owner() (bsc#1012628).
- virtio-net: fix pages leaking when building skb in big mode
(bsc#1012628).
- enetc: Fix illegal access when reading affinity_hint
(bsc#1012628).
- enetc: Fix uninitialized struct dim_sample field usage
(bsc#1012628).
- net: dsa: tear down devlink port regions when tearing down
the devlink port on error (bsc#1012628).
- net: bgmac-bcma: handle deferred probe error due to mac-address
(bsc#1012628).
- napi: fix race inside napi_enable (bsc#1012628).
- bnxt_en: Fix TX timeout when TX ring size is set to the smallest
(bsc#1012628).
- net: hns3: fix change RSS 'hfunc' ineffective issue
(bsc#1012628).
- net: hns3: fix inconsistent vf id print (bsc#1012628).
- net: hns3: fix misuse vf id and vport id in some logs
(bsc#1012628).
- net: hns3: check queue id range before using (bsc#1012628).
- net: hns3: check vlan id before using it (bsc#1012628).
- net: hns3: fix a return value error in hclge_get_reset_status()
(bsc#1012628).
- net/smc: add missing error check in smc_clc_prfx_set()
(bsc#1012628).
- net/smc: fix 'workqueue leaked lock' in smc_conn_abort_work
(bsc#1012628).
- net: dsa: fix dsa_tree_setup error path (bsc#1012628).
- net: dsa: don't allocate the slave_mii_bus using devres
(bsc#1012628).
- net: dsa: realtek: register the MDIO bus under devres
(bsc#1012628).
- platform/x86: dell: fix DELL_WMI_PRIVACY dependencies & build
error (bsc#1012628).
- kselftest/arm64: signal: Add SVE to the set of features we
can check for (bsc#1012628).
- kselftest/arm64: signal: Skip tests if required features are
missing (bsc#1012628).
- spi: Revert modalias changes (bsc#1012628).
- s390/qeth: fix NULL deref in qeth_clear_working_pool_list()
(bsc#1012628).
- gpiolib: acpi: Make set-debounce-timeout failures non fatal
(bsc#1012628).
- gpio: uniphier: Fix void functions to remove return value
(bsc#1012628).
- qed: rdma - don't wait for resources under hw error recovery
flow (bsc#1012628).
- mptcp: ensure tx skbs always have the MPTCP ext (bsc#1012628).
- nexthop: Fix memory leaks in nexthop notification chain
listeners (bsc#1012628).
- nfc: st-nci: Add SPI ID matching DT compatible (bsc#1012628).
- net: ethernet: mtk_eth_soc: avoid creating duplicate offload
entries (bsc#1012628).
- net: mscc: ocelot: fix forwarding from BLOCKING ports remaining
enabled (bsc#1012628).
- net/mlx4_en: Don't allow aRFS for encapsulated packets
(bsc#1012628).
- atlantic: Fix issue in the pm resume flow (bsc#1012628).
- drm/amdkfd: map SVM range with correct access permission
(bsc#1012628).
- drm/amdkfd: fix dma mapping leaking warning (bsc#1012628).
- scsi: iscsi: Adjust iface sysfs attr detection (bsc#1012628).
- scsi: target: Fix the pgr/alua_support_store functions
(bsc#1012628).
- tty: synclink_gt: rename a conflicting function name
(bsc#1012628).
- fpga: machxo2-spi: Return an error on failure (bsc#1012628).
- fpga: machxo2-spi: Fix missing error code in
machxo2_write_complete() (bsc#1012628).
- x86/fault: Fix wrong signal when vsyscall fails with pkey
(bsc#1012628).
- nvme-tcp: fix incorrect h2cdata pdu offset accounting
(bsc#1012628).
- nvme: keep ctrl->namespaces ordered (bsc#1012628).
- thermal/core: Potential buffer overflow in
thermal_build_list_of_policies() (bsc#1012628).
- cifs: fix a sign extension bug (bsc#1012628).
- scsi: sd_zbc: Support disks with more than 2**32 logical blocks
(bsc#1012628).
- scsi: ufs: Revert "Utilize Transfer Request List Completion
Notification Register" (bsc#1012628).
- scsi: ufs: Retry aborted SCSI commands instead of completing
these successfully (bsc#1012628).
- scsi: ufs: core: Unbreak the reset handler (bsc#1012628).
- scsi: qla2xxx: Restore initiator in dual mode (bsc#1012628).
- scsi: lpfc: Use correct scnprintf() limit (bsc#1012628).
- irqchip/goldfish-pic: Select GENERIC_IRQ_CHIP to fix build
(bsc#1012628).
- irqchip/gic-v3-its: Fix potential VPE leak on error
(bsc#1012628).
- md: fix a lock order reversal in md_alloc (bsc#1012628).
- x86/asm: Fix SETZ size enqcmds() build failure (bsc#1012628).
- io_uring: fix race between poll completion and cancel_hash
insertion (bsc#1012628).
- io_uring: fix missing set of EPOLLONESHOT for CQ ring overflow
(bsc#1012628).
- io_uring: put provided buffer meta data under memcg accounting
(bsc#1012628).
- io_uring: don't punt files update to io-wq unconditionally
(bsc#1012628).
- blktrace: Fix uaf in blk_trace access after removing by sysfs
(bsc#1012628).
- net: phylink: Update SFP selected interface on advertising
changes (bsc#1012628).
- net: macb: fix use after free on rmmod (bsc#1012628).
- net: stmmac: allow CSR clock of 300MHz (bsc#1012628).
- blk-mq: avoid to iterate over stale request (bsc#1012628).
- m68k: Double cast io functions to unsigned long (bsc#1012628).
- ipv6: delay fib6_sernum increase in fib6_add (bsc#1012628).
- dma-debug: prevent an error message from causing runtime
problems (bsc#1012628).
- cpufreq: intel_pstate: Override parameters if HWP forced by BIOS
(bsc#1012628).
- bpf: Add oversize check before call kvcalloc() (bsc#1012628).
- xen/balloon: use a kernel thread instead a workqueue
(bsc#1012628).
- nvme-multipath: fix ANA state updates when a namespace is not
present (bsc#1012628).
- nvme-rdma: destroy cm id before destroy qp to avoid use after
free (bsc#1012628).
- sparc32: page align size in arch_dma_alloc (bsc#1012628).
- amd/display: downgrade validation failure log level
(bsc#1012628).
- drm/ttm: fix type mismatch error on sparc64 (bsc#1012628).
- block: check if a profile is actually registered in
blk_integrity_unregister (bsc#1012628).
- block: flush the integrity workqueue in blk_integrity_unregister
(bsc#1012628).
- blk-cgroup: fix UAF by grabbing blkcg lock before destroying
blkg pd (bsc#1012628).
- compiler.h: Introduce absolute_pointer macro (bsc#1012628).
- net: i825xx: Use absolute_pointer for memcpy from fixed memory
location (bsc#1012628).
- sparc: avoid stringop-overread errors (bsc#1012628).
- qnx4: avoid stringop-overread errors (bsc#1012628).
- parisc: Use absolute_pointer() to define PAGE0 (bsc#1012628).
- drm/amdkfd: make needs_pcie_atomics FW-version dependent
(bsc#1012628).
- drm/amd/display: Fix unstable HPCP compliance on Chrome Barcelo
(bsc#1012628).
- drm/amd/display: Link training retry fix for abort case
(bsc#1012628).
- amd/display: enable panel orientation quirks (bsc#1012628).
- arm64: Mark __stack_chk_guard as __ro_after_init (bsc#1012628).
- alpha: Declare virt_to_phys and virt_to_bus parameter as
pointer to volatile (bsc#1012628).
- net: 6pack: Fix tx timeout and slot time (bsc#1012628).
- spi: Fix tegra20 build with CONFIG_PM=n (bsc#1012628).
- libperf evsel: Make use of FD robust (bsc#1012628).
- Revert drm/vc4 hdmi runtime PM changes (bsc#1012628).
- EDAC/synopsys: Fix wrong value type assignment for edac_mode
(bsc#1012628).
- EDAC/dmc520: Assign the proper type to dimm->edac_mode
(bsc#1012628).
- x86/setup: Call early_reserve_memory() earlier (bsc#1012628).
- thermal/drivers/int340x: Do not set a wrong tcc offset on resume
(bsc#1012628).
- irqchip/armada-370-xp: Fix ack/eoi breakage (bsc#1012628).
- arm64: add MTE supported check to thread switching and syscall
entry/exit (bsc#1012628).
- USB: serial: cp210x: fix dropped characters with CP2102
(bsc#1012628).
- software node: balance refcount for managed software nodes
(bsc#1012628).
- xen/balloon: fix balloon kthread freezing (bsc#1012628).
- qnx4: work around gcc false positive warning bug (bsc#1012628).
- usb: gadget: f_uac2: Add missing companion descriptor for
feedback EP (bsc#1012628).
- usb: gadget: f_uac2: Populate SS descriptors' wBytesPerInterval
(bsc#1012628).
- Refresh patches.suse/drm-vc4-hdmi-Fix-HPD-GPIO-detection.patch.
- commit 85f5318
- arm64: Update config files. (bsc#1185927)
Set PINCTRL_ZYNQMP as build-in.
- commit 4ae263c
- blacklist.conf: add idxd commit
- commit 06dbf6b
- nvmet: fix a width vs precision bug in
nvmet_subsys_attr_serial_show() (git-fixes).
- commit fef4ef0
- Linux 5.14.8 (bsc#1012628).
- drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV (bsc#1012628).
- selinux,smack: fix subjective/objective credential use mixups
(bsc#1012628).
- io_uring: fix off-by-one in BUILD_BUG_ON check of
__REQ_F_LAST_BIT (bsc#1012628).
- cifs: properly invalidate cached root handle when closing it
(bsc#1012628).
- sched/idle: Make the idle timer expire in hard interrupt context
(bsc#1012628).
- rtc: rx8010: select REGMAP_I2C (bsc#1012628).
- blk-mq: allow 4x BLK_MAX_REQUEST_COUNT at blk_plug for
multiple_queues (bsc#1012628).
- blk-throttle: fix UAF by deleteing timer in blk_throtl_exit()
(bsc#1012628).
- block: genhd: don't call blkdev_show() with major_names_lock
held (bsc#1012628).
- nvmet: fixup buffer overrun in nvmet_subsys_attr_serial()
(bsc#1012628).
- pwm: stm32-lp: Don't modify HW state in .remove() callback
(bsc#1012628).
- pwm: rockchip: Don't modify HW state in .remove() callback
(bsc#1012628).
- pwm: img: Don't modify HW state in .remove() callback
(bsc#1012628).
- habanalabs: cannot sleep while holding spinlock (bsc#1012628).
- habanalabs: add "in device creation" status (bsc#1012628).
- habanalabs: fix mmu node address resolution in debugfs
(bsc#1012628).
- habanalabs: add validity check for event ID received from F/W
(bsc#1012628).
- drm/amdgpu: fix fdinfo race with process exit (bsc#1012628).
- drm/amd/display: Fix memory leak reported by coverity
(bsc#1012628).
- drm/amdgpu: Fixes to returning VBIOS RAS EEPROM address
(bsc#1012628).
- habanalabs: fix nullifying of destroyed mmu pgt pool
(bsc#1012628).
- thermal/drivers/rcar_gen3_thermal: Store TSC id as unsigned int
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group
(bsc#1012628).
- nilfs2: fix NULL pointer in nilfs_##name##_attr_release
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_create_device_group
(bsc#1012628).
- btrfs: fix lockdep warning while mounting sprout fs
(bsc#1012628).
- btrfs: delay blkdev_put until after the device remove
(bsc#1012628).
- btrfs: update the bdev time directly when closing (bsc#1012628).
- s390/unwind: use current_frame_address() to unwind current task
(bsc#1012628).
- ceph: lockdep annotations for try_nonblocking_invalidate
(bsc#1012628).
- ceph: remove the capsnaps when removing caps (bsc#1012628).
- ceph: request Fw caps before updating the mtime in
ceph_write_iter (bsc#1012628).
- ceph: fix memory leak on decode error in ceph_handle_caps
(bsc#1012628).
- ACPI: PM: s2idle: Run both AMD and Microsoft methods if both
are supported (bsc#1012628).
- ASoC: audio-graph: respawn Platform Support (bsc#1012628).
- s390: add kmemleak annotation in stack_alloc() (bsc#1012628).
- dmaengine: xilinx_dma: Set DMA mask for coherent APIs
(bsc#1012628).
- dmaengine: ioat: depends on !UML (bsc#1012628).
- cxl/pci: Introduce cdevm_file_operations (bsc#1012628).
- cxl: Move cxl_core to new directory (bsc#1012628).
- dmaengine: sprd: Add missing MODULE_DEVICE_TABLE (bsc#1012628).
- dmaengine: idxd: depends on !UML (bsc#1012628).
- riscv: dts: microchip: mpfs-icicle: Fix serial console
(bsc#1012628).
- of: property: Disable fw_devlink DT support for X86
(bsc#1012628).
- drm/ttm: Fix a deadlock if the target BO is not idle during swap
(bsc#1012628).
- arm64: mm: limit linear region to 51 bits for KVM in nVHE mode
(bsc#1012628).
- iommu/vt-d: Fix a deadlock in intel_svm_drain_prq()
(bsc#1012628).
- iommu/vt-d: Fix PASID leak in intel_svm_unbind_mm()
(bsc#1012628).
- iommu/amd: Relocate GAMSup check to early_enable_iommus
(bsc#1012628).
- parisc: Move pci_dev_is_behind_card_dino to where it is used
(bsc#1012628).
- dma-buf: DMABUF_DEBUG should depend on DMA_SHARED_BUFFER
(bsc#1012628).
- Update config files.
- dma-buf: DMABUF_MOVE_NOTIFY should depend on DMA_SHARED_BUFFER
(bsc#1012628).
- Update config files.
- drivers: base: cacheinfo: Get rid of
DEFINE_SMP_CALL_CACHE_FUNCTION() (bsc#1012628).
- drm/amdgpu: Disable PCIE_DPM on Intel RKL Platform
(bsc#1012628).
- thermal/core: Fix thermal_cooling_device_register() prototype
(bsc#1012628).
- tracing/boot: Fix to loop on only subkeys (bsc#1012628).
- tools/bootconfig: Fix tracing_on option checking in
ftrace2bconf.sh (bsc#1012628).
- Kconfig.debug: drop selecting non-existing
HARDLOCKUP_DETECTOR_ARCH (bsc#1012628).
- init: move usermodehelper_enable() to populate_rootfs()
(bsc#1012628).
- math: RATIONAL_KUNIT_TEST should depend on RATIONAL instead
of selecting it (bsc#1012628).
- SUNRPC: don't pause on incomplete allocation (bsc#1012628).
- s390/entry: make oklabel within CHKSTG macro local
(bsc#1012628).
- platform/chrome: cros_ec_trace: Fix format warnings
(bsc#1012628).
- platform/chrome: sensorhub: Add trace events for sample
(bsc#1012628).
- dmaengine: idxd: clear block on fault flag when clear wq
(bsc#1012628).
- dmaengine: idxd: fix abort status check (bsc#1012628).
- dmaengine: idxd: fix wq slot allocation index check
(bsc#1012628).
- dmaengine: idxd: have command status always set (bsc#1012628).
- dmanegine: idxd: cleanup all device related bits after disabling
device (bsc#1012628).
- pwm: mxs: Don't modify HW state in .probe() after the PWM chip
was registered (bsc#1012628).
- pwm: lpc32xx: Don't modify HW state in .probe() after the PWM
chip was registered (bsc#1012628).
- ceph: cancel delayed work instead of flushing on mdsc teardown
(bsc#1012628).
- thermal/drivers/qcom/spmi-adc-tm5: Don't abort probing if a
sensor is not used (bsc#1012628).
- PM: sleep: core: Avoid setting power.must_resume to false
(bsc#1012628).
- profiling: fix shift-out-of-bounds bugs (bsc#1012628).
- nilfs2: use refcount_dec_and_lock() to fix potential UAF
(bsc#1012628).
- prctl: allow to setup brk for et_dyn executables (bsc#1012628).
- pwm: ab8500: Fix register offset calculation to not depend on
probe order (bsc#1012628).
- 9p/trans_virtio: Remove sysfs file on probe failure
(bsc#1012628).
- thermal/drivers/exynos: Fix an error code in exynos_tmu_probe()
(bsc#1012628).
- n64cart: fix return value check in n64cart_probe()
(bsc#1012628).
- staging: rtl8723bs: fix wpa_set_auth_algs() function
(bsc#1012628).
- perf tools: Allow build-id with trailing zeros (bsc#1012628).
- perf symbol: Look for ImageBase in PE file to compute .text
offset (bsc#1012628).
- perf test: Fix bpf test sample mismatch reporting (bsc#1012628).
- dmaengine: acpi: Avoid comparison GSI with Linux vIRQ
(bsc#1012628).
- RDMA/mlx5: Fix xlt_chunk_align calculation (bsc#1012628).
- RDMA/hns: Enable stash feature of HIP09 (bsc#1012628).
- um: virtio_uml: fix memory leak on init failures (bsc#1012628).
- coredump: fix memleak in dump_vma_snapshot() (bsc#1012628).
- um: fix stub location calculation (bsc#1012628).
- staging: rtl8192u: Fix bitwise vs logical operator in
TranslateRxSignalStuff819xUsb() (bsc#1012628).
- console: consume APC, DM, DCS (bsc#1012628).
- PCI: aardvark: Fix reporting CRS value (bsc#1012628).
- PCI: pci-bridge-emul: Add PCIe Root Capabilities Register
(bsc#1012628).
- commit 94242c6
- kernel-binary.spec: suse-kernel-rpm-scriptlets required for uninstall as
well.
Fixes: e98096d5cf85 ("rpm: Abolish scritplet templating (bsc#1189841).")
- commit e082fbf
- Linux 5.14.7 (bsc#1012628).
- net: stmmac: fix MAC not working when system resume back with
WoL active (bsc#1012628).
- io_uring: ensure symmetry in handling iter types in
loop_rw_iter() (bsc#1012628).
- swiotlb-xen: avoid double free (bsc#1012628).
- swiotlb-xen: fix late init retry (bsc#1012628).
- xen: reset legacy rtc flag for PV domU (bsc#1012628).
- xen: fix usage of pmd_populate in mremap for pv guests
(bsc#1012628).
- bnx2x: Fix enabling network interfaces without VFs
(bsc#1012628).
- arm64/sve: Use correct size when reinitialising SVE state
(bsc#1012628).
- PM: base: power: don't try to use non-existing RTC for storing
data (bsc#1012628).
- PCI: Add AMD GPU multi-function power dependencies
(bsc#1012628).
- drm/amd/display: Get backlight from PWM if DMCU is not
initialized (bsc#1012628).
- drm/amd/display: dsc mst 2 4K displays go dark with 2 lane HBR3
(bsc#1012628).
- drm/amd/display: Fix white screen page fault for gpuvm
(bsc#1012628).
- drm/amd/pm: fix runpm hang when amdgpu loaded prior to sound
driver (bsc#1012628).
- drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10 (bsc#1012628).
- drm/amdgpu: use IS_ERR for debugfs APIs (bsc#1012628).
- drm/amdgpu: fix use after free during BO move (bsc#1012628).
- drm/amdgpu: add amdgpu_amdkfd_resume_iommu (bsc#1012628).
- drm/amdgpu: move iommu_resume before ip init/resume
(bsc#1012628).
- drm/amd/pm: fix the issue of uploading powerplay table
(bsc#1012628).
- drm/amdkfd: separate kfd_iommu_resume from kfd_resume
(bsc#1012628).
- drm/radeon: pass drm dev radeon_agp_head_init directly
(bsc#1012628).
- io_uring: allow retry for O_NONBLOCK if async is supported
(bsc#1012628).
- drm/etnaviv: return context from etnaviv_iommu_context_get
(bsc#1012628).
- drm/etnaviv: put submit prev MMU context when it exists
(bsc#1012628).
- drm/etnaviv: stop abusing mmu_context as FE running marker
(bsc#1012628).
- drm/etnaviv: keep MMU context across runtime suspend/resume
(bsc#1012628).
- drm/etnaviv: exec and MMU state is lost when resetting the GPU
(bsc#1012628).
- drm/etnaviv: fix MMU context leak on GPU reset (bsc#1012628).
- drm/etnaviv: reference MMU context when setting up hardware
state (bsc#1012628).
- drm/etnaviv: add missing MMU context put when reaping MMU
mapping (bsc#1012628).
- s390/sclp: fix Secure-IPL facility detection (bsc#1012628).
- net: qrtr: revert check in qrtr_endpoint_post() (bsc#1012628).
- x86/pat: Pass valid address to sanitize_phys() (bsc#1012628).
- x86/mm: Fix kern_addr_valid() to cope with existing but not
present entries (bsc#1012628).
- x86/mce: Avoid infinite loop for copy from user recovery
(bsc#1012628).
- net: remove the unnecessary check in cipso_v4_doi_free
(bsc#1012628).
- net/{mlx5|nfp|bnxt}: Remove unnecessary RTNL lock assert
(bsc#1012628).
- net-caif: avoid user-triggerable WARN_ON(1) (bsc#1012628).
- ptp: dp83640: don't define PAGE0 (bsc#1012628).
- dccp: don't duplicate ccid when cloning dccp sock (bsc#1012628).
- net/l2tp: Fix reference count leak in l2tp_udp_recv_core
(bsc#1012628).
- r6040: Restore MDIO clock frequency after MAC reset
(bsc#1012628).
- tipc: increase timeout in tipc_sk_enqueue() (bsc#1012628).
- drm/rockchip: cdn-dp-core: Make cdn_dp_core_resume
__maybe_unused (bsc#1012628).
- rtc: cmos: Disable irq around direct invocation of
cmos_interrupt() (bsc#1012628).
- drm/i915/dp: return proper DPRX link training result
(bsc#1012628).
- perf machine: Initialize srcline string member in add_location
struct (bsc#1012628).
- net/mlx5: FWTrace, cancel work on alloc pd error flow
(bsc#1012628).
- net/mlx5: Fix potential sleeping in atomic context
(bsc#1012628).
- net: stmmac: fix system hang caused by eee_ctrl_timer during
suspend/resume (bsc#1012628).
- igc: fix tunnel offloading (bsc#1012628).
- nvme-tcp: fix io_work priority inversion (bsc#1012628).
- powerpc/64s: system call scv tabort fix for corrupt irq
soft-mask state (bsc#1012628).
- events: Reuse value read using READ_ONCE instead of re-reading
it (bsc#1012628).
- net: ipa: initialize all filter table slots (bsc#1012628).
- gen_compile_commands: fix missing 'sys' package (bsc#1012628).
- vhost_net: fix OoB on sendmsg() failure (bsc#1012628).
- net/af_unix: fix a data-race in unix_dgram_poll (bsc#1012628).
- net: dsa: destroy the phylink instance on any error in
dsa_slave_phy_setup (bsc#1012628).
- x86/uaccess: Fix 32-bit __get_user_asm_u64() when
CC_HAS_ASM_GOTO_OUTPUT=y (bsc#1012628).
- tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
(bsc#1012628).
- selftest: net: fix typo in altname test (bsc#1012628).
- qed: Handle management FW error (bsc#1012628).
- udp_tunnel: Fix udp_tunnel_nic work-queue type (bsc#1012628).
- dt-bindings: arm: Fix Toradex compatible typo (bsc#1012628).
- ibmvnic: check failover_pending in login response (bsc#1012628).
- KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode
changing registers (bsc#1012628).
- powerpc/64s: system call rfscv workaround for TM bugs
(bsc#1012628).
- powerpc/mce: Fix access error in mce handler (bsc#1012628).
- s390/pci_mmio: fully validate the VMA before calling
follow_pte() (bsc#1012628).
- bnxt_en: make bnxt_free_skbs() safe to call after
bnxt_free_mem() (bsc#1012628).
- net: hns3: pad the short tunnel frame before sending to hardware
(bsc#1012628).
- net: hns3: change affinity_mask to numa node range
(bsc#1012628).
- net: hns3: disable mac in flr process (bsc#1012628).
- net: hns3: fix the timing issue of VF clearing interrupt sources
(bsc#1012628).
- net: stmmac: platform: fix build warning when with
!CONFIG_PM_SLEEP (bsc#1012628).
- Drivers: hv: vmbus: Fix kernel crash upon unbinding a device
from uio_hv_generic driver (bsc#1012628).
- net/mlx5e: Fix mutual exclusion between CQE compression and
HW TS (bsc#1012628).
- ice: Correctly deal with PFs that do not support RDMA
(bsc#1012628).
- net: dsa: qca8k: fix kernel panic with legacy mdio mapping
(bsc#1012628).
- net: dsa: lantiq_gswip: Add 200ms assert delay (bsc#1012628).
- net: hns3: fix the exception when query imp info (bsc#1012628).
- nvme: avoid race in shutdown namespace removal (bsc#1012628).
- blkcg: fix memory leak in blk_iolatency_init (bsc#1012628).
- net: dsa: flush switchdev workqueue before tearing down CPU/DSA
ports (bsc#1012628).
- mlxbf_gige: clear valid_polarity upon open (bsc#1012628).
- dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
(bsc#1012628).
- remoteproc: qcom: wcnss: Fix race with iris probe (bsc#1012628).
- mfd: db8500-prcmu: Adjust map to reality (bsc#1012628).
- PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms
(bsc#1012628).
- fuse: fix use after free in fuse_read_interrupt() (bsc#1012628).
- PCI: tegra194: Fix handling BME_CHGED event (bsc#1012628).
- PCI: tegra194: Fix MSI-X programming (bsc#1012628).
- PCI: tegra: Fix OF node reference leak (bsc#1012628).
- mfd: Don't use irq_create_mapping() to resolve a mapping
(bsc#1012628).
- PCI: rcar: Fix runtime PM imbalance in rcar_pcie_ep_probe()
(bsc#1012628).
- riscv: fix the global name pfn_base confliction error
(bsc#1012628).
- KVM: arm64: Make hyp_panic() more robust when protected mode
is enabled (bsc#1012628).
- tracing/probes: Reject events which have the same name of
existing one (bsc#1012628).
- PCI: cadence: Use bitfield for *quirk_retrain_flag* instead
of bool (bsc#1012628).
- PCI: cadence: Add quirk flag to set minimum delay in LTSSM
Detect.Quiet state (bsc#1012628).
- PCI: j721e: Add PCIe support for J7200 (bsc#1012628).
- PCI: j721e: Add PCIe support for AM64 (bsc#1012628).
- PCI: Add ACS quirks for Cavium multi-function devices
(bsc#1012628).
- watchdog: Start watchdog in watchdog_set_last_hw_keepalive
only if appropriate (bsc#1012628).
- octeontx2-af: Add additional register check to rvu_poll_reg()
(bsc#1012628).
- Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6 (bsc#1012628).
- flow: fix object-size-mismatch warning in
flowi{4,6}_to_flowi_common() (bsc#1012628).
- net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
(bsc#1012628).
- block, bfq: honor already-setup queue merges (bsc#1012628).
- PCI: ibmphp: Fix double unmap of io_mem (bsc#1012628).
- loop: reduce the loop_ctl_mutex scope (bsc#1012628).
- ethtool: Fix an error code in cxgb2.c (bsc#1012628).
- NTB: Fix an error code in ntb_msit_probe() (bsc#1012628).
- NTB: perf: Fix an error code in perf_setup_inbuf()
(bsc#1012628).
- stmmac: dwmac-loongson:Fix missing return value (bsc#1012628).
- net: phylink: add suspend/resume support (bsc#1012628).
- mfd: axp20x: Update AXP288 volatile ranges (bsc#1012628).
- backlight: ktd253: Stabilize backlight (bsc#1012628).
- PCI: controller: PCI_IXP4XX should depend on ARCH_IXP4XX
(bsc#1012628).
- PCI: of: Don't fail devm_pci_alloc_host_bridge() on missing
'ranges' (bsc#1012628).
- PCI: iproc: Fix BCMA probe resource handling (bsc#1012628).
- netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with
mutex (bsc#1012628).
- KVM: arm64: Restrict IPA size to maximum 48 bits on 4K and
16K page size (bsc#1012628).
- PCI: Fix pci_dev_str_match_path() alloc while atomic bug
(bsc#1012628).
- mfd: tqmx86: Clear GPIO IRQ resource when no IRQ is set
(bsc#1012628).
- tracing/boot: Fix a hist trigger dependency for boot time
tracing (bsc#1012628).
- mtd: mtdconcat: Judge callback existence based on the master
(bsc#1012628).
- mtd: mtdconcat: Check _read, _write callbacks existence before
assignment (bsc#1012628).
- KVM: arm64: Fix read-side race on updates to vcpu reset state
(bsc#1012628).
- KVM: arm64: Handle PSCI resets before userspace touches vCPU
state (bsc#1012628).
- PCI/PTM: Remove error message at boot (bsc#1012628).
- PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
(bsc#1012628).
- mtd: rawnand: cafe: Fix a resource leak in the error handling
path of 'cafe_nand_probe()' (bsc#1012628).
- ARC: export clear_user_page() for modules (bsc#1012628).
- perf config: Fix caching and memory leak in
perf_home_perfconfig() (bsc#1012628).
- perf unwind: Do not overwrite
FEATURE_CHECK_LDFLAGS-libunwind-{x86,aarch64} (bsc#1012628).
- perf bench inject-buildid: Handle writen() errors (bsc#1012628).
- gpio: mpc8xxx: Fix a resources leak in the error handling path
of 'mpc8xxx_probe()' (bsc#1012628).
- gpio: mpc8xxx: Fix a potential double iounmap call in
'mpc8xxx_probe()' (bsc#1012628).
- gpio: mpc8xxx: Use 'devm_gpiochip_add_data()' to simplify the
code and avoid a leak (bsc#1012628).
- io_uring: retry in case of short read on block device
(bsc#1012628).
- net: dsa: tag_rtl4_a: Fix egress tags (bsc#1012628).
- tools build: Fix feature detect clean for out of source builds
(bsc#1012628).
- mptcp: fix possible divide by zero (bsc#1012628).
- selftests: mptcp: clean tmp files in simult_flows (bsc#1012628).
- net: hso: add failure handler for add_net_device (bsc#1012628).
- net: dsa: b53: Fix calculating number of switch ports
(bsc#1012628).
- net: dsa: b53: Set correct number of ports in the DSA struct
(bsc#1012628).
- mptcp: Only send extra TCP acks in eligible socket states
(bsc#1012628).
- netfilter: socket: icmp6: fix use-after-scope (bsc#1012628).
- fq_codel: reject silly quantum parameters (bsc#1012628).
- qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
(bsc#1012628).
- iwlwifi: move get pnvm file name to a separate function
(bsc#1012628).
- iwlwifi: pnvm: Fix a memory leak in 'iwl_pnvm_get_from_fs()'
(bsc#1012628).
- ip_gre: validate csum_start only on pull (bsc#1012628).
- net: dsa: b53: Fix IMP port setup on BCM5301x (bsc#1012628).
- bnxt_en: fix stored FW_PSID version masks (bsc#1012628).
- bnxt_en: Fix asic.rev in devlink dev info command (bsc#1012628).
- bnxt_en: Fix possible unintended driver initiated error recovery
(bsc#1012628).
- ip6_gre: Revert "ip6_gre: add validation for csum_start"
(bsc#1012628).
- mfd: lpc_sch: Rename GPIOBASE to prevent build error
(bsc#1012628).
- cxgb3: fix oops on module removal (bsc#1012628).
- net: renesas: sh_eth: Fix freeing wrong tx descriptor
(bsc#1012628).
- bnxt_en: Fix error recovery regression (bsc#1012628).
- net: dsa: bcm_sf2: Fix array overrun in
bcm_sf2_num_active_ports() (bsc#1012628).
- s390/bpf: Fix optimizing out zero-extensions (bsc#1012628).
- s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant
(bsc#1012628).
- s390/bpf: Fix branch shortening during codegen pass
(bsc#1012628).
- Update config files.
- commit aa9b3e1
- Revert "Revert "rpm: Abolish scritplet templating (bsc#1189841).""
This reverts commit f924054cc523527b52203e352adb073db0962f5f.
New suse-module-tools were accepted to factory:
https://build.opensuse.org/request/show/919089
- commit 6abad1e
==== libjpeg-turbo ====
- previous version updates fixes following bugs:
CVE-2014-9092, CVE-2018-14498, CVE-2019-2201, CVE-2020-17541
(bsc#1128712, bsc#1186764, bsc#807183, bsc#906761)
==== suse-module-tools ====
Version update (16.0.10+7 -> 16.0.11)
- Update to version 16.0.11:
* inkmp-script(postun): don't pass existing files to weak-modules2
(boo#1191200)
* kernel-scriptlets: skip cert scriptlet on non-UEFI systems
(boo#1191260)
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the aarch64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
Mesa (21.2.2 -> 21.2.3)
Mesa-drivers (21.2.2 -> 21.2.3)
audit (3.0.3 -> 3.0.5)
audit-secondary (3.0.3 -> 3.0.5)
blog (2.20 -> 2.21)
btrfsprogs (5.14 -> 5.14.1)
codec2 (1.0.0 -> 1.0.1)
crypto-policies (20210225.05203d2 -> 20210917.c9d86d1)
desktop-file-utils
diffutils
dracut (055+suse.117.ge5fc2048 -> 055+suse.119.g6c4187af)
ffmpeg-4
fuse-overlayfs (1.4.0 -> 1.7.1)
gamin
gcc
gd
iio-sensor-proxy (3.1 -> 3.3)
kernel-firmware (20210901 -> 20210928)
knewstuff
libinput (1.19.0 -> 1.19.1)
libmtp (1.1.18 -> 1.1.19)
libnss_usrfiles
libsoup
libsrtp2 (2.4.1 -> 2.4.2)
libva
mozjs78 (78.13.0 -> 78.14.0)
open-iscsi
openSUSE-build-key
perl-libwww-perl (6.56 -> 6.57)
portaudio (190600_20161030 -> 190700_20210406)
rav1e
selinux-policy
systemd
sysvinit (2.99 -> 3.00)
tdb (1.4.3 -> 1.4.4)
tevent (0.10.2 -> 0.11.0)
xrdb
xwayland
=== Details ===
==== Mesa ====
Version update (21.2.2 -> 21.2.3)
Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1
- update to 21.2.3
* third bugfix release
==== Mesa-drivers ====
Version update (21.2.2 -> 21.2.3)
Subpackages: Mesa-dri Mesa-gallium
- update to 21.2.3
* third bugfix release
==== audit ====
Version update (3.0.3 -> 3.0.5)
Subpackages: libaudit1 libauparse0
- Update to version 3.0.5:
* In auditd, flush uid/gid caches when user/group added/deleted/modified
* Fixed various issues when dealing with corrupted logs
* In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
* Apply performance speedups to auparse library
* Optimize rule loading in auditctl
* Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
* Update syscall table to the 5.14 kernel
* Fixed various issues when dealing with corrupted logs
==== audit-secondary ====
Version update (3.0.3 -> 3.0.5)
Subpackages: audit python3-audit system-group-audit
- Fix hardened auditd.service (bsc#1181400)
* add fix-hardened-service.patch
Make /etc/audit read-write from the service.
Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
* add enable-stop-rules.patch
- Change default log_format from ENRICHED to RAW (bsc#1190500):
* add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
* In auditd, flush uid/gid caches when user/group added/deleted/modified
* Fixed various issues when dealing with corrupted logs
* In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
* Apply performance speedups to auparse library
* Optimize rule loading in auditctl
* Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
* Update syscall table to the 5.14 kernel
* Fixed various issues when dealing with corrupted logs
==== blog ====
Version update (2.20 -> 2.21)
Subpackages: libblogger2
- Move to /usr for UsrMerge (boo#1191057)
==== btrfsprogs ====
Version update (5.14 -> 5.14.1)
Subpackages: btrfsprogs-udev-rules libbtrfs0
- Update to 5.14.1
* fixes:
* defrag: fix parsing of compression (option -c)
* add workaround for old kernels when reading zone sizes
* let only check and restore open the fs with transid failures, namely
preventing btrfstune to do so
* convert: --uuid copy does not fail on duplicate uuids
==== codec2 ====
Version update (1.0.0 -> 1.0.1)
- Update to version 1.0.1:
* Release to support freedv-gui 1.6.1
==== crypto-policies ====
Version update (20210225.05203d2 -> 20210917.c9d86d1)
- Remove the scripts and documentation regarding
fips-finish-install and test-fips-setup
* Add crypto-policies-FIPS.patch
- Update to version 20210917.c9d86d1:
* openssl: fix disabling ChaCha20
* pacify pylint 2.11: use format strings
* pacify pylint 2.11: specify explicit encoding
* fix minor things found by new pylint
* update-crypto-policies: --check against regenerated
* update-crypto-policies: fix --check's walking order
* policygenerators/gnutls: revert disabling DTLS0.9...
* policygenerators/java: add javasystem backend
* LEGACY: bump 1023 key size to 1024
* cryptopolicies: fix 'and' in deprecation warnings
* *ssh: condition ecdh-sha2-nistp384 on SECP384R1
* nss: hopefully the last fix for nss sigalgs check
* cryptopolicies: Python 3.10 compatibility
* nss: postponing check + testing at least something
* Rename 'policy modules' to 'subpolicies'
* validation.rules: fix a missing word in error
* cryptopolicies: raise errors right after warnings
* update-crypto-policies: capitalize warnings
* cryptopolicies: syntax-precheck scope errors
* .gitlab-ci.yml, Makefile: enable codespell
* all: fix several typos
* docs: don't leave zero TLS/DTLS protocols on
* openssl: separate TLS/DTLS MinProtocol/MaxProtocol
* alg_lists: order protocols new-to-old for consistency
* alg_lists: max_{d,}tls_version
* update-crypto-policies: fix pregenerated + local.d
* openssh: allow validation with pre-8.5
* .gitlab-ci.yml: run commit-range against upstream
* openssh: Use the new name for PubkeyAcceptedKeyTypes
* sha1_in_dnssec: deprecate
* .gitlab-ci.yml: test commit ranges
* FIPS:OSPP: sign = -*-SHA2-224
* scoped policies: documentation update
* scoped policies: use new features to the fullest...
* scoped policies: rewrite + minimal policy changes
* scoped policies: rewrite preparations
* nss: postponing the version check again, to 3.64
- Remove patches fixed upstream: crypto-policies-typos.patch
- Rebase: crypto-policies-test_supported_modules_only.patch
- Merge crypto-policies-asciidoc.patch into
crypto-policies-no-build-manpages.patch
==== desktop-file-utils ====
- suse-update-mime-defaults: add Pantheon desktop environment
==== diffutils ====
- Skip stack overflow tests under qemu emulation (bsc#1190046)
==== dracut ====
Version update (055+suse.117.ge5fc2048 -> 055+suse.119.g6c4187af)
Subpackages: dracut-ima dracut-mkinitrd-deprecated
- Update to version 055+suse.119.g6c4187af:
* fix(suse-initrd): handle cases with zero modprobe.d files (bsc#1189895)
==== ffmpeg-4 ====
Subpackages: libavcodec58_134 libavformat58_76 libavutil56_70 libswresample3_9
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
denial of service vulnerability exists due to a memory leak in
avcodec_alloc_context3 at options.c (bsc#1186756).
==== fuse-overlayfs ====
Version update (1.4.0 -> 1.7.1)
- Update to version 1.7.1
* set FUSE_CAP_POSIX_ACL only when it is supported by FUSE.
* treat statx failure with EINVAL as ENOSYS, so that the fallback
is attempted.
- Update to version 1.7.0
* fix read xattrs for device files
* don't create whiteout files in opaque dirs.
* fix reading files when running with euid != 0.
* enable POSIX ACLs.
- Update to version 1.6.0
* fix an invalid access when filtering internal xattrs that could
deal to a segfault.
- Update to version 1.5.0
* honor FUSE_OVERLAYFS_DISABLE_OVL_WHITEOUT also for renames
* use strncpy instead of strcpy
* fix renameat2(RENAME_NOREPLACE) on older kernels that lack
device whiteouts for unprivileged users.
* fix creating a symlink on top of a removed file.
* fix copyup of xattrs longer than 256 bytes.
==== gamin ====
- Fix source URI.
==== gcc ====
- Move /lib/cpp to /usr/lib/cpp for the usr merge. [bsc#1191060]
==== gd ====
- reenable gd/gd2 legacy formats, was disabled by upstream by
default [bsc#1190762]
==== iio-sensor-proxy ====
Version update (3.1 -> 3.3)
- Update to version 3.3:
* Fix a bug left-over in one of the 3.2 bug fixes where some
accelerometers would fail to initialise.
- Changes from version 3.2:
* Fix problems parsing numbers with decimal separator.
- Require gudev >= 237 for building (for consistency with
upstream).
- Drop the rpmlintrc file and add back appropriate service macros
in pre/post scriptlets.
==== kernel-firmware ====
Version update (20210901 -> 20210928)
Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network
- Update to version 20210928 (git commit 7a30050592e2):
* brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
* linux-firmware: Update firmware file for Intel Bluetooth 9462
* amdgpu: update VCN firmware for dimgrey cavefish
* amdgpu: update VCN firmware for navy flounder
* amdgpu: update VCN firmware for sienna cichlid
* amdgpu: update VCN firmware for vangogh
* amdgpu: update VCN firmware for renoir
* amdgpu: update VCN firmware for picasso
* amdgpu: update VCN firmware for raven2
* amdgpu: update VCN firmware for raven
* amdgpu: Add initial firmware for Beige Goby
* cxgb4: Update firmware to revision 1.26.2.0
* linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
* linux-firmware: Update firmware file for Intel Bluetooth AX211
* linux-firmware: Update firmware file for Intel Bluetooth AX201
* linux-firmware: Update firmware file for Intel Bluetooth 9560
* qed: Add firmware 8.59.1.0
* linux-firmware: Update firmware file for Intel Bluetooth AX211
* linux-firmware: Update firmware file for Intel Bluetooth AX210
* linux-firmware: Update firmware file for Intel Bluetooth AX200
* linux-firmware: Update firmware file for Intel Bluetooth AX201
* linux-firmware: Update firmware file for Intel Bluetooth 9560
* linux-firmware: Update firmware file for Intel Bluetooth 9260
* linux-firmware: Update firmware file for Intel Bluetooth 8265
* iwlwifi: add FWs for new So device types with multiple RF modules
* amdgpu: add initial firmware for Yellow Carp
* i915: Update ADLP DMC v2.12
* linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
* linux-firmware: Update AMD SEV firmware (bsc#1186938)
* Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases
==== knewstuff ====
Subpackages: knewstuff-imports libKF5NewStuff5 libKF5NewStuffCore5
- Add upstream patch:
* 0001-Include-a-user-agent-on-KNS-requests.patch
- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
(kde#443025)
==== libinput ====
Version update (1.19.0 -> 1.19.1)
- Update to release 1.19.1
* New: Detects (and works around) buggy devices that claim to
have a high-resolution scroll wheel but which do not actually
send events.
* New assumption that any non-bluetooth touchpad is internal.
* Jumping cursor warning has been reduced once again.
==== libmtp ====
Version update (1.1.18 -> 1.1.19)
Subpackages: libmtp-udev libmtp9
- updated to 1.1.19 release
- Lots of USB ids added, especially Garmin devices
- use a local libusb context, not the global one
- various bugfixes
==== libnss_usrfiles ====
- Install into _libdir [bsc#1191070]
==== libsoup ====
Subpackages: libsoup-3_0-0 typelib-1_0-Soup-3_0
- Ignore test failure on 32-bit arm, as it is done for 32-bit x86
https://gitlab.gnome.org/GNOME/libsoup/-/issues/236
==== libsrtp2 ====
Version update (2.4.1 -> 2.4.2)
- Update to release 2.4.2
* Fixes an unspecified regression introduced in 2.4.1
==== libva ====
Subpackages: libva-drm2 libva2
- fixed JIRA number in previous changelog
==== mozjs78 ====
Version update (78.13.0 -> 78.14.0)
- Update to version 78.14.0esr.
==== open-iscsi ====
Subpackages: iscsiuio libopeniscsiusr0_2_0
- Update to latest from upstream, fixing:
* Moving the executables from /sbin to /usr/sbin (bsc#1191054)
* Remove default dependencies from iscsi-init.service
(bsc#1187190)
==== openSUSE-build-key ====
- Only add openSUSE Backports key when building for a Leap system
(sle_version > 0). Tumbleweed does not use Backports.
==== perl-libwww-perl ====
Version update (6.56 -> 6.57)
- updated to 6.57
see /usr/share/doc/packages/perl-libwww-perl/Changes
6.57 2021-09-20 20:20:14Z
- Update docs for protocols_allowed and protocols forbidden (GH#386) (Olaf Alders)
==== portaudio ====
Version update (190600_20161030 -> 190700_20210406)
- Correct download source URL
- Update to version v190700_20210406
- removed patch `0001-Merge-branch-ticket_275_pass_void-into-master.patch`
as it is included in this release.
==== rav1e ====
- Replace rust-packaging with cargo-packaging
==== selinux-policy ====
Subpackages: selinux-policy-targeted
- Fix auditd service start with systemd hardening directives (boo#1190918)
* add fix_auditd.patch
==== systemd ====
Subpackages: libsystemd0 libudev1 systemd-sysvinit udev
- Work around rpmlint complaining about /var/log/journal shipped with setgid bit
This setgid bit has been already reviewed in the past and wasn't a
concern. However we want the mode/ownership adjusted by tmpfiles and
avoid the duplication of these info in rpm.
- Don't ghost own any directories created dynamically by tmpfiles
Again rpmlint complains but it doesn't seem to make sense to try to
track all paths (including theirs perms, ownerships...) created
dynamically. And 'rpm -V' is likely to report issues later with
these paths anyway.
This effectively partially reverts the two previous commits.
- Make sure the build process won't create /var/log/journal
- /var/log/journal/remote is owned by systemd-journal-remote
- systemd.spec: fix a bunch of rpmlint errors/warnings
- Drop systemd-logger
This sub package was introduced in order to configure persistent
journal and also to make sure that another syslog provider (such as
rsyslog) couldn't be installed at the same time: each syslog
provider conflicts with each others.
However this mechanism didn't work since uninstalling systemd-logger
wasn't magically turning off persistent logging because
/var/log/journal is likely to be populated hence not removed.
Moreover using a subpackage to configure the mode of journald was
overkill and the usual ways (main conf file or drop-ins) should be
preferred.
- Import commit 7a5801342fe2f53e5c2a8578d6db132c0eca2d97
8d65ec4a66 test: wc is needed by test/units/testsuite-50.sh
1527bcc5dd test: make the installation of the debug tools optional in the image
f4e6bf0b37 journalctl: never fail at flushing when the flushed flag is set (bsc#1188588)
- Update the dependencies of the testsuite package
The debug tools are optional thus no more required.
OTOH strip(1) is needed when building the test image and nc(1) is
needed by some tests.
- Drop git internal files from the testsuite sub-package
- Adjust pam macros
==== sysvinit ====
Version update (2.99 -> 3.00)
- Update to sysvinit 3.00:
* Better device detection of bootlogd
==== tdb ====
Version update (1.4.3 -> 1.4.4)
- Update to version 1.4.4
+ Fix a memory leak on error
+ python: remove all 'from __future__ import print_function'
+ Fix CID 1471761 String not null terminated
+ Use hex_byte() in parse_hex()
+ Use hex_byte() in read_data()
+ fix studio compiler build
+ Fix some signed/unsigned comparisons
+ also use __has_attribute macro to check for attribute support
+ Fix clang 9 missing-field-initializer warnings
+ pytdb tests: add test for storev()
+ pytdb: add python binding for storev()
+ tdbtorture: Use ARRAY_DEL_ELEMENT()
+ py3: Remove #define PyInt_FromLong PyLong_FromLong
+ py3: Remove #define PyInt_AsLong PyLong_AsLong
+ py3: Remove #define PyInt_Check PyLong_Check
+ tdb: Align integer types
- Drop obsolete patch ignore-tdb1-run-transaction-expand.diff
- Fix header file using undefined function visibility macro;
Add patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch; (bso#14762);
==== tevent ====
Version update (0.10.2 -> 0.11.0)
- Update to version 0.11.0
+ Other minor build fixes; (bso#14526);
+ Add custom tag to events
+ Add event trace api
==== xrdb ====
- Remove fallback to /lib/cpp, it's the same package as /usr/bin/cpp
anyway (boo#1191060).
==== xwayland ====
- U_glamor-Fix-handling-of-1-bit-pixmaps.patch
* glamor: Fix handling of 1-bit pixmaps; fixes e.g. issues with
gimp on Wayland (which needs Xwayland) (boo#1189310)
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the aarch64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=3&version=T…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
audit (3.0.3 -> 3.0.5)
audit-secondary (3.0.3 -> 3.0.5)
btrfsprogs (5.14 -> 5.14.1)
crypto-policies (20210225.05203d2 -> 20210917.c9d86d1)
diffutils
dracut (055+suse.117.ge5fc2048 -> 055+suse.119.g6c4187af)
fuse-overlayfs (1.4.0 -> 1.7.1)
kernel-firmware (20210901 -> 20210928)
libnss_usrfiles
mozjs78 (78.13.0 -> 78.14.0)
open-iscsi
openSUSE-build-key
salt (3002.2 -> 3003.3)
selinux-policy
systemd
tdb (1.4.3 -> 1.4.4)
tevent (0.10.2 -> 0.11.0)
=== Details ===
==== audit ====
Version update (3.0.3 -> 3.0.5)
Subpackages: libaudit1 libauparse0
- Update to version 3.0.5:
* In auditd, flush uid/gid caches when user/group added/deleted/modified
* Fixed various issues when dealing with corrupted logs
* In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
* Apply performance speedups to auparse library
* Optimize rule loading in auditctl
* Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
* Update syscall table to the 5.14 kernel
* Fixed various issues when dealing with corrupted logs
==== audit-secondary ====
Version update (3.0.3 -> 3.0.5)
Subpackages: audit python3-audit system-group-audit
- Fix hardened auditd.service (bsc#1181400)
* add fix-hardened-service.patch
Make /etc/audit read-write from the service.
Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
* add enable-stop-rules.patch
- Change default log_format from ENRICHED to RAW (bsc#1190500):
* add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
* In auditd, flush uid/gid caches when user/group added/deleted/modified
* Fixed various issues when dealing with corrupted logs
* In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
* Apply performance speedups to auparse library
* Optimize rule loading in auditctl
* Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
* Update syscall table to the 5.14 kernel
* Fixed various issues when dealing with corrupted logs
==== btrfsprogs ====
Version update (5.14 -> 5.14.1)
Subpackages: btrfsprogs-udev-rules libbtrfs0
- Update to 5.14.1
* fixes:
* defrag: fix parsing of compression (option -c)
* add workaround for old kernels when reading zone sizes
* let only check and restore open the fs with transid failures, namely
preventing btrfstune to do so
* convert: --uuid copy does not fail on duplicate uuids
==== crypto-policies ====
Version update (20210225.05203d2 -> 20210917.c9d86d1)
- Remove the scripts and documentation regarding
fips-finish-install and test-fips-setup
* Add crypto-policies-FIPS.patch
- Update to version 20210917.c9d86d1:
* openssl: fix disabling ChaCha20
* pacify pylint 2.11: use format strings
* pacify pylint 2.11: specify explicit encoding
* fix minor things found by new pylint
* update-crypto-policies: --check against regenerated
* update-crypto-policies: fix --check's walking order
* policygenerators/gnutls: revert disabling DTLS0.9...
* policygenerators/java: add javasystem backend
* LEGACY: bump 1023 key size to 1024
* cryptopolicies: fix 'and' in deprecation warnings
* *ssh: condition ecdh-sha2-nistp384 on SECP384R1
* nss: hopefully the last fix for nss sigalgs check
* cryptopolicies: Python 3.10 compatibility
* nss: postponing check + testing at least something
* Rename 'policy modules' to 'subpolicies'
* validation.rules: fix a missing word in error
* cryptopolicies: raise errors right after warnings
* update-crypto-policies: capitalize warnings
* cryptopolicies: syntax-precheck scope errors
* .gitlab-ci.yml, Makefile: enable codespell
* all: fix several typos
* docs: don't leave zero TLS/DTLS protocols on
* openssl: separate TLS/DTLS MinProtocol/MaxProtocol
* alg_lists: order protocols new-to-old for consistency
* alg_lists: max_{d,}tls_version
* update-crypto-policies: fix pregenerated + local.d
* openssh: allow validation with pre-8.5
* .gitlab-ci.yml: run commit-range against upstream
* openssh: Use the new name for PubkeyAcceptedKeyTypes
* sha1_in_dnssec: deprecate
* .gitlab-ci.yml: test commit ranges
* FIPS:OSPP: sign = -*-SHA2-224
* scoped policies: documentation update
* scoped policies: use new features to the fullest...
* scoped policies: rewrite + minimal policy changes
* scoped policies: rewrite preparations
* nss: postponing the version check again, to 3.64
- Remove patches fixed upstream: crypto-policies-typos.patch
- Rebase: crypto-policies-test_supported_modules_only.patch
- Merge crypto-policies-asciidoc.patch into
crypto-policies-no-build-manpages.patch
==== diffutils ====
- Skip stack overflow tests under qemu emulation (bsc#1190046)
==== dracut ====
Version update (055+suse.117.ge5fc2048 -> 055+suse.119.g6c4187af)
Subpackages: dracut-ima dracut-mkinitrd-deprecated
- Update to version 055+suse.119.g6c4187af:
* fix(suse-initrd): handle cases with zero modprobe.d files (bsc#1189895)
==== fuse-overlayfs ====
Version update (1.4.0 -> 1.7.1)
- Update to version 1.7.1
* set FUSE_CAP_POSIX_ACL only when it is supported by FUSE.
* treat statx failure with EINVAL as ENOSYS, so that the fallback
is attempted.
- Update to version 1.7.0
* fix read xattrs for device files
* don't create whiteout files in opaque dirs.
* fix reading files when running with euid != 0.
* enable POSIX ACLs.
- Update to version 1.6.0
* fix an invalid access when filtering internal xattrs that could
deal to a segfault.
- Update to version 1.5.0
* honor FUSE_OVERLAYFS_DISABLE_OVL_WHITEOUT also for renames
* use strncpy instead of strcpy
* fix renameat2(RENAME_NOREPLACE) on older kernels that lack
device whiteouts for unprivileged users.
* fix creating a symlink on top of a removed file.
* fix copyup of xattrs longer than 256 bytes.
==== kernel-firmware ====
Version update (20210901 -> 20210928)
Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network
- Update to version 20210928 (git commit 7a30050592e2):
* brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
* linux-firmware: Update firmware file for Intel Bluetooth 9462
* amdgpu: update VCN firmware for dimgrey cavefish
* amdgpu: update VCN firmware for navy flounder
* amdgpu: update VCN firmware for sienna cichlid
* amdgpu: update VCN firmware for vangogh
* amdgpu: update VCN firmware for renoir
* amdgpu: update VCN firmware for picasso
* amdgpu: update VCN firmware for raven2
* amdgpu: update VCN firmware for raven
* amdgpu: Add initial firmware for Beige Goby
* cxgb4: Update firmware to revision 1.26.2.0
* linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
* linux-firmware: Update firmware file for Intel Bluetooth AX211
* linux-firmware: Update firmware file for Intel Bluetooth AX201
* linux-firmware: Update firmware file for Intel Bluetooth 9560
* qed: Add firmware 8.59.1.0
* linux-firmware: Update firmware file for Intel Bluetooth AX211
* linux-firmware: Update firmware file for Intel Bluetooth AX210
* linux-firmware: Update firmware file for Intel Bluetooth AX200
* linux-firmware: Update firmware file for Intel Bluetooth AX201
* linux-firmware: Update firmware file for Intel Bluetooth 9560
* linux-firmware: Update firmware file for Intel Bluetooth 9260
* linux-firmware: Update firmware file for Intel Bluetooth 8265
* iwlwifi: add FWs for new So device types with multiple RF modules
* amdgpu: add initial firmware for Yellow Carp
* i915: Update ADLP DMC v2.12
* linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
* linux-firmware: Update AMD SEV firmware (bsc#1186938)
* Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases
==== libnss_usrfiles ====
- Install into _libdir [bsc#1191070]
==== mozjs78 ====
Version update (78.13.0 -> 78.14.0)
- Update to version 78.14.0esr.
==== open-iscsi ====
Subpackages: iscsiuio libopeniscsiusr0_2_0
- Update to latest from upstream, fixing:
* Moving the executables from /sbin to /usr/sbin (bsc#1191054)
* Remove default dependencies from iscsi-init.service
(bsc#1187190)
==== openSUSE-build-key ====
- Only add openSUSE Backports key when building for a Leap system
(sle_version > 0). Tumbleweed does not use Backports.
==== salt ====
Version update (3002.2 -> 3003.3)
Subpackages: python3-salt salt-master salt-minion salt-standalone-formulas-configuration salt-transactional-update
- Do not break master_tops for minion with version lower to 3003
- Added:
* do-not-break-master_tops-for-minion-with-version-low.patch
- Support querying for JSON data in external sql pillar
- Added:
* 3003.3-postgresql-json-support-in-pillar-423.patch
- Update to Salt release version 3003.3
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3003.3.html
- Added:
* allow-vendor-change-option-with-zypper.patch
* support-transactional-systems-microos.patch
* virt-enhancements.patch
- Modified:
* adds-explicit-type-cast-for-port.patch
* use-adler32-algorithm-to-compute-string-checksums.patch
* do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
* fixes-56144-to-enable-hotadd-profile-support.patch
* include-aliases-in-the-fqdns-grains.patch
* implementation-of-held-unheld-functions-for-state-pk.patch
* add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
* debian-info_installed-compatibility-50453.patch
* fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
* update-target-fix-for-salt-ssh-to-process-targets-li.patch
* x509-fixes-111.patch
* prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
* restore-default-behaviour-of-pkg-list-return.patch
* adding-preliminary-support-for-rocky.-59682-391.patch
* add-astra-linux-common-edition-to-the-os-family-list.patch
* templates-move-the-globals-up-to-the-environment-jin.patch
* fix-bsc-1065792.patch
* add-migrated-state-and-gpg-key-management-functions-.patch
* zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
* improvements-on-ansiblegate-module-354.patch
* add-custom-suse-capabilities-as-grains.patch
* return-the-expected-powerpc-os-arch-bsc-1117995.patch
* revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
* enhance-openscap-module-add-xccdf_eval-call-386.patch
* implementation-of-suse_ip-execution-module-bsc-10999.patch
* add-missing-aarch64-to-rpm-package-architectures-405.patch
* async-batch-implementation.patch
* temporary-fix-extend-the-whitelist-of-allowed-comman.patch
* do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
* figure-out-python-interpreter-to-use-inside-containe.patch
* better-handling-of-bad-public-keys-from-minions-bsc-.patch
* early-feature-support-config.patch
* do-not-monkey-patch-yaml-bsc-1177474.patch
- Removed:
* fix-memory-leak-produced-by-batch-async-find_jobs-me.patch
* fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch
* fix-for-log-checking-in-x509-test.patch
* do-not-make-ansiblegate-to-crash-on-python3-minions.patch
* prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
* remove-msgpack-1.0.0-requirement-in-the-installed-me.patch
* move-server_id-deprecation-warning-to-reduce-log-spa.patch
* re-adding-function-to-test-for-root.patch
* make-profiles-a-package.patch
* handle-master-tops-data-when-states-are-applied-by-t.patch
* fix-unit-tests-for-batch-async-after-refactor.patch
* prevent-test_mod_del_repo_multiline_values-to-fail.patch
* prevent-import-errors-when-running-test_btrfs-unit-t.patch
* fix-failing-unit-tests-for-batch-async.patch
* remove-unnecessary-yield-causing-badyielderror-bsc-1.patch
* virt-use-dev-kvm-to-detect-kvm-383.patch
* 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
* add-docker-logout-237.patch
* drop-wrong-mock-from-chroot-unit-test.patch
* fix-async-batch-multiple-done-events.patch
* fix-unit-test-for-grains-core.patch
* remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
* pkgrepo-support-python-2.7-function-call-295.patch
* opensuse-3000-virt-defined-states-222.patch
* open-suse-3002.2-xen-grub-316.patch
* add-patch-support-for-allow-vendor-change-option-wit.patch
* fix-the-removed-six.itermitems-and-six.-_type-262.patch
* fix-aptpkg-systemd-call-bsc-1143301.patch
* add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
* fix-cve-2020-25592-and-add-tests-bsc-1178319.patch
* regression-fix-of-salt-ssh-on-processing-targets-353.patch
* do-not-break-repo-files-with-multiple-line-values-on.patch
* 3002-set-distro-requirement-to-oldest-supported-vers.patch
* integration-of-msi-authentication-with-azurearm-clou.patch
* zypperpkg-filter-patterns-that-start-with-dot-244.patch
* fix-for-temp-folder-definition-in-loader-unit-test.patch
* fix-novendorchange-option-284.patch
* backport-virt-patches-from-3001-256.patch
* allow-passing-kwargs-to-pkg.list_downloaded-bsc-1140.patch
* path-replace-functools.wraps-with-six.wraps-bsc-1177.patch
* virt-uefi-fix-backport-312.patch
* add-all_versions-parameter-to-include-all-installed-.patch
* add-pkg.services_need_restart-302.patch
* add-batch_presence_ping_timeout-and-batch_presence_p.patch
* allow-vendor-change-option-with-zypper-313.patch
* avoid-traceback-when-http.query-request-cannot-be-pe.patch
* changed-imports-to-vendored-tornado.patch
* fix-issue-parsing-errors-in-ansiblegate-state-module.patch
* sanitize-grains-loaded-from-roster_grains.json.patch
* handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
* add-multi-file-support-and-globbing-to-the-filetree-.patch
* loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
* backport-thread.is_alive-fix-390.patch
* get-os_arch-also-without-rpm-package-installed.patch
* python3.8-compatibility-pr-s-235.patch
* fixed-bug-lvm-has-no-parttion-type.-the-scipt-later-.patch
* ensure-virt.update-stop_on_reboot-is-updated-with-it.patch
* xfs-do-not-fails-if-type-is-not-present.patch
* grains-master-can-read-grains.patch
* invalidate-file-list-cache-when-cache-file-modified-.patch
* move-vendor-change-logic-to-zypper-class-355.patch
* implement-network.fqdns-module-function-bsc-1134860-.patch
* opensuse-3000.2-virt-backports-236-257.patch
* prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch
* batch_async-avoid-using-fnmatch-to-match-event-217.patch
* provide-the-missing-features-required-for-yomi-yet-o.patch
* fix-__mount_device-wrapper-254.patch
* fix-ipv6-scope-bsc-1108557.patch
* fix-failing-unit-tests-for-systemd.patch
* use-current-ioloop-for-the-localclient-instance-of-b.patch
* revert-add-patch-support-for-allow-vendor-change-opt.patch
* remove-deprecated-warning-that-breaks-miniion-execut.patch
* prevent-systemd-run-description-issue-when-running-a.patch
* fix-grains.test_core-unit-test-277.patch
* prevent-command-injection-in-the-snapper-module-bsc-.patch
* backport-of-upstream-pr59492-to-3002.2-404.patch
* use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
* reintroducing-reverted-changes.patch
* add-cpe_name-for-osversion-grain-parsing-u-49946.patch
* add-hold-unhold-functions.patch
* virt._get_domain-don-t-raise-an-exception-if-there-i.patch
* fix-error-handling-in-openscap-module-bsc-1188647-40.patch
* apply-patch-from-upstream-to-support-python-3.8.patch
* remove-deprecated-usage-of-no_mock-and-no_mock_reaso.patch
* add-supportconfig-module-for-remote-calls-and-saltss.patch
* allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
* fall-back-to-pymysql.patch
* fixes-cve-2018-15750-cve-2018-15751.patch
* do-not-crash-when-there-are-ipv6-established-connect.patch
* improve-batch_async-to-release-consumed-memory-bsc-1.patch
* support-config-non-root-permission-issues-fixes-u-50.patch
* transactional_update-detect-recursion-in-the-executo.patch
* open-suse-3002.2-virt-network-311.patch
* option-to-en-disable-force-refresh-in-zypper-215.patch
* do-noop-for-services-states-when-running-systemd-in-.patch
* exclude-the-full-path-of-a-download-url-to-prevent-i.patch
* fix-a-wrong-rebase-in-test_core.py-180.patch
* add-new-custom-suse-capability-for-saltutil-state-mo.patch
* opensuse-3000-libvirt-engine-fixes-251.patch
* accumulated-changes-from-yomi-167.patch
* fix-async-batch-race-conditions.patch
* fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
* loop-fix-variable-names-for-until_no_eval.patch
* batch-async-catch-exceptions-and-safety-unregister-a.patch
* grains.extra-support-old-non-intel-kernels-bsc-11806.patch
* backport-a-few-virt-prs-272.patch
* fix-git_pillar-merging-across-multiple-__env__-repos.patch
* drop-wrong-virt-capabilities-code-after-rebasing-pat.patch
* virt-adding-kernel-boot-parameters-to-libvirt-xml-55.patch
* async-batch-implementation-fix-320.patch
* support-for-btrfs-and-xfs-in-parted-and-mkfs.patch
* support-transactional-systems-microos-271.patch
* strip-trailing-from-repo.uri-when-comparing-repos-in.patch
* opensuse-3000.3-spacewalk-runner-parse-command-250.patch
* calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
* add-virt.all_capabilities.patch
* ansiblegate-take-care-of-failed-skipped-and-unreacha.patch
* virt-pass-emulator-when-getting-domain-capabilities-.patch
* fixing-streamclosed-issue.patch
* fix-for-some-cves-bsc1181550.patch
* transactional_update-unify-with-chroot.call.patch
* do-not-raise-streamclosederror-traceback-but-only-lo.patch
* fix-batch_async-obsolete-test.patch
* fix-zypper-pkg.list_pkgs-expectation-and-dpkg-mockin.patch
* fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
* accumulated-changes-required-for-yomi-165.patch
* fix-virt.update-with-cpu-defined-263.patch
* remove-vendored-backports-abc-from-requirements.patch
* open-suse-3002.2-bigvm-310.patch
* xen-disk-fixes-264.patch
* virt.network_update-handle-missing-ipv4-netmask-attr.patch
* add-saltssh-multi-version-support-across-python-inte.patch
==== selinux-policy ====
Subpackages: selinux-policy-targeted
- Fix auditd service start with systemd hardening directives (boo#1190918)
* add fix_auditd.patch
==== systemd ====
Subpackages: libsystemd0 libudev1 systemd-sysvinit udev
- Work around rpmlint complaining about /var/log/journal shipped with setgid bit
This setgid bit has been already reviewed in the past and wasn't a
concern. However we want the mode/ownership adjusted by tmpfiles and
avoid the duplication of these info in rpm.
- Don't ghost own any directories created dynamically by tmpfiles
Again rpmlint complains but it doesn't seem to make sense to try to
track all paths (including theirs perms, ownerships...) created
dynamically. And 'rpm -V' is likely to report issues later with
these paths anyway.
This effectively partially reverts the two previous commits.
- Make sure the build process won't create /var/log/journal
- /var/log/journal/remote is owned by systemd-journal-remote
- systemd.spec: fix a bunch of rpmlint errors/warnings
- Drop systemd-logger
This sub package was introduced in order to configure persistent
journal and also to make sure that another syslog provider (such as
rsyslog) couldn't be installed at the same time: each syslog
provider conflicts with each others.
However this mechanism didn't work since uninstalling systemd-logger
wasn't magically turning off persistent logging because
/var/log/journal is likely to be populated hence not removed.
Moreover using a subpackage to configure the mode of journald was
overkill and the usual ways (main conf file or drop-ins) should be
preferred.
- Import commit 7a5801342fe2f53e5c2a8578d6db132c0eca2d97
8d65ec4a66 test: wc is needed by test/units/testsuite-50.sh
1527bcc5dd test: make the installation of the debug tools optional in the image
f4e6bf0b37 journalctl: never fail at flushing when the flushed flag is set (bsc#1188588)
- Update the dependencies of the testsuite package
The debug tools are optional thus no more required.
OTOH strip(1) is needed when building the test image and nc(1) is
needed by some tests.
- Drop git internal files from the testsuite sub-package
- Adjust pam macros
==== tdb ====
Version update (1.4.3 -> 1.4.4)
- Update to version 1.4.4
+ Fix a memory leak on error
+ python: remove all 'from __future__ import print_function'
+ Fix CID 1471761 String not null terminated
+ Use hex_byte() in parse_hex()
+ Use hex_byte() in read_data()
+ fix studio compiler build
+ Fix some signed/unsigned comparisons
+ also use __has_attribute macro to check for attribute support
+ Fix clang 9 missing-field-initializer warnings
+ pytdb tests: add test for storev()
+ pytdb: add python binding for storev()
+ tdbtorture: Use ARRAY_DEL_ELEMENT()
+ py3: Remove #define PyInt_FromLong PyLong_FromLong
+ py3: Remove #define PyInt_AsLong PyLong_AsLong
+ py3: Remove #define PyInt_Check PyLong_Check
+ tdb: Align integer types
- Drop obsolete patch ignore-tdb1-run-transaction-expand.diff
- Fix header file using undefined function visibility macro;
Add patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch; (bso#14762);
==== tevent ====
Version update (0.10.2 -> 0.11.0)
- Update to version 0.11.0
+ Other minor build fixes; (bso#14526);
+ Add custom tag to events
+ Add event trace api
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
Mesa (21.2.2 -> 21.2.3)
Mesa-drivers (21.2.2 -> 21.2.3)
blog (2.20 -> 2.21)
btrfsprogs (5.14 -> 5.14.1)
desktop-file-utils
dracut (055+suse.117.ge5fc2048 -> 055+suse.119.g6c4187af)
fuse-overlayfs (1.4.0 -> 1.7.1)
gamin
gcc
iio-sensor-proxy (3.1 -> 3.3)
kernel-firmware (20210901 -> 20210928)
knewstuff
libinput (1.19.0 -> 1.19.1)
libmfx (21.3.3 -> 21.3.4)
libnss_usrfiles
libsoup
libsrtp2 (2.4.1 -> 2.4.2)
libva
open-iscsi
pipewire (0.3.37 -> 0.3.38)
portaudio (190600_20161030 -> 190700_20210406)
rav1e
systemd
sysvinit (2.99 -> 3.00)
tdb (1.4.3 -> 1.4.4)
tevent (0.10.2 -> 0.11.0)
xrdb
xwayland
=== Details ===
==== Mesa ====
Version update (21.2.2 -> 21.2.3)
Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1
- update to 21.2.3
* third bugfix release
==== Mesa-drivers ====
Version update (21.2.2 -> 21.2.3)
Subpackages: Mesa-dri Mesa-gallium
- update to 21.2.3
* third bugfix release
==== blog ====
Version update (2.20 -> 2.21)
Subpackages: libblogger2
- Move to /usr for UsrMerge (boo#1191057)
==== btrfsprogs ====
Version update (5.14 -> 5.14.1)
Subpackages: btrfsprogs-udev-rules libbtrfs0
- Update to 5.14.1
* fixes:
* defrag: fix parsing of compression (option -c)
* add workaround for old kernels when reading zone sizes
* let only check and restore open the fs with transid failures, namely
preventing btrfstune to do so
* convert: --uuid copy does not fail on duplicate uuids
==== desktop-file-utils ====
- suse-update-mime-defaults: add Pantheon desktop environment
==== dracut ====
Version update (055+suse.117.ge5fc2048 -> 055+suse.119.g6c4187af)
Subpackages: dracut-ima dracut-mkinitrd-deprecated
- Update to version 055+suse.119.g6c4187af:
* fix(suse-initrd): handle cases with zero modprobe.d files (bsc#1189895)
==== fuse-overlayfs ====
Version update (1.4.0 -> 1.7.1)
- Update to version 1.7.1
* set FUSE_CAP_POSIX_ACL only when it is supported by FUSE.
* treat statx failure with EINVAL as ENOSYS, so that the fallback
is attempted.
- Update to version 1.7.0
* fix read xattrs for device files
* don't create whiteout files in opaque dirs.
* fix reading files when running with euid != 0.
* enable POSIX ACLs.
- Update to version 1.6.0
* fix an invalid access when filtering internal xattrs that could
deal to a segfault.
- Update to version 1.5.0
* honor FUSE_OVERLAYFS_DISABLE_OVL_WHITEOUT also for renames
* use strncpy instead of strcpy
* fix renameat2(RENAME_NOREPLACE) on older kernels that lack
device whiteouts for unprivileged users.
* fix creating a symlink on top of a removed file.
* fix copyup of xattrs longer than 256 bytes.
==== gamin ====
- Fix source URI.
==== gcc ====
- Move /lib/cpp to /usr/lib/cpp for the usr merge. [bsc#1191060]
==== iio-sensor-proxy ====
Version update (3.1 -> 3.3)
- Update to version 3.3:
* Fix a bug left-over in one of the 3.2 bug fixes where some
accelerometers would fail to initialise.
- Changes from version 3.2:
* Fix problems parsing numbers with decimal separator.
- Require gudev >= 237 for building (for consistency with
upstream).
- Drop the rpmlintrc file and add back appropriate service macros
in pre/post scriptlets.
==== kernel-firmware ====
Version update (20210901 -> 20210928)
Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd
- Update to version 20210928 (git commit 7a30050592e2):
* brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
* linux-firmware: Update firmware file for Intel Bluetooth 9462
* amdgpu: update VCN firmware for dimgrey cavefish
* amdgpu: update VCN firmware for navy flounder
* amdgpu: update VCN firmware for sienna cichlid
* amdgpu: update VCN firmware for vangogh
* amdgpu: update VCN firmware for renoir
* amdgpu: update VCN firmware for picasso
* amdgpu: update VCN firmware for raven2
* amdgpu: update VCN firmware for raven
* amdgpu: Add initial firmware for Beige Goby
* cxgb4: Update firmware to revision 1.26.2.0
* linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
* linux-firmware: Update firmware file for Intel Bluetooth AX211
* linux-firmware: Update firmware file for Intel Bluetooth AX201
* linux-firmware: Update firmware file for Intel Bluetooth 9560
* qed: Add firmware 8.59.1.0
* linux-firmware: Update firmware file for Intel Bluetooth AX211
* linux-firmware: Update firmware file for Intel Bluetooth AX210
* linux-firmware: Update firmware file for Intel Bluetooth AX200
* linux-firmware: Update firmware file for Intel Bluetooth AX201
* linux-firmware: Update firmware file for Intel Bluetooth 9560
* linux-firmware: Update firmware file for Intel Bluetooth 9260
* linux-firmware: Update firmware file for Intel Bluetooth 8265
* iwlwifi: add FWs for new So device types with multiple RF modules
* amdgpu: add initial firmware for Yellow Carp
* i915: Update ADLP DMC v2.12
* linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
* linux-firmware: Update AMD SEV firmware (bsc#1186938)
* Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases
==== knewstuff ====
Subpackages: knewstuff-imports libKF5NewStuff5 libKF5NewStuffCore5
- Add upstream patch:
* 0001-Include-a-user-agent-on-KNS-requests.patch
- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
(kde#443025)
==== libinput ====
Version update (1.19.0 -> 1.19.1)
- Update to release 1.19.1
* New: Detects (and works around) buggy devices that claim to
have a high-resolution scroll wheel but which do not actually
send events.
* New assumption that any non-bluetooth touchpad is internal.
* Jumping cursor warning has been reduced once again.
==== libmfx ====
Version update (21.3.3 -> 21.3.4)
- fixed JIRA number in previous changelog
- Update to 21.3.4
* Fixed VPL run-time loading by MediaSDK dispatcher
VPL doesn't provide libmfx-gen.so.1
In VPL Gen run-time we have libmfx-gen.so.1.2 as SONAME and
use libmfx-gen.so.1.2.x as a full name.
* [VPP] Fix increasing num of input channels doesn't work
* maximum and minmum qp setting for HEVC encoder.
* Removed multiple calls vaGetConfigAttributes (github
issue#2417)
* [Jpeg]modify color range on Linux
* [Jpegd] Enable HW to decode JPEG RGB444 on Linux
==== libnss_usrfiles ====
- Install into _libdir [bsc#1191070]
==== libsoup ====
Subpackages: libsoup-3_0-0 typelib-1_0-Soup-3_0
- Ignore test failure on 32-bit arm, as it is done for 32-bit x86
https://gitlab.gnome.org/GNOME/libsoup/-/issues/236
==== libsrtp2 ====
Version update (2.4.1 -> 2.4.2)
- Update to release 2.4.2
* Fixes an unspecified regression introduced in 2.4.1
==== libva ====
Subpackages: libva-drm2 libva2
- fixed JIRA number in previous changelog
==== open-iscsi ====
Subpackages: iscsiuio libopeniscsiusr0_2_0
- Update to latest from upstream, fixing:
* Moving the executables from /sbin to /usr/sbin (bsc#1191054)
* Remove default dependencies from iscsi-init.service
(bsc#1187190)
==== pipewire ====
Version update (0.3.37 -> 0.3.38)
Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-media-session pipewire-modules pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools
- Update to version 0.3.38:
* Highlights
- Topic based logging was added to improve debugging.
- An off-by-one error was fixed in the audio resampler that could
cause distortion when downsampling.
- Various bluetooth compatibility improvements.
- More fixes and improvements.
* PipeWire
- module-pulse-tunnel now has better default latency to make it work
better in more cases. There is also an option to configure the
desired latency.
- pw-cli now has readline support.
- Topic based logging was added. Log lines can now be filtered by
topic using wildcards. This should improve debugging.
- The systemd service files should now have better descriptions.
- Fix a crash in module-zeroconf-discover when unloading.
- Fix a crash in filter-chain when using unaligned memory.
* ALSA
- Sync the udev rules and profiles with pulseaudio.
- Fix a memory leak.
* SPA plugins
- An off-by-one error was fixed in the resampler that could cause
distortion when downsampling. (#1646)
* Bluetooth
- Avoid probing the native backend because it might block for DBus
activation. This fixes some long startup times.
- Fix the kernel version check, 5.14.x kernels should also support
mSBC.
- Fix FastStream microphone support in more cases.
- Add workaround for Intel AX200.
- SCO sink should now also work in follower mode.
* PulseAudio server
- Make the service file require a session manager.
- Add BuildRequires: pkgconfig(readline) so pw-cli is built with
readline support
==== portaudio ====
Version update (190600_20161030 -> 190700_20210406)
- Correct download source URL
- Update to version v190700_20210406
- removed patch `0001-Merge-branch-ticket_275_pass_void-into-master.patch`
as it is included in this release.
==== rav1e ====
- Replace rust-packaging with cargo-packaging
==== systemd ====
Subpackages: libsystemd0 libudev1 systemd-sysvinit udev
- Work around rpmlint complaining about /var/log/journal shipped with setgid bit
This setgid bit has been already reviewed in the past and wasn't a
concern. However we want the mode/ownership adjusted by tmpfiles and
avoid the duplication of these info in rpm.
- Don't ghost own any directories created dynamically by tmpfiles
Again rpmlint complains but it doesn't seem to make sense to try to
track all paths (including theirs perms, ownerships...) created
dynamically. And 'rpm -V' is likely to report issues later with
these paths anyway.
This effectively partially reverts the two previous commits.
- Make sure the build process won't create /var/log/journal
- /var/log/journal/remote is owned by systemd-journal-remote
- systemd.spec: fix a bunch of rpmlint errors/warnings
- Drop systemd-logger
This sub package was introduced in order to configure persistent
journal and also to make sure that another syslog provider (such as
rsyslog) couldn't be installed at the same time: each syslog
provider conflicts with each others.
However this mechanism didn't work since uninstalling systemd-logger
wasn't magically turning off persistent logging because
/var/log/journal is likely to be populated hence not removed.
Moreover using a subpackage to configure the mode of journald was
overkill and the usual ways (main conf file or drop-ins) should be
preferred.
- Import commit 7a5801342fe2f53e5c2a8578d6db132c0eca2d97
8d65ec4a66 test: wc is needed by test/units/testsuite-50.sh
1527bcc5dd test: make the installation of the debug tools optional in the image
f4e6bf0b37 journalctl: never fail at flushing when the flushed flag is set (bsc#1188588)
- Update the dependencies of the testsuite package
The debug tools are optional thus no more required.
OTOH strip(1) is needed when building the test image and nc(1) is
needed by some tests.
- Drop git internal files from the testsuite sub-package
- Adjust pam macros
==== sysvinit ====
Version update (2.99 -> 3.00)
- Update to sysvinit 3.00:
* Better device detection of bootlogd
==== tdb ====
Version update (1.4.3 -> 1.4.4)
- Update to version 1.4.4
+ Fix a memory leak on error
+ python: remove all 'from __future__ import print_function'
+ Fix CID 1471761 String not null terminated
+ Use hex_byte() in parse_hex()
+ Use hex_byte() in read_data()
+ fix studio compiler build
+ Fix some signed/unsigned comparisons
+ also use __has_attribute macro to check for attribute support
+ Fix clang 9 missing-field-initializer warnings
+ pytdb tests: add test for storev()
+ pytdb: add python binding for storev()
+ tdbtorture: Use ARRAY_DEL_ELEMENT()
+ py3: Remove #define PyInt_FromLong PyLong_FromLong
+ py3: Remove #define PyInt_AsLong PyLong_AsLong
+ py3: Remove #define PyInt_Check PyLong_Check
+ tdb: Align integer types
- Drop obsolete patch ignore-tdb1-run-transaction-expand.diff
- Fix header file using undefined function visibility macro;
Add patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch; (bso#14762);
==== tevent ====
Version update (0.10.2 -> 0.11.0)
- Update to version 0.11.0
+ Other minor build fixes; (bso#14526);
+ Add custom tag to events
+ Add event trace api
==== xrdb ====
- Remove fallback to /lib/cpp, it's the same package as /usr/bin/cpp
anyway (boo#1191060).
==== xwayland ====
- U_glamor-Fix-handling-of-1-bit-pixmaps.patch
* glamor: Fix handling of 1-bit pixmaps; fixes e.g. issues with
gimp on Wayland (which needs Xwayland) (boo#1189310)
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
btrfsprogs (5.14 -> 5.14.1)
dracut (055+suse.117.ge5fc2048 -> 055+suse.119.g6c4187af)
fuse-overlayfs (1.4.0 -> 1.7.1)
kernel-firmware (20210901 -> 20210928)
libnss_usrfiles
open-iscsi
salt
systemd
tdb (1.4.3 -> 1.4.4)
tevent (0.10.2 -> 0.11.0)
=== Details ===
==== btrfsprogs ====
Version update (5.14 -> 5.14.1)
Subpackages: btrfsprogs-udev-rules libbtrfs0
- Update to 5.14.1
* fixes:
* defrag: fix parsing of compression (option -c)
* add workaround for old kernels when reading zone sizes
* let only check and restore open the fs with transid failures, namely
preventing btrfstune to do so
* convert: --uuid copy does not fail on duplicate uuids
==== dracut ====
Version update (055+suse.117.ge5fc2048 -> 055+suse.119.g6c4187af)
Subpackages: dracut-ima dracut-mkinitrd-deprecated
- Update to version 055+suse.119.g6c4187af:
* fix(suse-initrd): handle cases with zero modprobe.d files (bsc#1189895)
==== fuse-overlayfs ====
Version update (1.4.0 -> 1.7.1)
- Update to version 1.7.1
* set FUSE_CAP_POSIX_ACL only when it is supported by FUSE.
* treat statx failure with EINVAL as ENOSYS, so that the fallback
is attempted.
- Update to version 1.7.0
* fix read xattrs for device files
* don't create whiteout files in opaque dirs.
* fix reading files when running with euid != 0.
* enable POSIX ACLs.
- Update to version 1.6.0
* fix an invalid access when filtering internal xattrs that could
deal to a segfault.
- Update to version 1.5.0
* honor FUSE_OVERLAYFS_DISABLE_OVL_WHITEOUT also for renames
* use strncpy instead of strcpy
* fix renameat2(RENAME_NOREPLACE) on older kernels that lack
device whiteouts for unprivileged users.
* fix creating a symlink on top of a removed file.
* fix copyup of xattrs longer than 256 bytes.
==== kernel-firmware ====
Version update (20210901 -> 20210928)
Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd
- Update to version 20210928 (git commit 7a30050592e2):
* brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
* linux-firmware: Update firmware file for Intel Bluetooth 9462
* amdgpu: update VCN firmware for dimgrey cavefish
* amdgpu: update VCN firmware for navy flounder
* amdgpu: update VCN firmware for sienna cichlid
* amdgpu: update VCN firmware for vangogh
* amdgpu: update VCN firmware for renoir
* amdgpu: update VCN firmware for picasso
* amdgpu: update VCN firmware for raven2
* amdgpu: update VCN firmware for raven
* amdgpu: Add initial firmware for Beige Goby
* cxgb4: Update firmware to revision 1.26.2.0
* linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
* linux-firmware: Update firmware file for Intel Bluetooth AX211
* linux-firmware: Update firmware file for Intel Bluetooth AX201
* linux-firmware: Update firmware file for Intel Bluetooth 9560
* qed: Add firmware 8.59.1.0
* linux-firmware: Update firmware file for Intel Bluetooth AX211
* linux-firmware: Update firmware file for Intel Bluetooth AX210
* linux-firmware: Update firmware file for Intel Bluetooth AX200
* linux-firmware: Update firmware file for Intel Bluetooth AX201
* linux-firmware: Update firmware file for Intel Bluetooth 9560
* linux-firmware: Update firmware file for Intel Bluetooth 9260
* linux-firmware: Update firmware file for Intel Bluetooth 8265
* iwlwifi: add FWs for new So device types with multiple RF modules
* amdgpu: add initial firmware for Yellow Carp
* i915: Update ADLP DMC v2.12
* linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
* linux-firmware: Update AMD SEV firmware (bsc#1186938)
* Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases
==== libnss_usrfiles ====
- Install into _libdir [bsc#1191070]
==== open-iscsi ====
Subpackages: iscsiuio libopeniscsiusr0_2_0
- Update to latest from upstream, fixing:
* Moving the executables from /sbin to /usr/sbin (bsc#1191054)
* Remove default dependencies from iscsi-init.service
(bsc#1187190)
==== salt ====
Subpackages: python3-salt salt-master salt-minion salt-standalone-formulas-configuration salt-transactional-update
- Do not break master_tops for minion with version lower to 3003
- Added:
* do-not-break-master_tops-for-minion-with-version-low.patch
==== systemd ====
Subpackages: libsystemd0 libudev1 systemd-sysvinit udev
- Work around rpmlint complaining about /var/log/journal shipped with setgid bit
This setgid bit has been already reviewed in the past and wasn't a
concern. However we want the mode/ownership adjusted by tmpfiles and
avoid the duplication of these info in rpm.
- Don't ghost own any directories created dynamically by tmpfiles
Again rpmlint complains but it doesn't seem to make sense to try to
track all paths (including theirs perms, ownerships...) created
dynamically. And 'rpm -V' is likely to report issues later with
these paths anyway.
This effectively partially reverts the two previous commits.
- Make sure the build process won't create /var/log/journal
- /var/log/journal/remote is owned by systemd-journal-remote
- systemd.spec: fix a bunch of rpmlint errors/warnings
- Drop systemd-logger
This sub package was introduced in order to configure persistent
journal and also to make sure that another syslog provider (such as
rsyslog) couldn't be installed at the same time: each syslog
provider conflicts with each others.
However this mechanism didn't work since uninstalling systemd-logger
wasn't magically turning off persistent logging because
/var/log/journal is likely to be populated hence not removed.
Moreover using a subpackage to configure the mode of journald was
overkill and the usual ways (main conf file or drop-ins) should be
preferred.
- Import commit 7a5801342fe2f53e5c2a8578d6db132c0eca2d97
8d65ec4a66 test: wc is needed by test/units/testsuite-50.sh
1527bcc5dd test: make the installation of the debug tools optional in the image
f4e6bf0b37 journalctl: never fail at flushing when the flushed flag is set (bsc#1188588)
- Update the dependencies of the testsuite package
The debug tools are optional thus no more required.
OTOH strip(1) is needed when building the test image and nc(1) is
needed by some tests.
- Drop git internal files from the testsuite sub-package
- Adjust pam macros
==== tdb ====
Version update (1.4.3 -> 1.4.4)
- Update to version 1.4.4
+ Fix a memory leak on error
+ python: remove all 'from __future__ import print_function'
+ Fix CID 1471761 String not null terminated
+ Use hex_byte() in parse_hex()
+ Use hex_byte() in read_data()
+ fix studio compiler build
+ Fix some signed/unsigned comparisons
+ also use __has_attribute macro to check for attribute support
+ Fix clang 9 missing-field-initializer warnings
+ pytdb tests: add test for storev()
+ pytdb: add python binding for storev()
+ tdbtorture: Use ARRAY_DEL_ELEMENT()
+ py3: Remove #define PyInt_FromLong PyLong_FromLong
+ py3: Remove #define PyInt_AsLong PyLong_AsLong
+ py3: Remove #define PyInt_Check PyLong_Check
+ tdb: Align integer types
- Drop obsolete patch ignore-tdb1-run-transaction-expand.diff
- Fix header file using undefined function visibility macro;
Add patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch; (bso#14762);
==== tevent ====
Version update (0.10.2 -> 0.11.0)
- Update to version 0.11.0
+ Other minor build fixes; (bso#14526);
+ Add custom tag to events
+ Add event trace api
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
audit (3.0.3 -> 3.0.5)
audit-secondary (3.0.3 -> 3.0.5)
codec2 (1.0.0 -> 1.0.1)
crypto-policies (20210225.05203d2 -> 20210917.c9d86d1)
diffutils
ffmpeg-4
gd
libmtp (1.1.18 -> 1.1.19)
mozjs78 (78.13.0 -> 78.14.0)
openSUSE-build-key
perl-libwww-perl (6.56 -> 6.57)
selinux-policy
=== Details ===
==== audit ====
Version update (3.0.3 -> 3.0.5)
Subpackages: libaudit1 libauparse0
- Update to version 3.0.5:
* In auditd, flush uid/gid caches when user/group added/deleted/modified
* Fixed various issues when dealing with corrupted logs
* In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
* Apply performance speedups to auparse library
* Optimize rule loading in auditctl
* Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
* Update syscall table to the 5.14 kernel
* Fixed various issues when dealing with corrupted logs
==== audit-secondary ====
Version update (3.0.3 -> 3.0.5)
Subpackages: audit python3-audit system-group-audit
- Fix hardened auditd.service (bsc#1181400)
* add fix-hardened-service.patch
Make /etc/audit read-write from the service.
Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
* add enable-stop-rules.patch
- Change default log_format from ENRICHED to RAW (bsc#1190500):
* add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
* In auditd, flush uid/gid caches when user/group added/deleted/modified
* Fixed various issues when dealing with corrupted logs
* In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
* Apply performance speedups to auparse library
* Optimize rule loading in auditctl
* Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
* Update syscall table to the 5.14 kernel
* Fixed various issues when dealing with corrupted logs
==== codec2 ====
Version update (1.0.0 -> 1.0.1)
- Update to version 1.0.1:
* Release to support freedv-gui 1.6.1
==== crypto-policies ====
Version update (20210225.05203d2 -> 20210917.c9d86d1)
- Remove the scripts and documentation regarding
fips-finish-install and test-fips-setup
* Add crypto-policies-FIPS.patch
- Update to version 20210917.c9d86d1:
* openssl: fix disabling ChaCha20
* pacify pylint 2.11: use format strings
* pacify pylint 2.11: specify explicit encoding
* fix minor things found by new pylint
* update-crypto-policies: --check against regenerated
* update-crypto-policies: fix --check's walking order
* policygenerators/gnutls: revert disabling DTLS0.9...
* policygenerators/java: add javasystem backend
* LEGACY: bump 1023 key size to 1024
* cryptopolicies: fix 'and' in deprecation warnings
* *ssh: condition ecdh-sha2-nistp384 on SECP384R1
* nss: hopefully the last fix for nss sigalgs check
* cryptopolicies: Python 3.10 compatibility
* nss: postponing check + testing at least something
* Rename 'policy modules' to 'subpolicies'
* validation.rules: fix a missing word in error
* cryptopolicies: raise errors right after warnings
* update-crypto-policies: capitalize warnings
* cryptopolicies: syntax-precheck scope errors
* .gitlab-ci.yml, Makefile: enable codespell
* all: fix several typos
* docs: don't leave zero TLS/DTLS protocols on
* openssl: separate TLS/DTLS MinProtocol/MaxProtocol
* alg_lists: order protocols new-to-old for consistency
* alg_lists: max_{d,}tls_version
* update-crypto-policies: fix pregenerated + local.d
* openssh: allow validation with pre-8.5
* .gitlab-ci.yml: run commit-range against upstream
* openssh: Use the new name for PubkeyAcceptedKeyTypes
* sha1_in_dnssec: deprecate
* .gitlab-ci.yml: test commit ranges
* FIPS:OSPP: sign = -*-SHA2-224
* scoped policies: documentation update
* scoped policies: use new features to the fullest...
* scoped policies: rewrite + minimal policy changes
* scoped policies: rewrite preparations
* nss: postponing the version check again, to 3.64
- Remove patches fixed upstream: crypto-policies-typos.patch
- Rebase: crypto-policies-test_supported_modules_only.patch
- Merge crypto-policies-asciidoc.patch into
crypto-policies-no-build-manpages.patch
==== diffutils ====
- Skip stack overflow tests under qemu emulation (bsc#1190046)
==== ffmpeg-4 ====
Subpackages: libavcodec58_134 libavformat58_76 libavutil56_70 libswresample3_9
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
denial of service vulnerability exists due to a memory leak in
avcodec_alloc_context3 at options.c (bsc#1186756).
==== gd ====
- reenable gd/gd2 legacy formats, was disabled by upstream by
default [bsc#1190762]
==== libmtp ====
Version update (1.1.18 -> 1.1.19)
Subpackages: libmtp-udev libmtp9
- updated to 1.1.19 release
- Lots of USB ids added, especially Garmin devices
- use a local libusb context, not the global one
- various bugfixes
==== mozjs78 ====
Version update (78.13.0 -> 78.14.0)
- Update to version 78.14.0esr.
==== openSUSE-build-key ====
- Only add openSUSE Backports key when building for a Leap system
(sle_version > 0). Tumbleweed does not use Backports.
==== perl-libwww-perl ====
Version update (6.56 -> 6.57)
- updated to 6.57
see /usr/share/doc/packages/perl-libwww-perl/Changes
6.57 2021-09-20 20:20:14Z
- Update docs for protocols_allowed and protocols forbidden (GH#386) (Olaf Alders)
==== selinux-policy ====
Subpackages: selinux-policy-targeted
- Fix auditd service start with systemd hardening directives (boo#1190918)
* add fix_auditd.patch
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
audit (3.0.3 -> 3.0.5)
audit-secondary (3.0.3 -> 3.0.5)
crypto-policies (20210225.05203d2 -> 20210917.c9d86d1)
diffutils
mozjs78 (78.13.0 -> 78.14.0)
openSUSE-build-key
salt (3002.2 -> 3003.3)
selinux-policy
=== Details ===
==== audit ====
Version update (3.0.3 -> 3.0.5)
Subpackages: libaudit1 libauparse0
- Update to version 3.0.5:
* In auditd, flush uid/gid caches when user/group added/deleted/modified
* Fixed various issues when dealing with corrupted logs
* In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
* Apply performance speedups to auparse library
* Optimize rule loading in auditctl
* Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
* Update syscall table to the 5.14 kernel
* Fixed various issues when dealing with corrupted logs
==== audit-secondary ====
Version update (3.0.3 -> 3.0.5)
Subpackages: audit python3-audit system-group-audit
- Fix hardened auditd.service (bsc#1181400)
* add fix-hardened-service.patch
Make /etc/audit read-write from the service.
Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
* add enable-stop-rules.patch
- Change default log_format from ENRICHED to RAW (bsc#1190500):
* add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
* In auditd, flush uid/gid caches when user/group added/deleted/modified
* Fixed various issues when dealing with corrupted logs
* In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
* Apply performance speedups to auparse library
* Optimize rule loading in auditctl
* Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
* Update syscall table to the 5.14 kernel
* Fixed various issues when dealing with corrupted logs
==== crypto-policies ====
Version update (20210225.05203d2 -> 20210917.c9d86d1)
- Remove the scripts and documentation regarding
fips-finish-install and test-fips-setup
* Add crypto-policies-FIPS.patch
- Update to version 20210917.c9d86d1:
* openssl: fix disabling ChaCha20
* pacify pylint 2.11: use format strings
* pacify pylint 2.11: specify explicit encoding
* fix minor things found by new pylint
* update-crypto-policies: --check against regenerated
* update-crypto-policies: fix --check's walking order
* policygenerators/gnutls: revert disabling DTLS0.9...
* policygenerators/java: add javasystem backend
* LEGACY: bump 1023 key size to 1024
* cryptopolicies: fix 'and' in deprecation warnings
* *ssh: condition ecdh-sha2-nistp384 on SECP384R1
* nss: hopefully the last fix for nss sigalgs check
* cryptopolicies: Python 3.10 compatibility
* nss: postponing check + testing at least something
* Rename 'policy modules' to 'subpolicies'
* validation.rules: fix a missing word in error
* cryptopolicies: raise errors right after warnings
* update-crypto-policies: capitalize warnings
* cryptopolicies: syntax-precheck scope errors
* .gitlab-ci.yml, Makefile: enable codespell
* all: fix several typos
* docs: don't leave zero TLS/DTLS protocols on
* openssl: separate TLS/DTLS MinProtocol/MaxProtocol
* alg_lists: order protocols new-to-old for consistency
* alg_lists: max_{d,}tls_version
* update-crypto-policies: fix pregenerated + local.d
* openssh: allow validation with pre-8.5
* .gitlab-ci.yml: run commit-range against upstream
* openssh: Use the new name for PubkeyAcceptedKeyTypes
* sha1_in_dnssec: deprecate
* .gitlab-ci.yml: test commit ranges
* FIPS:OSPP: sign = -*-SHA2-224
* scoped policies: documentation update
* scoped policies: use new features to the fullest...
* scoped policies: rewrite + minimal policy changes
* scoped policies: rewrite preparations
* nss: postponing the version check again, to 3.64
- Remove patches fixed upstream: crypto-policies-typos.patch
- Rebase: crypto-policies-test_supported_modules_only.patch
- Merge crypto-policies-asciidoc.patch into
crypto-policies-no-build-manpages.patch
==== diffutils ====
- Skip stack overflow tests under qemu emulation (bsc#1190046)
==== mozjs78 ====
Version update (78.13.0 -> 78.14.0)
- Update to version 78.14.0esr.
==== openSUSE-build-key ====
- Only add openSUSE Backports key when building for a Leap system
(sle_version > 0). Tumbleweed does not use Backports.
==== salt ====
Version update (3002.2 -> 3003.3)
Subpackages: python3-salt salt-master salt-minion salt-standalone-formulas-configuration salt-transactional-update
- Support querying for JSON data in external sql pillar
- Added:
* 3003.3-postgresql-json-support-in-pillar-423.patch
- Update to Salt release version 3003.3
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3003.3.html
- Added:
* allow-vendor-change-option-with-zypper.patch
* support-transactional-systems-microos.patch
* virt-enhancements.patch
- Modified:
* adds-explicit-type-cast-for-port.patch
* use-adler32-algorithm-to-compute-string-checksums.patch
* do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
* fixes-56144-to-enable-hotadd-profile-support.patch
* include-aliases-in-the-fqdns-grains.patch
* implementation-of-held-unheld-functions-for-state-pk.patch
* add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
* debian-info_installed-compatibility-50453.patch
* fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
* update-target-fix-for-salt-ssh-to-process-targets-li.patch
* x509-fixes-111.patch
* prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
* restore-default-behaviour-of-pkg-list-return.patch
* adding-preliminary-support-for-rocky.-59682-391.patch
* add-astra-linux-common-edition-to-the-os-family-list.patch
* templates-move-the-globals-up-to-the-environment-jin.patch
* fix-bsc-1065792.patch
* add-migrated-state-and-gpg-key-management-functions-.patch
* zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
* improvements-on-ansiblegate-module-354.patch
* add-custom-suse-capabilities-as-grains.patch
* return-the-expected-powerpc-os-arch-bsc-1117995.patch
* revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
* enhance-openscap-module-add-xccdf_eval-call-386.patch
* implementation-of-suse_ip-execution-module-bsc-10999.patch
* add-missing-aarch64-to-rpm-package-architectures-405.patch
* async-batch-implementation.patch
* temporary-fix-extend-the-whitelist-of-allowed-comman.patch
* do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
* figure-out-python-interpreter-to-use-inside-containe.patch
* better-handling-of-bad-public-keys-from-minions-bsc-.patch
* early-feature-support-config.patch
* do-not-monkey-patch-yaml-bsc-1177474.patch
- Removed:
* fix-memory-leak-produced-by-batch-async-find_jobs-me.patch
* fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch
* fix-for-log-checking-in-x509-test.patch
* do-not-make-ansiblegate-to-crash-on-python3-minions.patch
* prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
* remove-msgpack-1.0.0-requirement-in-the-installed-me.patch
* move-server_id-deprecation-warning-to-reduce-log-spa.patch
* re-adding-function-to-test-for-root.patch
* make-profiles-a-package.patch
* handle-master-tops-data-when-states-are-applied-by-t.patch
* fix-unit-tests-for-batch-async-after-refactor.patch
* prevent-test_mod_del_repo_multiline_values-to-fail.patch
* prevent-import-errors-when-running-test_btrfs-unit-t.patch
* fix-failing-unit-tests-for-batch-async.patch
* remove-unnecessary-yield-causing-badyielderror-bsc-1.patch
* virt-use-dev-kvm-to-detect-kvm-383.patch
* 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
* add-docker-logout-237.patch
* drop-wrong-mock-from-chroot-unit-test.patch
* fix-async-batch-multiple-done-events.patch
* fix-unit-test-for-grains-core.patch
* remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
* pkgrepo-support-python-2.7-function-call-295.patch
* opensuse-3000-virt-defined-states-222.patch
* open-suse-3002.2-xen-grub-316.patch
* add-patch-support-for-allow-vendor-change-option-wit.patch
* fix-the-removed-six.itermitems-and-six.-_type-262.patch
* fix-aptpkg-systemd-call-bsc-1143301.patch
* add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
* fix-cve-2020-25592-and-add-tests-bsc-1178319.patch
* regression-fix-of-salt-ssh-on-processing-targets-353.patch
* do-not-break-repo-files-with-multiple-line-values-on.patch
* 3002-set-distro-requirement-to-oldest-supported-vers.patch
* integration-of-msi-authentication-with-azurearm-clou.patch
* zypperpkg-filter-patterns-that-start-with-dot-244.patch
* fix-for-temp-folder-definition-in-loader-unit-test.patch
* fix-novendorchange-option-284.patch
* backport-virt-patches-from-3001-256.patch
* allow-passing-kwargs-to-pkg.list_downloaded-bsc-1140.patch
* path-replace-functools.wraps-with-six.wraps-bsc-1177.patch
* virt-uefi-fix-backport-312.patch
* add-all_versions-parameter-to-include-all-installed-.patch
* add-pkg.services_need_restart-302.patch
* add-batch_presence_ping_timeout-and-batch_presence_p.patch
* allow-vendor-change-option-with-zypper-313.patch
* avoid-traceback-when-http.query-request-cannot-be-pe.patch
* changed-imports-to-vendored-tornado.patch
* fix-issue-parsing-errors-in-ansiblegate-state-module.patch
* sanitize-grains-loaded-from-roster_grains.json.patch
* handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
* add-multi-file-support-and-globbing-to-the-filetree-.patch
* loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
* backport-thread.is_alive-fix-390.patch
* get-os_arch-also-without-rpm-package-installed.patch
* python3.8-compatibility-pr-s-235.patch
* fixed-bug-lvm-has-no-parttion-type.-the-scipt-later-.patch
* ensure-virt.update-stop_on_reboot-is-updated-with-it.patch
* xfs-do-not-fails-if-type-is-not-present.patch
* grains-master-can-read-grains.patch
* invalidate-file-list-cache-when-cache-file-modified-.patch
* move-vendor-change-logic-to-zypper-class-355.patch
* implement-network.fqdns-module-function-bsc-1134860-.patch
* opensuse-3000.2-virt-backports-236-257.patch
* prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch
* batch_async-avoid-using-fnmatch-to-match-event-217.patch
* provide-the-missing-features-required-for-yomi-yet-o.patch
* fix-__mount_device-wrapper-254.patch
* fix-ipv6-scope-bsc-1108557.patch
* fix-failing-unit-tests-for-systemd.patch
* use-current-ioloop-for-the-localclient-instance-of-b.patch
* revert-add-patch-support-for-allow-vendor-change-opt.patch
* remove-deprecated-warning-that-breaks-miniion-execut.patch
* prevent-systemd-run-description-issue-when-running-a.patch
* fix-grains.test_core-unit-test-277.patch
* prevent-command-injection-in-the-snapper-module-bsc-.patch
* backport-of-upstream-pr59492-to-3002.2-404.patch
* use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
* reintroducing-reverted-changes.patch
* add-cpe_name-for-osversion-grain-parsing-u-49946.patch
* add-hold-unhold-functions.patch
* virt._get_domain-don-t-raise-an-exception-if-there-i.patch
* fix-error-handling-in-openscap-module-bsc-1188647-40.patch
* apply-patch-from-upstream-to-support-python-3.8.patch
* remove-deprecated-usage-of-no_mock-and-no_mock_reaso.patch
* add-supportconfig-module-for-remote-calls-and-saltss.patch
* allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
* fall-back-to-pymysql.patch
* fixes-cve-2018-15750-cve-2018-15751.patch
* do-not-crash-when-there-are-ipv6-established-connect.patch
* improve-batch_async-to-release-consumed-memory-bsc-1.patch
* support-config-non-root-permission-issues-fixes-u-50.patch
* transactional_update-detect-recursion-in-the-executo.patch
* open-suse-3002.2-virt-network-311.patch
* option-to-en-disable-force-refresh-in-zypper-215.patch
* do-noop-for-services-states-when-running-systemd-in-.patch
* exclude-the-full-path-of-a-download-url-to-prevent-i.patch
* fix-a-wrong-rebase-in-test_core.py-180.patch
* add-new-custom-suse-capability-for-saltutil-state-mo.patch
* opensuse-3000-libvirt-engine-fixes-251.patch
* accumulated-changes-from-yomi-167.patch
* fix-async-batch-race-conditions.patch
* fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
* loop-fix-variable-names-for-until_no_eval.patch
* batch-async-catch-exceptions-and-safety-unregister-a.patch
* grains.extra-support-old-non-intel-kernels-bsc-11806.patch
* backport-a-few-virt-prs-272.patch
* fix-git_pillar-merging-across-multiple-__env__-repos.patch
* drop-wrong-virt-capabilities-code-after-rebasing-pat.patch
* virt-adding-kernel-boot-parameters-to-libvirt-xml-55.patch
* async-batch-implementation-fix-320.patch
* support-for-btrfs-and-xfs-in-parted-and-mkfs.patch
* support-transactional-systems-microos-271.patch
* strip-trailing-from-repo.uri-when-comparing-repos-in.patch
* opensuse-3000.3-spacewalk-runner-parse-command-250.patch
* calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
* add-virt.all_capabilities.patch
* ansiblegate-take-care-of-failed-skipped-and-unreacha.patch
* virt-pass-emulator-when-getting-domain-capabilities-.patch
* fixing-streamclosed-issue.patch
* fix-for-some-cves-bsc1181550.patch
* transactional_update-unify-with-chroot.call.patch
* do-not-raise-streamclosederror-traceback-but-only-lo.patch
* fix-batch_async-obsolete-test.patch
* fix-zypper-pkg.list_pkgs-expectation-and-dpkg-mockin.patch
* fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
* accumulated-changes-required-for-yomi-165.patch
* fix-virt.update-with-cpu-defined-263.patch
* remove-vendored-backports-abc-from-requirements.patch
* open-suse-3002.2-bigvm-310.patch
* xen-disk-fixes-264.patch
* virt.network_update-handle-missing-ipv4-netmask-attr.patch
* add-saltssh-multi-version-support-across-python-inte.patch
==== selinux-policy ====
Subpackages: selinux-policy-targeted
- Fix auditd service start with systemd hardening directives (boo#1190918)
* add fix_auditd.patch
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the aarch64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
adwaita-icon-theme (40.1.1 -> 41.0)
at-spi2-core (2.40.3 -> 2.42.0)
cheese (3.38.0 -> 41.0)
curl (7.79.0 -> 7.79.1)
evolution-data-server (3.40.4 -> 3.42.0)
gdm (3.38.2 -> 41.0)
gjs (1.68.4 -> 1.70.0)
glib-networking (2.68.1 -> 2.70.0)
glib2 (2.68.4 -> 2.70.0)
glibmm2_4 (2.66.0 -> 2.66.1)
gnome-control-center (40.1 -> 41.0)
gnome-desktop (40.4 -> 41.0)
gnome-disk-utility (40.2 -> 41.0)
gnome-settings-daemon (40.0.1 -> 41.0)
gnome-shell (40.5 -> 41.0)
gnome-shell-extensions (40.4 -> 41.0)
gnome-software (40.4 -> 41.0)
gnome-system-monitor (40.1 -> 41.0)
gnome-terminal (3.40.3 -> 3.42.0)
gnome-user-docs (40.5 -> 41.0)
gobject-introspection (1.68.0 -> 1.70.0)
gsettings-desktop-schemas (40.0 -> 41.0)
gssdp (1.2.3 -> 1.4.0.1)
gtk4
gtkmm3 (3.24.4 -> 3.24.5)
gupnp (1.2.7 -> 1.4.0)
kmod
libdazzle (3.40.0 -> 3.42.0)
libhandy (1.2.3 -> 1.4.0)
libpwquality
librsvg (2.50.7 -> 2.52.0)
libsoup2 (2.72.0 -> 2.74.0)
malcontent
mutter (40.5 -> 41.0)
nautilus (40.2 -> 41.0)
pangomm1_4 (2.46.0 -> 2.46.1)
python-gobject (3.40.1 -> 3.42.0)
seahorse-nautilus
shared-mime-info
tracker (3.1.2 -> 3.2.0)
tracker-miners (3.1.3 -> 3.2.0)
upower (0.99.11 -> 0.99.13)
vte (0.64.2 -> 0.66.0)
webkit2gtk3-soup2 (2.32.4 -> 2.34.0)
xdg-desktop-portal-gtk (1.8.0 -> 1.10.0)
yelp (40.3 -> 41.1)
yelp-xsl (40.2 -> 41.0)
zenity (3.32.0 -> 3.41.0)
=== Details ===
==== adwaita-icon-theme ====
Version update (40.1.1 -> 41.0)
- Update to version 41.0:
+ fullcolor network server and workgroup.
+ symbolic: larger symbolics for headerbar.
+ symbolic: larger notification.
+ updated guidelines.
+ symbolic: ascend/descending sort.
+ symbolic: edit-clear-all new metaphor.
+ fullcolor: application-x-addon and application-x-firmware.
==== at-spi2-core ====
Version update (2.40.3 -> 2.42.0)
Subpackages: libatspi0 typelib-1_0-Atspi-2_0
- Update to version 2.42.0:
+ Set X root property when Xwayland starts on demand.
+ Several dbus introspection fixes.
==== cheese ====
Version update (3.38.0 -> 41.0)
Subpackages: libcheese-common libcheese-gtk25 libcheese8
- Update to version 41.0:
+ Allow headerbar to appear on all desktops.
+ Update to runtime 40 and some meta-data fixes.
+ Reference of [GtkChild] fields is handled by GtkBuilder, type
must be unowned.
+ Change GLib.PtrArray into GLib.GenericArray.
+ libcheese: Fix critical on failing to load cropping cursor.
+ Allow device parameter to understand api.v4l2.path.
+ Update flatpak manifest and appdata.
+ Remember last used camera.
+ Enable cameras with only MJPEG output.
+ Preserve video/x-raw over image/jpeg.
+ Support camera video formats with MJPEG output.
+ Show better error when file info query fails.
+ Fix infinite loop if thumbnailer is not available.
+ Updated translations.
- Rename typelib-1_0-Cheese-3_0 subpackage to
typelib-1_0-Cheese-41_0, following upstream.
- Drop upstream fixed patches:
+ 1c1e7fa0c4608331fd89683ccb342ed3518acccc.patch
+ 5587daca748e9010f59250c5dcb8e8ea42266685.patch
+ 58de82b3d463b69f4c0bef75667e47020924e28b.patch
+ 7cf6268e54620bbbe5e6e61800c50fb0cb4bea57.patch
+ 9f0825c3169047da75d3fe91a3cb02bfe6fb7f25.patch
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Add upstream patches adding support for video MJPEG output:
+ 58de82b3d463b69f4c0bef75667e47020924e28b.patch
+ 1c1e7fa0c4608331fd89683ccb342ed3518acccc.patch
+ 5587daca748e9010f59250c5dcb8e8ea42266685.patch
+ 9f0825c3169047da75d3fe91a3cb02bfe6fb7f25.patch
==== curl ====
Version update (7.79.0 -> 7.79.1)
Subpackages: libcurl4
- Update to 7.79.1:
* Bugfixes:
- Curl_http2_setup: don't change connection data on repeat invokes
- curl_multi_fdset: make FD_SET() not operate on sockets out of range
- dist: provide lib/.checksrc in the tarball
- FAQ: add GOPHERS + curl works on data, not files
- hsts: CURLSTS_FAIL from hsts read callback should fail transfer
- hsts: handle unlimited expiry
- http: fix the broken >3 digit response code detection
- strerror: use sys_errlist instead of strerror on Windows
- test1184: disable: https://github.com/curl/curl/issues/7725
- tests/sshserver.pl: make it work with openssh-8.7p1
==== evolution-data-server ====
Version update (3.40.4 -> 3.42.0)
Subpackages: libebackend-1_2-10 libebook-1_2-20 libebook-contacts-1_2-3 libecal-2_0-1 libedata-book-1_2-26 libedata-cal-2_0-1 libedataserver-1_2-26 libedataserverui-1_2-3
- Replace CMAKE_SKIP_RPATH=OFF with CMAKE_SKIP_INSTALL_RPATH=OFF
as that should be used with the newest cmake macros.
- Update to version 3.42.0:
+ Updated translations.
- Update to version 3.41.3:
+ Slow down automatic background downloads when in power saver
mode.
+ ERemindersWidget: Reverse order of the shown reminders.
+ vala: FolderThreadNode is a compact class.
+ Updated translations.
- Update to version 3.41.2:
+ CamelMimeFilterToHTML: Speed up read of long lines.
+ CamelMimeFilterToHTML: Correct filtering of text without new
line at the end.
+ alarm-notify: Focus window on status icon click when shown.
+ vala: Add support for the auth_type class field of CamelSasl.
+ vala: Properly annotate CamelServiceAuthType.
+ ESoupSession: Let it understand GSSAPI authentication method.
+ Updated translations.
- bump so_camel to 63: follow upstream changes.
- Update to version 3.41.1:
+ EWebDAVCollectionBackend: Preset also auth method on the new
child.
+ Camel: Fails to filter unread junk messages in a virtual Junk
folder.
+ Add Yahoo! OAuth2 service objects into the developer
documentation.
+ ESourceWebDAV: Fallback to SHA1 on SSL trust verification if
needed.
+ ECalBackendSync: Ensure no Recurrence-ID set when removing all
components.
+ PrintableOptions.cmake: Correct variable name comparison.
+ libecal: Fix a warning caught by a gcc static analyzer.
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== gdm ====
Version update (3.38.2 -> 41.0)
Subpackages: gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0
- Rebase gdm-disable-gnome-initial-setup.patch.
- Update to version 41.0:
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Add gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
Support to start X under root instead of regular user.
(bnc#1188912 jsc#SLE-17880).
- Update X11-displaymanager-gdm file.
- Update to version 41.rc:
+ Fix fallback to Xorg at login screen.
+ Fix SessionType in AccountService user config.
+ Reuse VT on log out.
+ Updated translations.
- Update to version 41.alpha:
+ Allow user session to be Wayland even when login screen is
Xorg.
+ Allow wayland user sessions for single GPU vendor nvidia
machines.
+ Updated translations.
- Rebase patches:
+ gdm-s390-not-require-g-s-d_wacom.patch
+ gdm-disable-gnome-initial-setup.patch
- Rebased gdm-default-wm.patch.
- Drop patches fixed upstream on SLE and Leap 15.4:
+ gdm-enable-Wayland-on-Cirrus.patch
+ gdm-Remove-deprecated-StandardOutput-syslog.patch
+ gdm-fix-crash-when-using-Xvfb.patch
+ gdm-display-Exit-with-failure-if-loading-existing-users-fails.patch
- Update to version 40.1:
+ Better support for unlocking gnome-keyring with disk password
+ Better support for flatpak
+ Misc auth fixes
+ Improved error output in gdm-runtime-config
+ Sort session list on login screen
+ Support Session and SessionType properties from accountsservice
+ Updated translations.
- Rebase gdm-xauthlocalhostname.patch.
- Disable gdm-default-wm.patch, needs reworking.
- Add now working CONFIG parameter to sysusers generator
- Add gdm-Remove-deprecated-StandardOutput-syslog.patch: Remove
deprecated StandardOutput=syslog in gdm.service file
(bsc#1185146, glgo#GNOME/gdm!623).
- Update to version 40.0:
+ 100% CPU fix.
+ Updated translations.
- Update to version 40.rc:
+ Fingerprint auth fixes.
+ Fix timeout handling for graphics bringup.
+ Updated translations.
- Update to version 40.beta:
+ xinit script improvements.
+ Build goo fixes.
+ Support systems that boot before the graphics subsystem fully
loads.
+ Don't overwrite PATH set by user.
+ Generalize gdm-disable-wayland into new gdm-runtime-config
tool.
+ Fail hard if accountsservice fails.
+ PAM integration improvements.
+ Leak fixes.
+ Stop using deprecated systemd functions.
- Changes from version 3.38.2.1:
+ Address autologin unlock bug issue (CVE-2020-27837).
+ Updated translations.
- Rebase gdm-disable-wayland-on-mgag200-chipsets.patch.
- Drop gdm-UsrEtc.patch: merged upstream.
==== gjs ====
Version update (1.68.4 -> 1.70.0)
Subpackages: libgjs0 typelib-1_0-GjsPrivate-1_0
- Update to version 1.70.0:
+ No changes.
- Update to version 1.69.90:
+ Update ESLint to v8.
+ gi: Enable pending tests which are now correctly handled.
+ gi: Return null if return argument is a pointer type.
+ gi: Assume native enums are signed, avoid asserting. [!660, Evan Welsh]
+ Fix cppcheck failure.
+ Strange behavior for strings with NUL character.
+ 64-bit int GObject properties have some problems with
values > G_MAXINT32.
+ Crash on dynamic import in interactive interpreter.
+ 1.69.1: gjs test suite is failing when gjs is build with
- DG_DISABLE_ASSERT.
+ function: Warn about unhandled promise rejections in
System.exit().
+ attempting to wrap a new GObject mid-construction blows up.
+ Fix IWYU CI job.
+ Build fixes.
- Update to version 1.69.2:
+ The TextEncoder and TextDecoder global objects are now
available.
+ The 'console' global object is now available. This is for
compatibility with Node.js and browser environments, and for
familiarity for developers accustomed to them.
+ Cairo.Surface has gained getDeviceScale(), setDeviceScale(),
getDeviceOffset(), and setDeviceOffset() methods.
+ GLib.log_set_writer_func() and
GObject.Object.bind_property_full() now work.
+ There is also a 'console' built-in module which exports
functions setConsoleLogDomain() and getConsoleLogDomain(), for
controlling the GLib log domain that the console methods use.
+ The debugger has gained a 'set ignoreCaughtExceptions
(true/false)' option.
==== glib-networking ====
Version update (2.68.1 -> 2.70.0)
- Update to version 2.70.0:
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 2.70.rc:
+ gnutls:
- revert AuthorityInformationAccess implementation for now.
- fix use of non-default GTlsDatabases, Geary crash on startup.
- fix leak in g_tls_certificate_gnutls_copy.
- Unbreak GTLS_GNUTLS_CHECK_VERSION.
+ openssl: remove openssl-util.
- Update to version 2.70.beta:
+ gnutls: Ensure that PKCS #11 pins are NUL terminated.
+ openssl: Restore OCSP support.
- Update to version 2.70.alpha:
+ Fix TLS channel bindings tests.
+ Require OpenSSL 1.0.2.
+ Fix threadsafety issue in certificate verification.
+ dlopen libsoup for performing HTTP requests.
+ OpenSSL: add DTLS support, plus many related improvements.
+ Implement new GTlsCertificate details APIs.
+ GnuTLS: improve error handling for PIN failures.
+ GnuTLS: expose PIN type on PIN requests.
+ GnuTLS: check cancellable in pull timeout callback.
+ Improve automation of test certificate creation.
+ GnuTLS: use GnuTLS to implement all channel bindings.
+ GnuTLS: rework certificate verification to use TLS session.
+ GnuTLS: improve peer identity verification.
+ Bring back automatic downloading of missing intermediate
certificates (not fixed, may go away again).
==== glib2 ====
Version update (2.68.4 -> 2.70.0)
Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0
- Update to version 2.70.0:
+ Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== glibmm2_4 ====
Version update (2.66.0 -> 2.66.1)
Subpackages: libgiomm-2_4-1 libglibmm-2_4-1
- Update to version 2.66.1:
+ Glib: Variant: Fix template constructors so they work with
C++20.
+ Build:
- Meson build:
. Use relative paths to untracked/
. examples and tests: Add dependency('threads')
. Make it possible to use glibmm as a subproject
. No implicit_include_directories
. Make quiet installations possible
- MSVC build:
. Export Glib::manage()
. Avoid exporting classes with std::string members
- [gio|glib]mmconfig.h.*: Don't dllimport on MinGW
- Add glibmm2_4-docs-without-timestamp.patch: Do not add timestamps
to generated doc files.
- Add m4 BuildRequires: the generated gmmproc actually stores the
path to m4, as detected during build. Subsequent builds of other
* mm modules from git need a working setup for this.
==== gnome-control-center ====
Version update (40.1 -> 41.0)
Subpackages: gnome-control-center-goa
- Bring back gnome-control-center-disable-error-message-for-NM.patch
and rebase it against latest code base(bsc#1190875).
- Add power-profiles-daemon Recommends: Support the new power
profiles available.
- Refresh patches with quilt.
- Update to version 41.0:
+ Cleanup the development Flatpak manifest.
+ User Accounts: Add parental controls keywords.
+ Updated translations.
- Update to version 41.rc1:
+ Cellular: Various translation fixes.
+ User Accounts: Improve parental controls behavior.
+ Updated translations.
- Update to version 41.beta:
+ Introduce the new Cellular panel.
+ Introduce the new Multitasking panel.
+ About: Fix a crash due to uninitialized variables.
+ Bluetooth: Fix Bluetooth switch transitions.
+ Location: Fix permission store id (again).
+ Power: Polish power profiles section.
- Changes from version 41.alpha:
+ Improve and fix the development Flatpak manifest.
+ Drop dependency on grilo.
+ About:
- Don't show GNOME micro version number.
- Look for dark and text distro logo variants.
+ Accessibility: Add "Enable Animations" option.
+ Location: Fix permission store id.
+ Mouse & Touchpad: Update artwork.
+ Online Accounts: Present all online accounts providers at once.
+ Power:
- Integrate with new power profiles daemon API.
- Show more information about power profiles.
- Cleanup some preferences.
+ Updated translations.
- Drop pkgconfig(grilo-0.3) BuildRequires: no longer needed.
- Add pkgconfig(gcr-3) BuildRequires: dependency for the new
cellular panel.
==== gnome-desktop ====
Version update (40.4 -> 41.0)
Subpackages: gnome-version libgnome-desktop-3-19 libgnome-desktop-3_0-common typelib-1_0-GnomeDesktop-3_0
- Update to version 41.0:
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 41.rc:
+ Updated translations.
- Update to version 41.beta:
+ xkb: Clear cached layouts when necessary.
+ Updated translations.
- Update to version 41.alpha:
+ Stop mounting ld.so.cache on non-glibc systems.
+ Replace usage of non-portable `uselocale` with locale-dependent
functions.
+ Fix starttime hour parsing in animated background.
+ xkbinfo: only insert new layouts, skip over duplicate ones.
+ Updated translations.
==== gnome-disk-utility ====
Version update (40.2 -> 41.0)
- Update to version 41.0:
+ metainfo: Add minimum screen size requirement and input
recommendations
+ desktop-file: Add X-Purism-Form-Factor.
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 41.rc:
+ Updated translations.
- Update to version 41.beta:
+ gducreateformatdialog: Use LUKS2 for new encrypted partitions.
+ volume-menu/gduwindow: Add button and dialog to take filesystem
ownership.
+ ui: Change the icon of the detach loop device button.
+ shortcuts: Add keyboard shortcut for the application menu.
+ gduwindow: Make menus toggleable.
+ ui: Change the icon of the job cancel button.
+ ui: Align job section.
+ ui: Enable ellipsis on the job remaining label.
+ gdubenchmarkdialog: Save benchmark settings.
+ Flatpak build fixes.
+ Updated translations.
- Update to version 41.alpha:
+ UI: Highlight destructive actions.
+ Updated translations.
==== gnome-settings-daemon ====
Version update (40.0.1 -> 41.0)
- Update to version 41.0:
+ USB protection: don't crash when screensaver service is
unavailable.
+ Power: Fix location of comments for translators.
+ Updated translations.
- Remove obsolete translation-update-upstream and
gnome-patch-translation support (jsc#SLE-21105).
- Update to version 41.rc:
+ Power:
- Enable power-saver profile when low on battery.
- Dim the screen quicker by default.
- Generalize laptop battery notifications.
- Refactor battery notifications for external devices.
+ Media-keys:
- Replace deprecated calls.
- Add one second delay between each rfkill event.
+ Housekeeping: Use GRefCount.
+ USB-protection:
- Authorize devices after screen has been locked.
- Improve debug output.
- Misc. fixes.
+ Xsettings: Add support for XFixes ClientDisconnectMode.
+ Updated translations.
- Add pkgconfig(xfixes) BuildRequires: new dependency.
==== gnome-shell ====
Version update (40.5 -> 41.0)
Subpackages: gnome-shell-calendar
- Update to version 41.0:
+ Updated translations.
- Up mutter dependency.
- Update to version 41.rc.1:
+ Make tests optional.
+ Misc. bug fixes.
+ Updated translations.
- Update to version 41.rc:
+ Optimize rendering of fullscreen zoom.
+ Fix glitchy launch animations when leaving overview.
+ Show low priority notifications only in message list.
+ Support Soup 3 instead of 2.4.
+ Set log domain for extensions that use console.log().
+ Fix wrong separator position in dash.
+ Fix OSK not registering button presses on X11.
+ Fix work area getting messed up by hidden panels.
+ Fix IM candidate popover position.
+ Restrict callers of private D-Bus APIs.
+ Support committing preedit string on focus loss.
+ Misc. bug fixes and cleanups.
+ Updated translations.
- Update to version 41.beta:
+ Unbreak Xwayland apps when not using systemd in user session.
+ extension-tool: Always print location on successful creation.
+ Fix distributed man pages.
+ Immediately start app grid drags for non-touch devices.
+ Avoid unnecessary icon shadow changes.
+ Handle screencast failures more gracefully.
+ Use symbolic icons in looking glass toolbar.
+ Allow overriding super+number shortcuts in Settings.
+ Don't include hidden search results in keynav.
+ Use anaccelerated deltas in swipe tracker.
+ status/network: Do not disable on login screen.
+ Always take workarea into account when allocating workspaces.
+ location: Split out geoclue agent from indicator.
+ Add focus indication for switches.
+ Honor switch-user lockdown settings in unlock screen.
+ Fix glitch when dragging window preview in overview.
+ Lock down "Show Text" in password entries.
+ Add power mode selection to status menu.
+ workspace: Handle skip-taskbar changes.
+ status/network: Use WWan settings panel for GSM/LTE modems.
+ extensionUtils: Add gettext convenience helpers.
+ screenShield: Fix suspend inhibitor accounting.
+ Unify app context menus.
+ Use consistent terminology in window menu.
+ Fixed crashes.
+ Misc. bug fixes and cleanups.
+ Updated translations.
- Rebase gnome-shell-private-connection.patch.
==== gnome-shell-extensions ====
Version update (40.4 -> 41.0)
Subpackages: gnome-shell-classic gnome-shell-extensions-common
- Update to version 41.0:
+ No changes.
- Update to version 41.rc.1:
+ Fix pre-generating stylesheets in tarball.
- Changes from version 41.rc:
+ window-list: Adapt to overview-on-startup.
+ apps-menu: Use a custom 'toggle-menu' shortcut.
+ Misc. bug fixes and cleanups.
==== gnome-software ====
Version update (40.4 -> 41.0)
- Update to version 41.0:
+ Instead of showing all package-based apps as "potentially
unsafe", only use that language for 3rd party ones.
+ Fix a bug where the "Show more" button on an app details page
would flicker when the window is resized.
+ Fix a bug where Software sometimes shows an Uninstall button
after uninstalling something.
+ Add GNOME Circle apps to the featured carousel.
+ Fix a bug where Software would sometimes fail to execute an
install/remove operation for PackageKit software rather than
showing a PolicyKit password prompt.
+ Fix a bug where Software would fail to upgrade the distribution
via PackageKit.
+ Fix the hiding of rows on the Updates tab after they have been
updated.
+ Updated translations.
- Update to version 41.rc:
+ Tweaks to the context tiles and dialogs.
+ Fixes to the details page for non-desktop apps.
+ Re-add support for the add-ons categories.
+ Sort new and updated apps by release date on the category page.
+ Updated translations.
- Update to version 41.beta:
+ Many parts of the user interface reworked.
+ Fix when the 'Launch' button is shown after an application
install.
+ Fix appstream:// URL handling.
+ Fix application freeze on Flatpak application
install/remove/update.
+ Disable automatic update downloads when in power saver mode.
+ Updated translations.
- Update to version 41.alpha:
+ Many parts of the user interface reworked.
+ Improve error reporting from flatpak when low on disk space.
+ Fix issues with updating the UI when uninstalling apps with
add-ons.
+ Don?t keep rpm-ostreed alive forever.
+ Prevent polkit checks showing up for background operations.
+ Disallow submitting reviews for an app you haven?t installed.
+ Show download size in the Updates page.
+ Notify when restart is needed when uninstalling an app.
+ Fix some issues with searches not running.
+ Allow non-integer average star ratings for apps.
+ Reduce number of categories in the UI.
+ Improve ?pending updates? notifications.
+ Refine presentation of download and installed size on details
page.
+ Remove left over gnome-online-account dependencies.
+ Updated translations.
- Drop pkgconfig(goa-1.0) BuildRequires: no longer needed.
- Drop gnome-software-no-static-lib.patch: Fixed upstream.
==== gnome-system-monitor ====
Version update (40.1 -> 41.0)
- Update to version 41.0:
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 41.rc:
+ Removed leftover colors
+ Y axis and CPU percentage labels marked as translatable
+ Fix crash when changing the number of points
+ meson checks for itstool
+ Updated translations.
==== gnome-terminal ====
Version update (3.40.3 -> 3.42.0)
Subpackages: nautilus-extension-terminal
- Update to version 3.42.0:
+ metainfo: Remove XML namespaces
+ window: Add close button to info bar
+ Revert "screen: Use clean env when creating new tab"
+ Updated translations.
- Changes from version 3.41.90:
+ app: Remove stray semicolon
+ metainfo: Add keyboard/pointer recommends
+ client: Add more env vars not to forward
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 3.41.0:
+ Port to meson build system.
+ nautilus: Fix extension library name.
+ settings: Fix crash when loading the reference schema source
fails.
+ Updated translations.
- Add meson and gcc-c++ BuildRequires: new dependencies.
- Replace configure/make/make_install macros with
meson/meson_build/meson_install.
==== gnome-user-docs ====
Version update (40.5 -> 41.0)
- Update to version 41.0:
+ Added docs for emoji picker.
+ Updated settings docs.
+ Added Ethernet diagram.
+ Updated translations.
- Update to version 41.rc:
+ Terminology updates for tablets and styluses.
+ Updated to Files documentation.
+ Updated translations.
==== gobject-introspection ====
Version update (1.68.0 -> 1.70.0)
Subpackages: girepository-1_0 libgirepository-1_0-1
- Update to version 1.70.0:
+ Update the GIR data for GLib, GObject, and GIO.
- Update to version 1.69.0:
+ Fix build when gobject-introspection is a subproject,
+ Add more float types,
+ Make test suite work with cross-related options,
+ Fix several leaks found by Coverity,
+ Fix enum member,
+ Add g-ir-doc-tool man page,
+ Export warnlib sources as variables,
+ Update the GLib annotations,
+ Add "final" class attribute,
+ Add option to make .gir files installation paths configurable,
+ Handle constructors with mismatched GTypes,
+ Add property accessors annotations,
==== gsettings-desktop-schemas ====
Version update (40.0 -> 41.0)
- Update to version 41.0:
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 41.rc:
+ Stop setting legacy GNOME 2 shortcut by default.
+ Updated translations.
- Update to version 41.alpha:
+ Add lockdown setting for revealing passwords.
+ Updated translations.
==== gssdp ====
Version update (1.2.3 -> 1.4.0.1)
- Pass -Dsniffer=false to meson: Disable build of sniffer. Allows
to drop pkgconfig(gtk4) BuildRequires and helps eliminate a build
cycle.
- Allow for easy toggling using bcond_with sniffer.
- Update to version 1.4.0.1:
+ Fix building the sniffer when built as subproject
+ Do not build docs by default
- Changes from version 1.3.1:
+ Implement MAC lookup on Windows
+ Implement interface index lookup on Windows
+ Fix distributing docs in the tarball
+ Build docs by default
- Changes from version 1.3.0:
+ Sniffer: Various deprecated function clean-up
+ Sniffer: Port to GTK4
+ Docs: Ported to gi-docgen
+ Docs: Clean-up and other improvements
+ Client: Minor dead code clean-up
+ Build: Make GSSDP usable as a subproject
+ All: Fixes from scan-build
+ All: Minor introspection fixes
- Replace pkgconfig(gtl+-3.0) BuildRequires with pkgconfig(gtk4):
Follow upstreams port to GTK 4.
- Enable test suite: enable meson_test in check section.
==== gtk4 ====
Subpackages: gtk4-schema libgtk-4-1 typelib-1_0-Gtk-4_0
- Add explicit pkgconfig(gstreamer-gl-1.0) BuildRequires: not new,
but tested by meson, so let's be explicit about the dependency.
==== gtkmm3 ====
Version update (3.24.4 -> 3.24.5)
- Update to version 3.24.5:
+ Gtk: TreeValueProxy: Mark the copy assignment operator as
deleted.
+ Build:
- Meson build: Use relative paths to untracked/.
- [gdk|gtk]mmconfig.h.*: Don't dllimport on MinGW.
- Meson build: Make it possible to use gtkmm as a subproject.
- Meson build: No implicit_include_directories.
- MSVC build: Gtk::TreeModelColumnRecord: Export class
selectively.
==== gupnp ====
Version update (1.2.7 -> 1.4.0)
- Update to version 1.4.0:
+ Fix fallback option for GSSDP dependency.
+ Linux CM: Fix address family filtering.
+ Linux CM: Fix a typo.
- Changes from version 1.3.1:
+ Add ContextFilter class, deprecate WhiteList.
+ Fix several reference leaks.
+ Fix broken boot-id logic.
Changes from version 1.3.0:
+ Service: name Tasks.
+ Doc: Some grammaer fixes.
+ Dead and deprecated code clean-up.
+ Move tests that are actually examples into examples.
+ Move tests from gtest to test.
+ Doc: General clean-up.
+ Fix some introspection annotations.
+ Build: Make gupnp usable as a subproject (more or less).
+ Make it possible to re-use a ServiceProxyAction.
+ Service: Validate "Host" header for GENA actions.
==== kmod ====
Subpackages: libkmod2
- Enable ZSTD on 15.4 (jsc#SLE-21256).
==== libdazzle ====
Version update (3.40.0 -> 3.42.0)
- Add manual libdazzle = %{version} Provides to make the lang pack
auto installable.
- Update to version 3.42.0:
+ Panel fixes.
+ Allow DzlTaskCache to use NULL copy/free funcs.
+ Updated translations.
- Add lang sub-package now that there are translations.
==== libhandy ====
Version update (1.2.3 -> 1.4.0)
Subpackages: libhandy-1-0 typelib-1_0-Handy-1_0
- Update to version 1.4.0:
+ Updated translations.
- Update to version 1.3.90:
+ HdyAvatar: Fix giving it the .image style class when needed.
+ HdyCarousel:
- Add the allow-scroll-wheel property.
- Fix the child size allocation.
+ HdyPreferencesGroup: Add the use-markup property.
+ Deprecate HdySwipeGroup and HdyTitleBar.
+ Fix translations by setting the translation domain in UI files.
+ Updated translations.
- Move to regular tarballs: drop _service file.
==== libpwquality ====
Subpackages: libpwquality-tools libpwquality1 pam_pwquality
- Use %_pam_moduledir instead of hardcoding %{_lib}/security
(boo#1191042).
==== librsvg ====
Version update (2.50.7 -> 2.52.0)
Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0
- Disable testsuite run on ix86 and arm.
- Update to version 2.52.0:
+ The biggest user-visible change is that rsvg-convert has been
ported to Rust.
+ rsvg-convert is now aware of physical units, and fixes a bug
where PDFs were created at the wrong size.
+ Support for Accept-Language.
+ rsvg-convert's default DPI is now 96, to better match W3C
standards.
+ SVG2/CSS3 features:
- Transform property from SVG2; previously librsvg only
supported the transform attribute from SVG1.1, which has
different syntax.
- context-fill and context-stroke for <marker> and <use>
elements.
- markers now support orient="auto-start-reverse".
- paint-order for text elements.
- "auto" values for the width and height attributes of the
<image>, <rect>, and <svg> elements.
- All the <filter-function> types from the Filter Effects
Module Level 1 specification: blur(), brightness(),
contrast(), drop-shadow(), grayscale(), hue-rotate(),
invert(), opacity(), sepia(), saturate().
- The filter property now supports chains of uri() filters or
<filter-function> shortcuts.
- Support CSS selectors for attribute matching, like
rect[attr^="prefix"]
+ New APIs: See the HTML documentation for details.
- Drop -lang package: there are no translations available anymore.
==== libsoup2 ====
Version update (2.72.0 -> 2.74.0)
Subpackages: libsoup-2_4-1 typelib-1_0-Soup-2_4
- Add Provides: libsoup2 to the library, so that the lang package
is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
libsoup 3).
- Rename source package to libsoup2, as a compatibility package
while the world moves to libsoup3 (with HTTP/2 support).
- Update to version 2.74.0:
+ IMPORTANT: Enable ssl-use-system-ca-file by default on
deprecated Sync and Async sessions.
+ Fix including headers in C++ projects.
+ Fix attempting to resolve relative paths with data URIs.
+ Support Content-Disposition headers without a disposition-type.
+ Fix building VAPI bindings with latest Vala.
+ Fix sending a Content-Length header in a response with status
code of 1xx or 204.
+ Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.
==== malcontent ====
Subpackages: libmalcontent-0-0 typelib-1_0-Malcontent-0
- Use %_pam_moduledir instead of harcoding %{_lib}/security
(boo#1191037).
==== mutter ====
Version update (40.5 -> 41.0)
- Update to version 41.0:
+ Avoid race in wl_seat capabilities.
+ Expose option groups/entries to introspection.
+ Updated translations.
- Add pkgconfig(xwayland) and drop xorg-x11-server-wayland
BuildRequires: use standalone xwayland during build and runtime.
- Add explicit gnome-settings-daemon Requires and pass initfd=auto
to meson now that we are using the new standalone xwayland.
- Update to version 41.rc:
+ Add clutter_stage_paint_to_content().
+ Add meta_cursor_tracker_get_scale().
+ wayland: Make each wl_output correspond to one monitor.
+ Expose 'inactive-since' timestamp to uresourced.
+ Pass dirty rects to secondary GPU.
+ Support commiting preedit string on focus loss.
+ Improve auto-rotation support.
+ Add meta_window_actor_paint_to_content().
+ Fixed crashes.
+ Misc. bug fixes and cleanups.
+ Updated translations.
- Add xvfb-run BuildRequires: new dependency for the test suite.
- Update to version 41.beta:
+ Manage idle monitors via MetaIdleManager.
+ Fix VKMS detection.
+ Fix swipe cancellation.
+ Fix mapping tablet to monitor.
+ Fix area screencasts when window is unredirected.
+ Don't require a newly attached buffer to apply state.
+ Close unused mode setting and rendering devices.
+ Only support super+scroll on wayland.
+ Implement the xdg-activation protocol.
+ Reduce input latency by computing max render time
heuristically.
+ Apply dithering to dispatch time when needed.
+ x11: Compute monitor scale per output.
+ Shrink and optimize the rounded-background-clip shader.
+ remote-desktop: Handle non-responding selection owners .
+ Improve sysprof support.
+ Allow clients to delegate titlebar gestures to the compositor.
+ Fix upside-down Xshape surface with EGLstream.
+ Fix 'kms-modifiers' experimental setting.
+ Make default focus window on each workspace appear focused.
+ Plugged memory leaks.
+ Fixed crashes crash.
+ Misc. bug fixes and cleanups.
+ Updated translations.
==== nautilus ====
Version update (40.2 -> 41.0)
Subpackages: gnome-shell-search-provider-nautilus libnautilus-extension1
- Update to version 41.0:
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 41.rc:
+ Disable background "Properties" while searching
+ Don't duplicate set wallpaper when not using portal
+ Updated translations.
- Updtae to version 41.beta:
+ Fix comma placement in the floating status bar.
+ Use standard::edit-name attribute where appropriate.
+ Bring "Open with..." options together in context menu.
+ Fix "Compress..." acting on file that was not the selected one.
+ Redesign "Compress..." dialog.
+ Provide creation of password-protected ZIP archives.
+ Fix search by date not working with Tracker engine'
+ Add link to Privacy Settings from Trash'
+ Indicate whether trash automatic emptying is enabled'
+ Updated translations.
- Update to version 41.alpha:
+ Replace deprecated gexiv2 symbols.
+ Make NautilusWindowSlot non-derivable.
+ Prevent closing popover when "Show Hidden Files" is toggled.
+ Hand preview updating over to FilesView.
+ Provide source .svg icon.
==== pangomm1_4 ====
Version update (2.46.0 -> 2.46.1)
- Add pangomm1_4-docs-without-timestamp.patch: do not add
timestampt to generated doc files.
- Update to version 2.46.1:
+ Meson build:
- Make it possible to use pangomm as a subproject.
- No implicit_include_directories.
- Use relative paths to untracked/.
+ pangommconfig.h.*: Don't dllimport on MinGW.
==== python-gobject ====
Version update (3.40.1 -> 3.42.0)
Subpackages: python38-gobject python38-gobject-Gdk python38-gobject-cairo
- Update to version 3.42.0:
+ meson: Bump minimum meson_version to 0.47.0.
+ Expose GObject.Object.run_dispose().
+ docs: document Gtk.Template.
+ dev: Add poetry support.
+ meson: use main branch for glib subproject.
+ Fix some small memory leaks.
==== seahorse-nautilus ====
- Add 2.3 to the list of accepted GPG versions.
==== shared-mime-info ====
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Do not ghost own %{_datadir}/mime/[a-ms-vxX]*: as those
files/directories do not exist during build, RPM can't expand the
glob and adds it literally to the file list, not having any
effect in the end. A cleanup of the directory structure would not
work anyway, as there are also files generated inside.
==== tracker ====
Version update (3.1.2 -> 3.2.0)
Subpackages: libtracker-sparql-3_0-0 tracker-data-files
- Update to version 3.2.0:
+ Fuller docs, with updated examples
+ Improved developer experience when designing ontologies, better
handling of inconsistent ontologies, and more accurate error
reporting.
+ Added new GDateTime helper API to resources, cursors and
statements.
+ Several fixes to build and run on MacOS, with a brew recipe now
available.
+ Added support for libsoup 3.x.
+ Fresher and more complete documentation, built with hotdoc.
+ Many other code fixes and performance improvements.
+ Updated translations.
- Add pkgconfig(libsoup-3.0) BuildRequires, following upstreams
changes to allow build against multiple versions of libsoup.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 3.2.0.rc:
+ Dropped bogus files from pre-generated documentation.
- Update to version 3.2.0.beta:
+ Improved error reporting when parsing ontologies.
+ Improvements to database rollback on ontology errors.
+ Ontology parsing crash fixes.
+ Make soup 2.x/3.x chosen at runtime.
+ Disable GVFS in functional tests.
+ Check accessible graphs when looking up resource URIs/IDs.
+ Port documentation to hotdoc.
+ Avoid "UPDATE ... FROM ..." SQL syntax only present in
recent SQLite versions.
+ Multiple build, ci, website and maintenance improvements.
+ Updated translations.
- Drop gtk-doc BuildRequires with hotdoc: No longer needed, as
upstream switched to hotdoc and we ship the upstream pre-built
documentation.
- Update to version 3.2.0.alpha.1:
+ Add support for libsoup 3.x.
+ Documentation fixes and updates.
+ Handle arbitrary order of SERVICE and regular graph patterns.
+ Added new GDateTime helper API to resources, cursors and
statements.
+ Implement missing TrackerSparqlConnection methods in bus
connections.
+ Many code cleanups and improvements.
+ Updated translatiosn.
- Add python3-gobject BuildRequires: new dependency.
==== tracker-miners ====
Version update (3.1.3 -> 3.2.0)
Subpackages: tracker-miner-files
- Update to version 3.2.0:
+ Highlighted changes since 3.1:
- File creation time is now part of the stored metadata
- Show additional information in "tracker3 info"
+ Updated translations.
- Update to version 3.2.0.rc:
+ Updated translations.
==== upower ====
Version update (0.99.11 -> 0.99.13)
Subpackages: libupower-glib3 typelib-1_0-UpowerGlib-1_0
- Update to version 0.99.13:
+ Tweak default percentage levels to better match other operating
systems.
+ Support large energy rates seen in some modern laptops.
+ Fix touchpads showing up as mice.
+ Fix composite battery state when multiple batteries are used
and one isn't drawing any power.
+ Make the icon and warning properties respect the "low battery
level" configuration option.
+ Stop the device being suspended during the 20-second "shutdown"
grace period.
- Changes from version 0.99.12:
+ Add a raft of new device types.
+ Add support for iPhone XR, XS and newer models.
+ Work-around incorrect battery percentage reported by MacBooks.
+ Identify keyboard/pointing device combos as keyboards.
+ Fix small memory leak in Bluetooth backend.
+ Fix warning in Bluetooth backend.
+ Set update time in Bluetooth backend.
+ Remove support for obsolete CSR devices.
- Drop upower-build-Use-a-newer-libplist-if-available.patch: fixed
upstream.
==== vte ====
Version update (0.64.2 -> 0.66.0)
- Add vte-silence-COMMAND_PROMPT.patch: Silence warning when
opening terminal about PROMPT_COMMAND being an unknown command.
- Update to version 0.66.0:
+ emulation: Fix xterm window size request response.
+ widget: Adjust preedit position to GtkEntry.
+ vte.sh: Use PROMPT_COMMAND as an array when possible.
+ fonts: More metrics sanity checks.
+ Update translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 0.65.91:
+ Port to GTK 4.
+ all: Remove SIXEL support from stable branch
+ app: Add debug option to track clipboard targets
+ app: Add option to use a GtkScrolledWindow
+ lib: Fix switching encodings
+ parser: Add new OSC command from xterm 367
+ parser: Recognise more commands
+ sixel: Fix pixel aspect calculation
+ sixel: Remove ununused tracking of palette modification
+ sixel: Reset repeat counter when receiving the next command
+ widget: Add API to make adjustment values pixels
+ Updated translations.
==== webkit2gtk3-soup2 ====
Version update (2.32.4 -> 2.34.0)
Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles
- Add libjavascriptcoregtk-4_0-18 and llibwebkit2gtk-4_0-37 to
baselibs.conf: provide those libraries as multilib version.
- Rename -lang packages to WebKit2GTK-%{_apiver}, making the
translations between the three flavors co-exist.
- Update to version 2.34.0:
+ Fix another regression in JavaScriptCore on 32bit systems.
- Update to version 2.33.91:
+ Use the right display refresh monitor for animations in
accelerated compositng mode.
+ Fix several issues in JavaScriptCore on 32bit systems.
+ Prefer python3 over python2 in CMake.
- Update to version 2.33.90:
+ Show TLS protocol version and ciphersuite name in the
inspector when building with libsoup3.
+ Add multi-track support to media backend.
+ Avoid strong alias computations in font fallback code.
+ Fix deadlock tearing down pipeline when using fallback sink.
+ Fix the build with gtk-doc enabled.
+ Fix several crashes and rendering issues.
- Add fix-warnings.patch: silence return-type warnings.
- Add a 3rd flavor: gtk3 with libsoup2 (which retains compatibility
to the olderversions, identified as API version 4.0).
- Add _multibuild file and enable build of webkit2gtk4.
- Update to version 2.33.3:
+ Add support for display capture.
+ Add new API to access/modify capture devices states.
+ Add new API to configure the memory pressure handler.
+ Add support for client side certifiates authentication.
+ Add support color-schemes CSS property.
+ Add support for dark scrollbars.
+ Keep GtkSettings used by web processes in sync with the
settings set in the UI process.
+ Add support for drawing the scrollbars corner.
+ Allow to opt-out of GL rendering at runtime for media player.
+ Add support for A420 compositing in media player.
+ Improve pinch to zoom gesture in accerlerated compositing mode.
+ Fix cookies configuration after a network process crash.
+ Fix touchscreen navigation swipe when the page scrolls
horizontally.
+ Fix rendering of elliptic radial gradients.
+ Fix several crashes and rendering issues.
+ Updated translations.
- Drop fix-lto.patch: fixed upstream.
- Add pkgconfig(lcms2) BuildRequires: new dependency.
- Replace pkgconfig(libsoup-2.4) BuildRequires with
pkgconfig(libsoup-3.0): Follow upstreams port to Libsoup 3.0.
==== xdg-desktop-portal-gtk ====
Version update (1.8.0 -> 1.10.0)
- Pass --disable-silent-rules, --disable-appchooser,
- -disable-background, --disable-screencast, --disable-screenshot,
- -disable-settings, and --disable-wallpaper to configure, make
use of xdg-desktop-portal-gnome, and more importantly, remove all
gnome-dependencies from this package.
- Following the above, drop pkgconfig(gio-2.0),
pkgconfig(gio-unix-2.0) and pkgconfig(gnome-desktop-3.0)
BuildRequires.
- Add explicit pkgconfig(fontconfig) BuildRequires.
- Add systemd_user_post and systemd_user_preun macros to post/preun
sections.
- Update to version 1.10.0:
+ filechooser: Fix a focus issue
+ inhibit: Autostart org.gnome.ScreenSaver
+ screencast: Force window icon size
+ Make portal backends with GNOME dependencies optional and
disable them by default. Use xdg-desktop-portal-gnome, or use
- -enable-wallpaper to build with the wallpaper backend
- -enable-screenshot to build with the screenshot backend
- -enable-screencast to build with screencast/remoting backends
- -enable-background to build with the background backend
- -enable-settings to build with the settings backend
- -enable-appchooser to build with the appchooser backend
+ Updated translations.
==== yelp ====
Version update (40.3 -> 41.1)
Subpackages: libyelp0
- Update to version 41.1:
+ Fixed validation issues in appdata file.
+ Updated yelp-xsl dependency.
- Replace pkgconfig(webkit2gtk-4.0) and
pkgconfig(webkit2gtk-web-extension-4.0) with
pkgconfig(webkit2gtk-4.1) and
pkgconfig(webkit2gtk-web-extension-4.1) BuildRequires and no
longer pass --with-webkit2gtk-4-0, we now have the new symbols
available.
- Update to version 41.0:
+ No changes.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 41.beta2:
+ Fixed regression when opening document by file path.
+ Added content rating and release info to appdata file.
- Update to version 41.beta:
+ Revamped a lot of color code to avoid deprecated Gtk API.
+ Search results and 'All Help' now use current styling.
+ Fixed aliasing on the icon.
+ Build against webkit2gtk-4.1 by default.
+ Removed calls to deprecated Soup API.
+ Updated translations.
- Remporarily pass --with-webkit2gtk-4-0 to configure: we do not
yet have webkitgtk 4.1.
==== yelp-xsl ====
Version update (40.2 -> 41.0)
- Update to version 41.0:
+ No changes.
- Update to version 41.beta:
+ Loosen CSS match for title/desc in linkdiv.
+ Use better target contrasts for white-on-black.
==== zenity ====
Version update (3.32.0 -> 3.41.0)
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 3.41.0:
+ Port to meson.
+ Code cleanups.
+ Updated translations.
- Add meson BuildRequires and replace configure/make/make_install
with meson/meson_build/meson_install macros.
- Drop zenity-Fix-segfault-on-multiple-lists.patch: fixed
upstream.
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the aarch64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=3&version=T…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
at-spi2-core (2.40.3 -> 2.42.0)
curl (7.79.0 -> 7.79.1)
glib-networking (2.68.1 -> 2.70.0)
glib2 (2.68.4 -> 2.70.0)
gobject-introspection (1.68.0 -> 1.70.0)
gsettings-desktop-schemas (40.0 -> 41.0)
kmod
libpwquality
librsvg (2.50.7 -> 2.52.0)
libsoup2 (2.72.0 -> 2.74.0)
python-gobject (3.40.1 -> 3.42.0)
shared-mime-info
=== Details ===
==== at-spi2-core ====
Version update (2.40.3 -> 2.42.0)
Subpackages: libatspi0
- Update to version 2.42.0:
+ Set X root property when Xwayland starts on demand.
+ Several dbus introspection fixes.
==== curl ====
Version update (7.79.0 -> 7.79.1)
Subpackages: libcurl4
- Update to 7.79.1:
* Bugfixes:
- Curl_http2_setup: don't change connection data on repeat invokes
- curl_multi_fdset: make FD_SET() not operate on sockets out of range
- dist: provide lib/.checksrc in the tarball
- FAQ: add GOPHERS + curl works on data, not files
- hsts: CURLSTS_FAIL from hsts read callback should fail transfer
- hsts: handle unlimited expiry
- http: fix the broken >3 digit response code detection
- strerror: use sys_errlist instead of strerror on Windows
- test1184: disable: https://github.com/curl/curl/issues/7725
- tests/sshserver.pl: make it work with openssh-8.7p1
==== glib-networking ====
Version update (2.68.1 -> 2.70.0)
- Update to version 2.70.0:
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 2.70.rc:
+ gnutls:
- revert AuthorityInformationAccess implementation for now.
- fix use of non-default GTlsDatabases, Geary crash on startup.
- fix leak in g_tls_certificate_gnutls_copy.
- Unbreak GTLS_GNUTLS_CHECK_VERSION.
+ openssl: remove openssl-util.
- Update to version 2.70.beta:
+ gnutls: Ensure that PKCS #11 pins are NUL terminated.
+ openssl: Restore OCSP support.
- Update to version 2.70.alpha:
+ Fix TLS channel bindings tests.
+ Require OpenSSL 1.0.2.
+ Fix threadsafety issue in certificate verification.
+ dlopen libsoup for performing HTTP requests.
+ OpenSSL: add DTLS support, plus many related improvements.
+ Implement new GTlsCertificate details APIs.
+ GnuTLS: improve error handling for PIN failures.
+ GnuTLS: expose PIN type on PIN requests.
+ GnuTLS: check cancellable in pull timeout callback.
+ Improve automation of test certificate creation.
+ GnuTLS: use GnuTLS to implement all channel bindings.
+ GnuTLS: rework certificate verification to use TLS session.
+ GnuTLS: improve peer identity verification.
+ Bring back automatic downloading of missing intermediate
certificates (not fixed, may go away again).
==== glib2 ====
Version update (2.68.4 -> 2.70.0)
Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0
- Update to version 2.70.0:
+ Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== gobject-introspection ====
Version update (1.68.0 -> 1.70.0)
Subpackages: girepository-1_0 libgirepository-1_0-1
- Update to version 1.70.0:
+ Update the GIR data for GLib, GObject, and GIO.
- Update to version 1.69.0:
+ Fix build when gobject-introspection is a subproject,
+ Add more float types,
+ Make test suite work with cross-related options,
+ Fix several leaks found by Coverity,
+ Fix enum member,
+ Add g-ir-doc-tool man page,
+ Export warnlib sources as variables,
+ Update the GLib annotations,
+ Add "final" class attribute,
+ Add option to make .gir files installation paths configurable,
+ Handle constructors with mismatched GTypes,
+ Add property accessors annotations,
==== gsettings-desktop-schemas ====
Version update (40.0 -> 41.0)
- Update to version 41.0:
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 41.rc:
+ Stop setting legacy GNOME 2 shortcut by default.
+ Updated translations.
- Update to version 41.alpha:
+ Add lockdown setting for revealing passwords.
+ Updated translations.
==== kmod ====
Subpackages: libkmod2
- Enable ZSTD on 15.4 (jsc#SLE-21256).
==== libpwquality ====
Subpackages: libpwquality-tools libpwquality1 pam_pwquality
- Use %_pam_moduledir instead of hardcoding %{_lib}/security
(boo#1191042).
==== librsvg ====
Version update (2.50.7 -> 2.52.0)
Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2
- Disable testsuite run on ix86 and arm.
- Update to version 2.52.0:
+ The biggest user-visible change is that rsvg-convert has been
ported to Rust.
+ rsvg-convert is now aware of physical units, and fixes a bug
where PDFs were created at the wrong size.
+ Support for Accept-Language.
+ rsvg-convert's default DPI is now 96, to better match W3C
standards.
+ SVG2/CSS3 features:
- Transform property from SVG2; previously librsvg only
supported the transform attribute from SVG1.1, which has
different syntax.
- context-fill and context-stroke for <marker> and <use>
elements.
- markers now support orient="auto-start-reverse".
- paint-order for text elements.
- "auto" values for the width and height attributes of the
<image>, <rect>, and <svg> elements.
- All the <filter-function> types from the Filter Effects
Module Level 1 specification: blur(), brightness(),
contrast(), drop-shadow(), grayscale(), hue-rotate(),
invert(), opacity(), sepia(), saturate().
- The filter property now supports chains of uri() filters or
<filter-function> shortcuts.
- Support CSS selectors for attribute matching, like
rect[attr^="prefix"]
+ New APIs: See the HTML documentation for details.
- Drop -lang package: there are no translations available anymore.
==== libsoup2 ====
Version update (2.72.0 -> 2.74.0)
- Add Provides: libsoup2 to the library, so that the lang package
is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
libsoup 3).
- Rename source package to libsoup2, as a compatibility package
while the world moves to libsoup3 (with HTTP/2 support).
- Update to version 2.74.0:
+ IMPORTANT: Enable ssl-use-system-ca-file by default on
deprecated Sync and Async sessions.
+ Fix including headers in C++ projects.
+ Fix attempting to resolve relative paths with data URIs.
+ Support Content-Disposition headers without a disposition-type.
+ Fix building VAPI bindings with latest Vala.
+ Fix sending a Content-Length header in a response with status
code of 1xx or 204.
+ Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.
==== python-gobject ====
Version update (3.40.1 -> 3.42.0)
- Update to version 3.42.0:
+ meson: Bump minimum meson_version to 0.47.0.
+ Expose GObject.Object.run_dispose().
+ docs: document Gtk.Template.
+ dev: Add poetry support.
+ meson: use main branch for glib subproject.
+ Fix some small memory leaks.
==== shared-mime-info ====
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Do not ghost own %{_datadir}/mime/[a-ms-vxX]*: as those
files/directories do not exist during build, RPM can't expand the
glob and adds it literally to the file list, not having any
effect in the end. A cleanup of the directory structure would not
work anyway, as there are also files generated inside.
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
adwaita-icon-theme (40.1.1 -> 41.0)
at-spi2-core (2.40.3 -> 2.42.0)
cheese (3.38.0 -> 41.0)
evolution-data-server (3.40.4 -> 3.42.0)
gdm (3.38.2 -> 41.0)
gjs (1.68.4 -> 1.70.0)
glib-networking (2.68.1 -> 2.70.0)
glib2 (2.68.4 -> 2.70.0)
glibmm2_4 (2.66.0 -> 2.66.1)
gnome-control-center (40.1 -> 41.0)
gnome-desktop (40.4 -> 41.0)
gnome-disk-utility (40.2 -> 41.0)
gnome-settings-daemon (40.0.1 -> 41.0)
gnome-shell (40.5 -> 41.0)
gnome-shell-extensions (40.4 -> 41.0)
gnome-software (40.4 -> 41.0)
gnome-system-monitor (40.1 -> 41.0)
gnome-terminal (3.40.3 -> 3.42.0)
gnome-user-docs (40.5 -> 41.0)
gobject-introspection (1.68.0 -> 1.70.0)
gsettings-desktop-schemas (40.0 -> 41.0)
gssdp (1.2.3 -> 1.4.0.1)
gtk4
gtkmm3 (3.24.4 -> 3.24.5)
gupnp (1.2.7 -> 1.4.0)
libdazzle (3.40.0 -> 3.42.0)
libhandy (1.2.3 -> 1.4.0)
libpwquality
librsvg (2.50.7 -> 2.52.0)
libsoup2 (2.72.0 -> 2.74.0)
malcontent
mutter (40.5 -> 41.0)
nautilus (40.2 -> 41.0)
pangomm1_4 (2.46.0 -> 2.46.1)
python-gobject (3.40.1 -> 3.42.0)
seahorse-nautilus
shared-mime-info
tracker (3.1.2 -> 3.2.0)
tracker-miners (3.1.3 -> 3.2.0)
upower (0.99.11 -> 0.99.13)
vte (0.64.2 -> 0.66.0)
webkit2gtk3-soup2 (2.32.4 -> 2.34.0)
xdg-desktop-portal-gtk (1.8.0 -> 1.10.0)
yelp (40.3 -> 41.1)
yelp-xsl (40.2 -> 41.0)
zenity (3.32.0 -> 3.41.0)
=== Details ===
==== adwaita-icon-theme ====
Version update (40.1.1 -> 41.0)
- Update to version 41.0:
+ fullcolor network server and workgroup.
+ symbolic: larger symbolics for headerbar.
+ symbolic: larger notification.
+ updated guidelines.
+ symbolic: ascend/descending sort.
+ symbolic: edit-clear-all new metaphor.
+ fullcolor: application-x-addon and application-x-firmware.
==== at-spi2-core ====
Version update (2.40.3 -> 2.42.0)
Subpackages: libatspi0 typelib-1_0-Atspi-2_0
- Update to version 2.42.0:
+ Set X root property when Xwayland starts on demand.
+ Several dbus introspection fixes.
==== cheese ====
Version update (3.38.0 -> 41.0)
Subpackages: libcheese-common libcheese-gtk25 libcheese8
- Update to version 41.0:
+ Allow headerbar to appear on all desktops.
+ Update to runtime 40 and some meta-data fixes.
+ Reference of [GtkChild] fields is handled by GtkBuilder, type
must be unowned.
+ Change GLib.PtrArray into GLib.GenericArray.
+ libcheese: Fix critical on failing to load cropping cursor.
+ Allow device parameter to understand api.v4l2.path.
+ Update flatpak manifest and appdata.
+ Remember last used camera.
+ Enable cameras with only MJPEG output.
+ Preserve video/x-raw over image/jpeg.
+ Support camera video formats with MJPEG output.
+ Show better error when file info query fails.
+ Fix infinite loop if thumbnailer is not available.
+ Updated translations.
- Rename typelib-1_0-Cheese-3_0 subpackage to
typelib-1_0-Cheese-41_0, following upstream.
- Drop upstream fixed patches:
+ 1c1e7fa0c4608331fd89683ccb342ed3518acccc.patch
+ 5587daca748e9010f59250c5dcb8e8ea42266685.patch
+ 58de82b3d463b69f4c0bef75667e47020924e28b.patch
+ 7cf6268e54620bbbe5e6e61800c50fb0cb4bea57.patch
+ 9f0825c3169047da75d3fe91a3cb02bfe6fb7f25.patch
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Add upstream patches adding support for video MJPEG output:
+ 58de82b3d463b69f4c0bef75667e47020924e28b.patch
+ 1c1e7fa0c4608331fd89683ccb342ed3518acccc.patch
+ 5587daca748e9010f59250c5dcb8e8ea42266685.patch
+ 9f0825c3169047da75d3fe91a3cb02bfe6fb7f25.patch
==== evolution-data-server ====
Version update (3.40.4 -> 3.42.0)
Subpackages: libebackend-1_2-10 libebook-1_2-20 libebook-contacts-1_2-3 libecal-2_0-1 libedata-book-1_2-26 libedata-cal-2_0-1 libedataserver-1_2-26 libedataserverui-1_2-3
- Replace CMAKE_SKIP_RPATH=OFF with CMAKE_SKIP_INSTALL_RPATH=OFF
as that should be used with the newest cmake macros.
- Update to version 3.42.0:
+ Updated translations.
- Update to version 3.41.3:
+ Slow down automatic background downloads when in power saver
mode.
+ ERemindersWidget: Reverse order of the shown reminders.
+ vala: FolderThreadNode is a compact class.
+ Updated translations.
- Update to version 3.41.2:
+ CamelMimeFilterToHTML: Speed up read of long lines.
+ CamelMimeFilterToHTML: Correct filtering of text without new
line at the end.
+ alarm-notify: Focus window on status icon click when shown.
+ vala: Add support for the auth_type class field of CamelSasl.
+ vala: Properly annotate CamelServiceAuthType.
+ ESoupSession: Let it understand GSSAPI authentication method.
+ Updated translations.
- bump so_camel to 63: follow upstream changes.
- Update to version 3.41.1:
+ EWebDAVCollectionBackend: Preset also auth method on the new
child.
+ Camel: Fails to filter unread junk messages in a virtual Junk
folder.
+ Add Yahoo! OAuth2 service objects into the developer
documentation.
+ ESourceWebDAV: Fallback to SHA1 on SSL trust verification if
needed.
+ ECalBackendSync: Ensure no Recurrence-ID set when removing all
components.
+ PrintableOptions.cmake: Correct variable name comparison.
+ libecal: Fix a warning caught by a gcc static analyzer.
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== gdm ====
Version update (3.38.2 -> 41.0)
Subpackages: gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0
- Rebase gdm-disable-gnome-initial-setup.patch.
- Update to version 41.0:
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Add gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
Support to start X under root instead of regular user.
(bnc#1188912 jsc#SLE-17880).
- Update X11-displaymanager-gdm file.
- Update to version 41.rc:
+ Fix fallback to Xorg at login screen.
+ Fix SessionType in AccountService user config.
+ Reuse VT on log out.
+ Updated translations.
- Update to version 41.alpha:
+ Allow user session to be Wayland even when login screen is
Xorg.
+ Allow wayland user sessions for single GPU vendor nvidia
machines.
+ Updated translations.
- Rebase patches:
+ gdm-s390-not-require-g-s-d_wacom.patch
+ gdm-disable-gnome-initial-setup.patch
- Rebased gdm-default-wm.patch.
- Drop patches fixed upstream on SLE and Leap 15.4:
+ gdm-enable-Wayland-on-Cirrus.patch
+ gdm-Remove-deprecated-StandardOutput-syslog.patch
+ gdm-fix-crash-when-using-Xvfb.patch
+ gdm-display-Exit-with-failure-if-loading-existing-users-fails.patch
- Update to version 40.1:
+ Better support for unlocking gnome-keyring with disk password
+ Better support for flatpak
+ Misc auth fixes
+ Improved error output in gdm-runtime-config
+ Sort session list on login screen
+ Support Session and SessionType properties from accountsservice
+ Updated translations.
- Rebase gdm-xauthlocalhostname.patch.
- Disable gdm-default-wm.patch, needs reworking.
- Add now working CONFIG parameter to sysusers generator
- Add gdm-Remove-deprecated-StandardOutput-syslog.patch: Remove
deprecated StandardOutput=syslog in gdm.service file
(bsc#1185146, glgo#GNOME/gdm!623).
- Update to version 40.0:
+ 100% CPU fix.
+ Updated translations.
- Update to version 40.rc:
+ Fingerprint auth fixes.
+ Fix timeout handling for graphics bringup.
+ Updated translations.
- Update to version 40.beta:
+ xinit script improvements.
+ Build goo fixes.
+ Support systems that boot before the graphics subsystem fully
loads.
+ Don't overwrite PATH set by user.
+ Generalize gdm-disable-wayland into new gdm-runtime-config
tool.
+ Fail hard if accountsservice fails.
+ PAM integration improvements.
+ Leak fixes.
+ Stop using deprecated systemd functions.
- Changes from version 3.38.2.1:
+ Address autologin unlock bug issue (CVE-2020-27837).
+ Updated translations.
- Rebase gdm-disable-wayland-on-mgag200-chipsets.patch.
- Drop gdm-UsrEtc.patch: merged upstream.
==== gjs ====
Version update (1.68.4 -> 1.70.0)
Subpackages: libgjs0 typelib-1_0-GjsPrivate-1_0
- Update to version 1.70.0:
+ No changes.
- Update to version 1.69.90:
+ Update ESLint to v8.
+ gi: Enable pending tests which are now correctly handled.
+ gi: Return null if return argument is a pointer type.
+ gi: Assume native enums are signed, avoid asserting. [!660, Evan Welsh]
+ Fix cppcheck failure.
+ Strange behavior for strings with NUL character.
+ 64-bit int GObject properties have some problems with
values > G_MAXINT32.
+ Crash on dynamic import in interactive interpreter.
+ 1.69.1: gjs test suite is failing when gjs is build with
- DG_DISABLE_ASSERT.
+ function: Warn about unhandled promise rejections in
System.exit().
+ attempting to wrap a new GObject mid-construction blows up.
+ Fix IWYU CI job.
+ Build fixes.
- Update to version 1.69.2:
+ The TextEncoder and TextDecoder global objects are now
available.
+ The 'console' global object is now available. This is for
compatibility with Node.js and browser environments, and for
familiarity for developers accustomed to them.
+ Cairo.Surface has gained getDeviceScale(), setDeviceScale(),
getDeviceOffset(), and setDeviceOffset() methods.
+ GLib.log_set_writer_func() and
GObject.Object.bind_property_full() now work.
+ There is also a 'console' built-in module which exports
functions setConsoleLogDomain() and getConsoleLogDomain(), for
controlling the GLib log domain that the console methods use.
+ The debugger has gained a 'set ignoreCaughtExceptions
(true/false)' option.
==== glib-networking ====
Version update (2.68.1 -> 2.70.0)
- Update to version 2.70.0:
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 2.70.rc:
+ gnutls:
- revert AuthorityInformationAccess implementation for now.
- fix use of non-default GTlsDatabases, Geary crash on startup.
- fix leak in g_tls_certificate_gnutls_copy.
- Unbreak GTLS_GNUTLS_CHECK_VERSION.
+ openssl: remove openssl-util.
- Update to version 2.70.beta:
+ gnutls: Ensure that PKCS #11 pins are NUL terminated.
+ openssl: Restore OCSP support.
- Update to version 2.70.alpha:
+ Fix TLS channel bindings tests.
+ Require OpenSSL 1.0.2.
+ Fix threadsafety issue in certificate verification.
+ dlopen libsoup for performing HTTP requests.
+ OpenSSL: add DTLS support, plus many related improvements.
+ Implement new GTlsCertificate details APIs.
+ GnuTLS: improve error handling for PIN failures.
+ GnuTLS: expose PIN type on PIN requests.
+ GnuTLS: check cancellable in pull timeout callback.
+ Improve automation of test certificate creation.
+ GnuTLS: use GnuTLS to implement all channel bindings.
+ GnuTLS: rework certificate verification to use TLS session.
+ GnuTLS: improve peer identity verification.
+ Bring back automatic downloading of missing intermediate
certificates (not fixed, may go away again).
==== glib2 ====
Version update (2.68.4 -> 2.70.0)
Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0
- Update to version 2.70.0:
+ Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== glibmm2_4 ====
Version update (2.66.0 -> 2.66.1)
Subpackages: libgiomm-2_4-1 libglibmm-2_4-1
- Update to version 2.66.1:
+ Glib: Variant: Fix template constructors so they work with
C++20.
+ Build:
- Meson build:
. Use relative paths to untracked/
. examples and tests: Add dependency('threads')
. Make it possible to use glibmm as a subproject
. No implicit_include_directories
. Make quiet installations possible
- MSVC build:
. Export Glib::manage()
. Avoid exporting classes with std::string members
- [gio|glib]mmconfig.h.*: Don't dllimport on MinGW
- Add glibmm2_4-docs-without-timestamp.patch: Do not add timestamps
to generated doc files.
- Add m4 BuildRequires: the generated gmmproc actually stores the
path to m4, as detected during build. Subsequent builds of other
* mm modules from git need a working setup for this.
==== gnome-control-center ====
Version update (40.1 -> 41.0)
Subpackages: gnome-control-center-goa
- Bring back gnome-control-center-disable-error-message-for-NM.patch
and rebase it against latest code base(bsc#1190875).
- Add power-profiles-daemon Recommends: Support the new power
profiles available.
- Refresh patches with quilt.
- Update to version 41.0:
+ Cleanup the development Flatpak manifest.
+ User Accounts: Add parental controls keywords.
+ Updated translations.
- Update to version 41.rc1:
+ Cellular: Various translation fixes.
+ User Accounts: Improve parental controls behavior.
+ Updated translations.
- Update to version 41.beta:
+ Introduce the new Cellular panel.
+ Introduce the new Multitasking panel.
+ About: Fix a crash due to uninitialized variables.
+ Bluetooth: Fix Bluetooth switch transitions.
+ Location: Fix permission store id (again).
+ Power: Polish power profiles section.
- Changes from version 41.alpha:
+ Improve and fix the development Flatpak manifest.
+ Drop dependency on grilo.
+ About:
- Don't show GNOME micro version number.
- Look for dark and text distro logo variants.
+ Accessibility: Add "Enable Animations" option.
+ Location: Fix permission store id.
+ Mouse & Touchpad: Update artwork.
+ Online Accounts: Present all online accounts providers at once.
+ Power:
- Integrate with new power profiles daemon API.
- Show more information about power profiles.
- Cleanup some preferences.
+ Updated translations.
- Drop pkgconfig(grilo-0.3) BuildRequires: no longer needed.
- Add pkgconfig(gcr-3) BuildRequires: dependency for the new
cellular panel.
==== gnome-desktop ====
Version update (40.4 -> 41.0)
Subpackages: gnome-version libgnome-desktop-3-19 libgnome-desktop-3_0-common typelib-1_0-GnomeDesktop-3_0
- Update to version 41.0:
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 41.rc:
+ Updated translations.
- Update to version 41.beta:
+ xkb: Clear cached layouts when necessary.
+ Updated translations.
- Update to version 41.alpha:
+ Stop mounting ld.so.cache on non-glibc systems.
+ Replace usage of non-portable `uselocale` with locale-dependent
functions.
+ Fix starttime hour parsing in animated background.
+ xkbinfo: only insert new layouts, skip over duplicate ones.
+ Updated translations.
==== gnome-disk-utility ====
Version update (40.2 -> 41.0)
- Update to version 41.0:
+ metainfo: Add minimum screen size requirement and input
recommendations
+ desktop-file: Add X-Purism-Form-Factor.
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 41.rc:
+ Updated translations.
- Update to version 41.beta:
+ gducreateformatdialog: Use LUKS2 for new encrypted partitions.
+ volume-menu/gduwindow: Add button and dialog to take filesystem
ownership.
+ ui: Change the icon of the detach loop device button.
+ shortcuts: Add keyboard shortcut for the application menu.
+ gduwindow: Make menus toggleable.
+ ui: Change the icon of the job cancel button.
+ ui: Align job section.
+ ui: Enable ellipsis on the job remaining label.
+ gdubenchmarkdialog: Save benchmark settings.
+ Flatpak build fixes.
+ Updated translations.
- Update to version 41.alpha:
+ UI: Highlight destructive actions.
+ Updated translations.
==== gnome-settings-daemon ====
Version update (40.0.1 -> 41.0)
- Update to version 41.0:
+ USB protection: don't crash when screensaver service is
unavailable.
+ Power: Fix location of comments for translators.
+ Updated translations.
- Remove obsolete translation-update-upstream and
gnome-patch-translation support (jsc#SLE-21105).
- Update to version 41.rc:
+ Power:
- Enable power-saver profile when low on battery.
- Dim the screen quicker by default.
- Generalize laptop battery notifications.
- Refactor battery notifications for external devices.
+ Media-keys:
- Replace deprecated calls.
- Add one second delay between each rfkill event.
+ Housekeeping: Use GRefCount.
+ USB-protection:
- Authorize devices after screen has been locked.
- Improve debug output.
- Misc. fixes.
+ Xsettings: Add support for XFixes ClientDisconnectMode.
+ Updated translations.
- Add pkgconfig(xfixes) BuildRequires: new dependency.
==== gnome-shell ====
Version update (40.5 -> 41.0)
Subpackages: gnome-shell-calendar
- Update to version 41.0:
+ Updated translations.
- Up mutter dependency.
- Update to version 41.rc.1:
+ Make tests optional.
+ Misc. bug fixes.
+ Updated translations.
- Update to version 41.rc:
+ Optimize rendering of fullscreen zoom.
+ Fix glitchy launch animations when leaving overview.
+ Show low priority notifications only in message list.
+ Support Soup 3 instead of 2.4.
+ Set log domain for extensions that use console.log().
+ Fix wrong separator position in dash.
+ Fix OSK not registering button presses on X11.
+ Fix work area getting messed up by hidden panels.
+ Fix IM candidate popover position.
+ Restrict callers of private D-Bus APIs.
+ Support committing preedit string on focus loss.
+ Misc. bug fixes and cleanups.
+ Updated translations.
- Update to version 41.beta:
+ Unbreak Xwayland apps when not using systemd in user session.
+ extension-tool: Always print location on successful creation.
+ Fix distributed man pages.
+ Immediately start app grid drags for non-touch devices.
+ Avoid unnecessary icon shadow changes.
+ Handle screencast failures more gracefully.
+ Use symbolic icons in looking glass toolbar.
+ Allow overriding super+number shortcuts in Settings.
+ Don't include hidden search results in keynav.
+ Use anaccelerated deltas in swipe tracker.
+ status/network: Do not disable on login screen.
+ Always take workarea into account when allocating workspaces.
+ location: Split out geoclue agent from indicator.
+ Add focus indication for switches.
+ Honor switch-user lockdown settings in unlock screen.
+ Fix glitch when dragging window preview in overview.
+ Lock down "Show Text" in password entries.
+ Add power mode selection to status menu.
+ workspace: Handle skip-taskbar changes.
+ status/network: Use WWan settings panel for GSM/LTE modems.
+ extensionUtils: Add gettext convenience helpers.
+ screenShield: Fix suspend inhibitor accounting.
+ Unify app context menus.
+ Use consistent terminology in window menu.
+ Fixed crashes.
+ Misc. bug fixes and cleanups.
+ Updated translations.
- Rebase gnome-shell-private-connection.patch.
==== gnome-shell-extensions ====
Version update (40.4 -> 41.0)
Subpackages: gnome-shell-classic gnome-shell-extensions-common
- Update to version 41.0:
+ No changes.
- Update to version 41.rc.1:
+ Fix pre-generating stylesheets in tarball.
- Changes from version 41.rc:
+ window-list: Adapt to overview-on-startup.
+ apps-menu: Use a custom 'toggle-menu' shortcut.
+ Misc. bug fixes and cleanups.
==== gnome-software ====
Version update (40.4 -> 41.0)
- Update to version 41.0:
+ Instead of showing all package-based apps as "potentially
unsafe", only use that language for 3rd party ones.
+ Fix a bug where the "Show more" button on an app details page
would flicker when the window is resized.
+ Fix a bug where Software sometimes shows an Uninstall button
after uninstalling something.
+ Add GNOME Circle apps to the featured carousel.
+ Fix a bug where Software would sometimes fail to execute an
install/remove operation for PackageKit software rather than
showing a PolicyKit password prompt.
+ Fix a bug where Software would fail to upgrade the distribution
via PackageKit.
+ Fix the hiding of rows on the Updates tab after they have been
updated.
+ Updated translations.
- Update to version 41.rc:
+ Tweaks to the context tiles and dialogs.
+ Fixes to the details page for non-desktop apps.
+ Re-add support for the add-ons categories.
+ Sort new and updated apps by release date on the category page.
+ Updated translations.
- Update to version 41.beta:
+ Many parts of the user interface reworked.
+ Fix when the 'Launch' button is shown after an application
install.
+ Fix appstream:// URL handling.
+ Fix application freeze on Flatpak application
install/remove/update.
+ Disable automatic update downloads when in power saver mode.
+ Updated translations.
- Update to version 41.alpha:
+ Many parts of the user interface reworked.
+ Improve error reporting from flatpak when low on disk space.
+ Fix issues with updating the UI when uninstalling apps with
add-ons.
+ Don?t keep rpm-ostreed alive forever.
+ Prevent polkit checks showing up for background operations.
+ Disallow submitting reviews for an app you haven?t installed.
+ Show download size in the Updates page.
+ Notify when restart is needed when uninstalling an app.
+ Fix some issues with searches not running.
+ Allow non-integer average star ratings for apps.
+ Reduce number of categories in the UI.
+ Improve ?pending updates? notifications.
+ Refine presentation of download and installed size on details
page.
+ Remove left over gnome-online-account dependencies.
+ Updated translations.
- Drop pkgconfig(goa-1.0) BuildRequires: no longer needed.
- Drop gnome-software-no-static-lib.patch: Fixed upstream.
==== gnome-system-monitor ====
Version update (40.1 -> 41.0)
- Update to version 41.0:
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 41.rc:
+ Removed leftover colors
+ Y axis and CPU percentage labels marked as translatable
+ Fix crash when changing the number of points
+ meson checks for itstool
+ Updated translations.
==== gnome-terminal ====
Version update (3.40.3 -> 3.42.0)
Subpackages: nautilus-extension-terminal
- Update to version 3.42.0:
+ metainfo: Remove XML namespaces
+ window: Add close button to info bar
+ Revert "screen: Use clean env when creating new tab"
+ Updated translations.
- Changes from version 3.41.90:
+ app: Remove stray semicolon
+ metainfo: Add keyboard/pointer recommends
+ client: Add more env vars not to forward
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 3.41.0:
+ Port to meson build system.
+ nautilus: Fix extension library name.
+ settings: Fix crash when loading the reference schema source
fails.
+ Updated translations.
- Add meson and gcc-c++ BuildRequires: new dependencies.
- Replace configure/make/make_install macros with
meson/meson_build/meson_install.
==== gnome-user-docs ====
Version update (40.5 -> 41.0)
- Update to version 41.0:
+ Added docs for emoji picker.
+ Updated settings docs.
+ Added Ethernet diagram.
+ Updated translations.
- Update to version 41.rc:
+ Terminology updates for tablets and styluses.
+ Updated to Files documentation.
+ Updated translations.
==== gobject-introspection ====
Version update (1.68.0 -> 1.70.0)
Subpackages: girepository-1_0 libgirepository-1_0-1
- Update to version 1.70.0:
+ Update the GIR data for GLib, GObject, and GIO.
- Update to version 1.69.0:
+ Fix build when gobject-introspection is a subproject,
+ Add more float types,
+ Make test suite work with cross-related options,
+ Fix several leaks found by Coverity,
+ Fix enum member,
+ Add g-ir-doc-tool man page,
+ Export warnlib sources as variables,
+ Update the GLib annotations,
+ Add "final" class attribute,
+ Add option to make .gir files installation paths configurable,
+ Handle constructors with mismatched GTypes,
+ Add property accessors annotations,
==== gsettings-desktop-schemas ====
Version update (40.0 -> 41.0)
- Update to version 41.0:
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 41.rc:
+ Stop setting legacy GNOME 2 shortcut by default.
+ Updated translations.
- Update to version 41.alpha:
+ Add lockdown setting for revealing passwords.
+ Updated translations.
==== gssdp ====
Version update (1.2.3 -> 1.4.0.1)
- Pass -Dsniffer=false to meson: Disable build of sniffer. Allows
to drop pkgconfig(gtk4) BuildRequires and helps eliminate a build
cycle.
- Allow for easy toggling using bcond_with sniffer.
- Update to version 1.4.0.1:
+ Fix building the sniffer when built as subproject
+ Do not build docs by default
- Changes from version 1.3.1:
+ Implement MAC lookup on Windows
+ Implement interface index lookup on Windows
+ Fix distributing docs in the tarball
+ Build docs by default
- Changes from version 1.3.0:
+ Sniffer: Various deprecated function clean-up
+ Sniffer: Port to GTK4
+ Docs: Ported to gi-docgen
+ Docs: Clean-up and other improvements
+ Client: Minor dead code clean-up
+ Build: Make GSSDP usable as a subproject
+ All: Fixes from scan-build
+ All: Minor introspection fixes
- Replace pkgconfig(gtl+-3.0) BuildRequires with pkgconfig(gtk4):
Follow upstreams port to GTK 4.
- Enable test suite: enable meson_test in check section.
==== gtk4 ====
Subpackages: gtk4-schema libgtk-4-1 typelib-1_0-Gtk-4_0
- Add explicit pkgconfig(gstreamer-gl-1.0) BuildRequires: not new,
but tested by meson, so let's be explicit about the dependency.
==== gtkmm3 ====
Version update (3.24.4 -> 3.24.5)
- Update to version 3.24.5:
+ Gtk: TreeValueProxy: Mark the copy assignment operator as
deleted.
+ Build:
- Meson build: Use relative paths to untracked/.
- [gdk|gtk]mmconfig.h.*: Don't dllimport on MinGW.
- Meson build: Make it possible to use gtkmm as a subproject.
- Meson build: No implicit_include_directories.
- MSVC build: Gtk::TreeModelColumnRecord: Export class
selectively.
==== gupnp ====
Version update (1.2.7 -> 1.4.0)
- Update to version 1.4.0:
+ Fix fallback option for GSSDP dependency.
+ Linux CM: Fix address family filtering.
+ Linux CM: Fix a typo.
- Changes from version 1.3.1:
+ Add ContextFilter class, deprecate WhiteList.
+ Fix several reference leaks.
+ Fix broken boot-id logic.
Changes from version 1.3.0:
+ Service: name Tasks.
+ Doc: Some grammaer fixes.
+ Dead and deprecated code clean-up.
+ Move tests that are actually examples into examples.
+ Move tests from gtest to test.
+ Doc: General clean-up.
+ Fix some introspection annotations.
+ Build: Make gupnp usable as a subproject (more or less).
+ Make it possible to re-use a ServiceProxyAction.
+ Service: Validate "Host" header for GENA actions.
==== libdazzle ====
Version update (3.40.0 -> 3.42.0)
- Add manual libdazzle = %{version} Provides to make the lang pack
auto installable.
- Update to version 3.42.0:
+ Panel fixes.
+ Allow DzlTaskCache to use NULL copy/free funcs.
+ Updated translations.
- Add lang sub-package now that there are translations.
==== libhandy ====
Version update (1.2.3 -> 1.4.0)
Subpackages: libhandy-1-0 typelib-1_0-Handy-1_0
- Update to version 1.4.0:
+ Updated translations.
- Update to version 1.3.90:
+ HdyAvatar: Fix giving it the .image style class when needed.
+ HdyCarousel:
- Add the allow-scroll-wheel property.
- Fix the child size allocation.
+ HdyPreferencesGroup: Add the use-markup property.
+ Deprecate HdySwipeGroup and HdyTitleBar.
+ Fix translations by setting the translation domain in UI files.
+ Updated translations.
- Move to regular tarballs: drop _service file.
==== libpwquality ====
Subpackages: libpwquality-tools libpwquality1 pam_pwquality
- Use %_pam_moduledir instead of hardcoding %{_lib}/security
(boo#1191042).
==== librsvg ====
Version update (2.50.7 -> 2.52.0)
Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0
- Disable testsuite run on ix86 and arm.
- Update to version 2.52.0:
+ The biggest user-visible change is that rsvg-convert has been
ported to Rust.
+ rsvg-convert is now aware of physical units, and fixes a bug
where PDFs were created at the wrong size.
+ Support for Accept-Language.
+ rsvg-convert's default DPI is now 96, to better match W3C
standards.
+ SVG2/CSS3 features:
- Transform property from SVG2; previously librsvg only
supported the transform attribute from SVG1.1, which has
different syntax.
- context-fill and context-stroke for <marker> and <use>
elements.
- markers now support orient="auto-start-reverse".
- paint-order for text elements.
- "auto" values for the width and height attributes of the
<image>, <rect>, and <svg> elements.
- All the <filter-function> types from the Filter Effects
Module Level 1 specification: blur(), brightness(),
contrast(), drop-shadow(), grayscale(), hue-rotate(),
invert(), opacity(), sepia(), saturate().
- The filter property now supports chains of uri() filters or
<filter-function> shortcuts.
- Support CSS selectors for attribute matching, like
rect[attr^="prefix"]
+ New APIs: See the HTML documentation for details.
- Drop -lang package: there are no translations available anymore.
==== libsoup2 ====
Version update (2.72.0 -> 2.74.0)
Subpackages: libsoup-2_4-1 typelib-1_0-Soup-2_4
- Add Provides: libsoup2 to the library, so that the lang package
is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
libsoup 3).
- Rename source package to libsoup2, as a compatibility package
while the world moves to libsoup3 (with HTTP/2 support).
- Update to version 2.74.0:
+ IMPORTANT: Enable ssl-use-system-ca-file by default on
deprecated Sync and Async sessions.
+ Fix including headers in C++ projects.
+ Fix attempting to resolve relative paths with data URIs.
+ Support Content-Disposition headers without a disposition-type.
+ Fix building VAPI bindings with latest Vala.
+ Fix sending a Content-Length header in a response with status
code of 1xx or 204.
+ Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.
==== malcontent ====
Subpackages: libmalcontent-0-0 typelib-1_0-Malcontent-0
- Use %_pam_moduledir instead of harcoding %{_lib}/security
(boo#1191037).
==== mutter ====
Version update (40.5 -> 41.0)
- Update to version 41.0:
+ Avoid race in wl_seat capabilities.
+ Expose option groups/entries to introspection.
+ Updated translations.
- Add pkgconfig(xwayland) and drop xorg-x11-server-wayland
BuildRequires: use standalone xwayland during build and runtime.
- Add explicit gnome-settings-daemon Requires and pass initfd=auto
to meson now that we are using the new standalone xwayland.
- Update to version 41.rc:
+ Add clutter_stage_paint_to_content().
+ Add meta_cursor_tracker_get_scale().
+ wayland: Make each wl_output correspond to one monitor.
+ Expose 'inactive-since' timestamp to uresourced.
+ Pass dirty rects to secondary GPU.
+ Support commiting preedit string on focus loss.
+ Improve auto-rotation support.
+ Add meta_window_actor_paint_to_content().
+ Fixed crashes.
+ Misc. bug fixes and cleanups.
+ Updated translations.
- Add xvfb-run BuildRequires: new dependency for the test suite.
- Update to version 41.beta:
+ Manage idle monitors via MetaIdleManager.
+ Fix VKMS detection.
+ Fix swipe cancellation.
+ Fix mapping tablet to monitor.
+ Fix area screencasts when window is unredirected.
+ Don't require a newly attached buffer to apply state.
+ Close unused mode setting and rendering devices.
+ Only support super+scroll on wayland.
+ Implement the xdg-activation protocol.
+ Reduce input latency by computing max render time
heuristically.
+ Apply dithering to dispatch time when needed.
+ x11: Compute monitor scale per output.
+ Shrink and optimize the rounded-background-clip shader.
+ remote-desktop: Handle non-responding selection owners .
+ Improve sysprof support.
+ Allow clients to delegate titlebar gestures to the compositor.
+ Fix upside-down Xshape surface with EGLstream.
+ Fix 'kms-modifiers' experimental setting.
+ Make default focus window on each workspace appear focused.
+ Plugged memory leaks.
+ Fixed crashes crash.
+ Misc. bug fixes and cleanups.
+ Updated translations.
==== nautilus ====
Version update (40.2 -> 41.0)
Subpackages: gnome-shell-search-provider-nautilus libnautilus-extension1
- Update to version 41.0:
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 41.rc:
+ Disable background "Properties" while searching
+ Don't duplicate set wallpaper when not using portal
+ Updated translations.
- Updtae to version 41.beta:
+ Fix comma placement in the floating status bar.
+ Use standard::edit-name attribute where appropriate.
+ Bring "Open with..." options together in context menu.
+ Fix "Compress..." acting on file that was not the selected one.
+ Redesign "Compress..." dialog.
+ Provide creation of password-protected ZIP archives.
+ Fix search by date not working with Tracker engine'
+ Add link to Privacy Settings from Trash'
+ Indicate whether trash automatic emptying is enabled'
+ Updated translations.
- Update to version 41.alpha:
+ Replace deprecated gexiv2 symbols.
+ Make NautilusWindowSlot non-derivable.
+ Prevent closing popover when "Show Hidden Files" is toggled.
+ Hand preview updating over to FilesView.
+ Provide source .svg icon.
==== pangomm1_4 ====
Version update (2.46.0 -> 2.46.1)
- Add pangomm1_4-docs-without-timestamp.patch: do not add
timestampt to generated doc files.
- Update to version 2.46.1:
+ Meson build:
- Make it possible to use pangomm as a subproject.
- No implicit_include_directories.
- Use relative paths to untracked/.
+ pangommconfig.h.*: Don't dllimport on MinGW.
==== python-gobject ====
Version update (3.40.1 -> 3.42.0)
Subpackages: python38-gobject python38-gobject-Gdk python38-gobject-cairo
- Update to version 3.42.0:
+ meson: Bump minimum meson_version to 0.47.0.
+ Expose GObject.Object.run_dispose().
+ docs: document Gtk.Template.
+ dev: Add poetry support.
+ meson: use main branch for glib subproject.
+ Fix some small memory leaks.
==== seahorse-nautilus ====
- Add 2.3 to the list of accepted GPG versions.
==== shared-mime-info ====
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Do not ghost own %{_datadir}/mime/[a-ms-vxX]*: as those
files/directories do not exist during build, RPM can't expand the
glob and adds it literally to the file list, not having any
effect in the end. A cleanup of the directory structure would not
work anyway, as there are also files generated inside.
==== tracker ====
Version update (3.1.2 -> 3.2.0)
Subpackages: libtracker-sparql-3_0-0 tracker-data-files
- Update to version 3.2.0:
+ Fuller docs, with updated examples
+ Improved developer experience when designing ontologies, better
handling of inconsistent ontologies, and more accurate error
reporting.
+ Added new GDateTime helper API to resources, cursors and
statements.
+ Several fixes to build and run on MacOS, with a brew recipe now
available.
+ Added support for libsoup 3.x.
+ Fresher and more complete documentation, built with hotdoc.
+ Many other code fixes and performance improvements.
+ Updated translations.
- Add pkgconfig(libsoup-3.0) BuildRequires, following upstreams
changes to allow build against multiple versions of libsoup.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 3.2.0.rc:
+ Dropped bogus files from pre-generated documentation.
- Update to version 3.2.0.beta:
+ Improved error reporting when parsing ontologies.
+ Improvements to database rollback on ontology errors.
+ Ontology parsing crash fixes.
+ Make soup 2.x/3.x chosen at runtime.
+ Disable GVFS in functional tests.
+ Check accessible graphs when looking up resource URIs/IDs.
+ Port documentation to hotdoc.
+ Avoid "UPDATE ... FROM ..." SQL syntax only present in
recent SQLite versions.
+ Multiple build, ci, website and maintenance improvements.
+ Updated translations.
- Drop gtk-doc BuildRequires with hotdoc: No longer needed, as
upstream switched to hotdoc and we ship the upstream pre-built
documentation.
- Update to version 3.2.0.alpha.1:
+ Add support for libsoup 3.x.
+ Documentation fixes and updates.
+ Handle arbitrary order of SERVICE and regular graph patterns.
+ Added new GDateTime helper API to resources, cursors and
statements.
+ Implement missing TrackerSparqlConnection methods in bus
connections.
+ Many code cleanups and improvements.
+ Updated translatiosn.
- Add python3-gobject BuildRequires: new dependency.
==== tracker-miners ====
Version update (3.1.3 -> 3.2.0)
Subpackages: tracker-miner-files
- Update to version 3.2.0:
+ Highlighted changes since 3.1:
- File creation time is now part of the stored metadata
- Show additional information in "tracker3 info"
+ Updated translations.
- Update to version 3.2.0.rc:
+ Updated translations.
==== upower ====
Version update (0.99.11 -> 0.99.13)
Subpackages: libupower-glib3 typelib-1_0-UpowerGlib-1_0
- Update to version 0.99.13:
+ Tweak default percentage levels to better match other operating
systems.
+ Support large energy rates seen in some modern laptops.
+ Fix touchpads showing up as mice.
+ Fix composite battery state when multiple batteries are used
and one isn't drawing any power.
+ Make the icon and warning properties respect the "low battery
level" configuration option.
+ Stop the device being suspended during the 20-second "shutdown"
grace period.
- Changes from version 0.99.12:
+ Add a raft of new device types.
+ Add support for iPhone XR, XS and newer models.
+ Work-around incorrect battery percentage reported by MacBooks.
+ Identify keyboard/pointing device combos as keyboards.
+ Fix small memory leak in Bluetooth backend.
+ Fix warning in Bluetooth backend.
+ Set update time in Bluetooth backend.
+ Remove support for obsolete CSR devices.
- Drop upower-build-Use-a-newer-libplist-if-available.patch: fixed
upstream.
==== vte ====
Version update (0.64.2 -> 0.66.0)
- Add vte-silence-COMMAND_PROMPT.patch: Silence warning when
opening terminal about PROMPT_COMMAND being an unknown command.
- Update to version 0.66.0:
+ emulation: Fix xterm window size request response.
+ widget: Adjust preedit position to GtkEntry.
+ vte.sh: Use PROMPT_COMMAND as an array when possible.
+ fonts: More metrics sanity checks.
+ Update translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 0.65.91:
+ Port to GTK 4.
+ all: Remove SIXEL support from stable branch
+ app: Add debug option to track clipboard targets
+ app: Add option to use a GtkScrolledWindow
+ lib: Fix switching encodings
+ parser: Add new OSC command from xterm 367
+ parser: Recognise more commands
+ sixel: Fix pixel aspect calculation
+ sixel: Remove ununused tracking of palette modification
+ sixel: Reset repeat counter when receiving the next command
+ widget: Add API to make adjustment values pixels
+ Updated translations.
==== webkit2gtk3-soup2 ====
Version update (2.32.4 -> 2.34.0)
Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles
- Add libjavascriptcoregtk-4_0-18 and llibwebkit2gtk-4_0-37 to
baselibs.conf: provide those libraries as multilib version.
- Rename -lang packages to WebKit2GTK-%{_apiver}, making the
translations between the three flavors co-exist.
- Update to version 2.34.0:
+ Fix another regression in JavaScriptCore on 32bit systems.
- Update to version 2.33.91:
+ Use the right display refresh monitor for animations in
accelerated compositng mode.
+ Fix several issues in JavaScriptCore on 32bit systems.
+ Prefer python3 over python2 in CMake.
- Update to version 2.33.90:
+ Show TLS protocol version and ciphersuite name in the
inspector when building with libsoup3.
+ Add multi-track support to media backend.
+ Avoid strong alias computations in font fallback code.
+ Fix deadlock tearing down pipeline when using fallback sink.
+ Fix the build with gtk-doc enabled.
+ Fix several crashes and rendering issues.
- Add fix-warnings.patch: silence return-type warnings.
- Add a 3rd flavor: gtk3 with libsoup2 (which retains compatibility
to the olderversions, identified as API version 4.0).
- Add _multibuild file and enable build of webkit2gtk4.
- Update to version 2.33.3:
+ Add support for display capture.
+ Add new API to access/modify capture devices states.
+ Add new API to configure the memory pressure handler.
+ Add support for client side certifiates authentication.
+ Add support color-schemes CSS property.
+ Add support for dark scrollbars.
+ Keep GtkSettings used by web processes in sync with the
settings set in the UI process.
+ Add support for drawing the scrollbars corner.
+ Allow to opt-out of GL rendering at runtime for media player.
+ Add support for A420 compositing in media player.
+ Improve pinch to zoom gesture in accerlerated compositing mode.
+ Fix cookies configuration after a network process crash.
+ Fix touchscreen navigation swipe when the page scrolls
horizontally.
+ Fix rendering of elliptic radial gradients.
+ Fix several crashes and rendering issues.
+ Updated translations.
- Drop fix-lto.patch: fixed upstream.
- Add pkgconfig(lcms2) BuildRequires: new dependency.
- Replace pkgconfig(libsoup-2.4) BuildRequires with
pkgconfig(libsoup-3.0): Follow upstreams port to Libsoup 3.0.
==== xdg-desktop-portal-gtk ====
Version update (1.8.0 -> 1.10.0)
- Pass --disable-silent-rules, --disable-appchooser,
- -disable-background, --disable-screencast, --disable-screenshot,
- -disable-settings, and --disable-wallpaper to configure, make
use of xdg-desktop-portal-gnome, and more importantly, remove all
gnome-dependencies from this package.
- Following the above, drop pkgconfig(gio-2.0),
pkgconfig(gio-unix-2.0) and pkgconfig(gnome-desktop-3.0)
BuildRequires.
- Add explicit pkgconfig(fontconfig) BuildRequires.
- Add systemd_user_post and systemd_user_preun macros to post/preun
sections.
- Update to version 1.10.0:
+ filechooser: Fix a focus issue
+ inhibit: Autostart org.gnome.ScreenSaver
+ screencast: Force window icon size
+ Make portal backends with GNOME dependencies optional and
disable them by default. Use xdg-desktop-portal-gnome, or use
- -enable-wallpaper to build with the wallpaper backend
- -enable-screenshot to build with the screenshot backend
- -enable-screencast to build with screencast/remoting backends
- -enable-background to build with the background backend
- -enable-settings to build with the settings backend
- -enable-appchooser to build with the appchooser backend
+ Updated translations.
==== yelp ====
Version update (40.3 -> 41.1)
Subpackages: libyelp0
- Update to version 41.1:
+ Fixed validation issues in appdata file.
+ Updated yelp-xsl dependency.
- Replace pkgconfig(webkit2gtk-4.0) and
pkgconfig(webkit2gtk-web-extension-4.0) with
pkgconfig(webkit2gtk-4.1) and
pkgconfig(webkit2gtk-web-extension-4.1) BuildRequires and no
longer pass --with-webkit2gtk-4-0, we now have the new symbols
available.
- Update to version 41.0:
+ No changes.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 41.beta2:
+ Fixed regression when opening document by file path.
+ Added content rating and release info to appdata file.
- Update to version 41.beta:
+ Revamped a lot of color code to avoid deprecated Gtk API.
+ Search results and 'All Help' now use current styling.
+ Fixed aliasing on the icon.
+ Build against webkit2gtk-4.1 by default.
+ Removed calls to deprecated Soup API.
+ Updated translations.
- Remporarily pass --with-webkit2gtk-4-0 to configure: we do not
yet have webkitgtk 4.1.
==== yelp-xsl ====
Version update (40.2 -> 41.0)
- Update to version 41.0:
+ No changes.
- Update to version 41.beta:
+ Loosen CSS match for title/desc in linkdiv.
+ Use better target contrasts for white-on-black.
==== zenity ====
Version update (3.32.0 -> 3.41.0)
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 3.41.0:
+ Port to meson.
+ Code cleanups.
+ Updated translations.
- Add meson BuildRequires and replace configure/make/make_install
with meson/meson_build/meson_install macros.
- Drop zenity-Fix-segfault-on-multiple-lists.patch: fixed
upstream.
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
at-spi2-core (2.40.3 -> 2.42.0)
glib-networking (2.68.1 -> 2.70.0)
glib2 (2.68.4 -> 2.70.0)
gobject-introspection (1.68.0 -> 1.70.0)
gsettings-desktop-schemas (40.0 -> 41.0)
libpwquality
librsvg (2.50.7 -> 2.52.0)
libsoup2 (2.72.0 -> 2.74.0)
python-gobject (3.40.1 -> 3.42.0)
shared-mime-info
=== Details ===
==== at-spi2-core ====
Version update (2.40.3 -> 2.42.0)
Subpackages: libatspi0
- Update to version 2.42.0:
+ Set X root property when Xwayland starts on demand.
+ Several dbus introspection fixes.
==== glib-networking ====
Version update (2.68.1 -> 2.70.0)
- Update to version 2.70.0:
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 2.70.rc:
+ gnutls:
- revert AuthorityInformationAccess implementation for now.
- fix use of non-default GTlsDatabases, Geary crash on startup.
- fix leak in g_tls_certificate_gnutls_copy.
- Unbreak GTLS_GNUTLS_CHECK_VERSION.
+ openssl: remove openssl-util.
- Update to version 2.70.beta:
+ gnutls: Ensure that PKCS #11 pins are NUL terminated.
+ openssl: Restore OCSP support.
- Update to version 2.70.alpha:
+ Fix TLS channel bindings tests.
+ Require OpenSSL 1.0.2.
+ Fix threadsafety issue in certificate verification.
+ dlopen libsoup for performing HTTP requests.
+ OpenSSL: add DTLS support, plus many related improvements.
+ Implement new GTlsCertificate details APIs.
+ GnuTLS: improve error handling for PIN failures.
+ GnuTLS: expose PIN type on PIN requests.
+ GnuTLS: check cancellable in pull timeout callback.
+ Improve automation of test certificate creation.
+ GnuTLS: use GnuTLS to implement all channel bindings.
+ GnuTLS: rework certificate verification to use TLS session.
+ GnuTLS: improve peer identity verification.
+ Bring back automatic downloading of missing intermediate
certificates (not fixed, may go away again).
==== glib2 ====
Version update (2.68.4 -> 2.70.0)
Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0
- Update to version 2.70.0:
+ Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== gobject-introspection ====
Version update (1.68.0 -> 1.70.0)
Subpackages: girepository-1_0 libgirepository-1_0-1
- Update to version 1.70.0:
+ Update the GIR data for GLib, GObject, and GIO.
- Update to version 1.69.0:
+ Fix build when gobject-introspection is a subproject,
+ Add more float types,
+ Make test suite work with cross-related options,
+ Fix several leaks found by Coverity,
+ Fix enum member,
+ Add g-ir-doc-tool man page,
+ Export warnlib sources as variables,
+ Update the GLib annotations,
+ Add "final" class attribute,
+ Add option to make .gir files installation paths configurable,
+ Handle constructors with mismatched GTypes,
+ Add property accessors annotations,
==== gsettings-desktop-schemas ====
Version update (40.0 -> 41.0)
- Update to version 41.0:
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 41.rc:
+ Stop setting legacy GNOME 2 shortcut by default.
+ Updated translations.
- Update to version 41.alpha:
+ Add lockdown setting for revealing passwords.
+ Updated translations.
==== libpwquality ====
Subpackages: libpwquality-tools libpwquality1 pam_pwquality
- Use %_pam_moduledir instead of hardcoding %{_lib}/security
(boo#1191042).
==== librsvg ====
Version update (2.50.7 -> 2.52.0)
Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2
- Disable testsuite run on ix86 and arm.
- Update to version 2.52.0:
+ The biggest user-visible change is that rsvg-convert has been
ported to Rust.
+ rsvg-convert is now aware of physical units, and fixes a bug
where PDFs were created at the wrong size.
+ Support for Accept-Language.
+ rsvg-convert's default DPI is now 96, to better match W3C
standards.
+ SVG2/CSS3 features:
- Transform property from SVG2; previously librsvg only
supported the transform attribute from SVG1.1, which has
different syntax.
- context-fill and context-stroke for <marker> and <use>
elements.
- markers now support orient="auto-start-reverse".
- paint-order for text elements.
- "auto" values for the width and height attributes of the
<image>, <rect>, and <svg> elements.
- All the <filter-function> types from the Filter Effects
Module Level 1 specification: blur(), brightness(),
contrast(), drop-shadow(), grayscale(), hue-rotate(),
invert(), opacity(), sepia(), saturate().
- The filter property now supports chains of uri() filters or
<filter-function> shortcuts.
- Support CSS selectors for attribute matching, like
rect[attr^="prefix"]
+ New APIs: See the HTML documentation for details.
- Drop -lang package: there are no translations available anymore.
==== libsoup2 ====
Version update (2.72.0 -> 2.74.0)
- Add Provides: libsoup2 to the library, so that the lang package
is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
libsoup 3).
- Rename source package to libsoup2, as a compatibility package
while the world moves to libsoup3 (with HTTP/2 support).
- Update to version 2.74.0:
+ IMPORTANT: Enable ssl-use-system-ca-file by default on
deprecated Sync and Async sessions.
+ Fix including headers in C++ projects.
+ Fix attempting to resolve relative paths with data URIs.
+ Support Content-Disposition headers without a disposition-type.
+ Fix building VAPI bindings with latest Vala.
+ Fix sending a Content-Length header in a response with status
code of 1xx or 204.
+ Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.
==== python-gobject ====
Version update (3.40.1 -> 3.42.0)
- Update to version 3.42.0:
+ meson: Bump minimum meson_version to 0.47.0.
+ Expose GObject.Object.run_dispose().
+ docs: document Gtk.Template.
+ dev: Add poetry support.
+ meson: use main branch for glib subproject.
+ Fix some small memory leaks.
==== shared-mime-info ====
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Do not ghost own %{_datadir}/mime/[a-ms-vxX]*: as those
files/directories do not exist during build, RPM can't expand the
glob and adds it literally to the file list, not having any
effect in the end. A cleanup of the directory structure would not
work anyway, as there are also files generated inside.
1
0