Packages changed: diffutils flannel (0.13.0 -> 0.14.0) iputils (20210202 -> 20210722) kernel-source (5.13.2 -> 5.13.4) libselinux libsepol libslirp (4.6.0 -> 4.6.1+7) netcfg podman (3.2.2 -> 3.2.3) python-setuptools (57.0.0 -> 57.4.0) === Details === ==== diffutils ==== - gnulib-c-stack.patch: c-stack: stop using SIGSTKSZ ==== flannel ==== Version update (0.13.0 -> 0.14.0) - Update to 0.14.0: * Add tencent cloud VPC network support * moving go modules to flannel-io/flannel and updating to go 1.16 * fix(windows): nil pointer panic * Preserve environment for extension backend * Fix flannel hang if lease expired * Documentation for the Flannel upgrade/downgrade procedure * Move from glog to klog * fix(host-gw): failed to restart if gateway hnsep existed * ipsec: use well known paths of charon daemon * upgrade client-go to 1.19.4 * move from juju/errors to pkg/errors * subnets: move forward the cursor to skip illegal subnet * Fix Expired URL to Deploying Flannel with kubeadm * Modify kube-flannel.yaml to use rbac.authorization.k8s.io/v1 * preserve AccessKey & AccessKeySecret environment on sudo fix some typo in doc. * iptables: handle errors that prevent rule deletes - Sync kube-flannel.yaml manifest - Change project URL to github.com/flannel-io/flannel ==== iputils ==== Version update (20210202 -> 20210722) - Update to version 20210722 https://github.com/iputils/iputils/releases/tag/20210722 - Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken start of the service, adds DynamicUser=yes for more security) - Add BuildRequires: iproute2 (required for running tests) ==== kernel-source ==== Version update (5.13.2 -> 5.13.4) - Update patches.kernel.org/5.13.4-350-seq_file-disallow-extremely-large-seq-buffer-a.patch (bsc#1012628 CVE-2021-33909 bsc#1188062). Add CVE. - commit d57f3b6 - Revert "usb: renesas-xhci: Fix handling of unknown ROM state" (bsc#1188485, bsc#1188515). - commit 871d0f3 - Linux 5.13.4 (bsc#1012628). - seq_file: disallow extremely large seq buffer allocations (bsc#1012628). - misc: alcor_pci: fix inverted branch condition (bsc#1012628). - scsi: scsi_dh_alua: Fix signedness bug in alua_rtpg() (bsc#1012628). - cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init (bsc#1012628). - perf tools: Fix pattern matching for same substring in different PMU type (bsc#1012628). - MIPS: vdso: Invalid GIC access through VDSO (bsc#1012628). - s390/irq: remove HAVE_IRQ_EXIT_ON_IRQ_STACK (bsc#1012628). - perf script python: Fix buffer size to report iregs in perf script (bsc#1012628). - mips: disable branch profiling in boot/decompress.o (bsc#1012628). - mips: always link byteswap helpers into decompressor (bsc#1012628). - kprobe/static_call: Restore missing static_call_text_reserved() (bsc#1012628). - static_call: Fix static_call_text_reserved() vs __init (bsc#1012628). - jump_label: Fix jump_label_text_reserved() vs __init (bsc#1012628). - sched/uclamp: Ignore max aggregation if rq is idle (bsc#1012628). - scsi: be2iscsi: Fix an error handling path in beiscsi_dev_probe() (bsc#1012628). - arm64: dts: rockchip: Re-add regulator-always-on for vcc_sdio for rk3399-roc-pc (bsc#1012628). - arm64: dts: rockchip: Re-add regulator-boot-on, regulator-always-on for vdd_gpu on rk3399-roc-pc (bsc#1012628). - firmware: turris-mox-rwtm: show message about HWRNG registration (bsc#1012628). - firmware: turris-mox-rwtm: fail probing when firmware does not support hwrng (bsc#1012628). - firmware: turris-mox-rwtm: report failures better (bsc#1012628). - firmware: turris-mox-rwtm: fix reply status decoding function (bsc#1012628). - kbuild: remove trailing slashes from $(KBUILD_EXTMOD) (bsc#1012628). - thermal/drivers/rcar_gen3_thermal: Fix coefficient calculations (bsc#1012628). - arm64: dts: ti: k3-am642-evm: align ti,pindir-d0-out-d1-in property with dt-shema (bsc#1012628). - arm64: dts: ti: am65: align ti,pindir-d0-out-d1-in property with dt-shema (bsc#1012628). - arm64: dts: ti: k3-am642-main: fix ports mac properties (bsc#1012628). - ARM: dts: imx6q-dhcom: Add gpios pinctrl for i2c bus recovery (bsc#1012628). - ARM: dts: imx6q-dhcom: Fix ethernet plugin detection problems (bsc#1012628). - ARM: dts: imx6q-dhcom: Fix ethernet reset time properties (bsc#1012628). - thermal/drivers/sprd: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - ARM: dts: am437x: align ti,pindir-d0-out-d1-in property with dt-shema (bsc#1012628). - ARM: dts: am335x: align ti,pindir-d0-out-d1-in property with dt-shema (bsc#1012628). - ARM: dts: dra7: Fix duplicate USB4 target module node (bsc#1012628). - arm64: dts: allwinner: a64-sopine-baseboard: change RGMII mode to TXID (bsc#1012628). - memory: fsl_ifc: fix leak of private memory on probe failure (bsc#1012628). - memory: fsl_ifc: fix leak of IO mapping on probe failure (bsc#1012628). - arm64: dts: ti: k3-j721e-common-proc-board: Re-name "link" name as "phy" (bsc#1012628). - arm64: dts: ti: k3-j721e-common-proc-board: Use external clock for SERDES (bsc#1012628). - arm64: dts: ti: k3-j721e-main: Fix external refclk input to SERDES (bsc#1012628). - firmware: arm_scmi: Add delayed response status check (bsc#1012628). - Revert "ARM: dts: bcm283x: increase dwc2's RX FIFO size" (bsc#1012628). - arm64: dts: renesas: r8a779a0: Drop power-domains property from GIC node (bsc#1012628). - reset: bail if try_module_get() fails (bsc#1012628). - ARM: dts: BCM5301X: Fixup SPI binding (bsc#1012628). - dt-bindings: i2c: at91: fix example for scl-gpios (bsc#1012628). - firmware: arm_scmi: Reset Rx buffer to max size during async commands (bsc#1012628). - soc: mtk-pm-domains: Fix the clock prepared issue (bsc#1012628). - soc: mtk-pm-domains: do not register smi node as syscon (bsc#1012628). - firmware: tegra: Fix error return code in tegra210_bpmp_init() (bsc#1012628). - arm64: dts: qcom: sc7180: Fix sc7180-qmp-usb3-dp-phy reg sizes (bsc#1012628). - arm64: dts: qcom: c630: Add no-hpd to DSI bridge node (bsc#1012628). - arm64: dts: qcom: trogdor: Add no-hpd to DSI bridge node (bsc#1012628). - ARM: dts: stm32: Rework LAN8710Ai PHY reset on DHCOM SoM (bsc#1012628). - arm64: dts: renesas: r8a7796[01]: Fix OPP table entry voltages (bsc#1012628). - arm64: dts: renesas: Add missing opp-suspend properties (bsc#1012628). - ARM: dts: qcom: sdx55-telit: Represent secure-regions as 64-bit elements (bsc#1012628). - ARM: dts: qcom: sdx55-t55: Represent secure-regions as 64-bit elements (bsc#1012628). - arm64: dts: ti: j7200-main: Enable USB2 PHY RX sensitivity workaround (bsc#1012628). - arm64: dts: ti: k3-j7200: Remove "#address-cells" property from GPIO DT nodes (bsc#1012628). - arm64: dts: ti: k3-am64-mcu: Fix the compatible string in GPIO DT node (bsc#1012628). - arm64: dts: qcom: sdm845-oneplus-common: guard rmtfs-mem (bsc#1012628). - ARM: dts: r8a7779, marzen: Fix DU clock names (bsc#1012628). - arm64: dts: renesas: v3msk: Fix memory size (bsc#1012628). - rtc: fix snprintf() checking in is_rtc_hctosys() (bsc#1012628). - rtc: bd70528: fix BD71815 watchdog dependency (bsc#1012628). - ARM: dts: sun8i: h3: orangepi-plus: Fix ethernet phy-mode (bsc#1012628). - memory: pl353: Fix error return code in pl353_smc_probe() (bsc#1012628). - arm64: defconfig: Do not override the MTK_PMIC_WRAP symbol (bsc#1012628). - reset: brcmstb: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - memory: atmel-ebi: add missing of_node_put for loop iteration (bsc#1012628). - memory: stm32-fmc2-ebi: add missing of_node_put for loop iteration (bsc#1012628). - ARM: dts: exynos: fix PWM LED max brightness on Odroid XU4 (bsc#1012628). - ARM: dts: exynos: fix PWM LED max brightness on Odroid HC1 (bsc#1012628). - ARM: dts: exynos: fix PWM LED max brightness on Odroid XU/XU3 (bsc#1012628). - ARM: exynos: add missing of_node_put for loop iteration (bsc#1012628). - reset: a10sr: add missing of_match_table reference (bsc#1012628). - reset: RESET_INTEL_GW should depend on X86 (bsc#1012628). - Update config files. - reset: RESET_BRCMSTB_RESCAL should depend on ARCH_BRCMSTB (bsc#1012628). - Update config files. - arm64: dts: rockchip: Drop fephy pinctrl from gmac2phy on rk3328 rock-pi-e (bsc#1012628). - arm64: dts: rockchip: rename LED label for NanoPi R4S (bsc#1012628). - ARM: dts: gemini-rut1xx: remove duplicate ethernet node (bsc#1012628). - hexagon: use common DISCARDS macro (bsc#1012628). - hexagon: handle {,SOFT}IRQENTRY_TEXT in linker script (bsc#1012628). - NFSv4/pNFS: Don't call _nfs4_pnfs_v3_ds_connect multiple times (bsc#1012628). - NFSv4/pnfs: Fix layoutget behaviour after invalidation (bsc#1012628). - NFSv4/pnfs: Fix the layout barrier update (bsc#1012628). - NFS: Fix fscache read from NFS after cache error (bsc#1012628). - NFS: Ensure nfs_readpage returns promptly when internal error occurs (bsc#1012628). - virtio-mem: don't read big block size in Sub Block Mode (bsc#1012628). - vdpa/mlx5: Clear vq ready indication upon device reset (bsc#1012628). - ALSA: isa: Fix error return code in snd_cmi8330_probe() (bsc#1012628). - nfsd: fix NULL dereference in nfs3svc_encode_getaclres (bsc#1012628). - NFSD: Prevent a possible oops in the nfs_dirent() tracepoint (bsc#1012628). - nfsd: Reduce contention for the nfsd_file nf_rwsem (bsc#1012628). - nfsd: move fsnotify on client creation outside spinlock (bsc#1012628). - NFSD: Add nfsd_clid_confirmed tracepoint (bsc#1012628). - powerpc/bpf: Fix detecting BPF atomic instructions (bsc#1012628). - nvme-tcp: can't set sk_user_data without write_lock (bsc#1012628). - virtio_net: move tx vq operation under tx queue lock (bsc#1012628). - vdp/mlx5: Fix setting the correct dma_device (bsc#1012628). - vdpa/mlx5: Fix possible failure in umem size calculation (bsc#1012628). - vdpa/mlx5: Fix umem sizes assignments on VQ create (bsc#1012628). - vp_vdpa: correct the return value when fail to map notification (bsc#1012628). - io_uring: remove not needed PF_EXITING check (bsc#1012628). - io_uring: inline __tctx_task_work() (bsc#1012628). - io_uring: move creds from io-wq work to io_kiocb (bsc#1012628). - io_uring: don't bounce submit_state cachelines (bsc#1012628). - io_uring: shuffle rarely used ctx fields (bsc#1012628). - io_uring: get rid of files in exit cancel (bsc#1012628). - block: grab a device refcount in disk_uevent (bsc#1012628). - arch_topology: Avoid use-after-free for scale_freq_data (bsc#1012628). - PCI: tegra194: Fix tegra_pcie_ep_raise_msi_irq() ill-defined shift (bsc#1012628). - f2fs: remove false alarm on iget failure during GC (bsc#1012628). - nfs: update has_sec_mnt_opts after cloning lsm options from parent (bsc#1012628). - pwm: imx1: Don't disable clocks at device remove time (bsc#1012628). - PCI: intel-gw: Fix INTx enable (bsc#1012628). - x86/fpu: Limit xstate copy size in xstateregs_set() (bsc#1012628). - x86/fpu: Fix copy_xstate_to_kernel() gap handling (bsc#1012628). - f2fs: fix to avoid adding tab before doc section (bsc#1012628). - PCI: iproc: Support multi-MSI only on uniprocessor kernel (bsc#1012628). - PCI: iproc: Fix multi-MSI base vector number allocation (bsc#1012628). - ubifs: Set/Clear I_LINKABLE under i_lock for whiteout inode (bsc#1012628). - nfs: fix acl memory leak of posix_acl_create() (bsc#1012628). - SUNRPC: prevent port reuse on transports which don't request it (bsc#1012628). - watchdog: jz4740: Fix return value check in jz4740_wdt_probe() (bsc#1012628). - watchdog: aspeed: fix hardware timeout calculation (bsc#1012628). - watchdog: keembay: Removed timeout update in the TO ISR (bsc#1012628). - watchdog: keembay: Remove timeout update in the WDT start function (bsc#1012628). - watchdog: keembay: Clear either the TO or TH interrupt bit (bsc#1012628). - watchdog: keembay: Update pretimeout to zero in the TH ISR (bsc#1012628). - watchdog: keembay: Upadate WDT pretimeout for every update in timeout (bsc#1012628). - watchdog: keembay: Update WDT pre-timeout during the initialization (bsc#1012628). - ubifs: journal: Fix error return code in ubifs_jnl_write_inode() (bsc#1012628). - um: fix error return code in winch_tramp() (bsc#1012628). - um: fix error return code in slip_open() (bsc#1012628). - um: Fix stack pointer alignment (bsc#1012628). - sunrpc: Avoid a KASAN slab-out-of-bounds bug in xdr_set_page_base() (bsc#1012628). - NFSv4: Fix an Oops in pnfs_mark_request_commit() when doing O_DIRECT (bsc#1012628). - NFSv4: Initialise connection to the server in nfs4_alloc_client() (bsc#1012628). - power: supply: rt5033_battery: Fix device tree enumeration (bsc#1012628). - Update config files. - PCI/sysfs: Fix dsm_label_utf16s_to_utf8s() buffer overrun (bsc#1012628). - power: supply: surface-charger: Fix type of integer variable (bsc#1012628). - remoteproc: k3-r5: Fix an error message (bsc#1012628). - remoteproc: stm32: fix phys_addr_t format string (bsc#1012628). - f2fs: compress: fix to disallow temp extension (bsc#1012628). - f2fs: add MODULE_SOFTDEP to ensure crc32 is included in the initramfs (bsc#1012628). - module: correctly exit module_kallsyms_on_each_symbol when fn() != 0 (bsc#1012628). - pwm: visconti: Fix and simplify period calculation (bsc#1012628). - cpufreq: scmi: Fix an error message (bsc#1012628). - x86/signal: Detect and prevent an alternate signal stack overflow (bsc#1012628). - NFSD: Fix TP_printk() format specifier in nfsd_clid_class (bsc#1012628). - f2fs: atgc: fix to set default age threshold (bsc#1012628). - power: supply: surface_battery: Fix battery event handling (bsc#1012628). - block: fix the problem of io_ticks becoming smaller (bsc#1012628). - virtio_console: Assure used length from device is limited (bsc#1012628). - virtio_net: Fix error handling in virtnet_restore() (bsc#1012628). - virtio-blk: Fix memory leak among suspend/resume procedure (bsc#1012628). - ext4: fix WARN_ON_ONCE(!buffer_uptodate) after an error writing the superblock (bsc#1012628). - PCI: rockchip: Register IRQ handlers after device and data are ready (bsc#1012628). - ACPI: video: Add quirk for the Dell Vostro 3350 (bsc#1012628). - ACPI: AMBA: Fix resource name in /proc/iomem (bsc#1012628). - pwm: tegra: Don't modify HW state in .remove callback (bsc#1012628). - pwm: img: Fix PM reference leak in img_pwm_enable() (bsc#1012628). - drm/amdkfd: fix sysfs kobj leak (bsc#1012628). - drm/amdgpu: fix Navi1x tcp power gating hang when issuing lightweight invalidaiton (bsc#1012628). - power: supply: axp288_fuel_gauge: Make "T3 MRD" no_battery_list DMI entry more generic (bsc#1012628). - power: supply: ab8500: add missing MODULE_DEVICE_TABLE (bsc#1012628). - power: supply: charger-manager: add missing MODULE_DEVICE_TABLE (bsc#1012628). - power: reset: regulator-poweroff: add missing MODULE_DEVICE_TABLE (bsc#1012628). - NFS: nfs_find_open_context() may only select open files (bsc#1012628). - drm/gma500: Add the missed drm_gem_object_put() in psb_user_framebuffer_create() (bsc#1012628). - ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty (bsc#1012628). - orangefs: fix orangefs df output (bsc#1012628). - NFSv4: Fix handling of non-atomic change attrbute updates (bsc#1012628). - NFS: Fix up inode attribute revalidation timeouts (bsc#1012628). - PCI: tegra: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - remoteproc: stm32: fix mbox_send_message call (bsc#1012628). - remoteproc: core: Fix cdev remove and rproc del (bsc#1012628). - x86/fpu: Return proper error codes from user access functions (bsc#1012628). - PCI: mediatek-gen3: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - fuse: fix illegal access to inode with reused nodeid (bsc#1012628). - virtiofs: propagate sync() to file server (bsc#1012628). - watchdog: iTCO_wdt: Account for rebooting on second timeout (bsc#1012628). - watchdog: imx_sc_wdt: fix pretimeout (bsc#1012628). - watchdog: Fix possible use-after-free by calling del_timer_sync() (bsc#1012628). - watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff() (bsc#1012628). - watchdog: Fix possible use-after-free in wdt_startup() (bsc#1012628). - PCI: Dynamically map ECAM regions (bsc#1012628). - PCI: pciehp: Ignore Link Down/Up caused by DPC (bsc#1012628). - NFSv4: Fix delegation return in cases where we have to retry (bsc#1012628). - PCI/P2PDMA: Avoid pci_get_slot(), which may sleep (bsc#1012628). - ARM: 9087/1: kprobes: test-thumb: fix for LLVM_IAS=1 (bsc#1012628). - power: reset: gpio-poweroff: add missing MODULE_DEVICE_TABLE (bsc#1012628). - power: supply: max17040: Do not enforce (incorrect) interrupt trigger type (bsc#1012628). - power: supply: max17042: Do not enforce (incorrect) interrupt trigger type (bsc#1012628). - pwm: pca9685: Restrict period change for enabled PWMs (bsc#1012628). - PCI: hv: Fix a race condition when removing the device (bsc#1012628). - power: supply: ab8500: Enable USB and AC (bsc#1012628). - power: supply: ab8500: Avoid NULL pointers (bsc#1012628). - power: supply: ab8500: Move to componentized binding (bsc#1012628). - PCI: ftpci100: Rename macro name collision (bsc#1012628). - pwm: spear: Don't modify HW state in .remove callback (bsc#1012628). - power: supply: sc2731_charger: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - power: supply: sc27xx: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - kcov: add __no_sanitize_coverage to fix noinstr for all architectures (bsc#1012628). - lib/decompress_unlz4.c: correctly handle zero-padding around initrds (bsc#1012628). - phy: intel: Fix for warnings due to EMMC clock 175Mhz change in FIP (bsc#1012628). - i2c: core: Disable client irq on reboot/shutdown (bsc#1012628). - intel_th: Wait until port is in reset before programming it (bsc#1012628). - staging: rtl8723bs: fix check allowing 5Ghz settings (bsc#1012628). - staging: rtl8723bs: fix macro value for 2.4Ghz only device (bsc#1012628). - leds: turris-omnia: add missing MODULE_DEVICE_TABLE (bsc#1012628). - ALSA: firewire-motu: fix detection for S/PDIF source on optical interface in v2 protocol (bsc#1012628). - ALSA: usb-audio: scarlett2: Fix 6i6 Gen 2 line out descriptions (bsc#1012628). - ALSA: hda: Add IRQ check for platform_get_irq() (bsc#1012628). - backlight: lm3630a: Fix return code of .update_status() callback (bsc#1012628). - ASoC: Intel: kbl_da7219_max98357a: shrink platform_id below 20 characters (bsc#1012628). - ASoC: fsl_xcvr: check return value after calling platform_get_resource_byname() (bsc#1012628). - powerpc/boot: Fixup device-tree on little endian (bsc#1012628). - usb: gadget: hid: fix error return code in hid_bind() (bsc#1012628). - usb: gadget: f_hid: fix endianness issue with descriptors (bsc#1012628). - ALSA: usb-audio: scarlett2: Fix scarlett2_*_ctl_put() return values (bsc#1012628). - ALSA: usb-audio: scarlett2: Fix data_mutex lock (bsc#1012628). - ALSA: usb-audio: scarlett2: Fix 18i8 Gen 2 PCM Input count (bsc#1012628). - m68knommu: fix missing LCD splash screen data initializer (bsc#1012628). - ALSA: bebob: add support for ToneWeal FW66 (bsc#1012628). - Input: hideep - fix the uninitialized use in hideep_nvm_unlock() (bsc#1012628). - s390/mem_detect: fix tprot() program check new psw handling (bsc#1012628). - s390/mem_detect: fix diag260() program check new psw handling (bsc#1012628). - s390/ipl_parm: fix program check new psw handling (bsc#1012628). - s390/processor: always inline stap() and __load_psw_mask() (bsc#1012628). - habanalabs/gaudi: set the correct rc in case of err (bsc#1012628). - habanalabs: remove node from list before freeing the node (bsc#1012628). - habanalabs: set rc as 'valid' in case of intentional func exit (bsc#1012628). - habanalabs: fix mask to obtain page offset (bsc#1012628). - habanalabs/gaudi: set the correct cpu_id on MME2_QM failure (bsc#1012628). - habanalabs: check if asic secured with asic type (bsc#1012628). - xhci: handle failed buffer copy to URB sg list and fix a W=1 copiler warning (bsc#1012628). - ASoC: soc-core: Fix the error return code in snd_soc_of_parse_audio_routing() (bsc#1012628). - powerpc/mm/book3s64: Fix possible build error (bsc#1012628). - gpio: pca953x: Add support for the On Semi pca9655 (bsc#1012628). - selftests/powerpc: Fix "no_handler" EBB selftest (bsc#1012628). - ALSA: ppc: fix error return code in snd_pmac_probe() (bsc#1012628). - scsi: storvsc: Correctly handle multiple flags in srb_status (bsc#1012628). - powerpc/inst: Fix sparse detection on get_user_instr() (bsc#1012628). - thunderbolt: Fix DROM handling for USB4 DROM (bsc#1012628). - gpio: zynq: Check return value of irq_get_irq_data (bsc#1012628). - gpio: zynq: Check return value of pm_runtime_get_sync (bsc#1012628). - ASoC: soc-pcm: fix the return value in dpcm_apply_symmetry() (bsc#1012628). - ALSA: control_led - fix initialization in the mode show callback (bsc#1012628). - ALSA: n64: check return value after calling platform_get_resource() (bsc#1012628). - iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation (bsc#1012628). - iommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get fails (bsc#1012628). - powerpc/ps3: Add dma_mask to ps3_dma_region (bsc#1012628). - ALSA: sb: Fix potential double-free of CSP mixer elements (bsc#1012628). - iommu/arm-smmu-qcom: Skip the TTBR1 quirk for db820c (bsc#1012628). - selftests: timers: rtcpie: skip test if default RTC device does not exist (bsc#1012628). - s390: disable SSP when needed (bsc#1012628). - s390/sclp_vt220: fix console name to match device (bsc#1012628). - serial: tty: uartlite: fix console setup (bsc#1012628). - fsi: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - iov_iter_advance(): use consistent semantics for move past the end (bsc#1012628). - ASoC: img: Fix PM reference leak in img_i2s_in_probe() (bsc#1012628). - mfd: cpcap: Fix cpcap dmamask not set warnings (bsc#1012628). - mfd: da9052/stmpe: Add and modify MODULE_DEVICE_TABLE (bsc#1012628). - scsi: qedi: Fix cleanup session block/unblock use (bsc#1012628). - scsi: qedi: Fix TMF session block/unblock use (bsc#1012628). - scsi: qedi: Fix race during abort timeouts (bsc#1012628). - scsi: qedi: Fix null ref during abort handling (bsc#1012628). - scsi: iscsi: Fix shost->max_id use (bsc#1012628). - scsi: iscsi: Fix conn use after free during resets (bsc#1012628). - scsi: iscsi: Add iscsi_cls_conn refcount helpers (bsc#1012628). - scsi: megaraid_sas: Handle missing interrupts while re-enabling IRQs (bsc#1012628). - scsi: megaraid_sas: Early detection of VD deletion through RaidMap update (bsc#1012628). - scsi: megaraid_sas: Fix resource leak in case of probe failure (bsc#1012628). - fs/jfs: Fix missing error code in lmLogInit() (bsc#1012628). - scsi: scsi_dh_alua: Check for negative result value (bsc#1012628). - scsi: core: Fixup calling convention for scsi_mode_sense() (bsc#1012628). - scsi: mpt3sas: Fix deadlock while cancelling the running firmware event (bsc#1012628). - tty: serial: 8250: serial_cs: Fix a memory leak in error handling path (bsc#1012628). - ASoC: cs42l42: Fix 1536000 Bit Clock instability (bsc#1012628). - ALSA: ac97: fix PM reference leak in ac97_bus_remove() (bsc#1012628). - scsi: core: Cap scsi_host cmd_per_lun at can_queue (bsc#1012628). - scsi: lpfc: Fix crash when lpfc_sli4_hba_setup() fails to initialize the SGLs (bsc#1012628). - scsi: lpfc: Fix "Unexpected timeout" error in direct attach topology (bsc#1012628). - scsi: hisi_sas: Propagate errors in interrupt_init_v1_hw() (bsc#1012628). - scsi: arcmsr: Fix doorbell status being updated late on ARC-1886 (bsc#1012628). - w1: ds2438: fixing bug that would always get page0 (bsc#1012628). - ASoC: SOF: topology: fix assignment to use le32_to_cpu (bsc#1012628). - usb: common: usb-conn-gpio: fix NULL pointer dereference of charger (bsc#1012628). - Revert "ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro" (bsc#1012628). - ALSA: usx2y: Don't call free_pages_exact() with NULL address (bsc#1012628). - ALSA: usx2y: Avoid camelCase (bsc#1012628). - iio: magn: bmc150: Balance runtime pm + use pm_runtime_resume_and_get() (bsc#1012628). - iio: gyro: fxa21002c: Balance runtime pm + use pm_runtime_resume_and_get() (bsc#1012628). - iio: imu: st_lsm6dsx: correct ODR in header (bsc#1012628). - partitions: msdos: fix one-byte get_unaligned() (bsc#1012628). - ASoC: intel/boards: add missing MODULE_DEVICE_TABLE (bsc#1012628). - misc: alcor_pci: fix null-ptr-deref when there is no PCI bridge (bsc#1012628). - misc/libmasm/module: Fix two use after free in ibmasm_init_one (bsc#1012628). - serial: 8250: of: Check for CONFIG_SERIAL_8250_BCM7271 (bsc#1012628). - serial: fsl_lpuart: disable DMA for console and fix sysrq (bsc#1012628). - tty: serial: fsl_lpuart: fix the potential risk of division or modulo by zero (bsc#1012628). - usb: dwc3: pci: Fix DEFINE for Intel Elkhart Lake (bsc#1012628). - soundwire: bus: handle -ENODATA errors in clock stop/start sequences (bsc#1012628). - soundwire: bus: only use CLOCK_STOP_MODE0 and fix confusions (bsc#1012628). - rcu: Reject RCU_LOCKDEP_WARN() false positives (bsc#1012628). - srcu: Fix broken node geometry after early ssp init (bsc#1012628). - scsi: arcmsr: Fix the wrong CDB payload report to IOP (bsc#1012628). - dmaengine: fsl-qdma: check dma_set_mask return value (bsc#1012628). - ASoC: Intel: sof_sdw: add mutual exclusion between PCH DMIC and RT715 (bsc#1012628). - leds: tlc591xx: fix return value check in tlc591xx_probe() (bsc#1012628). - net: bridge: multicast: fix MRD advertisement router port marking race (bsc#1012628). - net: bridge: multicast: fix PIM hello router port marking race (bsc#1012628). - drm/dp_mst: Add missing drm parameters to recently added call to drm_dbg_kms() (bsc#1012628). - drm/dp_mst: Avoid to mess up payload table by ports in stale topology (bsc#1012628). - drm/dp_mst: Do not set proposed vcpi directly (bsc#1012628). - btrfs: zoned: fix wrong mutex unlock on failure to allocate log root tree (bsc#1012628). - btrfs: don't block if we can't acquire the reclaim lock (bsc#1012628). - btrfs: rework chunk allocation to avoid exhaustion of the system chunk array (bsc#1012628). - btrfs: fix deadlock with concurrent chunk allocations involving system chunks (bsc#1012628). - btrfs: zoned: fix types for u64 division in btrfs_reclaim_bgs_work (bsc#1012628). - btrfs: properly split extent_map for REQ_OP_ZONE_APPEND (bsc#1012628). - io_uring: use right task for exiting checks (bsc#1012628). - arm64: Avoid premature usercopy failure (bsc#1012628). - mm/hugetlb: fix refs calculation from unaligned @vaddr (bsc#1012628). - EDAC/igen6: fix core dependency AGAIN (bsc#1012628). - Update config files. - fbmem: Do not delete the mode that is still in use (bsc#1012628). - cgroup: verify that source is a string (bsc#1012628). - drm/i915/gt: Fix -EDEADLK handling regression (bsc#1012628). - drm/i915/gtt: drop the page table optimisation (bsc#1012628). - drm/amdgpu: add another Renoir DID (bsc#1012628). - tracing: Do not reference char * as a string in histograms (bsc#1012628). - iommu/vt-d: Fix clearing real DMA device's scalable-mode context entries (bsc#1012628). - iommu/vt-d: Global devTLB flush when present context entry changed (bsc#1012628). - scsi: zfcp: Report port fc_security as unknown early during remote cable pull (bsc#1012628). - scsi: core: Fix bad pointer dereference when ehandler kthread is invalid (bsc#1012628). - KVM: SVM: remove INIT intercept handler (bsc#1012628). - KVM: SVM: #SMI interception must not skip the instruction (bsc#1012628). - KVM: X86: Disable hardware breakpoints unconditionally before kvm_x86->run() (bsc#1012628). - KVM: nSVM: Check the value written to MSR_VM_HSAVE_PA (bsc#1012628). - KVM: SVM: Revert clearing of C-bit on GPA in #NPF handler (bsc#1012628). - KVM: x86/mmu: Do not apply HPA (memory encryption) mask to GPAs (bsc#1012628). - KVM: x86: Use kernel's x86_phys_bits to handle reduced MAXPHYADDR (bsc#1012628). - KVM: x86: Use guest MAXPHYADDR from CPUID.0x8000_0008 iff TDP is enabled (bsc#1012628). - KVM: selftests: do not require 64GB in set_memory_region_test (bsc#1012628). - KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio (bsc#1012628). - cifs: Do not use the original cruid when following DFS links for multiuser mounts (bsc#1012628). - cifs: handle reconnect of tcon when there is no cached dfs referral (bsc#1012628). - cifs: use the expiry output of dns_query to schedule next resolution (bsc#1012628). - commit da86d62 ==== libselinux ==== Subpackages: libselinux1 selinux-tools - Add missing libselinux-utils Provides to selinux-tools so that %selinux_requires works ==== libsepol ==== - Fix heap-based buffer over-read in ebitmap_match_any (CVE-2021-36087, 1187928. Added CVE-2021-36087.patch ==== libslirp ==== Version update (4.6.0 -> 4.6.1+7) - Update to version 4.6.1+7: * Haiku: proper path to resolv.conf for DNS server * Fix for Haiku * dhcp: Always send DHCP_OPT_LEN bytes in options - Commit _servicedata to fix changelogs - Don't include .git in source archive, not needed - Run set_version together with obs_scm - Update to version 4.6.1: * Release v4.6.1 * Fix "DHCP broken in libslirp v4.6.0" ==== netcfg ==== - Add localhost.localdomain fallback hostname used by NetworkManager (bsc#1177835). ==== podman ==== Version update (3.2.2 -> 3.2.3) Subpackages: podman-cni-config - Update to version 3.2.3: * Bump to v3.2.3 * Update release notes for v3.2.3 * vendor containers/common@v0.38.16 * vendor containers/buildah@v1.21.3 * Fix race conditions in rootless cni setup * CNI-in-slirp4netns: fix bind-mount for /run/systemd/resolve/stub-resolv.conf * Make rootless-cni setup more robust * Support uid,gid,mode options for secrets * vendor containers/common@v0.38.15 * [CI:DOCS] podman search: clarify that results depend on implementation * vendor containers/common@v0.38.14 * vendor containers/common@v0.38.13 * [3.2] vendor containers/common@v0.38.12 * Bump README to v3.2.2 * Bump to v3.2.3-dev ==== python-setuptools ==== Version update (57.0.0 -> 57.4.0) - update to version 57.4.0: * Changes + #2722: Added support for SETUPTOOLS_EXT_SUFFIX environment variable to override the suffix normally detected from the sysconfig module. - changes from version 57.3.0: * Changes + #2465: Documentation is now published using the Furo theme. - changes from version 57.2.0: * Changes + #2724: Added detection of Windows ARM64 build environments using the VSCMD_ARG_TGT_ARCH environment variable. - changes from version 57.1.0: * Changes + #2692: Globs are now sorted in 'license_files' restoring reproducibility by eliminating variance from disk order. + #2714: Update to distutils at pypa/distutils@e2627b7. + #2715: Removed reliance on deprecated ssl.match_hostname by removing the ssl support. Now any index operations rely on the native SSL implementation. * Documentation changes + #2604: Revamped the backward/cross tool compatibility section to remove some confusion. Add some examples and the version since when entry_points are supported in declarative configuration. Tried to make the reading flow a bit leaner, gather some informations that were a bit dispersed.