Packages changed: cockpit (232 -> 235) containers-systemd (0.0+git20210107.f55f4b3 -> 0.0+git20210118.1366ecb) iproute2 (5.9.0 -> 5.10.0) kernel-source (5.10.9 -> 5.10.12) kmod (27 -> 28) libunwind (1.4.0 -> 1.5.0) openssh permissions (1550_20201111 -> 1550_20210125) pinentry (1.1.0 -> 1.1.1) python-PyYAML (5.3.1 -> 5.4.1) python-importlib-metadata (3.3.0 -> 3.4.0) python-networkx python-packaging (20.4 -> 20.8) python-psutil (5.7.3 -> 5.8.0) python-urllib3 (1.26.2 -> 1.26.3) python38 (3.8.6 -> 3.8.7) python38-core (3.8.6 -> 3.8.7) rpm socat (1.7.3.4 -> 1.7.4.1) supportutils timezone (2020f -> 2021a) toolbox (1.0+git20210119.b5acdcf -> 2.0+git20210125.50611db) tpm2-0-tss (3.0.1 -> 3.0.3) util-linux (2.35.1 -> 2.36.1) util-linux-systemd (2.35.1 -> 2.36.1) yast2 (4.3.49 -> 4.3.51) zeromq (4.3.3 -> 4.3.4) zstd === Details === ==== cockpit ==== Version update (232 -> 235) Subpackages: cockpit-bridge cockpit-system - new version 235 https://cockpit-project.org/blog/cockpit-235.html https://cockpit-project.org/blog/cockpit-234.html https://cockpit-project.org/blog/cockpit-233.html ==== containers-systemd ==== Version update (0.0+git20210107.f55f4b3 -> 0.0+git20210118.1366ecb) - Update to version 0.0+git20210118.1366ecb: * postfix: provide SPAMASSASSIN_HOST environment variable ==== iproute2 ==== Version update (5.9.0 -> 5.10.0) - Update to release 5.10 * iplink: add support for protodown reason * ss: add support to expose various inet sockopts * ss: add support for XDP statistics * bridge: mdb: add support for source address ==== kernel-source ==== Version update (5.10.9 -> 5.10.12) - Linux 5.10.12 (bsc#1012628). - gpio: mvebu: fix pwm .get_state period calculation (bsc#1012628). - Revert "mm/slub: fix a memory leak in sysfs_slab_add()" (bsc#1012628). - futex: Ensure the correct return value from futex_lock_pi() (bsc#1012628). - futex: Replace pointless printk in fixup_owner() (bsc#1012628). - futex: Provide and use pi_state_update_owner() (bsc#1012628). - rtmutex: Remove unused argument from rt_mutex_proxy_unlock() (bsc#1012628). - futex: Use pi_state_update_owner() in put_pi_state() (bsc#1012628). - futex: Simplify fixup_pi_state_owner() (bsc#1012628). - futex: Handle faults correctly for PI futexes (bsc#1012628). - HID: wacom: Correct NULL dereference on AES pen proximity (bsc#1012628). - HID: multitouch: Apply MT_QUIRK_CONFIDENCE quirk for multi-input devices (bsc#1012628). - media: Revert "media: videobuf2: Fix length check for single plane dmabuf queueing" (bsc#1012628). - media: v4l2-subdev.h: BIT() is not available in userspace (bsc#1012628). - RDMA/vmw_pvrdma: Fix network_hdr_type reported in WC (bsc#1012628). - kernel/io_uring: cancel io_uring before task works (bsc#1012628). - io_uring: inline io_uring_attempt_task_drop() (bsc#1012628). - io_uring: add warn_once for io_uring_flush() (bsc#1012628). - io_uring: stop SQPOLL submit on creator's death (bsc#1012628). - io_uring: fix null-deref in io_disable_sqo_submit (bsc#1012628). - io_uring: do sqo disable on install_fd error (bsc#1012628). - io_uring: fix false positive sqo warning on flush (bsc#1012628). - io_uring: fix uring_flush in exit_files() warning (bsc#1012628). - io_uring: fix skipping disabling sqo on exec (bsc#1012628). - io_uring: dont kill fasync under completion_lock (bsc#1012628). - io_uring: fix sleeping under spin in __io_clean_op (bsc#1012628). - objtool: Don't fail on missing symbol table (bsc#1012628). - mm/page_alloc: add a missing mm_page_alloc_zone_locked() tracepoint (bsc#1012628). - mm: fix a race on nr_swap_pages (bsc#1012628). - tools: Factor HOSTCC, HOSTLD, HOSTAR definitions (bsc#1012628). - printk: fix buffer overflow potential for print_text() (bsc#1012628). - printk: fix string termination for record_print_text() (bsc#1012628). - commit a3c8888 - floppy: reintroduce O_NDELAY fix (boo#1181018). - commit fcfe481 - Update config files. Only refresh after 5.10.11. - commit 90db4e6 - Linux 5.10.11 (bsc#1012628). - scsi: target: tcmu: Fix use-after-free of se_cmd->priv (bsc#1012628). - mtd: rawnand: gpmi: fix dst bit offset when extracting raw payload (bsc#1012628). - mtd: rawnand: nandsim: Fix the logic when selecting Hamming soft ECC engine (bsc#1012628). - i2c: tegra: Wait for config load atomically while in ISR (bsc#1012628). - i2c: bpmp-tegra: Ignore unknown I2C_M flags (bsc#1012628). - platform/x86: i2c-multi-instantiate: Don't create platform device for INT3515 ACPI nodes (bsc#1012628). - platform/x86: ideapad-laptop: Disable touchpad_switch for ELAN0634 (bsc#1012628). - ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() (bsc#1012628). - ALSA: hda/realtek - Limit int mic boost on Acer Aspire E5-575T (bsc#1012628). - ALSA: hda/via: Add minimum mute flag (bsc#1012628). - crypto: xor - Fix divide error in do_xor_speed() (bsc#1012628). - dm crypt: fix copy and paste bug in crypt_alloc_req_aead (bsc#1012628). - ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (bsc#1012628). - btrfs: don't get an EINTR during drop_snapshot for reloc (bsc#1012628). - btrfs: do not double free backref nodes on error (bsc#1012628). - btrfs: fix lockdep splat in btrfs_recover_relocation (bsc#1012628). - btrfs: don't clear ret in btrfs_start_dirty_block_groups (bsc#1012628). - btrfs: send: fix invalid clone operations when cloning from the same file and root (bsc#1012628). - fs: fix lazytime expiration handling in __writeback_single_inode() (bsc#1012628). - pinctrl: ingenic: Fix JZ4760 support (bsc#1012628). - mmc: core: don't initialize block size from ext_csd if not present (bsc#1012628). - mmc: sdhci-of-dwcmshc: fix rpmb access (bsc#1012628). - mmc: sdhci-xenon: fix 1.8v regulator stabilization (bsc#1012628). - mmc: sdhci-brcmstb: Fix mmc timeout errors on S5 suspend (bsc#1012628). - dm: avoid filesystem lookup in dm_get_dev_t() (bsc#1012628). - dm integrity: fix a crash if "recalculate" used without "internal_hash" (bsc#1012628). - dm integrity: conditionally disable "recalculate" feature (bsc#1012628). - drm/atomic: put state on error path (bsc#1012628). - drm/syncobj: Fix use-after-free (bsc#1012628). - drm/amdgpu: remove gpu info firmware of green sardine (bsc#1012628). - drm/amd/display: DCN2X Find Secondary Pipe properly in MPO + ODM Case (bsc#1012628). - drm/i915/gt: Prevent use of engine->wa_ctx after error (bsc#1012628). - drm/i915: Check for rq->hwsp validity after acquiring RCU lock (bsc#1012628). - ASoC: Intel: haswell: Add missing pm_ops (bsc#1012628). - ASoC: rt711: mutex between calibration and power state changes (bsc#1012628). - SUNRPC: Handle TCP socket sends with kernel_sendpage() again (bsc#1012628). - HID: multitouch: Enable multi-input for Synaptics pointstick/touchpad device (bsc#1012628). - HID: sony: select CONFIG_CRC32 (bsc#1012628). - dm integrity: select CRYPTO_SKCIPHER (bsc#1012628). - x86/hyperv: Fix kexec panic/hang issues (bsc#1012628). - scsi: ufs: Relax the condition of UFSHCI_QUIRK_SKIP_MANUAL_WB_FLUSH_CTRL (bsc#1012628). - scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback (bsc#1012628). - scsi: qedi: Correct max length of CHAP secret (bsc#1012628). - scsi: scsi_debug: Fix memleak in scsi_debug_init() (bsc#1012628). - scsi: sd: Suppress spurious errors when WRITE SAME is being disabled (bsc#1012628). - riscv: Fix kernel time_init() (bsc#1012628). - riscv: Fix sifive serial driver (bsc#1012628). - riscv: Enable interrupts during syscalls with M-Mode (bsc#1012628). - HID: logitech-dj: add the G602 receiver (bsc#1012628). - HID: Ignore battery for Elan touchscreen on ASUS UX550 (bsc#1012628). - clk: tegra30: Add hda clock default rates to clock driver (bsc#1012628). - ALSA: hda/tegra: fix tegra-hda on tegra30 soc (bsc#1012628). - riscv: cacheinfo: Fix using smp_processor_id() in preemptible (bsc#1012628). - arm64: make atomic helpers __always_inline (bsc#1012628). - xen: Fix event channel callback via INTX/GSI (bsc#1012628). - x86/xen: Add xen_no_vector_callback option to test PCI INTX delivery (bsc#1012628). - x86/xen: Fix xen_hvm_smp_init() when vector callback not available (bsc#1012628). - dts: phy: fix missing mdio device and probe failure of vsc8541-01 device (bsc#1012628). - dts: phy: add GPIO number and active state used for phy reset (bsc#1012628). - riscv: defconfig: enable gpio support for HiFive Unleashed (bsc#1012628). - drm/amdgpu/psp: fix psp gfx ctrl cmds (bsc#1012628). - drm/amd/display: disable dcn10 pipe split by default (bsc#1012628). - HID: logitech-hidpp: Add product ID for MX Ergo in Bluetooth mode (bsc#1012628). - drm/amd/display: Fix to be able to stop crc calculation (bsc#1012628). - drm/nouveau/bios: fix issue shadowing expansion ROMs (bsc#1012628). - drm/nouveau/privring: ack interrupts the same way as RM (bsc#1012628). - drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields (bsc#1012628). - drm/nouveau/mmu: fix vram heap sizing (bsc#1012628). - drm/nouveau/kms/nv50-: fix case where notifier buffer is at offset 0 (bsc#1012628). - io_uring: flush timeouts that should already have expired (bsc#1012628). - libperf tests: If a test fails return non-zero (bsc#1012628). - libperf tests: Fail when failing to get a tracepoint id (bsc#1012628). - RISC-V: Set current memblock limit (bsc#1012628). - RISC-V: Fix maximum allowed phsyical memory for RV32 (bsc#1012628). - x86/xen: fix 'nopvspin' build error (bsc#1012628). - nfsd: Fixes for nfsd4_encode_read_plus_data() (bsc#1012628). - nfsd: Don't set eof on a truncated READ_PLUS (bsc#1012628). - gpiolib: cdev: fix frame size warning in gpio_ioctl() (bsc#1012628). - pinctrl: aspeed: g6: Fix PWMG0 pinctrl setting (bsc#1012628). - pinctrl: mediatek: Fix fallback call path (bsc#1012628). - RDMA/ucma: Do not miss ctx destruction steps in some cases (bsc#1012628). - btrfs: print the actual offset in btrfs_root_name (bsc#1012628). - scsi: megaraid_sas: Fix MEGASAS_IOC_FIRMWARE regression (bsc#1012628). - scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1012628). - scsi: ufs: Fix tm request when non-fatal error happens (bsc#1012628). - crypto: omap-sham - Fix link error without crypto-engine (bsc#1012628). - bpf: Prevent double bpf_prog_put call from bpf_tracing_prog_attach (bsc#1012628). - powerpc: Use the common INIT_DATA_SECTION macro in vmlinux.lds.S (bsc#1012628). - powerpc: Fix alignment bug within the init sections (bsc#1012628). - arm64: entry: remove redundant IRQ flag tracing (bsc#1012628). - bpf: Reject too big ctx_size_in for raw_tp test run (bsc#1012628). - drm/amdkfd: Fix out-of-bounds read in kdf_create_vcrat_image_cpu() (bsc#1012628). - RDMA/umem: Avoid undefined behavior of rounddown_pow_of_two() (bsc#1012628). - RDMA/cma: Fix error flow in default_roce_mode_store (bsc#1012628). - printk: ringbuffer: fix line counting (bsc#1012628). - printk: fix kmsg_dump_get_buffer length calulations (bsc#1012628). - iov_iter: fix the uaccess area in copy_compat_iovec_from_user (bsc#1012628). - i2c: octeon: check correct size of maximum RECV_LEN packet (bsc#1012628). - drm/vc4: Unify PCM card's driver_name (bsc#1012628). - platform/x86: intel-vbtn: Drop HP Stream x360 Convertible PC 11 from allow-list (bsc#1012628). - platform/x86: hp-wmi: Don't log a warning on HPWMI_RET_UNKNOWN_COMMAND errors (bsc#1012628). - gpio: sifive: select IRQ_DOMAIN_HIERARCHY rather than depend on it (bsc#1012628). - ALSA: hda: Balance runtime/system PM if direct-complete is disabled (bsc#1012628). - xsk: Clear pool even for inactive queues (bsc#1012628). - selftests: net: fib_tests: remove duplicate log test (bsc#1012628). - can: dev: can_restart: fix use after free bug (bsc#1012628). - can: vxcan: vxcan_xmit: fix use after free bug (bsc#1012628). - can: peak_usb: fix use after free bugs (bsc#1012628). - perf evlist: Fix id index for heterogeneous systems (bsc#1012628). - i2c: sprd: depend on COMMON_CLK to fix compile tests (bsc#1012628). - iio: common: st_sensors: fix possible infinite loop in st_sensors_irq_thread (bsc#1012628). - iio: ad5504: Fix setting power-down state (bsc#1012628). - drivers: iio: temperature: Add delay after the addressed reset command in mlx90632.c (bsc#1012628). - iio: adc: ti_am335x_adc: remove omitted iio_kfifo_free() (bsc#1012628). - counter:ti-eqep: remove floor (bsc#1012628). - powerpc/64s: fix scv entry fallback flush vs interrupt (bsc#1012628). - cifs: do not fail __smb_send_rqst if non-fatal signals are pending (bsc#1012628). - irqchip/mips-cpu: Set IPI domain parent chip (bsc#1012628). - x86/fpu: Add kernel_fpu_begin_mask() to selectively initialize state (bsc#1012628). - x86/topology: Make __max_die_per_package available unconditionally (bsc#1012628). - x86/mmx: Use KFPU_387 for MMX string operations (bsc#1012628). - x86/setup: don't remove E820_TYPE_RAM for pfn 0 (bsc#1012628). - proc_sysctl: fix oops caused by incorrect command parameters (bsc#1012628). - mm: memcg/slab: optimize objcg stock draining (bsc#1012628). - mm: memcg: fix memcg file_dirty numa stat (bsc#1012628). - mm: fix numa stats for thp migration (bsc#1012628). - io_uring: iopoll requests should also wake task ->in_idle state (bsc#1012628). - io_uring: fix SQPOLL IORING_OP_CLOSE cancelation state (bsc#1012628). - io_uring: fix short read retries for non-reg files (bsc#1012628). - intel_th: pci: Add Alder Lake-P support (bsc#1012628). - stm class: Fix module init return on allocation failure (bsc#1012628). - serial: mvebu-uart: fix tx lost characters at power off (bsc#1012628). - ehci: fix EHCI host controller initialization sequence (bsc#1012628). - USB: ehci: fix an interrupt calltrace error (bsc#1012628). - usb: gadget: aspeed: fix stop dma register setting (bsc#1012628). - USB: gadget: dummy-hcd: Fix errors in port-reset handling (bsc#1012628). - usb: udc: core: Use lock when write to soft_connect (bsc#1012628). - usb: bdc: Make bdc pci driver depend on BROKEN (bsc#1012628). - usb: cdns3: imx: fix writing read-only memory issue (bsc#1012628). - usb: cdns3: imx: fix can't create core device the second time issue (bsc#1012628). - xhci: make sure TRB is fully written before giving it to the controller (bsc#1012628). - xhci: tegra: Delay for disabling LFPS detector (bsc#1012628). - drivers core: Free dma_range_map when driver probe failed (bsc#1012628). - driver core: Fix device link device name collision (bsc#1012628). - driver core: Extend device_is_dependent() (bsc#1012628). - drm/i915: s/intel_dp_sink_dpms/intel_dp_set_power/ (bsc#1012628). - drm/i915: Only enable DFP 4:4:4->4:2:0 conversion when outputting YCbCr 4:4:4 (bsc#1012628). - x86/entry: Fix noinstr fail (bsc#1012628). - x86/cpu/amd: Set __max_die_per_package on AMD (bsc#1012628). - cls_flower: call nla_ok() before nla_next() (bsc#1012628). - netfilter: rpfilter: mask ecn bits before fib lookup (bsc#1012628). - tools: gpio: fix %llu warning in gpio-event-mon.c (bsc#1012628). - tools: gpio: fix %llu warning in gpio-watch.c (bsc#1012628). - drm/i915/hdcp: Update CP property in update_pipe (bsc#1012628). - sh: dma: fix kconfig dependency for G2_DMA (bsc#1012628). - sh: Remove unused HAVE_COPY_THREAD_TLS macro (bsc#1012628). - locking/lockdep: Cure noinstr fail (bsc#1012628). - ASoC: SOF: Intel: fix page fault at probe if i915 init fails (bsc#1012628). - octeontx2-af: Fix missing check bugs in rvu_cgx.c (bsc#1012628). - net: dsa: mv88e6xxx: also read STU state in mv88e6250_g1_vtu_getnext (bsc#1012628). - selftests/powerpc: Fix exit status of pkey tests (bsc#1012628). - sh_eth: Fix power down vs. is_opened flag ordering (bsc#1012628). - nvme-pci: refactor nvme_unmap_data (bsc#1012628). - nvme-pci: fix error unwind in nvme_map_data (bsc#1012628). - cachefiles: Drop superfluous readpages aops NULL check (bsc#1012628 bsc#1175245). - lightnvm: fix memory leak when submit fails (bsc#1012628). - skbuff: back tiny skbs with kmalloc() in __netdev_alloc_skb() too (bsc#1012628). - kasan: fix unaligned address is unhandled in kasan_remove_zero_shadow (bsc#1012628). - kasan: fix incorrect arguments passing in kasan_add_zero_shadow (bsc#1012628). - tcp: fix TCP socket rehash stats mis-accounting (bsc#1012628). - net_sched: gen_estimator: support large ewma log (bsc#1012628). - udp: mask TOS bits in udp_v4_early_demux() (bsc#1012628). - ipv6: create multicast route with RTPROT_KERNEL (bsc#1012628). - net_sched: avoid shift-out-of-bounds in tcindex_set_parms() (bsc#1012628). - net_sched: reject silly cell_log in qdisc_get_rtab() (bsc#1012628). - ipv6: set multicast flag on the multicast route (bsc#1012628). - net: mscc: ocelot: allow offloading of bridge on top of LAG (bsc#1012628). - net: Disable NETIF_F_HW_TLS_RX when RXCSUM is disabled (bsc#1012628). - net: dsa: b53: fix an off by one in checking "vlan->vid" (bsc#1012628). - tcp: do not mess with cloned skbs in tcp_add_backlog() (bsc#1012628). - tcp: fix TCP_USER_TIMEOUT with zero window (bsc#1012628). - net: mscc: ocelot: Fix multicast to the CPU port (bsc#1012628). - net: core: devlink: use right genl user_ptr when handling port param get/set (bsc#1012628). - pinctrl: qcom: Allow SoCs to specify a GPIO function that's not 0 (bsc#1012628). - pinctrl: qcom: No need to read-modify-write the interrupt status (bsc#1012628). - pinctrl: qcom: Properly clear "intr_ack_high" interrupts when unmasking (bsc#1012628). - pinctrl: qcom: Don't clear pending interrupts when enabling (bsc#1012628). - x86/sev: Fix nonistr violation (bsc#1012628). - tty: implement write_iter (bsc#1012628). - tty: fix up hung_up_tty_write() conversion (bsc#1012628). - net: systemport: free dev before on error path (bsc#1012628). - x86/sev-es: Handle string port IO to kernel memory properly (bsc#1012628). - tcp: Fix potential use-after-free due to double kfree() (bsc#1012628). - ASoC: SOF: Intel: hda: Avoid checking jack on system suspend (bsc#1012628). - drm/i915/hdcp: Get conn while content_type changed (bsc#1012628). - bpf: Local storage helpers should check nullness of owner ptr passed (bsc#1012628). - kernfs: implement ->read_iter (bsc#1012628). - kernfs: implement ->write_iter (bsc#1012628). - kernfs: wire up ->splice_read and ->splice_write (bsc#1012628). - interconnect: imx8mq: Use icc_sync_state (bsc#1012628). - fs/pipe: allow sendfile() to pipe again (bsc#1012628). - Commit 9bb48c82aced ("tty: implement write_iter") converted the tty layer to use write_iter. Fix the redirected_tty_write declaration also in n_tty and change the comparisons to use write_iter instead of write. also in n_tty and change the comparisons to use write_iter instead of write (bsc#1012628). - mm: fix initialization of struct page for holes in memory layout (bsc#1012628). - Revert "mm: fix initialization of struct page for holes in memory layout" (bsc#1012628). - Delete patches.suse/fs-cachefs-Drop-superfluous-readpages-aops-NULL-chec.patch. - commit 7d05541 - ALSA: hda/via: Apply the workaround generically for Clevo machines (bsc#1181330). - commit 87d962b - Linux 5.10.10 (bsc#1012628). - spi: cadence: cache reference clock rate during probe (bsc#1012628). - spi: fsl: Fix driver breakage when SPI_CS_HIGH is not set in spi->mode (bsc#1012628). - cxgb4/chtls: Fix tid stuck due to wrong update of qid (bsc#1012628). - net: dsa: unbind all switches from tree when DSA master unbinds (bsc#1012628). - mac80211: check if atf has been disabled in __ieee80211_schedule_txq (bsc#1012628). - mac80211: do not drop tx nulldata packets on encrypted links (bsc#1012628). - drm/panel: otm8009a: allow using non-continuous dsi clock (bsc#1012628). - can: mcp251xfd: mcp251xfd_handle_rxif_one(): fix wrong NULL pointer check (bsc#1012628). - net: stmmac: use __napi_schedule() for PREEMPT_RT (bsc#1012628). - rxrpc: Fix handling of an unsupported token type in rxrpc_read() (bsc#1012628). - net: dsa: clear devlink port type before unregistering slave netdevs (bsc#1012628). - net: phy: smsc: fix clk error handling (bsc#1012628). - dt-bindings: net: renesas,etheravb: RZ/G2H needs tx-internal-delay-ps (bsc#1012628). - net: avoid 32 x truesize under-estimation for tiny skbs (bsc#1012628). - net: stmmac: fix taprio configuration when base_time is in the past (bsc#1012628). - net: stmmac: fix taprio schedule configuration (bsc#1012628). - net: sit: unregister_netdevice on newlink's error path (bsc#1012628). - net: stmmac: Fixed mtu channged by cache aligned (bsc#1012628). - i40e: fix potential NULL pointer dereferencing (bsc#1012628). - rxrpc: Call state should be read with READ_ONCE() under some circumstances (bsc#1012628). - net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands (bsc#1012628). - net: dcb: Validate netlink message in DCB handler (bsc#1012628). - esp: avoid unneeded kmap_atomic call (bsc#1012628). - rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM request (bsc#1012628). - net: mvpp2: Remove Pause and Asym_Pause support (bsc#1012628). - mlxsw: core: Increase critical threshold for ASIC thermal zone (bsc#1012628). - mlxsw: core: Add validation of transceiver temperature thresholds (bsc#1012628). - tipc: fix NULL deref in tipc_link_xmit() (bsc#1012628). - net: ipv6: Validate GSO SKB before finish IPv6 processing (bsc#1012628). - netxen_nic: fix MSI/MSI-x interrupts (bsc#1012628). - udp: Prevent reuseport_select_sock from reading uninitialized socks (bsc#1012628). - net: fix use-after-free when UDP GRO with shared fraglist (bsc#1012628). - net: ipa: modem: add missing SET_NETDEV_DEV() for proper sysfs links (bsc#1012628). - bpf: Fix helper bpf_map_peek_elem_proto pointing to wrong callback (bsc#1012628). - bpf: Support PTR_TO_MEM{,_OR_NULL} register spilling (bsc#1012628). - bpf: Don't leak memory in bpf getsockopt when optlen == 0 (bsc#1012628). - nfsd4: readdirplus shouldn't return parent of export (bsc#1012628). - X.509: Fix crash caused by NULL pointer (bsc#1012628). - bpf: Fix signed_{sub,add32}_overflows type handling (bsc#1012628). - drm/amdgpu/display: drop DCN support for aarch64 (bsc#1012628). - Update config files. - x86/hyperv: Initialize clockevents after LAPIC is initialized (bsc#1012628). - bpf: Fix selftest compilation on clang 11 (bsc#1012628). - Revert "kconfig: remove 'kvmconfig' and 'xenconfig' shorthands" (bsc#1012628). - commit 167b75d - drm/gpu/nouveau/dispnv50: Restore pushing of all data (boo#1181271). - commit c3f7185 - media: pwc: Fix the URB buffer allocation (bsc#1181133). - commit a9c85b1 - media: dvb-usb: Fix use-after-free access (bsc#1181104). - media: dvb-usb: Fix memory leak at error in dvb_usb_device_init() (bsc#1181104). - commit 807ed8c ==== kmod ==== Version update (27 -> 28) Subpackages: libkmod2 - Supplement bash-completion subpackage against the main package and bash-completion. - Also require the main package plus bash-completion: the completion package is useless without either of the two. - Update to v28 * Add Zstandard to the supported compression formats using libzstd (tests only - cannot be disabled in tests) * Ignore ill-formed kernel command line, e.g. with "ivrs_acpihid[00:14.5]=AMD0020:0" option in it * Fix some memory leaks * Fix 0-length builtin.alias.bin: it needs at least the index header - Backport upstream fix 0001-Fix-modinfo-F-always-shows-name-for-built-ins.patch ==== libunwind ==== Version update (1.4.0 -> 1.5.0) - update to 1.5.0: * dwarf: clang doesn't respect the static alias * Fixed a missing dependency in dwarf-eh.h * x86_64: Fix tdep_init_done when built with libatomic_ops * mips: make _step_n64 as a static function * Added braces to suppress empty if/else warnings * Delete hardcode of address size to support MIPS64. * Fix format specifier for int64_t:29 * Add initial support for Solaris x86-64 * x86_64: Add fixup code if previous RIP was invalid * x86-64: make `is_cached_valid_mem` functional * arm: clear ip thumb/arm mode bit before move to previous instruction * Fix compilation with -fno-common. * Fix off-by-one error in x86_64 stack frames * aarch64: Fix __sigset build issue on muslC * Make SHF_COMPRESSED use contingent on its existence - remove libunwind_U_dyn_info_list.patch (upstream) ==== openssh ==== Subpackages: openssh-clients openssh-common openssh-server - Add support for /etc/ssh/ssh_config.d and /etc/ssh/sshd_config.d (openssh-8.4p1-ssh_config_d.patch) ==== permissions ==== Version update (1550_20201111 -> 1550_20210125) Subpackages: chkstat permissions-config - Update to version 20210125: * usbauth: drop compatibility variable for libexec * usbauth: Updated path for usbauth-npriv * profiles: finish usage of variable for polkit-agent-helper-1 ==== pinentry ==== Version update (1.1.0 -> 1.1.1) - actually build efl based pinentry - re-enable validation of upstream signing key - update to 1.1.1: * A EFL-based pinentry has been contributed. * Disable echoing in backspace key is pressed first (GTK, Qt, TQt, and ncurses pinentries). * Support line editing in TTY pinentry. * Remove support for old GTK+2 (< 2.12.0). * Various minor fixes. - drop pinentry-qt-Fix-use-of-dangling-pointer.patch (upstream) - drop pinentry-ncurses6.diff: obsolete ==== python-PyYAML ==== Version update (5.3.1 -> 5.4.1) - update to 5.4.1 (bsc#1174514, CVE-2020-14343): * Fix stub compat with older pyyaml versions that may unwittingly load it * Build modernization, remove distutils, fix metadata, build wheels, CI to GHA * Fix for CVE-2020-14343, moves arbitrary python tags to UnsafeLoader * Fix memory leak in implicit resolver setup * Fix py2 copy support for timezone objects * Fix compatibility with Jython ==== python-importlib-metadata ==== Version update (3.3.0 -> 3.4.0) - update to 3.4.0: * Project now declares itself as being typed. * Additional performance enhancements to distribution discovery. * For PyPA projects, add test ensuring that ``MetadataPathFinder._search_paths`` honors the needed interface. Method is still private. ==== python-networkx ==== - Temporarily reenable python36 build until SciPy is updated, because the PyYAML fix needs to be merged first - Add yaml-loader.patch adding support for new PyYAML - Skip python36 because of SciPy 1.6.0 ==== python-packaging ==== Version update (20.4 -> 20.8) - update to 20.8: * Revert back to setuptools for compatibility purposes for some Linux distros (:issue:`363`) * Do not insert an underscore in wheel tags when the interpreter version number is more than 2 digits (:issue:`372`) * Fix flit configuration, to include LICENSE files (:issue:`357`) * Make `intel` a recognized CPU architecture for the `universal` macOS platform tag (:issue:`361`) * Add some missing type hints to `packaging.requirements` (issue:`350`) * Officially support Python 3.9 (:issue:`343`) * Deprecate the ``LegacyVersion`` and ``LegacySpecifier`` classes (:issue:`321`) * Handle ``OSError`` on non-dynamic executables when attempting to resolve the glibc version string. ==== python-psutil ==== Version update (5.7.3 -> 5.8.0) - Do not install tests (and change the way they're run since they were run from %{buildroot}) - Add patch to skip tests related to rlimit and zombie processes that fail when building for python2 on i586: * skip_rlimit_tests_on_python2.patch - update to 5.8.0: * Enhancements: - 1863: disk_partitions() exposes 2 extra fields: maxfile and maxpath, which are the maximum file name and path name length. - 1872: [Windows] added support for PyPy 2.7. - 1879: provide pre-compiled wheels for Linux and macOS. - 1880: get rid of Travis and Cirrus CI services (they are no longer free). CI testing is now done by GitHub Actions on Linux, macOS and FreeBSD (yes). AppVeyor is still being used for Windows CI. * Bug fixes: - 1708: [Linux] get rid of sensors_temperatures() duplicates. (patch by Tim Schlueter). - 1839: [Windows] always raise AccessDenied when failing to query 64 processes from 32 bit ones (NtWoW64 APIs). - 1866: [Windows] process exe(), cmdline(), environ() may raise "invalid access to memory location" on Python 3.9. - 1874: [Solaris] wrong swap output given when encrypted column is present. - 1875: [Windows] process username() may raise ERROR_NONE_MAPPED if the SID has no corresponding account name. In this case AccessDenied is now raised. - 1877: [Windows] OpenProcess may fail with ERROR_SUCCESS. Turn it into AccessDenied or NoSuchProcess depending on whether the PID is alive. - 1886: [macOS] EIO error may be raised on cmdline() and environment(). Now it gets translated into AccessDenied. - 1891: [macOS] get rid of deprecated getpagesize(). - Rebase patch and skip three other tests that fail on obs * skip-obs.patch ==== python-urllib3 ==== Version update (1.26.2 -> 1.26.3) - update to 1.26.3: * Fixed bytes and string comparison issue with headers (Pull #2141) * Changed ``ProxySchemeUnknown`` error message to be more actionable if the user supplies a proxy URL without a scheme. (Pull #2107) ==== python38 ==== Version update (3.8.6 -> 3.8.7) - Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution. - (bsc#1180125) We really don't Require python-rpm-macros package. Unnecessary dependency. - Update to 3.8.7: - bugfix release - multiple patches realigned: - F00102-lib64.patch - SUSE-FEDORA-multilib.patch - bpo-31046_ensurepip_honours_prefix.patch - skip_random_failing_tests.patch - Last try before this results in an editwar: * remove importlib_resources and importlib-metadata provides/obsoletes * import importlib_resources is not the same as import importlib.resources, same for metadata * The backport packages from PyPI needed for older flavors are specified as such for setuptools or in pyproject.toml. If a package requires them they typically add them with a python version qualifier and the packages have their own version numbers. - Add patch sphinx-update-removed-function.patch to no longer call a now removed function and to make documentation build independent of the Sphinx version (bsc#1179630, gh#python/cpython#13236). - Add importlib_resources provide/obsolete as it is integral part of the lang since 3.7 release ==== python38-core ==== Version update (3.8.6 -> 3.8.7) Subpackages: libpython3_8-1_0 python38-base - Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution. - (bsc#1180125) We really don't Require python-rpm-macros package. Unnecessary dependency. - Update to 3.8.7: - bugfix release - multiple patches realigned: - F00102-lib64.patch - SUSE-FEDORA-multilib.patch - bpo-31046_ensurepip_honours_prefix.patch - skip_random_failing_tests.patch - Last try before this results in an editwar: * remove importlib_resources and importlib-metadata provides/obsoletes * import importlib_resources is not the same as import importlib.resources, same for metadata * The backport packages from PyPI needed for older flavors are specified as such for setuptools or in pyproject.toml. If a package requires them they typically add them with a python version qualifier and the packages have their own version numbers. - Add patch sphinx-update-removed-function.patch to no longer call a now removed function and to make documentation build independent of the Sphinx version (bsc#1179630, gh#python/cpython#13236). - Add importlib_resources provide/obsolete as it is integral part of the lang since 3.7 release ==== rpm ==== Subpackages: librpmbuild9 - Add explicit requirement on python-rpm-macros to avoid widespread breakage by package mistakenly ignoring their requirement of python-rpm-macros (bsc#1180125). ==== socat ==== Version update (1.7.3.4 -> 1.7.4.1) - update to 1.7.4.1: Security: * Buffer size option (-b) is internally doubled for CR-CRLF conversion, but not checked for integer overflow. This could lead to heap based buffer overflow, assuming the attacker could provide this parameter. * Many further bugfixes and new features, see the CHANGES file ==== supportutils ==== - Require the awk, which and sed commands instead of packages to allow alternate implementations on embedded/Edge systems ==== timezone ==== Version update (2020f -> 2021a) - timezone update 2021a (bsc#1177460) * South Sudan changes from +03 to +02 on 2021-02-01 at 00:00. ==== toolbox ==== Version update (1.0+git20210119.b5acdcf -> 2.0+git20210125.50611db) - Update to version 2.0+git20210125.50611db: * Document configuration files, add /usr/etc/toolboxrc * Update README to include commands * Update the README * Be even more compatible with Silverblue Toolbox * Introduce commands, for compatibility with Silverblue's toolbox * Mount /run/media and and /tmp inside a user toolbox * Export more env variables inside (user) toolboxes ==== tpm2-0-tss ==== Version update (3.0.1 -> 3.0.3) Subpackages: libtss2-esys0 libtss2-mu0 libtss2-rc0 libtss2-sys1 - update to 3.0.3: - changes in 3.0.3: * Fix Regression in Fapi_List * Fix memory leak in policy calculation - changes in 3.0.2: * FAPI: Fix setting of the system flag of NV objects * This will let NV object metadata be created system-wide always instead of * locally in the user. Existing metadata will remain in the user directory. * It can be moved to the corresponding systemstore manually if needed. * FAPI: Fix policy searching, when a policyRef was provided * FAPI: Accept EK-Certs without CRL dist point * FAPI: Fix return codes of Fapi_List * FAPI: Fix memleak in policy execution * FAPI: Fix coverity NULL-pointer check * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands * FAPI: Fix deleting of policy files. * FAPI: Fix wrong file loading during object search. * Fapi: Fix memory leak * Fapi: Fix potential NULL-Dereference * Fapi: Remove superfluous NULL check * Fix a memory leak in async keystore load. ==== util-linux ==== Version update (2.35.1 -> 2.36.1) Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 - Do not require libeconf-devel on products without /usr/etc. - s/--enable-vendordir/--with-vendordir/ - remove pam_securetty line again. As long as there is no agreement from pam side having it would fail openQA (boo#1033626) - Update to version 2.36.1: * chrt: use SCHED_FLAG_RESET_ON_FORK for sched_setattr() * fallocate: fix --dig-holes at end of files * fdisk: always report fdisk_create_disklabel() errors * flock: keep -E exit status more restrictive * fstrim: remove fstab condition from fstrim.timer * hexdump: automatically use -C when called as hd * hwclock: add fallback if SYS_settimeofday does not exist, fix SYS_settimeofday fallback * libblkid: allow a lot of mac partitions, fix Atari prober logic, limit amount of parsed partitions * more libfdisk improvements * losetup: avoid infinite busy loop, increase limit of setup attempts * lsblk: fix -T optional argument, fix SCSI_IDENT_SERIAL, print zero rather than empty SIZE, read ID_SCSI_IDENT_SERIAL if available * lscpu: Add FUJITSU aarch64 A64FX cpupart, Even more Arm part numbers, avoid segfault on PowerPC systems with valid hardware configurations (bsc#1175623) * mount: Add support for "nosymfollow" mount option. * pg: fix wcstombs() * sfdisk: correct --json --dump false exclusive, fix backward - -move-data * vipw: fix short write handling in copyfile * whereis: fix out of boundary read, support zst compressed man pages * minor code improvements and fixes * minor licensing changes * improve docs - Require both group(uuidd) and user(uuidd). - Do search /usr/sbin for mount helpers. (This drops /sbin/fs, /sbin/fs.d, which we do not use in openSUSE.) - prepare usrmerge (boo#1029961) - Modernize patch util-linux-sulogin4bsc1175514.patch * Try to autoconfigure broken serial lines - Add patch util-linux-sulogin4bsc1175514.patch Avoid sulogin failing on not existing or not functional console devices (bsc#1175514) - Fix default permissions of wall and write. - Update to version 2.36: * blkdiscard(8) refuses to proceed if filesystem or RAID signatures are found in interactive mode (executed on a terminal). The option --force is required to the discard data. * new commands irqtop(1) and lsirq(1)to monitor kernel interrupts. * cal(1) provides a new --vertical command line option. * blkzone(8) implements open/close/finish commands now. * unshare(1) and nsenter(1) commands support the time namespace now. * agetty(8) now supports multiple paths in the option - -issue-file. * fdisk(8), sfdisk(8), cfdisk(8), mkswap(8) and wipefs(8) now support block devices locking by flock(2), new command line option --lock and $LOCK_BLOCK_DEVICE environmental variable. * dmesg(1) new command line option --follow-new to wait and print only new kernel messages. * fdisk(8) new command line option --list-details and - -noauto-pt. * fdisk(8) and sfdisk(8) support user-friendly aliases for partition types. * fstrim(8) supports new command line option --listed-in. * libfdisk provides API to relocate GPT backup header. New command line option "sfdisk --relocate". * mount(8) now supports mount by ID= tag. * login(1) supports list of "message of the day". * All tools which read /etc/login.defs is possible to compile with libeconf now. * more(1) has been refactored. * man pages cleanup * other fixes and improvements, see: https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.36/v2.36-ReleaseNotes - Refresh Add-documentation-on-blacklisted-modules-to-mount-8-.patch. - Drop upstreamed libeconf.patch, libmount-Avoid-triggering-autofs-in-lookup_umount_fs.patch. - util-linux-login_defs-check.sh: Perform all steps to integrate MOTD_FIRSTONLY. - Update baselibs.conf. - Use plain #!/bin/sh for flushb - Include pam_securetty in login.pamd again (bsc#1033626) - Update to 2.35.2 * make glibc 2.31 compatible - Dropped unneeded patch libfdisk-script-accept-sector-size.patch ==== util-linux-systemd ==== Version update (2.35.1 -> 2.36.1) - Do not require libeconf-devel on products without /usr/etc. - s/--enable-vendordir/--with-vendordir/ - remove pam_securetty line again. As long as there is no agreement from pam side having it would fail openQA (boo#1033626) - Update to version 2.36.1: * chrt: use SCHED_FLAG_RESET_ON_FORK for sched_setattr() * fallocate: fix --dig-holes at end of files * fdisk: always report fdisk_create_disklabel() errors * flock: keep -E exit status more restrictive * fstrim: remove fstab condition from fstrim.timer * hexdump: automatically use -C when called as hd * hwclock: add fallback if SYS_settimeofday does not exist, fix SYS_settimeofday fallback * libblkid: allow a lot of mac partitions, fix Atari prober logic, limit amount of parsed partitions * more libfdisk improvements * losetup: avoid infinite busy loop, increase limit of setup attempts * lsblk: fix -T optional argument, fix SCSI_IDENT_SERIAL, print zero rather than empty SIZE, read ID_SCSI_IDENT_SERIAL if available * lscpu: Add FUJITSU aarch64 A64FX cpupart, Even more Arm part numbers, avoid segfault on PowerPC systems with valid hardware configurations (bsc#1175623) * mount: Add support for "nosymfollow" mount option. * pg: fix wcstombs() * sfdisk: correct --json --dump false exclusive, fix backward - -move-data * vipw: fix short write handling in copyfile * whereis: fix out of boundary read, support zst compressed man pages * minor code improvements and fixes * minor licensing changes * improve docs - Require both group(uuidd) and user(uuidd). - Do search /usr/sbin for mount helpers. (This drops /sbin/fs, /sbin/fs.d, which we do not use in openSUSE.) - prepare usrmerge (boo#1029961) - Modernize patch util-linux-sulogin4bsc1175514.patch * Try to autoconfigure broken serial lines - Add patch util-linux-sulogin4bsc1175514.patch Avoid sulogin failing on not existing or not functional console devices (bsc#1175514) - Fix default permissions of wall and write. - Update to version 2.36: * blkdiscard(8) refuses to proceed if filesystem or RAID signatures are found in interactive mode (executed on a terminal). The option --force is required to the discard data. * new commands irqtop(1) and lsirq(1)to monitor kernel interrupts. * cal(1) provides a new --vertical command line option. * blkzone(8) implements open/close/finish commands now. * unshare(1) and nsenter(1) commands support the time namespace now. * agetty(8) now supports multiple paths in the option - -issue-file. * fdisk(8), sfdisk(8), cfdisk(8), mkswap(8) and wipefs(8) now support block devices locking by flock(2), new command line option --lock and $LOCK_BLOCK_DEVICE environmental variable. * dmesg(1) new command line option --follow-new to wait and print only new kernel messages. * fdisk(8) new command line option --list-details and - -noauto-pt. * fdisk(8) and sfdisk(8) support user-friendly aliases for partition types. * fstrim(8) supports new command line option --listed-in. * libfdisk provides API to relocate GPT backup header. New command line option "sfdisk --relocate". * mount(8) now supports mount by ID= tag. * login(1) supports list of "message of the day". * All tools which read /etc/login.defs is possible to compile with libeconf now. * more(1) has been refactored. * man pages cleanup * other fixes and improvements, see: https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.36/v2.36-ReleaseNotes - Refresh Add-documentation-on-blacklisted-modules-to-mount-8-.patch. - Drop upstreamed libeconf.patch, libmount-Avoid-triggering-autofs-in-lookup_umount_fs.patch. - util-linux-login_defs-check.sh: Perform all steps to integrate MOTD_FIRSTONLY. - Update baselibs.conf. - Use plain #!/bin/sh for flushb - Include pam_securetty in login.pamd again (bsc#1033626) - Update to 2.35.2 * make glibc 2.31 compatible - Dropped unneeded patch libfdisk-script-accept-sector-size.patch ==== yast2 ==== Version update (4.3.49 -> 4.3.51) - Do not propose hibernation when running over a virtualized setup (bsc#1180982). - 4.3.51 - Fixed Resolvables class to uniqely identify the libzypp objects to avoid random failures (related to bsc#1178688) - 4.3.50 ==== zeromq ==== Version update (4.3.3 -> 4.3.4) - update to 4.3.4: * ZMQ_PRIORITY will set the SO_PRIORITY socket option on the underlying sockets. Only supported on Linux. * Fixed compilation errors on kFreeBSD and GNU/Hurd * Fixed excessive amount of socket files left behind in Windows TMP * Fixed regression that breaks using IPv6 link-local addresses on Linux * Fixed compilation errors on Android * Fixed compilation error with ulibc and libbsd * Fixed stack overflow on Windows x64 * Fixed various compilation errors on Windows ARM 32bit * Fixed various compilation warnings with XCode * Fixed return value of zmq_ctx_get changed unintentionally ==== zstd ==== - Add libzstd-devel-32bit (boo#1181272)