May 2022 - openSUSE Kubic - openSUSE Mailing Lists

Re: transactional-update failing and destroying snapshot on zypper exit code 107
by Thorsten Kukuk 16 May '22

16 May '22

On Mon, May 16, Dario Faggioli wrote: > Now, this is of course not particularly useful as a message, on a t-u > based system, as we're going to reboot anyway. But the real problem > seems to me to be that zypper itself returns 107, when printing that > message. There is a RPM with a broken pre/post install script. Look at your logs which it is and get that fixed. > And it also seems to me that t-u interpret such return code as failure > and destroys the snapshot, which does not seem right. Of course it is a failure and destroying the snapshot is the only correct thing to do. A pre/post install script did fail, so the snapshot is in an undefined state. Exactly what should never happen with a transactional-update system. That's the whole purpose of transactional updates. > FTR, this is happening to me on my MicroOS Desktop box, but it looks a > t-u general issue to me. Or is it me that am missing something or doing > something wrong? It's not a t-u issue, but a broken RPM. Thorsten > Thanks and Regards > -- > Dario Faggioli, Ph.D > http://about.me/dario.faggioli > Virtualization Software Engineer > SUSE Labs, SUSE https://www.suse.com/ > ------------------------------------------------------------------- > <<This happens because _I_ choose it to happen!>> (Raistlin Majere) -- Thorsten Kukuk, Distinguished Engineer, Senior Architect SUSE Software Solutions Germany GmbH, Maxfeldstr. 5, 90409 Nuernberg, Germany Managing Director: Ivo Totev, Andrew Myers, Andrew McDonald, Martje Boudien Moerman (HRB 36809, AG Nürnberg)

1 0

New MicroOS snapshot 20220513 released!
by Richard Brown 15 May '22

15 May '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ncurses (6.3.20220423 -> 6.3.20220501) openssl === Details === ==== ncurses ==== Version update (6.3.20220423 -> 6.3.20220501) Subpackages: libncurses6 ncurses-utils terminfo-base - Add ncurses patch 20220501 + build-fix for debug-traces (report/patch by Chris Clayton). - Add ncurses patch 20220430 + modify samples for xterm mouse 1002/1003 modes to use 1006 mode, and also provide for focus in/out responses -TD + modify default case in handle_wheel() to always report button-release events, e.g., for xterm mouse mode 1003 (patch by Leonid S Usov). + improve valid_entryname() to disallow characters used in terminfo syntax: '#', '=', '|', '\'. + alter copy_termtype() to allocate new str_table and ext_str_table data rather than relying upon its callers. + use calloc in _nc_init_entry() when allocating stringbuf, to ensure it is initialized. + add library-level TYPE_CALLOC for consistency with TYPE_MALLOC. + add some debug-traces for tic/infocmp. - Correct offsets of patches * ncurses-5.9-ibm327x.dif * ncurses-6.3.dif ==== openssl ==== - Use same %description as openssl-3 (describe the software, not the project).

1 0

New Kubic snapshot 20220513 released!
by Richard Brown 15 May '22

15 May '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ncurses (6.3.20220423 -> 6.3.20220501) openssl === Details === ==== ncurses ==== Version update (6.3.20220423 -> 6.3.20220501) Subpackages: libncurses6 ncurses-utils terminfo-base - Add ncurses patch 20220501 + build-fix for debug-traces (report/patch by Chris Clayton). - Add ncurses patch 20220430 + modify samples for xterm mouse 1002/1003 modes to use 1006 mode, and also provide for focus in/out responses -TD + modify default case in handle_wheel() to always report button-release events, e.g., for xterm mouse mode 1003 (patch by Leonid S Usov). + improve valid_entryname() to disallow characters used in terminfo syntax: '#', '=', '|', '\'. + alter copy_termtype() to allocate new str_table and ext_str_table data rather than relying upon its callers. + use calloc in _nc_init_entry() when allocating stringbuf, to ensure it is initialized. + add library-level TYPE_CALLOC for consistency with TYPE_MALLOC. + add some debug-traces for tic/infocmp. - Correct offsets of patches * ncurses-5.9-ibm327x.dif * ncurses-6.3.dif ==== openssl ==== - Use same %description as openssl-3 (describe the software, not the project).

1 0

New MicroOS snapshot 20220512 released!
by Richard Brown 14 May '22

14 May '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: cloud-init curl (7.83.0 -> 7.83.1) exempi (2.5.2 -> 2.6.1) hunspell hwdata (0.358 -> 0.359) kernel-firmware (20220411 -> 20220509) libpng16 libqt5-qtmultimedia open-iscsi perl-libwww-perl (6.62 -> 6.64) python-importlib-metadata taglib ucode-intel (20220419 -> 20220510) xen xorg-x11-server === Details === ==== cloud-init ==== - python-mock is not required for build https://trello.com/c/S6eADbii/64-remove-python-mock ==== curl ==== Version update (7.83.0 -> 7.83.1) Subpackages: libcurl4 - Update to 7.83.1: * Security fixes: - (bsc#1199225, CVE-2022-30115) HSTS bypass via trailing dot - (bsc#1199224, CVE-2022-27782) TLS and SSH connection too eager reuse - (bsc#1199223, CVE-2022-27781) CERTINFO never-ending busy-loop - (bsc#1199222, CVE-2022-27780) percent-encoded path separator in URL host - (bsc#1199221, CVE-2022-27779) cookie for trailing dot TLD - (bsc#1199220, CVE-2022-27778) removes wrong file on error * Bugfixes: - altsvc: fix host name matching for trailing dots - cirrus: Update to FreeBSD 12.3 - cirrus: Use pip for Python packages on FreeBSD - conn: fix typo 'connnection' -> 'connection' in two function names - cookies: make bad_domain() not consider a trailing dot fine - curl: free resource in error path - curl: guard against size_t wraparound in no-clobber code - CURLOPT_DOH_URL.3: mention the known bug - CURLOPT_HSTS*FUNCTION.3: document the involved structs as well - CURLOPT_SSH_AUTH_TYPES.3: fix the default - data/test376: set a proper name - GHA/mbedtls: enabled nghttp2 in the build - gha: build msh3 - gskit: fixed bogus setsockopt calls - gskit: remove unused function set_callback - hsts: ignore trailing dots when comparing hosts names - HTTP-COOKIES: add missing CURLOPT_COOKIESESSION - http: move Curl_allow_auth_to_host() - http_proxy/hyper: handle closed connections - hyper: fix test 357 - Makefile: fix "make ca-firefox" - mbedtls: bail out if rng init fails - mbedtls: fix compile when h2-enabled - mbedtls: fix some error messages - misc: use "autoreconf -fi" instead buildconf - msh3: get msh3 version from MsH3Version - msh3: print boolean value as text representation - msh3: psss remote_port to MsH3ConnectionOpen - ngtcp2: add ca-fallback support for OpenSSL backend - nss: return error if seemingly stuck in a cert loop - openssl: define HAVE_SSL_CTX_SET_EC_CURVES for libressl - post_per_transfer: remove the updated file name - sectransp: bail out if SSLSetPeerDomainName fails - tests/server: declare variable 'reqlogfile' static - tests: fix markdown formatting in README - test{898,974,976}: add 'HTTP proxy' keywords - tls: check more TLS details for connection reuse - url: check SSH config match on connection reuse - urlapi: address (harmless) UndefinedBehavior sanitizer warning - urlapi: reject percent-decoding host name into separator bytes - x509asn1: make do_pubkey handle EC public keys ==== exempi ==== Version update (2.5.2 -> 2.6.1) - Update to 2.6.1: * Update XMPCore to Adobe XMP SDK v2021.10 * Some fixes previously done in Exempi are now upstream - Install the NEWS file instead of the obsolete ChangeLog one ==== hunspell ==== - requires english dictionary [bsc#1199209] ==== hwdata ==== Version update (0.358 -> 0.359) - Update to version 0.359: + Updated pci, usb and vendor ids. ==== kernel-firmware ==== Version update (20220411 -> 20220509) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd - Update to version 20220509 (git commit b19cbdca78ab): * mediatek: Update mt8183 SCP firmware * ice: Update package to 1.3.28.0 * i915: Add DMC v2.06 for DG2 * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9 * amdgpu: update psp_13_0_8 firmware * amdgpu: update gc_10_3_7_rlc firmware * amdgpu: update dcn_3_1_6_dmcub firmware * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1 * qcom: add firmware files for Adreno a420 & related generations * qcom: add firmware files for Adreno a330 * qcom: add firmware files for Adreno a220 * i915: Add GuC v70.1.2 for DG2 * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C * Mellanox: Add lc_ini_bundle for xx.2010.1006 * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle * ath10k: QCA9984 hw1.0: update board-2.bin * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156 * ath10k: QCA9888 hw2.0: update board-2.bin * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156 * ath10k: QCA6174 hw3.0: update board-2.bin * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1 * ath10k: QCA4019 hw1.0: update board-2.bin * ath10k: QCA99X0 hw2.0: add board-2.bin * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7 * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1 * ath11k: WCN6750 hw1.0: add board-2.bin * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1 * ath11k: QCN9074 hw1.0: add board-2.bin * ath11k: QCA6390 hw2.0: update board-2.bin * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1 * ath11k: IPQ8074 hw2.0: update board-2.bin * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1 * ath11k: IPQ6018 hw1.0: update board-2.bin * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502 * amdgpu: update yellow carp DMCUB firmware * linux-firmware: update firmware for mediatek bluetooth chip (MT7922) * linux-firmware: update firmware for MT7922 WiFi device * mediatek: Add mt8195 SCP firmware * qcom: apq8096: add modem firmware * qcom: apq8096: add aDSP firmware * rtl_bt: Add firmware and config files for RTL8852C * i915: Add GuC v70.1.1 for all platforms - Update aliases ==== libpng16 ==== - switch source url to https ==== libqt5-qtmultimedia ==== - Drop libqt5-qtmultimedia-rpmlintrc, rpmlint allows this case now - Deal with an example shipping a dynamic library: * Ignore it in provides/requires * Add libqt5-qtmultimedia-rpmlintrc ==== open-iscsi ==== Subpackages: iscsiuio libopeniscsiusr0_2_0 - Update to latest upstream, including: * Added 'distclean' to Makefile targets * Ensure Makefile '.PHONY' targets set up correctly * fix an iscsid logout bug generating a false error and cleanup logout error messages ==== perl-libwww-perl ==== Version update (6.62 -> 6.64) - updated to 6.64 see /usr/share/doc/packages/perl-libwww-perl/Changes 6.64 2022-04-26 13:16:03Z - Remove unused variable introduced in 9d73bc422 (GH#411) (Olaf Alders) 6.63 2022-04-25 15:24:10Z - Redirect on meta refresh (GH#409) (grr) ==== python-importlib-metadata ==== - Prevent build for Python 3.6 which is not supported anymore - Remove override to use deprecated setuptools usage ==== taglib ==== - Remove build rpath from executables (boo#1199058) ==== ucode-intel ==== Version update (20220419 -> 20220510) - Updated to Intel CPU Microcode 20220510 release. (bsc#20220510) - CVE-2022-21151: Security updates for [INTEL-SA-000617](https://www.intel.com/content/www/us/en/security-center/ad… - Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details. - Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xe… for details. - Update for functional issues. Refer to [Intel Atom C3000 Processor Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/atom/atom-c3000-… for details. - Update for functional issues. Refer to [Intel Atom Processor E3900 Specification Update Addendum](https://cdrdv2.intel.com/v1/dl/getContent/612204) for details. - New Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ADL | C0 | 06-97-02/03 | | 0000001f | Core Gen12 | ADL | C0 | 06-97-05/03 | | 0000001f | Core Gen12 | ADL | L0 | 06-9a-03/80 | | 0000041c | Core Gen12 | ADL | L0 | 06-9a-04/80 | | 0000041c | Core Gen12 | ADL | C0 | 06-bf-02/03 | | 0000001f | Core Gen12 | ADL | C0 | 06-bf-02/03 | | 0000001f | Core Gen12 - Updated Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | VLV | D0 | 06-37-09/0F | 0000090c | 0000090d | Atom E38xx | SKL-U/Y | D0 | 06-4e-03/c0 | 000000ec | 000000f0 | Core Gen6 Mobile | SKX-SP | B1 | 06-55-03/97 | 0100015c | 0100015d | Xeon Scalable | SKX-SP | H0/M0/U0 | 06-55-04/b7 | 02006c0a | 02006d05 | Xeon Scalable | SKX-D | M1 | 06-55-04/b7 | 02006c0a | 02006d05 | Xeon D-21xx | CLX-SP | B0 | 06-55-06/bf | 0400320a | 04003302 | Xeon Scalable Gen2 | CLX-SP | B1 | 06-55-07/bf | 0500320a | 05003302 | Xeon Scalable Gen2 | CPX-SP | A1 | 06-55-0b/bf | 07002402 | 07002501 | Xeon Scalable Gen3 | APL | D0 | 06-5c-09/03 | 00000046 | 00000048 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx | APL | E0 | 06-5c-0a/03 | 00000024 | 00000028 | Atom x5-E39xx | SKL-H/S | R0/N0 | 06-5e-03/36 | 000000ec | 000000f0 | Core Gen6; Xeon E3 v5 | DNV | B0 | 06-5f-01/01 | 00000036 | 00000038 | Atom C Series | ICX-SP | D0 | 06-6a-06/87 | 0d000331 | 0d000363 | Xeon Scalable Gen3 | GLK | B0 | 06-7a-01/01 | 00000038 | 0000003a | Pentium Silver N/J5xxx, Celeron N/J4xxx | GKL-R | R0 | 06-7a-08/01 | 0000001c | 0000001e | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 | ICL-U/Y | D1 | 06-7e-05/80 | 000000a8 | 000000b0 | Core Gen10 Mobile | LKF | B2/B3 | 06-8a-01/10 | 0000002d | 00000031 | Core w/Hybrid Technology | TGL | B1 | 06-8c-01/80 | 0000009a | 000000a4 | Core Gen11 Mobile | TGL-R | C0 | 06-8c-02/c2 | 00000022 | 00000026 | Core Gen11 Mobile | TGL-H | R0 | 06-8d-01/c2 | 0000003c | 0000003e | Core Gen11 Mobile | AML-Y22 | H0 | 06-8e-09/10 | 000000ec | 000000f0 | Core Gen8 Mobile | KBL-U/Y | H0 | 06-8e-09/c0 | 000000ec | 000000f0 | Core Gen7 Mobile | CFL-U43e | D0 | 06-8e-0a/c0 | 000000ec | 000000f0 | Core Gen8 Mobile | WHL-U | W0 | 06-8e-0b/d0 | 000000ec | 000000f0 | Core Gen8 Mobile | AML-Y42 | V0 | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen10 Mobile | CML-Y42 | V0 | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen10 Mobile | WHL-U | V0 | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen8 Mobile | EHL | B1 | 06-96-01/01 | 00000015 | 00000016 | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E | JSL | A0/A1 | 06-9c-00/01 | 2400001f | 24000023 | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105 | KBL-G/H/S/E3 | B0 | 06-9e-09/2a | 000000ec | 000000f0 | Core Gen7; Xeon E3 v6 | CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000ec | 000000f0 | Core Gen8 Desktop, Mobile, Xeon E | CFL-S | B0 | 06-9e-0b/02 | 000000ec | 000000f0 | Core Gen8 | CFL-H/S | P0 | 06-9e-0c/22 | 000000ec | 000000f0 | Core Gen9 | CFL-H | R0 | 06-9e-0d/22 | 000000ec | 000000f0 | Core Gen9 Mobile | CML-H | R1 | 06-a5-02/20 | 000000ec | 000000f0 | Core Gen10 Mobile | CML-S62 | G1 | 06-a5-03/22 | 000000ec | 000000f0 | Core Gen10 | CML-S102 | Q0 | 06-a5-05/22 | 000000ee | 000000f0 | Core Gen10 | CML-U62 V1 | A0 | 06-a6-00/80 | 000000ea | 000000f0 | Core Gen10 Mobile | CML-U62 V2 | K1 | 06-a6-01/80 | 000000ec | 000000f0 | Core Gen10 Mobile | RKL-S | B0 | 06-a7-01/02 | 00000050 | 00000053 | Core Gen11 ==== xen ==== - fix python3 >= 3.10 version detection ==== xorg-x11-server ==== Subpackages: xorg-x11-server-Xvfb - add n_raise_default_clients.patch

1 0

New Kubic snapshot 20220512 released!
by Richard Brown 14 May '22

14 May '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: cloud-init curl (7.83.0 -> 7.83.1) helm (3.8.0 -> 3.8.2) kernel-firmware (20220411 -> 20220509) libpng16 open-iscsi python-importlib-metadata ucode-intel (20220419 -> 20220510) xen === Details === ==== cloud-init ==== - python-mock is not required for build https://trello.com/c/S6eADbii/64-remove-python-mock ==== curl ==== Version update (7.83.0 -> 7.83.1) Subpackages: libcurl4 - Update to 7.83.1: * Security fixes: - (bsc#1199225, CVE-2022-30115) HSTS bypass via trailing dot - (bsc#1199224, CVE-2022-27782) TLS and SSH connection too eager reuse - (bsc#1199223, CVE-2022-27781) CERTINFO never-ending busy-loop - (bsc#1199222, CVE-2022-27780) percent-encoded path separator in URL host - (bsc#1199221, CVE-2022-27779) cookie for trailing dot TLD - (bsc#1199220, CVE-2022-27778) removes wrong file on error * Bugfixes: - altsvc: fix host name matching for trailing dots - cirrus: Update to FreeBSD 12.3 - cirrus: Use pip for Python packages on FreeBSD - conn: fix typo 'connnection' -> 'connection' in two function names - cookies: make bad_domain() not consider a trailing dot fine - curl: free resource in error path - curl: guard against size_t wraparound in no-clobber code - CURLOPT_DOH_URL.3: mention the known bug - CURLOPT_HSTS*FUNCTION.3: document the involved structs as well - CURLOPT_SSH_AUTH_TYPES.3: fix the default - data/test376: set a proper name - GHA/mbedtls: enabled nghttp2 in the build - gha: build msh3 - gskit: fixed bogus setsockopt calls - gskit: remove unused function set_callback - hsts: ignore trailing dots when comparing hosts names - HTTP-COOKIES: add missing CURLOPT_COOKIESESSION - http: move Curl_allow_auth_to_host() - http_proxy/hyper: handle closed connections - hyper: fix test 357 - Makefile: fix "make ca-firefox" - mbedtls: bail out if rng init fails - mbedtls: fix compile when h2-enabled - mbedtls: fix some error messages - misc: use "autoreconf -fi" instead buildconf - msh3: get msh3 version from MsH3Version - msh3: print boolean value as text representation - msh3: psss remote_port to MsH3ConnectionOpen - ngtcp2: add ca-fallback support for OpenSSL backend - nss: return error if seemingly stuck in a cert loop - openssl: define HAVE_SSL_CTX_SET_EC_CURVES for libressl - post_per_transfer: remove the updated file name - sectransp: bail out if SSLSetPeerDomainName fails - tests/server: declare variable 'reqlogfile' static - tests: fix markdown formatting in README - test{898,974,976}: add 'HTTP proxy' keywords - tls: check more TLS details for connection reuse - url: check SSH config match on connection reuse - urlapi: address (harmless) UndefinedBehavior sanitizer warning - urlapi: reject percent-decoding host name into separator bytes - x509asn1: make do_pubkey handle EC public keys ==== helm ==== Version update (3.8.0 -> 3.8.2) - Update to version 3.8.2: * Bump oras.land/oras-go from 1.1.0 to 1.1.1 * Fixing downloader plugin error handling * Simplify testdata charts * Simplify testdata charts * Add tests for multi-level dependencies. * Fix value precedence * Bumping Kubernetes package versions * Updating vcs to latest version * Dont modify provided transport * Pass http getter as pointer in tests * Add docs block * Add transport option and tests * Reuse http transport * Updating Kubernetes libs to 0.23.4 (latest) * fix: remove deadcode * fix: helm package tests * fix: helm package with dependency update for charts with OCI dependencies * Fix typo Unset the env var before func return in Unit Test * add legal name check * maint: fix syntax error in deploy.sh * linting issue fixed * only apply overwrite if version is canary * overwrite flag added to az storage blob upload-batch * Avoid querying for OCI tags can explicit version provided in chart dependencies * Management of bearer tokens for tag listing * Updating Kubernetes packages to 1.23.3 * refactor: use `os.ReadDir` for lightweight directory reading * Add IngressClass to manifests to be (un)installed * feat(comp): Shell completion for OCI * Fix install memory/goroutine leak ==== kernel-firmware ==== Version update (20220411 -> 20220509) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd - Update to version 20220509 (git commit b19cbdca78ab): * mediatek: Update mt8183 SCP firmware * ice: Update package to 1.3.28.0 * i915: Add DMC v2.06 for DG2 * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9 * amdgpu: update psp_13_0_8 firmware * amdgpu: update gc_10_3_7_rlc firmware * amdgpu: update dcn_3_1_6_dmcub firmware * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1 * qcom: add firmware files for Adreno a420 & related generations * qcom: add firmware files for Adreno a330 * qcom: add firmware files for Adreno a220 * i915: Add GuC v70.1.2 for DG2 * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C * Mellanox: Add lc_ini_bundle for xx.2010.1006 * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle * ath10k: QCA9984 hw1.0: update board-2.bin * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156 * ath10k: QCA9888 hw2.0: update board-2.bin * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156 * ath10k: QCA6174 hw3.0: update board-2.bin * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1 * ath10k: QCA4019 hw1.0: update board-2.bin * ath10k: QCA99X0 hw2.0: add board-2.bin * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7 * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1 * ath11k: WCN6750 hw1.0: add board-2.bin * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1 * ath11k: QCN9074 hw1.0: add board-2.bin * ath11k: QCA6390 hw2.0: update board-2.bin * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1 * ath11k: IPQ8074 hw2.0: update board-2.bin * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1 * ath11k: IPQ6018 hw1.0: update board-2.bin * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502 * amdgpu: update yellow carp DMCUB firmware * linux-firmware: update firmware for mediatek bluetooth chip (MT7922) * linux-firmware: update firmware for MT7922 WiFi device * mediatek: Add mt8195 SCP firmware * qcom: apq8096: add modem firmware * qcom: apq8096: add aDSP firmware * rtl_bt: Add firmware and config files for RTL8852C * i915: Add GuC v70.1.1 for all platforms - Update aliases ==== libpng16 ==== - switch source url to https ==== open-iscsi ==== Subpackages: iscsiuio libopeniscsiusr0_2_0 - Update to latest upstream, including: * Added 'distclean' to Makefile targets * Ensure Makefile '.PHONY' targets set up correctly * fix an iscsid logout bug generating a false error and cleanup logout error messages ==== python-importlib-metadata ==== - Prevent build for Python 3.6 which is not supported anymore - Remove override to use deprecated setuptools usage ==== ucode-intel ==== Version update (20220419 -> 20220510) - Updated to Intel CPU Microcode 20220510 release. (bsc#20220510) - CVE-2022-21151: Security updates for [INTEL-SA-000617](https://www.intel.com/content/www/us/en/security-center/ad… - Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details. - Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xe… for details. - Update for functional issues. Refer to [Intel Atom C3000 Processor Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/atom/atom-c3000-… for details. - Update for functional issues. Refer to [Intel Atom Processor E3900 Specification Update Addendum](https://cdrdv2.intel.com/v1/dl/getContent/612204) for details. - New Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ADL | C0 | 06-97-02/03 | | 0000001f | Core Gen12 | ADL | C0 | 06-97-05/03 | | 0000001f | Core Gen12 | ADL | L0 | 06-9a-03/80 | | 0000041c | Core Gen12 | ADL | L0 | 06-9a-04/80 | | 0000041c | Core Gen12 | ADL | C0 | 06-bf-02/03 | | 0000001f | Core Gen12 | ADL | C0 | 06-bf-02/03 | | 0000001f | Core Gen12 - Updated Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | VLV | D0 | 06-37-09/0F | 0000090c | 0000090d | Atom E38xx | SKL-U/Y | D0 | 06-4e-03/c0 | 000000ec | 000000f0 | Core Gen6 Mobile | SKX-SP | B1 | 06-55-03/97 | 0100015c | 0100015d | Xeon Scalable | SKX-SP | H0/M0/U0 | 06-55-04/b7 | 02006c0a | 02006d05 | Xeon Scalable | SKX-D | M1 | 06-55-04/b7 | 02006c0a | 02006d05 | Xeon D-21xx | CLX-SP | B0 | 06-55-06/bf | 0400320a | 04003302 | Xeon Scalable Gen2 | CLX-SP | B1 | 06-55-07/bf | 0500320a | 05003302 | Xeon Scalable Gen2 | CPX-SP | A1 | 06-55-0b/bf | 07002402 | 07002501 | Xeon Scalable Gen3 | APL | D0 | 06-5c-09/03 | 00000046 | 00000048 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx | APL | E0 | 06-5c-0a/03 | 00000024 | 00000028 | Atom x5-E39xx | SKL-H/S | R0/N0 | 06-5e-03/36 | 000000ec | 000000f0 | Core Gen6; Xeon E3 v5 | DNV | B0 | 06-5f-01/01 | 00000036 | 00000038 | Atom C Series | ICX-SP | D0 | 06-6a-06/87 | 0d000331 | 0d000363 | Xeon Scalable Gen3 | GLK | B0 | 06-7a-01/01 | 00000038 | 0000003a | Pentium Silver N/J5xxx, Celeron N/J4xxx | GKL-R | R0 | 06-7a-08/01 | 0000001c | 0000001e | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 | ICL-U/Y | D1 | 06-7e-05/80 | 000000a8 | 000000b0 | Core Gen10 Mobile | LKF | B2/B3 | 06-8a-01/10 | 0000002d | 00000031 | Core w/Hybrid Technology | TGL | B1 | 06-8c-01/80 | 0000009a | 000000a4 | Core Gen11 Mobile | TGL-R | C0 | 06-8c-02/c2 | 00000022 | 00000026 | Core Gen11 Mobile | TGL-H | R0 | 06-8d-01/c2 | 0000003c | 0000003e | Core Gen11 Mobile | AML-Y22 | H0 | 06-8e-09/10 | 000000ec | 000000f0 | Core Gen8 Mobile | KBL-U/Y | H0 | 06-8e-09/c0 | 000000ec | 000000f0 | Core Gen7 Mobile | CFL-U43e | D0 | 06-8e-0a/c0 | 000000ec | 000000f0 | Core Gen8 Mobile | WHL-U | W0 | 06-8e-0b/d0 | 000000ec | 000000f0 | Core Gen8 Mobile | AML-Y42 | V0 | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen10 Mobile | CML-Y42 | V0 | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen10 Mobile | WHL-U | V0 | 06-8e-0c/94 | 000000ec | 000000f0 | Core Gen8 Mobile | EHL | B1 | 06-96-01/01 | 00000015 | 00000016 | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E | JSL | A0/A1 | 06-9c-00/01 | 2400001f | 24000023 | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105 | KBL-G/H/S/E3 | B0 | 06-9e-09/2a | 000000ec | 000000f0 | Core Gen7; Xeon E3 v6 | CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000ec | 000000f0 | Core Gen8 Desktop, Mobile, Xeon E | CFL-S | B0 | 06-9e-0b/02 | 000000ec | 000000f0 | Core Gen8 | CFL-H/S | P0 | 06-9e-0c/22 | 000000ec | 000000f0 | Core Gen9 | CFL-H | R0 | 06-9e-0d/22 | 000000ec | 000000f0 | Core Gen9 Mobile | CML-H | R1 | 06-a5-02/20 | 000000ec | 000000f0 | Core Gen10 Mobile | CML-S62 | G1 | 06-a5-03/22 | 000000ec | 000000f0 | Core Gen10 | CML-S102 | Q0 | 06-a5-05/22 | 000000ee | 000000f0 | Core Gen10 | CML-U62 V1 | A0 | 06-a6-00/80 | 000000ea | 000000f0 | Core Gen10 Mobile | CML-U62 V2 | K1 | 06-a6-01/80 | 000000ec | 000000f0 | Core Gen10 Mobile | RKL-S | B0 | 06-a7-01/02 | 00000050 | 00000053 | Core Gen11 ==== xen ==== - fix python3 >= 3.10 version detection

1 0

New MicroOS snapshot 20220510 released!
by Richard Brown 13 May '22

13 May '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apparmor bash gcc (11 -> 12) gcc12 (12.0.1+git192423 -> 12.1.0+git27) gnome-packagekit libapparmor libgusb (0.3.9 -> 0.3.10) libunwind lsof (4.94.0 -> 4.95.0) pcre2 pigz (2.6 -> 2.7) protobuf python-importlib-metadata (4.8.2 -> 4.11.3) systemd (250.4 -> 250.5) tiff zlib-ng-compat === Details === ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils python3-apparmor - Add python310-help-mr848.patch so that Tumbleweed can switch python3 to Python 3.10 (https://gitlab.com/apparmor/apparmor/-/merge_requests/848) ==== bash ==== Subpackages: bash-sh - use https:// for source urls ==== gcc ==== Version update (11 -> 12) - Switch gcc to default 12. - Remove 2 Ada binaries. ==== gcc12 ==== Version update (12.0.1+git192423 -> 12.1.0+git27) Subpackages: libgcc_s1 libgomp1 libstdc++6 - Update to GCC 12.1 release, 1ea978e3066ac565a1ec28a96a4d61, git27 - Bump to 621650f64fb6679c457c33abf27c925f28bddc62, git9 * GCC 12.1 release candidate - Bump to f27848a5dc4d3b16cd4112bddcb59e0916eba623, git192706. - Switch ppc64le to the IEEE long double ABI by default in Factory. - Separate ppc64le from ppc/ppc64 specific configury. - Add _multibuild to gather all .spec files and reduce the number of .changes files to one, autogenerated by change_spec. - Drop %ringdisabled handling. - Ada bootstrap now requires at least GCC 5, use GCC 7 on SLES 12 instead of GCC 4.8. - Drop no longer necessary gcc12-d-workaround.patch - Bump to b85abacd902813daec5e44b97f275eb88caaf715, git192607. ==== gnome-packagekit ==== - Modify bnc-946886-install-signatures-in-viewer.patch: Fix runtime error to make it work as before(bsc#1198801). ==== libapparmor ==== - Add python310-help-mr848.patch so that Tumbleweed can switch python3 to Python 3.10 (https://gitlab.com/apparmor/apparmor/-/merge_requests/848) ==== libgusb ==== Version update (0.3.9 -> 0.3.10) - Update to version 0.3.10: + New Features: - Add API to change the hotplug poll interval. ==== libunwind ==== - Enable build on riscv64 and run testsuite ==== lsof ==== Version update (4.94.0 -> 4.95.0) - update to 4.95.0: * Update perl scripts for the past few decades of progress * Drop LSOF_CCDATE across all dialects to ensure reproducible builds * Fix FD field description. * Adjust alignment of buffer passed to stat(). * Clean up source code and documents. - remove trailing whitespace, - fix some issues in scripts found through shellcheck, and - fix spelling * man page: fix hyphen issues * Fix broken LSOF_CFLAGS_OVERRIDE. * [linux] Remove sysvlegacy function. * [linux] use close_range instead of calling close repeatedly * Add -Q option for adjusting exit status when failed to find a search item (#129) - drop lsof-no-build-date-etc.patch (obsolete) ==== pcre2 ==== Subpackages: libpcre2-16-0 libpcre2-8-0 - do not enable jit-sealloc [bsc#1182864] [bsc#1199208] - enable jit for s390x [bsc#1199196] ==== pigz ==== Version update (2.6 -> 2.7) - update to 2.7: * Improved display of multiple-member gzip files * Better gzip compatibility and bug fixes - add pigz-2.7-NOTHREAD-tests.patch to fix tests ==== protobuf ==== Subpackages: libprotobuf-lite31 libprotobuf31 - Add temporary patch gcc12-disable-__constinit-with-c++-11.patch that addresses gh#protocolbuffers/protobuf#9916. - Remove change_desc_db.patch, because underlying bug in gh#googleapis/python-api-core#372 has been fixed. ==== python-importlib-metadata ==== Version update (4.8.2 -> 4.11.3) - update to 4.11.3: * #372: Removed cast of path items in FastPath, not needed. * #369: Fixed bug where ``EntryPoint.extras`` was returning match objects and not the extras strings. * #367: In ``Distribution.requires`` for egg-info, if ``requires.txt`` is empty, return an empty list. * bpo-46246: Added ``__slots__`` to ``EntryPoints``. * #365 and bpo-46546: Avoid leaking ``method_name`` in ``DeprecatedList``. - update to 4.10.1: - #361: Avoid potential REDoS in ``EntryPoint.pattern``. - Update to 4.10.0: - #354: Removed Distribution._local factory. This functionality was created as a demonstration of the possible implementation. Now, the pep517 package provides this functionality directly through pep517.meta.load. - Require Python 3.7 or later. - #357: Fixed requirement generation from egg-info when a URL requirement is given. ==== systemd ==== Version update (250.4 -> 250.5) Subpackages: libsystemd0 libudev1 udev - Import commit 0d950479e58dd3af007eb3780d600a5446aac519 (merge of v250.5) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/736db5a59f1ab1317ef64ec6e7dc394… - Call pam_loginuid when creating user@.service (bsc#1198507) It's a backport of upstream commit 1000522a60ceade446773c67031b47a566d4a70d. ==== tiff ==== - security update: * CVE-2022-0907 [bsc#1197070] + tiff-CVE-2022-0907.patch - security update * CVE-2022-0561 [bsc#1195964] + tiff-CVE-2022-0561.patch * CVE-2022-0562 [bsc#1195965] + tiff-CVE-2022-0562.patch * CVE-2022-0865 [bsc#1197066] + tiff-CVE-2022-0865.patch * CVE-2022-0909 [bsc#1197072] + tiff-CVE-2022-0909.patch * CVE-2022-0924 [bsc#1197073] + tiff-CVE-2022-0924.patch * CVE-2022-0908 [bsc#1197074] + tiff-CVE-2022-0908.patch - security update * CVE-2022-1056 [bsc#1197631] * CVE-2022-0891 [bsc#1197068] + tiff-CVE-2022-1056,CVE-2022-0891.patch - switch source url to https ==== zlib-ng-compat ==== - Add 'Provides: zlib-devel' to the compat package - Remove useless mis-typed '-DWITH_SANITIZERS=ON'

1 0

New Kubic snapshot 20220510 released!
by Richard Brown 13 May '22

13 May '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apparmor bash gcc12 (12.0.1+git192423 -> 12.1.0+git27) libapparmor libunwind lsof (4.94.0 -> 4.95.0) pcre2 pigz (2.6 -> 2.7) protobuf python-importlib-metadata (4.8.2 -> 4.11.3) systemd (250.4 -> 250.5) tiff zlib-ng-compat === Details === ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils python3-apparmor - Add python310-help-mr848.patch so that Tumbleweed can switch python3 to Python 3.10 (https://gitlab.com/apparmor/apparmor/-/merge_requests/848) ==== bash ==== Subpackages: bash-sh - use https:// for source urls ==== gcc12 ==== Version update (12.0.1+git192423 -> 12.1.0+git27) Subpackages: libgcc_s1 libgomp1 libstdc++6 - Update to GCC 12.1 release, 1ea978e3066ac565a1ec28a96a4d61, git27 - Bump to 621650f64fb6679c457c33abf27c925f28bddc62, git9 * GCC 12.1 release candidate - Bump to f27848a5dc4d3b16cd4112bddcb59e0916eba623, git192706. - Switch ppc64le to the IEEE long double ABI by default in Factory. - Separate ppc64le from ppc/ppc64 specific configury. - Add _multibuild to gather all .spec files and reduce the number of .changes files to one, autogenerated by change_spec. - Drop %ringdisabled handling. - Ada bootstrap now requires at least GCC 5, use GCC 7 on SLES 12 instead of GCC 4.8. - Drop no longer necessary gcc12-d-workaround.patch - Bump to b85abacd902813daec5e44b97f275eb88caaf715, git192607. ==== libapparmor ==== - Add python310-help-mr848.patch so that Tumbleweed can switch python3 to Python 3.10 (https://gitlab.com/apparmor/apparmor/-/merge_requests/848) ==== libunwind ==== - Enable build on riscv64 and run testsuite ==== lsof ==== Version update (4.94.0 -> 4.95.0) - update to 4.95.0: * Update perl scripts for the past few decades of progress * Drop LSOF_CCDATE across all dialects to ensure reproducible builds * Fix FD field description. * Adjust alignment of buffer passed to stat(). * Clean up source code and documents. - remove trailing whitespace, - fix some issues in scripts found through shellcheck, and - fix spelling * man page: fix hyphen issues * Fix broken LSOF_CFLAGS_OVERRIDE. * [linux] Remove sysvlegacy function. * [linux] use close_range instead of calling close repeatedly * Add -Q option for adjusting exit status when failed to find a search item (#129) - drop lsof-no-build-date-etc.patch (obsolete) ==== pcre2 ==== - do not enable jit-sealloc [bsc#1182864] [bsc#1199208] - enable jit for s390x [bsc#1199196] ==== pigz ==== Version update (2.6 -> 2.7) - update to 2.7: * Improved display of multiple-member gzip files * Better gzip compatibility and bug fixes - add pigz-2.7-NOTHREAD-tests.patch to fix tests ==== protobuf ==== - Add temporary patch gcc12-disable-__constinit-with-c++-11.patch that addresses gh#protocolbuffers/protobuf#9916. - Remove change_desc_db.patch, because underlying bug in gh#googleapis/python-api-core#372 has been fixed. ==== python-importlib-metadata ==== Version update (4.8.2 -> 4.11.3) - update to 4.11.3: * #372: Removed cast of path items in FastPath, not needed. * #369: Fixed bug where ``EntryPoint.extras`` was returning match objects and not the extras strings. * #367: In ``Distribution.requires`` for egg-info, if ``requires.txt`` is empty, return an empty list. * bpo-46246: Added ``__slots__`` to ``EntryPoints``. * #365 and bpo-46546: Avoid leaking ``method_name`` in ``DeprecatedList``. - update to 4.10.1: - #361: Avoid potential REDoS in ``EntryPoint.pattern``. - Update to 4.10.0: - #354: Removed Distribution._local factory. This functionality was created as a demonstration of the possible implementation. Now, the pep517 package provides this functionality directly through pep517.meta.load. - Require Python 3.7 or later. - #357: Fixed requirement generation from egg-info when a URL requirement is given. ==== systemd ==== Version update (250.4 -> 250.5) Subpackages: libsystemd0 libudev1 udev - Import commit 0d950479e58dd3af007eb3780d600a5446aac519 (merge of v250.5) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/736db5a59f1ab1317ef64ec6e7dc394… - Call pam_loginuid when creating user@.service (bsc#1198507) It's a backport of upstream commit 1000522a60ceade446773c67031b47a566d4a70d. ==== tiff ==== - security update: * CVE-2022-0907 [bsc#1197070] + tiff-CVE-2022-0907.patch - security update * CVE-2022-0561 [bsc#1195964] + tiff-CVE-2022-0561.patch * CVE-2022-0562 [bsc#1195965] + tiff-CVE-2022-0562.patch * CVE-2022-0865 [bsc#1197066] + tiff-CVE-2022-0865.patch * CVE-2022-0909 [bsc#1197072] + tiff-CVE-2022-0909.patch * CVE-2022-0924 [bsc#1197073] + tiff-CVE-2022-0924.patch * CVE-2022-0908 [bsc#1197074] + tiff-CVE-2022-0908.patch - security update * CVE-2022-1056 [bsc#1197631] * CVE-2022-0891 [bsc#1197068] + tiff-CVE-2022-1056,CVE-2022-0891.patch - switch source url to https ==== zlib-ng-compat ==== - Add 'Provides: zlib-devel' to the compat package - Remove useless mis-typed '-DWITH_SANITIZERS=ON'

1 0

New ARM MicroOS snapshot 20220509 released!
by Guillaume Gardet 11 May '22

11 May '22

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: kernel-source (5.17.4 -> 5.17.5) yast2 (4.5.1 -> 4.5.3) === Details === ==== kernel-source ==== Version update (5.17.4 -> 5.17.5) - Revert "build initrd without systemd" (bsc#1195775)" This reverts commit 3a2140fa2acded48224e1438ac9b4775340c94c2. Again, this breaks many packages as: * iproute2 is missing, and * kernel-obs-qa fails with: Timed out waiting for device /dev/disk/by-id/virtio-0. - commit e57ab05 - io_uring: fix uninitialized field in rw io_kiocb (bsc#1199087 CVE-2022-29968). - commit 8ca9274 - Revert "Revert "build initrd without systemd" (bsc#1195775)" This reverts commit e962fefb4c9cd553921cf49c24f9d0e1d16f90b3. d9a821b1f81a from packaging should fix this. So let's try. - commit 3a2140f - Revert "Revert "Revert "build initrd without systemd" (bsc#1195775)"" This reverts commit ac62a28013491cd72dd4a81604454658314e4ba5. It's still not ready: - some packages need iproute2 - osc shell is still defunct - commit e962fef - Update patches.kernel.org/5.17.2-0822-net-x25-Fix-null-ptr-deref-caused-by-x25_dis… references (add CVE-2022-1516 bsc#1199012). - commit af2638d - Linux 5.17.5 (bsc#1012628). - etherdevice: Adjust ether_addr* prototypes to silence - Wstringop-overead (bsc#1012628). - perf tools: Fix segfault accessing sample_id xyarray (bsc#1012628). - drm/amd/display: Only set PSR version when valid (bsc#1012628). - block/compat_ioctl: fix range check in BLKGETSIZE (bsc#1012628). - gfs2: assign rgrp glock before compute_bitstructs (bsc#1012628). - scsi: ufs: core: scsi_get_lba() error fix (bsc#1012628). - net/sched: cls_u32: fix netns refcount changes in u32_change() (bsc#1012628). - ALSA: usb-audio: Clear MIDI port active flag after draining (bsc#1012628). - ALSA: usb-audio: add mapping for MSI MAG X570S Torpedo MAX (bsc#1012628). - ALSA: hda/realtek: Add quirk for Clevo NP70PNP (bsc#1012628). - ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek (bsc#1012628). - ASoC: topology: Correct error handling in soc_tplg_dapm_widget_create() (bsc#1012628). - ASoC: rk817: Use devm_clk_get() in rk817_platform_probe (bsc#1012628). - ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component (bsc#1012628). - ASoC: codecs: wcd934x: do not switch off SIDO Buck when codec is in use (bsc#1012628). - dmaengine: idxd: fix device cleanup on disable (bsc#1012628). - dmaengine: imx-sdma: Fix error checking in sdma_event_remap (bsc#1012628). - dmaengine: mediatek:Fix PM usage reference leak of mtk_uart_apdma_alloc_chan_resources (bsc#1012628). - dmaengine: dw-edma: Fix unaligned 64bit access (bsc#1012628). - spi: spi-mtk-nor: initialize spi controller after resume (bsc#1012628). - firmware: cs_dsp: Fix overrun of unterminated control name string (bsc#1012628). - esp: limit skb_page_frag_refill use to a single page (bsc#1012628). - spi: cadence-quadspi: fix incorrect supports_op() return value (bsc#1012628). - igc: Fix infinite loop in release_swfw_sync (bsc#1012628). - igc: Fix BUG: scheduling while atomic (bsc#1012628). - igc: Fix suspending when PTM is active (bsc#1012628). - ice: allow creating VFs for !CONFIG_NET_SWITCHDEV (bsc#1012628). - ice: fix crash in switchdev mode (bsc#1012628). - ice: Fix memory leak in ice_get_orom_civd_data() (bsc#1012628). - ALSA: hda/hdmi: fix warning about PCM count when used with SOF (bsc#1012628). - rxrpc: Restore removed timer deletion (bsc#1012628). - net/smc: Fix sock leak when release after smc_shutdown() (bsc#1012628). - net/packet: fix packet_sock xmit return value checking (bsc#1012628). - ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit() (bsc#1012628). - ip6_gre: Fix skb_under_panic in __gre6_xmit() (bsc#1012628). - net: restore alpha order to Ethernet devices in config (bsc#1012628). - net/sched: cls_u32: fix possible leak in u32_init_knode() (bsc#1012628). - l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu (bsc#1012628). - ipv6: make ip6_rt_gc_expire an atomic_t (bsc#1012628). - can: isotp: stop timeout monitoring when no first frame was sent (bsc#1012628). - net: dsa: hellcreek: Calculate checksums in tagger (bsc#1012628). - net: mscc: ocelot: fix broken IP multicast flooding (bsc#1012628). - netlink: reset network and mac headers in netlink_dump() (bsc#1012628). - drm/i915/display/psr: Unset enable_psr2_sel_fetch if other checks in intel_psr2_config_valid() fails (bsc#1012628). - RISC-V: KVM: Remove 's' & 'u' as valid ISA extension (bsc#1012628). - RISC-V: KVM: Restrict the extensions that can be disabled (bsc#1012628). - net: stmmac: Use readl_poll_timeout_atomic() in atomic state (bsc#1012628). - dmaengine: idxd: match type for retries var in idxd_enqcmds() (bsc#1012628). - dmaengine: idxd: fix retry value to be constant for duration of function call (bsc#1012628). - dmaengine: idxd: add RO check for wq max_batch_size write (bsc#1012628). - dmaengine: idxd: add RO check for wq max_transfer_size write (bsc#1012628). - dmaengine: idxd: skip clearing device context when device is read-only (bsc#1012628). - selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets (bsc#1012628). - selftests: mlxsw: vxlan_flooding_ipv6: Prevent flooding of unwanted packets (bsc#1012628). - userfaultfd: mark uffd_wp regardless of VM_WRITE flag (bsc#1012628). - arm64: mm: fix p?d_leaf() (bsc#1012628). - XArray: Disallow sibling entries of nodes (bsc#1012628). - drm/msm/gpu: Rename runtime suspend/resume functions (bsc#1012628). - drm/msm/gpu: Remove mutex from wait_event condition (bsc#1012628). - ARM: vexpress/spc: Avoid negative array index when !SMP (bsc#1012628). - reset: renesas: Check return value of reset_control_deassert() (bsc#1012628). - reset: tegra-bpmp: Restore Handle errors in BPMP response (bsc#1012628). - platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative (bsc#1012628). - ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant (bsc#1012628). - drm/msm/disp: check the return value of kzalloc() (bsc#1012628). - selftests: KVM: Free the GIC FD when cleaning up in arch_timer (bsc#1012628). - ALSA: hda: intel-dsp-config: update AlderLake PCI IDs (bsc#1012628). - arm64: dts: imx: Fix imx8*-var-som touchscreen property sizes (bsc#1012628). - vxlan: fix error return code in vxlan_fdb_append (bsc#1012628). - cifs: Check the IOCB_DIRECT flag, not O_DIRECT (bsc#1012628). - net: atlantic: Avoid out-of-bounds indexing (bsc#1012628). - mt76: Fix undefined behavior due to shift overflowing the constant (bsc#1012628). - brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant (bsc#1012628). - dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info() (bsc#1012628). - drm/msm/mdp5: check the return of kzalloc() (bsc#1012628). - KVM: x86: hyper-v: Avoid writing to TSC page without an active vCPU (bsc#1012628). - net: macb: Restart tx only if queue pointer is lagging (bsc#1012628). - scsi: iscsi: Release endpoint ID when its freed (bsc#1012628). - scsi: iscsi: Merge suspend fields (bsc#1012628). - scsi: iscsi: Fix NOP handling during conn recovery (bsc#1012628). - scsi: qedi: Fix failed disconnect handling (bsc#1012628). - stat: fix inconsistency between struct stat and struct compat_stat (bsc#1012628). - VFS: filename_create(): fix incorrect intent (bsc#1012628). - nvme: add a quirk to disable namespace identifiers (bsc#1012628). - nvme-pci: disable namespace identifiers for the MAXIO MAP1002/1202 (bsc#1012628). - nvme-pci: disable namespace identifiers for Qemu controllers (bsc#1012628). - irq_work: use kasan_record_aux_stack_noalloc() record callstack (bsc#1012628). - EDAC/synopsys: Read the error count from the correct register (bsc#1012628). - mm/memory-failure.c: skip huge_zero_page in memory_failure() (bsc#1012628). - memcg: sync flush only if periodic flush is delayed (bsc#1012628). - mm, hugetlb: allow for "high" userspace addresses (bsc#1012628). - oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup (bsc#1012628). - mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove() (bsc#1012628). - ata: pata_marvell: Check the 'bmdma_addr' beforing reading (bsc#1012628). - dma: at_xdmac: fix a missing check on list iterator (bsc#1012628). - dmaengine: imx-sdma: fix init of uart scripts (bsc#1012628). - net: atlantic: invert deep par in pm functions, preventing null derefs (bsc#1012628). - drm/radeon: fix logic inversion in radeon_sync_resv (bsc#1012628). - io_uring: free iovec if file assignment fails (bsc#1012628). - Input: omap4-keypad - fix pm_runtime_get_sync() error checking (bsc#1012628). - scsi: sr: Do not leak information in ioctl (bsc#1012628). - sched/pelt: Fix attach_entity_load_avg() corner case (bsc#1012628). - perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled (bsc#1012628). - drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised (bsc#1012628). - drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare (bsc#1012628). - powerpc/time: Always set decrementer in timer_interrupt() (bsc#1012628). - KVM: PPC: Fix TCE handling for VFIO (bsc#1012628). - drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage (bsc#1012628). - powerpc/perf: Fix power9 event alternatives (bsc#1012628). - powerpc/perf: Fix power10 event alternatives (bsc#1012628). - arm/xen: Fix some refcount leaks (bsc#1012628). - perf script: Always allow field 'data_src' for auxtrace (bsc#1012628). - perf report: Set PERF_SAMPLE_DATA_SRC bit for Arm SPE event (bsc#1012628). - fs: fix acl translation (bsc#1012628). - cifs: fix NULL ptr dereference in refresh_mounts() (bsc#1012628). - cifs: use correct lock type in cifs_reconnect() (bsc#1012628). - xtensa: patch_text: Fixup last cpu should be master (bsc#1012628). - xtensa: fix a7 clobbering in coprocessor context load/store (bsc#1012628). - openvswitch: fix OOB access in reserve_sfa_size() (bsc#1012628). - ASoC: rt5682: fix an incorrect NULL check on list iterator (bsc#1012628). - ASoC: soc-dapm: fix two incorrect uses of list iterator (bsc#1012628). - e1000e: Fix possible overflow in LTR decoding (bsc#1012628). - codecs: rt5682s: fix an incorrect NULL check on list iterator (bsc#1012628). - ARC: entry: fix syscall_trace_exit argument (bsc#1012628). - drm/vmwgfx: Fix gem refcounting and memory evictions (bsc#1012628). - arm_pmu: Validate single/group leader events (bsc#1012628). - KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog (bsc#1012628). - KVM: x86: Don't re-acquire SRCU lock in complete_emulated_io() (bsc#1012628). - KVM: x86: Pend KVM_REQ_APICV_UPDATE during vCPU creation to fix a race (bsc#1012628). - KVM: nVMX: Defer APICv updates while L2 is active until L1 is active (bsc#1012628). - KVM: SVM: Simplify and harden helper to flush SEV guest page(s) (bsc#1012628). - KVM: SVM: Flush when freeing encrypted pages even on SME_COHERENT CPUs (bsc#1012628). - ext4: fix fallocate to use file_modified to update permissions consistently (bsc#1012628). - ext4: fix symlink file size not match to file content (bsc#1012628). - ext4: fix use-after-free in ext4_search_dir (bsc#1012628). - ext4: limit length to bitmap_maxbytes - blocksize in punch_hole (bsc#1012628). - ext4, doc: fix incorrect h_reserved size (bsc#1012628). - ext4: fix overhead calculation to account for the reserved gdt blocks (bsc#1012628). - ext4: force overhead calculation if the s_overhead_cluster makes no sense (bsc#1012628). - ext4: update the cached overhead value in the superblock (bsc#1012628). - jbd2: fix a potential race while discarding reserved buffers after an abort (bsc#1012628). - spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller (bsc#1012628). - ASoC: SOF: topology: cleanup dailinks on widget unload (bsc#1012628). - io_uring: fix leaks on IOPOLL and CQE_SKIP (bsc#1012628). - arm64: dts: qcom: add IPA qcom,qmp property (bsc#1012628). - Update config files. - commit fd20f5f - Refresh patches.suse/simplefb-Enable-boot-time-VESA-graphic-mode-selectio.patch. Update upstream status. - commit 749ae03 - Refresh patches.suse/gpio-Request-interrupts-after-IRQ-is-initialized.patch. Update upstream status. - commit 90a0e50 - pahole 1.22 required for full BTF features. also recommend pahole for kernel-source to make the kernel buildable with standard config - commit 364f54b - Update config files. Just running oldconfig after 5.17.4. - commit 2e251f8 - Revert "Revert "build initrd without systemd" (bsc#1195775)" This reverts commit 5d1f5d2e7552fcd3d37c11eb714944859e92e7b4. A fix is to be merged via packaging. - commit ac62a28 - gpio: Request interrupts after IRQ is initialized (bsc#1198697). - commit 283f2c7 - use jobs not processors in the constraints jobs is the number of vcpus available to the build, while processors is the total processor count of the machine the VM is running on. - commit a6e141d - scripts: dummy-tools, add pahole (bsc#1198388). - commit 1fe0032 ==== yast2 ==== Version update (4.5.1 -> 4.5.3) - Avoid build failures when packager is not available (related to bsc#1196674) - 4.5.3 - Show what product is being installed (bsc#1196674) - 4.5.2

1 0

New ARM Kubic snapshot 20220509 released!
by Guillaume Gardet 11 May '22

11 May '22

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=3&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: kernel-source (5.17.4 -> 5.17.5) yast2 (4.5.1 -> 4.5.3) === Details === ==== kernel-source ==== Version update (5.17.4 -> 5.17.5) - Revert "build initrd without systemd" (bsc#1195775)" This reverts commit 3a2140fa2acded48224e1438ac9b4775340c94c2. Again, this breaks many packages as: * iproute2 is missing, and * kernel-obs-qa fails with: Timed out waiting for device /dev/disk/by-id/virtio-0. - commit e57ab05 - io_uring: fix uninitialized field in rw io_kiocb (bsc#1199087 CVE-2022-29968). - commit 8ca9274 - Revert "Revert "build initrd without systemd" (bsc#1195775)" This reverts commit e962fefb4c9cd553921cf49c24f9d0e1d16f90b3. d9a821b1f81a from packaging should fix this. So let's try. - commit 3a2140f - Revert "Revert "Revert "build initrd without systemd" (bsc#1195775)"" This reverts commit ac62a28013491cd72dd4a81604454658314e4ba5. It's still not ready: - some packages need iproute2 - osc shell is still defunct - commit e962fef - Update patches.kernel.org/5.17.2-0822-net-x25-Fix-null-ptr-deref-caused-by-x25_dis… references (add CVE-2022-1516 bsc#1199012). - commit af2638d - Linux 5.17.5 (bsc#1012628). - etherdevice: Adjust ether_addr* prototypes to silence - Wstringop-overead (bsc#1012628). - perf tools: Fix segfault accessing sample_id xyarray (bsc#1012628). - drm/amd/display: Only set PSR version when valid (bsc#1012628). - block/compat_ioctl: fix range check in BLKGETSIZE (bsc#1012628). - gfs2: assign rgrp glock before compute_bitstructs (bsc#1012628). - scsi: ufs: core: scsi_get_lba() error fix (bsc#1012628). - net/sched: cls_u32: fix netns refcount changes in u32_change() (bsc#1012628). - ALSA: usb-audio: Clear MIDI port active flag after draining (bsc#1012628). - ALSA: usb-audio: add mapping for MSI MAG X570S Torpedo MAX (bsc#1012628). - ALSA: hda/realtek: Add quirk for Clevo NP70PNP (bsc#1012628). - ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek (bsc#1012628). - ASoC: topology: Correct error handling in soc_tplg_dapm_widget_create() (bsc#1012628). - ASoC: rk817: Use devm_clk_get() in rk817_platform_probe (bsc#1012628). - ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component (bsc#1012628). - ASoC: codecs: wcd934x: do not switch off SIDO Buck when codec is in use (bsc#1012628). - dmaengine: idxd: fix device cleanup on disable (bsc#1012628). - dmaengine: imx-sdma: Fix error checking in sdma_event_remap (bsc#1012628). - dmaengine: mediatek:Fix PM usage reference leak of mtk_uart_apdma_alloc_chan_resources (bsc#1012628). - dmaengine: dw-edma: Fix unaligned 64bit access (bsc#1012628). - spi: spi-mtk-nor: initialize spi controller after resume (bsc#1012628). - firmware: cs_dsp: Fix overrun of unterminated control name string (bsc#1012628). - esp: limit skb_page_frag_refill use to a single page (bsc#1012628). - spi: cadence-quadspi: fix incorrect supports_op() return value (bsc#1012628). - igc: Fix infinite loop in release_swfw_sync (bsc#1012628). - igc: Fix BUG: scheduling while atomic (bsc#1012628). - igc: Fix suspending when PTM is active (bsc#1012628). - ice: allow creating VFs for !CONFIG_NET_SWITCHDEV (bsc#1012628). - ice: fix crash in switchdev mode (bsc#1012628). - ice: Fix memory leak in ice_get_orom_civd_data() (bsc#1012628). - ALSA: hda/hdmi: fix warning about PCM count when used with SOF (bsc#1012628). - rxrpc: Restore removed timer deletion (bsc#1012628). - net/smc: Fix sock leak when release after smc_shutdown() (bsc#1012628). - net/packet: fix packet_sock xmit return value checking (bsc#1012628). - ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit() (bsc#1012628). - ip6_gre: Fix skb_under_panic in __gre6_xmit() (bsc#1012628). - net: restore alpha order to Ethernet devices in config (bsc#1012628). - net/sched: cls_u32: fix possible leak in u32_init_knode() (bsc#1012628). - l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu (bsc#1012628). - ipv6: make ip6_rt_gc_expire an atomic_t (bsc#1012628). - can: isotp: stop timeout monitoring when no first frame was sent (bsc#1012628). - net: dsa: hellcreek: Calculate checksums in tagger (bsc#1012628). - net: mscc: ocelot: fix broken IP multicast flooding (bsc#1012628). - netlink: reset network and mac headers in netlink_dump() (bsc#1012628). - drm/i915/display/psr: Unset enable_psr2_sel_fetch if other checks in intel_psr2_config_valid() fails (bsc#1012628). - RISC-V: KVM: Remove 's' & 'u' as valid ISA extension (bsc#1012628). - RISC-V: KVM: Restrict the extensions that can be disabled (bsc#1012628). - net: stmmac: Use readl_poll_timeout_atomic() in atomic state (bsc#1012628). - dmaengine: idxd: match type for retries var in idxd_enqcmds() (bsc#1012628). - dmaengine: idxd: fix retry value to be constant for duration of function call (bsc#1012628). - dmaengine: idxd: add RO check for wq max_batch_size write (bsc#1012628). - dmaengine: idxd: add RO check for wq max_transfer_size write (bsc#1012628). - dmaengine: idxd: skip clearing device context when device is read-only (bsc#1012628). - selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets (bsc#1012628). - selftests: mlxsw: vxlan_flooding_ipv6: Prevent flooding of unwanted packets (bsc#1012628). - userfaultfd: mark uffd_wp regardless of VM_WRITE flag (bsc#1012628). - arm64: mm: fix p?d_leaf() (bsc#1012628). - XArray: Disallow sibling entries of nodes (bsc#1012628). - drm/msm/gpu: Rename runtime suspend/resume functions (bsc#1012628). - drm/msm/gpu: Remove mutex from wait_event condition (bsc#1012628). - ARM: vexpress/spc: Avoid negative array index when !SMP (bsc#1012628). - reset: renesas: Check return value of reset_control_deassert() (bsc#1012628). - reset: tegra-bpmp: Restore Handle errors in BPMP response (bsc#1012628). - platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative (bsc#1012628). - ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant (bsc#1012628). - drm/msm/disp: check the return value of kzalloc() (bsc#1012628). - selftests: KVM: Free the GIC FD when cleaning up in arch_timer (bsc#1012628). - ALSA: hda: intel-dsp-config: update AlderLake PCI IDs (bsc#1012628). - arm64: dts: imx: Fix imx8*-var-som touchscreen property sizes (bsc#1012628). - vxlan: fix error return code in vxlan_fdb_append (bsc#1012628). - cifs: Check the IOCB_DIRECT flag, not O_DIRECT (bsc#1012628). - net: atlantic: Avoid out-of-bounds indexing (bsc#1012628). - mt76: Fix undefined behavior due to shift overflowing the constant (bsc#1012628). - brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant (bsc#1012628). - dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info() (bsc#1012628). - drm/msm/mdp5: check the return of kzalloc() (bsc#1012628). - KVM: x86: hyper-v: Avoid writing to TSC page without an active vCPU (bsc#1012628). - net: macb: Restart tx only if queue pointer is lagging (bsc#1012628). - scsi: iscsi: Release endpoint ID when its freed (bsc#1012628). - scsi: iscsi: Merge suspend fields (bsc#1012628). - scsi: iscsi: Fix NOP handling during conn recovery (bsc#1012628). - scsi: qedi: Fix failed disconnect handling (bsc#1012628). - stat: fix inconsistency between struct stat and struct compat_stat (bsc#1012628). - VFS: filename_create(): fix incorrect intent (bsc#1012628). - nvme: add a quirk to disable namespace identifiers (bsc#1012628). - nvme-pci: disable namespace identifiers for the MAXIO MAP1002/1202 (bsc#1012628). - nvme-pci: disable namespace identifiers for Qemu controllers (bsc#1012628). - irq_work: use kasan_record_aux_stack_noalloc() record callstack (bsc#1012628). - EDAC/synopsys: Read the error count from the correct register (bsc#1012628). - mm/memory-failure.c: skip huge_zero_page in memory_failure() (bsc#1012628). - memcg: sync flush only if periodic flush is delayed (bsc#1012628). - mm, hugetlb: allow for "high" userspace addresses (bsc#1012628). - oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup (bsc#1012628). - mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove() (bsc#1012628). - ata: pata_marvell: Check the 'bmdma_addr' beforing reading (bsc#1012628). - dma: at_xdmac: fix a missing check on list iterator (bsc#1012628). - dmaengine: imx-sdma: fix init of uart scripts (bsc#1012628). - net: atlantic: invert deep par in pm functions, preventing null derefs (bsc#1012628). - drm/radeon: fix logic inversion in radeon_sync_resv (bsc#1012628). - io_uring: free iovec if file assignment fails (bsc#1012628). - Input: omap4-keypad - fix pm_runtime_get_sync() error checking (bsc#1012628). - scsi: sr: Do not leak information in ioctl (bsc#1012628). - sched/pelt: Fix attach_entity_load_avg() corner case (bsc#1012628). - perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled (bsc#1012628). - drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised (bsc#1012628). - drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare (bsc#1012628). - powerpc/time: Always set decrementer in timer_interrupt() (bsc#1012628). - KVM: PPC: Fix TCE handling for VFIO (bsc#1012628). - drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage (bsc#1012628). - powerpc/perf: Fix power9 event alternatives (bsc#1012628). - powerpc/perf: Fix power10 event alternatives (bsc#1012628). - arm/xen: Fix some refcount leaks (bsc#1012628). - perf script: Always allow field 'data_src' for auxtrace (bsc#1012628). - perf report: Set PERF_SAMPLE_DATA_SRC bit for Arm SPE event (bsc#1012628). - fs: fix acl translation (bsc#1012628). - cifs: fix NULL ptr dereference in refresh_mounts() (bsc#1012628). - cifs: use correct lock type in cifs_reconnect() (bsc#1012628). - xtensa: patch_text: Fixup last cpu should be master (bsc#1012628). - xtensa: fix a7 clobbering in coprocessor context load/store (bsc#1012628). - openvswitch: fix OOB access in reserve_sfa_size() (bsc#1012628). - ASoC: rt5682: fix an incorrect NULL check on list iterator (bsc#1012628). - ASoC: soc-dapm: fix two incorrect uses of list iterator (bsc#1012628). - e1000e: Fix possible overflow in LTR decoding (bsc#1012628). - codecs: rt5682s: fix an incorrect NULL check on list iterator (bsc#1012628). - ARC: entry: fix syscall_trace_exit argument (bsc#1012628). - drm/vmwgfx: Fix gem refcounting and memory evictions (bsc#1012628). - arm_pmu: Validate single/group leader events (bsc#1012628). - KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog (bsc#1012628). - KVM: x86: Don't re-acquire SRCU lock in complete_emulated_io() (bsc#1012628). - KVM: x86: Pend KVM_REQ_APICV_UPDATE during vCPU creation to fix a race (bsc#1012628). - KVM: nVMX: Defer APICv updates while L2 is active until L1 is active (bsc#1012628). - KVM: SVM: Simplify and harden helper to flush SEV guest page(s) (bsc#1012628). - KVM: SVM: Flush when freeing encrypted pages even on SME_COHERENT CPUs (bsc#1012628). - ext4: fix fallocate to use file_modified to update permissions consistently (bsc#1012628). - ext4: fix symlink file size not match to file content (bsc#1012628). - ext4: fix use-after-free in ext4_search_dir (bsc#1012628). - ext4: limit length to bitmap_maxbytes - blocksize in punch_hole (bsc#1012628). - ext4, doc: fix incorrect h_reserved size (bsc#1012628). - ext4: fix overhead calculation to account for the reserved gdt blocks (bsc#1012628). - ext4: force overhead calculation if the s_overhead_cluster makes no sense (bsc#1012628). - ext4: update the cached overhead value in the superblock (bsc#1012628). - jbd2: fix a potential race while discarding reserved buffers after an abort (bsc#1012628). - spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller (bsc#1012628). - ASoC: SOF: topology: cleanup dailinks on widget unload (bsc#1012628). - io_uring: fix leaks on IOPOLL and CQE_SKIP (bsc#1012628). - arm64: dts: qcom: add IPA qcom,qmp property (bsc#1012628). - Update config files. - commit fd20f5f - Refresh patches.suse/simplefb-Enable-boot-time-VESA-graphic-mode-selectio.patch. Update upstream status. - commit 749ae03 - Refresh patches.suse/gpio-Request-interrupts-after-IRQ-is-initialized.patch. Update upstream status. - commit 90a0e50 - pahole 1.22 required for full BTF features. also recommend pahole for kernel-source to make the kernel buildable with standard config - commit 364f54b - Update config files. Just running oldconfig after 5.17.4. - commit 2e251f8 - Revert "Revert "build initrd without systemd" (bsc#1195775)" This reverts commit 5d1f5d2e7552fcd3d37c11eb714944859e92e7b4. A fix is to be merged via packaging. - commit ac62a28 - gpio: Request interrupts after IRQ is initialized (bsc#1198697). - commit 283f2c7 - use jobs not processors in the constraints jobs is the number of vcpus available to the build, while processors is the total processor count of the machine the VM is running on. - commit a6e141d - scripts: dummy-tools, add pahole (bsc#1198388). - commit 1fe0032 ==== yast2 ==== Version update (4.5.1 -> 4.5.3) - Avoid build failures when packager is not available (related to bsc#1196674) - 4.5.3 - Show what product is being installed (bsc#1196674) - 4.5.2

1 0

Kubic Project Wind-Down Progress
by Richard Brown 11 May '22

11 May '22

Hi All, Further to my mail last week about winding down the Kubic Project, here's a brief summary of what's been done so far: * Most of github.com/kubic-project is now archived or moved to github.com/openSUSE. The remaining projects are either pending a move to /openSUSE in sync with related infrastructure changes, or remaining public while discussions about the Kubernetes packages are ongoing. * In OBS devel:microos has been created and all the packages from devel:kubic I believe should be there have been moved. devel:microos is now the official Factory devel project for those packages. Our next steps will be: * devel:kubic will stay around as a devel project for any kubernetes- related packages that remain in openSUSE. This _will_ include any kubernetes client tooling (eg kubectl) and _may_ include full kubernetes packages if new package maintainers decide to do so. Discussions on the latter are ongoing. * https://kubic.opensuse.org and it's blog will be decoupled from https://microos.opensuse.org and it's blog. This will then allow us to decomission the last parts in github.com/kubic-project * The containers in devel:kubic:containers will be tidied up. Kubernetes related containers will be deleted/kept depending on the requirements of the kubernetes package maintainers. We need to talk to the devel:bci team whether it makes sense to move the remaining containers there rather than devel:microos * The testing of Kubic media needs to be stopped in openQA for both staging and product release. * The creation of seperate Kubic media will be ceased. * other devel:kubic subprojects need to be looked at and moved to devel:microos if it makes sense to do so I have a request for anyone reading this to help out: * Please have a look at the packages that remain in devel:kubic and if there are any you believe should belong in devel:microos, please let me know Many Thanks, -- Richard Brown Linux Distribution Engineer - Future Technology Team SUSE Software Solutions Germany GmbH, Maxfeldstr. 5, D-90409 Nuremberg, Germany (HRB 36809, AG Nürnberg) Managing Director/Geschäftsführer: Ivo Totev

2 1