Packages changed: acl (2.2.53 -> 2.3.1) apparmor augeas branding-openSUSE ceph (16.2.3.26+g422932e923 -> 16.2.4.26+g555d38aa5a5) cilium cni cockpit (243 -> 245) dhcp (4.4.2 -> 4.4.2.P1) etcd (3.4.15 -> 3.4.16) filesystem flannel gcc11 (11.0.0+git183291 -> 11.1.1+git121) glib2 (2.68.1 -> 2.68.2) gnutls graphite2 haproxy (2.3.10+git0.4764f0e4e -> 2.4.0+git0.6cbbecf09) helm (3.5.2 -> 3.5.4) hwinfo (21.73 -> 21.74) installation-images-MicroOS (17.3 -> 17.6) issue-generator (1.12 -> 1.13) json-c kdump kernel-source (5.12.3 -> 5.12.4) krb5 kubernetes (1.21.0 -> 1.21.1) kubernetes1.20 (1.20.6 -> 1.20.7) kubernetes1.21 (1.21.0 -> 1.21.1) kubic-control (0.10.2 -> 0.11) less (581.2 -> 586) libX11 (1.7.0 -> 1.7.1) libapparmor libcontainers-common libepoxy (1.5.5 -> 1.5.8) libidn2 (2.3.0 -> 2.3.1) libqmi (1.28.2 -> 1.28.4) librsvg (2.50.5 -> 2.50.6) libsigc++2 (2.10.6 -> 2.10.7) libtirpc (1.3.1 -> 1.3.2) logrotate (3.18.0 -> 3.18.1) lua54 mozilla-nss (3.63.1 -> 3.64) multipath-tools (0.8.5+30+suse.633836e -> 0.8.6+10+suse.4771137) nfs-utils pango (1.48.4 -> 1.48.5) patterns-base patterns-microos permissions (1550_20210125 -> 1550_20210518) psmisc python-PyJWT (2.0.1 -> 2.1.0) python-asn1crypto python-distro python-idna python-jsonpatch (1.31 -> 1.32) python-jsonschema python-networkx (2.5 -> 2.5.1) python-oauthlib python-pyasn1 python-pytz rdma-core (33.1 -> 35.0) rpcbind (1.2.5 -> 1.2.6) rpm runc (1.0.0~rc94 -> 1.0.0~rc95) selinux-policy snapper sssd (2.4.2 -> 2.5.0) u-boot-rpiarm64 vim (8.2.2800 -> 8.2.2850) xfsprogs (5.11.0 -> 5.12.0) xmlsec1 (1.2.31 -> 1.2.32) yast2 (4.4.3 -> 4.4.5) zchunk (1.1.11 -> 1.1.14) zstd (1.4.9 -> 1.5.0) === Details === ==== acl ==== Version update (2.2.53 -> 2.3.1) - modernize spec-file (move license to licensedir) - Update to version 2.3.1 * Update German translation * getfacl: fix indent in --help output * getfacl: Add --one-file-system option, with this option getfacl will not cross mount points * Fix segfault on allocation failure * Avoid SIGSEGV with link-time optimisation enabled - Use SourceUrls ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils python3-apparmor - add abstractions-php8.diff to support PHP8 in abstractions/php (boo#1186267) ==== augeas ==== - Allow all printable ASCII characters in WPA-PSK definition * augeas-allow_printable_ASCII.patch * bsc#1185524 * Sourced from https://github.com/hercules-team/augeas/pull/723/commits * Credit to Michal Filka ==== branding-openSUSE ==== Subpackages: grub2-branding-openSUSE - Enable grub2-branding on riscv64 ==== ceph ==== Version update (16.2.3.26+g422932e923 -> 16.2.4.26+g555d38aa5a5) Subpackages: ceph-common libcephfs2 librados2 librbd1 librgw2 python3-ceph-argparse python3-ceph-common python3-cephfs python3-rados python3-rbd python3-rgw - Update to 16.2.4-26-g555d38aa5a5: + rebased on top of v16.2.4 tag https://ceph.io/releases/v16-2-4-pacific-released/ * mgr/dashboard: fix base-href: revert it to previous approach * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509) * mgr/dashboard: fix set-ssl-certificate{,-key} commands * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531) * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524) * systemd: remove ProtectClock=true for ceph-osd@.service ==== cilium ==== - Add cilium-no-ineffassign-in-root.patch: Do not run ineffassign in the source root, where no go files exist. - Set GO111MODULE=auto to build with go1.16+ * Default changed to GO111MODULE=on in go1.16 * Set temporarily until using upstream release with go.mod * Add BuildRequires: golang(API) >= 1.13 recommended dependency expression ==== cni ==== - use buildmode=pie (cnitool is installed into sbindir) - Set GO111MODULE=auto to build with go1.16+ * Default changed to GO111MODULE=on in go1.16 * Set temporarily until using upstream release with go.mod * Drop BuildRequires: golang-packaging not currently using macros * Add BuildRequires: golang(API) >= 1.13 recommended dependency expression ==== cockpit ==== Version update (243 -> 245) Subpackages: cockpit-bridge cockpit-system - new version 255 https://cockpit-project.org/blog/cockpit-245.html - new version 244.1 https://cockpit-project.org/blog/cockpit-244.html - enable SELinux ==== dhcp ==== Version update (4.4.2 -> 4.4.2.P1) Subpackages: dhcp-client - Add -fno-strict-aliasing to CFLAGS to avoid a segfault in dhcpd (boo#1186631). - Update to 4.4.2-P1: * CVE-2021-25217, bsc#1186382: A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient. - Error out, if %version and %isc_version are not in sync. ==== etcd ==== Version update (3.4.15 -> 3.4.16) - Update to version 3.4.16: * version: 3.4.16 * Backport-3.4 exclude alarms from health check conditionally * etcdserver/mvcc: update trace.Step condition * Backport-3.4 etcdserver/util.go: reduce memory when logging range requests * .travis,Makefile,functional: Bump go 1.12 version to v1.12.17 * integration: Fix 'go test --tags cluster_proxy --timeout=30m -v ./integration/...' * pkg/tlsutil: Adjust cipher suites for go 1.12 * Fix pkg/tlsutil (test) to not fail on 386. * bill-of-materials.json: Update golang.org/x/sys * .travis,test: Turn race off in Travis for go version 1.15 * integration : fix TestTLSClientCipherSuitesMismatch in go1.13 * vendor: Run go mod vendor * go.mod,go.sum: Bump github.com/creack/pty that includes patch * go.mod,go.sum: Comply with go v1.15 * etcdserver,wal: Convert int to string using rune() * integration,raft,tests: Comply with go v1.15 gofmt * .travis.yml: Test with go v1.15.11 * pkpkg/testutil/leak.go: Allowlist created by testing.runTests.func1 * vendor: Run go mod vendor * go.sum, go.mod: Run go mod tidy with go 1.12 * go.mod: Pin go to 1.12 version * etcdserver: fix incorrect metrics generated when clients cancel watches * integration: relax leader timeout from 3s to 4s * etcdserver: when using --unsafe-no-fsync write data * server: Added config parameter experimental-warning-apply-duration * etcdserver: Fix PeerURL validation ==== filesystem ==== - temporarily revert icon and fillup dir to 0755 until fallout is fixed (bsc#1184786) - Remove /usr/share/java, as it was moved to javapackages-filesystem long ago - temporarily mark appdata and applications 0755 again until fallout is fixed (bsc#1184786) - make restricteddir and datadir readonly (bsc#1184786) - also make includedir, mandir, licensedir readonly (bsc#1184786) ==== flannel ==== - Sync manifest with upstream (0.13.0 release). Includes the following changes: * Fix typo and invalid indent in kube-flannel.yml * Use stable os and arch label for node * set priorityClassName to system-node-critical * Add NET_RAW capability to support cri-o * Use multi-arch Docker images in the Kubernetes manifest - Set GO111MODULE=auto to build with go1.16+ * Default changed to GO111MODULE=on in go1.16 * Set temporarily until using upstream version with go.mod ==== gcc11 ==== Version update (11.0.0+git183291 -> 11.1.1+git121) Subpackages: libgcc_s1 libgomp1 libstdc++6 - Update to gcc-11 branch head (23855a176609fe8dda6abaf2b2), git121 - Disable build-id generation on non-glibc targeting cross compilers. - Update to gcc-11 branch head (cd0a059bd384da58d43674496a7), git67 * Includes GCC 11.1 release - Drop upstreamed gcc11-no-offload.patch. - Update to gcc-11 branch head (7a7fc01b9d20afb1a2b805d93cb), git31 * Includes GCC 11.1 RC2 - Add gcc11-no-offload.patch and gcc11-amdgcn-disable-hot-cold-partitioning.patch. - Enable gfortran for offload compilers. - BuildRequire procps from gcc11-testresults if we test go. - Force using llvm11 for amdgcn offloading since llvm12 doesn't yet work. Package expanded symlinks so concurrent installs do not pull in another llvm-mc. - Add gcc11-gdwarf-4-default.patch to default to DWARF4 generation in SLES15 and older. - Update to gcc-11 branch head (27350b77a92062667427100afb4), git10 * Includes GCC 11.1 RC1 - Bump to 49813aad3292f7f2bef69206274da78a9a7116ed. - Disable nvptx offloading on aarch64 since it doesn't work. - Bump to a87d3f964df31d4fbceb822c6d293e85c117d992. - Remove gcc48-remove-mpfr-2.4.0-requirement.patch which does no longer apply. - Arrange for a C++ 11 capable host compiler to be available. - Do not require ISL for cross compiler builds on old distros. - Bump to 123b3e03c911a43054c1f88f5d3110e1d084dd4e. - Update embedded newlib version from 3.3.0 to 4.1.0. - Pack %{GCCDIST}-gcc%{binsuffix}. - Add a new dependency for libgccjit. - New package, inherits from gcc10 * gcc-add-defaultsspec.diff, add the ability to provide a specs file that is read by default * tls-no-direct.diff, avoid direct %fs references on x86 to not slow down Xen * gcc43-no-unwind-tables.diff, do not produce unwind tables for CRT files * gcc41-ppc32-retaddr.patch, fix expansion of __builtin_return_addr for ppc, just a testcase * gcc44-textdomain.patch, make translation files version specific and adjust textdomain to find them * gcc44-rename-info-files.patch, fix cross-references in info files when renaming them to be version specific * gcc48-libstdc++-api-reference.patch, fix link in the installed libstdc++ html documentation * gcc48-remove-mpfr-2.4.0-requirement.patch, make GCC work with earlier mpfr versions on old products * gcc5-no-return-gcc43-workaround.patch, make build work with host gcc 4.3 * gcc7-remove-Wexpansion-to-defined-from-Wextra.patch, removes new warning from -Wextra * gcc7-avoid-fixinc-error.diff * gcc9-reproducible-builds-buildid-for-checksum.patch * gcc9-reproducible-builds.patch * gcc10-amdgcn-llvm-as.patch * gcc10-foffload-default.patch - libgccjit subpackage is added. - HWASAN is built for aarch64 target. ==== glib2 ==== Version update (2.68.1 -> 2.68.2) Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 - Update to version 2.68.2: + Fix building third-party projects against GLib on CentOS 7. + Bugs fixed: - json-glib does not build with glib 2.68.1. - gmacros: check that __cplusplus or _MSC_VER is defined. - gmacros: missing check if __STDC_VERSION__ is defined. - Backport !2078 ?gthreadedresolver: don't ignore flags in lookup_by_name_with_flags? to glib-2-68. ==== gnutls ==== - Compute the FIPS hmac file without re-defining the __os_install_post macro, use the brp-50-generate-fips-hmac script instead. [bsc#1184555] - Require the main package in devel and lib packages as the default priorities are now set via crypto-policies. [bsc#1183082] ==== graphite2 ==== - Define conditionally make_build to fix build on systems that do not have that macro ==== haproxy ==== Version update (2.3.10+git0.4764f0e4e -> 2.4.0+git0.6cbbecf09) - Update to version 2.4.0+git0.6cbbecf09: https://www.haproxy.com/blog/announcing-haproxy-2-4/ for all the details see /usr/share/doc/packages/haproxy/CHANGELOG - refreshed patches to apply cleanly again haproxy-1.6.0-makefile_lib.patch haproxy-1.6.0-sec-options.patch lua54.patch ==== helm ==== Version update (3.5.2 -> 3.5.4) - Update to version 3.5.4: * Add/update deprecation notices * Wrap validation error instead of recreating * Move default to avoid nil check * Add name validation rules for object kinds * Use kube libraries v0.20.4 - Update to version 3.5.3: * Fix the example for --time-format flag * Improve the console output for resource policy keep to align with helm2. * test(pkg/storage): Verify that storage.Create returns an error if it fails to clean up least-recent release versions * fix(pkg/storage): If storage.Create fails to clean up recent release versions, return an error * fix(test): Increase golangci-lint timeout * fix release sha256 * Fix-9253: Change the deprecated charts repo URL in release notes * Update default ingress values section to correspond with template * use kube libraries v0.20.2 ==== hwinfo ==== Version update (21.73 -> 21.74) - merge gh#openSUSE/hwinfo#98 - update pci and usb ids - 21.74 ==== installation-images-MicroOS ==== Version update (17.3 -> 17.6) - merge gh#openSUSE/installation-images#513 - Keep /usr/lib/ld-* also if lib64 exists - Use ld*so* as glob for the runtime linker - Keep /usr/lib/ld*so* also if lib64 exists - 17.6 - merge gh#openSUSE/installation-images#512 - Fix previous typo adding chipidea modules - 17.5 - merge gh#openSUSE/installation-images#511 - Add chipidea modules (bsc#1184867) - 17.4 ==== issue-generator ==== Version update (1.12 -> 1.13) - Update to version 1.13 - SELinux: Do not call agetty --reload [bsc#1186178] ==== json-c ==== - Add -std=gnu99 to fix build with some gcc versions ==== kdump ==== - Fix use of DNS in the panic environment (bsc#1183070): * kdump-avoid-endless-loop-on-EAI_AGAIN.patch: Avoid an endless loop when resolving a hostname fails with EAI_AGAIN. * kdump-install-real-resolv.conf.patch: Install /etc/resolv.conf using its resolved path. - kdump-fix-incorrect-exit-code-checking.patch: Fix incorrect exit code checking after "local" with assignment (bsc#1184616, LTC#192282) - kdump-do-not-iterate-past-end-of-string.patch: Fix a crash caused by iterating past end of string (bsc#1186037). ==== kernel-source ==== Version update (5.12.3 -> 5.12.4) - can: isotp: prevent race between isotp_bind() and isotp_setsockopt() (CVE-2021-32606 bsc#1185953 bsc#1185564). - commit cf6ea2f - usb: pci-quirks: disable D3cold on xhci suspend for s2idle on AMD Renoire (bsc#1185840). - ACPI / idle: override c-state latency when not in conformance with s0ix (bsc#1185840). - ACPI: PM: s2idle: Add missing LPS0 functions for AMD (bsc#1185840). - commit 152b604 - ipc/mqueue, msg, sem: Avoid relying on a stack reference past its expiry (bsc#1185988). - commit 2d71c6c - drm/i915/gem: Pin the L-shape quirked object as unshrinkable (bsc#1185624 bsc#1186075). - commit 6e53ea2 - serial: stm32: fix threaded interrupt handling (git-fixes). - usb: typec: tcpm: Fix error while calculating PPS out values (git-fixes). - RDMA/core: Unify RoCE check and re-factor code (git-fixes). - commit a5aafd4 - Linux 5.12.4 (bsc#1012628). - Bluetooth: verify AMP hci_chan before amp_destroy (bsc#1012628). - bluetooth: eliminate the potential race condition when removing the HCI controller (bsc#1012628). - net/nfc: fix use-after-free llcp_sock_bind/connect (bsc#1012628). - io_uring: truncate lengths larger than MAX_RW_COUNT on provide buffers (bsc#1012628). - coresight: etm-perf: Fix define build issue when built as module (bsc#1012628). - software node: Allow node addition to already existing device (bsc#1012628). - Revert "USB: cdc-acm: fix rounding error in TIOCSSERIAL" (bsc#1012628). - usb: roles: Call try_module_get() from usb_role_switch_find_by_fwnode() (bsc#1012628). - tty: moxa: fix TIOCSSERIAL jiffies conversions (bsc#1012628). - tty: amiserial: fix TIOCSSERIAL permission check (bsc#1012628). - USB: serial: usb_wwan: fix TIOCSSERIAL jiffies conversions (bsc#1012628). - staging: greybus: uart: fix TIOCSSERIAL jiffies conversions (bsc#1012628). - USB: serial: ti_usb_3410_5052: fix TIOCSSERIAL permission check (bsc#1012628). - staging: fwserial: fix TIOCSSERIAL jiffies conversions (bsc#1012628). - tty: moxa: fix TIOCSSERIAL permission check (bsc#1012628). - tty: mxser: fix TIOCSSERIAL jiffies conversions (bsc#1012628). - staging: fwserial: fix TIOCSSERIAL permission check (bsc#1012628). - tty: mxser: fix TIOCSSERIAL permission check (bsc#1012628). - drm: bridge: fix LONTIUM use of mipi_dsi_() functions (bsc#1012628). - usb: typec: tcpm: Address incorrect values of tcpm psy for fixed supply (bsc#1012628). - usb: typec: tcpm: Address incorrect values of tcpm psy for pps supply (bsc#1012628). - usb: typec: tcpm: update power supply once partner accepts (bsc#1012628). - USB: serial: xr: fix CSIZE handling (bsc#1012628). - usb: xhci-mtk: remove or operator for setting schedule parameters (bsc#1012628). - usb: xhci-mtk: improve bandwidth scheduling with TT (bsc#1012628). - ASoC: samsung: tm2_wm5110: check of of_parse return value (bsc#1012628). - ASoC: Intel: kbl_da7219_max98927: Fix kabylake_ssp_fixup function (bsc#1012628). - ASoC: tlv320aic32x4: Register clocks before registering component (bsc#1012628). - ASoC: tlv320aic32x4: Increase maximum register in regmap (bsc#1012628). - MIPS: pci-mt7620: fix PLL lock check (bsc#1012628). - MIPS: pci-rt2880: fix slot 0 configuration (bsc#1012628). - FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR (bsc#1012628). - PCI: Allow VPD access for QLogic ISP2722 (bsc#1012628). - KVM: x86: Defer the MMU unload to the normal path on an global INVPCID (bsc#1012628). - PCI: xgene: Fix cfg resource mapping (bsc#1012628). - PCI: keystone: Let AM65 use the pci_ops defined in pcie-designware-host.c (bsc#1012628). - PM / devfreq: Unlock mutex and free devfreq struct in error path (bsc#1012628). - soc/tegra: regulators: Fix locking up when voltage-spread is out of range (bsc#1012628). - iio: inv_mpu6050: Fully validate gyro and accel scale writes (bsc#1012628). - iio: magnetometer: yas530: Include right header (bsc#1012628). - iio: sx9310: Fix write_.._debounce() (bsc#1012628). - iio:accel:adis16201: Fix wrong axis assignment that prevents loading (bsc#1012628). - iio:adc:ad7476: Fix remove handling (bsc#1012628). - iio: magnetometer: yas530: Fix return value on error path (bsc#1012628). - iio: sx9310: Fix access to variable DT array (bsc#1012628). - iio: hid-sensor-rotation: Fix quaternion data not correct (bsc#1012628). - sc16is7xx: Defer probe if device read fails (bsc#1012628). - phy: cadence: Sierra: Fix PHY power_on sequence (bsc#1012628). - misc: lis3lv02d: Fix false-positive WARN on various HP models (bsc#1012628). - phy: ti: j721e-wiz: Invoke wiz_init() before of_platform_device_create() (bsc#1012628). - misc: vmw_vmci: explicitly initialize vmci_notify_bm_set_msg struct (bsc#1012628). - misc: vmw_vmci: explicitly initialize vmci_datagram payload (bsc#1012628). - selinux: add proper NULL termination to the secclass_map permissions (bsc#1012628). - x86, sched: Treat Intel SNC topology as default, COD as exception (bsc#1012628). - async_xor: increase src_offs when dropping destination page (bsc#1012628). - md/bitmap: wait for external bitmap writes to complete during tear down (bsc#1012628). - md-cluster: fix use-after-free issue when removing rdev (bsc#1012628). - md: split mddev_find (bsc#1012628). - md: factor out a mddev_find_locked helper from mddev_find (bsc#1012628). - md: md_open returns -EBUSY when entering racing area (bsc#1012628). - md: Fix missing unused status line of /proc/mdstat (bsc#1012628). - MIPS: generic: Update node names to avoid unit addresses (bsc#1012628). - mt76: mt7615: use ieee80211_free_txskb() in mt7615_tx_token_put() (bsc#1012628). - ipw2x00: potential buffer overflow in libipw_wx_set_encodeext() (bsc#1012628). - net: xilinx: drivers need/depend on HAS_IOMEM (bsc#1012628). - cfg80211: scan: drop entry from hidden_list on overflow (bsc#1012628). - rtw88: Fix array overrun in rtw_get_tx_power_params() (bsc#1012628). - mt76: fix potential DMA mapping leak (bsc#1012628). - FDDI: defxx: Make MMIO the configuration default except for EISA (bsc#1012628). - drm/qxl: use ttm bo priorities (bsc#1012628). - drm/ingenic: Fix non-OSD mode (bsc#1012628). - drm/panfrost: Clear MMU irqs before handling the fault (bsc#1012628). - drm/panfrost: Don't try to map pages that are already mapped (bsc#1012628). - drm/radeon: fix copy of uninitialized variable back to userspace (bsc#1012628). - drm/dp_mst: Revise broadcast msg lct & lcr (bsc#1012628). - drm/dp_mst: Set CLEAR_PAYLOAD_ID_TABLE as broadcast (bsc#1012628). - drm: bridge: fix ANX7625 use of mipi_dsi_() functions (bsc#1012628). - drm: bridge/panel: Cleanup connector on bridge detach (bsc#1012628). - drm/amd/display: Reject non-zero src_y and src_x for video planes (bsc#1012628). - drm/amdgpu: fix concurrent VM flushes on Vega/Navi v2 (bsc#1012628). - drm/amdgpu: add new MC firmware for Polaris12 32bit ASIC (bsc#1012628). - drm/amdgpu: fix r initial values (bsc#1012628). - drm/amdgpu: Init GFX10_ADDR_CONFIG for VCN v3 in DPG mode (bsc#1012628). - ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC882 Clevo quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC269 HP quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC269 Acer quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC269 Dell quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC269 ASUS quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order remaining ALC269 quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC662 quirk table entries (bsc#1012628). - ALSA: hda/realtek: Remove redundant entry for ALC861 Haier/Uniwill devices (bsc#1012628). - ALSA: hda/realtek: Fix speaker amp on HP Envy AiO 32 (bsc#1012628). - KVM: s390: VSIE: correctly handle MVPG when in VSIE (bsc#1012628). - KVM: s390: split kvm_s390_logical_to_effective (bsc#1012628). - KVM: s390: fix guarded storage control register handling (bsc#1012628). - s390: fix detection of vector enhancements facility 1 vs. vector packed decimal facility (bsc#1012628). - KVM: s390: VSIE: fix MVPG handling for prefixing and MSO (bsc#1012628). - KVM: s390: split kvm_s390_real_to_abs (bsc#1012628). - KVM: s390: extend kvm_s390_shadow_fault to return entry pointer (bsc#1012628). - KVM: x86/mmu: Alloc page for PDPTEs when shadowing 32-bit NPT with 64-bit (bsc#1012628). - KVM: x86/xen: Drop RAX[63:32] when processing hypercall (bsc#1012628). - KVM: X86: Fix failure to boost kernel lock holder candidate in SEV-ES guests (bsc#1012628). - KVM: x86: Properly handle APF vs disabled LAPIC situation (bsc#1012628). - KVM: x86: Check CR3 GPA for validity regardless of vCPU mode (bsc#1012628). - KVM: x86: Remove emulator's broken checks on CR0/CR3/CR4 loads (bsc#1012628). - KVM: nSVM: Set the shadow root level to the TDP level for nested NPT (bsc#1012628). - KVM: SVM: Don't strip the C-bit from CR2 on #PF interception (bsc#1012628). - KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs (bsc#1012628). - KVM: SVM: Do not set sev->es_active until KVM_SEV_ES_INIT completes (bsc#1012628). - KVM: SVM: Do not allow SEV/SEV-ES initialization after vCPUs are created (bsc#1012628). - KVM: SVM: Inject #GP on guest MSR_TSC_AUX accesses if RDTSCP unsupported (bsc#1012628). - KVM: nVMX: Defer the MMU reload to the normal path on an EPTP switch (bsc#1012628). - KVM: VMX: Truncate GPR value for DR and CR reads in !64-bit mode (bsc#1012628). - KVM: nVMX: Truncate bits 63:32 of VMCS field on nested check in !64-bit (bsc#1012628). - KVM: nVMX: Truncate base/index GPR value on address calc in !64-bit (bsc#1012628). - KVM: arm/arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST read (bsc#1012628). - KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU (bsc#1012628). - KVM: Stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1012628). - KVM: arm64: Support PREL/PLT relocs in EL2 code (bsc#1012628). - KVM: arm64: Fully zero the vcpu state on reset (bsc#1012628). - KVM: arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST_REGION read (bsc#1012628). - KVM: selftests: Sync data verify of dirty logging with guest sync (bsc#1012628). - KVM: selftests: Always run vCPU thread with blocked SIG_IPI (bsc#1012628). - Revert "drivers/net/wan/hdlc_fr: Fix a double free in pvc_xmit" (bsc#1012628). - Revert "i3c master: fix missing destroy_workqueue() on error in i3c_master_register" (bsc#1012628). - mfd: stmpe: Revert "Constify static struct resource" (bsc#1012628). - ovl: fix missing revert_creds() on error path (bsc#1012628). - usb: gadget: pch_udc: Revert d3cb25a12138 completely (bsc#1012628). - Revert "tools/power turbostat: adjust for temperature offset" (bsc#1012628). - firmware: xilinx: Fix dereferencing freed memory (bsc#1012628). - firmware: xilinx: Remove zynqmp_pm_get_eemi_ops() in IS_REACHABLE(CONFIG_ZYNQMP_FIRMWARE) (bsc#1012628). - x86/vdso: Use proper modifier for len's format specifier in extract() (bsc#1012628). - fpga: fpga-mgr: xilinx-spi: fix error messages on -EPROBE_DEFER (bsc#1012628). - crypto: keembay-ocs-hcu - Fix error return code in kmb_ocs_hcu_probe() (bsc#1012628). - crypto: keembay-ocs-aes - Fix error return code in kmb_ocs_aes_probe() (bsc#1012628). - crypto: sun8i-ss - fix result memory leak on error path (bsc#1012628). - memory: gpmc: fix out of bounds read and dereference on gpmc_cs[] (bsc#1012628). - ARM: dts: exynos: correct fuel gauge interrupt trigger level on GT-I9100 (bsc#1012628). - ARM: dts: exynos: correct fuel gauge interrupt trigger level on P4 Note family (bsc#1012628). - ARM: dts: exynos: correct fuel gauge interrupt trigger level on Midas family (bsc#1012628). - ARM: dts: exynos: correct MUIC interrupt trigger level on Midas family (bsc#1012628). - ARM: dts: exynos: correct PMIC interrupt trigger level on Midas family (bsc#1012628). - ARM: dts: exynos: correct PMIC interrupt trigger level on Odroid X/U3 family (bsc#1012628). - ARM: dts: exynos: correct PMIC interrupt trigger level on P4 Note family (bsc#1012628). - ARM: dts: exynos: correct PMIC interrupt trigger level on SMDK5250 (bsc#1012628). - ARM: dts: exynos: correct PMIC interrupt trigger level on Snow (bsc#1012628). - ARM: dts: s5pv210: correct fuel gauge interrupt trigger level on Fascinate family (bsc#1012628). - ARM: dts: renesas: Add mmc aliases into R-Car Gen2 board dts files (bsc#1012628). - arm64: dts: renesas: Add mmc aliases into board dts files (bsc#1012628). - bus: ti-sysc: Fix initializing module_pa for modules without sysc register (bsc#1012628). - x86/platform/uv: Set section block size for hubless architectures (bsc#1012628). - serial: stm32: fix probe and remove order for dma (bsc#1012628). - serial: stm32: fix startup by enabling usart for reception (bsc#1012628). - serial: stm32: fix incorrect characters on console (bsc#1012628). - serial: stm32: fix TX and RX FIFO thresholds (bsc#1012628). - serial: stm32: fix a deadlock condition with wakeup event (bsc#1012628). - serial: stm32: fix wake-up flag handling (bsc#1012628). - serial: stm32: fix a deadlock in set_termios (bsc#1012628). - serial: liteuart: fix return value check in liteuart_probe() (bsc#1012628). - serial: stm32: fix tx dma completion, release channel (bsc#1012628). - serial: stm32: call stm32_transmit_chars locked (bsc#1012628). - serial: stm32: fix FIFO flush in startup and set_termios (bsc#1012628). - serial: stm32: add FIFO flush when port is closed (bsc#1012628). - serial: stm32: fix tx_empty condition (bsc#1012628). - usb: typec: tcpm: Wait for vbus discharge to VSAFE0V before toggling (bsc#1012628). - usb: typec: tcpci: Check ROLE_CONTROL while interpreting CC_STATUS (bsc#1012628). - usb: typec: tps6598x: Fix return value check in tps6598x_probe() (bsc#1012628). - usb: typec: stusb160x: fix return value check in stusb160x_probe() (bsc#1012628). - mfd: intel_pmt: Fix nuisance messages and handling of disabled capabilities (bsc#1012628). - regmap: set debugfs_name to NULL after it is freed (bsc#1012628). - spi: rockchip: avoid objtool warning (bsc#1012628). - arm64: dts: broadcom: bcm4908: fix switch parent node name (bsc#1012628). - mtd: rawnand: fsmc: Fix error code in fsmc_nand_probe() (bsc#1012628). - mtd: rawnand: brcmnand: fix OOB R/W with Hamming ECC (bsc#1012628). - mtd: Handle possible -EPROBE_DEFER from parse_mtd_partitions() (bsc#1012628). - mtd: rawnand: qcom: Return actual error code instead of -ENODEV (bsc#1012628). - mtd: don't lock when recursively deleting partitions (bsc#1012628). - mtd: parsers: qcom: Fix error condition (bsc#1012628). - mtd: parsers: qcom: incompatible with spi-nor 4k sectors (bsc#1012628). - mtd: maps: fix error return code of physmap_flash_remove() (bsc#1012628). - ARM: dts: stm32: fix usart 2 & 3 pinconf to wake up with flow control (bsc#1012628). - arm64: dts: ti: k3-j721e-main: Update the speed modes supported and their itap delay values for MMCSD subsystems (bsc#1012628). - iio: adis16480: fix pps mode sampling frequency math (bsc#1012628). - arm64: dts: qcom: sc7180: trogdor: Fix trip point config of charger thermal zone (bsc#1012628). - arm64: dts: qcom: sm8250: Fix level triggered PMU interrupt polarity (bsc#1012628). - arm64: dts: qcom: sm8350: Fix level triggered PMU interrupt polarity (bsc#1012628). - arm64: dts: qcom: sm8250: Fix timer interrupt to specify EL2 physical timer (bsc#1012628). - arm64: dts: qcom: sc7180: Avoid glitching SPI CS at bootup on trogdor (bsc#1012628). - arm64: dts: qcom: sdm845: fix number of pins in 'gpio-ranges' (bsc#1012628). - arm64: dts: qcom: sm8150: fix number of pins in 'gpio-ranges' (bsc#1012628). - arm64: dts: qcom: sm8250: fix number of pins in 'gpio-ranges' (bsc#1012628). - arm64: dts: qcom: sm8350: fix number of pins in 'gpio-ranges' (bsc#1012628). - arm64: dts: qcom: db845c: fix correct powerdown pin for WSA881x (bsc#1012628). - crypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to map (bsc#1012628). - spi: stm32: drop devres version of spi_register_master (bsc#1012628). - arm64: dts: broadcom: bcm4908: set Asus GT-AC5300 port 7 PHY mode (bsc#1012628). - regulator: bd9576: Fix return from bd957x_probe() (bsc#1012628). - arm64: dts: renesas: r8a77980: Fix vin4-7 endpoint binding (bsc#1012628). - selftests/x86: Add a missing .note.GNU-stack section to thunks_32.S (bsc#1012628). - crypto: arm/blake2s - fix for big endian (bsc#1012628). - spi: stm32: Fix use-after-free on unbind (bsc#1012628). - Drivers: hv: vmbus: Drop error message when 'No request id available' (bsc#1012628). - staging: qlge: fix an error code in probe() (bsc#1012628). - x86/microcode: Check for offline CPUs before requesting new microcode (bsc#1012628). - usb: host: ehci-tegra: Select USB_GADGET Kconfig option (bsc#1012628). - devtmpfs: fix placement of complete() call (bsc#1012628). - usb: gadget: pch_udc: Replace cpu_to_le32() by lower_32_bits() (bsc#1012628). - usb: gadget: pch_udc: Check if driver is present before calling - >setup() (bsc#1012628). - usb: gadget: pch_udc: Check for DMA mapping error (bsc#1012628). - usb: gadget: pch_udc: Initialize device pointer before use (bsc#1012628). - usb: gadget: pch_udc: Provide a GPIO line used on Intel Minnowboard (v1) (bsc#1012628). - crypto: ccp - fix command queuing to TEE ring buffer (bsc#1012628). - crypto: qat - don't release uninitialized resources (bsc#1012628). - crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init (bsc#1012628). - fotg210-udc: Fix DMA on EP0 for length > max packet size (bsc#1012628). - fotg210-udc: Fix EP0 IN requests bigger than two packets (bsc#1012628). - fotg210-udc: Remove a dubious condition leading to fotg210_done (bsc#1012628). - fotg210-udc: Mask GRP2 interrupts we don't handle (bsc#1012628). - fotg210-udc: Don't DMA more than the buffer can take (bsc#1012628). - fotg210-udc: Complete OUT requests on short packets (bsc#1012628). - usb: gadget: s3c: Fix incorrect resources releasing (bsc#1012628). - usb: gadget: s3c: Fix the error handling path in 's3c2410_udc_probe()' (bsc#1012628). - dt-bindings: serial: stm32: Use 'type: object' instead of false for 'additionalProperties' (bsc#1012628). - mtd: require write permissions for locking and badblock ioctls (bsc#1012628). - arm64: dts: renesas: r8a779a0: Fix PMU interrupt (bsc#1012628). - arm64: dts: mt8183: Add gce client reg for display subcomponents (bsc#1012628). - arm64: dts: mt8173: fix wrong power-domain phandle of pmic (bsc#1012628). - bus: qcom: Put child node before return (bsc#1012628). - arm64: dts: qcom: sm8250: fix display nodes (bsc#1012628). - soundwire: bus: Fix device found flag correctly (bsc#1012628). - soc: mediatek: pm-domains: Fix missing error code in scpsys_add_subdomain() (bsc#1012628). - phy: ti: j721e-wiz: Delete "clk_div_sel" clk provider during cleanup (bsc#1012628). - phy: ralink: phy-mt7621-pci: fix XTAL bitmask (bsc#1012628). - phy: marvell: ARMADA375_USBCLUSTER_PHY should not default to y, unconditionally (bsc#1012628). - phy: ralink: phy-mt7621-pci: fix return value check in mt7621_pci_phy_probe() (bsc#1012628). - phy: ingenic: Fix a typo in ingenic_usb_phy_probe() (bsc#1012628). - arm64: dts: mediatek: fix reset GPIO level on pumpkin (bsc#1012628). - NFSv4.2: fix copy stateid copying for the async copy (bsc#1012628). - crypto: poly1305 - fix poly1305_core_setkey() declaration (bsc#1012628). - crypto: qat - fix error path in adf_isr_resource_alloc() (bsc#1012628). - usb: gadget: aspeed: fix dma map failure (bsc#1012628). - USB: gadget: udc: fix wrong pointer passed to IS_ERR() and PTR_ERR() (bsc#1012628). - drivers: nvmem: Fix voltage settings for QTI qfprom-efuse (bsc#1012628). - nvmem: rmem: fix undefined reference to memremap (bsc#1012628). - driver core: platform: Declare early_platform_cleanup() prototype (bsc#1012628). - ARM: dts: qcom: msm8974-lge-nexus5: correct fuel gauge interrupt trigger level (bsc#1012628). - ARM: dts: qcom: msm8974-samsung-klte: correct fuel gauge interrupt trigger level (bsc#1012628). - memory: pl353: fix mask of ECC page_size config register (bsc#1012628). - soundwire: stream: fix memory leak in stream config error path (bsc#1012628). - m68k: mvme147,mvme16x: Don't wipe PCC timer config bits (bsc#1012628). - firmware: qcom_scm: Make __qcom_scm_is_call_available() return bool (bsc#1012628). - firmware: qcom_scm: Reduce locking section for __get_convention() (bsc#1012628). - firmware: qcom_scm: Workaround lack of "is available" call on SC7180 (bsc#1012628). - iio: adc: Kconfig: make AD9467 depend on ADI_AXI_ADC symbol (bsc#1012628). - mtd: rawnand: gpmi: Fix a double free in gpmi_nand_init (bsc#1012628). - irqchip/gic-v3: Fix OF_BAD_ADDR error handling (bsc#1012628). - staging: comedi: tests: ni_routes_test: Fix compilation error (bsc#1012628). - staging: rtl8192u: Fix potential infinite loop (bsc#1012628). - staging: fwserial: fix TIOCSSERIAL implementation (bsc#1012628). - staging: fwserial: fix TIOCGSERIAL implementation (bsc#1012628). - staging: greybus: uart: fix unprivileged TIOCCSERIAL (bsc#1012628). - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (bsc#1012628). - soc: qcom: pdr: Fix error return code in pdr_register_listener (bsc#1012628). - PM / devfreq: Use more accurate returned new_freq as resume_freq (bsc#1012628). - clocksource/drivers/timer-ti-dm: Fix posted mode status check order (bsc#1012628). - clocksource/drivers/timer-ti-dm: Add missing set_state_oneshot_stopped (bsc#1012628). - clocksource/drivers/ingenic_ost: Fix return value check in ingenic_ost_probe() (bsc#1012628). - spi: Fix use-after-free with devm_spi_alloc_* (bsc#1012628). - spi: fsl: add missing iounmap() on error in of_fsl_spi_probe() (bsc#1012628). - soc: qcom: mdt_loader: Validate that p_filesz < p_memsz (bsc#1012628). - soc: qcom: mdt_loader: Detect truncated read of segments (bsc#1012628). - PM: runtime: Replace inline function pm_runtime_callbacks_present() (bsc#1012628). - cpuidle: Fix ARM_QCOM_SPM_CPUIDLE configuration (bsc#1012628). - ACPI: CPPC: Replace cppc_attr with kobj_attribute (bsc#1012628). - crypto: allwinner - add missing CRYPTO_ prefix (bsc#1012628). - crypto: sun8i-ss - Fix memory leak of pad (bsc#1012628). - crypto: sa2ul - Fix memory leak of rxd (bsc#1012628). - crypto: qat - Fix a double free in adf_create_ring (bsc#1012628). - cpufreq: armada-37xx: Fix setting TBG parent for load levels (bsc#1012628). - clk: mvebu: armada-37xx-periph: remove .set_parent method for CPU PM clock (bsc#1012628). - cpufreq: armada-37xx: Fix the AVS value for load L1 (bsc#1012628). - clk: mvebu: armada-37xx-periph: Fix switching CPU freq from 250 Mhz to 1 GHz (bsc#1012628). - clk: mvebu: armada-37xx-periph: Fix workaround for switching from L1 to L0 (bsc#1012628). - cpufreq: armada-37xx: Fix driver cleanup when registration failed (bsc#1012628). - cpufreq: armada-37xx: Fix determining base CPU frequency (bsc#1012628). - spi: spi-zynqmp-gqspi: use wait_for_completion_timeout to make zynqmp_qspi_exec_op not interruptible (bsc#1012628). - spi: spi-zynqmp-gqspi: add mutex locking for exec_op (bsc#1012628). - spi: spi-zynqmp-gqspi: transmit dummy circles by using the controller's internal functionality (bsc#1012628). - spi: spi-zynqmp-gqspi: fix incorrect operating mode in zynqmp_qspi_read_op (bsc#1012628). - spi: fsl-lpspi: Fix PM reference leak in lpspi_prepare_xfer_hardware() (bsc#1012628). - usb: gadget: r8a66597: Add missing null check on return from platform_get_resource (bsc#1012628). - USB: cdc-acm: fix unprivileged TIOCCSERIAL (bsc#1012628). - USB: cdc-acm: fix TIOCGSERIAL implementation (bsc#1012628). - tty: actually undefine superseded ASYNC flags (bsc#1012628). - tty: fix return value for unsupported ioctls (bsc#1012628). - tty: fix return value for unsupported termiox ioctls (bsc#1012628). - serial: core: return early on unsupported ioctls (bsc#1012628). - firmware: qcom-scm: Fix QCOM_SCM configuration (bsc#1012628). - node: fix device cleanups in error handling code (bsc#1012628). - crypto: chelsio - Read rxchannel-id from firmware (bsc#1012628). - usbip: vudc: fix missing unlock on error in usbip_sockfd_store() (bsc#1012628). - m68k: Add missing mmap_read_lock() to sys_cacheflush() (bsc#1012628). - usb: cdnsp: Fixes issue with Configure Endpoint command (bsc#1012628). - spi: spi-zynqmp-gqspi: Fix missing unlock on error in zynqmp_qspi_exec_op() (bsc#1012628). - memory: renesas-rpc-if: fix possible NULL pointer dereference of resource (bsc#1012628). - memory: samsung: exynos5422-dmc: handle clk_set_parent() failure (bsc#1012628). - security: keys: trusted: fix TPM2 authorizations (bsc#1012628). - char: tpm: fix error return code in tpm_cr50_i2c_tis_recv() (bsc#1012628). - platform/x86: pmc_atom: Match all Beckhoff Automation baytrail boards with critclk_systems DMI table (bsc#1012628). - usb: typec: tcpm: Honour pSnkStdby requirement during negotiation (bsc#1012628). - spi: spi-zynqmp-gqspi: Fix runtime PM imbalance in zynqmp_qspi_probe (bsc#1012628). - ARM: dts: aspeed: Rainier: Fix humidity sensor bus address (bsc#1012628). - Drivers: hv: vmbus: Use after free in __vmbus_open() (bsc#1012628). - crypto: arm64/aes-ce - deal with oversight in new CTR carry code (bsc#1012628). - spi: spi-zynqmp-gqspi: fix clk_enable/disable imbalance issue (bsc#1012628). - spi: spi-zynqmp-gqspi: fix hang issue when suspend/resume (bsc#1012628). - spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op (bsc#1012628). - spi: spi-zynqmp-gqspi: return -ENOMEM if dma_map_single fails (bsc#1012628). - btrfs: zoned: move log tree node allocation out of log_root_tree->log_mutex (bsc#1012628). - btrfs: zoned: bail out in btrfs_alloc_chunk for bad input (bsc#1012628). - x86/platform/uv: Fix !KEXEC build failure (bsc#1012628). - hwmon: (pmbus/pxe1610) don't bail out when not all pages are active (bsc#1012628). - platform/surface: aggregator: fix a bit test (bsc#1012628). - Drivers: hv: vmbus: Increase wait time for VMbus unload (bsc#1012628). - PM: hibernate: x86: Use crc32 instead of md5 for hibernation e820 integrity check (bsc#1012628). - usb: dwc2: Fix host mode hibernation exit with remote wakeup flow (bsc#1012628). - usb: dwc2: Fix hibernation between host and device modes (bsc#1012628). - ttyprintk: Add TTY hangup callback (bsc#1012628). - serial: omap: don't disable rs485 if rts gpio is missing (bsc#1012628). - serial: omap: fix rs485 half-duplex filtering (bsc#1012628). - spi: tools: make a symbolic link to the header file spi.h (bsc#1012628). - xen-blkback: fix compatibility bug with single page rings (bsc#1012628). - soc: aspeed: fix a ternary sign expansion bug (bsc#1012628). - drm/tilcdc: send vblank event when disabling crtc (bsc#1012628). - drm/stm: Fix bus_flags handling (bsc#1012628). - drm/amd/display: Fix off by one in hdmi_14_process_transaction() (bsc#1012628). - drm/mcde/panel: Inverse misunderstood flag (bsc#1012628). - scsi: lpfc: Fix null pointer dereference in lpfc_prep_els_iocb() (bsc#1012628). - sched/fair: Fix shift-out-of-bounds in load_balance() (bsc#1012628). - printk: limit second loop of syslog_print_all (bsc#1012628). - afs: Fix updating of i_mode due to 3rd party change (bsc#1012628). - rcu: Remove spurious instrumentation_end() in rcu_nmi_enter() (bsc#1012628). - media: mtk: fix mtk-smi dependency (bsc#1012628). - media: vivid: fix assignment of dev->fbuf_out_flags (bsc#1012628). - media: saa7134: use sg_dma_len when building pgtable (bsc#1012628). - media: saa7146: use sg_dma_len when building pgtable (bsc#1012628). - media: omap4iss: return error code when omap4iss_get() failed (bsc#1012628). - media: rkisp1: rsz: crash fix when setting src format (bsc#1012628). - media: aspeed: fix clock handling logic (bsc#1012628). - drm/panel-simple: Undo enable if HPD never asserts (bsc#1012628). - power: supply: bq27xxx: fix sign of current_now for newer ICs (bsc#1012628). - drm/probe-helper: Check epoch counter in output_poll_execute() (bsc#1012628). - media: venus: core: Fix some resource leaks in the error path of 'venus_probe()' (bsc#1012628). - media: platform: sunxi: sun6i-csi: fix error return code of sun6i_video_start_streaming() (bsc#1012628). - media: m88ds3103: fix return value check in m88ds3103_probe() (bsc#1012628). - media: docs: Fix data organization of MEDIA_BUS_FMT_RGB101010_1X30 (bsc#1012628). - media: [next] staging: media: atomisp: fix memory leak of object flash (bsc#1012628). - media: atomisp: Fixed error handling path (bsc#1012628). - media: m88rs6000t: avoid potential out-of-bounds reads on arrays (bsc#1012628). - media: atomisp: Fix use after free in atomisp_alloc_css_stat_bufs() (bsc#1012628). - x86/kprobes: Retrieve correct opcode for group instruction (bsc#1012628). - drm/amdkfd: fix build error with AMD_IOMMU_V2=m (bsc#1012628). - drm/amdkfd: Fix recursive lock warnings (bsc#1012628). - drm/amd/display: Free local data after use (bsc#1012628). - of: overlay: fix for_each_child.cocci warnings (bsc#1012628). - scsi: qla2xxx: Check kzalloc() return value (bsc#1012628). - x86/kprobes: Fix to check non boostable prefixes correctly (bsc#1012628). - drm/omap: dsi: Add missing IRQF_ONESHOT (bsc#1012628). - selftests: fix prepending $(OUTPUT) to $(TEST_PROGS) (bsc#1012628). - pata_arasan_cf: fix IRQ check (bsc#1012628). - pata_ipx4xx_cf: fix IRQ check (bsc#1012628). - sata_mv: add IRQ checks (bsc#1012628). - ata: libahci_platform: fix IRQ check (bsc#1012628). - seccomp: Fix CONFIG tests for Seccomp_filters (bsc#1012628). - drm/mediatek: Switch the hdmi bridge ops to the atomic versions (bsc#1012628). - drm/mediatek: Don't support hdmi connector creation (bsc#1012628). - nvme-tcp: block BH in sk state_change sk callback (bsc#1012628). - nvmet-tcp: fix incorrect locking in state_change sk callback (bsc#1012628). - clk: imx: Fix reparenting of UARTs not associated with stdout (bsc#1012628). - power: supply: bq25980: Move props from battery node (bsc#1012628). - nvme: retrigger ANA log update if group descriptor isn't found (bsc#1012628). - media: ccs: Fix sub-device function (bsc#1012628). - media: ipu3-cio2: Fix pixel-rate derived link frequency (bsc#1012628). - media: i2c: imx219: Move out locking/unlocking of vflip and hflip controls from imx219_set_stream (bsc#1012628). - media: i2c: imx219: Balance runtime PM use-count (bsc#1012628). - media: v4l2-ctrls.c: fix race condition in hdl->requests list (bsc#1012628). - media: rkvdec: Do not require all controls to be present in every request (bsc#1012628). - vfio/fsl-mc: Re-order vfio_fsl_mc_probe() (bsc#1012628). - vfio/pci: Move VGA and VF initialization to functions (bsc#1012628). - vfio/pci: Re-order vfio_pci_probe() (bsc#1012628). - drm/msm: Fix debugfs deadlock (bsc#1012628). - drm/msm/dpu: enable DPU_SSPP_QOS_8LVL for SM8250 (bsc#1012628). - vfio/mdev: Do not allow a mdev_type to have a NULL parent pointer (bsc#1012628). - clk: zynqmp: move zynqmp_pll_set_mode out of round_rate callback (bsc#1012628). - clk: zynqmp: pll: add set_pll_mode to check condition in zynqmp_pll_enable (bsc#1012628). - drm: xlnx: zynqmp: fix a memset in zynqmp_dp_train() (bsc#1012628). - media: i2c: rdamc21: Fix warning on u8 cast (bsc#1012628). - clk: qcom: a7-pll: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - clk: qcom: a53-pll: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - clk: qcom: apss-ipq-pll: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - drm/amd/display: use GFP_ATOMIC in dcn20_resource_construct (bsc#1012628). - drm/amd/display: check fb of primary plane (bsc#1012628). - drm/radeon: Fix a missing check bug in radeon_dp_mst_detect() (bsc#1012628). - bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1012628). - clk: uniphier: Fix potential infinite loop (bsc#1012628). - scsi: pm80xx: Increase timeout for pm80xx mpi_uninit_check() (bsc#1012628). - scsi: pm80xx: Fix potential infinite loop (bsc#1012628). - scsi: ufs: ufshcd-pltfrm: Fix deferred probing (bsc#1012628). - scsi: hisi_sas: Fix IRQ checks (bsc#1012628). - scsi: jazz_esp: Add IRQ check (bsc#1012628). - scsi: sun3x_esp: Add IRQ check (bsc#1012628). - scsi: sni_53c710: Add IRQ check (bsc#1012628). - scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1012628). - mailbox: sprd: Introduce refcnt when clients requests/free channels (bsc#1012628). - mfd: stm32-timers: Avoid clearing auto reload register (bsc#1012628). - nvmet-tcp: fix a segmentation fault during io parsing error (bsc#1012628). - nvme-pci: don't simple map sgl when sgls are disabled (bsc#1012628). - media: meson-ge2d: fix rotation parameters (bsc#1012628). - media: cedrus: Fix H265 status definitions (bsc#1012628). - HSI: core: fix resource leaks in hsi_add_client_from_dt() (bsc#1012628). - x86/events/amd/iommu: Fix sysfs type mismatch (bsc#1012628). - perf/amd/uncore: Fix sysfs type mismatch (bsc#1012628). - io_uring: fix overflows checks in provide buffers (bsc#1012628). - block/rnbd-clt-sysfs: Remove copy buffer overlap in rnbd_clt_get_path_name (bsc#1012628). - sched/debug: Fix cgroup_path[] serialization (bsc#1012628). - kthread: Fix PF_KTHREAD vs to_kthread() race (bsc#1012628). - ataflop: potential out of bounds in do_format() (bsc#1012628). - ataflop: fix off by one in ataflop_probe() (bsc#1012628). - drivers/block/null_blk/main: Fix a double free in null_init (bsc#1012628). - xsk: Respect device's headroom and tailroom on generic xmit path (bsc#1012628). - HID: plantronics: Workaround for double volume key presses (bsc#1012628). - perf symbols: Fix dso__fprintf_symbols_by_name() to return the number of printed chars (bsc#1012628). - ASoC: Intel: boards: sof-wm8804: add check for PLL setting (bsc#1012628). - ASoC: Intel: Skylake: Compile when any configuration is selected (bsc#1012628). - RDMA/mlx5: Zero out ODP related items in the mlx5_ib_mr (bsc#1012628). - RDMA/mlx5: Fix query RoCE port (bsc#1012628). - RDMA/mlx5: Fix mlx5 rates to IB rates map (bsc#1012628). - net/mlx5: DR, Add missing vhca_id consume from STEv1 (bsc#1012628). - wilc1000: write value to WILC_INTR2_ENABLE register (bsc#1012628). - KVM: x86/mmu: Retry page faults that hit an invalid memslot (bsc#1012628). - Bluetooth: avoid deadlock between hci_dev->lock and socket lock (bsc#1012628). - net: lapbether: Prevent racing when checking whether the netif is running (bsc#1012628). - libbpf: Add explicit padding to bpf_xdp_set_link_opts (bsc#1012628). - bpftool: Fix maybe-uninitialized warnings (bsc#1012628). - iommu: Check dev->iommu in iommu_dev_xxx functions (bsc#1012628). - iommu/dma: Resurrect the "forcedac" option (bsc#1012628). - iommu/vt-d: Reject unsupported page request modes (bsc#1012628). - ASoC: tegra30: i2s: Restore hardware state on runtime PM resume (bsc#1012628). - net: dsa: bcm_sf2: add function finding RGMII register (bsc#1012628). - net: dsa: bcm_sf2: fix BCM4908 RGMII reg(s) (bsc#1012628). - selftests/bpf: Re-generate vmlinux.h and BPF skeletons if bpftool changed (bsc#1012628). - libbpf: Add explicit padding to btf_dump_emit_type_decl_opts (bsc#1012628). - powerpc/mm: Move the linear_mapping_mutex to the ifdef where it is used (bsc#1012628). - powerpc/fadump: Mark fadump_calculate_reserve_size as __init (bsc#1012628). - powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1012628). - MIPS: fix local_irq_{disable,enable} in asmmacro.h (bsc#1012628). - ima: Fix the error code for restoring the PCR value (bsc#1012628). - inet: use bigger hash table for IP ID generation (bsc#1012628). - pinctrl: pinctrl-single: remove unused parameter (bsc#1012628). - pinctrl: pinctrl-single: fix pcs_pin_dbg_show() when bits_per_mux is not zero (bsc#1012628). - MIPS: loongson64: fix bug when PAGE_SIZE > 16KB (bsc#1012628). - ASoC: wm8960: Remove bitclk relax condition in wm8960_configure_sysclk (bsc#1012628). - iommu/arm-smmu-v3: add bit field SFM into GERROR_ERR_MASK (bsc#1012628). - RDMA/mlx5: Fix drop packet rule in egress table (bsc#1012628). - IB/isert: Fix a use after free in isert_connect_request (bsc#1012628). - powerpc/64s: Fix hash fault to use TRAP accessor (bsc#1012628). - powerpc: Fix HAVE_HARDLOCKUP_DETECTOR_ARCH build configuration (bsc#1012628). - MIPS/bpf: Enable bpf_probe_read{, str}() on MIPS again (bsc#1012628). - gpio: guard gpiochip_irqchip_add_domain() with GPIOLIB_IRQCHIP (bsc#1012628). - fs: dlm: fix missing unlock on error in accept_from_sock() (bsc#1012628). - ASoC: q6afe-clocks: fix reprobing of the driver (bsc#1012628). - ALSA: core: remove redundant spin_lock pair in snd_card_disconnect (bsc#1012628). - net: phy: lan87xx: fix access to wrong register of LAN87xx (bsc#1012628). - udp: skip L4 aggregation for UDP tunnel packets (bsc#1012628). - udp: never accept GSO_FRAGLIST packets (bsc#1012628). - powerpc/pseries: Only register vio drivers if vio bus exists (bsc#1012628). - net/tipc: fix missing destroy_workqueue() on error in tipc_crypto_start() (bsc#1012628). - bug: Remove redundant condition check in report_bug (bsc#1012628). - RDMA/core: Fix corrupted SL on passive side (bsc#1012628). - nfc: pn533: prevent potential memory corruption (bsc#1012628). - net: hns3: Limiting the scope of vector_ring_chain variable (bsc#1012628). - mips: bmips: fix syscon-reboot nodes (bsc#1012628). - KVM: arm64: Fix error return code in init_hyp_mode() (bsc#1012628). - iommu/vt-d: Don't set then clear private data in prq_event_thread() (bsc#1012628). - iommu: Fix a boundary issue to avoid performance drop (bsc#1012628). - iommu/vt-d: Report right snoop capability when using FL for IOVA (bsc#1012628). - iommu/vt-d: Report the right page fault address (bsc#1012628). - iommu/vt-d: Remove WO permissions on second-level paging entries (bsc#1012628). - iommu/vt-d: Invalidate PASID cache when root/context entry changed (bsc#1012628). - ALSA: usb-audio: Add error checks for usb_driver_claim_interface() calls (bsc#1012628). - HID: lenovo: Use brightness_set_blocking callback for setting LEDs brightness (bsc#1012628). - HID: lenovo: Fix lenovo_led_set_tp10ubkbd() error handling (bsc#1012628). - HID: lenovo: Check hid_get_drvdata() returns non NULL in lenovo_event() (bsc#1012628). - HID: lenovo: Map mic-mute button to KEY_F20 instead of KEY_MICMUTE (bsc#1012628). - KVM: arm64: Initialize VCPU mdcr_el2 before loading it (bsc#1012628). - ASoC: simple-card: fix possible uninitialized single_cpu local variable (bsc#1012628). - liquidio: Fix unintented sign extension of a left shift of a u16 (bsc#1012628). - IB/hfi1: Use kzalloc() for mmu_rb_handler allocation (bsc#1012628). - powerpc/64s: Fix pte update for kernel memory on radix (bsc#1012628). - powerpc/pseries: Add key to flags in pSeries_lpar_hpte_updateboltedpp() (bsc#1012628). - powerpc/64s: Use htab_convert_pte_flags() in hash__mark_rodata_ro() (bsc#1012628). - powerpc/perf: Fix PMU constraint check for EBB events (bsc#1012628). - powerpc: iommu: fix build when neither PCI or IBMVIO is set (bsc#1012628). - mac80211: bail out if cipher schemes are invalid (bsc#1012628). - perf vendor events amd: Fix broken L2 Cache Hits from L2 HWPF metric (bsc#1012628). - RDMA/hns: Fix missing assignment of max_inline_data (bsc#1012628). - xfs: fix return of uninitialized value in variable error (bsc#1012628). - rtw88: Fix an error code in rtw_debugfs_set_rsvd_page() (bsc#1012628). - mt7601u: fix always true expression (bsc#1012628). - mt76: mt7615: fix tx skb dma unmap (bsc#1012628). - mt76: mt7915: fix tx skb dma unmap (bsc#1012628). - mt76: mt7921: fix suspend/resume sequence (bsc#1012628). - mt76: mt7921: fix memory leak in mt7921_coredump_work (bsc#1012628). - mt76: connac: fix up the setting for ht40 mode in mt76_connac_mcu_uni_add_bss (bsc#1012628). - mt76: mt7921: fixup rx bitrate statistics (bsc#1012628). - mt76: mt7615: fix memory leak in mt7615_coredump_work (bsc#1012628). - mt76: mt7921: fix aggr length histogram (bsc#1012628). - mt76: mt7915: fix aggr len debugfs node (bsc#1012628). - mt76: mt7921: fix stats register definitions (bsc#1012628). - mt76: mt7615: fix TSF configuration (bsc#1012628). - mt76: mt7615: fix mib stats counter reporting to mac80211 (bsc#1012628). - mt76: mt7915: fix mib stats counter reporting to mac80211 (bsc#1012628). - mt76: connac: fix kernel warning adding monitor interface (bsc#1012628). - mt76: check return value of mt76_txq_send_burst in mt76_txq_schedule_list (bsc#1012628). - mt76: mt7921: fix the base of PCIe interrupt (bsc#1012628). - mt76: mt7921: fix the base of the dynamic remap (bsc#1012628). - mt76: mt7915: fix rxrate reporting (bsc#1012628). - mt76: mt7915: fix txrate reporting (bsc#1012628). - mt76: mt7663: fix when beacon filter is being applied (bsc#1012628). - mt76: mt7663s: make all of packets 4-bytes aligned in sdio tx aggregation (bsc#1012628). - mt76: mt7663s: fix the possible device hang in high traffic (bsc#1012628). - mt76: mt7615: cleanup mcu tx queue in mt7615_dma_reset() (bsc#1012628). - mt76: mt7915: cleanup mcu tx queue in mt7915_dma_reset() (bsc#1012628). - mt76: mt7921: always wake the device in mt7921_remove_interface (bsc#1012628). - mt76: mt7921: fix inappropriate WoW setup with the missing ARP informaiton (bsc#1012628). - mt76: mt7921: fix the dwell time control (bsc#1012628). - KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit (bsc#1012628). - ovl: show "userxattr" in the mount data (bsc#1012628). - ovl: invalidate readdir cache on changes to dir with origin (bsc#1012628). - RDMA/qedr: Fix error return code in qedr_iw_connect() (bsc#1012628). - IB/hfi1: Fix error return code in parse_platform_config() (bsc#1012628). - RDMA/bnxt_re: Fix error return code in bnxt_qplib_cq_process_terminal() (bsc#1012628). - cxgb4: Fix unintentional sign extension issues (bsc#1012628). - net: thunderx: Fix unintentional sign extension issue (bsc#1012628). - mt76: mt7921: fix kernel crash when the firmware fails to download (bsc#1012628). - RDMA/srpt: Fix error return code in srpt_cm_req_recv() (bsc#1012628). - RDMA/rtrs-clt: destroy sysfs after removing session from active list (bsc#1012628). - pinctrl: at91-pio4: Fix slew rate disablement (bsc#1012628). - i2c: cadence: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: img-scb: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: imx: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: omap: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: sprd: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: stm32f7: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: xiic: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: cadence: add IRQ check (bsc#1012628). - i2c: emev2: add IRQ check (bsc#1012628). - i2c: jz4780: add IRQ check (bsc#1012628). - i2c: mlxbf: add IRQ check (bsc#1012628). - i2c: rcar: add IRQ check (bsc#1012628). - i2c: sh7760: add IRQ check (bsc#1012628). - fuse: fix matching of FUSE_DEV_IOC_CLONE command (bsc#1012628). - iwlwifi: rs-fw: don't support stbc for HE 160 (bsc#1012628). - iwlwifi: dbg: disable ini debug in 9000 family and below (bsc#1012628). - powerpc/xive: Drop check on irq_data in xive_core_debug_show() (bsc#1012628). - powerpc/xive: Fix xmon command "dxi" (bsc#1012628). - powerpc/syscall: switch user_exit_irqoff and trace_hardirqs_off order (bsc#1012628). - ASoC: ak5558: correct reset polarity (bsc#1012628). - net/mlx5: Fix bit-wise and with zero (bsc#1012628). - net/packet: remove data races in fanout operations (bsc#1012628). - drm/i915/gvt: Fix error code in intel_gvt_init_device() (bsc#1012628). - iommu/vt-d: Fix an error handling path in 'intel_prepare_irq_remapping()' (bsc#1012628). - iommu/amd: Put newline after closing bracket in warning (bsc#1012628). - perf beauty: Fix fsconfig generator (bsc#1012628). - drm/amdgpu: fix an error code in init_pmu_entry_by_type_and_add() (bsc#1012628). - drm/amd/pm: fix error code in smu_set_power_limit() (bsc#1012628). - MIPS: pci-legacy: stop using of_pci_range_to_resource (bsc#1012628). - powerpc/pseries: extract host bridge from pci_bus prior to bus removal (bsc#1012628). - iommu/mediatek: Always enable the clk on resume (bsc#1012628). - mptcp: fix format specifiers for unsigned int (bsc#1012628). - powerpc/smp: Reintroduce cpu_core_mask (bsc#1012628). - KVM: x86: dump_vmcs should not assume GUEST_IA32_EFER is valid (bsc#1012628). - rtlwifi: 8821ae: upgrade PHY and RF parameters (bsc#1012628). - wlcore: fix overlapping snprintf arguments in debugfs (bsc#1012628). - i2c: sh7760: fix IRQ error path (bsc#1012628). - i2c: mediatek: Fix wrong dma sync flag (bsc#1012628). - mwl8k: Fix a double Free in mwl8k_probe_hw (bsc#1012628). - netfilter: nft_payload: fix C-VLAN offload support (bsc#1012628). - netfilter: nftables_offload: VLAN id needs host byteorder in flow dissector (bsc#1012628). - netfilter: nftables_offload: special ethertype handling for VLAN (bsc#1012628). - vsock/vmci: log once the failed queue pair allocation (bsc#1012628). - libbpf: Initialize the bpf_seq_printf parameters array field by field (bsc#1012628). - net: ethernet: ixp4xx: Set the DMA masks explicitly (bsc#1012628). - gro: fix napi_gro_frags() Fast GRO breakage due to IP alignment check (bsc#1012628). - RDMA/cxgb4: add missing qpid increment (bsc#1012628). - RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails (bsc#1012628). - ALSA: usb: midi: don't return -ENOMEM when usb_urb_ep_type_check fails (bsc#1012628). - sfc: ef10: fix TX queue lookup in TX event handling (bsc#1012628). - vsock/virtio: free queued packets when closing socket (bsc#1012628). - net: marvell: prestera: fix port event handling on init (bsc#1012628). - net: davinci_emac: Fix incorrect masking of tx and rx error channel (bsc#1012628). - rtw88: refine napi deinit flow (bsc#1012628). - mt76: mt7615: fix memleak when mt7615_unregister_device() (bsc#1012628). - mt76: mt7915: fix memleak when mt7915_unregister_device() (bsc#1012628). - mt76: mt7921: run mt7921_mcu_fw_log_2_host holding mt76 mutex (bsc#1012628). - powerpc/pseries/iommu: Fix window size for direct mapping with pmem (bsc#1012628). - crypto: ccp: Detect and reject "invalid" addresses destined for PSP (bsc#1012628). - net: dsa: mv88e6xxx: Fix off-by-one in VTU devlink region size (bsc#1012628). - nfp: devlink: initialize the devlink port attribute "lanes" (bsc#1012628). - net: stmmac: fix TSO and TBS feature enabling during driver open (bsc#1012628). - net: renesas: ravb: Fix a stuck issue when a lot of frames are received (bsc#1012628). - net: phy: intel-xway: enable integrated led functions (bsc#1012628). - mt76: mt7615: Fix a dereference of pointer sta before it is null checked (bsc#1012628). - mt76: mt7921: fix possible invalid register access (bsc#1012628). - RDMA/rxe: Fix a bug in rxe_fill_ip_info() (bsc#1012628). - RDMA/core: Add CM to restrack after successful attachment to a device (bsc#1012628). - powerpc/64: Fix the definition of the fixmap area (bsc#1012628). - ath9k: Fix error check in ath9k_hw_read_revisions() for PCI devices (bsc#1012628). - ath10k: Fix a use after free in ath10k_htc_send_bundle (bsc#1012628). - ath10k: Fix ath10k_wmi_tlv_op_pull_peer_stats_info() unlock without lock (bsc#1012628). - wlcore: Fix buffer overrun by snprintf due to incorrect buffer size (bsc#1012628). - powerpc/perf: Fix the threshold event selection for memory events in power10 (bsc#1012628). - powerpc/52xx: Fix an invalid ASM expression ('addi' used instead of 'add') (bsc#1012628). - net: phy: marvell: fix m88e1011_set_downshift (bsc#1012628). - net: phy: marvell: fix m88e1111_set_downshift (bsc#1012628). - net: enetc: fix link error again (bsc#1012628). - net, xdp: Update pkt_type if generic XDP changes unicast MAC (bsc#1012628). - bnxt_en: fix ternary sign extension bug in bnxt_show_temp() (bsc#1012628). - ARM: dts: uniphier: Change phy-mode to RGMII-ID to enable delay pins for RTL8211E (bsc#1012628). - arm64: dts: uniphier: Change phy-mode to RGMII-ID to enable delay pins for RTL8211E (bsc#1012628). - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (bsc#1012628). - selftests: net: mirror_gre_vlan_bridge_1q: Make an FDB entry static (bsc#1012628). - selftests: mlxsw: Remove a redundant if statement in port_scale test (bsc#1012628). - selftests: mlxsw: Remove a redundant if statement in tc_flower_scale test (bsc#1012628). - mptcp: Retransmit DATA_FIN (bsc#1012628). - bnxt_en: Fix RX consumer index logic in the error path (bsc#1012628). - KVM: VMX: Intercept FS/GS_BASE MSR accesses for 32-bit KVM (bsc#1012628). - KVM: SVM: Zero out the VMCB array used to track SEV ASID association (bsc#1012628). - KVM: SVM: Free sev_asid_bitmap during init if SEV setup fails (bsc#1012628). - KVM: SVM: Disable SEV/SEV-ES if NPT is disabled (bsc#1012628). - net/sched: act_ct: fix wild memory access when clearing fragments (bsc#1012628). - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (bsc#1012628). - selftests/bpf: Fix BPF_CORE_READ_BITFIELD() macro (bsc#1012628). - selftests/bpf: Fix field existence CO-RE reloc tests (bsc#1012628). - selftests/bpf: Fix core_reloc test runner (bsc#1012628). - bpf: Fix propagation of 32 bit unsigned bounds from 64 bit bounds (bsc#1012628). - RDMA/siw: Fix a use after free in siw_alloc_mr (bsc#1012628). - RDMA/bnxt_re: Fix a double free in bnxt_qplib_alloc_res (bsc#1012628). - net: bridge: mcast: fix broken length + header check for MRDv6 Adv (bsc#1012628). - net: dsa: mv88e6xxx: Fix 6095/6097/6185 ports in non-SERDES CMODE (bsc#1012628). - net:nfc:digital: Fix a double free in digital_tg_recv_dep_req (bsc#1012628). - perf tools: Change fields type in perf_record_time_conv (bsc#1012628). - perf jit: Let convert_timestamp() to be backwards-compatible (bsc#1012628). - perf session: Add swap operation for event TIME_CONV (bsc#1012628). - ia64: ensure proper NUMA distance and possible map initialization (bsc#1012628). - ia64: fix EFI_DEBUG build (bsc#1012628). - kfifo: fix ternary sign extension bugs (bsc#1012628). - mm: memcontrol: slab: fix obtain a reference to a freeing memcg (bsc#1012628). - mm/sparse: add the missing sparse_buffer_fini() in error branch (bsc#1012628). - mm/memory-failure: unnecessary amount of unmapping (bsc#1012628). - afs: Fix speculative status fetches (bsc#1012628). - bpf: Fix alu32 const subreg bound tracking on bitwise operations (bsc#1012628). - bpf, ringbuf: Deny reserve of buffers larger than ringbuf (bsc#1012628). - bpf: Prevent writable memory-mapping of read-only ringbuf pages (bsc#1012628). - net: Only allow init netns to set default tcp cong to a restricted algo (bsc#1012628). - smp: Fix smp_call_function_single_async prototype (bsc#1012628). - Refresh patches.suse/firmware-xilinx-Add-pinctrl-support.patch. - Update config files. - commit f003acc - drm/radeon: use the dummy page for GART if needed (bsc#1185516). - commit 25fe027 - ath11k: Clear the fragment cache during key install (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - ath10k: Validate first subframe of A-MSDU before processing the list (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - ath10k: Fix TKIP Michael MIC verification for PCIe (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - ath10k: drop MPDU which has discard flag set by firmware for SDIO (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - ath10k: drop fragments with multicast DA for SDIO (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - ath10k: drop fragments with multicast DA for PCIe (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - ath10k: add CCMP PN replay protection for fragmented frames for PCIe (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: extend protection against mixed key and fragment cache attacks (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: do not accept/forward invalid EAPOL frames (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: prevent attacks on TKIP/WEP as well (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: check defrag PN against current frame (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: add fragment cache to sta_info (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: drop A-MSDUs on old ciphers (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - cfg80211: mitigate A-MSDU aggregation attacks (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: properly handle A-MSDUs that start with an RFC 1042 header (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: prevent mixed key and fragment cache attacks (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: assure all fragments are encrypted (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - commit 469e487 ==== krb5 ==== - Build with full Cyrus SASL support * Negotiating SASL credentials with an EXTERNAL bind mechanism requires interaction. Kerberos provides its own interaction function that skips all interaction, thus preventing the mechanism from working. ==== kubernetes ==== Version update (1.21.0 -> 1.21.1) Subpackages: kubernetes-client kubernetes-kubeadm kubernetes-kubelet - Bump kubernetes-* to 1.21.1 - Bump kubernetes-*-minus1 to 1.20.7 ==== kubernetes1.20 ==== Version update (1.20.6 -> 1.20.7) - Update to version 1.20.7: * staging/publishing: Set default go version to go1.15.12 * build: Update to k/repo-infra@v0.1.7 (supports go1.15.12) * Use go-runner:v2.3.1-go1.15.12-buster.0 image (built on go1.15.12) * Update to go1.15.12 * fix: not tagging static public IP * Add test create service with ns * Set namespace when using kubectl create service * Automated cherry pick of #101377: Fix validation in kubectl create ingress (#101428) * Updating EndpointSlice controllers to avoid duplicate creations * Update pkg/volume/azure_file/azure_provision.go * Normalize share name to not include capital letters * Extend pod start timeout to 5min for storage subpath configmap test * fix: set "host is down" as corrupted mount * no watch endpointslice in userpace mode * Ensure service deleted when the Azure resource group has been deleted * Updating EndpointSlice validation to match Endpoints validation * Make parallel build memory threshold configurable * fix: azure file namespace issue in csi translation * pkg/kubelet: improve the node informer sync check * Additional CVE-2021-3121 fix * Fix startupProbe behaviour changed * Fix test * staging/publishing: Set default go version to go1.15.10 * build: Update to k/repo-infra@v0.1.6 (supports go1.15.11) * Use go-runner:v2.3.1-go1.15.11-buster.0 image (built on go1.15.11) * Update to go1.15.11 * add duration encoder to structured logger * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.6 * exec test should not run in Parallel as feature gate is not locked * hack/update-bazel.sh * respect ExecProbeTimeout * apf: exempt probes /healthz /livez /readyz * DelegatingAuthenticationOptions TokenReview request timeout * list pod list once to avoid timeout * Cleanup portforward streams after their usage * fix smb mount issue on Windows ==== kubernetes1.21 ==== Version update (1.21.0 -> 1.21.1) Subpackages: kubernetes1.21-client kubernetes1.21-client-common kubernetes1.21-kubeadm kubernetes1.21-kubelet kubernetes1.21-kubelet-common - Toggle ip4/ipv6 forwarding sysctls to ensure all devices are refreshed [boo#1186125] - Restore 90-kubeadm.conf, still needed [boo#1186125] - Stop setting sysctls on kubelet start with `sysctl -a --system`. Instead use more specific sysctl calls in kubelet service start. [boo#1186125] - Update to version 1.21.1: * [go1.16] Update to go1.16.4 * Automated cherry pick of #101377: Fix validation in kubectl create ingress (#101426) * Update tests to use agnhost 2.32 * Fix EndpointSlice describe panic when an Endpoint doesn't have zone * Add test create service with ns * Set namespace when using kubectl create service * Update pkg/volume/azure_file/azure_provision.go * Normalize share name to not include capital letters * Extend pod start timeout to 5min for storage subpath configmap test * Fix cleanupMountpoint issue for Windows * fix: set "host is down" as corrupted mount * no watch endpointslice in userpace mode * Ensure service deleted when the Azure resource group has been deleted * Update Makefile * Update dependencies.yaml * update debian-base to buster-v1.5.0 for CVEs * fix TestMutatingWebhookResetsInvalidManagedFields flakes * Updating EndpointSlice validation to match Endpoints validation * fix: azure file namespace issue in csi translation * pkg/kubelet: improve the node informer sync check * Remove Limits from scheduling e2e balanced pod resources * Additional CVE-2021-3121 fix * Fix RBAC of generic ephemeral volumes controller * move filesystem resize code to kubernetes/mount-utils and add need resize function * Fix panic when killing container fails * Fix startupProbe behaviour changed * Fix test * [go1.16] Update to go1.16.3 * Fix Job describe for completion mode * Upgrade kustomize-in-kubectl to v4.1.2 * exec test should not run in Parallel as feature gate is not locked * respect ExecProbeTimeout * apf: exempt probes /healthz /livez /readyz * DelegatingAuthenticationOptions TokenReview request timeout * add node handlers to the metaproxier * Updating Topology Aware Hints to support "Auto" value for annotation * list pod list once to avoid timeout * gce configure containerd default_runtime_name * Update the containerd runtime binary path - gce * Cleanup portforward streams after their usage * azure: fix node public IP not able to fetch issues from IMDS * Update CHANGELOG/CHANGELOG-1.21.md for v1.21.0 * e2e test with hostNetwork pods can't run in parallel * do not tag user created public IPs ==== kubic-control ==== Version update (0.10.2 -> 0.11) Subpackages: kubic-haproxycfg kubicctl kubicd - Update to version 0.11 - workaround for go 1.15 certificate handling changes, all certificates should be re-generated with kubicctl 0.11 - adjust for kubeadm removed upgrade node arguments ==== less ==== Version update (581.2 -> 586) - update to 586: * Make less able to read lesskey source files (deprecating lesskey). * If XDG_CONFIG_HOME is set, find lesskey source file in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey. * If XDG_DATA_HOME is set, find and store history file in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst. * Add the --lesskey-src option. * Add the --file-size option. * Fix bug which could leave terminal in mouse-reporting mode after exiting less. * Fix bug which caused failure to respond to window resize. * Fix backslash bug searching in tag file. ==== libX11 ==== Version update (1.7.0 -> 1.7.1) Subpackages: libX11-6 libX11-data - Update to version 1.7.1 * security update for CVE-2021-31535 (bsc#1182506) - supersedes U_CVE-2021-31535.patch - U_CVE-2021-31535.patch * adds missing request length checks in libX11 (CVE-2021-31535, bsc#1182506) ==== libapparmor ==== - add abstractions-php8.diff to support PHP8 in abstractions/php (boo#1186267) ==== libcontainers-common ==== - Update common to 0.38.2 - Update storage to 1.31.0 - Update image to 5.12.0 ==== libepoxy ==== Version update (1.5.5 -> 1.5.8) - Update to version 1.5.8: + Revert changes from PR #238 / #229 + Fixes regressions: #240, #252, #253 - Update to version 1.5.7: * Remove type redefinition - Includes changes from 1.5.6: * Fix issue loading OpenGL/GLX/EGL libraries * Expose dependency variables in pkg-config file * Close output objects when generating files ==== libidn2 ==== Version update (2.3.0 -> 2.3.1) - libidn2 2.3.1: * Implement full roundtrip for lookup functionality * Fix domain too long error * Updated gnulib files and various build fixes * verify source signature again ==== libqmi ==== Version update (1.28.2 -> 1.28.4) - Update to version 1.28.4 * libqmi-glib: - Add 'wwan' subsystem support. - Plug memleak when allocating new links. - Plug memleak when QmiDevice is opened multiple times. - Fix build when ARPHRD_RAWIP isn't defined in libc. * gir: - Flag all output TLV readers as optional. - Add explicit ownership information in the string and struct return annotations. * collections: - basic: added WMS Send ACK * qmicli: - Fix double GError when both 'Extended List' and 'Bandwidth List' are missing in --nas-get-rf-band-info. * Several other minor improvements and fixes. ==== librsvg ==== Version update (2.50.5 -> 2.50.6) Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 - Update to version 2.50.6: + Librsvg now requires at least Pango 1.44. + glgo#GNOME/librsvg#730: Incorrect text spacing when the transform is not 1:1. You can see this when a small font-size is scaled up due to a transform. It is less visible for a large font-size scaled down. + glgo#GNOME/librsvg#704: Fix circle/ellipse in paths when they are made out of a single Arc command. ==== libsigc++2 ==== Version update (2.10.6 -> 2.10.7) - Update to version 2.10.7: + Meson build: - Make it possible to use sigc++ as a subproject. - Fix dependency on files generated from .h.m4 files. - No implicit_include_directories. - Make quiet installations possible. - Fix build as subproject without building documentation. + Documentation fixes. ==== libtirpc ==== Version update (1.3.1 -> 1.3.2) Subpackages: libtirpc-netconfig libtirpc3 - update to 1.3.2: * Replace the final SunRPC licenses with BSD licenses * blacklist: Add a few more well known ports * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS ==== logrotate ==== Version update (3.18.0 -> 3.18.1) - update to 3.18.1: * fix memory leaks on error-handling paths * make `renamecopy` and `copytruncate` override each other * improve error handling in the parser of configuration files * improve user experience for non-privileged users of logrotate ==== lua54 ==== - Fix doc location (boo#1186233) ==== mozilla-nss ==== Version update (3.63.1 -> 3.64) - update to NSS 3.64 * bmo#1705286 - Properly detect mips64. * bmo#1687164 - Introduce NSS_DISABLE_CRYPTO_VSX and disable_crypto_vsx. * bmo#1698320 - replace __builtin_cpu_supports("vsx") with ppc_crypto_support() for clang. * bmo#1613235 - Add POWER ChaCha20 stream cipher vector acceleration. ==== multipath-tools ==== Version update (0.8.5+30+suse.633836e -> 0.8.6+10+suse.4771137) Subpackages: kpartx libmpath0 - Update to version 0.8.6+10+suse.47711374: * Github workflows: add CI for SUSE-specific branches - Disabled LTO for multipath-tools * The test for is_valid_path fails if LTO is enabled, just disabling it for %check is insufficient. ==== nfs-utils ==== Subpackages: libnfsidmap1 nfs-client - Update to version 2.5.4-rc4 to get all recent fixes: - nfs-utils-2-5-4-rc4.patch e4ce810a Move declaration of etab and rmtab into libraries 7a4e2d1d Remove 'force' arg from cache_flush() c5528f40 Fix NFSv4 export of tmpfs filesystems ed83085f gssd: use mutex to protect decrement of refcount - nfs-utils-2-5-4-rc3.patch 972dba0f nfs-utils: Enable the retrieval of raw config settings without expansion 964f4861 nfs-utils: Factor out common structure cleanup calls 8219bdb0 Replace all /var/run with /run 81727afe Fix `statx()` emulation breaking exports a41afe9e mountd/exports: Fix typo in the man page - nfs-utils-2-5-4-rc2.patch 2f669b6f NFS server should enable RDMA by default d77ece22 mountd/exportd: only log confirmed clients, and poll for updates ac266e2e exportfs: fix unexporting of '/' - nfs-utils-2-5-4-rc1.patch 7abd15e3 nfsdclnts: Ignore SIGPIPE signal edeb3815 mountd: add logging of NFSv4 clients attaching and detaching. f8e2c8d4 mountd: make default ttl settable by option cc150093 mountd: add --cache-use-ipaddr option to force use_ipaddr c7a954ae mountd: add logging for authentication results for accesses. 1a8156f8 mountd/exports: update man page fec7347e mountd: Don't proactively add export info when fh info is requested. a72c151f mountd: reject unknown client IP when !use_ipaddr. 05bacfed gssd: Add options to rpc.gssd to allow for the use of $HOME/.k5identity files 7e559dbd exportd: server-side gid management - 0001-Replace-all-var-run-with-run.patch is now part of nfs-utils-2-5-4-rc3.patch ==== pango ==== Version update (1.48.4 -> 1.48.5) - Update to version 1.48.5: + Only initialize fontconfig once. + Add missing deprecation notices. + Add some missing apis to the markup docs. + Speed up Emoji classification. + Fix hangs and memory leaks. + Don't insert hyphens at word boundaries. + Handle empty lines better. + Avoid width fluctuations with ellipsized text. + Add a utility to show text segmentation. ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-bootloader patterns-base-minimal_base - Suggest openssl from patterns-base-base: in case something requires /usr/bin/openssl or openssl(cli), we want to declare openssl as our default. - Some enhanced_base cleanup * alsa-plugins will be pulled in by alsa if needed * cronie is not needed in favor of systemd timers * The cups server is not needed in general * postfix used to be required by cron but not anymore today * cyrus-sasl will be pulled in by others if needed * openslp will be pulled in by rsync so far * translation-update is for build systems only * udev is pulled in by systemd if needed * perl-TermReadLine-Gnu ??? ==== patterns-microos ==== Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-base-microdnf patterns-microos-base-packagekit patterns-microos-base-zypper patterns-microos-basesystem patterns-microos-cloud patterns-microos-cockpit patterns-microos-defaults patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-selinux patterns-microos-sssd_ldap - Drop partitionmanager due to bsc#1178848. We'll revisit when that is fixed. - make cups-pk-helper conditional to PackageKit - add qemu-guest-agent to the DVD, to improve experience in case we install in a VM - add some cups and printing related packages so that a new printer can actually be succesfully added (tested with GNOME only) - add some disk handling GUI tools (for partitioning USB keys, ext. disks, etc) for both GNOME and KDE - Conditionally install cockpit-packagekit in the Cockpit pattern if the PackageKit pattern is installed to allow system updates through Cockpit on package managed MicroOS systems. - Fix previous changelog entry to be formatted correctly ==== permissions ==== Version update (1550_20210125 -> 1550_20210518) Subpackages: chkstat permissions-config - Update to version 20210518: * whitelist please (bsc#1183669) - Update to version 20210518: * Fix enlightenment paths for 32-bit architectures ==== psmisc ==== - Do not change CAP within spec file (boo#1186258) - Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch * Fix bsc#1185208 to make private mount namespaces work as well as to distinguish NFS mounts from same remote device share. ==== python-PyJWT ==== Version update (2.0.1 -> 2.1.0) - update to 2.1.0: - Allow claims validation without making JWT signature validation mandatory. ` - Remove padding from JWK test data. ` - Make `kty` mandatory in JWK to be compliant with RFC7517. ` - Allow JWK without `alg` to be compliant with RFC7517. ` - Allow to verify with private key on ECAlgorithm, as well as on Ed25519Algorithm. ` - Add caching by default to PyJWKClient ` - Add missing exceptions.InvalidKeyError to jwt module __init__ imports ` - Add support for ES256K algorithm ` - Add `from_jwk()` to Ed25519Algorithm ` - Add `to_jwk()` to Ed25519Algorithm ` - Export `PyJWK` and `PyJWKSet` ==== python-asn1crypto ==== - %check: use %pyunittest rpm macro ==== python-distro ==== - use %pytest macro ==== python-idna ==== - %check: use %pyunittest rpm macro ==== python-jsonpatch ==== Version update (1.31 -> 1.32) - update to 1.32: * take_index causing 'move' of incorrect values due to bad True==1 comparison ==== python-jsonschema ==== - %check: use %pytest rpm macro ==== python-networkx ==== Version update (2.5 -> 2.5.1) - update to 2.5.1: * pin requirements ==== python-oauthlib ==== - %check: use %pyunittest rpm macro ==== python-pyasn1 ==== - %check: use %pyunittest rpm macro ==== python-pytz ==== - %check: use %pyunittest rpm macro ==== rdma-core ==== Version update (33.1 -> 35.0) Subpackages: libefa1 libibverbs libibverbs1 libmlx4-1 libmlx5-1 librdmacm1 - Update to rdma-core v35.0 - Bugfixes on all providers - Many improvements on pyverbs - Fixes dracut path issues on Tumbleweed - Refresh patches to latest sources: - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch - disable-rdma-interface-renaming.patch ==== rpcbind ==== Version update (1.2.5 -> 1.2.6) - Update to rpcbind 1.2.6 - Remove 0031-rpcbind-manpage.patch (accepted upstream in commit 4bedcee) - Drop pmap_set.c (installed as pmap_set2): bnc#446388 is from 2008, for openSUSE 11. - Refresh 0001-change-lockingdir-to-run.patch - Replace %setup with %autosetup ==== rpm ==== Subpackages: librpmbuild9 - auto-config-update-aarch64-ppc64le.diff: Treat missing timestamp as infinitely old. ==== runc ==== Version update (1.0.0~rc94 -> 1.0.0~rc95) - Update to runc v1.0.0~rc95. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95 This release of runc contains a fix for CVE-2021-30465, and users are strongly recommended to update (especially if you are providing semi-limited access to spawn containers to untrusted users). bsc#1185405 ==== selinux-policy ==== Subpackages: selinux-policy-targeted - allow systemd to watch /usr, /usr/lib, /etc, /etc/pki as we have path units that trigger on changes in those. Added fix_systemd_watch.patch - own /usr/share/selinux/packages/$SELINUXTYPE/ and /var/lib/selinux/$SELINUXTYPE/active/modules/* to allow packages to install files there - allow cockpit socket to bind nodes (fix_cockpit.patch) - use %autosetup to get rid of endless patch lines ==== snapper ==== Subpackages: libsnapper5 - fixed systemd sandboxing (bsc#1186095) ==== sssd ==== Version update (2.4.2 -> 2.5.0) Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap - Update to release 2.5.0 * Added support for automatic renewal of renewable TGTs that are stored in KCM ccache. This can be enabled by setting tgt_renewal = true. See the sssd-kcm man page for more details. This feature requires MIT Kerberos krb5-1.19-0.beta2.3 or higher. * ad_gpo_implicit_deny is now respected even if there are no applicable GPOs present. ==== u-boot-rpiarm64 ==== Subpackages: u-boot-rpiarm64-doc * Add rockpi-n10-rk3399pro * Several fixes and cleanups for RK3399/3328 boards: - Replace repeated board list with is_rk3399/is_rk3328 define - Fix non-functional rock960, copy bl31.elf - Remove "make u-boot.itb", already part of "all" target * Remove obsolete manual generation of SOURCE_DATE_EPOCH ==== vim ==== Version update (8.2.2800 -> 8.2.2850) Subpackages: vim-data-common vim-small - Updated to version 8.2.2850, fixes the following problems * After a timer displays text a hit-enter prompt is given. * Free Pascal makefile not recognized. * Vim9: illegal memory access. * Flicker when the popup menu has an info popup. * Setting buffer local mapping with mapset() changes global mapping. * Vim9: cannot use legacy syntax in Vim9 script. * Vim9: using "++nr" as a command might not work. * Build fails with tiny features. * Vim9: increment and decrement not sufficiently tested. * Vim9: :def function compilation fails when using :legacy. * Vim9: crash when calling a function in a substitute expression. * Vim9: error for missing white space doesn't say where it is missing * Vim9: still crash when using substitute expression. * Cannot grep using fuzzy matching. * Vim9: unused variable. (John Marriott) * Status line flickers when redrawing popup menu info. * Vim9: comment below expression in lambda causes problems. * Vim9: script sourcing continues after an error. * No jump added to jumplist when opening terminal in current window. * Finishing an abbreviation with a multi-byte char may not work. * Session file may divide by zero. * Code in checkreadonly() not fully tested. * Compiler warnings for int to size_t conversion. (Randall W. Morris) * Test file was not deleted. * Coverity complains about not checking the rename() return value. * Some comments are not correct or clear. * Terminal colors are not updated when 'background' is set. * Vim9: expandcmd() not tested. * Operator cancelled by moving mouse when using popup. (Sergey Vlasov) * Two key command cancelled by moving mouse when using popup. (Sergey Vlasov) * Vim9: :cexpr does not work with local variables. * Vim9: leaking memory in :cexpr. * Build failure without the +quickfix feature. (John Marriott) * Various code lines not covered by tests. * File extension .wrap not recognized. * Default redirection missing "ash" and "dash". * Vim9: member operation not fully tested. * Vim9: skip argument to searchpair() is not compiled. * Vim9: skip argument to searchpairpos() is not compiled. * Vim9: memory leak when using searchpair(). * Vim9: "echo Func()" does not give an error for a function without a return value. * Perl not tested sufficiently. * Crash when calling partial. * Bufwrite not sufficiently tested. * Recalling commands from history is not tested. ==== xfsprogs ==== Version update (5.11.0 -> 5.12.0) - update to v5.12.0: - mkfs: don't default to too-large physical sector size - repair: phase 6 speedups - man: Add dax mount option to man xfs(5) - xfs_admin: pick up log arguments correctly - xfs_growfs: support shrinking unused space - libfrog: report inobtcount in geometry - xfs_logprint: Fix buffer overflow printing quotaoff - xfsprogs: include for platform_crash - xfsprogs: remove BMV_IF_NO_DMAPI_READ flag - workqueue: bound maximum queue depth - libxfs changes merged from kernel 5.12 ==== xmlsec1 ==== Version update (1.2.31 -> 1.2.32) Subpackages: libxmlsec1-1 libxmlsec1-openssl1 - update to 1.2.32: + Remove MD5 for NSS 3.59 and above + Fix PKCS12_parse return code handling + Fix OpenSSL lookup + xmlSecX509DataGetNodeContent(): don't return 0 for non-empty elements - fix for LibreOffice - add upstream signing key and validate source signature - put license text into all subpackages - treat all compiler warnings as errors ==== yast2 ==== Version update (4.4.3 -> 4.4.5) - Add Yast2::Equatable mixin to avoid troubles with classes that overloads the comparison methods (related to bsc#1186082). - 4.4.5 - Logging all available product information into directory /var/log/YaST2/installation_info. This should help for evaluating the cause of e.g. bsc#1180888, bsc#1180908, bsc#1178688. - 4.4.4 ==== zchunk ==== Version update (1.1.11 -> 1.1.14) - Update to version 1.1.14 * Final fixes for zstd 1.5 support - Update to version 1.1.12 * Update testsuite for zstd 1.5 ==== zstd ==== Version update (1.4.9 -> 1.5.0) - Update to version 1.5.0 * https://github.com/facebook/zstd/releases/tag/v1.5.0 * Improved Middle-Level Compression Speed * Improved High-Level Compression Ratio * Faster Decompression Speed * Dynamic Library Supports Multithreading by Default - Drop zstd-1.4.9-Avoid-SIGBUS-on-armv6.patch, merged upstream - Add zstd-1.4.9-Avoid-SIGBUS-on-armv6.patch to fix crashes when running armv6 userspace on armv8 64-bit kernels