June 2021 - openSUSE Kubic - openSUSE Mailing Lists

New Kubic snapshot 20210602 released!
by Richard Brown 04 Jun '21

04 Jun '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: elfutils (0.184 -> 0.185) expat (2.3.0 -> 2.4.1) gcc11 glibc k9s (0.24.9 -> 0.24.10) kubernetes1.21 libnftnl (1.1.9 -> 1.2.0) libseccomp (2.5.0 -> 2.5.1) lvm2 lvm2-device-mapper ncurses (6.2.20210501 -> 6.2.20210515) === Details === ==== elfutils ==== Version update (0.184 -> 0.185) Subpackages: libasm1 libdw1 libelf1 - Update to version 0.185: debuginfod-client: Simplify curl handle reuse so downloads which return an error are retried. elfcompress: Always exit with code 0 when the operation succeeds (even when nothing was done). On error the exit code is now always 1. ==== expat ==== Version update (2.3.0 -> 2.4.1) - Update to 2.4.1: * Bug fixes: - Autotools: Fix installed header expat_config.h for multilib systems; regression introduced in 2.4.0 by pull request #486 * Other changes: - Version info bumped from 9:0:8 to 9:1:8; see https://verbump.de/ for what these numbers do - Update to 2.4.0: [CVE-2013-0340 "Billion Laughs"] * Security fixes: - CVE-2013-0340/CWE-776 -- Protect against billion laughs attacks (denial-of-service; flavors targeting CPU time or RAM or both, leveraging general entities or parameter entities or both) by tracking and limiting the input amplification factor (<amplification> := (<direct> + <indirect>) / <direct>). By conservative default, amplification up to a factor of 100.0 is tolerated and rejection only starts after 8 MiB of output bytes (=<direct> + <indirect>) have been processed. The fix adds the following to the API: - A new error code XML_ERROR_AMPLIFICATION_LIMIT_BREACH to signals this specific condition. - Two new API functions .. - XML_SetBillionLaughsAttackProtectionMaximumAmplification and - XML_SetBillionLaughsAttackProtectionActivationThreshold .. to further tighten billion laughs protection parameters when desired. Please see file "doc/reference.html" for details. If you ever need to increase the defaults for non-attack XML payload, please file a bug report with libexpat. - Two new XML_FEATURE_* constants .. - that can be queried using the XML_GetFeatureList function, and - that are shown in "xmlwf -v" output. - Two new environment variable switches .. - EXPAT_ACCOUNTING_DEBUG=(0|1|2|3) and - EXPAT_ENTITY_DEBUG=(0|1) .. for runtime debugging of accounting and entity processing. Specific behavior of these values may change in the future. - Two new command line arguments "-a FACTOR" and "-b BYTES" for xmlwf to further tighten billion laughs protection parameters when desired. If you ever need to increase the defaults for non-attack XML payload, please file a bug report with libexpat. * Bug fixes: - For (non-default) compilation with -DEXPAT_MIN_SIZE=ON (CMake) or CPPFLAGS=-DXML_MIN_SIZE (GNU Autotools): Fix segfault for UTF-16 payloads containing CDATA sections. - Autotools: Fix generated CMake files for non-64bit and non-Linux platforms (e.g. macOS and MinGW in particular) that were introduced with release 2.3.0 * Other changes: - xmlwf: Improve help output and the xmlwf man page - xmlwf: Improve maintainability through some refactoring - xmlwf: Fix man page DocBook validity - CMake: Support absolute paths for both CMAKE_INSTALL_LIBDIR and CMAKE_INSTALL_INCLUDEDIR - CMake: Add support for standard variable BUILD_SHARED_LIBS - Unexpose symbol _INTERNAL_trim_to_complete_utf8_characters - Resolve macro HAVE_EXPAT_CONFIG_H - Delete unused legacy helper file "conftools/PrintPath" - doc/reference.html: Fix XHTML validity - doc/reference.html: Replace the 90s look by OK.css - Version info bumped from 8:0:7 to 9:0:8 due to addition of new symbols and error codes; see https://verbump.de/ for what these numbers do ==== gcc11 ==== Subpackages: libgcc_s1 libgomp1 libstdc++6 - Fix value of %slibdir64 for usrmerge ==== glibc ==== Subpackages: glibc-locale-base - tst-cpu-features-amx.patch: x86: tst-cpu-features-supports.c: Update AMX check - rawmemchr-warning.patch: string: Work around GCC PR 98512 in rawmemchr ==== k9s ==== Version update (0.24.9 -> 0.24.10) - Update to version 0.24.10: * Bug fixes - Update Makefile.patch to version 0.24.10 ==== kubernetes1.21 ==== Subpackages: kubernetes1.21-client kubernetes1.21-client-common kubernetes1.21-kubeadm kubernetes1.21-kubelet kubernetes1.21-kubelet-common - Toggle ip4/ipv6 forwarding sysctls to ensure all devices are refreshed [boo#1186125] ==== libnftnl ==== Version update (1.1.9 -> 1.2.0) - Update to release 1.2.0 * table: add table owner support * expr: socket: add cgroups v2 support ==== libseccomp ==== Version update (2.5.0 -> 2.5.1) - update to 2.5.1: * Fix a bug where seccomp_load() could only be called once * Change the notification fd handling to only request a notification fd if * the filter has a _NOTIFY action * Add documentation about SCMP_ACT_NOTIFY to the seccomp_add_rule(3) manpage * Clarify the maintainers' GPG keys - remove testsuite-riscv64-missing-syscalls.patch ==== lvm2 ==== Subpackages: liblvm2cmd2_03 - Link test as position independent executable (bsc#1184124). + bug-1184124-link-tests-as-PIE.patch ==== lvm2-device-mapper ==== Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 - Link test as position independent executable (bsc#1184124). + bug-1184124-link-tests-as-PIE.patch ==== ncurses ==== Version update (6.2.20210501 -> 6.2.20210515) Subpackages: libncurses6 ncurses-utils terminfo-base - Add ncurses patch 20210515 + improve manual pages for wgetnstr, newwin (prompted by report/testcase by Bill Gray). - Add ncurses patch 20210508 + modify tputs' error check to allow it to be used without first calling tgetent or setupterm, noting that terminfo initialization is requires for supporting the terminfo delay feature (report by Sebastiano Vigna). + fix several warnings from clang --analyze + add null-pointer check in comp_parse.c, when a "use=" clause refers to a nonexisting terminal description (report/patch by Miroslav Lichvar, cf: 20210227).

1 0

New ARM MicroOS snapshot 20210601 released!
by Guillaume Gardet 03 Jun '21

03 Jun '21

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (21.1.0 -> 21.1.1) Mesa-drivers (21.1.0 -> 21.1.1) NetworkManager acl (2.2.53 -> 2.3.1) apparmor augeas branding-openSUSE cifs-utils (6.12 -> 6.13) cni cockpit (243 -> 245) dav1d (0.8.2 -> 0.9.0) dhcp (4.4.2 -> 4.4.2.P1) drpm (0.4.1 -> 0.5.0) exiv2 filesystem gcc (10 -> 11) gcc11 (11.0.0+git183291 -> 11.1.1+git121) gjs (1.68.0 -> 1.68.1) glib2 (2.68.1 -> 2.68.2) gnome-packagekit gnome-shell-extensions (40.0 -> 40.1) gnutls graphite2 gtk4 (4.2.0 -> 4.2.1) hwinfo (21.73 -> 21.74) installation-images-MicroOS (17.3 -> 17.6) isl (0.23 -> 0.24) issue-generator (1.12 -> 1.13) json-c kdump kernel-source (5.12.3 -> 5.12.4) kio krb5 less (581.2 -> 586) libX11 (1.7.0 -> 1.7.1) libapparmor libcontainers-common libepoxy (1.5.5 -> 1.5.8) libidn2 (2.3.0 -> 2.3.1) libinput (1.17.2 -> 1.17.3) libphonenumber (8.12.22 -> 8.12.23) libportal (0.3 -> 0.4) libqmi (1.28.2 -> 1.28.4) libqt5-qtbase libqt5-qtwayland librsvg (2.50.5 -> 2.50.6) libsigc++2 (2.10.6 -> 2.10.7) libsrtp2 libtirpc (1.3.1 -> 1.3.2) libwacom (1.6 -> 1.10) llvm12 logrotate (3.18.0 -> 3.18.1) lua54 mdadm mozilla-nspr (4.30 -> 4.31) mozilla-nss (3.63.1 -> 3.64) multipath-tools (0.8.5+30+suse.633836e -> 0.8.6+10+suse.4771137) nautilus pango (1.48.4 -> 1.48.5) patterns-base patterns-microos perl-HTTP-Message (6.31 -> 6.32) permissions (1550_20210125 -> 1550_20210518) pipewire (0.3.27 -> 0.3.28) polkit-default-privs (1550+20210503.88baaca -> 1550+20210520.336dcea) poppler (21.04.0 -> 21.05.0) poppler-qt5 (21.04.0 -> 21.05.0) psmisc python-PyJWT (2.0.1 -> 2.1.0) python-asn1crypto python-idna python-jsonpatch (1.31 -> 1.32) python-jsonschema python-networkx (2.5 -> 2.5.1) python-oauthlib python-pyasn1 python-pytz rpm runc (1.0.0~rc94 -> 1.0.0~rc95) selinux-policy sgml-skel signon-plugin-oauth2 (0.24 -> 0.25) snapper sssd (2.4.2 -> 2.5.0) telepathy-logger u-boot-rpiarm64 vim (8.2.2800 -> 8.2.2850) vte (0.64.0 -> 0.64.1) webkit2gtk3 (2.32.0 -> 2.32.1) xdm xfsprogs (5.11.0 -> 5.12.0) xmlsec1 (1.2.31 -> 1.2.32) yast2 (4.4.3 -> 4.4.5) zchunk (1.1.11 -> 1.1.14) zstd (1.4.9 -> 1.5.0) zvbi === Details === ==== Mesa ==== Version update (21.1.0 -> 21.1.1) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - update to 21.1.1 * bugfix release * mostly AMD and Intel changes as usual, but also a decent amount of ARM fixes and more - Add swrast to vulkan - Enable vulkan on %{arm} and aarch64 with: swrast, amd, broadcom and freedreno ==== Mesa-drivers ==== Version update (21.1.0 -> 21.1.1) Subpackages: Mesa-dri Mesa-gallium - update to 21.1.1 * bugfix release * mostly AMD and Intel changes as usual, but also a decent amount of ARM fixes and more - Add swrast to vulkan - Enable vulkan on %{arm} and aarch64 with: swrast, amd, broadcom and freedreno ==== NetworkManager ==== Subpackages: libnm0 typelib-1_0-NM-1_0 - Add nm-add-CAP_CHOWN-capability.patch: Add CAP_CHOWN to CapabilityBoundingSet to make teamd work properly (glfd#NetworkManager/NetworkManager!860, bsc#1185424). - Drop networkmanager-obs-net.patch: the patch needs a full rework. - Drop networkmanager-checks-po.patch: as it was supposed to fix something introduced by another patch which we still carry, yet we can live with this patch disabled, I'd infer this patch is not nescessary. ==== acl ==== Version update (2.2.53 -> 2.3.1) - modernize spec-file (move license to licensedir) - Update to version 2.3.1 * Update German translation * getfacl: fix indent in --help output * getfacl: Add --one-file-system option, with this option getfacl will not cross mount points * Fix segfault on allocation failure * Avoid SIGSEGV with link-time optimisation enabled - Use SourceUrls ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils python3-apparmor - add abstractions-php8.diff to support PHP8 in abstractions/php (boo#1186267) ==== augeas ==== - Allow all printable ASCII characters in WPA-PSK definition * augeas-allow_printable_ASCII.patch * bsc#1185524 * Sourced from https://github.com/hercules-team/augeas/pull/723/commits * Credit to Michal Filka <mfilka(a)suse.com> ==== branding-openSUSE ==== Subpackages: grub2-branding-openSUSE systemd-icon-branding-openSUSE wallpaper-branding-openSUSE - Enable grub2-branding on riscv64 ==== cifs-utils ==== Version update (6.12 -> 6.13) - Update to cifs-utils 6.13 * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container * remove cifs-utils-6.12.tar.bz2 * remove cifs-utils-6.12.tar.bz2.asc * add cifs-utils-6.13.tar.bz2 * add cifs-utils-6.13.tar.bz2.asc - Drop upstream fixed patches: * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch ==== cni ==== - use buildmode=pie (cnitool is installed into sbindir) - Set GO111MODULE=auto to build with go1.16+ * Default changed to GO111MODULE=on in go1.16 * Set temporarily until using upstream release with go.mod * Drop BuildRequires: golang-packaging not currently using macros * Add BuildRequires: golang(API) >= 1.13 recommended dependency expression ==== cockpit ==== Version update (243 -> 245) Subpackages: cockpit-bridge cockpit-system - new version 255 https://cockpit-project.org/blog/cockpit-245.html - new version 244.1 https://cockpit-project.org/blog/cockpit-244.html - enable SELinux ==== dav1d ==== Version update (0.8.2 -> 0.9.0) - Update to version 0.9.0 * x86 (64bit) AVX2 implementation of most 10b/12b functions, which should provide a large boost for high-bitdepth decoding on modern x86 computers and servers. * ARM64 neon implementation of FilmGrain (4:2:0/4:2:2/4:4:4 8bit) * New API to signal events happening during the decoding process ==== dhcp ==== Version update (4.4.2 -> 4.4.2.P1) Subpackages: dhcp-client - Add -fno-strict-aliasing to CFLAGS to avoid a segfault in dhcpd (boo#1186631). - Update to 4.4.2-P1: * CVE-2021-25217, bsc#1186382: A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient. - Error out, if %version and %isc_version are not in sync. ==== drpm ==== Version update (0.4.1 -> 0.5.0) - update to 0.5.0: * fix a memory leak on invalid input * Hide the internal library symbols ==== exiv2 ==== - Add 1271.patch: Fix build using GCC 11 (boo#1185218). - Drop the sed hack to remove -fcf-protection: this is properly solved with the above patch. - -fcf-protection doesn't work on i586 with gcc11 either (boo#1185218) ==== filesystem ==== - temporarily revert icon and fillup dir to 0755 until fallout is fixed (bsc#1184786) - Remove /usr/share/java, as it was moved to javapackages-filesystem long ago - temporarily mark appdata and applications 0755 again until fallout is fixed (bsc#1184786) - make restricteddir and datadir readonly (bsc#1184786) - also make includedir, mandir, licensedir readonly (bsc#1184786) ==== gcc ==== Version update (10 -> 11) - Switch gcc to default 11. - Adjust liblto_plugin.so naming for GCC 11. ==== gcc11 ==== Version update (11.0.0+git183291 -> 11.1.1+git121) Subpackages: libgcc_s1 libgomp1 libstdc++6 libubsan1 - Update to gcc-11 branch head (23855a176609fe8dda6abaf2b2), git121 - Disable build-id generation on non-glibc targeting cross compilers. - Update to gcc-11 branch head (cd0a059bd384da58d43674496a7), git67 * Includes GCC 11.1 release - Drop upstreamed gcc11-no-offload.patch. - Update to gcc-11 branch head (7a7fc01b9d20afb1a2b805d93cb), git31 * Includes GCC 11.1 RC2 - Add gcc11-no-offload.patch and gcc11-amdgcn-disable-hot-cold-partitioning.patch. - Enable gfortran for offload compilers. - BuildRequire procps from gcc11-testresults if we test go. - Force using llvm11 for amdgcn offloading since llvm12 doesn't yet work. Package expanded symlinks so concurrent installs do not pull in another llvm-mc. - Add gcc11-gdwarf-4-default.patch to default to DWARF4 generation in SLES15 and older. - Update to gcc-11 branch head (27350b77a92062667427100afb4), git10 * Includes GCC 11.1 RC1 - Bump to 49813aad3292f7f2bef69206274da78a9a7116ed. - Disable nvptx offloading on aarch64 since it doesn't work. - Bump to a87d3f964df31d4fbceb822c6d293e85c117d992. - Remove gcc48-remove-mpfr-2.4.0-requirement.patch which does no longer apply. - Arrange for a C++ 11 capable host compiler to be available. - Do not require ISL for cross compiler builds on old distros. - Bump to 123b3e03c911a43054c1f88f5d3110e1d084dd4e. - Update embedded newlib version from 3.3.0 to 4.1.0. - Pack %{GCCDIST}-gcc%{binsuffix}. - Add a new dependency for libgccjit. - New package, inherits from gcc10 * gcc-add-defaultsspec.diff, add the ability to provide a specs file that is read by default * tls-no-direct.diff, avoid direct %fs references on x86 to not slow down Xen * gcc43-no-unwind-tables.diff, do not produce unwind tables for CRT files * gcc41-ppc32-retaddr.patch, fix expansion of __builtin_return_addr for ppc, just a testcase * gcc44-textdomain.patch, make translation files version specific and adjust textdomain to find them * gcc44-rename-info-files.patch, fix cross-references in info files when renaming them to be version specific * gcc48-libstdc++-api-reference.patch, fix link in the installed libstdc++ html documentation * gcc48-remove-mpfr-2.4.0-requirement.patch, make GCC work with earlier mpfr versions on old products * gcc5-no-return-gcc43-workaround.patch, make build work with host gcc 4.3 * gcc7-remove-Wexpansion-to-defined-from-Wextra.patch, removes new warning from -Wextra * gcc7-avoid-fixinc-error.diff * gcc9-reproducible-builds-buildid-for-checksum.patch * gcc9-reproducible-builds.patch * gcc10-amdgcn-llvm-as.patch * gcc10-foffload-default.patch - libgccjit subpackage is added. - HWASAN is built for aarch64 target. ==== gjs ==== Version update (1.68.0 -> 1.68.1) Subpackages: libgjs0 typelib-1_0-GjsPrivate-1_0 - Update to version 1.68.1: + Many stability fixes due to refactoring how disposed GObjects are handled. ==== glib2 ==== Version update (2.68.1 -> 2.68.2) Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 - Update to version 2.68.2: + Fix building third-party projects against GLib on CentOS 7. + Bugs fixed: - json-glib does not build with glib 2.68.1. - gmacros: check that __cplusplus or _MSC_VER is defined. - gmacros: missing check if __STDC_VERSION__ is defined. - Backport !2078 ?gthreadedresolver: don't ignore flags in lookup_by_name_with_flags? to glib-2-68. ==== gnome-packagekit ==== - Normalize used patch tags. ==== gnome-shell-extensions ==== Version update (40.0 -> 40.1) - Update to version 40.1: + Disable welcome dialog in classic session. + windowsNavigator: Adjust to a late gnome-shell change. ==== gnutls ==== - Compute the FIPS hmac file without re-defining the __os_install_post macro, use the brp-50-generate-fips-hmac script instead. [bsc#1184555] - Require the main package in devel and lib packages as the default priorities are now set via crypto-policies. [bsc#1183082] ==== graphite2 ==== - Define conditionally make_build to fix build on systems that do not have that macro ==== gtk4 ==== Version update (4.2.0 -> 4.2.1) Subpackages: gtk4-schema libgtk-4-1 typelib-1_0-Gtk-4_0 - Update to version 4.2.1: + GtkVideo: Detect stream metadata when using gstreamer + GtkFileChooser: Fix a crash + GtkButton: Add back visual feedback for keynav activation + GtkFontChooser: Fix initial font selection + GtkScrolledWindow: Stop using scroll cursors + GtkMenuButton: Make focus-on-click work + GtkToggleButton: Make grouped buttons mutually exclusive + GtkPasswordEntry: Use MADV_DONTDUMP for secure memory + GtkListBox: Allow repeated selection extension for MULTIPLE + GdkClipboard: Ensure strings are nul-terminated + GSK: - Fix offscreen rendering with transforms - Fix downscaled textures - Avoid huge intermediate textures - Make shadow rendering match across renderers + Text widgets: Support translucent selections + Wayland: - Improve font settings fallback - Avoid unintentional rendering freezes with popovers + X11: - Don't beep on untrusted displays - Don't crash when popovers are outside the workarea + Themes: - Fix resize border sizing - Fix solid-csd window decorations + Input: - Revert some Compose sequence changes - Consume all key events during preedit, to avoid unexpected interactions - Ignore more modifiers during preedit, to allow using 3rd and 5th level choosers - Fix handling of cursor positions in non-ASCII preedit text - Fix a problem with deferred focus setting ==== hwinfo ==== Version update (21.73 -> 21.74) - merge gh#openSUSE/hwinfo#98 - update pci and usb ids - 21.74 ==== installation-images-MicroOS ==== Version update (17.3 -> 17.6) - merge gh#openSUSE/installation-images#513 - Keep /usr/lib/ld-* also if lib64 exists - Use ld*so* as glob for the runtime linker - Keep /usr/lib/ld*so* also if lib64 exists - 17.6 - merge gh#openSUSE/installation-images#512 - Fix previous typo adding chipidea modules - 17.5 - merge gh#openSUSE/installation-images#511 - Add chipidea modules (bsc#1184867) - 17.4 ==== isl ==== Version update (0.23 -> 0.24) - update to 0.24: - improved (C++) bindings (inherit methods, renamed exports) - initial templated C++ bindings - detect bounds on constant polynomials as tight ==== issue-generator ==== Version update (1.12 -> 1.13) - Update to version 1.13 - SELinux: Do not call agetty --reload [bsc#1186178] ==== json-c ==== - Add -std=gnu99 to fix build with some gcc versions ==== kdump ==== - Fix use of DNS in the panic environment (bsc#1183070): * kdump-avoid-endless-loop-on-EAI_AGAIN.patch: Avoid an endless loop when resolving a hostname fails with EAI_AGAIN. * kdump-install-real-resolv.conf.patch: Install /etc/resolv.conf using its resolved path. - kdump-fix-incorrect-exit-code-checking.patch: Fix incorrect exit code checking after "local" with assignment (bsc#1184616, LTC#192282) - kdump-do-not-iterate-past-end-of-string.patch: Fix a crash caused by iterating past end of string (bsc#1186037). ==== kernel-source ==== Version update (5.12.3 -> 5.12.4) - can: isotp: prevent race between isotp_bind() and isotp_setsockopt() (CVE-2021-32606 bsc#1185953 bsc#1185564). - commit cf6ea2f - usb: pci-quirks: disable D3cold on xhci suspend for s2idle on AMD Renoire (bsc#1185840). - ACPI / idle: override c-state latency when not in conformance with s0ix (bsc#1185840). - ACPI: PM: s2idle: Add missing LPS0 functions for AMD (bsc#1185840). - commit 152b604 - ipc/mqueue, msg, sem: Avoid relying on a stack reference past its expiry (bsc#1185988). - commit 2d71c6c - drm/i915/gem: Pin the L-shape quirked object as unshrinkable (bsc#1185624 bsc#1186075). - commit 6e53ea2 - serial: stm32: fix threaded interrupt handling (git-fixes). - usb: typec: tcpm: Fix error while calculating PPS out values (git-fixes). - RDMA/core: Unify RoCE check and re-factor code (git-fixes). - commit a5aafd4 - Linux 5.12.4 (bsc#1012628). - Bluetooth: verify AMP hci_chan before amp_destroy (bsc#1012628). - bluetooth: eliminate the potential race condition when removing the HCI controller (bsc#1012628). - net/nfc: fix use-after-free llcp_sock_bind/connect (bsc#1012628). - io_uring: truncate lengths larger than MAX_RW_COUNT on provide buffers (bsc#1012628). - coresight: etm-perf: Fix define build issue when built as module (bsc#1012628). - software node: Allow node addition to already existing device (bsc#1012628). - Revert "USB: cdc-acm: fix rounding error in TIOCSSERIAL" (bsc#1012628). - usb: roles: Call try_module_get() from usb_role_switch_find_by_fwnode() (bsc#1012628). - tty: moxa: fix TIOCSSERIAL jiffies conversions (bsc#1012628). - tty: amiserial: fix TIOCSSERIAL permission check (bsc#1012628). - USB: serial: usb_wwan: fix TIOCSSERIAL jiffies conversions (bsc#1012628). - staging: greybus: uart: fix TIOCSSERIAL jiffies conversions (bsc#1012628). - USB: serial: ti_usb_3410_5052: fix TIOCSSERIAL permission check (bsc#1012628). - staging: fwserial: fix TIOCSSERIAL jiffies conversions (bsc#1012628). - tty: moxa: fix TIOCSSERIAL permission check (bsc#1012628). - tty: mxser: fix TIOCSSERIAL jiffies conversions (bsc#1012628). - staging: fwserial: fix TIOCSSERIAL permission check (bsc#1012628). - tty: mxser: fix TIOCSSERIAL permission check (bsc#1012628). - drm: bridge: fix LONTIUM use of mipi_dsi_() functions (bsc#1012628). - usb: typec: tcpm: Address incorrect values of tcpm psy for fixed supply (bsc#1012628). - usb: typec: tcpm: Address incorrect values of tcpm psy for pps supply (bsc#1012628). - usb: typec: tcpm: update power supply once partner accepts (bsc#1012628). - USB: serial: xr: fix CSIZE handling (bsc#1012628). - usb: xhci-mtk: remove or operator for setting schedule parameters (bsc#1012628). - usb: xhci-mtk: improve bandwidth scheduling with TT (bsc#1012628). - ASoC: samsung: tm2_wm5110: check of of_parse return value (bsc#1012628). - ASoC: Intel: kbl_da7219_max98927: Fix kabylake_ssp_fixup function (bsc#1012628). - ASoC: tlv320aic32x4: Register clocks before registering component (bsc#1012628). - ASoC: tlv320aic32x4: Increase maximum register in regmap (bsc#1012628). - MIPS: pci-mt7620: fix PLL lock check (bsc#1012628). - MIPS: pci-rt2880: fix slot 0 configuration (bsc#1012628). - FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR (bsc#1012628). - PCI: Allow VPD access for QLogic ISP2722 (bsc#1012628). - KVM: x86: Defer the MMU unload to the normal path on an global INVPCID (bsc#1012628). - PCI: xgene: Fix cfg resource mapping (bsc#1012628). - PCI: keystone: Let AM65 use the pci_ops defined in pcie-designware-host.c (bsc#1012628). - PM / devfreq: Unlock mutex and free devfreq struct in error path (bsc#1012628). - soc/tegra: regulators: Fix locking up when voltage-spread is out of range (bsc#1012628). - iio: inv_mpu6050: Fully validate gyro and accel scale writes (bsc#1012628). - iio: magnetometer: yas530: Include right header (bsc#1012628). - iio: sx9310: Fix write_.._debounce() (bsc#1012628). - iio:accel:adis16201: Fix wrong axis assignment that prevents loading (bsc#1012628). - iio:adc:ad7476: Fix remove handling (bsc#1012628). - iio: magnetometer: yas530: Fix return value on error path (bsc#1012628). - iio: sx9310: Fix access to variable DT array (bsc#1012628). - iio: hid-sensor-rotation: Fix quaternion data not correct (bsc#1012628). - sc16is7xx: Defer probe if device read fails (bsc#1012628). - phy: cadence: Sierra: Fix PHY power_on sequence (bsc#1012628). - misc: lis3lv02d: Fix false-positive WARN on various HP models (bsc#1012628). - phy: ti: j721e-wiz: Invoke wiz_init() before of_platform_device_create() (bsc#1012628). - misc: vmw_vmci: explicitly initialize vmci_notify_bm_set_msg struct (bsc#1012628). - misc: vmw_vmci: explicitly initialize vmci_datagram payload (bsc#1012628). - selinux: add proper NULL termination to the secclass_map permissions (bsc#1012628). - x86, sched: Treat Intel SNC topology as default, COD as exception (bsc#1012628). - async_xor: increase src_offs when dropping destination page (bsc#1012628). - md/bitmap: wait for external bitmap writes to complete during tear down (bsc#1012628). - md-cluster: fix use-after-free issue when removing rdev (bsc#1012628). - md: split mddev_find (bsc#1012628). - md: factor out a mddev_find_locked helper from mddev_find (bsc#1012628). - md: md_open returns -EBUSY when entering racing area (bsc#1012628). - md: Fix missing unused status line of /proc/mdstat (bsc#1012628). - MIPS: generic: Update node names to avoid unit addresses (bsc#1012628). - mt76: mt7615: use ieee80211_free_txskb() in mt7615_tx_token_put() (bsc#1012628). - ipw2x00: potential buffer overflow in libipw_wx_set_encodeext() (bsc#1012628). - net: xilinx: drivers need/depend on HAS_IOMEM (bsc#1012628). - cfg80211: scan: drop entry from hidden_list on overflow (bsc#1012628). - rtw88: Fix array overrun in rtw_get_tx_power_params() (bsc#1012628). - mt76: fix potential DMA mapping leak (bsc#1012628). - FDDI: defxx: Make MMIO the configuration default except for EISA (bsc#1012628). - drm/qxl: use ttm bo priorities (bsc#1012628). - drm/ingenic: Fix non-OSD mode (bsc#1012628). - drm/panfrost: Clear MMU irqs before handling the fault (bsc#1012628). - drm/panfrost: Don't try to map pages that are already mapped (bsc#1012628). - drm/radeon: fix copy of uninitialized variable back to userspace (bsc#1012628). - drm/dp_mst: Revise broadcast msg lct & lcr (bsc#1012628). - drm/dp_mst: Set CLEAR_PAYLOAD_ID_TABLE as broadcast (bsc#1012628). - drm: bridge: fix ANX7625 use of mipi_dsi_() functions (bsc#1012628). - drm: bridge/panel: Cleanup connector on bridge detach (bsc#1012628). - drm/amd/display: Reject non-zero src_y and src_x for video planes (bsc#1012628). - drm/amdgpu: fix concurrent VM flushes on Vega/Navi v2 (bsc#1012628). - drm/amdgpu: add new MC firmware for Polaris12 32bit ASIC (bsc#1012628). - drm/amdgpu: fix r initial values (bsc#1012628). - drm/amdgpu: Init GFX10_ADDR_CONFIG for VCN v3 in DPG mode (bsc#1012628). - ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC882 Clevo quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC269 HP quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC269 Acer quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC269 Dell quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC269 ASUS quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order remaining ALC269 quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC662 quirk table entries (bsc#1012628). - ALSA: hda/realtek: Remove redundant entry for ALC861 Haier/Uniwill devices (bsc#1012628). - ALSA: hda/realtek: Fix speaker amp on HP Envy AiO 32 (bsc#1012628). - KVM: s390: VSIE: correctly handle MVPG when in VSIE (bsc#1012628). - KVM: s390: split kvm_s390_logical_to_effective (bsc#1012628). - KVM: s390: fix guarded storage control register handling (bsc#1012628). - s390: fix detection of vector enhancements facility 1 vs. vector packed decimal facility (bsc#1012628). - KVM: s390: VSIE: fix MVPG handling for prefixing and MSO (bsc#1012628). - KVM: s390: split kvm_s390_real_to_abs (bsc#1012628). - KVM: s390: extend kvm_s390_shadow_fault to return entry pointer (bsc#1012628). - KVM: x86/mmu: Alloc page for PDPTEs when shadowing 32-bit NPT with 64-bit (bsc#1012628). - KVM: x86/xen: Drop RAX[63:32] when processing hypercall (bsc#1012628). - KVM: X86: Fix failure to boost kernel lock holder candidate in SEV-ES guests (bsc#1012628). - KVM: x86: Properly handle APF vs disabled LAPIC situation (bsc#1012628). - KVM: x86: Check CR3 GPA for validity regardless of vCPU mode (bsc#1012628). - KVM: x86: Remove emulator's broken checks on CR0/CR3/CR4 loads (bsc#1012628). - KVM: nSVM: Set the shadow root level to the TDP level for nested NPT (bsc#1012628). - KVM: SVM: Don't strip the C-bit from CR2 on #PF interception (bsc#1012628). - KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs (bsc#1012628). - KVM: SVM: Do not set sev->es_active until KVM_SEV_ES_INIT completes (bsc#1012628). - KVM: SVM: Do not allow SEV/SEV-ES initialization after vCPUs are created (bsc#1012628). - KVM: SVM: Inject #GP on guest MSR_TSC_AUX accesses if RDTSCP unsupported (bsc#1012628). - KVM: nVMX: Defer the MMU reload to the normal path on an EPTP switch (bsc#1012628). - KVM: VMX: Truncate GPR value for DR and CR reads in !64-bit mode (bsc#1012628). - KVM: nVMX: Truncate bits 63:32 of VMCS field on nested check in !64-bit (bsc#1012628). - KVM: nVMX: Truncate base/index GPR value on address calc in !64-bit (bsc#1012628). - KVM: arm/arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST read (bsc#1012628). - KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU (bsc#1012628). - KVM: Stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1012628). - KVM: arm64: Support PREL/PLT relocs in EL2 code (bsc#1012628). - KVM: arm64: Fully zero the vcpu state on reset (bsc#1012628). - KVM: arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST_REGION read (bsc#1012628). - KVM: selftests: Sync data verify of dirty logging with guest sync (bsc#1012628). - KVM: selftests: Always run vCPU thread with blocked SIG_IPI (bsc#1012628). - Revert "drivers/net/wan/hdlc_fr: Fix a double free in pvc_xmit" (bsc#1012628). - Revert "i3c master: fix missing destroy_workqueue() on error in i3c_master_register" (bsc#1012628). - mfd: stmpe: Revert "Constify static struct resource" (bsc#1012628). - ovl: fix missing revert_creds() on error path (bsc#1012628). - usb: gadget: pch_udc: Revert d3cb25a12138 completely (bsc#1012628). - Revert "tools/power turbostat: adjust for temperature offset" (bsc#1012628). - firmware: xilinx: Fix dereferencing freed memory (bsc#1012628). - firmware: xilinx: Remove zynqmp_pm_get_eemi_ops() in IS_REACHABLE(CONFIG_ZYNQMP_FIRMWARE) (bsc#1012628). - x86/vdso: Use proper modifier for len's format specifier in extract() (bsc#1012628). - fpga: fpga-mgr: xilinx-spi: fix error messages on -EPROBE_DEFER (bsc#1012628). - crypto: keembay-ocs-hcu - Fix error return code in kmb_ocs_hcu_probe() (bsc#1012628). - crypto: keembay-ocs-aes - Fix error return code in kmb_ocs_aes_probe() (bsc#1012628). - crypto: sun8i-ss - fix result memory leak on error path (bsc#1012628). - memory: gpmc: fix out of bounds read and dereference on gpmc_cs[] (bsc#1012628). - ARM: dts: exynos: correct fuel gauge interrupt trigger level on GT-I9100 (bsc#1012628). - ARM: dts: exynos: correct fuel gauge interrupt trigger level on P4 Note family (bsc#1012628). - ARM: dts: exynos: correct fuel gauge interrupt trigger level on Midas family (bsc#1012628). - ARM: dts: exynos: correct MUIC interrupt trigger level on Midas family (bsc#1012628). - ARM: dts: exynos: correct PMIC interrupt trigger level on Midas family (bsc#1012628). - ARM: dts: exynos: correct PMIC interrupt trigger level on Odroid X/U3 family (bsc#1012628). - ARM: dts: exynos: correct PMIC interrupt trigger level on P4 Note family (bsc#1012628). - ARM: dts: exynos: correct PMIC interrupt trigger level on SMDK5250 (bsc#1012628). - ARM: dts: exynos: correct PMIC interrupt trigger level on Snow (bsc#1012628). - ARM: dts: s5pv210: correct fuel gauge interrupt trigger level on Fascinate family (bsc#1012628). - ARM: dts: renesas: Add mmc aliases into R-Car Gen2 board dts files (bsc#1012628). - arm64: dts: renesas: Add mmc aliases into board dts files (bsc#1012628). - bus: ti-sysc: Fix initializing module_pa for modules without sysc register (bsc#1012628). - x86/platform/uv: Set section block size for hubless architectures (bsc#1012628). - serial: stm32: fix probe and remove order for dma (bsc#1012628). - serial: stm32: fix startup by enabling usart for reception (bsc#1012628). - serial: stm32: fix incorrect characters on console (bsc#1012628). - serial: stm32: fix TX and RX FIFO thresholds (bsc#1012628). - serial: stm32: fix a deadlock condition with wakeup event (bsc#1012628). - serial: stm32: fix wake-up flag handling (bsc#1012628). - serial: stm32: fix a deadlock in set_termios (bsc#1012628). - serial: liteuart: fix return value check in liteuart_probe() (bsc#1012628). - serial: stm32: fix tx dma completion, release channel (bsc#1012628). - serial: stm32: call stm32_transmit_chars locked (bsc#1012628). - serial: stm32: fix FIFO flush in startup and set_termios (bsc#1012628). - serial: stm32: add FIFO flush when port is closed (bsc#1012628). - serial: stm32: fix tx_empty condition (bsc#1012628). - usb: typec: tcpm: Wait for vbus discharge to VSAFE0V before toggling (bsc#1012628). - usb: typec: tcpci: Check ROLE_CONTROL while interpreting CC_STATUS (bsc#1012628). - usb: typec: tps6598x: Fix return value check in tps6598x_probe() (bsc#1012628). - usb: typec: stusb160x: fix return value check in stusb160x_probe() (bsc#1012628). - mfd: intel_pmt: Fix nuisance messages and handling of disabled capabilities (bsc#1012628). - regmap: set debugfs_name to NULL after it is freed (bsc#1012628). - spi: rockchip: avoid objtool warning (bsc#1012628). - arm64: dts: broadcom: bcm4908: fix switch parent node name (bsc#1012628). - mtd: rawnand: fsmc: Fix error code in fsmc_nand_probe() (bsc#1012628). - mtd: rawnand: brcmnand: fix OOB R/W with Hamming ECC (bsc#1012628). - mtd: Handle possible -EPROBE_DEFER from parse_mtd_partitions() (bsc#1012628). - mtd: rawnand: qcom: Return actual error code instead of -ENODEV (bsc#1012628). - mtd: don't lock when recursively deleting partitions (bsc#1012628). - mtd: parsers: qcom: Fix error condition (bsc#1012628). - mtd: parsers: qcom: incompatible with spi-nor 4k sectors (bsc#1012628). - mtd: maps: fix error return code of physmap_flash_remove() (bsc#1012628). - ARM: dts: stm32: fix usart 2 & 3 pinconf to wake up with flow control (bsc#1012628). - arm64: dts: ti: k3-j721e-main: Update the speed modes supported and their itap delay values for MMCSD subsystems (bsc#1012628). - iio: adis16480: fix pps mode sampling frequency math (bsc#1012628). - arm64: dts: qcom: sc7180: trogdor: Fix trip point config of charger thermal zone (bsc#1012628). - arm64: dts: qcom: sm8250: Fix level triggered PMU interrupt polarity (bsc#1012628). - arm64: dts: qcom: sm8350: Fix level triggered PMU interrupt polarity (bsc#1012628). - arm64: dts: qcom: sm8250: Fix timer interrupt to specify EL2 physical timer (bsc#1012628). - arm64: dts: qcom: sc7180: Avoid glitching SPI CS at bootup on trogdor (bsc#1012628). - arm64: dts: qcom: sdm845: fix number of pins in 'gpio-ranges' (bsc#1012628). - arm64: dts: qcom: sm8150: fix number of pins in 'gpio-ranges' (bsc#1012628). - arm64: dts: qcom: sm8250: fix number of pins in 'gpio-ranges' (bsc#1012628). - arm64: dts: qcom: sm8350: fix number of pins in 'gpio-ranges' (bsc#1012628). - arm64: dts: qcom: db845c: fix correct powerdown pin for WSA881x (bsc#1012628). - crypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to map (bsc#1012628). - spi: stm32: drop devres version of spi_register_master (bsc#1012628). - arm64: dts: broadcom: bcm4908: set Asus GT-AC5300 port 7 PHY mode (bsc#1012628). - regulator: bd9576: Fix return from bd957x_probe() (bsc#1012628). - arm64: dts: renesas: r8a77980: Fix vin4-7 endpoint binding (bsc#1012628). - selftests/x86: Add a missing .note.GNU-stack section to thunks_32.S (bsc#1012628). - crypto: arm/blake2s - fix for big endian (bsc#1012628). - spi: stm32: Fix use-after-free on unbind (bsc#1012628). - Drivers: hv: vmbus: Drop error message when 'No request id available' (bsc#1012628). - staging: qlge: fix an error code in probe() (bsc#1012628). - x86/microcode: Check for offline CPUs before requesting new microcode (bsc#1012628). - usb: host: ehci-tegra: Select USB_GADGET Kconfig option (bsc#1012628). - devtmpfs: fix placement of complete() call (bsc#1012628). - usb: gadget: pch_udc: Replace cpu_to_le32() by lower_32_bits() (bsc#1012628). - usb: gadget: pch_udc: Check if driver is present before calling - >setup() (bsc#1012628). - usb: gadget: pch_udc: Check for DMA mapping error (bsc#1012628). - usb: gadget: pch_udc: Initialize device pointer before use (bsc#1012628). - usb: gadget: pch_udc: Provide a GPIO line used on Intel Minnowboard (v1) (bsc#1012628). - crypto: ccp - fix command queuing to TEE ring buffer (bsc#1012628). - crypto: qat - don't release uninitialized resources (bsc#1012628). - crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init (bsc#1012628). - fotg210-udc: Fix DMA on EP0 for length > max packet size (bsc#1012628). - fotg210-udc: Fix EP0 IN requests bigger than two packets (bsc#1012628). - fotg210-udc: Remove a dubious condition leading to fotg210_done (bsc#1012628). - fotg210-udc: Mask GRP2 interrupts we don't handle (bsc#1012628). - fotg210-udc: Don't DMA more than the buffer can take (bsc#1012628). - fotg210-udc: Complete OUT requests on short packets (bsc#1012628). - usb: gadget: s3c: Fix incorrect resources releasing (bsc#1012628). - usb: gadget: s3c: Fix the error handling path in 's3c2410_udc_probe()' (bsc#1012628). - dt-bindings: serial: stm32: Use 'type: object' instead of false for 'additionalProperties' (bsc#1012628). - mtd: require write permissions for locking and badblock ioctls (bsc#1012628). - arm64: dts: renesas: r8a779a0: Fix PMU interrupt (bsc#1012628). - arm64: dts: mt8183: Add gce client reg for display subcomponents (bsc#1012628). - arm64: dts: mt8173: fix wrong power-domain phandle of pmic (bsc#1012628). - bus: qcom: Put child node before return (bsc#1012628). - arm64: dts: qcom: sm8250: fix display nodes (bsc#1012628). - soundwire: bus: Fix device found flag correctly (bsc#1012628). - soc: mediatek: pm-domains: Fix missing error code in scpsys_add_subdomain() (bsc#1012628). - phy: ti: j721e-wiz: Delete "clk_div_sel" clk provider during cleanup (bsc#1012628). - phy: ralink: phy-mt7621-pci: fix XTAL bitmask (bsc#1012628). - phy: marvell: ARMADA375_USBCLUSTER_PHY should not default to y, unconditionally (bsc#1012628). - phy: ralink: phy-mt7621-pci: fix return value check in mt7621_pci_phy_probe() (bsc#1012628). - phy: ingenic: Fix a typo in ingenic_usb_phy_probe() (bsc#1012628). - arm64: dts: mediatek: fix reset GPIO level on pumpkin (bsc#1012628). - NFSv4.2: fix copy stateid copying for the async copy (bsc#1012628). - crypto: poly1305 - fix poly1305_core_setkey() declaration (bsc#1012628). - crypto: qat - fix error path in adf_isr_resource_alloc() (bsc#1012628). - usb: gadget: aspeed: fix dma map failure (bsc#1012628). - USB: gadget: udc: fix wrong pointer passed to IS_ERR() and PTR_ERR() (bsc#1012628). - drivers: nvmem: Fix voltage settings for QTI qfprom-efuse (bsc#1012628). - nvmem: rmem: fix undefined reference to memremap (bsc#1012628). - driver core: platform: Declare early_platform_cleanup() prototype (bsc#1012628). - ARM: dts: qcom: msm8974-lge-nexus5: correct fuel gauge interrupt trigger level (bsc#1012628). - ARM: dts: qcom: msm8974-samsung-klte: correct fuel gauge interrupt trigger level (bsc#1012628). - memory: pl353: fix mask of ECC page_size config register (bsc#1012628). - soundwire: stream: fix memory leak in stream config error path (bsc#1012628). - m68k: mvme147,mvme16x: Don't wipe PCC timer config bits (bsc#1012628). - firmware: qcom_scm: Make __qcom_scm_is_call_available() return bool (bsc#1012628). - firmware: qcom_scm: Reduce locking section for __get_convention() (bsc#1012628). - firmware: qcom_scm: Workaround lack of "is available" call on SC7180 (bsc#1012628). - iio: adc: Kconfig: make AD9467 depend on ADI_AXI_ADC symbol (bsc#1012628). - mtd: rawnand: gpmi: Fix a double free in gpmi_nand_init (bsc#1012628). - irqchip/gic-v3: Fix OF_BAD_ADDR error handling (bsc#1012628). - staging: comedi: tests: ni_routes_test: Fix compilation error (bsc#1012628). - staging: rtl8192u: Fix potential infinite loop (bsc#1012628). - staging: fwserial: fix TIOCSSERIAL implementation (bsc#1012628). - staging: fwserial: fix TIOCGSERIAL implementation (bsc#1012628). - staging: greybus: uart: fix unprivileged TIOCCSERIAL (bsc#1012628). - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (bsc#1012628). - soc: qcom: pdr: Fix error return code in pdr_register_listener (bsc#1012628). - PM / devfreq: Use more accurate returned new_freq as resume_freq (bsc#1012628). - clocksource/drivers/timer-ti-dm: Fix posted mode status check order (bsc#1012628). - clocksource/drivers/timer-ti-dm: Add missing set_state_oneshot_stopped (bsc#1012628). - clocksource/drivers/ingenic_ost: Fix return value check in ingenic_ost_probe() (bsc#1012628). - spi: Fix use-after-free with devm_spi_alloc_* (bsc#1012628). - spi: fsl: add missing iounmap() on error in of_fsl_spi_probe() (bsc#1012628). - soc: qcom: mdt_loader: Validate that p_filesz < p_memsz (bsc#1012628). - soc: qcom: mdt_loader: Detect truncated read of segments (bsc#1012628). - PM: runtime: Replace inline function pm_runtime_callbacks_present() (bsc#1012628). - cpuidle: Fix ARM_QCOM_SPM_CPUIDLE configuration (bsc#1012628). - ACPI: CPPC: Replace cppc_attr with kobj_attribute (bsc#1012628). - crypto: allwinner - add missing CRYPTO_ prefix (bsc#1012628). - crypto: sun8i-ss - Fix memory leak of pad (bsc#1012628). - crypto: sa2ul - Fix memory leak of rxd (bsc#1012628). - crypto: qat - Fix a double free in adf_create_ring (bsc#1012628). - cpufreq: armada-37xx: Fix setting TBG parent for load levels (bsc#1012628). - clk: mvebu: armada-37xx-periph: remove .set_parent method for CPU PM clock (bsc#1012628). - cpufreq: armada-37xx: Fix the AVS value for load L1 (bsc#1012628). - clk: mvebu: armada-37xx-periph: Fix switching CPU freq from 250 Mhz to 1 GHz (bsc#1012628). - clk: mvebu: armada-37xx-periph: Fix workaround for switching from L1 to L0 (bsc#1012628). - cpufreq: armada-37xx: Fix driver cleanup when registration failed (bsc#1012628). - cpufreq: armada-37xx: Fix determining base CPU frequency (bsc#1012628). - spi: spi-zynqmp-gqspi: use wait_for_completion_timeout to make zynqmp_qspi_exec_op not interruptible (bsc#1012628). - spi: spi-zynqmp-gqspi: add mutex locking for exec_op (bsc#1012628). - spi: spi-zynqmp-gqspi: transmit dummy circles by using the controller's internal functionality (bsc#1012628). - spi: spi-zynqmp-gqspi: fix incorrect operating mode in zynqmp_qspi_read_op (bsc#1012628). - spi: fsl-lpspi: Fix PM reference leak in lpspi_prepare_xfer_hardware() (bsc#1012628). - usb: gadget: r8a66597: Add missing null check on return from platform_get_resource (bsc#1012628). - USB: cdc-acm: fix unprivileged TIOCCSERIAL (bsc#1012628). - USB: cdc-acm: fix TIOCGSERIAL implementation (bsc#1012628). - tty: actually undefine superseded ASYNC flags (bsc#1012628). - tty: fix return value for unsupported ioctls (bsc#1012628). - tty: fix return value for unsupported termiox ioctls (bsc#1012628). - serial: core: return early on unsupported ioctls (bsc#1012628). - firmware: qcom-scm: Fix QCOM_SCM configuration (bsc#1012628). - node: fix device cleanups in error handling code (bsc#1012628). - crypto: chelsio - Read rxchannel-id from firmware (bsc#1012628). - usbip: vudc: fix missing unlock on error in usbip_sockfd_store() (bsc#1012628). - m68k: Add missing mmap_read_lock() to sys_cacheflush() (bsc#1012628). - usb: cdnsp: Fixes issue with Configure Endpoint command (bsc#1012628). - spi: spi-zynqmp-gqspi: Fix missing unlock on error in zynqmp_qspi_exec_op() (bsc#1012628). - memory: renesas-rpc-if: fix possible NULL pointer dereference of resource (bsc#1012628). - memory: samsung: exynos5422-dmc: handle clk_set_parent() failure (bsc#1012628). - security: keys: trusted: fix TPM2 authorizations (bsc#1012628). - char: tpm: fix error return code in tpm_cr50_i2c_tis_recv() (bsc#1012628). - platform/x86: pmc_atom: Match all Beckhoff Automation baytrail boards with critclk_systems DMI table (bsc#1012628). - usb: typec: tcpm: Honour pSnkStdby requirement during negotiation (bsc#1012628). - spi: spi-zynqmp-gqspi: Fix runtime PM imbalance in zynqmp_qspi_probe (bsc#1012628). - ARM: dts: aspeed: Rainier: Fix humidity sensor bus address (bsc#1012628). - Drivers: hv: vmbus: Use after free in __vmbus_open() (bsc#1012628). - crypto: arm64/aes-ce - deal with oversight in new CTR carry code (bsc#1012628). - spi: spi-zynqmp-gqspi: fix clk_enable/disable imbalance issue (bsc#1012628). - spi: spi-zynqmp-gqspi: fix hang issue when suspend/resume (bsc#1012628). - spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op (bsc#1012628). - spi: spi-zynqmp-gqspi: return -ENOMEM if dma_map_single fails (bsc#1012628). - btrfs: zoned: move log tree node allocation out of log_root_tree->log_mutex (bsc#1012628). - btrfs: zoned: bail out in btrfs_alloc_chunk for bad input (bsc#1012628). - x86/platform/uv: Fix !KEXEC build failure (bsc#1012628). - hwmon: (pmbus/pxe1610) don't bail out when not all pages are active (bsc#1012628). - platform/surface: aggregator: fix a bit test (bsc#1012628). - Drivers: hv: vmbus: Increase wait time for VMbus unload (bsc#1012628). - PM: hibernate: x86: Use crc32 instead of md5 for hibernation e820 integrity check (bsc#1012628). - usb: dwc2: Fix host mode hibernation exit with remote wakeup flow (bsc#1012628). - usb: dwc2: Fix hibernation between host and device modes (bsc#1012628). - ttyprintk: Add TTY hangup callback (bsc#1012628). - serial: omap: don't disable rs485 if rts gpio is missing (bsc#1012628). - serial: omap: fix rs485 half-duplex filtering (bsc#1012628). - spi: tools: make a symbolic link to the header file spi.h (bsc#1012628). - xen-blkback: fix compatibility bug with single page rings (bsc#1012628). - soc: aspeed: fix a ternary sign expansion bug (bsc#1012628). - drm/tilcdc: send vblank event when disabling crtc (bsc#1012628). - drm/stm: Fix bus_flags handling (bsc#1012628). - drm/amd/display: Fix off by one in hdmi_14_process_transaction() (bsc#1012628). - drm/mcde/panel: Inverse misunderstood flag (bsc#1012628). - scsi: lpfc: Fix null pointer dereference in lpfc_prep_els_iocb() (bsc#1012628). - sched/fair: Fix shift-out-of-bounds in load_balance() (bsc#1012628). - printk: limit second loop of syslog_print_all (bsc#1012628). - afs: Fix updating of i_mode due to 3rd party change (bsc#1012628). - rcu: Remove spurious instrumentation_end() in rcu_nmi_enter() (bsc#1012628). - media: mtk: fix mtk-smi dependency (bsc#1012628). - media: vivid: fix assignment of dev->fbuf_out_flags (bsc#1012628). - media: saa7134: use sg_dma_len when building pgtable (bsc#1012628). - media: saa7146: use sg_dma_len when building pgtable (bsc#1012628). - media: omap4iss: return error code when omap4iss_get() failed (bsc#1012628). - media: rkisp1: rsz: crash fix when setting src format (bsc#1012628). - media: aspeed: fix clock handling logic (bsc#1012628). - drm/panel-simple: Undo enable if HPD never asserts (bsc#1012628). - power: supply: bq27xxx: fix sign of current_now for newer ICs (bsc#1012628). - drm/probe-helper: Check epoch counter in output_poll_execute() (bsc#1012628). - media: venus: core: Fix some resource leaks in the error path of 'venus_probe()' (bsc#1012628). - media: platform: sunxi: sun6i-csi: fix error return code of sun6i_video_start_streaming() (bsc#1012628). - media: m88ds3103: fix return value check in m88ds3103_probe() (bsc#1012628). - media: docs: Fix data organization of MEDIA_BUS_FMT_RGB101010_1X30 (bsc#1012628). - media: [next] staging: media: atomisp: fix memory leak of object flash (bsc#1012628). - media: atomisp: Fixed error handling path (bsc#1012628). - media: m88rs6000t: avoid potential out-of-bounds reads on arrays (bsc#1012628). - media: atomisp: Fix use after free in atomisp_alloc_css_stat_bufs() (bsc#1012628). - x86/kprobes: Retrieve correct opcode for group instruction (bsc#1012628). - drm/amdkfd: fix build error with AMD_IOMMU_V2=m (bsc#1012628). - drm/amdkfd: Fix recursive lock warnings (bsc#1012628). - drm/amd/display: Free local data after use (bsc#1012628). - of: overlay: fix for_each_child.cocci warnings (bsc#1012628). - scsi: qla2xxx: Check kzalloc() return value (bsc#1012628). - x86/kprobes: Fix to check non boostable prefixes correctly (bsc#1012628). - drm/omap: dsi: Add missing IRQF_ONESHOT (bsc#1012628). - selftests: fix prepending $(OUTPUT) to $(TEST_PROGS) (bsc#1012628). - pata_arasan_cf: fix IRQ check (bsc#1012628). - pata_ipx4xx_cf: fix IRQ check (bsc#1012628). - sata_mv: add IRQ checks (bsc#1012628). - ata: libahci_platform: fix IRQ check (bsc#1012628). - seccomp: Fix CONFIG tests for Seccomp_filters (bsc#1012628). - drm/mediatek: Switch the hdmi bridge ops to the atomic versions (bsc#1012628). - drm/mediatek: Don't support hdmi connector creation (bsc#1012628). - nvme-tcp: block BH in sk state_change sk callback (bsc#1012628). - nvmet-tcp: fix incorrect locking in state_change sk callback (bsc#1012628). - clk: imx: Fix reparenting of UARTs not associated with stdout (bsc#1012628). - power: supply: bq25980: Move props from battery node (bsc#1012628). - nvme: retrigger ANA log update if group descriptor isn't found (bsc#1012628). - media: ccs: Fix sub-device function (bsc#1012628). - media: ipu3-cio2: Fix pixel-rate derived link frequency (bsc#1012628). - media: i2c: imx219: Move out locking/unlocking of vflip and hflip controls from imx219_set_stream (bsc#1012628). - media: i2c: imx219: Balance runtime PM use-count (bsc#1012628). - media: v4l2-ctrls.c: fix race condition in hdl->requests list (bsc#1012628). - media: rkvdec: Do not require all controls to be present in every request (bsc#1012628). - vfio/fsl-mc: Re-order vfio_fsl_mc_probe() (bsc#1012628). - vfio/pci: Move VGA and VF initialization to functions (bsc#1012628). - vfio/pci: Re-order vfio_pci_probe() (bsc#1012628). - drm/msm: Fix debugfs deadlock (bsc#1012628). - drm/msm/dpu: enable DPU_SSPP_QOS_8LVL for SM8250 (bsc#1012628). - vfio/mdev: Do not allow a mdev_type to have a NULL parent pointer (bsc#1012628). - clk: zynqmp: move zynqmp_pll_set_mode out of round_rate callback (bsc#1012628). - clk: zynqmp: pll: add set_pll_mode to check condition in zynqmp_pll_enable (bsc#1012628). - drm: xlnx: zynqmp: fix a memset in zynqmp_dp_train() (bsc#1012628). - media: i2c: rdamc21: Fix warning on u8 cast (bsc#1012628). - clk: qcom: a7-pll: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - clk: qcom: a53-pll: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - clk: qcom: apss-ipq-pll: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - drm/amd/display: use GFP_ATOMIC in dcn20_resource_construct (bsc#1012628). - drm/amd/display: check fb of primary plane (bsc#1012628). - drm/radeon: Fix a missing check bug in radeon_dp_mst_detect() (bsc#1012628). - bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1012628). - clk: uniphier: Fix potential infinite loop (bsc#1012628). - scsi: pm80xx: Increase timeout for pm80xx mpi_uninit_check() (bsc#1012628). - scsi: pm80xx: Fix potential infinite loop (bsc#1012628). - scsi: ufs: ufshcd-pltfrm: Fix deferred probing (bsc#1012628). - scsi: hisi_sas: Fix IRQ checks (bsc#1012628). - scsi: jazz_esp: Add IRQ check (bsc#1012628). - scsi: sun3x_esp: Add IRQ check (bsc#1012628). - scsi: sni_53c710: Add IRQ check (bsc#1012628). - scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1012628). - mailbox: sprd: Introduce refcnt when clients requests/free channels (bsc#1012628). - mfd: stm32-timers: Avoid clearing auto reload register (bsc#1012628). - nvmet-tcp: fix a segmentation fault during io parsing error (bsc#1012628). - nvme-pci: don't simple map sgl when sgls are disabled (bsc#1012628). - media: meson-ge2d: fix rotation parameters (bsc#1012628). - media: cedrus: Fix H265 status definitions (bsc#1012628). - HSI: core: fix resource leaks in hsi_add_client_from_dt() (bsc#1012628). - x86/events/amd/iommu: Fix sysfs type mismatch (bsc#1012628). - perf/amd/uncore: Fix sysfs type mismatch (bsc#1012628). - io_uring: fix overflows checks in provide buffers (bsc#1012628). - block/rnbd-clt-sysfs: Remove copy buffer overlap in rnbd_clt_get_path_name (bsc#1012628). - sched/debug: Fix cgroup_path[] serialization (bsc#1012628). - kthread: Fix PF_KTHREAD vs to_kthread() race (bsc#1012628). - ataflop: potential out of bounds in do_format() (bsc#1012628). - ataflop: fix off by one in ataflop_probe() (bsc#1012628). - drivers/block/null_blk/main: Fix a double free in null_init (bsc#1012628). - xsk: Respect device's headroom and tailroom on generic xmit path (bsc#1012628). - HID: plantronics: Workaround for double volume key presses (bsc#1012628). - perf symbols: Fix dso__fprintf_symbols_by_name() to return the number of printed chars (bsc#1012628). - ASoC: Intel: boards: sof-wm8804: add check for PLL setting (bsc#1012628). - ASoC: Intel: Skylake: Compile when any configuration is selected (bsc#1012628). - RDMA/mlx5: Zero out ODP related items in the mlx5_ib_mr (bsc#1012628). - RDMA/mlx5: Fix query RoCE port (bsc#1012628). - RDMA/mlx5: Fix mlx5 rates to IB rates map (bsc#1012628). - net/mlx5: DR, Add missing vhca_id consume from STEv1 (bsc#1012628). - wilc1000: write value to WILC_INTR2_ENABLE register (bsc#1012628). - KVM: x86/mmu: Retry page faults that hit an invalid memslot (bsc#1012628). - Bluetooth: avoid deadlock between hci_dev->lock and socket lock (bsc#1012628). - net: lapbether: Prevent racing when checking whether the netif is running (bsc#1012628). - libbpf: Add explicit padding to bpf_xdp_set_link_opts (bsc#1012628). - bpftool: Fix maybe-uninitialized warnings (bsc#1012628). - iommu: Check dev->iommu in iommu_dev_xxx functions (bsc#1012628). - iommu/dma: Resurrect the "forcedac" option (bsc#1012628). - iommu/vt-d: Reject unsupported page request modes (bsc#1012628). - ASoC: tegra30: i2s: Restore hardware state on runtime PM resume (bsc#1012628). - net: dsa: bcm_sf2: add function finding RGMII register (bsc#1012628). - net: dsa: bcm_sf2: fix BCM4908 RGMII reg(s) (bsc#1012628). - selftests/bpf: Re-generate vmlinux.h and BPF skeletons if bpftool changed (bsc#1012628). - libbpf: Add explicit padding to btf_dump_emit_type_decl_opts (bsc#1012628). - powerpc/mm: Move the linear_mapping_mutex to the ifdef where it is used (bsc#1012628). - powerpc/fadump: Mark fadump_calculate_reserve_size as __init (bsc#1012628). - powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1012628). - MIPS: fix local_irq_{disable,enable} in asmmacro.h (bsc#1012628). - ima: Fix the error code for restoring the PCR value (bsc#1012628). - inet: use bigger hash table for IP ID generation (bsc#1012628). - pinctrl: pinctrl-single: remove unused parameter (bsc#1012628). - pinctrl: pinctrl-single: fix pcs_pin_dbg_show() when bits_per_mux is not zero (bsc#1012628). - MIPS: loongson64: fix bug when PAGE_SIZE > 16KB (bsc#1012628). - ASoC: wm8960: Remove bitclk relax condition in wm8960_configure_sysclk (bsc#1012628). - iommu/arm-smmu-v3: add bit field SFM into GERROR_ERR_MASK (bsc#1012628). - RDMA/mlx5: Fix drop packet rule in egress table (bsc#1012628). - IB/isert: Fix a use after free in isert_connect_request (bsc#1012628). - powerpc/64s: Fix hash fault to use TRAP accessor (bsc#1012628). - powerpc: Fix HAVE_HARDLOCKUP_DETECTOR_ARCH build configuration (bsc#1012628). - MIPS/bpf: Enable bpf_probe_read{, str}() on MIPS again (bsc#1012628). - gpio: guard gpiochip_irqchip_add_domain() with GPIOLIB_IRQCHIP (bsc#1012628). - fs: dlm: fix missing unlock on error in accept_from_sock() (bsc#1012628). - ASoC: q6afe-clocks: fix reprobing of the driver (bsc#1012628). - ALSA: core: remove redundant spin_lock pair in snd_card_disconnect (bsc#1012628). - net: phy: lan87xx: fix access to wrong register of LAN87xx (bsc#1012628). - udp: skip L4 aggregation for UDP tunnel packets (bsc#1012628). - udp: never accept GSO_FRAGLIST packets (bsc#1012628). - powerpc/pseries: Only register vio drivers if vio bus exists (bsc#1012628). - net/tipc: fix missing destroy_workqueue() on error in tipc_crypto_start() (bsc#1012628). - bug: Remove redundant condition check in report_bug (bsc#1012628). - RDMA/core: Fix corrupted SL on passive side (bsc#1012628). - nfc: pn533: prevent potential memory corruption (bsc#1012628). - net: hns3: Limiting the scope of vector_ring_chain variable (bsc#1012628). - mips: bmips: fix syscon-reboot nodes (bsc#1012628). - KVM: arm64: Fix error return code in init_hyp_mode() (bsc#1012628). - iommu/vt-d: Don't set then clear private data in prq_event_thread() (bsc#1012628). - iommu: Fix a boundary issue to avoid performance drop (bsc#1012628). - iommu/vt-d: Report right snoop capability when using FL for IOVA (bsc#1012628). - iommu/vt-d: Report the right page fault address (bsc#1012628). - iommu/vt-d: Remove WO permissions on second-level paging entries (bsc#1012628). - iommu/vt-d: Invalidate PASID cache when root/context entry changed (bsc#1012628). - ALSA: usb-audio: Add error checks for usb_driver_claim_interface() calls (bsc#1012628). - HID: lenovo: Use brightness_set_blocking callback for setting LEDs brightness (bsc#1012628). - HID: lenovo: Fix lenovo_led_set_tp10ubkbd() error handling (bsc#1012628). - HID: lenovo: Check hid_get_drvdata() returns non NULL in lenovo_event() (bsc#1012628). - HID: lenovo: Map mic-mute button to KEY_F20 instead of KEY_MICMUTE (bsc#1012628). - KVM: arm64: Initialize VCPU mdcr_el2 before loading it (bsc#1012628). - ASoC: simple-card: fix possible uninitialized single_cpu local variable (bsc#1012628). - liquidio: Fix unintented sign extension of a left shift of a u16 (bsc#1012628). - IB/hfi1: Use kzalloc() for mmu_rb_handler allocation (bsc#1012628). - powerpc/64s: Fix pte update for kernel memory on radix (bsc#1012628). - powerpc/pseries: Add key to flags in pSeries_lpar_hpte_updateboltedpp() (bsc#1012628). - powerpc/64s: Use htab_convert_pte_flags() in hash__mark_rodata_ro() (bsc#1012628). - powerpc/perf: Fix PMU constraint check for EBB events (bsc#1012628). - powerpc: iommu: fix build when neither PCI or IBMVIO is set (bsc#1012628). - mac80211: bail out if cipher schemes are invalid (bsc#1012628). - perf vendor events amd: Fix broken L2 Cache Hits from L2 HWPF metric (bsc#1012628). - RDMA/hns: Fix missing assignment of max_inline_data (bsc#1012628). - xfs: fix return of uninitialized value in variable error (bsc#1012628). - rtw88: Fix an error code in rtw_debugfs_set_rsvd_page() (bsc#1012628). - mt7601u: fix always true expression (bsc#1012628). - mt76: mt7615: fix tx skb dma unmap (bsc#1012628). - mt76: mt7915: fix tx skb dma unmap (bsc#1012628). - mt76: mt7921: fix suspend/resume sequence (bsc#1012628). - mt76: mt7921: fix memory leak in mt7921_coredump_work (bsc#1012628). - mt76: connac: fix up the setting for ht40 mode in mt76_connac_mcu_uni_add_bss (bsc#1012628). - mt76: mt7921: fixup rx bitrate statistics (bsc#1012628). - mt76: mt7615: fix memory leak in mt7615_coredump_work (bsc#1012628). - mt76: mt7921: fix aggr length histogram (bsc#1012628). - mt76: mt7915: fix aggr len debugfs node (bsc#1012628). - mt76: mt7921: fix stats register definitions (bsc#1012628). - mt76: mt7615: fix TSF configuration (bsc#1012628). - mt76: mt7615: fix mib stats counter reporting to mac80211 (bsc#1012628). - mt76: mt7915: fix mib stats counter reporting to mac80211 (bsc#1012628). - mt76: connac: fix kernel warning adding monitor interface (bsc#1012628). - mt76: check return value of mt76_txq_send_burst in mt76_txq_schedule_list (bsc#1012628). - mt76: mt7921: fix the base of PCIe interrupt (bsc#1012628). - mt76: mt7921: fix the base of the dynamic remap (bsc#1012628). - mt76: mt7915: fix rxrate reporting (bsc#1012628). - mt76: mt7915: fix txrate reporting (bsc#1012628). - mt76: mt7663: fix when beacon filter is being applied (bsc#1012628). - mt76: mt7663s: make all of packets 4-bytes aligned in sdio tx aggregation (bsc#1012628). - mt76: mt7663s: fix the possible device hang in high traffic (bsc#1012628). - mt76: mt7615: cleanup mcu tx queue in mt7615_dma_reset() (bsc#1012628). - mt76: mt7915: cleanup mcu tx queue in mt7915_dma_reset() (bsc#1012628). - mt76: mt7921: always wake the device in mt7921_remove_interface (bsc#1012628). - mt76: mt7921: fix inappropriate WoW setup with the missing ARP informaiton (bsc#1012628). - mt76: mt7921: fix the dwell time control (bsc#1012628). - KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit (bsc#1012628). - ovl: show "userxattr" in the mount data (bsc#1012628). - ovl: invalidate readdir cache on changes to dir with origin (bsc#1012628). - RDMA/qedr: Fix error return code in qedr_iw_connect() (bsc#1012628). - IB/hfi1: Fix error return code in parse_platform_config() (bsc#1012628). - RDMA/bnxt_re: Fix error return code in bnxt_qplib_cq_process_terminal() (bsc#1012628). - cxgb4: Fix unintentional sign extension issues (bsc#1012628). - net: thunderx: Fix unintentional sign extension issue (bsc#1012628). - mt76: mt7921: fix kernel crash when the firmware fails to download (bsc#1012628). - RDMA/srpt: Fix error return code in srpt_cm_req_recv() (bsc#1012628). - RDMA/rtrs-clt: destroy sysfs after removing session from active list (bsc#1012628). - pinctrl: at91-pio4: Fix slew rate disablement (bsc#1012628). - i2c: cadence: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: img-scb: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: imx: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: omap: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: sprd: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: stm32f7: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: xiic: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: cadence: add IRQ check (bsc#1012628). - i2c: emev2: add IRQ check (bsc#1012628). - i2c: jz4780: add IRQ check (bsc#1012628). - i2c: mlxbf: add IRQ check (bsc#1012628). - i2c: rcar: add IRQ check (bsc#1012628). - i2c: sh7760: add IRQ check (bsc#1012628). - fuse: fix matching of FUSE_DEV_IOC_CLONE command (bsc#1012628). - iwlwifi: rs-fw: don't support stbc for HE 160 (bsc#1012628). - iwlwifi: dbg: disable ini debug in 9000 family and below (bsc#1012628). - powerpc/xive: Drop check on irq_data in xive_core_debug_show() (bsc#1012628). - powerpc/xive: Fix xmon command "dxi" (bsc#1012628). - powerpc/syscall: switch user_exit_irqoff and trace_hardirqs_off order (bsc#1012628). - ASoC: ak5558: correct reset polarity (bsc#1012628). - net/mlx5: Fix bit-wise and with zero (bsc#1012628). - net/packet: remove data races in fanout operations (bsc#1012628). - drm/i915/gvt: Fix error code in intel_gvt_init_device() (bsc#1012628). - iommu/vt-d: Fix an error handling path in 'intel_prepare_irq_remapping()' (bsc#1012628). - iommu/amd: Put newline after closing bracket in warning (bsc#1012628). - perf beauty: Fix fsconfig generator (bsc#1012628). - drm/amdgpu: fix an error code in init_pmu_entry_by_type_and_add() (bsc#1012628). - drm/amd/pm: fix error code in smu_set_power_limit() (bsc#1012628). - MIPS: pci-legacy: stop using of_pci_range_to_resource (bsc#1012628). - powerpc/pseries: extract host bridge from pci_bus prior to bus removal (bsc#1012628). - iommu/mediatek: Always enable the clk on resume (bsc#1012628). - mptcp: fix format specifiers for unsigned int (bsc#1012628). - powerpc/smp: Reintroduce cpu_core_mask (bsc#1012628). - KVM: x86: dump_vmcs should not assume GUEST_IA32_EFER is valid (bsc#1012628). - rtlwifi: 8821ae: upgrade PHY and RF parameters (bsc#1012628). - wlcore: fix overlapping snprintf arguments in debugfs (bsc#1012628). - i2c: sh7760: fix IRQ error path (bsc#1012628). - i2c: mediatek: Fix wrong dma sync flag (bsc#1012628). - mwl8k: Fix a double Free in mwl8k_probe_hw (bsc#1012628). - netfilter: nft_payload: fix C-VLAN offload support (bsc#1012628). - netfilter: nftables_offload: VLAN id needs host byteorder in flow dissector (bsc#1012628). - netfilter: nftables_offload: special ethertype handling for VLAN (bsc#1012628). - vsock/vmci: log once the failed queue pair allocation (bsc#1012628). - libbpf: Initialize the bpf_seq_printf parameters array field by field (bsc#1012628). - net: ethernet: ixp4xx: Set the DMA masks explicitly (bsc#1012628). - gro: fix napi_gro_frags() Fast GRO breakage due to IP alignment check (bsc#1012628). - RDMA/cxgb4: add missing qpid increment (bsc#1012628). - RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails (bsc#1012628). - ALSA: usb: midi: don't return -ENOMEM when usb_urb_ep_type_check fails (bsc#1012628). - sfc: ef10: fix TX queue lookup in TX event handling (bsc#1012628). - vsock/virtio: free queued packets when closing socket (bsc#1012628). - net: marvell: prestera: fix port event handling on init (bsc#1012628). - net: davinci_emac: Fix incorrect masking of tx and rx error channel (bsc#1012628). - rtw88: refine napi deinit flow (bsc#1012628). - mt76: mt7615: fix memleak when mt7615_unregister_device() (bsc#1012628). - mt76: mt7915: fix memleak when mt7915_unregister_device() (bsc#1012628). - mt76: mt7921: run mt7921_mcu_fw_log_2_host holding mt76 mutex (bsc#1012628). - powerpc/pseries/iommu: Fix window size for direct mapping with pmem (bsc#1012628). - crypto: ccp: Detect and reject "invalid" addresses destined for PSP (bsc#1012628). - net: dsa: mv88e6xxx: Fix off-by-one in VTU devlink region size (bsc#1012628). - nfp: devlink: initialize the devlink port attribute "lanes" (bsc#1012628). - net: stmmac: fix TSO and TBS feature enabling during driver open (bsc#1012628). - net: renesas: ravb: Fix a stuck issue when a lot of frames are received (bsc#1012628). - net: phy: intel-xway: enable integrated led functions (bsc#1012628). - mt76: mt7615: Fix a dereference of pointer sta before it is null checked (bsc#1012628). - mt76: mt7921: fix possible invalid register access (bsc#1012628). - RDMA/rxe: Fix a bug in rxe_fill_ip_info() (bsc#1012628). - RDMA/core: Add CM to restrack after successful attachment to a device (bsc#1012628). - powerpc/64: Fix the definition of the fixmap area (bsc#1012628). - ath9k: Fix error check in ath9k_hw_read_revisions() for PCI devices (bsc#1012628). - ath10k: Fix a use after free in ath10k_htc_send_bundle (bsc#1012628). - ath10k: Fix ath10k_wmi_tlv_op_pull_peer_stats_info() unlock without lock (bsc#1012628). - wlcore: Fix buffer overrun by snprintf due to incorrect buffer size (bsc#1012628). - powerpc/perf: Fix the threshold event selection for memory events in power10 (bsc#1012628). - powerpc/52xx: Fix an invalid ASM expression ('addi' used instead of 'add') (bsc#1012628). - net: phy: marvell: fix m88e1011_set_downshift (bsc#1012628). - net: phy: marvell: fix m88e1111_set_downshift (bsc#1012628). - net: enetc: fix link error again (bsc#1012628). - net, xdp: Update pkt_type if generic XDP changes unicast MAC (bsc#1012628). - bnxt_en: fix ternary sign extension bug in bnxt_show_temp() (bsc#1012628). - ARM: dts: uniphier: Change phy-mode to RGMII-ID to enable delay pins for RTL8211E (bsc#1012628). - arm64: dts: uniphier: Change phy-mode to RGMII-ID to enable delay pins for RTL8211E (bsc#1012628). - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (bsc#1012628). - selftests: net: mirror_gre_vlan_bridge_1q: Make an FDB entry static (bsc#1012628). - selftests: mlxsw: Remove a redundant if statement in port_scale test (bsc#1012628). - selftests: mlxsw: Remove a redundant if statement in tc_flower_scale test (bsc#1012628). - mptcp: Retransmit DATA_FIN (bsc#1012628). - bnxt_en: Fix RX consumer index logic in the error path (bsc#1012628). - KVM: VMX: Intercept FS/GS_BASE MSR accesses for 32-bit KVM (bsc#1012628). - KVM: SVM: Zero out the VMCB array used to track SEV ASID association (bsc#1012628). - KVM: SVM: Free sev_asid_bitmap during init if SEV setup fails (bsc#1012628). - KVM: SVM: Disable SEV/SEV-ES if NPT is disabled (bsc#1012628). - net/sched: act_ct: fix wild memory access when clearing fragments (bsc#1012628). - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (bsc#1012628). - selftests/bpf: Fix BPF_CORE_READ_BITFIELD() macro (bsc#1012628). - selftests/bpf: Fix field existence CO-RE reloc tests (bsc#1012628). - selftests/bpf: Fix core_reloc test runner (bsc#1012628). - bpf: Fix propagation of 32 bit unsigned bounds from 64 bit bounds (bsc#1012628). - RDMA/siw: Fix a use after free in siw_alloc_mr (bsc#1012628). - RDMA/bnxt_re: Fix a double free in bnxt_qplib_alloc_res (bsc#1012628). - net: bridge: mcast: fix broken length + header check for MRDv6 Adv (bsc#1012628). - net: dsa: mv88e6xxx: Fix 6095/6097/6185 ports in non-SERDES CMODE (bsc#1012628). - net:nfc:digital: Fix a double free in digital_tg_recv_dep_req (bsc#1012628). - perf tools: Change fields type in perf_record_time_conv (bsc#1012628). - perf jit: Let convert_timestamp() to be backwards-compatible (bsc#1012628). - perf session: Add swap operation for event TIME_CONV (bsc#1012628). - ia64: ensure proper NUMA distance and possible map initialization (bsc#1012628). - ia64: fix EFI_DEBUG build (bsc#1012628). - kfifo: fix ternary sign extension bugs (bsc#1012628). - mm: memcontrol: slab: fix obtain a reference to a freeing memcg (bsc#1012628). - mm/sparse: add the missing sparse_buffer_fini() in error branch (bsc#1012628). - mm/memory-failure: unnecessary amount of unmapping (bsc#1012628). - afs: Fix speculative status fetches (bsc#1012628). - bpf: Fix alu32 const subreg bound tracking on bitwise operations (bsc#1012628). - bpf, ringbuf: Deny reserve of buffers larger than ringbuf (bsc#1012628). - bpf: Prevent writable memory-mapping of read-only ringbuf pages (bsc#1012628). - net: Only allow init netns to set default tcp cong to a restricted algo (bsc#1012628). - smp: Fix smp_call_function_single_async prototype (bsc#1012628). - Refresh patches.suse/firmware-xilinx-Add-pinctrl-support.patch. - Update config files. - commit f003acc - drm/radeon: use the dummy page for GART if needed (bsc#1185516). - commit 25fe027 - ath11k: Clear the fragment cache during key install (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - ath10k: Validate first subframe of A-MSDU before processing the list (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - ath10k: Fix TKIP Michael MIC verification for PCIe (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - ath10k: drop MPDU which has discard flag set by firmware for SDIO (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - ath10k: drop fragments with multicast DA for SDIO (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - ath10k: drop fragments with multicast DA for PCIe (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - ath10k: add CCMP PN replay protection for fragmented frames for PCIe (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: extend protection against mixed key and fragment cache attacks (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: do not accept/forward invalid EAPOL frames (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: prevent attacks on TKIP/WEP as well (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: check defrag PN against current frame (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: add fragment cache to sta_info (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: drop A-MSDUs on old ciphers (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - cfg80211: mitigate A-MSDU aggregation attacks (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: properly handle A-MSDUs that start with an RFC 1042 header (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: prevent mixed key and fragment cache attacks (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: assure all fragments are encrypted (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - commit 469e487 ==== kio ==== Subpackages: kio-core - Add patches to fix issues with MimeTypeFinderJob (kde#398908): * 0001-MimeTypeFinderJob-Resolve-symlinks-for-a-local-file.patch * 0002-MimeTypeFinderJob-the-StatJob-details-should-include.patch * 0003-kio_file-pass-the-absolute-path-to-QMimeDatabase-mim.patch ==== krb5 ==== - Build with full Cyrus SASL support * Negotiating SASL credentials with an EXTERNAL bind mechanism requires interaction. Kerberos provides its own interaction function that skips all interaction, thus preventing the mechanism from working. ==== less ==== Version update (581.2 -> 586) - update to 586: * Make less able to read lesskey source files (deprecating lesskey). * If XDG_CONFIG_HOME is set, find lesskey source file in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey. * If XDG_DATA_HOME is set, find and store history file in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst. * Add the --lesskey-src option. * Add the --file-size option. * Fix bug which could leave terminal in mouse-reporting mode after exiting less. * Fix bug which caused failure to respond to window resize. * Fix backslash bug searching in tag file. ==== libX11 ==== Version update (1.7.0 -> 1.7.1) Subpackages: libX11-6 libX11-data libX11-xcb1 - Update to version 1.7.1 * security update for CVE-2021-31535 (bsc#1182506) - supersedes U_CVE-2021-31535.patch - U_CVE-2021-31535.patch * adds missing request length checks in libX11 (CVE-2021-31535, bsc#1182506) ==== libapparmor ==== - add abstractions-php8.diff to support PHP8 in abstractions/php (boo#1186267) ==== libcontainers-common ==== - Update common to 0.38.2 - Update storage to 1.31.0 - Update image to 5.12.0 ==== libepoxy ==== Version update (1.5.5 -> 1.5.8) - Update to version 1.5.8: + Revert changes from PR #238 / #229 + Fixes regressions: #240, #252, #253 - Update to version 1.5.7: * Remove type redefinition - Includes changes from 1.5.6: * Fix issue loading OpenGL/GLX/EGL libraries * Expose dependency variables in pkg-config file * Close output objects when generating files ==== libidn2 ==== Version update (2.3.0 -> 2.3.1) - libidn2 2.3.1: * Implement full roundtrip for lookup functionality * Fix domain too long error * Updated gnulib files and various build fixes * verify source signature again ==== libinput ==== Version update (1.17.2 -> 1.17.3) - Update to release 1.17.3 * Add quirk for Lenovo Legion 5 Pro. ==== libphonenumber ==== Version update (8.12.22 -> 8.12.23) - Update to version 8.12.23: * Updated phone metadata for region code(s): BF, CI, RW, SG, UG, US, UZ * Updated short number metadata for region code(s): DZ * New geocoding data for country calling code(s): 1572 (en) * Updated geocoding data for country calling code(s): 225 (en) * Updated carrier data for country calling code(s): 65 (en), 225 (en), 226 (en), 250 (en), 256 (en), 998 (en) * Updated / refreshed time zone meta data ==== libportal ==== Version update (0.3 -> 0.4) - Update to version 0.4: + Make GTK4 support work with GTK 4.0 + Qt5 support + OpenURI: Support write access + Build fixes + Add more tests + Require GLib 2.58 ==== libqmi ==== Version update (1.28.2 -> 1.28.4) - Update to version 1.28.4 * libqmi-glib: - Add 'wwan' subsystem support. - Plug memleak when allocating new links. - Plug memleak when QmiDevice is opened multiple times. - Fix build when ARPHRD_RAWIP isn't defined in libc. * gir: - Flag all output TLV readers as optional. - Add explicit ownership information in the string and struct return annotations. * collections: - basic: added WMS Send ACK * qmicli: - Fix double GError when both 'Extended List' and 'Bandwidth List' are missing in --nas-get-rf-band-info. * Several other minor improvements and fixes. ==== libqt5-qtbase ==== Subpackages: libQt5Concurrent5 libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5 - Add trailing newline to qtlogging.ini ==== libqt5-qtwayland ==== Subpackages: libQt5WaylandClient5 libQt5WaylandCompositor5 - Add more commits from KDE's 5.15 branch: * 0008-Fix-memory-leak-in-QWaylandGLContext.patch (QTBUG-85608) * 0009-Client-Send-set_window_geometry-only-once-configured.patch * 0010-Translate-opaque-area-with-frame-margins.patch * 0011-Client-Send-exposeEvent-to-parent-on-subsurface-posi.patch (QTBUG-86177) * 0012-Get-correct-decoration-margins-region.patch * 0013-xdgshell-Tell-the-compositor-the-screen-we-re-expect.patch * 0014-Fix-compilation.patch * 0015-client-Allow-QWaylandInputContext-to-accept-composed.patch (kde#405388) * 0016-Client-Announce-an-output-after-receiving-more-compl.patch (kde#435124) * 0017-Fix-issue-with-repeated-window-size-changes.patch * 0018-Include-locale.h-for-setlocale-LC_CTYPE.patch - Add commits from upstream's 5.15 branch: * 0002-Make-setting-QT_SCALE_FACTOR-work-on-Wayland.patch (QTBUG-87762) * 0003-Do-not-try-to-eglMakeCurrent-for-unintended-case.patch (QTBUG-88277) * 0004-Make-setting-QT_SCALE_FACTOR-work-on-Wayland.patch (QTBUG-87762, QTBUG-88064) * 0005-Ensure-that-grabbing-is-performed-in-correct-context.patch (QTBUG-87597) * 0006-Fix-leaked-subsurface-wayland-items.patch (QTBUG-88782) - Add commit from KDE's 5.15 branch: * 0007-Use-qWarning-and-_exit-instead-of-qFatal-for-wayland.patch ==== librsvg ==== Version update (2.50.5 -> 2.50.6) Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0 - Update to version 2.50.6: + Librsvg now requires at least Pango 1.44. + glgo#GNOME/librsvg#730: Incorrect text spacing when the transform is not 1:1. You can see this when a small font-size is scaled up due to a transform. It is less visible for a large font-size scaled down. + glgo#GNOME/librsvg#704: Fix circle/ellipse in paths when they are made out of a single Arc command. ==== libsigc++2 ==== Version update (2.10.6 -> 2.10.7) - Update to version 2.10.7: + Meson build: - Make it possible to use sigc++ as a subproject. - Fix dependency on files generated from .h.m4 files. - No implicit_include_directories. - Make quiet installations possible. - Fix build as subproject without building documentation. + Documentation fixes. ==== libsrtp2 ==== - Add 0001-Adjust-.pc-file-not-to-expose-used-crypto-library.patch [boo#1185931] ==== libtirpc ==== Version update (1.3.1 -> 1.3.2) Subpackages: libtirpc-netconfig libtirpc3 - update to 1.3.2: * Replace the final SunRPC licenses with BSD licenses * blacklist: Add a few more well known ports * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS ==== libwacom ==== Version update (1.6 -> 1.10) Subpackages: libwacom-data libwacom2 - update to 1.10: - Duplicate matches in /etc no longer cause conflicts with the system-provided .tablet files - libwacom-list-local-devices now prints YAML by default - New tools: - libwacom-list-devices lists all supported devices - libwacom-update-db to update the db after adding tablet files - New devices: - Elan 2514 variant 25BF - Huion H640P - Lenovo X1 Yoga Gen 6 - Samsung CHromebook Pro - libwacom can now read tablet and stylus files from /etc/libwacom - New tool: libwacom-show-stylus to interactively show stylus IDs and serial numbers - New devices: - HP Envy x360, Pro Tablet 508 - Lenovo X1 Yoga Gen5, Yoga6, Ideapad Flex 5, Yoga 7, Yoga C650, L13 Yoga - Microsoft Surface Go - New devices: - Dell XPS 15 7590 - HP EliteBook x360 (830 and 1030), Spectre x360 - Lenovo Thinkpad P15 Gen1, Yoga, Yoga 3, Yoga 11e, X13 Yoga - New devices: - Dell XPS 13 2-in-1 9310 - Lenovo IdeaPad Flex 14API, Flex 5 - HP Envy x360, EliteBook x360 - Huawei MateBook HZ-W19 - XP Pen Star G640 ==== llvm12 ==== - Set memory limits for DWZ to 4x. ==== logrotate ==== Version update (3.18.0 -> 3.18.1) - update to 3.18.1: * fix memory leaks on error-handling paths * make `renamecopy` and `copytruncate` override each other * improve error handling in the parser of configuration files * improve user experience for non-privileged users of logrotate ==== lua54 ==== Subpackages: liblua5_4-5 - Fix doc location (boo#1186233) ==== mdadm ==== - Grow: be careful of corrupt dev_roles list (bsc#1181619) 0117-Grow-be-careful-of-corrupt-dev_roles-list.patch - imsm: nvme multipath support (bsc#1175758) 0116-imsm-nvme-multipath-support.patch ==== mozilla-nspr ==== Version update (4.30 -> 4.31) - update to version 4.31: * Lock access to PRCallOnceType members in PR_CallOnce* for thread safety bmo#1686138 ==== mozilla-nss ==== Version update (3.63.1 -> 3.64) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs - update to NSS 3.64 * bmo#1705286 - Properly detect mips64. * bmo#1687164 - Introduce NSS_DISABLE_CRYPTO_VSX and disable_crypto_vsx. * bmo#1698320 - replace __builtin_cpu_supports("vsx") with ppc_crypto_support() for clang. * bmo#1613235 - Add POWER ChaCha20 stream cipher vector acceleration. ==== multipath-tools ==== Version update (0.8.5+30+suse.633836e -> 0.8.6+10+suse.4771137) Subpackages: kpartx libmpath0 - Update to version 0.8.6+10+suse.47711374: * Github workflows: add CI for SUSE-specific branches - Disabled LTO for multipath-tools * The test for is_valid_path fails if LTO is enabled, just disabling it for %check is insufficient. ==== nautilus ==== Subpackages: gnome-shell-search-provider-nautilus libnautilus-extension1 - Drop baselibs.conf: there is nothing depending on the xxbit library anymore. ==== pango ==== Version update (1.48.4 -> 1.48.5) Subpackages: libpango-1_0-0 typelib-1_0-Pango-1_0 - Update to version 1.48.5: + Only initialize fontconfig once. + Add missing deprecation notices. + Add some missing apis to the markup docs. + Speed up Emoji classification. + Fix hangs and memory leaks. + Don't insert hyphens at word boundaries. + Handle empty lines better. + Avoid width fluctuations with ellipsized text. + Add a utility to show text segmentation. ==== patterns-base ==== Subpackages: patterns-base-base patterns-base-bootloader patterns-base-minimal_base patterns-base-x11 - Suggest openssl from patterns-base-base: in case something requires /usr/bin/openssl or openssl(cli), we want to declare openssl as our default. - Some enhanced_base cleanup * alsa-plugins will be pulled in by alsa if needed * cronie is not needed in favor of systemd timers * The cups server is not needed in general * postfix used to be required by cron but not anymore today * cyrus-sasl will be pulled in by others if needed * openslp will be pulled in by rsync so far * translation-update is for build systems only * udev is pulled in by systemd if needed * perl-TermReadLine-Gnu ??? ==== patterns-microos ==== Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-base-microdnf patterns-microos-base-packagekit patterns-microos-base-zypper patterns-microos-basesystem patterns-microos-cloud patterns-microos-cockpit patterns-microos-defaults patterns-microos-desktop-common patterns-microos-desktop-gnome patterns-microos-desktop-kde patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-selinux patterns-microos-sssd_ldap - Drop partitionmanager due to bsc#1178848. We'll revisit when that is fixed. - make cups-pk-helper conditional to PackageKit - add qemu-guest-agent to the DVD, to improve experience in case we install in a VM - add some cups and printing related packages so that a new printer can actually be succesfully added (tested with GNOME only) - add some disk handling GUI tools (for partitioning USB keys, ext. disks, etc) for both GNOME and KDE - Conditionally install cockpit-packagekit in the Cockpit pattern if the PackageKit pattern is installed to allow system updates through Cockpit on package managed MicroOS systems. - Fix previous changelog entry to be formatted correctly ==== perl-HTTP-Message ==== Version update (6.31 -> 6.32) - updated to 6.32 see /usr/share/doc/packages/perl-HTTP-Message/Changes 6.32 2021-05-18 18:54:27Z - Use File::Spec for MSWin32 on Content-Disposition filename (GH#157) (tzccinct) ==== permissions ==== Version update (1550_20210125 -> 1550_20210518) Subpackages: chkstat permissions-config - Update to version 20210518: * whitelist please (bsc#1183669) - Update to version 20210518: * Fix enlightenment paths for 32-bit architectures ==== pipewire ==== Version update (0.3.27 -> 0.3.28) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-modules pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to 0.3.28 * Highlights - Freewheeling was implemented. This makes it possible to export projects in ardour. - A new powerful filter-chain module was added that can be used to created all kinds of filter-chains from ladspa and builtin plugins. - Many more pulseaudio modules are now implemented: module-ladspa-sink, module-ladspa-source, module-pipe-sink, module-tunnel-sink, module-tunnel-source, module-zeroconf-discover - Fix a bug where devices would not appear after logout/login. - Fix a bug where the volume was reset to 0 and devices would have no audio. - Config files are now installed in the data dir, system overrides in /etc/pipewire and $HOME are checked first. * PipeWire - Implement freewheeling for JACK clients - Add filter-chain module that can be used to construct arbitrary graphs from ladspa and builtin plugins. - Add new property to easily set algorithm params - Add module-pulse-tunnel to tunnel audio to and from a PulseAudio compatible server. - Add a avahi zeroconf discover module, create pulse-tunnel when PulseAudio devices are announced. - Config files are now installed in the data dir, system overrides in /etc/pipewire and $HOME are checked first. - Applications now have their monitor ports named with the "monitor" prefix to avoid confusion with the output ports. - LICENSE clarifications. * GStreamer - fixes to the pipewiresink plugin. * SPA plugins - Fix a bug where the volume was reset to 0 - Add events to dbus plugin. This can be used to detect dbus disconnects. * Media-session - Handle dbus disconnect. - Handle device reservation errors. * PulseAudio server - Implement module-ladspa-sink and a new PipeWire-only module-ladspa-source - Implement module-pipe-sink - Implement module-tunnel-sink and module-tunnel-source - Fix a bug with module argument parsing - Implement module-zeroconf-discover * ALSA plugin - improve error handling - Add %bcond_with aptx conditional to let 3rd parties to enable aptX support. ==== polkit-default-privs ==== Version update (1550+20210503.88baaca -> 1550+20210520.336dcea) - Update to version 1550+20210520.336dcea: * whitelist incremental libvirt org.libvirt.api.node-device.delete (bsc#1186270) - Update to version 1550+20210517.56da22d: * Add systemd homed (boo#1185285) ==== poppler ==== Version update (21.04.0 -> 21.05.0) Subpackages: libpoppler-cpp0 libpoppler-glib8 - Update to 21.05.0: core: * Fix crashes in malformed files * Export SplashFont* symbols used by Scribus * Minor code improvements glib: * Enhance find to support multi-line matching qt5/qt6: * Make sure new signatures are always properly oriented * Allow to pass the border width when signing utils: * pdftoppm: Fix regression when using single scaleTo. - Drop Export-SplashFont-symbols-used-by-Scribus.patch as the change was upstreamed ==== poppler-qt5 ==== Version update (21.04.0 -> 21.05.0) - Update to 21.05.0: core: * Fix crashes in malformed files * Export SplashFont* symbols used by Scribus * Minor code improvements glib: * Enhance find to support multi-line matching qt5/qt6: * Make sure new signatures are always properly oriented * Allow to pass the border width when signing utils: * pdftoppm: Fix regression when using single scaleTo. - Drop Export-SplashFont-symbols-used-by-Scribus.patch as the change was upstreamed ==== psmisc ==== - Do not change CAP within spec file (boo#1186258) - Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch * Fix bsc#1185208 to make private mount namespaces work as well as to distinguish NFS mounts from same remote device share. ==== python-PyJWT ==== Version update (2.0.1 -> 2.1.0) - update to 2.1.0: - Allow claims validation without making JWT signature validation mandatory. ` - Remove padding from JWK test data. ` - Make `kty` mandatory in JWK to be compliant with RFC7517. ` - Allow JWK without `alg` to be compliant with RFC7517. ` - Allow to verify with private key on ECAlgorithm, as well as on Ed25519Algorithm. ` - Add caching by default to PyJWKClient ` - Add missing exceptions.InvalidKeyError to jwt module __init__ imports ` - Add support for ES256K algorithm ` - Add `from_jwk()` to Ed25519Algorithm ` - Add `to_jwk()` to Ed25519Algorithm ` - Export `PyJWK` and `PyJWKSet` ==== python-asn1crypto ==== - %check: use %pyunittest rpm macro ==== python-idna ==== - %check: use %pyunittest rpm macro ==== python-jsonpatch ==== Version update (1.31 -> 1.32) - update to 1.32: * take_index causing 'move' of incorrect values due to bad True==1 comparison ==== python-jsonschema ==== - %check: use %pytest rpm macro ==== python-networkx ==== Version update (2.5 -> 2.5.1) - update to 2.5.1: * pin requirements ==== python-oauthlib ==== - %check: use %pyunittest rpm macro ==== python-pyasn1 ==== - %check: use %pyunittest rpm macro ==== python-pytz ==== - %check: use %pyunittest rpm macro ==== rpm ==== - auto-config-update-aarch64-ppc64le.diff: Treat missing timestamp as infinitely old. ==== runc ==== Version update (1.0.0~rc94 -> 1.0.0~rc95) - Update to runc v1.0.0~rc95. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95 This release of runc contains a fix for CVE-2021-30465, and users are strongly recommended to update (especially if you are providing semi-limited access to spawn containers to untrusted users). bsc#1185405 ==== selinux-policy ==== Subpackages: selinux-policy-targeted - allow systemd to watch /usr, /usr/lib, /etc, /etc/pki as we have path units that trigger on changes in those. Added fix_systemd_watch.patch - own /usr/share/selinux/packages/$SELINUXTYPE/ and /var/lib/selinux/$SELINUXTYPE/active/modules/* to allow packages to install files there - allow cockpit socket to bind nodes (fix_cockpit.patch) - use %autosetup to get rid of endless patch lines ==== sgml-skel ==== - %post uses sed, so add `Requires(post): sed`. ==== signon-plugin-oauth2 ==== Version update (0.24 -> 0.25) - Update to version 0.25 * OAuth2: try using specialized hostname first, use "Host" as fallback only * OAuth1: add UserAgent parameter * OAuth2: pass token query in request body * OAuth2: always try normal authentication if refresh token fails * OAuth2: let the client read all extra info from the response * Plugin: implement also new AuthPluginInterface2 ==== snapper ==== Subpackages: libsnapper5 - fixed systemd sandboxing (bsc#1186095) ==== sssd ==== Version update (2.4.2 -> 2.5.0) Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap - Update to release 2.5.0 * Added support for automatic renewal of renewable TGTs that are stored in KCM ccache. This can be enabled by setting tgt_renewal = true. See the sssd-kcm man page for more details. This feature requires MIT Kerberos krb5-1.19-0.beta2.3 or higher. * ad_gpo_implicit_deny is now respected even if there are no applicable GPOs present. ==== telepathy-logger ==== Subpackages: libtelepathy-logger3 typelib-1_0-TelepathyLogger-0_2 - Normalize patch tag line. ==== u-boot-rpiarm64 ==== Subpackages: u-boot-rpiarm64-doc * Add rockpi-n10-rk3399pro * Several fixes and cleanups for RK3399/3328 boards: - Replace repeated board list with is_rk3399/is_rk3328 define - Fix non-functional rock960, copy bl31.elf - Remove "make u-boot.itb", already part of "all" target * Remove obsolete manual generation of SOURCE_DATE_EPOCH ==== vim ==== Version update (8.2.2800 -> 8.2.2850) Subpackages: vim-data-common vim-small - Updated to version 8.2.2850, fixes the following problems * After a timer displays text a hit-enter prompt is given. * Free Pascal makefile not recognized. * Vim9: illegal memory access. * Flicker when the popup menu has an info popup. * Setting buffer local mapping with mapset() changes global mapping. * Vim9: cannot use legacy syntax in Vim9 script. * Vim9: using "++nr" as a command might not work. * Build fails with tiny features. * Vim9: increment and decrement not sufficiently tested. * Vim9: :def function compilation fails when using :legacy. * Vim9: crash when calling a function in a substitute expression. * Vim9: error for missing white space doesn't say where it is missing * Vim9: still crash when using substitute expression. * Cannot grep using fuzzy matching. * Vim9: unused variable. (John Marriott) * Status line flickers when redrawing popup menu info. * Vim9: comment below expression in lambda causes problems. * Vim9: script sourcing continues after an error. * No jump added to jumplist when opening terminal in current window. * Finishing an abbreviation with a multi-byte char may not work. * Session file may divide by zero. * Code in checkreadonly() not fully tested. * Compiler warnings for int to size_t conversion. (Randall W. Morris) * Test file was not deleted. * Coverity complains about not checking the rename() return value. * Some comments are not correct or clear. * Terminal colors are not updated when 'background' is set. * Vim9: expandcmd() not tested. * Operator cancelled by moving mouse when using popup. (Sergey Vlasov) * Two key command cancelled by moving mouse when using popup. (Sergey Vlasov) * Vim9: :cexpr does not work with local variables. * Vim9: leaking memory in :cexpr. * Build failure without the +quickfix feature. (John Marriott) * Various code lines not covered by tests. * File extension .wrap not recognized. * Default redirection missing "ash" and "dash". * Vim9: member operation not fully tested. * Vim9: skip argument to searchpair() is not compiled. * Vim9: skip argument to searchpairpos() is not compiled. * Vim9: memory leak when using searchpair(). * Vim9: "echo Func()" does not give an error for a function without a return value. * Perl not tested sufficiently. * Crash when calling partial. * Bufwrite not sufficiently tested. * Recalling commands from history is not tested. ==== vte ==== Version update (0.64.0 -> 0.64.1) - Update to version 0.64.1: + widget: Move clipboard store from finalize to unrealize. + build: Work around a meson bug with dist scripts in subprojects. + build: Add missing includes. ==== webkit2gtk3 ==== Version update (2.32.0 -> 2.32.1) Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Update to version 2.32.1: + Support building against the Musl C library. + Support building against ICU version 69 or newer. + Improve handling of Media Capture devices. + Improve WebAudio playback. + Improve video orientation handling. + Improve seeking support for MSE playback. + Improve flush support in EME decryptors. + Fix HTTP status codes for requests done through a custom URI handler. + Fix the Bubblewrap sandbox in certain 32-bit systems. + Fix inconsistencies between the WebKitWebView.is-muted property state and values returned by webkit_web_view_is_playing_audio(). + Fix the build with ENABLE_VIDEO=OFF. + Fix wrong timestamps for long-lived cookies. + Fix UI process crash when failing to load favicons. + Fix several crashes and rendering issues. + Updated translations. - Drop webkit2gtk3-icu69.patch: fixed upstream. ==== xdm ==== - Do not own /usr/share/xsessions: this directory is owned by the filesystem package. ==== xfsprogs ==== Version update (5.11.0 -> 5.12.0) - update to v5.12.0: - mkfs: don't default to too-large physical sector size - repair: phase 6 speedups - man: Add dax mount option to man xfs(5) - xfs_admin: pick up log arguments correctly - xfs_growfs: support shrinking unused space - libfrog: report inobtcount in geometry - xfs_logprint: Fix buffer overflow printing quotaoff - xfsprogs: include <signal.h> for platform_crash - xfsprogs: remove BMV_IF_NO_DMAPI_READ flag - workqueue: bound maximum queue depth - libxfs changes merged from kernel 5.12 ==== xmlsec1 ==== Version update (1.2.31 -> 1.2.32) Subpackages: libxmlsec1-1 libxmlsec1-openssl1 - update to 1.2.32: + Remove MD5 for NSS 3.59 and above + Fix PKCS12_parse return code handling + Fix OpenSSL lookup + xmlSecX509DataGetNodeContent(): don't return 0 for non-empty elements - fix for LibreOffice - add upstream signing key and validate source signature - put license text into all subpackages - treat all compiler warnings as errors ==== yast2 ==== Version update (4.4.3 -> 4.4.5) - Add Yast2::Equatable mixin to avoid troubles with classes that overloads the comparison methods (related to bsc#1186082). - 4.4.5 - Logging all available product information into directory /var/log/YaST2/installation_info. This should help for evaluating the cause of e.g. bsc#1180888, bsc#1180908, bsc#1178688. - 4.4.4 ==== zchunk ==== Version update (1.1.11 -> 1.1.14) - Update to version 1.1.14 * Final fixes for zstd 1.5 support - Update to version 1.1.12 * Update testsuite for zstd 1.5 ==== zstd ==== Version update (1.4.9 -> 1.5.0) - Update to version 1.5.0 * https://github.com/facebook/zstd/releases/tag/v1.5.0 * Improved Middle-Level Compression Speed * Improved High-Level Compression Ratio * Faster Decompression Speed * Dynamic Library Supports Multithreading by Default - Drop zstd-1.4.9-Avoid-SIGBUS-on-armv6.patch, merged upstream - Add zstd-1.4.9-Avoid-SIGBUS-on-armv6.patch to fix crashes when running armv6 userspace on armv8 64-bit kernels ==== zvbi ==== - Add patch to separate private libs from required libs: * 10_fix_private_libs.patch

1 0

New ARM Kubic snapshot 20210601 released!
by Guillaume Gardet 03 Jun '21

03 Jun '21

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=3&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: acl (2.2.53 -> 2.3.1) apparmor augeas branding-openSUSE ceph (16.2.3.26+g422932e923 -> 16.2.4.26+g555d38aa5a5) cilium cni cockpit (243 -> 245) dhcp (4.4.2 -> 4.4.2.P1) etcd (3.4.15 -> 3.4.16) filesystem flannel gcc11 (11.0.0+git183291 -> 11.1.1+git121) glib2 (2.68.1 -> 2.68.2) gnutls graphite2 haproxy (2.3.10+git0.4764f0e4e -> 2.4.0+git0.6cbbecf09) helm (3.5.2 -> 3.5.4) hwinfo (21.73 -> 21.74) installation-images-MicroOS (17.3 -> 17.6) issue-generator (1.12 -> 1.13) json-c kdump kernel-source (5.12.3 -> 5.12.4) krb5 kubernetes (1.21.0 -> 1.21.1) kubernetes1.20 (1.20.6 -> 1.20.7) kubernetes1.21 (1.21.0 -> 1.21.1) kubic-control (0.10.2 -> 0.11) less (581.2 -> 586) libX11 (1.7.0 -> 1.7.1) libapparmor libcontainers-common libepoxy (1.5.5 -> 1.5.8) libidn2 (2.3.0 -> 2.3.1) libqmi (1.28.2 -> 1.28.4) librsvg (2.50.5 -> 2.50.6) libsigc++2 (2.10.6 -> 2.10.7) libtirpc (1.3.1 -> 1.3.2) logrotate (3.18.0 -> 3.18.1) lua54 mozilla-nss (3.63.1 -> 3.64) multipath-tools (0.8.5+30+suse.633836e -> 0.8.6+10+suse.4771137) nfs-utils pango (1.48.4 -> 1.48.5) patterns-base patterns-microos permissions (1550_20210125 -> 1550_20210518) psmisc python-PyJWT (2.0.1 -> 2.1.0) python-asn1crypto python-distro python-idna python-jsonpatch (1.31 -> 1.32) python-jsonschema python-networkx (2.5 -> 2.5.1) python-oauthlib python-pyasn1 python-pytz rdma-core (33.1 -> 35.0) rpcbind (1.2.5 -> 1.2.6) rpm runc (1.0.0~rc94 -> 1.0.0~rc95) selinux-policy snapper sssd (2.4.2 -> 2.5.0) u-boot-rpiarm64 vim (8.2.2800 -> 8.2.2850) xfsprogs (5.11.0 -> 5.12.0) xmlsec1 (1.2.31 -> 1.2.32) yast2 (4.4.3 -> 4.4.5) zchunk (1.1.11 -> 1.1.14) zstd (1.4.9 -> 1.5.0) === Details === ==== acl ==== Version update (2.2.53 -> 2.3.1) - modernize spec-file (move license to licensedir) - Update to version 2.3.1 * Update German translation * getfacl: fix indent in --help output * getfacl: Add --one-file-system option, with this option getfacl will not cross mount points * Fix segfault on allocation failure * Avoid SIGSEGV with link-time optimisation enabled - Use SourceUrls ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils python3-apparmor - add abstractions-php8.diff to support PHP8 in abstractions/php (boo#1186267) ==== augeas ==== - Allow all printable ASCII characters in WPA-PSK definition * augeas-allow_printable_ASCII.patch * bsc#1185524 * Sourced from https://github.com/hercules-team/augeas/pull/723/commits * Credit to Michal Filka <mfilka(a)suse.com> ==== branding-openSUSE ==== Subpackages: grub2-branding-openSUSE - Enable grub2-branding on riscv64 ==== ceph ==== Version update (16.2.3.26+g422932e923 -> 16.2.4.26+g555d38aa5a5) Subpackages: ceph-common libcephfs2 librados2 librbd1 librgw2 python3-ceph-argparse python3-ceph-common python3-cephfs python3-rados python3-rbd python3-rgw - Update to 16.2.4-26-g555d38aa5a5: + rebased on top of v16.2.4 tag https://ceph.io/releases/v16-2-4-pacific-released/ * mgr/dashboard: fix base-href: revert it to previous approach * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509) * mgr/dashboard: fix set-ssl-certificate{,-key} commands * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531) * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524) * systemd: remove ProtectClock=true for ceph-osd@.service ==== cilium ==== - Add cilium-no-ineffassign-in-root.patch: Do not run ineffassign in the source root, where no go files exist. - Set GO111MODULE=auto to build with go1.16+ * Default changed to GO111MODULE=on in go1.16 * Set temporarily until using upstream release with go.mod * Add BuildRequires: golang(API) >= 1.13 recommended dependency expression ==== cni ==== - use buildmode=pie (cnitool is installed into sbindir) - Set GO111MODULE=auto to build with go1.16+ * Default changed to GO111MODULE=on in go1.16 * Set temporarily until using upstream release with go.mod * Drop BuildRequires: golang-packaging not currently using macros * Add BuildRequires: golang(API) >= 1.13 recommended dependency expression ==== cockpit ==== Version update (243 -> 245) Subpackages: cockpit-bridge cockpit-system - new version 255 https://cockpit-project.org/blog/cockpit-245.html - new version 244.1 https://cockpit-project.org/blog/cockpit-244.html - enable SELinux ==== dhcp ==== Version update (4.4.2 -> 4.4.2.P1) Subpackages: dhcp-client - Add -fno-strict-aliasing to CFLAGS to avoid a segfault in dhcpd (boo#1186631). - Update to 4.4.2-P1: * CVE-2021-25217, bsc#1186382: A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient. - Error out, if %version and %isc_version are not in sync. ==== etcd ==== Version update (3.4.15 -> 3.4.16) - Update to version 3.4.16: * version: 3.4.16 * Backport-3.4 exclude alarms from health check conditionally * etcdserver/mvcc: update trace.Step condition * Backport-3.4 etcdserver/util.go: reduce memory when logging range requests * .travis,Makefile,functional: Bump go 1.12 version to v1.12.17 * integration: Fix 'go test --tags cluster_proxy --timeout=30m -v ./integration/...' * pkg/tlsutil: Adjust cipher suites for go 1.12 * Fix pkg/tlsutil (test) to not fail on 386. * bill-of-materials.json: Update golang.org/x/sys * .travis,test: Turn race off in Travis for go version 1.15 * integration : fix TestTLSClientCipherSuitesMismatch in go1.13 * vendor: Run go mod vendor * go.mod,go.sum: Bump github.com/creack/pty that includes patch * go.mod,go.sum: Comply with go v1.15 * etcdserver,wal: Convert int to string using rune() * integration,raft,tests: Comply with go v1.15 gofmt * .travis.yml: Test with go v1.15.11 * pkpkg/testutil/leak.go: Allowlist created by testing.runTests.func1 * vendor: Run go mod vendor * go.sum, go.mod: Run go mod tidy with go 1.12 * go.mod: Pin go to 1.12 version * etcdserver: fix incorrect metrics generated when clients cancel watches * integration: relax leader timeout from 3s to 4s * etcdserver: when using --unsafe-no-fsync write data * server: Added config parameter experimental-warning-apply-duration * etcdserver: Fix PeerURL validation ==== filesystem ==== - temporarily revert icon and fillup dir to 0755 until fallout is fixed (bsc#1184786) - Remove /usr/share/java, as it was moved to javapackages-filesystem long ago - temporarily mark appdata and applications 0755 again until fallout is fixed (bsc#1184786) - make restricteddir and datadir readonly (bsc#1184786) - also make includedir, mandir, licensedir readonly (bsc#1184786) ==== flannel ==== - Sync manifest with upstream (0.13.0 release). Includes the following changes: * Fix typo and invalid indent in kube-flannel.yml * Use stable os and arch label for node * set priorityClassName to system-node-critical * Add NET_RAW capability to support cri-o * Use multi-arch Docker images in the Kubernetes manifest - Set GO111MODULE=auto to build with go1.16+ * Default changed to GO111MODULE=on in go1.16 * Set temporarily until using upstream version with go.mod ==== gcc11 ==== Version update (11.0.0+git183291 -> 11.1.1+git121) Subpackages: libgcc_s1 libgomp1 libstdc++6 - Update to gcc-11 branch head (23855a176609fe8dda6abaf2b2), git121 - Disable build-id generation on non-glibc targeting cross compilers. - Update to gcc-11 branch head (cd0a059bd384da58d43674496a7), git67 * Includes GCC 11.1 release - Drop upstreamed gcc11-no-offload.patch. - Update to gcc-11 branch head (7a7fc01b9d20afb1a2b805d93cb), git31 * Includes GCC 11.1 RC2 - Add gcc11-no-offload.patch and gcc11-amdgcn-disable-hot-cold-partitioning.patch. - Enable gfortran for offload compilers. - BuildRequire procps from gcc11-testresults if we test go. - Force using llvm11 for amdgcn offloading since llvm12 doesn't yet work. Package expanded symlinks so concurrent installs do not pull in another llvm-mc. - Add gcc11-gdwarf-4-default.patch to default to DWARF4 generation in SLES15 and older. - Update to gcc-11 branch head (27350b77a92062667427100afb4), git10 * Includes GCC 11.1 RC1 - Bump to 49813aad3292f7f2bef69206274da78a9a7116ed. - Disable nvptx offloading on aarch64 since it doesn't work. - Bump to a87d3f964df31d4fbceb822c6d293e85c117d992. - Remove gcc48-remove-mpfr-2.4.0-requirement.patch which does no longer apply. - Arrange for a C++ 11 capable host compiler to be available. - Do not require ISL for cross compiler builds on old distros. - Bump to 123b3e03c911a43054c1f88f5d3110e1d084dd4e. - Update embedded newlib version from 3.3.0 to 4.1.0. - Pack %{GCCDIST}-gcc%{binsuffix}. - Add a new dependency for libgccjit. - New package, inherits from gcc10 * gcc-add-defaultsspec.diff, add the ability to provide a specs file that is read by default * tls-no-direct.diff, avoid direct %fs references on x86 to not slow down Xen * gcc43-no-unwind-tables.diff, do not produce unwind tables for CRT files * gcc41-ppc32-retaddr.patch, fix expansion of __builtin_return_addr for ppc, just a testcase * gcc44-textdomain.patch, make translation files version specific and adjust textdomain to find them * gcc44-rename-info-files.patch, fix cross-references in info files when renaming them to be version specific * gcc48-libstdc++-api-reference.patch, fix link in the installed libstdc++ html documentation * gcc48-remove-mpfr-2.4.0-requirement.patch, make GCC work with earlier mpfr versions on old products * gcc5-no-return-gcc43-workaround.patch, make build work with host gcc 4.3 * gcc7-remove-Wexpansion-to-defined-from-Wextra.patch, removes new warning from -Wextra * gcc7-avoid-fixinc-error.diff * gcc9-reproducible-builds-buildid-for-checksum.patch * gcc9-reproducible-builds.patch * gcc10-amdgcn-llvm-as.patch * gcc10-foffload-default.patch - libgccjit subpackage is added. - HWASAN is built for aarch64 target. ==== glib2 ==== Version update (2.68.1 -> 2.68.2) Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 - Update to version 2.68.2: + Fix building third-party projects against GLib on CentOS 7. + Bugs fixed: - json-glib does not build with glib 2.68.1. - gmacros: check that __cplusplus or _MSC_VER is defined. - gmacros: missing check if __STDC_VERSION__ is defined. - Backport !2078 ?gthreadedresolver: don't ignore flags in lookup_by_name_with_flags? to glib-2-68. ==== gnutls ==== - Compute the FIPS hmac file without re-defining the __os_install_post macro, use the brp-50-generate-fips-hmac script instead. [bsc#1184555] - Require the main package in devel and lib packages as the default priorities are now set via crypto-policies. [bsc#1183082] ==== graphite2 ==== - Define conditionally make_build to fix build on systems that do not have that macro ==== haproxy ==== Version update (2.3.10+git0.4764f0e4e -> 2.4.0+git0.6cbbecf09) - Update to version 2.4.0+git0.6cbbecf09: https://www.haproxy.com/blog/announcing-haproxy-2-4/ for all the details see /usr/share/doc/packages/haproxy/CHANGELOG - refreshed patches to apply cleanly again haproxy-1.6.0-makefile_lib.patch haproxy-1.6.0-sec-options.patch lua54.patch ==== helm ==== Version update (3.5.2 -> 3.5.4) - Update to version 3.5.4: * Add/update deprecation notices * Wrap validation error instead of recreating * Move default to avoid nil check * Add name validation rules for object kinds * Use kube libraries v0.20.4 - Update to version 3.5.3: * Fix the example for --time-format flag * Improve the console output for resource policy keep to align with helm2. * test(pkg/storage): Verify that storage.Create returns an error if it fails to clean up least-recent release versions * fix(pkg/storage): If storage.Create fails to clean up recent release versions, return an error * fix(test): Increase golangci-lint timeout * fix release sha256 * Fix-9253: Change the deprecated charts repo URL in release notes * Update default ingress values section to correspond with template * use kube libraries v0.20.2 ==== hwinfo ==== Version update (21.73 -> 21.74) - merge gh#openSUSE/hwinfo#98 - update pci and usb ids - 21.74 ==== installation-images-MicroOS ==== Version update (17.3 -> 17.6) - merge gh#openSUSE/installation-images#513 - Keep /usr/lib/ld-* also if lib64 exists - Use ld*so* as glob for the runtime linker - Keep /usr/lib/ld*so* also if lib64 exists - 17.6 - merge gh#openSUSE/installation-images#512 - Fix previous typo adding chipidea modules - 17.5 - merge gh#openSUSE/installation-images#511 - Add chipidea modules (bsc#1184867) - 17.4 ==== issue-generator ==== Version update (1.12 -> 1.13) - Update to version 1.13 - SELinux: Do not call agetty --reload [bsc#1186178] ==== json-c ==== - Add -std=gnu99 to fix build with some gcc versions ==== kdump ==== - Fix use of DNS in the panic environment (bsc#1183070): * kdump-avoid-endless-loop-on-EAI_AGAIN.patch: Avoid an endless loop when resolving a hostname fails with EAI_AGAIN. * kdump-install-real-resolv.conf.patch: Install /etc/resolv.conf using its resolved path. - kdump-fix-incorrect-exit-code-checking.patch: Fix incorrect exit code checking after "local" with assignment (bsc#1184616, LTC#192282) - kdump-do-not-iterate-past-end-of-string.patch: Fix a crash caused by iterating past end of string (bsc#1186037). ==== kernel-source ==== Version update (5.12.3 -> 5.12.4) - can: isotp: prevent race between isotp_bind() and isotp_setsockopt() (CVE-2021-32606 bsc#1185953 bsc#1185564). - commit cf6ea2f - usb: pci-quirks: disable D3cold on xhci suspend for s2idle on AMD Renoire (bsc#1185840). - ACPI / idle: override c-state latency when not in conformance with s0ix (bsc#1185840). - ACPI: PM: s2idle: Add missing LPS0 functions for AMD (bsc#1185840). - commit 152b604 - ipc/mqueue, msg, sem: Avoid relying on a stack reference past its expiry (bsc#1185988). - commit 2d71c6c - drm/i915/gem: Pin the L-shape quirked object as unshrinkable (bsc#1185624 bsc#1186075). - commit 6e53ea2 - serial: stm32: fix threaded interrupt handling (git-fixes). - usb: typec: tcpm: Fix error while calculating PPS out values (git-fixes). - RDMA/core: Unify RoCE check and re-factor code (git-fixes). - commit a5aafd4 - Linux 5.12.4 (bsc#1012628). - Bluetooth: verify AMP hci_chan before amp_destroy (bsc#1012628). - bluetooth: eliminate the potential race condition when removing the HCI controller (bsc#1012628). - net/nfc: fix use-after-free llcp_sock_bind/connect (bsc#1012628). - io_uring: truncate lengths larger than MAX_RW_COUNT on provide buffers (bsc#1012628). - coresight: etm-perf: Fix define build issue when built as module (bsc#1012628). - software node: Allow node addition to already existing device (bsc#1012628). - Revert "USB: cdc-acm: fix rounding error in TIOCSSERIAL" (bsc#1012628). - usb: roles: Call try_module_get() from usb_role_switch_find_by_fwnode() (bsc#1012628). - tty: moxa: fix TIOCSSERIAL jiffies conversions (bsc#1012628). - tty: amiserial: fix TIOCSSERIAL permission check (bsc#1012628). - USB: serial: usb_wwan: fix TIOCSSERIAL jiffies conversions (bsc#1012628). - staging: greybus: uart: fix TIOCSSERIAL jiffies conversions (bsc#1012628). - USB: serial: ti_usb_3410_5052: fix TIOCSSERIAL permission check (bsc#1012628). - staging: fwserial: fix TIOCSSERIAL jiffies conversions (bsc#1012628). - tty: moxa: fix TIOCSSERIAL permission check (bsc#1012628). - tty: mxser: fix TIOCSSERIAL jiffies conversions (bsc#1012628). - staging: fwserial: fix TIOCSSERIAL permission check (bsc#1012628). - tty: mxser: fix TIOCSSERIAL permission check (bsc#1012628). - drm: bridge: fix LONTIUM use of mipi_dsi_() functions (bsc#1012628). - usb: typec: tcpm: Address incorrect values of tcpm psy for fixed supply (bsc#1012628). - usb: typec: tcpm: Address incorrect values of tcpm psy for pps supply (bsc#1012628). - usb: typec: tcpm: update power supply once partner accepts (bsc#1012628). - USB: serial: xr: fix CSIZE handling (bsc#1012628). - usb: xhci-mtk: remove or operator for setting schedule parameters (bsc#1012628). - usb: xhci-mtk: improve bandwidth scheduling with TT (bsc#1012628). - ASoC: samsung: tm2_wm5110: check of of_parse return value (bsc#1012628). - ASoC: Intel: kbl_da7219_max98927: Fix kabylake_ssp_fixup function (bsc#1012628). - ASoC: tlv320aic32x4: Register clocks before registering component (bsc#1012628). - ASoC: tlv320aic32x4: Increase maximum register in regmap (bsc#1012628). - MIPS: pci-mt7620: fix PLL lock check (bsc#1012628). - MIPS: pci-rt2880: fix slot 0 configuration (bsc#1012628). - FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR (bsc#1012628). - PCI: Allow VPD access for QLogic ISP2722 (bsc#1012628). - KVM: x86: Defer the MMU unload to the normal path on an global INVPCID (bsc#1012628). - PCI: xgene: Fix cfg resource mapping (bsc#1012628). - PCI: keystone: Let AM65 use the pci_ops defined in pcie-designware-host.c (bsc#1012628). - PM / devfreq: Unlock mutex and free devfreq struct in error path (bsc#1012628). - soc/tegra: regulators: Fix locking up when voltage-spread is out of range (bsc#1012628). - iio: inv_mpu6050: Fully validate gyro and accel scale writes (bsc#1012628). - iio: magnetometer: yas530: Include right header (bsc#1012628). - iio: sx9310: Fix write_.._debounce() (bsc#1012628). - iio:accel:adis16201: Fix wrong axis assignment that prevents loading (bsc#1012628). - iio:adc:ad7476: Fix remove handling (bsc#1012628). - iio: magnetometer: yas530: Fix return value on error path (bsc#1012628). - iio: sx9310: Fix access to variable DT array (bsc#1012628). - iio: hid-sensor-rotation: Fix quaternion data not correct (bsc#1012628). - sc16is7xx: Defer probe if device read fails (bsc#1012628). - phy: cadence: Sierra: Fix PHY power_on sequence (bsc#1012628). - misc: lis3lv02d: Fix false-positive WARN on various HP models (bsc#1012628). - phy: ti: j721e-wiz: Invoke wiz_init() before of_platform_device_create() (bsc#1012628). - misc: vmw_vmci: explicitly initialize vmci_notify_bm_set_msg struct (bsc#1012628). - misc: vmw_vmci: explicitly initialize vmci_datagram payload (bsc#1012628). - selinux: add proper NULL termination to the secclass_map permissions (bsc#1012628). - x86, sched: Treat Intel SNC topology as default, COD as exception (bsc#1012628). - async_xor: increase src_offs when dropping destination page (bsc#1012628). - md/bitmap: wait for external bitmap writes to complete during tear down (bsc#1012628). - md-cluster: fix use-after-free issue when removing rdev (bsc#1012628). - md: split mddev_find (bsc#1012628). - md: factor out a mddev_find_locked helper from mddev_find (bsc#1012628). - md: md_open returns -EBUSY when entering racing area (bsc#1012628). - md: Fix missing unused status line of /proc/mdstat (bsc#1012628). - MIPS: generic: Update node names to avoid unit addresses (bsc#1012628). - mt76: mt7615: use ieee80211_free_txskb() in mt7615_tx_token_put() (bsc#1012628). - ipw2x00: potential buffer overflow in libipw_wx_set_encodeext() (bsc#1012628). - net: xilinx: drivers need/depend on HAS_IOMEM (bsc#1012628). - cfg80211: scan: drop entry from hidden_list on overflow (bsc#1012628). - rtw88: Fix array overrun in rtw_get_tx_power_params() (bsc#1012628). - mt76: fix potential DMA mapping leak (bsc#1012628). - FDDI: defxx: Make MMIO the configuration default except for EISA (bsc#1012628). - drm/qxl: use ttm bo priorities (bsc#1012628). - drm/ingenic: Fix non-OSD mode (bsc#1012628). - drm/panfrost: Clear MMU irqs before handling the fault (bsc#1012628). - drm/panfrost: Don't try to map pages that are already mapped (bsc#1012628). - drm/radeon: fix copy of uninitialized variable back to userspace (bsc#1012628). - drm/dp_mst: Revise broadcast msg lct & lcr (bsc#1012628). - drm/dp_mst: Set CLEAR_PAYLOAD_ID_TABLE as broadcast (bsc#1012628). - drm: bridge: fix ANX7625 use of mipi_dsi_() functions (bsc#1012628). - drm: bridge/panel: Cleanup connector on bridge detach (bsc#1012628). - drm/amd/display: Reject non-zero src_y and src_x for video planes (bsc#1012628). - drm/amdgpu: fix concurrent VM flushes on Vega/Navi v2 (bsc#1012628). - drm/amdgpu: add new MC firmware for Polaris12 32bit ASIC (bsc#1012628). - drm/amdgpu: fix r initial values (bsc#1012628). - drm/amdgpu: Init GFX10_ADDR_CONFIG for VCN v3 in DPG mode (bsc#1012628). - ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC882 Clevo quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC269 HP quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC269 Acer quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC269 Dell quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC269 ASUS quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order remaining ALC269 quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC662 quirk table entries (bsc#1012628). - ALSA: hda/realtek: Remove redundant entry for ALC861 Haier/Uniwill devices (bsc#1012628). - ALSA: hda/realtek: Fix speaker amp on HP Envy AiO 32 (bsc#1012628). - KVM: s390: VSIE: correctly handle MVPG when in VSIE (bsc#1012628). - KVM: s390: split kvm_s390_logical_to_effective (bsc#1012628). - KVM: s390: fix guarded storage control register handling (bsc#1012628). - s390: fix detection of vector enhancements facility 1 vs. vector packed decimal facility (bsc#1012628). - KVM: s390: VSIE: fix MVPG handling for prefixing and MSO (bsc#1012628). - KVM: s390: split kvm_s390_real_to_abs (bsc#1012628). - KVM: s390: extend kvm_s390_shadow_fault to return entry pointer (bsc#1012628). - KVM: x86/mmu: Alloc page for PDPTEs when shadowing 32-bit NPT with 64-bit (bsc#1012628). - KVM: x86/xen: Drop RAX[63:32] when processing hypercall (bsc#1012628). - KVM: X86: Fix failure to boost kernel lock holder candidate in SEV-ES guests (bsc#1012628). - KVM: x86: Properly handle APF vs disabled LAPIC situation (bsc#1012628). - KVM: x86: Check CR3 GPA for validity regardless of vCPU mode (bsc#1012628). - KVM: x86: Remove emulator's broken checks on CR0/CR3/CR4 loads (bsc#1012628). - KVM: nSVM: Set the shadow root level to the TDP level for nested NPT (bsc#1012628). - KVM: SVM: Don't strip the C-bit from CR2 on #PF interception (bsc#1012628). - KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs (bsc#1012628). - KVM: SVM: Do not set sev->es_active until KVM_SEV_ES_INIT completes (bsc#1012628). - KVM: SVM: Do not allow SEV/SEV-ES initialization after vCPUs are created (bsc#1012628). - KVM: SVM: Inject #GP on guest MSR_TSC_AUX accesses if RDTSCP unsupported (bsc#1012628). - KVM: nVMX: Defer the MMU reload to the normal path on an EPTP switch (bsc#1012628). - KVM: VMX: Truncate GPR value for DR and CR reads in !64-bit mode (bsc#1012628). - KVM: nVMX: Truncate bits 63:32 of VMCS field on nested check in !64-bit (bsc#1012628). - KVM: nVMX: Truncate base/index GPR value on address calc in !64-bit (bsc#1012628). - KVM: arm/arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST read (bsc#1012628). - KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU (bsc#1012628). - KVM: Stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1012628). - KVM: arm64: Support PREL/PLT relocs in EL2 code (bsc#1012628). - KVM: arm64: Fully zero the vcpu state on reset (bsc#1012628). - KVM: arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST_REGION read (bsc#1012628). - KVM: selftests: Sync data verify of dirty logging with guest sync (bsc#1012628). - KVM: selftests: Always run vCPU thread with blocked SIG_IPI (bsc#1012628). - Revert "drivers/net/wan/hdlc_fr: Fix a double free in pvc_xmit" (bsc#1012628). - Revert "i3c master: fix missing destroy_workqueue() on error in i3c_master_register" (bsc#1012628). - mfd: stmpe: Revert "Constify static struct resource" (bsc#1012628). - ovl: fix missing revert_creds() on error path (bsc#1012628). - usb: gadget: pch_udc: Revert d3cb25a12138 completely (bsc#1012628). - Revert "tools/power turbostat: adjust for temperature offset" (bsc#1012628). - firmware: xilinx: Fix dereferencing freed memory (bsc#1012628). - firmware: xilinx: Remove zynqmp_pm_get_eemi_ops() in IS_REACHABLE(CONFIG_ZYNQMP_FIRMWARE) (bsc#1012628). - x86/vdso: Use proper modifier for len's format specifier in extract() (bsc#1012628). - fpga: fpga-mgr: xilinx-spi: fix error messages on -EPROBE_DEFER (bsc#1012628). - crypto: keembay-ocs-hcu - Fix error return code in kmb_ocs_hcu_probe() (bsc#1012628). - crypto: keembay-ocs-aes - Fix error return code in kmb_ocs_aes_probe() (bsc#1012628). - crypto: sun8i-ss - fix result memory leak on error path (bsc#1012628). - memory: gpmc: fix out of bounds read and dereference on gpmc_cs[] (bsc#1012628). - ARM: dts: exynos: correct fuel gauge interrupt trigger level on GT-I9100 (bsc#1012628). - ARM: dts: exynos: correct fuel gauge interrupt trigger level on P4 Note family (bsc#1012628). - ARM: dts: exynos: correct fuel gauge interrupt trigger level on Midas family (bsc#1012628). - ARM: dts: exynos: correct MUIC interrupt trigger level on Midas family (bsc#1012628). - ARM: dts: exynos: correct PMIC interrupt trigger level on Midas family (bsc#1012628). - ARM: dts: exynos: correct PMIC interrupt trigger level on Odroid X/U3 family (bsc#1012628). - ARM: dts: exynos: correct PMIC interrupt trigger level on P4 Note family (bsc#1012628). - ARM: dts: exynos: correct PMIC interrupt trigger level on SMDK5250 (bsc#1012628). - ARM: dts: exynos: correct PMIC interrupt trigger level on Snow (bsc#1012628). - ARM: dts: s5pv210: correct fuel gauge interrupt trigger level on Fascinate family (bsc#1012628). - ARM: dts: renesas: Add mmc aliases into R-Car Gen2 board dts files (bsc#1012628). - arm64: dts: renesas: Add mmc aliases into board dts files (bsc#1012628). - bus: ti-sysc: Fix initializing module_pa for modules without sysc register (bsc#1012628). - x86/platform/uv: Set section block size for hubless architectures (bsc#1012628). - serial: stm32: fix probe and remove order for dma (bsc#1012628). - serial: stm32: fix startup by enabling usart for reception (bsc#1012628). - serial: stm32: fix incorrect characters on console (bsc#1012628). - serial: stm32: fix TX and RX FIFO thresholds (bsc#1012628). - serial: stm32: fix a deadlock condition with wakeup event (bsc#1012628). - serial: stm32: fix wake-up flag handling (bsc#1012628). - serial: stm32: fix a deadlock in set_termios (bsc#1012628). - serial: liteuart: fix return value check in liteuart_probe() (bsc#1012628). - serial: stm32: fix tx dma completion, release channel (bsc#1012628). - serial: stm32: call stm32_transmit_chars locked (bsc#1012628). - serial: stm32: fix FIFO flush in startup and set_termios (bsc#1012628). - serial: stm32: add FIFO flush when port is closed (bsc#1012628). - serial: stm32: fix tx_empty condition (bsc#1012628). - usb: typec: tcpm: Wait for vbus discharge to VSAFE0V before toggling (bsc#1012628). - usb: typec: tcpci: Check ROLE_CONTROL while interpreting CC_STATUS (bsc#1012628). - usb: typec: tps6598x: Fix return value check in tps6598x_probe() (bsc#1012628). - usb: typec: stusb160x: fix return value check in stusb160x_probe() (bsc#1012628). - mfd: intel_pmt: Fix nuisance messages and handling of disabled capabilities (bsc#1012628). - regmap: set debugfs_name to NULL after it is freed (bsc#1012628). - spi: rockchip: avoid objtool warning (bsc#1012628). - arm64: dts: broadcom: bcm4908: fix switch parent node name (bsc#1012628). - mtd: rawnand: fsmc: Fix error code in fsmc_nand_probe() (bsc#1012628). - mtd: rawnand: brcmnand: fix OOB R/W with Hamming ECC (bsc#1012628). - mtd: Handle possible -EPROBE_DEFER from parse_mtd_partitions() (bsc#1012628). - mtd: rawnand: qcom: Return actual error code instead of -ENODEV (bsc#1012628). - mtd: don't lock when recursively deleting partitions (bsc#1012628). - mtd: parsers: qcom: Fix error condition (bsc#1012628). - mtd: parsers: qcom: incompatible with spi-nor 4k sectors (bsc#1012628). - mtd: maps: fix error return code of physmap_flash_remove() (bsc#1012628). - ARM: dts: stm32: fix usart 2 & 3 pinconf to wake up with flow control (bsc#1012628). - arm64: dts: ti: k3-j721e-main: Update the speed modes supported and their itap delay values for MMCSD subsystems (bsc#1012628). - iio: adis16480: fix pps mode sampling frequency math (bsc#1012628). - arm64: dts: qcom: sc7180: trogdor: Fix trip point config of charger thermal zone (bsc#1012628). - arm64: dts: qcom: sm8250: Fix level triggered PMU interrupt polarity (bsc#1012628). - arm64: dts: qcom: sm8350: Fix level triggered PMU interrupt polarity (bsc#1012628). - arm64: dts: qcom: sm8250: Fix timer interrupt to specify EL2 physical timer (bsc#1012628). - arm64: dts: qcom: sc7180: Avoid glitching SPI CS at bootup on trogdor (bsc#1012628). - arm64: dts: qcom: sdm845: fix number of pins in 'gpio-ranges' (bsc#1012628). - arm64: dts: qcom: sm8150: fix number of pins in 'gpio-ranges' (bsc#1012628). - arm64: dts: qcom: sm8250: fix number of pins in 'gpio-ranges' (bsc#1012628). - arm64: dts: qcom: sm8350: fix number of pins in 'gpio-ranges' (bsc#1012628). - arm64: dts: qcom: db845c: fix correct powerdown pin for WSA881x (bsc#1012628). - crypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to map (bsc#1012628). - spi: stm32: drop devres version of spi_register_master (bsc#1012628). - arm64: dts: broadcom: bcm4908: set Asus GT-AC5300 port 7 PHY mode (bsc#1012628). - regulator: bd9576: Fix return from bd957x_probe() (bsc#1012628). - arm64: dts: renesas: r8a77980: Fix vin4-7 endpoint binding (bsc#1012628). - selftests/x86: Add a missing .note.GNU-stack section to thunks_32.S (bsc#1012628). - crypto: arm/blake2s - fix for big endian (bsc#1012628). - spi: stm32: Fix use-after-free on unbind (bsc#1012628). - Drivers: hv: vmbus: Drop error message when 'No request id available' (bsc#1012628). - staging: qlge: fix an error code in probe() (bsc#1012628). - x86/microcode: Check for offline CPUs before requesting new microcode (bsc#1012628). - usb: host: ehci-tegra: Select USB_GADGET Kconfig option (bsc#1012628). - devtmpfs: fix placement of complete() call (bsc#1012628). - usb: gadget: pch_udc: Replace cpu_to_le32() by lower_32_bits() (bsc#1012628). - usb: gadget: pch_udc: Check if driver is present before calling - >setup() (bsc#1012628). - usb: gadget: pch_udc: Check for DMA mapping error (bsc#1012628). - usb: gadget: pch_udc: Initialize device pointer before use (bsc#1012628). - usb: gadget: pch_udc: Provide a GPIO line used on Intel Minnowboard (v1) (bsc#1012628). - crypto: ccp - fix command queuing to TEE ring buffer (bsc#1012628). - crypto: qat - don't release uninitialized resources (bsc#1012628). - crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init (bsc#1012628). - fotg210-udc: Fix DMA on EP0 for length > max packet size (bsc#1012628). - fotg210-udc: Fix EP0 IN requests bigger than two packets (bsc#1012628). - fotg210-udc: Remove a dubious condition leading to fotg210_done (bsc#1012628). - fotg210-udc: Mask GRP2 interrupts we don't handle (bsc#1012628). - fotg210-udc: Don't DMA more than the buffer can take (bsc#1012628). - fotg210-udc: Complete OUT requests on short packets (bsc#1012628). - usb: gadget: s3c: Fix incorrect resources releasing (bsc#1012628). - usb: gadget: s3c: Fix the error handling path in 's3c2410_udc_probe()' (bsc#1012628). - dt-bindings: serial: stm32: Use 'type: object' instead of false for 'additionalProperties' (bsc#1012628). - mtd: require write permissions for locking and badblock ioctls (bsc#1012628). - arm64: dts: renesas: r8a779a0: Fix PMU interrupt (bsc#1012628). - arm64: dts: mt8183: Add gce client reg for display subcomponents (bsc#1012628). - arm64: dts: mt8173: fix wrong power-domain phandle of pmic (bsc#1012628). - bus: qcom: Put child node before return (bsc#1012628). - arm64: dts: qcom: sm8250: fix display nodes (bsc#1012628). - soundwire: bus: Fix device found flag correctly (bsc#1012628). - soc: mediatek: pm-domains: Fix missing error code in scpsys_add_subdomain() (bsc#1012628). - phy: ti: j721e-wiz: Delete "clk_div_sel" clk provider during cleanup (bsc#1012628). - phy: ralink: phy-mt7621-pci: fix XTAL bitmask (bsc#1012628). - phy: marvell: ARMADA375_USBCLUSTER_PHY should not default to y, unconditionally (bsc#1012628). - phy: ralink: phy-mt7621-pci: fix return value check in mt7621_pci_phy_probe() (bsc#1012628). - phy: ingenic: Fix a typo in ingenic_usb_phy_probe() (bsc#1012628). - arm64: dts: mediatek: fix reset GPIO level on pumpkin (bsc#1012628). - NFSv4.2: fix copy stateid copying for the async copy (bsc#1012628). - crypto: poly1305 - fix poly1305_core_setkey() declaration (bsc#1012628). - crypto: qat - fix error path in adf_isr_resource_alloc() (bsc#1012628). - usb: gadget: aspeed: fix dma map failure (bsc#1012628). - USB: gadget: udc: fix wrong pointer passed to IS_ERR() and PTR_ERR() (bsc#1012628). - drivers: nvmem: Fix voltage settings for QTI qfprom-efuse (bsc#1012628). - nvmem: rmem: fix undefined reference to memremap (bsc#1012628). - driver core: platform: Declare early_platform_cleanup() prototype (bsc#1012628). - ARM: dts: qcom: msm8974-lge-nexus5: correct fuel gauge interrupt trigger level (bsc#1012628). - ARM: dts: qcom: msm8974-samsung-klte: correct fuel gauge interrupt trigger level (bsc#1012628). - memory: pl353: fix mask of ECC page_size config register (bsc#1012628). - soundwire: stream: fix memory leak in stream config error path (bsc#1012628). - m68k: mvme147,mvme16x: Don't wipe PCC timer config bits (bsc#1012628). - firmware: qcom_scm: Make __qcom_scm_is_call_available() return bool (bsc#1012628). - firmware: qcom_scm: Reduce locking section for __get_convention() (bsc#1012628). - firmware: qcom_scm: Workaround lack of "is available" call on SC7180 (bsc#1012628). - iio: adc: Kconfig: make AD9467 depend on ADI_AXI_ADC symbol (bsc#1012628). - mtd: rawnand: gpmi: Fix a double free in gpmi_nand_init (bsc#1012628). - irqchip/gic-v3: Fix OF_BAD_ADDR error handling (bsc#1012628). - staging: comedi: tests: ni_routes_test: Fix compilation error (bsc#1012628). - staging: rtl8192u: Fix potential infinite loop (bsc#1012628). - staging: fwserial: fix TIOCSSERIAL implementation (bsc#1012628). - staging: fwserial: fix TIOCGSERIAL implementation (bsc#1012628). - staging: greybus: uart: fix unprivileged TIOCCSERIAL (bsc#1012628). - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (bsc#1012628). - soc: qcom: pdr: Fix error return code in pdr_register_listener (bsc#1012628). - PM / devfreq: Use more accurate returned new_freq as resume_freq (bsc#1012628). - clocksource/drivers/timer-ti-dm: Fix posted mode status check order (bsc#1012628). - clocksource/drivers/timer-ti-dm: Add missing set_state_oneshot_stopped (bsc#1012628). - clocksource/drivers/ingenic_ost: Fix return value check in ingenic_ost_probe() (bsc#1012628). - spi: Fix use-after-free with devm_spi_alloc_* (bsc#1012628). - spi: fsl: add missing iounmap() on error in of_fsl_spi_probe() (bsc#1012628). - soc: qcom: mdt_loader: Validate that p_filesz < p_memsz (bsc#1012628). - soc: qcom: mdt_loader: Detect truncated read of segments (bsc#1012628). - PM: runtime: Replace inline function pm_runtime_callbacks_present() (bsc#1012628). - cpuidle: Fix ARM_QCOM_SPM_CPUIDLE configuration (bsc#1012628). - ACPI: CPPC: Replace cppc_attr with kobj_attribute (bsc#1012628). - crypto: allwinner - add missing CRYPTO_ prefix (bsc#1012628). - crypto: sun8i-ss - Fix memory leak of pad (bsc#1012628). - crypto: sa2ul - Fix memory leak of rxd (bsc#1012628). - crypto: qat - Fix a double free in adf_create_ring (bsc#1012628). - cpufreq: armada-37xx: Fix setting TBG parent for load levels (bsc#1012628). - clk: mvebu: armada-37xx-periph: remove .set_parent method for CPU PM clock (bsc#1012628). - cpufreq: armada-37xx: Fix the AVS value for load L1 (bsc#1012628). - clk: mvebu: armada-37xx-periph: Fix switching CPU freq from 250 Mhz to 1 GHz (bsc#1012628). - clk: mvebu: armada-37xx-periph: Fix workaround for switching from L1 to L0 (bsc#1012628). - cpufreq: armada-37xx: Fix driver cleanup when registration failed (bsc#1012628). - cpufreq: armada-37xx: Fix determining base CPU frequency (bsc#1012628). - spi: spi-zynqmp-gqspi: use wait_for_completion_timeout to make zynqmp_qspi_exec_op not interruptible (bsc#1012628). - spi: spi-zynqmp-gqspi: add mutex locking for exec_op (bsc#1012628). - spi: spi-zynqmp-gqspi: transmit dummy circles by using the controller's internal functionality (bsc#1012628). - spi: spi-zynqmp-gqspi: fix incorrect operating mode in zynqmp_qspi_read_op (bsc#1012628). - spi: fsl-lpspi: Fix PM reference leak in lpspi_prepare_xfer_hardware() (bsc#1012628). - usb: gadget: r8a66597: Add missing null check on return from platform_get_resource (bsc#1012628). - USB: cdc-acm: fix unprivileged TIOCCSERIAL (bsc#1012628). - USB: cdc-acm: fix TIOCGSERIAL implementation (bsc#1012628). - tty: actually undefine superseded ASYNC flags (bsc#1012628). - tty: fix return value for unsupported ioctls (bsc#1012628). - tty: fix return value for unsupported termiox ioctls (bsc#1012628). - serial: core: return early on unsupported ioctls (bsc#1012628). - firmware: qcom-scm: Fix QCOM_SCM configuration (bsc#1012628). - node: fix device cleanups in error handling code (bsc#1012628). - crypto: chelsio - Read rxchannel-id from firmware (bsc#1012628). - usbip: vudc: fix missing unlock on error in usbip_sockfd_store() (bsc#1012628). - m68k: Add missing mmap_read_lock() to sys_cacheflush() (bsc#1012628). - usb: cdnsp: Fixes issue with Configure Endpoint command (bsc#1012628). - spi: spi-zynqmp-gqspi: Fix missing unlock on error in zynqmp_qspi_exec_op() (bsc#1012628). - memory: renesas-rpc-if: fix possible NULL pointer dereference of resource (bsc#1012628). - memory: samsung: exynos5422-dmc: handle clk_set_parent() failure (bsc#1012628). - security: keys: trusted: fix TPM2 authorizations (bsc#1012628). - char: tpm: fix error return code in tpm_cr50_i2c_tis_recv() (bsc#1012628). - platform/x86: pmc_atom: Match all Beckhoff Automation baytrail boards with critclk_systems DMI table (bsc#1012628). - usb: typec: tcpm: Honour pSnkStdby requirement during negotiation (bsc#1012628). - spi: spi-zynqmp-gqspi: Fix runtime PM imbalance in zynqmp_qspi_probe (bsc#1012628). - ARM: dts: aspeed: Rainier: Fix humidity sensor bus address (bsc#1012628). - Drivers: hv: vmbus: Use after free in __vmbus_open() (bsc#1012628). - crypto: arm64/aes-ce - deal with oversight in new CTR carry code (bsc#1012628). - spi: spi-zynqmp-gqspi: fix clk_enable/disable imbalance issue (bsc#1012628). - spi: spi-zynqmp-gqspi: fix hang issue when suspend/resume (bsc#1012628). - spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op (bsc#1012628). - spi: spi-zynqmp-gqspi: return -ENOMEM if dma_map_single fails (bsc#1012628). - btrfs: zoned: move log tree node allocation out of log_root_tree->log_mutex (bsc#1012628). - btrfs: zoned: bail out in btrfs_alloc_chunk for bad input (bsc#1012628). - x86/platform/uv: Fix !KEXEC build failure (bsc#1012628). - hwmon: (pmbus/pxe1610) don't bail out when not all pages are active (bsc#1012628). - platform/surface: aggregator: fix a bit test (bsc#1012628). - Drivers: hv: vmbus: Increase wait time for VMbus unload (bsc#1012628). - PM: hibernate: x86: Use crc32 instead of md5 for hibernation e820 integrity check (bsc#1012628). - usb: dwc2: Fix host mode hibernation exit with remote wakeup flow (bsc#1012628). - usb: dwc2: Fix hibernation between host and device modes (bsc#1012628). - ttyprintk: Add TTY hangup callback (bsc#1012628). - serial: omap: don't disable rs485 if rts gpio is missing (bsc#1012628). - serial: omap: fix rs485 half-duplex filtering (bsc#1012628). - spi: tools: make a symbolic link to the header file spi.h (bsc#1012628). - xen-blkback: fix compatibility bug with single page rings (bsc#1012628). - soc: aspeed: fix a ternary sign expansion bug (bsc#1012628). - drm/tilcdc: send vblank event when disabling crtc (bsc#1012628). - drm/stm: Fix bus_flags handling (bsc#1012628). - drm/amd/display: Fix off by one in hdmi_14_process_transaction() (bsc#1012628). - drm/mcde/panel: Inverse misunderstood flag (bsc#1012628). - scsi: lpfc: Fix null pointer dereference in lpfc_prep_els_iocb() (bsc#1012628). - sched/fair: Fix shift-out-of-bounds in load_balance() (bsc#1012628). - printk: limit second loop of syslog_print_all (bsc#1012628). - afs: Fix updating of i_mode due to 3rd party change (bsc#1012628). - rcu: Remove spurious instrumentation_end() in rcu_nmi_enter() (bsc#1012628). - media: mtk: fix mtk-smi dependency (bsc#1012628). - media: vivid: fix assignment of dev->fbuf_out_flags (bsc#1012628). - media: saa7134: use sg_dma_len when building pgtable (bsc#1012628). - media: saa7146: use sg_dma_len when building pgtable (bsc#1012628). - media: omap4iss: return error code when omap4iss_get() failed (bsc#1012628). - media: rkisp1: rsz: crash fix when setting src format (bsc#1012628). - media: aspeed: fix clock handling logic (bsc#1012628). - drm/panel-simple: Undo enable if HPD never asserts (bsc#1012628). - power: supply: bq27xxx: fix sign of current_now for newer ICs (bsc#1012628). - drm/probe-helper: Check epoch counter in output_poll_execute() (bsc#1012628). - media: venus: core: Fix some resource leaks in the error path of 'venus_probe()' (bsc#1012628). - media: platform: sunxi: sun6i-csi: fix error return code of sun6i_video_start_streaming() (bsc#1012628). - media: m88ds3103: fix return value check in m88ds3103_probe() (bsc#1012628). - media: docs: Fix data organization of MEDIA_BUS_FMT_RGB101010_1X30 (bsc#1012628). - media: [next] staging: media: atomisp: fix memory leak of object flash (bsc#1012628). - media: atomisp: Fixed error handling path (bsc#1012628). - media: m88rs6000t: avoid potential out-of-bounds reads on arrays (bsc#1012628). - media: atomisp: Fix use after free in atomisp_alloc_css_stat_bufs() (bsc#1012628). - x86/kprobes: Retrieve correct opcode for group instruction (bsc#1012628). - drm/amdkfd: fix build error with AMD_IOMMU_V2=m (bsc#1012628). - drm/amdkfd: Fix recursive lock warnings (bsc#1012628). - drm/amd/display: Free local data after use (bsc#1012628). - of: overlay: fix for_each_child.cocci warnings (bsc#1012628). - scsi: qla2xxx: Check kzalloc() return value (bsc#1012628). - x86/kprobes: Fix to check non boostable prefixes correctly (bsc#1012628). - drm/omap: dsi: Add missing IRQF_ONESHOT (bsc#1012628). - selftests: fix prepending $(OUTPUT) to $(TEST_PROGS) (bsc#1012628). - pata_arasan_cf: fix IRQ check (bsc#1012628). - pata_ipx4xx_cf: fix IRQ check (bsc#1012628). - sata_mv: add IRQ checks (bsc#1012628). - ata: libahci_platform: fix IRQ check (bsc#1012628). - seccomp: Fix CONFIG tests for Seccomp_filters (bsc#1012628). - drm/mediatek: Switch the hdmi bridge ops to the atomic versions (bsc#1012628). - drm/mediatek: Don't support hdmi connector creation (bsc#1012628). - nvme-tcp: block BH in sk state_change sk callback (bsc#1012628). - nvmet-tcp: fix incorrect locking in state_change sk callback (bsc#1012628). - clk: imx: Fix reparenting of UARTs not associated with stdout (bsc#1012628). - power: supply: bq25980: Move props from battery node (bsc#1012628). - nvme: retrigger ANA log update if group descriptor isn't found (bsc#1012628). - media: ccs: Fix sub-device function (bsc#1012628). - media: ipu3-cio2: Fix pixel-rate derived link frequency (bsc#1012628). - media: i2c: imx219: Move out locking/unlocking of vflip and hflip controls from imx219_set_stream (bsc#1012628). - media: i2c: imx219: Balance runtime PM use-count (bsc#1012628). - media: v4l2-ctrls.c: fix race condition in hdl->requests list (bsc#1012628). - media: rkvdec: Do not require all controls to be present in every request (bsc#1012628). - vfio/fsl-mc: Re-order vfio_fsl_mc_probe() (bsc#1012628). - vfio/pci: Move VGA and VF initialization to functions (bsc#1012628). - vfio/pci: Re-order vfio_pci_probe() (bsc#1012628). - drm/msm: Fix debugfs deadlock (bsc#1012628). - drm/msm/dpu: enable DPU_SSPP_QOS_8LVL for SM8250 (bsc#1012628). - vfio/mdev: Do not allow a mdev_type to have a NULL parent pointer (bsc#1012628). - clk: zynqmp: move zynqmp_pll_set_mode out of round_rate callback (bsc#1012628). - clk: zynqmp: pll: add set_pll_mode to check condition in zynqmp_pll_enable (bsc#1012628). - drm: xlnx: zynqmp: fix a memset in zynqmp_dp_train() (bsc#1012628). - media: i2c: rdamc21: Fix warning on u8 cast (bsc#1012628). - clk: qcom: a7-pll: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - clk: qcom: a53-pll: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - clk: qcom: apss-ipq-pll: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - drm/amd/display: use GFP_ATOMIC in dcn20_resource_construct (bsc#1012628). - drm/amd/display: check fb of primary plane (bsc#1012628). - drm/radeon: Fix a missing check bug in radeon_dp_mst_detect() (bsc#1012628). - bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1012628). - clk: uniphier: Fix potential infinite loop (bsc#1012628). - scsi: pm80xx: Increase timeout for pm80xx mpi_uninit_check() (bsc#1012628). - scsi: pm80xx: Fix potential infinite loop (bsc#1012628). - scsi: ufs: ufshcd-pltfrm: Fix deferred probing (bsc#1012628). - scsi: hisi_sas: Fix IRQ checks (bsc#1012628). - scsi: jazz_esp: Add IRQ check (bsc#1012628). - scsi: sun3x_esp: Add IRQ check (bsc#1012628). - scsi: sni_53c710: Add IRQ check (bsc#1012628). - scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1012628). - mailbox: sprd: Introduce refcnt when clients requests/free channels (bsc#1012628). - mfd: stm32-timers: Avoid clearing auto reload register (bsc#1012628). - nvmet-tcp: fix a segmentation fault during io parsing error (bsc#1012628). - nvme-pci: don't simple map sgl when sgls are disabled (bsc#1012628). - media: meson-ge2d: fix rotation parameters (bsc#1012628). - media: cedrus: Fix H265 status definitions (bsc#1012628). - HSI: core: fix resource leaks in hsi_add_client_from_dt() (bsc#1012628). - x86/events/amd/iommu: Fix sysfs type mismatch (bsc#1012628). - perf/amd/uncore: Fix sysfs type mismatch (bsc#1012628). - io_uring: fix overflows checks in provide buffers (bsc#1012628). - block/rnbd-clt-sysfs: Remove copy buffer overlap in rnbd_clt_get_path_name (bsc#1012628). - sched/debug: Fix cgroup_path[] serialization (bsc#1012628). - kthread: Fix PF_KTHREAD vs to_kthread() race (bsc#1012628). - ataflop: potential out of bounds in do_format() (bsc#1012628). - ataflop: fix off by one in ataflop_probe() (bsc#1012628). - drivers/block/null_blk/main: Fix a double free in null_init (bsc#1012628). - xsk: Respect device's headroom and tailroom on generic xmit path (bsc#1012628). - HID: plantronics: Workaround for double volume key presses (bsc#1012628). - perf symbols: Fix dso__fprintf_symbols_by_name() to return the number of printed chars (bsc#1012628). - ASoC: Intel: boards: sof-wm8804: add check for PLL setting (bsc#1012628). - ASoC: Intel: Skylake: Compile when any configuration is selected (bsc#1012628). - RDMA/mlx5: Zero out ODP related items in the mlx5_ib_mr (bsc#1012628). - RDMA/mlx5: Fix query RoCE port (bsc#1012628). - RDMA/mlx5: Fix mlx5 rates to IB rates map (bsc#1012628). - net/mlx5: DR, Add missing vhca_id consume from STEv1 (bsc#1012628). - wilc1000: write value to WILC_INTR2_ENABLE register (bsc#1012628). - KVM: x86/mmu: Retry page faults that hit an invalid memslot (bsc#1012628). - Bluetooth: avoid deadlock between hci_dev->lock and socket lock (bsc#1012628). - net: lapbether: Prevent racing when checking whether the netif is running (bsc#1012628). - libbpf: Add explicit padding to bpf_xdp_set_link_opts (bsc#1012628). - bpftool: Fix maybe-uninitialized warnings (bsc#1012628). - iommu: Check dev->iommu in iommu_dev_xxx functions (bsc#1012628). - iommu/dma: Resurrect the "forcedac" option (bsc#1012628). - iommu/vt-d: Reject unsupported page request modes (bsc#1012628). - ASoC: tegra30: i2s: Restore hardware state on runtime PM resume (bsc#1012628). - net: dsa: bcm_sf2: add function finding RGMII register (bsc#1012628). - net: dsa: bcm_sf2: fix BCM4908 RGMII reg(s) (bsc#1012628). - selftests/bpf: Re-generate vmlinux.h and BPF skeletons if bpftool changed (bsc#1012628). - libbpf: Add explicit padding to btf_dump_emit_type_decl_opts (bsc#1012628). - powerpc/mm: Move the linear_mapping_mutex to the ifdef where it is used (bsc#1012628). - powerpc/fadump: Mark fadump_calculate_reserve_size as __init (bsc#1012628). - powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1012628). - MIPS: fix local_irq_{disable,enable} in asmmacro.h (bsc#1012628). - ima: Fix the error code for restoring the PCR value (bsc#1012628). - inet: use bigger hash table for IP ID generation (bsc#1012628). - pinctrl: pinctrl-single: remove unused parameter (bsc#1012628). - pinctrl: pinctrl-single: fix pcs_pin_dbg_show() when bits_per_mux is not zero (bsc#1012628). - MIPS: loongson64: fix bug when PAGE_SIZE > 16KB (bsc#1012628). - ASoC: wm8960: Remove bitclk relax condition in wm8960_configure_sysclk (bsc#1012628). - iommu/arm-smmu-v3: add bit field SFM into GERROR_ERR_MASK (bsc#1012628). - RDMA/mlx5: Fix drop packet rule in egress table (bsc#1012628). - IB/isert: Fix a use after free in isert_connect_request (bsc#1012628). - powerpc/64s: Fix hash fault to use TRAP accessor (bsc#1012628). - powerpc: Fix HAVE_HARDLOCKUP_DETECTOR_ARCH build configuration (bsc#1012628). - MIPS/bpf: Enable bpf_probe_read{, str}() on MIPS again (bsc#1012628). - gpio: guard gpiochip_irqchip_add_domain() with GPIOLIB_IRQCHIP (bsc#1012628). - fs: dlm: fix missing unlock on error in accept_from_sock() (bsc#1012628). - ASoC: q6afe-clocks: fix reprobing of the driver (bsc#1012628). - ALSA: core: remove redundant spin_lock pair in snd_card_disconnect (bsc#1012628). - net: phy: lan87xx: fix access to wrong register of LAN87xx (bsc#1012628). - udp: skip L4 aggregation for UDP tunnel packets (bsc#1012628). - udp: never accept GSO_FRAGLIST packets (bsc#1012628). - powerpc/pseries: Only register vio drivers if vio bus exists (bsc#1012628). - net/tipc: fix missing destroy_workqueue() on error in tipc_crypto_start() (bsc#1012628). - bug: Remove redundant condition check in report_bug (bsc#1012628). - RDMA/core: Fix corrupted SL on passive side (bsc#1012628). - nfc: pn533: prevent potential memory corruption (bsc#1012628). - net: hns3: Limiting the scope of vector_ring_chain variable (bsc#1012628). - mips: bmips: fix syscon-reboot nodes (bsc#1012628). - KVM: arm64: Fix error return code in init_hyp_mode() (bsc#1012628). - iommu/vt-d: Don't set then clear private data in prq_event_thread() (bsc#1012628). - iommu: Fix a boundary issue to avoid performance drop (bsc#1012628). - iommu/vt-d: Report right snoop capability when using FL for IOVA (bsc#1012628). - iommu/vt-d: Report the right page fault address (bsc#1012628). - iommu/vt-d: Remove WO permissions on second-level paging entries (bsc#1012628). - iommu/vt-d: Invalidate PASID cache when root/context entry changed (bsc#1012628). - ALSA: usb-audio: Add error checks for usb_driver_claim_interface() calls (bsc#1012628). - HID: lenovo: Use brightness_set_blocking callback for setting LEDs brightness (bsc#1012628). - HID: lenovo: Fix lenovo_led_set_tp10ubkbd() error handling (bsc#1012628). - HID: lenovo: Check hid_get_drvdata() returns non NULL in lenovo_event() (bsc#1012628). - HID: lenovo: Map mic-mute button to KEY_F20 instead of KEY_MICMUTE (bsc#1012628). - KVM: arm64: Initialize VCPU mdcr_el2 before loading it (bsc#1012628). - ASoC: simple-card: fix possible uninitialized single_cpu local variable (bsc#1012628). - liquidio: Fix unintented sign extension of a left shift of a u16 (bsc#1012628). - IB/hfi1: Use kzalloc() for mmu_rb_handler allocation (bsc#1012628). - powerpc/64s: Fix pte update for kernel memory on radix (bsc#1012628). - powerpc/pseries: Add key to flags in pSeries_lpar_hpte_updateboltedpp() (bsc#1012628). - powerpc/64s: Use htab_convert_pte_flags() in hash__mark_rodata_ro() (bsc#1012628). - powerpc/perf: Fix PMU constraint check for EBB events (bsc#1012628). - powerpc: iommu: fix build when neither PCI or IBMVIO is set (bsc#1012628). - mac80211: bail out if cipher schemes are invalid (bsc#1012628). - perf vendor events amd: Fix broken L2 Cache Hits from L2 HWPF metric (bsc#1012628). - RDMA/hns: Fix missing assignment of max_inline_data (bsc#1012628). - xfs: fix return of uninitialized value in variable error (bsc#1012628). - rtw88: Fix an error code in rtw_debugfs_set_rsvd_page() (bsc#1012628). - mt7601u: fix always true expression (bsc#1012628). - mt76: mt7615: fix tx skb dma unmap (bsc#1012628). - mt76: mt7915: fix tx skb dma unmap (bsc#1012628). - mt76: mt7921: fix suspend/resume sequence (bsc#1012628). - mt76: mt7921: fix memory leak in mt7921_coredump_work (bsc#1012628). - mt76: connac: fix up the setting for ht40 mode in mt76_connac_mcu_uni_add_bss (bsc#1012628). - mt76: mt7921: fixup rx bitrate statistics (bsc#1012628). - mt76: mt7615: fix memory leak in mt7615_coredump_work (bsc#1012628). - mt76: mt7921: fix aggr length histogram (bsc#1012628). - mt76: mt7915: fix aggr len debugfs node (bsc#1012628). - mt76: mt7921: fix stats register definitions (bsc#1012628). - mt76: mt7615: fix TSF configuration (bsc#1012628). - mt76: mt7615: fix mib stats counter reporting to mac80211 (bsc#1012628). - mt76: mt7915: fix mib stats counter reporting to mac80211 (bsc#1012628). - mt76: connac: fix kernel warning adding monitor interface (bsc#1012628). - mt76: check return value of mt76_txq_send_burst in mt76_txq_schedule_list (bsc#1012628). - mt76: mt7921: fix the base of PCIe interrupt (bsc#1012628). - mt76: mt7921: fix the base of the dynamic remap (bsc#1012628). - mt76: mt7915: fix rxrate reporting (bsc#1012628). - mt76: mt7915: fix txrate reporting (bsc#1012628). - mt76: mt7663: fix when beacon filter is being applied (bsc#1012628). - mt76: mt7663s: make all of packets 4-bytes aligned in sdio tx aggregation (bsc#1012628). - mt76: mt7663s: fix the possible device hang in high traffic (bsc#1012628). - mt76: mt7615: cleanup mcu tx queue in mt7615_dma_reset() (bsc#1012628). - mt76: mt7915: cleanup mcu tx queue in mt7915_dma_reset() (bsc#1012628). - mt76: mt7921: always wake the device in mt7921_remove_interface (bsc#1012628). - mt76: mt7921: fix inappropriate WoW setup with the missing ARP informaiton (bsc#1012628). - mt76: mt7921: fix the dwell time control (bsc#1012628). - KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit (bsc#1012628). - ovl: show "userxattr" in the mount data (bsc#1012628). - ovl: invalidate readdir cache on changes to dir with origin (bsc#1012628). - RDMA/qedr: Fix error return code in qedr_iw_connect() (bsc#1012628). - IB/hfi1: Fix error return code in parse_platform_config() (bsc#1012628). - RDMA/bnxt_re: Fix error return code in bnxt_qplib_cq_process_terminal() (bsc#1012628). - cxgb4: Fix unintentional sign extension issues (bsc#1012628). - net: thunderx: Fix unintentional sign extension issue (bsc#1012628). - mt76: mt7921: fix kernel crash when the firmware fails to download (bsc#1012628). - RDMA/srpt: Fix error return code in srpt_cm_req_recv() (bsc#1012628). - RDMA/rtrs-clt: destroy sysfs after removing session from active list (bsc#1012628). - pinctrl: at91-pio4: Fix slew rate disablement (bsc#1012628). - i2c: cadence: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: img-scb: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: imx: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: omap: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: sprd: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: stm32f7: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: xiic: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: cadence: add IRQ check (bsc#1012628). - i2c: emev2: add IRQ check (bsc#1012628). - i2c: jz4780: add IRQ check (bsc#1012628). - i2c: mlxbf: add IRQ check (bsc#1012628). - i2c: rcar: add IRQ check (bsc#1012628). - i2c: sh7760: add IRQ check (bsc#1012628). - fuse: fix matching of FUSE_DEV_IOC_CLONE command (bsc#1012628). - iwlwifi: rs-fw: don't support stbc for HE 160 (bsc#1012628). - iwlwifi: dbg: disable ini debug in 9000 family and below (bsc#1012628). - powerpc/xive: Drop check on irq_data in xive_core_debug_show() (bsc#1012628). - powerpc/xive: Fix xmon command "dxi" (bsc#1012628). - powerpc/syscall: switch user_exit_irqoff and trace_hardirqs_off order (bsc#1012628). - ASoC: ak5558: correct reset polarity (bsc#1012628). - net/mlx5: Fix bit-wise and with zero (bsc#1012628). - net/packet: remove data races in fanout operations (bsc#1012628). - drm/i915/gvt: Fix error code in intel_gvt_init_device() (bsc#1012628). - iommu/vt-d: Fix an error handling path in 'intel_prepare_irq_remapping()' (bsc#1012628). - iommu/amd: Put newline after closing bracket in warning (bsc#1012628). - perf beauty: Fix fsconfig generator (bsc#1012628). - drm/amdgpu: fix an error code in init_pmu_entry_by_type_and_add() (bsc#1012628). - drm/amd/pm: fix error code in smu_set_power_limit() (bsc#1012628). - MIPS: pci-legacy: stop using of_pci_range_to_resource (bsc#1012628). - powerpc/pseries: extract host bridge from pci_bus prior to bus removal (bsc#1012628). - iommu/mediatek: Always enable the clk on resume (bsc#1012628). - mptcp: fix format specifiers for unsigned int (bsc#1012628). - powerpc/smp: Reintroduce cpu_core_mask (bsc#1012628). - KVM: x86: dump_vmcs should not assume GUEST_IA32_EFER is valid (bsc#1012628). - rtlwifi: 8821ae: upgrade PHY and RF parameters (bsc#1012628). - wlcore: fix overlapping snprintf arguments in debugfs (bsc#1012628). - i2c: sh7760: fix IRQ error path (bsc#1012628). - i2c: mediatek: Fix wrong dma sync flag (bsc#1012628). - mwl8k: Fix a double Free in mwl8k_probe_hw (bsc#1012628). - netfilter: nft_payload: fix C-VLAN offload support (bsc#1012628). - netfilter: nftables_offload: VLAN id needs host byteorder in flow dissector (bsc#1012628). - netfilter: nftables_offload: special ethertype handling for VLAN (bsc#1012628). - vsock/vmci: log once the failed queue pair allocation (bsc#1012628). - libbpf: Initialize the bpf_seq_printf parameters array field by field (bsc#1012628). - net: ethernet: ixp4xx: Set the DMA masks explicitly (bsc#1012628). - gro: fix napi_gro_frags() Fast GRO breakage due to IP alignment check (bsc#1012628). - RDMA/cxgb4: add missing qpid increment (bsc#1012628). - RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails (bsc#1012628). - ALSA: usb: midi: don't return -ENOMEM when usb_urb_ep_type_check fails (bsc#1012628). - sfc: ef10: fix TX queue lookup in TX event handling (bsc#1012628). - vsock/virtio: free queued packets when closing socket (bsc#1012628). - net: marvell: prestera: fix port event handling on init (bsc#1012628). - net: davinci_emac: Fix incorrect masking of tx and rx error channel (bsc#1012628). - rtw88: refine napi deinit flow (bsc#1012628). - mt76: mt7615: fix memleak when mt7615_unregister_device() (bsc#1012628). - mt76: mt7915: fix memleak when mt7915_unregister_device() (bsc#1012628). - mt76: mt7921: run mt7921_mcu_fw_log_2_host holding mt76 mutex (bsc#1012628). - powerpc/pseries/iommu: Fix window size for direct mapping with pmem (bsc#1012628). - crypto: ccp: Detect and reject "invalid" addresses destined for PSP (bsc#1012628). - net: dsa: mv88e6xxx: Fix off-by-one in VTU devlink region size (bsc#1012628). - nfp: devlink: initialize the devlink port attribute "lanes" (bsc#1012628). - net: stmmac: fix TSO and TBS feature enabling during driver open (bsc#1012628). - net: renesas: ravb: Fix a stuck issue when a lot of frames are received (bsc#1012628). - net: phy: intel-xway: enable integrated led functions (bsc#1012628). - mt76: mt7615: Fix a dereference of pointer sta before it is null checked (bsc#1012628). - mt76: mt7921: fix possible invalid register access (bsc#1012628). - RDMA/rxe: Fix a bug in rxe_fill_ip_info() (bsc#1012628). - RDMA/core: Add CM to restrack after successful attachment to a device (bsc#1012628). - powerpc/64: Fix the definition of the fixmap area (bsc#1012628). - ath9k: Fix error check in ath9k_hw_read_revisions() for PCI devices (bsc#1012628). - ath10k: Fix a use after free in ath10k_htc_send_bundle (bsc#1012628). - ath10k: Fix ath10k_wmi_tlv_op_pull_peer_stats_info() unlock without lock (bsc#1012628). - wlcore: Fix buffer overrun by snprintf due to incorrect buffer size (bsc#1012628). - powerpc/perf: Fix the threshold event selection for memory events in power10 (bsc#1012628). - powerpc/52xx: Fix an invalid ASM expression ('addi' used instead of 'add') (bsc#1012628). - net: phy: marvell: fix m88e1011_set_downshift (bsc#1012628). - net: phy: marvell: fix m88e1111_set_downshift (bsc#1012628). - net: enetc: fix link error again (bsc#1012628). - net, xdp: Update pkt_type if generic XDP changes unicast MAC (bsc#1012628). - bnxt_en: fix ternary sign extension bug in bnxt_show_temp() (bsc#1012628). - ARM: dts: uniphier: Change phy-mode to RGMII-ID to enable delay pins for RTL8211E (bsc#1012628). - arm64: dts: uniphier: Change phy-mode to RGMII-ID to enable delay pins for RTL8211E (bsc#1012628). - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (bsc#1012628). - selftests: net: mirror_gre_vlan_bridge_1q: Make an FDB entry static (bsc#1012628). - selftests: mlxsw: Remove a redundant if statement in port_scale test (bsc#1012628). - selftests: mlxsw: Remove a redundant if statement in tc_flower_scale test (bsc#1012628). - mptcp: Retransmit DATA_FIN (bsc#1012628). - bnxt_en: Fix RX consumer index logic in the error path (bsc#1012628). - KVM: VMX: Intercept FS/GS_BASE MSR accesses for 32-bit KVM (bsc#1012628). - KVM: SVM: Zero out the VMCB array used to track SEV ASID association (bsc#1012628). - KVM: SVM: Free sev_asid_bitmap during init if SEV setup fails (bsc#1012628). - KVM: SVM: Disable SEV/SEV-ES if NPT is disabled (bsc#1012628). - net/sched: act_ct: fix wild memory access when clearing fragments (bsc#1012628). - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (bsc#1012628). - selftests/bpf: Fix BPF_CORE_READ_BITFIELD() macro (bsc#1012628). - selftests/bpf: Fix field existence CO-RE reloc tests (bsc#1012628). - selftests/bpf: Fix core_reloc test runner (bsc#1012628). - bpf: Fix propagation of 32 bit unsigned bounds from 64 bit bounds (bsc#1012628). - RDMA/siw: Fix a use after free in siw_alloc_mr (bsc#1012628). - RDMA/bnxt_re: Fix a double free in bnxt_qplib_alloc_res (bsc#1012628). - net: bridge: mcast: fix broken length + header check for MRDv6 Adv (bsc#1012628). - net: dsa: mv88e6xxx: Fix 6095/6097/6185 ports in non-SERDES CMODE (bsc#1012628). - net:nfc:digital: Fix a double free in digital_tg_recv_dep_req (bsc#1012628). - perf tools: Change fields type in perf_record_time_conv (bsc#1012628). - perf jit: Let convert_timestamp() to be backwards-compatible (bsc#1012628). - perf session: Add swap operation for event TIME_CONV (bsc#1012628). - ia64: ensure proper NUMA distance and possible map initialization (bsc#1012628). - ia64: fix EFI_DEBUG build (bsc#1012628). - kfifo: fix ternary sign extension bugs (bsc#1012628). - mm: memcontrol: slab: fix obtain a reference to a freeing memcg (bsc#1012628). - mm/sparse: add the missing sparse_buffer_fini() in error branch (bsc#1012628). - mm/memory-failure: unnecessary amount of unmapping (bsc#1012628). - afs: Fix speculative status fetches (bsc#1012628). - bpf: Fix alu32 const subreg bound tracking on bitwise operations (bsc#1012628). - bpf, ringbuf: Deny reserve of buffers larger than ringbuf (bsc#1012628). - bpf: Prevent writable memory-mapping of read-only ringbuf pages (bsc#1012628). - net: Only allow init netns to set default tcp cong to a restricted algo (bsc#1012628). - smp: Fix smp_call_function_single_async prototype (bsc#1012628). - Refresh patches.suse/firmware-xilinx-Add-pinctrl-support.patch. - Update config files. - commit f003acc - drm/radeon: use the dummy page for GART if needed (bsc#1185516). - commit 25fe027 - ath11k: Clear the fragment cache during key install (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - ath10k: Validate first subframe of A-MSDU before processing the list (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - ath10k: Fix TKIP Michael MIC verification for PCIe (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - ath10k: drop MPDU which has discard flag set by firmware for SDIO (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - ath10k: drop fragments with multicast DA for SDIO (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - ath10k: drop fragments with multicast DA for PCIe (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - ath10k: add CCMP PN replay protection for fragmented frames for PCIe (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: extend protection against mixed key and fragment cache attacks (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: do not accept/forward invalid EAPOL frames (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: prevent attacks on TKIP/WEP as well (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: check defrag PN against current frame (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: add fragment cache to sta_info (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: drop A-MSDUs on old ciphers (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - cfg80211: mitigate A-MSDU aggregation attacks (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: properly handle A-MSDUs that start with an RFC 1042 header (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: prevent mixed key and fragment cache attacks (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: assure all fragments are encrypted (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - commit 469e487 ==== krb5 ==== - Build with full Cyrus SASL support * Negotiating SASL credentials with an EXTERNAL bind mechanism requires interaction. Kerberos provides its own interaction function that skips all interaction, thus preventing the mechanism from working. ==== kubernetes ==== Version update (1.21.0 -> 1.21.1) Subpackages: kubernetes-client kubernetes-kubeadm kubernetes-kubelet - Bump kubernetes-* to 1.21.1 - Bump kubernetes-*-minus1 to 1.20.7 ==== kubernetes1.20 ==== Version update (1.20.6 -> 1.20.7) - Update to version 1.20.7: * staging/publishing: Set default go version to go1.15.12 * build: Update to k/repo-infra(a)v0.1.7 (supports go1.15.12) * Use go-runner:v2.3.1-go1.15.12-buster.0 image (built on go1.15.12) * Update to go1.15.12 * fix: not tagging static public IP * Add test create service with ns * Set namespace when using kubectl create service * Automated cherry pick of #101377: Fix validation in kubectl create ingress (#101428) * Updating EndpointSlice controllers to avoid duplicate creations * Update pkg/volume/azure_file/azure_provision.go * Normalize share name to not include capital letters * Extend pod start timeout to 5min for storage subpath configmap test * fix: set "host is down" as corrupted mount * no watch endpointslice in userpace mode * Ensure service deleted when the Azure resource group has been deleted * Updating EndpointSlice validation to match Endpoints validation * Make parallel build memory threshold configurable * fix: azure file namespace issue in csi translation * pkg/kubelet: improve the node informer sync check * Additional CVE-2021-3121 fix * Fix startupProbe behaviour changed * Fix test * staging/publishing: Set default go version to go1.15.10 * build: Update to k/repo-infra(a)v0.1.6 (supports go1.15.11) * Use go-runner:v2.3.1-go1.15.11-buster.0 image (built on go1.15.11) * Update to go1.15.11 * add duration encoder to structured logger * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.6 * exec test should not run in Parallel as feature gate is not locked * hack/update-bazel.sh * respect ExecProbeTimeout * apf: exempt probes /healthz /livez /readyz * DelegatingAuthenticationOptions TokenReview request timeout * list pod list once to avoid timeout * Cleanup portforward streams after their usage * fix smb mount issue on Windows ==== kubernetes1.21 ==== Version update (1.21.0 -> 1.21.1) Subpackages: kubernetes1.21-client kubernetes1.21-client-common kubernetes1.21-kubeadm kubernetes1.21-kubelet kubernetes1.21-kubelet-common - Toggle ip4/ipv6 forwarding sysctls to ensure all devices are refreshed [boo#1186125] - Restore 90-kubeadm.conf, still needed [boo#1186125] - Stop setting sysctls on kubelet start with `sysctl -a --system`. Instead use more specific sysctl calls in kubelet service start. [boo#1186125] - Update to version 1.21.1: * [go1.16] Update to go1.16.4 * Automated cherry pick of #101377: Fix validation in kubectl create ingress (#101426) * Update tests to use agnhost 2.32 * Fix EndpointSlice describe panic when an Endpoint doesn't have zone * Add test create service with ns * Set namespace when using kubectl create service * Update pkg/volume/azure_file/azure_provision.go * Normalize share name to not include capital letters * Extend pod start timeout to 5min for storage subpath configmap test * Fix cleanupMountpoint issue for Windows * fix: set "host is down" as corrupted mount * no watch endpointslice in userpace mode * Ensure service deleted when the Azure resource group has been deleted * Update Makefile * Update dependencies.yaml * update debian-base to buster-v1.5.0 for CVEs * fix TestMutatingWebhookResetsInvalidManagedFields flakes * Updating EndpointSlice validation to match Endpoints validation * fix: azure file namespace issue in csi translation * pkg/kubelet: improve the node informer sync check * Remove Limits from scheduling e2e balanced pod resources * Additional CVE-2021-3121 fix * Fix RBAC of generic ephemeral volumes controller * move filesystem resize code to kubernetes/mount-utils and add need resize function * Fix panic when killing container fails * Fix startupProbe behaviour changed * Fix test * [go1.16] Update to go1.16.3 * Fix Job describe for completion mode * Upgrade kustomize-in-kubectl to v4.1.2 * exec test should not run in Parallel as feature gate is not locked * respect ExecProbeTimeout * apf: exempt probes /healthz /livez /readyz * DelegatingAuthenticationOptions TokenReview request timeout * add node handlers to the metaproxier * Updating Topology Aware Hints to support "Auto" value for annotation * list pod list once to avoid timeout * gce configure containerd default_runtime_name * Update the containerd runtime binary path - gce * Cleanup portforward streams after their usage * azure: fix node public IP not able to fetch issues from IMDS * Update CHANGELOG/CHANGELOG-1.21.md for v1.21.0 * e2e test with hostNetwork pods can't run in parallel * do not tag user created public IPs ==== kubic-control ==== Version update (0.10.2 -> 0.11) Subpackages: kubic-haproxycfg kubicctl kubicd - Update to version 0.11 - workaround for go 1.15 certificate handling changes, all certificates should be re-generated with kubicctl 0.11 - adjust for kubeadm removed upgrade node arguments ==== less ==== Version update (581.2 -> 586) - update to 586: * Make less able to read lesskey source files (deprecating lesskey). * If XDG_CONFIG_HOME is set, find lesskey source file in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey. * If XDG_DATA_HOME is set, find and store history file in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst. * Add the --lesskey-src option. * Add the --file-size option. * Fix bug which could leave terminal in mouse-reporting mode after exiting less. * Fix bug which caused failure to respond to window resize. * Fix backslash bug searching in tag file. ==== libX11 ==== Version update (1.7.0 -> 1.7.1) Subpackages: libX11-6 libX11-data - Update to version 1.7.1 * security update for CVE-2021-31535 (bsc#1182506) - supersedes U_CVE-2021-31535.patch - U_CVE-2021-31535.patch * adds missing request length checks in libX11 (CVE-2021-31535, bsc#1182506) ==== libapparmor ==== - add abstractions-php8.diff to support PHP8 in abstractions/php (boo#1186267) ==== libcontainers-common ==== - Update common to 0.38.2 - Update storage to 1.31.0 - Update image to 5.12.0 ==== libepoxy ==== Version update (1.5.5 -> 1.5.8) - Update to version 1.5.8: + Revert changes from PR #238 / #229 + Fixes regressions: #240, #252, #253 - Update to version 1.5.7: * Remove type redefinition - Includes changes from 1.5.6: * Fix issue loading OpenGL/GLX/EGL libraries * Expose dependency variables in pkg-config file * Close output objects when generating files ==== libidn2 ==== Version update (2.3.0 -> 2.3.1) - libidn2 2.3.1: * Implement full roundtrip for lookup functionality * Fix domain too long error * Updated gnulib files and various build fixes * verify source signature again ==== libqmi ==== Version update (1.28.2 -> 1.28.4) - Update to version 1.28.4 * libqmi-glib: - Add 'wwan' subsystem support. - Plug memleak when allocating new links. - Plug memleak when QmiDevice is opened multiple times. - Fix build when ARPHRD_RAWIP isn't defined in libc. * gir: - Flag all output TLV readers as optional. - Add explicit ownership information in the string and struct return annotations. * collections: - basic: added WMS Send ACK * qmicli: - Fix double GError when both 'Extended List' and 'Bandwidth List' are missing in --nas-get-rf-band-info. * Several other minor improvements and fixes. ==== librsvg ==== Version update (2.50.5 -> 2.50.6) Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 - Update to version 2.50.6: + Librsvg now requires at least Pango 1.44. + glgo#GNOME/librsvg#730: Incorrect text spacing when the transform is not 1:1. You can see this when a small font-size is scaled up due to a transform. It is less visible for a large font-size scaled down. + glgo#GNOME/librsvg#704: Fix circle/ellipse in paths when they are made out of a single Arc command. ==== libsigc++2 ==== Version update (2.10.6 -> 2.10.7) - Update to version 2.10.7: + Meson build: - Make it possible to use sigc++ as a subproject. - Fix dependency on files generated from .h.m4 files. - No implicit_include_directories. - Make quiet installations possible. - Fix build as subproject without building documentation. + Documentation fixes. ==== libtirpc ==== Version update (1.3.1 -> 1.3.2) Subpackages: libtirpc-netconfig libtirpc3 - update to 1.3.2: * Replace the final SunRPC licenses with BSD licenses * blacklist: Add a few more well known ports * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS ==== logrotate ==== Version update (3.18.0 -> 3.18.1) - update to 3.18.1: * fix memory leaks on error-handling paths * make `renamecopy` and `copytruncate` override each other * improve error handling in the parser of configuration files * improve user experience for non-privileged users of logrotate ==== lua54 ==== - Fix doc location (boo#1186233) ==== mozilla-nss ==== Version update (3.63.1 -> 3.64) - update to NSS 3.64 * bmo#1705286 - Properly detect mips64. * bmo#1687164 - Introduce NSS_DISABLE_CRYPTO_VSX and disable_crypto_vsx. * bmo#1698320 - replace __builtin_cpu_supports("vsx") with ppc_crypto_support() for clang. * bmo#1613235 - Add POWER ChaCha20 stream cipher vector acceleration. ==== multipath-tools ==== Version update (0.8.5+30+suse.633836e -> 0.8.6+10+suse.4771137) Subpackages: kpartx libmpath0 - Update to version 0.8.6+10+suse.47711374: * Github workflows: add CI for SUSE-specific branches - Disabled LTO for multipath-tools * The test for is_valid_path fails if LTO is enabled, just disabling it for %check is insufficient. ==== nfs-utils ==== Subpackages: libnfsidmap1 nfs-client - Update to version 2.5.4-rc4 to get all recent fixes: - nfs-utils-2-5-4-rc4.patch e4ce810a Move declaration of etab and rmtab into libraries 7a4e2d1d Remove 'force' arg from cache_flush() c5528f40 Fix NFSv4 export of tmpfs filesystems ed83085f gssd: use mutex to protect decrement of refcount - nfs-utils-2-5-4-rc3.patch 972dba0f nfs-utils: Enable the retrieval of raw config settings without expansion 964f4861 nfs-utils: Factor out common structure cleanup calls 8219bdb0 Replace all /var/run with /run 81727afe Fix `statx()` emulation breaking exports a41afe9e mountd/exports: Fix typo in the man page - nfs-utils-2-5-4-rc2.patch 2f669b6f NFS server should enable RDMA by default d77ece22 mountd/exportd: only log confirmed clients, and poll for updates ac266e2e exportfs: fix unexporting of '/' - nfs-utils-2-5-4-rc1.patch 7abd15e3 nfsdclnts: Ignore SIGPIPE signal edeb3815 mountd: add logging of NFSv4 clients attaching and detaching. f8e2c8d4 mountd: make default ttl settable by option cc150093 mountd: add --cache-use-ipaddr option to force use_ipaddr c7a954ae mountd: add logging for authentication results for accesses. 1a8156f8 mountd/exports: update man page fec7347e mountd: Don't proactively add export info when fh info is requested. a72c151f mountd: reject unknown client IP when !use_ipaddr. 05bacfed gssd: Add options to rpc.gssd to allow for the use of $HOME/.k5identity files 7e559dbd exportd: server-side gid management - 0001-Replace-all-var-run-with-run.patch is now part of nfs-utils-2-5-4-rc3.patch ==== pango ==== Version update (1.48.4 -> 1.48.5) - Update to version 1.48.5: + Only initialize fontconfig once. + Add missing deprecation notices. + Add some missing apis to the markup docs. + Speed up Emoji classification. + Fix hangs and memory leaks. + Don't insert hyphens at word boundaries. + Handle empty lines better. + Avoid width fluctuations with ellipsized text. + Add a utility to show text segmentation. ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-bootloader patterns-base-minimal_base - Suggest openssl from patterns-base-base: in case something requires /usr/bin/openssl or openssl(cli), we want to declare openssl as our default. - Some enhanced_base cleanup * alsa-plugins will be pulled in by alsa if needed * cronie is not needed in favor of systemd timers * The cups server is not needed in general * postfix used to be required by cron but not anymore today * cyrus-sasl will be pulled in by others if needed * openslp will be pulled in by rsync so far * translation-update is for build systems only * udev is pulled in by systemd if needed * perl-TermReadLine-Gnu ??? ==== patterns-microos ==== Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-base-microdnf patterns-microos-base-packagekit patterns-microos-base-zypper patterns-microos-basesystem patterns-microos-cloud patterns-microos-cockpit patterns-microos-defaults patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-selinux patterns-microos-sssd_ldap - Drop partitionmanager due to bsc#1178848. We'll revisit when that is fixed. - make cups-pk-helper conditional to PackageKit - add qemu-guest-agent to the DVD, to improve experience in case we install in a VM - add some cups and printing related packages so that a new printer can actually be succesfully added (tested with GNOME only) - add some disk handling GUI tools (for partitioning USB keys, ext. disks, etc) for both GNOME and KDE - Conditionally install cockpit-packagekit in the Cockpit pattern if the PackageKit pattern is installed to allow system updates through Cockpit on package managed MicroOS systems. - Fix previous changelog entry to be formatted correctly ==== permissions ==== Version update (1550_20210125 -> 1550_20210518) Subpackages: chkstat permissions-config - Update to version 20210518: * whitelist please (bsc#1183669) - Update to version 20210518: * Fix enlightenment paths for 32-bit architectures ==== psmisc ==== - Do not change CAP within spec file (boo#1186258) - Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch * Fix bsc#1185208 to make private mount namespaces work as well as to distinguish NFS mounts from same remote device share. ==== python-PyJWT ==== Version update (2.0.1 -> 2.1.0) - update to 2.1.0: - Allow claims validation without making JWT signature validation mandatory. ` - Remove padding from JWK test data. ` - Make `kty` mandatory in JWK to be compliant with RFC7517. ` - Allow JWK without `alg` to be compliant with RFC7517. ` - Allow to verify with private key on ECAlgorithm, as well as on Ed25519Algorithm. ` - Add caching by default to PyJWKClient ` - Add missing exceptions.InvalidKeyError to jwt module __init__ imports ` - Add support for ES256K algorithm ` - Add `from_jwk()` to Ed25519Algorithm ` - Add `to_jwk()` to Ed25519Algorithm ` - Export `PyJWK` and `PyJWKSet` ==== python-asn1crypto ==== - %check: use %pyunittest rpm macro ==== python-distro ==== - use %pytest macro ==== python-idna ==== - %check: use %pyunittest rpm macro ==== python-jsonpatch ==== Version update (1.31 -> 1.32) - update to 1.32: * take_index causing 'move' of incorrect values due to bad True==1 comparison ==== python-jsonschema ==== - %check: use %pytest rpm macro ==== python-networkx ==== Version update (2.5 -> 2.5.1) - update to 2.5.1: * pin requirements ==== python-oauthlib ==== - %check: use %pyunittest rpm macro ==== python-pyasn1 ==== - %check: use %pyunittest rpm macro ==== python-pytz ==== - %check: use %pyunittest rpm macro ==== rdma-core ==== Version update (33.1 -> 35.0) Subpackages: libefa1 libibverbs libibverbs1 libmlx4-1 libmlx5-1 librdmacm1 - Update to rdma-core v35.0 - Bugfixes on all providers - Many improvements on pyverbs - Fixes dracut path issues on Tumbleweed - Refresh patches to latest sources: - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch - disable-rdma-interface-renaming.patch ==== rpcbind ==== Version update (1.2.5 -> 1.2.6) - Update to rpcbind 1.2.6 - Remove 0031-rpcbind-manpage.patch (accepted upstream in commit 4bedcee) - Drop pmap_set.c (installed as pmap_set2): bnc#446388 is from 2008, for openSUSE 11. - Refresh 0001-change-lockingdir-to-run.patch - Replace %setup with %autosetup ==== rpm ==== Subpackages: librpmbuild9 - auto-config-update-aarch64-ppc64le.diff: Treat missing timestamp as infinitely old. ==== runc ==== Version update (1.0.0~rc94 -> 1.0.0~rc95) - Update to runc v1.0.0~rc95. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95 This release of runc contains a fix for CVE-2021-30465, and users are strongly recommended to update (especially if you are providing semi-limited access to spawn containers to untrusted users). bsc#1185405 ==== selinux-policy ==== Subpackages: selinux-policy-targeted - allow systemd to watch /usr, /usr/lib, /etc, /etc/pki as we have path units that trigger on changes in those. Added fix_systemd_watch.patch - own /usr/share/selinux/packages/$SELINUXTYPE/ and /var/lib/selinux/$SELINUXTYPE/active/modules/* to allow packages to install files there - allow cockpit socket to bind nodes (fix_cockpit.patch) - use %autosetup to get rid of endless patch lines ==== snapper ==== Subpackages: libsnapper5 - fixed systemd sandboxing (bsc#1186095) ==== sssd ==== Version update (2.4.2 -> 2.5.0) Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap - Update to release 2.5.0 * Added support for automatic renewal of renewable TGTs that are stored in KCM ccache. This can be enabled by setting tgt_renewal = true. See the sssd-kcm man page for more details. This feature requires MIT Kerberos krb5-1.19-0.beta2.3 or higher. * ad_gpo_implicit_deny is now respected even if there are no applicable GPOs present. ==== u-boot-rpiarm64 ==== Subpackages: u-boot-rpiarm64-doc * Add rockpi-n10-rk3399pro * Several fixes and cleanups for RK3399/3328 boards: - Replace repeated board list with is_rk3399/is_rk3328 define - Fix non-functional rock960, copy bl31.elf - Remove "make u-boot.itb", already part of "all" target * Remove obsolete manual generation of SOURCE_DATE_EPOCH ==== vim ==== Version update (8.2.2800 -> 8.2.2850) Subpackages: vim-data-common vim-small - Updated to version 8.2.2850, fixes the following problems * After a timer displays text a hit-enter prompt is given. * Free Pascal makefile not recognized. * Vim9: illegal memory access. * Flicker when the popup menu has an info popup. * Setting buffer local mapping with mapset() changes global mapping. * Vim9: cannot use legacy syntax in Vim9 script. * Vim9: using "++nr" as a command might not work. * Build fails with tiny features. * Vim9: increment and decrement not sufficiently tested. * Vim9: :def function compilation fails when using :legacy. * Vim9: crash when calling a function in a substitute expression. * Vim9: error for missing white space doesn't say where it is missing * Vim9: still crash when using substitute expression. * Cannot grep using fuzzy matching. * Vim9: unused variable. (John Marriott) * Status line flickers when redrawing popup menu info. * Vim9: comment below expression in lambda causes problems. * Vim9: script sourcing continues after an error. * No jump added to jumplist when opening terminal in current window. * Finishing an abbreviation with a multi-byte char may not work. * Session file may divide by zero. * Code in checkreadonly() not fully tested. * Compiler warnings for int to size_t conversion. (Randall W. Morris) * Test file was not deleted. * Coverity complains about not checking the rename() return value. * Some comments are not correct or clear. * Terminal colors are not updated when 'background' is set. * Vim9: expandcmd() not tested. * Operator cancelled by moving mouse when using popup. (Sergey Vlasov) * Two key command cancelled by moving mouse when using popup. (Sergey Vlasov) * Vim9: :cexpr does not work with local variables. * Vim9: leaking memory in :cexpr. * Build failure without the +quickfix feature. (John Marriott) * Various code lines not covered by tests. * File extension .wrap not recognized. * Default redirection missing "ash" and "dash". * Vim9: member operation not fully tested. * Vim9: skip argument to searchpair() is not compiled. * Vim9: skip argument to searchpairpos() is not compiled. * Vim9: memory leak when using searchpair(). * Vim9: "echo Func()" does not give an error for a function without a return value. * Perl not tested sufficiently. * Crash when calling partial. * Bufwrite not sufficiently tested. * Recalling commands from history is not tested. ==== xfsprogs ==== Version update (5.11.0 -> 5.12.0) - update to v5.12.0: - mkfs: don't default to too-large physical sector size - repair: phase 6 speedups - man: Add dax mount option to man xfs(5) - xfs_admin: pick up log arguments correctly - xfs_growfs: support shrinking unused space - libfrog: report inobtcount in geometry - xfs_logprint: Fix buffer overflow printing quotaoff - xfsprogs: include <signal.h> for platform_crash - xfsprogs: remove BMV_IF_NO_DMAPI_READ flag - workqueue: bound maximum queue depth - libxfs changes merged from kernel 5.12 ==== xmlsec1 ==== Version update (1.2.31 -> 1.2.32) Subpackages: libxmlsec1-1 libxmlsec1-openssl1 - update to 1.2.32: + Remove MD5 for NSS 3.59 and above + Fix PKCS12_parse return code handling + Fix OpenSSL lookup + xmlSecX509DataGetNodeContent(): don't return 0 for non-empty elements - fix for LibreOffice - add upstream signing key and validate source signature - put license text into all subpackages - treat all compiler warnings as errors ==== yast2 ==== Version update (4.4.3 -> 4.4.5) - Add Yast2::Equatable mixin to avoid troubles with classes that overloads the comparison methods (related to bsc#1186082). - 4.4.5 - Logging all available product information into directory /var/log/YaST2/installation_info. This should help for evaluating the cause of e.g. bsc#1180888, bsc#1180908, bsc#1178688. - 4.4.4 ==== zchunk ==== Version update (1.1.11 -> 1.1.14) - Update to version 1.1.14 * Final fixes for zstd 1.5 support - Update to version 1.1.12 * Update testsuite for zstd 1.5 ==== zstd ==== Version update (1.4.9 -> 1.5.0) - Update to version 1.5.0 * https://github.com/facebook/zstd/releases/tag/v1.5.0 * Improved Middle-Level Compression Speed * Improved High-Level Compression Ratio * Faster Decompression Speed * Dynamic Library Supports Multithreading by Default - Drop zstd-1.4.9-Avoid-SIGBUS-on-armv6.patch, merged upstream - Add zstd-1.4.9-Avoid-SIGBUS-on-armv6.patch to fix crashes when running armv6 userspace on armv8 64-bit kernels

1 0

New MicroOS snapshot 20210601 released!
by Richard Brown 02 Jun '21

02 Jun '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: augeas cockpit (243 -> 245) ghostscript (9.53.3 -> 9.54.0) graphite2 issue-generator (1.12 -> 1.13) kdump krb5 libinput (1.17.2 -> 1.17.3) libqt5-qtbase librsvg (2.50.5 -> 2.50.6) libsigc++2 (2.10.6 -> 2.10.7) logrotate (3.18.0 -> 3.18.1) lua54 mozilla-nspr (4.30 -> 4.31) mozilla-nss (3.63.1 -> 3.64) polkit-default-privs (1550+20210517.56da22d -> 1550+20210520.336dcea) python-asn1crypto python-idna python-jsonschema python-oauthlib python-pyasn1 python-pytz rpm sgml-skel xfsprogs (5.11.0 -> 5.12.0) yast2 (4.4.3 -> 4.4.5) zvbi === Details === ==== augeas ==== - Allow all printable ASCII characters in WPA-PSK definition * augeas-allow_printable_ASCII.patch * bsc#1185524 * Sourced from https://github.com/hercules-team/augeas/pull/723/commits * Credit to Michal Filka <mfilka(a)suse.com> ==== cockpit ==== Version update (243 -> 245) Subpackages: cockpit-bridge cockpit-packagekit cockpit-system - new version 255 https://cockpit-project.org/blog/cockpit-245.html - new version 244.1 https://cockpit-project.org/blog/cockpit-244.html - enable SELinux ==== ghostscript ==== Version update (9.53.3 -> 9.54.0) - Version upgrade to 9.54.0 Highlights in this release include (excerpts from the Ghostscript upstream release summary in https://www.ghostscript.com/doc/9.54.0/News.htm): * The 9.54.0 release is a maintenance release, and also adds new functionality. * Overprint simulation is now available to all output devices, allowing quality previewing/proofing of PostScript and PDF jobs that rely on overprint. See the -dOverprint option documentation in: doc/9.54.0/Use.htm#Overprint * The "docxwrite" device adds the ability to output to Microsoft Word "docx" format. See: doc/9.54.0/VectorDevices.htm#DOCX * The pdfwrite device is now capable of using the Tesseract OCR engine when it is built into Ghostscript to improve searchability and copy and paste functionality when the input lacks the metadata for that purpose. See: doc/9.54.0/VectorDevices.htm#UseOCR * Ghostscript/GhostPDL now includes a "map text to black" function, where text drawn by an input job (except when drawn using a Type 3 font) can be forced to draw in solid black. See: doc/9.54.0/Use.htm#BlackText * Ghostscript/GhostPDL now supports simple N-up imposition "internally". See: doc/9.54.0/Use.htm#NupControl * Our efforts in code hygiene and maintainability continue. * The usual round of bug fixes, compatibility changes, and incremental improvements. * For a list of open issues, or to report problems, please visit bugs.ghostscript.com For a release summary see: https://www.ghostscript.com/doc/9.54.0/News.htm For details see the News.htm and History9.htm files. - 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch is no longer needed because it is fixed in the upstream sources. ==== graphite2 ==== - Define conditionally make_build to fix build on systems that do not have that macro ==== issue-generator ==== Version update (1.12 -> 1.13) - Update to version 1.13 - SELinux: Do not call agetty --reload [bsc#1186178] ==== kdump ==== - Fix use of DNS in the panic environment (bsc#1183070): * kdump-avoid-endless-loop-on-EAI_AGAIN.patch: Avoid an endless loop when resolving a hostname fails with EAI_AGAIN. * kdump-install-real-resolv.conf.patch: Install /etc/resolv.conf using its resolved path. - kdump-fix-incorrect-exit-code-checking.patch: Fix incorrect exit code checking after "local" with assignment (bsc#1184616, LTC#192282) - kdump-do-not-iterate-past-end-of-string.patch: Fix a crash caused by iterating past end of string (bsc#1186037). ==== krb5 ==== - Build with full Cyrus SASL support * Negotiating SASL credentials with an EXTERNAL bind mechanism requires interaction. Kerberos provides its own interaction function that skips all interaction, thus preventing the mechanism from working. ==== libinput ==== Version update (1.17.2 -> 1.17.3) - Update to release 1.17.3 * Add quirk for Lenovo Legion 5 Pro. ==== libqt5-qtbase ==== Subpackages: libQt5Concurrent5 libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5OpenGL5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5 - Add trailing newline to qtlogging.ini ==== librsvg ==== Version update (2.50.5 -> 2.50.6) Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0 - Update to version 2.50.6: + Librsvg now requires at least Pango 1.44. + glgo#GNOME/librsvg#730: Incorrect text spacing when the transform is not 1:1. You can see this when a small font-size is scaled up due to a transform. It is less visible for a large font-size scaled down. + glgo#GNOME/librsvg#704: Fix circle/ellipse in paths when they are made out of a single Arc command. ==== libsigc++2 ==== Version update (2.10.6 -> 2.10.7) - Update to version 2.10.7: + Meson build: - Make it possible to use sigc++ as a subproject. - Fix dependency on files generated from .h.m4 files. - No implicit_include_directories. - Make quiet installations possible. - Fix build as subproject without building documentation. + Documentation fixes. ==== logrotate ==== Version update (3.18.0 -> 3.18.1) - update to 3.18.1: * fix memory leaks on error-handling paths * make `renamecopy` and `copytruncate` override each other * improve error handling in the parser of configuration files * improve user experience for non-privileged users of logrotate ==== lua54 ==== Subpackages: liblua5_4-5 - Fix doc location (boo#1186233) ==== mozilla-nspr ==== Version update (4.30 -> 4.31) - update to version 4.31: * Lock access to PRCallOnceType members in PR_CallOnce* for thread safety bmo#1686138 ==== mozilla-nss ==== Version update (3.63.1 -> 3.64) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs - update to NSS 3.64 * bmo#1705286 - Properly detect mips64. * bmo#1687164 - Introduce NSS_DISABLE_CRYPTO_VSX and disable_crypto_vsx. * bmo#1698320 - replace __builtin_cpu_supports("vsx") with ppc_crypto_support() for clang. * bmo#1613235 - Add POWER ChaCha20 stream cipher vector acceleration. ==== polkit-default-privs ==== Version update (1550+20210517.56da22d -> 1550+20210520.336dcea) - Update to version 1550+20210520.336dcea: * whitelist incremental libvirt org.libvirt.api.node-device.delete (bsc#1186270) ==== python-asn1crypto ==== - %check: use %pyunittest rpm macro ==== python-idna ==== - %check: use %pyunittest rpm macro ==== python-jsonschema ==== - %check: use %pytest rpm macro ==== python-oauthlib ==== - %check: use %pyunittest rpm macro ==== python-pyasn1 ==== - %check: use %pyunittest rpm macro ==== python-pytz ==== - %check: use %pyunittest rpm macro ==== rpm ==== - auto-config-update-aarch64-ppc64le.diff: Treat missing timestamp as infinitely old. ==== sgml-skel ==== - %post uses sed, so add `Requires(post): sed`. ==== xfsprogs ==== Version update (5.11.0 -> 5.12.0) - update to v5.12.0: - mkfs: don't default to too-large physical sector size - repair: phase 6 speedups - man: Add dax mount option to man xfs(5) - xfs_admin: pick up log arguments correctly - xfs_growfs: support shrinking unused space - libfrog: report inobtcount in geometry - xfs_logprint: Fix buffer overflow printing quotaoff - xfsprogs: include <signal.h> for platform_crash - xfsprogs: remove BMV_IF_NO_DMAPI_READ flag - workqueue: bound maximum queue depth - libxfs changes merged from kernel 5.12 ==== yast2 ==== Version update (4.4.3 -> 4.4.5) - Add Yast2::Equatable mixin to avoid troubles with classes that overloads the comparison methods (related to bsc#1186082). - 4.4.5 - Logging all available product information into directory /var/log/YaST2/installation_info. This should help for evaluating the cause of e.g. bsc#1180888, bsc#1180908, bsc#1178688. - 4.4.4 ==== zvbi ==== - Add patch to separate private libs from required libs: * 10_fix_private_libs.patch

1 0

New Kubic snapshot 20210601 released!
by Richard Brown 02 Jun '21

02 Jun '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: augeas cockpit (243 -> 245) graphite2 issue-generator (1.12 -> 1.13) kdump krb5 librsvg (2.50.5 -> 2.50.6) libsigc++2 (2.10.6 -> 2.10.7) logrotate (3.18.0 -> 3.18.1) lua54 mozilla-nss (3.63.1 -> 3.64) nfs-utils python-asn1crypto python-idna python-jsonschema python-oauthlib python-pyasn1 python-pytz rpcbind (1.2.5 -> 1.2.6) rpm xfsprogs (5.11.0 -> 5.12.0) yast2 (4.4.3 -> 4.4.5) === Details === ==== augeas ==== - Allow all printable ASCII characters in WPA-PSK definition * augeas-allow_printable_ASCII.patch * bsc#1185524 * Sourced from https://github.com/hercules-team/augeas/pull/723/commits * Credit to Michal Filka <mfilka(a)suse.com> ==== cockpit ==== Version update (243 -> 245) Subpackages: cockpit-bridge cockpit-packagekit cockpit-system - new version 255 https://cockpit-project.org/blog/cockpit-245.html - new version 244.1 https://cockpit-project.org/blog/cockpit-244.html - enable SELinux ==== graphite2 ==== - Define conditionally make_build to fix build on systems that do not have that macro ==== issue-generator ==== Version update (1.12 -> 1.13) - Update to version 1.13 - SELinux: Do not call agetty --reload [bsc#1186178] ==== kdump ==== - Fix use of DNS in the panic environment (bsc#1183070): * kdump-avoid-endless-loop-on-EAI_AGAIN.patch: Avoid an endless loop when resolving a hostname fails with EAI_AGAIN. * kdump-install-real-resolv.conf.patch: Install /etc/resolv.conf using its resolved path. - kdump-fix-incorrect-exit-code-checking.patch: Fix incorrect exit code checking after "local" with assignment (bsc#1184616, LTC#192282) - kdump-do-not-iterate-past-end-of-string.patch: Fix a crash caused by iterating past end of string (bsc#1186037). ==== krb5 ==== - Build with full Cyrus SASL support * Negotiating SASL credentials with an EXTERNAL bind mechanism requires interaction. Kerberos provides its own interaction function that skips all interaction, thus preventing the mechanism from working. ==== librsvg ==== Version update (2.50.5 -> 2.50.6) Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 - Update to version 2.50.6: + Librsvg now requires at least Pango 1.44. + glgo#GNOME/librsvg#730: Incorrect text spacing when the transform is not 1:1. You can see this when a small font-size is scaled up due to a transform. It is less visible for a large font-size scaled down. + glgo#GNOME/librsvg#704: Fix circle/ellipse in paths when they are made out of a single Arc command. ==== libsigc++2 ==== Version update (2.10.6 -> 2.10.7) - Update to version 2.10.7: + Meson build: - Make it possible to use sigc++ as a subproject. - Fix dependency on files generated from .h.m4 files. - No implicit_include_directories. - Make quiet installations possible. - Fix build as subproject without building documentation. + Documentation fixes. ==== logrotate ==== Version update (3.18.0 -> 3.18.1) - update to 3.18.1: * fix memory leaks on error-handling paths * make `renamecopy` and `copytruncate` override each other * improve error handling in the parser of configuration files * improve user experience for non-privileged users of logrotate ==== lua54 ==== - Fix doc location (boo#1186233) ==== mozilla-nss ==== Version update (3.63.1 -> 3.64) - update to NSS 3.64 * bmo#1705286 - Properly detect mips64. * bmo#1687164 - Introduce NSS_DISABLE_CRYPTO_VSX and disable_crypto_vsx. * bmo#1698320 - replace __builtin_cpu_supports("vsx") with ppc_crypto_support() for clang. * bmo#1613235 - Add POWER ChaCha20 stream cipher vector acceleration. ==== nfs-utils ==== Subpackages: libnfsidmap1 nfs-client - Update to version 2.5.4-rc4 to get all recent fixes: - nfs-utils-2-5-4-rc4.patch e4ce810a Move declaration of etab and rmtab into libraries 7a4e2d1d Remove 'force' arg from cache_flush() c5528f40 Fix NFSv4 export of tmpfs filesystems ed83085f gssd: use mutex to protect decrement of refcount - nfs-utils-2-5-4-rc3.patch 972dba0f nfs-utils: Enable the retrieval of raw config settings without expansion 964f4861 nfs-utils: Factor out common structure cleanup calls 8219bdb0 Replace all /var/run with /run 81727afe Fix `statx()` emulation breaking exports a41afe9e mountd/exports: Fix typo in the man page - nfs-utils-2-5-4-rc2.patch 2f669b6f NFS server should enable RDMA by default d77ece22 mountd/exportd: only log confirmed clients, and poll for updates ac266e2e exportfs: fix unexporting of '/' - nfs-utils-2-5-4-rc1.patch 7abd15e3 nfsdclnts: Ignore SIGPIPE signal edeb3815 mountd: add logging of NFSv4 clients attaching and detaching. f8e2c8d4 mountd: make default ttl settable by option cc150093 mountd: add --cache-use-ipaddr option to force use_ipaddr c7a954ae mountd: add logging for authentication results for accesses. 1a8156f8 mountd/exports: update man page fec7347e mountd: Don't proactively add export info when fh info is requested. a72c151f mountd: reject unknown client IP when !use_ipaddr. 05bacfed gssd: Add options to rpc.gssd to allow for the use of $HOME/.k5identity files 7e559dbd exportd: server-side gid management - 0001-Replace-all-var-run-with-run.patch is now part of nfs-utils-2-5-4-rc3.patch ==== python-asn1crypto ==== - %check: use %pyunittest rpm macro ==== python-idna ==== - %check: use %pyunittest rpm macro ==== python-jsonschema ==== - %check: use %pytest rpm macro ==== python-oauthlib ==== - %check: use %pyunittest rpm macro ==== python-pyasn1 ==== - %check: use %pyunittest rpm macro ==== python-pytz ==== - %check: use %pyunittest rpm macro ==== rpcbind ==== Version update (1.2.5 -> 1.2.6) - Update to rpcbind 1.2.6 - Remove 0031-rpcbind-manpage.patch (accepted upstream in commit 4bedcee) - Drop pmap_set.c (installed as pmap_set2): bnc#446388 is from 2008, for openSUSE 11. - Refresh 0001-change-lockingdir-to-run.patch - Replace %setup with %autosetup ==== rpm ==== Subpackages: librpmbuild9 - auto-config-update-aarch64-ppc64le.diff: Treat missing timestamp as infinitely old. ==== xfsprogs ==== Version update (5.11.0 -> 5.12.0) - update to v5.12.0: - mkfs: don't default to too-large physical sector size - repair: phase 6 speedups - man: Add dax mount option to man xfs(5) - xfs_admin: pick up log arguments correctly - xfs_growfs: support shrinking unused space - libfrog: report inobtcount in geometry - xfs_logprint: Fix buffer overflow printing quotaoff - xfsprogs: include <signal.h> for platform_crash - xfsprogs: remove BMV_IF_NO_DMAPI_READ flag - workqueue: bound maximum queue depth - libxfs changes merged from kernel 5.12 ==== yast2 ==== Version update (4.4.3 -> 4.4.5) - Add Yast2::Equatable mixin to avoid troubles with classes that overloads the comparison methods (related to bsc#1186082). - 4.4.5 - Logging all available product information into directory /var/log/YaST2/installation_info. This should help for evaluating the cause of e.g. bsc#1180888, bsc#1180908, bsc#1178688. - 4.4.4

1 0

New MicroOS snapshot 20210527 released!
by Richard Brown 01 Jun '21

01 Jun '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: dhcp (4.4.2 -> 4.4.2.P1) exiv2 gcc (10 -> 11) gcc11 (11.0.0+git183291 -> 11.1.1+git121) patterns-base qemu === Details === ==== dhcp ==== Version update (4.4.2 -> 4.4.2.P1) Subpackages: dhcp-client - Add -fno-strict-aliasing to CFLAGS to avoid a segfault in dhcpd (boo#1186631). - Update to 4.4.2-P1: * CVE-2021-25217, bsc#1186382: A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient. - Error out, if %version and %isc_version are not in sync. ==== exiv2 ==== - Add 1271.patch: Fix build using GCC 11 (boo#1185218). - Drop the sed hack to remove -fcf-protection: this is properly solved with the above patch. - -fcf-protection doesn't work on i586 with gcc11 either (boo#1185218) ==== gcc ==== Version update (10 -> 11) - Switch gcc to default 11. - Adjust liblto_plugin.so naming for GCC 11. ==== gcc11 ==== Version update (11.0.0+git183291 -> 11.1.1+git121) Subpackages: libgcc_s1 libgomp1 libstdc++6 libubsan1 - Update to gcc-11 branch head (23855a176609fe8dda6abaf2b2), git121 - Disable build-id generation on non-glibc targeting cross compilers. - Update to gcc-11 branch head (cd0a059bd384da58d43674496a7), git67 * Includes GCC 11.1 release - Drop upstreamed gcc11-no-offload.patch. - Update to gcc-11 branch head (7a7fc01b9d20afb1a2b805d93cb), git31 * Includes GCC 11.1 RC2 - Add gcc11-no-offload.patch and gcc11-amdgcn-disable-hot-cold-partitioning.patch. - Enable gfortran for offload compilers. - BuildRequire procps from gcc11-testresults if we test go. - Force using llvm11 for amdgcn offloading since llvm12 doesn't yet work. Package expanded symlinks so concurrent installs do not pull in another llvm-mc. - Add gcc11-gdwarf-4-default.patch to default to DWARF4 generation in SLES15 and older. - Update to gcc-11 branch head (27350b77a92062667427100afb4), git10 * Includes GCC 11.1 RC1 - Bump to 49813aad3292f7f2bef69206274da78a9a7116ed. - Disable nvptx offloading on aarch64 since it doesn't work. - Bump to a87d3f964df31d4fbceb822c6d293e85c117d992. - Remove gcc48-remove-mpfr-2.4.0-requirement.patch which does no longer apply. - Arrange for a C++ 11 capable host compiler to be available. - Do not require ISL for cross compiler builds on old distros. - Bump to 123b3e03c911a43054c1f88f5d3110e1d084dd4e. - Update embedded newlib version from 3.3.0 to 4.1.0. - Pack %{GCCDIST}-gcc%{binsuffix}. - Add a new dependency for libgccjit. - New package, inherits from gcc10 * gcc-add-defaultsspec.diff, add the ability to provide a specs file that is read by default * tls-no-direct.diff, avoid direct %fs references on x86 to not slow down Xen * gcc43-no-unwind-tables.diff, do not produce unwind tables for CRT files * gcc41-ppc32-retaddr.patch, fix expansion of __builtin_return_addr for ppc, just a testcase * gcc44-textdomain.patch, make translation files version specific and adjust textdomain to find them * gcc44-rename-info-files.patch, fix cross-references in info files when renaming them to be version specific * gcc48-libstdc++-api-reference.patch, fix link in the installed libstdc++ html documentation * gcc48-remove-mpfr-2.4.0-requirement.patch, make GCC work with earlier mpfr versions on old products * gcc5-no-return-gcc43-workaround.patch, make build work with host gcc 4.3 * gcc7-remove-Wexpansion-to-defined-from-Wextra.patch, removes new warning from -Wextra * gcc7-avoid-fixinc-error.diff * gcc9-reproducible-builds-buildid-for-checksum.patch * gcc9-reproducible-builds.patch * gcc10-amdgcn-llvm-as.patch * gcc10-foffload-default.patch - libgccjit subpackage is added. - HWASAN is built for aarch64 target. ==== patterns-base ==== Subpackages: patterns-base-base patterns-base-bootloader patterns-base-minimal_base patterns-base-x11 - Suggest openssl from patterns-base-base: in case something requires /usr/bin/openssl or openssl(cli), we want to declare openssl as our default. ==== qemu ==== - Fix CVE-2021-3527 in usb/redir: usb-redir-avoid-dynamic-stack-allocation.patch - Fix issues found upstream: hw-block-nvme-consider-metadata-read-aio.patch sockets-update-SOCKET_ADDRESS_TYPE_FD-li.patch vfio-ccw-Permit-missing-IRQs.patch vhost-user-blk-Check-that-num-queues-is-.patch vhost-user-blk-Don-t-reconnect-during-in.patch vhost-user-blk-Fail-gracefully-on-too-la.patch vhost-user-blk-Get-more-feature-flags-fr.patch vhost-user-blk-Make-sure-to-set-Error-on.patch virtio-blk-Fix-rollback-path-in-virtio_b.patch virtio-Fail-if-iommu_platform-is-request.patch virtiofsd-Fix-side-effect-in-assert.patch monitor-qmp-fix-race-on-CHR_EVENT_CLOSED.patch - Brotli VLA error was already fixed in v5.2 but the patches wasn't included in v6.0. This change fixed that - Patches added: brotli-fix-actual-variable-array-paramet.patch hw-rx-rx-gdbsim-Do-not-accept-invalid-me.patch ui-Fix-memory-leak-in-qemu_xkeymap_mappi.patch - For the record, these issues are fixed in this package already. Most are alternate references to previously mentioned issues: (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019, CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683, CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477, CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)

1 0

New Kubic snapshot 20210527 released!
by Richard Brown 01 Jun '21

01 Jun '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: dhcp (4.4.2 -> 4.4.2.P1) gcc11 (11.0.0+git183291 -> 11.1.1+git121) patterns-base qemu === Details === ==== dhcp ==== Version update (4.4.2 -> 4.4.2.P1) Subpackages: dhcp-client - Add -fno-strict-aliasing to CFLAGS to avoid a segfault in dhcpd (boo#1186631). - Update to 4.4.2-P1: * CVE-2021-25217, bsc#1186382: A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient. - Error out, if %version and %isc_version are not in sync. ==== gcc11 ==== Version update (11.0.0+git183291 -> 11.1.1+git121) Subpackages: libgcc_s1 libgomp1 libstdc++6 - Update to gcc-11 branch head (23855a176609fe8dda6abaf2b2), git121 - Disable build-id generation on non-glibc targeting cross compilers. - Update to gcc-11 branch head (cd0a059bd384da58d43674496a7), git67 * Includes GCC 11.1 release - Drop upstreamed gcc11-no-offload.patch. - Update to gcc-11 branch head (7a7fc01b9d20afb1a2b805d93cb), git31 * Includes GCC 11.1 RC2 - Add gcc11-no-offload.patch and gcc11-amdgcn-disable-hot-cold-partitioning.patch. - Enable gfortran for offload compilers. - BuildRequire procps from gcc11-testresults if we test go. - Force using llvm11 for amdgcn offloading since llvm12 doesn't yet work. Package expanded symlinks so concurrent installs do not pull in another llvm-mc. - Add gcc11-gdwarf-4-default.patch to default to DWARF4 generation in SLES15 and older. - Update to gcc-11 branch head (27350b77a92062667427100afb4), git10 * Includes GCC 11.1 RC1 - Bump to 49813aad3292f7f2bef69206274da78a9a7116ed. - Disable nvptx offloading on aarch64 since it doesn't work. - Bump to a87d3f964df31d4fbceb822c6d293e85c117d992. - Remove gcc48-remove-mpfr-2.4.0-requirement.patch which does no longer apply. - Arrange for a C++ 11 capable host compiler to be available. - Do not require ISL for cross compiler builds on old distros. - Bump to 123b3e03c911a43054c1f88f5d3110e1d084dd4e. - Update embedded newlib version from 3.3.0 to 4.1.0. - Pack %{GCCDIST}-gcc%{binsuffix}. - Add a new dependency for libgccjit. - New package, inherits from gcc10 * gcc-add-defaultsspec.diff, add the ability to provide a specs file that is read by default * tls-no-direct.diff, avoid direct %fs references on x86 to not slow down Xen * gcc43-no-unwind-tables.diff, do not produce unwind tables for CRT files * gcc41-ppc32-retaddr.patch, fix expansion of __builtin_return_addr for ppc, just a testcase * gcc44-textdomain.patch, make translation files version specific and adjust textdomain to find them * gcc44-rename-info-files.patch, fix cross-references in info files when renaming them to be version specific * gcc48-libstdc++-api-reference.patch, fix link in the installed libstdc++ html documentation * gcc48-remove-mpfr-2.4.0-requirement.patch, make GCC work with earlier mpfr versions on old products * gcc5-no-return-gcc43-workaround.patch, make build work with host gcc 4.3 * gcc7-remove-Wexpansion-to-defined-from-Wextra.patch, removes new warning from -Wextra * gcc7-avoid-fixinc-error.diff * gcc9-reproducible-builds-buildid-for-checksum.patch * gcc9-reproducible-builds.patch * gcc10-amdgcn-llvm-as.patch * gcc10-foffload-default.patch - libgccjit subpackage is added. - HWASAN is built for aarch64 target. ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-bootloader patterns-base-minimal_base - Suggest openssl from patterns-base-base: in case something requires /usr/bin/openssl or openssl(cli), we want to declare openssl as our default. ==== qemu ==== - Fix CVE-2021-3527 in usb/redir: usb-redir-avoid-dynamic-stack-allocation.patch - Fix issues found upstream: hw-block-nvme-consider-metadata-read-aio.patch sockets-update-SOCKET_ADDRESS_TYPE_FD-li.patch vfio-ccw-Permit-missing-IRQs.patch vhost-user-blk-Check-that-num-queues-is-.patch vhost-user-blk-Don-t-reconnect-during-in.patch vhost-user-blk-Fail-gracefully-on-too-la.patch vhost-user-blk-Get-more-feature-flags-fr.patch vhost-user-blk-Make-sure-to-set-Error-on.patch virtio-blk-Fix-rollback-path-in-virtio_b.patch virtio-Fail-if-iommu_platform-is-request.patch virtiofsd-Fix-side-effect-in-assert.patch monitor-qmp-fix-race-on-CHR_EVENT_CLOSED.patch - Brotli VLA error was already fixed in v5.2 but the patches wasn't included in v6.0. This change fixed that - Patches added: brotli-fix-actual-variable-array-paramet.patch hw-rx-rx-gdbsim-Do-not-accept-invalid-me.patch ui-Fix-memory-leak-in-qemu_xkeymap_mappi.patch - For the record, these issues are fixed in this package already. Most are alternate references to previously mentioned issues: (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019, CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683, CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477, CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)

1 0

Outdated vagrant box for kubic (without the x86_64 or aarch64 suffix): Can this be removed?
by Johannes Kastl 01 Jun '21

01 Jun '21

Hi Dan, hi all, I just stumbled upon an old Vagrantfile of mine that used the openSUSE/Kubic vagrant box: https://app.vagrantup.com/opensuse/boxes/Kubic Actually this seems to have been replaced with architecture-specific ones like opensuse/Kubic.x86_64 or opensuse/Kubic.aarch64. Nevertheless it is still available showing 20200419 as latest release. Can someone maybe remove that one to avoid confusion? I seem to remember that Dan was somehow involved in the whole Vagrant Boxes thing, hence I added him to this mail directly (sorry, Dan!). Kind Regards, Johannes -- Johannes Kastl Linux Consultant & Trainer Tel.: +49 (0) 151 2372 5802 Mail: kastl(a)b1-systems.de B1 Systems GmbH Osterfeldstraße 7 / 85088 Vohburg http://www.b1-systems.de GF: Ralph Dehner Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537

2 2