March 2022 - openSUSE Kubic - openSUSE Mailing Lists

New MicroOS snapshot 20220319 released!
by Richard Brown 20 Mar '22

20 Mar '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: NetworkManager (1.36.0 -> 1.36.2) dbus-1 dbus-1-x11 flatpak (1.12.6 -> 1.12.7) kernel-source (5.16.14 -> 5.16.15) mobile-broadband-provider-info (20210805 -> 20220315) protobuf === Details === ==== NetworkManager ==== Version update (1.36.0 -> 1.36.2) Subpackages: libnm0 typelib-1_0-NM-1_0 - Do not requires dhcp-client, NM is using its internal client by default for a long time now. - Convert iproute2 and iputils requires to recommends, they should not be hard requires. - Update to version 1.36.2: + When the list of plugins is not specified via "main.plugins" in NetworkManager.conf and no build-time default is set with "--with-config-plugins-default" configure argument, now all known plugins found in the plugin directory are loaded (and the built-in "keyfile" plugin is preferred over others). + Preserve external ports during checkpoint rollback. + Fix removal of ovsdb entry when an OVS interface goes away. + Fix DNS configuration for WWAN connections. ==== dbus-1 ==== Subpackages: libdbus-1-3 - Drop use of %{with libalternatives}, there's no such bcond defined and in many other places it's not optional anyway (boo#1197258) ==== dbus-1-x11 ==== - Use --with-x=auto to actually enable X11 integration (boo#1197258, workaround https://gitlab.freedesktop.org/dbus/dbus/-/merge_requests/263) ==== flatpak ==== Version update (1.12.6 -> 1.12.7) Subpackages: libflatpak0 system-user-flatpak - Update to version 1.12.7: + allow networked access to X11 and PulseAudio services if that is configured, and the application has network access + Absolute paths in WAYLAND_DISPLAY now work + Allow apps that were built with Flatpak 1.13.x to export AppStream metadata in share/metainfo + Most commands now work if /var/lib/flatpak exists but /var/lib/flatpak/repo does not, and will automatically populate the repo directory if possible + Consistently pass relative subpaths to libostree, working around a bug in libostree < 2021.6 when used with GLib >= 2.71 + Fix some memory leaks in GVariant data processing ==== kernel-source ==== Version update (5.16.14 -> 5.16.15) - Linux 5.16.15 (bsc#1012628). - arm64: dts: qcom: sm8350: Describe GCC dependency clocks (bsc#1012628). - arm64: dts: qcom: sm8350: Correct UFS symbol clocks (bsc#1012628). - HID: elo: Revert USB reference counting (bsc#1012628). - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (bsc#1012628). - ARM: boot: dts: bcm2711: Fix HVS register range (bsc#1012628). - clk: qcom: gdsc: Add support to update GDSC transition delay (bsc#1012628). - clk: qcom: dispcc: Update the transition delay for MDSS GDSC (bsc#1012628). - soc: mediatek: mt8192-mmsys: Fix dither to dsi0 path's input sel (bsc#1012628). - HID: vivaldi: fix sysfs attributes leak (bsc#1012628). - HID: nintendo: check the return value of alloc_workqueue() (bsc#1012628). - arm64: dts: armada-3720-turris-mox: Add missing ethernet0 alias (bsc#1012628). - tipc: fix kernel panic when enabling bearer (bsc#1012628). - vdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command (bsc#1012628). - vduse: Fix returning wrong type in vduse_domain_alloc_iova() (bsc#1012628). - net: phy: meson-gxl: fix interrupt handling in forced mode (bsc#1012628). - mISDN: Fix memory leak in dsp_pipeline_build() (bsc#1012628). - vhost: fix hung thread due to erroneous iotlb entries (bsc#1012628). - virtio-blk: Don't use MAX_DISCARD_SEGMENTS if max_discard_seg is zero (bsc#1012628). - virtio-blk: Remove BUG_ON() in virtio_queue_rq() (bsc#1012628). - vdpa: fix use-after-free on vp_vdpa_remove (bsc#1012628). - isdn: hfcpci: check the return value of dma_set_mask() in setup_hw() (bsc#1012628). - net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare() (bsc#1012628). - esp: Fix BEET mode inter address family tunneling on GSO (bsc#1012628). - net: gro: move skb_gro_receive_list to udp_offload.c (bsc#1012628). - qed: return status of qed_iov_get_link (bsc#1012628). - smsc95xx: Ignore -ENODEV errors when device is unplugged (bsc#1012628). - gpiolib: acpi: Convert ACPI value of debounce to microseconds (bsc#1012628). - drm/i915/psr: Set "SF Partial Frame Enable" also on full update (bsc#1012628). - drm/sun4i: mixer: Fix P010 and P210 format numbers (bsc#1012628). - net: dsa: mt7530: fix incorrect test in mt753x_phylink_validate() (bsc#1012628). - ARM: dts: aspeed: Fix AST2600 quad spi group (bsc#1012628). - iavf: Fix handling of vlan strip virtual channel messages (bsc#1012628). - i40e: stop disabling VFs due to PF error responses (bsc#1012628). - ice: stop disabling VFs due to PF error responses (bsc#1012628). - ice: Fix error with handling of bonding MTU (bsc#1012628). - ice: Don't use GFP_KERNEL in atomic context (bsc#1012628). - ice: Fix curr_link_speed advertised speed (bsc#1012628). - ethernet: Fix error handling in xemaclite_of_probe (bsc#1012628). - tipc: fix incorrect order of state message data sanity check (bsc#1012628). - net: ethernet: ti: cpts: Handle error for clk_enable (bsc#1012628). - net: ethernet: lpc_eth: Handle error for clk_enable (bsc#1012628). - net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr (bsc#1012628). - ax25: Fix NULL pointer dereference in ax25_kill_by_device (bsc#1012628). - net/mlx5: Fix size field in bufferx_reg struct (bsc#1012628). - net/mlx5: Fix a race on command flush flow (bsc#1012628). - net/mlx5e: Lag, Only handle events from highest priority multipath entry (bsc#1012628). - net/mlx5e: SHAMPO, reduce TIR indication (bsc#1012628). - NFC: port100: fix use-after-free in port100_send_complete (bsc#1012628). - selftests: pmtu.sh: Kill tcpdump processes launched by subshell (bsc#1012628). - selftests: pmtu.sh: Kill nettest processes launched in subshell (bsc#1012628). - gpio: ts4900: Do not set DAT and OE together (bsc#1012628). - mm: gup: make fault_in_safe_writeable() use fixup_user_fault() (bsc#1012628). - gianfar: ethtool: Fix refcount leak in gfar_get_ts_info (bsc#1012628). - net: phy: DP83822: clear MISR2 register to disable interrupts (bsc#1012628). - sctp: fix kernel-infoleak for SCTP sockets (bsc#1012628). - net: arc_emac: Fix use after free in arc_mdio_probe() (bsc#1012628). - net: bcmgenet: Don't claim WOL when its not available (bsc#1012628). - net: phy: meson-gxl: improve link-up behavior (bsc#1012628). - selftests/bpf: Add test for bpf_timer overwriting crash (bsc#1012628). - swiotlb: fix info leak with DMA_FROM_DEVICE (bsc#1012628). - usb: dwc3: pci: add support for the Intel Raptor Lake-S (bsc#1012628). - pinctrl: tigerlake: Revert "Add Alder Lake-M ACPI ID" (bsc#1012628). - KVM: Fix lockdep false negative during host resume (bsc#1012628). - kvm: x86: Disable KVM_HC_CLOCK_PAIRING if tsc is in always catchup mode (bsc#1012628). - spi: rockchip: Fix error in getting num-cs property (bsc#1012628). - spi: rockchip: terminate dma transmission when slave abort (bsc#1012628). - drm/vc4: hdmi: Unregister codec device on unbind (bsc#1012628). - of/fdt: move elfcorehdr reservation early for crash dump kernel (bsc#1012628). - x86/kvm: Don't use pv tlb/ipi/sched_yield if on 1 vCPU (bsc#1012628). - drivers: hamradio: 6pack: fix UAF bug caused by mod_timer() (bsc#1012628). - net-sysfs: add check for netdevice being present to speed_show (bsc#1012628). - hwmon: (pmbus) Clear pmbus fault/warning bits after read (bsc#1012628). - nvme-tcp: send H2CData PDUs based on MAXH2CDATA (bsc#1012628). - PCI: Mark all AMD Navi10 and Navi14 GPU ATS as broken (bsc#1012628). - gpio: Return EPROBE_DEFER if gc->to_irq is NULL (bsc#1012628). - drm/amdgpu: bypass tiling flag check in virtual display case (v2) (bsc#1012628). - Revert "xen-netback: remove 'hotplug-status' once it has served its purpose" (bsc#1012628). - Revert "xen-netback: Check for hotplug-status existence before watching" (bsc#1012628). - ipv6: prevent a possible race condition with lifetimes (bsc#1012628). - tracing: Ensure trace buffer is at least 4096 bytes large (bsc#1012628). - tracing/osnoise: Make osnoise_main to sleep for microseconds (bsc#1012628). - tracing: Fix selftest config check for function graph start up test (bsc#1012628). - selftest/vm: fix map_fixed_noreplace test failure (bsc#1012628). - selftests/memfd: clean up mapping in mfd_fail_write (bsc#1012628). - ARM: Spectre-BHB: provide empty stub for non-config (bsc#1012628). - fuse: fix fileattr op failure (bsc#1012628). - fuse: fix pipe buffer lifetime for direct_io (bsc#1012628). - staging: rtl8723bs: Fix access-point mode deadlock (bsc#1012628). - staging: gdm724x: fix use after free in gdm_lte_rx() (bsc#1012628). - net: macb: Fix lost RX packet wakeup race in NAPI receive (bsc#1012628). - riscv: alternative only works on !XIP_KERNEL (bsc#1012628). - mmc: meson: Fix usage of meson_mmc_post_req() (bsc#1012628). - riscv: Fix auipc+jalr relocation range checks (bsc#1012628). - tracing/osnoise: Force quiescent states while tracing (bsc#1012628). - tracing/osnoise: Do not unregister events twice (bsc#1012628). - arm64: dts: marvell: armada-37xx: Remap IO space to bus address 0x0 (bsc#1012628). - arm64: Ensure execute-only permissions are not allowed without EPAN (bsc#1012628). - arm64: kasan: fix include error in MTE functions (bsc#1012628). - swiotlb: rework "fix info leak with DMA_FROM_DEVICE" (bsc#1012628). - virtio: unexport virtio_finalize_features (bsc#1012628). - virtio: acknowledge all features before access (bsc#1012628). - net/mlx5: Fix offloading with ESWITCH_IPV4_TTL_MODIFY_ENABLE (bsc#1012628). - ARM: fix Thumb2 regression with Spectre BHB (bsc#1012628). - watch_queue: Fix filter limit check (bsc#1012628). - watch_queue, pipe: Free watchqueue state after clearing pipe ring (bsc#1012628). - watch_queue: Fix to release page in ->release() (bsc#1012628). - watch_queue: Fix to always request a pow-of-2 pipe ring size (bsc#1012628). - watch_queue: Fix the alloc bitmap size to reflect notes allocated (bsc#1012628). - watch_queue: Free the alloc bitmap when the watch_queue is torn down (bsc#1012628). - watch_queue: Fix lack of barrier/sync/lock between post and read (bsc#1012628). - watch_queue: Make comment about setting ->defunct more accurate (bsc#1012628). - x86/boot: Fix memremap of setup_indirect structures (bsc#1012628). - x86/boot: Add setup_indirect support in early_memremap_is_setup_data() (bsc#1012628). - x86/module: Fix the paravirt vs alternative order (bsc#1012628). - x86/sgx: Free backing memory after faulting the enclave page (bsc#1012628). - x86/traps: Mark do_int3() NOKPROBE_SYMBOL (bsc#1012628). - drm/panel: Select DRM_DP_HELPER for DRM_PANEL_EDP (bsc#1012628). - perf parse: Fix event parser error for hybrid systems (bsc#1012628). - btrfs: make send work with concurrent block group relocation (bsc#1012628). - riscv: dts: k210: fix broken IRQs on hart1 (bsc#1012628). - vhost: allow batching hint without size (bsc#1012628). - commit 2bd8d63 - config: enable XFS_RT (bsc#1197190) - commit d8f0e40 - esp: Fix possible buffer overflow in ESP transformation (CVE-2022-0886 bsc#1197131). - commit f5ed8a3 ==== mobile-broadband-provider-info ==== Version update (20210805 -> 20220315) - Update to version 20220315: * release: bump version to 20220315 * doap: remove Jiri * doap: add myself * us: include information for voicemail for Verizon Wireless * dtd: expand DTD to include information for vvm3 Visual Voicemail standard * us: add Purism SPC AweSIM MVNO * us: added MCCMNC 310280 to AT&T * ro: update the Romania Orange net and mms credentials * eg: mms settings for vodafone.eg * de: add mms information to combined apn * us: added Ting provider information * us: add US Mobile (T-Mobile MVNO): mcc="310" mnc="260" * au: remove duplicate Telstra MMS entry * bd: updated profile names and other information * bd: remove defunct provider * se: remove defunct operators * fr: add AIF Mvno provider * it: add Rabona Mobile * us: move mobilenet APN to T-Mobile and add mmsc * us: add Mint Mobile VVM, APN, and MMSC * ca: update Fido APN settings * us: add MMS settings to T-Mobile LTE APN * us: add T-Mobile to LTE APN name * fr: add TeleCoop * dtd: fix a spelling error * jp: add Japanese providers * cl: update apn of main providers of Chile * ca: change Wind Mobile to Freedom Mobile * ca: add Public Mobile provider * Rename Orange (Israel) to Partner * Add APN information for We4G (Israel) * Adds the missing MMSC and MMS proxy for Orange France into serviceproviders.xml * il: Add Golan Telecom and Hot Mobile MMS settings * Update redirected GNOME wiki URL in CONTRIBUTING - Drop mobile-broadband-provider-info-tmobile-reorder.patch: Having this patch downstream for ages makes no sense, and if it was really needed, one would think it had landed as a bug upstream at some point. ==== protobuf ==== Subpackages: libprotobuf-lite30 libprotobuf30 - Change Requires: zlib-devel to pkgconfig(zlib) so as not to conflict with libz-ng-compat1.

1 0

New Kubic snapshot 20220319 released!
by Richard Brown 20 Mar '22

20 Mar '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: NetworkManager (1.36.0 -> 1.36.2) dbus-1 kernel-source (5.16.14 -> 5.16.15) protobuf === Details === ==== NetworkManager ==== Version update (1.36.0 -> 1.36.2) Subpackages: libnm0 - Do not requires dhcp-client, NM is using its internal client by default for a long time now. - Convert iproute2 and iputils requires to recommends, they should not be hard requires. - Update to version 1.36.2: + When the list of plugins is not specified via "main.plugins" in NetworkManager.conf and no build-time default is set with "--with-config-plugins-default" configure argument, now all known plugins found in the plugin directory are loaded (and the built-in "keyfile" plugin is preferred over others). + Preserve external ports during checkpoint rollback. + Fix removal of ovsdb entry when an OVS interface goes away. + Fix DNS configuration for WWAN connections. ==== dbus-1 ==== Subpackages: libdbus-1-3 - Drop use of %{with libalternatives}, there's no such bcond defined and in many other places it's not optional anyway (boo#1197258) ==== kernel-source ==== Version update (5.16.14 -> 5.16.15) - Linux 5.16.15 (bsc#1012628). - arm64: dts: qcom: sm8350: Describe GCC dependency clocks (bsc#1012628). - arm64: dts: qcom: sm8350: Correct UFS symbol clocks (bsc#1012628). - HID: elo: Revert USB reference counting (bsc#1012628). - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (bsc#1012628). - ARM: boot: dts: bcm2711: Fix HVS register range (bsc#1012628). - clk: qcom: gdsc: Add support to update GDSC transition delay (bsc#1012628). - clk: qcom: dispcc: Update the transition delay for MDSS GDSC (bsc#1012628). - soc: mediatek: mt8192-mmsys: Fix dither to dsi0 path's input sel (bsc#1012628). - HID: vivaldi: fix sysfs attributes leak (bsc#1012628). - HID: nintendo: check the return value of alloc_workqueue() (bsc#1012628). - arm64: dts: armada-3720-turris-mox: Add missing ethernet0 alias (bsc#1012628). - tipc: fix kernel panic when enabling bearer (bsc#1012628). - vdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command (bsc#1012628). - vduse: Fix returning wrong type in vduse_domain_alloc_iova() (bsc#1012628). - net: phy: meson-gxl: fix interrupt handling in forced mode (bsc#1012628). - mISDN: Fix memory leak in dsp_pipeline_build() (bsc#1012628). - vhost: fix hung thread due to erroneous iotlb entries (bsc#1012628). - virtio-blk: Don't use MAX_DISCARD_SEGMENTS if max_discard_seg is zero (bsc#1012628). - virtio-blk: Remove BUG_ON() in virtio_queue_rq() (bsc#1012628). - vdpa: fix use-after-free on vp_vdpa_remove (bsc#1012628). - isdn: hfcpci: check the return value of dma_set_mask() in setup_hw() (bsc#1012628). - net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare() (bsc#1012628). - esp: Fix BEET mode inter address family tunneling on GSO (bsc#1012628). - net: gro: move skb_gro_receive_list to udp_offload.c (bsc#1012628). - qed: return status of qed_iov_get_link (bsc#1012628). - smsc95xx: Ignore -ENODEV errors when device is unplugged (bsc#1012628). - gpiolib: acpi: Convert ACPI value of debounce to microseconds (bsc#1012628). - drm/i915/psr: Set "SF Partial Frame Enable" also on full update (bsc#1012628). - drm/sun4i: mixer: Fix P010 and P210 format numbers (bsc#1012628). - net: dsa: mt7530: fix incorrect test in mt753x_phylink_validate() (bsc#1012628). - ARM: dts: aspeed: Fix AST2600 quad spi group (bsc#1012628). - iavf: Fix handling of vlan strip virtual channel messages (bsc#1012628). - i40e: stop disabling VFs due to PF error responses (bsc#1012628). - ice: stop disabling VFs due to PF error responses (bsc#1012628). - ice: Fix error with handling of bonding MTU (bsc#1012628). - ice: Don't use GFP_KERNEL in atomic context (bsc#1012628). - ice: Fix curr_link_speed advertised speed (bsc#1012628). - ethernet: Fix error handling in xemaclite_of_probe (bsc#1012628). - tipc: fix incorrect order of state message data sanity check (bsc#1012628). - net: ethernet: ti: cpts: Handle error for clk_enable (bsc#1012628). - net: ethernet: lpc_eth: Handle error for clk_enable (bsc#1012628). - net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr (bsc#1012628). - ax25: Fix NULL pointer dereference in ax25_kill_by_device (bsc#1012628). - net/mlx5: Fix size field in bufferx_reg struct (bsc#1012628). - net/mlx5: Fix a race on command flush flow (bsc#1012628). - net/mlx5e: Lag, Only handle events from highest priority multipath entry (bsc#1012628). - net/mlx5e: SHAMPO, reduce TIR indication (bsc#1012628). - NFC: port100: fix use-after-free in port100_send_complete (bsc#1012628). - selftests: pmtu.sh: Kill tcpdump processes launched by subshell (bsc#1012628). - selftests: pmtu.sh: Kill nettest processes launched in subshell (bsc#1012628). - gpio: ts4900: Do not set DAT and OE together (bsc#1012628). - mm: gup: make fault_in_safe_writeable() use fixup_user_fault() (bsc#1012628). - gianfar: ethtool: Fix refcount leak in gfar_get_ts_info (bsc#1012628). - net: phy: DP83822: clear MISR2 register to disable interrupts (bsc#1012628). - sctp: fix kernel-infoleak for SCTP sockets (bsc#1012628). - net: arc_emac: Fix use after free in arc_mdio_probe() (bsc#1012628). - net: bcmgenet: Don't claim WOL when its not available (bsc#1012628). - net: phy: meson-gxl: improve link-up behavior (bsc#1012628). - selftests/bpf: Add test for bpf_timer overwriting crash (bsc#1012628). - swiotlb: fix info leak with DMA_FROM_DEVICE (bsc#1012628). - usb: dwc3: pci: add support for the Intel Raptor Lake-S (bsc#1012628). - pinctrl: tigerlake: Revert "Add Alder Lake-M ACPI ID" (bsc#1012628). - KVM: Fix lockdep false negative during host resume (bsc#1012628). - kvm: x86: Disable KVM_HC_CLOCK_PAIRING if tsc is in always catchup mode (bsc#1012628). - spi: rockchip: Fix error in getting num-cs property (bsc#1012628). - spi: rockchip: terminate dma transmission when slave abort (bsc#1012628). - drm/vc4: hdmi: Unregister codec device on unbind (bsc#1012628). - of/fdt: move elfcorehdr reservation early for crash dump kernel (bsc#1012628). - x86/kvm: Don't use pv tlb/ipi/sched_yield if on 1 vCPU (bsc#1012628). - drivers: hamradio: 6pack: fix UAF bug caused by mod_timer() (bsc#1012628). - net-sysfs: add check for netdevice being present to speed_show (bsc#1012628). - hwmon: (pmbus) Clear pmbus fault/warning bits after read (bsc#1012628). - nvme-tcp: send H2CData PDUs based on MAXH2CDATA (bsc#1012628). - PCI: Mark all AMD Navi10 and Navi14 GPU ATS as broken (bsc#1012628). - gpio: Return EPROBE_DEFER if gc->to_irq is NULL (bsc#1012628). - drm/amdgpu: bypass tiling flag check in virtual display case (v2) (bsc#1012628). - Revert "xen-netback: remove 'hotplug-status' once it has served its purpose" (bsc#1012628). - Revert "xen-netback: Check for hotplug-status existence before watching" (bsc#1012628). - ipv6: prevent a possible race condition with lifetimes (bsc#1012628). - tracing: Ensure trace buffer is at least 4096 bytes large (bsc#1012628). - tracing/osnoise: Make osnoise_main to sleep for microseconds (bsc#1012628). - tracing: Fix selftest config check for function graph start up test (bsc#1012628). - selftest/vm: fix map_fixed_noreplace test failure (bsc#1012628). - selftests/memfd: clean up mapping in mfd_fail_write (bsc#1012628). - ARM: Spectre-BHB: provide empty stub for non-config (bsc#1012628). - fuse: fix fileattr op failure (bsc#1012628). - fuse: fix pipe buffer lifetime for direct_io (bsc#1012628). - staging: rtl8723bs: Fix access-point mode deadlock (bsc#1012628). - staging: gdm724x: fix use after free in gdm_lte_rx() (bsc#1012628). - net: macb: Fix lost RX packet wakeup race in NAPI receive (bsc#1012628). - riscv: alternative only works on !XIP_KERNEL (bsc#1012628). - mmc: meson: Fix usage of meson_mmc_post_req() (bsc#1012628). - riscv: Fix auipc+jalr relocation range checks (bsc#1012628). - tracing/osnoise: Force quiescent states while tracing (bsc#1012628). - tracing/osnoise: Do not unregister events twice (bsc#1012628). - arm64: dts: marvell: armada-37xx: Remap IO space to bus address 0x0 (bsc#1012628). - arm64: Ensure execute-only permissions are not allowed without EPAN (bsc#1012628). - arm64: kasan: fix include error in MTE functions (bsc#1012628). - swiotlb: rework "fix info leak with DMA_FROM_DEVICE" (bsc#1012628). - virtio: unexport virtio_finalize_features (bsc#1012628). - virtio: acknowledge all features before access (bsc#1012628). - net/mlx5: Fix offloading with ESWITCH_IPV4_TTL_MODIFY_ENABLE (bsc#1012628). - ARM: fix Thumb2 regression with Spectre BHB (bsc#1012628). - watch_queue: Fix filter limit check (bsc#1012628). - watch_queue, pipe: Free watchqueue state after clearing pipe ring (bsc#1012628). - watch_queue: Fix to release page in ->release() (bsc#1012628). - watch_queue: Fix to always request a pow-of-2 pipe ring size (bsc#1012628). - watch_queue: Fix the alloc bitmap size to reflect notes allocated (bsc#1012628). - watch_queue: Free the alloc bitmap when the watch_queue is torn down (bsc#1012628). - watch_queue: Fix lack of barrier/sync/lock between post and read (bsc#1012628). - watch_queue: Make comment about setting ->defunct more accurate (bsc#1012628). - x86/boot: Fix memremap of setup_indirect structures (bsc#1012628). - x86/boot: Add setup_indirect support in early_memremap_is_setup_data() (bsc#1012628). - x86/module: Fix the paravirt vs alternative order (bsc#1012628). - x86/sgx: Free backing memory after faulting the enclave page (bsc#1012628). - x86/traps: Mark do_int3() NOKPROBE_SYMBOL (bsc#1012628). - drm/panel: Select DRM_DP_HELPER for DRM_PANEL_EDP (bsc#1012628). - perf parse: Fix event parser error for hybrid systems (bsc#1012628). - btrfs: make send work with concurrent block group relocation (bsc#1012628). - riscv: dts: k210: fix broken IRQs on hart1 (bsc#1012628). - vhost: allow batching hint without size (bsc#1012628). - commit 2bd8d63 - config: enable XFS_RT (bsc#1197190) - commit d8f0e40 - esp: Fix possible buffer overflow in ESP transformation (CVE-2022-0886 bsc#1197131). - commit f5ed8a3 ==== protobuf ==== - Change Requires: zlib-devel to pkgconfig(zlib) so as not to conflict with libz-ng-compat1.

1 0

New MicroOS snapshot 20220318 released!
by Richard Brown 20 Mar '22

20 Mar '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bash-completion busybox-links fwupd-efi (1.1 -> 1.2) grep p11-kit (0.23.22 -> 0.24.1) wavpack === Details === ==== bash-completion ==== - remove PS1-completion-boo903362.patch as it breaks on non-bash shells and the original problem in bsc#903362#c9 does not occur anymore - add versioned dependency to bash versions that have the fix ==== busybox-links ==== Subpackages: busybox-coreutils busybox-gawk busybox-grep busybox-gzip busybox-sed busybox-xz - replace copy from buildroot's gzip with a reimplementation that is not GPLv3 (jsc#PM-3301) ==== fwupd-efi ==== Version update (1.1 -> 1.2) - Update to version 1.2: * Release fwupd-efi 1.2 * meson: use stadard objcopy binary * meson: use find_program() to find the helper scripts we run * meson: using local copy ldscript when local copy crt0 be used for SBAT * sbat: clarify project URL * trivial: Ignore some markdown issues * Wait 5 seconds to reboot on errors * Port pre-commit clang-format, codespell, markdownlint from fwupd * trivial: fixup python errors by codacity/precommit * trivial: fixup markdown format * trivial: spelling errors * Sleep longer when no updates to process * README: fix typo and URL * trivial: post release version bump - Remove 0001-meson-using-local-copy-ldscript-when-local-copy-crt0.patch (merged upstream) ==== grep ==== - Make profiling deterministic (bsc#1040589) ==== p11-kit ==== Version update (0.23.22 -> 0.24.1) Subpackages: libp11-kit0 p11-kit-tools - make sure p11-kit components have matching versions (boo#1196812) - Update to version 0.24.1: * rpc: Support protocol version negotiation. * proxy: Support copying attribute array recursively. * Link libp11-kit so that it cannot unload. * Translation improvements. * Build fixes. - Update to version 0.24.0: * Use inclusive language on certificate distrust. Note: This changes the directory and attribute names to distrust certain CAs to "blocklist". * Fix issues spotted by coverity and ASan. * Integrate gettext with tools more tightly. * rpc: Forbid use of array of attributes. * Build fixes. - Change dirs from blacklist to blocklist ref upstream changes. ==== wavpack ==== - security update - added patches fix CVE-2021-44269 [bsc#1197020], out of bounds read in processing .wav file + wavpack-CVE-2021-44269.patch

1 0

New Kubic snapshot 20220318 released!
by Richard Brown 20 Mar '22

20 Mar '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: busybox-links cri-o (1.22.0 -> 1.23.2) cri-tools (1.22.0 -> 1.23.0) grep kubernetes (1.23.0 -> 1.23.4) kubernetes1.22 (1.22.4 -> 1.22.7) kubernetes1.23 (1.23.0 -> 1.23.4) p11-kit (0.23.22 -> 0.24.1) === Details === ==== busybox-links ==== Subpackages: busybox-coreutils busybox-gawk busybox-grep busybox-gzip busybox-sed busybox-xz - replace copy from buildroot's gzip with a reimplementation that is not GPLv3 (jsc#PM-3301) ==== cri-o ==== Version update (1.22.0 -> 1.23.2) Subpackages: cri-o-kubeadm-criconfig - Update to version 1.23.2: * config/sysctl: fail if there is a + in the value * Revert "config/sysctl: fail if there is a + in the value" * bump to version 1.23.2 * config/sysctl: fail if there is a + in the value * config/sysctls: validate against invalid spaces * server: stop deleting pod from idIndex if already gone * [1.23] ci: use kubernetes 1.23, cri-tools 1.23 * contrib/test/int/build/kubernetes: rm deprecated RunAsGroup * hack/build-rpms.sh: fix yum-builddep failures * image: use imageCache value for ImageStatus() * oci: fix a leaked goroutine * Reuse createContainerIO in CreateContainer * Fix vm containers couldn't restore after CRI-O restart * release-notes: add args for checksum fields * Updated format * Generate checksum files for artifacts * bump to v1.23.1 * test: add test for skipped sysctls * server: skip sysctls that would affect the host * server: don't set memory swap when it's not enabled * deep copy List{PodSandbox,Container} structs * ci: use main branch for conmon * server: fix race with kubelet * Fix runtime panic on pod sandbox stats retrieval * ci: use main version of runc * openshift e2e: bump ci image * server: fix a potential NULL-pointer dereference. * pass the main mount point to fix crypto profiles binding * test: update tests for allowed_devices * config: add AllowedDevices option * server: drop duplicate log message * test: add test ensuring a stopped pod is restored * sandbox stop: remove namespaces * restore: handle removed namespaces * Partially revert "restore: restore stop before managing namespace" * restore: ensure containers are wiped on reboot * use cmdrunner singleton * conmonmgr: refactor for new CommandRunner * cmdrunner: update mocks and add target to makefile * config: prepend commands with taskset if InfraCtrCPUSet is configured * cmdrunner: add tests for prepended commands * cmdrunner: create singleton * Use timeout for conmon cgroup move * Fixed a problem where metricImagePullsBytesTotal was getting updated twice and on second call getting incorrect labels * vendor: bump c/image to 5.17.0 * Add new metrics that match Prometheus best practices and reduce cardinality * add metrics with new names that match naming best practices * use _total for all counters * use base unit seconds, bytes * metrics that do not follow best practices have been marked deprecated, these can be removed in a future release, it is to ensure non-breaking change for couple of releases * unit test: fix relative log test * unit tests: update pinns path in case it isn't found in PATH * test: skip target tests for userns * test: add test for target namespace * add support for target PID namespaces * test: give testunit sudo * oci: add managed pidns to container object * pkg/container: take container namespace configuration * nsmgrtest: take some namespace related test code * nsmgr: add function to pin existing namespace * nsmgr: take (and rename) NamespacePathFromProc * pkg/sandbox: take config initialization * Bump Kubernetes to v1.23.0 * set user.max_user_namespaces in case it's not * lint: bump cyclo complexity * gh-actions/contrib: setup sub{g,u}id * docs: add tutorial for setting up user namespaces * oci: put conmon in infra ctr cpuset if it is in the pod cgroup * test: add tests for user namespace annotations * test: move workload creation function to helpers * cni manager: catch server shutdown * server: notify user when network isn't ready yet * stop using hardcoded "pod" const * oci: always reap conmon zombies * clarify some error messages * Drop intermediate CRI types * Relabel containerenv files * Add minimum_mappable_(u|g)id settings * Fix runtime panic on stats server shutdown * restore: restore stop before managing namespace * server: add {,List}SandboxStats * server: refactor sandbox list * server: use stats server to get container stats * container server: use stats server * stats: add stats server * config: add StatsCollectionPeriod field * cgmgr: move most of stats handling to cgmgr * oci: make changes in preparation for moving stats functionality: * server: stub {List,}PodSandboxStats * server/cri: add PodSandboxStats support * vendor: bump cri-api * server/cri: refactor to make stats processing unified * pkg/config: use iota * Add go 1.17+ go:build tags * Remove redundant build tags * Add containerenv file to containers This file indicates that the current environment is inside a container environment. The same technique is used by podman and docker. The same file name/path as podman was used, as it is vendor agnostic. * build(deps): bump github.com/containerd/containerd from 1.5.7 to 1.5.8 * config: merge runtime and workload allowed annotations * Updates kubeadm.md: The cgroup property is removed in [kubeadm-config.v1beta3](https://kubernetes.io/docs/reference/config-api/kubeadm-config.v1beta3/) * build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc * Specify runtime table format in the error message * build(deps): bump github.com/containerd/ttrpc from 1.0.2 to 1.1.0 * server: fix segfault when using cgroupv2 * gh-actions: add sed for kube e2e * release-notes: update to main * build(deps): bump github.com/onsi/gomega from 1.16.0 to 1.17.0 * build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc * Bug 2012838: fix override storage options from storage.conf * oci: fix deadlock in container stop code * build(deps): bump google.golang.org/grpc from 1.41.0 to 1.42.0 * oci: always close chControl * oci: make some channels buffered * build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc * build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc * build(deps): bump github.com/godbus/dbus/v5 from 5.0.5 to 5.0.6 * Add annotation that makes /sys/fs/cgroup writable * Add support for CNI plugins v1.0.1 * bump(deps-opentelemetry) * pin go.opentelemetry grpc/otelgrpc v0.25.0 * opentelemetry: add gRPC tracing * build(deps): bump k8s.io/klog/v2 from 2.20.0 to 2.30.0 * build(deps): bump github.com/go-logr/logr from 1.1.0 to 1.2.0 * version: bump to 1.23.0 * build(deps): bump github.com/containers/podman/v3 from 3.3.1 to 3.4.1 * build(deps): bump github.com/containers/common from 0.43.2 to 0.46.0 * test: drop swap disable playbook * server: add support for CRI unified field * server: implement swap support * server/cri: add support for 1.22 features * test: bump cri-tools version * scripts: pin cri-tools version * server: reduce needless copying for sb.NamespaceOptions * oci: refactor internal structure to use CRI type * oci: use server CRI metadata type for containers * sandbox: refactor internal structure to use CRI type * sandbox: save createdAt as a int64 * build(deps): bump github.com/containerd/cgroups from 1.0.1 to 1.0.2 * build(deps): bump github.com/creack/pty from 1.1.16 to 1.1.17 * build(deps): bump github.com/Microsoft/go-winio from 0.5.0 to 0.5.1 * Bump Kubernetes to v1.22.2 * sandbox: use server CRI metadata type * docs: emphasize deprecation notice * update documentation for workloads * add allowed annotations to workloads * Log HTTP response writer message instead an error * oci: use c/common signal parsing function * Skip volume relabel for super privileged containers * oci: chown stdin pipe to user in the container * test: fix selinux test failures * build(deps): bump github.com/onsi/ginkgo from 1.16.4 to 1.16.5 * Fix runtime handler docs * build(deps): bump github.com/containers/image/v5 from 5.15.2 to 5.16.1 * scripts: fix release branch forward script * server: FilterDisallowedAnnotations of containers earlier * server: conditionally relabel volumes given annotation * build(deps): bump github.com/containers/storage from 1.36.0 to 1.37.0 * test: refactor allowed_annotation tests * server: reduce args in addOCIBindMounts * build(deps): bump github.com/opencontainers/selinux from 1.8.5 to 1.9.1 * test: add label for openshift e2e in dockerfile * build(deps): bump github.com/containerd/containerd from 1.5.5 to 1.5.7 * test: skip certificate check for downloading parallel * Remove usge of deprecated apt-key in Ubuntu install * Fix install.md links * build(deps): bump google.golang.org/grpc from 1.40.0 to 1.41.0 * use a more appropriate console with code block * build(deps): bump k8s.io/api from 0.22.1 to 0.22.2 * build(deps): bump k8s.io/cri-api from 0.22.1 to 0.22.2 * build(deps): bump sigs.k8s.io/yaml from 1.2.0 to 1.3.0 * build(deps): bump github.com/creack/pty from 1.1.15 to 1.1.16 * build(deps): bump k8s.io/apimachinery from 0.22.1 to 0.22.2 * fix node e2e * build(deps): bump github.com/intel/goresctrl from 0.1.0 to 0.2.0 * bump crio commit used by node e2e installer * server: mount cgroup if hostNetwork * server: use container level host network setting * server: don't recalculate hostnet * Fix typo in install.md * Remove one of the explanations for `bind_mount_prefix` because it is duplicated. * node e2e: keep infra container * add unit test for the `server/sandbox_remove`. * test: fix journald test for new conmon * fix shfmt * update `install.md` for debian and ubuntu * build(deps): bump github.com/json-iterator/go from 1.1.11 to 1.1.12 * build(deps): bump k8s.io/client-go from 0.22.1 to 0.22.2 * fix shfmt * server: set spec when dropping infra * Update 'master' branch links to 'main' * bumps pause image to 3.6 * server: don't wait forever on conmon cgroup move fail * build(deps): bump github.com/containers/storage from 1.34.1 to 1.36.0 * Remove bashism in sh script * Do not log if Intel RDT is not supported * build(deps): bump github.com/godbus/dbus/v5 from 5.0.4 to 5.0.5 * Fix cluster.yaml for kubectl create * call cmd.Wait() in all cases we call Start() * oci: call wait on conmon if cgroup move fails * build(deps): bump github.com/go-logr/logr from 1.0.0 to 1.1.0 * Fix `crio_image_pulls_layer_size_` metrics docs * Adapt to klog incompatible changes * build(deps): bump k8s.io/klog/v2 from 2.10.0 to 2.20.0 * Add `--profile-cpu` and `--profile-mem` options * build(deps): bump github.com/containers/podman/v3 from 3.3.0 to 3.3.1 * server: remove ineffective `updateLock`. * Fix missing quantile in `latency_microseconds_total` metrics * Update crio commit for node e2e * build(deps): bump github.com/fsnotify/fsnotify from 1.4.9 to 1.5.1 * Bump runc binary to 1.0.2 * Switch to go1.17 for CI * fix debian 10 build doc * test/testdata/sandbox_config.json: fix the dns_config * adds updating instructions to install.md ==== cri-tools ==== Version update (1.22.0 -> 1.23.0) - Update to version 1.23.0: * Bump docs to v1.23.0 * Bump github.com/opencontainers/selinux from 1.9.1 to 1.10.0 * Bump github.com/opencontainers/runc from 1.0.2 to 1.0.3 * Bump github.com/docker/docker * Bump google.golang.org/grpc from 1.42.0 to 1.43.0 * 1.5.9 * Use same grpc max message size as Kubelet * Add support for cri-dockerd * Add support for specifying custom test container images. * Fix cri-dockerd CI runs * Fix Containerd main branch CI for Windows * fix ci for dockershim-critest * Update Windows images for ltsc2022 * images: use k8s-staging-test-infra/gcb-docker-gcloud * Bump github.com/onsi/gomega from 1.16.0 to 1.17.0 * Refactor fish completion * Rename bash and zsh completion functions * Add zsh compinit tag * Bump google.golang.org/grpc from 1.41.0 to 1.42.0 * Bump github.com/docker/docker * Bump github.com/onsi/ginkgo from 1.16.4 to 1.16.5 * Add release publishing workflow * Bump github.com/opencontainers/selinux from 1.8.5 to 1.9.1 * Add SHA512 sum for release files * Bump github.com/docker/docker * Bump google.golang.org/grpc from 1.40.0 to 1.41.0 * Bump sigs.k8s.io/yaml from 1.2.0 to 1.3.0 * Bump k8s.io/api from 0.22.1 to 0.22.2 * Bump k8s.io/cri-api from 0.22.1 to 0.22.2 * Bump k8s.io/apimachinery from 0.22.1 to 0.22.2 * Bump k8s.io/client-go from 0.22.1 to 0.22.2 * Bump k8s.io/kubectl from 0.22.1 to 0.22.2 * Updates E2E test images registry * Bump github.com/opencontainers/selinux from 1.8.4 to 1.8.5 * Switch to go1.17 for CI * Bump github.com/opencontainers/runc from 1.0.1 to 1.0.2 * Added dropping/adding `ALL` capabilities case to critest * Bump github.com/onsi/gomega from 1.15.0 to 1.16.0 * Bump k8s.io/cri-api from 0.22.0 to 0.22.1 * Bump k8s.io/client-go from 0.22.0 to 0.22.1 * Bump k8s.io/api from 0.22.0 to 0.22.1 * Bump k8s.io/apimachinery from 0.22.0 to 0.22.1 * Bump k8s.io/kubectl from 0.22.0 to 0.22.1 * Bump google.golang.org/grpc from 1.39.1 to 1.40.0 * Bump github.com/onsi/gomega from 1.14.0 to 1.15.0 * Bump github.com/opencontainers/selinux from 1.8.3 to 1.8.4 * Bump google.golang.org/grpc from 1.39.0 to 1.39.1 ==== grep ==== - Make profiling deterministic (bsc#1040589) ==== kubernetes ==== Version update (1.23.0 -> 1.23.4) Subpackages: kubernetes-client kubernetes-kubeadm kubernetes-kubelet - Bump kubernetes-* to 1.23.4, *-minus1 to 1.22.7 ==== kubernetes1.22 ==== Version update (1.22.4 -> 1.22.7) - Update to version 1.22.7: * Update Go to 1.16.14 * add namespace in azurefile volumeid * fix: azurefile volumeid conflict in csi migration * Execute sync before taking the snapshot * Mark device as uncertain if unmount device succeeds * Set max results if its not set * Update CHANGELOG/CHANGELOG-1.22.md for v1.22.6 * Update k/utils to v0.0.0-20211116205334-6203023598ed * [go] update to Go 1.16.13 * Enabling kube-proxy metrics on windows kernel mode * fix: ignore the case when comparing azure tags in service annotation * fix: remove outdated ipv4 route when the corresponding node is deleted * fix: delete non existing disk issue * fix containers order after applying * generated: ./hack/update-vendor.sh * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1 * fix: azuredisk parameter lowercase translation issue * fix: do not delete the lb that does not exist * removed unnecessary log line * Fix header mutation race in timeout filter * use node informer to check volumes attachment status before backoff * When volume is not marked in-use, do not backoff * kubeadm: remove the restriction that the ca.crt can only contain one certificate * flake fix: remove the error handler for cronjob integration test * vendor: bump cAdvisor to v0.39.3 * Fix the leak of vSphere client sessions * fix nil pointer in create secret commands * client-go: Clear the ResourceVersionMatch on paged list calls * Update GCE manifest to use konnectivity 0.0.27 * Update to apiserver-network-proxy v0.0.27 * add gce loadbalancer no-op finalizer and existingFwdRule tests * disable gce service handling if has rbs forwarding rule * add ELBRbsFinalizer * add gce elb rbs opt-in annotation * Improving performance of EndpointSlice controller metrics cache * fix the error when cleaning up jobs for cronjob * Update CHANGELOG/CHANGELOG-1.22.md for v1.22.5 * Add test to confirm containers won't start * Check for failed sandbox and failed workload containers * mount-utils: Detect potential stale file handle * [go1.16] Update to go1.16.12 * Skip creating HNS loadbalancer with empty endpoints * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63 * kubeadm: avoid requiring a CA key during kubeconfig expiration checks * kubeadm: print the CA of kubeconfig files in "check expiration" * kubeadm: validate local etcd certficates during expiration checks * kubelet: set failed phase during graceful shutdown * [go1.16] Update to go1.16.11 * fix: ignore the case when updating tags * Ensure deletion of pods in queues and cache * kubelet: Rejected pods should be filtered from admission * kube-scheduler: Increase the duration to expire an assumed pod * Skip check for all topology labels when using system default spreading * workqueue: fix leak in queue preventing objects from being GCed * Fix workqueue memory leak * Ignore 'wait: no child processes' error when calling mount/umount * Reduce calls to docker from dockershim for stats * Update CHANGELOG/CHANGELOG-1.22.md for v1.22.4 * Add warning about using unsupported CRON_TZ * Fix flake caused by sampling signal counter too early. * Ensure there is one running static pod with the same full name * NodeConformance: Respect grace period when updating static pod * Fix concurrent map writes error in kube-apiserver * e2e: node: release-1.22: backport findKubeletServiceName * node: e2e: add test for the checkpoint recovery * devicemanager: checkpoint: support pre-1.20 data * fix: remove VMSS and VMSS instances from SLB backend pool only when necessary * fix: leave the probe path empty for TCP probes * fix: skip instance not found when decoupling vmss from lb ==== kubernetes1.23 ==== Version update (1.23.0 -> 1.23.4) Subpackages: kubernetes1.23-client kubernetes1.23-client-common kubernetes1.23-kubeadm kubernetes1.23-kubelet kubernetes1.23-kubelet-common - Update to version 1.23.4: * Update Go to 1.17.7 * Use serializable struct for x-kubernetes-validations in openapi * Make JSON schema round tripping test more strict * ignore CRI PodSandboxNetworkStatus for host network pods * set secondary address on host-network pods * Deeply copy JSONSchemaProps.XValidations. * Ensure the execHostnameTest() compares hostnames * Revert "Fix comparison between FQDN and hostname" * service REST: Call Decorator(old) on update path * add namespace in azurefile volumeid * fix: azurefile volumeid conflict in csi migration * Mark device as uncertain if unmount device succeeds * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3 * kubelet: fix podstatus not containing pod full name * Fix bug with node restriction blocking pvc.status.resizestatus change * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true * Set max results if its not set * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2 * Update k/utils to v0.0.0-20211116205334-6203023598ed * [go] update to Go 1.17.6 * fix: remove outdated ipv4 route when the corresponding node is deleted * fix: delete non existing disk issue * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration." * fix containers order after applying * generated: ./hack/update-vendor.sh * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1 * Execute sync before taking the snapshot * Correct the feature gate string for RBD migration. * fix: azuredisk parameter lowercase translation issue * removed unnecessary log line * kubectl: add integration test for result reporting * cli: let kubectl handle error printing * cli: avoid logging command line errors in more cases * Fix header mutation race in timeout filter * clear pod's .status.nominatedNodeName when necessary * use node informer to check volumes attachment status before backoff * When volume is not marked in-use, do not backoff * kubeadm: remove the restriction that the ca.crt can only contain one certificate * flake fix: remove the error handler for cronjob integration test * Fix the leak of vSphere client sessions * fix nil pointer in create secret commands * Fix order of commands in the snapshot tests for persistent volumes * client-go: Clear the ResourceVersionMatch on paged list calls * Improving performance of EndpointSlice controller metrics cache * fix the error when cleaning up jobs for cronjob * Update CHANGELOG to add missing release notes. * apf: ensure exempt request notes the classification * Enabling kube-proxy metrics on windows kernel mode * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1 * add gce loadbalancer no-op finalizer and existingFwdRule tests * disable gce service handling if has rbs forwarding rule * add ELBRbsFinalizer * add gce elb rbs opt-in annotation * cherry pick of knp 0.0.27 * Remove JSON logging performance regression * Re-introduce removed kubectl --dry-run values. * Point flowcontrol users at v1beta2 * [go1.17] Update to go1.17.5 * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63 * mount-utils: Detect potential stale file handle * Skip creating HNS loadbalancer with empty endpoints * Add regression test for CPUManager distribute NUMA algorithm * Add unit test for CPUManager distribute NUMA algorithm verifying fixes * Fix accounting bug in CPUManager distribute NUMA policy * Fix error handling in CPUManager distribute NUMA tests * Add a sum() helper to the CPUManager cpuassignment logic * Allow the map.Values() function in the CPUManager to take a set of keys * Fix CPUManager algo to calculate min NUMA nodes needed for distribution * Fix unit tests following bug fix in CPUManager for map functions (2/2) * Fix unit tests following bug fix in CPUManager for map functions (1/2) * Fix bug in CPUManager map.Keys() and map.Values() implementations * Ensure we balance across *all* NUMA nodes in NUMA distribution algo * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize * Round the CPUManager mean and stddev calculations to the nearest 1000th * updated deprecation messages from 1.23 to 1.24 * kubelet: set failed phase during graceful shutdown * kubeadm: avoid requiring a CA key during kubeconfig expiration checks * kubeadm: print the CA of kubeconfig files in "check expiration" * kubeadm: validate local etcd certficates during expiration checks * publishing-bot/doc: add component-helpers to the readme * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules * Changelog: mention kube-scheduler bits deprication * rbd: initialize ceph monitors slice with an empty value. * Direct v2betaX users to migrate to HPA v2 * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0 * [go1.17] Update to go1.17.4 ==== p11-kit ==== Version update (0.23.22 -> 0.24.1) Subpackages: libp11-kit0 p11-kit-tools - make sure p11-kit components have matching versions (boo#1196812) - Update to version 0.24.1: * rpc: Support protocol version negotiation. * proxy: Support copying attribute array recursively. * Link libp11-kit so that it cannot unload. * Translation improvements. * Build fixes. - Update to version 0.24.0: * Use inclusive language on certificate distrust. Note: This changes the directory and attribute names to distrust certain CAs to "blocklist". * Fix issues spotted by coverity and ASan. * Integrate gettext with tools more tightly. * rpc: Forbid use of array of attributes. * Build fixes. - Change dirs from blacklist to blocklist ref upstream changes.

1 0

New ARM MicroOS snapshot 20220317 released!
by Guillaume Gardet 18 Mar '22

18 Mar '22

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (21.3.7 -> 22.0.0) Mesa-drivers (21.3.7 -> 22.0.0) NetworkManager-openvpn (1.8.16 -> 1.8.18) appstream-glib (0.7.18+30 -> 0.7.18+31) bluez (5.62 -> 5.63) boost-base dbus-1 ffmpeg-4 glib2-branding-openSUSE grub2 harfbuzz (4.0.0 -> 4.0.1) iproute2 kernel-firmware (20220224 -> 20220309) kfilemetadata5 librsvg (2.52.6 -> 2.52.7) libsolv (0.7.20 -> 0.7.21) libzypp (17.29.5 -> 17.29.6) ncurses (6.3.20220226 -> 6.3.20220312) openssl (1.1.1m -> 1.1.1n) openssl-1_1 (1.1.1m -> 1.1.1n) python-more-itertools python-py qemu rpm sqlite3 (3.37.2 -> 3.38.1) xorg-x11-server zlib-ng-compat (2.0.5 -> 2.0.6) === Details === ==== Mesa ==== Version update (21.3.7 -> 22.0.0) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - U_meson-restore-private-requires-to-libdrm-in-dri.pc-f.patch * Due to a typo the private requires to libdrm were lost in dri.pc. Fixed another typo (only comment). - enabled "i915" Gallium-based Intel Gen3 driver - fixed llvm/clang buildrequires for sle15-sp4/Leap 15.4 - no longer try to build classic non-Gallium OpenGL drivers i915, i965, nouveau, r100 and r200, which have been dropped with Mesa 22.0.0; see also some documentation on Phoronix https://www.phoronix.com/scan.php?page=news_item&px=Mesa-Classic-Retired - update to 22.0.0 * lavapipe,radv,anv KHR_dynamic_rendering * radv EXT_image_view_min_lod * VK_KHR_synchronization2 on RADV. * OpenSWR has been moved to the Amber branch * radeonsi, zink ARB_sparse_texture * d3d12 GLES3.1 (shader storage buffers, images, compute, indirect draw, draw params, ARB_framebuffer_no_attachments, ARB_sample_shading, and GLSL400) * radeonsi, zink ARB_sparse_texture2 * zink EXT_memory_object, EXT_memory_object_fd, EXT_semaphore, EXT_semaphore_fd * anv VK_VALVE_mutable_descriptor_type * Vulkan 1.3 on RADV,Anv. * radeonsi, zink ARB_sparse_texture_clamp ==== Mesa-drivers ==== Version update (21.3.7 -> 22.0.0) Subpackages: Mesa-dri Mesa-gallium - U_meson-restore-private-requires-to-libdrm-in-dri.pc-f.patch * Due to a typo the private requires to libdrm were lost in dri.pc. Fixed another typo (only comment). - enabled "i915" Gallium-based Intel Gen3 driver - fixed llvm/clang buildrequires for sle15-sp4/Leap 15.4 - no longer try to build classic non-Gallium OpenGL drivers i915, i965, nouveau, r100 and r200, which have been dropped with Mesa 22.0.0; see also some documentation on Phoronix https://www.phoronix.com/scan.php?page=news_item&px=Mesa-Classic-Retired - update to 22.0.0 * lavapipe,radv,anv KHR_dynamic_rendering * radv EXT_image_view_min_lod * VK_KHR_synchronization2 on RADV. * OpenSWR has been moved to the Amber branch * radeonsi, zink ARB_sparse_texture * d3d12 GLES3.1 (shader storage buffers, images, compute, indirect draw, draw params, ARB_framebuffer_no_attachments, ARB_sample_shading, and GLSL400) * radeonsi, zink ARB_sparse_texture2 * zink EXT_memory_object, EXT_memory_object_fd, EXT_semaphore, EXT_semaphore_fd * anv VK_VALVE_mutable_descriptor_type * Vulkan 1.3 on RADV,Anv. * radeonsi, zink ARB_sparse_texture_clamp ==== NetworkManager-openvpn ==== Version update (1.8.16 -> 1.8.18) Subpackages: NetworkManager-openvpn-gnome - Update to version 1.8.18: + Gtk4 version of the editor plugin is now available (for use with Control Center of GNOME 42 or later). + Updated translations. - Drop nm-openvpn-bsc#1186091.patch: Fixed upstream. - Rebase patch with quilt. - Add pkgconfig(gtk4) and pkgconfig(libnma-gtk4) BuildRequires and pass --with-gtk4=yes to configure, build the gtk4 version. - Stop passing --without-libnm-glib to configure, no longer needed, nor recognized. - Pass --enable-lto=yes to configure, build using LTO support. - Add optional libxml2-tools BuildRequires, build runs xml-stripblanks preprocessing if available. ==== appstream-glib ==== Version update (0.7.18+30 -> 0.7.18+31) Subpackages: libappstream-glib8 - Update to version 0.7.18+31: * Fix extracting relative symlinks (boo#1196459) ==== bluez ==== Version update (5.62 -> 5.63) Subpackages: bluez-cups libbluetooth3 - Add code to restore user modifications for modprobe.d %config files after moving the files to %_modprobedir - Use %_modprobedir (jsc#SLE-20639) - update to version 5.63: * Fix issue with storing IRK causing invalid read access. * Fix issue with disconnecting due to GattCharacteristic1.MTU. * Add support for Device{Found,Lost} of advertising monitoring. ==== boost-base ==== Subpackages: boost-license1_78_0 libboost_thread1_78_0 - add dependency on libzstd and libzstd-devel to get on-the-fly zstd compression in boost-iostreams ==== dbus-1 ==== Subpackages: libdbus-1-3 - set runstatedir correctly ==== ffmpeg-4 ==== Subpackages: libavcodec58_134 libavformat58_76 libavutil56_70 libswresample3_9 - Fix OS version check, so nvcodec is enabled for Leap too. ==== glib2-branding-openSUSE ==== - Update .gschema.override.in: Change default libreoffice startup entry to libreoffice-startcenter.desktop according to the libreoffice update (bsc#1195836, bsc#1196951). ==== grub2 ==== Subpackages: grub2-arm64-efi grub2-snapper-plugin - Fix grub-install error when efi system partition is created as mdadm software raid1 device (bsc#1179981) (bsc#1195204) * 0001-install-fix-software-raid1-on-esp.patch - Fix riscv64 build error * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch - Fix error in grub-install when linux root device is on lvm thin volume (bsc#1192622) (bsc#1191974) * 0001-grub-install-bailout-root-device-probing.patch ==== harfbuzz ==== Version update (4.0.0 -> 4.0.1) Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0 - Update to version 4.0.1: + Update OpenType to AAT mappings for ?hist? and ?vrtr? features + Update IANA Language Subtag Registry to 2022-03-02 + Update USE shaper to allow any non-numeric tail in a symbol cluster, and remove obsolete data overrides + Fix handling of baseline variations to return correctly scaled values ==== iproute2 ==== - Add eBPF(libbpf) support - Adjust NETNS_RUN_DIR from /var/run to /run ==== kernel-firmware ==== Version update (20220224 -> 20220309) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20220309 (git commit cd01f857da28): * iwlwifi: add new FWs from core68-60 release * ath11k: add links for WCN6855 hw2.1 * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3 * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin * ath10k/ath11k: mark notice.txt as "File:" * linux-firmware: add firmware for MT7986 * amdgpu: add firmware for SDMA 5.2.7 IP block * amdgpu: add firmware for PSP 13.0.8 IP block * amdgpu: add firmware for DCN 3.1.6 IP block * amdgpu: add firmware for GC 10.3.7 IP block * rtw89: 8852a: update fw to v0.13.36.0 * iwlwifi: update 9000-family firmwares to core68-60 * amdgpu: update raven2 VCN firmware * amdgpu: update raven VCN firmware * amdgpu: update picasso VCN firmware * linux-firmware: Update firmware file for Intel Bluetooth 9462 * linux-firmware: Update firmware file for Intel Bluetooth 9462 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX210 * linux-firmware: Update firmware file for Intel Bluetooth AX200 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * linux-firmware: Update AMD SEV firmware * rtw89: 8852a: update fw to v0.13.35.0 ==== kfilemetadata5 ==== - Build the optional mobipocket extractor. QMobipocket only depends on Qt and shouldn't cause any issue. ==== librsvg ==== Version update (2.52.6 -> 2.52.7) Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0 - Update to version 2.52.7: + Backport a fix for the regression that was introduced in the last release: Output filled text as text for PDF; fixes regression due to outputting all text as paths. ==== libsolv ==== Version update (0.7.20 -> 0.7.21) - fix segfault on conflict resolution when using bindings - fix split provides not working if the update includes a forbidden vendor change - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY - support zstd compressed control files in debian packages - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20) - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck - support solv files with an idarray block - allow accessing the toolversion at runtime - bump version to 0.7.21 ==== libzypp ==== Version update (17.29.5 -> 17.29.6) - Fix package signature check (bsc#184501) Pay attention that header and payload are secured by a valid signature and report more detailed which signature is missing. - Retry umount if device is busy (bsc#1196061, closes #381) A previously released ISO image may need a bit more time to release it's loop device. So we wait a bit and retry. - Fix serializing/deserializing type mismatch in zypp-rpm protocol (bsc#1196925) - Fix handling of ISO media in releaseAll (bsc#1196061) - Hint on common ptf resolver conflicts (bsc#1194848) - version 17.29.6 (22) ==== ncurses ==== Version update (6.3.20220226 -> 6.3.20220312) Subpackages: libncurses6 ncurses-utils terminfo-base - Add ncurses patch 20220312 + add xterm+acs building-block -TD + add xterm-p370, for use in older terminals -TD + add dec+sl to xterm-new, per patch #371 -TD + add mosh and mosh-256color -TD - Correct offsets of patches * ncurses-5.9-ibm327x.dif * ncurses-6.3.dif - Add ncurses patch 20220305 + replace obsolescent "-gnatg" option with "-gnatwa" and "-gnatyg", to work around build problems with gnat 12. + update external links in Ada95.html + trim unused return-value from canonical_name(). ==== openssl ==== Version update (1.1.1m -> 1.1.1n) - Update to 1.1.1n release ==== openssl-1_1 ==== Version update (1.1.1m -> 1.1.1n) Subpackages: libopenssl1_1 - Update to 1.1.1n: [bsc#1196877, CVE-2022-0778] * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli in BN_mod_sqrt() reachable when parsing certificates. * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489) to the list of ciphersuites providing Perfect Forward Secrecy as required by SECLEVEL >= 3. * Rebase openssl-1.1.1-fips.patch openssl-1.1.1-evp-kdf.patch ==== python-more-itertools ==== - use python_expand for fdupes ==== python-py ==== - use %python_expand for %fdupes ==== qemu ==== Fix bsc#1189702 CVE-2021-3713 * Patches added: hw-nvram-at24-return-0xff-if-1-byte-addr.patch ==== rpm ==== - drop rpm-deptracking.patch, this is already upstream and we were just adding it twice - use fileprovide /usr/bin/gzip for "rpm-build" to make alternative providers possible - add leave-malloc-check-set.diff to actually use MALLOC_CHECK_ during build ==== sqlite3 ==== Version update (3.37.2 -> 3.38.1) - update to 3.38.1: * Fix problems with the new Bloom filter optimization that might cause some obscure queries to get an incorrect answer. * Fix the localtime modifier of the date and time functions so that it preserves fractional seconds. * Fix the sqlite_offset SQL function so that it works correctly even in corner cases such as when the argument is a virtual column or the column of a view. * Fix row value IN operator constraints on virtual tables so that they work correctly even if the virtual table implementation relies on bytecode to filter rows that do not satisfy the constraint. * Other minor fixes to assert() statements, test cases, and documentation. See the source code timeline for details. - add upstream patch to run atof1 tests only on x86_64 sqlite-src-3380100-atof1.patch - update to 3.38.0 * Add the -> and ->> operators for easier processing of JSON * The JSON functions are now built-ins * Enhancements to date and time functions * Rename the printf() SQL function to format() for better compatibility, with alias for backwards compatibility. * Add the sqlite3_error_offset() interface for helping localize an SQL error to a specific character in the input SQL text * Enhance the interface to virtual tables * CLI columnar output modes are enhanced to correctly handle tabs and newlines embedded in text, and add options like "--wrap N", "--wordwrap on", and "--quote" to the columnar output modes. * Query planner enhancements using a Bloom filter to speed up large analytic queries, and a balanced merge tree to evaluate UNION or UNION ALL compound SELECT statements that have an ORDER BY clause. * The ALTER TABLE statement is changed to silently ignores entries in the sqlite_schema table that do not parse when PRAGMA writable_schema=ON ==== xorg-x11-server ==== Subpackages: xorg-x11-server-Xvfb - u_sync-pci-ids-with-Mesa-22.0.0.patch * sync pci ids with Mesa 22.0.0 ==== zlib-ng-compat ==== Version update (2.0.5 -> 2.0.6) - Update to 2.0.6: * Fix hangs on macOS #1031 * Fix minideflate write buffers being overwritten #1060 * Fix deflateBound and compressBound returning too small size estimates #1049 #1071 * Fix incorrect function declaration warning #1080 * Fix build problems when building outside of source dir #1049 * Fix build problems on arm2-7 #1030 * Fixed some compile warnings #1020 #1036 #1037 #1048 * Improved posix memalign support #888 * Improvements to testing #637 #1026 #1032 #1035 #1049 #1051 #1056 #1063 #1067 * Improvements for integration into other projects #1022 #1042 * Code style fixes #637 #1040 #1050 #1075

1 0

New ARM Kubic snapshot 20220317 released!
by Guillaume Gardet 18 Mar '22

18 Mar '22

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=3&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: appstream-glib (0.7.18+30 -> 0.7.18+31) bluez (5.62 -> 5.63) boost-base dbus-1 glib2-branding-openSUSE grub2 haproxy (2.5.4+git0.e55ab4208 -> 2.5.5+git0.384c5c59a) harfbuzz (4.0.0 -> 4.0.1) iproute2 kernel-firmware (20220224 -> 20220309) librsvg (2.52.6 -> 2.52.7) libsolv (0.7.20 -> 0.7.21) libzypp (17.29.5 -> 17.29.6) ncurses (6.3.20220226 -> 6.3.20220312) openssl (1.1.1m -> 1.1.1n) openssl-1_1 (1.1.1m -> 1.1.1n) python-more-itertools python-py qemu rpm sqlite3 (3.37.2 -> 3.38.1) zlib-ng-compat (2.0.5 -> 2.0.6) === Details === ==== appstream-glib ==== Version update (0.7.18+30 -> 0.7.18+31) - Update to version 0.7.18+31: * Fix extracting relative symlinks (boo#1196459) ==== bluez ==== Version update (5.62 -> 5.63) - Add code to restore user modifications for modprobe.d %config files after moving the files to %_modprobedir - Use %_modprobedir (jsc#SLE-20639) - update to version 5.63: * Fix issue with storing IRK causing invalid read access. * Fix issue with disconnecting due to GattCharacteristic1.MTU. * Add support for Device{Found,Lost} of advertising monitoring. ==== boost-base ==== Subpackages: boost-license1_78_0 libboost_thread1_78_0 - add dependency on libzstd and libzstd-devel to get on-the-fly zstd compression in boost-iostreams ==== dbus-1 ==== Subpackages: libdbus-1-3 - set runstatedir correctly ==== glib2-branding-openSUSE ==== - Update .gschema.override.in: Change default libreoffice startup entry to libreoffice-startcenter.desktop according to the libreoffice update (bsc#1195836, bsc#1196951). ==== grub2 ==== Subpackages: grub2-arm64-efi grub2-snapper-plugin - Fix grub-install error when efi system partition is created as mdadm software raid1 device (bsc#1179981) (bsc#1195204) * 0001-install-fix-software-raid1-on-esp.patch - Fix riscv64 build error * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch - Fix error in grub-install when linux root device is on lvm thin volume (bsc#1192622) (bsc#1191974) * 0001-grub-install-bailout-root-device-probing.patch ==== haproxy ==== Version update (2.5.4+git0.e55ab4208 -> 2.5.5+git0.384c5c59a) - Update to version 2.5.5+git0.384c5c59a: * [RELEASE] Released version 2.5.5 * REGTESTS: fix the race conditions in be2hex.vtc * BUG/MEDIUM: httpclient: must manipulate head, not first * BUG/MINOR: httpclient: remove the UNUSED block when parsing headers * BUG/MINOR: httpclient: consume partly the blocks when necessary * CLEANUP: htx: remove unused co_htx_remove_blk() * BUG/MEDIUM: httpclient: don't consume data before it was analyzed * BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd() * BUG/MAJOR: mux-pt: Always destroy the backend connection on detach * DEBUG: stream: Fix stream trace message to print response buffer state * DEBUG: stream: Add the missing descriptions for stream trace events * BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing * DEBUG: cache: Update underlying buffer when loading HTX message in cache applet * BUG/MEDIUM: stream: Use the front analyzers for new listener-less streams * BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request * BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request * BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request * BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request * BUG/MINOR: httpclient: Set conn-stream/channel EOI flags at the end of request * BUG/MINOR: cli: shows correct mode in "show sess" * BUG/MINOR: add missing modes in proxy_mode_str() * BUILD: fix recent build breakage of freebsd caused by kFreeBSD build fix * BUILD: pools: fix backport of no-memory-trimming on non-linux OS * MINOR: stats: Add dark mode support for socket rows * MINOR: pools: add a new global option "no-memory-trimming" * BUILD: fix kFreeBSD build. * BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed * BUG/MINOR: pool: always align pool_heads to 64 bytes * BUG/MEDIUM: httpclient/lua: infinite appctx loop with POST * REGTESTS: fix the race conditions in secure_memcmp.vtc * REGTESTS: fix the race conditions in normalize_uri.vtc * BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks() * BUG/MEDIUM: mux-fcgi: Don't rely on SI src/dst addresses for FCGI health-checks * BUILD: tree-wide: mark a few numeric constants as explicitly long long * BUILD: atomic: make the old HA_ATOMIC_LOAD() support const pointers * CI: Consistently use actions/checkout@v2 * CI: github actions: use cache for SSL libs * CI: refactor OpenTracing build script * CI: github actions: use cache for OpenTracing * CI: github actions: add the output of $CC -dM -E- ==== harfbuzz ==== Version update (4.0.0 -> 4.0.1) - Update to version 4.0.1: + Update OpenType to AAT mappings for ?hist? and ?vrtr? features + Update IANA Language Subtag Registry to 2022-03-02 + Update USE shaper to allow any non-numeric tail in a symbol cluster, and remove obsolete data overrides + Fix handling of baseline variations to return correctly scaled values ==== iproute2 ==== - Add eBPF(libbpf) support - Adjust NETNS_RUN_DIR from /var/run to /run ==== kernel-firmware ==== Version update (20220224 -> 20220309) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20220309 (git commit cd01f857da28): * iwlwifi: add new FWs from core68-60 release * ath11k: add links for WCN6855 hw2.1 * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3 * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin * ath10k/ath11k: mark notice.txt as "File:" * linux-firmware: add firmware for MT7986 * amdgpu: add firmware for SDMA 5.2.7 IP block * amdgpu: add firmware for PSP 13.0.8 IP block * amdgpu: add firmware for DCN 3.1.6 IP block * amdgpu: add firmware for GC 10.3.7 IP block * rtw89: 8852a: update fw to v0.13.36.0 * iwlwifi: update 9000-family firmwares to core68-60 * amdgpu: update raven2 VCN firmware * amdgpu: update raven VCN firmware * amdgpu: update picasso VCN firmware * linux-firmware: Update firmware file for Intel Bluetooth 9462 * linux-firmware: Update firmware file for Intel Bluetooth 9462 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX210 * linux-firmware: Update firmware file for Intel Bluetooth AX200 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * linux-firmware: Update AMD SEV firmware * rtw89: 8852a: update fw to v0.13.35.0 ==== librsvg ==== Version update (2.52.6 -> 2.52.7) Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 - Update to version 2.52.7: + Backport a fix for the regression that was introduced in the last release: Output filled text as text for PDF; fixes regression due to outputting all text as paths. ==== libsolv ==== Version update (0.7.20 -> 0.7.21) - fix segfault on conflict resolution when using bindings - fix split provides not working if the update includes a forbidden vendor change - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY - support zstd compressed control files in debian packages - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20) - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck - support solv files with an idarray block - allow accessing the toolversion at runtime - bump version to 0.7.21 ==== libzypp ==== Version update (17.29.5 -> 17.29.6) - Fix package signature check (bsc#184501) Pay attention that header and payload are secured by a valid signature and report more detailed which signature is missing. - Retry umount if device is busy (bsc#1196061, closes #381) A previously released ISO image may need a bit more time to release it's loop device. So we wait a bit and retry. - Fix serializing/deserializing type mismatch in zypp-rpm protocol (bsc#1196925) - Fix handling of ISO media in releaseAll (bsc#1196061) - Hint on common ptf resolver conflicts (bsc#1194848) - version 17.29.6 (22) ==== ncurses ==== Version update (6.3.20220226 -> 6.3.20220312) Subpackages: libncurses6 ncurses-utils terminfo-base - Add ncurses patch 20220312 + add xterm+acs building-block -TD + add xterm-p370, for use in older terminals -TD + add dec+sl to xterm-new, per patch #371 -TD + add mosh and mosh-256color -TD - Correct offsets of patches * ncurses-5.9-ibm327x.dif * ncurses-6.3.dif - Add ncurses patch 20220305 + replace obsolescent "-gnatg" option with "-gnatwa" and "-gnatyg", to work around build problems with gnat 12. + update external links in Ada95.html + trim unused return-value from canonical_name(). ==== openssl ==== Version update (1.1.1m -> 1.1.1n) - Update to 1.1.1n release ==== openssl-1_1 ==== Version update (1.1.1m -> 1.1.1n) Subpackages: libopenssl1_1 - Update to 1.1.1n: [bsc#1196877, CVE-2022-0778] * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli in BN_mod_sqrt() reachable when parsing certificates. * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489) to the list of ciphersuites providing Perfect Forward Secrecy as required by SECLEVEL >= 3. * Rebase openssl-1.1.1-fips.patch openssl-1.1.1-evp-kdf.patch ==== python-more-itertools ==== - use python_expand for fdupes ==== python-py ==== - use %python_expand for %fdupes ==== qemu ==== Fix bsc#1189702 CVE-2021-3713 * Patches added: hw-nvram-at24-return-0xff-if-1-byte-addr.patch ==== rpm ==== Subpackages: librpmbuild9 - drop rpm-deptracking.patch, this is already upstream and we were just adding it twice - use fileprovide /usr/bin/gzip for "rpm-build" to make alternative providers possible - add leave-malloc-check-set.diff to actually use MALLOC_CHECK_ during build ==== sqlite3 ==== Version update (3.37.2 -> 3.38.1) - update to 3.38.1: * Fix problems with the new Bloom filter optimization that might cause some obscure queries to get an incorrect answer. * Fix the localtime modifier of the date and time functions so that it preserves fractional seconds. * Fix the sqlite_offset SQL function so that it works correctly even in corner cases such as when the argument is a virtual column or the column of a view. * Fix row value IN operator constraints on virtual tables so that they work correctly even if the virtual table implementation relies on bytecode to filter rows that do not satisfy the constraint. * Other minor fixes to assert() statements, test cases, and documentation. See the source code timeline for details. - add upstream patch to run atof1 tests only on x86_64 sqlite-src-3380100-atof1.patch - update to 3.38.0 * Add the -> and ->> operators for easier processing of JSON * The JSON functions are now built-ins * Enhancements to date and time functions * Rename the printf() SQL function to format() for better compatibility, with alias for backwards compatibility. * Add the sqlite3_error_offset() interface for helping localize an SQL error to a specific character in the input SQL text * Enhance the interface to virtual tables * CLI columnar output modes are enhanced to correctly handle tabs and newlines embedded in text, and add options like "--wrap N", "--wordwrap on", and "--quote" to the columnar output modes. * Query planner enhancements using a Bloom filter to speed up large analytic queries, and a balanced merge tree to evaluate UNION or UNION ALL compound SELECT statements that have an ORDER BY clause. * The ALTER TABLE statement is changed to silently ignores entries in the sqlite_schema table that do not parse when PRAGMA writable_schema=ON ==== zlib-ng-compat ==== Version update (2.0.5 -> 2.0.6) - Update to 2.0.6: * Fix hangs on macOS #1031 * Fix minideflate write buffers being overwritten #1060 * Fix deflateBound and compressBound returning too small size estimates #1049 #1071 * Fix incorrect function declaration warning #1080 * Fix build problems when building outside of source dir #1049 * Fix build problems on arm2-7 #1030 * Fixed some compile warnings #1020 #1036 #1037 #1048 * Improved posix memalign support #888 * Improvements to testing #637 #1026 #1032 #1035 #1049 #1051 #1056 #1063 #1067 * Improvements for integration into other projects #1022 #1042 * Code style fixes #637 #1040 #1050 #1075

1 0

New MicroOS snapshot 20220317 released!
by Richard Brown 18 Mar '22

18 Mar '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: iproute2 ncurses (6.3.20220226 -> 6.3.20220312) openssl (1.1.1m -> 1.1.1n) openssl-1_1 (1.1.1m -> 1.1.1n) python-more-itertools python-py rpm zlib-ng-compat (2.0.5 -> 2.0.6) === Details === ==== iproute2 ==== - Add eBPF(libbpf) support - Adjust NETNS_RUN_DIR from /var/run to /run ==== ncurses ==== Version update (6.3.20220226 -> 6.3.20220312) Subpackages: libncurses6 ncurses-utils terminfo-base - Add ncurses patch 20220312 + add xterm+acs building-block -TD + add xterm-p370, for use in older terminals -TD + add dec+sl to xterm-new, per patch #371 -TD + add mosh and mosh-256color -TD - Correct offsets of patches * ncurses-5.9-ibm327x.dif * ncurses-6.3.dif - Add ncurses patch 20220305 + replace obsolescent "-gnatg" option with "-gnatwa" and "-gnatyg", to work around build problems with gnat 12. + update external links in Ada95.html + trim unused return-value from canonical_name(). ==== openssl ==== Version update (1.1.1m -> 1.1.1n) - Update to 1.1.1n release ==== openssl-1_1 ==== Version update (1.1.1m -> 1.1.1n) Subpackages: libopenssl1_1 - Update to 1.1.1n: [bsc#1196877, CVE-2022-0778] * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli in BN_mod_sqrt() reachable when parsing certificates. * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489) to the list of ciphersuites providing Perfect Forward Secrecy as required by SECLEVEL >= 3. * Rebase openssl-1.1.1-fips.patch openssl-1.1.1-evp-kdf.patch ==== python-more-itertools ==== - use python_expand for fdupes ==== python-py ==== - use %python_expand for %fdupes ==== rpm ==== - drop rpm-deptracking.patch, this is already upstream and we were just adding it twice - use fileprovide /usr/bin/gzip for "rpm-build" to make alternative providers possible - add leave-malloc-check-set.diff to actually use MALLOC_CHECK_ during build ==== zlib-ng-compat ==== Version update (2.0.5 -> 2.0.6) - Update to 2.0.6: * Fix hangs on macOS #1031 * Fix minideflate write buffers being overwritten #1060 * Fix deflateBound and compressBound returning too small size estimates #1049 #1071 * Fix incorrect function declaration warning #1080 * Fix build problems when building outside of source dir #1049 * Fix build problems on arm2-7 #1030 * Fixed some compile warnings #1020 #1036 #1037 #1048 * Improved posix memalign support #888 * Improvements to testing #637 #1026 #1032 #1035 #1049 #1051 #1056 #1063 #1067 * Improvements for integration into other projects #1022 #1042 * Code style fixes #637 #1040 #1050 #1075

1 0

New Kubic snapshot 20220317 released!
by Richard Brown 18 Mar '22

18 Mar '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: iproute2 ncurses (6.3.20220226 -> 6.3.20220312) openssl (1.1.1m -> 1.1.1n) openssl-1_1 (1.1.1m -> 1.1.1n) python-more-itertools python-py rpm zlib-ng-compat (2.0.5 -> 2.0.6) === Details === ==== iproute2 ==== - Add eBPF(libbpf) support - Adjust NETNS_RUN_DIR from /var/run to /run ==== ncurses ==== Version update (6.3.20220226 -> 6.3.20220312) Subpackages: libncurses6 ncurses-utils terminfo-base - Add ncurses patch 20220312 + add xterm+acs building-block -TD + add xterm-p370, for use in older terminals -TD + add dec+sl to xterm-new, per patch #371 -TD + add mosh and mosh-256color -TD - Correct offsets of patches * ncurses-5.9-ibm327x.dif * ncurses-6.3.dif - Add ncurses patch 20220305 + replace obsolescent "-gnatg" option with "-gnatwa" and "-gnatyg", to work around build problems with gnat 12. + update external links in Ada95.html + trim unused return-value from canonical_name(). ==== openssl ==== Version update (1.1.1m -> 1.1.1n) - Update to 1.1.1n release ==== openssl-1_1 ==== Version update (1.1.1m -> 1.1.1n) Subpackages: libopenssl1_1 - Update to 1.1.1n: [bsc#1196877, CVE-2022-0778] * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli in BN_mod_sqrt() reachable when parsing certificates. * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489) to the list of ciphersuites providing Perfect Forward Secrecy as required by SECLEVEL >= 3. * Rebase openssl-1.1.1-fips.patch openssl-1.1.1-evp-kdf.patch ==== python-more-itertools ==== - use python_expand for fdupes ==== python-py ==== - use %python_expand for %fdupes ==== rpm ==== Subpackages: librpmbuild9 - drop rpm-deptracking.patch, this is already upstream and we were just adding it twice - use fileprovide /usr/bin/gzip for "rpm-build" to make alternative providers possible - add leave-malloc-check-set.diff to actually use MALLOC_CHECK_ during build ==== zlib-ng-compat ==== Version update (2.0.5 -> 2.0.6) - Update to 2.0.6: * Fix hangs on macOS #1031 * Fix minideflate write buffers being overwritten #1060 * Fix deflateBound and compressBound returning too small size estimates #1049 #1071 * Fix incorrect function declaration warning #1080 * Fix build problems when building outside of source dir #1049 * Fix build problems on arm2-7 #1030 * Fixed some compile warnings #1020 #1036 #1037 #1048 * Improved posix memalign support #888 * Improvements to testing #637 #1026 #1032 #1035 #1049 #1051 #1056 #1063 #1067 * Improvements for integration into other projects #1022 #1042 * Code style fixes #637 #1040 #1050 #1075

1 0

New MicroOS snapshot 20220316 released!
by Richard Brown 17 Mar '22

17 Mar '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (21.3.7 -> 22.0.0) Mesa-drivers (21.3.7 -> 22.0.0) NetworkManager-openvpn (1.8.16 -> 1.8.18) appstream-glib (0.7.18+30 -> 0.7.18+31) bluez (5.62 -> 5.63) boost-base dbus-1 ffmpeg-4 glib2-branding-openSUSE grub2 harfbuzz (4.0.0 -> 4.0.1) kernel-firmware (20220224 -> 20220309) kfilemetadata5 librsvg (2.52.6 -> 2.52.7) libsolv (0.7.20 -> 0.7.21) libzypp (17.29.5 -> 17.29.6) qemu sqlite3 (3.37.2 -> 3.38.1) xen xorg-x11-server === Details === ==== Mesa ==== Version update (21.3.7 -> 22.0.0) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - U_meson-restore-private-requires-to-libdrm-in-dri.pc-f.patch * Due to a typo the private requires to libdrm were lost in dri.pc. Fixed another typo (only comment). - enabled "i915" Gallium-based Intel Gen3 driver - fixed llvm/clang buildrequires for sle15-sp4/Leap 15.4 - no longer try to build classic non-Gallium OpenGL drivers i915, i965, nouveau, r100 and r200, which have been dropped with Mesa 22.0.0; see also some documentation on Phoronix https://www.phoronix.com/scan.php?page=news_item&px=Mesa-Classic-Retired - update to 22.0.0 * lavapipe,radv,anv KHR_dynamic_rendering * radv EXT_image_view_min_lod * VK_KHR_synchronization2 on RADV. * OpenSWR has been moved to the Amber branch * radeonsi, zink ARB_sparse_texture * d3d12 GLES3.1 (shader storage buffers, images, compute, indirect draw, draw params, ARB_framebuffer_no_attachments, ARB_sample_shading, and GLSL400) * radeonsi, zink ARB_sparse_texture2 * zink EXT_memory_object, EXT_memory_object_fd, EXT_semaphore, EXT_semaphore_fd * anv VK_VALVE_mutable_descriptor_type * Vulkan 1.3 on RADV,Anv. * radeonsi, zink ARB_sparse_texture_clamp ==== Mesa-drivers ==== Version update (21.3.7 -> 22.0.0) Subpackages: Mesa-dri Mesa-gallium - U_meson-restore-private-requires-to-libdrm-in-dri.pc-f.patch * Due to a typo the private requires to libdrm were lost in dri.pc. Fixed another typo (only comment). - enabled "i915" Gallium-based Intel Gen3 driver - fixed llvm/clang buildrequires for sle15-sp4/Leap 15.4 - no longer try to build classic non-Gallium OpenGL drivers i915, i965, nouveau, r100 and r200, which have been dropped with Mesa 22.0.0; see also some documentation on Phoronix https://www.phoronix.com/scan.php?page=news_item&px=Mesa-Classic-Retired - update to 22.0.0 * lavapipe,radv,anv KHR_dynamic_rendering * radv EXT_image_view_min_lod * VK_KHR_synchronization2 on RADV. * OpenSWR has been moved to the Amber branch * radeonsi, zink ARB_sparse_texture * d3d12 GLES3.1 (shader storage buffers, images, compute, indirect draw, draw params, ARB_framebuffer_no_attachments, ARB_sample_shading, and GLSL400) * radeonsi, zink ARB_sparse_texture2 * zink EXT_memory_object, EXT_memory_object_fd, EXT_semaphore, EXT_semaphore_fd * anv VK_VALVE_mutable_descriptor_type * Vulkan 1.3 on RADV,Anv. * radeonsi, zink ARB_sparse_texture_clamp ==== NetworkManager-openvpn ==== Version update (1.8.16 -> 1.8.18) Subpackages: NetworkManager-openvpn-gnome - Update to version 1.8.18: + Gtk4 version of the editor plugin is now available (for use with Control Center of GNOME 42 or later). + Updated translations. - Drop nm-openvpn-bsc#1186091.patch: Fixed upstream. - Rebase patch with quilt. - Add pkgconfig(gtk4) and pkgconfig(libnma-gtk4) BuildRequires and pass --with-gtk4=yes to configure, build the gtk4 version. - Stop passing --without-libnm-glib to configure, no longer needed, nor recognized. - Pass --enable-lto=yes to configure, build using LTO support. - Add optional libxml2-tools BuildRequires, build runs xml-stripblanks preprocessing if available. ==== appstream-glib ==== Version update (0.7.18+30 -> 0.7.18+31) Subpackages: libappstream-glib8 - Update to version 0.7.18+31: * Fix extracting relative symlinks (boo#1196459) ==== bluez ==== Version update (5.62 -> 5.63) Subpackages: bluez-cups libbluetooth3 - Add code to restore user modifications for modprobe.d %config files after moving the files to %_modprobedir - Use %_modprobedir (jsc#SLE-20639) - update to version 5.63: * Fix issue with storing IRK causing invalid read access. * Fix issue with disconnecting due to GattCharacteristic1.MTU. * Add support for Device{Found,Lost} of advertising monitoring. ==== boost-base ==== Subpackages: boost-license1_78_0 libboost_thread1_78_0 - add dependency on libzstd and libzstd-devel to get on-the-fly zstd compression in boost-iostreams ==== dbus-1 ==== Subpackages: libdbus-1-3 - set runstatedir correctly ==== ffmpeg-4 ==== Subpackages: libavcodec58_134 libavformat58_76 libavutil56_70 libswresample3_9 - Fix OS version check, so nvcodec is enabled for Leap too. ==== glib2-branding-openSUSE ==== - Update .gschema.override.in: Change default libreoffice startup entry to libreoffice-startcenter.desktop according to the libreoffice update (bsc#1195836, bsc#1196951). ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-x86_64-efi - Fix grub-install error when efi system partition is created as mdadm software raid1 device (bsc#1179981) (bsc#1195204) * 0001-install-fix-software-raid1-on-esp.patch - Fix riscv64 build error * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch - Fix error in grub-install when linux root device is on lvm thin volume (bsc#1192622) (bsc#1191974) * 0001-grub-install-bailout-root-device-probing.patch ==== harfbuzz ==== Version update (4.0.0 -> 4.0.1) Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0 - Update to version 4.0.1: + Update OpenType to AAT mappings for ?hist? and ?vrtr? features + Update IANA Language Subtag Registry to 2022-03-02 + Update USE shaper to allow any non-numeric tail in a symbol cluster, and remove obsolete data overrides + Fix handling of baseline variations to return correctly scaled values ==== kernel-firmware ==== Version update (20220224 -> 20220309) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd - Update to version 20220309 (git commit cd01f857da28): * iwlwifi: add new FWs from core68-60 release * ath11k: add links for WCN6855 hw2.1 * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3 * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin * ath10k/ath11k: mark notice.txt as "File:" * linux-firmware: add firmware for MT7986 * amdgpu: add firmware for SDMA 5.2.7 IP block * amdgpu: add firmware for PSP 13.0.8 IP block * amdgpu: add firmware for DCN 3.1.6 IP block * amdgpu: add firmware for GC 10.3.7 IP block * rtw89: 8852a: update fw to v0.13.36.0 * iwlwifi: update 9000-family firmwares to core68-60 * amdgpu: update raven2 VCN firmware * amdgpu: update raven VCN firmware * amdgpu: update picasso VCN firmware * linux-firmware: Update firmware file for Intel Bluetooth 9462 * linux-firmware: Update firmware file for Intel Bluetooth 9462 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX210 * linux-firmware: Update firmware file for Intel Bluetooth AX200 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * linux-firmware: Update AMD SEV firmware * rtw89: 8852a: update fw to v0.13.35.0 ==== kfilemetadata5 ==== - Build the optional mobipocket extractor. QMobipocket only depends on Qt and shouldn't cause any issue. ==== librsvg ==== Version update (2.52.6 -> 2.52.7) Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0 - Update to version 2.52.7: + Backport a fix for the regression that was introduced in the last release: Output filled text as text for PDF; fixes regression due to outputting all text as paths. ==== libsolv ==== Version update (0.7.20 -> 0.7.21) - fix segfault on conflict resolution when using bindings - fix split provides not working if the update includes a forbidden vendor change - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY - support zstd compressed control files in debian packages - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20) - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck - support solv files with an idarray block - allow accessing the toolversion at runtime - bump version to 0.7.21 ==== libzypp ==== Version update (17.29.5 -> 17.29.6) - Fix package signature check (bsc#184501) Pay attention that header and payload are secured by a valid signature and report more detailed which signature is missing. - Retry umount if device is busy (bsc#1196061, closes #381) A previously released ISO image may need a bit more time to release it's loop device. So we wait a bit and retry. - Fix serializing/deserializing type mismatch in zypp-rpm protocol (bsc#1196925) - Fix handling of ISO media in releaseAll (bsc#1196061) - Hint on common ptf resolver conflicts (bsc#1194848) - version 17.29.6 (22) ==== qemu ==== Fix bsc#1189702 CVE-2021-3713 * Patches added: hw-nvram-at24-return-0xff-if-1-byte-addr.patch ==== sqlite3 ==== Version update (3.37.2 -> 3.38.1) - update to 3.38.1: * Fix problems with the new Bloom filter optimization that might cause some obscure queries to get an incorrect answer. * Fix the localtime modifier of the date and time functions so that it preserves fractional seconds. * Fix the sqlite_offset SQL function so that it works correctly even in corner cases such as when the argument is a virtual column or the column of a view. * Fix row value IN operator constraints on virtual tables so that they work correctly even if the virtual table implementation relies on bytecode to filter rows that do not satisfy the constraint. * Other minor fixes to assert() statements, test cases, and documentation. See the source code timeline for details. - add upstream patch to run atof1 tests only on x86_64 sqlite-src-3380100-atof1.patch - update to 3.38.0 * Add the -> and ->> operators for easier processing of JSON * The JSON functions are now built-ins * Enhancements to date and time functions * Rename the printf() SQL function to format() for better compatibility, with alias for backwards compatibility. * Add the sqlite3_error_offset() interface for helping localize an SQL error to a specific character in the input SQL text * Enhance the interface to virtual tables * CLI columnar output modes are enhanced to correctly handle tabs and newlines embedded in text, and add options like "--wrap N", "--wordwrap on", and "--quote" to the columnar output modes. * Query planner enhancements using a Bloom filter to speed up large analytic queries, and a balanced merge tree to evaluate UNION or UNION ALL compound SELECT statements that have an ORDER BY clause. * The ALTER TABLE statement is changed to silently ignores entries in the sqlite_schema table that do not parse when PRAGMA writable_schema=ON ==== xen ==== - bsc#1196915 - VUL-0: CVE-2022-0001, CVE-2022-0002,CVE-2021-26401: xen: BHB speculation issues (XSA-398) 62278667-Arm-introduce-new-processors.patch 62278668-Arm-move-errata-CSV2-check-earlier.patch 62278669-Arm-add-ECBHB-and-CLEARBHB-ID-fields.patch 6227866a-Arm-Spectre-BHB-handling.patch 6227866b-Arm-allow-SMCCC_ARCH_WORKAROUND_3-use.patch 6227866c-x86-AMD-cease-using-thunk-lfence.patch ==== xorg-x11-server ==== Subpackages: xorg-x11-server-Xvfb - u_sync-pci-ids-with-Mesa-22.0.0.patch * sync pci ids with Mesa 22.0.0

1 0

New Kubic snapshot 20220316 released!
by Richard Brown 17 Mar '22

17 Mar '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: appstream-glib (0.7.18+30 -> 0.7.18+31) bluez (5.62 -> 5.63) boost-base dbus-1 glib2-branding-openSUSE grub2 haproxy (2.5.4+git0.e55ab4208 -> 2.5.5+git0.384c5c59a) harfbuzz (4.0.0 -> 4.0.1) kernel-firmware (20220224 -> 20220309) librsvg (2.52.6 -> 2.52.7) libsolv (0.7.20 -> 0.7.21) libzypp (17.29.5 -> 17.29.6) qemu sqlite3 (3.37.2 -> 3.38.1) xen === Details === ==== appstream-glib ==== Version update (0.7.18+30 -> 0.7.18+31) - Update to version 0.7.18+31: * Fix extracting relative symlinks (boo#1196459) ==== bluez ==== Version update (5.62 -> 5.63) - Add code to restore user modifications for modprobe.d %config files after moving the files to %_modprobedir - Use %_modprobedir (jsc#SLE-20639) - update to version 5.63: * Fix issue with storing IRK causing invalid read access. * Fix issue with disconnecting due to GattCharacteristic1.MTU. * Add support for Device{Found,Lost} of advertising monitoring. ==== boost-base ==== Subpackages: boost-license1_78_0 libboost_thread1_78_0 - add dependency on libzstd and libzstd-devel to get on-the-fly zstd compression in boost-iostreams ==== dbus-1 ==== Subpackages: libdbus-1-3 - set runstatedir correctly ==== glib2-branding-openSUSE ==== - Update .gschema.override.in: Change default libreoffice startup entry to libreoffice-startcenter.desktop according to the libreoffice update (bsc#1195836, bsc#1196951). ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-x86_64-efi - Fix grub-install error when efi system partition is created as mdadm software raid1 device (bsc#1179981) (bsc#1195204) * 0001-install-fix-software-raid1-on-esp.patch - Fix riscv64 build error * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch - Fix error in grub-install when linux root device is on lvm thin volume (bsc#1192622) (bsc#1191974) * 0001-grub-install-bailout-root-device-probing.patch ==== haproxy ==== Version update (2.5.4+git0.e55ab4208 -> 2.5.5+git0.384c5c59a) - Update to version 2.5.5+git0.384c5c59a: * [RELEASE] Released version 2.5.5 * REGTESTS: fix the race conditions in be2hex.vtc * BUG/MEDIUM: httpclient: must manipulate head, not first * BUG/MINOR: httpclient: remove the UNUSED block when parsing headers * BUG/MINOR: httpclient: consume partly the blocks when necessary * CLEANUP: htx: remove unused co_htx_remove_blk() * BUG/MEDIUM: httpclient: don't consume data before it was analyzed * BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd() * BUG/MAJOR: mux-pt: Always destroy the backend connection on detach * DEBUG: stream: Fix stream trace message to print response buffer state * DEBUG: stream: Add the missing descriptions for stream trace events * BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing * DEBUG: cache: Update underlying buffer when loading HTX message in cache applet * BUG/MEDIUM: stream: Use the front analyzers for new listener-less streams * BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request * BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request * BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request * BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request * BUG/MINOR: httpclient: Set conn-stream/channel EOI flags at the end of request * BUG/MINOR: cli: shows correct mode in "show sess" * BUG/MINOR: add missing modes in proxy_mode_str() * BUILD: fix recent build breakage of freebsd caused by kFreeBSD build fix * BUILD: pools: fix backport of no-memory-trimming on non-linux OS * MINOR: stats: Add dark mode support for socket rows * MINOR: pools: add a new global option "no-memory-trimming" * BUILD: fix kFreeBSD build. * BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed * BUG/MINOR: pool: always align pool_heads to 64 bytes * BUG/MEDIUM: httpclient/lua: infinite appctx loop with POST * REGTESTS: fix the race conditions in secure_memcmp.vtc * REGTESTS: fix the race conditions in normalize_uri.vtc * BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks() * BUG/MEDIUM: mux-fcgi: Don't rely on SI src/dst addresses for FCGI health-checks * BUILD: tree-wide: mark a few numeric constants as explicitly long long * BUILD: atomic: make the old HA_ATOMIC_LOAD() support const pointers * CI: Consistently use actions/checkout@v2 * CI: github actions: use cache for SSL libs * CI: refactor OpenTracing build script * CI: github actions: use cache for OpenTracing * CI: github actions: add the output of $CC -dM -E- ==== harfbuzz ==== Version update (4.0.0 -> 4.0.1) - Update to version 4.0.1: + Update OpenType to AAT mappings for ?hist? and ?vrtr? features + Update IANA Language Subtag Registry to 2022-03-02 + Update USE shaper to allow any non-numeric tail in a symbol cluster, and remove obsolete data overrides + Fix handling of baseline variations to return correctly scaled values ==== kernel-firmware ==== Version update (20220224 -> 20220309) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd - Update to version 20220309 (git commit cd01f857da28): * iwlwifi: add new FWs from core68-60 release * ath11k: add links for WCN6855 hw2.1 * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3 * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin * ath10k/ath11k: mark notice.txt as "File:" * linux-firmware: add firmware for MT7986 * amdgpu: add firmware for SDMA 5.2.7 IP block * amdgpu: add firmware for PSP 13.0.8 IP block * amdgpu: add firmware for DCN 3.1.6 IP block * amdgpu: add firmware for GC 10.3.7 IP block * rtw89: 8852a: update fw to v0.13.36.0 * iwlwifi: update 9000-family firmwares to core68-60 * amdgpu: update raven2 VCN firmware * amdgpu: update raven VCN firmware * amdgpu: update picasso VCN firmware * linux-firmware: Update firmware file for Intel Bluetooth 9462 * linux-firmware: Update firmware file for Intel Bluetooth 9462 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX210 * linux-firmware: Update firmware file for Intel Bluetooth AX200 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * linux-firmware: Update AMD SEV firmware * rtw89: 8852a: update fw to v0.13.35.0 ==== librsvg ==== Version update (2.52.6 -> 2.52.7) Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 - Update to version 2.52.7: + Backport a fix for the regression that was introduced in the last release: Output filled text as text for PDF; fixes regression due to outputting all text as paths. ==== libsolv ==== Version update (0.7.20 -> 0.7.21) - fix segfault on conflict resolution when using bindings - fix split provides not working if the update includes a forbidden vendor change - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY - support zstd compressed control files in debian packages - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20) - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck - support solv files with an idarray block - allow accessing the toolversion at runtime - bump version to 0.7.21 ==== libzypp ==== Version update (17.29.5 -> 17.29.6) - Fix package signature check (bsc#184501) Pay attention that header and payload are secured by a valid signature and report more detailed which signature is missing. - Retry umount if device is busy (bsc#1196061, closes #381) A previously released ISO image may need a bit more time to release it's loop device. So we wait a bit and retry. - Fix serializing/deserializing type mismatch in zypp-rpm protocol (bsc#1196925) - Fix handling of ISO media in releaseAll (bsc#1196061) - Hint on common ptf resolver conflicts (bsc#1194848) - version 17.29.6 (22) ==== qemu ==== Fix bsc#1189702 CVE-2021-3713 * Patches added: hw-nvram-at24-return-0xff-if-1-byte-addr.patch ==== sqlite3 ==== Version update (3.37.2 -> 3.38.1) - update to 3.38.1: * Fix problems with the new Bloom filter optimization that might cause some obscure queries to get an incorrect answer. * Fix the localtime modifier of the date and time functions so that it preserves fractional seconds. * Fix the sqlite_offset SQL function so that it works correctly even in corner cases such as when the argument is a virtual column or the column of a view. * Fix row value IN operator constraints on virtual tables so that they work correctly even if the virtual table implementation relies on bytecode to filter rows that do not satisfy the constraint. * Other minor fixes to assert() statements, test cases, and documentation. See the source code timeline for details. - add upstream patch to run atof1 tests only on x86_64 sqlite-src-3380100-atof1.patch - update to 3.38.0 * Add the -> and ->> operators for easier processing of JSON * The JSON functions are now built-ins * Enhancements to date and time functions * Rename the printf() SQL function to format() for better compatibility, with alias for backwards compatibility. * Add the sqlite3_error_offset() interface for helping localize an SQL error to a specific character in the input SQL text * Enhance the interface to virtual tables * CLI columnar output modes are enhanced to correctly handle tabs and newlines embedded in text, and add options like "--wrap N", "--wordwrap on", and "--quote" to the columnar output modes. * Query planner enhancements using a Bloom filter to speed up large analytic queries, and a balanced merge tree to evaluate UNION or UNION ALL compound SELECT statements that have an ORDER BY clause. * The ALTER TABLE statement is changed to silently ignores entries in the sqlite_schema table that do not parse when PRAGMA writable_schema=ON ==== xen ==== - bsc#1196915 - VUL-0: CVE-2022-0001, CVE-2022-0002,CVE-2021-26401: xen: BHB speculation issues (XSA-398) 62278667-Arm-introduce-new-processors.patch 62278668-Arm-move-errata-CSV2-check-earlier.patch 62278669-Arm-add-ECBHB-and-CLEARBHB-ID-fields.patch 6227866a-Arm-Spectre-BHB-handling.patch 6227866b-Arm-allow-SMCCC_ARCH_WORKAROUND_3-use.patch 6227866c-x86-AMD-cease-using-thunk-lfence.patch

1 0

MicroOS desktop localizations
by Francisco Torres Perez 17 Mar '22

17 Mar '22

Hi there, First of all, thanks to everybody working on the MicroOS project. The combination of tumbleweed + immutability is really appealing. I would like to ask about something that could help non-English-speaking users get into using MicroOS as a desktop, and that is localization. After some testing I've compiled a list with all the "-lang" packages I needed to use Gnome in my local language and also update home user folders. I was wondering if this is something worth checking to be included in the default install and how would that be? Would it be done modifying the patterns to include those packages? I could help with that (and it would be an excuse to learn how to use obs :) ). Thanks again for an amazing job, Fran

2 4

New ARM MicroOS snapshot 20220314 released!
by Guillaume Gardet 15 Mar '22

15 Mar '22

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: attica-qt5 (5.91.0 -> 5.92.0) bluedevil5 (5.24.2 -> 5.24.3) bluez-qt (5.91.0 -> 5.92.0) breeze (5.24.2 -> 5.24.3) breeze5-icons (5.91.0 -> 5.92.0) bubblewrap (0.5.0 -> 0.6.1) cockpit-podman curl (7.81.0 -> 7.82.0) dbus-1 (1.12.22 -> 1.14.0) dbus-1-x11 (1.12.22 -> 1.14.0) discover (5.24.2.1 -> 5.24.3) drkonqi5 (5.24.2 -> 5.24.3) frameworkintegration (5.91.0 -> 5.92.0) gnutls kactivities-stats (5.91.0 -> 5.92.0) kactivities5 (5.91.0 -> 5.92.0) kactivitymanagerd (5.24.2 -> 5.24.3) karchive (5.91.0 -> 5.92.0) kbd kbookmarks (5.91.0 -> 5.92.0) kcmutils (5.91.0 -> 5.92.0) kcodecs (5.91.0 -> 5.92.0) kcompletion (5.91.0 -> 5.92.0) kconfig (5.91.0 -> 5.92.0) kconfigwidgets (5.91.0 -> 5.92.0) kcoreaddons (5.91.0 -> 5.92.0) kcrash (5.91.0 -> 5.92.0) kdbusaddons (5.91.0 -> 5.92.0) kde-cli-tools5 (5.24.2 -> 5.24.3) kde-gtk-config5 (5.24.2 -> 5.24.3) kdeclarative (5.91.0 -> 5.92.0) kded (5.91.0 -> 5.92.0) kdesu (5.91.0 -> 5.92.0) kdnssd-framework (5.91.0 -> 5.92.0) kdoctools (5.91.0 -> 5.92.0) kernel-source (5.16.11 -> 5.16.14) kfilemetadata5 (5.91.0 -> 5.92.0) kgamma5 (5.24.2 -> 5.24.3) kglobalaccel (5.91.0 -> 5.92.0) kguiaddons (5.91.0 -> 5.92.0) kholidays (5.91.0 -> 5.92.0) khotkeys5 (5.24.2 -> 5.24.3) ki18n (5.91.0 -> 5.92.0) kiconthemes (5.91.0 -> 5.92.0) kidletime (5.91.0 -> 5.92.0) kinfocenter5 (5.24.2 -> 5.24.3) kinit (5.91.0 -> 5.92.0) kio (5.91.0 -> 5.92.0) kirigami2 (5.91.0 -> 5.92.0) kitemmodels (5.91.0 -> 5.92.0) kitemviews (5.91.0 -> 5.92.0) kjobwidgets (5.91.0 -> 5.92.0) kmenuedit5 (5.24.2 -> 5.24.3) knewstuff (5.91.0 -> 5.92.0) knotifications (5.91.0 -> 5.92.0) knotifyconfig (5.91.0 -> 5.92.0) kpackage (5.91.0 -> 5.92.0) kparts (5.91.0 -> 5.92.0) kpeople5 (5.91.0 -> 5.92.0) kpty (5.91.0 -> 5.92.0) kquickcharts (5.91.0 -> 5.92.0) krunner (5.91.0 -> 5.92.0) kscreen5 (5.24.2 -> 5.24.3) kscreenlocker (5.24.2 -> 5.24.3) kservice (5.91.0 -> 5.92.0) ksystemstats5 (5.24.2 -> 5.24.3) ktexteditor (5.91.0 -> 5.92.0) ktextwidgets (5.91.0 -> 5.92.0) kunitconversion (5.91.0 -> 5.92.0) kwallet (5.91.0 -> 5.92.0) kwayland-integration (5.24.2 -> 5.24.3) kwayland-server (5.24.2 -> 5.24.3) kwidgetsaddons (5.91.0 -> 5.92.0) kwin5 (5.24.2 -> 5.24.3) kwindowsystem (5.91.0 -> 5.92.0) kwrited5 (5.24.2 -> 5.24.3) kxmlgui (5.91.0 -> 5.92.0) layer-shell-qt (5.24.2 -> 5.24.3) libKF5ModemManagerQt (5.91.0 -> 5.92.0) libKF5NetworkManagerQt (5.91.0 -> 5.92.0) libkdecoration2 (5.24.2 -> 5.24.3) libkscreen2 (5.24.2 -> 5.24.3) libksysguard5 (5.24.2 -> 5.24.3) libnvme (1.0~5 -> 1.0~6) libvdpau (1.4 -> 1.5) logrotate lua54 lvm2 lvm2-device-mapper milou5 (5.24.2 -> 5.24.3) mozilla-nss (3.74 -> 3.75) nvme-cli (2.0~5 -> 2.0~6) openssl-1_1 osinfo-db pam permissions (1599_20210901 -> 1599_20220309) pipewire (0.3.45 -> 0.3.48) plasma-browser-integration (5.24.2 -> 5.24.3) plasma-framework (5.91.0 -> 5.92.0) plasma-nm5 (5.24.2 -> 5.24.3) plasma5-addons (5.24.2 -> 5.24.3) plasma5-desktop (5.24.2 -> 5.24.3) plasma5-integration (5.24.2 -> 5.24.3) plasma5-openSUSE plasma5-pa (5.24.2 -> 5.24.3) plasma5-workspace (5.24.2 -> 5.24.3) polkit-kde-agent-5 (5.24.2 -> 5.24.3) powerdevil5 (5.24.2 -> 5.24.3) prison-qt5 (5.91.0 -> 5.92.0) purpose (5.91.0 -> 5.92.0) python-PyYAML python-SQLAlchemy (1.4.31 -> 1.4.32) qemu qqc2-desktop-style (5.91.0 -> 5.92.0) solid (5.91.0 -> 5.92.0) sonnet (5.91.0 -> 5.92.0) syndication (5.91.0 -> 5.92.0) syntax-highlighting (5.91.0 -> 5.92.0) systemsettings5 (5.24.2 -> 5.24.3) threadweaver (5.91.0 -> 5.92.0) upower (0.99.16+4 -> 0.99.17) util-linux (2.37.3 -> 2.37.4) util-linux-systemd (2.37.3 -> 2.37.4) vim (8.2.4456 -> 8.2.4542) wireplumber xdg-desktop-portal-kde (5.24.2 -> 5.24.3) yast2 (4.4.45 -> 4.4.47) === Details === ==== attica-qt5 ==== Version update (5.91.0 -> 5.92.0) Subpackages: libKF5Attica5 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI ==== bluedevil5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== bluez-qt ==== Version update (5.91.0 -> 5.92.0) Subpackages: bluez-qt-imports bluez-qt-udev libKF5BluezQt6 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Port to ecm_add_qml_module ==== breeze ==== Version update (5.24.2 -> 5.24.3) Subpackages: breeze5-cursors breeze5-decoration breeze5-style breeze5-wallpapers libbreezecommon5-5 - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * KStyle: center QTabBar custom tab buttons vertically in vertical tabs (kde#447315) ==== breeze5-icons ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add app icon for TeXstudio (kde#391459) ==== bubblewrap ==== Version update (0.5.0 -> 0.6.1) - Update to 0.6.1: - Add a release checklist - completions: Make zsh completion non-executable The Autotools build system installed it with 0644 permissions because it's listed as DATA, but the Meson build system installs executable files as executable by default. zsh completions don't need to be executable to work, and this one doesn't have the `#!` marker that should start an executable script. - update to 0.6.0: - meson: Improve compatibility with Meson 0.49 That version doesn't allow more than two arguments for define_variable. - Disable test-specifying-pidns.sh under 'meson dist' while I investigate This test is hanging when run under 'meson dist' for some reason, but not when run under 'meson test', and not locally, only in the Github Workflow-based CI. Disable it for now. - meson: Actually build and run the tests - tests: Fix compiler warnings for unused arguments - meson: Run test scripts from $srcdir - meson: Make G_TEST_SRCDIR, G_TEST_BUILDDIR match Autotools - meson: Run the Python test script with Python, not bash The python build option can be used to swap to a different interpreter, for environments like the Steam Runtime where the python3 executable in the PATH is extremely old but there is a better interpreter available. This is treated as non-optional, because Meson is written in Python, so the situation where there is no Python interpreter at build-time shouldn't arise. - meson: Build the try-syscall helper - meson: Build tests with equivalent of -I$(top_srcdir) -I$(top_builddir) - meson.build: Remove unnecessary check for sh - Add a Meson build system This allows bwrap to be built as a subproject in larger Meson projects. When built as a subproject, we install into the --libexecdir and require a program prefix to be specified: for example, Flatpak would use program_prefix=flatpak- to get /usr/libexec/flatpak-bwrap. Verified to be backwards-compatible as far as Meson 0.49.0 (Debian 9 backports). Loosely based on previous work by Jussi Pakkanen (see #133). Differences between the Autotools and Meson builds: The Meson build requires a version of libcap that has pkg-config metadata (introduced in libcap 2.23, in 2013). The Meson build has no equivalent of --with-priv-mode=setuid. On distributions like Debian <= 10 and RHEL <= 7 that require a setuid bwrap executable, the sysadmin or distribution packaging will need to set the correct permissions on the bwrap executable; Debian already did this via packaging rather than the upstream build system. The Meson build supports being used as a subproject, and there is CI for this. It automatically disables shell completions and man pages, moves the bubblewrap executable to ${libexecdir}, and renames the bubblewrap executable according to a program_prefix option that the caller must specify (for example, Flatpak would use - Dprogram_prefix=flatpak- to get /usr/libexec/flatpak-bwrap). See the tests/use-as-subproject/ directory for an example. - Use HEAD to refer to other projects' default branches in documentation This makes the URL independent of the name they have chosen for their default branches. - workflows: Update for rename of default branch to main - tests: Exercise seccomp filters - Allow loading more than one seccomp program This will allow Flatpak to combine an allow-list (default-deny) of known system calls with a deny-list (default-allow) of system calls that are undesired. Resolves: https://github.com/containers/bubblewrap/issues/453 - Generalize linked lists of LockFile and SetupOp I'm about to add a third linked list, for seccomp programs, which would seem like too much duplication. - Handle argc == 0 better Unfortunately it's possible for argc to be 0, so error out pretty early on in that case. I don't think this is a security issue in this case. - Fix typo - Remove trailing whitespace - Fix spelling - bash: Fix shellcheck warnings - bash: Invoke bash using /usr/bin/env - bubblewrap: Avoid a -Wjump-misses-init false-positive When building with -Wjump-misses-init as part of a larger project, gcc reports that we jump past initialization of cover_proc_dirs. This is technically true, but we only use this variable in the case where it's initialized, so that's harmless. However, we can avoid this altogether by making the array static and constant, which allows it to be moved from initialized data to read-only data. - bind-mount: Be more const-correct When compiled with -Wwrite-strings as part of a larger project, gcc and clang both warn that we're assigning a string constant to a mutable struct member. There's actually no reason why it should be mutable, so make it const. - die_with_error: Save errno sooner We need to save errno immediately, otherwise it could be overwritten by a failing library call somewhere in the implementation of fprintf. - main: Warn when non-repeatable options are repeated A user might reasonably expect that `bwrap --seccomp 3 --seccomp 4 ...` would load seccomp programs from both fds 3 and 4, but in fact it only loads the program from fd 4. Helps: https://github.com/containers/bubblewrap/issues/453 Resolves: https://github.com/containers/bubblewrap/issues/454 - utils: Add warn() - Add SPDX-License-Identifier for files that already specify license This is a step towards REUSE compliance. Third-party files that we do not otherwise edit (git.mk, m4/attributes.m4) are excluded here. - tests: Use preferred spelling for SPDX license identifiers - Remove obsolete .travis.yml We no longer use Travis-CI. - Remove obsolete papr CI We no longer use this. ==== cockpit-podman ==== - Add source-offest to _service to fix build error in Leap. ==== curl ==== Version update (7.81.0 -> 7.82.0) Subpackages: libcurl4 - Fix: openssl: fix CN check error code * Add curl-fix-verifyhost.patch - Update to 7.82.0: * curl: add --json command line option * curl: make it so that sensitive command line arguments do not show as easily in the output of ps(1) * curl_multi_socket.3: remove callback and typical usage descriptions * ftp: provide error message for control bytes in path * ldap: return CURLE_URL_MALFORMAT for bad URL * lib: remove support for CURL_DOES_CONVERSIONS * mqtt: plug some memory leaks * multi: allow user callbacks to call curl_multi_assign * multi: remember connection_id before returning connection to pool * multi: set in_callback for multi interface callbacks * netware: remove support * ngtcp2: adapt to changed end of headers callback proto * openldap: implement SASL authentication * openssl: return error if TLS 1.3 is requested when not supported * sectransp: mark a 3DES cipher as weak * smb: pass socket for writing and reading data instead of FIRSTSOCKET * tool_getparam: DNS options that need c-ares now fail without it * TPF: drop support * url: given a user in the URL, find pwd for that user in netrc * url: keep trailing dot in host name * urlapi: handle "redirects" smarter * urldata: CONN_IS_PROXIED replaces bits.proxy when proxy can be disabled * urldata: remove conn->bits.user_passwd ==== dbus-1 ==== Version update (1.12.22 -> 1.14.0) Subpackages: libdbus-1-3 - Update to version 1.14.0: + Dependencies: - dbus now requires at least a basic level of support for C99 variadic macros, as implemented in gcc >= 3, all versions of Clang, and MSVC >= 2005. In practice this requirement has existed since version 1.9.2, but it is now official. - dbus now requires a C99-compatible va_copy() macro (or a __va_copy() macro with the same behaviour), except when building for Windows using MSVC and CMake. - On Unix platforms, if getpwnam_r() and getgrnam_r() are implemented, they must be POSIX-conformant. The non-POSIX signature seen in ancient Solaris versions will no longer work. - GLib >= 2.38 is required if full test coverage is enabled (reduced from 2.40 in dbus 1.12.x.) - Building using CMake now requires CMake 3.4. - Building documentation using CMake now requires xsltproc, Docbook DTDs (for example docbook-xml on Debian derivatives), and Docbook XSLT stylesheets (for example docbook-xsl on Debian derivatives). Using KDE's meinproc4 documentation processor is no longer supported. + Build-time configuration changes: Move CMake build system to top level, matching normal practice for CMake projects + Deprecations: - Third-party software should install default dbus policies for the system bus into ${datadir}/dbus-1/system.d (this has been supported since dbus 1.10, released in August 2015). Installing default dbus policies in ${sysconfdir}/dbus-1/system.d is now considered to be deprecated. Policy files in ${sysconfdir}/dbus-1/system.d continue to be read, but this directory should only be used by system administrators wishing to override the default policies. - The ${datadir} applicable to dbus is usually /usr/share and the ${sysconfdir} is usually /etc. - A similar pattern applies to the session bus policies in session.d. - The dbus-send(1) man page now documents --bus and --peer instead of the old --address synonym for --peer, which has been deprecated since the introduction of --bus and --peer in 1.7.6 - The dbus-daemon man page now has scarier warnings about <allow_anonymous/> and non-local TCP, which are insecure and should not be used, particularly for the standard system and session buses. - DBusServer (and hence the dbus-daemon) no longer accepts usernames (login names) for the recommended EXTERNAL authentication mechanism, only numeric user IDs or the empty string. See 1.13.0 release notes for full details. + New features: - On Linux 4.13 or later when built against a suitable glibc version, GetConnectionCredentials() now includes UnixGroupIDs, the effective group IDs of the initiator of the connection, taken from SO_PEERGROUPS. - On Linux 4.13 or later, <policy group="?"> now uses the SO_PEERGROUPS credentials-passing socket option to get the effective group IDs of the initiator of the connection. See 1.13.4 release notes for details. - Add a --sender option to dbus-send, which requests a name and holds it until the signal has been sent - dbus-daemon <allow> and <deny> rules can now specify a send_destination_prefix attribute, which is like a combination of send_destination and the arg0namespace keyword in match rules. See 1.13.12 release notes for more details. - The dbus-daemon now filters the messages that it relays, removing header fields that it does not understand. Clients must not rely on this behaviour unless they have confirmed that they are connected to a suitable message bus implementation, for example by querying its Features property. - The dbus-daemon now emits a signal, ActivatableServicesChanged, when the list of activatable services may have changed. Support for this signal can be discovered by querying the Features property. - It is now possible to disable traditional (non-systemd) service activation at build-time (Autotools: - -disable-traditional-activation, CMake: - DENABLE_TRADITIONAL_ACTIVATION=OFF). See 1.13.10 release notes for details. - The API reference manual can be built as a Qt compiled help file if qhelpgenerator(-qt5) is available. See 1.13.16 release notes for details. + Miscellaneous behaviour changes: - When using the "user bus" (--enable-user-session), put the dbus-daemon in the session slice - Several environment variables set by systemd are no longer passed on to activated services - If the dbus-daemon is compiled for Linux with systemd support, it now informs systemd that it is ready for use via the sd_notify() mechanism. - Tarball releases no longer contain pre-2007 changelogs and are now compressed with xz, making them around 35% smaller. - Drop conditionals for old obsolete versions of openSUSE. - Rebase patches with quilt. - Use https for source and sig URL. ==== dbus-1-x11 ==== Version update (1.12.22 -> 1.14.0) - Update to version 1.14.0: + Dependencies: - dbus now requires at least a basic level of support for C99 variadic macros, as implemented in gcc >= 3, all versions of Clang, and MSVC >= 2005. In practice this requirement has existed since version 1.9.2, but it is now official. - dbus now requires a C99-compatible va_copy() macro (or a __va_copy() macro with the same behaviour), except when building for Windows using MSVC and CMake. - On Unix platforms, if getpwnam_r() and getgrnam_r() are implemented, they must be POSIX-conformant. The non-POSIX signature seen in ancient Solaris versions will no longer work. - GLib >= 2.38 is required if full test coverage is enabled (reduced from 2.40 in dbus 1.12.x.) - Building using CMake now requires CMake 3.4. - Building documentation using CMake now requires xsltproc, Docbook DTDs (for example docbook-xml on Debian derivatives), and Docbook XSLT stylesheets (for example docbook-xsl on Debian derivatives). Using KDE's meinproc4 documentation processor is no longer supported. + Build-time configuration changes: Move CMake build system to top level, matching normal practice for CMake projects + Deprecations: - Third-party software should install default dbus policies for the system bus into ${datadir}/dbus-1/system.d (this has been supported since dbus 1.10, released in August 2015). Installing default dbus policies in ${sysconfdir}/dbus-1/system.d is now considered to be deprecated. Policy files in ${sysconfdir}/dbus-1/system.d continue to be read, but this directory should only be used by system administrators wishing to override the default policies. - The ${datadir} applicable to dbus is usually /usr/share and the ${sysconfdir} is usually /etc. - A similar pattern applies to the session bus policies in session.d. - The dbus-send(1) man page now documents --bus and --peer instead of the old --address synonym for --peer, which has been deprecated since the introduction of --bus and --peer in 1.7.6 - The dbus-daemon man page now has scarier warnings about <allow_anonymous/> and non-local TCP, which are insecure and should not be used, particularly for the standard system and session buses. - DBusServer (and hence the dbus-daemon) no longer accepts usernames (login names) for the recommended EXTERNAL authentication mechanism, only numeric user IDs or the empty string. See 1.13.0 release notes for full details. + New features: - On Linux 4.13 or later when built against a suitable glibc version, GetConnectionCredentials() now includes UnixGroupIDs, the effective group IDs of the initiator of the connection, taken from SO_PEERGROUPS. - On Linux 4.13 or later, <policy group="?"> now uses the SO_PEERGROUPS credentials-passing socket option to get the effective group IDs of the initiator of the connection. See 1.13.4 release notes for details. - Add a --sender option to dbus-send, which requests a name and holds it until the signal has been sent - dbus-daemon <allow> and <deny> rules can now specify a send_destination_prefix attribute, which is like a combination of send_destination and the arg0namespace keyword in match rules. See 1.13.12 release notes for more details. - The dbus-daemon now filters the messages that it relays, removing header fields that it does not understand. Clients must not rely on this behaviour unless they have confirmed that they are connected to a suitable message bus implementation, for example by querying its Features property. - The dbus-daemon now emits a signal, ActivatableServicesChanged, when the list of activatable services may have changed. Support for this signal can be discovered by querying the Features property. - It is now possible to disable traditional (non-systemd) service activation at build-time (Autotools: - -disable-traditional-activation, CMake: - DENABLE_TRADITIONAL_ACTIVATION=OFF). See 1.13.10 release notes for details. - The API reference manual can be built as a Qt compiled help file if qhelpgenerator(-qt5) is available. See 1.13.16 release notes for details. + Miscellaneous behaviour changes: - When using the "user bus" (--enable-user-session), put the dbus-daemon in the session slice - Several environment variables set by systemd are no longer passed on to activated services - If the dbus-daemon is compiled for Linux with systemd support, it now informs systemd that it is ready for use via the sd_notify() mechanism. - Tarball releases no longer contain pre-2007 changelogs and are now compressed with xz, making them around 35% smaller. - Drop conditionals for old obsolete versions of openSUSE. - Rebase patches with quilt. - Use https for source and sig URL. ==== discover ==== Version update (5.24.2.1 -> 5.24.3) Subpackages: discover-backend-flatpak discover-backend-packagekit discover-notifier - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * flatpak: Do not emit about upgradeable packages that were just created * flatpak: Use the sources map to check if a resource is already being used * Set textFormat in Label to StyledText * Fix build by explicitly creating a QUrl from QString - Restore compatibility with older kf5-filesystem ==== drkonqi5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * make sure to create the wallet folder before using it (kde#446925) - Restore compatibility with older kf5-filesystem ==== frameworkintegration ==== Version update (5.91.0 -> 5.92.0) Subpackages: frameworkintegration-plugin libKF5Style5 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - No code change since 5.91.0 ==== gnutls ==== - build with lto - build with -Wl,-z,now -Wl,-z,relro - build without -fanalyzer, which cuts build time in ~ half ==== kactivities-stats ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Move Boost dependency to BUILD_TESTING block ==== kactivities5 ==== Version update (5.91.0 -> 5.92.0) Subpackages: kactivities5-imports libKF5Activities5 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Check executables exist in PATH before passing them to QProcess * Port to ecm_add_qml_module ==== kactivitymanagerd ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 - Restore compatibility with older kf5-filesystem ==== karchive ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI ==== kbd ==== Subpackages: kbd-legacy - Refresh kbdsettings-nox86.patch to fix build on non-x86* architectures - [kbdsettings] try to run numlockbios from /usr/libexec/kbd/ first as Tumbleweed moved to this location a while ago (boo#1179295) - Fix build without %_distconfdir (see bsc#1195679) ==== kbookmarks ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Check executables exist in PATH before passing them to QProcess ==== kcmutils ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - No code change since 5.91.0 ==== kcodecs ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Remove broken Python bindings generation ==== kcompletion ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Remove broken Python bindings generation * Make the BUILD_DESIGNERPLUGIN option dependent on not cross-compiling ==== kconfig ==== Version update (5.91.0 -> 5.92.0) Subpackages: kconf_update5 libKF5ConfigCore5 libKF5ConfigGui5 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Remove broken Python bindings generation * Add KWindowStateSaver * Remove warning from kauthorized.h * KConfigCompiler: support ItemAccessors=true with signalling items * Add Qt6 Android CI * Use our deprecation macros rather than Q_DECL_DEPRECATED directly * KConfigPropertyMap: Clean up internal leftovers of autosave feature * QMake pri files: fix missing new path to version header * Support build without Qt session manager * Add KConfig GUI logging category ==== kconfigwidgets ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Remove broken Python bindings generation * KHamburgerMenu: Avoid null receiver warning upon showing menubar * Port away from deprecated KAuth includes * Add @since 5.92 in KColorScheme::operator== API docs * Add a KColorScheme::operator== * Make the BUILD_DESIGNERPLUGIN option dependent on not cross-compiling * Add explicit CMake option HAVE_KAUTH * KHambugerMenu: Fix crash on windows when showing the window menubar from the KHamburgerMenu (kde#449806) ==== kcoreaddons ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Deprecate KPluginMetaData::fromDesktopFile * KPluginMetaDataTest: Explicitly call dedicated constructors * KPluginMetaData: Emit runtime deprecation warnings for deprecated code path * KPluginMetaData: Add note for deprecated code paths to constructor * KPluginMetaData: Use QFileInfo::completeBaseName for deriving plugin id * Remove broken Python bindings generation * Downgrade mismatched host tool version to WARNING * Add a way to indicate to not show a notification on finished * Allow to create valid KPluginMetaData for plugins without embedded JSON metadata * Add an OUTPUT_FILE argument to kcoreaddons_desktop_to_json() * KSignalHandler: attempt to fix Windows build * Add KSignalHandler * Build benchmarks of kdirwatch test as separate lib * Build benchmarks of ktexttohtml as separate executable ==== kcrash ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI ==== kdbusaddons ==== Version update (5.91.0 -> 5.92.0) Subpackages: kdbusaddons-tools libKF5DBusAddons5 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Remove broken Python bindings generation ==== kde-cli-tools5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== kde-gtk-config5 ==== Version update (5.24.2 -> 5.24.3) Subpackages: kde-gtk-config5-gtk3 - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 - Restore compatibility with older kf5-filesystem ==== kdeclarative ==== Version update (5.91.0 -> 5.92.0) Subpackages: kdeclarative-components libKF5CalendarEvents5 libKF5Declarative5 libKF5QuickAddons5 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Fix double deleting of NetworkAccessManagerFactory (kde#450507) * Delete networkAccessManagerFactory when we delete the engine * Improve Open[app]() functions (kde#443984) ==== kded ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - No code change since 5.91.0 ==== kdesu ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Drop obsolete KF5Service and add KF5Config dependency ==== kdnssd-framework ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - No code change since 5.91.0 ==== kdoctools ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * [ca@valencia] Add Catalan (Valencian) Language ==== kernel-source ==== Version update (5.16.11 -> 5.16.14) - Linux 5.16.14 (bsc#1012628). - Revert "ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE" (bsc#1012628). - xen/netfront: react properly to failing gnttab_end_foreign_access_ref() (bsc#1012628). - xen/gnttab: fix gnttab_end_foreign_access() without page specified (bsc#1012628). - xen/pvcalls: use alloc/free_pages_exact() (bsc#1012628). - xen/9p: use alloc/free_pages_exact() (bsc#1012628). - xen: remove gnttab_query_foreign_access() (bsc#1012628). - xen/gntalloc: don't use gnttab_query_foreign_access() (bsc#1012628). - xen/scsifront: don't use gnttab_query_foreign_access() for mapped status (bsc#1012628). - xen/netfront: don't use gnttab_query_foreign_access() for mapped status (bsc#1012628). - xen/blkfront: don't use gnttab_query_foreign_access() for mapped status (bsc#1012628). - xen/grant-table: add gnttab_try_end_foreign_access() (bsc#1012628). - xen/xenbus: don't let xenbus_grant_ring() remove grants in error case (bsc#1012628). - ARM: fix build warning in proc-v7-bugs.c (bsc#1012628). - arm64: Do not include __READ_ONCE() block in assembly files (bsc#1012628). - ARM: Do not use NOCROSSREFS directive with ld.lld (bsc#1012628). - ARM: fix co-processor register typo (bsc#1012628). - ARM: fix build error when BPF_SYSCALL is disabled (bsc#1012628). - arm64: proton-pack: Include unprivileged eBPF status in Spectre v2 mitigation reporting (bsc#1012628). - arm64: Use the clearbhb instruction in mitigations (bsc#1012628). - KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated (bsc#1012628). - arm64: Mitigate spectre style branch history side channels (bsc#1012628). - Update config files. - arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 (bsc#1012628). - arm64: Add percpu vectors for EL1 (bsc#1012628). - arm64: entry: Add macro for reading symbol addresses from the trampoline (bsc#1012628). - arm64: entry: Add vectors that have the bhb mitigation sequences (bsc#1012628). - arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations (bsc#1012628). - arm64: entry: Allow the trampoline text to occupy multiple pages (bsc#1012628). - arm64: entry: Make the kpti trampoline's kpti sequence optional (bsc#1012628). - arm64: entry: Move trampoline macros out of ifdef'd section (bsc#1012628). - arm64: entry: Don't assume tramp_vectors is the start of the vectors (bsc#1012628). - arm64: entry: Allow tramp_alias to access symbols after the 4K boundary (bsc#1012628). - arm64: entry: Move the trampoline data page before the text page (bsc#1012628). - arm64: entry: Free up another register on kpti's tramp_exit path (bsc#1012628). - arm64: entry: Make the trampoline cleanup optional (bsc#1012628). - KVM: arm64: Allow indirect vectors to be used without SPECTRE_V3A (bsc#1012628). - arm64: spectre: Rename spectre_v4_patch_fw_mitigation_conduit (bsc#1012628). - arm64: entry.S: Add ventry overflow sanity checks (bsc#1012628). - arm64: cpufeature: add HWCAP for FEAT_RPRES (bsc#1012628). - arm64: cpufeature: add HWCAP for FEAT_AFP (bsc#1012628). - arm64: add ID_AA64ISAR2_EL1 sys register (bsc#1012628). - ARM: include unprivileged BPF status in Spectre V2 reporting (bsc#1012628). - ARM: Spectre-BHB workaround (bsc#1012628). - Update config files. - ARM: use LOADADDR() to get load address of sections (bsc#1012628). - ARM: early traps initialisation (bsc#1012628). - ARM: report Spectre v2 status through sysfs (bsc#1012628). - Update config files. - x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT (bsc#1012628). - x86/speculation: Warn about Spectre v2 LFENCE mitigation (bsc#1012628). - x86/speculation: Update link to AMD speculation whitepaper (bsc#1012628). - x86/speculation: Use generic retpoline by default on AMD (bsc#1012628). - x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting (bsc#1012628). - Documentation/hw-vuln: Update spectre doc (bsc#1012628). - x86/speculation: Add eIBRS + Retpoline options (bsc#1012628). - x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE (bsc#1012628). - commit 80acc65 - Bluetooth: btusb: Add missing Chicony device for Realtek RTL8723BE (bsc#1196779). - commit 714ef34 - Linux 5.16.13 (bsc#1012628). - mac80211_hwsim: report NOACK frames in tx_status (bsc#1012628). - mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work (bsc#1012628). - i2c: bcm2835: Avoid clock stretching timeouts (bsc#1012628). - ASoC: rt5682s: do not block workqueue if card is unbound (bsc#1012628). - ASoC: rt5668: do not block workqueue if card is unbound (bsc#1012628). - ASoC: rt5682: do not block workqueue if card is unbound (bsc#1012628). - regulator: core: fix false positive in regulator_late_cleanup() (bsc#1012628). - Input: clear BTN_RIGHT/MIDDLE on buttonpads (bsc#1012628). - btrfs: get rid of warning on transaction commit when using flushoncommit (bsc#1012628). - KVM: arm64: vgic: Read HW interrupt pending state from the HW (bsc#1012628). - block: loop:use kstatfs.f_bsize of backing file to set discard granularity (bsc#1012628). - tipc: fix a bit overflow in tipc_crypto_key_rcv() (bsc#1012628). - cifs: do not use uninitialized data in the owner/group sid (bsc#1012628). - cifs: fix double free race when mount fails in cifs_get_root() (bsc#1012628). - HID: amd_sfh: Handle amd_sfh work buffer in PM ops (bsc#1012628). - HID: amd_sfh: Add functionality to clear interrupts (bsc#1012628). - HID: amd_sfh: Add interrupt handler to process interrupts (bsc#1012628). - cifs: modefromsids must add an ACE for authenticated users (bsc#1012628). - selftests/seccomp: Fix seccomp failure by adding missing headers (bsc#1012628). - drm/amd/pm: correct UMD pstate clocks for Dimgrey Cavefish and Beige Goby (bsc#1012628). - selftests/ftrace: Do not trace do_softirq because of PREEMPT_RT (bsc#1012628). - dmaengine: shdma: Fix runtime PM imbalance on error (bsc#1012628). - i2c: cadence: allow COMPILE_TEST (bsc#1012628). - i2c: imx: allow COMPILE_TEST (bsc#1012628). - i2c: qup: allow COMPILE_TEST (bsc#1012628). - net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990 (bsc#1012628). - block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern (bsc#1012628). - exfat: reuse exfat_inode_info variable instead of calling EXFAT_I() (bsc#1012628). - exfat: fix i_blocks for files truncated over 4 GiB (bsc#1012628). - tracing: Add test for user space strings when filtering on string pointers (bsc#1012628). - arm64: Mark start_backtrace() notrace and NOKPROBE_SYMBOL (bsc#1012628). - serial: stm32: prevent TDR register overwrite when sending x_char (bsc#1012628). - KVM: arm64: Workaround Cortex-A510's single-step and PAC trap errata (bsc#1012628). - ext4: drop ineligible txn start stop APIs (bsc#1012628). - ext4: simplify updating of fast commit stats (bsc#1012628). - ext4: fast commit may not fallback for ineligible commit (bsc#1012628). - ext4: fast commit may miss file actions (bsc#1012628). - sched/fair: Fix fault in reweight_entity (bsc#1012628). - KVM: x86: Add KVM_CAP_ENABLE_CAP to x86 (bsc#1012628). - ata: pata_hpt37x: fix PCI clock detection (bsc#1012628). - drm/amdgpu: check vm ready by amdgpu_vm->evicting flag (bsc#1012628). - tracing: Add ustring operation to filtering string pointers (bsc#1012628). - ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report() (bsc#1012628). - btrfs: defrag: bring back the old file extent search behavior (bsc#1012628). - btrfs: defrag: don't use merged extent map for their generation check (bsc#1012628). - ALSA: intel_hdmi: Fix reference to PCM buffer address (bsc#1012628). - ucounts: Fix systemd LimitNPROC with private users regression (bsc#1012628). - binfmt_elf: Avoid total_mapping_size for ET_EXEC (bsc#1012628). - riscv/efi_stub: Fix get_boot_hartid_from_fdt() return value (bsc#1012628). - riscv: Fix config KASAN && SPARSEMEM && !SPARSE_VMEMMAP (bsc#1012628). - riscv: Fix config KASAN && DEBUG_VIRTUAL (bsc#1012628). - iwlwifi: mvm: check debugfs_dir ptr before use (bsc#1012628). - ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min (bsc#1012628). - iommu/vt-d: Fix double list_add when enabling VMD in scalable mode (bsc#1012628). - iommu/amd: Recover from event log overflow (bsc#1012628). - drm/i915: s/JSP2/ICP2/ PCH (bsc#1012628). - drm/amd/display: Reduce dmesg error to a debug print (bsc#1012628). - xen/netfront: destroy queues before real_num_tx_queues is zeroed (bsc#1012628). - thermal: core: Fix TZ_GET_TRIP NULL pointer dereference (bsc#1012628). - mac80211: fix EAPoL rekey fail in 802.3 rx path (bsc#1012628). - blktrace: fix use after free for struct blk_trace (bsc#1012628). - ntb: intel: fix port config status offset for SPR (bsc#1012628). - mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls (bsc#1012628). - xfrm: fix MTU regression (bsc#1012628). - netfilter: fix use-after-free in __nf_register_net_hook() (bsc#1012628). - bpf, sockmap: Do not ignore orig_len parameter (bsc#1012628). - xfrm: fix the if_id check in changelink (bsc#1012628). - xfrm: enforce validity of offload input flags (bsc#1012628). - e1000e: Correct NVM checksum verification flow (bsc#1012628). - net: fix up skbs delta_truesize in UDP GRO frag_list (bsc#1012628). - netfilter: nf_queue: don't assume sk is full socket (bsc#1012628). - netfilter: nf_queue: fix possible use-after-free (bsc#1012628). - netfilter: nf_queue: handle socket prefetch (bsc#1012628). - batman-adv: Request iflink once in batadv-on-batadv check (bsc#1012628). - batman-adv: Request iflink once in batadv_get_real_netdevice (bsc#1012628). - batman-adv: Don't expect inter-netns unique iflink indices (bsc#1012628). - net: ipv6: ensure we call ipv6_mc_down() at most once (bsc#1012628). - net: dcb: flush lingering app table entries for unregistered devices (bsc#1012628). - net: ipa: fix a build dependency (bsc#1012628). - net: ipa: add an interconnect dependency (bsc#1012628). - net/smc: fix connection leak (bsc#1012628). - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client (bsc#1012628). - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server (bsc#1012628). - btrfs: fix ENOSPC failure when attempting direct IO write into NOCOW range (bsc#1012628). - platform/x86: amd-pmc: Set QOS during suspend on CZN w/ timer wakeup (bsc#1012628). - net: dsa: microchip: fix bridging with more than two member ports (bsc#1012628). - mac80211: fix forwarded mesh frames AC & queue selection (bsc#1012628). - net: stmmac: fix return value of __setup handler (bsc#1012628). - mac80211: treat some SAE auth steps as final (bsc#1012628). - iavf: Fix missing check for running netdev (bsc#1012628). - net: sxgbe: fix return value of __setup handler (bsc#1012628). - ibmvnic: register netdev after init of adapter (bsc#1012628). - net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe() (bsc#1012628). - ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc() (bsc#1012628). - iavf: Fix deadlock in iavf_reset_task (bsc#1012628). - efivars: Respect "block" flag in efivar_entry_set_safe() (bsc#1012628). - auxdisplay: lcd2s: Fix lcd2s_redefine_char() feature (bsc#1012628). - firmware: arm_scmi: Remove space in MODULE_ALIAS name (bsc#1012628). - ASoC: cs4265: Fix the duplicated control name (bsc#1012628). - auxdisplay: lcd2s: Fix memory leak in ->remove() (bsc#1012628). - auxdisplay: lcd2s: Use proper API to free the instance of charlcd object (bsc#1012628). - can: gs_usb: change active_channels's type from atomic_t to u8 (bsc#1012628). - iommu/tegra-smmu: Fix missing put_device() call in tegra_smmu_find (bsc#1012628). - arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output (bsc#1012628). - igc: igc_read_phy_reg_gpy: drop premature return (bsc#1012628). - ARM: Fix kgdb breakpoint for Thumb2 (bsc#1012628). - mips: setup: fix setnocoherentio() boolean setting (bsc#1012628). - ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions (bsc#1012628). - mptcp: Correctly set DATA_FIN timeout when number of retransmits is large (bsc#1012628). - selftests: mlxsw: tc_police_scale: Make test more robust (bsc#1012628). - pinctrl: sunxi: Use unique lockdep classes for IRQs (bsc#1012628). - igc: igc_write_phy_reg_gpy: drop premature return (bsc#1012628). - ibmvnic: free reset-work-item when flushing (bsc#1012628). - memfd: fix F_SEAL_WRITE after shmem huge page allocated (bsc#1012628). - s390/setup: preserve memory at OLDMEM_BASE and OLDMEM_SIZE (bsc#1012628). - s390/extable: fix exception table sorting (bsc#1012628). - sched: Fix yet more sched_fork() races (bsc#1012628). - arm64: dts: rockchip: drop pclk_xpcs from gmac0 on rk3568 (bsc#1012628). - arm64: dts: juno: Remove GICv2m dma-range (bsc#1012628). - arm64: dts: rockchip: fix Quartz64-A ddr regulator voltage (bsc#1012628). - arm64: dts: imx8mm: Fix VPU Hanging (bsc#1012628). - iommu/amd: Fix I/O page table memory leak (bsc#1012628). - MIPS: ralink: mt7621: do memory detection on KSEG1 (bsc#1012628). - ARM: dts: switch timer config to common devkit8000 devicetree (bsc#1012628). - ARM: dts: Use 32KiHz oscillator on devkit8000 (bsc#1012628). - soc: fsl: guts: Revert commit 3c0d64e867ed (bsc#1012628). - soc: fsl: guts: Add a missing memory allocation failure check (bsc#1012628). - soc: fsl: qe: Check of ioremap return value (bsc#1012628). - soc: imx: gpcv2: Fix clock disabling imbalance in error path (bsc#1012628). - netfilter: nf_tables: prefer kfree_rcu(ptr, rcu) variant (bsc#1012628). - ARM: tegra: Move panels to AUX bus (bsc#1012628). - Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks (bsc#1012628). - can: etas_es58x: change opened_channel_cnt's type from atomic_t to u8 (bsc#1012628). - net: stmmac: enhance XDP ZC driver level switching performance (bsc#1012628). - net: stmmac: only enable DMA interrupts when ready (bsc#1012628). - ibmvnic: initialize rc before completing wait (bsc#1012628). - ibmvnic: define flush_reset_queue helper (bsc#1012628). - ibmvnic: complete init_done on transport events (bsc#1012628). - ibmvnic: Update driver return codes (bsc#1012628). - ibmvnic: init init_done_rc earlier (bsc#1012628). - ibmvnic: clear fop when retrying probe (bsc#1012628). - ibmvnic: Allow queueing resets during probe (bsc#1012628). - net: chelsio: cxgb3: check the return value of pci_find_capability() (bsc#1012628). - net: sparx5: Fix add vlan when invalid operation (bsc#1012628). - iavf: Add trace while removing device (bsc#1012628). - iavf: Rework mutexes for better synchronisation (bsc#1012628). - iavf: Add waiting so the port is initialized in remove (bsc#1012628). - iavf: Fix init state closure on remove (bsc#1012628). - iavf: Fix locking for VIRTCHNL_OP_GET_OFFLOAD_VLAN_V2_CAPS (bsc#1012628). - iavf: Fix race in init state (bsc#1012628). - iavf: Fix __IAVF_RESETTING state usage (bsc#1012628). - drm/i915/guc/slpc: Correct the param count for unset param (bsc#1012628). - drm/bridge: ti-sn65dsi86: Properly undo autosuspend (bsc#1012628). - e1000e: Fix possible HW unit hang after an s0ix exit (bsc#1012628). - MIPS: ralink: mt7621: use bitwise NOT instead of logical (bsc#1012628). - nl80211: Handle nla_memdup failures in handle_nan_filter (bsc#1012628). - ptp: ocp: Add ptp_ocp_adjtime_coarse for large adjustments (bsc#1012628). - drm/amdgpu: fix suspend/resume hang regression (bsc#1012628). - net: dcb: disable softirqs in dcbnl_flush_dev() (bsc#1012628). - selftests: mlxsw: resource_scale: Fix return value (bsc#1012628). - net: stmmac: perserve TX and RX coalesce value during XDP setup (bsc#1012628). - Input: elan_i2c - move regulator_[en|dis]able() out of elan_[en|dis]able_power() (bsc#1012628). - Input: elan_i2c - fix regulator enable count imbalance after suspend/resume (bsc#1012628). - Input: samsung-keypad - properly state IOMEM dependency (bsc#1012628). - HID: add mapping for KEY_DICTATE (bsc#1012628). - HID: add mapping for KEY_ALL_APPLICATIONS (bsc#1012628). - tracing/histogram: Fix sorting on old "cpu" value (bsc#1012628). - tracing: Fix return value of __setup handlers (bsc#1012628). - btrfs: fix lost prealloc extents beyond eof after full fsync (bsc#1012628). - btrfs: fix relocation crash due to premature return from btrfs_commit_transaction() (bsc#1012628). - btrfs: subpage: fix a wrong check on subpage->writers (bsc#1012628). - btrfs: do not WARN_ON() if we have PageError set (bsc#1012628). - btrfs: qgroup: fix deadlock between rescan worker and remove qgroup (bsc#1012628). - btrfs: add missing run of delayed items after unlink during log replay (bsc#1012628). - btrfs: fallback to blocking mode when doing async dio over multiple extents (bsc#1012628). - btrfs: do not start relocation until in progress drops are done (bsc#1012628). - Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6" (bsc#1012628). - proc: fix documentation and description of pagemap (bsc#1012628). - x86/kvmclock: Fix Hyper-V Isolated VM's boot issue when vCPUs > 64 (bsc#1012628). - s390/ftrace: fix arch_ftrace_get_regs implementation (bsc#1012628). - s390/ftrace: fix ftrace_caller/ftrace_regs_caller generation (bsc#1012628). - KVM: x86/mmu: Passing up the error state of mmu_alloc_shadow_roots() (bsc#1012628). - Update config files. - commit bd40cb2 - Update patches.kernel.org/5.16.11-207-lib-iov_iter-initialize-flags-in-new-pipe_bu… (bsc#1012628 bsc#1196584 CVE-2022-0847). Add references. - commit 82f40a9 - nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION (CVE-2022-26490 bsc#1196830). - commit b002fe2 - config: ppc64{,le}: build vmx-crypto as module (bsc#1195768) Building CONFIG_CRYPTO_DEV_VMX_ENCRYPT as module is the default in mainline since v4.8, we use it in SLES and already in config/ppc64/default. Thus unify it in the other configs. There are build dependencies which has been fixed in mainline 647d41d3952d ("crypto: vmx - add missing dependencies") (currently still at maintainer herbert/cryptodev-2.6 tree) But instead of waiting commit to be accepted or backporting it we just unify configs, which is useful anyway - commit 70a0d71 - kernel-binary.spec: Also exclude the kernel signing key from devel package. There is a check in OBS that fails when it is included. Also the key is not reproducible. Fixes: bb988d4625a3 ("kernel-binary: Do not include sourcedir in certificate path.") - commit 68fa069 - rpm/check-for-config-changes: Ignore PAHOLE_VERSION. - commit 88ba5ec - Linux 5.16.12 (bsc#1012628). - memblock: use kfree() to release kmalloced memblock regions (bsc#1012628). - gpio: tegra186: Fix chip_data type confusion (bsc#1012628). - pinctrl: k210: Fix bias-pull-up (bsc#1012628). - pinctrl: fix loop in k210_pinconf_get_drive() (bsc#1012628). - tty: n_gsm: fix deadlock in gsmtty_open() (bsc#1012628). - tty: n_gsm: fix wrong modem processing in convergence layer type 2 (bsc#1012628). - tty: n_gsm: fix wrong tty control line for flow control (bsc#1012628). - tty: n_gsm: fix NULL pointer access due to DLCI release (bsc#1012628). - tty: n_gsm: fix proper link termination after failed open (bsc#1012628). - tty: n_gsm: fix encoding of command/response bit (bsc#1012628). - tty: n_gsm: fix encoding of control signal octet bit DV (bsc#1012628). - hugetlbfs: fix a truncation issue in hugepages parameter (bsc#1012628). - mm/hugetlb: fix kernel crash with hugetlb mremap (bsc#1012628). - riscv: fix oops caused by irqsoff latency tracer (bsc#1012628). - riscv: fix nommu_k210_sdcard_defconfig (bsc#1012628). - IB/qib: Fix duplicate sysfs directory name (bsc#1012628). - tps6598x: clear int mask on probe failure (bsc#1012628). - staging: fbtft: fb_st7789v: reset display before initialization (bsc#1012628). - thermal: int340x: fix memory leak in int3400_notify() (bsc#1012628). - RDMA/cma: Do not change route.addr.src_addr outside state checks (bsc#1012628). - btrfs: reduce extent threshold for autodefrag (bsc#1012628). - btrfs: autodefrag: only scan one inode once (bsc#1012628). - btrfs: defrag: allow defrag_one_cluster() to skip large extent which is not a target (bsc#1012628). - btrfs: prevent copying too big compressed lzo segment (bsc#1012628). - btrfs: defrag: remove an ambiguous condition for rejection (bsc#1012628). - btrfs: defrag: don't defrag extents which are already at max capacity (bsc#1012628). - btrfs: defrag: don't try to merge regular extents with preallocated extents (bsc#1012628). - driver core: Free DMA range map when device is released (bsc#1012628). - mtd: core: Fix a conflict between MTD and NVMEM on wp-gpios property (bsc#1012628). - nvmem: core: Fix a conflict between MTD and NVMEM on wp-gpios property (bsc#1012628). - xhci: Prevent futile URB re-submissions due to incorrect return value (bsc#1012628). - xhci: re-initialize the HC during resume if HCE was set (bsc#1012628). - usb: dwc3: gadget: Let the interrupt handler disable bottom halves (bsc#1012628). - usb: dwc3: pci: Fix Bay Trail phy GPIO mappings (bsc#1012628). - usb: dwc3: pci: Add "snps,dis_u2_susphy_quirk" for Intel Bay Trail (bsc#1012628). - usb: dwc2: drd: fix soft connect when gadget is unconfigured (bsc#1012628). - USB: serial: option: add Telit LE910R1 compositions (bsc#1012628). - USB: serial: option: add support for DW5829e (bsc#1012628). - tracefs: Set the group ownership in apply_options() not parse_options() (bsc#1012628). - USB: gadget: validate endpoint index for xilinx udc (bsc#1012628). - usb: gadget: rndis: add spinlock for rndis response list (bsc#1012628). - Revert "USB: serial: ch341: add new Product ID for CH341A" (bsc#1012628). - ata: pata_hpt37x: disable primary channel on HPT371 (bsc#1012628). - sc16is7xx: Fix for incorrect data being transmitted (bsc#1012628). - iio: Fix error handling for PM (bsc#1012628). - iio: imu: st_lsm6dsx: wait for settling time in st_lsm6dsx_read_oneshot (bsc#1012628). - iio: accel: fxls8962af: add padding to regmap for SPI (bsc#1012628). - iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits (bsc#1012628). - iio: adc: tsc2046: fix memory corruption by preventing array overflow (bsc#1012628). - iio: adc: men_z188_adc: Fix a resource leak in an error handling path (bsc#1012628). - iio:imu:adis16480: fix buffering for devices with no burst mode (bsc#1012628). - tracing: Have traceon and traceoff trigger honor the instance (bsc#1012628). - tracing: Dump stacktrace trigger to the corresponding instance (bsc#1012628). - bpf: Fix crash due to out of bounds access into reg2btf_ids (bsc#1012628). - bpf: Extend kfunc with PTR_TO_CTX, PTR_TO_MEM argument support (bsc#1012628). - RDMA/ib_srp: Fix a deadlock (bsc#1012628). - configfs: fix a race in configfs_{,un}register_subsystem() (bsc#1012628). - bnxt_en: Increase firmware message response DMA wait time (bsc#1012628). - RDMA/rtrs-clt: Move free_permit from free_clt to rtrs_clt_close (bsc#1012628). - RDMA/rtrs-clt: Fix possible double free in error case (bsc#1012628). - net-timestamp: convert sk->sk_tskey to atomic_t (bsc#1012628). - net: use sk_is_tcp() in more places (bsc#1012628). - regmap-irq: Update interrupt clear register for proper reset (bsc#1012628). - gpio: rockchip: Reset int_bothedge when changing trigger (bsc#1012628). - PCI: mvebu: Fix device enumeration regression (bsc#1012628). - spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op() (bsc#1012628). - net/mlx5e: Add missing increment of count (bsc#1012628). - net/mlx5: Update log_max_qp value to be 17 at most (bsc#1012628). - net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte (bsc#1012628). - net/mlx5e: kTLS, Use CHECKSUM_UNNECESSARY for device-offloaded packets (bsc#1012628). - net/mlx5e: MPLSoUDP decap, fix check for unsupported matches (bsc#1012628). - net/mlx5: DR, Fix the threshold that defines when pool sync is initiated (bsc#1012628). - net/mlx5: Fix wrong limitation of metadata match on ecpf (bsc#1012628). - net/mlx5: Fix possible deadlock on rule deletion (bsc#1012628). - net/mlx5: DR, Don't allow match on IP w/o matching on full ethertype/ip_version (bsc#1012628). - ibmvnic: schedule failover only if vioctl fails (bsc#1012628). - net/mlx5: DR, Cache STE shadow memory (bsc#1012628). - udp_tunnel: Fix end of loop test in udp_tunnel_nic_unregister() (bsc#1012628). - surface: surface3_power: Fix battery readings on batteries without a serial number (bsc#1012628). - net/smc: Use a mutex for locking "struct smc_pnettable" (bsc#1012628). - netfilter: nf_tables: fix memory leak during stateful obj update (bsc#1012628). - net: mdio-ipq4019: add delay after clock enable (bsc#1012628). - nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac() (bsc#1012628). - net: dsa: avoid call to __dev_set_promiscuity() while rtnl_mutex isn't held (bsc#1012628). - netfilter: nf_tables: unregister flowtable hooks on netns exit (bsc#1012628). - net: Force inlining of checksum functions in net/checksum.h (bsc#1012628). - net: ll_temac: check the return value of devm_kmalloc() (bsc#1012628). - net/sched: act_ct: Fix flow table lookup after ct clear or switching zones (bsc#1012628). - drm/amd/display: For vblank_disable_immediate, check PSR is really used (bsc#1012628). - drm/i915/dg2: Print PHY name properly on calibration error (bsc#1012628). - drm/vc4: crtc: Fix runtime_pm reference counting (bsc#1012628). - block: clear iocb->private in blkdev_bio_end_io_async() (bsc#1012628). - net/mlx5e: TC, Reject rules with drop and modify hdr action (bsc#1012628). - net/mlx5e: TC, Reject rules with forward and drop actions (bsc#1012628). - net/mlx5e: Fix wrong return value on ioctl EEPROM query failure (bsc#1012628). - drm/edid: Always set RGB444 (bsc#1012628). - openvswitch: Fix setting ipv6 fields causing hw csum failure (bsc#1012628). - net: mv643xx_eth: process retval from of_get_mac_address (bsc#1012628). - gso: do not skip outer ip header in case of ipip and net_failover (bsc#1012628). - clk: qcom: gcc-msm8994: Remove NoC clocks (bsc#1012628). - tipc: Fix end of loop tests for list_for_each_entry() (bsc#1012628). - nvme: also mark passthrough-only namespaces ready in nvme_update_ns_info (bsc#1012628). - net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends (bsc#1012628). - io_uring: add a schedule point in io_add_buffers() (bsc#1012628). - bpf: Add schedule points in batch ops (bsc#1012628). - bpf: Fix a bpf_timer initialization issue (bsc#1012628). - selftests: bpf: Check bpf_msg_push_data return value (bsc#1012628). - bpf: Do not try bpf_msg_push_data with len 0 (bsc#1012628). - bpf: Fix crash due to incorrect copy_map_value (bsc#1012628). - net/mlx5: Update the list of the PCI supported devices (bsc#1012628). - ice: initialize local variable 'tlv' (bsc#1012628). - ice: check the return of ice_ptp_gettimex64 (bsc#1012628). - ice: fix concurrent reset and removal of VFs (bsc#1012628). - ice: fix setting l4 port flag when adding filter (bsc#1012628). - net/mlx5: Fix tc max supported prio for nic mode (bsc#1012628). - hwmon: Handle failure to register sensor with thermal zone correctly (bsc#1012628). - bnxt_en: Restore the resets_reliable flag in bnxt_open() (bsc#1012628). - bnxt_en: Fix incorrect multicast rx mask setting when not requested (bsc#1012628). - bnxt_en: Fix occasional ethtool -t loopback test failures (bsc#1012628). - bnxt_en: Fix offline ethtool selftest with RDMA enabled (bsc#1012628). - bnxt_en: Fix active FEC reporting to ethtool (bsc#1012628). - bnxt_en: Fix devlink fw_activate (bsc#1012628). - bnx2x: fix driver load from initrd (bsc#1012628). - selftests: mptcp: be more conservative with cookie MPJ limits (bsc#1012628). - selftests: mptcp: fix diag instability (bsc#1012628). - mptcp: add mibs counter for ignored incoming options (bsc#1012628). - mptcp: fix race in incoming ADD_ADDR option processing (bsc#1012628). - perf data: Fix double free in perf_session__delete() (bsc#1012628). - perf evlist: Fix failed to use cpu list for uncore events (bsc#1012628). - gpu: host1x: Always return syncpoint value when waiting (bsc#1012628). - Revert "i40e: Fix reset bw limit when DCB enabled with 1 TC" (bsc#1012628). - ping: remove pr_err from ping_lookup (bsc#1012628). - netfilter: nf_tables_offload: incorrect flow offload action array size (bsc#1012628). - netfilter: xt_socket: missing ifdef CONFIG_IP6_NF_IPTABLES dependency (bsc#1012628). - netfilter: xt_socket: fix a typo in socket_mt_destroy() (bsc#1012628). - CDC-NCM: avoid overflow in sanity checking (bsc#1012628). - USB: zaurus: support another broken Zaurus (bsc#1012628). - sr9700: sanity check for packet length (bsc#1012628). - drm/i915: Fix bw atomic check when switching between SAGV vs. no SAGV (bsc#1012628). - drm/i915: Correctly populate use_sagv_wm for all pipes (bsc#1012628). - drm/i915: Disconnect PHYs left connected by BIOS on disabled ports (bsc#1012628). - drm/i915: Widen the QGV point mask (bsc#1012628). - drm/amdgpu: do not enable asic reset for raven2 (bsc#1012628). - drm/amdgpu: disable MMHUB PG for Picasso (bsc#1012628). - drm/amd: Check if ASPM is enabled from PCIe subsystem (bsc#1012628). - drm/amd/pm: fix some OEM SKU specific stability issues (bsc#1012628). - drm/amd/display: Protect update_bw_bounding_box FPU code (bsc#1012628). - drm/amd/display: Fix stream->link_enc unassigned during stream removal (bsc#1012628). - KVM: x86: nSVM: disallow userspace setting of MSR_AMD64_TSC_RATIO to non default value when tsc scaling disabled (bsc#1012628). - KVM: x86/mmu: make apf token non-zero to fix bug (bsc#1012628). - parisc/unaligned: Fix ldw() and stw() unalignment handlers (bsc#1012628). - parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel (bsc#1012628). - vhost/vsock: don't check owner in vhost_vsock_stop() while releasing (bsc#1012628). - selinux: fix misuse of mutex_is_locked() (bsc#1012628). - io_uring: disallow modification of rsrc_data during quiesce (bsc#1012628). - io_uring: don't convert to jiffies for waiting on timeouts (bsc#1012628). - clk: jz4725b: fix mmc0 clock gating (bsc#1012628). - slab: remove __alloc_size attribute from __kmalloc_track_caller (bsc#1012628). - btrfs: tree-checker: check item_size for dev_item (bsc#1012628). - btrfs: tree-checker: check item_size for inode_item (bsc#1012628). - cgroup-v1: Correct privileges check in release_agent writes (bsc#1012628). - cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (bsc#1012628). - mm/filemap: Fix handling of THPs in generic_file_buffered_read() (bsc#1012628). - commit 9b89dd3 ==== kfilemetadata5 ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Port to KPluginMetaData::findPlugins for plugin querying * enable mobipocket extractor by default * Use std::unique_ptr to manage lifetime of d-ptr ==== kgamma5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== kglobalaccel ==== Version update (5.91.0 -> 5.92.0) Subpackages: kglobalaccel5 libKF5GlobalAccel5 libKF5GlobalAccelPrivate5 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - No code change since 5.91.0 ==== kguiaddons ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Remove broken Python bindings generation * [KOverlayIconEngine] Implement ScaledPixmapHook for high-dpi support ==== kholidays ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * holiday_pl_pl - add Fat Thursday and State Holidays w/o day-off (kde#447201) ==== khotkeys5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== ki18n ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Remove broken Python bindings generation ==== kiconthemes ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Make the BUILD_DESIGNERPLUGIN option dependent on not cross-compiling * Fix pixelated icons in item views (kde#450336) * [KIconEngine] Create high-dpi pixmap in paint * Read the reference icon already scaled ==== kidletime ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * General code clean-up ==== kinfocenter5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * fix up help paths (kde#450918) ==== kinit ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Check executables exist in PATH before passing them to QProcess ==== kio ==== Version update (5.91.0 -> 5.92.0) Subpackages: kio-core - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Too many changes since 5.91.0, only listing bugfixes: * KFilePlacesView: Fix crash when dragging over topmost section header (kde#450813) * Hide mount point labels if mount point can't be found (kde#449791) * Fix trash KCM not having any icon on wayland (kde#449859) * Fix potential crash in pastejob (kde#439948) * [KFilePlacesView] Mount place when dropping onto it (kde#206629) * [knewfilemenu] Bind stat job connection lifetime to dialog, not the whole menu (kde#433347) ==== kirigami2 ==== Version update (5.91.0 -> 5.92.0) Subpackages: libKF5Kirigami2-5 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Dialog: Accommodate vertical scrollbars widths properly * Dialog: Fix implicitWidth binding loop when absolute maximum size used * consider visibility when calculating page content positions * Add Qt6 Android CI * update commandlink url to a working one * Dialog: Fix wrong import version in documentation * Documentation: Add Dialog and NavigationTabBar to homepage * Dialog: Fix padding * FormLayout: make section headings slightly smaller but bolder * NavigationTabBar: check checkedButton state before updating currentIndex * Drawer should not eat mouse events at edges (kde#438017) * Add a CI job to build and test the static build * Use extra spacing to distinguish narrow-mode form labels and UI controls * Revert "Bold labels for narrow FormLayout" (kde#450105) * fix autotests/wheelhandler/tst_scrolling.qml after commit de215e19 * Units: add mediumSpacing property * Use a nested toolbutton instead * Ensure OverlayDrawer handles is keyboard navigable * CheckableListItem: Reset list item's checked property when checking box * CheckableListItem: Only conditionally trigger action when checked * comment over the class * PageRow: properly handle back button * WheelHandler: Round contentX/contentY positions (kde#449884) * Fix some more installation paths * Allow compiling against Qt configured with -no-opengl * Fix install path of settings and swipe navigator components ==== kitemmodels ==== Version update (5.91.0 -> 5.92.0) Subpackages: kitemmodels-imports libKF5ItemModels5 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Remove broken Python bindings generation * Fix proxy model smoke test with Qt6 ==== kitemviews ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Remove broken Python bindings generation * Add Android Qt6 CI * Make the BUILD_DESIGNERPLUGIN option dependent on not cross-compiling ==== kjobwidgets ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Remove broken Python bindings generation ==== kmenuedit5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== knewstuff ==== Version update (5.91.0 -> 5.92.0) Subpackages: knewstuff-imports libKF5NewStuff5 libKF5NewStuffCore5 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * kmoretools: Fix OBS appstream id (kde#414533) * Add conditional cache preference to http requests * Engine: Ensure we are not using the wrong ProvidersUrl * Add http2 to KNewStuff requests * Engine::atticaProviders is being added in 5.92 * KNSCore::Engine: Expose our Attica::Provider ==== knotifications ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Allow to build the Java parts with Gradle from both Qt5 and Qt6 * Fix compilation on Android with Qt6 ==== knotifyconfig ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - No code change since 5.91.0 ==== kpackage ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - No code change since 5.91.0 ==== kparts ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI ==== kpeople5 ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI ==== kpty ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Fix FindUTEMPTER when cross-compiling ==== kquickcharts ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - No code change since 5.91.0 ==== krunner ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Bundle plasma-runner.desktop into a qrc, for CI and Windows ==== kscreen5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * Revert "KCM: Workaround unknown Qt issue that causes the revert dialog to be invisible" ==== kscreenlocker ==== Version update (5.24.2 -> 5.24.3) Subpackages: libKScreenLocker5 - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 - Restore compatibility with older kf5-filesystem ==== kservice ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Use :/kservicetypes5 instead of :/kf/kservicetypes5 * Add Qt6 Android CI * Explicitely call KPluginMetaData::fromDesktopFile instead of KPluginMetaData(QString fileName) constructor ==== ksystemstats5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== ktexteditor ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Too many changes since 5.91.0, only listing bugfixes: * vimode: implement hlsearch (kde#449641, kde#449643) * view: fix buggy scrolling on macOS (kde#442060) * Guard against null widgets (kde#450094) * use the url of the latest used document for save (kde#448618) * Differentiate docs with identical filenames (kde#381532) ==== ktextwidgets ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Make the BUILD_DESIGNERPLUGIN option dependent on not cross-compiling ==== kunitconversion ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Add teaspoon (tsp) and tablespoon (tbsp) units (kde#450908) ==== kwallet ==== Version update (5.91.0 -> 5.92.0) Subpackages: kwalletd5 libKF5Wallet5 libkwalletbackend5-5 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - No code change since 5.91.0 ==== kwayland-integration ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== kwayland-server ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * Fix kdebugsettings categories file * linuxdmabuf: Add unistd.h include ==== kwidgetsaddons ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * KCharSelect: connect to the appropriate QFontComboBox signal (kde#445477) * Remove broken Python bindings generation * Check executables exist in PATH before passing them to QProcess * Add Android Qt6 CI * Make the BUILD_DESIGNERPLUGIN option dependent on not cross-compiling * Make KSqueezedTextLabel more robust wrt QFontMetrics ==== kwin5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * backends/drm: don't change the configuration while KWin is terminating * backends/drm: wait for pending pageflips before doing a modeset * output changes: handle to-be-enabled outputs first * platform: check all outputs, not only enabled ones for the enabled flag * backends/drm: fix recording with direct scanout (kde#450943) * backends/drm: fix multi gpu (kde#450737) * backends/drm: fix format choosing (kde#450779) * inputmethod: fix placing the virtual keyboard at the bottom * Revert "Remove mysterious s_cursorUpdateBlocking boolean flag in pointer_input.cpp" (kde#449273) - Drop patches, now upstream: * 0001-Revert-Remove-mysterious-s_cursorUpdateBlocking-bool.patch - Restore compatibility with older kf5-filesystem ==== kwindowsystem ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Ensure that xdgActivationTokenArrived is always emitted asynchronously (kde#450342) ==== kwrited5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== kxmlgui ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Remove outdated readme file * Add Qt6 Android CI * Add an old formatting commit to git blame ignore file * Make the BUILD_DESIGNERPLUGIN option dependent on not cross-compiling * Support build without Qt session manager * Add an action in help menu for command bar * Update translation context of two strings ==== layer-shell-qt ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== libKF5ModemManagerQt ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Fix typo * Normalise where headers are installed with the rest of KF ==== libKF5NetworkManagerQt ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - No code change since 5.91.0 ==== libkdecoration2 ==== Version update (5.24.2 -> 5.24.3) Subpackages: libkdecorations2-5 libkdecorations2private9 - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== libkscreen2 ==== Version update (5.24.2 -> 5.24.3) Subpackages: libKF5Screen7 libkscreen2-plugin - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== libksysguard5 ==== Version update (5.24.2 -> 5.24.3) Subpackages: ksysguardsystemstats-data libKSysGuardSystemStats1 libksysguard5-imports - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * Fixed computational bug for bar chart spacing (kde#449868) - Restore compatibility with older kf5-filesystem ==== libnvme ==== Version update (1.0~5 -> 1.0~6) - Update to version 1.0-rc6: * tree: add nvme_ctrl_get_ana_state() (bsc#1195938) * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938) * ioctl.h: ns list bug fix (wrong cns value) * types.h: Key Value Command Set Identifier added (NVME_CSI_KV) * types: fix status code type bug (wrong masking) ==== libvdpau ==== Version update (1.4 -> 1.5) - Add U_Support-AV1.patch: Add support for AV1 in vdpauinfo. - Minor tweaks to spec. - Update to version 1.5: * Add AV1 decode support in VDPAU API * Addition of comma and removing the extra braces * Add tracing for HEVCRangeExt picture info * Add tracing for VP9 picture info - Also update vdpauinfo to version 1.4 - Drop patches fixed upstream: * c5a8e7c6c8b4b36a0e4c9a4369404519262a3256.patch * e82dc4bdbb0db3ffa8c78275902738eb63aa5ca8.patch ==== logrotate ==== - Added own logrotate.service file in order to define a new order of parsed config files: /usr/etc/logrotate.conf Default configuration file defined by the vendor. /usr/etc/logrotate.d/* Directory for additional configuration files defined by the vendor. /etc/logrotate.conf Default configuration file defined by the administrator. (optional) /etc/logrotate.d/* Directory for additional configuration files defined by the administrator. (optional) - drop logrotate-3.19.0-systemd_add_home_env.patch: - included in new logrotate.service - Adapted man page: logrotate-3.19.0-man_logrotate.patch ==== lua54 ==== - Added patches from upstream: * luabugs1.patch * luabugs2.patch - Adjust buildsystem so that it matches upstream git (testes??) - Drop the lua_docdir define, package docs in the standard location. Instead just silently drop packaging the README with the path that does not makes sense for a rpm package, but for a source tarball install. Simpler solution to boo#1186233. ==== lvm2 ==== Subpackages: liblvm2cmd2_03 - Udev database has incomplete information about device /dev/sda. (bsc#1181242) + 0024-pvscan-don-t-use-udev-for-external-device-info.patch ==== lvm2-device-mapper ==== Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 - Udev database has incomplete information about device /dev/sda. (bsc#1181242) + 0024-pvscan-don-t-use-udev-for-external-device-info.patch ==== milou5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== mozilla-nss ==== Version update (3.74 -> 3.75) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs - update to NSS 3.75 * bmo#1749030 - This patch adds gcc-9 and gcc-10 to the CI. * bmo#1749794 - Make DottedOIDToCode.py compatible with python3. * bmo#1749475 - Avoid undefined shift in SSL_CERT_IS while fuzzing. * bmo#1748386 - Remove redundant key type check. * bmo#1749869 - Update ABI expectations to match ECH changes. * bmo#1748386 - Enable CKM_CHACHA20. * bmo#1747327 - check return on NSS_NoDB_Init and NSS_Shutdown. * bmo#1747310 - real move assignment operator. * bmo#1748245 - Run ECDSA test vectors from bltest as part of the CI tests. * bmo#1743302 - Add ECDSA test vectors to the bltest command line tool. * bmo#1747772 - Allow to build using clang's integrated assembler. * bmo#1321398 - Allow to override python for the build. * bmo#1747317 - test HKDF output rather than input. * bmo#1747316 - Use ASSERT macros to end failed tests early. * bmo#1747310 - move assignment operator for DataBuffer. * bmo#1712879 - Add test cases for ECH compression and unexpected extensions in SH. * bmo#1725938 - Update tests for ECH-13. * bmo#1725938 - Tidy up error handling. * bmo#1728281 - Add tests for ECH HRR Changes. * bmo#1728281 - Server only sends GREASE HRR extension if enabled by preference. * bmo#1725938 - Update generation of the Associated Data for ECH-13. * bmo#1712879 - When ECH is accepted, reject extensions which were only advertised in the Outer Client Hello. * bmo#1712879 - Allow for compressed, non-contiguous, extensions. * bmo#1712879 - Scramble the PSK extension in CHOuter. * bmo#1712647 - Split custom extension handling for ECH. * bmo#1728281 - Add ECH-13 HRR Handling. * bmo#1677181 - Client side ECH padding. * bmo#1725938 - Stricter ClientHelloInner Decompression. * bmo#1725938 - Remove ECH_inner extension, use new enum format. * bmo#1725938 - Update the version number for ECH-13 and adjust the ECHConfig size. ==== nvme-cli ==== Version update (2.0~5 -> 2.0~6) - Update to version 2.0-rc6: * nvme: print out ANA state for 'list-subsys' (bsc#1195938) * nvme: Explicit initialize all command line options (bsc#1195945) * nvme: Explicit initialize passthru command line options * nvme: list_ns bug fix (csi option enable) * nvme: nvme write bug fix (no parse for option) * documenation updates ==== openssl-1_1 ==== Subpackages: libopenssl1_1 - Security fix: [bsc#1192820, CVE-2002-20001] * Fix DHEATER: The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE calculation. * Stop recommending the DHE in SSL_DEFAULT_SUSE_CIPHER_LIST * Rebase openssl-DEFAULT_SUSE_cipher.patch - Fix the engines section in /etc/ssl/openssl.cnf [bsc#1194187] * In an INI-type file, the sections begin with a [section_name] and they run until the next section begins. * Rebase openssl-1_1-use-include-directive.patch ==== osinfo-db ==== - bsc#1196965 - openSUSE Tumbleweed unattended installation with libvirt fails opensuse-autoyast-desktop.patch ==== pam ==== Subpackages: pam_unix - pam-hostnames-in-access_conf.patch: update with upstream submission. Fixes several bugs including memory leaks. - Move group.conf and faillock.conf to /usr/etc/security - Update to current git for enhanced vendordir support (pam-git.diff) Obsoletes: - 0001-Include-pam_xauth_data.3.xml-in-source-archive-400.patch - 0002-Only-include-vendordir-in-manual-page-if-set-401.patch - 0003-Use-vendor-specific-limits.conf-as-fallback-402.patch ==== permissions ==== Version update (1599_20210901 -> 1599_20220309) Subpackages: chkstat permissions-config - Update to version 20220309: * apptainer whitelisting (bsc#1196145) - Update to version 20220202: * mount.nfs: switch from migration mode to fixed path in /usr/sbin * changed gendered pronouns * mgetty: faxq-helper now finally reside in /usr/libexec ==== pipewire ==== Version update (0.3.45 -> 0.3.48) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 0.3.48: * Highlights - Fix IEC958 passthrough again. - Fix pulse-server crashes when playing a sample. - Support for more a more advanced upmixing algorithm. - filter-chain now supports arbitrary many ports. - Fix multichannel support in WINE (with new WirePlumber). - Many bugfixes and improvements. * PipeWire - The work queue is now created in the context so we can fail early and avoid further error checking in various places. - Fix a potential use after free with threaded loops. - The protocol now has a message footer. This is used to pass around global state such as the last registered object serial number. This can be used to detect when a client tries to bind to old (but reused) object ids. This avoids some races in the session manager but also when binding objects. - The zero-denormals CPU flag is now not touched anymore unless explicitly selected by the user. Denormals are avoided in filter-chain now in software. If the zero-denormals are now only configured in the data thread. This should fix issues with luajit. - Configuration parsing will not actually fail on errors. - pw-top now correctly clips unicode characters. - Many places now use a dynamic POD builder to support arbitrary large property sets. - pw-stream now support PropInfo parameters so that they can announce custom properties. - Serial number are now also set on metadata and session-manager objects. * SPA - audioadapter is now smarter when trying to fixate the format. It will use the PortConfig format to fill in any wildcards. This results in the least amount of conversions when the stream can handle it. It also is part of a fix (also requires a session manager fix) for WINE multichannel support. - Fix 5.1 to 2 channels mixing. It was using the volume of the stereo pair on all channels. - Fix some weird volume issues when a source is capturing and channelmixing. - Add stereo to 7.1 upmixing. - The channelmix parameters can be changed at runtime now. - Many improvements to the upmixing algorithms. Rear channels are now constructed from the ambient sound and can have delay and phase shift applied to them to improve spacialisation. The stereo channels can be filtered so that the dialogue is more concentrated in the centre channel. * modules - Module X11 bell received cleanups and improvements. - The module now has a private method to schedule unload later. This simplifies cleanup in many modules. - module-filter-chain now handles arbitrary many ports and control ports. - Fix a bug in RAOP where it was reading from the wrong port. * pulse-server - Nodes with the DONT_MOVE property should fail with -EINVAL when they are moved. - Fix a segfault when playing a sample. - The _FIX flags in pulse-server also now ignore the configured sample format, just like pulseaudio does. - Fix IEC958 passthrough again. It got accidentally broken since 0.3.45 with a fix for another issue. - Fix module-null-sink device.description. * Bluetooth - Don't try to connect HSP/HFP when no backend is available. - Drop patches already included upstream: * 0001-revert-loop-remove-destroy-list.patch * 0002-pulse-server-free-pending-sample-reply.patch - Rebase reduce-meson-dependency.patch. - Enable pulseaudio-setup use on openSUSE Leap 15.4. - Some spec clean-up. - Add 0001-revert-loop-remove-destroy-list.patch: fix MPD crash. - Add 0002-pulse-server-free-pending-sample-reply.patch: fix "fast volume change". - Update to version 0.3.47: * Fix a bug in pulse-server that caused cached notifications to play multiple times. * Remove a check and warnings to catch leaked listeners on the proxy. This might access invalid memory and cause infinite loops in older wireplumber. - Rebase reduce-meson-dependency.patch. - Update to version 0.3.46: * Highlights: - Fix a critical bug in pipewire-pulse buffer size handling that made some apps (MuseScore, ... ) stutter. - Fix a critical bug where devices would not show when the kernel was compiled without VERBOSE_PROCSFS. - JACK clients will now use lock-quantum by default. This makes sure that all dynamic quantum changes are disabled while a JACK app is running. The only way to force a quantum chance is through a JACK app or with the metadata. - Almost all limits on number of ports, clients and nodes are removed. - A Dummy fallback sink is now automatically created when there are no other sinks. This avoids stalling browsers. - Sound sharing with Zoom should work better. A new WirePlumber release might be required. - Many more fixes and improvements. * PipeWire - Update docs with new config overrides. - The rule matching logic was moved to config and code is now shared with pulse-server and JACK. - Add new Romanian translation. - When a quantum is forced with metadata, any node that asked to lock-quantum is ignored so that the quantum change can happen. - Fix a bug where a mixer was removed twice, leading to potential memory corruption. - The port limits on nodes and filters are now removed. Some code was simplified. - Fix a potential leak because listeners where removed while they could be emitted. - Improve context.exec and avoid zombie processes. * Modules - The RAOP module now has a default latency of 2 seconds, like PulseAudio. - The echo-cancel module now uses the plugin loader to load the backends. This makes it possible to add custom, out of tree, echo cancel plugins. * Tools - Improve help of pw-link. - Output to stdout and error to stderr. Use setlinebuf for stdout to improve piping between apps. (#2110) * SPA - Improve removing sources when dispatching. Also improve performance now that a destroy loop can be removed. (#2114) - Fix an fd leak in the logger when logging to a file. - Improve loop enter/leave checks and support recursive loops. * pulse-server - Clamp various buffer attributes to the max length. Fixes some issues with various applications. (#2100) - Module properties are now remapped correctly from their pulseaudio variant to the PipeWire ones. - Fix module index in introspect. Use the right index when loaded from our internal modules. (#2101) - Improve argument parsing and node.description. (#2086) - The sink-index should now be filled in correctly when playing a sample. (#2129) - module-always-sink is now implemented and loaded by default. (#1838) - Add support for loading some modules only once. - Module load and unload now does extra sync to make it appear synchronous, like in PulseAudio. This improves sounds sharing in Zoom. * ALSA - Fix critical bug where alsa devices would not show when the kernel was compiled without VERBOSE_PROCFS. - Some corner cases were fixed in the ALSA timing code. When the capture node is follower, it will now not try to read too much data and xrun but it will instead produce a cycle of silence. - Various fixes and improvements to make ALSA devices resync to the driver more quickly and accurately. * JACK - Add an option to name the default device as system to improve compatibility with some applications, - Use lock-quantum by default. This makes sure that all dynamic quantum changes are disabled while a JACK app is running. The only way to force a quantum chance is through a JACK app or with the metadata. - It is now possible to do IPC calls from the data thread. Note that this is a very bad idea but required for compatibility with JACK2. * GStreamer - GStreamer sink will now set a default channelmap to make it possible to remap to the channel layout of the device. - Update patch for further uses of "new" meson features used by upstream: * reduce-meson-dependency.patch - Run ldconfig for pipewire-libjack-0_3 * The JACK libraries are made available system-wide using /etc/ld.so.conf.d. Hence, ldconfig should be run to make sure the dynamic linker picks them up. ==== plasma-browser-integration ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== plasma-framework ==== Version update (5.91.0 -> 5.92.0) Subpackages: libKF5Plasma5 plasma-framework-components - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * KPluginMetaData::serviceTypes() is gone in KF6 * Remove or upgrade QQC1 imports from tests where possible * Port away from QXcbWindowFunctions for Qt6 * show the header if both this and dialog background fallback * Fix a -Wint-to-void-pointer-cast warning * breeze: Clean up SVG Tiny 1.2 errors in button * Units: add mediumSpacing * Units: update smallSpacing and largeSpacing documentation * Use POSITION_INDEPENDENT_CODE for static lib (qt6) * Use KConfigPropertyMap instead of KDeclarative::ConfigPropertyMap for KF6 * Remove the use of the QtQml namespace * Adapt to the new location of the Qt namespace meta object in Qt6 * Adapt to native event filter signature changes in Qt6 * Adapt to the removed of QtX11Extras in Qt6 * Adapt to QQuickItem::geometryChanged being renamed in Qt6 * Port to QRegularExpression * Adapt to Qt6 container sizes no longer being a 32bit integer ==== plasma-nm5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== plasma5-addons ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== plasma5-desktop ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * kcms/touchpad: Remove weird Q_EMIT changed(false) in resizeEvent - Drop patches, now upstream: * 0001-kcms-touchpad-Remove-weird-Q_EMIT-changed-false-in-r.patch - Restore compatibility with older kf5-filesystem - Remove duplicate mention of kimpanel-ibus-panel ==== plasma5-integration ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * [KDEPlatformFileDialog] Don't do stat if baseUrl didn't change ==== plasma5-openSUSE ==== Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE sddm-theme-openSUSE - Update to 5.24.3 ==== plasma5-pa ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * [kcm] Update device combobox when current device changes externally ==== plasma5-workspace ==== Version update (5.24.2 -> 5.24.3) Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-libs xembedsniproxy - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * kcms/colors: Implement radio button layouts better * kcms/colors: fix spacing between radio buttons and content * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161) * [Icons KCM] Give measure delegate a text * wallpapers: Sort BackgroundListModel by title * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796) * applets/systray: align applet labels with differing line counts in hidden view (kde#438347) * Show panel config above other windows (kde#450794) * Use current accent colour to set ColorDialog object in colour picker * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223) * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768) * Revert "Fix overdraw on Wayland" * startkde: Forward stdout/stderr of started processes * SDDM theme: stop eliding people's names so aggressively (kde#450673) * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632) * wrap completely the invariants timer in NDEBUG * ScreenPool as the source of truth of QScreen info * Always ensure there is an user selected (kde#450182) * Prevent panel going out of screen boundaries * applets/clipboard: Focus on text area when transition is done * applets/clipboard: Fix highlight after exiting edit mode - Drop patches, now upstream: * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch - Restore compatibility with older kf5-filesystem ==== polkit-kde-agent-5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 - Restore compatibility with older kf5-filesystem ==== powerdevil5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * Improved backlight devices selection (kde#399646) - Restore compatibility with older kf5-filesystem ==== prison-qt5 ==== Version update (5.91.0 -> 5.92.0) Subpackages: libKF5Prison5 prison-qt5-imports - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * For KF6 use the more idiomatic include files installation layout * Fix include dir for .pri file * Normalise where headers are installed with the rest of KF ==== purpose ==== Version update (5.91.0 -> 5.92.0) Subpackages: libKF5Purpose5 libKF5PurposeWidgets5 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Remove call to ecm_find_qmlmodule(org.kde.kdeconnect) ==== python-PyYAML ==== - do not use setup.py test construct https://trello.com/c/me9Z4sIv/121-setuppy-test-leftovers ==== python-SQLAlchemy ==== Version update (1.4.31 -> 1.4.32) - update to version 1.4.32: * orm + [orm] [bug] [regression] Fixed regression where the ORM exception that is to be raised when an INSERT silently fails to actually insert a row (such as from a trigger) would not be reached, due to a runtime exception raised ahead of time due to the missing primary key value, thus raising an uninformative exception rather than the correct one. For 1.4 and above, a new FlushError is added for this case that?s raised earlier than the previous ?null identity? exception was for 1.3, as a situation where the number of rows actually INSERTed does not match what was expected is a more critical situation in 1.4 as it prevents batching of multiple objects from working correctly. This is separate from the case where a newly fetched primary key is fetched as NULL, which continues to raise the existing ?null identity? exception. References: #7594 + [orm] [bug] Fixed issue where using a fully qualified path for the classname in relationship() that nonetheless contained an incorrect name for path tokens that were not the first token, would fail to raise an informative error and would instead fail randomly at a later step. References: #7697 * engine + [engine] [bug] Adjusted the logging for key SQLAlchemy components including Engine, Connection to establish an appropriate stack level parameter, so that the Python logging tokens funcName and lineno when used in custom logging formatters will report the correct information, which can be useful when filtering log output; supported on Python 3.8 and above. Pull request courtesy Markus Gerstel. References: #7612 * sql + [sql] [bug] Fixed type-related error messages that would fail for values that were tuples, due to string formatting syntax, including compile of unsupported literal values and invalid boolean values. References: #7721 + [sql] [bug] [mysql] Fixed issues in MySQL SET datatype as well as the generic Enum datatype where the __repr__() method would not render all optional parameters in the string output, impacting the use of these types in Alembic autogenerate. Pull request for MySQL courtesy Yuki Nishimine. References: #7598, [#7720], #7789 + [sql] [bug] The Enum datatype now emits a warning if the Enum.length argument is specified without also specifying Enum.native_enum as False, as the parameter is otherwise silently ignored in this case, despite the fact that the Enum datatype will still render VARCHAR DDL on backends that don?t have a native ENUM datatype such as SQLite. This behavior may change in a future release so that ?length? is honored for all non-native ?enum? types regardless of the ?native_enum? setting. + [sql] [bug] Fixed issue where the HasCTE.add_cte() method as called upon a TextualSelect instance was not being accommodated by the SQL compiler. The fix additionally adds more ?SELECT?-like compiler behavior to TextualSelect including that DML CTEs such as UPDATE and INSERT may be accommodated. References: #7760 * asyncio + [asyncio] [bug] Fixed issues where a descriptive error message was not raised for some classes of event listening with an async engine, which should instead be a sync engine instance. + [asyncio] [bug] Fixed issue where the AsyncSession.execute() method failed to raise an informative exception if the Connection.execution_options.stream_results execution option were used, which is incompatible with a sync-style Result object when using an asyncio calling style, as the operation to fetch more rows would need to be awaited. An exception is now raised in this scenario in the same way one was already raised when the Connection.execution_options.stream_results option would be used with the AsyncConnection.execute() method. Additionally, for improved stability with state-sensitive database drivers such as asyncmy, the cursor is now closed when this error condition is raised; previously with the asyncmy dialect, the connection would go into an invalid state with unconsumed server side results remaining. References: #7667 * postgresql + [postgresql] [usecase] Added compiler support for the PostgreSQL NOT VALID phrase when rendering DDL for the CheckConstraint, ForeignKeyConstraint and ForeignKey schema constructs. Pull request courtesy Gilbert Gilb?s. References: #7600 * mysql + [mysql] [bug] [regression] Fixed regression caused by #7518 where changing the syntax ?SHOW VARIABLES? to ?SELECT @@? broke compatibility with MySQL versions older than 5.6, including early 5.0 releases. While these are very old MySQL versions, a change in compatibility was not planned, so version-specific logic has been restored to fall back to ?SHOW VARIABLES? for MySQL server versions < 5.6. References: #7518 * mariadb + [mariadb] [bug] [regression] Fixed regression in mariadbconnector dialect as of mariadb connector 1.0.10 where the DBAPI no longer pre-buffers cursor.lastrowid, leading to errors when inserting objects with the ORM as well as causing non-availability of the CursorResult.inserted_primary_key attribute. The dialect now fetches this value proactively for situations where it applies. References: #7738 * sqlite + [sqlite] [usecase] Added support for reflecting SQLite inline unique constraints where the column names are formatted with SQLite ?escape quotes? [] or `, which are discarded by the database when producing the column name. References: #7736 + [sqlite] [bug] Fixed issue where SQLite unique constraint reflection would fail to detect a column-inline UNIQUE constraint where the column name had an underscore in its name. References: #7736 * oracle + [oracle] [bug] Fixed issue in Oracle dialect where using a column name that requires quoting when written as a bound parameter, such as "_id", would not correctly track a Python generated default value due to the bound-parameter rewriting missing this value, causing an Oracle error to be raised. References: #7676 + [oracle] [bug] [regression] Added support to parse ?DPI? error codes from cx_Oracle exception objects such as DPI-1080 and DPI-1010, both of which now indicate a disconnect scenario as of cx_Oracle 8.3. References: #7748 * tests + [tests] [bug] Improvements to the test suite?s integration with pytest such that the ?warnings? plugin, if manually enabled, will not interfere with the test suite, such that third parties can enable the warnings plugin or make use of the -W parameter and SQLAlchemy?s test suite will continue to pass. Additionally, modernized the detection of the ?pytest-xdist? plugin so that plugins can be globally disabled using PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 without breaking the test suite if xdist were still installed. Warning filters that promote deprecation warnings to errors are now localized to SQLAlchemy-specific warnings, or within SQLAlchemy-specific sources for general Python deprecation warnings, so that non-SQLAlchemy deprecation warnings emitted from pytest plugins should also not impact the test suite. References: #7599 + [tests] [bug] Made corrections to the default pytest configuration regarding how test discovery is configured, to fix issue where the test suite would not configure warnings correctly and also attempt to load example suites as tests, in the specific case where the SQLAlchemy checkout were located in an absolute path that had a super-directory named ?test?. References: #7045 ==== qemu ==== - Build PPC firmwares from sources on non-PPC builds as well (bsc#1193545) - Build RiscV firmwares on non-RiscV builds as well - While there, refactor (and simplify!) the firmware building logic and code * Patches added: Makefile-define-endianess-for-cross-buil.patch Makefile-fix-build-with-binutils-2.38.patch - qemu,kvm,xen: NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503) * Patches added: hw-scsi-megasas-check-for-NULL-frame-in-.patch ==== qqc2-desktop-style ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Thicken menus on transient touch as well as being in Tablet Mode * PlasmaDesktopTheme: ensure we initialise the colours * Fix typo * PlasmaDesktopTheme: Do not compute the colors for invisible items * PlasmaDesktopTheme: Do not call syncColors after syncWindow * Menu: use hmargin and vmargin from QStyle * Support displaying icons in ItemDelegate (kde#425867) * fix checkbox position for CheckDelegate * Drop lib prefix when building for Windows * KQuickStyleItem: Simplify the updatePolish * Use correct DBus signal for listening for font changes * Use raw pointer instead of QPointer to track watchers ==== solid ==== Version update (5.91.0 -> 5.92.0) Subpackages: libKF5Solid5 solid-imports - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Use enum in switch instead of raw int * Add Qt6 Android CI * udisks backend: Add UD2_DBUS_PATH_BLOCKDEVICES and use more constants * udev: Do not ignore joysticks * Check executables exist in PATH before passing them to QProcess ==== sonnet ==== Version update (5.91.0 -> 5.92.0) Subpackages: libKF5SonnetCore5 libKF5SonnetUi5 sonnet-imports - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * settings: Emit `autodetectLanguageChanged` * Add Qt6 Android CI * Make the BUILD_DESIGNERPLUGIN option dependent on not cross-compiling * QMake pri files: fix missing new path to version header ==== syndication ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI ==== syntax-highlighting ==== Version update (5.91.0 -> 5.92.0) Subpackages: libKF5SyntaxHighlighting5 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * increment bash version number * Bash: fix parameter expansion replacement with path without extended glob * Lua: fix function highlighting with local function (#17) * Add Android Qt6 CI * Propagate Qt major version to external project build of the host tools * increment versions * Bash/Zsh: fix keyword ! in ! cmd ==== systemsettings5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * app/SettingsBase: Fix systemsettings unable to start when missing plugin (kde#451054) * ModuleView: Simplify and fix custom headers logic ==== threadweaver ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI ==== upower ==== Version update (0.99.16+4 -> 0.99.17) Subpackages: libupower-glib3 typelib-1_0-UpowerGlib-1_0 - Update to version 0.99.17: + Upstream release, no changes, versionbump only. ==== util-linux ==== Version update (2.37.3 -> 2.37.4) Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 - Update to version 2.37.4: * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563). SUSE is not affected (bsc#1196241). - Fix "su -s" bash completion (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch). ==== util-linux-systemd ==== Version update (2.37.3 -> 2.37.4) - Update to version 2.37.4: * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563). SUSE is not affected (bsc#1196241). - Fix "su -s" bash completion (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch). - update to 2.37.3 (bsc#1194976): This release fixes two security mount(8) and umount(8) issues: * CVE-2021-3996 Improper UID check in libmount allows an unprivileged user to unmount FUSE filesystems of users with similar UID. * CVE-2021-3995 This issue is related to parsing the /proc/self/mountinfo file allows an unprivileged user to unmount other user's filesystems that are either world-writable themselves or mounted in a world-writable directory. ==== vim ==== Version update (8.2.4456 -> 8.2.4542) Subpackages: vim-data-common vim-small - Updated to version 8.2.4542, fixes the following problems * Terminal test may fail on some machines. * The GPM library can only be linked statically. * Vim9: compiling filter() call fails with funcref that has unknown arguments. * Vim9: compiling sort() call fails with a funcref that has unknown arguments. * Vim9: wrong error for defining dict function. * Not enough testing for quickfix code. * Completion only uses strict matching. * Dtrace files are recognized as filetype D. * Fuzzy completion does not order matches properly. "create-directories" as the final argument. * Running filetype test leaves file behind. * Coverity warns for uninitialized struct member. * Coverity warns for uninitialized variable. * Coverity warns for use of a freed function name. * Coverity warnds for not checking return value of ftell(). * Memory allocation failures not tested in quickfix code. * Fuzzy cmdline completion does not work for lower case. * Operator name spelled wrong. * Crash when using fuzzy completion. * No fuzzy completieon for maps and abbreviations. * Suspending with CTRL-Z does not work on Android. * Cmdline popup menu not removed when 'lazyredraw' is set. * No fuzzy cmdline completion for user defined completion. * Command completion makes two rounds to collect matches. * Vim9: some error messages are not tested. * Compiler warning for uninitialized variable. * Vim9: cannot compare with v:null. * Build error with +eval but without +channel or +job. * Failing test for comparing v:null with number. * Terminal focus reporting only works for xterm-like terminals. (Jonathan Rascher) * MS-Windows makefile dependencies are outdated. * No error if an option is given an invalid value with ":let &opt = val". * Options test fails in the GUI. * The find_tags() function is much too long. * Help test fails in 24 line terminal. * Coverity gives warnings after tags code refactoring. * Wrong color for half of wide character next to pum scrollbar. * Using <Plug> with "noremap" does not work. * Vim9: at the script level declarations leak from try block to catch and finally block. * Vim9: can declare a global variable on the command line. * With 'showbreak' set and after the end of the line the cursor may be displayed in the wrong position. * In the GUI a modifier is not recognized for the key typed after CTRL-X, which may result in a mapping to be used. (Daniel Steinberg) * Vim9: there is no point in supporting :Print and :mode. * When there is a partially matching map and modifyOtherKeys is active a full map may not work. * Vim9: outdated "autocmd nested" still works. * "pattern not found" for :global is not an error message. * Test fails because of new error message. * Vim9: cannot assign to a global variable on the command line. * Vim9: can declare a variable with ":va". * Vim9: shortening commands leads to confusing script. * Filetype test fails. * The find_tags_in_file() function is much too long. * Window-local directory is not applied if 'acd' fails. * Vim9: some flow commands can be shortened. * Old subsitute syntax is still supported. * Build failure without the +eval feature. * The binary tag search feature is always enabled. * Vim9: Can still use ":fini" and ":finis" for ":finish". * Using wrong highlight for cursor line number. * Build failure without the +diff feature. (John Marriott) * GUI test fails with Motif. (Dominique Pellé) * When gvim is started maximized the 'window' option isn't set properly. (Christian J. Robinson) * Some GUI tests don't work on Athena. * Vim9: cannot set variables to a null value. * The Athena GUI is old and does not work well. * Crash when using null_function for a partial. * Vim9: comparing partial with function fails. * Making comparison with null work changes legacy behavior. * LGTM warnings for condition always true and buffer size too small. * Suspending with CTRL-Z does not work on OpenBSD. * Vim9: no test that after assigning null the type is still checked. * Vim9: "is" operator with empty string and null returns true. * Filename modifer ":8" removes the filename. * Debugger test fails when breaking on expression. * Output from linter and language server shows up in git. * The find_tags_in_file() function is too long. * When comparing special v:none and v:null are handled the same when compiling. * Line number for error is off by one. * Crash in debugger when a variable is not available in the current block. * Vim9: "break" inside try/catch not handled correctly. ==== wireplumber ==== Subpackages: libwireplumber-0_4-0 wireplumber-audio - Add patch from upstream to fix a crash on tty switch (glfo#pipewire/wireplumber#193): * 0002-policy-bluetooth-fix-string.find-crash-with-nil-string.patch - Add patch from upstream to fix issues with PulseAudio support with PipeWire 0.3.48+ (glfo#pipewire/pipewire#2189): * 0003-si-audio-adapter-relax-format-parsing.patch - Some spec clean-up. ==== xdg-desktop-portal-kde ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 - Restore compatibility with older kf5-filesystem ==== yast2 ==== Version update (4.4.45 -> 4.4.47) - Extend the Package module to force using PackageSystem or PackageAI without having the mode into account. - AutoYaST: properly detect whether firewalld, bind and yast2-dns-server packages are installed when cloning a system (bsc#1196963). - 4.4.47 - Reverted LD_PRELOAD change (GitHub PR#1236) (bsc#1196326) - 4.4.46 - New doc: Invoking External Commands in YaST (in doc/)

1 0

New ARM Kubic snapshot 20220314 released!
by Guillaume Gardet 15 Mar '22

15 Mar '22

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=3&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ceph (16.2.6.463+g22e7612f9ad -> 16.2.7.596+g7d574789716) cockpit-podman curl (7.81.0 -> 7.82.0) dbus-1 (1.12.22 -> 1.14.0) etcd (3.4.16 -> 3.5.2) gnutls helm kbd kernel-source (5.16.11 -> 5.16.14) kubernetes1.22 libnvme (1.0~5 -> 1.0~6) logrotate lua54 lvm2 lvm2-device-mapper mozilla-nss (3.74 -> 3.75) nfs-utils nvme-cli (2.0~5 -> 2.0~6) openssl-1_1 pam permissions (1599_20210901 -> 1599_20220309) python-PyYAML python-SQLAlchemy (1.4.31 -> 1.4.32) qemu rdma-core util-linux (2.37.3 -> 2.37.4) util-linux-systemd (2.37.3 -> 2.37.4) vim (8.2.4456 -> 8.2.4542) yast2 (4.4.45 -> 4.4.47) === Details === ==== ceph ==== Version update (16.2.6.463+g22e7612f9ad -> 16.2.7.596+g7d574789716) Subpackages: ceph-common libcephfs2 librados2 librbd1 librgw2 python3-ceph-argparse python3-ceph-common python3-cephfs python3-rados python3-rbd python3-rgw - Update to 16.2.7-596-g7d574789716 + Update Prometheus Container image paths (pr #459) + mgr/dashboard: Fix documentation URL (pr #456) + mgr/dashboard: Adapt downstream branded navigation page (pr #454) - Update to 16.2.7-577-g3e3603b5dd1 + Update prometheus-server version - Update to 16.2.7-37-gb3be69440db: + (bsc#1194353) Downstream branding breaks dashboard npm build ==== cockpit-podman ==== - Add source-offest to _service to fix build error in Leap. ==== curl ==== Version update (7.81.0 -> 7.82.0) Subpackages: libcurl4 - Fix: openssl: fix CN check error code * Add curl-fix-verifyhost.patch - Update to 7.82.0: * curl: add --json command line option * curl: make it so that sensitive command line arguments do not show as easily in the output of ps(1) * curl_multi_socket.3: remove callback and typical usage descriptions * ftp: provide error message for control bytes in path * ldap: return CURLE_URL_MALFORMAT for bad URL * lib: remove support for CURL_DOES_CONVERSIONS * mqtt: plug some memory leaks * multi: allow user callbacks to call curl_multi_assign * multi: remember connection_id before returning connection to pool * multi: set in_callback for multi interface callbacks * netware: remove support * ngtcp2: adapt to changed end of headers callback proto * openldap: implement SASL authentication * openssl: return error if TLS 1.3 is requested when not supported * sectransp: mark a 3DES cipher as weak * smb: pass socket for writing and reading data instead of FIRSTSOCKET * tool_getparam: DNS options that need c-ares now fail without it * TPF: drop support * url: given a user in the URL, find pwd for that user in netrc * url: keep trailing dot in host name * urlapi: handle "redirects" smarter * urldata: CONN_IS_PROXIED replaces bits.proxy when proxy can be disabled * urldata: remove conn->bits.user_passwd ==== dbus-1 ==== Version update (1.12.22 -> 1.14.0) Subpackages: libdbus-1-3 - Update to version 1.14.0: + Dependencies: - dbus now requires at least a basic level of support for C99 variadic macros, as implemented in gcc >= 3, all versions of Clang, and MSVC >= 2005. In practice this requirement has existed since version 1.9.2, but it is now official. - dbus now requires a C99-compatible va_copy() macro (or a __va_copy() macro with the same behaviour), except when building for Windows using MSVC and CMake. - On Unix platforms, if getpwnam_r() and getgrnam_r() are implemented, they must be POSIX-conformant. The non-POSIX signature seen in ancient Solaris versions will no longer work. - GLib >= 2.38 is required if full test coverage is enabled (reduced from 2.40 in dbus 1.12.x.) - Building using CMake now requires CMake 3.4. - Building documentation using CMake now requires xsltproc, Docbook DTDs (for example docbook-xml on Debian derivatives), and Docbook XSLT stylesheets (for example docbook-xsl on Debian derivatives). Using KDE's meinproc4 documentation processor is no longer supported. + Build-time configuration changes: Move CMake build system to top level, matching normal practice for CMake projects + Deprecations: - Third-party software should install default dbus policies for the system bus into ${datadir}/dbus-1/system.d (this has been supported since dbus 1.10, released in August 2015). Installing default dbus policies in ${sysconfdir}/dbus-1/system.d is now considered to be deprecated. Policy files in ${sysconfdir}/dbus-1/system.d continue to be read, but this directory should only be used by system administrators wishing to override the default policies. - The ${datadir} applicable to dbus is usually /usr/share and the ${sysconfdir} is usually /etc. - A similar pattern applies to the session bus policies in session.d. - The dbus-send(1) man page now documents --bus and --peer instead of the old --address synonym for --peer, which has been deprecated since the introduction of --bus and --peer in 1.7.6 - The dbus-daemon man page now has scarier warnings about <allow_anonymous/> and non-local TCP, which are insecure and should not be used, particularly for the standard system and session buses. - DBusServer (and hence the dbus-daemon) no longer accepts usernames (login names) for the recommended EXTERNAL authentication mechanism, only numeric user IDs or the empty string. See 1.13.0 release notes for full details. + New features: - On Linux 4.13 or later when built against a suitable glibc version, GetConnectionCredentials() now includes UnixGroupIDs, the effective group IDs of the initiator of the connection, taken from SO_PEERGROUPS. - On Linux 4.13 or later, <policy group="?"> now uses the SO_PEERGROUPS credentials-passing socket option to get the effective group IDs of the initiator of the connection. See 1.13.4 release notes for details. - Add a --sender option to dbus-send, which requests a name and holds it until the signal has been sent - dbus-daemon <allow> and <deny> rules can now specify a send_destination_prefix attribute, which is like a combination of send_destination and the arg0namespace keyword in match rules. See 1.13.12 release notes for more details. - The dbus-daemon now filters the messages that it relays, removing header fields that it does not understand. Clients must not rely on this behaviour unless they have confirmed that they are connected to a suitable message bus implementation, for example by querying its Features property. - The dbus-daemon now emits a signal, ActivatableServicesChanged, when the list of activatable services may have changed. Support for this signal can be discovered by querying the Features property. - It is now possible to disable traditional (non-systemd) service activation at build-time (Autotools: - -disable-traditional-activation, CMake: - DENABLE_TRADITIONAL_ACTIVATION=OFF). See 1.13.10 release notes for details. - The API reference manual can be built as a Qt compiled help file if qhelpgenerator(-qt5) is available. See 1.13.16 release notes for details. + Miscellaneous behaviour changes: - When using the "user bus" (--enable-user-session), put the dbus-daemon in the session slice - Several environment variables set by systemd are no longer passed on to activated services - If the dbus-daemon is compiled for Linux with systemd support, it now informs systemd that it is ready for use via the sd_notify() mechanism. - Tarball releases no longer contain pre-2007 changelogs and are now compressed with xz, making them around 35% smaller. - Drop conditionals for old obsolete versions of openSUSE. - Rebase patches with quilt. - Use https for source and sig URL. ==== etcd ==== Version update (3.4.16 -> 3.5.2) - Add vendor-update.sh as a source to pass obs-service-source_validator - Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported - Update go version to 1.16 - Update etcd.conf variables - Add the new etcdutl into separate subpackage - Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl * see ./vendor-update.sh - Update to version 3.5.2: * version: bump up to 3.5.2 * Update dep: require gopkg.in/yaml.v2 v2.2.8 -> v2.4.0 due to: CVE-2019-11254. * fix runlock bug * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL * etcdserver,integration: Store remaining TTL on checkpoint * lease,integration: add checkpoint scheduling after leader change * set the backend again after recovering v3 backend from snapshot * *: implement a retry logic for auth old revision in the client * client/v3: refresh the token when ErrUserEmpty is received while retrying * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6) - Update to version 3.5.1: * version: 3.5.1 * Dockerfile: bump debian bullseye-20210927 * client: Use first endpoint as http2 authority header * tests: Add grpc authority e2e tests * client: Add grpc authority header integration tests * tests: Allow configuring integration tests to use TCP * test: Use unique number for grpc port * tests: Cleanup member interface by exposing Bridge directly * tests: Make using bridge optional * tests: Rename grpcAddr to grpcURL to imply that it includes schema * tests: Remove bridge dependency on unix * Decouple prefixArgs from os.Env dependency * server: Ensure that adding and removing members handle storev2 and backend out of sync * Stop using tip golang version in CI * fix self-signed-cert-validity parameter cannot be specified in the config file * fix health endpoint not usable when authentication is enabled * workflows: remove ARM64 job for maintenance - Update to version 3.5.0: * See link below, diff is too big https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0 ==== gnutls ==== - build with lto - build with -Wl,-z,now -Wl,-z,relro - build without -fanalyzer, which cuts build time in ~ half ==== helm ==== - avoid CGO to workaround missing gold dependency (bsc#1183043) ==== kbd ==== Subpackages: kbd-legacy - Refresh kbdsettings-nox86.patch to fix build on non-x86* architectures - [kbdsettings] try to run numlockbios from /usr/libexec/kbd/ first as Tumbleweed moved to this location a while ago (boo#1179295) - Fix build without %_distconfdir (see bsc#1195679) ==== kernel-source ==== Version update (5.16.11 -> 5.16.14) - Linux 5.16.14 (bsc#1012628). - Revert "ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE" (bsc#1012628). - xen/netfront: react properly to failing gnttab_end_foreign_access_ref() (bsc#1012628). - xen/gnttab: fix gnttab_end_foreign_access() without page specified (bsc#1012628). - xen/pvcalls: use alloc/free_pages_exact() (bsc#1012628). - xen/9p: use alloc/free_pages_exact() (bsc#1012628). - xen: remove gnttab_query_foreign_access() (bsc#1012628). - xen/gntalloc: don't use gnttab_query_foreign_access() (bsc#1012628). - xen/scsifront: don't use gnttab_query_foreign_access() for mapped status (bsc#1012628). - xen/netfront: don't use gnttab_query_foreign_access() for mapped status (bsc#1012628). - xen/blkfront: don't use gnttab_query_foreign_access() for mapped status (bsc#1012628). - xen/grant-table: add gnttab_try_end_foreign_access() (bsc#1012628). - xen/xenbus: don't let xenbus_grant_ring() remove grants in error case (bsc#1012628). - ARM: fix build warning in proc-v7-bugs.c (bsc#1012628). - arm64: Do not include __READ_ONCE() block in assembly files (bsc#1012628). - ARM: Do not use NOCROSSREFS directive with ld.lld (bsc#1012628). - ARM: fix co-processor register typo (bsc#1012628). - ARM: fix build error when BPF_SYSCALL is disabled (bsc#1012628). - arm64: proton-pack: Include unprivileged eBPF status in Spectre v2 mitigation reporting (bsc#1012628). - arm64: Use the clearbhb instruction in mitigations (bsc#1012628). - KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated (bsc#1012628). - arm64: Mitigate spectre style branch history side channels (bsc#1012628). - Update config files. - arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 (bsc#1012628). - arm64: Add percpu vectors for EL1 (bsc#1012628). - arm64: entry: Add macro for reading symbol addresses from the trampoline (bsc#1012628). - arm64: entry: Add vectors that have the bhb mitigation sequences (bsc#1012628). - arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations (bsc#1012628). - arm64: entry: Allow the trampoline text to occupy multiple pages (bsc#1012628). - arm64: entry: Make the kpti trampoline's kpti sequence optional (bsc#1012628). - arm64: entry: Move trampoline macros out of ifdef'd section (bsc#1012628). - arm64: entry: Don't assume tramp_vectors is the start of the vectors (bsc#1012628). - arm64: entry: Allow tramp_alias to access symbols after the 4K boundary (bsc#1012628). - arm64: entry: Move the trampoline data page before the text page (bsc#1012628). - arm64: entry: Free up another register on kpti's tramp_exit path (bsc#1012628). - arm64: entry: Make the trampoline cleanup optional (bsc#1012628). - KVM: arm64: Allow indirect vectors to be used without SPECTRE_V3A (bsc#1012628). - arm64: spectre: Rename spectre_v4_patch_fw_mitigation_conduit (bsc#1012628). - arm64: entry.S: Add ventry overflow sanity checks (bsc#1012628). - arm64: cpufeature: add HWCAP for FEAT_RPRES (bsc#1012628). - arm64: cpufeature: add HWCAP for FEAT_AFP (bsc#1012628). - arm64: add ID_AA64ISAR2_EL1 sys register (bsc#1012628). - ARM: include unprivileged BPF status in Spectre V2 reporting (bsc#1012628). - ARM: Spectre-BHB workaround (bsc#1012628). - Update config files. - ARM: use LOADADDR() to get load address of sections (bsc#1012628). - ARM: early traps initialisation (bsc#1012628). - ARM: report Spectre v2 status through sysfs (bsc#1012628). - Update config files. - x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT (bsc#1012628). - x86/speculation: Warn about Spectre v2 LFENCE mitigation (bsc#1012628). - x86/speculation: Update link to AMD speculation whitepaper (bsc#1012628). - x86/speculation: Use generic retpoline by default on AMD (bsc#1012628). - x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting (bsc#1012628). - Documentation/hw-vuln: Update spectre doc (bsc#1012628). - x86/speculation: Add eIBRS + Retpoline options (bsc#1012628). - x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE (bsc#1012628). - commit 80acc65 - Bluetooth: btusb: Add missing Chicony device for Realtek RTL8723BE (bsc#1196779). - commit 714ef34 - Linux 5.16.13 (bsc#1012628). - mac80211_hwsim: report NOACK frames in tx_status (bsc#1012628). - mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work (bsc#1012628). - i2c: bcm2835: Avoid clock stretching timeouts (bsc#1012628). - ASoC: rt5682s: do not block workqueue if card is unbound (bsc#1012628). - ASoC: rt5668: do not block workqueue if card is unbound (bsc#1012628). - ASoC: rt5682: do not block workqueue if card is unbound (bsc#1012628). - regulator: core: fix false positive in regulator_late_cleanup() (bsc#1012628). - Input: clear BTN_RIGHT/MIDDLE on buttonpads (bsc#1012628). - btrfs: get rid of warning on transaction commit when using flushoncommit (bsc#1012628). - KVM: arm64: vgic: Read HW interrupt pending state from the HW (bsc#1012628). - block: loop:use kstatfs.f_bsize of backing file to set discard granularity (bsc#1012628). - tipc: fix a bit overflow in tipc_crypto_key_rcv() (bsc#1012628). - cifs: do not use uninitialized data in the owner/group sid (bsc#1012628). - cifs: fix double free race when mount fails in cifs_get_root() (bsc#1012628). - HID: amd_sfh: Handle amd_sfh work buffer in PM ops (bsc#1012628). - HID: amd_sfh: Add functionality to clear interrupts (bsc#1012628). - HID: amd_sfh: Add interrupt handler to process interrupts (bsc#1012628). - cifs: modefromsids must add an ACE for authenticated users (bsc#1012628). - selftests/seccomp: Fix seccomp failure by adding missing headers (bsc#1012628). - drm/amd/pm: correct UMD pstate clocks for Dimgrey Cavefish and Beige Goby (bsc#1012628). - selftests/ftrace: Do not trace do_softirq because of PREEMPT_RT (bsc#1012628). - dmaengine: shdma: Fix runtime PM imbalance on error (bsc#1012628). - i2c: cadence: allow COMPILE_TEST (bsc#1012628). - i2c: imx: allow COMPILE_TEST (bsc#1012628). - i2c: qup: allow COMPILE_TEST (bsc#1012628). - net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990 (bsc#1012628). - block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern (bsc#1012628). - exfat: reuse exfat_inode_info variable instead of calling EXFAT_I() (bsc#1012628). - exfat: fix i_blocks for files truncated over 4 GiB (bsc#1012628). - tracing: Add test for user space strings when filtering on string pointers (bsc#1012628). - arm64: Mark start_backtrace() notrace and NOKPROBE_SYMBOL (bsc#1012628). - serial: stm32: prevent TDR register overwrite when sending x_char (bsc#1012628). - KVM: arm64: Workaround Cortex-A510's single-step and PAC trap errata (bsc#1012628). - ext4: drop ineligible txn start stop APIs (bsc#1012628). - ext4: simplify updating of fast commit stats (bsc#1012628). - ext4: fast commit may not fallback for ineligible commit (bsc#1012628). - ext4: fast commit may miss file actions (bsc#1012628). - sched/fair: Fix fault in reweight_entity (bsc#1012628). - KVM: x86: Add KVM_CAP_ENABLE_CAP to x86 (bsc#1012628). - ata: pata_hpt37x: fix PCI clock detection (bsc#1012628). - drm/amdgpu: check vm ready by amdgpu_vm->evicting flag (bsc#1012628). - tracing: Add ustring operation to filtering string pointers (bsc#1012628). - ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report() (bsc#1012628). - btrfs: defrag: bring back the old file extent search behavior (bsc#1012628). - btrfs: defrag: don't use merged extent map for their generation check (bsc#1012628). - ALSA: intel_hdmi: Fix reference to PCM buffer address (bsc#1012628). - ucounts: Fix systemd LimitNPROC with private users regression (bsc#1012628). - binfmt_elf: Avoid total_mapping_size for ET_EXEC (bsc#1012628). - riscv/efi_stub: Fix get_boot_hartid_from_fdt() return value (bsc#1012628). - riscv: Fix config KASAN && SPARSEMEM && !SPARSE_VMEMMAP (bsc#1012628). - riscv: Fix config KASAN && DEBUG_VIRTUAL (bsc#1012628). - iwlwifi: mvm: check debugfs_dir ptr before use (bsc#1012628). - ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min (bsc#1012628). - iommu/vt-d: Fix double list_add when enabling VMD in scalable mode (bsc#1012628). - iommu/amd: Recover from event log overflow (bsc#1012628). - drm/i915: s/JSP2/ICP2/ PCH (bsc#1012628). - drm/amd/display: Reduce dmesg error to a debug print (bsc#1012628). - xen/netfront: destroy queues before real_num_tx_queues is zeroed (bsc#1012628). - thermal: core: Fix TZ_GET_TRIP NULL pointer dereference (bsc#1012628). - mac80211: fix EAPoL rekey fail in 802.3 rx path (bsc#1012628). - blktrace: fix use after free for struct blk_trace (bsc#1012628). - ntb: intel: fix port config status offset for SPR (bsc#1012628). - mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls (bsc#1012628). - xfrm: fix MTU regression (bsc#1012628). - netfilter: fix use-after-free in __nf_register_net_hook() (bsc#1012628). - bpf, sockmap: Do not ignore orig_len parameter (bsc#1012628). - xfrm: fix the if_id check in changelink (bsc#1012628). - xfrm: enforce validity of offload input flags (bsc#1012628). - e1000e: Correct NVM checksum verification flow (bsc#1012628). - net: fix up skbs delta_truesize in UDP GRO frag_list (bsc#1012628). - netfilter: nf_queue: don't assume sk is full socket (bsc#1012628). - netfilter: nf_queue: fix possible use-after-free (bsc#1012628). - netfilter: nf_queue: handle socket prefetch (bsc#1012628). - batman-adv: Request iflink once in batadv-on-batadv check (bsc#1012628). - batman-adv: Request iflink once in batadv_get_real_netdevice (bsc#1012628). - batman-adv: Don't expect inter-netns unique iflink indices (bsc#1012628). - net: ipv6: ensure we call ipv6_mc_down() at most once (bsc#1012628). - net: dcb: flush lingering app table entries for unregistered devices (bsc#1012628). - net: ipa: fix a build dependency (bsc#1012628). - net: ipa: add an interconnect dependency (bsc#1012628). - net/smc: fix connection leak (bsc#1012628). - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client (bsc#1012628). - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server (bsc#1012628). - btrfs: fix ENOSPC failure when attempting direct IO write into NOCOW range (bsc#1012628). - platform/x86: amd-pmc: Set QOS during suspend on CZN w/ timer wakeup (bsc#1012628). - net: dsa: microchip: fix bridging with more than two member ports (bsc#1012628). - mac80211: fix forwarded mesh frames AC & queue selection (bsc#1012628). - net: stmmac: fix return value of __setup handler (bsc#1012628). - mac80211: treat some SAE auth steps as final (bsc#1012628). - iavf: Fix missing check for running netdev (bsc#1012628). - net: sxgbe: fix return value of __setup handler (bsc#1012628). - ibmvnic: register netdev after init of adapter (bsc#1012628). - net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe() (bsc#1012628). - ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc() (bsc#1012628). - iavf: Fix deadlock in iavf_reset_task (bsc#1012628). - efivars: Respect "block" flag in efivar_entry_set_safe() (bsc#1012628). - auxdisplay: lcd2s: Fix lcd2s_redefine_char() feature (bsc#1012628). - firmware: arm_scmi: Remove space in MODULE_ALIAS name (bsc#1012628). - ASoC: cs4265: Fix the duplicated control name (bsc#1012628). - auxdisplay: lcd2s: Fix memory leak in ->remove() (bsc#1012628). - auxdisplay: lcd2s: Use proper API to free the instance of charlcd object (bsc#1012628). - can: gs_usb: change active_channels's type from atomic_t to u8 (bsc#1012628). - iommu/tegra-smmu: Fix missing put_device() call in tegra_smmu_find (bsc#1012628). - arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output (bsc#1012628). - igc: igc_read_phy_reg_gpy: drop premature return (bsc#1012628). - ARM: Fix kgdb breakpoint for Thumb2 (bsc#1012628). - mips: setup: fix setnocoherentio() boolean setting (bsc#1012628). - ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions (bsc#1012628). - mptcp: Correctly set DATA_FIN timeout when number of retransmits is large (bsc#1012628). - selftests: mlxsw: tc_police_scale: Make test more robust (bsc#1012628). - pinctrl: sunxi: Use unique lockdep classes for IRQs (bsc#1012628). - igc: igc_write_phy_reg_gpy: drop premature return (bsc#1012628). - ibmvnic: free reset-work-item when flushing (bsc#1012628). - memfd: fix F_SEAL_WRITE after shmem huge page allocated (bsc#1012628). - s390/setup: preserve memory at OLDMEM_BASE and OLDMEM_SIZE (bsc#1012628). - s390/extable: fix exception table sorting (bsc#1012628). - sched: Fix yet more sched_fork() races (bsc#1012628). - arm64: dts: rockchip: drop pclk_xpcs from gmac0 on rk3568 (bsc#1012628). - arm64: dts: juno: Remove GICv2m dma-range (bsc#1012628). - arm64: dts: rockchip: fix Quartz64-A ddr regulator voltage (bsc#1012628). - arm64: dts: imx8mm: Fix VPU Hanging (bsc#1012628). - iommu/amd: Fix I/O page table memory leak (bsc#1012628). - MIPS: ralink: mt7621: do memory detection on KSEG1 (bsc#1012628). - ARM: dts: switch timer config to common devkit8000 devicetree (bsc#1012628). - ARM: dts: Use 32KiHz oscillator on devkit8000 (bsc#1012628). - soc: fsl: guts: Revert commit 3c0d64e867ed (bsc#1012628). - soc: fsl: guts: Add a missing memory allocation failure check (bsc#1012628). - soc: fsl: qe: Check of ioremap return value (bsc#1012628). - soc: imx: gpcv2: Fix clock disabling imbalance in error path (bsc#1012628). - netfilter: nf_tables: prefer kfree_rcu(ptr, rcu) variant (bsc#1012628). - ARM: tegra: Move panels to AUX bus (bsc#1012628). - Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks (bsc#1012628). - can: etas_es58x: change opened_channel_cnt's type from atomic_t to u8 (bsc#1012628). - net: stmmac: enhance XDP ZC driver level switching performance (bsc#1012628). - net: stmmac: only enable DMA interrupts when ready (bsc#1012628). - ibmvnic: initialize rc before completing wait (bsc#1012628). - ibmvnic: define flush_reset_queue helper (bsc#1012628). - ibmvnic: complete init_done on transport events (bsc#1012628). - ibmvnic: Update driver return codes (bsc#1012628). - ibmvnic: init init_done_rc earlier (bsc#1012628). - ibmvnic: clear fop when retrying probe (bsc#1012628). - ibmvnic: Allow queueing resets during probe (bsc#1012628). - net: chelsio: cxgb3: check the return value of pci_find_capability() (bsc#1012628). - net: sparx5: Fix add vlan when invalid operation (bsc#1012628). - iavf: Add trace while removing device (bsc#1012628). - iavf: Rework mutexes for better synchronisation (bsc#1012628). - iavf: Add waiting so the port is initialized in remove (bsc#1012628). - iavf: Fix init state closure on remove (bsc#1012628). - iavf: Fix locking for VIRTCHNL_OP_GET_OFFLOAD_VLAN_V2_CAPS (bsc#1012628). - iavf: Fix race in init state (bsc#1012628). - iavf: Fix __IAVF_RESETTING state usage (bsc#1012628). - drm/i915/guc/slpc: Correct the param count for unset param (bsc#1012628). - drm/bridge: ti-sn65dsi86: Properly undo autosuspend (bsc#1012628). - e1000e: Fix possible HW unit hang after an s0ix exit (bsc#1012628). - MIPS: ralink: mt7621: use bitwise NOT instead of logical (bsc#1012628). - nl80211: Handle nla_memdup failures in handle_nan_filter (bsc#1012628). - ptp: ocp: Add ptp_ocp_adjtime_coarse for large adjustments (bsc#1012628). - drm/amdgpu: fix suspend/resume hang regression (bsc#1012628). - net: dcb: disable softirqs in dcbnl_flush_dev() (bsc#1012628). - selftests: mlxsw: resource_scale: Fix return value (bsc#1012628). - net: stmmac: perserve TX and RX coalesce value during XDP setup (bsc#1012628). - Input: elan_i2c - move regulator_[en|dis]able() out of elan_[en|dis]able_power() (bsc#1012628). - Input: elan_i2c - fix regulator enable count imbalance after suspend/resume (bsc#1012628). - Input: samsung-keypad - properly state IOMEM dependency (bsc#1012628). - HID: add mapping for KEY_DICTATE (bsc#1012628). - HID: add mapping for KEY_ALL_APPLICATIONS (bsc#1012628). - tracing/histogram: Fix sorting on old "cpu" value (bsc#1012628). - tracing: Fix return value of __setup handlers (bsc#1012628). - btrfs: fix lost prealloc extents beyond eof after full fsync (bsc#1012628). - btrfs: fix relocation crash due to premature return from btrfs_commit_transaction() (bsc#1012628). - btrfs: subpage: fix a wrong check on subpage->writers (bsc#1012628). - btrfs: do not WARN_ON() if we have PageError set (bsc#1012628). - btrfs: qgroup: fix deadlock between rescan worker and remove qgroup (bsc#1012628). - btrfs: add missing run of delayed items after unlink during log replay (bsc#1012628). - btrfs: fallback to blocking mode when doing async dio over multiple extents (bsc#1012628). - btrfs: do not start relocation until in progress drops are done (bsc#1012628). - Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6" (bsc#1012628). - proc: fix documentation and description of pagemap (bsc#1012628). - x86/kvmclock: Fix Hyper-V Isolated VM's boot issue when vCPUs > 64 (bsc#1012628). - s390/ftrace: fix arch_ftrace_get_regs implementation (bsc#1012628). - s390/ftrace: fix ftrace_caller/ftrace_regs_caller generation (bsc#1012628). - KVM: x86/mmu: Passing up the error state of mmu_alloc_shadow_roots() (bsc#1012628). - Update config files. - commit bd40cb2 - Update patches.kernel.org/5.16.11-207-lib-iov_iter-initialize-flags-in-new-pipe_bu… (bsc#1012628 bsc#1196584 CVE-2022-0847). Add references. - commit 82f40a9 - nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION (CVE-2022-26490 bsc#1196830). - commit b002fe2 - config: ppc64{,le}: build vmx-crypto as module (bsc#1195768) Building CONFIG_CRYPTO_DEV_VMX_ENCRYPT as module is the default in mainline since v4.8, we use it in SLES and already in config/ppc64/default. Thus unify it in the other configs. There are build dependencies which has been fixed in mainline 647d41d3952d ("crypto: vmx - add missing dependencies") (currently still at maintainer herbert/cryptodev-2.6 tree) But instead of waiting commit to be accepted or backporting it we just unify configs, which is useful anyway - commit 70a0d71 - kernel-binary.spec: Also exclude the kernel signing key from devel package. There is a check in OBS that fails when it is included. Also the key is not reproducible. Fixes: bb988d4625a3 ("kernel-binary: Do not include sourcedir in certificate path.") - commit 68fa069 - rpm/check-for-config-changes: Ignore PAHOLE_VERSION. - commit 88ba5ec - Linux 5.16.12 (bsc#1012628). - memblock: use kfree() to release kmalloced memblock regions (bsc#1012628). - gpio: tegra186: Fix chip_data type confusion (bsc#1012628). - pinctrl: k210: Fix bias-pull-up (bsc#1012628). - pinctrl: fix loop in k210_pinconf_get_drive() (bsc#1012628). - tty: n_gsm: fix deadlock in gsmtty_open() (bsc#1012628). - tty: n_gsm: fix wrong modem processing in convergence layer type 2 (bsc#1012628). - tty: n_gsm: fix wrong tty control line for flow control (bsc#1012628). - tty: n_gsm: fix NULL pointer access due to DLCI release (bsc#1012628). - tty: n_gsm: fix proper link termination after failed open (bsc#1012628). - tty: n_gsm: fix encoding of command/response bit (bsc#1012628). - tty: n_gsm: fix encoding of control signal octet bit DV (bsc#1012628). - hugetlbfs: fix a truncation issue in hugepages parameter (bsc#1012628). - mm/hugetlb: fix kernel crash with hugetlb mremap (bsc#1012628). - riscv: fix oops caused by irqsoff latency tracer (bsc#1012628). - riscv: fix nommu_k210_sdcard_defconfig (bsc#1012628). - IB/qib: Fix duplicate sysfs directory name (bsc#1012628). - tps6598x: clear int mask on probe failure (bsc#1012628). - staging: fbtft: fb_st7789v: reset display before initialization (bsc#1012628). - thermal: int340x: fix memory leak in int3400_notify() (bsc#1012628). - RDMA/cma: Do not change route.addr.src_addr outside state checks (bsc#1012628). - btrfs: reduce extent threshold for autodefrag (bsc#1012628). - btrfs: autodefrag: only scan one inode once (bsc#1012628). - btrfs: defrag: allow defrag_one_cluster() to skip large extent which is not a target (bsc#1012628). - btrfs: prevent copying too big compressed lzo segment (bsc#1012628). - btrfs: defrag: remove an ambiguous condition for rejection (bsc#1012628). - btrfs: defrag: don't defrag extents which are already at max capacity (bsc#1012628). - btrfs: defrag: don't try to merge regular extents with preallocated extents (bsc#1012628). - driver core: Free DMA range map when device is released (bsc#1012628). - mtd: core: Fix a conflict between MTD and NVMEM on wp-gpios property (bsc#1012628). - nvmem: core: Fix a conflict between MTD and NVMEM on wp-gpios property (bsc#1012628). - xhci: Prevent futile URB re-submissions due to incorrect return value (bsc#1012628). - xhci: re-initialize the HC during resume if HCE was set (bsc#1012628). - usb: dwc3: gadget: Let the interrupt handler disable bottom halves (bsc#1012628). - usb: dwc3: pci: Fix Bay Trail phy GPIO mappings (bsc#1012628). - usb: dwc3: pci: Add "snps,dis_u2_susphy_quirk" for Intel Bay Trail (bsc#1012628). - usb: dwc2: drd: fix soft connect when gadget is unconfigured (bsc#1012628). - USB: serial: option: add Telit LE910R1 compositions (bsc#1012628). - USB: serial: option: add support for DW5829e (bsc#1012628). - tracefs: Set the group ownership in apply_options() not parse_options() (bsc#1012628). - USB: gadget: validate endpoint index for xilinx udc (bsc#1012628). - usb: gadget: rndis: add spinlock for rndis response list (bsc#1012628). - Revert "USB: serial: ch341: add new Product ID for CH341A" (bsc#1012628). - ata: pata_hpt37x: disable primary channel on HPT371 (bsc#1012628). - sc16is7xx: Fix for incorrect data being transmitted (bsc#1012628). - iio: Fix error handling for PM (bsc#1012628). - iio: imu: st_lsm6dsx: wait for settling time in st_lsm6dsx_read_oneshot (bsc#1012628). - iio: accel: fxls8962af: add padding to regmap for SPI (bsc#1012628). - iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits (bsc#1012628). - iio: adc: tsc2046: fix memory corruption by preventing array overflow (bsc#1012628). - iio: adc: men_z188_adc: Fix a resource leak in an error handling path (bsc#1012628). - iio:imu:adis16480: fix buffering for devices with no burst mode (bsc#1012628). - tracing: Have traceon and traceoff trigger honor the instance (bsc#1012628). - tracing: Dump stacktrace trigger to the corresponding instance (bsc#1012628). - bpf: Fix crash due to out of bounds access into reg2btf_ids (bsc#1012628). - bpf: Extend kfunc with PTR_TO_CTX, PTR_TO_MEM argument support (bsc#1012628). - RDMA/ib_srp: Fix a deadlock (bsc#1012628). - configfs: fix a race in configfs_{,un}register_subsystem() (bsc#1012628). - bnxt_en: Increase firmware message response DMA wait time (bsc#1012628). - RDMA/rtrs-clt: Move free_permit from free_clt to rtrs_clt_close (bsc#1012628). - RDMA/rtrs-clt: Fix possible double free in error case (bsc#1012628). - net-timestamp: convert sk->sk_tskey to atomic_t (bsc#1012628). - net: use sk_is_tcp() in more places (bsc#1012628). - regmap-irq: Update interrupt clear register for proper reset (bsc#1012628). - gpio: rockchip: Reset int_bothedge when changing trigger (bsc#1012628). - PCI: mvebu: Fix device enumeration regression (bsc#1012628). - spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op() (bsc#1012628). - net/mlx5e: Add missing increment of count (bsc#1012628). - net/mlx5: Update log_max_qp value to be 17 at most (bsc#1012628). - net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte (bsc#1012628). - net/mlx5e: kTLS, Use CHECKSUM_UNNECESSARY for device-offloaded packets (bsc#1012628). - net/mlx5e: MPLSoUDP decap, fix check for unsupported matches (bsc#1012628). - net/mlx5: DR, Fix the threshold that defines when pool sync is initiated (bsc#1012628). - net/mlx5: Fix wrong limitation of metadata match on ecpf (bsc#1012628). - net/mlx5: Fix possible deadlock on rule deletion (bsc#1012628). - net/mlx5: DR, Don't allow match on IP w/o matching on full ethertype/ip_version (bsc#1012628). - ibmvnic: schedule failover only if vioctl fails (bsc#1012628). - net/mlx5: DR, Cache STE shadow memory (bsc#1012628). - udp_tunnel: Fix end of loop test in udp_tunnel_nic_unregister() (bsc#1012628). - surface: surface3_power: Fix battery readings on batteries without a serial number (bsc#1012628). - net/smc: Use a mutex for locking "struct smc_pnettable" (bsc#1012628). - netfilter: nf_tables: fix memory leak during stateful obj update (bsc#1012628). - net: mdio-ipq4019: add delay after clock enable (bsc#1012628). - nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac() (bsc#1012628). - net: dsa: avoid call to __dev_set_promiscuity() while rtnl_mutex isn't held (bsc#1012628). - netfilter: nf_tables: unregister flowtable hooks on netns exit (bsc#1012628). - net: Force inlining of checksum functions in net/checksum.h (bsc#1012628). - net: ll_temac: check the return value of devm_kmalloc() (bsc#1012628). - net/sched: act_ct: Fix flow table lookup after ct clear or switching zones (bsc#1012628). - drm/amd/display: For vblank_disable_immediate, check PSR is really used (bsc#1012628). - drm/i915/dg2: Print PHY name properly on calibration error (bsc#1012628). - drm/vc4: crtc: Fix runtime_pm reference counting (bsc#1012628). - block: clear iocb->private in blkdev_bio_end_io_async() (bsc#1012628). - net/mlx5e: TC, Reject rules with drop and modify hdr action (bsc#1012628). - net/mlx5e: TC, Reject rules with forward and drop actions (bsc#1012628). - net/mlx5e: Fix wrong return value on ioctl EEPROM query failure (bsc#1012628). - drm/edid: Always set RGB444 (bsc#1012628). - openvswitch: Fix setting ipv6 fields causing hw csum failure (bsc#1012628). - net: mv643xx_eth: process retval from of_get_mac_address (bsc#1012628). - gso: do not skip outer ip header in case of ipip and net_failover (bsc#1012628). - clk: qcom: gcc-msm8994: Remove NoC clocks (bsc#1012628). - tipc: Fix end of loop tests for list_for_each_entry() (bsc#1012628). - nvme: also mark passthrough-only namespaces ready in nvme_update_ns_info (bsc#1012628). - net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends (bsc#1012628). - io_uring: add a schedule point in io_add_buffers() (bsc#1012628). - bpf: Add schedule points in batch ops (bsc#1012628). - bpf: Fix a bpf_timer initialization issue (bsc#1012628). - selftests: bpf: Check bpf_msg_push_data return value (bsc#1012628). - bpf: Do not try bpf_msg_push_data with len 0 (bsc#1012628). - bpf: Fix crash due to incorrect copy_map_value (bsc#1012628). - net/mlx5: Update the list of the PCI supported devices (bsc#1012628). - ice: initialize local variable 'tlv' (bsc#1012628). - ice: check the return of ice_ptp_gettimex64 (bsc#1012628). - ice: fix concurrent reset and removal of VFs (bsc#1012628). - ice: fix setting l4 port flag when adding filter (bsc#1012628). - net/mlx5: Fix tc max supported prio for nic mode (bsc#1012628). - hwmon: Handle failure to register sensor with thermal zone correctly (bsc#1012628). - bnxt_en: Restore the resets_reliable flag in bnxt_open() (bsc#1012628). - bnxt_en: Fix incorrect multicast rx mask setting when not requested (bsc#1012628). - bnxt_en: Fix occasional ethtool -t loopback test failures (bsc#1012628). - bnxt_en: Fix offline ethtool selftest with RDMA enabled (bsc#1012628). - bnxt_en: Fix active FEC reporting to ethtool (bsc#1012628). - bnxt_en: Fix devlink fw_activate (bsc#1012628). - bnx2x: fix driver load from initrd (bsc#1012628). - selftests: mptcp: be more conservative with cookie MPJ limits (bsc#1012628). - selftests: mptcp: fix diag instability (bsc#1012628). - mptcp: add mibs counter for ignored incoming options (bsc#1012628). - mptcp: fix race in incoming ADD_ADDR option processing (bsc#1012628). - perf data: Fix double free in perf_session__delete() (bsc#1012628). - perf evlist: Fix failed to use cpu list for uncore events (bsc#1012628). - gpu: host1x: Always return syncpoint value when waiting (bsc#1012628). - Revert "i40e: Fix reset bw limit when DCB enabled with 1 TC" (bsc#1012628). - ping: remove pr_err from ping_lookup (bsc#1012628). - netfilter: nf_tables_offload: incorrect flow offload action array size (bsc#1012628). - netfilter: xt_socket: missing ifdef CONFIG_IP6_NF_IPTABLES dependency (bsc#1012628). - netfilter: xt_socket: fix a typo in socket_mt_destroy() (bsc#1012628). - CDC-NCM: avoid overflow in sanity checking (bsc#1012628). - USB: zaurus: support another broken Zaurus (bsc#1012628). - sr9700: sanity check for packet length (bsc#1012628). - drm/i915: Fix bw atomic check when switching between SAGV vs. no SAGV (bsc#1012628). - drm/i915: Correctly populate use_sagv_wm for all pipes (bsc#1012628). - drm/i915: Disconnect PHYs left connected by BIOS on disabled ports (bsc#1012628). - drm/i915: Widen the QGV point mask (bsc#1012628). - drm/amdgpu: do not enable asic reset for raven2 (bsc#1012628). - drm/amdgpu: disable MMHUB PG for Picasso (bsc#1012628). - drm/amd: Check if ASPM is enabled from PCIe subsystem (bsc#1012628). - drm/amd/pm: fix some OEM SKU specific stability issues (bsc#1012628). - drm/amd/display: Protect update_bw_bounding_box FPU code (bsc#1012628). - drm/amd/display: Fix stream->link_enc unassigned during stream removal (bsc#1012628). - KVM: x86: nSVM: disallow userspace setting of MSR_AMD64_TSC_RATIO to non default value when tsc scaling disabled (bsc#1012628). - KVM: x86/mmu: make apf token non-zero to fix bug (bsc#1012628). - parisc/unaligned: Fix ldw() and stw() unalignment handlers (bsc#1012628). - parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel (bsc#1012628). - vhost/vsock: don't check owner in vhost_vsock_stop() while releasing (bsc#1012628). - selinux: fix misuse of mutex_is_locked() (bsc#1012628). - io_uring: disallow modification of rsrc_data during quiesce (bsc#1012628). - io_uring: don't convert to jiffies for waiting on timeouts (bsc#1012628). - clk: jz4725b: fix mmc0 clock gating (bsc#1012628). - slab: remove __alloc_size attribute from __kmalloc_track_caller (bsc#1012628). - btrfs: tree-checker: check item_size for dev_item (bsc#1012628). - btrfs: tree-checker: check item_size for inode_item (bsc#1012628). - cgroup-v1: Correct privileges check in release_agent writes (bsc#1012628). - cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (bsc#1012628). - mm/filemap: Fix handling of THPs in generic_file_buffered_read() (bsc#1012628). - commit 9b89dd3 ==== kubernetes1.22 ==== - avoid bashism in client-common postinstall script (bsc#1195391) ==== libnvme ==== Version update (1.0~5 -> 1.0~6) - Update to version 1.0-rc6: * tree: add nvme_ctrl_get_ana_state() (bsc#1195938) * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938) * ioctl.h: ns list bug fix (wrong cns value) * types.h: Key Value Command Set Identifier added (NVME_CSI_KV) * types: fix status code type bug (wrong masking) ==== logrotate ==== - Added own logrotate.service file in order to define a new order of parsed config files: /usr/etc/logrotate.conf Default configuration file defined by the vendor. /usr/etc/logrotate.d/* Directory for additional configuration files defined by the vendor. /etc/logrotate.conf Default configuration file defined by the administrator. (optional) /etc/logrotate.d/* Directory for additional configuration files defined by the administrator. (optional) - drop logrotate-3.19.0-systemd_add_home_env.patch: - included in new logrotate.service - Adapted man page: logrotate-3.19.0-man_logrotate.patch ==== lua54 ==== - Added patches from upstream: * luabugs1.patch * luabugs2.patch - Adjust buildsystem so that it matches upstream git (testes??) - Drop the lua_docdir define, package docs in the standard location. Instead just silently drop packaging the README with the path that does not makes sense for a rpm package, but for a source tarball install. Simpler solution to boo#1186233. ==== lvm2 ==== Subpackages: liblvm2cmd2_03 - Udev database has incomplete information about device /dev/sda. (bsc#1181242) + 0024-pvscan-don-t-use-udev-for-external-device-info.patch ==== lvm2-device-mapper ==== Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 - Udev database has incomplete information about device /dev/sda. (bsc#1181242) + 0024-pvscan-don-t-use-udev-for-external-device-info.patch ==== mozilla-nss ==== Version update (3.74 -> 3.75) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs - update to NSS 3.75 * bmo#1749030 - This patch adds gcc-9 and gcc-10 to the CI. * bmo#1749794 - Make DottedOIDToCode.py compatible with python3. * bmo#1749475 - Avoid undefined shift in SSL_CERT_IS while fuzzing. * bmo#1748386 - Remove redundant key type check. * bmo#1749869 - Update ABI expectations to match ECH changes. * bmo#1748386 - Enable CKM_CHACHA20. * bmo#1747327 - check return on NSS_NoDB_Init and NSS_Shutdown. * bmo#1747310 - real move assignment operator. * bmo#1748245 - Run ECDSA test vectors from bltest as part of the CI tests. * bmo#1743302 - Add ECDSA test vectors to the bltest command line tool. * bmo#1747772 - Allow to build using clang's integrated assembler. * bmo#1321398 - Allow to override python for the build. * bmo#1747317 - test HKDF output rather than input. * bmo#1747316 - Use ASSERT macros to end failed tests early. * bmo#1747310 - move assignment operator for DataBuffer. * bmo#1712879 - Add test cases for ECH compression and unexpected extensions in SH. * bmo#1725938 - Update tests for ECH-13. * bmo#1725938 - Tidy up error handling. * bmo#1728281 - Add tests for ECH HRR Changes. * bmo#1728281 - Server only sends GREASE HRR extension if enabled by preference. * bmo#1725938 - Update generation of the Associated Data for ECH-13. * bmo#1712879 - When ECH is accepted, reject extensions which were only advertised in the Outer Client Hello. * bmo#1712879 - Allow for compressed, non-contiguous, extensions. * bmo#1712879 - Scramble the PSK extension in CHOuter. * bmo#1712647 - Split custom extension handling for ECH. * bmo#1728281 - Add ECH-13 HRR Handling. * bmo#1677181 - Client side ECH padding. * bmo#1725938 - Stricter ClientHelloInner Decompression. * bmo#1725938 - Remove ECH_inner extension, use new enum format. * bmo#1725938 - Update the version number for ECH-13 and adjust the ECHConfig size. ==== nfs-utils ==== Subpackages: libnfsidmap1 nfs-client - add reenable-nfsv2.patch for reverting nfsv2 deprecation until test coverage is fixed (poo#106679) - Add gcc12-fix.patch upstream fix for GCC 12 compiler. - Update to version 2.6.1 - https://kernel.org/pub/linux/utils/nfs-utils/2.6.1/2.6.1-Changelog - remove patches from this release: - 0001-gssd-fix-crash-in-debug-message.patch, - Add-disable-sbin-override-for-when-sbin-is-a-symlink.patch ==== nvme-cli ==== Version update (2.0~5 -> 2.0~6) - Update to version 2.0-rc6: * nvme: print out ANA state for 'list-subsys' (bsc#1195938) * nvme: Explicit initialize all command line options (bsc#1195945) * nvme: Explicit initialize passthru command line options * nvme: list_ns bug fix (csi option enable) * nvme: nvme write bug fix (no parse for option) * documenation updates ==== openssl-1_1 ==== Subpackages: libopenssl1_1 - Security fix: [bsc#1192820, CVE-2002-20001] * Fix DHEATER: The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE calculation. * Stop recommending the DHE in SSL_DEFAULT_SUSE_CIPHER_LIST * Rebase openssl-DEFAULT_SUSE_cipher.patch - Fix the engines section in /etc/ssl/openssl.cnf [bsc#1194187] * In an INI-type file, the sections begin with a [section_name] and they run until the next section begins. * Rebase openssl-1_1-use-include-directive.patch ==== pam ==== Subpackages: pam_unix - pam-hostnames-in-access_conf.patch: update with upstream submission. Fixes several bugs including memory leaks. - Move group.conf and faillock.conf to /usr/etc/security - Update to current git for enhanced vendordir support (pam-git.diff) Obsoletes: - 0001-Include-pam_xauth_data.3.xml-in-source-archive-400.patch - 0002-Only-include-vendordir-in-manual-page-if-set-401.patch - 0003-Use-vendor-specific-limits.conf-as-fallback-402.patch ==== permissions ==== Version update (1599_20210901 -> 1599_20220309) Subpackages: chkstat permissions-config - Update to version 20220309: * apptainer whitelisting (bsc#1196145) - Update to version 20220202: * mount.nfs: switch from migration mode to fixed path in /usr/sbin * changed gendered pronouns * mgetty: faxq-helper now finally reside in /usr/libexec ==== python-PyYAML ==== - do not use setup.py test construct https://trello.com/c/me9Z4sIv/121-setuppy-test-leftovers ==== python-SQLAlchemy ==== Version update (1.4.31 -> 1.4.32) - update to version 1.4.32: * orm + [orm] [bug] [regression] Fixed regression where the ORM exception that is to be raised when an INSERT silently fails to actually insert a row (such as from a trigger) would not be reached, due to a runtime exception raised ahead of time due to the missing primary key value, thus raising an uninformative exception rather than the correct one. For 1.4 and above, a new FlushError is added for this case that?s raised earlier than the previous ?null identity? exception was for 1.3, as a situation where the number of rows actually INSERTed does not match what was expected is a more critical situation in 1.4 as it prevents batching of multiple objects from working correctly. This is separate from the case where a newly fetched primary key is fetched as NULL, which continues to raise the existing ?null identity? exception. References: #7594 + [orm] [bug] Fixed issue where using a fully qualified path for the classname in relationship() that nonetheless contained an incorrect name for path tokens that were not the first token, would fail to raise an informative error and would instead fail randomly at a later step. References: #7697 * engine + [engine] [bug] Adjusted the logging for key SQLAlchemy components including Engine, Connection to establish an appropriate stack level parameter, so that the Python logging tokens funcName and lineno when used in custom logging formatters will report the correct information, which can be useful when filtering log output; supported on Python 3.8 and above. Pull request courtesy Markus Gerstel. References: #7612 * sql + [sql] [bug] Fixed type-related error messages that would fail for values that were tuples, due to string formatting syntax, including compile of unsupported literal values and invalid boolean values. References: #7721 + [sql] [bug] [mysql] Fixed issues in MySQL SET datatype as well as the generic Enum datatype where the __repr__() method would not render all optional parameters in the string output, impacting the use of these types in Alembic autogenerate. Pull request for MySQL courtesy Yuki Nishimine. References: #7598, [#7720], #7789 + [sql] [bug] The Enum datatype now emits a warning if the Enum.length argument is specified without also specifying Enum.native_enum as False, as the parameter is otherwise silently ignored in this case, despite the fact that the Enum datatype will still render VARCHAR DDL on backends that don?t have a native ENUM datatype such as SQLite. This behavior may change in a future release so that ?length? is honored for all non-native ?enum? types regardless of the ?native_enum? setting. + [sql] [bug] Fixed issue where the HasCTE.add_cte() method as called upon a TextualSelect instance was not being accommodated by the SQL compiler. The fix additionally adds more ?SELECT?-like compiler behavior to TextualSelect including that DML CTEs such as UPDATE and INSERT may be accommodated. References: #7760 * asyncio + [asyncio] [bug] Fixed issues where a descriptive error message was not raised for some classes of event listening with an async engine, which should instead be a sync engine instance. + [asyncio] [bug] Fixed issue where the AsyncSession.execute() method failed to raise an informative exception if the Connection.execution_options.stream_results execution option were used, which is incompatible with a sync-style Result object when using an asyncio calling style, as the operation to fetch more rows would need to be awaited. An exception is now raised in this scenario in the same way one was already raised when the Connection.execution_options.stream_results option would be used with the AsyncConnection.execute() method. Additionally, for improved stability with state-sensitive database drivers such as asyncmy, the cursor is now closed when this error condition is raised; previously with the asyncmy dialect, the connection would go into an invalid state with unconsumed server side results remaining. References: #7667 * postgresql + [postgresql] [usecase] Added compiler support for the PostgreSQL NOT VALID phrase when rendering DDL for the CheckConstraint, ForeignKeyConstraint and ForeignKey schema constructs. Pull request courtesy Gilbert Gilb?s. References: #7600 * mysql + [mysql] [bug] [regression] Fixed regression caused by #7518 where changing the syntax ?SHOW VARIABLES? to ?SELECT @@? broke compatibility with MySQL versions older than 5.6, including early 5.0 releases. While these are very old MySQL versions, a change in compatibility was not planned, so version-specific logic has been restored to fall back to ?SHOW VARIABLES? for MySQL server versions < 5.6. References: #7518 * mariadb + [mariadb] [bug] [regression] Fixed regression in mariadbconnector dialect as of mariadb connector 1.0.10 where the DBAPI no longer pre-buffers cursor.lastrowid, leading to errors when inserting objects with the ORM as well as causing non-availability of the CursorResult.inserted_primary_key attribute. The dialect now fetches this value proactively for situations where it applies. References: #7738 * sqlite + [sqlite] [usecase] Added support for reflecting SQLite inline unique constraints where the column names are formatted with SQLite ?escape quotes? [] or `, which are discarded by the database when producing the column name. References: #7736 + [sqlite] [bug] Fixed issue where SQLite unique constraint reflection would fail to detect a column-inline UNIQUE constraint where the column name had an underscore in its name. References: #7736 * oracle + [oracle] [bug] Fixed issue in Oracle dialect where using a column name that requires quoting when written as a bound parameter, such as "_id", would not correctly track a Python generated default value due to the bound-parameter rewriting missing this value, causing an Oracle error to be raised. References: #7676 + [oracle] [bug] [regression] Added support to parse ?DPI? error codes from cx_Oracle exception objects such as DPI-1080 and DPI-1010, both of which now indicate a disconnect scenario as of cx_Oracle 8.3. References: #7748 * tests + [tests] [bug] Improvements to the test suite?s integration with pytest such that the ?warnings? plugin, if manually enabled, will not interfere with the test suite, such that third parties can enable the warnings plugin or make use of the -W parameter and SQLAlchemy?s test suite will continue to pass. Additionally, modernized the detection of the ?pytest-xdist? plugin so that plugins can be globally disabled using PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 without breaking the test suite if xdist were still installed. Warning filters that promote deprecation warnings to errors are now localized to SQLAlchemy-specific warnings, or within SQLAlchemy-specific sources for general Python deprecation warnings, so that non-SQLAlchemy deprecation warnings emitted from pytest plugins should also not impact the test suite. References: #7599 + [tests] [bug] Made corrections to the default pytest configuration regarding how test discovery is configured, to fix issue where the test suite would not configure warnings correctly and also attempt to load example suites as tests, in the specific case where the SQLAlchemy checkout were located in an absolute path that had a super-directory named ?test?. References: #7045 ==== qemu ==== - Build PPC firmwares from sources on non-PPC builds as well (bsc#1193545) - Build RiscV firmwares on non-RiscV builds as well - While there, refactor (and simplify!) the firmware building logic and code * Patches added: Makefile-define-endianess-for-cross-buil.patch Makefile-fix-build-with-binutils-2.38.patch - qemu,kvm,xen: NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503) * Patches added: hw-scsi-megasas-check-for-NULL-frame-in-.patch ==== rdma-core ==== Subpackages: libefa1 libibverbs libibverbs1 libmlx4-1 libmlx5-1 librdmacm1 - Update spec file from upstream - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639) - fix build support for riscv - Added cmake-Make-modprobe.d-path-configurable.patch - Backport from upstream to allow modprobe files to be installed in a configurable directory ==== util-linux ==== Version update (2.37.3 -> 2.37.4) Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 - Update to version 2.37.4: * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563). SUSE is not affected (bsc#1196241). - Fix "su -s" bash completion (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch). ==== util-linux-systemd ==== Version update (2.37.3 -> 2.37.4) - Update to version 2.37.4: * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563). SUSE is not affected (bsc#1196241). - Fix "su -s" bash completion (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch). - update to 2.37.3 (bsc#1194976): This release fixes two security mount(8) and umount(8) issues: * CVE-2021-3996 Improper UID check in libmount allows an unprivileged user to unmount FUSE filesystems of users with similar UID. * CVE-2021-3995 This issue is related to parsing the /proc/self/mountinfo file allows an unprivileged user to unmount other user's filesystems that are either world-writable themselves or mounted in a world-writable directory. ==== vim ==== Version update (8.2.4456 -> 8.2.4542) Subpackages: vim-data-common vim-small - Updated to version 8.2.4542, fixes the following problems * Terminal test may fail on some machines. * The GPM library can only be linked statically. * Vim9: compiling filter() call fails with funcref that has unknown arguments. * Vim9: compiling sort() call fails with a funcref that has unknown arguments. * Vim9: wrong error for defining dict function. * Not enough testing for quickfix code. * Completion only uses strict matching. * Dtrace files are recognized as filetype D. * Fuzzy completion does not order matches properly. "create-directories" as the final argument. * Running filetype test leaves file behind. * Coverity warns for uninitialized struct member. * Coverity warns for uninitialized variable. * Coverity warns for use of a freed function name. * Coverity warnds for not checking return value of ftell(). * Memory allocation failures not tested in quickfix code. * Fuzzy cmdline completion does not work for lower case. * Operator name spelled wrong. * Crash when using fuzzy completion. * No fuzzy completieon for maps and abbreviations. * Suspending with CTRL-Z does not work on Android. * Cmdline popup menu not removed when 'lazyredraw' is set. * No fuzzy cmdline completion for user defined completion. * Command completion makes two rounds to collect matches. * Vim9: some error messages are not tested. * Compiler warning for uninitialized variable. * Vim9: cannot compare with v:null. * Build error with +eval but without +channel or +job. * Failing test for comparing v:null with number. * Terminal focus reporting only works for xterm-like terminals. (Jonathan Rascher) * MS-Windows makefile dependencies are outdated. * No error if an option is given an invalid value with ":let &opt = val". * Options test fails in the GUI. * The find_tags() function is much too long. * Help test fails in 24 line terminal. * Coverity gives warnings after tags code refactoring. * Wrong color for half of wide character next to pum scrollbar. * Using <Plug> with "noremap" does not work. * Vim9: at the script level declarations leak from try block to catch and finally block. * Vim9: can declare a global variable on the command line. * With 'showbreak' set and after the end of the line the cursor may be displayed in the wrong position. * In the GUI a modifier is not recognized for the key typed after CTRL-X, which may result in a mapping to be used. (Daniel Steinberg) * Vim9: there is no point in supporting :Print and :mode. * When there is a partially matching map and modifyOtherKeys is active a full map may not work. * Vim9: outdated "autocmd nested" still works. * "pattern not found" for :global is not an error message. * Test fails because of new error message. * Vim9: cannot assign to a global variable on the command line. * Vim9: can declare a variable with ":va". * Vim9: shortening commands leads to confusing script. * Filetype test fails. * The find_tags_in_file() function is much too long. * Window-local directory is not applied if 'acd' fails. * Vim9: some flow commands can be shortened. * Old subsitute syntax is still supported. * Build failure without the +eval feature. * The binary tag search feature is always enabled. * Vim9: Can still use ":fini" and ":finis" for ":finish". * Using wrong highlight for cursor line number. * Build failure without the +diff feature. (John Marriott) * GUI test fails with Motif. (Dominique Pellé) * When gvim is started maximized the 'window' option isn't set properly. (Christian J. Robinson) * Some GUI tests don't work on Athena. * Vim9: cannot set variables to a null value. * The Athena GUI is old and does not work well. * Crash when using null_function for a partial. * Vim9: comparing partial with function fails. * Making comparison with null work changes legacy behavior. * LGTM warnings for condition always true and buffer size too small. * Suspending with CTRL-Z does not work on OpenBSD. * Vim9: no test that after assigning null the type is still checked. * Vim9: "is" operator with empty string and null returns true. * Filename modifer ":8" removes the filename. * Debugger test fails when breaking on expression. * Output from linter and language server shows up in git. * The find_tags_in_file() function is too long. * When comparing special v:none and v:null are handled the same when compiling. * Line number for error is off by one. * Crash in debugger when a variable is not available in the current block. * Vim9: "break" inside try/catch not handled correctly. ==== yast2 ==== Version update (4.4.45 -> 4.4.47) - Extend the Package module to force using PackageSystem or PackageAI without having the mode into account. - AutoYaST: properly detect whether firewalld, bind and yast2-dns-server packages are installed when cloning a system (bsc#1196963). - 4.4.47 - Reverted LD_PRELOAD change (GitHub PR#1236) (bsc#1196326) - 4.4.46 - New doc: Invoking External Commands in YaST (in doc/)

1 0

New MicroOS snapshot 20220314 released!
by Richard Brown 15 Mar '22

15 Mar '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: attica-qt5 (5.91.0 -> 5.92.0) bluez-qt (5.91.0 -> 5.92.0) breeze5-icons (5.91.0 -> 5.92.0) bubblewrap (0.5.0 -> 0.6.1) frameworkintegration (5.91.0 -> 5.92.0) kactivities-stats (5.91.0 -> 5.92.0) kactivities5 (5.91.0 -> 5.92.0) karchive (5.91.0 -> 5.92.0) kbookmarks (5.91.0 -> 5.92.0) kcmutils (5.91.0 -> 5.92.0) kcodecs (5.91.0 -> 5.92.0) kcompletion (5.91.0 -> 5.92.0) kconfig (5.91.0 -> 5.92.0) kconfigwidgets (5.91.0 -> 5.92.0) kcoreaddons (5.91.0 -> 5.92.0) kcrash (5.91.0 -> 5.92.0) kdbusaddons (5.91.0 -> 5.92.0) kdeclarative (5.91.0 -> 5.92.0) kded (5.91.0 -> 5.92.0) kdesu (5.91.0 -> 5.92.0) kdnssd-framework (5.91.0 -> 5.92.0) kdoctools (5.91.0 -> 5.92.0) kfilemetadata5 (5.91.0 -> 5.92.0) kglobalaccel (5.91.0 -> 5.92.0) kguiaddons (5.91.0 -> 5.92.0) kholidays (5.91.0 -> 5.92.0) ki18n (5.91.0 -> 5.92.0) kiconthemes (5.91.0 -> 5.92.0) kidletime (5.91.0 -> 5.92.0) kinit (5.91.0 -> 5.92.0) kio (5.91.0 -> 5.92.0) kirigami2 (5.91.0 -> 5.92.0) kitemmodels (5.91.0 -> 5.92.0) kitemviews (5.91.0 -> 5.92.0) kjobwidgets (5.91.0 -> 5.92.0) knewstuff (5.91.0 -> 5.92.0) knotifications (5.91.0 -> 5.92.0) knotifyconfig (5.91.0 -> 5.92.0) kpackage (5.91.0 -> 5.92.0) kparts (5.91.0 -> 5.92.0) kpeople5 (5.91.0 -> 5.92.0) kpty (5.91.0 -> 5.92.0) kquickcharts (5.91.0 -> 5.92.0) krunner (5.91.0 -> 5.92.0) kservice (5.91.0 -> 5.92.0) ktexteditor (5.91.0 -> 5.92.0) ktextwidgets (5.91.0 -> 5.92.0) kunitconversion (5.91.0 -> 5.92.0) kwallet (5.91.0 -> 5.92.0) kwidgetsaddons (5.91.0 -> 5.92.0) kwindowsystem (5.91.0 -> 5.92.0) kxmlgui (5.91.0 -> 5.92.0) libKF5ModemManagerQt (5.91.0 -> 5.92.0) libKF5NetworkManagerQt (5.91.0 -> 5.92.0) libnvme (1.0~5 -> 1.0~6) lvm2 lvm2-device-mapper nvme-cli (2.0~5 -> 2.0~6) pam permissions (1599_20210901 -> 1599_20220309) plasma-framework (5.91.0 -> 5.92.0) prison-qt5 (5.91.0 -> 5.92.0) purpose (5.91.0 -> 5.92.0) python-SQLAlchemy (1.4.31 -> 1.4.32) qqc2-desktop-style (5.91.0 -> 5.92.0) solid (5.91.0 -> 5.92.0) sonnet (5.91.0 -> 5.92.0) syndication (5.91.0 -> 5.92.0) syntax-highlighting (5.91.0 -> 5.92.0) threadweaver (5.91.0 -> 5.92.0) util-linux (2.37.3 -> 2.37.4) util-linux-systemd (2.37.3 -> 2.37.4) === Details === ==== attica-qt5 ==== Version update (5.91.0 -> 5.92.0) Subpackages: libKF5Attica5 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI ==== bluez-qt ==== Version update (5.91.0 -> 5.92.0) Subpackages: bluez-qt-imports bluez-qt-udev libKF5BluezQt6 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Port to ecm_add_qml_module ==== breeze5-icons ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add app icon for TeXstudio (kde#391459) ==== bubblewrap ==== Version update (0.5.0 -> 0.6.1) - Update to 0.6.1: - Add a release checklist - completions: Make zsh completion non-executable The Autotools build system installed it with 0644 permissions because it's listed as DATA, but the Meson build system installs executable files as executable by default. zsh completions don't need to be executable to work, and this one doesn't have the `#!` marker that should start an executable script. - update to 0.6.0: - meson: Improve compatibility with Meson 0.49 That version doesn't allow more than two arguments for define_variable. - Disable test-specifying-pidns.sh under 'meson dist' while I investigate This test is hanging when run under 'meson dist' for some reason, but not when run under 'meson test', and not locally, only in the Github Workflow-based CI. Disable it for now. - meson: Actually build and run the tests - tests: Fix compiler warnings for unused arguments - meson: Run test scripts from $srcdir - meson: Make G_TEST_SRCDIR, G_TEST_BUILDDIR match Autotools - meson: Run the Python test script with Python, not bash The python build option can be used to swap to a different interpreter, for environments like the Steam Runtime where the python3 executable in the PATH is extremely old but there is a better interpreter available. This is treated as non-optional, because Meson is written in Python, so the situation where there is no Python interpreter at build-time shouldn't arise. - meson: Build the try-syscall helper - meson: Build tests with equivalent of -I$(top_srcdir) -I$(top_builddir) - meson.build: Remove unnecessary check for sh - Add a Meson build system This allows bwrap to be built as a subproject in larger Meson projects. When built as a subproject, we install into the --libexecdir and require a program prefix to be specified: for example, Flatpak would use program_prefix=flatpak- to get /usr/libexec/flatpak-bwrap. Verified to be backwards-compatible as far as Meson 0.49.0 (Debian 9 backports). Loosely based on previous work by Jussi Pakkanen (see #133). Differences between the Autotools and Meson builds: The Meson build requires a version of libcap that has pkg-config metadata (introduced in libcap 2.23, in 2013). The Meson build has no equivalent of --with-priv-mode=setuid. On distributions like Debian <= 10 and RHEL <= 7 that require a setuid bwrap executable, the sysadmin or distribution packaging will need to set the correct permissions on the bwrap executable; Debian already did this via packaging rather than the upstream build system. The Meson build supports being used as a subproject, and there is CI for this. It automatically disables shell completions and man pages, moves the bubblewrap executable to ${libexecdir}, and renames the bubblewrap executable according to a program_prefix option that the caller must specify (for example, Flatpak would use - Dprogram_prefix=flatpak- to get /usr/libexec/flatpak-bwrap). See the tests/use-as-subproject/ directory for an example. - Use HEAD to refer to other projects' default branches in documentation This makes the URL independent of the name they have chosen for their default branches. - workflows: Update for rename of default branch to main - tests: Exercise seccomp filters - Allow loading more than one seccomp program This will allow Flatpak to combine an allow-list (default-deny) of known system calls with a deny-list (default-allow) of system calls that are undesired. Resolves: https://github.com/containers/bubblewrap/issues/453 - Generalize linked lists of LockFile and SetupOp I'm about to add a third linked list, for seccomp programs, which would seem like too much duplication. - Handle argc == 0 better Unfortunately it's possible for argc to be 0, so error out pretty early on in that case. I don't think this is a security issue in this case. - Fix typo - Remove trailing whitespace - Fix spelling - bash: Fix shellcheck warnings - bash: Invoke bash using /usr/bin/env - bubblewrap: Avoid a -Wjump-misses-init false-positive When building with -Wjump-misses-init as part of a larger project, gcc reports that we jump past initialization of cover_proc_dirs. This is technically true, but we only use this variable in the case where it's initialized, so that's harmless. However, we can avoid this altogether by making the array static and constant, which allows it to be moved from initialized data to read-only data. - bind-mount: Be more const-correct When compiled with -Wwrite-strings as part of a larger project, gcc and clang both warn that we're assigning a string constant to a mutable struct member. There's actually no reason why it should be mutable, so make it const. - die_with_error: Save errno sooner We need to save errno immediately, otherwise it could be overwritten by a failing library call somewhere in the implementation of fprintf. - main: Warn when non-repeatable options are repeated A user might reasonably expect that `bwrap --seccomp 3 --seccomp 4 ...` would load seccomp programs from both fds 3 and 4, but in fact it only loads the program from fd 4. Helps: https://github.com/containers/bubblewrap/issues/453 Resolves: https://github.com/containers/bubblewrap/issues/454 - utils: Add warn() - Add SPDX-License-Identifier for files that already specify license This is a step towards REUSE compliance. Third-party files that we do not otherwise edit (git.mk, m4/attributes.m4) are excluded here. - tests: Use preferred spelling for SPDX license identifiers - Remove obsolete .travis.yml We no longer use Travis-CI. - Remove obsolete papr CI We no longer use this. ==== frameworkintegration ==== Version update (5.91.0 -> 5.92.0) Subpackages: frameworkintegration-plugin libKF5Style5 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - No code change since 5.91.0 ==== kactivities-stats ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Move Boost dependency to BUILD_TESTING block ==== kactivities5 ==== Version update (5.91.0 -> 5.92.0) Subpackages: kactivities5-imports libKF5Activities5 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Check executables exist in PATH before passing them to QProcess * Port to ecm_add_qml_module ==== karchive ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI ==== kbookmarks ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Check executables exist in PATH before passing them to QProcess ==== kcmutils ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - No code change since 5.91.0 ==== kcodecs ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Remove broken Python bindings generation ==== kcompletion ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Remove broken Python bindings generation * Make the BUILD_DESIGNERPLUGIN option dependent on not cross-compiling ==== kconfig ==== Version update (5.91.0 -> 5.92.0) Subpackages: kconf_update5 libKF5ConfigCore5 libKF5ConfigGui5 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Remove broken Python bindings generation * Add KWindowStateSaver * Remove warning from kauthorized.h * KConfigCompiler: support ItemAccessors=true with signalling items * Add Qt6 Android CI * Use our deprecation macros rather than Q_DECL_DEPRECATED directly * KConfigPropertyMap: Clean up internal leftovers of autosave feature * QMake pri files: fix missing new path to version header * Support build without Qt session manager * Add KConfig GUI logging category ==== kconfigwidgets ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Remove broken Python bindings generation * KHamburgerMenu: Avoid null receiver warning upon showing menubar * Port away from deprecated KAuth includes * Add @since 5.92 in KColorScheme::operator== API docs * Add a KColorScheme::operator== * Make the BUILD_DESIGNERPLUGIN option dependent on not cross-compiling * Add explicit CMake option HAVE_KAUTH * KHambugerMenu: Fix crash on windows when showing the window menubar from the KHamburgerMenu (kde#449806) ==== kcoreaddons ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Deprecate KPluginMetaData::fromDesktopFile * KPluginMetaDataTest: Explicitly call dedicated constructors * KPluginMetaData: Emit runtime deprecation warnings for deprecated code path * KPluginMetaData: Add note for deprecated code paths to constructor * KPluginMetaData: Use QFileInfo::completeBaseName for deriving plugin id * Remove broken Python bindings generation * Downgrade mismatched host tool version to WARNING * Add a way to indicate to not show a notification on finished * Allow to create valid KPluginMetaData for plugins without embedded JSON metadata * Add an OUTPUT_FILE argument to kcoreaddons_desktop_to_json() * KSignalHandler: attempt to fix Windows build * Add KSignalHandler * Build benchmarks of kdirwatch test as separate lib * Build benchmarks of ktexttohtml as separate executable ==== kcrash ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI ==== kdbusaddons ==== Version update (5.91.0 -> 5.92.0) Subpackages: kdbusaddons-tools libKF5DBusAddons5 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Remove broken Python bindings generation ==== kdeclarative ==== Version update (5.91.0 -> 5.92.0) Subpackages: kdeclarative-components libKF5CalendarEvents5 libKF5Declarative5 libKF5QuickAddons5 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Fix double deleting of NetworkAccessManagerFactory (kde#450507) * Delete networkAccessManagerFactory when we delete the engine * Improve Open[app]() functions (kde#443984) ==== kded ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - No code change since 5.91.0 ==== kdesu ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Drop obsolete KF5Service and add KF5Config dependency ==== kdnssd-framework ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - No code change since 5.91.0 ==== kdoctools ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * [ca@valencia] Add Catalan (Valencian) Language ==== kfilemetadata5 ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Port to KPluginMetaData::findPlugins for plugin querying * enable mobipocket extractor by default * Use std::unique_ptr to manage lifetime of d-ptr ==== kglobalaccel ==== Version update (5.91.0 -> 5.92.0) Subpackages: kglobalaccel5 libKF5GlobalAccel5 libKF5GlobalAccelPrivate5 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - No code change since 5.91.0 ==== kguiaddons ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Remove broken Python bindings generation * [KOverlayIconEngine] Implement ScaledPixmapHook for high-dpi support ==== kholidays ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * holiday_pl_pl - add Fat Thursday and State Holidays w/o day-off (kde#447201) ==== ki18n ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Remove broken Python bindings generation ==== kiconthemes ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Make the BUILD_DESIGNERPLUGIN option dependent on not cross-compiling * Fix pixelated icons in item views (kde#450336) * [KIconEngine] Create high-dpi pixmap in paint * Read the reference icon already scaled ==== kidletime ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * General code clean-up ==== kinit ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Check executables exist in PATH before passing them to QProcess ==== kio ==== Version update (5.91.0 -> 5.92.0) Subpackages: kio-core - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Too many changes since 5.91.0, only listing bugfixes: * KFilePlacesView: Fix crash when dragging over topmost section header (kde#450813) * Hide mount point labels if mount point can't be found (kde#449791) * Fix trash KCM not having any icon on wayland (kde#449859) * Fix potential crash in pastejob (kde#439948) * [KFilePlacesView] Mount place when dropping onto it (kde#206629) * [knewfilemenu] Bind stat job connection lifetime to dialog, not the whole menu (kde#433347) ==== kirigami2 ==== Version update (5.91.0 -> 5.92.0) Subpackages: libKF5Kirigami2-5 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Dialog: Accommodate vertical scrollbars widths properly * Dialog: Fix implicitWidth binding loop when absolute maximum size used * consider visibility when calculating page content positions * Add Qt6 Android CI * update commandlink url to a working one * Dialog: Fix wrong import version in documentation * Documentation: Add Dialog and NavigationTabBar to homepage * Dialog: Fix padding * FormLayout: make section headings slightly smaller but bolder * NavigationTabBar: check checkedButton state before updating currentIndex * Drawer should not eat mouse events at edges (kde#438017) * Add a CI job to build and test the static build * Use extra spacing to distinguish narrow-mode form labels and UI controls * Revert "Bold labels for narrow FormLayout" (kde#450105) * fix autotests/wheelhandler/tst_scrolling.qml after commit de215e19 * Units: add mediumSpacing property * Use a nested toolbutton instead * Ensure OverlayDrawer handles is keyboard navigable * CheckableListItem: Reset list item's checked property when checking box * CheckableListItem: Only conditionally trigger action when checked * comment over the class * PageRow: properly handle back button * WheelHandler: Round contentX/contentY positions (kde#449884) * Fix some more installation paths * Allow compiling against Qt configured with -no-opengl * Fix install path of settings and swipe navigator components ==== kitemmodels ==== Version update (5.91.0 -> 5.92.0) Subpackages: kitemmodels-imports libKF5ItemModels5 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Remove broken Python bindings generation * Fix proxy model smoke test with Qt6 ==== kitemviews ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Remove broken Python bindings generation * Add Android Qt6 CI * Make the BUILD_DESIGNERPLUGIN option dependent on not cross-compiling ==== kjobwidgets ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Remove broken Python bindings generation ==== knewstuff ==== Version update (5.91.0 -> 5.92.0) Subpackages: knewstuff-imports libKF5NewStuff5 libKF5NewStuffCore5 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * kmoretools: Fix OBS appstream id (kde#414533) * Add conditional cache preference to http requests * Engine: Ensure we are not using the wrong ProvidersUrl * Add http2 to KNewStuff requests * Engine::atticaProviders is being added in 5.92 * KNSCore::Engine: Expose our Attica::Provider ==== knotifications ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Allow to build the Java parts with Gradle from both Qt5 and Qt6 * Fix compilation on Android with Qt6 ==== knotifyconfig ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - No code change since 5.91.0 ==== kpackage ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - No code change since 5.91.0 ==== kparts ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI ==== kpeople5 ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI ==== kpty ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Fix FindUTEMPTER when cross-compiling ==== kquickcharts ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - No code change since 5.91.0 ==== krunner ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Bundle plasma-runner.desktop into a qrc, for CI and Windows ==== kservice ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Use :/kservicetypes5 instead of :/kf/kservicetypes5 * Add Qt6 Android CI * Explicitely call KPluginMetaData::fromDesktopFile instead of KPluginMetaData(QString fileName) constructor ==== ktexteditor ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Too many changes since 5.91.0, only listing bugfixes: * vimode: implement hlsearch (kde#449641, kde#449643) * view: fix buggy scrolling on macOS (kde#442060) * Guard against null widgets (kde#450094) * use the url of the latest used document for save (kde#448618) * Differentiate docs with identical filenames (kde#381532) ==== ktextwidgets ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Make the BUILD_DESIGNERPLUGIN option dependent on not cross-compiling ==== kunitconversion ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Add teaspoon (tsp) and tablespoon (tbsp) units (kde#450908) ==== kwallet ==== Version update (5.91.0 -> 5.92.0) Subpackages: kwalletd5 libKF5Wallet5 libkwalletbackend5-5 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - No code change since 5.91.0 ==== kwidgetsaddons ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * KCharSelect: connect to the appropriate QFontComboBox signal (kde#445477) * Remove broken Python bindings generation * Check executables exist in PATH before passing them to QProcess * Add Android Qt6 CI * Make the BUILD_DESIGNERPLUGIN option dependent on not cross-compiling * Make KSqueezedTextLabel more robust wrt QFontMetrics ==== kwindowsystem ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * Ensure that xdgActivationTokenArrived is always emitted asynchronously (kde#450342) ==== kxmlgui ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Remove outdated readme file * Add Qt6 Android CI * Add an old formatting commit to git blame ignore file * Make the BUILD_DESIGNERPLUGIN option dependent on not cross-compiling * Support build without Qt session manager * Add an action in help menu for command bar * Update translation context of two strings ==== libKF5ModemManagerQt ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Fix typo * Normalise where headers are installed with the rest of KF ==== libKF5NetworkManagerQt ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - No code change since 5.91.0 ==== libnvme ==== Version update (1.0~5 -> 1.0~6) - Update to version 1.0-rc6: * tree: add nvme_ctrl_get_ana_state() (bsc#1195938) * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938) * ioctl.h: ns list bug fix (wrong cns value) * types.h: Key Value Command Set Identifier added (NVME_CSI_KV) * types: fix status code type bug (wrong masking) ==== lvm2 ==== Subpackages: liblvm2cmd2_03 - Udev database has incomplete information about device /dev/sda. (bsc#1181242) + 0024-pvscan-don-t-use-udev-for-external-device-info.patch ==== lvm2-device-mapper ==== Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 - Udev database has incomplete information about device /dev/sda. (bsc#1181242) + 0024-pvscan-don-t-use-udev-for-external-device-info.patch ==== nvme-cli ==== Version update (2.0~5 -> 2.0~6) - Update to version 2.0-rc6: * nvme: print out ANA state for 'list-subsys' (bsc#1195938) * nvme: Explicit initialize all command line options (bsc#1195945) * nvme: Explicit initialize passthru command line options * nvme: list_ns bug fix (csi option enable) * nvme: nvme write bug fix (no parse for option) * documenation updates ==== pam ==== Subpackages: pam_unix - pam-hostnames-in-access_conf.patch: update with upstream submission. Fixes several bugs including memory leaks. - Move group.conf and faillock.conf to /usr/etc/security - Update to current git for enhanced vendordir support (pam-git.diff) Obsoletes: - 0001-Include-pam_xauth_data.3.xml-in-source-archive-400.patch - 0002-Only-include-vendordir-in-manual-page-if-set-401.patch - 0003-Use-vendor-specific-limits.conf-as-fallback-402.patch ==== permissions ==== Version update (1599_20210901 -> 1599_20220309) Subpackages: chkstat permissions-config - Update to version 20220309: * apptainer whitelisting (bsc#1196145) - Update to version 20220202: * mount.nfs: switch from migration mode to fixed path in /usr/sbin * changed gendered pronouns * mgetty: faxq-helper now finally reside in /usr/libexec ==== plasma-framework ==== Version update (5.91.0 -> 5.92.0) Subpackages: libKF5Plasma5 plasma-framework-components - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * KPluginMetaData::serviceTypes() is gone in KF6 * Remove or upgrade QQC1 imports from tests where possible * Port away from QXcbWindowFunctions for Qt6 * show the header if both this and dialog background fallback * Fix a -Wint-to-void-pointer-cast warning * breeze: Clean up SVG Tiny 1.2 errors in button * Units: add mediumSpacing * Units: update smallSpacing and largeSpacing documentation * Use POSITION_INDEPENDENT_CODE for static lib (qt6) * Use KConfigPropertyMap instead of KDeclarative::ConfigPropertyMap for KF6 * Remove the use of the QtQml namespace * Adapt to the new location of the Qt namespace meta object in Qt6 * Adapt to native event filter signature changes in Qt6 * Adapt to the removed of QtX11Extras in Qt6 * Adapt to QQuickItem::geometryChanged being renamed in Qt6 * Port to QRegularExpression * Adapt to Qt6 container sizes no longer being a 32bit integer ==== prison-qt5 ==== Version update (5.91.0 -> 5.92.0) Subpackages: libKF5Prison5 prison-qt5-imports - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI * For KF6 use the more idiomatic include files installation layout * Fix include dir for .pri file * Normalise where headers are installed with the rest of KF ==== purpose ==== Version update (5.91.0 -> 5.92.0) Subpackages: libKF5Purpose5 libKF5PurposeWidgets5 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Remove call to ecm_find_qmlmodule(org.kde.kdeconnect) ==== python-SQLAlchemy ==== Version update (1.4.31 -> 1.4.32) - update to version 1.4.32: * orm + [orm] [bug] [regression] Fixed regression where the ORM exception that is to be raised when an INSERT silently fails to actually insert a row (such as from a trigger) would not be reached, due to a runtime exception raised ahead of time due to the missing primary key value, thus raising an uninformative exception rather than the correct one. For 1.4 and above, a new FlushError is added for this case that?s raised earlier than the previous ?null identity? exception was for 1.3, as a situation where the number of rows actually INSERTed does not match what was expected is a more critical situation in 1.4 as it prevents batching of multiple objects from working correctly. This is separate from the case where a newly fetched primary key is fetched as NULL, which continues to raise the existing ?null identity? exception. References: #7594 + [orm] [bug] Fixed issue where using a fully qualified path for the classname in relationship() that nonetheless contained an incorrect name for path tokens that were not the first token, would fail to raise an informative error and would instead fail randomly at a later step. References: #7697 * engine + [engine] [bug] Adjusted the logging for key SQLAlchemy components including Engine, Connection to establish an appropriate stack level parameter, so that the Python logging tokens funcName and lineno when used in custom logging formatters will report the correct information, which can be useful when filtering log output; supported on Python 3.8 and above. Pull request courtesy Markus Gerstel. References: #7612 * sql + [sql] [bug] Fixed type-related error messages that would fail for values that were tuples, due to string formatting syntax, including compile of unsupported literal values and invalid boolean values. References: #7721 + [sql] [bug] [mysql] Fixed issues in MySQL SET datatype as well as the generic Enum datatype where the __repr__() method would not render all optional parameters in the string output, impacting the use of these types in Alembic autogenerate. Pull request for MySQL courtesy Yuki Nishimine. References: #7598, [#7720], #7789 + [sql] [bug] The Enum datatype now emits a warning if the Enum.length argument is specified without also specifying Enum.native_enum as False, as the parameter is otherwise silently ignored in this case, despite the fact that the Enum datatype will still render VARCHAR DDL on backends that don?t have a native ENUM datatype such as SQLite. This behavior may change in a future release so that ?length? is honored for all non-native ?enum? types regardless of the ?native_enum? setting. + [sql] [bug] Fixed issue where the HasCTE.add_cte() method as called upon a TextualSelect instance was not being accommodated by the SQL compiler. The fix additionally adds more ?SELECT?-like compiler behavior to TextualSelect including that DML CTEs such as UPDATE and INSERT may be accommodated. References: #7760 * asyncio + [asyncio] [bug] Fixed issues where a descriptive error message was not raised for some classes of event listening with an async engine, which should instead be a sync engine instance. + [asyncio] [bug] Fixed issue where the AsyncSession.execute() method failed to raise an informative exception if the Connection.execution_options.stream_results execution option were used, which is incompatible with a sync-style Result object when using an asyncio calling style, as the operation to fetch more rows would need to be awaited. An exception is now raised in this scenario in the same way one was already raised when the Connection.execution_options.stream_results option would be used with the AsyncConnection.execute() method. Additionally, for improved stability with state-sensitive database drivers such as asyncmy, the cursor is now closed when this error condition is raised; previously with the asyncmy dialect, the connection would go into an invalid state with unconsumed server side results remaining. References: #7667 * postgresql + [postgresql] [usecase] Added compiler support for the PostgreSQL NOT VALID phrase when rendering DDL for the CheckConstraint, ForeignKeyConstraint and ForeignKey schema constructs. Pull request courtesy Gilbert Gilb?s. References: #7600 * mysql + [mysql] [bug] [regression] Fixed regression caused by #7518 where changing the syntax ?SHOW VARIABLES? to ?SELECT @@? broke compatibility with MySQL versions older than 5.6, including early 5.0 releases. While these are very old MySQL versions, a change in compatibility was not planned, so version-specific logic has been restored to fall back to ?SHOW VARIABLES? for MySQL server versions < 5.6. References: #7518 * mariadb + [mariadb] [bug] [regression] Fixed regression in mariadbconnector dialect as of mariadb connector 1.0.10 where the DBAPI no longer pre-buffers cursor.lastrowid, leading to errors when inserting objects with the ORM as well as causing non-availability of the CursorResult.inserted_primary_key attribute. The dialect now fetches this value proactively for situations where it applies. References: #7738 * sqlite + [sqlite] [usecase] Added support for reflecting SQLite inline unique constraints where the column names are formatted with SQLite ?escape quotes? [] or `, which are discarded by the database when producing the column name. References: #7736 + [sqlite] [bug] Fixed issue where SQLite unique constraint reflection would fail to detect a column-inline UNIQUE constraint where the column name had an underscore in its name. References: #7736 * oracle + [oracle] [bug] Fixed issue in Oracle dialect where using a column name that requires quoting when written as a bound parameter, such as "_id", would not correctly track a Python generated default value due to the bound-parameter rewriting missing this value, causing an Oracle error to be raised. References: #7676 + [oracle] [bug] [regression] Added support to parse ?DPI? error codes from cx_Oracle exception objects such as DPI-1080 and DPI-1010, both of which now indicate a disconnect scenario as of cx_Oracle 8.3. References: #7748 * tests + [tests] [bug] Improvements to the test suite?s integration with pytest such that the ?warnings? plugin, if manually enabled, will not interfere with the test suite, such that third parties can enable the warnings plugin or make use of the -W parameter and SQLAlchemy?s test suite will continue to pass. Additionally, modernized the detection of the ?pytest-xdist? plugin so that plugins can be globally disabled using PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 without breaking the test suite if xdist were still installed. Warning filters that promote deprecation warnings to errors are now localized to SQLAlchemy-specific warnings, or within SQLAlchemy-specific sources for general Python deprecation warnings, so that non-SQLAlchemy deprecation warnings emitted from pytest plugins should also not impact the test suite. References: #7599 + [tests] [bug] Made corrections to the default pytest configuration regarding how test discovery is configured, to fix issue where the test suite would not configure warnings correctly and also attempt to load example suites as tests, in the specific case where the SQLAlchemy checkout were located in an absolute path that had a super-directory named ?test?. References: #7045 ==== qqc2-desktop-style ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Thicken menus on transient touch as well as being in Tablet Mode * PlasmaDesktopTheme: ensure we initialise the colours * Fix typo * PlasmaDesktopTheme: Do not compute the colors for invisible items * PlasmaDesktopTheme: Do not call syncColors after syncWindow * Menu: use hmargin and vmargin from QStyle * Support displaying icons in ItemDelegate (kde#425867) * fix checkbox position for CheckDelegate * Drop lib prefix when building for Windows * KQuickStyleItem: Simplify the updatePolish * Use correct DBus signal for listening for font changes * Use raw pointer instead of QPointer to track watchers ==== solid ==== Version update (5.91.0 -> 5.92.0) Subpackages: libKF5Solid5 solid-imports - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Use enum in switch instead of raw int * Add Qt6 Android CI * udisks backend: Add UD2_DBUS_PATH_BLOCKDEVICES and use more constants * udev: Do not ignore joysticks * Check executables exist in PATH before passing them to QProcess ==== sonnet ==== Version update (5.91.0 -> 5.92.0) Subpackages: libKF5SonnetCore5 libKF5SonnetUi5 sonnet-imports - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * settings: Emit `autodetectLanguageChanged` * Add Qt6 Android CI * Make the BUILD_DESIGNERPLUGIN option dependent on not cross-compiling * QMake pri files: fix missing new path to version header ==== syndication ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI ==== syntax-highlighting ==== Version update (5.91.0 -> 5.92.0) Subpackages: libKF5SyntaxHighlighting5 - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * increment bash version number * Bash: fix parameter expansion replacement with path without extended glob * Lua: fix function highlighting with local function (#17) * Add Android Qt6 CI * Propagate Qt major version to external project build of the host tools * increment versions * Bash/Zsh: fix keyword ! in ! cmd ==== threadweaver ==== Version update (5.91.0 -> 5.92.0) - Update to 5.92.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.92.0 - Changes since 5.91.0: * Add Qt6 Android CI ==== util-linux ==== Version update (2.37.3 -> 2.37.4) Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 - Update to version 2.37.4: * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563). SUSE is not affected (bsc#1196241). - Fix "su -s" bash completion (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch). ==== util-linux-systemd ==== Version update (2.37.3 -> 2.37.4) - Update to version 2.37.4: * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563). SUSE is not affected (bsc#1196241). - Fix "su -s" bash completion (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch). - update to 2.37.3 (bsc#1194976): This release fixes two security mount(8) and umount(8) issues: * CVE-2021-3996 Improper UID check in libmount allows an unprivileged user to unmount FUSE filesystems of users with similar UID. * CVE-2021-3995 This issue is related to parsing the /proc/self/mountinfo file allows an unprivileged user to unmount other user's filesystems that are either world-writable themselves or mounted in a world-writable directory.

1 0

New Kubic snapshot 20220314 released!
by Richard Brown 15 Mar '22

15 Mar '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: kubernetes1.22 libnvme (1.0~5 -> 1.0~6) lvm2 lvm2-device-mapper nvme-cli (2.0~5 -> 2.0~6) pam permissions (1599_20210901 -> 1599_20220309) python-SQLAlchemy (1.4.31 -> 1.4.32) util-linux (2.37.3 -> 2.37.4) util-linux-systemd (2.37.3 -> 2.37.4) === Details === ==== kubernetes1.22 ==== - avoid bashism in client-common postinstall script (bsc#1195391) ==== libnvme ==== Version update (1.0~5 -> 1.0~6) - Update to version 1.0-rc6: * tree: add nvme_ctrl_get_ana_state() (bsc#1195938) * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938) * ioctl.h: ns list bug fix (wrong cns value) * types.h: Key Value Command Set Identifier added (NVME_CSI_KV) * types: fix status code type bug (wrong masking) ==== lvm2 ==== Subpackages: liblvm2cmd2_03 - Udev database has incomplete information about device /dev/sda. (bsc#1181242) + 0024-pvscan-don-t-use-udev-for-external-device-info.patch ==== lvm2-device-mapper ==== Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 - Udev database has incomplete information about device /dev/sda. (bsc#1181242) + 0024-pvscan-don-t-use-udev-for-external-device-info.patch ==== nvme-cli ==== Version update (2.0~5 -> 2.0~6) - Update to version 2.0-rc6: * nvme: print out ANA state for 'list-subsys' (bsc#1195938) * nvme: Explicit initialize all command line options (bsc#1195945) * nvme: Explicit initialize passthru command line options * nvme: list_ns bug fix (csi option enable) * nvme: nvme write bug fix (no parse for option) * documenation updates ==== pam ==== Subpackages: pam_unix - pam-hostnames-in-access_conf.patch: update with upstream submission. Fixes several bugs including memory leaks. - Move group.conf and faillock.conf to /usr/etc/security - Update to current git for enhanced vendordir support (pam-git.diff) Obsoletes: - 0001-Include-pam_xauth_data.3.xml-in-source-archive-400.patch - 0002-Only-include-vendordir-in-manual-page-if-set-401.patch - 0003-Use-vendor-specific-limits.conf-as-fallback-402.patch ==== permissions ==== Version update (1599_20210901 -> 1599_20220309) Subpackages: chkstat permissions-config - Update to version 20220309: * apptainer whitelisting (bsc#1196145) - Update to version 20220202: * mount.nfs: switch from migration mode to fixed path in /usr/sbin * changed gendered pronouns * mgetty: faxq-helper now finally reside in /usr/libexec ==== python-SQLAlchemy ==== Version update (1.4.31 -> 1.4.32) - update to version 1.4.32: * orm + [orm] [bug] [regression] Fixed regression where the ORM exception that is to be raised when an INSERT silently fails to actually insert a row (such as from a trigger) would not be reached, due to a runtime exception raised ahead of time due to the missing primary key value, thus raising an uninformative exception rather than the correct one. For 1.4 and above, a new FlushError is added for this case that?s raised earlier than the previous ?null identity? exception was for 1.3, as a situation where the number of rows actually INSERTed does not match what was expected is a more critical situation in 1.4 as it prevents batching of multiple objects from working correctly. This is separate from the case where a newly fetched primary key is fetched as NULL, which continues to raise the existing ?null identity? exception. References: #7594 + [orm] [bug] Fixed issue where using a fully qualified path for the classname in relationship() that nonetheless contained an incorrect name for path tokens that were not the first token, would fail to raise an informative error and would instead fail randomly at a later step. References: #7697 * engine + [engine] [bug] Adjusted the logging for key SQLAlchemy components including Engine, Connection to establish an appropriate stack level parameter, so that the Python logging tokens funcName and lineno when used in custom logging formatters will report the correct information, which can be useful when filtering log output; supported on Python 3.8 and above. Pull request courtesy Markus Gerstel. References: #7612 * sql + [sql] [bug] Fixed type-related error messages that would fail for values that were tuples, due to string formatting syntax, including compile of unsupported literal values and invalid boolean values. References: #7721 + [sql] [bug] [mysql] Fixed issues in MySQL SET datatype as well as the generic Enum datatype where the __repr__() method would not render all optional parameters in the string output, impacting the use of these types in Alembic autogenerate. Pull request for MySQL courtesy Yuki Nishimine. References: #7598, [#7720], #7789 + [sql] [bug] The Enum datatype now emits a warning if the Enum.length argument is specified without also specifying Enum.native_enum as False, as the parameter is otherwise silently ignored in this case, despite the fact that the Enum datatype will still render VARCHAR DDL on backends that don?t have a native ENUM datatype such as SQLite. This behavior may change in a future release so that ?length? is honored for all non-native ?enum? types regardless of the ?native_enum? setting. + [sql] [bug] Fixed issue where the HasCTE.add_cte() method as called upon a TextualSelect instance was not being accommodated by the SQL compiler. The fix additionally adds more ?SELECT?-like compiler behavior to TextualSelect including that DML CTEs such as UPDATE and INSERT may be accommodated. References: #7760 * asyncio + [asyncio] [bug] Fixed issues where a descriptive error message was not raised for some classes of event listening with an async engine, which should instead be a sync engine instance. + [asyncio] [bug] Fixed issue where the AsyncSession.execute() method failed to raise an informative exception if the Connection.execution_options.stream_results execution option were used, which is incompatible with a sync-style Result object when using an asyncio calling style, as the operation to fetch more rows would need to be awaited. An exception is now raised in this scenario in the same way one was already raised when the Connection.execution_options.stream_results option would be used with the AsyncConnection.execute() method. Additionally, for improved stability with state-sensitive database drivers such as asyncmy, the cursor is now closed when this error condition is raised; previously with the asyncmy dialect, the connection would go into an invalid state with unconsumed server side results remaining. References: #7667 * postgresql + [postgresql] [usecase] Added compiler support for the PostgreSQL NOT VALID phrase when rendering DDL for the CheckConstraint, ForeignKeyConstraint and ForeignKey schema constructs. Pull request courtesy Gilbert Gilb?s. References: #7600 * mysql + [mysql] [bug] [regression] Fixed regression caused by #7518 where changing the syntax ?SHOW VARIABLES? to ?SELECT @@? broke compatibility with MySQL versions older than 5.6, including early 5.0 releases. While these are very old MySQL versions, a change in compatibility was not planned, so version-specific logic has been restored to fall back to ?SHOW VARIABLES? for MySQL server versions < 5.6. References: #7518 * mariadb + [mariadb] [bug] [regression] Fixed regression in mariadbconnector dialect as of mariadb connector 1.0.10 where the DBAPI no longer pre-buffers cursor.lastrowid, leading to errors when inserting objects with the ORM as well as causing non-availability of the CursorResult.inserted_primary_key attribute. The dialect now fetches this value proactively for situations where it applies. References: #7738 * sqlite + [sqlite] [usecase] Added support for reflecting SQLite inline unique constraints where the column names are formatted with SQLite ?escape quotes? [] or `, which are discarded by the database when producing the column name. References: #7736 + [sqlite] [bug] Fixed issue where SQLite unique constraint reflection would fail to detect a column-inline UNIQUE constraint where the column name had an underscore in its name. References: #7736 * oracle + [oracle] [bug] Fixed issue in Oracle dialect where using a column name that requires quoting when written as a bound parameter, such as "_id", would not correctly track a Python generated default value due to the bound-parameter rewriting missing this value, causing an Oracle error to be raised. References: #7676 + [oracle] [bug] [regression] Added support to parse ?DPI? error codes from cx_Oracle exception objects such as DPI-1080 and DPI-1010, both of which now indicate a disconnect scenario as of cx_Oracle 8.3. References: #7748 * tests + [tests] [bug] Improvements to the test suite?s integration with pytest such that the ?warnings? plugin, if manually enabled, will not interfere with the test suite, such that third parties can enable the warnings plugin or make use of the -W parameter and SQLAlchemy?s test suite will continue to pass. Additionally, modernized the detection of the ?pytest-xdist? plugin so that plugins can be globally disabled using PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 without breaking the test suite if xdist were still installed. Warning filters that promote deprecation warnings to errors are now localized to SQLAlchemy-specific warnings, or within SQLAlchemy-specific sources for general Python deprecation warnings, so that non-SQLAlchemy deprecation warnings emitted from pytest plugins should also not impact the test suite. References: #7599 + [tests] [bug] Made corrections to the default pytest configuration regarding how test discovery is configured, to fix issue where the test suite would not configure warnings correctly and also attempt to load example suites as tests, in the specific case where the SQLAlchemy checkout were located in an absolute path that had a super-directory named ?test?. References: #7045 ==== util-linux ==== Version update (2.37.3 -> 2.37.4) Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 - Update to version 2.37.4: * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563). SUSE is not affected (bsc#1196241). - Fix "su -s" bash completion (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch). ==== util-linux-systemd ==== Version update (2.37.3 -> 2.37.4) - Update to version 2.37.4: * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563). SUSE is not affected (bsc#1196241). - Fix "su -s" bash completion (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch). - update to 2.37.3 (bsc#1194976): This release fixes two security mount(8) and umount(8) issues: * CVE-2021-3996 Improper UID check in libmount allows an unprivileged user to unmount FUSE filesystems of users with similar UID. * CVE-2021-3995 This issue is related to parsing the /proc/self/mountinfo file allows an unprivileged user to unmount other user's filesystems that are either world-writable themselves or mounted in a world-writable directory.

1 0

dhcp-client upgrade breaks automatic transactional-updates (due to manual intervention)
by Johannes Kastl 15 Mar '22

15 Mar '22

Hi everyone, not sure if this was reported already, if not I can open a bugzilla if needed. I just noticed that one of my openSUSE MicroOS machines was not updating automatically anymore. Seems like an update for dhcp-client-4.4.2.P1-7.3.x86_64 makes manual intervention necessary: > Problem: the to be installed dhcp-client-4.4.2.P1-7.3.x86_64 requires 'hostname', but this requirement cannot be provided > not installable providers: hostname-3.23-2.10.i586[repo-oss] > hostname-3.23-2.10.x86_64[repo-oss] > Solution 1: deinstallation of busybox-hostname-1.35.0-21.2.noarch > Solution 2: deinstallation of patterns-microos-base-5.0-44.1.x86_64 > Solution 3: keep obsolete patterns-microos-base-5.0-44.1.x86_64 > Solution 4: break dhcp-client-4.4.2.P1-7.3.x86_64 by ignoring some of its dependencies > > Choose from above solutions by number or cancel [1/2/3/4/c/d/?] (c): Seems like it requires the "hostname" package, that is not installable as it conflicts with "busybox-hostname": > Problem: the installed busybox-hostname-1.35.0-21.2.noarch conflicts with 'hostname' provided by the to be installed hostname-3.23-2.10.x86_64 > Solution 1: deinstallation of busybox-hostname-1.35.0-21.2.noarch > Solution 2: do not install hostname-3.23-2.10.x86_64 > > Choose from above solutions by number or cancel [1/2/c/d/?] (c): I replaced busybox-hostname with hostname, as it is on my other MicroOS machines, and the "zypper dup" worked fine after that. Not sure why this machine had it, but it was installed way after the other ones and was installed with SELINUX enabled. Kind Regards, Johannes -- Johannes Kastl Linux Consultant & Trainer Tel.: +49 (0) 151 2372 5802 Mail: kastl(a)b1-systems.de B1 Systems GmbH Osterfeldstraße 7 / 85088 Vohburg http://www.b1-systems.de GF: Ralph Dehner Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537

5 5

New MicroOS snapshot 20220313 released!
by Richard Brown 14 Mar '22

14 Mar '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: curl (7.81.0 -> 7.82.0) kernel-source (5.16.11 -> 5.16.14) osinfo-db pipewire (0.3.47 -> 0.3.48) upower (0.99.16+4 -> 0.99.17) === Details === ==== curl ==== Version update (7.81.0 -> 7.82.0) Subpackages: libcurl4 - Fix: openssl: fix CN check error code * Add curl-fix-verifyhost.patch - Update to 7.82.0: * curl: add --json command line option * curl: make it so that sensitive command line arguments do not show as easily in the output of ps(1) * curl_multi_socket.3: remove callback and typical usage descriptions * ftp: provide error message for control bytes in path * ldap: return CURLE_URL_MALFORMAT for bad URL * lib: remove support for CURL_DOES_CONVERSIONS * mqtt: plug some memory leaks * multi: allow user callbacks to call curl_multi_assign * multi: remember connection_id before returning connection to pool * multi: set in_callback for multi interface callbacks * netware: remove support * ngtcp2: adapt to changed end of headers callback proto * openldap: implement SASL authentication * openssl: return error if TLS 1.3 is requested when not supported * sectransp: mark a 3DES cipher as weak * smb: pass socket for writing and reading data instead of FIRSTSOCKET * tool_getparam: DNS options that need c-ares now fail without it * TPF: drop support * url: given a user in the URL, find pwd for that user in netrc * url: keep trailing dot in host name * urlapi: handle "redirects" smarter * urldata: CONN_IS_PROXIED replaces bits.proxy when proxy can be disabled * urldata: remove conn->bits.user_passwd ==== kernel-source ==== Version update (5.16.11 -> 5.16.14) - Linux 5.16.14 (bsc#1012628). - Revert "ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE" (bsc#1012628). - xen/netfront: react properly to failing gnttab_end_foreign_access_ref() (bsc#1012628). - xen/gnttab: fix gnttab_end_foreign_access() without page specified (bsc#1012628). - xen/pvcalls: use alloc/free_pages_exact() (bsc#1012628). - xen/9p: use alloc/free_pages_exact() (bsc#1012628). - xen: remove gnttab_query_foreign_access() (bsc#1012628). - xen/gntalloc: don't use gnttab_query_foreign_access() (bsc#1012628). - xen/scsifront: don't use gnttab_query_foreign_access() for mapped status (bsc#1012628). - xen/netfront: don't use gnttab_query_foreign_access() for mapped status (bsc#1012628). - xen/blkfront: don't use gnttab_query_foreign_access() for mapped status (bsc#1012628). - xen/grant-table: add gnttab_try_end_foreign_access() (bsc#1012628). - xen/xenbus: don't let xenbus_grant_ring() remove grants in error case (bsc#1012628). - ARM: fix build warning in proc-v7-bugs.c (bsc#1012628). - arm64: Do not include __READ_ONCE() block in assembly files (bsc#1012628). - ARM: Do not use NOCROSSREFS directive with ld.lld (bsc#1012628). - ARM: fix co-processor register typo (bsc#1012628). - ARM: fix build error when BPF_SYSCALL is disabled (bsc#1012628). - arm64: proton-pack: Include unprivileged eBPF status in Spectre v2 mitigation reporting (bsc#1012628). - arm64: Use the clearbhb instruction in mitigations (bsc#1012628). - KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated (bsc#1012628). - arm64: Mitigate spectre style branch history side channels (bsc#1012628). - Update config files. - arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 (bsc#1012628). - arm64: Add percpu vectors for EL1 (bsc#1012628). - arm64: entry: Add macro for reading symbol addresses from the trampoline (bsc#1012628). - arm64: entry: Add vectors that have the bhb mitigation sequences (bsc#1012628). - arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations (bsc#1012628). - arm64: entry: Allow the trampoline text to occupy multiple pages (bsc#1012628). - arm64: entry: Make the kpti trampoline's kpti sequence optional (bsc#1012628). - arm64: entry: Move trampoline macros out of ifdef'd section (bsc#1012628). - arm64: entry: Don't assume tramp_vectors is the start of the vectors (bsc#1012628). - arm64: entry: Allow tramp_alias to access symbols after the 4K boundary (bsc#1012628). - arm64: entry: Move the trampoline data page before the text page (bsc#1012628). - arm64: entry: Free up another register on kpti's tramp_exit path (bsc#1012628). - arm64: entry: Make the trampoline cleanup optional (bsc#1012628). - KVM: arm64: Allow indirect vectors to be used without SPECTRE_V3A (bsc#1012628). - arm64: spectre: Rename spectre_v4_patch_fw_mitigation_conduit (bsc#1012628). - arm64: entry.S: Add ventry overflow sanity checks (bsc#1012628). - arm64: cpufeature: add HWCAP for FEAT_RPRES (bsc#1012628). - arm64: cpufeature: add HWCAP for FEAT_AFP (bsc#1012628). - arm64: add ID_AA64ISAR2_EL1 sys register (bsc#1012628). - ARM: include unprivileged BPF status in Spectre V2 reporting (bsc#1012628). - ARM: Spectre-BHB workaround (bsc#1012628). - Update config files. - ARM: use LOADADDR() to get load address of sections (bsc#1012628). - ARM: early traps initialisation (bsc#1012628). - ARM: report Spectre v2 status through sysfs (bsc#1012628). - Update config files. - x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT (bsc#1012628). - x86/speculation: Warn about Spectre v2 LFENCE mitigation (bsc#1012628). - x86/speculation: Update link to AMD speculation whitepaper (bsc#1012628). - x86/speculation: Use generic retpoline by default on AMD (bsc#1012628). - x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting (bsc#1012628). - Documentation/hw-vuln: Update spectre doc (bsc#1012628). - x86/speculation: Add eIBRS + Retpoline options (bsc#1012628). - x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE (bsc#1012628). - commit 80acc65 - Bluetooth: btusb: Add missing Chicony device for Realtek RTL8723BE (bsc#1196779). - commit 714ef34 - Linux 5.16.13 (bsc#1012628). - mac80211_hwsim: report NOACK frames in tx_status (bsc#1012628). - mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work (bsc#1012628). - i2c: bcm2835: Avoid clock stretching timeouts (bsc#1012628). - ASoC: rt5682s: do not block workqueue if card is unbound (bsc#1012628). - ASoC: rt5668: do not block workqueue if card is unbound (bsc#1012628). - ASoC: rt5682: do not block workqueue if card is unbound (bsc#1012628). - regulator: core: fix false positive in regulator_late_cleanup() (bsc#1012628). - Input: clear BTN_RIGHT/MIDDLE on buttonpads (bsc#1012628). - btrfs: get rid of warning on transaction commit when using flushoncommit (bsc#1012628). - KVM: arm64: vgic: Read HW interrupt pending state from the HW (bsc#1012628). - block: loop:use kstatfs.f_bsize of backing file to set discard granularity (bsc#1012628). - tipc: fix a bit overflow in tipc_crypto_key_rcv() (bsc#1012628). - cifs: do not use uninitialized data in the owner/group sid (bsc#1012628). - cifs: fix double free race when mount fails in cifs_get_root() (bsc#1012628). - HID: amd_sfh: Handle amd_sfh work buffer in PM ops (bsc#1012628). - HID: amd_sfh: Add functionality to clear interrupts (bsc#1012628). - HID: amd_sfh: Add interrupt handler to process interrupts (bsc#1012628). - cifs: modefromsids must add an ACE for authenticated users (bsc#1012628). - selftests/seccomp: Fix seccomp failure by adding missing headers (bsc#1012628). - drm/amd/pm: correct UMD pstate clocks for Dimgrey Cavefish and Beige Goby (bsc#1012628). - selftests/ftrace: Do not trace do_softirq because of PREEMPT_RT (bsc#1012628). - dmaengine: shdma: Fix runtime PM imbalance on error (bsc#1012628). - i2c: cadence: allow COMPILE_TEST (bsc#1012628). - i2c: imx: allow COMPILE_TEST (bsc#1012628). - i2c: qup: allow COMPILE_TEST (bsc#1012628). - net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990 (bsc#1012628). - block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern (bsc#1012628). - exfat: reuse exfat_inode_info variable instead of calling EXFAT_I() (bsc#1012628). - exfat: fix i_blocks for files truncated over 4 GiB (bsc#1012628). - tracing: Add test for user space strings when filtering on string pointers (bsc#1012628). - arm64: Mark start_backtrace() notrace and NOKPROBE_SYMBOL (bsc#1012628). - serial: stm32: prevent TDR register overwrite when sending x_char (bsc#1012628). - KVM: arm64: Workaround Cortex-A510's single-step and PAC trap errata (bsc#1012628). - ext4: drop ineligible txn start stop APIs (bsc#1012628). - ext4: simplify updating of fast commit stats (bsc#1012628). - ext4: fast commit may not fallback for ineligible commit (bsc#1012628). - ext4: fast commit may miss file actions (bsc#1012628). - sched/fair: Fix fault in reweight_entity (bsc#1012628). - KVM: x86: Add KVM_CAP_ENABLE_CAP to x86 (bsc#1012628). - ata: pata_hpt37x: fix PCI clock detection (bsc#1012628). - drm/amdgpu: check vm ready by amdgpu_vm->evicting flag (bsc#1012628). - tracing: Add ustring operation to filtering string pointers (bsc#1012628). - ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report() (bsc#1012628). - btrfs: defrag: bring back the old file extent search behavior (bsc#1012628). - btrfs: defrag: don't use merged extent map for their generation check (bsc#1012628). - ALSA: intel_hdmi: Fix reference to PCM buffer address (bsc#1012628). - ucounts: Fix systemd LimitNPROC with private users regression (bsc#1012628). - binfmt_elf: Avoid total_mapping_size for ET_EXEC (bsc#1012628). - riscv/efi_stub: Fix get_boot_hartid_from_fdt() return value (bsc#1012628). - riscv: Fix config KASAN && SPARSEMEM && !SPARSE_VMEMMAP (bsc#1012628). - riscv: Fix config KASAN && DEBUG_VIRTUAL (bsc#1012628). - iwlwifi: mvm: check debugfs_dir ptr before use (bsc#1012628). - ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min (bsc#1012628). - iommu/vt-d: Fix double list_add when enabling VMD in scalable mode (bsc#1012628). - iommu/amd: Recover from event log overflow (bsc#1012628). - drm/i915: s/JSP2/ICP2/ PCH (bsc#1012628). - drm/amd/display: Reduce dmesg error to a debug print (bsc#1012628). - xen/netfront: destroy queues before real_num_tx_queues is zeroed (bsc#1012628). - thermal: core: Fix TZ_GET_TRIP NULL pointer dereference (bsc#1012628). - mac80211: fix EAPoL rekey fail in 802.3 rx path (bsc#1012628). - blktrace: fix use after free for struct blk_trace (bsc#1012628). - ntb: intel: fix port config status offset for SPR (bsc#1012628). - mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls (bsc#1012628). - xfrm: fix MTU regression (bsc#1012628). - netfilter: fix use-after-free in __nf_register_net_hook() (bsc#1012628). - bpf, sockmap: Do not ignore orig_len parameter (bsc#1012628). - xfrm: fix the if_id check in changelink (bsc#1012628). - xfrm: enforce validity of offload input flags (bsc#1012628). - e1000e: Correct NVM checksum verification flow (bsc#1012628). - net: fix up skbs delta_truesize in UDP GRO frag_list (bsc#1012628). - netfilter: nf_queue: don't assume sk is full socket (bsc#1012628). - netfilter: nf_queue: fix possible use-after-free (bsc#1012628). - netfilter: nf_queue: handle socket prefetch (bsc#1012628). - batman-adv: Request iflink once in batadv-on-batadv check (bsc#1012628). - batman-adv: Request iflink once in batadv_get_real_netdevice (bsc#1012628). - batman-adv: Don't expect inter-netns unique iflink indices (bsc#1012628). - net: ipv6: ensure we call ipv6_mc_down() at most once (bsc#1012628). - net: dcb: flush lingering app table entries for unregistered devices (bsc#1012628). - net: ipa: fix a build dependency (bsc#1012628). - net: ipa: add an interconnect dependency (bsc#1012628). - net/smc: fix connection leak (bsc#1012628). - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client (bsc#1012628). - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server (bsc#1012628). - btrfs: fix ENOSPC failure when attempting direct IO write into NOCOW range (bsc#1012628). - platform/x86: amd-pmc: Set QOS during suspend on CZN w/ timer wakeup (bsc#1012628). - net: dsa: microchip: fix bridging with more than two member ports (bsc#1012628). - mac80211: fix forwarded mesh frames AC & queue selection (bsc#1012628). - net: stmmac: fix return value of __setup handler (bsc#1012628). - mac80211: treat some SAE auth steps as final (bsc#1012628). - iavf: Fix missing check for running netdev (bsc#1012628). - net: sxgbe: fix return value of __setup handler (bsc#1012628). - ibmvnic: register netdev after init of adapter (bsc#1012628). - net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe() (bsc#1012628). - ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc() (bsc#1012628). - iavf: Fix deadlock in iavf_reset_task (bsc#1012628). - efivars: Respect "block" flag in efivar_entry_set_safe() (bsc#1012628). - auxdisplay: lcd2s: Fix lcd2s_redefine_char() feature (bsc#1012628). - firmware: arm_scmi: Remove space in MODULE_ALIAS name (bsc#1012628). - ASoC: cs4265: Fix the duplicated control name (bsc#1012628). - auxdisplay: lcd2s: Fix memory leak in ->remove() (bsc#1012628). - auxdisplay: lcd2s: Use proper API to free the instance of charlcd object (bsc#1012628). - can: gs_usb: change active_channels's type from atomic_t to u8 (bsc#1012628). - iommu/tegra-smmu: Fix missing put_device() call in tegra_smmu_find (bsc#1012628). - arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output (bsc#1012628). - igc: igc_read_phy_reg_gpy: drop premature return (bsc#1012628). - ARM: Fix kgdb breakpoint for Thumb2 (bsc#1012628). - mips: setup: fix setnocoherentio() boolean setting (bsc#1012628). - ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions (bsc#1012628). - mptcp: Correctly set DATA_FIN timeout when number of retransmits is large (bsc#1012628). - selftests: mlxsw: tc_police_scale: Make test more robust (bsc#1012628). - pinctrl: sunxi: Use unique lockdep classes for IRQs (bsc#1012628). - igc: igc_write_phy_reg_gpy: drop premature return (bsc#1012628). - ibmvnic: free reset-work-item when flushing (bsc#1012628). - memfd: fix F_SEAL_WRITE after shmem huge page allocated (bsc#1012628). - s390/setup: preserve memory at OLDMEM_BASE and OLDMEM_SIZE (bsc#1012628). - s390/extable: fix exception table sorting (bsc#1012628). - sched: Fix yet more sched_fork() races (bsc#1012628). - arm64: dts: rockchip: drop pclk_xpcs from gmac0 on rk3568 (bsc#1012628). - arm64: dts: juno: Remove GICv2m dma-range (bsc#1012628). - arm64: dts: rockchip: fix Quartz64-A ddr regulator voltage (bsc#1012628). - arm64: dts: imx8mm: Fix VPU Hanging (bsc#1012628). - iommu/amd: Fix I/O page table memory leak (bsc#1012628). - MIPS: ralink: mt7621: do memory detection on KSEG1 (bsc#1012628). - ARM: dts: switch timer config to common devkit8000 devicetree (bsc#1012628). - ARM: dts: Use 32KiHz oscillator on devkit8000 (bsc#1012628). - soc: fsl: guts: Revert commit 3c0d64e867ed (bsc#1012628). - soc: fsl: guts: Add a missing memory allocation failure check (bsc#1012628). - soc: fsl: qe: Check of ioremap return value (bsc#1012628). - soc: imx: gpcv2: Fix clock disabling imbalance in error path (bsc#1012628). - netfilter: nf_tables: prefer kfree_rcu(ptr, rcu) variant (bsc#1012628). - ARM: tegra: Move panels to AUX bus (bsc#1012628). - Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks (bsc#1012628). - can: etas_es58x: change opened_channel_cnt's type from atomic_t to u8 (bsc#1012628). - net: stmmac: enhance XDP ZC driver level switching performance (bsc#1012628). - net: stmmac: only enable DMA interrupts when ready (bsc#1012628). - ibmvnic: initialize rc before completing wait (bsc#1012628). - ibmvnic: define flush_reset_queue helper (bsc#1012628). - ibmvnic: complete init_done on transport events (bsc#1012628). - ibmvnic: Update driver return codes (bsc#1012628). - ibmvnic: init init_done_rc earlier (bsc#1012628). - ibmvnic: clear fop when retrying probe (bsc#1012628). - ibmvnic: Allow queueing resets during probe (bsc#1012628). - net: chelsio: cxgb3: check the return value of pci_find_capability() (bsc#1012628). - net: sparx5: Fix add vlan when invalid operation (bsc#1012628). - iavf: Add trace while removing device (bsc#1012628). - iavf: Rework mutexes for better synchronisation (bsc#1012628). - iavf: Add waiting so the port is initialized in remove (bsc#1012628). - iavf: Fix init state closure on remove (bsc#1012628). - iavf: Fix locking for VIRTCHNL_OP_GET_OFFLOAD_VLAN_V2_CAPS (bsc#1012628). - iavf: Fix race in init state (bsc#1012628). - iavf: Fix __IAVF_RESETTING state usage (bsc#1012628). - drm/i915/guc/slpc: Correct the param count for unset param (bsc#1012628). - drm/bridge: ti-sn65dsi86: Properly undo autosuspend (bsc#1012628). - e1000e: Fix possible HW unit hang after an s0ix exit (bsc#1012628). - MIPS: ralink: mt7621: use bitwise NOT instead of logical (bsc#1012628). - nl80211: Handle nla_memdup failures in handle_nan_filter (bsc#1012628). - ptp: ocp: Add ptp_ocp_adjtime_coarse for large adjustments (bsc#1012628). - drm/amdgpu: fix suspend/resume hang regression (bsc#1012628). - net: dcb: disable softirqs in dcbnl_flush_dev() (bsc#1012628). - selftests: mlxsw: resource_scale: Fix return value (bsc#1012628). - net: stmmac: perserve TX and RX coalesce value during XDP setup (bsc#1012628). - Input: elan_i2c - move regulator_[en|dis]able() out of elan_[en|dis]able_power() (bsc#1012628). - Input: elan_i2c - fix regulator enable count imbalance after suspend/resume (bsc#1012628). - Input: samsung-keypad - properly state IOMEM dependency (bsc#1012628). - HID: add mapping for KEY_DICTATE (bsc#1012628). - HID: add mapping for KEY_ALL_APPLICATIONS (bsc#1012628). - tracing/histogram: Fix sorting on old "cpu" value (bsc#1012628). - tracing: Fix return value of __setup handlers (bsc#1012628). - btrfs: fix lost prealloc extents beyond eof after full fsync (bsc#1012628). - btrfs: fix relocation crash due to premature return from btrfs_commit_transaction() (bsc#1012628). - btrfs: subpage: fix a wrong check on subpage->writers (bsc#1012628). - btrfs: do not WARN_ON() if we have PageError set (bsc#1012628). - btrfs: qgroup: fix deadlock between rescan worker and remove qgroup (bsc#1012628). - btrfs: add missing run of delayed items after unlink during log replay (bsc#1012628). - btrfs: fallback to blocking mode when doing async dio over multiple extents (bsc#1012628). - btrfs: do not start relocation until in progress drops are done (bsc#1012628). - Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6" (bsc#1012628). - proc: fix documentation and description of pagemap (bsc#1012628). - x86/kvmclock: Fix Hyper-V Isolated VM's boot issue when vCPUs > 64 (bsc#1012628). - s390/ftrace: fix arch_ftrace_get_regs implementation (bsc#1012628). - s390/ftrace: fix ftrace_caller/ftrace_regs_caller generation (bsc#1012628). - KVM: x86/mmu: Passing up the error state of mmu_alloc_shadow_roots() (bsc#1012628). - Update config files. - commit bd40cb2 - Update patches.kernel.org/5.16.11-207-lib-iov_iter-initialize-flags-in-new-pipe_bu… (bsc#1012628 bsc#1196584 CVE-2022-0847). Add references. - commit 82f40a9 - nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION (CVE-2022-26490 bsc#1196830). - commit b002fe2 - config: ppc64{,le}: build vmx-crypto as module (bsc#1195768) Building CONFIG_CRYPTO_DEV_VMX_ENCRYPT as module is the default in mainline since v4.8, we use it in SLES and already in config/ppc64/default. Thus unify it in the other configs. There are build dependencies which has been fixed in mainline 647d41d3952d ("crypto: vmx - add missing dependencies") (currently still at maintainer herbert/cryptodev-2.6 tree) But instead of waiting commit to be accepted or backporting it we just unify configs, which is useful anyway - commit 70a0d71 - kernel-binary.spec: Also exclude the kernel signing key from devel package. There is a check in OBS that fails when it is included. Also the key is not reproducible. Fixes: bb988d4625a3 ("kernel-binary: Do not include sourcedir in certificate path.") - commit 68fa069 - rpm/check-for-config-changes: Ignore PAHOLE_VERSION. - commit 88ba5ec - Linux 5.16.12 (bsc#1012628). - memblock: use kfree() to release kmalloced memblock regions (bsc#1012628). - gpio: tegra186: Fix chip_data type confusion (bsc#1012628). - pinctrl: k210: Fix bias-pull-up (bsc#1012628). - pinctrl: fix loop in k210_pinconf_get_drive() (bsc#1012628). - tty: n_gsm: fix deadlock in gsmtty_open() (bsc#1012628). - tty: n_gsm: fix wrong modem processing in convergence layer type 2 (bsc#1012628). - tty: n_gsm: fix wrong tty control line for flow control (bsc#1012628). - tty: n_gsm: fix NULL pointer access due to DLCI release (bsc#1012628). - tty: n_gsm: fix proper link termination after failed open (bsc#1012628). - tty: n_gsm: fix encoding of command/response bit (bsc#1012628). - tty: n_gsm: fix encoding of control signal octet bit DV (bsc#1012628). - hugetlbfs: fix a truncation issue in hugepages parameter (bsc#1012628). - mm/hugetlb: fix kernel crash with hugetlb mremap (bsc#1012628). - riscv: fix oops caused by irqsoff latency tracer (bsc#1012628). - riscv: fix nommu_k210_sdcard_defconfig (bsc#1012628). - IB/qib: Fix duplicate sysfs directory name (bsc#1012628). - tps6598x: clear int mask on probe failure (bsc#1012628). - staging: fbtft: fb_st7789v: reset display before initialization (bsc#1012628). - thermal: int340x: fix memory leak in int3400_notify() (bsc#1012628). - RDMA/cma: Do not change route.addr.src_addr outside state checks (bsc#1012628). - btrfs: reduce extent threshold for autodefrag (bsc#1012628). - btrfs: autodefrag: only scan one inode once (bsc#1012628). - btrfs: defrag: allow defrag_one_cluster() to skip large extent which is not a target (bsc#1012628). - btrfs: prevent copying too big compressed lzo segment (bsc#1012628). - btrfs: defrag: remove an ambiguous condition for rejection (bsc#1012628). - btrfs: defrag: don't defrag extents which are already at max capacity (bsc#1012628). - btrfs: defrag: don't try to merge regular extents with preallocated extents (bsc#1012628). - driver core: Free DMA range map when device is released (bsc#1012628). - mtd: core: Fix a conflict between MTD and NVMEM on wp-gpios property (bsc#1012628). - nvmem: core: Fix a conflict between MTD and NVMEM on wp-gpios property (bsc#1012628). - xhci: Prevent futile URB re-submissions due to incorrect return value (bsc#1012628). - xhci: re-initialize the HC during resume if HCE was set (bsc#1012628). - usb: dwc3: gadget: Let the interrupt handler disable bottom halves (bsc#1012628). - usb: dwc3: pci: Fix Bay Trail phy GPIO mappings (bsc#1012628). - usb: dwc3: pci: Add "snps,dis_u2_susphy_quirk" for Intel Bay Trail (bsc#1012628). - usb: dwc2: drd: fix soft connect when gadget is unconfigured (bsc#1012628). - USB: serial: option: add Telit LE910R1 compositions (bsc#1012628). - USB: serial: option: add support for DW5829e (bsc#1012628). - tracefs: Set the group ownership in apply_options() not parse_options() (bsc#1012628). - USB: gadget: validate endpoint index for xilinx udc (bsc#1012628). - usb: gadget: rndis: add spinlock for rndis response list (bsc#1012628). - Revert "USB: serial: ch341: add new Product ID for CH341A" (bsc#1012628). - ata: pata_hpt37x: disable primary channel on HPT371 (bsc#1012628). - sc16is7xx: Fix for incorrect data being transmitted (bsc#1012628). - iio: Fix error handling for PM (bsc#1012628). - iio: imu: st_lsm6dsx: wait for settling time in st_lsm6dsx_read_oneshot (bsc#1012628). - iio: accel: fxls8962af: add padding to regmap for SPI (bsc#1012628). - iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits (bsc#1012628). - iio: adc: tsc2046: fix memory corruption by preventing array overflow (bsc#1012628). - iio: adc: men_z188_adc: Fix a resource leak in an error handling path (bsc#1012628). - iio:imu:adis16480: fix buffering for devices with no burst mode (bsc#1012628). - tracing: Have traceon and traceoff trigger honor the instance (bsc#1012628). - tracing: Dump stacktrace trigger to the corresponding instance (bsc#1012628). - bpf: Fix crash due to out of bounds access into reg2btf_ids (bsc#1012628). - bpf: Extend kfunc with PTR_TO_CTX, PTR_TO_MEM argument support (bsc#1012628). - RDMA/ib_srp: Fix a deadlock (bsc#1012628). - configfs: fix a race in configfs_{,un}register_subsystem() (bsc#1012628). - bnxt_en: Increase firmware message response DMA wait time (bsc#1012628). - RDMA/rtrs-clt: Move free_permit from free_clt to rtrs_clt_close (bsc#1012628). - RDMA/rtrs-clt: Fix possible double free in error case (bsc#1012628). - net-timestamp: convert sk->sk_tskey to atomic_t (bsc#1012628). - net: use sk_is_tcp() in more places (bsc#1012628). - regmap-irq: Update interrupt clear register for proper reset (bsc#1012628). - gpio: rockchip: Reset int_bothedge when changing trigger (bsc#1012628). - PCI: mvebu: Fix device enumeration regression (bsc#1012628). - spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op() (bsc#1012628). - net/mlx5e: Add missing increment of count (bsc#1012628). - net/mlx5: Update log_max_qp value to be 17 at most (bsc#1012628). - net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte (bsc#1012628). - net/mlx5e: kTLS, Use CHECKSUM_UNNECESSARY for device-offloaded packets (bsc#1012628). - net/mlx5e: MPLSoUDP decap, fix check for unsupported matches (bsc#1012628). - net/mlx5: DR, Fix the threshold that defines when pool sync is initiated (bsc#1012628). - net/mlx5: Fix wrong limitation of metadata match on ecpf (bsc#1012628). - net/mlx5: Fix possible deadlock on rule deletion (bsc#1012628). - net/mlx5: DR, Don't allow match on IP w/o matching on full ethertype/ip_version (bsc#1012628). - ibmvnic: schedule failover only if vioctl fails (bsc#1012628). - net/mlx5: DR, Cache STE shadow memory (bsc#1012628). - udp_tunnel: Fix end of loop test in udp_tunnel_nic_unregister() (bsc#1012628). - surface: surface3_power: Fix battery readings on batteries without a serial number (bsc#1012628). - net/smc: Use a mutex for locking "struct smc_pnettable" (bsc#1012628). - netfilter: nf_tables: fix memory leak during stateful obj update (bsc#1012628). - net: mdio-ipq4019: add delay after clock enable (bsc#1012628). - nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac() (bsc#1012628). - net: dsa: avoid call to __dev_set_promiscuity() while rtnl_mutex isn't held (bsc#1012628). - netfilter: nf_tables: unregister flowtable hooks on netns exit (bsc#1012628). - net: Force inlining of checksum functions in net/checksum.h (bsc#1012628). - net: ll_temac: check the return value of devm_kmalloc() (bsc#1012628). - net/sched: act_ct: Fix flow table lookup after ct clear or switching zones (bsc#1012628). - drm/amd/display: For vblank_disable_immediate, check PSR is really used (bsc#1012628). - drm/i915/dg2: Print PHY name properly on calibration error (bsc#1012628). - drm/vc4: crtc: Fix runtime_pm reference counting (bsc#1012628). - block: clear iocb->private in blkdev_bio_end_io_async() (bsc#1012628). - net/mlx5e: TC, Reject rules with drop and modify hdr action (bsc#1012628). - net/mlx5e: TC, Reject rules with forward and drop actions (bsc#1012628). - net/mlx5e: Fix wrong return value on ioctl EEPROM query failure (bsc#1012628). - drm/edid: Always set RGB444 (bsc#1012628). - openvswitch: Fix setting ipv6 fields causing hw csum failure (bsc#1012628). - net: mv643xx_eth: process retval from of_get_mac_address (bsc#1012628). - gso: do not skip outer ip header in case of ipip and net_failover (bsc#1012628). - clk: qcom: gcc-msm8994: Remove NoC clocks (bsc#1012628). - tipc: Fix end of loop tests for list_for_each_entry() (bsc#1012628). - nvme: also mark passthrough-only namespaces ready in nvme_update_ns_info (bsc#1012628). - net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends (bsc#1012628). - io_uring: add a schedule point in io_add_buffers() (bsc#1012628). - bpf: Add schedule points in batch ops (bsc#1012628). - bpf: Fix a bpf_timer initialization issue (bsc#1012628). - selftests: bpf: Check bpf_msg_push_data return value (bsc#1012628). - bpf: Do not try bpf_msg_push_data with len 0 (bsc#1012628). - bpf: Fix crash due to incorrect copy_map_value (bsc#1012628). - net/mlx5: Update the list of the PCI supported devices (bsc#1012628). - ice: initialize local variable 'tlv' (bsc#1012628). - ice: check the return of ice_ptp_gettimex64 (bsc#1012628). - ice: fix concurrent reset and removal of VFs (bsc#1012628). - ice: fix setting l4 port flag when adding filter (bsc#1012628). - net/mlx5: Fix tc max supported prio for nic mode (bsc#1012628). - hwmon: Handle failure to register sensor with thermal zone correctly (bsc#1012628). - bnxt_en: Restore the resets_reliable flag in bnxt_open() (bsc#1012628). - bnxt_en: Fix incorrect multicast rx mask setting when not requested (bsc#1012628). - bnxt_en: Fix occasional ethtool -t loopback test failures (bsc#1012628). - bnxt_en: Fix offline ethtool selftest with RDMA enabled (bsc#1012628). - bnxt_en: Fix active FEC reporting to ethtool (bsc#1012628). - bnxt_en: Fix devlink fw_activate (bsc#1012628). - bnx2x: fix driver load from initrd (bsc#1012628). - selftests: mptcp: be more conservative with cookie MPJ limits (bsc#1012628). - selftests: mptcp: fix diag instability (bsc#1012628). - mptcp: add mibs counter for ignored incoming options (bsc#1012628). - mptcp: fix race in incoming ADD_ADDR option processing (bsc#1012628). - perf data: Fix double free in perf_session__delete() (bsc#1012628). - perf evlist: Fix failed to use cpu list for uncore events (bsc#1012628). - gpu: host1x: Always return syncpoint value when waiting (bsc#1012628). - Revert "i40e: Fix reset bw limit when DCB enabled with 1 TC" (bsc#1012628). - ping: remove pr_err from ping_lookup (bsc#1012628). - netfilter: nf_tables_offload: incorrect flow offload action array size (bsc#1012628). - netfilter: xt_socket: missing ifdef CONFIG_IP6_NF_IPTABLES dependency (bsc#1012628). - netfilter: xt_socket: fix a typo in socket_mt_destroy() (bsc#1012628). - CDC-NCM: avoid overflow in sanity checking (bsc#1012628). - USB: zaurus: support another broken Zaurus (bsc#1012628). - sr9700: sanity check for packet length (bsc#1012628). - drm/i915: Fix bw atomic check when switching between SAGV vs. no SAGV (bsc#1012628). - drm/i915: Correctly populate use_sagv_wm for all pipes (bsc#1012628). - drm/i915: Disconnect PHYs left connected by BIOS on disabled ports (bsc#1012628). - drm/i915: Widen the QGV point mask (bsc#1012628). - drm/amdgpu: do not enable asic reset for raven2 (bsc#1012628). - drm/amdgpu: disable MMHUB PG for Picasso (bsc#1012628). - drm/amd: Check if ASPM is enabled from PCIe subsystem (bsc#1012628). - drm/amd/pm: fix some OEM SKU specific stability issues (bsc#1012628). - drm/amd/display: Protect update_bw_bounding_box FPU code (bsc#1012628). - drm/amd/display: Fix stream->link_enc unassigned during stream removal (bsc#1012628). - KVM: x86: nSVM: disallow userspace setting of MSR_AMD64_TSC_RATIO to non default value when tsc scaling disabled (bsc#1012628). - KVM: x86/mmu: make apf token non-zero to fix bug (bsc#1012628). - parisc/unaligned: Fix ldw() and stw() unalignment handlers (bsc#1012628). - parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel (bsc#1012628). - vhost/vsock: don't check owner in vhost_vsock_stop() while releasing (bsc#1012628). - selinux: fix misuse of mutex_is_locked() (bsc#1012628). - io_uring: disallow modification of rsrc_data during quiesce (bsc#1012628). - io_uring: don't convert to jiffies for waiting on timeouts (bsc#1012628). - clk: jz4725b: fix mmc0 clock gating (bsc#1012628). - slab: remove __alloc_size attribute from __kmalloc_track_caller (bsc#1012628). - btrfs: tree-checker: check item_size for dev_item (bsc#1012628). - btrfs: tree-checker: check item_size for inode_item (bsc#1012628). - cgroup-v1: Correct privileges check in release_agent writes (bsc#1012628). - cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (bsc#1012628). - mm/filemap: Fix handling of THPs in generic_file_buffered_read() (bsc#1012628). - commit 9b89dd3 ==== osinfo-db ==== - bsc#1196965 - openSUSE Tumbleweed unattended installation with libvirt fails opensuse-autoyast-desktop.patch ==== pipewire ==== Version update (0.3.47 -> 0.3.48) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 0.3.48: * Highlights - Fix IEC958 passthrough again. - Fix pulse-server crashes when playing a sample. - Support for more a more advanced upmixing algorithm. - filter-chain now supports arbitrary many ports. - Fix multichannel support in WINE (with new WirePlumber). - Many bugfixes and improvements. * PipeWire - The work queue is now created in the context so we can fail early and avoid further error checking in various places. - Fix a potential use after free with threaded loops. - The protocol now has a message footer. This is used to pass around global state such as the last registered object serial number. This can be used to detect when a client tries to bind to old (but reused) object ids. This avoids some races in the session manager but also when binding objects. - The zero-denormals CPU flag is now not touched anymore unless explicitly selected by the user. Denormals are avoided in filter-chain now in software. If the zero-denormals are now only configured in the data thread. This should fix issues with luajit. - Configuration parsing will not actually fail on errors. - pw-top now correctly clips unicode characters. - Many places now use a dynamic POD builder to support arbitrary large property sets. - pw-stream now support PropInfo parameters so that they can announce custom properties. - Serial number are now also set on metadata and session-manager objects. * SPA - audioadapter is now smarter when trying to fixate the format. It will use the PortConfig format to fill in any wildcards. This results in the least amount of conversions when the stream can handle it. It also is part of a fix (also requires a session manager fix) for WINE multichannel support. - Fix 5.1 to 2 channels mixing. It was using the volume of the stereo pair on all channels. - Fix some weird volume issues when a source is capturing and channelmixing. - Add stereo to 7.1 upmixing. - The channelmix parameters can be changed at runtime now. - Many improvements to the upmixing algorithms. Rear channels are now constructed from the ambient sound and can have delay and phase shift applied to them to improve spacialisation. The stereo channels can be filtered so that the dialogue is more concentrated in the centre channel. * modules - Module X11 bell received cleanups and improvements. - The module now has a private method to schedule unload later. This simplifies cleanup in many modules. - module-filter-chain now handles arbitrary many ports and control ports. - Fix a bug in RAOP where it was reading from the wrong port. * pulse-server - Nodes with the DONT_MOVE property should fail with -EINVAL when they are moved. - Fix a segfault when playing a sample. - The _FIX flags in pulse-server also now ignore the configured sample format, just like pulseaudio does. - Fix IEC958 passthrough again. It got accidentally broken since 0.3.45 with a fix for another issue. - Fix module-null-sink device.description. * Bluetooth - Don't try to connect HSP/HFP when no backend is available. - Drop patches already included upstream: * 0001-revert-loop-remove-destroy-list.patch * 0002-pulse-server-free-pending-sample-reply.patch - Rebase reduce-meson-dependency.patch. - Enable pulseaudio-setup use on openSUSE Leap 15.4. - Some spec clean-up. ==== upower ==== Version update (0.99.16+4 -> 0.99.17) Subpackages: libupower-glib3 typelib-1_0-UpowerGlib-1_0 - Update to version 0.99.17: + Upstream release, no changes, versionbump only.

1 0

New Kubic snapshot 20220313 released!
by Richard Brown 14 Mar '22

14 Mar '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: curl (7.81.0 -> 7.82.0) etcd (3.4.16 -> 3.5.2) kernel-source (5.16.11 -> 5.16.14) rdma-core === Details === ==== curl ==== Version update (7.81.0 -> 7.82.0) Subpackages: libcurl4 - Fix: openssl: fix CN check error code * Add curl-fix-verifyhost.patch - Update to 7.82.0: * curl: add --json command line option * curl: make it so that sensitive command line arguments do not show as easily in the output of ps(1) * curl_multi_socket.3: remove callback and typical usage descriptions * ftp: provide error message for control bytes in path * ldap: return CURLE_URL_MALFORMAT for bad URL * lib: remove support for CURL_DOES_CONVERSIONS * mqtt: plug some memory leaks * multi: allow user callbacks to call curl_multi_assign * multi: remember connection_id before returning connection to pool * multi: set in_callback for multi interface callbacks * netware: remove support * ngtcp2: adapt to changed end of headers callback proto * openldap: implement SASL authentication * openssl: return error if TLS 1.3 is requested when not supported * sectransp: mark a 3DES cipher as weak * smb: pass socket for writing and reading data instead of FIRSTSOCKET * tool_getparam: DNS options that need c-ares now fail without it * TPF: drop support * url: given a user in the URL, find pwd for that user in netrc * url: keep trailing dot in host name * urlapi: handle "redirects" smarter * urldata: CONN_IS_PROXIED replaces bits.proxy when proxy can be disabled * urldata: remove conn->bits.user_passwd ==== etcd ==== Version update (3.4.16 -> 3.5.2) - Add vendor-update.sh as a source to pass obs-service-source_validator - Drop ETCD_UNSUPPORTED_ARCH=arm64 from sysconfig as ARM64 is now officially supported - Update go version to 1.16 - Update etcd.conf variables - Add the new etcdutl into separate subpackage - Update vendor.tar.gz to include vendoring for server, etcdctl and etcdutl * see ./vendor-update.sh - Update to version 3.5.2: * version: bump up to 3.5.2 * Update dep: require gopkg.in/yaml.v2 v2.2.8 -> v2.4.0 due to: CVE-2019-11254. * fix runlock bug * server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL * etcdserver,integration: Store remaining TTL on checkpoint * lease,integration: add checkpoint scheduling after leader change * set the backend again after recovering v3 backend from snapshot * *: implement a retry logic for auth old revision in the client * client/v3: refresh the token when ErrUserEmpty is received while retrying * server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers * storage/backend: Add a gauge to indicate if defrag is active (backport from 3.6) - Update to version 3.5.1: * version: 3.5.1 * Dockerfile: bump debian bullseye-20210927 * client: Use first endpoint as http2 authority header * tests: Add grpc authority e2e tests * client: Add grpc authority header integration tests * tests: Allow configuring integration tests to use TCP * test: Use unique number for grpc port * tests: Cleanup member interface by exposing Bridge directly * tests: Make using bridge optional * tests: Rename grpcAddr to grpcURL to imply that it includes schema * tests: Remove bridge dependency on unix * Decouple prefixArgs from os.Env dependency * server: Ensure that adding and removing members handle storev2 and backend out of sync * Stop using tip golang version in CI * fix self-signed-cert-validity parameter cannot be specified in the config file * fix health endpoint not usable when authentication is enabled * workflows: remove ARM64 job for maintenance - Update to version 3.5.0: * See link below, diff is too big https://github.com/etcd-io/etcd/compare/v3.4.16...v3.5.0 ==== kernel-source ==== Version update (5.16.11 -> 5.16.14) - Linux 5.16.14 (bsc#1012628). - Revert "ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE" (bsc#1012628). - xen/netfront: react properly to failing gnttab_end_foreign_access_ref() (bsc#1012628). - xen/gnttab: fix gnttab_end_foreign_access() without page specified (bsc#1012628). - xen/pvcalls: use alloc/free_pages_exact() (bsc#1012628). - xen/9p: use alloc/free_pages_exact() (bsc#1012628). - xen: remove gnttab_query_foreign_access() (bsc#1012628). - xen/gntalloc: don't use gnttab_query_foreign_access() (bsc#1012628). - xen/scsifront: don't use gnttab_query_foreign_access() for mapped status (bsc#1012628). - xen/netfront: don't use gnttab_query_foreign_access() for mapped status (bsc#1012628). - xen/blkfront: don't use gnttab_query_foreign_access() for mapped status (bsc#1012628). - xen/grant-table: add gnttab_try_end_foreign_access() (bsc#1012628). - xen/xenbus: don't let xenbus_grant_ring() remove grants in error case (bsc#1012628). - ARM: fix build warning in proc-v7-bugs.c (bsc#1012628). - arm64: Do not include __READ_ONCE() block in assembly files (bsc#1012628). - ARM: Do not use NOCROSSREFS directive with ld.lld (bsc#1012628). - ARM: fix co-processor register typo (bsc#1012628). - ARM: fix build error when BPF_SYSCALL is disabled (bsc#1012628). - arm64: proton-pack: Include unprivileged eBPF status in Spectre v2 mitigation reporting (bsc#1012628). - arm64: Use the clearbhb instruction in mitigations (bsc#1012628). - KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated (bsc#1012628). - arm64: Mitigate spectre style branch history side channels (bsc#1012628). - Update config files. - arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 (bsc#1012628). - arm64: Add percpu vectors for EL1 (bsc#1012628). - arm64: entry: Add macro for reading symbol addresses from the trampoline (bsc#1012628). - arm64: entry: Add vectors that have the bhb mitigation sequences (bsc#1012628). - arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations (bsc#1012628). - arm64: entry: Allow the trampoline text to occupy multiple pages (bsc#1012628). - arm64: entry: Make the kpti trampoline's kpti sequence optional (bsc#1012628). - arm64: entry: Move trampoline macros out of ifdef'd section (bsc#1012628). - arm64: entry: Don't assume tramp_vectors is the start of the vectors (bsc#1012628). - arm64: entry: Allow tramp_alias to access symbols after the 4K boundary (bsc#1012628). - arm64: entry: Move the trampoline data page before the text page (bsc#1012628). - arm64: entry: Free up another register on kpti's tramp_exit path (bsc#1012628). - arm64: entry: Make the trampoline cleanup optional (bsc#1012628). - KVM: arm64: Allow indirect vectors to be used without SPECTRE_V3A (bsc#1012628). - arm64: spectre: Rename spectre_v4_patch_fw_mitigation_conduit (bsc#1012628). - arm64: entry.S: Add ventry overflow sanity checks (bsc#1012628). - arm64: cpufeature: add HWCAP for FEAT_RPRES (bsc#1012628). - arm64: cpufeature: add HWCAP for FEAT_AFP (bsc#1012628). - arm64: add ID_AA64ISAR2_EL1 sys register (bsc#1012628). - ARM: include unprivileged BPF status in Spectre V2 reporting (bsc#1012628). - ARM: Spectre-BHB workaround (bsc#1012628). - Update config files. - ARM: use LOADADDR() to get load address of sections (bsc#1012628). - ARM: early traps initialisation (bsc#1012628). - ARM: report Spectre v2 status through sysfs (bsc#1012628). - Update config files. - x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT (bsc#1012628). - x86/speculation: Warn about Spectre v2 LFENCE mitigation (bsc#1012628). - x86/speculation: Update link to AMD speculation whitepaper (bsc#1012628). - x86/speculation: Use generic retpoline by default on AMD (bsc#1012628). - x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting (bsc#1012628). - Documentation/hw-vuln: Update spectre doc (bsc#1012628). - x86/speculation: Add eIBRS + Retpoline options (bsc#1012628). - x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE (bsc#1012628). - commit 80acc65 - Bluetooth: btusb: Add missing Chicony device for Realtek RTL8723BE (bsc#1196779). - commit 714ef34 - Linux 5.16.13 (bsc#1012628). - mac80211_hwsim: report NOACK frames in tx_status (bsc#1012628). - mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work (bsc#1012628). - i2c: bcm2835: Avoid clock stretching timeouts (bsc#1012628). - ASoC: rt5682s: do not block workqueue if card is unbound (bsc#1012628). - ASoC: rt5668: do not block workqueue if card is unbound (bsc#1012628). - ASoC: rt5682: do not block workqueue if card is unbound (bsc#1012628). - regulator: core: fix false positive in regulator_late_cleanup() (bsc#1012628). - Input: clear BTN_RIGHT/MIDDLE on buttonpads (bsc#1012628). - btrfs: get rid of warning on transaction commit when using flushoncommit (bsc#1012628). - KVM: arm64: vgic: Read HW interrupt pending state from the HW (bsc#1012628). - block: loop:use kstatfs.f_bsize of backing file to set discard granularity (bsc#1012628). - tipc: fix a bit overflow in tipc_crypto_key_rcv() (bsc#1012628). - cifs: do not use uninitialized data in the owner/group sid (bsc#1012628). - cifs: fix double free race when mount fails in cifs_get_root() (bsc#1012628). - HID: amd_sfh: Handle amd_sfh work buffer in PM ops (bsc#1012628). - HID: amd_sfh: Add functionality to clear interrupts (bsc#1012628). - HID: amd_sfh: Add interrupt handler to process interrupts (bsc#1012628). - cifs: modefromsids must add an ACE for authenticated users (bsc#1012628). - selftests/seccomp: Fix seccomp failure by adding missing headers (bsc#1012628). - drm/amd/pm: correct UMD pstate clocks for Dimgrey Cavefish and Beige Goby (bsc#1012628). - selftests/ftrace: Do not trace do_softirq because of PREEMPT_RT (bsc#1012628). - dmaengine: shdma: Fix runtime PM imbalance on error (bsc#1012628). - i2c: cadence: allow COMPILE_TEST (bsc#1012628). - i2c: imx: allow COMPILE_TEST (bsc#1012628). - i2c: qup: allow COMPILE_TEST (bsc#1012628). - net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990 (bsc#1012628). - block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern (bsc#1012628). - exfat: reuse exfat_inode_info variable instead of calling EXFAT_I() (bsc#1012628). - exfat: fix i_blocks for files truncated over 4 GiB (bsc#1012628). - tracing: Add test for user space strings when filtering on string pointers (bsc#1012628). - arm64: Mark start_backtrace() notrace and NOKPROBE_SYMBOL (bsc#1012628). - serial: stm32: prevent TDR register overwrite when sending x_char (bsc#1012628). - KVM: arm64: Workaround Cortex-A510's single-step and PAC trap errata (bsc#1012628). - ext4: drop ineligible txn start stop APIs (bsc#1012628). - ext4: simplify updating of fast commit stats (bsc#1012628). - ext4: fast commit may not fallback for ineligible commit (bsc#1012628). - ext4: fast commit may miss file actions (bsc#1012628). - sched/fair: Fix fault in reweight_entity (bsc#1012628). - KVM: x86: Add KVM_CAP_ENABLE_CAP to x86 (bsc#1012628). - ata: pata_hpt37x: fix PCI clock detection (bsc#1012628). - drm/amdgpu: check vm ready by amdgpu_vm->evicting flag (bsc#1012628). - tracing: Add ustring operation to filtering string pointers (bsc#1012628). - ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report() (bsc#1012628). - btrfs: defrag: bring back the old file extent search behavior (bsc#1012628). - btrfs: defrag: don't use merged extent map for their generation check (bsc#1012628). - ALSA: intel_hdmi: Fix reference to PCM buffer address (bsc#1012628). - ucounts: Fix systemd LimitNPROC with private users regression (bsc#1012628). - binfmt_elf: Avoid total_mapping_size for ET_EXEC (bsc#1012628). - riscv/efi_stub: Fix get_boot_hartid_from_fdt() return value (bsc#1012628). - riscv: Fix config KASAN && SPARSEMEM && !SPARSE_VMEMMAP (bsc#1012628). - riscv: Fix config KASAN && DEBUG_VIRTUAL (bsc#1012628). - iwlwifi: mvm: check debugfs_dir ptr before use (bsc#1012628). - ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min (bsc#1012628). - iommu/vt-d: Fix double list_add when enabling VMD in scalable mode (bsc#1012628). - iommu/amd: Recover from event log overflow (bsc#1012628). - drm/i915: s/JSP2/ICP2/ PCH (bsc#1012628). - drm/amd/display: Reduce dmesg error to a debug print (bsc#1012628). - xen/netfront: destroy queues before real_num_tx_queues is zeroed (bsc#1012628). - thermal: core: Fix TZ_GET_TRIP NULL pointer dereference (bsc#1012628). - mac80211: fix EAPoL rekey fail in 802.3 rx path (bsc#1012628). - blktrace: fix use after free for struct blk_trace (bsc#1012628). - ntb: intel: fix port config status offset for SPR (bsc#1012628). - mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls (bsc#1012628). - xfrm: fix MTU regression (bsc#1012628). - netfilter: fix use-after-free in __nf_register_net_hook() (bsc#1012628). - bpf, sockmap: Do not ignore orig_len parameter (bsc#1012628). - xfrm: fix the if_id check in changelink (bsc#1012628). - xfrm: enforce validity of offload input flags (bsc#1012628). - e1000e: Correct NVM checksum verification flow (bsc#1012628). - net: fix up skbs delta_truesize in UDP GRO frag_list (bsc#1012628). - netfilter: nf_queue: don't assume sk is full socket (bsc#1012628). - netfilter: nf_queue: fix possible use-after-free (bsc#1012628). - netfilter: nf_queue: handle socket prefetch (bsc#1012628). - batman-adv: Request iflink once in batadv-on-batadv check (bsc#1012628). - batman-adv: Request iflink once in batadv_get_real_netdevice (bsc#1012628). - batman-adv: Don't expect inter-netns unique iflink indices (bsc#1012628). - net: ipv6: ensure we call ipv6_mc_down() at most once (bsc#1012628). - net: dcb: flush lingering app table entries for unregistered devices (bsc#1012628). - net: ipa: fix a build dependency (bsc#1012628). - net: ipa: add an interconnect dependency (bsc#1012628). - net/smc: fix connection leak (bsc#1012628). - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client (bsc#1012628). - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server (bsc#1012628). - btrfs: fix ENOSPC failure when attempting direct IO write into NOCOW range (bsc#1012628). - platform/x86: amd-pmc: Set QOS during suspend on CZN w/ timer wakeup (bsc#1012628). - net: dsa: microchip: fix bridging with more than two member ports (bsc#1012628). - mac80211: fix forwarded mesh frames AC & queue selection (bsc#1012628). - net: stmmac: fix return value of __setup handler (bsc#1012628). - mac80211: treat some SAE auth steps as final (bsc#1012628). - iavf: Fix missing check for running netdev (bsc#1012628). - net: sxgbe: fix return value of __setup handler (bsc#1012628). - ibmvnic: register netdev after init of adapter (bsc#1012628). - net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe() (bsc#1012628). - ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc() (bsc#1012628). - iavf: Fix deadlock in iavf_reset_task (bsc#1012628). - efivars: Respect "block" flag in efivar_entry_set_safe() (bsc#1012628). - auxdisplay: lcd2s: Fix lcd2s_redefine_char() feature (bsc#1012628). - firmware: arm_scmi: Remove space in MODULE_ALIAS name (bsc#1012628). - ASoC: cs4265: Fix the duplicated control name (bsc#1012628). - auxdisplay: lcd2s: Fix memory leak in ->remove() (bsc#1012628). - auxdisplay: lcd2s: Use proper API to free the instance of charlcd object (bsc#1012628). - can: gs_usb: change active_channels's type from atomic_t to u8 (bsc#1012628). - iommu/tegra-smmu: Fix missing put_device() call in tegra_smmu_find (bsc#1012628). - arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output (bsc#1012628). - igc: igc_read_phy_reg_gpy: drop premature return (bsc#1012628). - ARM: Fix kgdb breakpoint for Thumb2 (bsc#1012628). - mips: setup: fix setnocoherentio() boolean setting (bsc#1012628). - ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions (bsc#1012628). - mptcp: Correctly set DATA_FIN timeout when number of retransmits is large (bsc#1012628). - selftests: mlxsw: tc_police_scale: Make test more robust (bsc#1012628). - pinctrl: sunxi: Use unique lockdep classes for IRQs (bsc#1012628). - igc: igc_write_phy_reg_gpy: drop premature return (bsc#1012628). - ibmvnic: free reset-work-item when flushing (bsc#1012628). - memfd: fix F_SEAL_WRITE after shmem huge page allocated (bsc#1012628). - s390/setup: preserve memory at OLDMEM_BASE and OLDMEM_SIZE (bsc#1012628). - s390/extable: fix exception table sorting (bsc#1012628). - sched: Fix yet more sched_fork() races (bsc#1012628). - arm64: dts: rockchip: drop pclk_xpcs from gmac0 on rk3568 (bsc#1012628). - arm64: dts: juno: Remove GICv2m dma-range (bsc#1012628). - arm64: dts: rockchip: fix Quartz64-A ddr regulator voltage (bsc#1012628). - arm64: dts: imx8mm: Fix VPU Hanging (bsc#1012628). - iommu/amd: Fix I/O page table memory leak (bsc#1012628). - MIPS: ralink: mt7621: do memory detection on KSEG1 (bsc#1012628). - ARM: dts: switch timer config to common devkit8000 devicetree (bsc#1012628). - ARM: dts: Use 32KiHz oscillator on devkit8000 (bsc#1012628). - soc: fsl: guts: Revert commit 3c0d64e867ed (bsc#1012628). - soc: fsl: guts: Add a missing memory allocation failure check (bsc#1012628). - soc: fsl: qe: Check of ioremap return value (bsc#1012628). - soc: imx: gpcv2: Fix clock disabling imbalance in error path (bsc#1012628). - netfilter: nf_tables: prefer kfree_rcu(ptr, rcu) variant (bsc#1012628). - ARM: tegra: Move panels to AUX bus (bsc#1012628). - Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks (bsc#1012628). - can: etas_es58x: change opened_channel_cnt's type from atomic_t to u8 (bsc#1012628). - net: stmmac: enhance XDP ZC driver level switching performance (bsc#1012628). - net: stmmac: only enable DMA interrupts when ready (bsc#1012628). - ibmvnic: initialize rc before completing wait (bsc#1012628). - ibmvnic: define flush_reset_queue helper (bsc#1012628). - ibmvnic: complete init_done on transport events (bsc#1012628). - ibmvnic: Update driver return codes (bsc#1012628). - ibmvnic: init init_done_rc earlier (bsc#1012628). - ibmvnic: clear fop when retrying probe (bsc#1012628). - ibmvnic: Allow queueing resets during probe (bsc#1012628). - net: chelsio: cxgb3: check the return value of pci_find_capability() (bsc#1012628). - net: sparx5: Fix add vlan when invalid operation (bsc#1012628). - iavf: Add trace while removing device (bsc#1012628). - iavf: Rework mutexes for better synchronisation (bsc#1012628). - iavf: Add waiting so the port is initialized in remove (bsc#1012628). - iavf: Fix init state closure on remove (bsc#1012628). - iavf: Fix locking for VIRTCHNL_OP_GET_OFFLOAD_VLAN_V2_CAPS (bsc#1012628). - iavf: Fix race in init state (bsc#1012628). - iavf: Fix __IAVF_RESETTING state usage (bsc#1012628). - drm/i915/guc/slpc: Correct the param count for unset param (bsc#1012628). - drm/bridge: ti-sn65dsi86: Properly undo autosuspend (bsc#1012628). - e1000e: Fix possible HW unit hang after an s0ix exit (bsc#1012628). - MIPS: ralink: mt7621: use bitwise NOT instead of logical (bsc#1012628). - nl80211: Handle nla_memdup failures in handle_nan_filter (bsc#1012628). - ptp: ocp: Add ptp_ocp_adjtime_coarse for large adjustments (bsc#1012628). - drm/amdgpu: fix suspend/resume hang regression (bsc#1012628). - net: dcb: disable softirqs in dcbnl_flush_dev() (bsc#1012628). - selftests: mlxsw: resource_scale: Fix return value (bsc#1012628). - net: stmmac: perserve TX and RX coalesce value during XDP setup (bsc#1012628). - Input: elan_i2c - move regulator_[en|dis]able() out of elan_[en|dis]able_power() (bsc#1012628). - Input: elan_i2c - fix regulator enable count imbalance after suspend/resume (bsc#1012628). - Input: samsung-keypad - properly state IOMEM dependency (bsc#1012628). - HID: add mapping for KEY_DICTATE (bsc#1012628). - HID: add mapping for KEY_ALL_APPLICATIONS (bsc#1012628). - tracing/histogram: Fix sorting on old "cpu" value (bsc#1012628). - tracing: Fix return value of __setup handlers (bsc#1012628). - btrfs: fix lost prealloc extents beyond eof after full fsync (bsc#1012628). - btrfs: fix relocation crash due to premature return from btrfs_commit_transaction() (bsc#1012628). - btrfs: subpage: fix a wrong check on subpage->writers (bsc#1012628). - btrfs: do not WARN_ON() if we have PageError set (bsc#1012628). - btrfs: qgroup: fix deadlock between rescan worker and remove qgroup (bsc#1012628). - btrfs: add missing run of delayed items after unlink during log replay (bsc#1012628). - btrfs: fallback to blocking mode when doing async dio over multiple extents (bsc#1012628). - btrfs: do not start relocation until in progress drops are done (bsc#1012628). - Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6" (bsc#1012628). - proc: fix documentation and description of pagemap (bsc#1012628). - x86/kvmclock: Fix Hyper-V Isolated VM's boot issue when vCPUs > 64 (bsc#1012628). - s390/ftrace: fix arch_ftrace_get_regs implementation (bsc#1012628). - s390/ftrace: fix ftrace_caller/ftrace_regs_caller generation (bsc#1012628). - KVM: x86/mmu: Passing up the error state of mmu_alloc_shadow_roots() (bsc#1012628). - Update config files. - commit bd40cb2 - Update patches.kernel.org/5.16.11-207-lib-iov_iter-initialize-flags-in-new-pipe_bu… (bsc#1012628 bsc#1196584 CVE-2022-0847). Add references. - commit 82f40a9 - nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION (CVE-2022-26490 bsc#1196830). - commit b002fe2 - config: ppc64{,le}: build vmx-crypto as module (bsc#1195768) Building CONFIG_CRYPTO_DEV_VMX_ENCRYPT as module is the default in mainline since v4.8, we use it in SLES and already in config/ppc64/default. Thus unify it in the other configs. There are build dependencies which has been fixed in mainline 647d41d3952d ("crypto: vmx - add missing dependencies") (currently still at maintainer herbert/cryptodev-2.6 tree) But instead of waiting commit to be accepted or backporting it we just unify configs, which is useful anyway - commit 70a0d71 - kernel-binary.spec: Also exclude the kernel signing key from devel package. There is a check in OBS that fails when it is included. Also the key is not reproducible. Fixes: bb988d4625a3 ("kernel-binary: Do not include sourcedir in certificate path.") - commit 68fa069 - rpm/check-for-config-changes: Ignore PAHOLE_VERSION. - commit 88ba5ec - Linux 5.16.12 (bsc#1012628). - memblock: use kfree() to release kmalloced memblock regions (bsc#1012628). - gpio: tegra186: Fix chip_data type confusion (bsc#1012628). - pinctrl: k210: Fix bias-pull-up (bsc#1012628). - pinctrl: fix loop in k210_pinconf_get_drive() (bsc#1012628). - tty: n_gsm: fix deadlock in gsmtty_open() (bsc#1012628). - tty: n_gsm: fix wrong modem processing in convergence layer type 2 (bsc#1012628). - tty: n_gsm: fix wrong tty control line for flow control (bsc#1012628). - tty: n_gsm: fix NULL pointer access due to DLCI release (bsc#1012628). - tty: n_gsm: fix proper link termination after failed open (bsc#1012628). - tty: n_gsm: fix encoding of command/response bit (bsc#1012628). - tty: n_gsm: fix encoding of control signal octet bit DV (bsc#1012628). - hugetlbfs: fix a truncation issue in hugepages parameter (bsc#1012628). - mm/hugetlb: fix kernel crash with hugetlb mremap (bsc#1012628). - riscv: fix oops caused by irqsoff latency tracer (bsc#1012628). - riscv: fix nommu_k210_sdcard_defconfig (bsc#1012628). - IB/qib: Fix duplicate sysfs directory name (bsc#1012628). - tps6598x: clear int mask on probe failure (bsc#1012628). - staging: fbtft: fb_st7789v: reset display before initialization (bsc#1012628). - thermal: int340x: fix memory leak in int3400_notify() (bsc#1012628). - RDMA/cma: Do not change route.addr.src_addr outside state checks (bsc#1012628). - btrfs: reduce extent threshold for autodefrag (bsc#1012628). - btrfs: autodefrag: only scan one inode once (bsc#1012628). - btrfs: defrag: allow defrag_one_cluster() to skip large extent which is not a target (bsc#1012628). - btrfs: prevent copying too big compressed lzo segment (bsc#1012628). - btrfs: defrag: remove an ambiguous condition for rejection (bsc#1012628). - btrfs: defrag: don't defrag extents which are already at max capacity (bsc#1012628). - btrfs: defrag: don't try to merge regular extents with preallocated extents (bsc#1012628). - driver core: Free DMA range map when device is released (bsc#1012628). - mtd: core: Fix a conflict between MTD and NVMEM on wp-gpios property (bsc#1012628). - nvmem: core: Fix a conflict between MTD and NVMEM on wp-gpios property (bsc#1012628). - xhci: Prevent futile URB re-submissions due to incorrect return value (bsc#1012628). - xhci: re-initialize the HC during resume if HCE was set (bsc#1012628). - usb: dwc3: gadget: Let the interrupt handler disable bottom halves (bsc#1012628). - usb: dwc3: pci: Fix Bay Trail phy GPIO mappings (bsc#1012628). - usb: dwc3: pci: Add "snps,dis_u2_susphy_quirk" for Intel Bay Trail (bsc#1012628). - usb: dwc2: drd: fix soft connect when gadget is unconfigured (bsc#1012628). - USB: serial: option: add Telit LE910R1 compositions (bsc#1012628). - USB: serial: option: add support for DW5829e (bsc#1012628). - tracefs: Set the group ownership in apply_options() not parse_options() (bsc#1012628). - USB: gadget: validate endpoint index for xilinx udc (bsc#1012628). - usb: gadget: rndis: add spinlock for rndis response list (bsc#1012628). - Revert "USB: serial: ch341: add new Product ID for CH341A" (bsc#1012628). - ata: pata_hpt37x: disable primary channel on HPT371 (bsc#1012628). - sc16is7xx: Fix for incorrect data being transmitted (bsc#1012628). - iio: Fix error handling for PM (bsc#1012628). - iio: imu: st_lsm6dsx: wait for settling time in st_lsm6dsx_read_oneshot (bsc#1012628). - iio: accel: fxls8962af: add padding to regmap for SPI (bsc#1012628). - iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits (bsc#1012628). - iio: adc: tsc2046: fix memory corruption by preventing array overflow (bsc#1012628). - iio: adc: men_z188_adc: Fix a resource leak in an error handling path (bsc#1012628). - iio:imu:adis16480: fix buffering for devices with no burst mode (bsc#1012628). - tracing: Have traceon and traceoff trigger honor the instance (bsc#1012628). - tracing: Dump stacktrace trigger to the corresponding instance (bsc#1012628). - bpf: Fix crash due to out of bounds access into reg2btf_ids (bsc#1012628). - bpf: Extend kfunc with PTR_TO_CTX, PTR_TO_MEM argument support (bsc#1012628). - RDMA/ib_srp: Fix a deadlock (bsc#1012628). - configfs: fix a race in configfs_{,un}register_subsystem() (bsc#1012628). - bnxt_en: Increase firmware message response DMA wait time (bsc#1012628). - RDMA/rtrs-clt: Move free_permit from free_clt to rtrs_clt_close (bsc#1012628). - RDMA/rtrs-clt: Fix possible double free in error case (bsc#1012628). - net-timestamp: convert sk->sk_tskey to atomic_t (bsc#1012628). - net: use sk_is_tcp() in more places (bsc#1012628). - regmap-irq: Update interrupt clear register for proper reset (bsc#1012628). - gpio: rockchip: Reset int_bothedge when changing trigger (bsc#1012628). - PCI: mvebu: Fix device enumeration regression (bsc#1012628). - spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op() (bsc#1012628). - net/mlx5e: Add missing increment of count (bsc#1012628). - net/mlx5: Update log_max_qp value to be 17 at most (bsc#1012628). - net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte (bsc#1012628). - net/mlx5e: kTLS, Use CHECKSUM_UNNECESSARY for device-offloaded packets (bsc#1012628). - net/mlx5e: MPLSoUDP decap, fix check for unsupported matches (bsc#1012628). - net/mlx5: DR, Fix the threshold that defines when pool sync is initiated (bsc#1012628). - net/mlx5: Fix wrong limitation of metadata match on ecpf (bsc#1012628). - net/mlx5: Fix possible deadlock on rule deletion (bsc#1012628). - net/mlx5: DR, Don't allow match on IP w/o matching on full ethertype/ip_version (bsc#1012628). - ibmvnic: schedule failover only if vioctl fails (bsc#1012628). - net/mlx5: DR, Cache STE shadow memory (bsc#1012628). - udp_tunnel: Fix end of loop test in udp_tunnel_nic_unregister() (bsc#1012628). - surface: surface3_power: Fix battery readings on batteries without a serial number (bsc#1012628). - net/smc: Use a mutex for locking "struct smc_pnettable" (bsc#1012628). - netfilter: nf_tables: fix memory leak during stateful obj update (bsc#1012628). - net: mdio-ipq4019: add delay after clock enable (bsc#1012628). - nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac() (bsc#1012628). - net: dsa: avoid call to __dev_set_promiscuity() while rtnl_mutex isn't held (bsc#1012628). - netfilter: nf_tables: unregister flowtable hooks on netns exit (bsc#1012628). - net: Force inlining of checksum functions in net/checksum.h (bsc#1012628). - net: ll_temac: check the return value of devm_kmalloc() (bsc#1012628). - net/sched: act_ct: Fix flow table lookup after ct clear or switching zones (bsc#1012628). - drm/amd/display: For vblank_disable_immediate, check PSR is really used (bsc#1012628). - drm/i915/dg2: Print PHY name properly on calibration error (bsc#1012628). - drm/vc4: crtc: Fix runtime_pm reference counting (bsc#1012628). - block: clear iocb->private in blkdev_bio_end_io_async() (bsc#1012628). - net/mlx5e: TC, Reject rules with drop and modify hdr action (bsc#1012628). - net/mlx5e: TC, Reject rules with forward and drop actions (bsc#1012628). - net/mlx5e: Fix wrong return value on ioctl EEPROM query failure (bsc#1012628). - drm/edid: Always set RGB444 (bsc#1012628). - openvswitch: Fix setting ipv6 fields causing hw csum failure (bsc#1012628). - net: mv643xx_eth: process retval from of_get_mac_address (bsc#1012628). - gso: do not skip outer ip header in case of ipip and net_failover (bsc#1012628). - clk: qcom: gcc-msm8994: Remove NoC clocks (bsc#1012628). - tipc: Fix end of loop tests for list_for_each_entry() (bsc#1012628). - nvme: also mark passthrough-only namespaces ready in nvme_update_ns_info (bsc#1012628). - net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends (bsc#1012628). - io_uring: add a schedule point in io_add_buffers() (bsc#1012628). - bpf: Add schedule points in batch ops (bsc#1012628). - bpf: Fix a bpf_timer initialization issue (bsc#1012628). - selftests: bpf: Check bpf_msg_push_data return value (bsc#1012628). - bpf: Do not try bpf_msg_push_data with len 0 (bsc#1012628). - bpf: Fix crash due to incorrect copy_map_value (bsc#1012628). - net/mlx5: Update the list of the PCI supported devices (bsc#1012628). - ice: initialize local variable 'tlv' (bsc#1012628). - ice: check the return of ice_ptp_gettimex64 (bsc#1012628). - ice: fix concurrent reset and removal of VFs (bsc#1012628). - ice: fix setting l4 port flag when adding filter (bsc#1012628). - net/mlx5: Fix tc max supported prio for nic mode (bsc#1012628). - hwmon: Handle failure to register sensor with thermal zone correctly (bsc#1012628). - bnxt_en: Restore the resets_reliable flag in bnxt_open() (bsc#1012628). - bnxt_en: Fix incorrect multicast rx mask setting when not requested (bsc#1012628). - bnxt_en: Fix occasional ethtool -t loopback test failures (bsc#1012628). - bnxt_en: Fix offline ethtool selftest with RDMA enabled (bsc#1012628). - bnxt_en: Fix active FEC reporting to ethtool (bsc#1012628). - bnxt_en: Fix devlink fw_activate (bsc#1012628). - bnx2x: fix driver load from initrd (bsc#1012628). - selftests: mptcp: be more conservative with cookie MPJ limits (bsc#1012628). - selftests: mptcp: fix diag instability (bsc#1012628). - mptcp: add mibs counter for ignored incoming options (bsc#1012628). - mptcp: fix race in incoming ADD_ADDR option processing (bsc#1012628). - perf data: Fix double free in perf_session__delete() (bsc#1012628). - perf evlist: Fix failed to use cpu list for uncore events (bsc#1012628). - gpu: host1x: Always return syncpoint value when waiting (bsc#1012628). - Revert "i40e: Fix reset bw limit when DCB enabled with 1 TC" (bsc#1012628). - ping: remove pr_err from ping_lookup (bsc#1012628). - netfilter: nf_tables_offload: incorrect flow offload action array size (bsc#1012628). - netfilter: xt_socket: missing ifdef CONFIG_IP6_NF_IPTABLES dependency (bsc#1012628). - netfilter: xt_socket: fix a typo in socket_mt_destroy() (bsc#1012628). - CDC-NCM: avoid overflow in sanity checking (bsc#1012628). - USB: zaurus: support another broken Zaurus (bsc#1012628). - sr9700: sanity check for packet length (bsc#1012628). - drm/i915: Fix bw atomic check when switching between SAGV vs. no SAGV (bsc#1012628). - drm/i915: Correctly populate use_sagv_wm for all pipes (bsc#1012628). - drm/i915: Disconnect PHYs left connected by BIOS on disabled ports (bsc#1012628). - drm/i915: Widen the QGV point mask (bsc#1012628). - drm/amdgpu: do not enable asic reset for raven2 (bsc#1012628). - drm/amdgpu: disable MMHUB PG for Picasso (bsc#1012628). - drm/amd: Check if ASPM is enabled from PCIe subsystem (bsc#1012628). - drm/amd/pm: fix some OEM SKU specific stability issues (bsc#1012628). - drm/amd/display: Protect update_bw_bounding_box FPU code (bsc#1012628). - drm/amd/display: Fix stream->link_enc unassigned during stream removal (bsc#1012628). - KVM: x86: nSVM: disallow userspace setting of MSR_AMD64_TSC_RATIO to non default value when tsc scaling disabled (bsc#1012628). - KVM: x86/mmu: make apf token non-zero to fix bug (bsc#1012628). - parisc/unaligned: Fix ldw() and stw() unalignment handlers (bsc#1012628). - parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel (bsc#1012628). - vhost/vsock: don't check owner in vhost_vsock_stop() while releasing (bsc#1012628). - selinux: fix misuse of mutex_is_locked() (bsc#1012628). - io_uring: disallow modification of rsrc_data during quiesce (bsc#1012628). - io_uring: don't convert to jiffies for waiting on timeouts (bsc#1012628). - clk: jz4725b: fix mmc0 clock gating (bsc#1012628). - slab: remove __alloc_size attribute from __kmalloc_track_caller (bsc#1012628). - btrfs: tree-checker: check item_size for dev_item (bsc#1012628). - btrfs: tree-checker: check item_size for inode_item (bsc#1012628). - cgroup-v1: Correct privileges check in release_agent writes (bsc#1012628). - cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (bsc#1012628). - mm/filemap: Fix handling of THPs in generic_file_buffered_read() (bsc#1012628). - commit 9b89dd3 ==== rdma-core ==== Subpackages: libefa1 libibverbs libibverbs1 libmlx4-1 libmlx5-1 librdmacm1 - Update spec file from upstream - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639) - fix build support for riscv - Added cmake-Make-modprobe.d-path-configurable.patch - Backport from upstream to allow modprobe files to be installed in a configurable directory

1 0

New ARM MicroOS snapshot 20220310 released!
by Guillaume Gardet 14 Mar '22

14 Mar '22

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: baloo5 discover drkonqi5 filesystem gcc11 gnome-tweaks (40.0 -> 40.10) grub2 gtk3 (3.24.32 -> 3.24.33) hwdata (0.356 -> 0.357) jack (1.9.19 -> 1.9.20) kactivitymanagerd kauth kde-gtk-config5 kdelibs4support kscreenlocker kwalletmanager5 kwayland kwin5 libksysguard5 libnvme libxklavier (5.3 -> 5.4) ncurses (6.3.20220219 -> 6.3.20220226) openssh (8.8p1 -> 8.9p1) plasma5-desktop plasma5-workspace polkit-kde-agent-5 powerdevil5 raspberrypi-firmware raspberrypi-firmware-config sudo systemd tracker-miners (3.2.1 -> 3.2.2) upower (0.99.16 -> 0.99.16+4) wireless-regdb (20220108 -> 20220218) xdg-desktop-portal xdg-desktop-portal-kde === Details === ==== baloo5 ==== Subpackages: baloo5-imports baloo5-kioslaves libKF5Baloo5 libKF5BalooEngine5 - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== discover ==== Subpackages: discover-backend-flatpak discover-backend-packagekit discover-notifier - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== drkonqi5 ==== - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== filesystem ==== - Create tmpfiles.d which creates /usr/local on the fly ==== gcc11 ==== Subpackages: cpp11 libgcc_s1 libgomp1 libstdc++6 libubsan1 - Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from packages provided by older GCC work. Add a requires from that package to the corresponding libstc++6 package to keep those at the same version. [bsc#1196107] ==== gnome-tweaks ==== Version update (40.0 -> 40.10) - Update to version 40.10: + Fix for the broken GNOME Extensions link. + Fix build with meson 0.60 and newer. + Updated translations. - Drop 86.patch: Fixed upstream. ==== grub2 ==== Subpackages: grub2-arm64-efi grub2-snapper-plugin - Support saving grub environment for POWER signed grub images (jsc#SLE-23854) * 0001-Add-grub_envblk_buf-helper-function.patch * 0002-Add-grub_disk_write_tail-helper-function.patch * 0003-grub-install-support-prep-environment-block.patch * 0004-Introduce-prep_load_env-command.patch * 0005-export-environment-at-start-up.patch - Use enviroment variable in early boot config to looking up root device * grub2.spec - Remove obsolete openSUSE 12.2 conditionals in spec file - Clean up powerpc certificate handling. ==== gtk3 ==== Version update (3.24.32 -> 3.24.33) Subpackages: gtk3-data gtk3-schema gtk3-tools libgtk-3-0 typelib-1_0-Gtk-3_0 - Update to version 3.24.33: + No changes. ==== hwdata ==== Version update (0.356 -> 0.357) - Update to version 0.357: + Updated pci, usb and vendor ids. ==== jack ==== Version update (1.9.19 -> 1.9.20) - Disable the build of example-tools which are now built in a separate jack-example-tools package. - update to 1.9.20: * Add waf autooption --example-tools to allow optional build of executables, libraries and man pages provided by jack-example-tools (the files are built by default). Building and installing the additional files can be disabled by using - -example-tools=no or --no-example-tools. * Fix 32-bit support in ALSA driver * Fix incomplete ASIO support on Windows * Fix metadata usage with multiple users * Fix netsource tool missing on Windows * Fix semaphore usage on macOS * Official FreeBSD support ==== kactivitymanagerd ==== - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== kauth ==== Subpackages: libKF5Auth5 libKF5AuthCore5 - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== kde-gtk-config5 ==== Subpackages: kde-gtk-config5-gtk3 - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== kdelibs4support ==== Subpackages: libKF5KDELibs4Support5 - Add patch to fix installation: * 0001-Use-KDE_INSTALL_FULL_-variables-where-needed.patch ==== kscreenlocker ==== Subpackages: libKScreenLocker5 - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== kwalletmanager5 ==== - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== kwayland ==== - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== kwin5 ==== - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== libksysguard5 ==== Subpackages: ksysguardsystemstats-data libKSysGuardSystemStats1 libksysguard5-imports - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== libnvme ==== - Update License information. The library is released under LGPL-2.1-or-later and not LGPL-2.1-only. ==== libxklavier ==== Version update (5.3 -> 5.4) - Update to version 5.4: + A couple of introspection fixes. - Update URL, this version was never released on download.gnome.org - Add explicit libxklavier16 (shared library) Requires in devel sub-package (we already pulled it in via virtual provides). - Use modern macros. ==== ncurses ==== Version update (6.3.20220219 -> 6.3.20220226) Subpackages: libncurses6 ncurses-utils terminfo-base - Add ncurses patch 20220226 + fix issues found with coverity: + rewrite canonical_name() function of infocmp to ensure buffer size + corrected use of original tty-modes in tput init/reset subcommands + modify tabs program to limit tab-stop values to max-columns + add limit-checks for palette rgb values in test/ncurses.c + add a few null-pointer checks to help with static-analysis. + enforce limit on number of soft-keys used in c++ binding. + adjust a buffer-limit in write_entry.c to quiet a bogus warning from gcc 12.0.1 ==== openssh ==== Version update (8.8p1 -> 8.9p1) Subpackages: openssh-clients openssh-common openssh-server - Version update to 8.9p1: = Security * sshd(8): fix an integer overflow in the user authentication path that, in conjunction with other logic errors, could have yielded unauthenticated access under difficult to exploit conditions. This situation is not exploitable because of independent checks in the privilege separation monitor. Privilege separation has been enabled by default in since openssh-3.2.2 (released in 2002) and has been mandatory since openssh-7.5 (released in 2017). Moreover, portable OpenSSH has used toolchain features available in most modern compilers to abort on signed integer overflow since openssh-6.5 (released in 2014). Thanks to Malcolm Stagg for finding and reporting this bug. = Potentially-incompatible changes * sshd(8), portable OpenSSH only: this release removes in-built support for MD5-hashed passwords. If you require these on your system then we recommend linking against libxcrypt or similar. * This release modifies the FIDO security key middleware interface and increments SSH_SK_VERSION_MAJOR. = New features * ssh(1), sshd(8), ssh-add(1), ssh-agent(1): add a system for restricting forwarding and use of keys added to ssh-agent(1) A detailed description of the feature is available at https://www.openssh.com/agent-restrict.html and the protocol extensions are documented in the PROTOCOL and PROTOCOL.agent files in the source release. * ssh(1), sshd(8): add the sntrup761x25519-sha512(a)openssh.com hybrid ECDH/x25519 + Streamlined NTRU Prime post-quantum KEX to the default KEXAlgorithms list (after the ECDH methods but before the prime-group DH ones). The next release of OpenSSH is likely to make this key exchange the default method. * ssh-keygen(1): when downloading resident keys from a FIDO token, pass back the user ID that was used when the key was created and append it to the filename the key is written to (if it is not the default). Avoids keys being clobbered if the user created multiple resident keys with the same application string but different user IDs. * ssh-keygen(1), ssh(1), ssh-agent(1): better handling for FIDO keys on tokens that provide user verification (UV) on the device itself, including biometric keys, avoiding unnecessary PIN prompts. * ssh-keygen(1): add "ssh-keygen -Y match-principals" operation to perform matching of principals names against an allowed signers file. To be used towards a TOFU model for SSH signatures in git. * ssh-add(1), ssh-agent(1): allow pin-required FIDO keys to be added to ssh-agent(1). $SSH_ASKPASS will be used to request the PIN at authentication time. * ssh-keygen(1): allow selection of hash at sshsig signing time (either sha512 (default) or sha256). * ssh(1), sshd(8): read network data directly to the packet input buffer instead of indirectly via a small stack buffer. Provides a modest performance improvement. * ssh(1), sshd(8): read data directly to the channel input buffer, providing a similar modest performance improvement. * ssh(1): extend the PubkeyAuthentication configuration directive to accept yes|no|unbound|host-bound to allow control over one of the protocol extensions used to implement agent-restricted keys. = Bugfixes * sshd(8): document that CASignatureAlgorithms, ExposeAuthInfo and PubkeyAuthOptions can be used in a Match block. PR277. * sshd(8): fix possible string truncation when constructing paths to .rhosts/.shosts files with very long user home directory names. * ssh-keysign(1): unbreak for KEX algorithms that use SHA384/512 exchange hashes * ssh(1): don't put the TTY into raw mode when SessionType=none, avoids ^C being unable to kill such a session. bz3360 * scp(1): fix some corner-case bugs in SFTP-mode handling of ~-prefixed paths. * ssh(1): unbreak hostbased auth using RSA keys. Allow ssh(1) to select RSA keys when only RSA/SHA2 signature algorithms are configured (this is the default case). Previously RSA keys were not being considered in the default case. * ssh-keysign(1): make ssh-keysign use the requested signature algorithm and not the default for the key type. Part of unbreaking hostbased auth for RSA/SHA2 keys. * ssh(1): stricter UpdateHostkey signature verification logic on the client- side. Require RSA/SHA2 signatures for RSA hostkeys except when RSA/SHA1 was explicitly negotiated during initial KEX; bz3375 * ssh(1), sshd(8): fix signature algorithm selection logic for UpdateHostkeys on the server side. The previous code tried to prefer RSA/SHA2 for hostkey proofs of RSA keys, but missed some cases. This will use RSA/SHA2 signatures for RSA keys if the client proposed these algorithms in initial KEX. bz3375 * All: convert all uses of select(2)/pselect(2) to poll(2)/ppoll(2). This includes the mainloops in ssh(1), ssh-agent(1), ssh-agent(1) and sftp-server(8), as well as the sshd(8) listen loop and all other FD read/writability checks. On platforms with missing or broken poll(2)/ppoll(2) syscalls a select(2)-based compat shim is available. * ssh-keygen(1): the "-Y find-principals" command was verifying key validity when using ca certs but not with simple key lifetimes within the allowed signers file. * ssh-keygen(1): make sshsig verify-time argument parsing optional * sshd(8): fix truncation in rhosts/shosts path construction. * ssh(1), ssh-agent(1): avoid xmalloc(0) for PKCS#11 keyid for ECDSA keys (we already did this for RSA keys). Avoids fatal errors for PKCS#11 libraries that return empty keyid, e.g. Microchip ATECC608B "cryptoauthlib"; bz#3364 * ssh(1), ssh-agent(1): improve the testing of credentials against inserted FIDO: ask the token whether a particular key belongs to it in cases where the token supports on-token user-verification (e.g. biometrics) rather than just assuming that it will accept it. Will reduce spurious "Confirm user presence" notifications for key handles that relate to FIDO keys that are not currently inserted in at least some cases. bz3366 * ssh(1), sshd(8): correct value for IPTOS_DSCP_LE. It needs to allow for the preceding two ECN bits. bz#3373 * ssh-keygen(1): add missing -O option to usage() for the "-Y sign" option. * ssh-keygen(1): fix a NULL deref when using the find-principals function, when matching an allowed_signers line that contains a namespace restriction, but no restriction specified on the command-line * ssh-agent(1): fix memleak in process_extension(); oss-fuzz issue #42719 * ssh(1): suppress "Connection to xxx closed" messages when LogLevel is set to "error" or above. bz3378 * ssh(1), sshd(8): use correct zlib flags when inflate(3)-ing compressed packet data. bz3372 * scp(1): when recursively transferring files in SFTP mode, create the destination directory if it doesn't already exist to match scp(1) in legacy RCP mode behaviour. * scp(1): many improvements in error message consistency between scp(1) in SFTP mode vs legacy RCP mode. * sshd(8): fix potential race in SIGTERM handling PR289 * ssh(1), ssh(8): since DSA keys are deprecated, move them to the end of the default list of public keys so that they will be tried last. PR295 * ssh-keygen(1): allow 'ssh-keygen -Y find-principals' to match wildcard principals in allowed_signers files = Portability * ssh(1), sshd(8): don't trust closefrom(2) on Linux. glibc's implementation does not work in a chroot when the kernel does not have close_range(2). It tries to read from /proc/self/fd and when that fails dies with an assertion of sorts. Instead, call close_range(2) directly from our compat code and fall back if that fails. bz#3349, * OS X poll(2) is broken; use compat replacement. For character- special devices like /dev/null, Darwin's poll(2) returns POLLNVAL when polled with POLLIN. Apparently this is Apple bug 3710161 - not public but a websearch will find other OSS projects rediscovering it periodically since it was first identified in 2005. * Correct handling of exceptfds/POLLPRI in our select(2)-based poll(2)/ppoll(2) compat implementation. * Cygwin: correct checking of mbstowcs() return value. * Add a basic SECURITY.md that refers people to the openssh.com website. * Enable additional compiler warnings and toolchain hardening flags, including -Wbitwise-instead-of-logical, -Wmisleading-indentation, - fzero-call-used-regs and -ftrivial-auto-var-init. * HP/UX. Use compat getline(3) on HP-UX 10.x, where the libc version is not reliable. - Rebased patches: * openssh-7.7p1-ldap.patch * openssh-8.0p1-gssapi-keyex.patch * openssh-8.1p1-audit.patch * openssh-8.4p1-vendordir.patch * openssh-reenable-dh-group14-sha1-default.patch ==== plasma5-desktop ==== - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== plasma5-workspace ==== Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-libs xembedsniproxy - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== polkit-kde-agent-5 ==== - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== powerdevil5 ==== - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== raspberrypi-firmware ==== - Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639) ==== raspberrypi-firmware-config ==== - Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639) ==== sudo ==== - Add sudo-1.9.9-honor-T_opt.patch * the -T option of sudo does nothing even when 'Defaults user_command_timeouts' is present in the configuration. * [bsc#1193446] * Credit to Jaroslav Jindrak <dzejrou(a)gmail.com> ==== systemd ==== Subpackages: libsystemd0 libudev1 udev - Fix the default target when it's been incorrectly set to one of the runlevel targets (bsc#1196567) The script 'upgrade-from-pre-210.sh' used to initialize the default target during migration from sysvinit to systemd. However it created symlinks to runlevel targets, which are deprecated and might be missing when systemd-sysvcompat package is not installed. If such symlinks are found the script now renames them to point to 'true' systemd target units. - When migrating from sysvinit to systemd (it probably won't happen anymore), let's use the default systemd target, which is the graphical.target one. In most cases it will do the right thing anyway. ==== tracker-miners ==== Version update (3.2.1 -> 3.2.2) Subpackages: tracker-miner-files - Update to version 3.2.2: + Backport seccomp rules for rseq and mbind syscalls. + Updated translations. - Drop patches fixed upstream: + tracker-miners-allow-mbind.patch + tracker-miners-allow-rseq.patch ==== upower ==== Version update (0.99.16 -> 0.99.16+4) Subpackages: libupower-glib3 typelib-1_0-UpowerGlib-1_0 - Update to version 0.99.16+4: + meson.build: Output correct paths for sbindir and datadir. + daemon: Initialize FD to -1 to avoid incorrect close. + input: Fix FD handling and let input stream close it. + linux: Set FD to -1 rather than 0 when closing delay inhibitor. ==== wireless-regdb ==== Version update (20220108 -> 20220218) - Update to version 20220218: * wireless-regdb: update regulatory database based on preceding changes * wireless-regdb: Update regulatory rules for the Netherlands (NL) on 6GHz * wireless-regdb: Update regulatory rules for China (CN) * wireless-regdb: Update regulatory rules for South Korea (KR) * Revert "wireless-regdb: Update regulatory rules for South Korea (KR)" * wireless-regdb: Update regulatory rules for Spain (ES) on 6GHz * wireless-regdb: add 802.11ah bands to world regulatory domain * wireless-regdb: add support for US S1G channels * wireless-regdb: Update regulatory rules for France (FR) on 6 and 60 GHz * wireless-regdb: Update regulatory rules for South Korea (KR) ==== xdg-desktop-portal ==== - Pass --docdir=%%{_defaultdocdir}/%%{name}/ to configure, install docs in standard distro docs dir, and move to devel sub-package, as it is developer documentation. ==== xdg-desktop-portal-kde ==== - Replace %_libdir/libexec with %_libexecdir (boo#1174075)

1 0

New ARM Kubic snapshot 20220310 released!
by Guillaume Gardet 14 Mar '22

14 Mar '22

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=3&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: filesystem gcc11 grub2 gtk3 (3.24.32 -> 3.24.33) libnvme ncurses (6.3.20220219 -> 6.3.20220226) openssh (8.8p1 -> 8.9p1) raspberrypi-firmware raspberrypi-firmware-config sudo systemd wireless-regdb (20220108 -> 20220218) === Details === ==== filesystem ==== - Create tmpfiles.d which creates /usr/local on the fly ==== gcc11 ==== Subpackages: libgcc_s1 libgomp1 libstdc++6 - Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from packages provided by older GCC work. Add a requires from that package to the corresponding libstc++6 package to keep those at the same version. [bsc#1196107] ==== grub2 ==== Subpackages: grub2-arm64-efi grub2-snapper-plugin - Support saving grub environment for POWER signed grub images (jsc#SLE-23854) * 0001-Add-grub_envblk_buf-helper-function.patch * 0002-Add-grub_disk_write_tail-helper-function.patch * 0003-grub-install-support-prep-environment-block.patch * 0004-Introduce-prep_load_env-command.patch * 0005-export-environment-at-start-up.patch - Use enviroment variable in early boot config to looking up root device * grub2.spec - Remove obsolete openSUSE 12.2 conditionals in spec file - Clean up powerpc certificate handling. ==== gtk3 ==== Version update (3.24.32 -> 3.24.33) Subpackages: gtk3-data gtk3-schema gtk3-tools libgtk-3-0 - Update to version 3.24.33: + No changes. ==== libnvme ==== - Update License information. The library is released under LGPL-2.1-or-later and not LGPL-2.1-only. ==== ncurses ==== Version update (6.3.20220219 -> 6.3.20220226) Subpackages: libncurses6 ncurses-utils terminfo-base - Add ncurses patch 20220226 + fix issues found with coverity: + rewrite canonical_name() function of infocmp to ensure buffer size + corrected use of original tty-modes in tput init/reset subcommands + modify tabs program to limit tab-stop values to max-columns + add limit-checks for palette rgb values in test/ncurses.c + add a few null-pointer checks to help with static-analysis. + enforce limit on number of soft-keys used in c++ binding. + adjust a buffer-limit in write_entry.c to quiet a bogus warning from gcc 12.0.1 ==== openssh ==== Version update (8.8p1 -> 8.9p1) Subpackages: openssh-clients openssh-common openssh-server - Version update to 8.9p1: = Security * sshd(8): fix an integer overflow in the user authentication path that, in conjunction with other logic errors, could have yielded unauthenticated access under difficult to exploit conditions. This situation is not exploitable because of independent checks in the privilege separation monitor. Privilege separation has been enabled by default in since openssh-3.2.2 (released in 2002) and has been mandatory since openssh-7.5 (released in 2017). Moreover, portable OpenSSH has used toolchain features available in most modern compilers to abort on signed integer overflow since openssh-6.5 (released in 2014). Thanks to Malcolm Stagg for finding and reporting this bug. = Potentially-incompatible changes * sshd(8), portable OpenSSH only: this release removes in-built support for MD5-hashed passwords. If you require these on your system then we recommend linking against libxcrypt or similar. * This release modifies the FIDO security key middleware interface and increments SSH_SK_VERSION_MAJOR. = New features * ssh(1), sshd(8), ssh-add(1), ssh-agent(1): add a system for restricting forwarding and use of keys added to ssh-agent(1) A detailed description of the feature is available at https://www.openssh.com/agent-restrict.html and the protocol extensions are documented in the PROTOCOL and PROTOCOL.agent files in the source release. * ssh(1), sshd(8): add the sntrup761x25519-sha512(a)openssh.com hybrid ECDH/x25519 + Streamlined NTRU Prime post-quantum KEX to the default KEXAlgorithms list (after the ECDH methods but before the prime-group DH ones). The next release of OpenSSH is likely to make this key exchange the default method. * ssh-keygen(1): when downloading resident keys from a FIDO token, pass back the user ID that was used when the key was created and append it to the filename the key is written to (if it is not the default). Avoids keys being clobbered if the user created multiple resident keys with the same application string but different user IDs. * ssh-keygen(1), ssh(1), ssh-agent(1): better handling for FIDO keys on tokens that provide user verification (UV) on the device itself, including biometric keys, avoiding unnecessary PIN prompts. * ssh-keygen(1): add "ssh-keygen -Y match-principals" operation to perform matching of principals names against an allowed signers file. To be used towards a TOFU model for SSH signatures in git. * ssh-add(1), ssh-agent(1): allow pin-required FIDO keys to be added to ssh-agent(1). $SSH_ASKPASS will be used to request the PIN at authentication time. * ssh-keygen(1): allow selection of hash at sshsig signing time (either sha512 (default) or sha256). * ssh(1), sshd(8): read network data directly to the packet input buffer instead of indirectly via a small stack buffer. Provides a modest performance improvement. * ssh(1), sshd(8): read data directly to the channel input buffer, providing a similar modest performance improvement. * ssh(1): extend the PubkeyAuthentication configuration directive to accept yes|no|unbound|host-bound to allow control over one of the protocol extensions used to implement agent-restricted keys. = Bugfixes * sshd(8): document that CASignatureAlgorithms, ExposeAuthInfo and PubkeyAuthOptions can be used in a Match block. PR277. * sshd(8): fix possible string truncation when constructing paths to .rhosts/.shosts files with very long user home directory names. * ssh-keysign(1): unbreak for KEX algorithms that use SHA384/512 exchange hashes * ssh(1): don't put the TTY into raw mode when SessionType=none, avoids ^C being unable to kill such a session. bz3360 * scp(1): fix some corner-case bugs in SFTP-mode handling of ~-prefixed paths. * ssh(1): unbreak hostbased auth using RSA keys. Allow ssh(1) to select RSA keys when only RSA/SHA2 signature algorithms are configured (this is the default case). Previously RSA keys were not being considered in the default case. * ssh-keysign(1): make ssh-keysign use the requested signature algorithm and not the default for the key type. Part of unbreaking hostbased auth for RSA/SHA2 keys. * ssh(1): stricter UpdateHostkey signature verification logic on the client- side. Require RSA/SHA2 signatures for RSA hostkeys except when RSA/SHA1 was explicitly negotiated during initial KEX; bz3375 * ssh(1), sshd(8): fix signature algorithm selection logic for UpdateHostkeys on the server side. The previous code tried to prefer RSA/SHA2 for hostkey proofs of RSA keys, but missed some cases. This will use RSA/SHA2 signatures for RSA keys if the client proposed these algorithms in initial KEX. bz3375 * All: convert all uses of select(2)/pselect(2) to poll(2)/ppoll(2). This includes the mainloops in ssh(1), ssh-agent(1), ssh-agent(1) and sftp-server(8), as well as the sshd(8) listen loop and all other FD read/writability checks. On platforms with missing or broken poll(2)/ppoll(2) syscalls a select(2)-based compat shim is available. * ssh-keygen(1): the "-Y find-principals" command was verifying key validity when using ca certs but not with simple key lifetimes within the allowed signers file. * ssh-keygen(1): make sshsig verify-time argument parsing optional * sshd(8): fix truncation in rhosts/shosts path construction. * ssh(1), ssh-agent(1): avoid xmalloc(0) for PKCS#11 keyid for ECDSA keys (we already did this for RSA keys). Avoids fatal errors for PKCS#11 libraries that return empty keyid, e.g. Microchip ATECC608B "cryptoauthlib"; bz#3364 * ssh(1), ssh-agent(1): improve the testing of credentials against inserted FIDO: ask the token whether a particular key belongs to it in cases where the token supports on-token user-verification (e.g. biometrics) rather than just assuming that it will accept it. Will reduce spurious "Confirm user presence" notifications for key handles that relate to FIDO keys that are not currently inserted in at least some cases. bz3366 * ssh(1), sshd(8): correct value for IPTOS_DSCP_LE. It needs to allow for the preceding two ECN bits. bz#3373 * ssh-keygen(1): add missing -O option to usage() for the "-Y sign" option. * ssh-keygen(1): fix a NULL deref when using the find-principals function, when matching an allowed_signers line that contains a namespace restriction, but no restriction specified on the command-line * ssh-agent(1): fix memleak in process_extension(); oss-fuzz issue #42719 * ssh(1): suppress "Connection to xxx closed" messages when LogLevel is set to "error" or above. bz3378 * ssh(1), sshd(8): use correct zlib flags when inflate(3)-ing compressed packet data. bz3372 * scp(1): when recursively transferring files in SFTP mode, create the destination directory if it doesn't already exist to match scp(1) in legacy RCP mode behaviour. * scp(1): many improvements in error message consistency between scp(1) in SFTP mode vs legacy RCP mode. * sshd(8): fix potential race in SIGTERM handling PR289 * ssh(1), ssh(8): since DSA keys are deprecated, move them to the end of the default list of public keys so that they will be tried last. PR295 * ssh-keygen(1): allow 'ssh-keygen -Y find-principals' to match wildcard principals in allowed_signers files = Portability * ssh(1), sshd(8): don't trust closefrom(2) on Linux. glibc's implementation does not work in a chroot when the kernel does not have close_range(2). It tries to read from /proc/self/fd and when that fails dies with an assertion of sorts. Instead, call close_range(2) directly from our compat code and fall back if that fails. bz#3349, * OS X poll(2) is broken; use compat replacement. For character- special devices like /dev/null, Darwin's poll(2) returns POLLNVAL when polled with POLLIN. Apparently this is Apple bug 3710161 - not public but a websearch will find other OSS projects rediscovering it periodically since it was first identified in 2005. * Correct handling of exceptfds/POLLPRI in our select(2)-based poll(2)/ppoll(2) compat implementation. * Cygwin: correct checking of mbstowcs() return value. * Add a basic SECURITY.md that refers people to the openssh.com website. * Enable additional compiler warnings and toolchain hardening flags, including -Wbitwise-instead-of-logical, -Wmisleading-indentation, - fzero-call-used-regs and -ftrivial-auto-var-init. * HP/UX. Use compat getline(3) on HP-UX 10.x, where the libc version is not reliable. - Rebased patches: * openssh-7.7p1-ldap.patch * openssh-8.0p1-gssapi-keyex.patch * openssh-8.1p1-audit.patch * openssh-8.4p1-vendordir.patch * openssh-reenable-dh-group14-sha1-default.patch ==== raspberrypi-firmware ==== - Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639) ==== raspberrypi-firmware-config ==== - Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639) ==== sudo ==== - Add sudo-1.9.9-honor-T_opt.patch * the -T option of sudo does nothing even when 'Defaults user_command_timeouts' is present in the configuration. * [bsc#1193446] * Credit to Jaroslav Jindrak <dzejrou(a)gmail.com> ==== systemd ==== Subpackages: libsystemd0 libudev1 udev - Fix the default target when it's been incorrectly set to one of the runlevel targets (bsc#1196567) The script 'upgrade-from-pre-210.sh' used to initialize the default target during migration from sysvinit to systemd. However it created symlinks to runlevel targets, which are deprecated and might be missing when systemd-sysvcompat package is not installed. If such symlinks are found the script now renames them to point to 'true' systemd target units. - When migrating from sysvinit to systemd (it probably won't happen anymore), let's use the default systemd target, which is the graphical.target one. In most cases it will do the right thing anyway. ==== wireless-regdb ==== Version update (20220108 -> 20220218) - Update to version 20220218: * wireless-regdb: update regulatory database based on preceding changes * wireless-regdb: Update regulatory rules for the Netherlands (NL) on 6GHz * wireless-regdb: Update regulatory rules for China (CN) * wireless-regdb: Update regulatory rules for South Korea (KR) * Revert "wireless-regdb: Update regulatory rules for South Korea (KR)" * wireless-regdb: Update regulatory rules for Spain (ES) on 6GHz * wireless-regdb: add 802.11ah bands to world regulatory domain * wireless-regdb: add support for US S1G channels * wireless-regdb: Update regulatory rules for France (FR) on 6 and 60 GHz * wireless-regdb: Update regulatory rules for South Korea (KR)

1 0

New MicroOS snapshot 20220312 released!
by Richard Brown 13 Mar '22

13 Mar '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bluedevil5 (5.24.2 -> 5.24.3) breeze (5.24.2 -> 5.24.3) discover (5.24.2.1 -> 5.24.3) drkonqi5 (5.24.2 -> 5.24.3) kactivitymanagerd (5.24.2 -> 5.24.3) kde-cli-tools5 (5.24.2 -> 5.24.3) kde-gtk-config5 (5.24.2 -> 5.24.3) kgamma5 (5.24.2 -> 5.24.3) khotkeys5 (5.24.2 -> 5.24.3) kinfocenter5 (5.24.2 -> 5.24.3) kmenuedit5 (5.24.2 -> 5.24.3) kscreen5 (5.24.2 -> 5.24.3) kscreenlocker (5.24.2 -> 5.24.3) ksystemstats5 (5.24.2 -> 5.24.3) kwayland-integration (5.24.2 -> 5.24.3) kwayland-server (5.24.2 -> 5.24.3) kwin5 (5.24.2 -> 5.24.3) kwrited5 (5.24.2 -> 5.24.3) layer-shell-qt (5.24.2 -> 5.24.3) libkdecoration2 (5.24.2 -> 5.24.3) libkscreen2 (5.24.2 -> 5.24.3) libksysguard5 (5.24.2 -> 5.24.3) milou5 (5.24.2 -> 5.24.3) plasma-browser-integration (5.24.2 -> 5.24.3) plasma-nm5 (5.24.2 -> 5.24.3) plasma5-addons (5.24.2 -> 5.24.3) plasma5-desktop (5.24.2 -> 5.24.3) plasma5-integration (5.24.2 -> 5.24.3) plasma5-openSUSE plasma5-pa (5.24.2 -> 5.24.3) plasma5-workspace (5.24.2 -> 5.24.3) polkit-kde-agent-5 (5.24.2 -> 5.24.3) powerdevil5 (5.24.2 -> 5.24.3) python-PyYAML systemsettings5 (5.24.2 -> 5.24.3) vim (8.2.4456 -> 8.2.4542) wireplumber xdg-desktop-portal-kde (5.24.2 -> 5.24.3) === Details === ==== bluedevil5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== breeze ==== Version update (5.24.2 -> 5.24.3) Subpackages: breeze5-cursors breeze5-decoration breeze5-style breeze5-wallpapers libbreezecommon5-5 - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * KStyle: center QTabBar custom tab buttons vertically in vertical tabs (kde#447315) ==== discover ==== Version update (5.24.2.1 -> 5.24.3) Subpackages: discover-backend-flatpak discover-backend-packagekit discover-notifier - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * flatpak: Do not emit about upgradeable packages that were just created * flatpak: Use the sources map to check if a resource is already being used * Set textFormat in Label to StyledText * Fix build by explicitly creating a QUrl from QString - Restore compatibility with older kf5-filesystem ==== drkonqi5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * make sure to create the wallet folder before using it (kde#446925) - Restore compatibility with older kf5-filesystem ==== kactivitymanagerd ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 - Restore compatibility with older kf5-filesystem ==== kde-cli-tools5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== kde-gtk-config5 ==== Version update (5.24.2 -> 5.24.3) Subpackages: kde-gtk-config5-gtk3 - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 - Restore compatibility with older kf5-filesystem ==== kgamma5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== khotkeys5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== kinfocenter5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * fix up help paths (kde#450918) ==== kmenuedit5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== kscreen5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * Revert "KCM: Workaround unknown Qt issue that causes the revert dialog to be invisible" ==== kscreenlocker ==== Version update (5.24.2 -> 5.24.3) Subpackages: libKScreenLocker5 - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 - Restore compatibility with older kf5-filesystem ==== ksystemstats5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== kwayland-integration ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== kwayland-server ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * Fix kdebugsettings categories file * linuxdmabuf: Add unistd.h include ==== kwin5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * backends/drm: don't change the configuration while KWin is terminating * backends/drm: wait for pending pageflips before doing a modeset * output changes: handle to-be-enabled outputs first * platform: check all outputs, not only enabled ones for the enabled flag * backends/drm: fix recording with direct scanout (kde#450943) * backends/drm: fix multi gpu (kde#450737) * backends/drm: fix format choosing (kde#450779) * inputmethod: fix placing the virtual keyboard at the bottom * Revert "Remove mysterious s_cursorUpdateBlocking boolean flag in pointer_input.cpp" (kde#449273) - Drop patches, now upstream: * 0001-Revert-Remove-mysterious-s_cursorUpdateBlocking-bool.patch - Restore compatibility with older kf5-filesystem ==== kwrited5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== layer-shell-qt ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== libkdecoration2 ==== Version update (5.24.2 -> 5.24.3) Subpackages: libkdecorations2-5 libkdecorations2private9 - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== libkscreen2 ==== Version update (5.24.2 -> 5.24.3) Subpackages: libKF5Screen7 libkscreen2-plugin - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== libksysguard5 ==== Version update (5.24.2 -> 5.24.3) Subpackages: ksysguardsystemstats-data libKSysGuardSystemStats1 libksysguard5-imports - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * Fixed computational bug for bar chart spacing (kde#449868) - Restore compatibility with older kf5-filesystem ==== milou5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== plasma-browser-integration ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== plasma-nm5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== plasma5-addons ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 ==== plasma5-desktop ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * kcms/touchpad: Remove weird Q_EMIT changed(false) in resizeEvent - Drop patches, now upstream: * 0001-kcms-touchpad-Remove-weird-Q_EMIT-changed-false-in-r.patch - Restore compatibility with older kf5-filesystem - Remove duplicate mention of kimpanel-ibus-panel ==== plasma5-integration ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * [KDEPlatformFileDialog] Don't do stat if baseUrl didn't change ==== plasma5-openSUSE ==== Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE sddm-theme-openSUSE - Update to 5.24.3 ==== plasma5-pa ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * [kcm] Update device combobox when current device changes externally ==== plasma5-workspace ==== Version update (5.24.2 -> 5.24.3) Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-libs xembedsniproxy - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * kcms/colors: Implement radio button layouts better * kcms/colors: fix spacing between radio buttons and content * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161) * [Icons KCM] Give measure delegate a text * wallpapers: Sort BackgroundListModel by title * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796) * applets/systray: align applet labels with differing line counts in hidden view (kde#438347) * Show panel config above other windows (kde#450794) * Use current accent colour to set ColorDialog object in colour picker * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223) * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768) * Revert "Fix overdraw on Wayland" * startkde: Forward stdout/stderr of started processes * SDDM theme: stop eliding people's names so aggressively (kde#450673) * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632) * wrap completely the invariants timer in NDEBUG * ScreenPool as the source of truth of QScreen info * Always ensure there is an user selected (kde#450182) * Prevent panel going out of screen boundaries * applets/clipboard: Focus on text area when transition is done * applets/clipboard: Fix highlight after exiting edit mode - Drop patches, now upstream: * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch - Restore compatibility with older kf5-filesystem ==== polkit-kde-agent-5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 - Restore compatibility with older kf5-filesystem ==== powerdevil5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * Improved backlight devices selection (kde#399646) - Restore compatibility with older kf5-filesystem ==== python-PyYAML ==== - do not use setup.py test construct https://trello.com/c/me9Z4sIv/121-setuppy-test-leftovers ==== systemsettings5 ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - Changes since 5.24.2: * app/SettingsBase: Fix systemsettings unable to start when missing plugin (kde#451054) * ModuleView: Simplify and fix custom headers logic ==== vim ==== Version update (8.2.4456 -> 8.2.4542) Subpackages: vim-data-common vim-small - Updated to version 8.2.4542, fixes the following problems * Terminal test may fail on some machines. * The GPM library can only be linked statically. * Vim9: compiling filter() call fails with funcref that has unknown arguments. * Vim9: compiling sort() call fails with a funcref that has unknown arguments. * Vim9: wrong error for defining dict function. * Not enough testing for quickfix code. * Completion only uses strict matching. * Dtrace files are recognized as filetype D. * Fuzzy completion does not order matches properly. "create-directories" as the final argument. * Running filetype test leaves file behind. * Coverity warns for uninitialized struct member. * Coverity warns for uninitialized variable. * Coverity warns for use of a freed function name. * Coverity warnds for not checking return value of ftell(). * Memory allocation failures not tested in quickfix code. * Fuzzy cmdline completion does not work for lower case. * Operator name spelled wrong. * Crash when using fuzzy completion. * No fuzzy completieon for maps and abbreviations. * Suspending with CTRL-Z does not work on Android. * Cmdline popup menu not removed when 'lazyredraw' is set. * No fuzzy cmdline completion for user defined completion. * Command completion makes two rounds to collect matches. * Vim9: some error messages are not tested. * Compiler warning for uninitialized variable. * Vim9: cannot compare with v:null. * Build error with +eval but without +channel or +job. * Failing test for comparing v:null with number. * Terminal focus reporting only works for xterm-like terminals. (Jonathan Rascher) * MS-Windows makefile dependencies are outdated. * No error if an option is given an invalid value with ":let &opt = val". * Options test fails in the GUI. * The find_tags() function is much too long. * Help test fails in 24 line terminal. * Coverity gives warnings after tags code refactoring. * Wrong color for half of wide character next to pum scrollbar. * Using <Plug> with "noremap" does not work. * Vim9: at the script level declarations leak from try block to catch and finally block. * Vim9: can declare a global variable on the command line. * With 'showbreak' set and after the end of the line the cursor may be displayed in the wrong position. * In the GUI a modifier is not recognized for the key typed after CTRL-X, which may result in a mapping to be used. (Daniel Steinberg) * Vim9: there is no point in supporting :Print and :mode. * When there is a partially matching map and modifyOtherKeys is active a full map may not work. * Vim9: outdated "autocmd nested" still works. * "pattern not found" for :global is not an error message. * Test fails because of new error message. * Vim9: cannot assign to a global variable on the command line. * Vim9: can declare a variable with ":va". * Vim9: shortening commands leads to confusing script. * Filetype test fails. * The find_tags_in_file() function is much too long. * Window-local directory is not applied if 'acd' fails. * Vim9: some flow commands can be shortened. * Old subsitute syntax is still supported. * Build failure without the +eval feature. * The binary tag search feature is always enabled. * Vim9: Can still use ":fini" and ":finis" for ":finish". * Using wrong highlight for cursor line number. * Build failure without the +diff feature. (John Marriott) * GUI test fails with Motif. (Dominique Pellé) * When gvim is started maximized the 'window' option isn't set properly. (Christian J. Robinson) * Some GUI tests don't work on Athena. * Vim9: cannot set variables to a null value. * The Athena GUI is old and does not work well. * Crash when using null_function for a partial. * Vim9: comparing partial with function fails. * Making comparison with null work changes legacy behavior. * LGTM warnings for condition always true and buffer size too small. * Suspending with CTRL-Z does not work on OpenBSD. * Vim9: no test that after assigning null the type is still checked. * Vim9: "is" operator with empty string and null returns true. * Filename modifer ":8" removes the filename. * Debugger test fails when breaking on expression. * Output from linter and language server shows up in git. * The find_tags_in_file() function is too long. * When comparing special v:none and v:null are handled the same when compiling. * Line number for error is off by one. * Crash in debugger when a variable is not available in the current block. * Vim9: "break" inside try/catch not handled correctly. ==== wireplumber ==== Subpackages: libwireplumber-0_4-0 wireplumber-audio - Add patch from upstream to fix a crash on tty switch (glfo#pipewire/wireplumber#193): * 0002-policy-bluetooth-fix-string.find-crash-with-nil-string.patch - Add patch from upstream to fix issues with PulseAudio support with PipeWire 0.3.48+ (glfo#pipewire/pipewire#2189): * 0003-si-audio-adapter-relax-format-parsing.patch - Some spec clean-up. ==== xdg-desktop-portal-kde ==== Version update (5.24.2 -> 5.24.3) - Update to 5.24.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.3 - No code changes since 5.24.2 - Restore compatibility with older kf5-filesystem

1 0

New Kubic snapshot 20220312 released!
by Richard Brown 13 Mar '22

13 Mar '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: python-PyYAML vim (8.2.4456 -> 8.2.4542) === Details === ==== python-PyYAML ==== - do not use setup.py test construct https://trello.com/c/me9Z4sIv/121-setuppy-test-leftovers ==== vim ==== Version update (8.2.4456 -> 8.2.4542) Subpackages: vim-data-common vim-small - Updated to version 8.2.4542, fixes the following problems * Terminal test may fail on some machines. * The GPM library can only be linked statically. * Vim9: compiling filter() call fails with funcref that has unknown arguments. * Vim9: compiling sort() call fails with a funcref that has unknown arguments. * Vim9: wrong error for defining dict function. * Not enough testing for quickfix code. * Completion only uses strict matching. * Dtrace files are recognized as filetype D. * Fuzzy completion does not order matches properly. "create-directories" as the final argument. * Running filetype test leaves file behind. * Coverity warns for uninitialized struct member. * Coverity warns for uninitialized variable. * Coverity warns for use of a freed function name. * Coverity warnds for not checking return value of ftell(). * Memory allocation failures not tested in quickfix code. * Fuzzy cmdline completion does not work for lower case. * Operator name spelled wrong. * Crash when using fuzzy completion. * No fuzzy completieon for maps and abbreviations. * Suspending with CTRL-Z does not work on Android. * Cmdline popup menu not removed when 'lazyredraw' is set. * No fuzzy cmdline completion for user defined completion. * Command completion makes two rounds to collect matches. * Vim9: some error messages are not tested. * Compiler warning for uninitialized variable. * Vim9: cannot compare with v:null. * Build error with +eval but without +channel or +job. * Failing test for comparing v:null with number. * Terminal focus reporting only works for xterm-like terminals. (Jonathan Rascher) * MS-Windows makefile dependencies are outdated. * No error if an option is given an invalid value with ":let &opt = val". * Options test fails in the GUI. * The find_tags() function is much too long. * Help test fails in 24 line terminal. * Coverity gives warnings after tags code refactoring. * Wrong color for half of wide character next to pum scrollbar. * Using <Plug> with "noremap" does not work. * Vim9: at the script level declarations leak from try block to catch and finally block. * Vim9: can declare a global variable on the command line. * With 'showbreak' set and after the end of the line the cursor may be displayed in the wrong position. * In the GUI a modifier is not recognized for the key typed after CTRL-X, which may result in a mapping to be used. (Daniel Steinberg) * Vim9: there is no point in supporting :Print and :mode. * When there is a partially matching map and modifyOtherKeys is active a full map may not work. * Vim9: outdated "autocmd nested" still works. * "pattern not found" for :global is not an error message. * Test fails because of new error message. * Vim9: cannot assign to a global variable on the command line. * Vim9: can declare a variable with ":va". * Vim9: shortening commands leads to confusing script. * Filetype test fails. * The find_tags_in_file() function is much too long. * Window-local directory is not applied if 'acd' fails. * Vim9: some flow commands can be shortened. * Old subsitute syntax is still supported. * Build failure without the +eval feature. * The binary tag search feature is always enabled. * Vim9: Can still use ":fini" and ":finis" for ":finish". * Using wrong highlight for cursor line number. * Build failure without the +diff feature. (John Marriott) * GUI test fails with Motif. (Dominique Pellé) * When gvim is started maximized the 'window' option isn't set properly. (Christian J. Robinson) * Some GUI tests don't work on Athena. * Vim9: cannot set variables to a null value. * The Athena GUI is old and does not work well. * Crash when using null_function for a partial. * Vim9: comparing partial with function fails. * Making comparison with null work changes legacy behavior. * LGTM warnings for condition always true and buffer size too small. * Suspending with CTRL-Z does not work on OpenBSD. * Vim9: no test that after assigning null the type is still checked. * Vim9: "is" operator with empty string and null returns true. * Filename modifer ":8" removes the filename. * Debugger test fails when breaking on expression. * Output from linter and language server shows up in git. * The find_tags_in_file() function is too long. * When comparing special v:none and v:null are handled the same when compiling. * Line number for error is off by one. * Crash in debugger when a variable is not available in the current block. * Vim9: "break" inside try/catch not handled correctly.

1 0

New MicroOS snapshot 20220311 released!
by Richard Brown 12 Mar '22

12 Mar '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: cockpit-podman dbus-1 (1.12.22 -> 1.14.0) dbus-1-x11 (1.12.22 -> 1.14.0) gnutls kbd libvdpau (1.4 -> 1.5) logrotate lua54 mozilla-nss (3.74 -> 3.75) openssl-1_1 qemu yast2 (4.4.45 -> 4.4.47) === Details === ==== cockpit-podman ==== - Add source-offest to _service to fix build error in Leap. ==== dbus-1 ==== Version update (1.12.22 -> 1.14.0) Subpackages: libdbus-1-3 - Update to version 1.14.0: + Dependencies: - dbus now requires at least a basic level of support for C99 variadic macros, as implemented in gcc >= 3, all versions of Clang, and MSVC >= 2005. In practice this requirement has existed since version 1.9.2, but it is now official. - dbus now requires a C99-compatible va_copy() macro (or a __va_copy() macro with the same behaviour), except when building for Windows using MSVC and CMake. - On Unix platforms, if getpwnam_r() and getgrnam_r() are implemented, they must be POSIX-conformant. The non-POSIX signature seen in ancient Solaris versions will no longer work. - GLib >= 2.38 is required if full test coverage is enabled (reduced from 2.40 in dbus 1.12.x.) - Building using CMake now requires CMake 3.4. - Building documentation using CMake now requires xsltproc, Docbook DTDs (for example docbook-xml on Debian derivatives), and Docbook XSLT stylesheets (for example docbook-xsl on Debian derivatives). Using KDE's meinproc4 documentation processor is no longer supported. + Build-time configuration changes: Move CMake build system to top level, matching normal practice for CMake projects + Deprecations: - Third-party software should install default dbus policies for the system bus into ${datadir}/dbus-1/system.d (this has been supported since dbus 1.10, released in August 2015). Installing default dbus policies in ${sysconfdir}/dbus-1/system.d is now considered to be deprecated. Policy files in ${sysconfdir}/dbus-1/system.d continue to be read, but this directory should only be used by system administrators wishing to override the default policies. - The ${datadir} applicable to dbus is usually /usr/share and the ${sysconfdir} is usually /etc. - A similar pattern applies to the session bus policies in session.d. - The dbus-send(1) man page now documents --bus and --peer instead of the old --address synonym for --peer, which has been deprecated since the introduction of --bus and --peer in 1.7.6 - The dbus-daemon man page now has scarier warnings about <allow_anonymous/> and non-local TCP, which are insecure and should not be used, particularly for the standard system and session buses. - DBusServer (and hence the dbus-daemon) no longer accepts usernames (login names) for the recommended EXTERNAL authentication mechanism, only numeric user IDs or the empty string. See 1.13.0 release notes for full details. + New features: - On Linux 4.13 or later when built against a suitable glibc version, GetConnectionCredentials() now includes UnixGroupIDs, the effective group IDs of the initiator of the connection, taken from SO_PEERGROUPS. - On Linux 4.13 or later, <policy group="?"> now uses the SO_PEERGROUPS credentials-passing socket option to get the effective group IDs of the initiator of the connection. See 1.13.4 release notes for details. - Add a --sender option to dbus-send, which requests a name and holds it until the signal has been sent - dbus-daemon <allow> and <deny> rules can now specify a send_destination_prefix attribute, which is like a combination of send_destination and the arg0namespace keyword in match rules. See 1.13.12 release notes for more details. - The dbus-daemon now filters the messages that it relays, removing header fields that it does not understand. Clients must not rely on this behaviour unless they have confirmed that they are connected to a suitable message bus implementation, for example by querying its Features property. - The dbus-daemon now emits a signal, ActivatableServicesChanged, when the list of activatable services may have changed. Support for this signal can be discovered by querying the Features property. - It is now possible to disable traditional (non-systemd) service activation at build-time (Autotools: - -disable-traditional-activation, CMake: - DENABLE_TRADITIONAL_ACTIVATION=OFF). See 1.13.10 release notes for details. - The API reference manual can be built as a Qt compiled help file if qhelpgenerator(-qt5) is available. See 1.13.16 release notes for details. + Miscellaneous behaviour changes: - When using the "user bus" (--enable-user-session), put the dbus-daemon in the session slice - Several environment variables set by systemd are no longer passed on to activated services - If the dbus-daemon is compiled for Linux with systemd support, it now informs systemd that it is ready for use via the sd_notify() mechanism. - Tarball releases no longer contain pre-2007 changelogs and are now compressed with xz, making them around 35% smaller. - Drop conditionals for old obsolete versions of openSUSE. - Rebase patches with quilt. - Use https for source and sig URL. ==== dbus-1-x11 ==== Version update (1.12.22 -> 1.14.0) - Update to version 1.14.0: + Dependencies: - dbus now requires at least a basic level of support for C99 variadic macros, as implemented in gcc >= 3, all versions of Clang, and MSVC >= 2005. In practice this requirement has existed since version 1.9.2, but it is now official. - dbus now requires a C99-compatible va_copy() macro (or a __va_copy() macro with the same behaviour), except when building for Windows using MSVC and CMake. - On Unix platforms, if getpwnam_r() and getgrnam_r() are implemented, they must be POSIX-conformant. The non-POSIX signature seen in ancient Solaris versions will no longer work. - GLib >= 2.38 is required if full test coverage is enabled (reduced from 2.40 in dbus 1.12.x.) - Building using CMake now requires CMake 3.4. - Building documentation using CMake now requires xsltproc, Docbook DTDs (for example docbook-xml on Debian derivatives), and Docbook XSLT stylesheets (for example docbook-xsl on Debian derivatives). Using KDE's meinproc4 documentation processor is no longer supported. + Build-time configuration changes: Move CMake build system to top level, matching normal practice for CMake projects + Deprecations: - Third-party software should install default dbus policies for the system bus into ${datadir}/dbus-1/system.d (this has been supported since dbus 1.10, released in August 2015). Installing default dbus policies in ${sysconfdir}/dbus-1/system.d is now considered to be deprecated. Policy files in ${sysconfdir}/dbus-1/system.d continue to be read, but this directory should only be used by system administrators wishing to override the default policies. - The ${datadir} applicable to dbus is usually /usr/share and the ${sysconfdir} is usually /etc. - A similar pattern applies to the session bus policies in session.d. - The dbus-send(1) man page now documents --bus and --peer instead of the old --address synonym for --peer, which has been deprecated since the introduction of --bus and --peer in 1.7.6 - The dbus-daemon man page now has scarier warnings about <allow_anonymous/> and non-local TCP, which are insecure and should not be used, particularly for the standard system and session buses. - DBusServer (and hence the dbus-daemon) no longer accepts usernames (login names) for the recommended EXTERNAL authentication mechanism, only numeric user IDs or the empty string. See 1.13.0 release notes for full details. + New features: - On Linux 4.13 or later when built against a suitable glibc version, GetConnectionCredentials() now includes UnixGroupIDs, the effective group IDs of the initiator of the connection, taken from SO_PEERGROUPS. - On Linux 4.13 or later, <policy group="?"> now uses the SO_PEERGROUPS credentials-passing socket option to get the effective group IDs of the initiator of the connection. See 1.13.4 release notes for details. - Add a --sender option to dbus-send, which requests a name and holds it until the signal has been sent - dbus-daemon <allow> and <deny> rules can now specify a send_destination_prefix attribute, which is like a combination of send_destination and the arg0namespace keyword in match rules. See 1.13.12 release notes for more details. - The dbus-daemon now filters the messages that it relays, removing header fields that it does not understand. Clients must not rely on this behaviour unless they have confirmed that they are connected to a suitable message bus implementation, for example by querying its Features property. - The dbus-daemon now emits a signal, ActivatableServicesChanged, when the list of activatable services may have changed. Support for this signal can be discovered by querying the Features property. - It is now possible to disable traditional (non-systemd) service activation at build-time (Autotools: - -disable-traditional-activation, CMake: - DENABLE_TRADITIONAL_ACTIVATION=OFF). See 1.13.10 release notes for details. - The API reference manual can be built as a Qt compiled help file if qhelpgenerator(-qt5) is available. See 1.13.16 release notes for details. + Miscellaneous behaviour changes: - When using the "user bus" (--enable-user-session), put the dbus-daemon in the session slice - Several environment variables set by systemd are no longer passed on to activated services - If the dbus-daemon is compiled for Linux with systemd support, it now informs systemd that it is ready for use via the sd_notify() mechanism. - Tarball releases no longer contain pre-2007 changelogs and are now compressed with xz, making them around 35% smaller. - Drop conditionals for old obsolete versions of openSUSE. - Rebase patches with quilt. - Use https for source and sig URL. ==== gnutls ==== - build with lto - build with -Wl,-z,now -Wl,-z,relro - build without -fanalyzer, which cuts build time in ~ half ==== kbd ==== Subpackages: kbd-legacy - Refresh kbdsettings-nox86.patch to fix build on non-x86* architectures ==== libvdpau ==== Version update (1.4 -> 1.5) - Add U_Support-AV1.patch: Add support for AV1 in vdpauinfo. - Minor tweaks to spec. - Update to version 1.5: * Add AV1 decode support in VDPAU API * Addition of comma and removing the extra braces * Add tracing for HEVCRangeExt picture info * Add tracing for VP9 picture info - Also update vdpauinfo to version 1.4 - Drop patches fixed upstream: * c5a8e7c6c8b4b36a0e4c9a4369404519262a3256.patch * e82dc4bdbb0db3ffa8c78275902738eb63aa5ca8.patch ==== logrotate ==== - Added own logrotate.service file in order to define a new order of parsed config files: /usr/etc/logrotate.conf Default configuration file defined by the vendor. /usr/etc/logrotate.d/* Directory for additional configuration files defined by the vendor. /etc/logrotate.conf Default configuration file defined by the administrator. (optional) /etc/logrotate.d/* Directory for additional configuration files defined by the administrator. (optional) - drop logrotate-3.19.0-systemd_add_home_env.patch: - included in new logrotate.service - Adapted man page: logrotate-3.19.0-man_logrotate.patch ==== lua54 ==== - Added patches from upstream: * luabugs1.patch * luabugs2.patch - Adjust buildsystem so that it matches upstream git (testes??) - Drop the lua_docdir define, package docs in the standard location. Instead just silently drop packaging the README with the path that does not makes sense for a rpm package, but for a source tarball install. Simpler solution to boo#1186233. ==== mozilla-nss ==== Version update (3.74 -> 3.75) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs - update to NSS 3.75 * bmo#1749030 - This patch adds gcc-9 and gcc-10 to the CI. * bmo#1749794 - Make DottedOIDToCode.py compatible with python3. * bmo#1749475 - Avoid undefined shift in SSL_CERT_IS while fuzzing. * bmo#1748386 - Remove redundant key type check. * bmo#1749869 - Update ABI expectations to match ECH changes. * bmo#1748386 - Enable CKM_CHACHA20. * bmo#1747327 - check return on NSS_NoDB_Init and NSS_Shutdown. * bmo#1747310 - real move assignment operator. * bmo#1748245 - Run ECDSA test vectors from bltest as part of the CI tests. * bmo#1743302 - Add ECDSA test vectors to the bltest command line tool. * bmo#1747772 - Allow to build using clang's integrated assembler. * bmo#1321398 - Allow to override python for the build. * bmo#1747317 - test HKDF output rather than input. * bmo#1747316 - Use ASSERT macros to end failed tests early. * bmo#1747310 - move assignment operator for DataBuffer. * bmo#1712879 - Add test cases for ECH compression and unexpected extensions in SH. * bmo#1725938 - Update tests for ECH-13. * bmo#1725938 - Tidy up error handling. * bmo#1728281 - Add tests for ECH HRR Changes. * bmo#1728281 - Server only sends GREASE HRR extension if enabled by preference. * bmo#1725938 - Update generation of the Associated Data for ECH-13. * bmo#1712879 - When ECH is accepted, reject extensions which were only advertised in the Outer Client Hello. * bmo#1712879 - Allow for compressed, non-contiguous, extensions. * bmo#1712879 - Scramble the PSK extension in CHOuter. * bmo#1712647 - Split custom extension handling for ECH. * bmo#1728281 - Add ECH-13 HRR Handling. * bmo#1677181 - Client side ECH padding. * bmo#1725938 - Stricter ClientHelloInner Decompression. * bmo#1725938 - Remove ECH_inner extension, use new enum format. * bmo#1725938 - Update the version number for ECH-13 and adjust the ECHConfig size. ==== openssl-1_1 ==== Subpackages: libopenssl1_1 - Security fix: [bsc#1192820, CVE-2002-20001] * Fix DHEATER: The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE calculation. * Stop recommending the DHE in SSL_DEFAULT_SUSE_CIPHER_LIST * Rebase openssl-DEFAULT_SUSE_cipher.patch - Fix the engines section in /etc/ssl/openssl.cnf [bsc#1194187] * In an INI-type file, the sections begin with a [section_name] and they run until the next section begins. * Rebase openssl-1_1-use-include-directive.patch ==== qemu ==== - Build PPC firmwares from sources on non-PPC builds as well (bsc#1193545) - Build RiscV firmwares on non-RiscV builds as well - While there, refactor (and simplify!) the firmware building logic and code * Patches added: Makefile-define-endianess-for-cross-buil.patch Makefile-fix-build-with-binutils-2.38.patch - qemu,kvm,xen: NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503) * Patches added: hw-scsi-megasas-check-for-NULL-frame-in-.patch ==== yast2 ==== Version update (4.4.45 -> 4.4.47) - Extend the Package module to force using PackageSystem or PackageAI without having the mode into account. - AutoYaST: properly detect whether firewalld, bind and yast2-dns-server packages are installed when cloning a system (bsc#1196963). - 4.4.47 - Reverted LD_PRELOAD change (GitHub PR#1236) (bsc#1196326) - 4.4.46 - New doc: Invoking External Commands in YaST (in doc/)

1 0

New Kubic snapshot 20220311 released!
by Richard Brown 12 Mar '22

12 Mar '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ceph (16.2.6.463+g22e7612f9ad -> 16.2.7.596+g7d574789716) cockpit-podman dbus-1 (1.12.22 -> 1.14.0) gnutls helm kbd logrotate lua54 mozilla-nss (3.74 -> 3.75) nfs-utils openssl-1_1 qemu yast2 (4.4.45 -> 4.4.47) === Details === ==== ceph ==== Version update (16.2.6.463+g22e7612f9ad -> 16.2.7.596+g7d574789716) Subpackages: ceph-common libcephfs2 librados2 librbd1 librgw2 python3-ceph-argparse python3-ceph-common python3-cephfs python3-rados python3-rbd python3-rgw - Update to 16.2.7-596-g7d574789716 + Update Prometheus Container image paths (pr #459) + mgr/dashboard: Fix documentation URL (pr #456) + mgr/dashboard: Adapt downstream branded navigation page (pr #454) - Update to 16.2.7-577-g3e3603b5dd1 + Update prometheus-server version - Update to 16.2.7-37-gb3be69440db: + (bsc#1194353) Downstream branding breaks dashboard npm build ==== cockpit-podman ==== - Add source-offest to _service to fix build error in Leap. ==== dbus-1 ==== Version update (1.12.22 -> 1.14.0) Subpackages: libdbus-1-3 - Update to version 1.14.0: + Dependencies: - dbus now requires at least a basic level of support for C99 variadic macros, as implemented in gcc >= 3, all versions of Clang, and MSVC >= 2005. In practice this requirement has existed since version 1.9.2, but it is now official. - dbus now requires a C99-compatible va_copy() macro (or a __va_copy() macro with the same behaviour), except when building for Windows using MSVC and CMake. - On Unix platforms, if getpwnam_r() and getgrnam_r() are implemented, they must be POSIX-conformant. The non-POSIX signature seen in ancient Solaris versions will no longer work. - GLib >= 2.38 is required if full test coverage is enabled (reduced from 2.40 in dbus 1.12.x.) - Building using CMake now requires CMake 3.4. - Building documentation using CMake now requires xsltproc, Docbook DTDs (for example docbook-xml on Debian derivatives), and Docbook XSLT stylesheets (for example docbook-xsl on Debian derivatives). Using KDE's meinproc4 documentation processor is no longer supported. + Build-time configuration changes: Move CMake build system to top level, matching normal practice for CMake projects + Deprecations: - Third-party software should install default dbus policies for the system bus into ${datadir}/dbus-1/system.d (this has been supported since dbus 1.10, released in August 2015). Installing default dbus policies in ${sysconfdir}/dbus-1/system.d is now considered to be deprecated. Policy files in ${sysconfdir}/dbus-1/system.d continue to be read, but this directory should only be used by system administrators wishing to override the default policies. - The ${datadir} applicable to dbus is usually /usr/share and the ${sysconfdir} is usually /etc. - A similar pattern applies to the session bus policies in session.d. - The dbus-send(1) man page now documents --bus and --peer instead of the old --address synonym for --peer, which has been deprecated since the introduction of --bus and --peer in 1.7.6 - The dbus-daemon man page now has scarier warnings about <allow_anonymous/> and non-local TCP, which are insecure and should not be used, particularly for the standard system and session buses. - DBusServer (and hence the dbus-daemon) no longer accepts usernames (login names) for the recommended EXTERNAL authentication mechanism, only numeric user IDs or the empty string. See 1.13.0 release notes for full details. + New features: - On Linux 4.13 or later when built against a suitable glibc version, GetConnectionCredentials() now includes UnixGroupIDs, the effective group IDs of the initiator of the connection, taken from SO_PEERGROUPS. - On Linux 4.13 or later, <policy group="?"> now uses the SO_PEERGROUPS credentials-passing socket option to get the effective group IDs of the initiator of the connection. See 1.13.4 release notes for details. - Add a --sender option to dbus-send, which requests a name and holds it until the signal has been sent - dbus-daemon <allow> and <deny> rules can now specify a send_destination_prefix attribute, which is like a combination of send_destination and the arg0namespace keyword in match rules. See 1.13.12 release notes for more details. - The dbus-daemon now filters the messages that it relays, removing header fields that it does not understand. Clients must not rely on this behaviour unless they have confirmed that they are connected to a suitable message bus implementation, for example by querying its Features property. - The dbus-daemon now emits a signal, ActivatableServicesChanged, when the list of activatable services may have changed. Support for this signal can be discovered by querying the Features property. - It is now possible to disable traditional (non-systemd) service activation at build-time (Autotools: - -disable-traditional-activation, CMake: - DENABLE_TRADITIONAL_ACTIVATION=OFF). See 1.13.10 release notes for details. - The API reference manual can be built as a Qt compiled help file if qhelpgenerator(-qt5) is available. See 1.13.16 release notes for details. + Miscellaneous behaviour changes: - When using the "user bus" (--enable-user-session), put the dbus-daemon in the session slice - Several environment variables set by systemd are no longer passed on to activated services - If the dbus-daemon is compiled for Linux with systemd support, it now informs systemd that it is ready for use via the sd_notify() mechanism. - Tarball releases no longer contain pre-2007 changelogs and are now compressed with xz, making them around 35% smaller. - Drop conditionals for old obsolete versions of openSUSE. - Rebase patches with quilt. - Use https for source and sig URL. ==== gnutls ==== - build with lto - build with -Wl,-z,now -Wl,-z,relro - build without -fanalyzer, which cuts build time in ~ half ==== helm ==== - avoid CGO to workaround missing gold dependency (bsc#1183043) ==== kbd ==== Subpackages: kbd-legacy - Refresh kbdsettings-nox86.patch to fix build on non-x86* architectures ==== logrotate ==== - Added own logrotate.service file in order to define a new order of parsed config files: /usr/etc/logrotate.conf Default configuration file defined by the vendor. /usr/etc/logrotate.d/* Directory for additional configuration files defined by the vendor. /etc/logrotate.conf Default configuration file defined by the administrator. (optional) /etc/logrotate.d/* Directory for additional configuration files defined by the administrator. (optional) - drop logrotate-3.19.0-systemd_add_home_env.patch: - included in new logrotate.service - Adapted man page: logrotate-3.19.0-man_logrotate.patch ==== lua54 ==== - Added patches from upstream: * luabugs1.patch * luabugs2.patch - Adjust buildsystem so that it matches upstream git (testes??) - Drop the lua_docdir define, package docs in the standard location. Instead just silently drop packaging the README with the path that does not makes sense for a rpm package, but for a source tarball install. Simpler solution to boo#1186233. ==== mozilla-nss ==== Version update (3.74 -> 3.75) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs - update to NSS 3.75 * bmo#1749030 - This patch adds gcc-9 and gcc-10 to the CI. * bmo#1749794 - Make DottedOIDToCode.py compatible with python3. * bmo#1749475 - Avoid undefined shift in SSL_CERT_IS while fuzzing. * bmo#1748386 - Remove redundant key type check. * bmo#1749869 - Update ABI expectations to match ECH changes. * bmo#1748386 - Enable CKM_CHACHA20. * bmo#1747327 - check return on NSS_NoDB_Init and NSS_Shutdown. * bmo#1747310 - real move assignment operator. * bmo#1748245 - Run ECDSA test vectors from bltest as part of the CI tests. * bmo#1743302 - Add ECDSA test vectors to the bltest command line tool. * bmo#1747772 - Allow to build using clang's integrated assembler. * bmo#1321398 - Allow to override python for the build. * bmo#1747317 - test HKDF output rather than input. * bmo#1747316 - Use ASSERT macros to end failed tests early. * bmo#1747310 - move assignment operator for DataBuffer. * bmo#1712879 - Add test cases for ECH compression and unexpected extensions in SH. * bmo#1725938 - Update tests for ECH-13. * bmo#1725938 - Tidy up error handling. * bmo#1728281 - Add tests for ECH HRR Changes. * bmo#1728281 - Server only sends GREASE HRR extension if enabled by preference. * bmo#1725938 - Update generation of the Associated Data for ECH-13. * bmo#1712879 - When ECH is accepted, reject extensions which were only advertised in the Outer Client Hello. * bmo#1712879 - Allow for compressed, non-contiguous, extensions. * bmo#1712879 - Scramble the PSK extension in CHOuter. * bmo#1712647 - Split custom extension handling for ECH. * bmo#1728281 - Add ECH-13 HRR Handling. * bmo#1677181 - Client side ECH padding. * bmo#1725938 - Stricter ClientHelloInner Decompression. * bmo#1725938 - Remove ECH_inner extension, use new enum format. * bmo#1725938 - Update the version number for ECH-13 and adjust the ECHConfig size. ==== nfs-utils ==== Subpackages: libnfsidmap1 nfs-client - add reenable-nfsv2.patch for reverting nfsv2 deprecation until test coverage is fixed (poo#106679) - Add gcc12-fix.patch upstream fix for GCC 12 compiler. - Update to version 2.6.1 - https://kernel.org/pub/linux/utils/nfs-utils/2.6.1/2.6.1-Changelog - remove patches from this release: - 0001-gssd-fix-crash-in-debug-message.patch, - Add-disable-sbin-override-for-when-sbin-is-a-symlink.patch ==== openssl-1_1 ==== Subpackages: libopenssl1_1 - Security fix: [bsc#1192820, CVE-2002-20001] * Fix DHEATER: The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE calculation. * Stop recommending the DHE in SSL_DEFAULT_SUSE_CIPHER_LIST * Rebase openssl-DEFAULT_SUSE_cipher.patch - Fix the engines section in /etc/ssl/openssl.cnf [bsc#1194187] * In an INI-type file, the sections begin with a [section_name] and they run until the next section begins. * Rebase openssl-1_1-use-include-directive.patch ==== qemu ==== - Build PPC firmwares from sources on non-PPC builds as well (bsc#1193545) - Build RiscV firmwares on non-RiscV builds as well - While there, refactor (and simplify!) the firmware building logic and code * Patches added: Makefile-define-endianess-for-cross-buil.patch Makefile-fix-build-with-binutils-2.38.patch - qemu,kvm,xen: NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503) * Patches added: hw-scsi-megasas-check-for-NULL-frame-in-.patch ==== yast2 ==== Version update (4.4.45 -> 4.4.47) - Extend the Package module to force using PackageSystem or PackageAI without having the mode into account. - AutoYaST: properly detect whether firewalld, bind and yast2-dns-server packages are installed when cloning a system (bsc#1196963). - 4.4.47 - Reverted LD_PRELOAD change (GitHub PR#1236) (bsc#1196326) - 4.4.46 - New doc: Invoking External Commands in YaST (in doc/)

1 0

New MicroOS snapshot 20220309 released!
by Richard Brown 10 Mar '22

10 Mar '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: baloo5 discover drkonqi5 filesystem gcc11 hwdata (0.356 -> 0.357) kactivitymanagerd kauth kde-gtk-config5 kdelibs4support kscreenlocker kwalletmanager5 kwayland kwin5 libksysguard5 libnvme ncurses (6.3.20220219 -> 6.3.20220226) openssh (8.8p1 -> 8.9p1) plasma5-desktop plasma5-workspace polkit-kde-agent-5 powerdevil5 systemd upower (0.99.16 -> 0.99.16+4) wireless-regdb (20220108 -> 20220218) xdg-desktop-portal-kde === Details === ==== baloo5 ==== Subpackages: baloo5-imports baloo5-kioslaves libKF5Baloo5 libKF5BalooEngine5 - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== discover ==== Subpackages: discover-backend-flatpak discover-backend-packagekit discover-notifier - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== drkonqi5 ==== - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== filesystem ==== - Create tmpfiles.d which creates /usr/local on the fly ==== gcc11 ==== Subpackages: cpp11 libgcc_s1 libgomp1 libstdc++6 libubsan1 - Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from packages provided by older GCC work. Add a requires from that package to the corresponding libstc++6 package to keep those at the same version. [bsc#1196107] ==== hwdata ==== Version update (0.356 -> 0.357) - Update to version 0.357: + Updated pci, usb and vendor ids. ==== kactivitymanagerd ==== - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== kauth ==== Subpackages: libKF5Auth5 libKF5AuthCore5 - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== kde-gtk-config5 ==== Subpackages: kde-gtk-config5-gtk3 - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== kdelibs4support ==== Subpackages: libKF5KDELibs4Support5 - Add patch to fix installation: * 0001-Use-KDE_INSTALL_FULL_-variables-where-needed.patch ==== kscreenlocker ==== Subpackages: libKScreenLocker5 - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== kwalletmanager5 ==== - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== kwayland ==== - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== kwin5 ==== - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== libksysguard5 ==== Subpackages: ksysguardsystemstats-data libKSysGuardSystemStats1 libksysguard5-imports - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== libnvme ==== - Update License information. The library is released under LGPL-2.1-or-later and not LGPL-2.1-only. ==== ncurses ==== Version update (6.3.20220219 -> 6.3.20220226) Subpackages: libncurses6 ncurses-utils terminfo-base - Add ncurses patch 20220226 + fix issues found with coverity: + rewrite canonical_name() function of infocmp to ensure buffer size + corrected use of original tty-modes in tput init/reset subcommands + modify tabs program to limit tab-stop values to max-columns + add limit-checks for palette rgb values in test/ncurses.c + add a few null-pointer checks to help with static-analysis. + enforce limit on number of soft-keys used in c++ binding. + adjust a buffer-limit in write_entry.c to quiet a bogus warning from gcc 12.0.1 ==== openssh ==== Version update (8.8p1 -> 8.9p1) Subpackages: openssh-clients openssh-common openssh-server - Version update to 8.9p1: = Security * sshd(8): fix an integer overflow in the user authentication path that, in conjunction with other logic errors, could have yielded unauthenticated access under difficult to exploit conditions. This situation is not exploitable because of independent checks in the privilege separation monitor. Privilege separation has been enabled by default in since openssh-3.2.2 (released in 2002) and has been mandatory since openssh-7.5 (released in 2017). Moreover, portable OpenSSH has used toolchain features available in most modern compilers to abort on signed integer overflow since openssh-6.5 (released in 2014). Thanks to Malcolm Stagg for finding and reporting this bug. = Potentially-incompatible changes * sshd(8), portable OpenSSH only: this release removes in-built support for MD5-hashed passwords. If you require these on your system then we recommend linking against libxcrypt or similar. * This release modifies the FIDO security key middleware interface and increments SSH_SK_VERSION_MAJOR. = New features * ssh(1), sshd(8), ssh-add(1), ssh-agent(1): add a system for restricting forwarding and use of keys added to ssh-agent(1) A detailed description of the feature is available at https://www.openssh.com/agent-restrict.html and the protocol extensions are documented in the PROTOCOL and PROTOCOL.agent files in the source release. * ssh(1), sshd(8): add the sntrup761x25519-sha512(a)openssh.com hybrid ECDH/x25519 + Streamlined NTRU Prime post-quantum KEX to the default KEXAlgorithms list (after the ECDH methods but before the prime-group DH ones). The next release of OpenSSH is likely to make this key exchange the default method. * ssh-keygen(1): when downloading resident keys from a FIDO token, pass back the user ID that was used when the key was created and append it to the filename the key is written to (if it is not the default). Avoids keys being clobbered if the user created multiple resident keys with the same application string but different user IDs. * ssh-keygen(1), ssh(1), ssh-agent(1): better handling for FIDO keys on tokens that provide user verification (UV) on the device itself, including biometric keys, avoiding unnecessary PIN prompts. * ssh-keygen(1): add "ssh-keygen -Y match-principals" operation to perform matching of principals names against an allowed signers file. To be used towards a TOFU model for SSH signatures in git. * ssh-add(1), ssh-agent(1): allow pin-required FIDO keys to be added to ssh-agent(1). $SSH_ASKPASS will be used to request the PIN at authentication time. * ssh-keygen(1): allow selection of hash at sshsig signing time (either sha512 (default) or sha256). * ssh(1), sshd(8): read network data directly to the packet input buffer instead of indirectly via a small stack buffer. Provides a modest performance improvement. * ssh(1), sshd(8): read data directly to the channel input buffer, providing a similar modest performance improvement. * ssh(1): extend the PubkeyAuthentication configuration directive to accept yes|no|unbound|host-bound to allow control over one of the protocol extensions used to implement agent-restricted keys. = Bugfixes * sshd(8): document that CASignatureAlgorithms, ExposeAuthInfo and PubkeyAuthOptions can be used in a Match block. PR277. * sshd(8): fix possible string truncation when constructing paths to .rhosts/.shosts files with very long user home directory names. * ssh-keysign(1): unbreak for KEX algorithms that use SHA384/512 exchange hashes * ssh(1): don't put the TTY into raw mode when SessionType=none, avoids ^C being unable to kill such a session. bz3360 * scp(1): fix some corner-case bugs in SFTP-mode handling of ~-prefixed paths. * ssh(1): unbreak hostbased auth using RSA keys. Allow ssh(1) to select RSA keys when only RSA/SHA2 signature algorithms are configured (this is the default case). Previously RSA keys were not being considered in the default case. * ssh-keysign(1): make ssh-keysign use the requested signature algorithm and not the default for the key type. Part of unbreaking hostbased auth for RSA/SHA2 keys. * ssh(1): stricter UpdateHostkey signature verification logic on the client- side. Require RSA/SHA2 signatures for RSA hostkeys except when RSA/SHA1 was explicitly negotiated during initial KEX; bz3375 * ssh(1), sshd(8): fix signature algorithm selection logic for UpdateHostkeys on the server side. The previous code tried to prefer RSA/SHA2 for hostkey proofs of RSA keys, but missed some cases. This will use RSA/SHA2 signatures for RSA keys if the client proposed these algorithms in initial KEX. bz3375 * All: convert all uses of select(2)/pselect(2) to poll(2)/ppoll(2). This includes the mainloops in ssh(1), ssh-agent(1), ssh-agent(1) and sftp-server(8), as well as the sshd(8) listen loop and all other FD read/writability checks. On platforms with missing or broken poll(2)/ppoll(2) syscalls a select(2)-based compat shim is available. * ssh-keygen(1): the "-Y find-principals" command was verifying key validity when using ca certs but not with simple key lifetimes within the allowed signers file. * ssh-keygen(1): make sshsig verify-time argument parsing optional * sshd(8): fix truncation in rhosts/shosts path construction. * ssh(1), ssh-agent(1): avoid xmalloc(0) for PKCS#11 keyid for ECDSA keys (we already did this for RSA keys). Avoids fatal errors for PKCS#11 libraries that return empty keyid, e.g. Microchip ATECC608B "cryptoauthlib"; bz#3364 * ssh(1), ssh-agent(1): improve the testing of credentials against inserted FIDO: ask the token whether a particular key belongs to it in cases where the token supports on-token user-verification (e.g. biometrics) rather than just assuming that it will accept it. Will reduce spurious "Confirm user presence" notifications for key handles that relate to FIDO keys that are not currently inserted in at least some cases. bz3366 * ssh(1), sshd(8): correct value for IPTOS_DSCP_LE. It needs to allow for the preceding two ECN bits. bz#3373 * ssh-keygen(1): add missing -O option to usage() for the "-Y sign" option. * ssh-keygen(1): fix a NULL deref when using the find-principals function, when matching an allowed_signers line that contains a namespace restriction, but no restriction specified on the command-line * ssh-agent(1): fix memleak in process_extension(); oss-fuzz issue #42719 * ssh(1): suppress "Connection to xxx closed" messages when LogLevel is set to "error" or above. bz3378 * ssh(1), sshd(8): use correct zlib flags when inflate(3)-ing compressed packet data. bz3372 * scp(1): when recursively transferring files in SFTP mode, create the destination directory if it doesn't already exist to match scp(1) in legacy RCP mode behaviour. * scp(1): many improvements in error message consistency between scp(1) in SFTP mode vs legacy RCP mode. * sshd(8): fix potential race in SIGTERM handling PR289 * ssh(1), ssh(8): since DSA keys are deprecated, move them to the end of the default list of public keys so that they will be tried last. PR295 * ssh-keygen(1): allow 'ssh-keygen -Y find-principals' to match wildcard principals in allowed_signers files = Portability * ssh(1), sshd(8): don't trust closefrom(2) on Linux. glibc's implementation does not work in a chroot when the kernel does not have close_range(2). It tries to read from /proc/self/fd and when that fails dies with an assertion of sorts. Instead, call close_range(2) directly from our compat code and fall back if that fails. bz#3349, * OS X poll(2) is broken; use compat replacement. For character- special devices like /dev/null, Darwin's poll(2) returns POLLNVAL when polled with POLLIN. Apparently this is Apple bug 3710161 - not public but a websearch will find other OSS projects rediscovering it periodically since it was first identified in 2005. * Correct handling of exceptfds/POLLPRI in our select(2)-based poll(2)/ppoll(2) compat implementation. * Cygwin: correct checking of mbstowcs() return value. * Add a basic SECURITY.md that refers people to the openssh.com website. * Enable additional compiler warnings and toolchain hardening flags, including -Wbitwise-instead-of-logical, -Wmisleading-indentation, - fzero-call-used-regs and -ftrivial-auto-var-init. * HP/UX. Use compat getline(3) on HP-UX 10.x, where the libc version is not reliable. - Rebased patches: * openssh-7.7p1-ldap.patch * openssh-8.0p1-gssapi-keyex.patch * openssh-8.1p1-audit.patch * openssh-8.4p1-vendordir.patch * openssh-reenable-dh-group14-sha1-default.patch ==== plasma5-desktop ==== - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== plasma5-workspace ==== Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-libs xembedsniproxy - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== polkit-kde-agent-5 ==== - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== powerdevil5 ==== - Replace %_libdir/libexec with %_libexecdir (boo#1174075) ==== systemd ==== Subpackages: libsystemd0 libudev1 udev - Fix the default target when it's been incorrectly set to one of the runlevel targets (bsc#1196567) The script 'upgrade-from-pre-210.sh' used to initialize the default target during migration from sysvinit to systemd. However it created symlinks to runlevel targets, which are deprecated and might be missing when systemd-sysvcompat package is not installed. If such symlinks are found the script now renames them to point to 'true' systemd target units. - When migrating from sysvinit to systemd (it probably won't happen anymore), let's use the default systemd target, which is the graphical.target one. In most cases it will do the right thing anyway. ==== upower ==== Version update (0.99.16 -> 0.99.16+4) Subpackages: libupower-glib3 typelib-1_0-UpowerGlib-1_0 - Update to version 0.99.16+4: + meson.build: Output correct paths for sbindir and datadir. + daemon: Initialize FD to -1 to avoid incorrect close. + input: Fix FD handling and let input stream close it. + linux: Set FD to -1 rather than 0 when closing delay inhibitor. ==== wireless-regdb ==== Version update (20220108 -> 20220218) - Update to version 20220218: * wireless-regdb: update regulatory database based on preceding changes * wireless-regdb: Update regulatory rules for the Netherlands (NL) on 6GHz * wireless-regdb: Update regulatory rules for China (CN) * wireless-regdb: Update regulatory rules for South Korea (KR) * Revert "wireless-regdb: Update regulatory rules for South Korea (KR)" * wireless-regdb: Update regulatory rules for Spain (ES) on 6GHz * wireless-regdb: add 802.11ah bands to world regulatory domain * wireless-regdb: add support for US S1G channels * wireless-regdb: Update regulatory rules for France (FR) on 6 and 60 GHz * wireless-regdb: Update regulatory rules for South Korea (KR) ==== xdg-desktop-portal-kde ==== - Replace %_libdir/libexec with %_libexecdir (boo#1174075)

1 0