Packages changed: dmidecode findutils (4.7.0 -> 4.8.0) gettext-runtime kernel-source (5.10.7 -> 5.10.9) kubernetes (1.20.1 -> 1.20.2) kubernetes1.19 (1.19.6 -> 1.19.7) kubernetes1.20 (1.20.1 -> 1.20.2) libcap (2.44 -> 2.46) libfido2 (1.5.0 -> 1.6.0) ncurses (6.2.20210109 -> 6.2.20210116) oath-toolkit (2.6.5 -> 2.6.6) open-vm-tools (11.2.0 -> 11.2.5) openssh python-M2Crypto python-pyserial (3.4 -> 3.5) python-setuptools shared-mime-info (2.0 -> 2.1) tar (1.32 -> 1.33) toolbox (1.0+git20201126.3d26283 -> 1.0+git20210119.b5acdcf) xen (4.14.1_05 -> 4.14.1_08) xfsprogs (5.9.0 -> 5.10.0) === Details === ==== dmidecode ==== 2 recommended fixes from upstream: - dmidecode-fix-the-condition-error-in-ascii_filter.patch: dmidecode: Fix the condition error in ascii_filter. - dmidecode-fix-crash-with-u-option.patch: dmidecode: Fix crash with -u option. ==== findutils ==== Version update (4.7.0 -> 4.8.0) - update upstream signing key - remove deprecated texinfo packaging macros - run spec-cleaner - Update to 4.8.0. Announcement: https://savannah.gnu.org/forum/forum.php?forum_id=9914 - findutils.spec: - Source0: Fix download URL: remove "pub/". - %check: Output the content of all test-suite files in case of errors. - Remove now-upstream patches: - disable-null-ptr-test.patch - findutils-gnulib-disable-test-float.patch - findutils-gnulib-test-avoid-FP-perror-strerror.patch ==== gettext-runtime ==== Subpackages: libtextstyle0 - fixup libtextstyle autofoo with adding use-acinit-for-libtextstyle.patch ==== kernel-source ==== Version update (5.10.7 -> 5.10.9) - Linux 5.10.9 (bsc#1012628). - btrfs: reloc: fix wrong file extent type check to avoid false ENOENT (bsc#1012628). - btrfs: prevent NULL pointer dereference in extent_io_tree_panic (bsc#1012628). - ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machines (bsc#1012628). - ALSA: doc: Fix reference to mixart.rst (bsc#1012628). - ASoC: AMD Renoir - add DMI entry for Lenovo ThinkPad X395 (bsc#1012628). - ASoC: dapm: remove widget from dirty list on free (bsc#1012628). - x86/hyperv: check cpu mask after interrupt has been disabled (bsc#1012628). - drm/amdgpu: add green_sardine device id (v2) (bsc#1012628). - drm/amdgpu: fix DRM_INFO flood if display core is not supported (bug 210921) (bsc#1012628). - drm/amdgpu: add new device id for Renior (bsc#1012628). - drm/i915: Allow the sysadmin to override security mitigations (bsc#1012628). - drm/i915/gt: Limit VFE threads based on GT (bsc#1012628). - drm/i915/backlight: fix CPU mode backlight takeover on LPT (bsc#1012628). - drm/bridge: sii902x: Refactor init code into separate function (bsc#1012628). - dt-bindings: display: sii902x: Add supply bindings (bsc#1012628). - drm/bridge: sii902x: Enable I/O and core VCC supplies if present (bsc#1012628). - tracing/kprobes: Do the notrace functions check without kprobes on ftrace (bsc#1012628). - tools/bootconfig: Add tracing_on support to helper scripts (bsc#1012628). - ext4: use IS_ERR instead of IS_ERR_OR_NULL and set inode null when IS_ERR (bsc#1012628). - ext4: fix wrong list_splice in ext4_fc_cleanup (bsc#1012628). - ext4: fix bug for rename with RENAME_WHITEOUT (bsc#1012628). - cifs: check pointer before freeing (bsc#1012628). - cifs: fix interrupted close commands (bsc#1012628). - riscv: Drop a duplicated PAGE_KERNEL_EXEC (bsc#1012628). - riscv: return -ENOSYS for syscall -1 (bsc#1012628). - riscv: Fixup CONFIG_GENERIC_TIME_VSYSCALL (bsc#1012628). - riscv: Fix KASAN memory mapping (bsc#1012628). - mips: fix Section mismatch in reference (bsc#1012628). - mips: lib: uncached: fix non-standard usage of variable 'sp' (bsc#1012628). - MIPS: boot: Fix unaligned access with CONFIG_MIPS_RAW_APPENDED_DTB (bsc#1012628). - MIPS: Fix malformed NT_FILE and NT_SIGINFO in 32bit coredumps (bsc#1012628). - MIPS: relocatable: fix possible boot hangup with KASLR enabled (bsc#1012628). - RDMA/ocrdma: Fix use after free in ocrdma_dealloc_ucontext_pd() (bsc#1012628). - ACPI: scan: Harden acpi_device_add() against device ID overflows (bsc#1012628). - xen/privcmd: allow fetching resource sizes (bsc#1012628). - compiler.h: Raise minimum version of GCC to 5.1 for arm64 (bsc#1012628). - mm/vmalloc.c: fix potential memory leak (bsc#1012628). - mm/hugetlb: fix potential missing huge page size info (bsc#1012628). - mm/process_vm_access.c: include compat.h (bsc#1012628). - dm raid: fix discard limits for raid1 (bsc#1012628). - dm snapshot: flush merged data before committing metadata (bsc#1012628). - dm integrity: fix flush with external metadata device (bsc#1012628). - dm integrity: fix the maximum number of arguments (bsc#1012628). - dm crypt: use GFP_ATOMIC when allocating crypto requests from softirq (bsc#1012628). - dm crypt: do not wait for backlogged crypto request completion in softirq (bsc#1012628). - dm crypt: do not call bio_endio() from the dm-crypt tasklet (bsc#1012628). - dm crypt: defer decryption to a tasklet if interrupts disabled (bsc#1012628). - stmmac: intel: change all EHL/TGL to auto detect phy addr (bsc#1012628). - r8152: Add Lenovo Powered USB-C Travel Hub (bsc#1012628). - btrfs: tree-checker: check if chunk item end overflows (bsc#1012628). - ext4: don't leak old mountpoint samples (bsc#1012628). - io_uring: don't take files/mm for a dead task (bsc#1012628). - io_uring: drop mm and files after task_work_run (bsc#1012628). - ARC: build: remove non-existing bootpImage from KBUILD_IMAGE (bsc#1012628). - ARC: build: add uImage.lzma to the top-level target (bsc#1012628). - ARC: build: add boot_targets to PHONY (bsc#1012628). - ARC: build: move symlink creation to arch/arc/Makefile to avoid race (bsc#1012628). - ARM: omap2: pmic-cpcap: fix maximum voltage to be consistent with defaults on xt875 (bsc#1012628). - ath11k: fix crash caused by NULL rx_channel (bsc#1012628). - netfilter: ipset: fixes possible oops in mtype_resize (bsc#1012628). - ath11k: qmi: try to allocate a big block of DMA memory first (bsc#1012628). - btrfs: fix async discard stall (bsc#1012628). - btrfs: merge critical sections of discard lock in workfn (bsc#1012628). - btrfs: fix transaction leak and crash after RO remount caused by qgroup rescan (bsc#1012628). - regulator: bd718x7: Add enable times (bsc#1012628). - ethernet: ucc_geth: fix definition and size of ucc_geth_tx_global_pram (bsc#1012628). - ARM: dts: ux500/golden: Set display max brightness (bsc#1012628). - habanalabs: adjust pci controller init to new firmware (bsc#1012628). - habanalabs/gaudi: retry loading TPC f/w on -EINTR (bsc#1012628). - habanalabs: register to pci shutdown callback (bsc#1012628). - staging: spmi: hisi-spmi-controller: Fix some error handling paths (bsc#1012628). - spi: altera: fix return value for altera_spi_txrx() (bsc#1012628). - habanalabs: Fix memleak in hl_device_reset (bsc#1012628). - hwmon: (pwm-fan) Ensure that calculation doesn't discard big period values (bsc#1012628). - lib/raid6: Let $(UNROLL) rules work with macOS userland (bsc#1012628). - kconfig: remove 'kvmconfig' and 'xenconfig' shorthands (bsc#1012628). - spi: fix the divide by 0 error when calculating xfer waiting time (bsc#1012628). - io_uring: drop file refs after task cancel (bsc#1012628). - bfq: Fix computation of shallow depth (bsc#1012628). - arch/arc: add copy_user_page() to to fix build error on ARC (bsc#1012628). - misdn: dsp: select CONFIG_BITREVERSE (bsc#1012628). - net: ethernet: fs_enet: Add missing MODULE_LICENSE (bsc#1012628). - selftests: fix the return value for UDP GRO test (bsc#1012628). - nvme-pci: mark Samsung PM1725a as IGNORE_DEV_SUBNQN (bsc#1012628). - nvme: avoid possible double fetch in handling CQE (bsc#1012628). - nvmet-rdma: Fix list_del corruption on queue establishment failure (bsc#1012628). - drm/amd/display: fix sysfs amdgpu_current_backlight_pwm NULL pointer issue (bsc#1012628). - drm/amdgpu: fix a GPU hang issue when remove device (bsc#1012628). - drm/amd/pm: fix the failure when change power profile for renoir (bsc#1012628). - drm/amdgpu: fix potential memory leak during navi12 deinitialization (bsc#1012628). - usb: typec: Fix copy paste error for NVIDIA alt-mode description (bsc#1012628). - iommu/vt-d: Fix lockdep splat in sva bind()/unbind() (bsc#1012628). - ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (bsc#1012628). - drm/msm: Call msm_init_vram before binding the gpu (bsc#1012628). - ARM: picoxcell: fix missing interrupt-parent properties (bsc#1012628). - poll: fix performance regression due to out-of-line __put_user() (bsc#1012628). - rcu-tasks: Move RCU-tasks initialization to before early_initcall() (bsc#1012628). - bpf: Simplify task_file_seq_get_next() (bsc#1012628). - bpf: Save correct stopping point in file seq iteration (bsc#1012628). - x86/sev-es: Fix SEV-ES OUT/IN immediate opcode vc handling (bsc#1012628). - cfg80211: select CONFIG_CRC32 (bsc#1012628). - nvme-fc: avoid calling _nvme_fc_abort_outstanding_ios from interrupt context (bsc#1012628). - iommu/vt-d: Update domain geometry in iommu_ops.at(de)tach_dev (bsc#1012628). - net/mlx5e: CT: Use per flow counter when CT flow accounting is enabled (bsc#1012628). - net/mlx5: Fix passing zero to 'PTR_ERR' (bsc#1012628). - net/mlx5: E-Switch, fix changing vf VLANID (bsc#1012628). - blk-mq-debugfs: Add decode for BLK_MQ_F_TAG_HCTX_SHARED (bsc#1012628). - mm: fix clear_refs_write locking (bsc#1012628). - mm: don't play games with pinned pages in clear_page_refs (bsc#1012628). - mm: don't put pinned pages into the swap cache (bsc#1012628). - perf intel-pt: Fix 'CPU too large' error (bsc#1012628). - dump_common_audit_data(): fix racy accesses to ->d_name (bsc#1012628). - ASoC: meson: axg-tdm-interface: fix loopback (bsc#1012628). - ASoC: meson: axg-tdmin: fix axg skew offset (bsc#1012628). - ASoC: Intel: fix error code cnl_set_dsp_D0() (bsc#1012628). - nvmet-rdma: Fix NULL deref when setting pi_enable and traddr INADDR_ANY (bsc#1012628). - nvme: don't intialize hwmon for discovery controllers (bsc#1012628). - nvme-tcp: fix possible data corruption with bio merges (bsc#1012628). - nvme-tcp: Fix warning with CONFIG_DEBUG_PREEMPT (bsc#1012628). - NFS4: Fix use-after-free in trace_event_raw_event_nfs4_set_lock (bsc#1012628). - pNFS: We want return-on-close to complete when evicting the inode (bsc#1012628). - pNFS: Mark layout for return if return-on-close was not sent (bsc#1012628). - pNFS: Stricter ordering of layoutget and layoutreturn (bsc#1012628). - NFS: Adjust fs_context error logging (bsc#1012628). - NFS/pNFS: Don't call pnfs_free_bucket_lseg() before removing the request (bsc#1012628). - NFS/pNFS: Don't leak DS commits in pnfs_generic_retry_commit() (bsc#1012628). - NFS/pNFS: Fix a leak of the layout 'plh_outstanding' counter (bsc#1012628). - NFS: nfs_delegation_find_inode_server must first reference the superblock (bsc#1012628). - NFS: nfs_igrab_and_active must first reference the superblock (bsc#1012628). - scsi: ufs: Fix possible power drain during system suspend (bsc#1012628). - ext4: fix superblock checksum failure when setting password salt (bsc#1012628). - RDMA/restrack: Don't treat as an error allocation ID wrapping (bsc#1012628). - RDMA/usnic: Fix memleak in find_free_vf_and_create_qp_grp (bsc#1012628). - bnxt_en: Improve stats context resource accounting with RDMA driver loaded (bsc#1012628). - RDMA/mlx5: Fix wrong free of blue flame register on error (bsc#1012628). - IB/mlx5: Fix error unwinding when set_has_smi_cap fails (bsc#1012628). - umount(2): move the flag validity checks first (bsc#1012628). - dm zoned: select CONFIG_CRC32 (bsc#1012628). - drm/i915/dsi: Use unconditional msleep for the panel_on_delay when there is no reset-deassert MIPI-sequence (bsc#1012628). - drm/i915/icl: Fix initing the DSI DSC power refcount during HW readout (bsc#1012628). - drm/i915/gt: Restore clear-residual mitigations for Ivybridge, Baytrail (bsc#1012628). - mm, slub: consider rest of partial list if acquire_slab() fails (bsc#1012628). - riscv: Trace irq on only interrupt is enabled (bsc#1012628). - iommu/vt-d: Fix unaligned addresses for intel_flush_svm_range_dev() (bsc#1012628). - net: sunrpc: interpret the return value of kstrtou32 correctly (bsc#1012628). - selftests: netfilter: Pass family parameter "-f" to conntrack tool (bsc#1012628). - dm: eliminate potential source of excessive kernel log noise (bsc#1012628). - ALSA: fireface: Fix integer overflow in transmit_midi_msg() (bsc#1012628). - ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (bsc#1012628). - netfilter: conntrack: fix reading nf_conntrack_buckets (bsc#1012628). - netfilter: nf_nat: Fix memleak in nf_nat_init (bsc#1012628). - Update config files. - commit b7732a5 - Linux 5.10.8 (bsc#1012628). - powerpc/32s: Fix RTAS machine check with VMAP stack (bsc#1012628). - io_uring: synchronise IOPOLL on task_submit fail (bsc#1012628). - io_uring: limit {io|sq}poll submit locking scope (bsc#1012628). - io_uring: patch up IOPOLL overflow_flush sync (bsc#1012628). - iommu/arm-smmu-qcom: Initialize SCTLR of the bypass context (bsc#1012628). - io_uring: Fix return value from alloc_fixed_file_ref_node (bsc#1012628). - btrfs: skip unnecessary searches for xattrs when logging an inode (bsc#1012628). - btrfs: fix deadlock when cloning inline extent and low on free metadata space (bsc#1012628). - btrfs: shrink delalloc pages instead of full inodes (bsc#1012628). - net: cdc_ncm: correct overhead in delayed_ndp_size (bsc#1012628). - net: hns3: fix incorrect handling of sctp6 rss tuple (bsc#1012628). - net: hns3: fix the number of queues actually used by ARQ (bsc#1012628). - net: hns3: fix a phy loopback fail issue (bsc#1012628). - net: stmmac: dwmac-sun8i: Fix probe error handling (bsc#1012628). - net: stmmac: dwmac-sun8i: Balance internal PHY resource references (bsc#1012628). - net: stmmac: dwmac-sun8i: Balance internal PHY power (bsc#1012628). - net: stmmac: dwmac-sun8i: Balance syscon (de)initialization (bsc#1012628). - net: vlan: avoid leaks on register_vlan_dev() failures (bsc#1012628). - net/sonic: Fix some resource leaks in error handling paths (bsc#1012628). - net: bareudp: add missing error handling for bareudp_link_config() (bsc#1012628). - ptp: ptp_ines: prevent build when HAS_IOMEM is not set (bsc#1012628). - net: ipv6: fib: flush exceptions when purging route (bsc#1012628). - tools: selftests: add test for changing routes with PTMU exceptions (bsc#1012628). - net: fix pmtu check in nopmtudisc mode (bsc#1012628). - net: ip: always refragment ip defragmented packets (bsc#1012628). - chtls: Fix hardware tid leak (bsc#1012628). - chtls: Remove invalid set_tcb call (bsc#1012628). - chtls: Fix panic when route to peer not configured (bsc#1012628). - chtls: Avoid unnecessary freeing of oreq pointer (bsc#1012628). - chtls: Replace skb_dequeue with skb_peek (bsc#1012628). - chtls: Added a check to avoid NULL pointer dereference (bsc#1012628). - chtls: Fix chtls resources release sequence (bsc#1012628). - octeontx2-af: fix memory leak of lmac and lmac->name (bsc#1012628). - nexthop: Fix off-by-one error in error path (bsc#1012628). - nexthop: Unlink nexthop group entry in error path (bsc#1012628). - nexthop: Bounce NHA_GATEWAY in FDB nexthop groups (bsc#1012628). - s390/qeth: fix deadlock during recovery (bsc#1012628). - s390/qeth: fix locking for discipline setup / removal (bsc#1012628). - s390/qeth: fix L2 header access in qeth_l3_osa_features_check() (bsc#1012628). - net: dsa: lantiq_gswip: Exclude RMII from modes that report 1 GbE (bsc#1012628). - net/mlx5: Use port_num 1 instead of 0 when delete a RoCE address (bsc#1012628). - net/mlx5e: ethtool, Fix restriction of autoneg with 56G (bsc#1012628). - net/mlx5e: In skb build skip setting mark in switchdev mode (bsc#1012628). - net/mlx5: Check if lag is supported before creating one (bsc#1012628). - ionic: start queues before announcing link up (bsc#1012628). - HID: wacom: Fix memory leakage caused by kfifo_alloc (bsc#1012628). - fanotify: Fix sys_fanotify_mark() on native x86-32 (bsc#1012628). - ARM: OMAP2+: omap_device: fix idling of devices during probe (bsc#1012628). - i2c: sprd: use a specific timeout to avoid system hang up issue (bsc#1012628). - dmaengine: dw-edma: Fix use after free in dw_edma_alloc_chunk() (bsc#1012628). - selftests/bpf: Clarify build error if no vmlinux (bsc#1012628). - can: tcan4x5x: fix bittiming const, use common bittiming from m_can driver (bsc#1012628). - can: m_can: m_can_class_unregister(): remove erroneous m_can_clk_stop() (bsc#1012628). - can: kvaser_pciefd: select CONFIG_CRC32 (bsc#1012628). - spi: spi-geni-qcom: Fail new xfers if xfer/cancel/abort pending (bsc#1012628). - cpufreq: powernow-k8: pass policy rather than use cpufreq_cpu_get() (bsc#1012628). - spi: spi-geni-qcom: Fix geni_spi_isr() NULL dereference in timeout case (bsc#1012628). - spi: stm32: FIFO threshold level - fix align packet size (bsc#1012628). - i2c: i801: Fix the i2c-mux gpiod_lookup_table not being properly terminated (bsc#1012628). - i2c: mediatek: Fix apdma and i2c hand-shake timeout (bsc#1012628). - bcache: set bcache device into read-only mode for BCH_FEATURE_INCOMPAT_OBSO_LARGE_BUCKET (bsc#1012628). - interconnect: imx: Add a missing of_node_put after of_device_is_available (bsc#1012628). - interconnect: qcom: fix rpmh link failures (bsc#1012628). - dmaengine: mediatek: mtk-hsdma: Fix a resource leak in the error handling path of the probe function (bsc#1012628). - dmaengine: milbeaut-xdmac: Fix a resource leak in the error handling path of the probe function (bsc#1012628). - dmaengine: xilinx_dma: check dma_async_device_register return value (bsc#1012628). - dmaengine: xilinx_dma: fix incompatible param warning in _child_probe() (bsc#1012628). - dmaengine: xilinx_dma: fix mixed_enum_type coverity warning (bsc#1012628). - arm64: mm: Fix ARCH_LOW_ADDRESS_LIMIT when !CONFIG_ZONE_DMA (bsc#1012628). - qed: select CONFIG_CRC32 (bsc#1012628). - phy: dp83640: select CONFIG_CRC32 (bsc#1012628). - wil6210: select CONFIG_CRC32 (bsc#1012628). - block: rsxx: select CONFIG_CRC32 (bsc#1012628). - lightnvm: select CONFIG_CRC32 (bsc#1012628). - zonefs: select CONFIG_CRC32 (bsc#1012628). - iommu/vt-d: Fix misuse of ALIGN in qi_flush_piotlb() (bsc#1012628). - iommu/intel: Fix memleak in intel_irq_remapping_alloc (bsc#1012628). - bpftool: Fix compilation failure for net.o with older glibc (bsc#1012628). - nvme-tcp: Fix possible race of io_work and direct send (bsc#1012628). - net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups (bsc#1012628). - net/mlx5e: Fix two double free cases (bsc#1012628). - regmap: debugfs: Fix a memory leak when calling regmap_attach_dev (bsc#1012628). - wan: ds26522: select CONFIG_BITREVERSE (bsc#1012628). - arm64: cpufeature: remove non-exist CONFIG_KVM_ARM_HOST (bsc#1012628). - regulator: qcom-rpmh-regulator: correct hfsmps515 definition (bsc#1012628). - net: mvpp2: disable force link UP during port init procedure (bsc#1012628). - drm/i915/dp: Track pm_qos per connector (bsc#1012628). - net: mvneta: fix error message when MTU too large for XDP (bsc#1012628). - selftests: fib_nexthops: Fix wrong mausezahn invocation (bsc#1012628). - KVM: arm64: Don't access PMCR_EL0 when no PMU is available (bsc#1012628). - xsk: Fix race in SKB mode transmit with shared cq (bsc#1012628). - xsk: Rollback reservation at NETDEV_TX_BUSY (bsc#1012628). - block/rnbd-clt: avoid module unload race with close confirmation (bsc#1012628). - can: isotp: isotp_getname(): fix kernel information leak (bsc#1012628). - block: fix use-after-free in disk_part_iter_next (bsc#1012628). - net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed packet (bsc#1012628). - regmap: debugfs: Fix a reversed if statement in regmap_debugfs_init() (bsc#1012628). - tools headers UAPI: Sync linux/fscrypt.h with the kernel sources (bsc#1012628). - Update config files. - commit 8611168 ==== kubernetes ==== Version update (1.20.1 -> 1.20.2) Subpackages: kubernetes-client kubernetes-kubeadm kubernetes-kubelet - Bump kubernetes to 1.20.2 and 1.19.7 ==== kubernetes1.19 ==== Version update (1.19.6 -> 1.19.7) - Update to version 1.19.7: * use default unkown sock for kubeadm cmd if cri detect is not needed * cherry-pick part of #97451: fix nodeport quota check failure during creating clusterip * Release reserved GCE IP address after ensure completes. * Ensure reproducible builds when build through docker * Fix cadvisor machine metrics * Create OWNERS for most of the API Priority and Fairness impl * Fix bug in CPUManager with race on map acccess * fix azure file secret not found issue * fix: azure file latency issue for metadata-heavy workload * Update CHANGELOG/CHANGELOG-1.19.md for v1.19.6 * Add more logging for Mount error ==== kubernetes1.20 ==== Version update (1.20.1 -> 1.20.2) Subpackages: kubernetes1.20-client kubernetes1.20-client-common kubernetes1.20-kubeadm kubernetes1.20-kubelet kubernetes1.20-kubelet-common - Update to version 1.20.2: * move all variables in sampleAndWaterMarkHistograms::innerSet * use default unkown sock for kubeadm cmd if cri detect is not needed * cherry-pick part of #97451: fix nodeport quota check failure during creating clusterip * Release reserved GCE IP address after ensure completes. * Ensure reproducible builds when build through docker * Fix cadvisor machine metrics * Create OWNERS for most of the API Priority and Fairness impl * fix the deadlock in priority and fairness config controller * Cherry pick 443 and 448 from cloud provider azure * Fix bug in CPUManager with race on map acccess * clean up executing request on panic * fix azure file secret not found issue * fix: azure file latency issue for metadata-heavy workload * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.1 * Add more logging for Mount error ==== libcap ==== Version update (2.44 -> 2.46) - update to 2.46: * The bulk of this release concerns fixes and improvements to libpsx * Fix the capsh == argument handling and add a test case * Added build support for systems that do not support libpthread * Added build support for not building shared libraries ==== libfido2 ==== Version update (1.5.0 -> 1.6.0) Subpackages: libfido2-1 libfido2-udev - Update to version 1.6.0: * Fix OpenSSL 1.0 and Cygwin builds. * hid_linux: fix build on 32-bit systems. * hid_osx: allow reads from spawned threads. * Documentation and reliability fixes. * New API calls: + fido_cred_authdata_raw_len; + fido_cred_authdata_raw_ptr; + fido_cred_sigcount; + fido_dev_get_uv_retry_count; + fido_dev_supports_credman. * Hardened Windows build. * Native FreeBSD and NetBSD support. * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect. - Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch - Do not build examples as their build fails ==== ncurses ==== Version update (6.2.20210109 -> 6.2.20210116) Subpackages: libncurses6 ncurses-utils terminfo-base - Don't skip test for qemu builds - Add ncurses patch 20210116 + add comment for linux2.6 regarding CONFIG_CONSOLE_TRANSLATIONS (report by Patrick McDermott) -TD + make opts extension for getcchar work as documented for ncurses 6.1, adding "-g" flag to test/demo_new_pair to illustrate. ==== oath-toolkit ==== Version update (2.6.5 -> 2.6.6) Subpackages: liboath0 oath-toolkit-xml - Update to version 2.6.6 * oathtool: Support for reading KEY and OTP from standard input or filename. KEY and OTP may now be given as '-' to mean stdin, or @FILE to read from a particular file. This is recommended on multi-user systems, since secrets as command line parameters leak. * pam_oath: Fix unlikely logic fail on out of memory conditions. ==== open-vm-tools ==== Version update (11.2.0 -> 11.2.5) Subpackages: libvmtools0 - Update to 11.2.5 (build 17337674) (boo#1180997) + Resolved issues: - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced pam_securetty.so. - The following issues and pull requests reported on https://github.com/vmware/open-vm-tools have been addressed: https://github.com/vmware/open-vm-tools/issues/467 https://github.com/vmware/open-vm-tools/issues/468 https://github.com/vmware/open-vm-tools/pull/469 - A number of Coverity reported errors and false positives have been addressed. - A complete list of the granular changes that are in the open-vm-tools 11.2.5 release is available at: https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog - Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need the modified Makefile.am portion of the patch which copies the suse file to the /etc/pam.d/vmtoolsd file rather than the default generic file. ==== openssh ==== Subpackages: openssh-clients openssh-common openssh-server - Add openssh-fix-ssh-copy-id.patch, which fixes breakage introduced in 8.4p1 (bsc#1181311). - Improve robustness of sshd init detection when upgrading from a pre-systemd distribution. - Add openssh-reenable-dh-group14-sha1-default.patch, which adds diffie-hellman-group14-sha1 key exchange back to the default list (bsc#1180958). This is needed for backwards compatibility with older platforms. - Make sure sshd is enabled correctly when upgrading from a pre-systemd distribution (bsc#1180083). ==== python-M2Crypto ==== - Dr. Strangelove or: How I Learned to Stop Worrying and Love pytest ==== python-pyserial ==== Version update (3.4 -> 3.5) - update to version 3.5: New Features: [#411] Add a backend for Silicon Labs CP2110/4 HID-to-UART bridge. (depends on hid module) Improvements: [#315] Use absolute import everywhere [#354] Make ListPortInfo hashable [#372] threaded: "write" returns byte count [#400] Add bytesize and stopbits argument parser to tcp_serial_redirect [#408] loop: add out_waiting [#495] list_ports_linux: Correct "interface" property on Linux hosts [#500] Remove Python 3.2 and 3.3 from test [#261, #285, #296, #320, #333, #342, #356, #358, #389, #397, #510] doc updates miniterm: add CTRL+T Q as alternative to exit miniterm: suspend function key changed to CTRL-T Z add command line tool entries pyserial-miniterm (replaces miniterm.py) and pyserial-ports (runs serial.tools.list_ports). python -m serial opens miniterm (use w/o args and it will print port list too) [experimental] Bugfixes: [#371] Don't open port if self.port is not set while entering context manager [#437, #502] refactor: raise new instances for PortNotOpenError and SerialTimeoutException [#261, #263] list_ports: set default name attribute [#286] fix: compare only of the same type in list_ports_common.ListPortInfo rfc2217/close(): fix race-condition [#305] return b'' when connection closes on rfc2217 connection [#386] rfc2217/close(): fix race condition Fixed flush_input_buffer() for situations where the remote end has closed the socket. [#441] reset_input_buffer() can hang on sockets examples: port_publisher python 3 fixes [#324] miniterm: Fix miniterm constructor exit_character and menu_character [#326] miniterm: use exclusive access for native serial ports by default [#497] miniterm: fix double use of CTRL-T + s use z for suspend instead [#443, #444] examples: refactor wx example, use Bind to avoid deprecated warnings, IsChecked, unichr [#265] posix: fix PosixPollSerial with timeout=None and add cancel support [#290] option for low latency mode on linux [#335] Add support to xr-usb-serial ports [#494] posix: Don't catch the SerialException we just raised [#519] posix: Fix custom baud rate to not temporarily set 38400 baud rates on linux [#509 #518] list_ports: use hardcoded path to library on osx [#542] list_ports_osx: kIOMasterPortDefault no longer exported on Big Sur [#545, #545] list_ports_osx: getting USB info on BigSur/AppleSilicon ==== python-setuptools ==== - We cannot remove vendored packages when generating setuptools wheel (bsc#1177127). ==== shared-mime-info ==== Version update (2.0 -> 2.1) - update to 2.1: * New maintainers: David Faure and Ville Skyttä * Adapt to xdgmime behaviour change: in case of multiple glob matches, and the magic match is unrelated to all of them, ignore the magic and pick one of the glob matches. xdgmime was actually deviating from the spec on this. (#138) * Improve text/vnd.trolltech.linguist magic to reduce false positives for MPEG TS files (#10) * audio/mpeg: add layer 2, 2.5, and 1 protected magics (#46) * Add many aliases for image/x-tga * audio/x-mod: improve magic for 669 Composer files (#144) * Add mime-type image/ktx2 (Khronos image texture format version 2) * application/oxps: differentiate from /vnd.ms-xpsdocument * Make image/g3fax the canonical name for image/fax-g3 * Make text/vnd.trolltech.linguist the canonical name for text/vnd.qt.linguist * Make application/vnd.smaf the canonical name for application/x-smaf * Make application/vnd.apple.keynote the canonical name for application/x-iwork-keynote-sffkey * Add mime-type image/astc (Adaptive Scalable Texture Compression files) * Add mime-type for SageMath script files (*.sage) * Add mime-type for Kaitai Struct * Remove application/x-dc-rom * Add mime-type for MAME compressed hard disk image (application/x-mame-chd) * Add mime-types application/nintendo-3ds-executable, application/x-nintendo-3ds-rom * Add mime-types application/x-dreamcast-rom, application/x-gd-rom-cue, application/x-discjuggler-cd-image * Add mime-type application/x-compressed-iso (*.cso) * Remove image/avif-sequence * Fix application/x-sharedlib vs application/x-executable confusion for PIE executables (#11) - drop smi-Fix-pkg-config-installation-path.patch (obsolete) ==== tar ==== Version update (1.32 -> 1.33) - GNU tar 1.33: * POSIX extended format headers do not include PID by default * --delay-directory-restore works for archives with reversed member ordering * Fix extraction of a symbolic link hardlinked to another symbolic link * Wildcards in exclude-vcs-ignore mode don't match slash * Fix the --no-overwrite-dir option * Fix handling of chained renames in incremental backups * Link counting works for file names supplied with -T * Accept only position-sensitive (file-selection) options in file list files - remove deprecated texinfo packaging macros ==== toolbox ==== Version update (1.0+git20201126.3d26283 -> 1.0+git20210119.b5acdcf) - Add a group tag for SLE Micro - Mark toolboxrc as %config and add it is Source - Update to version 1.0+git20210119.b5acdcf: * Dynamically set REGISTRY and IMAGE (#11) ==== xen ==== Version update (4.14.1_05 -> 4.14.1_08) - bsc#1181254 - VUL-0: xen: IRQ vector leak on x86 (XSA-360) xsa360.patch - bsc#1180794 - bogus qemu binary path used when creating fv guest under xen xen.spec - bsc#1180690 - L3-Question: xen: no needsreboot flag set Add Provides: installhint(reboot-needed) in xen.spec for libzypp ==== xfsprogs ==== Version update (5.9.0 -> 5.10.0) - update to 5.10.0: - xfs_repair: remove old code for mountpoint inodes - xfsprogs: Add inode btree counter feature - xfsprogs: Add bigtime feature for Y2038 - xfsprogs: Polish translation update - mkfs.xfs: Add config file feature - mkfs.xfs: allow users to specify rtinherit=0 - xfs_repair: simplify bmap_next_offset - man: various manpage updates - libxfs: remove some old dead code - libxfs: add realtime extent tracking - libxfs changes merged from kernel 5.10 - refresh 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch against libxfs changes