Packages changed: autofs (5.1.6 -> 5.1.7) coreutils haproxy (2.3.9+git1.afb63bc04 -> 2.3.10+git0.4764f0e4e) iproute2 (5.11 -> 5.12) kernel-source (5.11.11 -> 5.12.0) libzypp (17.25.9 -> 17.25.10) open-iscsi python38 (3.8.8 -> 3.8.9) python38-core (3.8.8 -> 3.8.9) shim snapper yomi-formula (0.0.1+git.1604593202.a2c22bf -> 0.0.1+git.1619170188.fa52819) zypper (1.14.43 -> 1.14.44) === Details === ==== autofs ==== Version update (5.1.6 -> 5.1.7) - Upgrade to 5.1.7 - make bind mounts propagation slave by default. - update ldap READMEs and schema definitions. - fix program map multi-mount lookup after mount fail. - fix browse dir not re-created on symlink expire. - fix a regression with map instance lookup. - correct fsf address. - samples: fix Makefile targets' directory dependencies - remove intr hosts map mount option. - fix trailing dollar sun entry expansion. - initialize struct addrinfo for getaddrinfo() calls. - fix quoted string length calc in expandsunent(). - fix autofs mount options construction. - mount_nfs.c fix local rdma share not mounting. - configure.in: Remove unneeded second call to PKG_PROG_PKG_CONFIG. - configure.in: Do not append parentheses to PKG_PROG_PKG_CONFIG. - Use PKG_CHECK_MODULES to detect the libxml2 library. - fix ldap sasl reconnect problem. - samples/ldap.schema fix. - fix configure force shutdown check. - fix crash in sun_mount(). - fix lookup_nss_read_master() nsswicth check return. - fix typo in open_sss_lib(). - fix sss_master_map_wait timing. - add sss ECONREFUSED return handling. - use mapname in sss context for setautomntent(). - add support for new sss autofs proto version call. - fix retries check in setautomntent_wait(). - refactor sss setautomntent(). - improve sss setautomntent() error handling. - refactor sss getautomntent(). - improve sss getautomntent() error handling. - sss introduce calculate_retry_count() function. - move readall into struct master. - sss introduce a flag to indicate map being read. - update sss timeout documentation. - refactor sss getautomntbyname(). - improve sss getautomntbyname() error handling. - use a valid timeout in lookup_prune_one_cache(). - dont prune offset map entries. - simplify sss source stale check. - include linux/nfs.h directly in rpc_subs.h. - fix typo in daemon/automount.c. - fix direct mount unlink_mount_tree() path. - fix unlink mounts umount order. - fix incorrect logical compare in unlink_mount_tree(). - use bit flag for force unlink mounts. - improve force unlink option description. - remove command fifo on autofs mount fail. - add force unlink mounts and exit option. - cleanup stale logpri fifo pipes on unlink and exit. - fix incorrect systemctl command syntax in autofs(8). - update list.h. - add hashtable implementation. - change mountpoint to mp in struct ext_mount. - make external mounts independent of amd_entry. - make external mounts use simpler hashtable. - add a hash index to mnt_list. - use mnt_list for submounts. - use mnt_list for amdmounts. - make umount_autofs() static. - remove force parameter from umount_all(). - fix remount expire. - fix stale offset directories disable mount. - use struct mnt_list to track mounted mounts. - use struct mnt_list mounted list for expire. - remove unused function tree_get_mnt_list(). - only add expre alarm for active mounts. - move submount check into conditional_alarm_add(). - move lib/master.c to daemon/master.c. - use master_list_empty() for list empty check. - add helper to construct mount point path. - check defaults_read_config() return. - move AUTOFS_LIB to end of build rule lines. - make autofs.a a shared library. - make lookup_file.c nss map read status return handling consistent. - fix empty mounts list return from unlink_mount_tree(). - Refreshed autofs-5.1.1-dbus-udisks-monitor.patch - Replaced automount-fix-master-wait.patch with upstream patch autofs-5.1.7-Fix-option-for-master_read_wait.patch ==== coreutils ==== - Use new packageand format - coreutils-tests-fix-FP-in-ls-stat-free-color.patch: Add upstream patch to avoid FP in testsuite. - coreutils.spec: - Reference the above patch. - Change keyring URL to new GNU coreutils Group Release Keyring. - coreutils.keyring: Update with the Group Release Keyring. ==== haproxy ==== Version update (2.3.9+git1.afb63bc04 -> 2.3.10+git0.4764f0e4e) - Update to version 2.3.10+git0.4764f0e4e: * [RELEASE] Released version 2.3.10 * BUG/MEDIUM: peers: re-work refcnt on table to protect against flush * BUG/MEDIUM: peers: re-work connection to new process during reload. * BUG/MINOR: peers: remove useless table check if initial resync is finished * BUG/MEDIUM: mux-h2: Properly handle shutdowns when received with data * BUG/MINOR: mworker: don't use oldpids[] anymore for reload * BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases * BUG/MEDIUM: config: fix cpu-map notation with both process and threads * BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers * BUG/MINOR: server: free srv.lb_nodes in free_server * BUG/MINOR: mux-h1: Release idle server H1 connection if data are received * BUG/MINOR: logs: Report the true number of retries if there was no connection * BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function * BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded * BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check * MINOR: connection: Make bc_http_major compatible with tcp-checks * BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections * MINOR: logs: Add support of checks as session origin to format lf strings * BUG/MINOR: checks: Set missing id to the dummy checks frontend * BUG/MEDIUM: threads: Ignore current thread to end its harmless period * DOC: ssl: Certificate hot update only works on fronted certificates * BUG/MEDIUM: sample: Fix adjusting size in field converter * MINOR: No longer rely on deprecated sample fetches for predefined ACLs * DOC: clarify that compression works for HTTP/2 * BUG/MINOR: tools: fix parsing "us" unit for timers * CONTRIB: halog: fix issue with array of type char * REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken * DOC: Explicitly state only IPv4 are supported by forwardfor/originalto options * REGTESTS: ssl: "set ssl cert" and multi-certificates bundle * BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free * BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields * BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one * BUG/MINOR: ssl: Fix update of default certificate * BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS * BUG/MINOR: tcp: fix silent-drop workaround for IPv6 ==== iproute2 ==== Version update (5.11 -> 5.12) - Update to release 5.12 * devlink: Use library provided string processing APIs * utils: Introduce helper routines for generic socket recv * q_cake: Fix incorrect printing of signed values in class statistics * json_print: Add print_tv() * nexthop: Add support for nexthop buckets * nexthop: Add support for resilient nexthop groups * ip: xfrm: add support for tfcpad * tc: e_bpf: fix memory leak in parse_bpf() * lib: bpf_legacy: treat 0 as a valid file descriptor * ip: drop 2-char command assumption * bridge: vlan: dump port only if there are any vlans ==== kernel-source ==== Version update (5.11.11 -> 5.12.0) - rpm/constraints.in: remove aarch64 disk size exception obs://Kernel:stable/kernel-default/ARM/aarch64 currrently fails: installing package kernel-default-livepatch-devel-5.12.0-3.1.g6208a83.aarch64 needs 3MB more space on the / filesystem The stats say: Maximal used disk space: 31799 Mbyte By default, we require 35G. For aarch64 we had an exception to lower this limit to 30G there. Drop this exception as it is obviously no longer valid. - commit ee00b50 - series.conf: cleanup - fix Patch-mainline tag and move to "almost mainline" section: patches.suse/crypto-ccp-Annotate-SEV-Firmware-file-names.patch - commit 3a48ed8 - crypto: ccp: Annotate SEV Firmware file names (bsc#1185282). - commit 66154b6 - Update to 5.12 final - refresh configs (headers only) - commit 9683115 - rpm/kernel-binary.spec.in: Require new enough pahole. pahole 1.21 is required for building line-next BTF - commit 8df1aaa - rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244) - commit 52805ed - rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063). Previously essiv was part of dm-crypt but now it is separate. Include the module in kernel-obs-build when available. Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup") - commit fe15b78 - Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)" This turned out to be a bad idea: the kernel-$flavor-devel package must be usable without kernel-$flavor, e.g. at the build of a KMP. And this change brought superfluous installation of kernel-preempt when a system had kernel-syms (bsc#1185113). - commit d771304 - rpm/check-for-config-changes: add AS_HAS_* to ignores arch/arm64/Kconfig defines a lot of these. So far our current compilers seem to support them all. But it can quickly change with SLE later. - commit a4d8194 - Linux 5.11.16 (bsc#1012628). - bpf: Move sanitize_val_alu out of op switch (bsc#1012628). - bpf: Improve verifier error messages for users (bsc#1012628). - bpf: Rework ptr_limit into alu_limit and add common error path (bsc#1012628). - ARM: 9071/1: uprobes: Don't hook on thumb instructions (bsc#1012628). - bpf: Move off_reg into sanitize_ptr_alu (bsc#1012628). - bpf: Ensure off_reg has no mixed signed bounds for all types (bsc#1012628). - r8169: don't advertise pause in jumbo mode (bsc#1012628). - r8169: tweak max read request size for newer chips also in jumbo mtu mode (bsc#1012628). - kasan: remove redundant config option (bsc#1012628). - kasan: fix hwasan build for gcc (bsc#1012628). - KVM: VMX: Don't use vcpu->run->internal.ndata as an array index (bsc#1012628). - KVM: VMX: Convert vcpu_vmx.exit_reason to a union (bsc#1012628). - bpf: Use correct permission flag for mixed signed bounds arithmetic (bsc#1012628). - arm64: dts: allwinner: h6: beelink-gs1: Remove ext. 32 kHz osc reference (bsc#1012628). - arm64: dts: allwinner: Fix SD card CD GPIO for SOPine systems (bsc#1012628). - ARM: OMAP2+: Fix uninitialized sr_inst (bsc#1012628). - ARM: footbridge: fix PCI interrupt mapping (bsc#1012628). - ARM: 9069/1: NOMMU: Fix conversion for_each_membock() to for_each_mem_range() (bsc#1012628). - ARM: 9063/1: mm: reduce maximum number of CPUs if DEBUG_KMAP_LOCAL is enabled (bsc#1012628). - ARM: OMAP2+: Fix warning for omap_init_time_of() (bsc#1012628). - gro: ensure frag0 meets IP header alignment (bsc#1012628). - ch_ktls: do not send snd_una update to TCB in middle (bsc#1012628). - ch_ktls: tcb close causes tls connection failure (bsc#1012628). - ch_ktls: fix device connection close (bsc#1012628). - ch_ktls: Fix kernel panic (bsc#1012628). - ibmvnic: remove duplicate napi_schedule call in open function (bsc#1012628). - ibmvnic: remove duplicate napi_schedule call in do_reset function (bsc#1012628). - ibmvnic: avoid calling napi_disable() twice (bsc#1012628). - ia64: tools: remove inclusion of ia64-specific version of errno.h header (bsc#1012628). - ia64: remove duplicate entries in generic_defconfig (bsc#1012628). - ethtool: pause: make sure we init driver stats (bsc#1012628). - i40e: fix the panic when running bpf in xdpdrv mode (bsc#1012628). - ibmvnic: correctly use dev_consume/free_skb_irq (bsc#1012628). - net: Make tcp_allowed_congestion_control readonly in non-init netns (bsc#1012628). - mm: ptdump: fix build failure (bsc#1012628). - net: ip6_tunnel: Unregister catch-all devices (bsc#1012628). - net: sit: Unregister catch-all devices (bsc#1012628). - net: phy: marvell: fix detection of PHY on Topaz switches (bsc#1012628). - net: davicom: Fix regulator not turned off on failed probe (bsc#1012628). - net/mlx5e: Fix setting of RS FEC mode (bsc#1012628). - netfilter: nftables: clone set element expression template (bsc#1012628). - netfilter: nft_limit: avoid possible divide error in nft_limit_init (bsc#1012628). - net/mlx5e: fix ingress_ifindex check in mlx5e_flower_parse_meta (bsc#1012628). - net: macb: fix the restore of cmp registers (bsc#1012628). - drm/i915/display/vlv_dsi: Do not skip panel_pwr_cycle_delay when disabling the panel (bsc#1012628). - libbpf: Fix potential NULL pointer dereference (bsc#1012628). - netfilter: arp_tables: add pre_exit hook for table unregister (bsc#1012628). - netfilter: bridge: add pre_exit hooks for ebtable unregistration (bsc#1012628). - libnvdimm/region: Fix nvdimm_has_flush() to handle ND_REGION_ASYNC (bsc#1012628). - ice: Fix potential infinite loop when using u8 loop counter (bsc#1012628). - netfilter: conntrack: do not print icmpv6 as unknown via /proc (bsc#1012628). - netfilter: flowtable: fix NAT IPv6 offload mangling (bsc#1012628). - ixgbe: fix unbalanced device enable/disable in suspend/resume (bsc#1012628). - ixgbe: Fix NULL pointer dereference in ethtool loopback test (bsc#1012628). - drm/vmwgfx: Make sure we unpin no longer needed buffers (bsc#1012628). - scsi: libsas: Reset num_scatter if libata marks qc as NODATA (bsc#1012628). - riscv: Fix spelling mistake "SPARSEMEM" to "SPARSMEM" (bsc#1012628). - vfio/pci: Add missing range check in vfio_pci_mmap (bsc#1012628). - arm64: alternatives: Move length validation in alternative_{insn, endif} (bsc#1012628). - arm64: mte: Ensure TIF_MTE_ASYNC_FAULT is set atomically (bsc#1012628). - Update config files. - arm64: fix inline asm in load_unaligned_zeropad() (bsc#1012628). - drm/i915: Don't zero out the Y plane's watermarks (bsc#1012628). - readdir: make sure to verify directory entry for legacy interfaces too (bsc#1012628). - dm verity fec: fix misaligned RS roots IO (bsc#1012628). - HID: wacom: set EV_KEY and EV_ABS only for non-HID_GENERIC type of devices (bsc#1012628). - Input: i8042 - fix Pegatron C15B ID entry (bsc#1012628). - Input: s6sy761 - fix coordinate read bit shift (bsc#1012628). - net/sctp: fix race condition in sctp_destroy_sock (bsc#1012628). - lib: fix kconfig dependency on ARCH_WANT_FRAME_POINTERS (bsc#1012628). - virt_wifi: Return micros for BSS TSF values (bsc#1012628). - mac80211: clear sta->fast_rx when STA removed from 4-addr VLAN (bsc#1012628). - drm/amd/display: Add missing mask for DCN3 (bsc#1012628). - pcnet32: Use pci_resource_len to validate PCI resource (bsc#1012628). - net: ieee802154: forbid monitor for add llsec seclevel (bsc#1012628). - net: ieee802154: stop dump llsec seclevels for monitors (bsc#1012628). - net: ieee802154: forbid monitor for del llsec devkey (bsc#1012628). - net: ieee802154: forbid monitor for add llsec devkey (bsc#1012628). - net: ieee802154: stop dump llsec devkeys for monitors (bsc#1012628). - net: ieee802154: forbid monitor for del llsec dev (bsc#1012628). - net: ieee802154: forbid monitor for add llsec dev (bsc#1012628). - net: ieee802154: stop dump llsec devs for monitors (bsc#1012628). - net: ieee802154: forbid monitor for del llsec key (bsc#1012628). - net: ieee802154: forbid monitor for add llsec key (bsc#1012628). - net: ieee802154: stop dump llsec keys for monitors (bsc#1012628). - iwlwifi: add support for Qu with AX201 device (bsc#1012628). - scsi: scsi_transport_srp: Don't block target in SRP_PORT_LOST state (bsc#1012628). - ASoC: fsl_esai: Fix TDM slot setup for I2S mode (bsc#1012628). - drm/msm: Fix a5xx/a6xx timestamps (bsc#1012628). - ARM: omap1: fix building with clang IAS (bsc#1012628). - ARM: keystone: fix integer overflow warning (bsc#1012628). - powerpc/signal32: Fix Oops on sigreturn with unmapped VDSO (bsc#1012628). - neighbour: Disregard DEAD dst in neigh_update (bsc#1012628). - bpf: Take module reference for trampoline in module (bsc#1012628). - gpu/xen: Fix a use after free in xen_drm_drv_init (bsc#1012628). - net: axienet: allow setups without MDIO (bsc#1012628). - ASoC: max98373: Added 30ms turn on/off time delay (bsc#1012628). - ASoC: max98373: Changed amp shutdown register as volatile (bsc#1012628). - xfrm: BEET mode doesn't support fragments for inner packets (bsc#1012628). - iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_enqueue_hcmd() (bsc#1012628). - arc: kernel: Return -EFAULT if copy_to_user() fails (bsc#1012628). - lockdep: Add a missing initialization hint to the "INFO: Trying to register non-static key" message (bsc#1012628). - remoteproc: pru: Fix loading of GNU Binutils ELF (bsc#1012628). - ARM: dts: Fix moving mmc devices with aliases for omap4 & 5 (bsc#1012628). - ARM: dts: Drop duplicate sha2md5_fck to fix clk_disable race (bsc#1012628). - ACPI: x86: Call acpi_boot_table_init() after acpi_table_upgrade() (bsc#1012628). - dmaengine: idxd: fix wq cleanup of WQCFG registers (bsc#1012628). - dmaengine: idxd: clear MSIX permission entry on shutdown (bsc#1012628). - dmaengine: plx_dma: add a missing put_device() on error path (bsc#1012628). - dmaengine: Fix a double free in dma_async_device_register (bsc#1012628). - dmaengine: dw: Make it dependent to HAS_IOMEM (bsc#1012628). - dmaengine: idxd: fix wq size store permission state (bsc#1012628). - dmaengine: idxd: fix opcap sysfs attribute output (bsc#1012628). - dmaengine: idxd: fix delta_rec and crc size field for completion record (bsc#1012628). - dmaengine: idxd: Fix clobbering of SWERR overflow bit on writeback (bsc#1012628). - gpio: sysfs: Obey valid_mask (bsc#1012628). - Input: nspire-keypad - enable interrupts only when opened (bsc#1012628). - mtd: rawnand: mtk: Fix WAITRDY break condition and timeout (bsc#1012628). - AMD_SFH: Add DMI quirk table for BIOS-es which don't set the activestatus bits (bsc#1012628). - AMD_SFH: Add sensor_mask module parameter (bsc#1012628). - AMD_SFH: Removed unused activecontrolstatus member from the amd_mp2_dev struct (bsc#1012628). - commit d57ad55 - Update to 5.12-rc8 - refresh configs - commit a71cb9a - Linux 5.11.15 (bsc#1012628). - net: sfp: cope with SFPs that set both LOS normal and LOS inverted (bsc#1012628). - perf map: Tighten snprintf() string precision to pass gcc check on some 32-bit arches (bsc#1012628). - netfilter: x_tables: fix compat match/target pad out-of-bound write (bsc#1012628). - block: don't ignore REQ_NOWAIT for direct IO (bsc#1012628). - riscv,entry: fix misaligned base for excp_vect_table (bsc#1012628). - io_uring: don't mark S_ISBLK async work as unbounded (bsc#1012628). - null_blk: fix command timeout completion handling (bsc#1012628). - idr test suite: Create anchor before launching throbber (bsc#1012628). - idr test suite: Take RCU read lock in idr_find_test_1 (bsc#1012628). - radix tree test suite: Register the main thread with the RCU library (bsc#1012628). - block: only update parent bi_status when bio fail (bsc#1012628). - radix tree test suite: Fix compilation (bsc#1012628). - XArray: Fix splitting to non-zero orders (bsc#1012628). - gpu: host1x: Use different lock classes for each client (bsc#1012628). - drm/tegra: dc: Don't set PLL clock to 0Hz (bsc#1012628). - tools/kvm_stat: Add restart delay (bsc#1012628). - ftrace: Check if pages were allocated before calling free_pages() (bsc#1012628). - gfs2: report "already frozen/thawed" errors (bsc#1012628). - drm/imx: imx-ldb: fix out of bounds array access warning (bsc#1012628). - KVM: arm64: Disable guest access to trace filter controls (bsc#1012628). - KVM: arm64: Hide system instruction access to Trace registers (bsc#1012628). - gfs2: Flag a withdraw if init_threads() fails (bsc#1012628). - interconnect: core: fix error return code of icc_link_destroy() (bsc#1012628). - commit 64fb5bf - Linux 5.11.14 (bsc#1012628). - xfrm/compat: Cleanup WARN()s that can be user-triggered (bsc#1012628). - ALSA: aloop: Fix initialization of controls (bsc#1012628). - ALSA: hda/realtek: Fix speaker amp setup on Acer Aspire E1 (bsc#1012628). - ALSA: hda/conexant: Apply quirk for another HP ZBook G5 model (bsc#1012628). - file: fix close_range() for unshare+cloexec (bsc#1012628). - ASoC: intel: atom: Stop advertising non working S24LE support (bsc#1012628). - nfc: fix refcount leak in llcp_sock_bind() (bsc#1012628). - nfc: fix refcount leak in llcp_sock_connect() (bsc#1012628). - nfc: fix memory leak in llcp_sock_connect() (bsc#1012628). - nfc: Avoid endless loops caused by repeated llcp_sock_connect() (bsc#1012628). - selinux: make nslot handling in avtab more robust (bsc#1012628). - selinux: fix cond_list corruption when changing booleans (bsc#1012628). - selinux: fix race between old and new sidtab (bsc#1012628). - xen/evtchn: Change irq_info lock to raw_spinlock_t (bsc#1012628). - net: ipv6: check for validity before dereferencing cfg->fc_nlinfo.nlh (bsc#1012628). - net: dsa: lantiq_gswip: Let GSWIP automatically set the xMII clock (bsc#1012628). - net: dsa: lantiq_gswip: Don't use PHY auto polling (bsc#1012628). - net: dsa: lantiq_gswip: Configure all remaining GSWIP_MII_CFG bits (bsc#1012628). - ACPI: processor: Fix build when CONFIG_ACPI_PROCESSOR=m (bsc#1012628). - drm/radeon: Fix size overflow (bsc#1012628). - drm/amdgpu: Fix size overflow (bsc#1012628). - drm/amdgpu/smu7: fix CAC setting on TOPAZ (bsc#1012628). - rfkill: revert back to old userspace API by default (bsc#1012628). - cifs: escape spaces in share names (bsc#1012628). - cifs: On cifs_reconnect, resolve the hostname again (bsc#1012628). - IB/hfi1: Fix probe time panic when AIP is enabled with a buggy BIOS (bsc#1012628). - LOOKUP_MOUNTPOINT: we are cleaning "jumped" flag too late (bsc#1012628). - gcov: re-fix clang-11+ support (bsc#1012628). - ia64: fix user_stack_pointer() for ptrace() (bsc#1012628). - nds32: flush_dcache_page: use page_mapping_file to avoid races with swapoff (bsc#1012628). - ocfs2: fix deadlock between setattr and dio_end_io_write (bsc#1012628). - fs: direct-io: fix missing sdio->boundary (bsc#1012628). - ethtool: fix incorrect datatype in set_eee ops (bsc#1012628). - of: property: fw_devlink: do not link ".*,nr-gpios" (bsc#1012628). - parisc: parisc-agp requires SBA IOMMU driver (bsc#1012628). - parisc: avoid a warning on u8 cast for cmpxchg on u8 pointers (bsc#1012628). - ARM: dts: turris-omnia: configure LED[2]/INTn pin as interrupt pin (bsc#1012628). - batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field (bsc#1012628). - ice: Continue probe on link/PHY errors (bsc#1012628). - ice: Increase control queue timeout (bsc#1012628). - ice: prevent ice_open and ice_stop during reset (bsc#1012628). - ice: fix memory allocation call (bsc#1012628). - ice: remove DCBNL_DEVRESET bit from PF state (bsc#1012628). - ice: Fix for dereference of NULL pointer (bsc#1012628). - ice: Use port number instead of PF ID for WoL (bsc#1012628). - ice: Cleanup fltr list in case of allocation issues (bsc#1012628). - iwlwifi: pcie: properly set LTR workarounds on 22000 devices (bsc#1012628). - ice: fix memory leak of aRFS after resuming from suspend (bsc#1012628). - net: hso: fix null-ptr-deref during tty device unregistration (bsc#1012628). - libbpf: Fix bail out from 'ringbuf_process_ring()' on error (bsc#1012628). - bpf: Enforce that struct_ops programs be GPL-only (bsc#1012628). - bpf: link: Refuse non-O_RDWR flags in BPF_OBJ_GET (bsc#1012628). - ethernet/netronome/nfp: Fix a use after free in nfp_bpf_ctrl_msg_rx (bsc#1012628). - libbpf: Ensure umem pointer is non-NULL before dereferencing (bsc#1012628). - libbpf: Restore umem state after socket create failure (bsc#1012628). - libbpf: Only create rx and tx XDP rings when necessary (bsc#1012628). - bpf: Refcount task stack in bpf_get_task_stack (bsc#1012628). - bpf, sockmap: Fix sk->prot unhash op reset (bsc#1012628). - bpf, sockmap: Fix incorrect fwd_alloc accounting (bsc#1012628). - net: ensure mac header is set in virtio_net_hdr_to_skb() (bsc#1012628). - i40e: Fix sparse warning: missing error code 'err' (bsc#1012628). - i40e: Fix sparse error: 'vsi->netdev' could be null (bsc#1012628). - i40e: Fix sparse error: uninitialized symbol 'ring' (bsc#1012628). - i40e: Fix sparse errors in i40e_txrx.c (bsc#1012628). - vdpa/mlx5: Fix suspend/resume index restoration (bsc#1012628). - net: sched: sch_teql: fix null-pointer dereference (bsc#1012628). - net: sched: fix action overwrite reference counting (bsc#1012628). - nl80211: fix beacon head validation (bsc#1012628). - nl80211: fix potential leak of ACL params (bsc#1012628). - cfg80211: check S1G beacon compat element length (bsc#1012628). - mac80211: fix time-is-after bug in mlme (bsc#1012628). - mac80211: fix TXQ AC confusion (bsc#1012628). - net: hsr: Reset MAC header for Tx path (bsc#1012628). - net-ipv6: bugfix - raw & sctp - switch to ipv6_can_nonlocal_bind() (bsc#1012628). - net: let skb_orphan_partial wake-up waiters (bsc#1012628). - thunderbolt: Fix a leak in tb_retimer_add() (bsc#1012628). - thunderbolt: Fix off by one in tb_port_find_retimer() (bsc#1012628). - usbip: add sysfs_lock to synchronize sysfs code paths (bsc#1012628). - usbip: stub-dev synchronize sysfs code paths (bsc#1012628). - usbip: vudc synchronize sysfs code paths (bsc#1012628). - usbip: synchronize event handler with sysfs code paths (bsc#1012628). - driver core: Fix locking bug in deferred_probe_timeout_work_func() (bsc#1012628). - scsi: pm80xx: Fix chip initialization failure (bsc#1012628). - scsi: target: iscsi: Fix zero tag inside a trace event (bsc#1012628). - percpu: make pcpu_nr_empty_pop_pages per chunk type (bsc#1012628). - i2c: turn recovery error on init to debug (bsc#1012628). - powerpc/vdso: Make sure vdso_wrapper.o is rebuilt everytime vdso.so is rebuilt (bsc#1012628). - powerpc/ptrace: Don't return error when getting/setting FP regs without CONFIG_PPC_FPU_REGS (bsc#1012628). - KVM: x86/mmu: change TDP MMU yield function returns to match cond_resched (bsc#1012628). - KVM: x86/mmu: Merge flush and non-flush tdp_mmu_iter_cond_resched (bsc#1012628). - KVM: x86/mmu: Rename goal_gfn to next_last_level_gfn (bsc#1012628). - KVM: x86/mmu: Ensure forward progress when yielding in TDP MMU iter (bsc#1012628). - KVM: x86/mmu: Yield in TDU MMU iter even if no SPTES changed (bsc#1012628). - KVM: x86/mmu: Ensure TLBs are flushed when yielding during GFN range zap (bsc#1012628). - KVM: x86/mmu: Ensure TLBs are flushed for TDP MMU during NX zapping (bsc#1012628). - KVM: x86/mmu: Don't allow TDP MMU to yield when recovering NX pages (bsc#1012628). - KVM: x86/mmu: preserve pending TLB flush across calls to kvm_tdp_mmu_zap_sp (bsc#1012628). - net: sched: fix err handler in tcf_action_init() (bsc#1012628). - ice: Refactor DCB related variables out of the ice_port_info struct (bsc#1012628). - ice: Recognize 860 as iSCSI port in CEE mode (bsc#1012628). - xfrm: interface: fix ipv4 pmtu check to honor ip header df (bsc#1012628). - xfrm: Use actual socket sk instead of skb socket for xfrm_output_resume (bsc#1012628). - remoteproc: qcom: pil_info: avoid 64-bit division (bsc#1012628). - regulator: bd9571mwv: Fix AVS and DVFS voltage range (bsc#1012628). - ARM: OMAP4: Fix PMIC voltage domains for bionic (bsc#1012628). - ARM: OMAP4: PM: update ROM return address for OSWR and OFF (bsc#1012628). - remoteproc: pru: Fix firmware loading crashes on K3 SoCs (bsc#1012628). - net: xfrm: Localize sequence counter per network namespace (bsc#1012628). - esp: delete NETIF_F_SCTP_CRC bit from features for esp offload (bsc#1012628). - ASoC: SOF: Intel: HDA: fix core status verification (bsc#1012628). - ASoC: wm8960: Fix wrong bclk and lrclk with pll enabled for some chips (bsc#1012628). - xfrm: Fix NULL pointer dereference on policy lookup (bsc#1012628). - virtchnl: Fix layout of RSS structures (bsc#1012628). - i40e: Added Asym_Pause to supported link modes (bsc#1012628). - i40e: Fix kernel oops when i40e driver removes VF's (bsc#1012628). - hostfs: fix memory handling in follow_link() (bsc#1012628). - amd-xgbe: Update DMA coherency values (bsc#1012628). - vxlan: do not modify the shared tunnel info when PMTU triggers an ICMP reply (bsc#1012628). - geneve: do not modify the shared tunnel info when PMTU triggers an ICMP reply (bsc#1012628). - sch_red: fix off-by-one checks in red_check_params() (bsc#1012628). - drivers/net/wan/hdlc_fr: Fix a double free in pvc_xmit (bsc#1012628). - arm64: dts: imx8mm/q: Fix pad control of SD1_DATA0 (bsc#1012628). - xfrm: Provide private skb extensions for segmented and hw offloaded ESP packets (bsc#1012628). - can: bcm/raw: fix msg_namelen values depending on CAN_REQUIRED_SIZE (bsc#1012628). - can: isotp: fix msg_namelen values depending on CAN_REQUIRED_SIZE (bsc#1012628). - can: uapi: can.h: mark union inside struct can_frame packed (bsc#1012628). - mlxsw: spectrum: Fix ECN marking in tunnel decapsulation (bsc#1012628). - ethernet: myri10ge: Fix a use after free in myri10ge_sw_tso (bsc#1012628). - gianfar: Handle error code at MAC address change (bsc#1012628). - net: dsa: Fix type was not set for devlink port (bsc#1012628). - clk: qcom: camcc: Update the clock ops for the SC7180 (bsc#1012628). - cxgb4: avoid collecting SGE_QBASE regs during traffic (bsc#1012628). - net:tipc: Fix a double free in tipc_sk_mcast_rcv (bsc#1012628). - ARM: dts: imx6: pbab01: Set vmmc supply for both SD interfaces (bsc#1012628). - net/ncsi: Avoid channel_monitor hrtimer deadlock (bsc#1012628). - net: qrtr: Fix memory leak on qrtr_tx_wait failure (bsc#1012628). - nfp: flower: ignore duplicate merge hints from FW (bsc#1012628). - net: phy: broadcom: Only advertise EEE for supported modes (bsc#1012628). - I2C: JZ4780: Fix bug for Ingenic X1000 (bsc#1012628). - ASoC: sunxi: sun4i-codec: fill ASoC card owner (bsc#1012628). - net/mlx5e: Fix mapping of ct_label zero (bsc#1012628). - net/mlx5: Delete auxiliary bus driver eth-rep first (bsc#1012628). - net/mlx5e: Fix ethtool indication of connector type (bsc#1012628). - net/mlx5: Don't request more than supported EQs (bsc#1012628). - net/mlx5e: Guarantee room for XSK wakeup NOP on async ICOSQ (bsc#1012628). - net/rds: Fix a use after free in rds_message_map_pages (bsc#1012628). - xdp: fix xdp_return_frame() kernel BUG throw for page_pool memory model (bsc#1012628). - soc/fsl: qbman: fix conflicting alignment attributes (bsc#1012628). - i40e: fix receiving of single packets in xsk zero-copy mode (bsc#1012628). - i40e: Fix display statistics for veb_tc (bsc#1012628). - RDMA/rtrs-clt: Close rtrs client conn before destroying rtrs clt session files (bsc#1012628). - drm/msm: Set drvdata to NULL when msm_drm_init() fails (bsc#1012628). - net: udp: Add support for getsockopt(..., ..., UDP_GRO, ..., ...); (bsc#1012628). - mptcp: forbit mcast-related sockopt on MPTCP sockets (bsc#1012628). - mptcp: revert "mptcp: provide subflow aware release function" (bsc#1012628). - scsi: ufs: core: Fix task management request completion timeout (bsc#1012628). - scsi: ufs: core: Fix wrong Task Tag used in task management request UPIUs (bsc#1012628). - drm/msm/disp/dpu1: program 3d_merge only if block is attached (bsc#1012628). - Revert "arm64: dts: marvell: armada-cp110: Switch to per-port SATA interrupts" (bsc#1012628). - ARM: dts: turris-omnia: fix hardware buffer management (bsc#1012628). - net: cls_api: Fix uninitialised struct field bo->unlocked_driver_cb (bsc#1012628). - net: macb: restore cmp registers on resume path (bsc#1012628). - clk: fix invalid usage of list cursor in register (bsc#1012628). - clk: fix invalid usage of list cursor in unregister (bsc#1012628). - workqueue: Move the position of debug_work_activate() in __queue_work() (bsc#1012628). - s390/cpcmd: fix inline assembly register clobbering (bsc#1012628). - perf inject: Fix repipe usage (bsc#1012628). - openvswitch: fix send of uninitialized stack memory in ct limit reply (bsc#1012628). - i2c: designware: Adjust bus_freq_hz when refuse high speed mode set (bsc#1012628). - iwlwifi: fix 11ax disabled bit in the regulatory capability flags (bsc#1012628). - can: mcp251x: fix support for half duplex SPI host controllers (bsc#1012628). - platform/x86: intel-hid: Fix spurious wakeups caused by tablet-mode events during suspend (bsc#1012628). - tipc: increment the tmp aead refcnt before attaching it (bsc#1012628). - net: hns3: clear VF down state bit before request link status (bsc#1012628). - net/mlx5: Fix HW spec violation configuring uplink (bsc#1012628). - net/mlx5: Fix placement of log_max_flow_counter (bsc#1012628). - net/mlx5: Fix PPLM register mapping (bsc#1012628). - net/mlx5: Fix PBMC register mapping (bsc#1012628). - RDMA/cxgb4: check for ipv6 address properly while destroying listener (bsc#1012628). - perf report: Fix wrong LBR block sorting (bsc#1012628). - RDMA/qedr: Fix kernel panic when trying to access recv_cq (bsc#1012628). - drm/vc4: crtc: Reduce PV fifo threshold on hvs4 (bsc#1012628). - i40e: Fix parameters in aq_get_phy_register() (bsc#1012628). - RDMA/addr: Be strict with gid size (bsc#1012628). - vdpa/mlx5: should exclude header length and fcs from mtu (bsc#1012628). - vdpa/mlx5: Fix wrong use of bit numbers (bsc#1012628). - RAS/CEC: Correct ce_add_elem()'s returned values (bsc#1012628). - clk: socfpga: fix iomem pointer cast on 64-bit (bsc#1012628). - lockdep: Address clang -Wformat warning printing for %hd (bsc#1012628). - dt-bindings: net: ethernet-controller: fix typo in NVMEM (bsc#1012628). - net: sched: bump refcount for new action in ACT replace mode (bsc#1012628). - x86/traps: Correct exc_general_protection() and math_error() return paths (bsc#1012628). - gpiolib: Read "gpio-line-names" from a firmware node (bsc#1012628). - cfg80211: remove WARN_ON() in cfg80211_sme_connect (bsc#1012628). - net: tun: set tun->dev->addr_len during TUNSETLINK processing (bsc#1012628). - drivers: net: fix memory leak in atusb_probe (bsc#1012628). - drivers: net: fix memory leak in peak_usb_create_dev (bsc#1012628). - net: mac802154: Fix general protection fault (bsc#1012628). - net: ieee802154: nl-mac: fix check on panid (bsc#1012628). - net: ieee802154: fix nl802154 del llsec key (bsc#1012628). - net: ieee802154: fix nl802154 del llsec dev (bsc#1012628). - net: ieee802154: fix nl802154 add llsec key (bsc#1012628). - net: ieee802154: fix nl802154 del llsec devkey (bsc#1012628). - net: ieee802154: forbid monitor for set llsec params (bsc#1012628). - net: ieee802154: forbid monitor for del llsec seclevel (bsc#1012628). - net: ieee802154: stop dump llsec params for monitors (bsc#1012628). - Revert "net: sched: bump refcount for new action in ACT replace mode" (bsc#1012628). - commit f68b7e1 - rpm/check-for-config-changes: remove stale comment It is stale since 8ab393bf905a committed in 2005 :). - commit c9f9f5a - rpm/mkspec: Use tilde instead of dot for version string with rc (bsc#1184650) - commit f37613f - rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514) The devel package requires the kernel binary package itself for building modules externally. - commit 794be7b - Update to 5.12-rc7 - commit bd61ada - drm/msm: a6xx: fix version check for the A650 SQE microcode (git-fixes). - commit b15020c - Linux 5.11.13 (bsc#1012628). - init/Kconfig: make COMPILE_TEST depend on HAS_IOMEM (bsc#1012628). - Update config files. - bpf, x86: Validate computation of branch displacements for x86-32 (bsc#1012628). - bpf, x86: Validate computation of branch displacements for x86-64 (bsc#1012628). - tools/resolve_btfids: Add /libbpf to .gitignore (bsc#1012628). - kbuild: Do not clean resolve_btfids if the output does not exist (bsc#1012628). - kbuild: Add resolve_btfids clean to root clean target (bsc#1012628). - tools/resolve_btfids: Set srctree variable unconditionally (bsc#1012628). - tools/resolve_btfids: Check objects before removing (bsc#1012628). - tools/resolve_btfids: Build libbpf and libsubcmd in separate directories (bsc#1012628). - math: Export mul_u64_u64_div_u64 (bsc#1012628). - io_uring: fix timeout cancel return code (bsc#1012628). - cifs: Silently ignore unknown oplock break handle (bsc#1012628). - cifs: revalidate mapping when we open files for SMB1 POSIX (bsc#1012628). - ia64: fix format strings for err_inject (bsc#1012628). - ia64: mca: allocate early mca with GFP_ATOMIC (bsc#1012628). - selftests/vm: fix out-of-tree build (bsc#1012628). - arm64: kernel: disable CNP on Carmel (bsc#1012628). - Update config files. - scsi: target: pscsi: Clean up after failure in pscsi_map_sg() (bsc#1012628). - ptp_qoriq: fix overflow in ptp_qoriq_adjfine() u64 calcalation (bsc#1012628). - platform/x86: intel_pmc_core: Ignore GBE LTR on Tiger Lake platforms (bsc#1012628). - platform/x86: intel_pmt_class: Initial resource to 0 (bsc#1012628). - block: clear GD_NEED_PART_SCAN later in bdev_disk_changed (bsc#1012628). - x86/build: Turn off -fcf-protection for realmode targets (bsc#1012628). - drm/msm/disp/dpu1: icc path needs to be set before dpu runtime resume (bsc#1012628). - kselftest/arm64: sve: Do not use non-canonical FFR register value (bsc#1012628). - platform/x86: thinkpad_acpi: Allow the FnLock LED to change state (bsc#1012628). - net: ipa: fix init header command validation (bsc#1012628). - netfilter: nftables: skip hook overlap logic if flowtable is stale (bsc#1012628). - netfilter: conntrack: Fix gre tunneling over ipv6 (bsc#1012628). - drm/msm: Ratelimit invalid-fence message (bsc#1012628). - drm/msm/adreno: a5xx_power: Don't apply A540 lm_setup to other GPUs (bsc#1012628). - drm/msm/dsi_pll_7nm: Fix variable usage for pll_lockdet_rate (bsc#1012628). - mac80211: choose first enabled channel for monitor (bsc#1012628). - mac80211: Check crypto_aead_encrypt for errors (bsc#1012628). - can: kvaser_usb: Add support for USBcan Pro 4xHS (bsc#1012628). - net: arcnet: com20020 fix error handling (bsc#1012628). - mISDN: fix crash in fritzpci (bsc#1012628). - kunit: tool: Fix a python tuple typing error (bsc#1012628). - net: pxa168_eth: Fix a potential data race in pxa168_eth_remove (bsc#1012628). - net/mlx5e: Enforce minimum value check for ICOSQ size (bsc#1012628). - bpf, x86: Use kvmalloc_array instead kmalloc_array in bpf_jit_comp (bsc#1012628). - platform/x86: intel-hid: Support Lenovo ThinkPad X1 Tablet Gen 2 (bsc#1012628). - drm/msm: a6xx: Make sure the SQE microcode is safe (bsc#1012628). - bus: ti-sysc: Fix warning on unbind if reset is not deasserted (bsc#1012628). - ARM: dts: am33xx: add aliases for mmc interfaces (bsc#1012628). - commit 0ea11a6 - rpm/check-for-config-changes: Also ignore AS_VERSION added in 5.12. - commit bd64cb2 - post.sh: Return an error when module update fails (bsc#1047233 bsc#1184388). - commit 18f65df - Update patches.kernel.org/5.11.9-100-perf-x86-intel-Fix-a-crash-caused-by-zero-PEBS.patch (bsc#1012628 CVE-2021-28971 bsc#1184196). Add a CVE reference. - commit 1b6b086 - Linux 5.11.12 (bsc#1012628). - arm64: mm: correct the inside linear map range during hotplug check (bsc#1012628). - virtiofs: Fail dax mount if device does not support it (bsc#1012628). - ext4: shrink race window in ext4_should_retry_alloc() (bsc#1012628). - ext4: fix bh ref count on error paths (bsc#1012628). - fs: nfsd: fix kconfig dependency warning for NFSD_V4 (bsc#1012628). - rpc: fix NULL dereference on kmalloc failure (bsc#1012628). - iomap: Fix negative assignment to unsigned sis->pages in iomap_swapfile_activate (bsc#1012628). - ASoC: rt1015: fix i2c communication error (bsc#1012628). - ASoC: rt5640: Fix dac- and adc- vol-tlv values being off by a factor of 10 (bsc#1012628). - ASoC: rt5651: Fix dac- and adc- vol-tlv values being off by a factor of 10 (bsc#1012628). - ASoC: sgtl5000: set DAP_AVC_CTRL register to correct default value on probe (bsc#1012628). - ASoC: es8316: Simplify adc_pga_gain_tlv table (bsc#1012628). - ASoC: soc-core: Prevent warning if no DMI table is present (bsc#1012628). - ASoC: cs42l42: Fix Bitclock polarity inversion (bsc#1012628). - ASoC: cs42l42: Fix channel width support (bsc#1012628). - ASoC: cs42l42: Fix mixer volume control (bsc#1012628). - ASoC: cs42l42: Always wait at least 3ms after reset (bsc#1012628). - NFSD: fix error handling in NFSv4.0 callbacks (bsc#1012628). - ASoC: mediatek: mt8192: fix tdm out data is valid on rising edge (bsc#1012628). - kernel: freezer should treat PF_IO_WORKER like PF_KTHREAD for freezing (bsc#1012628). - vhost: Fix vhost_vq_reset() (bsc#1012628). - io_uring: fix ->flags races by linked timeouts (bsc#1012628). - io_uring: halt SQO submission on ctx exit (bsc#1012628). - scsi: st: Fix a use after free in st_open() (bsc#1012628). - scsi: qla2xxx: Fix broken #endif placement (bsc#1012628). - staging: comedi: cb_pcidas: fix request_irq() warn (bsc#1012628). - staging: comedi: cb_pcidas64: fix request_irq() warn (bsc#1012628). - ASoC: rt5659: Update MCLK rate in set_sysclk() (bsc#1012628). - ASoC: rt711: add snd_soc_component remove callback (bsc#1012628). - thermal/core: Add NULL pointer check before using cooling device stats (bsc#1012628). - locking/ww_mutex: Simplify use_ww_ctx & ww_ctx handling (bsc#1012628). - locking/ww_mutex: Fix acquire/release imbalance in ww_acquire_init()/ww_acquire_fini() (bsc#1012628). - nvmet-tcp: fix kmap leak when data digest in use (bsc#1012628). - io_uring: imply MSG_NOSIGNAL for send[msg]()/recv[msg]() calls (bsc#1012628). - Revert "PM: ACPI: reboot: Use S5 for reboot" (bsc#1012628). - nouveau: Skip unvailable ttm page entries (bsc#1012628). - static_call: Align static_call_is_init() patching condition (bsc#1012628). - ext4: do not iput inode under running transaction in ext4_rename() (bsc#1012628). - io_uring: call req_set_fail_links() on short send[msg]()/recv[msg]() with MSG_WAITALL (bsc#1012628). - net: mvpp2: fix interrupt mask/unmask skip condition (bsc#1012628). - mptcp: deliver ssk errors to msk (bsc#1012628). - mptcp: fix poll after shutdown (bsc#1012628). - mptcp: init mptcp request socket earlier (bsc#1012628). - mptcp: add a missing retransmission timer scheduling (bsc#1012628). - flow_dissector: fix TTL and TOS dissection on IPv4 fragments (bsc#1012628). - mptcp: fix DATA_FIN processing for orphaned sockets (bsc#1012628). - mptcp: provide subflow aware release function (bsc#1012628). - can: dev: move driver related infrastructure into separate subdir (bsc#1012628). - net: introduce CAN specific pointer in the struct net_device (bsc#1012628). - mptcp: fix race in release_cb (bsc#1012628). - net: bonding: fix error return code of bond_neigh_init() (bsc#1012628). - mptcp: fix bit MPTCP_PUSH_PENDING tests (bsc#1012628). - can: tcan4x5x: fix max register value (bsc#1012628). - brcmfmac: clear EAP/association status bits on linkdown events (bsc#1012628). - ath11k: add ieee80211_unregister_hw to avoid kernel crash caused by NULL pointer (bsc#1012628). - rtw88: coex: 8821c: correct antenna switch function (bsc#1012628). - netdevsim: dev: Initialize FIB module after debugfs (bsc#1012628). - iwlwifi: pcie: don't disable interrupts for reg_lock (bsc#1012628). - ath10k: hold RCU lock when calling ieee80211_find_sta_by_ifaddr() (bsc#1012628). - net: ethernet: aquantia: Handle error cleanup of start on open (bsc#1012628). - appletalk: Fix skb allocation size in loopback case (bsc#1012628). - net: ipa: remove two unused register definitions (bsc#1012628). - net: ipa: use a separate pointer for adjusted GSI memory (bsc#1012628). - net: ipa: fix register write command validation (bsc#1012628). - net: wan/lmc: unregister device when no matching device is found (bsc#1012628). - net: 9p: advance iov on empty read (bsc#1012628). - bpf: Remove MTU check in __bpf_skb_max_len (bsc#1012628). - ACPI: tables: x86: Reserve memory occupied by ACPI tables (bsc#1012628). - ACPI: processor: Fix CPU0 wakeup in acpi_idle_play_dead() (bsc#1012628). - ACPI: scan: Fix _STA getting called on devices with unmet dependencies (bsc#1012628). - ALSA: usb-audio: Apply sample rate quirk to Logitech Connect (bsc#1012628). - ALSA: hda: Re-add dropped snd_poewr_change_state() calls (bsc#1012628). - ALSA: hda: Add missing sanity checks in PM prepare/complete callbacks (bsc#1012628). - ALSA: hda/realtek: fix a determine_headset_type issue for a Dell AIO (bsc#1012628). - ALSA: hda/realtek: call alc_update_headset_mode() in hp_automute_hook (bsc#1012628). - ALSA: hda/realtek: fix mute/micmute LEDs for HP 640 G8 (bsc#1012628). - xtensa: fix uaccess-related livelock in do_page_fault (bsc#1012628). - xtensa: move coprocessor_flush to the .text section (bsc#1012628). - KVM: SVM: load control fields from VMCB12 before checking them (bsc#1012628). - KVM: SVM: ensure that EFER.SVME is set when running nested guest or on nested vmexit (bsc#1012628). - PM: runtime: Fix race getting/putting suppliers at probe (bsc#1012628). - PM: runtime: Fix ordering in pm_runtime_get_suppliers() (bsc#1012628). - tracing: Fix stack trace event size (bsc#1012628). - s390/vdso: copy tod_steering_delta value to vdso_data page (bsc#1012628). - s390/vdso: fix tod_steering_delta type (bsc#1012628). - drm/ttm: make ttm_bo_unpin more defensive (bsc#1012628). - mm: fix race by making init_zero_pfn() early_initcall (bsc#1012628). - drm/amdkfd: dqm fence memory corruption (bsc#1012628). - drm/amd/pm: no need to force MCLK to highest when no display connected (bsc#1012628). - drm/amdgpu/vangogh: don't check for dpm in is_dpm_running when in suspend (bsc#1012628). - drm/amdgpu: fix offset calculation in amdgpu_vm_bo_clear_mappings() (bsc#1012628). - drm/amdgpu: Set a suitable dev_info.gart_page_size (bsc#1012628). - drm/amdgpu: check alignment on CPU page for bo map (bsc#1012628). - reiserfs: update reiserfs_xattrs_initialized() condition (bsc#1012628). - drm/imx: fix memory leak when fails to init (bsc#1012628). - drm/tegra: dc: Restore coupling of display controllers (bsc#1012628). - drm/tegra: sor: Grab runtime PM reference across reset (bsc#1012628). - vfio/nvlink: Add missing SPAPR_TCE_IOMMU depends (bsc#1012628). - pinctrl: microchip-sgpio: Fix wrong register offset for IRQ trigger (bsc#1012628). - pinctrl: rockchip: fix restore error in resume (bsc#1012628). - pinctrl: qcom: sc7280: Fix SDC_QDSD_PINGROUP and UFS_RESET offsets (bsc#1012628). - pinctrl: qcom: sc7280: Fix SDC1_RCLK configurations (bsc#1012628). - pinctrl: qcom: lpass lpi: use default pullup/strength values (bsc#1012628). - pinctrl: qcom: fix unintentional string concatenation (bsc#1012628). - extcon: Add stubs for extcon_register_notifier_all() functions (bsc#1012628). - extcon: Fix error handling in extcon_dev_register (bsc#1012628). - firmware: stratix10-svc: reset COMMAND_RECONFIG_FLAG_PARTIAL to 0 (bsc#1012628). - powerpc/pseries/mobility: use struct for shared state (bsc#1012628). - powerpc/pseries/mobility: handle premature return from H_JOIN (bsc#1012628). - usb: dwc3: pci: Enable dis_uX_susphy_quirk for Intel Merrifield (bsc#1012628). - video: hyperv_fb: Fix a double free in hvfb_probe (bsc#1012628). - powerpc/mm/book3s64: Use the correct storage key value when calling H_PROTECT (bsc#1012628). - usbip: vhci_hcd fix shift out-of-bounds in vhci_hub_control() (bsc#1012628). - USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem (bsc#1012628). - usb: musb: Fix suspend with devices connected for a64 (bsc#1012628). - usb: xhci-mtk: fix broken streams issue on 0.96 xHCI (bsc#1012628). - cdc-acm: fix BREAK rx code path adding necessary calls (bsc#1012628). - USB: cdc-acm: untangle a circular dependency between callback and softint (bsc#1012628). - USB: cdc-acm: downgrade message to debug (bsc#1012628). - USB: cdc-acm: fix double free on probe failure (bsc#1012628). - USB: cdc-acm: fix use-after-free after probe failure (bsc#1012628). - usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference (bsc#1012628). - usb: dwc2: Fix HPRT0.PrtSusp bit setting for HiKey 960 board (bsc#1012628). - usb: dwc2: Prevent core suspend when port connection flag is 0 (bsc#1012628). - usb: dwc3: qcom: skip interconnect init for ACPI probe (bsc#1012628). - usb: dwc3: gadget: Clear DEP flags after stop transfers in ep disable (bsc#1012628). - soc: qcom-geni-se: Cleanup the code to remove proxy votes (bsc#1012628). - staging: rtl8192e: Fix incorrect source in memcpy() (bsc#1012628). - staging: rtl8192e: Change state information from u16 to u8 (bsc#1012628). - driver core: clear deferred probe reason on probe retry (bsc#1012628). - drivers: video: fbcon: fix NULL dereference in fbcon_cursor() (bsc#1012628). - riscv: evaluate put_user() arg before enabling user access (bsc#1012628). - io_uring: do ctx sqd ejection in a clear context (bsc#1012628). - Revert "kernel: freezer should treat PF_IO_WORKER like PF_KTHREAD for freezing" (bsc#1012628). - Revert "net: bonding: fix error return code of bond_neigh_init()" (bsc#1012628). - commit 92a542e - config.conf: reenable armv6/armv7 configs (all modules, otherwise same settings like arm64) - commit d115d63 - arm64: add debug config with KASAN enabled (bsc#1183716) - commit b68cba9 - firewire: nosy: Fix a use-after-free bug in nosy_ioctl() (CVE-2021-3483 bsc#1184393). - commit c90d8a9 - drm/i915: Fix invalid access to ACPI _DSM objects (bsc#1184074). - commit 6dbaa20 - arm64: enable and update config for 5.12 - commit 0a5586c - Update to 5.12-rc6 - commit b5f88e6 ==== libzypp ==== Version update (17.25.9 -> 17.25.10) - Properly handle permission denied when providing optional files (bsc#1185239) - Fix sevice detection with cgroupv2 (bsc#1184997) - version 17.25.10 (22) ==== open-iscsi ==== Subpackages: iscsiuio libopeniscsiusr0_2_0 - Local (SUSE) change: update iscsi.service so that it tries to logon to any "onboot" and firmware targets, in case a target was offline when booted but back up when the service is started. (bsc#1153806) - Merged with latest from upstream, which contains these fixes: * Add "no wait" option to iscsiadm firmware login * Check for ISCSI_ERR_ISCSID_NOTCONN in iscsistart * Log proper error message when AUTH failure occurs ==== python38 ==== Version update (3.8.8 -> 3.8.9) - Update to 3.8.9: - bpo#42988 (bsc#1183374) CVE-2021-3426: Remove the getfile feature of the pydoc module which could be abused to read arbitrary files on the disk (directory traversal vulnerability). Moreover, even source code of Python modules can contain sensitive data like passwords. Vulnerability reported by David Schwörer. - bpo-43285: ftplib no longer trusts the IP address value returned from the server in response to the PASV command by default. This prevents a malicious FTP server from using the response to probe IPv4 address and port combinations on the client network. - Code that requires the former vulnerable behavior may set a trust_server_pasv_ipv4_address attribute on their ftplib.FTP instances to True to re-enable it. - bpo-43439: Add audit hooks for gc.get_objects(), gc.get_referrers() and gc.get_referents(). Patch by Pablo Galindo. - bpo-43660: Fix crash that happens when replacing sys.stderr with a callable that can remove the object while an exception is being printed. Patch by Pablo Galindo. - bpo-35883: Python no longer fails at startup with a fatal error if a command line argument contains an invalid Unicode character. The Py_DecodeLocale() function now escapes byte sequences which would be decoded as Unicode characters outside the [U+0000; U+10ffff] range. - bpo-43406: Fix a possible race condition where PyErr_CheckSignals tries to execute a non-Python signal handler. - bpo-35930: Raising an exception raised in a ?future? instance will create reference cycles. - bpo-43577: Fix deadlock when using ssl.SSLContext debug callback with ssl.SSLContext.sni_callback(). - bpo-43423: subprocess.communicate() no longer raises an IndexError when there is an empty stdout or stderr IO buffer during a timeout on Windows. - bpo-27820: Fixed long-standing bug of smtplib.SMTP where doing AUTH LOGIN with initial_response_ok=False will fail. The cause is that SMTP.auth_login _always_ returns a password if provided with a challenge string, thus non-compliant with the standard for AUTH LOGIN. Also fixes bug with the test for smtpd. - bpo-43399: Fix ElementTree.extend not working on iterators when using the Python implementation - bpo-43316: The python -m gzip command line application now properly fails when detecting an unsupported extension. It exits with a non-zero exit code and prints an error message to stderr. - bpo-43260: Fix TextIOWrapper can not flush internal buffer forever after very large text is written. - bpo-42782: Fail fast in shutil.move() to avoid creating destination directories on failure. - bpo-37193: Fixed memory leak in socketserver.ThreadingMixIn introduced in Python 3.7. - bpo-43199: Answer ?Why is there no goto?? in the Design and History FAQ. - bpo-43407: Clarified that a result from time.monotonic(), time.perf_counter(), time.process_time(), or time.thread_time() can be compared with the result from any following call to the same function - not just the next immediate call. - bpo-27646: Clarify that ?yield from ? works with any iterable, not just iterators. - bpo-36346: Update some deprecated unicode APIs which are documented as ?will be removed in 4.0? to ?3.12?. See PEP 623 for detail. - bpo-37945: Fix test_getsetlocale_issue1813() of test_locale: skip the test if setlocale() fails. Patch by Victor Stinner. - bpo-41561: Add workaround for Ubuntu?s custom OpenSSL security level policy. - bpo-43631: Update macOS, Windows, and CI to OpenSSL 1.1.1k. - bpo-43617: Improve configure.ac: Check for presence of autoconf-archive package and remove our copies of M4 macros. - bpo-41837: Update macOS installer build to use OpenSSL 1.1.1j. - bpo-42225: Document that IDLE can fail on Unix either from misconfigured IP masquerage rules or failure displaying complex colored (non-ascii) characters. - bpo-43283: Document why printing to IDLE?s Shell is often slower than printing to a system terminal and that it can be made faster by pre-formatting a single string before printing. ==== python38-core ==== Version update (3.8.8 -> 3.8.9) Subpackages: libpython3_8-1_0 python38-base - Update to 3.8.9: - bpo#42988 (bsc#1183374) CVE-2021-3426: Remove the getfile feature of the pydoc module which could be abused to read arbitrary files on the disk (directory traversal vulnerability). Moreover, even source code of Python modules can contain sensitive data like passwords. Vulnerability reported by David Schwörer. - bpo-43285: ftplib no longer trusts the IP address value returned from the server in response to the PASV command by default. This prevents a malicious FTP server from using the response to probe IPv4 address and port combinations on the client network. - Code that requires the former vulnerable behavior may set a trust_server_pasv_ipv4_address attribute on their ftplib.FTP instances to True to re-enable it. - bpo-43439: Add audit hooks for gc.get_objects(), gc.get_referrers() and gc.get_referents(). Patch by Pablo Galindo. - bpo-43660: Fix crash that happens when replacing sys.stderr with a callable that can remove the object while an exception is being printed. Patch by Pablo Galindo. - bpo-35883: Python no longer fails at startup with a fatal error if a command line argument contains an invalid Unicode character. The Py_DecodeLocale() function now escapes byte sequences which would be decoded as Unicode characters outside the [U+0000; U+10ffff] range. - bpo-43406: Fix a possible race condition where PyErr_CheckSignals tries to execute a non-Python signal handler. - bpo-35930: Raising an exception raised in a ?future? instance will create reference cycles. - bpo-43577: Fix deadlock when using ssl.SSLContext debug callback with ssl.SSLContext.sni_callback(). - bpo-43423: subprocess.communicate() no longer raises an IndexError when there is an empty stdout or stderr IO buffer during a timeout on Windows. - bpo-27820: Fixed long-standing bug of smtplib.SMTP where doing AUTH LOGIN with initial_response_ok=False will fail. The cause is that SMTP.auth_login _always_ returns a password if provided with a challenge string, thus non-compliant with the standard for AUTH LOGIN. Also fixes bug with the test for smtpd. - bpo-43399: Fix ElementTree.extend not working on iterators when using the Python implementation - bpo-43316: The python -m gzip command line application now properly fails when detecting an unsupported extension. It exits with a non-zero exit code and prints an error message to stderr. - bpo-43260: Fix TextIOWrapper can not flush internal buffer forever after very large text is written. - bpo-42782: Fail fast in shutil.move() to avoid creating destination directories on failure. - bpo-37193: Fixed memory leak in socketserver.ThreadingMixIn introduced in Python 3.7. - bpo-43199: Answer ?Why is there no goto?? in the Design and History FAQ. - bpo-43407: Clarified that a result from time.monotonic(), time.perf_counter(), time.process_time(), or time.thread_time() can be compared with the result from any following call to the same function - not just the next immediate call. - bpo-27646: Clarify that ?yield from ? works with any iterable, not just iterators. - bpo-36346: Update some deprecated unicode APIs which are documented as ?will be removed in 4.0? to ?3.12?. See PEP 623 for detail. - bpo-37945: Fix test_getsetlocale_issue1813() of test_locale: skip the test if setlocale() fails. Patch by Victor Stinner. - bpo-41561: Add workaround for Ubuntu?s custom OpenSSL security level policy. - bpo-43631: Update macOS, Windows, and CI to OpenSSL 1.1.1k. - bpo-43617: Improve configure.ac: Check for presence of autoconf-archive package and remove our copies of M4 macros. - bpo-41837: Update macOS installer build to use OpenSSL 1.1.1j. - bpo-42225: Document that IDLE can fail on Unix either from misconfigured IP masquerage rules or failure displaying complex colored (non-ascii) characters. - bpo-43283: Document why printing to IDLE?s Shell is often slower than printing to a system terminal and that it can be made faster by pre-formatting a single string before printing. ==== shim ==== - Split the keys in vendor-dbx.bin to vendor-dbx-sles and vendor-dbx-opensuse for shim-sles and shim-opensuse to reduce the size of MokListXRT (bsc#1185261) + Also update generate-vendor-dbx.sh in dbx-cert.tar.xz ==== snapper ==== Subpackages: libsnapper5 - added systemd sandboxing for services ==== yomi-formula ==== Version update (0.0.1+git.1604593202.a2c22bf -> 0.0.1+git.1619170188.fa52819) - Update to version 0.0.1+git.1619170188.fa52819: * README: document ym.sshd parameter - Update to version 0.0.1+git.1614275707.786435e: * pillar: update to SLE-15-SP2 * fstab: do not mount while registering * devices: fix documentation * Adding a TOC * software: add recreatedb.sls for rpmdb migration * repository: workaround for boo#1178910 * software: separate repository.sls * network: generate persistent-net.rules ==== zypper ==== Version update (1.14.43 -> 1.14.44) Subpackages: zypper-needs-restarting - Rephrase needs-rebooting help and messages. Try to point out that the need to reboot was not necessarily triggered by the current transaction. - man page: Recommend the needs-rebooting command to test whether a system reboot is suggested. - patch: Let a patch's reboot-needed flag overrule included packages (bsc#1183268) - Quickfix setting "openSUSE_Tumbleweed" as default platform for "MicroOS" (bsc#1153687) This fixes the guessed platform for "obs:///" URLs. - Protect against strict/relaxed user umask via sudo (bsc#1183589) - zypper-log: protect against thread name indicators in a log. - xml summary: add solvables repository alias (bsc#1182372) - version 1.14.44