New Kubic snapshot 20210520 released!

22 May 2021


      Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.

Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=Tumbleweed&build=20210520
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=Kubic&query_format=advanced&resolution=---

Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
  acl (2.2.53 -> 2.3.1)
  filesystem
  glib2 (2.68.1 -> 2.68.2)
  hwinfo (21.73 -> 21.74)
  installation-images-MicroOS (17.3 -> 17.5)
  kernel-source (5.12.3 -> 5.12.4)
  kubernetes (1.21.0 -> 1.21.1)
  kubernetes1.20 (1.20.6 -> 1.20.7)
  kubernetes1.21 (1.21.0 -> 1.21.1)
  less (581.2 -> 586)
  libX11 (1.7.0 -> 1.7.1)
  libcontainers-common
  libepoxy (1.5.5 -> 1.5.7)
  libqmi (1.28.2 -> 1.28.4)
  libtirpc (1.3.1 -> 1.3.2)
  multipath-tools (0.8.5+30+suse.633836e -> 0.8.6+10+suse.4771137)
  patterns-microos
  python-PyJWT (2.0.1 -> 2.1.0)
  python-distro
  python-jsonpatch (1.31 -> 1.32)
  python-networkx (2.5 -> 2.5.1)
  rdma-core (33.1 -> 35.0)
  runc (1.0.0~rc94 -> 1.0.0~rc95)
  selinux-policy
  shim-leap
  sssd (2.4.2 -> 2.5.0)
  xmlsec1 (1.2.31 -> 1.2.32)

=== Details ===

==== acl ====
Version update (2.2.53 -> 2.3.1)

- modernize spec-file (move license to licensedir)
- Update to version 2.3.1
  * Update German translation
  * getfacl: fix indent in --help output
  * getfacl: Add --one-file-system option, with this option getfacl
    will not cross mount points
  * Fix segfault on allocation failure
  * Avoid SIGSEGV with link-time optimisation enabled
- Use SourceUrls

==== filesystem ====

- temporarily revert icon and fillup dir to 0755 until fallout
  is fixed (bsc#1184786)
- Remove /usr/share/java, as it was moved to
  javapackages-filesystem long ago
- temporarily mark appdata and applications 0755 again until fallout
  is fixed (bsc#1184786)
- make restricteddir and datadir readonly (bsc#1184786)
- also make includedir, mandir, licensedir readonly (bsc#1184786)

==== glib2 ====
Version update (2.68.1 -> 2.68.2)
Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0

- Update to version 2.68.2:
  + Fix building third-party projects against GLib on CentOS 7.
  + Bugs fixed:
  - json-glib does not build with glib 2.68.1.
  - gmacros: check that __cplusplus or _MSC_VER is defined.
  - gmacros: missing check if __STDC_VERSION__ is defined.
  - Backport !2078 ?gthreadedresolver: don't ignore flags in
    lookup_by_name_with_flags? to glib-2-68.

==== hwinfo ====
Version update (21.73 -> 21.74)

- merge gh#openSUSE/hwinfo#98
- update pci and usb ids
- 21.74

==== installation-images-MicroOS ====
Version update (17.3 -> 17.5)

- merge gh#openSUSE/installation-images#512
- Fix previous typo adding chipidea modules
- 17.5
- merge gh#openSUSE/installation-images#511
- Add chipidea modules (bsc#1184867)
- 17.4

==== kernel-source ====
Version update (5.12.3 -> 5.12.4)

- can: isotp: prevent race between isotp_bind() and
  isotp_setsockopt() (CVE-2021-32606 bsc#1185953 bsc#1185564).
- commit cf6ea2f
- usb: pci-quirks: disable D3cold on xhci suspend for s2idle on
  AMD Renoire (bsc#1185840).
- ACPI / idle: override c-state latency when not in conformance
  with s0ix (bsc#1185840).
- ACPI: PM: s2idle: Add missing LPS0 functions for AMD
  (bsc#1185840).
- commit 152b604
- ipc/mqueue, msg, sem: Avoid relying on a stack reference past
  its expiry (bsc#1185988).
- commit 2d71c6c
- drm/i915/gem: Pin the L-shape quirked object as unshrinkable
  (bsc#1185624 bsc#1186075).
- commit 6e53ea2
- serial: stm32: fix threaded interrupt handling (git-fixes).
- usb: typec: tcpm: Fix error while calculating PPS out values
  (git-fixes).
- RDMA/core: Unify RoCE check and re-factor code (git-fixes).
- commit a5aafd4
- Linux 5.12.4 (bsc#1012628).
- Bluetooth: verify AMP hci_chan before amp_destroy (bsc#1012628).
- bluetooth: eliminate the potential race condition when removing
  the HCI controller (bsc#1012628).
- net/nfc: fix use-after-free llcp_sock_bind/connect
  (bsc#1012628).
- io_uring: truncate lengths larger than MAX_RW_COUNT on provide
  buffers (bsc#1012628).
- coresight: etm-perf: Fix define build issue when built as module
  (bsc#1012628).
- software node: Allow node addition to already existing device
  (bsc#1012628).
- Revert "USB: cdc-acm: fix rounding error in TIOCSSERIAL"
  (bsc#1012628).
- usb: roles: Call try_module_get() from
  usb_role_switch_find_by_fwnode() (bsc#1012628).
- tty: moxa: fix TIOCSSERIAL jiffies conversions (bsc#1012628).
- tty: amiserial: fix TIOCSSERIAL permission check (bsc#1012628).
- USB: serial: usb_wwan: fix TIOCSSERIAL jiffies conversions
  (bsc#1012628).
- staging: greybus: uart: fix TIOCSSERIAL jiffies conversions
  (bsc#1012628).
- USB: serial: ti_usb_3410_5052: fix TIOCSSERIAL permission check
  (bsc#1012628).
- staging: fwserial: fix TIOCSSERIAL jiffies conversions
  (bsc#1012628).
- tty: moxa: fix TIOCSSERIAL permission check (bsc#1012628).
- tty: mxser: fix TIOCSSERIAL jiffies conversions (bsc#1012628).
- staging: fwserial: fix TIOCSSERIAL permission check
  (bsc#1012628).
- tty: mxser: fix TIOCSSERIAL permission check (bsc#1012628).
- drm: bridge: fix LONTIUM use of mipi_dsi_() functions
  (bsc#1012628).
- usb: typec: tcpm: Address incorrect values of tcpm psy for
  fixed supply (bsc#1012628).
- usb: typec: tcpm: Address incorrect values of tcpm psy for
  pps supply (bsc#1012628).
- usb: typec: tcpm: update power supply once partner accepts
  (bsc#1012628).
- USB: serial: xr: fix CSIZE handling (bsc#1012628).
- usb: xhci-mtk: remove or operator for setting schedule
  parameters (bsc#1012628).
- usb: xhci-mtk: improve bandwidth scheduling with TT
  (bsc#1012628).
- ASoC: samsung: tm2_wm5110: check of of_parse return value
  (bsc#1012628).
- ASoC: Intel: kbl_da7219_max98927: Fix kabylake_ssp_fixup
  function (bsc#1012628).
- ASoC: tlv320aic32x4: Register clocks before registering
  component (bsc#1012628).
- ASoC: tlv320aic32x4: Increase maximum register in regmap
  (bsc#1012628).
- MIPS: pci-mt7620: fix PLL lock check (bsc#1012628).
- MIPS: pci-rt2880: fix slot 0 configuration (bsc#1012628).
- FDDI: defxx: Bail out gracefully with unassigned PCI resource
  for CSR (bsc#1012628).
- PCI: Allow VPD access for QLogic ISP2722 (bsc#1012628).
- KVM: x86: Defer the MMU unload to the normal path on an global
  INVPCID (bsc#1012628).
- PCI: xgene: Fix cfg resource mapping (bsc#1012628).
- PCI: keystone: Let AM65 use the pci_ops defined in
  pcie-designware-host.c (bsc#1012628).
- PM / devfreq: Unlock mutex and free devfreq struct in error path
  (bsc#1012628).
- soc/tegra: regulators: Fix locking up when voltage-spread is
  out of range (bsc#1012628).
- iio: inv_mpu6050: Fully validate gyro and accel scale writes
  (bsc#1012628).
- iio: magnetometer: yas530: Include right header (bsc#1012628).
- iio: sx9310: Fix write_.._debounce() (bsc#1012628).
- iio:accel:adis16201: Fix wrong axis assignment that prevents
  loading (bsc#1012628).
- iio:adc:ad7476: Fix remove handling (bsc#1012628).
- iio: magnetometer: yas530: Fix return value on error path
  (bsc#1012628).
- iio: sx9310: Fix access to variable DT array (bsc#1012628).
- iio: hid-sensor-rotation: Fix quaternion data not correct
  (bsc#1012628).
- sc16is7xx: Defer probe if device read fails (bsc#1012628).
- phy: cadence: Sierra: Fix PHY power_on sequence (bsc#1012628).
- misc: lis3lv02d: Fix false-positive WARN on various HP models
  (bsc#1012628).
- phy: ti: j721e-wiz: Invoke wiz_init() before
  of_platform_device_create() (bsc#1012628).
- misc: vmw_vmci: explicitly initialize vmci_notify_bm_set_msg
  struct (bsc#1012628).
- misc: vmw_vmci: explicitly initialize vmci_datagram payload
  (bsc#1012628).
- selinux: add proper NULL termination to the secclass_map
  permissions (bsc#1012628).
- x86, sched: Treat Intel SNC topology as default, COD as
  exception (bsc#1012628).
- async_xor: increase src_offs when dropping destination page
  (bsc#1012628).
- md/bitmap: wait for external bitmap writes to complete during
  tear down (bsc#1012628).
- md-cluster: fix use-after-free issue when removing rdev
  (bsc#1012628).
- md: split mddev_find (bsc#1012628).
- md: factor out a mddev_find_locked helper from mddev_find
  (bsc#1012628).
- md: md_open returns -EBUSY when entering racing area
  (bsc#1012628).
- md: Fix missing unused status line of /proc/mdstat
  (bsc#1012628).
- MIPS: generic: Update node names to avoid unit addresses
  (bsc#1012628).
- mt76: mt7615: use ieee80211_free_txskb() in
  mt7615_tx_token_put() (bsc#1012628).
- ipw2x00: potential buffer overflow in libipw_wx_set_encodeext()
  (bsc#1012628).
- net: xilinx: drivers need/depend on HAS_IOMEM (bsc#1012628).
- cfg80211: scan: drop entry from hidden_list on overflow
  (bsc#1012628).
- rtw88: Fix array overrun in rtw_get_tx_power_params()
  (bsc#1012628).
- mt76: fix potential DMA mapping leak (bsc#1012628).
- FDDI: defxx: Make MMIO the configuration default except for EISA
  (bsc#1012628).
- drm/qxl: use ttm bo priorities (bsc#1012628).
- drm/ingenic: Fix non-OSD mode (bsc#1012628).
- drm/panfrost: Clear MMU irqs before handling the fault
  (bsc#1012628).
- drm/panfrost: Don't try to map pages that are already mapped
  (bsc#1012628).
- drm/radeon: fix copy of uninitialized variable back to userspace
  (bsc#1012628).
- drm/dp_mst: Revise broadcast msg lct & lcr (bsc#1012628).
- drm/dp_mst: Set CLEAR_PAYLOAD_ID_TABLE as broadcast
  (bsc#1012628).
- drm: bridge: fix ANX7625 use of mipi_dsi_() functions
  (bsc#1012628).
- drm: bridge/panel: Cleanup connector on bridge detach
  (bsc#1012628).
- drm/amd/display: Reject non-zero src_y and src_x for video
  planes (bsc#1012628).
- drm/amdgpu: fix concurrent VM flushes on Vega/Navi v2
  (bsc#1012628).
- drm/amdgpu: add new MC firmware for Polaris12 32bit ASIC
  (bsc#1012628).
- drm/amdgpu: fix r initial values (bsc#1012628).
- drm/amdgpu: Init GFX10_ADDR_CONFIG for VCN v3 in DPG mode
  (bsc#1012628).
- ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries
  (bsc#1012628).
- ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries
  (bsc#1012628).
- ALSA: hda/realtek: Re-order ALC882 Clevo quirk table entries
  (bsc#1012628).
- ALSA: hda/realtek: Re-order ALC269 HP quirk table entries
  (bsc#1012628).
- ALSA: hda/realtek: Re-order ALC269 Acer quirk table entries
  (bsc#1012628).
- ALSA: hda/realtek: Re-order ALC269 Dell quirk table entries
  (bsc#1012628).
- ALSA: hda/realtek: Re-order ALC269 ASUS quirk table entries
  (bsc#1012628).
- ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries
  (bsc#1012628).
- ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries
  (bsc#1012628).
- ALSA: hda/realtek: Re-order remaining ALC269 quirk table entries
  (bsc#1012628).
- ALSA: hda/realtek: Re-order ALC662 quirk table entries
  (bsc#1012628).
- ALSA: hda/realtek: Remove redundant entry for ALC861
  Haier/Uniwill devices (bsc#1012628).
- ALSA: hda/realtek: Fix speaker amp on HP Envy AiO 32
  (bsc#1012628).
- KVM: s390: VSIE: correctly handle MVPG when in VSIE
  (bsc#1012628).
- KVM: s390: split kvm_s390_logical_to_effective (bsc#1012628).
- KVM: s390: fix guarded storage control register handling
  (bsc#1012628).
- s390: fix detection of vector enhancements facility 1 vs. vector
  packed decimal facility (bsc#1012628).
- KVM: s390: VSIE: fix MVPG handling for prefixing and MSO
  (bsc#1012628).
- KVM: s390: split kvm_s390_real_to_abs (bsc#1012628).
- KVM: s390: extend kvm_s390_shadow_fault to return entry pointer
  (bsc#1012628).
- KVM: x86/mmu: Alloc page for PDPTEs when shadowing 32-bit NPT
  with 64-bit (bsc#1012628).
- KVM: x86/xen: Drop RAX[63:32] when processing hypercall
  (bsc#1012628).
- KVM: X86: Fix failure to boost kernel lock holder candidate
  in SEV-ES guests (bsc#1012628).
- KVM: x86: Properly handle APF vs disabled LAPIC situation
  (bsc#1012628).
- KVM: x86: Check CR3 GPA for validity regardless of vCPU mode
  (bsc#1012628).
- KVM: x86: Remove emulator's broken checks on CR0/CR3/CR4 loads
  (bsc#1012628).
- KVM: nSVM: Set the shadow root level to the TDP level for
  nested NPT (bsc#1012628).
- KVM: SVM: Don't strip the C-bit from CR2 on #PF interception
  (bsc#1012628).
- KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over
  vCPUs (bsc#1012628).
- KVM: SVM: Do not set sev->es_active until KVM_SEV_ES_INIT
  completes (bsc#1012628).
- KVM: SVM: Do not allow SEV/SEV-ES initialization after vCPUs
  are created (bsc#1012628).
- KVM: SVM: Inject #GP on guest MSR_TSC_AUX accesses if RDTSCP
  unsupported (bsc#1012628).
- KVM: nVMX: Defer the MMU reload to the normal path on an EPTP
  switch (bsc#1012628).
- KVM: VMX: Truncate GPR value for DR and CR reads in !64-bit mode
  (bsc#1012628).
- KVM: nVMX: Truncate bits 63:32 of VMCS field on nested check
  in !64-bit (bsc#1012628).
- KVM: nVMX: Truncate base/index GPR value on address calc in
  !64-bit (bsc#1012628).
- KVM: arm/arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST read
  (bsc#1012628).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (bsc#1012628).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (bsc#1012628).
- KVM: arm64: Support PREL/PLT relocs in EL2 code (bsc#1012628).
- KVM: arm64: Fully zero the vcpu state on reset (bsc#1012628).
- KVM: arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST_REGION read
  (bsc#1012628).
- KVM: selftests: Sync data verify of dirty logging with guest
  sync (bsc#1012628).
- KVM: selftests: Always run vCPU thread with blocked SIG_IPI
  (bsc#1012628).
- Revert "drivers/net/wan/hdlc_fr: Fix a double free in pvc_xmit"
  (bsc#1012628).
- Revert "i3c master: fix missing destroy_workqueue() on error
  in i3c_master_register" (bsc#1012628).
- mfd: stmpe: Revert "Constify static struct resource"
  (bsc#1012628).
- ovl: fix missing revert_creds() on error path (bsc#1012628).
- usb: gadget: pch_udc: Revert d3cb25a12138 completely
  (bsc#1012628).
- Revert "tools/power turbostat: adjust for temperature offset"
  (bsc#1012628).
- firmware: xilinx: Fix dereferencing freed memory (bsc#1012628).
- firmware: xilinx: Remove zynqmp_pm_get_eemi_ops() in
  IS_REACHABLE(CONFIG_ZYNQMP_FIRMWARE) (bsc#1012628).
- x86/vdso: Use proper modifier for len's format specifier in
  extract() (bsc#1012628).
- fpga: fpga-mgr: xilinx-spi: fix error messages on -EPROBE_DEFER
  (bsc#1012628).
- crypto: keembay-ocs-hcu - Fix error return code in
  kmb_ocs_hcu_probe() (bsc#1012628).
- crypto: keembay-ocs-aes - Fix error return code in
  kmb_ocs_aes_probe() (bsc#1012628).
- crypto: sun8i-ss - fix result memory leak on error path
  (bsc#1012628).
- memory: gpmc: fix out of bounds read and dereference on
  gpmc_cs[] (bsc#1012628).
- ARM: dts: exynos: correct fuel gauge interrupt trigger level
  on GT-I9100 (bsc#1012628).
- ARM: dts: exynos: correct fuel gauge interrupt trigger level
  on P4 Note family (bsc#1012628).
- ARM: dts: exynos: correct fuel gauge interrupt trigger level
  on Midas family (bsc#1012628).
- ARM: dts: exynos: correct MUIC interrupt trigger level on
  Midas family (bsc#1012628).
- ARM: dts: exynos: correct PMIC interrupt trigger level on
  Midas family (bsc#1012628).
- ARM: dts: exynos: correct PMIC interrupt trigger level on
  Odroid X/U3 family (bsc#1012628).
- ARM: dts: exynos: correct PMIC interrupt trigger level on P4
  Note family (bsc#1012628).
- ARM: dts: exynos: correct PMIC interrupt trigger level on
  SMDK5250 (bsc#1012628).
- ARM: dts: exynos: correct PMIC interrupt trigger level on Snow
  (bsc#1012628).
- ARM: dts: s5pv210: correct fuel gauge interrupt trigger level
  on Fascinate family (bsc#1012628).
- ARM: dts: renesas: Add mmc aliases into R-Car Gen2 board dts
  files (bsc#1012628).
- arm64: dts: renesas: Add mmc aliases into board dts files
  (bsc#1012628).
- bus: ti-sysc: Fix initializing module_pa for modules without
  sysc register (bsc#1012628).
- x86/platform/uv: Set section block size for hubless
  architectures (bsc#1012628).
- serial: stm32: fix probe and remove order for dma (bsc#1012628).
- serial: stm32: fix startup by enabling usart for reception
  (bsc#1012628).
- serial: stm32: fix incorrect characters on console
  (bsc#1012628).
- serial: stm32: fix TX and RX FIFO thresholds (bsc#1012628).
- serial: stm32: fix a deadlock condition with wakeup event
  (bsc#1012628).
- serial: stm32: fix wake-up flag handling (bsc#1012628).
- serial: stm32: fix a deadlock in set_termios (bsc#1012628).
- serial: liteuart: fix return value check in liteuart_probe()
  (bsc#1012628).
- serial: stm32: fix tx dma completion, release channel
  (bsc#1012628).
- serial: stm32: call stm32_transmit_chars locked (bsc#1012628).
- serial: stm32: fix FIFO flush in startup and set_termios
  (bsc#1012628).
- serial: stm32: add FIFO flush when port is closed (bsc#1012628).
- serial: stm32: fix tx_empty condition (bsc#1012628).
- usb: typec: tcpm: Wait for vbus discharge to VSAFE0V before
  toggling (bsc#1012628).
- usb: typec: tcpci: Check ROLE_CONTROL while interpreting
  CC_STATUS (bsc#1012628).
- usb: typec: tps6598x: Fix return value check in tps6598x_probe()
  (bsc#1012628).
- usb: typec: stusb160x: fix return value check in
  stusb160x_probe() (bsc#1012628).
- mfd: intel_pmt: Fix nuisance messages and handling of disabled
  capabilities (bsc#1012628).
- regmap: set debugfs_name to NULL after it is freed
  (bsc#1012628).
- spi: rockchip: avoid objtool warning (bsc#1012628).
- arm64: dts: broadcom: bcm4908: fix switch parent node name
  (bsc#1012628).
- mtd: rawnand: fsmc: Fix error code in fsmc_nand_probe()
  (bsc#1012628).
- mtd: rawnand: brcmnand: fix OOB R/W with Hamming ECC
  (bsc#1012628).
- mtd: Handle possible -EPROBE_DEFER from parse_mtd_partitions()
  (bsc#1012628).
- mtd: rawnand: qcom: Return actual error code instead of -ENODEV
  (bsc#1012628).
- mtd: don't lock when recursively deleting partitions
  (bsc#1012628).
- mtd: parsers: qcom: Fix error condition (bsc#1012628).
- mtd: parsers: qcom: incompatible with spi-nor 4k sectors
  (bsc#1012628).
- mtd: maps: fix error return code of physmap_flash_remove()
  (bsc#1012628).
- ARM: dts: stm32: fix usart 2 & 3 pinconf to wake up with flow
  control (bsc#1012628).
- arm64: dts: ti: k3-j721e-main: Update the speed modes supported
  and their itap delay values for MMCSD subsystems (bsc#1012628).
- iio: adis16480: fix pps mode sampling frequency math
  (bsc#1012628).
- arm64: dts: qcom: sc7180: trogdor: Fix trip point config of
  charger thermal zone (bsc#1012628).
- arm64: dts: qcom: sm8250: Fix level triggered PMU interrupt
  polarity (bsc#1012628).
- arm64: dts: qcom: sm8350: Fix level triggered PMU interrupt
  polarity (bsc#1012628).
- arm64: dts: qcom: sm8250: Fix timer interrupt to specify EL2
  physical timer (bsc#1012628).
- arm64: dts: qcom: sc7180: Avoid glitching SPI CS at bootup on
  trogdor (bsc#1012628).
- arm64: dts: qcom: sdm845: fix number of pins in 'gpio-ranges'
  (bsc#1012628).
- arm64: dts: qcom: sm8150: fix number of pins in 'gpio-ranges'
  (bsc#1012628).
- arm64: dts: qcom: sm8250: fix number of pins in 'gpio-ranges'
  (bsc#1012628).
- arm64: dts: qcom: sm8350: fix number of pins in 'gpio-ranges'
  (bsc#1012628).
- arm64: dts: qcom: db845c: fix correct powerdown pin for WSA881x
  (bsc#1012628).
- crypto: sun8i-ss - Fix memory leak of object d when dma_iv
  fails to map (bsc#1012628).
- spi: stm32: drop devres version of spi_register_master
  (bsc#1012628).
- arm64: dts: broadcom: bcm4908: set Asus GT-AC5300 port 7 PHY
  mode (bsc#1012628).
- regulator: bd9576: Fix return from bd957x_probe() (bsc#1012628).
- arm64: dts: renesas: r8a77980: Fix vin4-7 endpoint binding
  (bsc#1012628).
- selftests/x86: Add a missing .note.GNU-stack section to
  thunks_32.S (bsc#1012628).
- crypto: arm/blake2s - fix for big endian (bsc#1012628).
- spi: stm32: Fix use-after-free on unbind (bsc#1012628).
- Drivers: hv: vmbus: Drop error message when 'No request id
  available' (bsc#1012628).
- staging: qlge: fix an error code in probe() (bsc#1012628).
- x86/microcode: Check for offline CPUs before requesting new
  microcode (bsc#1012628).
- usb: host: ehci-tegra: Select USB_GADGET Kconfig option
  (bsc#1012628).
- devtmpfs: fix placement of complete() call (bsc#1012628).
- usb: gadget: pch_udc: Replace cpu_to_le32() by lower_32_bits()
  (bsc#1012628).
- usb: gadget: pch_udc: Check if driver is present before calling
  - >setup() (bsc#1012628).
- usb: gadget: pch_udc: Check for DMA mapping error (bsc#1012628).
- usb: gadget: pch_udc: Initialize device pointer before use
  (bsc#1012628).
- usb: gadget: pch_udc: Provide a GPIO line used on Intel
  Minnowboard (v1) (bsc#1012628).
- crypto: ccp - fix command queuing to TEE ring buffer
  (bsc#1012628).
- crypto: qat - don't release uninitialized resources
  (bsc#1012628).
- crypto: qat - ADF_STATUS_PF_RUNNING should be set after
  adf_dev_init (bsc#1012628).
- fotg210-udc: Fix DMA on EP0 for length > max packet size
  (bsc#1012628).
- fotg210-udc: Fix EP0 IN requests bigger than two packets
  (bsc#1012628).
- fotg210-udc: Remove a dubious condition leading to fotg210_done
  (bsc#1012628).
- fotg210-udc: Mask GRP2 interrupts we don't handle (bsc#1012628).
- fotg210-udc: Don't DMA more than the buffer can take
  (bsc#1012628).
- fotg210-udc: Complete OUT requests on short packets
  (bsc#1012628).
- usb: gadget: s3c: Fix incorrect resources releasing
  (bsc#1012628).
- usb: gadget: s3c: Fix the error handling path in
  's3c2410_udc_probe()' (bsc#1012628).
- dt-bindings: serial: stm32: Use 'type: object' instead of
  false for 'additionalProperties' (bsc#1012628).
- mtd: require write permissions for locking and badblock ioctls
  (bsc#1012628).
- arm64: dts: renesas: r8a779a0: Fix PMU interrupt (bsc#1012628).
- arm64: dts: mt8183: Add gce client reg for display subcomponents
  (bsc#1012628).
- arm64: dts: mt8173: fix wrong power-domain phandle of pmic
  (bsc#1012628).
- bus: qcom: Put child node before return (bsc#1012628).
- arm64: dts: qcom: sm8250: fix display nodes (bsc#1012628).
- soundwire: bus: Fix device found flag correctly (bsc#1012628).
- soc: mediatek: pm-domains: Fix missing error code in
  scpsys_add_subdomain() (bsc#1012628).
- phy: ti: j721e-wiz: Delete "clk_div_sel" clk provider during
  cleanup (bsc#1012628).
- phy: ralink: phy-mt7621-pci: fix XTAL bitmask (bsc#1012628).
- phy: marvell: ARMADA375_USBCLUSTER_PHY should not default to y,
  unconditionally (bsc#1012628).
- phy: ralink: phy-mt7621-pci: fix return value check in
  mt7621_pci_phy_probe() (bsc#1012628).
- phy: ingenic: Fix a typo in ingenic_usb_phy_probe()
  (bsc#1012628).
- arm64: dts: mediatek: fix reset GPIO level on pumpkin
  (bsc#1012628).
- NFSv4.2: fix copy stateid copying for the async copy
  (bsc#1012628).
- crypto: poly1305 - fix poly1305_core_setkey() declaration
  (bsc#1012628).
- crypto: qat - fix error path in adf_isr_resource_alloc()
  (bsc#1012628).
- usb: gadget: aspeed: fix dma map failure (bsc#1012628).
- USB: gadget: udc: fix wrong pointer passed to IS_ERR() and
  PTR_ERR() (bsc#1012628).
- drivers: nvmem: Fix voltage settings for QTI qfprom-efuse
  (bsc#1012628).
- nvmem: rmem: fix undefined reference to memremap (bsc#1012628).
- driver core: platform: Declare early_platform_cleanup()
  prototype (bsc#1012628).
- ARM: dts: qcom: msm8974-lge-nexus5: correct fuel gauge interrupt
  trigger level (bsc#1012628).
- ARM: dts: qcom: msm8974-samsung-klte: correct fuel gauge
  interrupt trigger level (bsc#1012628).
- memory: pl353: fix mask of ECC page_size config register
  (bsc#1012628).
- soundwire: stream: fix memory leak in stream config error path
  (bsc#1012628).
- m68k: mvme147,mvme16x: Don't wipe PCC timer config bits
  (bsc#1012628).
- firmware: qcom_scm: Make __qcom_scm_is_call_available() return
  bool (bsc#1012628).
- firmware: qcom_scm: Reduce locking section for
  __get_convention() (bsc#1012628).
- firmware: qcom_scm: Workaround lack of "is available" call on
  SC7180 (bsc#1012628).
- iio: adc: Kconfig: make AD9467 depend on ADI_AXI_ADC symbol
  (bsc#1012628).
- mtd: rawnand: gpmi: Fix a double free in gpmi_nand_init
  (bsc#1012628).
- irqchip/gic-v3: Fix OF_BAD_ADDR error handling (bsc#1012628).
- staging: comedi: tests: ni_routes_test: Fix compilation error
  (bsc#1012628).
- staging: rtl8192u: Fix potential infinite loop (bsc#1012628).
- staging: fwserial: fix TIOCSSERIAL implementation (bsc#1012628).
- staging: fwserial: fix TIOCGSERIAL implementation (bsc#1012628).
- staging: greybus: uart: fix unprivileged TIOCCSERIAL
  (bsc#1012628).
- platform/x86: dell-wmi-sysman: Make init_bios_attributes()
  ACPI object parsing more robust (bsc#1012628).
- soc: qcom: pdr: Fix error return code in pdr_register_listener
  (bsc#1012628).
- PM / devfreq: Use more accurate returned new_freq as resume_freq
  (bsc#1012628).
- clocksource/drivers/timer-ti-dm: Fix posted mode status check
  order (bsc#1012628).
- clocksource/drivers/timer-ti-dm: Add missing
  set_state_oneshot_stopped (bsc#1012628).
- clocksource/drivers/ingenic_ost: Fix return value check in
  ingenic_ost_probe() (bsc#1012628).
- spi: Fix use-after-free with devm_spi_alloc_* (bsc#1012628).
- spi: fsl: add missing iounmap() on error in of_fsl_spi_probe()
  (bsc#1012628).
- soc: qcom: mdt_loader: Validate that p_filesz < p_memsz
  (bsc#1012628).
- soc: qcom: mdt_loader: Detect truncated read of segments
  (bsc#1012628).
- PM: runtime: Replace inline function
  pm_runtime_callbacks_present() (bsc#1012628).
- cpuidle: Fix ARM_QCOM_SPM_CPUIDLE configuration (bsc#1012628).
- ACPI: CPPC: Replace cppc_attr with kobj_attribute (bsc#1012628).
- crypto: allwinner - add missing CRYPTO_ prefix (bsc#1012628).
- crypto: sun8i-ss - Fix memory leak of pad (bsc#1012628).
- crypto: sa2ul - Fix memory leak of rxd (bsc#1012628).
- crypto: qat - Fix a double free in adf_create_ring
  (bsc#1012628).
- cpufreq: armada-37xx: Fix setting TBG parent for load levels
  (bsc#1012628).
- clk: mvebu: armada-37xx-periph: remove .set_parent method for
  CPU PM clock (bsc#1012628).
- cpufreq: armada-37xx: Fix the AVS value for load L1
  (bsc#1012628).
- clk: mvebu: armada-37xx-periph: Fix switching CPU freq from
  250 Mhz to 1 GHz (bsc#1012628).
- clk: mvebu: armada-37xx-periph: Fix workaround for switching
  from L1 to L0 (bsc#1012628).
- cpufreq: armada-37xx: Fix driver cleanup when registration
  failed (bsc#1012628).
- cpufreq: armada-37xx: Fix determining base CPU frequency
  (bsc#1012628).
- spi: spi-zynqmp-gqspi: use wait_for_completion_timeout to make
  zynqmp_qspi_exec_op not interruptible (bsc#1012628).
- spi: spi-zynqmp-gqspi: add mutex locking for exec_op
  (bsc#1012628).
- spi: spi-zynqmp-gqspi: transmit dummy circles by using the
  controller's internal functionality (bsc#1012628).
- spi: spi-zynqmp-gqspi: fix incorrect operating mode in
  zynqmp_qspi_read_op (bsc#1012628).
- spi: fsl-lpspi: Fix PM reference leak in
  lpspi_prepare_xfer_hardware() (bsc#1012628).
- usb: gadget: r8a66597: Add missing null check on return from
  platform_get_resource (bsc#1012628).
- USB: cdc-acm: fix unprivileged TIOCCSERIAL (bsc#1012628).
- USB: cdc-acm: fix TIOCGSERIAL implementation (bsc#1012628).
- tty: actually undefine superseded ASYNC flags (bsc#1012628).
- tty: fix return value for unsupported ioctls (bsc#1012628).
- tty: fix return value for unsupported termiox ioctls
  (bsc#1012628).
- serial: core: return early on unsupported ioctls (bsc#1012628).
- firmware: qcom-scm: Fix QCOM_SCM configuration (bsc#1012628).
- node: fix device cleanups in error handling code (bsc#1012628).
- crypto: chelsio - Read rxchannel-id from firmware (bsc#1012628).
- usbip: vudc: fix missing unlock on error in usbip_sockfd_store()
  (bsc#1012628).
- m68k: Add missing mmap_read_lock() to sys_cacheflush()
  (bsc#1012628).
- usb: cdnsp: Fixes issue with Configure Endpoint command
  (bsc#1012628).
- spi: spi-zynqmp-gqspi: Fix missing unlock on error in
  zynqmp_qspi_exec_op() (bsc#1012628).
- memory: renesas-rpc-if: fix possible NULL pointer dereference
  of resource (bsc#1012628).
- memory: samsung: exynos5422-dmc: handle clk_set_parent()
  failure (bsc#1012628).
- security: keys: trusted: fix TPM2 authorizations (bsc#1012628).
- char: tpm: fix error return code in tpm_cr50_i2c_tis_recv()
  (bsc#1012628).
- platform/x86: pmc_atom: Match all Beckhoff Automation baytrail
  boards with critclk_systems DMI table (bsc#1012628).
- usb: typec: tcpm: Honour pSnkStdby requirement during
  negotiation (bsc#1012628).
- spi: spi-zynqmp-gqspi: Fix runtime PM imbalance in
  zynqmp_qspi_probe (bsc#1012628).
- ARM: dts: aspeed: Rainier: Fix humidity sensor bus address
  (bsc#1012628).
- Drivers: hv: vmbus: Use after free in __vmbus_open()
  (bsc#1012628).
- crypto: arm64/aes-ce - deal with oversight in new CTR carry code
  (bsc#1012628).
- spi: spi-zynqmp-gqspi: fix clk_enable/disable imbalance issue
  (bsc#1012628).
- spi: spi-zynqmp-gqspi: fix hang issue when suspend/resume
  (bsc#1012628).
- spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op
  (bsc#1012628).
- spi: spi-zynqmp-gqspi: return -ENOMEM if dma_map_single fails
  (bsc#1012628).
- btrfs: zoned: move log tree node allocation out of
  log_root_tree->log_mutex (bsc#1012628).
- btrfs: zoned: bail out in btrfs_alloc_chunk for bad input
  (bsc#1012628).
- x86/platform/uv: Fix !KEXEC build failure (bsc#1012628).
- hwmon: (pmbus/pxe1610) don't bail out when not all pages are
  active (bsc#1012628).
- platform/surface: aggregator: fix a bit test (bsc#1012628).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1012628).
- PM: hibernate: x86: Use crc32 instead of md5 for hibernation
  e820 integrity check (bsc#1012628).
- usb: dwc2: Fix host mode hibernation exit with remote wakeup
  flow (bsc#1012628).
- usb: dwc2: Fix hibernation between host and device modes
  (bsc#1012628).
- ttyprintk: Add TTY hangup callback (bsc#1012628).
- serial: omap: don't disable rs485 if rts gpio is missing
  (bsc#1012628).
- serial: omap: fix rs485 half-duplex filtering (bsc#1012628).
- spi: tools: make a symbolic link to the header file spi.h
  (bsc#1012628).
- xen-blkback: fix compatibility bug with single page rings
  (bsc#1012628).
- soc: aspeed: fix a ternary sign expansion bug (bsc#1012628).
- drm/tilcdc: send vblank event when disabling crtc (bsc#1012628).
- drm/stm: Fix bus_flags handling (bsc#1012628).
- drm/amd/display: Fix off by one in hdmi_14_process_transaction()
  (bsc#1012628).
- drm/mcde/panel: Inverse misunderstood flag (bsc#1012628).
- scsi: lpfc: Fix null pointer dereference in lpfc_prep_els_iocb()
  (bsc#1012628).
- sched/fair: Fix shift-out-of-bounds in load_balance()
  (bsc#1012628).
- printk: limit second loop of syslog_print_all (bsc#1012628).
- afs: Fix updating of i_mode due to 3rd party change
  (bsc#1012628).
- rcu: Remove spurious instrumentation_end() in rcu_nmi_enter()
  (bsc#1012628).
- media: mtk: fix mtk-smi dependency (bsc#1012628).
- media: vivid: fix assignment of dev->fbuf_out_flags
  (bsc#1012628).
- media: saa7134: use sg_dma_len when building pgtable
  (bsc#1012628).
- media: saa7146: use sg_dma_len when building pgtable
  (bsc#1012628).
- media: omap4iss: return error code when omap4iss_get() failed
  (bsc#1012628).
- media: rkisp1: rsz: crash fix when setting src format
  (bsc#1012628).
- media: aspeed: fix clock handling logic (bsc#1012628).
- drm/panel-simple: Undo enable if HPD never asserts
  (bsc#1012628).
- power: supply: bq27xxx: fix sign of current_now for newer ICs
  (bsc#1012628).
- drm/probe-helper: Check epoch counter in output_poll_execute()
  (bsc#1012628).
- media: venus: core: Fix some resource leaks in the error path of
  'venus_probe()' (bsc#1012628).
- media: platform: sunxi: sun6i-csi: fix error return code of
  sun6i_video_start_streaming() (bsc#1012628).
- media: m88ds3103: fix return value check in m88ds3103_probe()
  (bsc#1012628).
- media: docs: Fix data organization of
  MEDIA_BUS_FMT_RGB101010_1X30 (bsc#1012628).
- media: [next] staging: media: atomisp: fix memory leak of
  object flash (bsc#1012628).
- media: atomisp: Fixed error handling path (bsc#1012628).
- media: m88rs6000t: avoid potential out-of-bounds reads on arrays
  (bsc#1012628).
- media: atomisp: Fix use after free in
  atomisp_alloc_css_stat_bufs() (bsc#1012628).
- x86/kprobes: Retrieve correct opcode for group instruction
  (bsc#1012628).
- drm/amdkfd: fix build error with AMD_IOMMU_V2=m (bsc#1012628).
- drm/amdkfd: Fix recursive lock warnings (bsc#1012628).
- drm/amd/display: Free local data after use (bsc#1012628).
- of: overlay: fix for_each_child.cocci warnings (bsc#1012628).
- scsi: qla2xxx: Check kzalloc() return value (bsc#1012628).
- x86/kprobes: Fix to check non boostable prefixes correctly
  (bsc#1012628).
- drm/omap: dsi: Add missing IRQF_ONESHOT (bsc#1012628).
- selftests: fix prepending $(OUTPUT) to $(TEST_PROGS)
  (bsc#1012628).
- pata_arasan_cf: fix IRQ check (bsc#1012628).
- pata_ipx4xx_cf: fix IRQ check (bsc#1012628).
- sata_mv: add IRQ checks (bsc#1012628).
- ata: libahci_platform: fix IRQ check (bsc#1012628).
- seccomp: Fix CONFIG tests for Seccomp_filters (bsc#1012628).
- drm/mediatek: Switch the hdmi bridge ops to the atomic versions
  (bsc#1012628).
- drm/mediatek: Don't support hdmi connector creation
  (bsc#1012628).
- nvme-tcp: block BH in sk state_change sk callback (bsc#1012628).
- nvmet-tcp: fix incorrect locking in state_change sk callback
  (bsc#1012628).
- clk: imx: Fix reparenting of UARTs not associated with stdout
  (bsc#1012628).
- power: supply: bq25980: Move props from battery node
  (bsc#1012628).
- nvme: retrigger ANA log update if group descriptor isn't found
  (bsc#1012628).
- media: ccs: Fix sub-device function (bsc#1012628).
- media: ipu3-cio2: Fix pixel-rate derived link frequency
  (bsc#1012628).
- media: i2c: imx219: Move out locking/unlocking of vflip and
  hflip controls from imx219_set_stream (bsc#1012628).
- media: i2c: imx219: Balance runtime PM use-count (bsc#1012628).
- media: v4l2-ctrls.c: fix race condition in hdl->requests list
  (bsc#1012628).
- media: rkvdec: Do not require all controls to be present in
  every request (bsc#1012628).
- vfio/fsl-mc: Re-order vfio_fsl_mc_probe() (bsc#1012628).
- vfio/pci: Move VGA and VF initialization to functions
  (bsc#1012628).
- vfio/pci: Re-order vfio_pci_probe() (bsc#1012628).
- drm/msm: Fix debugfs deadlock (bsc#1012628).
- drm/msm/dpu: enable DPU_SSPP_QOS_8LVL for SM8250 (bsc#1012628).
- vfio/mdev: Do not allow a mdev_type to have a NULL parent
  pointer (bsc#1012628).
- clk: zynqmp: move zynqmp_pll_set_mode out of round_rate callback
  (bsc#1012628).
- clk: zynqmp: pll: add set_pll_mode to check condition in
  zynqmp_pll_enable (bsc#1012628).
- drm: xlnx: zynqmp: fix a memset in zynqmp_dp_train()
  (bsc#1012628).
- media: i2c: rdamc21: Fix warning on u8 cast (bsc#1012628).
- clk: qcom: a7-pll: Add missing MODULE_DEVICE_TABLE
  (bsc#1012628).
- clk: qcom: a53-pll: Add missing MODULE_DEVICE_TABLE
  (bsc#1012628).
- clk: qcom: apss-ipq-pll: Add missing MODULE_DEVICE_TABLE
  (bsc#1012628).
- drm/amd/display: use GFP_ATOMIC in dcn20_resource_construct
  (bsc#1012628).
- drm/amd/display: check fb of primary plane (bsc#1012628).
- drm/radeon: Fix a missing check bug in radeon_dp_mst_detect()
  (bsc#1012628).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1012628).
- clk: uniphier: Fix potential infinite loop (bsc#1012628).
- scsi: pm80xx: Increase timeout for pm80xx mpi_uninit_check()
  (bsc#1012628).
- scsi: pm80xx: Fix potential infinite loop (bsc#1012628).
- scsi: ufs: ufshcd-pltfrm: Fix deferred probing (bsc#1012628).
- scsi: hisi_sas: Fix IRQ checks (bsc#1012628).
- scsi: jazz_esp: Add IRQ check (bsc#1012628).
- scsi: sun3x_esp: Add IRQ check (bsc#1012628).
- scsi: sni_53c710: Add IRQ check (bsc#1012628).
- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1012628).
- mailbox: sprd: Introduce refcnt when clients requests/free
  channels (bsc#1012628).
- mfd: stm32-timers: Avoid clearing auto reload register
  (bsc#1012628).
- nvmet-tcp: fix a segmentation fault during io parsing error
  (bsc#1012628).
- nvme-pci: don't simple map sgl when sgls are disabled
  (bsc#1012628).
- media: meson-ge2d: fix rotation parameters (bsc#1012628).
- media: cedrus: Fix H265 status definitions (bsc#1012628).
- HSI: core: fix resource leaks in hsi_add_client_from_dt()
  (bsc#1012628).
- x86/events/amd/iommu: Fix sysfs type mismatch (bsc#1012628).
- perf/amd/uncore: Fix sysfs type mismatch (bsc#1012628).
- io_uring: fix overflows checks in provide buffers (bsc#1012628).
- block/rnbd-clt-sysfs: Remove copy buffer overlap in
  rnbd_clt_get_path_name (bsc#1012628).
- sched/debug: Fix cgroup_path[] serialization (bsc#1012628).
- kthread: Fix PF_KTHREAD vs to_kthread() race (bsc#1012628).
- ataflop: potential out of bounds in do_format() (bsc#1012628).
- ataflop: fix off by one in ataflop_probe() (bsc#1012628).
- drivers/block/null_blk/main: Fix a double free in null_init
  (bsc#1012628).
- xsk: Respect device's headroom and tailroom on generic xmit path
  (bsc#1012628).
- HID: plantronics: Workaround for double volume key presses
  (bsc#1012628).
- perf symbols: Fix dso__fprintf_symbols_by_name() to return
  the number of printed chars (bsc#1012628).
- ASoC: Intel: boards: sof-wm8804: add check for PLL setting
  (bsc#1012628).
- ASoC: Intel: Skylake: Compile when any configuration is selected
  (bsc#1012628).
- RDMA/mlx5: Zero out ODP related items in the mlx5_ib_mr
  (bsc#1012628).
- RDMA/mlx5: Fix query RoCE port (bsc#1012628).
- RDMA/mlx5: Fix mlx5 rates to IB rates map (bsc#1012628).
- net/mlx5: DR, Add missing vhca_id consume from STEv1
  (bsc#1012628).
- wilc1000: write value to WILC_INTR2_ENABLE register
  (bsc#1012628).
- KVM: x86/mmu: Retry page faults that hit an invalid memslot
  (bsc#1012628).
- Bluetooth: avoid deadlock between hci_dev->lock and socket lock
  (bsc#1012628).
- net: lapbether: Prevent racing when checking whether the netif
  is running (bsc#1012628).
- libbpf: Add explicit padding to bpf_xdp_set_link_opts
  (bsc#1012628).
- bpftool: Fix maybe-uninitialized warnings (bsc#1012628).
- iommu: Check dev->iommu in iommu_dev_xxx functions
  (bsc#1012628).
- iommu/dma: Resurrect the "forcedac" option (bsc#1012628).
- iommu/vt-d: Reject unsupported page request modes (bsc#1012628).
- ASoC: tegra30: i2s: Restore hardware state on runtime PM resume
  (bsc#1012628).
- net: dsa: bcm_sf2: add function finding RGMII register
  (bsc#1012628).
- net: dsa: bcm_sf2: fix BCM4908 RGMII reg(s) (bsc#1012628).
- selftests/bpf: Re-generate vmlinux.h and BPF skeletons if
  bpftool changed (bsc#1012628).
- libbpf: Add explicit padding to btf_dump_emit_type_decl_opts
  (bsc#1012628).
- powerpc/mm: Move the linear_mapping_mutex to the ifdef where
  it is used (bsc#1012628).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1012628).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1012628).
- MIPS: fix local_irq_{disable,enable} in asmmacro.h
  (bsc#1012628).
- ima: Fix the error code for restoring the PCR value
  (bsc#1012628).
- inet: use bigger hash table for IP ID generation (bsc#1012628).
- pinctrl: pinctrl-single: remove unused parameter (bsc#1012628).
- pinctrl: pinctrl-single: fix pcs_pin_dbg_show() when
  bits_per_mux is not zero (bsc#1012628).
- MIPS: loongson64: fix bug when PAGE_SIZE > 16KB (bsc#1012628).
- ASoC: wm8960: Remove bitclk relax condition in
  wm8960_configure_sysclk (bsc#1012628).
- iommu/arm-smmu-v3: add bit field SFM into GERROR_ERR_MASK
  (bsc#1012628).
- RDMA/mlx5: Fix drop packet rule in egress table (bsc#1012628).
- IB/isert: Fix a use after free in isert_connect_request
  (bsc#1012628).
- powerpc/64s: Fix hash fault to use TRAP accessor (bsc#1012628).
- powerpc: Fix HAVE_HARDLOCKUP_DETECTOR_ARCH build configuration
  (bsc#1012628).
- MIPS/bpf: Enable bpf_probe_read{, str}() on MIPS again
  (bsc#1012628).
- gpio: guard gpiochip_irqchip_add_domain() with GPIOLIB_IRQCHIP
  (bsc#1012628).
- fs: dlm: fix missing unlock on error in accept_from_sock()
  (bsc#1012628).
- ASoC: q6afe-clocks: fix reprobing of the driver (bsc#1012628).
- ALSA: core: remove redundant spin_lock pair in
  snd_card_disconnect (bsc#1012628).
- net: phy: lan87xx: fix access to wrong register of LAN87xx
  (bsc#1012628).
- udp: skip L4 aggregation for UDP tunnel packets (bsc#1012628).
- udp: never accept GSO_FRAGLIST packets (bsc#1012628).
- powerpc/pseries: Only register vio drivers if vio bus exists
  (bsc#1012628).
- net/tipc: fix missing destroy_workqueue() on error in
  tipc_crypto_start() (bsc#1012628).
- bug: Remove redundant condition check in report_bug
  (bsc#1012628).
- RDMA/core: Fix corrupted SL on passive side (bsc#1012628).
- nfc: pn533: prevent potential memory corruption (bsc#1012628).
- net: hns3: Limiting the scope of vector_ring_chain variable
  (bsc#1012628).
- mips: bmips: fix syscon-reboot nodes (bsc#1012628).
- KVM: arm64: Fix error return code in init_hyp_mode()
  (bsc#1012628).
- iommu/vt-d: Don't set then clear private data in
  prq_event_thread() (bsc#1012628).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1012628).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1012628).
- iommu/vt-d: Report the right page fault address (bsc#1012628).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1012628).
- iommu/vt-d: Invalidate PASID cache when root/context entry
  changed (bsc#1012628).
- ALSA: usb-audio: Add error checks for
  usb_driver_claim_interface() calls (bsc#1012628).
- HID: lenovo: Use brightness_set_blocking callback for setting
  LEDs brightness (bsc#1012628).
- HID: lenovo: Fix lenovo_led_set_tp10ubkbd() error handling
  (bsc#1012628).
- HID: lenovo: Check hid_get_drvdata() returns non NULL in
  lenovo_event() (bsc#1012628).
- HID: lenovo: Map mic-mute button to KEY_F20 instead of
  KEY_MICMUTE (bsc#1012628).
- KVM: arm64: Initialize VCPU mdcr_el2 before loading it
  (bsc#1012628).
- ASoC: simple-card: fix possible uninitialized single_cpu local
  variable (bsc#1012628).
- liquidio: Fix unintented sign extension of a left shift of a
  u16 (bsc#1012628).
- IB/hfi1: Use kzalloc() for mmu_rb_handler allocation
  (bsc#1012628).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1012628).
- powerpc/pseries: Add key to flags in
  pSeries_lpar_hpte_updateboltedpp() (bsc#1012628).
- powerpc/64s: Use htab_convert_pte_flags() in
  hash__mark_rodata_ro() (bsc#1012628).
- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1012628).
- powerpc: iommu: fix build when neither PCI or IBMVIO is set
  (bsc#1012628).
- mac80211: bail out if cipher schemes are invalid (bsc#1012628).
- perf vendor events amd: Fix broken L2 Cache Hits from L2 HWPF
  metric (bsc#1012628).
- RDMA/hns: Fix missing assignment of max_inline_data
  (bsc#1012628).
- xfs: fix return of uninitialized value in variable error
  (bsc#1012628).
- rtw88: Fix an error code in rtw_debugfs_set_rsvd_page()
  (bsc#1012628).
- mt7601u: fix always true expression (bsc#1012628).
- mt76: mt7615: fix tx skb dma unmap (bsc#1012628).
- mt76: mt7915: fix tx skb dma unmap (bsc#1012628).
- mt76: mt7921: fix suspend/resume sequence (bsc#1012628).
- mt76: mt7921: fix memory leak in mt7921_coredump_work
  (bsc#1012628).
- mt76: connac: fix up the setting for ht40 mode in
  mt76_connac_mcu_uni_add_bss (bsc#1012628).
- mt76: mt7921: fixup rx bitrate statistics (bsc#1012628).
- mt76: mt7615: fix memory leak in mt7615_coredump_work
  (bsc#1012628).
- mt76: mt7921: fix aggr length histogram (bsc#1012628).
- mt76: mt7915: fix aggr len debugfs node (bsc#1012628).
- mt76: mt7921: fix stats register definitions (bsc#1012628).
- mt76: mt7615: fix TSF configuration (bsc#1012628).
- mt76: mt7615: fix mib stats counter reporting to mac80211
  (bsc#1012628).
- mt76: mt7915: fix mib stats counter reporting to mac80211
  (bsc#1012628).
- mt76: connac: fix kernel warning adding monitor interface
  (bsc#1012628).
- mt76: check return value of mt76_txq_send_burst in
  mt76_txq_schedule_list (bsc#1012628).
- mt76: mt7921: fix the base of PCIe interrupt (bsc#1012628).
- mt76: mt7921: fix the base of the dynamic remap (bsc#1012628).
- mt76: mt7915: fix rxrate reporting (bsc#1012628).
- mt76: mt7915: fix txrate reporting (bsc#1012628).
- mt76: mt7663: fix when beacon filter is being applied
  (bsc#1012628).
- mt76: mt7663s: make all of packets 4-bytes aligned in sdio tx
  aggregation (bsc#1012628).
- mt76: mt7663s: fix the possible device hang in high traffic
  (bsc#1012628).
- mt76: mt7615: cleanup mcu tx queue in mt7615_dma_reset()
  (bsc#1012628).
- mt76: mt7915: cleanup mcu tx queue in mt7915_dma_reset()
  (bsc#1012628).
- mt76: mt7921: always wake the device in mt7921_remove_interface
  (bsc#1012628).
- mt76: mt7921: fix inappropriate WoW setup with the missing
  ARP informaiton (bsc#1012628).
- mt76: mt7921: fix the dwell time control (bsc#1012628).
- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1012628).
- ovl: show "userxattr" in the mount data (bsc#1012628).
- ovl: invalidate readdir cache on changes to dir with origin
  (bsc#1012628).
- RDMA/qedr: Fix error return code in qedr_iw_connect()
  (bsc#1012628).
- IB/hfi1: Fix error return code in parse_platform_config()
  (bsc#1012628).
- RDMA/bnxt_re: Fix error return code in
  bnxt_qplib_cq_process_terminal() (bsc#1012628).
- cxgb4: Fix unintentional sign extension issues (bsc#1012628).
- net: thunderx: Fix unintentional sign extension issue
  (bsc#1012628).
- mt76: mt7921: fix kernel crash when the firmware fails to
  download (bsc#1012628).
- RDMA/srpt: Fix error return code in srpt_cm_req_recv()
  (bsc#1012628).
- RDMA/rtrs-clt: destroy sysfs after removing session from active
  list (bsc#1012628).
- pinctrl: at91-pio4: Fix slew rate disablement (bsc#1012628).
- i2c: cadence: fix reference leak when pm_runtime_get_sync fails
  (bsc#1012628).
- i2c: img-scb: fix reference leak when pm_runtime_get_sync fails
  (bsc#1012628).
- i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync
  fails (bsc#1012628).
- i2c: imx: fix reference leak when pm_runtime_get_sync fails
  (bsc#1012628).
- i2c: omap: fix reference leak when pm_runtime_get_sync fails
  (bsc#1012628).
- i2c: sprd: fix reference leak when pm_runtime_get_sync fails
  (bsc#1012628).
- i2c: stm32f7: fix reference leak when pm_runtime_get_sync fails
  (bsc#1012628).
- i2c: xiic: fix reference leak when pm_runtime_get_sync fails
  (bsc#1012628).
- i2c: cadence: add IRQ check (bsc#1012628).
- i2c: emev2: add IRQ check (bsc#1012628).
- i2c: jz4780: add IRQ check (bsc#1012628).
- i2c: mlxbf: add IRQ check (bsc#1012628).
- i2c: rcar: add IRQ check (bsc#1012628).
- i2c: sh7760: add IRQ check (bsc#1012628).
- fuse: fix matching of FUSE_DEV_IOC_CLONE command (bsc#1012628).
- iwlwifi: rs-fw: don't support stbc for HE 160 (bsc#1012628).
- iwlwifi: dbg: disable ini debug in 9000 family and below
  (bsc#1012628).
- powerpc/xive: Drop check on irq_data in xive_core_debug_show()
  (bsc#1012628).
- powerpc/xive: Fix xmon command "dxi" (bsc#1012628).
- powerpc/syscall: switch user_exit_irqoff and trace_hardirqs_off
  order (bsc#1012628).
- ASoC: ak5558: correct reset polarity (bsc#1012628).
- net/mlx5: Fix bit-wise and with zero (bsc#1012628).
- net/packet: remove data races in fanout operations
  (bsc#1012628).
- drm/i915/gvt: Fix error code in intel_gvt_init_device()
  (bsc#1012628).
- iommu/vt-d: Fix an error handling path in
  'intel_prepare_irq_remapping()' (bsc#1012628).
- iommu/amd: Put newline after closing bracket in warning
  (bsc#1012628).
- perf beauty: Fix fsconfig generator (bsc#1012628).
- drm/amdgpu: fix an error code in
  init_pmu_entry_by_type_and_add() (bsc#1012628).
- drm/amd/pm: fix error code in smu_set_power_limit()
  (bsc#1012628).
- MIPS: pci-legacy: stop using of_pci_range_to_resource
  (bsc#1012628).
- powerpc/pseries: extract host bridge from pci_bus prior to
  bus removal (bsc#1012628).
- iommu/mediatek: Always enable the clk on resume (bsc#1012628).
- mptcp: fix format specifiers for unsigned int (bsc#1012628).
- powerpc/smp: Reintroduce cpu_core_mask (bsc#1012628).
- KVM: x86: dump_vmcs should not assume GUEST_IA32_EFER is valid
  (bsc#1012628).
- rtlwifi: 8821ae: upgrade PHY and RF parameters (bsc#1012628).
- wlcore: fix overlapping snprintf arguments in debugfs
  (bsc#1012628).
- i2c: sh7760: fix IRQ error path (bsc#1012628).
- i2c: mediatek: Fix wrong dma sync flag (bsc#1012628).
- mwl8k: Fix a double Free in mwl8k_probe_hw (bsc#1012628).
- netfilter: nft_payload: fix C-VLAN offload support
  (bsc#1012628).
- netfilter: nftables_offload: VLAN id needs host byteorder in
  flow dissector (bsc#1012628).
- netfilter: nftables_offload: special ethertype handling for VLAN
  (bsc#1012628).
- vsock/vmci: log once the failed queue pair allocation
  (bsc#1012628).
- libbpf: Initialize the bpf_seq_printf parameters array field
  by field (bsc#1012628).
- net: ethernet: ixp4xx: Set the DMA masks explicitly
  (bsc#1012628).
- gro: fix napi_gro_frags() Fast GRO breakage due to IP alignment
  check (bsc#1012628).
- RDMA/cxgb4: add missing qpid increment (bsc#1012628).
- RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails
  (bsc#1012628).
- ALSA: usb: midi: don't return -ENOMEM when usb_urb_ep_type_check
  fails (bsc#1012628).
- sfc: ef10: fix TX queue lookup in TX event handling
  (bsc#1012628).
- vsock/virtio: free queued packets when closing socket
  (bsc#1012628).
- net: marvell: prestera: fix port event handling on init
  (bsc#1012628).
- net: davinci_emac: Fix incorrect masking of tx and rx error
  channel (bsc#1012628).
- rtw88: refine napi deinit flow (bsc#1012628).
- mt76: mt7615: fix memleak when mt7615_unregister_device()
  (bsc#1012628).
- mt76: mt7915: fix memleak when mt7915_unregister_device()
  (bsc#1012628).
- mt76: mt7921: run mt7921_mcu_fw_log_2_host holding mt76 mutex
  (bsc#1012628).
- powerpc/pseries/iommu: Fix window size for direct mapping with
  pmem (bsc#1012628).
- crypto: ccp: Detect and reject "invalid" addresses destined
  for PSP (bsc#1012628).
- net: dsa: mv88e6xxx: Fix off-by-one in VTU devlink region size
  (bsc#1012628).
- nfp: devlink: initialize the devlink port attribute "lanes"
  (bsc#1012628).
- net: stmmac: fix TSO and TBS feature enabling during driver open
  (bsc#1012628).
- net: renesas: ravb: Fix a stuck issue when a lot of frames
  are received (bsc#1012628).
- net: phy: intel-xway: enable integrated led functions
  (bsc#1012628).
- mt76: mt7615: Fix a dereference of pointer sta before it is
  null checked (bsc#1012628).
- mt76: mt7921: fix possible invalid register access
  (bsc#1012628).
- RDMA/rxe: Fix a bug in rxe_fill_ip_info() (bsc#1012628).
- RDMA/core: Add CM to restrack after successful attachment to
  a device (bsc#1012628).
- powerpc/64: Fix the definition of the fixmap area (bsc#1012628).
- ath9k: Fix error check in ath9k_hw_read_revisions() for PCI
  devices (bsc#1012628).
- ath10k: Fix a use after free in ath10k_htc_send_bundle
  (bsc#1012628).
- ath10k: Fix ath10k_wmi_tlv_op_pull_peer_stats_info() unlock
  without lock (bsc#1012628).
- wlcore: Fix buffer overrun by snprintf due to incorrect buffer
  size (bsc#1012628).
- powerpc/perf: Fix the threshold event selection for memory
  events in power10 (bsc#1012628).
- powerpc/52xx: Fix an invalid ASM expression ('addi' used
  instead of 'add') (bsc#1012628).
- net: phy: marvell: fix m88e1011_set_downshift (bsc#1012628).
- net: phy: marvell: fix m88e1111_set_downshift (bsc#1012628).
- net: enetc: fix link error again (bsc#1012628).
- net, xdp: Update pkt_type if generic XDP changes unicast MAC
  (bsc#1012628).
- bnxt_en: fix ternary sign extension bug in bnxt_show_temp()
  (bsc#1012628).
- ARM: dts: uniphier: Change phy-mode to RGMII-ID to enable
  delay pins for RTL8211E (bsc#1012628).
- arm64: dts: uniphier: Change phy-mode to RGMII-ID to enable
  delay pins for RTL8211E (bsc#1012628).
- net: geneve: modify IP header check in geneve6_xmit_skb and
  geneve_xmit_skb (bsc#1012628).
- selftests: net: mirror_gre_vlan_bridge_1q: Make an FDB entry
  static (bsc#1012628).
- selftests: mlxsw: Remove a redundant if statement in port_scale
  test (bsc#1012628).
- selftests: mlxsw: Remove a redundant if statement in
  tc_flower_scale test (bsc#1012628).
- mptcp: Retransmit DATA_FIN (bsc#1012628).
- bnxt_en: Fix RX consumer index logic in the error path
  (bsc#1012628).
- KVM: VMX: Intercept FS/GS_BASE MSR accesses for 32-bit KVM
  (bsc#1012628).
- KVM: SVM: Zero out the VMCB array used to track SEV ASID
  association (bsc#1012628).
- KVM: SVM: Free sev_asid_bitmap during init if SEV setup fails
  (bsc#1012628).
- KVM: SVM: Disable SEV/SEV-ES if NPT is disabled (bsc#1012628).
- net/sched: act_ct: fix wild memory access when clearing
  fragments (bsc#1012628).
- net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
  (bsc#1012628).
- selftests/bpf: Fix BPF_CORE_READ_BITFIELD() macro (bsc#1012628).
- selftests/bpf: Fix field existence CO-RE reloc tests
  (bsc#1012628).
- selftests/bpf: Fix core_reloc test runner (bsc#1012628).
- bpf: Fix propagation of 32 bit unsigned bounds from 64 bit
  bounds (bsc#1012628).
- RDMA/siw: Fix a use after free in siw_alloc_mr (bsc#1012628).
- RDMA/bnxt_re: Fix a double free in bnxt_qplib_alloc_res
  (bsc#1012628).
- net: bridge: mcast: fix broken length + header check for MRDv6
  Adv (bsc#1012628).
- net: dsa: mv88e6xxx: Fix 6095/6097/6185 ports in non-SERDES
  CMODE (bsc#1012628).
- net:nfc:digital: Fix a double free in digital_tg_recv_dep_req
  (bsc#1012628).
- perf tools: Change fields type in perf_record_time_conv
  (bsc#1012628).
- perf jit: Let convert_timestamp() to be backwards-compatible
  (bsc#1012628).
- perf session: Add swap operation for event TIME_CONV
  (bsc#1012628).
- ia64: ensure proper NUMA distance and possible map
  initialization (bsc#1012628).
- ia64: fix EFI_DEBUG build (bsc#1012628).
- kfifo: fix ternary sign extension bugs (bsc#1012628).
- mm: memcontrol: slab: fix obtain a reference to a freeing memcg
  (bsc#1012628).
- mm/sparse: add the missing sparse_buffer_fini() in error branch
  (bsc#1012628).
- mm/memory-failure: unnecessary amount of unmapping
  (bsc#1012628).
- afs: Fix speculative status fetches (bsc#1012628).
- bpf: Fix alu32 const subreg bound tracking on bitwise operations
  (bsc#1012628).
- bpf, ringbuf: Deny reserve of buffers larger than ringbuf
  (bsc#1012628).
- bpf: Prevent writable memory-mapping of read-only ringbuf pages
  (bsc#1012628).
- net: Only allow init netns to set default tcp cong to a
  restricted algo (bsc#1012628).
- smp: Fix smp_call_function_single_async prototype (bsc#1012628).
- Refresh patches.suse/firmware-xilinx-Add-pinctrl-support.patch.
- Update config files.
- commit f003acc
- drm/radeon: use the dummy page for GART if needed (bsc#1185516).
- commit 25fe027
- ath11k: Clear the fragment cache during key install
  (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588
  CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859
  bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987
  bsc#1186062).
- ath10k: Validate first subframe of A-MSDU before processing
  the list (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145
  CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139
  bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863
  bsc#1185987 bsc#1186062).
- ath10k: Fix TKIP Michael MIC verification for PCIe
  (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588
  CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859
  bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987
  bsc#1186062).
- ath10k: drop MPDU which has discard flag set by firmware
  for SDIO (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145
  CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139
  bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863
  bsc#1185987 bsc#1186062).
- ath10k: drop fragments with multicast DA for SDIO
  (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588
  CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859
  bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987
  bsc#1186062).
- ath10k: drop fragments with multicast DA for PCIe
  (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588
  CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859
  bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987
  bsc#1186062).
- ath10k: add CCMP PN replay protection for fragmented frames
  for PCIe (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145
  CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139
  bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863
  bsc#1185987 bsc#1186062).
- mac80211: extend protection against mixed key and fragment
  cache attacks (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145
  CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139
  bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863
  bsc#1185987 bsc#1186062).
- mac80211: do not accept/forward invalid EAPOL frames
  (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588
  CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859
  bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987
  bsc#1186062).
- mac80211: prevent attacks on TKIP/WEP as well (CVE-2020-24586
  CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587
  CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860
  bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062).
- mac80211: check defrag PN against current frame (CVE-2020-24586
  CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587
  CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860
  bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062).
- mac80211: add fragment cache to sta_info (CVE-2020-24586
  CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587
  CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860
  bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062).
- mac80211: drop A-MSDUs on old ciphers (CVE-2020-24586
  CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587
  CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860
  bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062).
- cfg80211: mitigate A-MSDU aggregation attacks (CVE-2020-24586
  CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587
  CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860
  bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062).
- mac80211: properly handle A-MSDUs that start with an RFC
  1042 header (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145
  CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139
  bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863
  bsc#1185987 bsc#1186062).
- mac80211: prevent mixed key and fragment cache attacks
  (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588
  CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859
  bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987
  bsc#1186062).
- mac80211: assure all fragments are encrypted (CVE-2020-24586
  CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587
  CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860
  bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062).
- commit 469e487

==== kubernetes ====
Version update (1.21.0 -> 1.21.1)
Subpackages: kubernetes-client kubernetes-kubeadm kubernetes-kubelet

- Bump kubernetes-* to 1.21.1
- Bump kubernetes-*-minus1 to 1.20.7

==== kubernetes1.20 ====
Version update (1.20.6 -> 1.20.7)

- Update to version 1.20.7:
  * staging/publishing: Set default go version to go1.15.12
  * build: Update to k/repo-infra@v0.1.7 (supports go1.15.12)
  * Use go-runner:v2.3.1-go1.15.12-buster.0 image (built on go1.15.12)
  * Update to go1.15.12
  * fix: not tagging static public IP
  * Add test create service with ns
  * Set namespace when using kubectl create service
  * Automated cherry pick of #101377: Fix validation in kubectl create ingress (#101428)
  * Updating EndpointSlice controllers to avoid duplicate creations
  * Update pkg/volume/azure_file/azure_provision.go
  * Normalize share name to not include capital letters
  * Extend pod start timeout to 5min for storage subpath configmap test
  * fix: set "host is down" as corrupted mount
  * no watch endpointslice in userpace mode
  * Ensure service deleted when the Azure resource group has been deleted
  * Updating EndpointSlice validation to match Endpoints validation
  * Make parallel build memory threshold configurable
  * fix: azure file namespace issue in csi translation
  * pkg/kubelet: improve the node informer sync check
  * Additional CVE-2021-3121 fix
  * Fix startupProbe behaviour changed
  * Fix test
  * staging/publishing: Set default go version to go1.15.10
  * build: Update to k/repo-infra@v0.1.6 (supports go1.15.11)
  * Use go-runner:v2.3.1-go1.15.11-buster.0 image (built on go1.15.11)
  * Update to go1.15.11
  * add duration encoder to structured logger
  * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.6
  * exec test should not run in Parallel as feature gate is not locked
  * hack/update-bazel.sh
  * respect ExecProbeTimeout
  * apf: exempt probes /healthz /livez /readyz
  * DelegatingAuthenticationOptions TokenReview request timeout
  * list pod list once to avoid timeout
  * Cleanup portforward streams after their usage
  * fix smb mount issue on Windows

==== kubernetes1.21 ====
Version update (1.21.0 -> 1.21.1)
Subpackages: kubernetes1.21-client kubernetes1.21-client-common kubernetes1.21-kubeadm kubernetes1.21-kubelet kubernetes1.21-kubelet-common

- Restore 90-kubeadm.conf, still needed [boo#1186125]
- Stop setting sysctls on kubelet start with `sysctl -a --system`.
  Instead use more specific sysctl calls in kubelet service start.
  [boo#1186125]
- Update to version 1.21.1:
  * [go1.16] Update to go1.16.4
  * Automated cherry pick of #101377: Fix validation in kubectl create ingress (#101426)
  * Update tests to use agnhost 2.32
  * Fix EndpointSlice describe panic when an Endpoint doesn't have zone
  * Add test create service with ns
  * Set namespace when using kubectl create service
  * Update pkg/volume/azure_file/azure_provision.go
  * Normalize share name to not include capital letters
  * Extend pod start timeout to 5min for storage subpath configmap test
  * Fix cleanupMountpoint issue for Windows
  * fix: set "host is down" as corrupted mount
  * no watch endpointslice in userpace mode
  * Ensure service deleted when the Azure resource group has been deleted
  * Update Makefile
  * Update dependencies.yaml
  * update debian-base to buster-v1.5.0 for CVEs
  * fix TestMutatingWebhookResetsInvalidManagedFields flakes
  * Updating EndpointSlice validation to match Endpoints validation
  * fix: azure file namespace issue in csi translation
  * pkg/kubelet: improve the node informer sync check
  * Remove Limits from scheduling e2e balanced pod resources
  * Additional CVE-2021-3121 fix
  * Fix RBAC of generic ephemeral volumes controller
  * move filesystem resize code to kubernetes/mount-utils and add need resize function
  * Fix panic when killing container fails
  * Fix startupProbe behaviour changed
  * Fix test
  * [go1.16] Update to go1.16.3
  * Fix Job describe for completion mode
  * Upgrade kustomize-in-kubectl to v4.1.2
  * exec test should not run in Parallel as feature gate is not locked
  * respect ExecProbeTimeout
  * apf: exempt probes /healthz /livez /readyz
  * DelegatingAuthenticationOptions TokenReview request timeout
  * add node handlers to the metaproxier
  * Updating Topology Aware Hints to support "Auto" value for annotation
  * list pod list once to avoid timeout
  * gce configure containerd default_runtime_name
  * Update the containerd runtime binary path - gce
  * Cleanup portforward streams after their usage
  * azure: fix node public IP not able to fetch issues from IMDS
  * Update CHANGELOG/CHANGELOG-1.21.md for v1.21.0
  * e2e test with hostNetwork pods can't run in parallel
  * do not tag user created public IPs

==== less ====
Version update (581.2 -> 586)

- update to 586:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * Fix bug which could leave terminal in mouse-reporting mode
    after exiting less.
  * Fix bug which caused failure to respond to window resize.
  * Fix backslash bug searching in tag file.

==== libX11 ====
Version update (1.7.0 -> 1.7.1)
Subpackages: libX11-6 libX11-data

- Update to version 1.7.1
  * security update for CVE-2021-31535 (bsc#1182506)
- supersedes U_CVE-2021-31535.patch
- U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)

==== libcontainers-common ====

- Update common to 0.38.2
- Update storage to 1.31.0
- Update image to 5.12.0

==== libepoxy ====
Version update (1.5.5 -> 1.5.7)

- Update to version 1.5.7:
  * Remove type redefinition
- Includes changes from 1.5.6:
  * Fix issue loading OpenGL/GLX/EGL libraries
  * Expose dependency variables in pkg-config file
  * Close output objects when generating files

==== libqmi ====
Version update (1.28.2 -> 1.28.4)

- Update to version 1.28.4
  * libqmi-glib:
  - Add 'wwan' subsystem support.
  - Plug memleak when allocating new links.
  - Plug memleak when QmiDevice is opened multiple times.
  - Fix build when ARPHRD_RAWIP isn't defined in libc.
  * gir:
  - Flag all output TLV readers as optional.
  - Add explicit ownership information in the string and
    struct return annotations.
  * collections:
  - basic: added WMS Send ACK
  * qmicli:
  - Fix double GError when both 'Extended List' and 'Bandwidth
    List' are missing in --nas-get-rf-band-info.
  * Several other minor improvements and fixes.

==== libtirpc ====
Version update (1.3.1 -> 1.3.2)
Subpackages: libtirpc-netconfig libtirpc3

- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS

==== multipath-tools ====
Version update (0.8.5+30+suse.633836e -> 0.8.6+10+suse.4771137)
Subpackages: kpartx libmpath0

- Update to version 0.8.6+10+suse.47711374:
  * Github workflows: add CI for SUSE-specific branches
- Disabled LTO for multipath-tools
  * The test for is_valid_path fails if LTO is enabled, just
    disabling it for %check is insufficient.

==== patterns-microos ====
Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-base-microdnf patterns-microos-base-packagekit patterns-microos-base-zypper patterns-microos-basesystem patterns-microos-cloud patterns-microos-cockpit patterns-microos-defaults patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-selinux patterns-microos-sssd_ldap

- Drop partitionmanager due to bsc#1178848.
  We'll revisit when that is fixed.
- make cups-pk-helper conditional to PackageKit
- add qemu-guest-agent to the DVD, to improve experience in case we
  install in a VM
- add some cups and printing related packages so that a new printer
  can actually be succesfully added (tested with GNOME only)
- add some disk handling GUI tools (for partitioning USB keys, ext.
  disks, etc) for both GNOME and KDE
- Conditionally install cockpit-packagekit in the Cockpit pattern
  if the PackageKit pattern is installed to allow system updates
  through Cockpit on package managed MicroOS systems.
- Fix previous changelog entry to be formatted correctly

==== python-PyJWT ====
Version update (2.0.1 -> 2.1.0)

- update to 2.1.0:
  - Allow claims validation without making JWT signature validation mandatory. `
  - Remove padding from JWK test data. `
  - Make `kty` mandatory in JWK to be compliant with RFC7517. `
  - Allow JWK without `alg` to be compliant with RFC7517. `
  - Allow to verify with private key on ECAlgorithm, as well as on Ed25519Algorithm. `
  - Add caching by default to PyJWKClient `
  - Add missing exceptions.InvalidKeyError to jwt module __init__ imports `
  - Add support for ES256K algorithm `
  - Add `from_jwk()` to Ed25519Algorithm `
  - Add `to_jwk()` to Ed25519Algorithm `
  - Export `PyJWK` and `PyJWKSet`

==== python-distro ====

- use %pytest macro

==== python-jsonpatch ====
Version update (1.31 -> 1.32)

- update to 1.32:
  * take_index causing 'move' of incorrect values due to bad True==1 comparison

==== python-networkx ====
Version update (2.5 -> 2.5.1)

- update to 2.5.1:
  * pin requirements

==== rdma-core ====
Version update (33.1 -> 35.0)
Subpackages: libefa1 libibverbs libibverbs1 libmlx4-1 libmlx5-1 librdmacm1

- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch

==== runc ====
Version update (1.0.0~rc94 -> 1.0.0~rc95)

- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405

==== selinux-policy ====
Subpackages: selinux-policy-targeted

- allow cockpit socket to bind nodes (fix_cockpit.patch)
- use %autosetup to get rid of endless patch lines

==== shim-leap ====

- shim-install: instead of assuming "removable" for Azure, remove
  fallback.efi from \EFI\Boot and copy grub.efi/cfg to \EFI\Boot
  to make \EFI\Boot bootable and keep the boot option created by
  efibootmgr (bsc#1185464, bsc#1185961)

==== sssd ====
Version update (2.4.2 -> 2.5.0)
Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap

- Update to release 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.

==== xmlsec1 ====
Version update (1.2.31 -> 1.2.32)
Subpackages: libxmlsec1-1 libxmlsec1-openssl1

- update to 1.2.32:
  + Remove MD5 for NSS 3.59 and above
  + Fix PKCS12_parse return code handling
  + Fix OpenSSL lookup
  + xmlSecX509DataGetNodeContent(): don't return 0 for non-empty
    elements - fix for LibreOffice
- add upstream signing key and validate source signature
- put license text into all subpackages
- treat all compiler warnings as errors

New Kubic snapshot 20210520 released!

Richard Brown