Packages changed: Mesa (21.1.0 -> 21.1.1) Mesa-drivers (21.1.0 -> 21.1.1) NetworkManager acl (2.2.53 -> 2.3.1) apparmor augeas branding-openSUSE cifs-utils (6.12 -> 6.13) cni cockpit (243 -> 245) dav1d (0.8.2 -> 0.9.0) dhcp (4.4.2 -> 4.4.2.P1) drpm (0.4.1 -> 0.5.0) exiv2 filesystem gcc (10 -> 11) gcc11 (11.0.0+git183291 -> 11.1.1+git121) gjs (1.68.0 -> 1.68.1) glib2 (2.68.1 -> 2.68.2) gnome-packagekit gnome-shell-extensions (40.0 -> 40.1) gnutls graphite2 gtk4 (4.2.0 -> 4.2.1) hwinfo (21.73 -> 21.74) installation-images-MicroOS (17.3 -> 17.6) isl (0.23 -> 0.24) issue-generator (1.12 -> 1.13) json-c kdump kernel-source (5.12.3 -> 5.12.4) kio krb5 less (581.2 -> 586) libX11 (1.7.0 -> 1.7.1) libapparmor libcontainers-common libepoxy (1.5.5 -> 1.5.8) libidn2 (2.3.0 -> 2.3.1) libinput (1.17.2 -> 1.17.3) libphonenumber (8.12.22 -> 8.12.23) libportal (0.3 -> 0.4) libqmi (1.28.2 -> 1.28.4) libqt5-qtbase libqt5-qtwayland librsvg (2.50.5 -> 2.50.6) libsigc++2 (2.10.6 -> 2.10.7) libsrtp2 libtirpc (1.3.1 -> 1.3.2) libwacom (1.6 -> 1.10) llvm12 logrotate (3.18.0 -> 3.18.1) lua54 mdadm mozilla-nspr (4.30 -> 4.31) mozilla-nss (3.63.1 -> 3.64) multipath-tools (0.8.5+30+suse.633836e -> 0.8.6+10+suse.4771137) nautilus pango (1.48.4 -> 1.48.5) patterns-base patterns-microos perl-HTTP-Message (6.31 -> 6.32) permissions (1550_20210125 -> 1550_20210518) pipewire (0.3.27 -> 0.3.28) polkit-default-privs (1550+20210503.88baaca -> 1550+20210520.336dcea) poppler (21.04.0 -> 21.05.0) poppler-qt5 (21.04.0 -> 21.05.0) psmisc python-PyJWT (2.0.1 -> 2.1.0) python-asn1crypto python-idna python-jsonpatch (1.31 -> 1.32) python-jsonschema python-networkx (2.5 -> 2.5.1) python-oauthlib python-pyasn1 python-pytz rpm runc (1.0.0~rc94 -> 1.0.0~rc95) selinux-policy sgml-skel signon-plugin-oauth2 (0.24 -> 0.25) snapper sssd (2.4.2 -> 2.5.0) telepathy-logger u-boot-rpiarm64 vim (8.2.2800 -> 8.2.2850) vte (0.64.0 -> 0.64.1) webkit2gtk3 (2.32.0 -> 2.32.1) xdm xfsprogs (5.11.0 -> 5.12.0) xmlsec1 (1.2.31 -> 1.2.32) yast2 (4.4.3 -> 4.4.5) zchunk (1.1.11 -> 1.1.14) zstd (1.4.9 -> 1.5.0) zvbi === Details === ==== Mesa ==== Version update (21.1.0 -> 21.1.1) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - update to 21.1.1 * bugfix release * mostly AMD and Intel changes as usual, but also a decent amount of ARM fixes and more - Add swrast to vulkan - Enable vulkan on %{arm} and aarch64 with: swrast, amd, broadcom and freedreno ==== Mesa-drivers ==== Version update (21.1.0 -> 21.1.1) Subpackages: Mesa-dri Mesa-gallium - update to 21.1.1 * bugfix release * mostly AMD and Intel changes as usual, but also a decent amount of ARM fixes and more - Add swrast to vulkan - Enable vulkan on %{arm} and aarch64 with: swrast, amd, broadcom and freedreno ==== NetworkManager ==== Subpackages: libnm0 typelib-1_0-NM-1_0 - Add nm-add-CAP_CHOWN-capability.patch: Add CAP_CHOWN to CapabilityBoundingSet to make teamd work properly (glfd#NetworkManager/NetworkManager!860, bsc#1185424). - Drop networkmanager-obs-net.patch: the patch needs a full rework. - Drop networkmanager-checks-po.patch: as it was supposed to fix something introduced by another patch which we still carry, yet we can live with this patch disabled, I'd infer this patch is not nescessary. ==== acl ==== Version update (2.2.53 -> 2.3.1) - modernize spec-file (move license to licensedir) - Update to version 2.3.1 * Update German translation * getfacl: fix indent in --help output * getfacl: Add --one-file-system option, with this option getfacl will not cross mount points * Fix segfault on allocation failure * Avoid SIGSEGV with link-time optimisation enabled - Use SourceUrls ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils python3-apparmor - add abstractions-php8.diff to support PHP8 in abstractions/php (boo#1186267) ==== augeas ==== - Allow all printable ASCII characters in WPA-PSK definition * augeas-allow_printable_ASCII.patch * bsc#1185524 * Sourced from https://github.com/hercules-team/augeas/pull/723/commits * Credit to Michal Filka ==== branding-openSUSE ==== Subpackages: grub2-branding-openSUSE systemd-icon-branding-openSUSE wallpaper-branding-openSUSE - Enable grub2-branding on riscv64 ==== cifs-utils ==== Version update (6.12 -> 6.13) - Update to cifs-utils 6.13 * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container * remove cifs-utils-6.12.tar.bz2 * remove cifs-utils-6.12.tar.bz2.asc * add cifs-utils-6.13.tar.bz2 * add cifs-utils-6.13.tar.bz2.asc - Drop upstream fixed patches: * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch ==== cni ==== - use buildmode=pie (cnitool is installed into sbindir) - Set GO111MODULE=auto to build with go1.16+ * Default changed to GO111MODULE=on in go1.16 * Set temporarily until using upstream release with go.mod * Drop BuildRequires: golang-packaging not currently using macros * Add BuildRequires: golang(API) >= 1.13 recommended dependency expression ==== cockpit ==== Version update (243 -> 245) Subpackages: cockpit-bridge cockpit-system - new version 255 https://cockpit-project.org/blog/cockpit-245.html - new version 244.1 https://cockpit-project.org/blog/cockpit-244.html - enable SELinux ==== dav1d ==== Version update (0.8.2 -> 0.9.0) - Update to version 0.9.0 * x86 (64bit) AVX2 implementation of most 10b/12b functions, which should provide a large boost for high-bitdepth decoding on modern x86 computers and servers. * ARM64 neon implementation of FilmGrain (4:2:0/4:2:2/4:4:4 8bit) * New API to signal events happening during the decoding process ==== dhcp ==== Version update (4.4.2 -> 4.4.2.P1) Subpackages: dhcp-client - Add -fno-strict-aliasing to CFLAGS to avoid a segfault in dhcpd (boo#1186631). - Update to 4.4.2-P1: * CVE-2021-25217, bsc#1186382: A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient. - Error out, if %version and %isc_version are not in sync. ==== drpm ==== Version update (0.4.1 -> 0.5.0) - update to 0.5.0: * fix a memory leak on invalid input * Hide the internal library symbols ==== exiv2 ==== - Add 1271.patch: Fix build using GCC 11 (boo#1185218). - Drop the sed hack to remove -fcf-protection: this is properly solved with the above patch. - -fcf-protection doesn't work on i586 with gcc11 either (boo#1185218) ==== filesystem ==== - temporarily revert icon and fillup dir to 0755 until fallout is fixed (bsc#1184786) - Remove /usr/share/java, as it was moved to javapackages-filesystem long ago - temporarily mark appdata and applications 0755 again until fallout is fixed (bsc#1184786) - make restricteddir and datadir readonly (bsc#1184786) - also make includedir, mandir, licensedir readonly (bsc#1184786) ==== gcc ==== Version update (10 -> 11) - Switch gcc to default 11. - Adjust liblto_plugin.so naming for GCC 11. ==== gcc11 ==== Version update (11.0.0+git183291 -> 11.1.1+git121) Subpackages: libgcc_s1 libgomp1 libstdc++6 libubsan1 - Update to gcc-11 branch head (23855a176609fe8dda6abaf2b2), git121 - Disable build-id generation on non-glibc targeting cross compilers. - Update to gcc-11 branch head (cd0a059bd384da58d43674496a7), git67 * Includes GCC 11.1 release - Drop upstreamed gcc11-no-offload.patch. - Update to gcc-11 branch head (7a7fc01b9d20afb1a2b805d93cb), git31 * Includes GCC 11.1 RC2 - Add gcc11-no-offload.patch and gcc11-amdgcn-disable-hot-cold-partitioning.patch. - Enable gfortran for offload compilers. - BuildRequire procps from gcc11-testresults if we test go. - Force using llvm11 for amdgcn offloading since llvm12 doesn't yet work. Package expanded symlinks so concurrent installs do not pull in another llvm-mc. - Add gcc11-gdwarf-4-default.patch to default to DWARF4 generation in SLES15 and older. - Update to gcc-11 branch head (27350b77a92062667427100afb4), git10 * Includes GCC 11.1 RC1 - Bump to 49813aad3292f7f2bef69206274da78a9a7116ed. - Disable nvptx offloading on aarch64 since it doesn't work. - Bump to a87d3f964df31d4fbceb822c6d293e85c117d992. - Remove gcc48-remove-mpfr-2.4.0-requirement.patch which does no longer apply. - Arrange for a C++ 11 capable host compiler to be available. - Do not require ISL for cross compiler builds on old distros. - Bump to 123b3e03c911a43054c1f88f5d3110e1d084dd4e. - Update embedded newlib version from 3.3.0 to 4.1.0. - Pack %{GCCDIST}-gcc%{binsuffix}. - Add a new dependency for libgccjit. - New package, inherits from gcc10 * gcc-add-defaultsspec.diff, add the ability to provide a specs file that is read by default * tls-no-direct.diff, avoid direct %fs references on x86 to not slow down Xen * gcc43-no-unwind-tables.diff, do not produce unwind tables for CRT files * gcc41-ppc32-retaddr.patch, fix expansion of __builtin_return_addr for ppc, just a testcase * gcc44-textdomain.patch, make translation files version specific and adjust textdomain to find them * gcc44-rename-info-files.patch, fix cross-references in info files when renaming them to be version specific * gcc48-libstdc++-api-reference.patch, fix link in the installed libstdc++ html documentation * gcc48-remove-mpfr-2.4.0-requirement.patch, make GCC work with earlier mpfr versions on old products * gcc5-no-return-gcc43-workaround.patch, make build work with host gcc 4.3 * gcc7-remove-Wexpansion-to-defined-from-Wextra.patch, removes new warning from -Wextra * gcc7-avoid-fixinc-error.diff * gcc9-reproducible-builds-buildid-for-checksum.patch * gcc9-reproducible-builds.patch * gcc10-amdgcn-llvm-as.patch * gcc10-foffload-default.patch - libgccjit subpackage is added. - HWASAN is built for aarch64 target. ==== gjs ==== Version update (1.68.0 -> 1.68.1) Subpackages: libgjs0 typelib-1_0-GjsPrivate-1_0 - Update to version 1.68.1: + Many stability fixes due to refactoring how disposed GObjects are handled. ==== glib2 ==== Version update (2.68.1 -> 2.68.2) Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 - Update to version 2.68.2: + Fix building third-party projects against GLib on CentOS 7. + Bugs fixed: - json-glib does not build with glib 2.68.1. - gmacros: check that __cplusplus or _MSC_VER is defined. - gmacros: missing check if __STDC_VERSION__ is defined. - Backport !2078 ?gthreadedresolver: don't ignore flags in lookup_by_name_with_flags? to glib-2-68. ==== gnome-packagekit ==== - Normalize used patch tags. ==== gnome-shell-extensions ==== Version update (40.0 -> 40.1) - Update to version 40.1: + Disable welcome dialog in classic session. + windowsNavigator: Adjust to a late gnome-shell change. ==== gnutls ==== - Compute the FIPS hmac file without re-defining the __os_install_post macro, use the brp-50-generate-fips-hmac script instead. [bsc#1184555] - Require the main package in devel and lib packages as the default priorities are now set via crypto-policies. [bsc#1183082] ==== graphite2 ==== - Define conditionally make_build to fix build on systems that do not have that macro ==== gtk4 ==== Version update (4.2.0 -> 4.2.1) Subpackages: gtk4-schema libgtk-4-1 typelib-1_0-Gtk-4_0 - Update to version 4.2.1: + GtkVideo: Detect stream metadata when using gstreamer + GtkFileChooser: Fix a crash + GtkButton: Add back visual feedback for keynav activation + GtkFontChooser: Fix initial font selection + GtkScrolledWindow: Stop using scroll cursors + GtkMenuButton: Make focus-on-click work + GtkToggleButton: Make grouped buttons mutually exclusive + GtkPasswordEntry: Use MADV_DONTDUMP for secure memory + GtkListBox: Allow repeated selection extension for MULTIPLE + GdkClipboard: Ensure strings are nul-terminated + GSK: - Fix offscreen rendering with transforms - Fix downscaled textures - Avoid huge intermediate textures - Make shadow rendering match across renderers + Text widgets: Support translucent selections + Wayland: - Improve font settings fallback - Avoid unintentional rendering freezes with popovers + X11: - Don't beep on untrusted displays - Don't crash when popovers are outside the workarea + Themes: - Fix resize border sizing - Fix solid-csd window decorations + Input: - Revert some Compose sequence changes - Consume all key events during preedit, to avoid unexpected interactions - Ignore more modifiers during preedit, to allow using 3rd and 5th level choosers - Fix handling of cursor positions in non-ASCII preedit text - Fix a problem with deferred focus setting ==== hwinfo ==== Version update (21.73 -> 21.74) - merge gh#openSUSE/hwinfo#98 - update pci and usb ids - 21.74 ==== installation-images-MicroOS ==== Version update (17.3 -> 17.6) - merge gh#openSUSE/installation-images#513 - Keep /usr/lib/ld-* also if lib64 exists - Use ld*so* as glob for the runtime linker - Keep /usr/lib/ld*so* also if lib64 exists - 17.6 - merge gh#openSUSE/installation-images#512 - Fix previous typo adding chipidea modules - 17.5 - merge gh#openSUSE/installation-images#511 - Add chipidea modules (bsc#1184867) - 17.4 ==== isl ==== Version update (0.23 -> 0.24) - update to 0.24: - improved (C++) bindings (inherit methods, renamed exports) - initial templated C++ bindings - detect bounds on constant polynomials as tight ==== issue-generator ==== Version update (1.12 -> 1.13) - Update to version 1.13 - SELinux: Do not call agetty --reload [bsc#1186178] ==== json-c ==== - Add -std=gnu99 to fix build with some gcc versions ==== kdump ==== - Fix use of DNS in the panic environment (bsc#1183070): * kdump-avoid-endless-loop-on-EAI_AGAIN.patch: Avoid an endless loop when resolving a hostname fails with EAI_AGAIN. * kdump-install-real-resolv.conf.patch: Install /etc/resolv.conf using its resolved path. - kdump-fix-incorrect-exit-code-checking.patch: Fix incorrect exit code checking after "local" with assignment (bsc#1184616, LTC#192282) - kdump-do-not-iterate-past-end-of-string.patch: Fix a crash caused by iterating past end of string (bsc#1186037). ==== kernel-source ==== Version update (5.12.3 -> 5.12.4) - can: isotp: prevent race between isotp_bind() and isotp_setsockopt() (CVE-2021-32606 bsc#1185953 bsc#1185564). - commit cf6ea2f - usb: pci-quirks: disable D3cold on xhci suspend for s2idle on AMD Renoire (bsc#1185840). - ACPI / idle: override c-state latency when not in conformance with s0ix (bsc#1185840). - ACPI: PM: s2idle: Add missing LPS0 functions for AMD (bsc#1185840). - commit 152b604 - ipc/mqueue, msg, sem: Avoid relying on a stack reference past its expiry (bsc#1185988). - commit 2d71c6c - drm/i915/gem: Pin the L-shape quirked object as unshrinkable (bsc#1185624 bsc#1186075). - commit 6e53ea2 - serial: stm32: fix threaded interrupt handling (git-fixes). - usb: typec: tcpm: Fix error while calculating PPS out values (git-fixes). - RDMA/core: Unify RoCE check and re-factor code (git-fixes). - commit a5aafd4 - Linux 5.12.4 (bsc#1012628). - Bluetooth: verify AMP hci_chan before amp_destroy (bsc#1012628). - bluetooth: eliminate the potential race condition when removing the HCI controller (bsc#1012628). - net/nfc: fix use-after-free llcp_sock_bind/connect (bsc#1012628). - io_uring: truncate lengths larger than MAX_RW_COUNT on provide buffers (bsc#1012628). - coresight: etm-perf: Fix define build issue when built as module (bsc#1012628). - software node: Allow node addition to already existing device (bsc#1012628). - Revert "USB: cdc-acm: fix rounding error in TIOCSSERIAL" (bsc#1012628). - usb: roles: Call try_module_get() from usb_role_switch_find_by_fwnode() (bsc#1012628). - tty: moxa: fix TIOCSSERIAL jiffies conversions (bsc#1012628). - tty: amiserial: fix TIOCSSERIAL permission check (bsc#1012628). - USB: serial: usb_wwan: fix TIOCSSERIAL jiffies conversions (bsc#1012628). - staging: greybus: uart: fix TIOCSSERIAL jiffies conversions (bsc#1012628). - USB: serial: ti_usb_3410_5052: fix TIOCSSERIAL permission check (bsc#1012628). - staging: fwserial: fix TIOCSSERIAL jiffies conversions (bsc#1012628). - tty: moxa: fix TIOCSSERIAL permission check (bsc#1012628). - tty: mxser: fix TIOCSSERIAL jiffies conversions (bsc#1012628). - staging: fwserial: fix TIOCSSERIAL permission check (bsc#1012628). - tty: mxser: fix TIOCSSERIAL permission check (bsc#1012628). - drm: bridge: fix LONTIUM use of mipi_dsi_() functions (bsc#1012628). - usb: typec: tcpm: Address incorrect values of tcpm psy for fixed supply (bsc#1012628). - usb: typec: tcpm: Address incorrect values of tcpm psy for pps supply (bsc#1012628). - usb: typec: tcpm: update power supply once partner accepts (bsc#1012628). - USB: serial: xr: fix CSIZE handling (bsc#1012628). - usb: xhci-mtk: remove or operator for setting schedule parameters (bsc#1012628). - usb: xhci-mtk: improve bandwidth scheduling with TT (bsc#1012628). - ASoC: samsung: tm2_wm5110: check of of_parse return value (bsc#1012628). - ASoC: Intel: kbl_da7219_max98927: Fix kabylake_ssp_fixup function (bsc#1012628). - ASoC: tlv320aic32x4: Register clocks before registering component (bsc#1012628). - ASoC: tlv320aic32x4: Increase maximum register in regmap (bsc#1012628). - MIPS: pci-mt7620: fix PLL lock check (bsc#1012628). - MIPS: pci-rt2880: fix slot 0 configuration (bsc#1012628). - FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR (bsc#1012628). - PCI: Allow VPD access for QLogic ISP2722 (bsc#1012628). - KVM: x86: Defer the MMU unload to the normal path on an global INVPCID (bsc#1012628). - PCI: xgene: Fix cfg resource mapping (bsc#1012628). - PCI: keystone: Let AM65 use the pci_ops defined in pcie-designware-host.c (bsc#1012628). - PM / devfreq: Unlock mutex and free devfreq struct in error path (bsc#1012628). - soc/tegra: regulators: Fix locking up when voltage-spread is out of range (bsc#1012628). - iio: inv_mpu6050: Fully validate gyro and accel scale writes (bsc#1012628). - iio: magnetometer: yas530: Include right header (bsc#1012628). - iio: sx9310: Fix write_.._debounce() (bsc#1012628). - iio:accel:adis16201: Fix wrong axis assignment that prevents loading (bsc#1012628). - iio:adc:ad7476: Fix remove handling (bsc#1012628). - iio: magnetometer: yas530: Fix return value on error path (bsc#1012628). - iio: sx9310: Fix access to variable DT array (bsc#1012628). - iio: hid-sensor-rotation: Fix quaternion data not correct (bsc#1012628). - sc16is7xx: Defer probe if device read fails (bsc#1012628). - phy: cadence: Sierra: Fix PHY power_on sequence (bsc#1012628). - misc: lis3lv02d: Fix false-positive WARN on various HP models (bsc#1012628). - phy: ti: j721e-wiz: Invoke wiz_init() before of_platform_device_create() (bsc#1012628). - misc: vmw_vmci: explicitly initialize vmci_notify_bm_set_msg struct (bsc#1012628). - misc: vmw_vmci: explicitly initialize vmci_datagram payload (bsc#1012628). - selinux: add proper NULL termination to the secclass_map permissions (bsc#1012628). - x86, sched: Treat Intel SNC topology as default, COD as exception (bsc#1012628). - async_xor: increase src_offs when dropping destination page (bsc#1012628). - md/bitmap: wait for external bitmap writes to complete during tear down (bsc#1012628). - md-cluster: fix use-after-free issue when removing rdev (bsc#1012628). - md: split mddev_find (bsc#1012628). - md: factor out a mddev_find_locked helper from mddev_find (bsc#1012628). - md: md_open returns -EBUSY when entering racing area (bsc#1012628). - md: Fix missing unused status line of /proc/mdstat (bsc#1012628). - MIPS: generic: Update node names to avoid unit addresses (bsc#1012628). - mt76: mt7615: use ieee80211_free_txskb() in mt7615_tx_token_put() (bsc#1012628). - ipw2x00: potential buffer overflow in libipw_wx_set_encodeext() (bsc#1012628). - net: xilinx: drivers need/depend on HAS_IOMEM (bsc#1012628). - cfg80211: scan: drop entry from hidden_list on overflow (bsc#1012628). - rtw88: Fix array overrun in rtw_get_tx_power_params() (bsc#1012628). - mt76: fix potential DMA mapping leak (bsc#1012628). - FDDI: defxx: Make MMIO the configuration default except for EISA (bsc#1012628). - drm/qxl: use ttm bo priorities (bsc#1012628). - drm/ingenic: Fix non-OSD mode (bsc#1012628). - drm/panfrost: Clear MMU irqs before handling the fault (bsc#1012628). - drm/panfrost: Don't try to map pages that are already mapped (bsc#1012628). - drm/radeon: fix copy of uninitialized variable back to userspace (bsc#1012628). - drm/dp_mst: Revise broadcast msg lct & lcr (bsc#1012628). - drm/dp_mst: Set CLEAR_PAYLOAD_ID_TABLE as broadcast (bsc#1012628). - drm: bridge: fix ANX7625 use of mipi_dsi_() functions (bsc#1012628). - drm: bridge/panel: Cleanup connector on bridge detach (bsc#1012628). - drm/amd/display: Reject non-zero src_y and src_x for video planes (bsc#1012628). - drm/amdgpu: fix concurrent VM flushes on Vega/Navi v2 (bsc#1012628). - drm/amdgpu: add new MC firmware for Polaris12 32bit ASIC (bsc#1012628). - drm/amdgpu: fix r initial values (bsc#1012628). - drm/amdgpu: Init GFX10_ADDR_CONFIG for VCN v3 in DPG mode (bsc#1012628). - ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC882 Clevo quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC269 HP quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC269 Acer quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC269 Dell quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC269 ASUS quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order remaining ALC269 quirk table entries (bsc#1012628). - ALSA: hda/realtek: Re-order ALC662 quirk table entries (bsc#1012628). - ALSA: hda/realtek: Remove redundant entry for ALC861 Haier/Uniwill devices (bsc#1012628). - ALSA: hda/realtek: Fix speaker amp on HP Envy AiO 32 (bsc#1012628). - KVM: s390: VSIE: correctly handle MVPG when in VSIE (bsc#1012628). - KVM: s390: split kvm_s390_logical_to_effective (bsc#1012628). - KVM: s390: fix guarded storage control register handling (bsc#1012628). - s390: fix detection of vector enhancements facility 1 vs. vector packed decimal facility (bsc#1012628). - KVM: s390: VSIE: fix MVPG handling for prefixing and MSO (bsc#1012628). - KVM: s390: split kvm_s390_real_to_abs (bsc#1012628). - KVM: s390: extend kvm_s390_shadow_fault to return entry pointer (bsc#1012628). - KVM: x86/mmu: Alloc page for PDPTEs when shadowing 32-bit NPT with 64-bit (bsc#1012628). - KVM: x86/xen: Drop RAX[63:32] when processing hypercall (bsc#1012628). - KVM: X86: Fix failure to boost kernel lock holder candidate in SEV-ES guests (bsc#1012628). - KVM: x86: Properly handle APF vs disabled LAPIC situation (bsc#1012628). - KVM: x86: Check CR3 GPA for validity regardless of vCPU mode (bsc#1012628). - KVM: x86: Remove emulator's broken checks on CR0/CR3/CR4 loads (bsc#1012628). - KVM: nSVM: Set the shadow root level to the TDP level for nested NPT (bsc#1012628). - KVM: SVM: Don't strip the C-bit from CR2 on #PF interception (bsc#1012628). - KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs (bsc#1012628). - KVM: SVM: Do not set sev->es_active until KVM_SEV_ES_INIT completes (bsc#1012628). - KVM: SVM: Do not allow SEV/SEV-ES initialization after vCPUs are created (bsc#1012628). - KVM: SVM: Inject #GP on guest MSR_TSC_AUX accesses if RDTSCP unsupported (bsc#1012628). - KVM: nVMX: Defer the MMU reload to the normal path on an EPTP switch (bsc#1012628). - KVM: VMX: Truncate GPR value for DR and CR reads in !64-bit mode (bsc#1012628). - KVM: nVMX: Truncate bits 63:32 of VMCS field on nested check in !64-bit (bsc#1012628). - KVM: nVMX: Truncate base/index GPR value on address calc in !64-bit (bsc#1012628). - KVM: arm/arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST read (bsc#1012628). - KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU (bsc#1012628). - KVM: Stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1012628). - KVM: arm64: Support PREL/PLT relocs in EL2 code (bsc#1012628). - KVM: arm64: Fully zero the vcpu state on reset (bsc#1012628). - KVM: arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST_REGION read (bsc#1012628). - KVM: selftests: Sync data verify of dirty logging with guest sync (bsc#1012628). - KVM: selftests: Always run vCPU thread with blocked SIG_IPI (bsc#1012628). - Revert "drivers/net/wan/hdlc_fr: Fix a double free in pvc_xmit" (bsc#1012628). - Revert "i3c master: fix missing destroy_workqueue() on error in i3c_master_register" (bsc#1012628). - mfd: stmpe: Revert "Constify static struct resource" (bsc#1012628). - ovl: fix missing revert_creds() on error path (bsc#1012628). - usb: gadget: pch_udc: Revert d3cb25a12138 completely (bsc#1012628). - Revert "tools/power turbostat: adjust for temperature offset" (bsc#1012628). - firmware: xilinx: Fix dereferencing freed memory (bsc#1012628). - firmware: xilinx: Remove zynqmp_pm_get_eemi_ops() in IS_REACHABLE(CONFIG_ZYNQMP_FIRMWARE) (bsc#1012628). - x86/vdso: Use proper modifier for len's format specifier in extract() (bsc#1012628). - fpga: fpga-mgr: xilinx-spi: fix error messages on -EPROBE_DEFER (bsc#1012628). - crypto: keembay-ocs-hcu - Fix error return code in kmb_ocs_hcu_probe() (bsc#1012628). - crypto: keembay-ocs-aes - Fix error return code in kmb_ocs_aes_probe() (bsc#1012628). - crypto: sun8i-ss - fix result memory leak on error path (bsc#1012628). - memory: gpmc: fix out of bounds read and dereference on gpmc_cs[] (bsc#1012628). - ARM: dts: exynos: correct fuel gauge interrupt trigger level on GT-I9100 (bsc#1012628). - ARM: dts: exynos: correct fuel gauge interrupt trigger level on P4 Note family (bsc#1012628). - ARM: dts: exynos: correct fuel gauge interrupt trigger level on Midas family (bsc#1012628). - ARM: dts: exynos: correct MUIC interrupt trigger level on Midas family (bsc#1012628). - ARM: dts: exynos: correct PMIC interrupt trigger level on Midas family (bsc#1012628). - ARM: dts: exynos: correct PMIC interrupt trigger level on Odroid X/U3 family (bsc#1012628). - ARM: dts: exynos: correct PMIC interrupt trigger level on P4 Note family (bsc#1012628). - ARM: dts: exynos: correct PMIC interrupt trigger level on SMDK5250 (bsc#1012628). - ARM: dts: exynos: correct PMIC interrupt trigger level on Snow (bsc#1012628). - ARM: dts: s5pv210: correct fuel gauge interrupt trigger level on Fascinate family (bsc#1012628). - ARM: dts: renesas: Add mmc aliases into R-Car Gen2 board dts files (bsc#1012628). - arm64: dts: renesas: Add mmc aliases into board dts files (bsc#1012628). - bus: ti-sysc: Fix initializing module_pa for modules without sysc register (bsc#1012628). - x86/platform/uv: Set section block size for hubless architectures (bsc#1012628). - serial: stm32: fix probe and remove order for dma (bsc#1012628). - serial: stm32: fix startup by enabling usart for reception (bsc#1012628). - serial: stm32: fix incorrect characters on console (bsc#1012628). - serial: stm32: fix TX and RX FIFO thresholds (bsc#1012628). - serial: stm32: fix a deadlock condition with wakeup event (bsc#1012628). - serial: stm32: fix wake-up flag handling (bsc#1012628). - serial: stm32: fix a deadlock in set_termios (bsc#1012628). - serial: liteuart: fix return value check in liteuart_probe() (bsc#1012628). - serial: stm32: fix tx dma completion, release channel (bsc#1012628). - serial: stm32: call stm32_transmit_chars locked (bsc#1012628). - serial: stm32: fix FIFO flush in startup and set_termios (bsc#1012628). - serial: stm32: add FIFO flush when port is closed (bsc#1012628). - serial: stm32: fix tx_empty condition (bsc#1012628). - usb: typec: tcpm: Wait for vbus discharge to VSAFE0V before toggling (bsc#1012628). - usb: typec: tcpci: Check ROLE_CONTROL while interpreting CC_STATUS (bsc#1012628). - usb: typec: tps6598x: Fix return value check in tps6598x_probe() (bsc#1012628). - usb: typec: stusb160x: fix return value check in stusb160x_probe() (bsc#1012628). - mfd: intel_pmt: Fix nuisance messages and handling of disabled capabilities (bsc#1012628). - regmap: set debugfs_name to NULL after it is freed (bsc#1012628). - spi: rockchip: avoid objtool warning (bsc#1012628). - arm64: dts: broadcom: bcm4908: fix switch parent node name (bsc#1012628). - mtd: rawnand: fsmc: Fix error code in fsmc_nand_probe() (bsc#1012628). - mtd: rawnand: brcmnand: fix OOB R/W with Hamming ECC (bsc#1012628). - mtd: Handle possible -EPROBE_DEFER from parse_mtd_partitions() (bsc#1012628). - mtd: rawnand: qcom: Return actual error code instead of -ENODEV (bsc#1012628). - mtd: don't lock when recursively deleting partitions (bsc#1012628). - mtd: parsers: qcom: Fix error condition (bsc#1012628). - mtd: parsers: qcom: incompatible with spi-nor 4k sectors (bsc#1012628). - mtd: maps: fix error return code of physmap_flash_remove() (bsc#1012628). - ARM: dts: stm32: fix usart 2 & 3 pinconf to wake up with flow control (bsc#1012628). - arm64: dts: ti: k3-j721e-main: Update the speed modes supported and their itap delay values for MMCSD subsystems (bsc#1012628). - iio: adis16480: fix pps mode sampling frequency math (bsc#1012628). - arm64: dts: qcom: sc7180: trogdor: Fix trip point config of charger thermal zone (bsc#1012628). - arm64: dts: qcom: sm8250: Fix level triggered PMU interrupt polarity (bsc#1012628). - arm64: dts: qcom: sm8350: Fix level triggered PMU interrupt polarity (bsc#1012628). - arm64: dts: qcom: sm8250: Fix timer interrupt to specify EL2 physical timer (bsc#1012628). - arm64: dts: qcom: sc7180: Avoid glitching SPI CS at bootup on trogdor (bsc#1012628). - arm64: dts: qcom: sdm845: fix number of pins in 'gpio-ranges' (bsc#1012628). - arm64: dts: qcom: sm8150: fix number of pins in 'gpio-ranges' (bsc#1012628). - arm64: dts: qcom: sm8250: fix number of pins in 'gpio-ranges' (bsc#1012628). - arm64: dts: qcom: sm8350: fix number of pins in 'gpio-ranges' (bsc#1012628). - arm64: dts: qcom: db845c: fix correct powerdown pin for WSA881x (bsc#1012628). - crypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to map (bsc#1012628). - spi: stm32: drop devres version of spi_register_master (bsc#1012628). - arm64: dts: broadcom: bcm4908: set Asus GT-AC5300 port 7 PHY mode (bsc#1012628). - regulator: bd9576: Fix return from bd957x_probe() (bsc#1012628). - arm64: dts: renesas: r8a77980: Fix vin4-7 endpoint binding (bsc#1012628). - selftests/x86: Add a missing .note.GNU-stack section to thunks_32.S (bsc#1012628). - crypto: arm/blake2s - fix for big endian (bsc#1012628). - spi: stm32: Fix use-after-free on unbind (bsc#1012628). - Drivers: hv: vmbus: Drop error message when 'No request id available' (bsc#1012628). - staging: qlge: fix an error code in probe() (bsc#1012628). - x86/microcode: Check for offline CPUs before requesting new microcode (bsc#1012628). - usb: host: ehci-tegra: Select USB_GADGET Kconfig option (bsc#1012628). - devtmpfs: fix placement of complete() call (bsc#1012628). - usb: gadget: pch_udc: Replace cpu_to_le32() by lower_32_bits() (bsc#1012628). - usb: gadget: pch_udc: Check if driver is present before calling - >setup() (bsc#1012628). - usb: gadget: pch_udc: Check for DMA mapping error (bsc#1012628). - usb: gadget: pch_udc: Initialize device pointer before use (bsc#1012628). - usb: gadget: pch_udc: Provide a GPIO line used on Intel Minnowboard (v1) (bsc#1012628). - crypto: ccp - fix command queuing to TEE ring buffer (bsc#1012628). - crypto: qat - don't release uninitialized resources (bsc#1012628). - crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init (bsc#1012628). - fotg210-udc: Fix DMA on EP0 for length > max packet size (bsc#1012628). - fotg210-udc: Fix EP0 IN requests bigger than two packets (bsc#1012628). - fotg210-udc: Remove a dubious condition leading to fotg210_done (bsc#1012628). - fotg210-udc: Mask GRP2 interrupts we don't handle (bsc#1012628). - fotg210-udc: Don't DMA more than the buffer can take (bsc#1012628). - fotg210-udc: Complete OUT requests on short packets (bsc#1012628). - usb: gadget: s3c: Fix incorrect resources releasing (bsc#1012628). - usb: gadget: s3c: Fix the error handling path in 's3c2410_udc_probe()' (bsc#1012628). - dt-bindings: serial: stm32: Use 'type: object' instead of false for 'additionalProperties' (bsc#1012628). - mtd: require write permissions for locking and badblock ioctls (bsc#1012628). - arm64: dts: renesas: r8a779a0: Fix PMU interrupt (bsc#1012628). - arm64: dts: mt8183: Add gce client reg for display subcomponents (bsc#1012628). - arm64: dts: mt8173: fix wrong power-domain phandle of pmic (bsc#1012628). - bus: qcom: Put child node before return (bsc#1012628). - arm64: dts: qcom: sm8250: fix display nodes (bsc#1012628). - soundwire: bus: Fix device found flag correctly (bsc#1012628). - soc: mediatek: pm-domains: Fix missing error code in scpsys_add_subdomain() (bsc#1012628). - phy: ti: j721e-wiz: Delete "clk_div_sel" clk provider during cleanup (bsc#1012628). - phy: ralink: phy-mt7621-pci: fix XTAL bitmask (bsc#1012628). - phy: marvell: ARMADA375_USBCLUSTER_PHY should not default to y, unconditionally (bsc#1012628). - phy: ralink: phy-mt7621-pci: fix return value check in mt7621_pci_phy_probe() (bsc#1012628). - phy: ingenic: Fix a typo in ingenic_usb_phy_probe() (bsc#1012628). - arm64: dts: mediatek: fix reset GPIO level on pumpkin (bsc#1012628). - NFSv4.2: fix copy stateid copying for the async copy (bsc#1012628). - crypto: poly1305 - fix poly1305_core_setkey() declaration (bsc#1012628). - crypto: qat - fix error path in adf_isr_resource_alloc() (bsc#1012628). - usb: gadget: aspeed: fix dma map failure (bsc#1012628). - USB: gadget: udc: fix wrong pointer passed to IS_ERR() and PTR_ERR() (bsc#1012628). - drivers: nvmem: Fix voltage settings for QTI qfprom-efuse (bsc#1012628). - nvmem: rmem: fix undefined reference to memremap (bsc#1012628). - driver core: platform: Declare early_platform_cleanup() prototype (bsc#1012628). - ARM: dts: qcom: msm8974-lge-nexus5: correct fuel gauge interrupt trigger level (bsc#1012628). - ARM: dts: qcom: msm8974-samsung-klte: correct fuel gauge interrupt trigger level (bsc#1012628). - memory: pl353: fix mask of ECC page_size config register (bsc#1012628). - soundwire: stream: fix memory leak in stream config error path (bsc#1012628). - m68k: mvme147,mvme16x: Don't wipe PCC timer config bits (bsc#1012628). - firmware: qcom_scm: Make __qcom_scm_is_call_available() return bool (bsc#1012628). - firmware: qcom_scm: Reduce locking section for __get_convention() (bsc#1012628). - firmware: qcom_scm: Workaround lack of "is available" call on SC7180 (bsc#1012628). - iio: adc: Kconfig: make AD9467 depend on ADI_AXI_ADC symbol (bsc#1012628). - mtd: rawnand: gpmi: Fix a double free in gpmi_nand_init (bsc#1012628). - irqchip/gic-v3: Fix OF_BAD_ADDR error handling (bsc#1012628). - staging: comedi: tests: ni_routes_test: Fix compilation error (bsc#1012628). - staging: rtl8192u: Fix potential infinite loop (bsc#1012628). - staging: fwserial: fix TIOCSSERIAL implementation (bsc#1012628). - staging: fwserial: fix TIOCGSERIAL implementation (bsc#1012628). - staging: greybus: uart: fix unprivileged TIOCCSERIAL (bsc#1012628). - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (bsc#1012628). - soc: qcom: pdr: Fix error return code in pdr_register_listener (bsc#1012628). - PM / devfreq: Use more accurate returned new_freq as resume_freq (bsc#1012628). - clocksource/drivers/timer-ti-dm: Fix posted mode status check order (bsc#1012628). - clocksource/drivers/timer-ti-dm: Add missing set_state_oneshot_stopped (bsc#1012628). - clocksource/drivers/ingenic_ost: Fix return value check in ingenic_ost_probe() (bsc#1012628). - spi: Fix use-after-free with devm_spi_alloc_* (bsc#1012628). - spi: fsl: add missing iounmap() on error in of_fsl_spi_probe() (bsc#1012628). - soc: qcom: mdt_loader: Validate that p_filesz < p_memsz (bsc#1012628). - soc: qcom: mdt_loader: Detect truncated read of segments (bsc#1012628). - PM: runtime: Replace inline function pm_runtime_callbacks_present() (bsc#1012628). - cpuidle: Fix ARM_QCOM_SPM_CPUIDLE configuration (bsc#1012628). - ACPI: CPPC: Replace cppc_attr with kobj_attribute (bsc#1012628). - crypto: allwinner - add missing CRYPTO_ prefix (bsc#1012628). - crypto: sun8i-ss - Fix memory leak of pad (bsc#1012628). - crypto: sa2ul - Fix memory leak of rxd (bsc#1012628). - crypto: qat - Fix a double free in adf_create_ring (bsc#1012628). - cpufreq: armada-37xx: Fix setting TBG parent for load levels (bsc#1012628). - clk: mvebu: armada-37xx-periph: remove .set_parent method for CPU PM clock (bsc#1012628). - cpufreq: armada-37xx: Fix the AVS value for load L1 (bsc#1012628). - clk: mvebu: armada-37xx-periph: Fix switching CPU freq from 250 Mhz to 1 GHz (bsc#1012628). - clk: mvebu: armada-37xx-periph: Fix workaround for switching from L1 to L0 (bsc#1012628). - cpufreq: armada-37xx: Fix driver cleanup when registration failed (bsc#1012628). - cpufreq: armada-37xx: Fix determining base CPU frequency (bsc#1012628). - spi: spi-zynqmp-gqspi: use wait_for_completion_timeout to make zynqmp_qspi_exec_op not interruptible (bsc#1012628). - spi: spi-zynqmp-gqspi: add mutex locking for exec_op (bsc#1012628). - spi: spi-zynqmp-gqspi: transmit dummy circles by using the controller's internal functionality (bsc#1012628). - spi: spi-zynqmp-gqspi: fix incorrect operating mode in zynqmp_qspi_read_op (bsc#1012628). - spi: fsl-lpspi: Fix PM reference leak in lpspi_prepare_xfer_hardware() (bsc#1012628). - usb: gadget: r8a66597: Add missing null check on return from platform_get_resource (bsc#1012628). - USB: cdc-acm: fix unprivileged TIOCCSERIAL (bsc#1012628). - USB: cdc-acm: fix TIOCGSERIAL implementation (bsc#1012628). - tty: actually undefine superseded ASYNC flags (bsc#1012628). - tty: fix return value for unsupported ioctls (bsc#1012628). - tty: fix return value for unsupported termiox ioctls (bsc#1012628). - serial: core: return early on unsupported ioctls (bsc#1012628). - firmware: qcom-scm: Fix QCOM_SCM configuration (bsc#1012628). - node: fix device cleanups in error handling code (bsc#1012628). - crypto: chelsio - Read rxchannel-id from firmware (bsc#1012628). - usbip: vudc: fix missing unlock on error in usbip_sockfd_store() (bsc#1012628). - m68k: Add missing mmap_read_lock() to sys_cacheflush() (bsc#1012628). - usb: cdnsp: Fixes issue with Configure Endpoint command (bsc#1012628). - spi: spi-zynqmp-gqspi: Fix missing unlock on error in zynqmp_qspi_exec_op() (bsc#1012628). - memory: renesas-rpc-if: fix possible NULL pointer dereference of resource (bsc#1012628). - memory: samsung: exynos5422-dmc: handle clk_set_parent() failure (bsc#1012628). - security: keys: trusted: fix TPM2 authorizations (bsc#1012628). - char: tpm: fix error return code in tpm_cr50_i2c_tis_recv() (bsc#1012628). - platform/x86: pmc_atom: Match all Beckhoff Automation baytrail boards with critclk_systems DMI table (bsc#1012628). - usb: typec: tcpm: Honour pSnkStdby requirement during negotiation (bsc#1012628). - spi: spi-zynqmp-gqspi: Fix runtime PM imbalance in zynqmp_qspi_probe (bsc#1012628). - ARM: dts: aspeed: Rainier: Fix humidity sensor bus address (bsc#1012628). - Drivers: hv: vmbus: Use after free in __vmbus_open() (bsc#1012628). - crypto: arm64/aes-ce - deal with oversight in new CTR carry code (bsc#1012628). - spi: spi-zynqmp-gqspi: fix clk_enable/disable imbalance issue (bsc#1012628). - spi: spi-zynqmp-gqspi: fix hang issue when suspend/resume (bsc#1012628). - spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op (bsc#1012628). - spi: spi-zynqmp-gqspi: return -ENOMEM if dma_map_single fails (bsc#1012628). - btrfs: zoned: move log tree node allocation out of log_root_tree->log_mutex (bsc#1012628). - btrfs: zoned: bail out in btrfs_alloc_chunk for bad input (bsc#1012628). - x86/platform/uv: Fix !KEXEC build failure (bsc#1012628). - hwmon: (pmbus/pxe1610) don't bail out when not all pages are active (bsc#1012628). - platform/surface: aggregator: fix a bit test (bsc#1012628). - Drivers: hv: vmbus: Increase wait time for VMbus unload (bsc#1012628). - PM: hibernate: x86: Use crc32 instead of md5 for hibernation e820 integrity check (bsc#1012628). - usb: dwc2: Fix host mode hibernation exit with remote wakeup flow (bsc#1012628). - usb: dwc2: Fix hibernation between host and device modes (bsc#1012628). - ttyprintk: Add TTY hangup callback (bsc#1012628). - serial: omap: don't disable rs485 if rts gpio is missing (bsc#1012628). - serial: omap: fix rs485 half-duplex filtering (bsc#1012628). - spi: tools: make a symbolic link to the header file spi.h (bsc#1012628). - xen-blkback: fix compatibility bug with single page rings (bsc#1012628). - soc: aspeed: fix a ternary sign expansion bug (bsc#1012628). - drm/tilcdc: send vblank event when disabling crtc (bsc#1012628). - drm/stm: Fix bus_flags handling (bsc#1012628). - drm/amd/display: Fix off by one in hdmi_14_process_transaction() (bsc#1012628). - drm/mcde/panel: Inverse misunderstood flag (bsc#1012628). - scsi: lpfc: Fix null pointer dereference in lpfc_prep_els_iocb() (bsc#1012628). - sched/fair: Fix shift-out-of-bounds in load_balance() (bsc#1012628). - printk: limit second loop of syslog_print_all (bsc#1012628). - afs: Fix updating of i_mode due to 3rd party change (bsc#1012628). - rcu: Remove spurious instrumentation_end() in rcu_nmi_enter() (bsc#1012628). - media: mtk: fix mtk-smi dependency (bsc#1012628). - media: vivid: fix assignment of dev->fbuf_out_flags (bsc#1012628). - media: saa7134: use sg_dma_len when building pgtable (bsc#1012628). - media: saa7146: use sg_dma_len when building pgtable (bsc#1012628). - media: omap4iss: return error code when omap4iss_get() failed (bsc#1012628). - media: rkisp1: rsz: crash fix when setting src format (bsc#1012628). - media: aspeed: fix clock handling logic (bsc#1012628). - drm/panel-simple: Undo enable if HPD never asserts (bsc#1012628). - power: supply: bq27xxx: fix sign of current_now for newer ICs (bsc#1012628). - drm/probe-helper: Check epoch counter in output_poll_execute() (bsc#1012628). - media: venus: core: Fix some resource leaks in the error path of 'venus_probe()' (bsc#1012628). - media: platform: sunxi: sun6i-csi: fix error return code of sun6i_video_start_streaming() (bsc#1012628). - media: m88ds3103: fix return value check in m88ds3103_probe() (bsc#1012628). - media: docs: Fix data organization of MEDIA_BUS_FMT_RGB101010_1X30 (bsc#1012628). - media: [next] staging: media: atomisp: fix memory leak of object flash (bsc#1012628). - media: atomisp: Fixed error handling path (bsc#1012628). - media: m88rs6000t: avoid potential out-of-bounds reads on arrays (bsc#1012628). - media: atomisp: Fix use after free in atomisp_alloc_css_stat_bufs() (bsc#1012628). - x86/kprobes: Retrieve correct opcode for group instruction (bsc#1012628). - drm/amdkfd: fix build error with AMD_IOMMU_V2=m (bsc#1012628). - drm/amdkfd: Fix recursive lock warnings (bsc#1012628). - drm/amd/display: Free local data after use (bsc#1012628). - of: overlay: fix for_each_child.cocci warnings (bsc#1012628). - scsi: qla2xxx: Check kzalloc() return value (bsc#1012628). - x86/kprobes: Fix to check non boostable prefixes correctly (bsc#1012628). - drm/omap: dsi: Add missing IRQF_ONESHOT (bsc#1012628). - selftests: fix prepending $(OUTPUT) to $(TEST_PROGS) (bsc#1012628). - pata_arasan_cf: fix IRQ check (bsc#1012628). - pata_ipx4xx_cf: fix IRQ check (bsc#1012628). - sata_mv: add IRQ checks (bsc#1012628). - ata: libahci_platform: fix IRQ check (bsc#1012628). - seccomp: Fix CONFIG tests for Seccomp_filters (bsc#1012628). - drm/mediatek: Switch the hdmi bridge ops to the atomic versions (bsc#1012628). - drm/mediatek: Don't support hdmi connector creation (bsc#1012628). - nvme-tcp: block BH in sk state_change sk callback (bsc#1012628). - nvmet-tcp: fix incorrect locking in state_change sk callback (bsc#1012628). - clk: imx: Fix reparenting of UARTs not associated with stdout (bsc#1012628). - power: supply: bq25980: Move props from battery node (bsc#1012628). - nvme: retrigger ANA log update if group descriptor isn't found (bsc#1012628). - media: ccs: Fix sub-device function (bsc#1012628). - media: ipu3-cio2: Fix pixel-rate derived link frequency (bsc#1012628). - media: i2c: imx219: Move out locking/unlocking of vflip and hflip controls from imx219_set_stream (bsc#1012628). - media: i2c: imx219: Balance runtime PM use-count (bsc#1012628). - media: v4l2-ctrls.c: fix race condition in hdl->requests list (bsc#1012628). - media: rkvdec: Do not require all controls to be present in every request (bsc#1012628). - vfio/fsl-mc: Re-order vfio_fsl_mc_probe() (bsc#1012628). - vfio/pci: Move VGA and VF initialization to functions (bsc#1012628). - vfio/pci: Re-order vfio_pci_probe() (bsc#1012628). - drm/msm: Fix debugfs deadlock (bsc#1012628). - drm/msm/dpu: enable DPU_SSPP_QOS_8LVL for SM8250 (bsc#1012628). - vfio/mdev: Do not allow a mdev_type to have a NULL parent pointer (bsc#1012628). - clk: zynqmp: move zynqmp_pll_set_mode out of round_rate callback (bsc#1012628). - clk: zynqmp: pll: add set_pll_mode to check condition in zynqmp_pll_enable (bsc#1012628). - drm: xlnx: zynqmp: fix a memset in zynqmp_dp_train() (bsc#1012628). - media: i2c: rdamc21: Fix warning on u8 cast (bsc#1012628). - clk: qcom: a7-pll: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - clk: qcom: a53-pll: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - clk: qcom: apss-ipq-pll: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - drm/amd/display: use GFP_ATOMIC in dcn20_resource_construct (bsc#1012628). - drm/amd/display: check fb of primary plane (bsc#1012628). - drm/radeon: Fix a missing check bug in radeon_dp_mst_detect() (bsc#1012628). - bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1012628). - clk: uniphier: Fix potential infinite loop (bsc#1012628). - scsi: pm80xx: Increase timeout for pm80xx mpi_uninit_check() (bsc#1012628). - scsi: pm80xx: Fix potential infinite loop (bsc#1012628). - scsi: ufs: ufshcd-pltfrm: Fix deferred probing (bsc#1012628). - scsi: hisi_sas: Fix IRQ checks (bsc#1012628). - scsi: jazz_esp: Add IRQ check (bsc#1012628). - scsi: sun3x_esp: Add IRQ check (bsc#1012628). - scsi: sni_53c710: Add IRQ check (bsc#1012628). - scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1012628). - mailbox: sprd: Introduce refcnt when clients requests/free channels (bsc#1012628). - mfd: stm32-timers: Avoid clearing auto reload register (bsc#1012628). - nvmet-tcp: fix a segmentation fault during io parsing error (bsc#1012628). - nvme-pci: don't simple map sgl when sgls are disabled (bsc#1012628). - media: meson-ge2d: fix rotation parameters (bsc#1012628). - media: cedrus: Fix H265 status definitions (bsc#1012628). - HSI: core: fix resource leaks in hsi_add_client_from_dt() (bsc#1012628). - x86/events/amd/iommu: Fix sysfs type mismatch (bsc#1012628). - perf/amd/uncore: Fix sysfs type mismatch (bsc#1012628). - io_uring: fix overflows checks in provide buffers (bsc#1012628). - block/rnbd-clt-sysfs: Remove copy buffer overlap in rnbd_clt_get_path_name (bsc#1012628). - sched/debug: Fix cgroup_path[] serialization (bsc#1012628). - kthread: Fix PF_KTHREAD vs to_kthread() race (bsc#1012628). - ataflop: potential out of bounds in do_format() (bsc#1012628). - ataflop: fix off by one in ataflop_probe() (bsc#1012628). - drivers/block/null_blk/main: Fix a double free in null_init (bsc#1012628). - xsk: Respect device's headroom and tailroom on generic xmit path (bsc#1012628). - HID: plantronics: Workaround for double volume key presses (bsc#1012628). - perf symbols: Fix dso__fprintf_symbols_by_name() to return the number of printed chars (bsc#1012628). - ASoC: Intel: boards: sof-wm8804: add check for PLL setting (bsc#1012628). - ASoC: Intel: Skylake: Compile when any configuration is selected (bsc#1012628). - RDMA/mlx5: Zero out ODP related items in the mlx5_ib_mr (bsc#1012628). - RDMA/mlx5: Fix query RoCE port (bsc#1012628). - RDMA/mlx5: Fix mlx5 rates to IB rates map (bsc#1012628). - net/mlx5: DR, Add missing vhca_id consume from STEv1 (bsc#1012628). - wilc1000: write value to WILC_INTR2_ENABLE register (bsc#1012628). - KVM: x86/mmu: Retry page faults that hit an invalid memslot (bsc#1012628). - Bluetooth: avoid deadlock between hci_dev->lock and socket lock (bsc#1012628). - net: lapbether: Prevent racing when checking whether the netif is running (bsc#1012628). - libbpf: Add explicit padding to bpf_xdp_set_link_opts (bsc#1012628). - bpftool: Fix maybe-uninitialized warnings (bsc#1012628). - iommu: Check dev->iommu in iommu_dev_xxx functions (bsc#1012628). - iommu/dma: Resurrect the "forcedac" option (bsc#1012628). - iommu/vt-d: Reject unsupported page request modes (bsc#1012628). - ASoC: tegra30: i2s: Restore hardware state on runtime PM resume (bsc#1012628). - net: dsa: bcm_sf2: add function finding RGMII register (bsc#1012628). - net: dsa: bcm_sf2: fix BCM4908 RGMII reg(s) (bsc#1012628). - selftests/bpf: Re-generate vmlinux.h and BPF skeletons if bpftool changed (bsc#1012628). - libbpf: Add explicit padding to btf_dump_emit_type_decl_opts (bsc#1012628). - powerpc/mm: Move the linear_mapping_mutex to the ifdef where it is used (bsc#1012628). - powerpc/fadump: Mark fadump_calculate_reserve_size as __init (bsc#1012628). - powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1012628). - MIPS: fix local_irq_{disable,enable} in asmmacro.h (bsc#1012628). - ima: Fix the error code for restoring the PCR value (bsc#1012628). - inet: use bigger hash table for IP ID generation (bsc#1012628). - pinctrl: pinctrl-single: remove unused parameter (bsc#1012628). - pinctrl: pinctrl-single: fix pcs_pin_dbg_show() when bits_per_mux is not zero (bsc#1012628). - MIPS: loongson64: fix bug when PAGE_SIZE > 16KB (bsc#1012628). - ASoC: wm8960: Remove bitclk relax condition in wm8960_configure_sysclk (bsc#1012628). - iommu/arm-smmu-v3: add bit field SFM into GERROR_ERR_MASK (bsc#1012628). - RDMA/mlx5: Fix drop packet rule in egress table (bsc#1012628). - IB/isert: Fix a use after free in isert_connect_request (bsc#1012628). - powerpc/64s: Fix hash fault to use TRAP accessor (bsc#1012628). - powerpc: Fix HAVE_HARDLOCKUP_DETECTOR_ARCH build configuration (bsc#1012628). - MIPS/bpf: Enable bpf_probe_read{, str}() on MIPS again (bsc#1012628). - gpio: guard gpiochip_irqchip_add_domain() with GPIOLIB_IRQCHIP (bsc#1012628). - fs: dlm: fix missing unlock on error in accept_from_sock() (bsc#1012628). - ASoC: q6afe-clocks: fix reprobing of the driver (bsc#1012628). - ALSA: core: remove redundant spin_lock pair in snd_card_disconnect (bsc#1012628). - net: phy: lan87xx: fix access to wrong register of LAN87xx (bsc#1012628). - udp: skip L4 aggregation for UDP tunnel packets (bsc#1012628). - udp: never accept GSO_FRAGLIST packets (bsc#1012628). - powerpc/pseries: Only register vio drivers if vio bus exists (bsc#1012628). - net/tipc: fix missing destroy_workqueue() on error in tipc_crypto_start() (bsc#1012628). - bug: Remove redundant condition check in report_bug (bsc#1012628). - RDMA/core: Fix corrupted SL on passive side (bsc#1012628). - nfc: pn533: prevent potential memory corruption (bsc#1012628). - net: hns3: Limiting the scope of vector_ring_chain variable (bsc#1012628). - mips: bmips: fix syscon-reboot nodes (bsc#1012628). - KVM: arm64: Fix error return code in init_hyp_mode() (bsc#1012628). - iommu/vt-d: Don't set then clear private data in prq_event_thread() (bsc#1012628). - iommu: Fix a boundary issue to avoid performance drop (bsc#1012628). - iommu/vt-d: Report right snoop capability when using FL for IOVA (bsc#1012628). - iommu/vt-d: Report the right page fault address (bsc#1012628). - iommu/vt-d: Remove WO permissions on second-level paging entries (bsc#1012628). - iommu/vt-d: Invalidate PASID cache when root/context entry changed (bsc#1012628). - ALSA: usb-audio: Add error checks for usb_driver_claim_interface() calls (bsc#1012628). - HID: lenovo: Use brightness_set_blocking callback for setting LEDs brightness (bsc#1012628). - HID: lenovo: Fix lenovo_led_set_tp10ubkbd() error handling (bsc#1012628). - HID: lenovo: Check hid_get_drvdata() returns non NULL in lenovo_event() (bsc#1012628). - HID: lenovo: Map mic-mute button to KEY_F20 instead of KEY_MICMUTE (bsc#1012628). - KVM: arm64: Initialize VCPU mdcr_el2 before loading it (bsc#1012628). - ASoC: simple-card: fix possible uninitialized single_cpu local variable (bsc#1012628). - liquidio: Fix unintented sign extension of a left shift of a u16 (bsc#1012628). - IB/hfi1: Use kzalloc() for mmu_rb_handler allocation (bsc#1012628). - powerpc/64s: Fix pte update for kernel memory on radix (bsc#1012628). - powerpc/pseries: Add key to flags in pSeries_lpar_hpte_updateboltedpp() (bsc#1012628). - powerpc/64s: Use htab_convert_pte_flags() in hash__mark_rodata_ro() (bsc#1012628). - powerpc/perf: Fix PMU constraint check for EBB events (bsc#1012628). - powerpc: iommu: fix build when neither PCI or IBMVIO is set (bsc#1012628). - mac80211: bail out if cipher schemes are invalid (bsc#1012628). - perf vendor events amd: Fix broken L2 Cache Hits from L2 HWPF metric (bsc#1012628). - RDMA/hns: Fix missing assignment of max_inline_data (bsc#1012628). - xfs: fix return of uninitialized value in variable error (bsc#1012628). - rtw88: Fix an error code in rtw_debugfs_set_rsvd_page() (bsc#1012628). - mt7601u: fix always true expression (bsc#1012628). - mt76: mt7615: fix tx skb dma unmap (bsc#1012628). - mt76: mt7915: fix tx skb dma unmap (bsc#1012628). - mt76: mt7921: fix suspend/resume sequence (bsc#1012628). - mt76: mt7921: fix memory leak in mt7921_coredump_work (bsc#1012628). - mt76: connac: fix up the setting for ht40 mode in mt76_connac_mcu_uni_add_bss (bsc#1012628). - mt76: mt7921: fixup rx bitrate statistics (bsc#1012628). - mt76: mt7615: fix memory leak in mt7615_coredump_work (bsc#1012628). - mt76: mt7921: fix aggr length histogram (bsc#1012628). - mt76: mt7915: fix aggr len debugfs node (bsc#1012628). - mt76: mt7921: fix stats register definitions (bsc#1012628). - mt76: mt7615: fix TSF configuration (bsc#1012628). - mt76: mt7615: fix mib stats counter reporting to mac80211 (bsc#1012628). - mt76: mt7915: fix mib stats counter reporting to mac80211 (bsc#1012628). - mt76: connac: fix kernel warning adding monitor interface (bsc#1012628). - mt76: check return value of mt76_txq_send_burst in mt76_txq_schedule_list (bsc#1012628). - mt76: mt7921: fix the base of PCIe interrupt (bsc#1012628). - mt76: mt7921: fix the base of the dynamic remap (bsc#1012628). - mt76: mt7915: fix rxrate reporting (bsc#1012628). - mt76: mt7915: fix txrate reporting (bsc#1012628). - mt76: mt7663: fix when beacon filter is being applied (bsc#1012628). - mt76: mt7663s: make all of packets 4-bytes aligned in sdio tx aggregation (bsc#1012628). - mt76: mt7663s: fix the possible device hang in high traffic (bsc#1012628). - mt76: mt7615: cleanup mcu tx queue in mt7615_dma_reset() (bsc#1012628). - mt76: mt7915: cleanup mcu tx queue in mt7915_dma_reset() (bsc#1012628). - mt76: mt7921: always wake the device in mt7921_remove_interface (bsc#1012628). - mt76: mt7921: fix inappropriate WoW setup with the missing ARP informaiton (bsc#1012628). - mt76: mt7921: fix the dwell time control (bsc#1012628). - KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit (bsc#1012628). - ovl: show "userxattr" in the mount data (bsc#1012628). - ovl: invalidate readdir cache on changes to dir with origin (bsc#1012628). - RDMA/qedr: Fix error return code in qedr_iw_connect() (bsc#1012628). - IB/hfi1: Fix error return code in parse_platform_config() (bsc#1012628). - RDMA/bnxt_re: Fix error return code in bnxt_qplib_cq_process_terminal() (bsc#1012628). - cxgb4: Fix unintentional sign extension issues (bsc#1012628). - net: thunderx: Fix unintentional sign extension issue (bsc#1012628). - mt76: mt7921: fix kernel crash when the firmware fails to download (bsc#1012628). - RDMA/srpt: Fix error return code in srpt_cm_req_recv() (bsc#1012628). - RDMA/rtrs-clt: destroy sysfs after removing session from active list (bsc#1012628). - pinctrl: at91-pio4: Fix slew rate disablement (bsc#1012628). - i2c: cadence: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: img-scb: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: imx: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: omap: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: sprd: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: stm32f7: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: xiic: fix reference leak when pm_runtime_get_sync fails (bsc#1012628). - i2c: cadence: add IRQ check (bsc#1012628). - i2c: emev2: add IRQ check (bsc#1012628). - i2c: jz4780: add IRQ check (bsc#1012628). - i2c: mlxbf: add IRQ check (bsc#1012628). - i2c: rcar: add IRQ check (bsc#1012628). - i2c: sh7760: add IRQ check (bsc#1012628). - fuse: fix matching of FUSE_DEV_IOC_CLONE command (bsc#1012628). - iwlwifi: rs-fw: don't support stbc for HE 160 (bsc#1012628). - iwlwifi: dbg: disable ini debug in 9000 family and below (bsc#1012628). - powerpc/xive: Drop check on irq_data in xive_core_debug_show() (bsc#1012628). - powerpc/xive: Fix xmon command "dxi" (bsc#1012628). - powerpc/syscall: switch user_exit_irqoff and trace_hardirqs_off order (bsc#1012628). - ASoC: ak5558: correct reset polarity (bsc#1012628). - net/mlx5: Fix bit-wise and with zero (bsc#1012628). - net/packet: remove data races in fanout operations (bsc#1012628). - drm/i915/gvt: Fix error code in intel_gvt_init_device() (bsc#1012628). - iommu/vt-d: Fix an error handling path in 'intel_prepare_irq_remapping()' (bsc#1012628). - iommu/amd: Put newline after closing bracket in warning (bsc#1012628). - perf beauty: Fix fsconfig generator (bsc#1012628). - drm/amdgpu: fix an error code in init_pmu_entry_by_type_and_add() (bsc#1012628). - drm/amd/pm: fix error code in smu_set_power_limit() (bsc#1012628). - MIPS: pci-legacy: stop using of_pci_range_to_resource (bsc#1012628). - powerpc/pseries: extract host bridge from pci_bus prior to bus removal (bsc#1012628). - iommu/mediatek: Always enable the clk on resume (bsc#1012628). - mptcp: fix format specifiers for unsigned int (bsc#1012628). - powerpc/smp: Reintroduce cpu_core_mask (bsc#1012628). - KVM: x86: dump_vmcs should not assume GUEST_IA32_EFER is valid (bsc#1012628). - rtlwifi: 8821ae: upgrade PHY and RF parameters (bsc#1012628). - wlcore: fix overlapping snprintf arguments in debugfs (bsc#1012628). - i2c: sh7760: fix IRQ error path (bsc#1012628). - i2c: mediatek: Fix wrong dma sync flag (bsc#1012628). - mwl8k: Fix a double Free in mwl8k_probe_hw (bsc#1012628). - netfilter: nft_payload: fix C-VLAN offload support (bsc#1012628). - netfilter: nftables_offload: VLAN id needs host byteorder in flow dissector (bsc#1012628). - netfilter: nftables_offload: special ethertype handling for VLAN (bsc#1012628). - vsock/vmci: log once the failed queue pair allocation (bsc#1012628). - libbpf: Initialize the bpf_seq_printf parameters array field by field (bsc#1012628). - net: ethernet: ixp4xx: Set the DMA masks explicitly (bsc#1012628). - gro: fix napi_gro_frags() Fast GRO breakage due to IP alignment check (bsc#1012628). - RDMA/cxgb4: add missing qpid increment (bsc#1012628). - RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails (bsc#1012628). - ALSA: usb: midi: don't return -ENOMEM when usb_urb_ep_type_check fails (bsc#1012628). - sfc: ef10: fix TX queue lookup in TX event handling (bsc#1012628). - vsock/virtio: free queued packets when closing socket (bsc#1012628). - net: marvell: prestera: fix port event handling on init (bsc#1012628). - net: davinci_emac: Fix incorrect masking of tx and rx error channel (bsc#1012628). - rtw88: refine napi deinit flow (bsc#1012628). - mt76: mt7615: fix memleak when mt7615_unregister_device() (bsc#1012628). - mt76: mt7915: fix memleak when mt7915_unregister_device() (bsc#1012628). - mt76: mt7921: run mt7921_mcu_fw_log_2_host holding mt76 mutex (bsc#1012628). - powerpc/pseries/iommu: Fix window size for direct mapping with pmem (bsc#1012628). - crypto: ccp: Detect and reject "invalid" addresses destined for PSP (bsc#1012628). - net: dsa: mv88e6xxx: Fix off-by-one in VTU devlink region size (bsc#1012628). - nfp: devlink: initialize the devlink port attribute "lanes" (bsc#1012628). - net: stmmac: fix TSO and TBS feature enabling during driver open (bsc#1012628). - net: renesas: ravb: Fix a stuck issue when a lot of frames are received (bsc#1012628). - net: phy: intel-xway: enable integrated led functions (bsc#1012628). - mt76: mt7615: Fix a dereference of pointer sta before it is null checked (bsc#1012628). - mt76: mt7921: fix possible invalid register access (bsc#1012628). - RDMA/rxe: Fix a bug in rxe_fill_ip_info() (bsc#1012628). - RDMA/core: Add CM to restrack after successful attachment to a device (bsc#1012628). - powerpc/64: Fix the definition of the fixmap area (bsc#1012628). - ath9k: Fix error check in ath9k_hw_read_revisions() for PCI devices (bsc#1012628). - ath10k: Fix a use after free in ath10k_htc_send_bundle (bsc#1012628). - ath10k: Fix ath10k_wmi_tlv_op_pull_peer_stats_info() unlock without lock (bsc#1012628). - wlcore: Fix buffer overrun by snprintf due to incorrect buffer size (bsc#1012628). - powerpc/perf: Fix the threshold event selection for memory events in power10 (bsc#1012628). - powerpc/52xx: Fix an invalid ASM expression ('addi' used instead of 'add') (bsc#1012628). - net: phy: marvell: fix m88e1011_set_downshift (bsc#1012628). - net: phy: marvell: fix m88e1111_set_downshift (bsc#1012628). - net: enetc: fix link error again (bsc#1012628). - net, xdp: Update pkt_type if generic XDP changes unicast MAC (bsc#1012628). - bnxt_en: fix ternary sign extension bug in bnxt_show_temp() (bsc#1012628). - ARM: dts: uniphier: Change phy-mode to RGMII-ID to enable delay pins for RTL8211E (bsc#1012628). - arm64: dts: uniphier: Change phy-mode to RGMII-ID to enable delay pins for RTL8211E (bsc#1012628). - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (bsc#1012628). - selftests: net: mirror_gre_vlan_bridge_1q: Make an FDB entry static (bsc#1012628). - selftests: mlxsw: Remove a redundant if statement in port_scale test (bsc#1012628). - selftests: mlxsw: Remove a redundant if statement in tc_flower_scale test (bsc#1012628). - mptcp: Retransmit DATA_FIN (bsc#1012628). - bnxt_en: Fix RX consumer index logic in the error path (bsc#1012628). - KVM: VMX: Intercept FS/GS_BASE MSR accesses for 32-bit KVM (bsc#1012628). - KVM: SVM: Zero out the VMCB array used to track SEV ASID association (bsc#1012628). - KVM: SVM: Free sev_asid_bitmap during init if SEV setup fails (bsc#1012628). - KVM: SVM: Disable SEV/SEV-ES if NPT is disabled (bsc#1012628). - net/sched: act_ct: fix wild memory access when clearing fragments (bsc#1012628). - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (bsc#1012628). - selftests/bpf: Fix BPF_CORE_READ_BITFIELD() macro (bsc#1012628). - selftests/bpf: Fix field existence CO-RE reloc tests (bsc#1012628). - selftests/bpf: Fix core_reloc test runner (bsc#1012628). - bpf: Fix propagation of 32 bit unsigned bounds from 64 bit bounds (bsc#1012628). - RDMA/siw: Fix a use after free in siw_alloc_mr (bsc#1012628). - RDMA/bnxt_re: Fix a double free in bnxt_qplib_alloc_res (bsc#1012628). - net: bridge: mcast: fix broken length + header check for MRDv6 Adv (bsc#1012628). - net: dsa: mv88e6xxx: Fix 6095/6097/6185 ports in non-SERDES CMODE (bsc#1012628). - net:nfc:digital: Fix a double free in digital_tg_recv_dep_req (bsc#1012628). - perf tools: Change fields type in perf_record_time_conv (bsc#1012628). - perf jit: Let convert_timestamp() to be backwards-compatible (bsc#1012628). - perf session: Add swap operation for event TIME_CONV (bsc#1012628). - ia64: ensure proper NUMA distance and possible map initialization (bsc#1012628). - ia64: fix EFI_DEBUG build (bsc#1012628). - kfifo: fix ternary sign extension bugs (bsc#1012628). - mm: memcontrol: slab: fix obtain a reference to a freeing memcg (bsc#1012628). - mm/sparse: add the missing sparse_buffer_fini() in error branch (bsc#1012628). - mm/memory-failure: unnecessary amount of unmapping (bsc#1012628). - afs: Fix speculative status fetches (bsc#1012628). - bpf: Fix alu32 const subreg bound tracking on bitwise operations (bsc#1012628). - bpf, ringbuf: Deny reserve of buffers larger than ringbuf (bsc#1012628). - bpf: Prevent writable memory-mapping of read-only ringbuf pages (bsc#1012628). - net: Only allow init netns to set default tcp cong to a restricted algo (bsc#1012628). - smp: Fix smp_call_function_single_async prototype (bsc#1012628). - Refresh patches.suse/firmware-xilinx-Add-pinctrl-support.patch. - Update config files. - commit f003acc - drm/radeon: use the dummy page for GART if needed (bsc#1185516). - commit 25fe027 - ath11k: Clear the fragment cache during key install (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - ath10k: Validate first subframe of A-MSDU before processing the list (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - ath10k: Fix TKIP Michael MIC verification for PCIe (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - ath10k: drop MPDU which has discard flag set by firmware for SDIO (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - ath10k: drop fragments with multicast DA for SDIO (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - ath10k: drop fragments with multicast DA for PCIe (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - ath10k: add CCMP PN replay protection for fragmented frames for PCIe (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: extend protection against mixed key and fragment cache attacks (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: do not accept/forward invalid EAPOL frames (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: prevent attacks on TKIP/WEP as well (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: check defrag PN against current frame (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: add fragment cache to sta_info (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: drop A-MSDUs on old ciphers (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - cfg80211: mitigate A-MSDU aggregation attacks (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: properly handle A-MSDUs that start with an RFC 1042 header (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: prevent mixed key and fragment cache attacks (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - mac80211: assure all fragments are encrypted (CVE-2020-24586 CVE-2020-24587 CVE-2020-26145 CVE-2020-24588 CVE-2020-24587 CVE-2020-26141 CVE-2020-26139 bsc#1185859 bsc#1185860 bsc#1185861 bsc#1185862 bsc#1185863 bsc#1185987 bsc#1186062). - commit 469e487 ==== kio ==== Subpackages: kio-core - Add patches to fix issues with MimeTypeFinderJob (kde#398908): * 0001-MimeTypeFinderJob-Resolve-symlinks-for-a-local-file.patch * 0002-MimeTypeFinderJob-the-StatJob-details-should-include.patch * 0003-kio_file-pass-the-absolute-path-to-QMimeDatabase-mim.patch ==== krb5 ==== - Build with full Cyrus SASL support * Negotiating SASL credentials with an EXTERNAL bind mechanism requires interaction. Kerberos provides its own interaction function that skips all interaction, thus preventing the mechanism from working. ==== less ==== Version update (581.2 -> 586) - update to 586: * Make less able to read lesskey source files (deprecating lesskey). * If XDG_CONFIG_HOME is set, find lesskey source file in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey. * If XDG_DATA_HOME is set, find and store history file in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst. * Add the --lesskey-src option. * Add the --file-size option. * Fix bug which could leave terminal in mouse-reporting mode after exiting less. * Fix bug which caused failure to respond to window resize. * Fix backslash bug searching in tag file. ==== libX11 ==== Version update (1.7.0 -> 1.7.1) Subpackages: libX11-6 libX11-data libX11-xcb1 - Update to version 1.7.1 * security update for CVE-2021-31535 (bsc#1182506) - supersedes U_CVE-2021-31535.patch - U_CVE-2021-31535.patch * adds missing request length checks in libX11 (CVE-2021-31535, bsc#1182506) ==== libapparmor ==== - add abstractions-php8.diff to support PHP8 in abstractions/php (boo#1186267) ==== libcontainers-common ==== - Update common to 0.38.2 - Update storage to 1.31.0 - Update image to 5.12.0 ==== libepoxy ==== Version update (1.5.5 -> 1.5.8) - Update to version 1.5.8: + Revert changes from PR #238 / #229 + Fixes regressions: #240, #252, #253 - Update to version 1.5.7: * Remove type redefinition - Includes changes from 1.5.6: * Fix issue loading OpenGL/GLX/EGL libraries * Expose dependency variables in pkg-config file * Close output objects when generating files ==== libidn2 ==== Version update (2.3.0 -> 2.3.1) - libidn2 2.3.1: * Implement full roundtrip for lookup functionality * Fix domain too long error * Updated gnulib files and various build fixes * verify source signature again ==== libinput ==== Version update (1.17.2 -> 1.17.3) - Update to release 1.17.3 * Add quirk for Lenovo Legion 5 Pro. ==== libphonenumber ==== Version update (8.12.22 -> 8.12.23) - Update to version 8.12.23: * Updated phone metadata for region code(s): BF, CI, RW, SG, UG, US, UZ * Updated short number metadata for region code(s): DZ * New geocoding data for country calling code(s): 1572 (en) * Updated geocoding data for country calling code(s): 225 (en) * Updated carrier data for country calling code(s): 65 (en), 225 (en), 226 (en), 250 (en), 256 (en), 998 (en) * Updated / refreshed time zone meta data ==== libportal ==== Version update (0.3 -> 0.4) - Update to version 0.4: + Make GTK4 support work with GTK 4.0 + Qt5 support + OpenURI: Support write access + Build fixes + Add more tests + Require GLib 2.58 ==== libqmi ==== Version update (1.28.2 -> 1.28.4) - Update to version 1.28.4 * libqmi-glib: - Add 'wwan' subsystem support. - Plug memleak when allocating new links. - Plug memleak when QmiDevice is opened multiple times. - Fix build when ARPHRD_RAWIP isn't defined in libc. * gir: - Flag all output TLV readers as optional. - Add explicit ownership information in the string and struct return annotations. * collections: - basic: added WMS Send ACK * qmicli: - Fix double GError when both 'Extended List' and 'Bandwidth List' are missing in --nas-get-rf-band-info. * Several other minor improvements and fixes. ==== libqt5-qtbase ==== Subpackages: libQt5Concurrent5 libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5 - Add trailing newline to qtlogging.ini ==== libqt5-qtwayland ==== Subpackages: libQt5WaylandClient5 libQt5WaylandCompositor5 - Add more commits from KDE's 5.15 branch: * 0008-Fix-memory-leak-in-QWaylandGLContext.patch (QTBUG-85608) * 0009-Client-Send-set_window_geometry-only-once-configured.patch * 0010-Translate-opaque-area-with-frame-margins.patch * 0011-Client-Send-exposeEvent-to-parent-on-subsurface-posi.patch (QTBUG-86177) * 0012-Get-correct-decoration-margins-region.patch * 0013-xdgshell-Tell-the-compositor-the-screen-we-re-expect.patch * 0014-Fix-compilation.patch * 0015-client-Allow-QWaylandInputContext-to-accept-composed.patch (kde#405388) * 0016-Client-Announce-an-output-after-receiving-more-compl.patch (kde#435124) * 0017-Fix-issue-with-repeated-window-size-changes.patch * 0018-Include-locale.h-for-setlocale-LC_CTYPE.patch - Add commits from upstream's 5.15 branch: * 0002-Make-setting-QT_SCALE_FACTOR-work-on-Wayland.patch (QTBUG-87762) * 0003-Do-not-try-to-eglMakeCurrent-for-unintended-case.patch (QTBUG-88277) * 0004-Make-setting-QT_SCALE_FACTOR-work-on-Wayland.patch (QTBUG-87762, QTBUG-88064) * 0005-Ensure-that-grabbing-is-performed-in-correct-context.patch (QTBUG-87597) * 0006-Fix-leaked-subsurface-wayland-items.patch (QTBUG-88782) - Add commit from KDE's 5.15 branch: * 0007-Use-qWarning-and-_exit-instead-of-qFatal-for-wayland.patch ==== librsvg ==== Version update (2.50.5 -> 2.50.6) Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0 - Update to version 2.50.6: + Librsvg now requires at least Pango 1.44. + glgo#GNOME/librsvg#730: Incorrect text spacing when the transform is not 1:1. You can see this when a small font-size is scaled up due to a transform. It is less visible for a large font-size scaled down. + glgo#GNOME/librsvg#704: Fix circle/ellipse in paths when they are made out of a single Arc command. ==== libsigc++2 ==== Version update (2.10.6 -> 2.10.7) - Update to version 2.10.7: + Meson build: - Make it possible to use sigc++ as a subproject. - Fix dependency on files generated from .h.m4 files. - No implicit_include_directories. - Make quiet installations possible. - Fix build as subproject without building documentation. + Documentation fixes. ==== libsrtp2 ==== - Add 0001-Adjust-.pc-file-not-to-expose-used-crypto-library.patch [boo#1185931] ==== libtirpc ==== Version update (1.3.1 -> 1.3.2) Subpackages: libtirpc-netconfig libtirpc3 - update to 1.3.2: * Replace the final SunRPC licenses with BSD licenses * blacklist: Add a few more well known ports * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS ==== libwacom ==== Version update (1.6 -> 1.10) Subpackages: libwacom-data libwacom2 - update to 1.10: - Duplicate matches in /etc no longer cause conflicts with the system-provided .tablet files - libwacom-list-local-devices now prints YAML by default - New tools: - libwacom-list-devices lists all supported devices - libwacom-update-db to update the db after adding tablet files - New devices: - Elan 2514 variant 25BF - Huion H640P - Lenovo X1 Yoga Gen 6 - Samsung CHromebook Pro - libwacom can now read tablet and stylus files from /etc/libwacom - New tool: libwacom-show-stylus to interactively show stylus IDs and serial numbers - New devices: - HP Envy x360, Pro Tablet 508 - Lenovo X1 Yoga Gen5, Yoga6, Ideapad Flex 5, Yoga 7, Yoga C650, L13 Yoga - Microsoft Surface Go - New devices: - Dell XPS 15 7590 - HP EliteBook x360 (830 and 1030), Spectre x360 - Lenovo Thinkpad P15 Gen1, Yoga, Yoga 3, Yoga 11e, X13 Yoga - New devices: - Dell XPS 13 2-in-1 9310 - Lenovo IdeaPad Flex 14API, Flex 5 - HP Envy x360, EliteBook x360 - Huawei MateBook HZ-W19 - XP Pen Star G640 ==== llvm12 ==== - Set memory limits for DWZ to 4x. ==== logrotate ==== Version update (3.18.0 -> 3.18.1) - update to 3.18.1: * fix memory leaks on error-handling paths * make `renamecopy` and `copytruncate` override each other * improve error handling in the parser of configuration files * improve user experience for non-privileged users of logrotate ==== lua54 ==== Subpackages: liblua5_4-5 - Fix doc location (boo#1186233) ==== mdadm ==== - Grow: be careful of corrupt dev_roles list (bsc#1181619) 0117-Grow-be-careful-of-corrupt-dev_roles-list.patch - imsm: nvme multipath support (bsc#1175758) 0116-imsm-nvme-multipath-support.patch ==== mozilla-nspr ==== Version update (4.30 -> 4.31) - update to version 4.31: * Lock access to PRCallOnceType members in PR_CallOnce* for thread safety bmo#1686138 ==== mozilla-nss ==== Version update (3.63.1 -> 3.64) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs - update to NSS 3.64 * bmo#1705286 - Properly detect mips64. * bmo#1687164 - Introduce NSS_DISABLE_CRYPTO_VSX and disable_crypto_vsx. * bmo#1698320 - replace __builtin_cpu_supports("vsx") with ppc_crypto_support() for clang. * bmo#1613235 - Add POWER ChaCha20 stream cipher vector acceleration. ==== multipath-tools ==== Version update (0.8.5+30+suse.633836e -> 0.8.6+10+suse.4771137) Subpackages: kpartx libmpath0 - Update to version 0.8.6+10+suse.47711374: * Github workflows: add CI for SUSE-specific branches - Disabled LTO for multipath-tools * The test for is_valid_path fails if LTO is enabled, just disabling it for %check is insufficient. ==== nautilus ==== Subpackages: gnome-shell-search-provider-nautilus libnautilus-extension1 - Drop baselibs.conf: there is nothing depending on the xxbit library anymore. ==== pango ==== Version update (1.48.4 -> 1.48.5) Subpackages: libpango-1_0-0 typelib-1_0-Pango-1_0 - Update to version 1.48.5: + Only initialize fontconfig once. + Add missing deprecation notices. + Add some missing apis to the markup docs. + Speed up Emoji classification. + Fix hangs and memory leaks. + Don't insert hyphens at word boundaries. + Handle empty lines better. + Avoid width fluctuations with ellipsized text. + Add a utility to show text segmentation. ==== patterns-base ==== Subpackages: patterns-base-base patterns-base-bootloader patterns-base-minimal_base patterns-base-x11 - Suggest openssl from patterns-base-base: in case something requires /usr/bin/openssl or openssl(cli), we want to declare openssl as our default. - Some enhanced_base cleanup * alsa-plugins will be pulled in by alsa if needed * cronie is not needed in favor of systemd timers * The cups server is not needed in general * postfix used to be required by cron but not anymore today * cyrus-sasl will be pulled in by others if needed * openslp will be pulled in by rsync so far * translation-update is for build systems only * udev is pulled in by systemd if needed * perl-TermReadLine-Gnu ??? ==== patterns-microos ==== Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-base-microdnf patterns-microos-base-packagekit patterns-microos-base-zypper patterns-microos-basesystem patterns-microos-cloud patterns-microos-cockpit patterns-microos-defaults patterns-microos-desktop-common patterns-microos-desktop-gnome patterns-microos-desktop-kde patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-selinux patterns-microos-sssd_ldap - Drop partitionmanager due to bsc#1178848. We'll revisit when that is fixed. - make cups-pk-helper conditional to PackageKit - add qemu-guest-agent to the DVD, to improve experience in case we install in a VM - add some cups and printing related packages so that a new printer can actually be succesfully added (tested with GNOME only) - add some disk handling GUI tools (for partitioning USB keys, ext. disks, etc) for both GNOME and KDE - Conditionally install cockpit-packagekit in the Cockpit pattern if the PackageKit pattern is installed to allow system updates through Cockpit on package managed MicroOS systems. - Fix previous changelog entry to be formatted correctly ==== perl-HTTP-Message ==== Version update (6.31 -> 6.32) - updated to 6.32 see /usr/share/doc/packages/perl-HTTP-Message/Changes 6.32 2021-05-18 18:54:27Z - Use File::Spec for MSWin32 on Content-Disposition filename (GH#157) (tzccinct) ==== permissions ==== Version update (1550_20210125 -> 1550_20210518) Subpackages: chkstat permissions-config - Update to version 20210518: * whitelist please (bsc#1183669) - Update to version 20210518: * Fix enlightenment paths for 32-bit architectures ==== pipewire ==== Version update (0.3.27 -> 0.3.28) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-modules pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to 0.3.28 * Highlights - Freewheeling was implemented. This makes it possible to export projects in ardour. - A new powerful filter-chain module was added that can be used to created all kinds of filter-chains from ladspa and builtin plugins. - Many more pulseaudio modules are now implemented: module-ladspa-sink, module-ladspa-source, module-pipe-sink, module-tunnel-sink, module-tunnel-source, module-zeroconf-discover - Fix a bug where devices would not appear after logout/login. - Fix a bug where the volume was reset to 0 and devices would have no audio. - Config files are now installed in the data dir, system overrides in /etc/pipewire and $HOME are checked first. * PipeWire - Implement freewheeling for JACK clients - Add filter-chain module that can be used to construct arbitrary graphs from ladspa and builtin plugins. - Add new property to easily set algorithm params - Add module-pulse-tunnel to tunnel audio to and from a PulseAudio compatible server. - Add a avahi zeroconf discover module, create pulse-tunnel when PulseAudio devices are announced. - Config files are now installed in the data dir, system overrides in /etc/pipewire and $HOME are checked first. - Applications now have their monitor ports named with the "monitor" prefix to avoid confusion with the output ports. - LICENSE clarifications. * GStreamer - fixes to the pipewiresink plugin. * SPA plugins - Fix a bug where the volume was reset to 0 - Add events to dbus plugin. This can be used to detect dbus disconnects. * Media-session - Handle dbus disconnect. - Handle device reservation errors. * PulseAudio server - Implement module-ladspa-sink and a new PipeWire-only module-ladspa-source - Implement module-pipe-sink - Implement module-tunnel-sink and module-tunnel-source - Fix a bug with module argument parsing - Implement module-zeroconf-discover * ALSA plugin - improve error handling - Add %bcond_with aptx conditional to let 3rd parties to enable aptX support. ==== polkit-default-privs ==== Version update (1550+20210503.88baaca -> 1550+20210520.336dcea) - Update to version 1550+20210520.336dcea: * whitelist incremental libvirt org.libvirt.api.node-device.delete (bsc#1186270) - Update to version 1550+20210517.56da22d: * Add systemd homed (boo#1185285) ==== poppler ==== Version update (21.04.0 -> 21.05.0) Subpackages: libpoppler-cpp0 libpoppler-glib8 - Update to 21.05.0: core: * Fix crashes in malformed files * Export SplashFont* symbols used by Scribus * Minor code improvements glib: * Enhance find to support multi-line matching qt5/qt6: * Make sure new signatures are always properly oriented * Allow to pass the border width when signing utils: * pdftoppm: Fix regression when using single scaleTo. - Drop Export-SplashFont-symbols-used-by-Scribus.patch as the change was upstreamed ==== poppler-qt5 ==== Version update (21.04.0 -> 21.05.0) - Update to 21.05.0: core: * Fix crashes in malformed files * Export SplashFont* symbols used by Scribus * Minor code improvements glib: * Enhance find to support multi-line matching qt5/qt6: * Make sure new signatures are always properly oriented * Allow to pass the border width when signing utils: * pdftoppm: Fix regression when using single scaleTo. - Drop Export-SplashFont-symbols-used-by-Scribus.patch as the change was upstreamed ==== psmisc ==== - Do not change CAP within spec file (boo#1186258) - Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch * Fix bsc#1185208 to make private mount namespaces work as well as to distinguish NFS mounts from same remote device share. ==== python-PyJWT ==== Version update (2.0.1 -> 2.1.0) - update to 2.1.0: - Allow claims validation without making JWT signature validation mandatory. ` - Remove padding from JWK test data. ` - Make `kty` mandatory in JWK to be compliant with RFC7517. ` - Allow JWK without `alg` to be compliant with RFC7517. ` - Allow to verify with private key on ECAlgorithm, as well as on Ed25519Algorithm. ` - Add caching by default to PyJWKClient ` - Add missing exceptions.InvalidKeyError to jwt module __init__ imports ` - Add support for ES256K algorithm ` - Add `from_jwk()` to Ed25519Algorithm ` - Add `to_jwk()` to Ed25519Algorithm ` - Export `PyJWK` and `PyJWKSet` ==== python-asn1crypto ==== - %check: use %pyunittest rpm macro ==== python-idna ==== - %check: use %pyunittest rpm macro ==== python-jsonpatch ==== Version update (1.31 -> 1.32) - update to 1.32: * take_index causing 'move' of incorrect values due to bad True==1 comparison ==== python-jsonschema ==== - %check: use %pytest rpm macro ==== python-networkx ==== Version update (2.5 -> 2.5.1) - update to 2.5.1: * pin requirements ==== python-oauthlib ==== - %check: use %pyunittest rpm macro ==== python-pyasn1 ==== - %check: use %pyunittest rpm macro ==== python-pytz ==== - %check: use %pyunittest rpm macro ==== rpm ==== - auto-config-update-aarch64-ppc64le.diff: Treat missing timestamp as infinitely old. ==== runc ==== Version update (1.0.0~rc94 -> 1.0.0~rc95) - Update to runc v1.0.0~rc95. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95 This release of runc contains a fix for CVE-2021-30465, and users are strongly recommended to update (especially if you are providing semi-limited access to spawn containers to untrusted users). bsc#1185405 ==== selinux-policy ==== Subpackages: selinux-policy-targeted - allow systemd to watch /usr, /usr/lib, /etc, /etc/pki as we have path units that trigger on changes in those. Added fix_systemd_watch.patch - own /usr/share/selinux/packages/$SELINUXTYPE/ and /var/lib/selinux/$SELINUXTYPE/active/modules/* to allow packages to install files there - allow cockpit socket to bind nodes (fix_cockpit.patch) - use %autosetup to get rid of endless patch lines ==== sgml-skel ==== - %post uses sed, so add `Requires(post): sed`. ==== signon-plugin-oauth2 ==== Version update (0.24 -> 0.25) - Update to version 0.25 * OAuth2: try using specialized hostname first, use "Host" as fallback only * OAuth1: add UserAgent parameter * OAuth2: pass token query in request body * OAuth2: always try normal authentication if refresh token fails * OAuth2: let the client read all extra info from the response * Plugin: implement also new AuthPluginInterface2 ==== snapper ==== Subpackages: libsnapper5 - fixed systemd sandboxing (bsc#1186095) ==== sssd ==== Version update (2.4.2 -> 2.5.0) Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap - Update to release 2.5.0 * Added support for automatic renewal of renewable TGTs that are stored in KCM ccache. This can be enabled by setting tgt_renewal = true. See the sssd-kcm man page for more details. This feature requires MIT Kerberos krb5-1.19-0.beta2.3 or higher. * ad_gpo_implicit_deny is now respected even if there are no applicable GPOs present. ==== telepathy-logger ==== Subpackages: libtelepathy-logger3 typelib-1_0-TelepathyLogger-0_2 - Normalize patch tag line. ==== u-boot-rpiarm64 ==== Subpackages: u-boot-rpiarm64-doc * Add rockpi-n10-rk3399pro * Several fixes and cleanups for RK3399/3328 boards: - Replace repeated board list with is_rk3399/is_rk3328 define - Fix non-functional rock960, copy bl31.elf - Remove "make u-boot.itb", already part of "all" target * Remove obsolete manual generation of SOURCE_DATE_EPOCH ==== vim ==== Version update (8.2.2800 -> 8.2.2850) Subpackages: vim-data-common vim-small - Updated to version 8.2.2850, fixes the following problems * After a timer displays text a hit-enter prompt is given. * Free Pascal makefile not recognized. * Vim9: illegal memory access. * Flicker when the popup menu has an info popup. * Setting buffer local mapping with mapset() changes global mapping. * Vim9: cannot use legacy syntax in Vim9 script. * Vim9: using "++nr" as a command might not work. * Build fails with tiny features. * Vim9: increment and decrement not sufficiently tested. * Vim9: :def function compilation fails when using :legacy. * Vim9: crash when calling a function in a substitute expression. * Vim9: error for missing white space doesn't say where it is missing * Vim9: still crash when using substitute expression. * Cannot grep using fuzzy matching. * Vim9: unused variable. (John Marriott) * Status line flickers when redrawing popup menu info. * Vim9: comment below expression in lambda causes problems. * Vim9: script sourcing continues after an error. * No jump added to jumplist when opening terminal in current window. * Finishing an abbreviation with a multi-byte char may not work. * Session file may divide by zero. * Code in checkreadonly() not fully tested. * Compiler warnings for int to size_t conversion. (Randall W. Morris) * Test file was not deleted. * Coverity complains about not checking the rename() return value. * Some comments are not correct or clear. * Terminal colors are not updated when 'background' is set. * Vim9: expandcmd() not tested. * Operator cancelled by moving mouse when using popup. (Sergey Vlasov) * Two key command cancelled by moving mouse when using popup. (Sergey Vlasov) * Vim9: :cexpr does not work with local variables. * Vim9: leaking memory in :cexpr. * Build failure without the +quickfix feature. (John Marriott) * Various code lines not covered by tests. * File extension .wrap not recognized. * Default redirection missing "ash" and "dash". * Vim9: member operation not fully tested. * Vim9: skip argument to searchpair() is not compiled. * Vim9: skip argument to searchpairpos() is not compiled. * Vim9: memory leak when using searchpair(). * Vim9: "echo Func()" does not give an error for a function without a return value. * Perl not tested sufficiently. * Crash when calling partial. * Bufwrite not sufficiently tested. * Recalling commands from history is not tested. ==== vte ==== Version update (0.64.0 -> 0.64.1) - Update to version 0.64.1: + widget: Move clipboard store from finalize to unrealize. + build: Work around a meson bug with dist scripts in subprojects. + build: Add missing includes. ==== webkit2gtk3 ==== Version update (2.32.0 -> 2.32.1) Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Update to version 2.32.1: + Support building against the Musl C library. + Support building against ICU version 69 or newer. + Improve handling of Media Capture devices. + Improve WebAudio playback. + Improve video orientation handling. + Improve seeking support for MSE playback. + Improve flush support in EME decryptors. + Fix HTTP status codes for requests done through a custom URI handler. + Fix the Bubblewrap sandbox in certain 32-bit systems. + Fix inconsistencies between the WebKitWebView.is-muted property state and values returned by webkit_web_view_is_playing_audio(). + Fix the build with ENABLE_VIDEO=OFF. + Fix wrong timestamps for long-lived cookies. + Fix UI process crash when failing to load favicons. + Fix several crashes and rendering issues. + Updated translations. - Drop webkit2gtk3-icu69.patch: fixed upstream. ==== xdm ==== - Do not own /usr/share/xsessions: this directory is owned by the filesystem package. ==== xfsprogs ==== Version update (5.11.0 -> 5.12.0) - update to v5.12.0: - mkfs: don't default to too-large physical sector size - repair: phase 6 speedups - man: Add dax mount option to man xfs(5) - xfs_admin: pick up log arguments correctly - xfs_growfs: support shrinking unused space - libfrog: report inobtcount in geometry - xfs_logprint: Fix buffer overflow printing quotaoff - xfsprogs: include for platform_crash - xfsprogs: remove BMV_IF_NO_DMAPI_READ flag - workqueue: bound maximum queue depth - libxfs changes merged from kernel 5.12 ==== xmlsec1 ==== Version update (1.2.31 -> 1.2.32) Subpackages: libxmlsec1-1 libxmlsec1-openssl1 - update to 1.2.32: + Remove MD5 for NSS 3.59 and above + Fix PKCS12_parse return code handling + Fix OpenSSL lookup + xmlSecX509DataGetNodeContent(): don't return 0 for non-empty elements - fix for LibreOffice - add upstream signing key and validate source signature - put license text into all subpackages - treat all compiler warnings as errors ==== yast2 ==== Version update (4.4.3 -> 4.4.5) - Add Yast2::Equatable mixin to avoid troubles with classes that overloads the comparison methods (related to bsc#1186082). - 4.4.5 - Logging all available product information into directory /var/log/YaST2/installation_info. This should help for evaluating the cause of e.g. bsc#1180888, bsc#1180908, bsc#1178688. - 4.4.4 ==== zchunk ==== Version update (1.1.11 -> 1.1.14) - Update to version 1.1.14 * Final fixes for zstd 1.5 support - Update to version 1.1.12 * Update testsuite for zstd 1.5 ==== zstd ==== Version update (1.4.9 -> 1.5.0) - Update to version 1.5.0 * https://github.com/facebook/zstd/releases/tag/v1.5.0 * Improved Middle-Level Compression Speed * Improved High-Level Compression Ratio * Faster Decompression Speed * Dynamic Library Supports Multithreading by Default - Drop zstd-1.4.9-Avoid-SIGBUS-on-armv6.patch, merged upstream - Add zstd-1.4.9-Avoid-SIGBUS-on-armv6.patch to fix crashes when running armv6 userspace on armv8 64-bit kernels ==== zvbi ==== - Add patch to separate private libs from required libs: * 10_fix_private_libs.patch