Packages changed: Mesa (20.3.5 -> 21.0.2) Mesa-drivers (20.3.5 -> 21.0.2) NetworkManager apache2-mod_php7 expat (2.2.10 -> 2.3.0) file-roller (3.38.0 -> 3.39.1) gdk-pixbuf (2.42.4 -> 2.42.6) gdk-pixbuf-xlib (2.40.1 -> 2.40.2) gegl ghostscript git glibc gnome-autoar (0.3.0 -> 0.3.1) gnome-photos graphene (1.10.2 -> 1.10.6) gstreamer-plugins-bad gstreamer-plugins-good gvfs gzip iso-codes (4.5.0 -> 4.6.0) kernel-source (5.11.12 -> 5.11.15) libcaca librsvg (2.50.3 -> 2.50.4) libxcrypt (4.4.18 -> 4.4.19) patterns-kde perl-Bootloader (0.933 -> 0.934) php7 pipewire (0.3.24 -> 0.3.25) polkit-default-privs (1550+20210111.f725c25 -> 1550+20210409.c29362e) python-qt5 qemu re2 (20210202 -> 20210401) rpm-config-SUSE (0.g64 -> 0.g76) rubygem-kramdown (2.3.0 -> 2.3.1) sil-charis-fonts suse-module-tools (15.3.5 -> 15.4.0) xmessage xmodmap === Details === ==== Mesa ==== Version update (20.3.5 -> 21.0.2) Subpackages: Mesa-dri-devel Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - Move osmesa build back to Mesa, which we can now do after choosing another dummy driver there. - Use LLVM-versioned libclc runtime dependency to ensure bitcode compatibility. We have that in Tumbleweed and soon Leap. - U_clover-Fix-build-with-llvm-12.patch * Fixes build with LLVM 12. - U_clover-Add-missing-include-for-llvm-12-build-fix.patch * Fixes a missing header in the previous patch. - Mesa-devel: no longer require libOSMesa-devel, since it's now built in Mesa-drivers; packages should require it directly now, preferrably via pkconfig(osmesa) ... - Switch dummy driver for mesa package from "auto" xorg driver (i965) to gallium swrast driver - update to 21.0.2 * many additions especially on the Radeon Vulkan (RADV) driver front where sparse memory support is in place, AMD Smart Access Memory / Resizable BAR optimizations, various RDNA 2 improvements, rapid packed math for ACO, and more. Elsewhere in Mesa 21.0 there are continued RadeonSI optimizations, many Intel ANV and Iris improvements, OpenGL 3.3 for Freedreno, DXGI Winsys was added and initial Direct3D 12 code for WSL, OpenGL 4.1 for Zink, and more. - moved osmesa build to Mesa-drivers since swrast driver has been removed from Mesa ==== Mesa-drivers ==== Version update (20.3.5 -> 21.0.2) Subpackages: Mesa-dri Mesa-dri-nouveau Mesa-gallium Mesa-libva libvdpau_nouveau libvdpau_r300 libvdpau_r600 libvdpau_radeonsi libvulkan_intel libvulkan_radeon libxatracker2 - Move osmesa build back to Mesa, which we can now do after choosing another dummy driver there. - Use LLVM-versioned libclc runtime dependency to ensure bitcode compatibility. We have that in Tumbleweed and soon Leap. - U_clover-Fix-build-with-llvm-12.patch * Fixes build with LLVM 12. - U_clover-Add-missing-include-for-llvm-12-build-fix.patch * Fixes a missing header in the previous patch. - Mesa-devel: no longer require libOSMesa-devel, since it's now built in Mesa-drivers; packages should require it directly now, preferrably via pkconfig(osmesa) ... - Switch dummy driver for mesa package from "auto" xorg driver (i965) to gallium swrast driver - update to 21.0.2 * many additions especially on the Radeon Vulkan (RADV) driver front where sparse memory support is in place, AMD Smart Access Memory / Resizable BAR optimizations, various RDNA 2 improvements, rapid packed math for ACO, and more. Elsewhere in Mesa 21.0 there are continued RadeonSI optimizations, many Intel ANV and Iris improvements, OpenGL 3.3 for Freedreno, DXGI Winsys was added and initial Direct3D 12 code for WSL, OpenGL 4.1 for Zink, and more. - moved osmesa build to Mesa-drivers since swrast driver has been removed from Mesa ==== NetworkManager ==== Subpackages: NetworkManager-lang libnm0 typelib-1_0-NM-1_0 - Modified NetworkManager.conf: Use dhclient as the default dhcp client(bsc#1183202). ==== apache2-mod_php7 ==== - Do not hard-depend on systemd: use systemd_ordering instead of systemd_requires. ==== expat ==== Version update (2.2.10 -> 2.3.0) Subpackages: libexpat-devel libexpat1 libexpat1-32bit - Do not BuildRequire cmake: expat is part of the distro bootstrap cycle and any additional dependency makes the ring larger. In this case here, cmake was even only used to own a directory. - update to 2.3.0: * When calling XML_ParseBuffer without a prior successful call to XML_GetBuffer as a user, no longer trigger undefined behavior (by adding an integer to a NULL pointer) but rather return XML_STATUS_ERROR and set the error code to (new) code XML_ERROR_NO_BUFFER. Found by UBSan (UndefinedBehaviorSanitizer) of Clang 11 (but not Clang 9). * xmlwf: Exit status 2 was used for both: - malformed input files (documented) and - invalid command-line arguments (undocumented). case of invalid command-line arguments now has its own exit status 4, resolving the ambiguity. * Other changes ==== file-roller ==== Version update (3.38.0 -> 3.39.1) Subpackages: file-roller-lang - Update to version 3.39.1 + New features and user visibile changes: - Let nautilus handle properly rar files - Remember If Showing Other Options. - Action Enter key in password field. - multicore xz compression. - Added nautilus extension subpackage - Update to version 3.38.1 + Skip files with symlinks in parents. ( CVE-2020-36314 ) + Fix use-after-free in error message reporting. + Updated translations ==== gdk-pixbuf ==== Version update (2.42.4 -> 2.42.6) Subpackages: gdk-pixbuf-lang gdk-pixbuf-query-loaders gdk-pixbuf-query-loaders-32bit gdk-pixbuf-thumbnailer libgdk_pixbuf-2_0-0 libgdk_pixbuf-2_0-0-32bit typelib-1_0-GdkPixbuf-2_0 - Update to stable 2.42.6 + Yield gtk_doc option value in subprojects + Always initialise locale on thumbnailer startup + Add fallback subproject for libjpeg + Use type:array for the builtin_loaders option + Default to using builtin png and jpeg loaders ==== gdk-pixbuf-xlib ==== Version update (2.40.1 -> 2.40.2) - Update to 2.40.2 * This is the first release of gdk-pixbuf-xlib, previous versions were based on gdk-pixbuf version 2.40.1 * Last version provided with this packaged was git revision dc22ea36 * There will be no future release as upstreams strongly encourages to port away from it (the API were already deprecated) - Dropped upstream merged 1.patch and 2.patch - Use SourceURL instead of _service file, see https://en.opensuse.org/SourceUrls ==== gegl ==== Subpackages: gegl-0_4 gegl-0_4-lang libgegl-0_4-0 - added patches fix https://gitlab.gnome.org/GNOME/gegl/-/issues/284 + gegl-openexr3.patch ==== ghostscript ==== Subpackages: ghostscript-x11 - Hardening: compile with PIC, link as PIE ==== git ==== Subpackages: git-core git-cvs git-daemon git-email git-gui git-svn git-web gitk perl-Git - Add sysusers file to create git-daemon user. ==== glibc ==== Subpackages: glibc-32bit glibc-devel glibc-extra glibc-lang glibc-locale glibc-locale-base nscd - Enable support for static PIE (bsc#1184646) - select-modify-timeout.patch: linux: always update select timeout (bsc#1184339, BZ #27706) - Don't remove -f[asynchronous-]unwind-tables during configure run, no longer needed ==== gnome-autoar ==== Version update (0.3.0 -> 0.3.1) Subpackages: libgnome-autoar-0-0 libgnome-autoar-gtk-0-0 - Update to version 0.3.1: + Disallow symlinks in parents completely when extracting ( CVE-2021-28650 ) + Drop recursive delete on failure to prevent data loss + Add back RAR support ==== gnome-photos ==== Subpackages: gnome-photos-lang gnome-shell-search-provider-gnome-photos - Fix dependencies after the move from Tracker 2 to Tracker 3: + Drop pkgconfig(tracker-control-2.0) BuildRequires. + Replace (tracker >= 2 with tracker < 2.99) Requires with tracker >= 3. + Replace (tracker-miner-files > 2 with tracker-miner-files < 2.99) Requires with tracker-miner-files >= 3. ==== graphene ==== Version update (1.10.2 -> 1.10.6) Subpackages: libgraphene-1_0-0 typelib-1_0-Graphene-1_0 - Update to version 1.10.6: + Hide GRAPHENE_SIMD_S from the introspection data. + Nudge ray axis when intersecting a box. - Changes from version 1.10.4: + Add ARM NEON support when building with Visual Studio. + Build fix on ARM64 Windows. + Drop deprecated "python3" Meson module. + Fix detection of non-intersecting boxes. + Only enable SSE2 on x86_64. + Use the compiler-appropriate alignment attributes. + Change introspection option to a yielding feature. - Change -Dintrospection=true meson parameter to - Dintrospection=enabled: follow upstream build system changes. - Wrap -Dsse2=true meson parameter into %ifarch x86_64: 32bit builds for example do not support sse2 (likely boo#1184678). ==== gstreamer-plugins-bad ==== Subpackages: gstreamer-plugins-bad-lang gstreamer-transcoder libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 typelib-1_0-GstTranscoder-1_0 - added patches fix https://gitlab.freedesktop.org/gstreamer/gst-plugins-bad/-/issues/1574 + gstreamer-plugins-bad-openexr3.patch ==== gstreamer-plugins-good ==== Subpackages: gstreamer-plugins-good-extra gstreamer-plugins-good-gtk gstreamer-plugins-good-jack gstreamer-plugins-good-lang gstreamer-plugins-good-qtqml - Add 612102fdbc3f813bf9d3406165692b5f742e51a6.patch: Fix build with gcc 11, based on upstream git. ==== gvfs ==== Subpackages: gvfs-backend-afc gvfs-backend-samba gvfs-backends gvfs-fuse gvfs-lang - Rebase SLE patches gvfs-nds.patch and gvfs-nvvfs.patch for version 1.48.0: + Use meson summary function instead of custom output(boo#1184104). ==== gzip ==== - fix DFLTCC segfault [bsc#1177047] - added patches fix https://git.savannah.gnu.org/cgit/gzip.git/commit/?id=be0a534ba2b6e77da289de8da79e70843b1028cc + gzip-1.10-fix-DFLTCC-segfault.patch ==== iso-codes ==== Version update (4.5.0 -> 4.6.0) Subpackages: iso-codes-lang - update to 4.6.0: * Many translation updates, see included ChangeLog ==== kernel-source ==== Version update (5.11.12 -> 5.11.15) Subpackages: kernel-default kernel-docs - Linux 5.11.15 (bsc#1012628). - net: sfp: cope with SFPs that set both LOS normal and LOS inverted (bsc#1012628). - perf map: Tighten snprintf() string precision to pass gcc check on some 32-bit arches (bsc#1012628). - netfilter: x_tables: fix compat match/target pad out-of-bound write (bsc#1012628). - block: don't ignore REQ_NOWAIT for direct IO (bsc#1012628). - riscv,entry: fix misaligned base for excp_vect_table (bsc#1012628). - io_uring: don't mark S_ISBLK async work as unbounded (bsc#1012628). - null_blk: fix command timeout completion handling (bsc#1012628). - idr test suite: Create anchor before launching throbber (bsc#1012628). - idr test suite: Take RCU read lock in idr_find_test_1 (bsc#1012628). - radix tree test suite: Register the main thread with the RCU library (bsc#1012628). - block: only update parent bi_status when bio fail (bsc#1012628). - radix tree test suite: Fix compilation (bsc#1012628). - XArray: Fix splitting to non-zero orders (bsc#1012628). - gpu: host1x: Use different lock classes for each client (bsc#1012628). - drm/tegra: dc: Don't set PLL clock to 0Hz (bsc#1012628). - tools/kvm_stat: Add restart delay (bsc#1012628). - ftrace: Check if pages were allocated before calling free_pages() (bsc#1012628). - gfs2: report "already frozen/thawed" errors (bsc#1012628). - drm/imx: imx-ldb: fix out of bounds array access warning (bsc#1012628). - KVM: arm64: Disable guest access to trace filter controls (bsc#1012628). - KVM: arm64: Hide system instruction access to Trace registers (bsc#1012628). - gfs2: Flag a withdraw if init_threads() fails (bsc#1012628). - interconnect: core: fix error return code of icc_link_destroy() (bsc#1012628). - commit 64fb5bf - Linux 5.11.14 (bsc#1012628). - xfrm/compat: Cleanup WARN()s that can be user-triggered (bsc#1012628). - ALSA: aloop: Fix initialization of controls (bsc#1012628). - ALSA: hda/realtek: Fix speaker amp setup on Acer Aspire E1 (bsc#1012628). - ALSA: hda/conexant: Apply quirk for another HP ZBook G5 model (bsc#1012628). - file: fix close_range() for unshare+cloexec (bsc#1012628). - ASoC: intel: atom: Stop advertising non working S24LE support (bsc#1012628). - nfc: fix refcount leak in llcp_sock_bind() (bsc#1012628). - nfc: fix refcount leak in llcp_sock_connect() (bsc#1012628). - nfc: fix memory leak in llcp_sock_connect() (bsc#1012628). - nfc: Avoid endless loops caused by repeated llcp_sock_connect() (bsc#1012628). - selinux: make nslot handling in avtab more robust (bsc#1012628). - selinux: fix cond_list corruption when changing booleans (bsc#1012628). - selinux: fix race between old and new sidtab (bsc#1012628). - xen/evtchn: Change irq_info lock to raw_spinlock_t (bsc#1012628). - net: ipv6: check for validity before dereferencing cfg->fc_nlinfo.nlh (bsc#1012628). - net: dsa: lantiq_gswip: Let GSWIP automatically set the xMII clock (bsc#1012628). - net: dsa: lantiq_gswip: Don't use PHY auto polling (bsc#1012628). - net: dsa: lantiq_gswip: Configure all remaining GSWIP_MII_CFG bits (bsc#1012628). - ACPI: processor: Fix build when CONFIG_ACPI_PROCESSOR=m (bsc#1012628). - drm/radeon: Fix size overflow (bsc#1012628). - drm/amdgpu: Fix size overflow (bsc#1012628). - drm/amdgpu/smu7: fix CAC setting on TOPAZ (bsc#1012628). - rfkill: revert back to old userspace API by default (bsc#1012628). - cifs: escape spaces in share names (bsc#1012628). - cifs: On cifs_reconnect, resolve the hostname again (bsc#1012628). - IB/hfi1: Fix probe time panic when AIP is enabled with a buggy BIOS (bsc#1012628). - LOOKUP_MOUNTPOINT: we are cleaning "jumped" flag too late (bsc#1012628). - gcov: re-fix clang-11+ support (bsc#1012628). - ia64: fix user_stack_pointer() for ptrace() (bsc#1012628). - nds32: flush_dcache_page: use page_mapping_file to avoid races with swapoff (bsc#1012628). - ocfs2: fix deadlock between setattr and dio_end_io_write (bsc#1012628). - fs: direct-io: fix missing sdio->boundary (bsc#1012628). - ethtool: fix incorrect datatype in set_eee ops (bsc#1012628). - of: property: fw_devlink: do not link ".*,nr-gpios" (bsc#1012628). - parisc: parisc-agp requires SBA IOMMU driver (bsc#1012628). - parisc: avoid a warning on u8 cast for cmpxchg on u8 pointers (bsc#1012628). - ARM: dts: turris-omnia: configure LED[2]/INTn pin as interrupt pin (bsc#1012628). - batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field (bsc#1012628). - ice: Continue probe on link/PHY errors (bsc#1012628). - ice: Increase control queue timeout (bsc#1012628). - ice: prevent ice_open and ice_stop during reset (bsc#1012628). - ice: fix memory allocation call (bsc#1012628). - ice: remove DCBNL_DEVRESET bit from PF state (bsc#1012628). - ice: Fix for dereference of NULL pointer (bsc#1012628). - ice: Use port number instead of PF ID for WoL (bsc#1012628). - ice: Cleanup fltr list in case of allocation issues (bsc#1012628). - iwlwifi: pcie: properly set LTR workarounds on 22000 devices (bsc#1012628). - ice: fix memory leak of aRFS after resuming from suspend (bsc#1012628). - net: hso: fix null-ptr-deref during tty device unregistration (bsc#1012628). - libbpf: Fix bail out from 'ringbuf_process_ring()' on error (bsc#1012628). - bpf: Enforce that struct_ops programs be GPL-only (bsc#1012628). - bpf: link: Refuse non-O_RDWR flags in BPF_OBJ_GET (bsc#1012628). - ethernet/netronome/nfp: Fix a use after free in nfp_bpf_ctrl_msg_rx (bsc#1012628). - libbpf: Ensure umem pointer is non-NULL before dereferencing (bsc#1012628). - libbpf: Restore umem state after socket create failure (bsc#1012628). - libbpf: Only create rx and tx XDP rings when necessary (bsc#1012628). - bpf: Refcount task stack in bpf_get_task_stack (bsc#1012628). - bpf, sockmap: Fix sk->prot unhash op reset (bsc#1012628). - bpf, sockmap: Fix incorrect fwd_alloc accounting (bsc#1012628). - net: ensure mac header is set in virtio_net_hdr_to_skb() (bsc#1012628). - i40e: Fix sparse warning: missing error code 'err' (bsc#1012628). - i40e: Fix sparse error: 'vsi->netdev' could be null (bsc#1012628). - i40e: Fix sparse error: uninitialized symbol 'ring' (bsc#1012628). - i40e: Fix sparse errors in i40e_txrx.c (bsc#1012628). - vdpa/mlx5: Fix suspend/resume index restoration (bsc#1012628). - net: sched: sch_teql: fix null-pointer dereference (bsc#1012628). - net: sched: fix action overwrite reference counting (bsc#1012628). - nl80211: fix beacon head validation (bsc#1012628). - nl80211: fix potential leak of ACL params (bsc#1012628). - cfg80211: check S1G beacon compat element length (bsc#1012628). - mac80211: fix time-is-after bug in mlme (bsc#1012628). - mac80211: fix TXQ AC confusion (bsc#1012628). - net: hsr: Reset MAC header for Tx path (bsc#1012628). - net-ipv6: bugfix - raw & sctp - switch to ipv6_can_nonlocal_bind() (bsc#1012628). - net: let skb_orphan_partial wake-up waiters (bsc#1012628). - thunderbolt: Fix a leak in tb_retimer_add() (bsc#1012628). - thunderbolt: Fix off by one in tb_port_find_retimer() (bsc#1012628). - usbip: add sysfs_lock to synchronize sysfs code paths (bsc#1012628). - usbip: stub-dev synchronize sysfs code paths (bsc#1012628). - usbip: vudc synchronize sysfs code paths (bsc#1012628). - usbip: synchronize event handler with sysfs code paths (bsc#1012628). - driver core: Fix locking bug in deferred_probe_timeout_work_func() (bsc#1012628). - scsi: pm80xx: Fix chip initialization failure (bsc#1012628). - scsi: target: iscsi: Fix zero tag inside a trace event (bsc#1012628). - percpu: make pcpu_nr_empty_pop_pages per chunk type (bsc#1012628). - i2c: turn recovery error on init to debug (bsc#1012628). - powerpc/vdso: Make sure vdso_wrapper.o is rebuilt everytime vdso.so is rebuilt (bsc#1012628). - powerpc/ptrace: Don't return error when getting/setting FP regs without CONFIG_PPC_FPU_REGS (bsc#1012628). - KVM: x86/mmu: change TDP MMU yield function returns to match cond_resched (bsc#1012628). - KVM: x86/mmu: Merge flush and non-flush tdp_mmu_iter_cond_resched (bsc#1012628). - KVM: x86/mmu: Rename goal_gfn to next_last_level_gfn (bsc#1012628). - KVM: x86/mmu: Ensure forward progress when yielding in TDP MMU iter (bsc#1012628). - KVM: x86/mmu: Yield in TDU MMU iter even if no SPTES changed (bsc#1012628). - KVM: x86/mmu: Ensure TLBs are flushed when yielding during GFN range zap (bsc#1012628). - KVM: x86/mmu: Ensure TLBs are flushed for TDP MMU during NX zapping (bsc#1012628). - KVM: x86/mmu: Don't allow TDP MMU to yield when recovering NX pages (bsc#1012628). - KVM: x86/mmu: preserve pending TLB flush across calls to kvm_tdp_mmu_zap_sp (bsc#1012628). - net: sched: fix err handler in tcf_action_init() (bsc#1012628). - ice: Refactor DCB related variables out of the ice_port_info struct (bsc#1012628). - ice: Recognize 860 as iSCSI port in CEE mode (bsc#1012628). - xfrm: interface: fix ipv4 pmtu check to honor ip header df (bsc#1012628). - xfrm: Use actual socket sk instead of skb socket for xfrm_output_resume (bsc#1012628). - remoteproc: qcom: pil_info: avoid 64-bit division (bsc#1012628). - regulator: bd9571mwv: Fix AVS and DVFS voltage range (bsc#1012628). - ARM: OMAP4: Fix PMIC voltage domains for bionic (bsc#1012628). - ARM: OMAP4: PM: update ROM return address for OSWR and OFF (bsc#1012628). - remoteproc: pru: Fix firmware loading crashes on K3 SoCs (bsc#1012628). - net: xfrm: Localize sequence counter per network namespace (bsc#1012628). - esp: delete NETIF_F_SCTP_CRC bit from features for esp offload (bsc#1012628). - ASoC: SOF: Intel: HDA: fix core status verification (bsc#1012628). - ASoC: wm8960: Fix wrong bclk and lrclk with pll enabled for some chips (bsc#1012628). - xfrm: Fix NULL pointer dereference on policy lookup (bsc#1012628). - virtchnl: Fix layout of RSS structures (bsc#1012628). - i40e: Added Asym_Pause to supported link modes (bsc#1012628). - i40e: Fix kernel oops when i40e driver removes VF's (bsc#1012628). - hostfs: fix memory handling in follow_link() (bsc#1012628). - amd-xgbe: Update DMA coherency values (bsc#1012628). - vxlan: do not modify the shared tunnel info when PMTU triggers an ICMP reply (bsc#1012628). - geneve: do not modify the shared tunnel info when PMTU triggers an ICMP reply (bsc#1012628). - sch_red: fix off-by-one checks in red_check_params() (bsc#1012628). - drivers/net/wan/hdlc_fr: Fix a double free in pvc_xmit (bsc#1012628). - arm64: dts: imx8mm/q: Fix pad control of SD1_DATA0 (bsc#1012628). - xfrm: Provide private skb extensions for segmented and hw offloaded ESP packets (bsc#1012628). - can: bcm/raw: fix msg_namelen values depending on CAN_REQUIRED_SIZE (bsc#1012628). - can: isotp: fix msg_namelen values depending on CAN_REQUIRED_SIZE (bsc#1012628). - can: uapi: can.h: mark union inside struct can_frame packed (bsc#1012628). - mlxsw: spectrum: Fix ECN marking in tunnel decapsulation (bsc#1012628). - ethernet: myri10ge: Fix a use after free in myri10ge_sw_tso (bsc#1012628). - gianfar: Handle error code at MAC address change (bsc#1012628). - net: dsa: Fix type was not set for devlink port (bsc#1012628). - clk: qcom: camcc: Update the clock ops for the SC7180 (bsc#1012628). - cxgb4: avoid collecting SGE_QBASE regs during traffic (bsc#1012628). - net:tipc: Fix a double free in tipc_sk_mcast_rcv (bsc#1012628). - ARM: dts: imx6: pbab01: Set vmmc supply for both SD interfaces (bsc#1012628). - net/ncsi: Avoid channel_monitor hrtimer deadlock (bsc#1012628). - net: qrtr: Fix memory leak on qrtr_tx_wait failure (bsc#1012628). - nfp: flower: ignore duplicate merge hints from FW (bsc#1012628). - net: phy: broadcom: Only advertise EEE for supported modes (bsc#1012628). - I2C: JZ4780: Fix bug for Ingenic X1000 (bsc#1012628). - ASoC: sunxi: sun4i-codec: fill ASoC card owner (bsc#1012628). - net/mlx5e: Fix mapping of ct_label zero (bsc#1012628). - net/mlx5: Delete auxiliary bus driver eth-rep first (bsc#1012628). - net/mlx5e: Fix ethtool indication of connector type (bsc#1012628). - net/mlx5: Don't request more than supported EQs (bsc#1012628). - net/mlx5e: Guarantee room for XSK wakeup NOP on async ICOSQ (bsc#1012628). - net/rds: Fix a use after free in rds_message_map_pages (bsc#1012628). - xdp: fix xdp_return_frame() kernel BUG throw for page_pool memory model (bsc#1012628). - soc/fsl: qbman: fix conflicting alignment attributes (bsc#1012628). - i40e: fix receiving of single packets in xsk zero-copy mode (bsc#1012628). - i40e: Fix display statistics for veb_tc (bsc#1012628). - RDMA/rtrs-clt: Close rtrs client conn before destroying rtrs clt session files (bsc#1012628). - drm/msm: Set drvdata to NULL when msm_drm_init() fails (bsc#1012628). - net: udp: Add support for getsockopt(..., ..., UDP_GRO, ..., ...); (bsc#1012628). - mptcp: forbit mcast-related sockopt on MPTCP sockets (bsc#1012628). - mptcp: revert "mptcp: provide subflow aware release function" (bsc#1012628). - scsi: ufs: core: Fix task management request completion timeout (bsc#1012628). - scsi: ufs: core: Fix wrong Task Tag used in task management request UPIUs (bsc#1012628). - drm/msm/disp/dpu1: program 3d_merge only if block is attached (bsc#1012628). - Revert "arm64: dts: marvell: armada-cp110: Switch to per-port SATA interrupts" (bsc#1012628). - ARM: dts: turris-omnia: fix hardware buffer management (bsc#1012628). - net: cls_api: Fix uninitialised struct field bo->unlocked_driver_cb (bsc#1012628). - net: macb: restore cmp registers on resume path (bsc#1012628). - clk: fix invalid usage of list cursor in register (bsc#1012628). - clk: fix invalid usage of list cursor in unregister (bsc#1012628). - workqueue: Move the position of debug_work_activate() in __queue_work() (bsc#1012628). - s390/cpcmd: fix inline assembly register clobbering (bsc#1012628). - perf inject: Fix repipe usage (bsc#1012628). - openvswitch: fix send of uninitialized stack memory in ct limit reply (bsc#1012628). - i2c: designware: Adjust bus_freq_hz when refuse high speed mode set (bsc#1012628). - iwlwifi: fix 11ax disabled bit in the regulatory capability flags (bsc#1012628). - can: mcp251x: fix support for half duplex SPI host controllers (bsc#1012628). - platform/x86: intel-hid: Fix spurious wakeups caused by tablet-mode events during suspend (bsc#1012628). - tipc: increment the tmp aead refcnt before attaching it (bsc#1012628). - net: hns3: clear VF down state bit before request link status (bsc#1012628). - net/mlx5: Fix HW spec violation configuring uplink (bsc#1012628). - net/mlx5: Fix placement of log_max_flow_counter (bsc#1012628). - net/mlx5: Fix PPLM register mapping (bsc#1012628). - net/mlx5: Fix PBMC register mapping (bsc#1012628). - RDMA/cxgb4: check for ipv6 address properly while destroying listener (bsc#1012628). - perf report: Fix wrong LBR block sorting (bsc#1012628). - RDMA/qedr: Fix kernel panic when trying to access recv_cq (bsc#1012628). - drm/vc4: crtc: Reduce PV fifo threshold on hvs4 (bsc#1012628). - i40e: Fix parameters in aq_get_phy_register() (bsc#1012628). - RDMA/addr: Be strict with gid size (bsc#1012628). - vdpa/mlx5: should exclude header length and fcs from mtu (bsc#1012628). - vdpa/mlx5: Fix wrong use of bit numbers (bsc#1012628). - RAS/CEC: Correct ce_add_elem()'s returned values (bsc#1012628). - clk: socfpga: fix iomem pointer cast on 64-bit (bsc#1012628). - lockdep: Address clang -Wformat warning printing for %hd (bsc#1012628). - dt-bindings: net: ethernet-controller: fix typo in NVMEM (bsc#1012628). - net: sched: bump refcount for new action in ACT replace mode (bsc#1012628). - x86/traps: Correct exc_general_protection() and math_error() return paths (bsc#1012628). - gpiolib: Read "gpio-line-names" from a firmware node (bsc#1012628). - cfg80211: remove WARN_ON() in cfg80211_sme_connect (bsc#1012628). - net: tun: set tun->dev->addr_len during TUNSETLINK processing (bsc#1012628). - drivers: net: fix memory leak in atusb_probe (bsc#1012628). - drivers: net: fix memory leak in peak_usb_create_dev (bsc#1012628). - net: mac802154: Fix general protection fault (bsc#1012628). - net: ieee802154: nl-mac: fix check on panid (bsc#1012628). - net: ieee802154: fix nl802154 del llsec key (bsc#1012628). - net: ieee802154: fix nl802154 del llsec dev (bsc#1012628). - net: ieee802154: fix nl802154 add llsec key (bsc#1012628). - net: ieee802154: fix nl802154 del llsec devkey (bsc#1012628). - net: ieee802154: forbid monitor for set llsec params (bsc#1012628). - net: ieee802154: forbid monitor for del llsec seclevel (bsc#1012628). - net: ieee802154: stop dump llsec params for monitors (bsc#1012628). - Revert "net: sched: bump refcount for new action in ACT replace mode" (bsc#1012628). - commit f68b7e1 - rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514) The devel package requires the kernel binary package itself for building modules externally. - commit 794be7b - drm/msm: a6xx: fix version check for the A650 SQE microcode (git-fixes). - commit b15020c - Linux 5.11.13 (bsc#1012628). - init/Kconfig: make COMPILE_TEST depend on HAS_IOMEM (bsc#1012628). - Update config files. - bpf, x86: Validate computation of branch displacements for x86-32 (bsc#1012628). - bpf, x86: Validate computation of branch displacements for x86-64 (bsc#1012628). - tools/resolve_btfids: Add /libbpf to .gitignore (bsc#1012628). - kbuild: Do not clean resolve_btfids if the output does not exist (bsc#1012628). - kbuild: Add resolve_btfids clean to root clean target (bsc#1012628). - tools/resolve_btfids: Set srctree variable unconditionally (bsc#1012628). - tools/resolve_btfids: Check objects before removing (bsc#1012628). - tools/resolve_btfids: Build libbpf and libsubcmd in separate directories (bsc#1012628). - math: Export mul_u64_u64_div_u64 (bsc#1012628). - io_uring: fix timeout cancel return code (bsc#1012628). - cifs: Silently ignore unknown oplock break handle (bsc#1012628). - cifs: revalidate mapping when we open files for SMB1 POSIX (bsc#1012628). - ia64: fix format strings for err_inject (bsc#1012628). - ia64: mca: allocate early mca with GFP_ATOMIC (bsc#1012628). - selftests/vm: fix out-of-tree build (bsc#1012628). - arm64: kernel: disable CNP on Carmel (bsc#1012628). - Update config files. - scsi: target: pscsi: Clean up after failure in pscsi_map_sg() (bsc#1012628). - ptp_qoriq: fix overflow in ptp_qoriq_adjfine() u64 calcalation (bsc#1012628). - platform/x86: intel_pmc_core: Ignore GBE LTR on Tiger Lake platforms (bsc#1012628). - platform/x86: intel_pmt_class: Initial resource to 0 (bsc#1012628). - block: clear GD_NEED_PART_SCAN later in bdev_disk_changed (bsc#1012628). - x86/build: Turn off -fcf-protection for realmode targets (bsc#1012628). - drm/msm/disp/dpu1: icc path needs to be set before dpu runtime resume (bsc#1012628). - kselftest/arm64: sve: Do not use non-canonical FFR register value (bsc#1012628). - platform/x86: thinkpad_acpi: Allow the FnLock LED to change state (bsc#1012628). - net: ipa: fix init header command validation (bsc#1012628). - netfilter: nftables: skip hook overlap logic if flowtable is stale (bsc#1012628). - netfilter: conntrack: Fix gre tunneling over ipv6 (bsc#1012628). - drm/msm: Ratelimit invalid-fence message (bsc#1012628). - drm/msm/adreno: a5xx_power: Don't apply A540 lm_setup to other GPUs (bsc#1012628). - drm/msm/dsi_pll_7nm: Fix variable usage for pll_lockdet_rate (bsc#1012628). - mac80211: choose first enabled channel for monitor (bsc#1012628). - mac80211: Check crypto_aead_encrypt for errors (bsc#1012628). - can: kvaser_usb: Add support for USBcan Pro 4xHS (bsc#1012628). - net: arcnet: com20020 fix error handling (bsc#1012628). - mISDN: fix crash in fritzpci (bsc#1012628). - kunit: tool: Fix a python tuple typing error (bsc#1012628). - net: pxa168_eth: Fix a potential data race in pxa168_eth_remove (bsc#1012628). - net/mlx5e: Enforce minimum value check for ICOSQ size (bsc#1012628). - bpf, x86: Use kvmalloc_array instead kmalloc_array in bpf_jit_comp (bsc#1012628). - platform/x86: intel-hid: Support Lenovo ThinkPad X1 Tablet Gen 2 (bsc#1012628). - drm/msm: a6xx: Make sure the SQE microcode is safe (bsc#1012628). - bus: ti-sysc: Fix warning on unbind if reset is not deasserted (bsc#1012628). - ARM: dts: am33xx: add aliases for mmc interfaces (bsc#1012628). - commit 0ea11a6 - rpm/check-for-config-changes: Also ignore AS_VERSION added in 5.12. - commit bd64cb2 - post.sh: Return an error when module update fails (bsc#1047233 bsc#1184388). - commit 18f65df - Update patches.kernel.org/5.11.9-100-perf-x86-intel-Fix-a-crash-caused-by-zero-PEBS.patch (bsc#1012628 CVE-2021-28971 bsc#1184196). Add a CVE reference. - commit 1b6b086 ==== libcaca ==== - The problem is due to the fact that the images in the POC have a size of 0x0 and thus, when exporting, no data is written for the image bits. However, space is allocated for the header only, not taking into account that sprintf appends a NUL byte. [bsc#1184751, bsc#1184752, bsc1184751-add-space-for-NUL-byte.patch] ==== librsvg ==== Version update (2.50.3 -> 2.50.4) Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 librsvg-lang rsvg-thumbnailer typelib-1_0-Rsvg-2_0 - Update to version 2.50.4: + Update dependent crates that had security vulnerabilities: - generic-array to 0.13.3 - RUSTSEC-2020-0146 + Reduced stack usage + Add limit for too-large radiuses on the feMorphology filter + Properly ignore elements in an error state inside the "switch" element ==== libxcrypt ==== Version update (4.4.18 -> 4.4.19) Subpackages: libcrypt1 libcrypt1-32bit libxcrypt-devel - Update to 4.4.19 * Improve fallback implementation of explicit_bzero. * Add glibc-on-CSKY, ARC, and RISCV-32 entries to libcrypt.minver. These were added in GNU libc 2.29, 2.32, and 2.33 respectively * Do not build xcrypt.h if we?re not going to install it. * Do not apply --enable-obsolete-api-enosys mode to fcrypt. * Compilation fix for NetBSD. NetBSD?s declares encrypt and setkey to return int, contrary to POSIX (which says they return void). Rename those declarations out of the way with macros. * Compilation fixes for building with GCC 11. Basically fixes for explicit type-casting. * Force update of existing symlinks during installation ==== patterns-kde ==== Subpackages: patterns-kde-kde patterns-kde-kde_edutainment patterns-kde-kde_games patterns-kde-kde_ide patterns-kde-kde_imaging patterns-kde-kde_internet patterns-kde-kde_multimedia patterns-kde-kde_office patterns-kde-kde_pim patterns-kde-kde_plasma patterns-kde-kde_utilities patterns-kde-kde_utilities_opt patterns-kde-kde_yast - Recommend plasma5-systemmonitor in kde_plasma ==== perl-Bootloader ==== Version update (0.933 -> 0.934) - merge gh#openSUSE/perl-bootloader#134 - install with --removable if efivars are not writable (bsc#1182749, bsc#1174111, bsc#1184160) - fix whitespace - 0.934 ==== php7 ==== Subpackages: php7-cli php7-ctype php7-dom php7-gd php7-gettext php7-iconv php7-json php7-mbstring php7-mysql php7-openssl php7-pdo php7-sqlite php7-tokenizer php7-xmlreader php7-xmlwriter - Do not hard-depend on systemd: use systemd_ordering instead of systemd_requires. ==== pipewire ==== Version update (0.3.24 -> 0.3.25) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-modules pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to 0.3.25: + This is a bugfix release that is API and ABI compatible with - previous 0.3.x releases. + Highlights - Many stability improvements. - Plug fd leak in flatpak detection - add pw-loopback tool and support module-loopback - volume restore for virtual sinks/sources or other sink/sources without hardware volume. - Fix cracks and pops in audio capture. - Many bluetooth improvements and compatibity fixes. + PipeWire improvements - Hex encode invalid SEC_LABEL properties to avoid generating invalid json. - Small fixes to how nodes are started to avoid crashes. - Make sure ports are only scheduled after being fully negotiated to avoid crashes. - Implement coverity into CI, fix some bugs detected by coverity. - Plug leak in flatpak detection. - Fix crash when removing globals in some cases. - Fix crash because the mixer info was not removed from a port in all cases. - Add PIPEWIRE_AUTOCONNECT environment variable to disable stream autoconnect. Also add a config option to disable autoconnect. - Improve wildcard in format helpers. - Add env variable to disable journald logging. + Tools - Add a new pw-loopback tool to loop a capture device to a playback device. - Display localized strings correctly in pw-top - Add some more options to pw-dot + Session-manager - When a new node is configured and some stream have this as the default target, move them to it. - Fix some crashes. - Implement volume restore on nodes without routes. This makes it possible to restore volume on purely software nodes like null-sinks. - Also try to suspend errored nodes so that they may leave the error state and be reused again. - Break endless link loops when something went wrong. + Device support - Fix monitor volumes, they are now separate from the hardware volume. - Fix cracks and pops in alsa capture caused by mismatch between resampler and capture source. - Add start-delay config option to alsa sink. - Ensure the PipeWire midi ports start from a higher number so that the lower port numbers are available to apps as before. + Bluetooth - source devices are now removed when idle - Support using pipewire as Audio Gateway. - LDAC encoding quality can be configured now - Implement codec switching for HFP - Implement codec switching with new device property. - Improved stability and compatibility - Autoconnect device profiles at startup - Add AAC bitrate mode configuration - Make it possible to use an A2DP source as an input device. You can then use your phone as an A2DP microphone, for example. - Remove battery reporting when RFCOMM connections is closed. + PulseAudio server - Add some workarounds for Blueman - Set correct errno values, fixes a hang in load-module of a non-existing module - Try to not send inconsistent information to clients. - Fix some crashes. - Add support for the new send-message API, use this to switch bluetooth codecs. - Fix draining by making sure we are started. - Handle 0 sink and source as the default sink/source. - Implement module-loopback + JACK - Fix some memory leaks when closing a client - Add self-connect config option to limit where clients can connect themselves. - Don't crash when apps call _port_get_buffer() on a port that is not their own but simply return NULL. This fixes a crash in Ardour6. - Improve client added/removed callbacks. Sometimes it would emit a client remove when there were still ports for the client. - make sure midi port names are stable across reboots. ==== polkit-default-privs ==== Version update (1550+20210111.f725c25 -> 1550+20210409.c29362e) - Update to version 1550+20210409.c29362e: * profiles: add KDiskMark (bsc#1182521) * profiles: add kdenetwork-filesharing (bsc#1175633) (#37) ==== python-qt5 ==== - Remove the QtWebKit dependency everywhere. The QtWebKit module was abandoned upstream years ago and the community fork didn't get far. The only package that had a dependency on qtwebkit bindings (spyder) was fixed. ==== qemu ==== Subpackages: qemu-arm qemu-audio-spice qemu-block-curl qemu-block-dmg qemu-block-gluster qemu-block-iscsi qemu-block-nfs qemu-block-rbd qemu-block-ssh qemu-chardev-baum qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-ipxe qemu-ksm qemu-kvm qemu-lang qemu-microvm qemu-ppc qemu-s390x qemu-seabios qemu-sgabios qemu-skiboot qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-vhost-user-gpu qemu-x86 - Include upstream patches designated as stable material and reviewed for applicability to include here. NOTE that the PIIX4 patch has migration implications: the change will also be applied to the SLE-15-SP2 qemu, and a live migration from that version to this SLE-15-SP3 qemu would require this patch to be applied for a successful migration if PIIX4 southbridge is used in the machine emulation (x86 i440fx) block-rbd-fix-memory-leak-in-qemu_rbd_co.patch block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch cpu-core-Fix-help-of-CPU-core-device-typ.patch hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch hw-block-fdc-Fix-fallback-property-on-sy.patch hw-isa-Kconfig-Add-missing-dependency-VI.patch hw-isa-piix4-Migrate-Reset-Control-Regis.patch hw-virtio-pci-Added-AER-capability.patch hw-virtio-pci-Added-counter-for-pcie-cap.patch s390x-css-report-errors-from-ccw_dstream.patch target-xtensa-fix-meson.build-rule-for-x.patch util-fix-use-after-free-in-module_load_o.patch virtio-pci-compat-page-aligned-ATS.patch ==== re2 ==== Version update (20210202 -> 20210401) - Update to 2021-04-01: * Make cached benchmarks actually use cached objects * Address some -Wmissing-field-initializers warnings * Make it easier to swap in a scalable reaer-writer mutex * In the shared library, set compatibility version and current version ==== rpm-config-SUSE ==== Version update (0.g64 -> 0.g76) - Update to version 0.g76: * Prepare usrmerge (boo#1029961) * scripts/find-provides.ksyms: Handle XZ compressed kernel (boo#1179251). * find-requires.ksyms: use "if kernel" conditional for modules-load.d * find-requires.ksyms: actually generate modules-load.d dependencies * find-requires.ksyms: Silence the awk warning * find-provides.ksyms: Fix kernel version test * find-provides.ksyms: Fix ksym-provides test ==== rubygem-kramdown ==== Version update (2.3.0 -> 2.3.1) - updated to version 2.3.1 CVE-2021-28834 - 2 minor change: - Added rel="footnote" to footnote links (fixes #706 by xplosionmind) - Default options are now cached to avoid unnecessary computations (fixes #685 by Aswhin Maroli) - 6 bug fixes: - Fixed abbreviations handling so that they won?t be replaced in raw HTML tags (fixes #671 by Kaspar Etter) - Restricted Rouge formatters to Rouge::Formatters namespace (pull request #708 by Stan Hu) - Fixed conversion of empty raw html td/th tags to kramdown (fixes issue #682 by Virgil Ierubino) - Fixed LaTeX entity conversion (pull request #681 by aschmitz) - Fixed missing block attributes from IAL on standalone images (pull request #668 by Tobin Yehle) - Fixed inconsistency in how empty code spans are handle (fixes [#704] by cabo) - 4 other change: - Test on Ruby 2.7 and Ruby 3.0 (pull request #696 by timcraft) - Fix rouge test failures due to new syntax (fixes issue #689 by Daniel Leidert) - Clarified requirements for rouge option ?formatter? (fixes issue #617 by Aswhin Maroli) - Removed warning in setup.rb (pull request #673 by Daniel Bair) ==== sil-charis-fonts ==== - Fixed URL in spec ==== suse-module-tools ==== Version update (15.3.5 -> 15.4.0) - Update to version 15.4.0: * Enable f2fs (bsc#1184415) ==== xmessage ==== - modernize spec file (move license to licensedir) ==== xmodmap ==== - modernize spec-file (move license to licensedir)