Packages changed: cockpit (245 -> 250) cockpit-podman (28.1 -> 33) diffutils (3.7 -> 3.8) dracut (055+suse.115.gf65e559b -> 055+suse.117.ge5fc2048) gdbm (1.19 -> 1.20) grub2 kernel-firmware (20210719 -> 20210812) kernel-source (5.13.8 -> 5.13.12) krb5 (1.19.1 -> 1.19.2) pam python38 (3.8.10 -> 3.8.11) python38-core (3.8.10 -> 3.8.11) selinux-policy yomi-formula (0.0.1+git.1619170188.fa52819 -> 0.0.1+git.1629280900.fdbe9f0) === Details === ==== cockpit ==== Version update (245 -> 250) Subpackages: cockpit-bridge cockpit-packagekit cockpit-system - new version 250 https://cockpit-project.org/blog/cockpit-250.html - fix pam_motd selinux denial (0001-selinux-allow-login-to-read-motd-file.patch) ==== cockpit-podman ==== Version update (28.1 -> 33) - new version 33 https://github.com/cockpit-project/cockpit-podman/releases/tag/33 - fix_dependencies.patch no longer needed ==== diffutils ==== Version update (3.7 -> 3.8) - diffutils 3.8: * diff no longer treats a closed stdin as representing an absent file in usage like 'diff --new-file - foo <&-' * diff and related programs no longer get confused if stdin, stdout, or stderr are closed * cmp, diff and sdiff no longer treat negative command-line option-arguments as if they were large positive numbers - drop gnulib-test-avoid-FP-perror-strerror.patch, upstream - drop gnulib-c-stack.patch, equivalent change in c-stack - remove deprecated texinfo packaging macros ==== dracut ==== Version update (055+suse.115.gf65e559b -> 055+suse.117.ge5fc2048) Subpackages: dracut-ima dracut-mkinitrd-deprecated - Update to version 055+suse.117.ge5fc2048: * fix(suse-initrd): need to handle relative links too ==== gdbm ==== Version update (1.19 -> 1.20) Subpackages: libgdbm6 libgdbm_compat4 - version update to 1.20 * New bucket cache The bucket cache support has been rewritten from scratch. The new bucket cache code provides for significant speed up of search operations. * Change mmap prereading strategy Pre-reading of the memory mapper regions, introduced in version 1.19 can be advantageous only when doing intensive look-ups on a read-only database. It degrades performance otherwise, especially if doing multiple inserts. Therefore, this version introduces a new flag to gdbm_open: GDBM_PREREAD. When given, it enables pre-reading of memory mapped regions. - modified patches % gdbm-no-build-date.patch (refreshed) ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-x86_64-efi - update grub2-systemd-sleep.sh to fix hibernation by avoiding the error "no kernelfile matching the running kernel found" on usrmerged setup ==== kernel-firmware ==== Version update (20210719 -> 20210812) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd - Update to version 20210812 (git commit 24c4a85d8514): * amdgpu: revert back to older raven2 sdma firmware * amdgpu: revert back to older raven sdma firmware * amdgpu: revert back to older picasso sdma firmware * amdgpu: add initial vangogh support * amdgpu: update vega20 firmware from 21.30 * amdgpu: update vega12 firmware from 21.30 * amdgpu: update vega10 firmware from 21.30 * amdgpu: update renoir firmware from 21.30 * amdgpu: update raven2 firmware from 21.30 * amdgpu: update raven firmware from 21.30 * amdgpu: update polaris12 firmware from 21.30 * amdgpu: update picasso firmware from 21.30 * amdgpu: update dimgrey cavefish firmware from 21.30 * amdgpu: update navy flounder firmware from 21.30 * amdgpu: update sienna cichlid firmware from 21.30 * amdgpu: update navi14 firmware from 21.30 * amdgpu: update navi12 firmware from 21.30 * amdgpu: update navi10 firmware from 21.30 * amdgpu: update green sardine firmware from 21.30 * amdgpu: update arcturus firmware from 21.30 * linux-firmware: Update firmware file for Intel Bluetooth AX210 * linux-firmware: update frimware for mediatek bluetooth chip (MT7921) * linux-firmware: add firmware for MT7922 * QCA : Updated firmware files for WCN3991 * i915: Add v2.03 DMC for RKL * i915: Add v2.12 DMC for TGL * qca: Add firmware files for BT chip WCN6750. ==== kernel-source ==== Version update (5.13.8 -> 5.13.12) - driver core: Add missing kernel doc for device::msi_lock (git-fixes). - commit 33709df - Linux 5.13.12 (bsc#1012628). - lib: use PFN_PHYS() in devmem_is_allowed() (bsc#1012628). - Revert "usb: dwc3: gadget: Use list_replace_init() before traversing lists" (bsc#1012628). - iio: adc: ti-ads7950: Ensure CS is deasserted after reading channels (bsc#1012628). - iio: adis: set GPIO reset pin direction (bsc#1012628). - iio: humidity: hdc100x: Add margin to the conversion time (bsc#1012628). - iio: adc: Fix incorrect exit of for-loop (bsc#1012628). - ASoC: amd: Fix reference to PCM buffer address (bsc#1012628). - ASoC: xilinx: Fix reference to PCM buffer address (bsc#1012628). - ASoC: uniphier: Fix reference to PCM buffer address (bsc#1012628). - ASoC: tlv320aic31xx: Fix jack detection after suspend (bsc#1012628). - ASoC: kirkwood: Fix reference to PCM buffer address (bsc#1012628). - ASoC: intel: atom: Fix reference to PCM buffer address (bsc#1012628). - i2c: dev: zero out array used for i2c reads from userspace (bsc#1012628). - cifs: Handle race conditions during rename (bsc#1012628). - cifs: create sd context must be a multiple of 8 (bsc#1012628). - cifs: Call close synchronously during unlink/rename/lease break (bsc#1012628). - cifs: use the correct max-length for dentry_path_raw() (bsc#1012628). - io_uring: drop ctx->uring_lock before flushing work item (bsc#1012628). - io_uring: fix ctx-exit io_rsrc_put_work() deadlock (bsc#1012628). - scsi: lpfc: Move initialization of phba->poll_list earlier to avoid crash (bsc#1012628). - cgroup: rstat: fix A-A deadlock on 32bit around u64_stats_sync (bsc#1012628). - seccomp: Fix setting loaded filter count during TSYNC (bsc#1012628). - net: wwan: mhi_wwan_ctrl: Fix possible deadlock (bsc#1012628). - net: ethernet: ti: cpsw: fix min eth packet size for non-switch use-cases (bsc#1012628). - ARC: fp: set FPU_STATUS.FWE to enable FPU_STATUS update on context switch (bsc#1012628). - ceph: reduce contention in ceph_check_delayed_caps() (bsc#1012628). - pinctrl: k210: Fix k210_fpioa_probe() (bsc#1012628). - ACPI: NFIT: Fix support for virtual SPA ranges (bsc#1012628). - libnvdimm/region: Fix label activation vs errors (bsc#1012628). - riscv: kexec: do not add '-mno-relax' flag if compiler doesn't support it (bsc#1012628). - vmlinux.lds.h: Handle clang's module.{c,d}tor sections (bsc#1012628). - drm/i915/gvt: Fix cached atomics setting for Windows VM (bsc#1012628). - drm/i915/display: Fix the 12 BPC bits for PIPE_MISC reg (bsc#1012628). - drm/amd/display: Remove invalid assert for ODM + MPC case (bsc#1012628). - drm/amd/display: use GFP_ATOMIC in amdgpu_dm_irq_schedule_work (bsc#1012628). - drm/amdgpu: Add preferred mode in modeset when freesync video mode's enabled (bsc#1012628). - drm/amdgpu: don't enable baco on boco platforms in runpm (bsc#1012628). - drm/amdgpu: handle VCN instances when harvesting (v2) (bsc#1012628). - ieee802154: hwsim: fix GPF in hwsim_set_edge_lqi (bsc#1012628). - ieee802154: hwsim: fix GPF in hwsim_new_edge_nl (bsc#1012628). - drm/mediatek: Fix cursor plane no update (bsc#1012628). - pinctrl: mediatek: Fix fallback behavior for bias_set_combo (bsc#1012628). - ASoC: cs42l42: Correct definition of ADC Volume control (bsc#1012628). - ASoC: cs42l42: Don't allow SND_SOC_DAIFMT_LEFT_J (bsc#1012628). - ASoC: cs42l42: Fix bclk calculation for mono (bsc#1012628). - selftests/sgx: Fix Q1 and Q2 calculation in sigstruct.c (bsc#1012628). - ASoC: SOF: Intel: Kconfig: fix SoundWire dependencies (bsc#1012628). - ASoC: SOF: Intel: hda-ipc: fix reply size checking (bsc#1012628). - ASoC: cs42l42: Fix inversion of ADC Notch Switch control (bsc#1012628). - ASoC: cs42l42: Remove duplicate control for WNF filter frequency (bsc#1012628). - netfilter: nf_conntrack_bridge: Fix memory leak when error (bsc#1012628). - pinctrl: tigerlake: Fix GPIO mapping for newer version of software (bsc#1012628). - ASoC: cs42l42: PLL must be running when changing MCLK_SRC_SEL (bsc#1012628). - ASoC: cs42l42: Fix LRCLK frame start edge (bsc#1012628). - ASoC: cs42l42: Fix mono playback (bsc#1012628). - net: dsa: mt7530: add the missing RxUnicast MIB counter (bsc#1012628). - net: mvvp2: fix short frame size on s390 (bsc#1012628). - platform/x86: pcengines-apuv2: Add missing terminating entries to gpio-lookup tables (bsc#1012628). - perf/x86/intel: Apply mid ACK for small core (bsc#1012628). - drm/amd/pm: Fix a memory leak in an error handling path in 'vangogh_tables_init()' (bsc#1012628). - libbpf: Fix probe for BPF_PROG_TYPE_CGROUP_SOCKOPT (bsc#1012628). - libbpf: Do not close un-owned FD 0 on errors (bsc#1012628). - net: dsa: qca: ar9331: make proper initial port defaults (bsc#1012628). - net: phy: micrel: Fix link detection on ksz87xx switch" (bsc#1012628). - ppp: Fix generating ifname when empty IFLA_IFNAME is specified (bsc#1012628). - io_uring: clear TIF_NOTIFY_SIGNAL when running task work (bsc#1012628). - net/smc: fix wait on already cleared link (bsc#1012628). - net/smc: Correct smc link connection counter in case of smc client (bsc#1012628). - net: sched: act_mirred: Reset ct info when mirror/redirect skb (bsc#1012628). - ice: Prevent probing virtual functions (bsc#1012628). - ice: Stop processing VF messages during teardown (bsc#1012628). - ice: don't remove netdev->dev_addr from uc sync list (bsc#1012628). - iavf: Set RSS LUT and key in reset handle path (bsc#1012628). - psample: Add a fwd declaration for skbuff (bsc#1012628). - bareudp: Fix invalid read beyond skb's linear data (bsc#1012628). - io-wq: fix bug of creating io-wokers unconditionally (bsc#1012628). - io-wq: fix IO_WORKER_F_FIXED issue in create_io_worker() (bsc#1012628). - net/mlx5: Don't skip subfunction cleanup in case of error in module init (bsc#1012628). - net/mlx5: DR, Add fail on error check on decap (bsc#1012628). - net/mlx5e: Avoid creating tunnel headers for local route (bsc#1012628). - net/mlx5e: Destroy page pool after XDP SQ to fix use-after-free (bsc#1012628). - net/mlx5: Block switchdev mode while devlink traps are active (bsc#1012628). - net/mlx5e: TC, Fix error handling memory leak (bsc#1012628). - net/mlx5: Synchronize correct IRQ when destroying CQ (bsc#1012628). - net/mlx5: Fix return value from tracer initialization (bsc#1012628). - drm/meson: fix colour distortion from HDR set during vendor u-boot (bsc#1012628). - ovl: fix deadlock in splice write (bsc#1012628). - bpf: Fix potentially incorrect results with bpf_get_local_storage() (bsc#1012628). - net: dsa: microchip: Fix ksz_read64() (bsc#1012628). - net: dsa: microchip: ksz8795: Fix PVID tag insertion (bsc#1012628). - net: dsa: microchip: ksz8795: Reject unsupported VLAN configuration (bsc#1012628). - net: dsa: microchip: ksz8795: Fix VLAN untagged flag change on deletion (bsc#1012628). - net: dsa: microchip: ksz8795: Use software untagging on CPU port (bsc#1012628). - net: dsa: microchip: ksz8795: Fix VLAN filtering (bsc#1012628). - net: dsa: microchip: ksz8795: Don't use phy_port_cnt in VLAN table lookup (bsc#1012628). - net: Fix memory leak in ieee802154_raw_deliver (bsc#1012628). - net: igmp: fix data-race in igmp_ifc_timer_expire() (bsc#1012628). - net: dsa: hellcreek: fix broken backpressure in .port_fdb_dump (bsc#1012628). - net: dsa: lan9303: fix broken backpressure in .port_fdb_dump (bsc#1012628). - net: dsa: lantiq: fix broken backpressure in .port_fdb_dump (bsc#1012628). - net: dsa: sja1105: fix broken backpressure in .port_fdb_dump (bsc#1012628). - pinctrl: sunxi: Don't underestimate number of functions (bsc#1012628). - net: bridge: fix flags interpretation for extern learn fdb entries (bsc#1012628). - net: bridge: fix memleak in br_add_if() (bsc#1012628). - net: linkwatch: fix failure to restore device state across suspend/resume (bsc#1012628). - tcp_bbr: fix u32 wrap bug in round logic if bbr_init() called after 2B packets (bsc#1012628). - net: igmp: increase size of mr_ifc_count (bsc#1012628). - drm/i915: Only access SFC_DONE when media domain is not fused off (bsc#1012628). - xen/events: Fix race in set_evtchn_to_irq (bsc#1012628). - vsock/virtio: avoid potential deadlock when vsock device remove (bsc#1012628). - nbd: Aovid double completion of a request (bsc#1012628). - arm64: efi: kaslr: Fix occasional random alloc (and boot) failure (bsc#1012628). - KVM: arm64: Fix off-by-one in range_is_memory (bsc#1012628). - efi/libstub: arm64: Force Image reallocation if BSS was not reserved (bsc#1012628). - efi/libstub: arm64: Relax 2M alignment again for relocatable kernels (bsc#1012628). - powerpc/kprobes: Fix kprobe Oops happens in booke (bsc#1012628). - i2c: iproc: fix race between client unreg and tasklet (bsc#1012628). - x86/tools: Fix objdump version check again (bsc#1012628). - genirq: Provide IRQCHIP_AFFINITY_PRE_STARTUP (bsc#1012628). - x86/msi: Force affinity setup before startup (bsc#1012628). - x86/ioapic: Force affinity setup before startup (bsc#1012628). - x86/resctrl: Fix default monitoring groups reporting (bsc#1012628). - genirq/msi: Ensure deactivation on teardown (bsc#1012628). - genirq/timings: Prevent potential array overflow in __irq_timings_store() (bsc#1012628). - powerpc/interrupt: Fix OOPS by not calling do_IRQ() from timer_interrupt() (bsc#1012628). - PCI/MSI: Enable and mask MSI-X early (bsc#1012628). - PCI/MSI: Mask all unused MSI-X entries (bsc#1012628). - PCI/MSI: Enforce that MSI-X table entry is masked for update (bsc#1012628). - PCI/MSI: Enforce MSI[X] entry updates to be visible (bsc#1012628). - PCI/MSI: Do not set invalid bits in MSI mask (bsc#1012628). - PCI/MSI: Correct misleading comments (bsc#1012628). - PCI/MSI: Use msi_mask_irq() in pci_msi_shutdown() (bsc#1012628). - PCI/MSI: Protect msi_desc::masked for multi-MSI (bsc#1012628). - powerpc/interrupt: Do not call single_step_exception() from other exceptions (bsc#1012628). - powerpc/pseries: Fix update of LPAR security flavor after LPM (bsc#1012628). - powerpc/32s: Fix napping restore in data storage interrupt (DSI) (bsc#1012628). - powerpc/smp: Fix OOPS in topology_init() (bsc#1012628). - powerpc/xive: Do not skip CPU-less nodes when creating the IPIs (bsc#1012628). - powerpc/32: Fix critical and debug interrupts on BOOKE (bsc#1012628). - efi/libstub: arm64: Double check image alignment at entry (bsc#1012628). - locking/rtmutex: Use the correct rtmutex debugging config option (bsc#1012628). - KVM: VMX: Use current VMCS to query WAITPKG support for MSR emulation (bsc#1012628). - KVM: nVMX: Use vmx_need_pf_intercept() when deciding if L0 wants a #PF (bsc#1012628). - KVM: x86/mmu: Don't leak non-leaf SPTEs when zapping all SPTEs (bsc#1012628). - KVM: x86/mmu: Protect marking SPs unsync when using TDP MMU with spinlock (bsc#1012628). - ceph: add some lockdep assertions around snaprealm handling (bsc#1012628). - ceph: clean up locking annotation for ceph_get_snap_realm and __lookup_snap_realm (bsc#1012628). - ceph: take snap_empty_lock atomically with snaprealm refcount change (bsc#1012628). - kasan, slub: reset tag when printing address (bsc#1012628). - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (bsc#1012628). - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (CVE-2021-3656) (bsc#1012628). - commit e7679db - Bluetooth: btusb: Add support for Foxconn Mediatek Chip (bsc#1188064). - Bluetooth: btusb: Add support for IMC Networks Mediatek Chip (bsc#1188064). - Bluetooth: btusb: Add support for Lite-On Mediatek Chip (bsc#1188064). - commit 18891ce - kernel-binary.spec: Require dwarves for kernel-binary-devel when BTF is enabled (jsc#SLE-17288). About the pahole version: v1.18 should be bare mnimum, v1.22 should be fully functional, for now we ship git snapshot with fixes on top of v1.21. - commit 8ba3382 - Linux 5.13.11 (bsc#1012628). - ovl: prevent private clone if bind mount is not allowed (bsc#1012628). - ppp: Fix generating ppp unit id when ifname is not specified (bsc#1012628). - ALSA: hda: Add quirk for ASUS Flow x13 (bsc#1012628). - ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 650 G8 Notebook PC (bsc#1012628). - ALSA: pcm: Fix mmap breakage without explicit buffer setup (bsc#1012628). - bpf: Add lockdown check for probe_write_user helper (bsc#1012628). - firmware: tee_bnxt: Release TEE shm, session, and context during kexec (bsc#1012628). - commit 97e7098 - bpf: Fix integer overflow involving bucket_size (bsc#1189233, CVE#CVE-2021-38166). - commit fcfea2b - Linux 5.13.10 (bsc#1012628). - Revert "ACPICA: Fix memory leak caused by _CID repair function" (bsc#1012628). - ALSA: seq: Fix racy deletion of subscriber (bsc#1012628). - bus: ti-sysc: Fix gpt12 system timer issue with reserved status (bsc#1012628). - net: xfrm: fix memory leak in xfrm_user_rcv_msg (bsc#1012628). - arm64: dts: ls1028a: fix node name for the sysclk (bsc#1012628). - dmaengine: idxd: fix array index when int_handles are being used (bsc#1012628). - dmaengine: idxd: fix setup sequence for MSIXPERM table (bsc#1012628). - ARM: imx: add missing iounmap() (bsc#1012628). - ARM: imx: add missing clk_disable_unprepare() (bsc#1012628). - ARM: dts: imx6qdl-sr-som: Increase the PHY reset duration to 10ms (bsc#1012628). - Revert "soc: imx8m: change to use platform driver" (bsc#1012628). - dmaengine: idxd: fix desc->vector that isn't being updated (bsc#1012628). - dmaengine: idxd: fix sequence for pci driver remove() and shutdown() (bsc#1012628). - dmaengine: idxd: fix submission race window (bsc#1012628). - arm64: dts: ls1028: sl28: fix networking for variant 2 (bsc#1012628). - ARM: dts: colibri-imx6ull: limit SDIO clock to 25MHz (bsc#1012628). - ARM: imx: fix missing 3rd argument in macro imx_mmdc_perf_init (bsc#1012628). - ARM: dts: imx: Swap M53Menlo pinctrl_power_button/pinctrl_power_out pins (bsc#1012628). - arm64: dts: armada-3720-turris-mox: fixed indices for the SDHC controllers (bsc#1012628). - ext4: fix potential uninitialized access to retval in kmmpd (bsc#1012628). - arm64: dts: armada-3720-turris-mox: remove mrvl,i2c-fast-mode (bsc#1012628). - ALSA: usb-audio: fix incorrect clock source setting (bsc#1012628). - riscv: stacktrace: Fix NULL pointer dereference (bsc#1012628). - clk: stm32f4: fix post divisor setup for I2S/SAI PLLs (bsc#1012628). - ARM: dts: am437x-l4: fix typo in can@0 node (bsc#1012628). - omap5-board-common: remove not physically existing vdds_1v8_main fixed-regulator (bsc#1012628). - dmaengine: uniphier-xdmac: Use readl_poll_timeout_atomic() in atomic state (bsc#1012628). - clk: tegra: Implement disable_unused() of tegra_clk_sdmmc_mux_ops (bsc#1012628). - dmaengine: stm32-dma: Fix PM usage counter imbalance in stm32 dma ops (bsc#1012628). - dmaengine: stm32-dmamux: Fix PM usage counter unbalance in stm32 dmamux ops (bsc#1012628). - spi: imx: mx51-ecspi: Reinstate low-speed CONFIGREG delay (bsc#1012628). - spi: imx: mx51-ecspi: Fix low-speed CONFIGREG delay calculation (bsc#1012628). - drm/kmb: Enable LCD DMA for low TVDDCV (bsc#1012628). - media: videobuf2-core: dequeue if start_streaming fails (bsc#1012628). - ARM: dts: stm32: Prefer HW RTC on DHCOM SoM (bsc#1012628). - ARM: dts: stm32: Disable LAN8710 EDPD on DHCOM (bsc#1012628). - ARM: dts: stm32: Fix touchscreen IRQ line assignment on DHCOM (bsc#1012628). - dmaengine: imx-dma: configure the generic DMA type to make it work (bsc#1012628). - net, gro: Set inner transport header offset in tcp/udp GRO hook (bsc#1012628). - net: dsa: sja1105: overwrite dynamic FDB entries with static ones in .port_fdb_add (bsc#1012628). - net: dsa: sja1105: invalidate dynamic FDB entries learned concurrently with statically added ones (bsc#1012628). - net: dsa: sja1105: ignore the FDB entry for unknown multicast when adding a new address (bsc#1012628). - net: dsa: sja1105: be stateless with FDB entries on SJA1105P/Q/R/S/SJA1110 too (bsc#1012628). - net: dsa: sja1105: match FDB entries regardless of inner/outer VLAN tag (bsc#1012628). - net: phy: micrel: Fix detection of ksz87xx switch (bsc#1012628). - net: natsemi: Fix missing pci_disable_device() in probe and remove (bsc#1012628). - gpio: tqmx86: really make IRQ optional (bsc#1012628). - RDMA/mlx5: Delay emptying a cache entry when a new MR is added to it recently (bsc#1012628). - net: bridge: validate the NUD_PERMANENT bit when adding an extern_learn FDB entry (bsc#1012628). - sctp: move the active_key update after sh_keys is added (bsc#1012628). - drm/i915: Call i915_globals_exit() if pci_register_device() fails (bsc#1012628). - nfp: update ethtool reporting of pauseframe control (bsc#1012628). - net: ipv6: fix returned variable type in ip6_skb_dst_mtu (bsc#1012628). - RDMA/hns: Fix the double unlock problem of poll_sem (bsc#1012628). - net: dsa: qca: ar9331: reorder MDIO write sequence (bsc#1012628). - riscv: Disable STACKPROTECTOR_PER_TASK if GCC_PLUGIN_RANDSTRUCT is enabled (bsc#1012628). - net: sched: fix lockdep_set_class() typo error for sch->seqlock (bsc#1012628). - drm/i915: fix i915_globals_exit() section mismatch error (bsc#1012628). - MIPS: check return value of pgtable_pmd_page_ctor (bsc#1012628). - x86/tools/relocs: Fix non-POSIX regexp (bsc#1012628). - mips: Fix non-POSIX regexp (bsc#1012628). - kbuild: cancel sub_make_done for the install target to fix DKMS (bsc#1012628). - bnx2x: fix an error code in bnx2x_nic_load() (bsc#1012628). - net: ethernet: ti: am65-cpsw: fix crash in am65_cpsw_port_offload_fwd_mark_update() (bsc#1012628). - net: pegasus: fix uninit-value in get_interrupt_interval (bsc#1012628). - net: fec: fix use-after-free in fec_drv_remove (bsc#1012628). - net: vxge: fix use-after-free in vxge_device_unregister (bsc#1012628). - blk-iolatency: error out if blk_get_queue() failed in iolatency_set_limit() (bsc#1012628). - Bluetooth: defer cleanup of resources in hci_unregister_dev() (bsc#1012628). - io-wq: fix no lock protection of acct->nr_worker (bsc#1012628). - io-wq: fix lack of acct->nr_workers < acct->max_workers judgement (bsc#1012628). - USB: usbtmc: Fix RCU stall warning (bsc#1012628). - USB: serial: option: add Telit FD980 composition 0x1056 (bsc#1012628). - USB: serial: ch341: fix character loss at high transfer rates (bsc#1012628). - USB: serial: ftdi_sio: add device ID for Auto-M3 OP-COM v2 (bsc#1012628). - USB: serial: pl2303: fix HX type detection (bsc#1012628). - USB: serial: pl2303: fix GT type detection (bsc#1012628). - firmware_loader: use -ETIMEDOUT instead of -EAGAIN in fw_load_sysfs_fallback (bsc#1012628). - firmware_loader: fix use-after-free in firmware_fallback_sysfs (bsc#1012628). - drm/amdgpu: fix checking pmops when PM_SLEEP is not enabled (bsc#1012628). - drm/amdgpu/display: fix DMUB firmware version info (bsc#1012628). - ALSA: pcm - fix mmap capability check for the snd-dummy driver (bsc#1012628). - ALSA: hda/realtek: add mic quirk for Acer SF314-42 (bsc#1012628). - ALSA: hda/realtek: Fix headset mic for Acer SWIFT SF314-56 (ALC256) (bsc#1012628). - ALSA: usb-audio: Fix superfluous autosuspend recovery (bsc#1012628). - ALSA: usb-audio: Add registration quirk for JBL Quantum 600 (bsc#1012628). - ALSA: usb-audio: Avoid unnecessary or invalid connector selection at resume (bsc#1012628). - usb: dwc3: gadget: Use list_replace_init() before traversing lists (bsc#1012628). - usb: dwc3: gadget: Avoid runtime resume if disabling pullup (bsc#1012628). - usb: gadget: remove leaked entry from udc driver list (bsc#1012628). - usb: cdns3: Fixed incorrect gadget state (bsc#1012628). - usb: cdnsp: Fixed issue with ZLP (bsc#1012628). - usb: gadget: f_hid: added GET_IDLE and SET_IDLE handlers (bsc#1012628). - usb: gadget: f_hid: fixed NULL pointer dereference (bsc#1012628). - usb: gadget: f_hid: idle uses the highest byte for duration (bsc#1012628). - usb: host: ohci-at91: suspend/resume ports after/before OHCI accesses (bsc#1012628). - usb: typec: tcpm: Keep other events when receiving FRS and Sourcing_vbus events (bsc#1012628). - usb: otg-fsm: Fix hrtimer list corruption (bsc#1012628). - clk: fix leak on devm_clk_bulk_get_all() unwind (bsc#1012628). - scripts/tracing: fix the bug that can't parse raw_trace_func (bsc#1012628). - tracing / histogram: Give calculation hist_fields a size (bsc#1012628). - tracing: Reject string operand in the histogram expression (bsc#1012628). - tracing: Fix NULL pointer dereference in start_creating (bsc#1012628). - tracepoint: static call: Compare data on transition from 2->1 callees (bsc#1012628). - tracepoint: Fix static call function vs data state mismatch (bsc#1012628). - tracepoint: Use rcu get state and cond sync for static call updates (bsc#1012628). - arm64: stacktrace: avoid tracing arch_stack_walk() (bsc#1012628). - optee: Clear stale cache entries during initialization (bsc#1012628). - tee: add tee_shm_alloc_kernel_buf() (bsc#1012628). - tee: Correct inappropriate usage of TEE_SHM_DMA_BUF flag (bsc#1012628). - optee: Fix memory leak when failing to register shm pages (bsc#1012628). - optee: Refuse to load the driver under the kdump kernel (bsc#1012628). - optee: fix tee out of memory failure seen during kexec reboot (bsc#1012628). - tpm_ftpm_tee: Free and unregister TEE shared memory during kexec (bsc#1012628). - staging: rtl8723bs: Fix a resource leak in sd_int_dpc (bsc#1012628). - staging: rtl8712: get rid of flush_scheduled_work (bsc#1012628). - staging: rtl8712: error handling refactoring (bsc#1012628). - drivers core: Fix oops when driver probe fails (bsc#1012628). - media: rtl28xxu: fix zero-length control request (bsc#1012628). - pipe: increase minimum default pipe size to 2 pages (bsc#1012628). - ext4: fix potential htree corruption when growing large_dir directories (bsc#1012628). - Revert "thunderbolt: Hide authorized attribute if router does not support PCIe tunnels" (bsc#1012628). - serial: tegra: Only print FIFO error message when an error occurs (bsc#1012628). - serial: 8250_mtk: fix uart corruption issue when rx power off (bsc#1012628). - serial: 8250: Mask out floating 16/32-bit bus bits (bsc#1012628). - serial: 8250: fix handle_irq locking (bsc#1012628). - MIPS: Malta: Do not byte-swap accesses to the CBUS UART (bsc#1012628). - serial: 8250_pci: Enumerate Elkhart Lake UARTs via dedicated driver (bsc#1012628). - serial: 8250_pci: Avoid irq sharing for MSI(-X) interrupts (bsc#1012628). - fpga: dfl: fme: Fix cpu hotplug issue in performance reporting (bsc#1012628). - timers: Move clearing of base::timer_running under base:: Lock (bsc#1012628). - virt: acrn: Do hcall_destroy_vm() before resource release (bsc#1012628). - perf: Fix required permissions if sigtrap is requested (bsc#1012628). - xfrm: Fix RCU vs hash_resize_mutex lock inversion (bsc#1012628). - net/xfrm/compat: Copy xfrm_spdattr_type_t atributes (bsc#1012628). - pcmcia: i82092: fix a null pointer dereference bug (bsc#1012628). - scsi: ibmvfc: Fix command state accounting and stale response detection (bsc#1012628). - selinux: correct the return value when loads initial sids (bsc#1012628). - bus: ti-sysc: AM3: RNG is GP only (bsc#1012628). - Revert "gpio: mpc8xxx: change the gpio interrupt flags." (bsc#1012628). - arm64: fix compat syscall return truncation (bsc#1012628). - ARM: omap2+: hwmod: fix potential NULL pointer access (bsc#1012628). - md/raid10: properly indicate failure when ending a failed write request (bsc#1012628). - io-wq: fix race between worker exiting and activating free worker (bsc#1012628). - s390/dasd: fix use after free in dasd path handling (bsc#1012628). - KVM: x86: accept userspace interrupt only if no event is injected (bsc#1012628). - KVM: SVM: Fix off-by-one indexing when nullifying last used SEV VMCB (bsc#1012628). - KVM: Do not leak memory for duplicate debugfs directories (bsc#1012628). - KVM: x86/mmu: Fix per-cpu counter corruption on 32-bit builds (bsc#1012628). - soc: ixp4xx: fix printing resources (bsc#1012628). - interconnect: Fix undersized devress_alloc allocation (bsc#1012628). - usb: cdnsp: Fix the IMAN_IE_SET and IMAN_IE_CLEAR macro (bsc#1012628). - usb: cdnsp: Fix incorrect supported maximum speed (bsc#1012628). - spi: meson-spicc: fix memory leak in meson_spicc_remove (bsc#1012628). - interconnect: Zero initial BW after sync-state (bsc#1012628). - interconnect: Always call pre_aggregate before aggregate (bsc#1012628). - interconnect: qcom: icc-rpmh: Ensure floor BW is enforced for all nodes (bsc#1012628). - drm/i915: Correct SFC_DONE register offset (bsc#1012628). - soc: ixp4xx/qmgr: fix invalid __iomem access (bsc#1012628). - perf/x86/amd: Don't touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest (bsc#1012628). - sched/rt: Fix double enqueue caused by rt_effective_prio (bsc#1012628). - riscv: dts: fix memory size for the SiFive HiFive Unmatched (bsc#1012628). - libata: fix ata_pio_sector for CONFIG_HIGHMEM (bsc#1012628). - reiserfs: add check for root_inode in reiserfs_fill_super (bsc#1012628). - reiserfs: check directory items on read from disk (bsc#1012628). - virt_wifi: fix error on connect (bsc#1012628). - net: qede: Fix end of loop tests for list_for_each_entry (bsc#1012628). - alpha: Send stop IPI to send to online CPUs (bsc#1012628). - net/qla3xxx: fix schedule while atomic in ql_wait_for_drvr_lock and ql_adapter_reset (bsc#1012628). - smb3: rc uninitialized in one fallocate path (bsc#1012628). - drm/amdgpu/display: only enable aux backlight control for OLED panels (bsc#1012628). - platform/x86: gigabyte-wmi: add support for B550 Aorus Elite V2 (bsc#1012628). - HID: ft260: fix device removal due to USB disconnect (bsc#1012628). - commit 37b568f - README: Modernize build instructions. - commit 8cc5c28 - rpm/kernel-obs-build.spec.in: make builds reproducible (bsc#1189305) - commit 7f9ade7 - Revert "Revert "UsrMerge the kernel (boo#1184804)"" This reverts commit b6ab3ded319fca797d007c541a190a308f940cf7. By that, we reverted the original commit 6f5ed044f52a. But the two problems were adressed in the meantime, so it's time to try UsrMerge for kernel again. - commit 2e9639b - Fix filesystem requirement and suse-release requires Reduce filesystem conflict to anything less than 16 to allow pulling the change into the next major stable version. Don't require suse-release as that's not technically required. Conflict with a too old one instead. - commit 913f755 - blacklist.conf: add one docs fix - commit 19b1d90 - Revert "qed: fix possible unpaired spin_{un}lock_bh in _qed_mcp_cmd_and_union()" (git-fixes). - commit 27fe085 - Linux 5.13.9 (bsc#1012628). - drm/i915: Revert "drm/i915/gem: Asynchronous cmdparser" (bsc#1012628). - Revert "drm/i915: Propagate errors on awaiting already signaled fences" (bsc#1012628). - power: supply: ab8500: Call battery population once (bsc#1012628). - skmsg: Increase sk->sk_drops when dropping packets (bsc#1012628). - skmsg: Pass source psock to sk_psock_skb_redirect() (bsc#1012628). - bpf, sockmap: On cleanup we additionally need to remove cached skb (bsc#1012628). - cifs: use helpers when parsing uid/gid mount options and validate them (bsc#1012628). - cifs: add missing parsing of backupuid (bsc#1012628). - net: dsa: sja1105: parameterize the number of ports (bsc#1012628). - net: dsa: sja1105: fix address learning getting disabled on the CPU port (bsc#1012628). - ASoC: Intel: boards: handle hda-dsp-common as a module (bsc#1012628). - ASoC: Intel: boards: create sof-maxim-common module (bsc#1012628). - ASoC: Intel: boards: fix xrun issue on platform with max98373 (bsc#1012628). - regulator: rtmv20: Fix wrong mask for strobe-polarity-high (bsc#1012628). - regulator: rt5033: Fix n_voltages settings for BUCK and LDO (bsc#1012628). - spi: stm32h7: fix full duplex irq handler handling (bsc#1012628). - ASoC: tlv320aic31xx: fix reversed bclk/wclk master bits (bsc#1012628). - regulator: mtk-dvfsrc: Fix wrong dev pointer for devm_regulator_register (bsc#1012628). - qed: fix possible unpaired spin_{un}lock_bh in _qed_mcp_cmd_and_union() (bsc#1012628). - ASoC: rt5682: Fix the issue of garbled recording after powerd_dbus_suspend (bsc#1012628). - net: Fix zero-copy head len calculation (bsc#1012628). - ASoC: ti: j721e-evm: Fix unbalanced domain activity tracking during startup (bsc#1012628). - ASoC: ti: j721e-evm: Check for not initialized parent_clk_id (bsc#1012628). - efi/mokvar: Reserve the table only if it is in boot services data (bsc#1012628). - nvme: fix nvme_setup_command metadata trace event (bsc#1012628). - drm/amd/display: Fix comparison error in dcn21 DML (bsc#1012628). - drm/amd/display: Fix max vstartup calculation for modes with borders (bsc#1012628). - io_uring: never attempt iopoll reissue from release path (bsc#1012628). - io_uring: explicitly catch any illegal async queue attempt (bsc#1012628). - Revert "Bluetooth: Shutdown controller after workqueues are flushed or cancelled" (bsc#1012628). - Revert "watchdog: iTCO_wdt: Account for rebooting on second timeout" (bsc#1012628). - drm/amd/display: Fix ASSR regression on embedded panels (bsc#1012628). - spi: mediatek: Fix fifo transfer (bsc#1012628). - Update config files. - commit ed76d57 ==== krb5 ==== Version update (1.19.1 -> 1.19.2) - Update to 1.19.2 * Fix a denial of service attack against the KDC encrypted challenge code; (CVE-2021-36222); * Fix a memory leak when gss_inquire_cred() is called without a credential handle. ==== pam ==== Subpackages: pam_unix - pam_umask-usergroups-login_defs.patch: Deprecate pam_umask explicit "usergroups" option and instead read it from login.def's "USERGROUP_ENAB" option if umask is only defined there. [bsc#1189139] - package man5/motd.5 as a man-pages link to man8/pam_motd.8 [bsc#1188724] ==== python38 ==== Version update (3.8.10 -> 3.8.11) - Update to 3.8.11 * Security - bpo-44022 (boo#1189241): mod:http.client now avoids infinitely reading potential HTTP headers after a 100 Continue status response from the server. - bpo-43882: The presence of newline or tab characters in parts of a URL could allow some forms of attacks. Following the controlling specification for URLs defined by WHATWG urllib.parse() now removes ASCII newlines and tabs from URLs, preventing such attacks. - bpo-42800: Audit hooks are now fired for frame.f_code, traceback.tb_frame, and generator code/frame attribute access. * Core and Builtins - bpo-44070: No longer eagerly makes import filenames absolute, except for extension modules, which was introduced in 3.8.10. * Library - bpo-44061: Fix regression in previous release when calling pkgutil.iter_modules() with a list of pathlib.Path objects ==== python38-core ==== Version update (3.8.10 -> 3.8.11) Subpackages: libpython3_8-1_0 python38-base - Update to 3.8.11 * Security - bpo-44022 (boo#1189241): mod:http.client now avoids infinitely reading potential HTTP headers after a 100 Continue status response from the server. - bpo-43882: The presence of newline or tab characters in parts of a URL could allow some forms of attacks. Following the controlling specification for URLs defined by WHATWG urllib.parse() now removes ASCII newlines and tabs from URLs, preventing such attacks. - bpo-42800: Audit hooks are now fired for frame.f_code, traceback.tb_frame, and generator code/frame attribute access. * Core and Builtins - bpo-44070: No longer eagerly makes import filenames absolute, except for extension modules, which was introduced in 3.8.10. * Library - bpo-44061: Fix regression in previous release when calling pkgutil.iter_modules() with a list of pathlib.Path objects ==== selinux-policy ==== Subpackages: selinux-policy-targeted - Allow systemd-sysctl to read kernel specific sysctl.conf (fix_kernel_sysctl.patch, boo#1184804) - Fix quoting in postInstall macro ==== yomi-formula ==== Version update (0.0.1+git.1619170188.fa52819 -> 0.0.1+git.1629280900.fdbe9f0) - Update to version 0.0.1+git.1629280900.fdbe9f0: * monitor: rename it to yomi-monitor * suseconnect: make regcode parameter optional