Removed rpms ============ - adobe-sourcehansans-fonts - adobe-sourcehanserif-fonts - dmz-icon-theme-cursors - gamin-server - libfam0-gamin - libglade-2_0-0 - libhavege1 - libsgutils2-1_43-2 - libtss2-sys0 - perl-apparmor - tcsh - tcsh-lang Added rpms ========== - adobe-sourcehansans-cn-fonts - adobe-sourcehansans-tw-fonts - adobe-sourcehanserif-cn-fonts - adobe-sourcehanserif-tw-fonts - gvfs-backend-afc - libgts-0_7-5 - libhavege2 - libimobiledevice-1_0-6 - libplist-2_0-3 - libsgutils2-1_47-2 - libssh-config - libtss2-sys1 - libusbmuxd-2_0-6 - python3-notify2 - python3-ordered-set - python3-psutil - usbmuxd Package Source Changes ====================== MozillaFirefox +- Firefox Extended Support Release 91.3.0 ESR + * Fixed: Various stability, functionality, and security fixes + MFSA 2021-49 (bsc#1192250) + * CVE-2021-38503 (bmo#1729517) + iframe sandbox rules did not apply to XSLT stylesheets + * CVE-2021-38504 (bmo#1730156) + Use-after-free in file picker dialog + * CVE-2021-38505 (bmo#1730194) + Windows 10 Cloud Clipboard may have recorded sensitive user + data + * CVE-2021-38506 (bmo#1730750) + Firefox could be coaxed into going into fullscreen mode + without notification or warning + * CVE-2021-38507 (bmo#1730935) + Opportunistic Encryption in HTTP2 could be used to bypass the + Same-Origin-Policy on services hosted on other ports + * MOZ-2021-0008 (bmo#1667102) + Use-after-free in HTTP2 Session object + * CVE-2021-38508 (bmo#1366818) + Permission Prompt could be overlaid, resulting in user + confusion and potential spoofing + * CVE-2021-38509 (bmo#1718571) + Javascript alert box could have been spoofed onto an + arbitrary domain + * CVE-2021-38510 (bmo#1731779) + Download Protections were bypassed by .inetloc files on Mac + OS + * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048, + bmo#1735152) + Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3 +- Removed mozilla-bmo1735309.patch which is now upstream + MozillaFirefox-branding-openSUSE:MozillaFirefox-branding-openSUSE -- Add suseversion 150400 +- add sle_version 150300 and 150400 check -- Add suseversion 150300 +- use HTTPS for software search plugin aaa_base +- use autopatch + - update first two patches from git originals to have the + same apply depth as the rest: + - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch + - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch + - fix get_kernel_version.c to work also for recent kernels + on the s390/X platform (bsc#1191563) + - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch + - support xz compressed kernel (bsc#1162581) + - git-38-4c0060639f6fa854830a708a823976772afe7764.patch + - Fixing possible resource leak + - git-39-df622b89bc92fd882a6715c5743095528a643546.patch + - excluding new kernel string in version search + +- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch: + * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248) + +- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch + * sysctl.d/50-default.conf: + allow everybody to create IPPROTO_ICMP sockets (bsc#1174504) +- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch + * sysctl.d/50-default.conf: fix ping_group_range syntax error + adobe-sourcehansans-fonts +- Fix source URLs to be properly downloadable + +- Update to version 2.004 +- Add variable fonts + +- Update to version 2.001 +- Add all region specific fonts +- Remove fontconfig file because Noto Sans CJK doesn't have such a + configuration either + adobe-sourcehanserif-fonts +- Add all region-specific fonts + adobe-sourcesanspro-fonts +- Revert update to Source Sans 3 and keep the pro versions + (boo#1189267) + +- Add 31-adobe-sourcesanspro.conf so that old name still works + +- Fixed github URL +- Fixed Source URL again; we take the full source zip instead of + split release zip + +- Update to version 3.046 + * Roman and Italic now are the same version + * The "pro" part of the name has been dropped, internally a number + is now used: Source Sans 3 + * Update URL + * This is a major release with many changes. See the release page + for the details: + https://github.com/adobe-fonts/source-sans/releases + +- Update source url + +- Update to version 2.045 (Roman) and 1.095 (Italic): + * Bugfixes (too many to name here) +- Run through spec cleaner +- Only package the (better) otf fonts (following the Source Code + Pro package) + -- updated to version 1.040 -- improvement: Adds Zero_Width_Non_Breaking_Space character (ZWNBS, U+FEFF) to address GitHub issue #20 - -- Update to version 1.038 (2012/09/12): - * Updates the metrics of Majuscule letters in lighter weights. - * Updates fonts to add small capitals and superior capital letters - to upright styles. - * Adds the following characters for transliteration: Blinebelow, - blinebelow, Klinebelow klinebelow, Emacronacute, emacronacute, - Omacronacute, omacronacute, primemod - * Adds the following punctuation characters: bardbl, iterrobang, - ceilingleft, ceilingright, floorleft floorright, bracketleftwhite, - bracketrightwhite, brackhalftopleft, brackhalftopright, brackhalfbotleft, - brackhalfbotright - * Adds dotted zero and slashed zero. - -- Added Obsoletes and Provides - -- Renamed from SourceSansPro package, fixed .changes and .spec file - -- Spec: Use %{_ttfontsdir} macro instead of %{_datadir} - -- Updated to 1.0.36 release - Updates fonts to fix bug in TTF versions in which the GDEF table - was not included. -- 1.0.35 release: - Updates the fitting for 'u' and its related glyphs. Updates the - kerning in the upright fonts. - adobe-sourceserifpro-fonts +- Revert update to Source Serif 4 and keep the pro version + (boo#1189267) + +- Add 31-adobe-sourceserifpro.conf so that old name still works + +- Fix download URL again; we take the full source zip instead of + each split release zip + +- Update description to reflect name change Source Sans + +- Update to 4.004: + Major update with the following highlights: + * Source Serif now has six weights across five optical sizes + * Shift text master in design space + * Change the family name from Source Serif Pro to Source Serif 4 + +- Update to 3.000 (Roman and Italic have now the same version): + Changes to Italic styles: + * extend Latin character set from AL-3 to AL-4 + * add Cyrillic (covering AC-2) + * add Greek (covering AG-1) + Changes to Roman styles: + * minor updates to spacing of modifer glyphs + * updates to some Cyrillic characters as suggested by external + advisors + * minor updates to Cyrillic kerning + * updates to some Greek characters as suggested by external + advisors + Global changes: + * overhaul ccmp feature to decompose accented glyphs when + followed by combining + * mark, thus allowing double-stacking of accents (addresses + [#41], #42) + * add ccmp solution for Ukrainian її clash, also for Latin ïï + (addresses #48) + * add Bulgarian Cyrillic alternates both via locl and ss01 feature + (addresses #20) + * add Serbian/Macedonian Cyrillic alternates both via locl and + ss02 feature + Roman and Italic styles now support the same global character set, + in both static and variable versions. + +- Update to 2.010 (Roman) and 1.010 (Italic): + * Italic variant is added + * small fixes, mainly bugfixes +- Only package OTF (like the Sans and Code variants of Source Pro) + apparmor -- Don't provide python2 symbol for python3 package (bsc#1191690). +- Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED + operation="file_mmap" violation in SLE15-SP4; (bsc#1192336). -- Be explicit about using python2 macros, when needed. +- add aa-notify-more-arch-mr809.diff: Add support for reading s390x + and aarch64 wtmp files (boo#1181155) -- update to AppArmor 2.13.6 - - fix utils hotkey conflicts in some languages - - aa-autodep: load abstractions on start (boo#1178527) - - add usr.lib.dovecot.script-login profile - - minor additions in abstractions/X and the dovecot profile - - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.6 +- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532) + +- lessopen.sh profile: allow reading files that live on NFS over UDP + (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552) + +- add profiles-python-3.10-mr783.diff: update abstractions/python and + profiles for python 3.10 + +- update to AppArmor 3.0.3 + - fix a failure in the parser tests + - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3 + for the detailed upstream changelog + +- update to AppArmor 3.0.2 + - add missing permissions to several profiles and abstractions + (including boo#1188296) + - bugfixes in utils and parser (including boo#1180766 and boo#1184779) + - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.2 -- drop upstreamed patch libapparmor-so-number.diff +- remove upstreamed patches: + - apparmor-dovecot-stats-metrics.diff + - abstractions-php8.diff + - crypto-policies-mr720.diff + +- added apparmor-dovecot-stats-metrics.diff to allow Prometheus metrics end-point + +- move Requires: python3 back to the python3-apparmor subpackage - + readline usage is in the python modules, not in apparmor-utils + +- Remove python symbols (python means currently python2), work + only with python3 ones (fallout from bsc#1185588). + +- add abstractions-php8.diff to support PHP8 in abstractions/php (boo#1186267) + +- add crypto-policies-mr720.diff to allow reading crypto policies + in abstractions/ssl_certs (boo#1183597) + +- replace %{?systemd_requires} with %{?systemd_ordering} to avoid dragging in + systemd into containers just because apparmor-parser ships a *.service file + +- merge libapparmor.changes into apparmor.changes + +- avoid file listed twice error + +- define %_pamdir for <= 15.x to fix the build on those releases + +- add apache-extra-profile-include-if-exists.diff: make + include in apache extra profile optional to avoid problems with empty + profile directory (boo#1178527) + +- prepare usrmerge (boo#1029961) + * use %_pamdir + +- update to AppArmor 3.0.1 + - minor additions to profiles and abstractions + - some bugfixes in libapparmor, apparmor_parser and the aa-* utils + - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 + for the detailed upstream changelog +- removed upstream(ed) patches: + - changes-since-3.0.0.diff + - extra-profiles-fix-Pux.diff + - utils-fix-hotkey-conflict.diff + +- Use apache provided variables for the module_directry: + + Use %apache_libexecdir + + Add apache-rpm-macros BuildRequires + +- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in + de, id and sv translations (and fix the test) (MR 675) +- add extra-profiles-fix-Pux.diff to fix an inactive profile - + prevents a crash in aa-logprof and aa-genprof when creating a new + profile (MR 676) + +- update to AppArmor 3.0.0 + - introduce feature abi declaration in profiles to enable use of + new rule types (for openSUSE: dbus and unix rules) + - support xattr attachment conditionals + - experimental support for kill and unconfined profile modes + - rewritten aa-status (in C), including support for new profile modes + - rewritten aa-notify (in python), finally dropping the perl + requirement at runtime + - new tool aa-features-abi for extracting feature abis from the kernel + - update profiles to have profile names and to use 3.0 feature abi + - introduce @{etc_ro} and @{etc_rw} profile variables + - new profile for php-fpm + - several updates to profiles and abstractions (including boo#1166007) + - fully support 'include if exists' in the aa-* tools + - rewrite handling of alias, include, link and variable rules in + the aa-* tools + - rewrite and simplify log handling in the aa-logprof and aa-genprof + - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 + for the detailed upstream changelog +- patches: + - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 + release up to 3e18c0785abc03ee42a022a67a27a085516a7921 + - drop upstreamed usr-etc-abstractions-base-nameservice.diff + - drop 2.13-only libapparmor-so-number.diff + - refresh apparmor-enable-profile-cache.diff - partially upstreamed + - update apparmor-samba-include-permissions-for-shares.diff and + apparmor-lessopen-profile.patch - switch to "include if exists" + - apparmor-lessopen-profile.patch: add abi rule to lessopen profile + - refresh apparmor-lessopen-nfs-workaround.diff +- move away very loose apache profile that doesn't even match the + apache2 binary path in openSUSE to avoid confusion (boo#872984) +- move rewritten aa-status from utils to parser subpackage +- add aa-features-abi to parser subpackage +- replace perl and libnotify-tools requires with requiring + python3-notify2 and python3-psutil (needed by the rewritten + aa-notify) +- drop ancient cleanup for /etc/init.d/subdomain from parser %pre +- drop (never enabled) conditionals to build with python2 and to + build the python-apparmor subpackage (upstream dropped python2 + support) +- drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed +- set PYFLAKES path for utils check +- add precompiled_cache build conditional to allow faster local + builds without using kvm +- remove duplicated BuildRequires: swig + - fix two potential build failures in libapparmor + - fix log parsing for logs with an embedded newline + - some fixes in cache handling + - preserve errno across aa_*_unref() functions +- no longer package static libapparmor.a +- Fix RPM groups + +- libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but + with minimum BuildRequires autoyast2 +- use Y2Storage::Arch to determine whether UEFI is available (bsc#937067) +- 4.4.24 + +- During autoupgrade merge the selected product workflow in order + to execute 2nd stage modules (bsc#1192437) +- 4.4.23 + +- Do not process the section during the 2nd stage + (bsc#1192185). +- 4.4.22 + bcm20702a1-firmware +- Fix build on Leap which does not have %_firmwaredir + +- fix boo#1175038 - remove unnecessary %postun scriptlet that is + incorrectly deleting all package files on upgrade; all files are + already listed in %files as %ghost so no scriptlet is needed. + +- use %_firmwaredir + blktrace +- Fix crash due to dropped first event while using pipe input (bsc#1191788). + * blkparse: skip check_cpu_map with pipe input + * blkparse: fix incorrectly sized memset in check_cpu_map + * Added: + - blkparse-skip-check_cpu_map-with-pipe-input.patch + - blkparse-fix-incorrectly-sized-memset-in-check_cpu_m.patch + -- Update to v1.0.3 (bnc#720300 and others). - - Updated documentation - - Fixed multiple output errors - - Added FLUSH/FUA support - - Misc bug fixes - -- disable parallel build again - -- Remove redundant tags/sections from specfile -- Use %_smp_mflags for parallel build - -- Fix build with no-add-needed (missing -pthread) - -- Fix memory leak (bnc #546035) - -- Fix memory leak in btrecord (bnc #523444). - -- Fix typo in btt (bnc #511264). - -- Update to version 1.0.1: - * blkrawverify: warn and return error if no traces are found - * blkiomon manpage and usage reference invalid "msg-queue-name" option - * fix up btrace options & manpage - * more manpage fixups - * fix max-pkts option inconsistencies - * Converted to using the correct remap entries - * blkiomon: fix unaligned accesses on ia64 - * fix off-by-one issues in blkiomon.h - * fix include statement in stats.h - * handle race to mkdir at startup - * Fixed plug/unplug logic in btt - * Working on fixing % time q plugged - * fix trivial typo in manpage - * Add NOTIFY to activity mask - * Blktrace failed to lock reader threads on the cpu used by the - corresponding writer. This resulted in stale data being consumed when - blktrace accidently read at a position that was being written to at the - same time. This issue surfaced as "bad trace magic" warnings emitted by - blktrace tools. - * Generate matplotlib plots for btt generated data - * Update Jenkins hash to lookup3() variant - * Fixed EAGAIN handling in blktrace.c - * O_NOATIME isn't always present - * btt: Added no remap option - * btt general cleanup plus valgrind clean - * btt: Missed fopen conversion to my_fopen - * Code review updates - * Reworked blktrace master/thread interface - * Cleaned up devs that have no data - * Moved starting of tracing after tracers are going - * btt: fixed open in setup_ifile - * Synchronized trace gathering - * Invoke gethostbyname once, handle errors better - * Added accept as a system call needing resource increases - * Rewrote blktrace to have a single thread per CPU - * Fix btt to handle large numbers of output files - * Increased limits to allow for large system runs - * A couple of min-counters weren't initialised correctly (thrput_r, - thrput_w). We have got a perfectly working init function for this - purpose. Removing partially duplicated code. - * The git commit 11914a53d2ec2974a565311af327b8983d8c820d added - __BLK_TA_ABORT to blktrace_api.h. A corresponding addition to the blktrace - tools repository has been missing, breaking the API. Blkparse complained: - "Bad fs action 40010011" - * Added no messages option to blkparse.c - * gcc 4.3.2 has started to warn about: - * Added -P to create a data file w/ Q, D and C per line - * Fixed 'M' displays on per-io output and added in I/O separator - * Fixed segfault in aqd.c : need to check for NULL (not requested) - * Added in -z to provide running waiting-for-issue latencies - * Moved btrecord/btreplay to version 1.0.0 - -- Build with docs by default. - brotli +- Fix CVE-2020-8927, decoder: integer overflow when input chunk + is larger than 2GiB. (CVE-2020-8927, bsc#1175825) + * fix-cve-2020-8927.patch + cracklib +- %check: really test the package [bsc#1191736] + desktop-data-openSUSE +- Move call-browser and desktop-launch symlink to xdg-utils. + +- Update to version 15.2.20200107: + * Fix csh (boo#1158422) + +- Update to version 15.1.20191124: + * Remove remaining wallpapers + * Remove unused icon directory + * Don't set cursor on empty input +- No longer requires DMZ Cursors, as the fillup no longer contains + the theme by default + +- Remove obsolete Groups tag (fate#326485) + +- Update to version 15.1.20181213: + * Replace old menus and set wallpapers for Gnome + * Remove all irrelevant stuff from KDE4, Novell and duplicated icons + * Fix up cursors not working by default, DMZ theme doesn't exist + -- Add /etc/skel/Templates directory with templates for commonly - used files: plain text, ODF text, ODF presentation and ODF - drawing. This provides the user with a choice of new document - templates to choose from when, e.g., using the "New Document" - item in right-click menu from file-browsers such as Nautilus; - fixes bnc#897716. - dnsmasq +- bsc#1192529, dnsmasq-resolv-conf.patch: + Fix a segfault when re-reading an empty resolv.conf +- Remove "nogroup" membership from the dnsmasq user. + +- Use systemd-sysusers from 15.3 onwards + dracut +- Update to version 055+suse.183.g7d569585: + * fix(dracut.spec): update usrmerged mkinitrd dir + * fix(url-lib): improve ca-bundle detection (bsc#1175892) + +- Update to version 055+suse.179.g3cf989c2: + * fix(cpio): write zeros instead of seek for padding and alignment + * fix(dracut.sh): check kernel zstd support early + * fix(dracut.sh): check availability of configured compression + * fix(dracut.sh): inform user about auto-selected compression method + * fix(dracut.sh): drop pointless check for module compression method + * chore(suse): add dracut-cpio archiver + * ci(TEST-63-DRACUT-CPIO): kernel extraction tests for dracut-cpio + * feat(dracut.sh): add "--enhanced-cpio" option for calling dracut-cpio + * feat(Makefile): cargo wrapper for dracut-cpio build + * feat(cpio): add newc archive creation utility + * feat(cpio): add rust argument parsing library from crosvm + * ci(TEST-62-SKIPCPIO): add simple skipcpio test + * ci(test): export basedir and testdir as absolute paths + * ci(TEST-60-BONDBRIDGEVLANIFCFG): use toplevel Makefile + * fix(dracut.spec): check for non-usrmerged environments + * fix(zfcp_rules): add quotes around rule installation argument + * fix(zipl): correct argument for uuid to device conversion + * fix(fips): missing value of _vmname variable (bsc#1193267) + * chore(suse): add fido2 module + * feat(crypt): check if fido2 module is needed in hostonly mode + * feat(fido2): introducing the fido2 module + * feat(crypt): check if tpm2-tss module is needed in hostonly mode + * fix(dracut-functions.sh): get block device driver if in a virtual subsystem + * fix(mdraid): allow UUID comparison for more than one UUID (bsc#1192665) + edict +- Update to snapshot 20210529 + * Approximately 600 entries were updated. + +- Update to snapshot 20210429 + * No changelog recorded. + +- Update to snapshot 20201102 + * No changelog recorded. + +- Update to snapshot 20200825 + * No changelog recorded. + -- Remove redundant/obsolete tags/sections from specfile - (cf. packaging guidelines) - -- update to latest versions. Updated dictionaries are - edict, enamdict, kanjdic, kanjd212, and compdic. - gcc7 +- Adjust some ambiguous SPDX license specifications to prevent + spec-cleaner from messing up. + +- Add gcc7-pr55917.patch to do not handle exceptions in std::thread + (jsc#CAR-1182) + +- - Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch + gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch + gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch + gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch + gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch + gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch + gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch + gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch + gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch + gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch + gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch + gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch + gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch + gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch + gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch + gcc7-pfe-0016-Backport-AArch64-PR92424-Fix-fpatchable-function-ent.patch + gcc7-pfe-0017-Backport-Fix-patchable-function-entry-on-arc.patch + gcc7-pfe-0018-Backport-Add-patch_area_size-and-patch_area_entry-to.patch + gcc7-pfe-0019-Backport-testsuite-Adjust-patchable_function-tests-f.patch + gcc7-pfe-0020-Backport-Use-the-section-flag-o-for-__patchable_func.patch + gcc7-pfe-0021-Backport-varasm-Fix-up-__patchable_function_entries-.patch + gcc7-pfe-0022-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch + gcc7-pfe-0023-Fix-unwinding-issues-when-pfe-is-enabled.patch + to add -fpatchable-function-entry feature to gcc-7. + +- Add gcc7-ada-MINSTKSZ.patch to fix build with glibc 2.34. +- Add bits/unistd_ext.h to the list of removed fixed includes. + +- Add gcc7-sanitizer-cyclades.patch to remove cyclades.h use from + libsanitizer fixing builds with recent kernels. + glibc +- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch, + 0002-S390-Optimize-__memcpy_z196.patch, + 0003-S390-Optimize-__memset_z196.patch, + 0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch, + 0005-S390-Add-new-hwcap-values.patch, + 0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 - + GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869) + gmp +- Add gmp-6.2.1-CVE-2021-43618.patch to fix buffer overflow on + malformed input to mpz_inp_raw. [bsc#1192717, CVE-2021-43618] + graphviz -- Added graphviz-2.40.1-fix-dot-segfault.patch to fix a segfault in dot - bsc#1151207 +- Changelog Update for SLES: + The following patch has been backported to SLES and is therefore + missing from the Factory changelog: + * graphviz-malformed_input.patch (boo#1132091) -- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032 - (bsc#1185833) +- Changelog Update for SLES: + The Following patches have been backported to SLES and are therefore + missing from the Factory changelog: + * graphviz-2.40.1-fix-dot-segfault.patch (bsc#1151207) + * graphviz-out-of-bounds-write.patch (bsc#1185833) + * graphviz-null_dereference.patch (bsc#1185833) -- Added graphviz-null_dereference.patch to fix CVE-2018-10196 - (boo#1093447) +- Dropped python2 subpackages as the bindings are removed in 2.48 +- Update to version 2.48.0 (changes since 2.47.1) + * marginally more accurate computations in Smyrna sphere projection + * Perl is no longer required to build Graphviz #2067 + * nop more reliably returns success and failure exit statuses + * implicit 63 character limit on plugin names is removed in GVC + * remove Python 2 bindings #1992 + * improved thread-safety in Graphviz bindings Makefile + * the CMake build system now enables -Wextra when building C++ + * some Cgraph functions that take char* arguments that they do not modify have + been updated to take const char* arguments #634 + * incorrectly using the layout attribute on anything other than a graph now + results in a warning about this being invalid #2078 + * edgepaint accepts more standard -- prefixed command line arguments and + rejects invalid options #1971 + * improved detection of Lefty dependencies in the Autotools build system + * Fix: out of bounds read when attempting to load a plugin whose name is ≥63 characters + * Fix: out of bounds read when examining a registered plugin whose name is ≥63 characters + * Fix: do not fclose(NULL) in gvmap + * Fix: Uninitialized variable read in delaunay_tri + potentially mismatched format string in tclpkg + * Fix: ortho's eqEndSeg incorrectly modifies its arguments #2047 + * Fix: Autotools enables -Wtrampolines and -Wlogical-op for Clang #2066 + * Fix: node_distinct_coloring failure due to out-of-memory now reported correctly + instead of referring to a failure to open lab_gamut + * Fix: a typo GD_LIBS to GDLIB_LIBS in tclpkg/tcldot/Makefile.am !2022 + * Fix: Autotools build system sets libgd variables now instead of incorrectly setting + GTK variables + * Fix: HTML strings used as labels are distinguishable in GXL output by kind="HTML-like string" + * Fix: a Bashism removed from the Autotools build system + * Fix: when Criterion is available, the command_line test binary is no longer built + and installed by default, but rather during make check + * Fix: round-tripping a file through gv2gxl and then gxl2gv no longer causes + HTML-like labels to become non-HTML like labels #517 + * Fix: fix ODR violation by including the ortho object files in the gvc lib also for + CMake and MSbuild #2096 -- Added graphivz-malformed_input.patch from commit 839085f8 - to fix CVE-2019-11023 (boo#1132091) +- Update graphviz-2.20.2-interpreter_names.patch so the Python demo + uses Python 3. + +- Install epl-v10.txt instead of COPYING. + The COPYING file is a symlink to epl-v10.txt. + +- Update to version 2.47.1 + * More detailed error messages when opening input file fails + * The edges in JSON output are ordered now + * Fixed xdot man page does not document some functions + * Fixed PIC renderer + * Fixed dot conversion to dia format + * Fixed memory leak of reference-counted HTML strings + * Fix for TBbalance attribute code + * Fixed HTML parser error with single closing square bracket in + table row + * Fixed reference counted strings put the HTML bit in the middle + of the reference count + * Fixed & escape disappearing + * Fixed gvpr -? to actually print usage and exit non-zero + * Fixed memory leak in libmingle + * Fixed memory leak in ANN bridge + * Fixed buffer overflow in unflatten + * Fixed agxbputc macro does not bracket its arguments +- Drop upstream fixed graphviz-2.46-fix-shebang.patch + * Using POSIX shell, no need for ksh + +- Remove obsolete pre_checkin.sh + +- Buildrequire full ghostscript in the addons package + to avoid a conflict betwen ghostcript-mini and ghostscript-devel + +- Replace ghostscript-mini dependency with ghostscript_any + +- Add graphviz-webp package to for webp image support + +- Reenable ghostscript, but require just ghostscript-mini + +- Update to new release 2.46.1 (changes since 2.44.1) + * Support for building against Guile 2.2 + * Portable source is now also offered as a .tar.xz + * CentOS/RHEL 6 is no longer supported + * Vestiges of Qt4 support have been removed + * C++11 support is now required of the C++ compiler used to build Graphviz + * C99 support is now required of the C compiler used to build Graphviz + * Question about userout() function in agerror.c #1924 + * The minimum version of Python required to run the test suite is 3.6 + * memory leak in label construction + * gvedit compilation errors out, but works if manually compiled with qt5 #1862 + * incorrect HTML BR attribute parsing code #1913 + * broken overflow checks in RectArea #1906 + * various memory leaks !1699 + * Fix bad free in lefty !1709 + * typo in pathcross #1926 + * Out-of-bounds write caused by incorrect error handling of malloc in genUserdata #1928 + * Offer .tar.xz files too #454 + * Header file graphviz_version.h has no include guards #1929 + * regression: newlines embedded in quoted labels / node names are not preserved in 2.46.0 #1931 + * Properly fill graphviz_version.h !1706 + * Cgraph's agxbuf API gained a new function agxbdisown(), for dissociating + * backing memory from the managed buffer + * Build system support for the Elbrus 2000 CPU, thanks to Michael Shigorin + * Cgraph's agheap() API has been removed + * Autotools build system support for eFence has been removed + * Building Graphviz with ICC defaults to -O2 instead of -O0 + * Build system work arounds for GCC 3 have been removed + * Incomplete support for running the test suite under CMake has been removed + * Portable source tarballs now use the “ustar” POSIX format + * Minimum version of Flex required to build Graphviz is now 2.5.2 + * Minimum version of Bison required to build Graphviz is now 3.0 + * Minimum version of CMake required to build Graphviz using CMake is now 3.1 + * gvpr: line numbers in gvpr errors/warnings are incorrect #1594 + * URL typo in patchwork man page + * Escaped backslashes are not correctly handled when producing xdot with dot #165 + * heap-over-flow(off-by-null) in lib/common/shapes.c #1700 + * Windows MSBuild executables have the wrong version #1745 + * Cast Overflow at pango_textlayout #1314 + * x11 back end segfaults if display is unavailable #1776 + * typo in cmd/gvpr/lib/clustg #1781 + * Segfault in dot #1783 + * Incorrect 'Arrow type "s" unknown' error #1444 + * segfault on reading 0x10 #1724 + * Null-dereference READ (144736912) #1676 + * "Warning! PATH too long installer unable to modify PATH!" using CMake Windows installer and PATH length > 1024 #1770 + * gvedit -? gives "option - unrecognized - ignored" instead of showing usage #1813 + * lefty is not built for Windows (fixed for MSBuild builds only) #1818 + * a failure to detect OpenGL glGenTextures() errors has been corrected + * sfio does compile time benchmarknig #1422 + * iffe "lib" check always succeeds when compiler optimises #1521 + * syntax error near text who is not present #1411 + * Explicitly links with libstdc++; should allow libc++ if appropriate #163 + * A macOS file that was erroneously excluded from portable source tarballs has + * been restored + * Add option -? for usage to diffimg + * Add option -? for usage to dotty + * Add option -? for usage to lneato + * Add option -? for usage to vimdot + * Fix smyrna -? to actually print usage instead of error + * Fix edgepaint -? to actually print usage instead of error + * Remove '"' from usage text in non-Windows version of dotty + * Correct misspelled 'smyrna' in usage + * Fix edgepaint -o option + * Correct shebang of gvmap.sh to use ksh + * Fix gvmap.sh -? option to exit with zero exit status + * Graphviz doesn't build on MacOS with the latest libc++ #1785 + * make fails if ps2pdf is not installed (using autotools) #1763 + * multiple graphs to file output causes a segfault #1845 + * lefty PTY functionality relies on file descriptor implementation details #1823 + * buffer overflow in fdpgen + * Crashes by VRML output when current directory is not writable #793 + * Segmentation fault when newrank=true #1221 + * sfdp craches #236 + * fdp segmentation fault with GK=0 #1290 + * fdp crash #1865 + * Graphviz always crash with this simple dot file #167 + * Seg fault in dot #1771 + * gml2gv doesn't handle some attributes correctly #1869 + * Add missing circo, fdp, neato, osage, patchwork, sfdp & twopi tools to Windows builds (copies of dot) + * Add gv2gml tool to CMake (copy of gml2gv on Windows, symlink to gml2gv otherwise) + * Regression: fdp generates internal names in the output #1876 + * Regression: fdp assertion error on cluster in edge #1877 + * Regression in id / <title> in svg for twopi #1907 +- graphviz-2.46-fix-shebang.patch added to make rpmlint happy +- graphviz-no_strict_aliasing.patch changed to be applicable to current files +- configure without ghostscript to break new build cycle +- Update source URLs + +- Use _multibuild to build graphviz and graphviz-addons in a single + development project + - graphviz-addons.changes + - graphviz-addons.spec + +- Update to new release 2.44.1 (changes since 2.42.3) + * applied RH patches (from graphviz-2.42.2-8.fc32.src.rpm) + * some allocation failures that could previously allow memory + corruption now exit + * lab_gamut.3.pdf is no longer included in release archives + * Fixed Neato's hier mode is broken since v2.44.0 + * Fixed segmentation fault (core dumped) + * New SGD mode in neato + * Add pkg-config files + * tred: add feature to output removed edges to stderr upon request + * Workaround: avoid creating a virtual edge loop. + * Add riscv64 to host_cpu configure.ac + * lib/cgraph: include empty malloc.h from subdir include + * lib/gvpr: compile mkdefs with $(HOSTCC) rather than $(CC) + * lib/vpsc: rename bcopy->b_copy + * Fixed the NativeCodeAnalysis task failed unexpectedly. + * Include all test files in distro + * host_cpu add mips64 platform + * Correct description of 'port' syntax in manual + * svg output displays TITLE of %3 if graph had no name + * XML errors in generated SVG when URL attribute contains + ampersand (&) + * Test files missing from source distributions + * SVG error for "g.transform.scale " in graphviz version 2.43 +- BuildRequires for ghostscript and groff (generate cdt documentation) +- Extension graphviz-php changes: + * Require php(api) and php(zend-abi) to guarantee ABI compatibility + * Don't pull in extra libraries from PHP + + graphviz-no_php_extra_libs.patch + * Remove argon2-devel from list of dependencies + * Automatically enable extension when installed by providing + /etc/php{5,7}/conf.d/gv.ini + +- Rename python*-graphviz to python*-gv, there is also normal + pypi graphviz package and we clash otherwise and override + each other + +- Add also configure option to not build py2 if the python2 + build is disabled + +- Add python2/python3 split subpkgs in order to allow building + without python2 available + +- Auto-identify the correct ruby-version using pkg-config. + +- Update to new release 2.42.3 + - tidy gvedit about dialog strings + - check for mmap failure in plugin code + - fix broken symlinks to _gv.so with Python + - fix out of source build with LIBGD + - some minor bugfixes +- Fix changelog of last update: + - Accidentally had both CVE entries mashed together. + +- Switch from github master to new release 2.42.1 + - Fixes CVE-2019-11023 (bsc#1132091) + - Fixes CVE-2018-10196 (bsc#1093447) + - Fixes quite a few bugs +- Removed graphviz-fix-ruby-version.patch (fixed in upstream) + +- Tweak runtime Requires(post): graphviz to same or newer version. + Needed after change to git checkout instead of released tarballs. + +- Disabled Visio plugin + +- Use %%python3_sitearch macro to package python3 modules. +- use correct ruby version (2.5) for openSUSE 15.1 and earlier. + +- Now using master branch of upstream, as there have been no releases for + over two years + * this should fix CVE-2019-11023 (boo#1132091) +- Removed graphviz-qt5.patch (now in upstream) +- Removed reproducible.patch (now in upstream) +- graphviz-smyrna-link_against_glu.patch changed to be applicable to current files +- graphviz-no_strict_aliasing.patch changed to be applicable to current files +- Added graphviz-fix-ruby-version.patch to remove hardcoded dependency on ruby 1.9 +- graphviz.spec updated for new version +- created _service file + +- use pkg-config with correct parameter, reported by Werner Fink + +- Support dynamic move to Guile 2.2, part of boo#1117121: + - Replace conditional pkgconfig(guile-2.[02]) BuildRequires with + guile-devel: The package name is unchanged, which allows the + distro projects to move wihout step-locking changes. + - Patch configure.ac to look for guile-2.2 if guile 2.2 is being + used. +- order inputs alphabetically + +- Fixed double file declaration in graphviz and graphviz-addons (x11) +- Mark license files with %license instead of %doc + +- Build with gts support (bsc#1108978, bsc#1108976) + SLE12 flavors do not provide gts, so explicitly exclude + gts support there. + +- Extend reproducible.patch to make build reproducible (boo#1041534) + +- Build with PHP5 for Leap 42.x and earlier, PHP7 requires swig 3.0.11 + Drop graphviz-plugins-fix_install_dirs.patch, use sed script to + fix directories, same as for Lua + +- Do not delete dotty/lefty/lneato man pages which are part of + the x11 subpackage, built from the addons package/spec. + (No changelog entry). + +- Drop harmful modification of tclpkg/gv/gv_doc_langs.tcl, which + changes the timestamp, although the file does not contain LIB_DIR. + Graphviz ships prebuilt manpages in man and PDF format. Modifying + the tcl script rebuilt the documentation, and replaced the PDFs + with empty documents (due to missing groff). This also made the + doc subpackage nonreproducible, causing rebuilds in all dependent + packages. + +- Disable guile 2.2 modifications temporarily +- Move lefty/dotty/lneato graph editor tools to x11 subpackage and + build as part of addons package. Removes any X11 dependency from + core package, both build and runtime. +- Drop unused libXaw6 build dependency +- move libpng, libjpeg, freetype and fontconfig build dependencies + to addons, unused for core + +- Move to pkgconfig(guile-2.2) BuildRequires on suse_version >= + 1500. groff +- Remove /usr/share/groff/current from groff-full. It creates file + conflicts during version upgrade (bsc#1192195#c8). + groff:full +- Remove /usr/share/groff/current from groff-full. It creates file + conflicts during version upgrade (bsc#1192195#c8). + gtk2 +- Add gtk2-rpmlintrc (boo#1191758): + + Filter wrong split request for libgdk-x11-2.0.so.0: the + library shares the version info with gtk2 and is allowed to be + in the same library package. + + Filter libgail.so.18 split request: the error is actually + correct, but gtk2 being a legacy package does not justify the + extra efort. The libgtk-2_0-0 package is the only consumer. + haveged +- revert last change, e.g. for VMs where we are not being fed entropy + from the host or similar setups. + +- Improvements on the linux kernel random subsystem have made + the haveged service/daemon obsolete, remove the service files, + initrd modules and udev rules, the other components + are still useful. + +- Update to 1.9.14: + * made enttest configurable + * havegecmd.c - new command added to close the communication socket +- Drop haveged-conditional-enttest.patch + +- Update to 1.9.13: + * added support for --version [Jirka Hladky] + * updated systemd service file [Jirka Hladky] + * fix a memory leak in havege_destroy [Anakin Zhang] + * updated version reported by program [Jirka Hladky] + * fix ordering cycle with private tmp [Christian Hesse] + * Updated systemd service file [Nicolas Braud-Santoni] + * Bump soname [Nicolas Braud-Santoni] + * Fix crash on shutdown in threaded mode [Sergei Trofimovich] + * Fix compilation with --enable-threads [Lars Wendler] + +- Update to version 1.9.8: + * Fix for Unresolved symbol error_exit in libhavege #20 by pld-gitsync [Jirka Hladky] + * order after systemd-tmpfiles-setup-dev.service (origin/pr/21) [Christian Hesse] + * use systemd security features [Christian Hesse] + * do not run in container [Christian Hesse] + * do not use carriage return in line break [Christian Hesse] + * Fixed invalid UTF-8 codes in ChangeLog [Jirka Hladky] +- Changes for version 1.9.5: + * Added test for /dev/random symlink [Jirka Hladky] + * Update to automake 1.16 [Jirka Hladky] + * Fix segv at start [Andrew] + * Fixed built issue on Cygwin [jbaker6953] + * Fix segfault on arm machines (origin/pr/7) [Natanael Copa] + * init.d/Makefile.am - add missing dependency [Jackie Huang] + * service.redhat - update PIDFile [Pierre-Jean Texier] + * Fix type mismatch in get_poolsize [Andreas Schwab] + * Fixup upstream changelog [Nicolas Braud-Santoni] + * Remove support for CPUID on ia64 (origin/pr/19) [Jeremy Bobbio] + * Output some progress during CUSUM and RANDOM EXCURSION test [Sven Hartge] + * Diagnostics capture mode now works correctly [Ethan Rahn] +- Drop upstream patches: + * f2193587.patch + * get-poolsize.patch + +- get-poolsize.patch: Fix type mismatch in get_poolsize that breaks error + checking (bsc#1111047) + +- Refresh patches + +- Use noun phrase for summary. Grammar fixes to description. + +- Update to version 1.9.4: + * Avoid misleading message if cmd socket is in use + * Implements a command mode and use it for chroot +- Drop upstreamed patches: + * change-sysroot.patch +- Update project and download url's + +- Add patch change-sysroot.patch to + move forward to socket communication within private network +- Add haveged-switch-root.service which send the new root location + to running haveged process + +- Make haveged survive switch root within initrd (boo#1075359) + added change-sysroot.patch + haveged-switch-root.service hwdata +- Update to version 0.353 (bsc#1192587): + + Updated pci, usb and vendor ids. + +- Update to version 0.352 (bsc#1191375): + + Updated pci, usb and vendor ids. + inotify-tools +- update to 3.21.9.6 (jsc#SLE-21025): + * update path for includes in stats.h + * Fix spellings in manpages + +- update to 3.21.9.5: + * Fix Wrong pointer passed to realloc + * Fix offset compiler warning + * various static code analyse annotations and fixes + +- update to 3.20.11.0: + * Added --no-dereference to watch a symlink + * bugfixes + +- update to 3.20.2: + * New maintainer + * Fix potential buffer overflow + * gcc 9 support +- remove inotify-tools-no-timestamp-in-doc.patch + inotify-return.patch (merged upstream) + +- Update inotify-tools-no-timestamp-in-doc.patch + because doxygen footers are no more an issue and man page + date needs to be normalized (boo#1047218) + +- adjust source to the github download url + +- update to version 3.20.1 + * no changelog + * drop upstreamed patch reserved-identifier.patch + -- removed %clean section -- enabled doxygen in configure and split up doc package -- added fdupes call for doc (doxygen) files -- added %check section with simple "make check" -- moved .so files to the main package -- added --disable-static to configure and remove .la file -- replaced RPM_BUILD_ROOT with %buildroot - -- some spec file clean up: - - explicitly list file names - - removed unneeded BuildRequires and %changelog for the -devel - sub-package - - removed pointless %lang_package tag - - specified upstream download URI in the URL tag -- inotify-return.patch: - specifies a return value for a function to fix a build error - (no-return-in-nonvoid-function) - -- initial package - inxi +- update to 3.3.07: + * /usr/share/doc/packages/inxi/inxi.changelog. + +- Updated to version 3.3.03: + * See /usr/share/doc/packages/inxi/inxi.changelog. + kernel-default +- x86/sev: Fix SEV-ES INS/OUTS instructions for word, dword, + and qword (bsc#1190497). +- commit 8e47d62 + +- tty: hvc: replace BUG_ON() with negative return value + (git-fixes). +- commit 64a2763 + +- xen/netfront: don't trust the backend response data blindly + (git-fixes). +- commit 3d79f0a + +- xen/netfront: disentangle tx_skb_freelist (git-fixes). +- commit 843455b + +- xen/netfront: don't read data from request on the ring page + (git-fixes). +- commit a7d9222 + +- xen/netfront: read response from backend only once (git-fixes). +- commit 7ac98d9 + +- xen/blkfront: don't trust the backend response data blindly + (git-fixes). +- commit 8fa0a17 + +- xen/blkfront: don't take local copy of a request from the ring + page (git-fixes). +- commit ff5aa10 + +- xen/blkfront: read response from backend only once (git-fixes). +- commit 160dbd1 + +- usb: core: config: using bit mask instead of individual bits + (git-fixes). +- USB: gadget: zero allocate endpoint 0 buffers (git-fixes). +- USB: gadget: detect too-big endpoint 0 requests (git-fixes). +- libata: add horkage for ASMedia 1092 (git-fixes). +- platform/x86: amd-pmc: Fix s2idle failures on certain AMD + laptops (git-fixes). +- mmc: spi: Add device-tree SPI IDs (git-fixes). +- usb: gadget: uvc: fix multiple opens (git-fixes). +- commit e549085 + +- HID: Ignore battery for Elan touchscreen on Asus UX550VE + (git-fixes). +- HID: google: add eel USB id (git-fixes). +- HID: add USB_HID dependancy to hid-prodikeys (git-fixes). +- HID: add USB_HID dependancy to hid-chicony (git-fixes). +- HID: bigbenff: prevent null pointer dereference (git-fixes). +- HID: sony: fix error path in probe (git-fixes). +- HID: add USB_HID dependancy on some USB HID drivers (git-fixes). +- HID: check for valid USB device for many HID drivers + (git-fixes). +- HID: wacom: fix problems when device is not a valid USB device + (git-fixes). +- HID: add hid_is_usb() function to make it simpler for USB + detection (git-fixes). +- HID: quirks: Add quirk for the Microsoft Surface 3 type-cover + (git-fixes). +- HID: Ignore battery for Elan touchscreen on HP Envy X360 + 15-eu0xxx (git-fixes). +- HID: sony: support for the ghlive ps4 dongles (git-fixes). +- HID: sony: Fix more ShanWan clone gamepads to not rumble when + plugged in (git-fixes). +- commit 66fc3e6 + +- sched/fair: Document the slow path and fast path in + select_task_rq_fair (bsc#1189999 (Scheduler functional and + performance backports)). +- sched/fair: Fix per-CPU kthread and wakee stacking for asym + CPU capacity (bsc#1189999 (Scheduler functional and performance + backports)). +- sched/fair: Fix detection of per-CPU kthreads waking a task + (bsc#1189999 (Scheduler functional and performance backports)). +- commit d543e74 + +- Refresh + patches.suse/sched-fair-Adjust-the-allowed-NUMA-imbalance-when-SD_NUMA-spans-multiple-LLCs.patch. +- Refresh + patches.suse/sched-fair-Use-weight-of-SD_NUMA-domain-in-find_busiest_group.patch. +- commit 24ff0a3 + +- xhci: avoid race between disable slot command and host runtime + suspend (git-fixes). +- commit 7ac82ba + +- xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from + runtime suspending (git-fixes). +- commit 47ed1f0 + +- Update patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch (bsc#1189158) +- commit 5a1da74 + +- vdpa: Consider device id larger than 31 (git-fixes). +- virtio/vsock: fix the transport to work with VMADDR_CID_ANY + (git-fixes). +- virtio_ring: Fix querying of maximum DMA mapping size for + virtio device (git-fixes). +- virtio: always enter drivers/virtio/ (git-fixes). +- vdpa: check that offsets are within bounds (git-fixes). +- commit a40ec17 + +- scsi: qla2xxx: Format log strings only if needed (git-fixes). +- scsi: scsi_debug: Fix buffer size of REPORT ZONES command + (git-fixes). +- scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc() + (git-fixes). +- scsi: scsi_debug: Zero clear zones at reset write pointer + (git-fixes). +- scsi: mpt3sas: Fix incorrect system timestamp (git-fixes). +- scsi: mpt3sas: Fix system going into read-only mode (git-fixes). +- scsi: mpt3sas: Fix kernel panic during drive powercycle test + (git-fixes). +- commit 590254f + +- RDMA/irdma: Don't arm the CQ more than two times if no CE for + this CQ (jsc#SLE-18383). +- RDMA/irdma: Report correct WC errors (jsc#SLE-18383). +- RDMA/irdma: Fix a potential memory allocation issue in + 'irdma_prm_add_pble_mem()' (jsc#SLE-18383). +- RDMA/irdma: Fix a user-after-free in add_pble_prm + (jsc#SLE-18383). +- IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr (jsc#SLE-19242). +- IB/hfi1: Fix early init panic (jsc#SLE-19242). +- IB/hfi1: Insure use of smp_processor_id() is preempt disabled + (jsc#SLE-19242). +- IB/hfi1: Correct guard on eager buffer deallocation + (jsc#SLE-19242). +- RDMA/rtrs: Call {get,put}_cpu_ptr to silence a debug kernel + warning (jsc#SLE-19249). +- RDMA/hns: Do not destroy QP resources in the hw resetting phase + (bsc#1190336). +- RDMA/hns: Do not halt commands during reset until later + (bsc#1190336). +- RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow + (jsc#SLE-19253). +- RDMA: Fix use-after-free in rxe_queue_cleanup (jsc#SLE-19249). +- vmxnet3: fix minimum vectors alloc issue (bsc#1190406). +- ice: safer stats processing (jsc#SLE-18375). +- ice: fix adding different tunnels (jsc#SLE-18375). +- ice: fix choosing UDP header type (jsc#SLE-18375). +- ice: ignore dropped packets during init (jsc#SLE-18375). +- ice: Fix problems with DSCP QoS implementation (jsc#SLE-18375). +- ice: rearm other interrupt cause register after enabling VFs + (jsc#SLE-18375). +- ice: fix FDIR init missing when reset VF (jsc#SLE-18375). +- i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc + (jsc#SLE-18378). +- i40e: Fix pre-set max number of queues for VF (jsc#SLE-18378). +- i40e: Fix failed opcode appearing if handling messages from VF + (jsc#SLE-18378). +- iavf: Fix reporting when setting descriptor count + (jsc#SLE-18385). +- iavf: restore MSI state on reset (jsc#SLE-18385). +- devlink: fix netns refcount leak in devlink_nl_cmd_reload() + (git-fixes). +- bonding: make tx_rebalance_counter an atomic (git-fixes). +- net/tls: Fix authentication failure in CCM mode (git-fixes). +- tcp: fix page frag corruption on page fault (git-fixes). +- commit ed7a8c9 + +- config: INPUT_EVBUG=n (bsc#1192974). + Debug driver unsuitable for production, only enabled on ppc64. +- commit e6448a3 + +- ima: Fix undefined arch_ima_get_secureboot() and co + (bsc#1193674). +- commit acf34be + +- net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero + (git-fixes). +- commit 6e691fe + +- Move upstreamed rtw89 patch into sorted section +- commit 0950df1 + +- net: mana: Fix memory leak in mana_hwc_create_wq (git-fixes). +- commit 1fcab05 + +- usb: core: config: fix validation of wMaxPacketValue entries + (git-fixes). +- bus: mhi: core: Add support for forced PM resume (git-fixes). +- iio: trigger: stm32-timer: fix MODULE_ALIAS (git-fixes). +- iio: at91-sama5d2: Fix incorrect sign extension (git-fixes). +- iio: adc: axp20x_adc: fix charging current reporting on AXP22x + (git-fixes). +- iio: gyro: adxrs290: fix data signedness (git-fixes). +- iio: ad7768-1: Call iio_trigger_notify_done() on error + (git-fixes). +- iio: itg3200: Call iio_trigger_notify_done() on error + (git-fixes). +- iio: dln2: Check return value of devm_iio_trigger_register() + (git-fixes). +- iio: trigger: Fix reference counting (git-fixes). +- iio: dln2-adc: Fix lockdep complaint (git-fixes). +- iio: adc: stm32: fix a current leak by resetting pcsel before + disabling vdda (git-fixes). +- iio: mma8452: Fix trigger reference couting (git-fixes). +- iio: stk3310: Don't return error code in interrupt handler + (git-fixes). +- iio: kxsd9: Don't return error code in trigger handler + (git-fixes). +- iio: ltr501: Don't return error code in trigger handler + (git-fixes). +- iio: accel: kxcjk-1013: Fix possible memory leak in probe and + remove (git-fixes). +- misc: rtsx: Avoid mangling IRQ during runtime PM (git-fixes). +- misc: fastrpc: fix improper packet size calculation (git-fixes). +- bus: mhi: pci_generic: Fix device recovery failed issue + (git-fixes). +- clocksource/drivers/dw_apb_timer_of: Fix probe failure + (git-fixes). +- irqchip/irq-gic-v3-its.c: Force synchronisation when issuing + INVALL (git-fixes). +- irqchip: nvic: Fix offset for Interrupt Priority Offsets + (git-fixes). +- irqchip/aspeed-scu: Replace update_bits with write_bits + (git-fixes). +- irqchip/armada-370-xp: Fix support for Multi-MSI interrupts + (git-fixes). +- irqchip/armada-370-xp: Fix return value of + armada_370_xp_msi_alloc() (git-fixes). +- clocksource/drivers/arc_timer: Eliminate redefined macro error + (git-fixes). +- commit 458f7dd + +- Bbluetooth: btusb: Add another Bluetooth part for Realtek 8852AE + (bsc#1193655). +- Bluetooth: btusb: Add gpio reset way for qca btsoc in + cmd_timeout (bsc#1193655). +- Bluetooth: btusb: Add support for IMC Networks Mediatek + Chip(MT7921) (bsc#1193655). +- Bluetooth: btusb: Add the new support ID for Realtek RTL8852A + (bsc#1193655). +- Bluetooth: btusb: Add protocol for MediaTek bluetooth + devices(MT7922) (bsc#1193655). +- Bluetooth: btusb: Support public address configuration for + MediaTek Chip (bsc#1193655). +- commit aa63c80 + +- i2c: mpc: Use atomic read and fix break condition (git-fixes). +- clk: qcom: sm6125-gcc: Swap ops of ice and apps on sdcc1 + (git-fixes). +- clk: imx: use module_platform_driver (git-fixes). +- clk: qcom: clk-alpha-pll: Don't reconfigure running Trion + (git-fixes). +- clk: qcom: regmap-mux: fix parent clock lookup (git-fixes). +- commit 3747790 + +- ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 + platform (git-fixes). +- ALSA: ctl: Fix copy of updated id with element read/write + (git-fixes). +- ALSA: pcm: oss: Handle missing errors in + snd_pcm_oss_change_params*() (git-fixes). +- ALSA: pcm: oss: Limit the period size to 16MB (git-fixes). +- ALSA: pcm: oss: Fix negative period/buffer sizes (git-fixes). +- commit 70606b1 + +- thermal: int340x: Fix VCoRefLow MMIO bit offset for TGL + (git-fixes). +- PM: runtime: Fix pm_runtime_active() kerneldoc comment + (git-fixes). +- hwmon: (pwm-fan) Ensure the fan going on in .probe() + (git-fixes). +- hwmon: (dell-smm) Fix warning on /proc/i8k creation error + (git-fixes). +- hwmon: (corsair-psu) fix plain integer used as NULL pointer + (git-fixes). +- Revert "PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on + emulated bridge" (git-fixes). +- mmc: renesas_sdhi: initialize variable properly when tuning + (git-fixes). +- ASoC: codecs: wsa881x: fix return values from kcontrol put + (git-fixes). +- ASoC: codecs: wcd934x: return correct value from mixer put + (git-fixes). +- ASoC: codecs: wcd934x: handle channel mappping list correctly + (git-fixes). +- ASoC: qdsp6: q6routing: Fix return value from + msm_routing_put_audio_mixer (git-fixes). +- ASoC: tegra: Use normal system sleep for ADX (git-fixes). +- ASoC: tegra: Use normal system sleep for AMX (git-fixes). +- ASoC: tegra: Use normal system sleep for Mixer (git-fixes). +- ASoC: tegra: Use normal system sleep for MVC (git-fixes). +- ASoC: tegra: Use normal system sleep for SFC (git-fixes). +- ASoC: tegra: Balance runtime PM count (git-fixes). +- ASoC: rt5682: Fix crash due to out of scope stack vars + (git-fixes). +- ALSA: usb-audio: Reorder snd_djm_devices[] entries (git-fixes). +- ALSA: hda/realtek: Fix quirk for TongFang PHxTxX1 (git-fixes). +- drm/amd/display: Fix DPIA outbox timeout after S3/S4/reset + (git-fixes). +- drm/syncobj: Deal with signalled fences in + drm_syncobj_find_fence (git-fixes). +- commit 847c219 + +- can: m_can: make custom bittiming fields const (git-fixes). +- commit 5d86bd5 + +- Update BT fix patch for regression with 8087:0026 device (bsc#1193124) + Also corrected the references and patch description +- commit 4cf2593 + +- scsi: lpfc: Fix non-recovery of remote ports following an + unsolicited LOGO (bsc#1189126). +- commit 2b31676 + +- sched/fair: Adjust the allowed NUMA imbalance when SD_NUMA + spans multiple LLCs (bsc#1192120). +- sched/fair: Use weight of SD_NUMA domain in find_busiest_group + (bsc#1192120). +- commit 818b2ce + +- nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done + (git-fixes). +- can: kvaser_usb: get CAN clock frequency from device + (git-fixes). +- can: kvaser_pciefd: kvaser_pciefd_rx_error_frame(): increase + correct stats->{rx,tx}_errors counter (git-fixes). +- can: m_can: pci: use custom bit timings for Elkhart Lake + (git-fixes). +- can: m_can: pci: fix incorrect reference clock rate (git-fixes). +- can: m_can: Disable and ignore ELO interrupt (git-fixes). +- can: sja1000: fix use after free in ems_pcmcia_add_card() + (git-fixes). +- can: pch_can: pch_can_rx_normal: fix use after free (git-fixes). +- mtd: dataflash: Add device-tree SPI IDs (git-fixes). +- mtd: rawnand: fsmc: Fix timing computation (git-fixes). +- mtd: rawnand: fsmc: Take instruction delay into account + (git-fixes). +- mtd: rawnand: Fix nand_choose_best_timings() on unsupported + interface (git-fixes). +- mtd: rawnand: Fix nand_erase_op delay (git-fixes). +- HID: intel-ish-hid: ipc: only enable IRQ wakeup when requested + (git-fixes). +- soc: fsl: dpio: Unsigned compared against 0 in + qbman_swp_set_irq_coalescing() (git-fixes). +- commit 3db25ff + +- Refresh + patches.suse/0011-PM-hibernate-require-hibernate-snapshot-image-to-be-.patch. +- commit 90d6396 + +- Refresh + patches.suse/0010-PM-hibernate-a-option-to-request-that-snapshot-image.patch. + Update config files. CONFIG_HIBERNATE_VERIFICATION_FORCE is not set +- commit c101ebd + +- unmark + patches.suse/0009-PM-hibernate-prevent-EFI-secret-key-to-be-regenerate.patch +- commit 3684c18 + +- Refresh + patches.suse/0008-PM-hibernate-Generate-and-verify-signature-for-snaps.patch. + Update config files. CONFIG_HIBERNATE_VERIFICATION=y +- commit 402ebf2 + +- Refresh + patches.suse/0007-PM-hibernate-encrypt-hidden-area.patch. +- commit fbd4629 + +- Refresh + patches.suse/0006-efi-allow-user-to-regenerate-secret-key.patch. +- commit a86713d + +- Refresh + patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch. + Update config files. CONFIG_EFI_SECRET_KEY=y +- commit 6e77a16 + +- unmark + patches.suse/0002-hibernate-avoid-the-data-in-hidden-area-to-be-snapsh.patch +- commit f20ffd1 + +- Refresh + patches.suse/0001-security-create-hidden-area-to-keep-sensitive-data.patch. + Update config files. CONFIG_HIDDEN_AREA +- commit f4223b3 + +- drm/i915/dp: Perform 30ms delay after source OUI write + (git-fixes). +- commit ffbcf49 + +- usb: cdns3: gadget: fix new urb never complete if ep cancel + previous requests (git-fixes). +- USB: NO_LPM quirk Lenovo Powered USB-C Travel Hub (git-fixes). +- serial: pl011: Add ACPI SBSA UART match id (git-fixes). +- drm/amd/display: Allow DSC on supported MST branch devices + (git-fixes). +- iwlwifi: mvm: retry init flow if failed (git-fixes). +- ata: libahci: Adjust behavior when StorageD3Enable _DSD is set + (git-fixes). +- ata: ahci: Add Green Sardine vendor ID as board_ahci_mobile + (git-fixes). +- drm/amd/amdgpu: fix potential memleak (git-fixes). +- drm/amd/amdkfd: Fix kernel panic when reset failed and been + triggered again (git-fixes). +- drm/sun4i: fix unmet dependency on RESET_CONTROLLER for + PHY_SUN6I_MIPI_DPHY (git-fixes). +- thermal: core: Reset previous low and high trip during thermal + zone init (git-fixes). +- platform/x86: thinkpad_acpi: Fix WWAN device disabled issue + after S3 deep (git-fixes). +- platform/x86: thinkpad_acpi: Add support for dual fan control + (git-fixes). +- platform/x86: dell-wmi-descriptor: disable by default + (git-fixes). +- net: usb: r8152: Add MAC passthrough support for more Lenovo + Docks (git-fixes). +- mac80211: fix throughput LED trigger (git-fixes). +- mac80211: do not access the IV when it was stripped (git-fixes). +- drm/connector: fix all kernel-doc warnings (git-fixes). +- commit 9be7e24 + +- tty: serial: fsl_lpuart: add timeout for + wait_event_interruptible in .shutdown() (jsc#SLE-19033). +- crypto: caam - save caam memory to support crypto engine retry + mechanism (jsc#SLE-19033). +- crypto: caam - replace this_cpu_ptr with raw_cpu_ptr + (jsc#SLE-19033). +- tty: serial: imx: disable UCR4_OREN in .stop_rx() instead of + .shutdown() (jsc#SLE-19033). +- tty: serial: imx: clear the RTSD status before enable the RTSD + irq (jsc#SLE-19033). +- memory: fsl_ifc: populate child devices without relying on + simple-bus (jsc#SLE-19033). +- soc: fsl: dpio: fix qbman alignment error in the virtualization + context (jsc#SLE-19033). +- net: stmmac: Disable Tx queues when reconfiguring the interface + (jsc#SLE-19033). +- dmaengine: fsl-edma: support edma memcpy (jsc#SLE-19033). +- vfio/fsl-mc: Add per device reset support (jsc#SLE-19033). +- bus/fsl-mc: Add generic implementation for open/reset/close + commands (jsc#SLE-19033). +- ASoC: fsl_spdif: implement bypass mode from in to out + (jsc#SLE-19033). +- ASoC: fsl_rpmsg: add soc specific data structure + (jsc#SLE-19033). +- net: dpaa2: add adaptive interrupt coalescing (jsc#SLE-19033). +- soc: fsl: dpio: add Net DIM integration (jsc#SLE-19033). +- net: dpaa2: add support for manual setup of IRQ coalesing + (jsc#SLE-19033). +- soc: fsl: dpio: add support for irq coalescing per software + portal (jsc#SLE-19033). +- soc: fsl: dpio: extract the QBMAN clock frequency from the + attributes (jsc#SLE-19033). +- spi: Convert NXP flexspi to json schema (jsc#SLE-19033). +- vfio/fsl: Move to the device set infrastructure (jsc#SLE-19033). +- tty: serial: fsl_lpuart: do software reset for imx7ulp and + imx8qxp (jsc#SLE-19033). +- tty: serial: fsl_lpuart: enable two stop bits for lpuart32 + (jsc#SLE-19033). +- tty: serial: fsl_lpuart: check dma_tx_in_progress in tx dma + callback (jsc#SLE-19033). +- net: phy: at803x: finish the phy id checking simplification + (jsc#SLE-19033). +- mmc: sdhci: Correct the tuning command handle for PIO mode + (jsc#SLE-19033). +- commit bad7a12 + +- Refresh + patches.suse/mm-vmscan-Reduce-throttling-due-to-a-failure-to-make-progress.patch. + Mmotm fix for a report stating there was a NULL pointer exception for a + THP-intensive workload. +- commit de8b975 + +- Refresh patches.suse/ipmi-ssif-initialize-ssif_info-client-early.patch. +- commit c1e3bcb + +- bus: fsl-mc: rescan devices if endpoint not found + (jsc#SLE-19033). +- bus: fsl-mc: pause the MC firmware when unloading + (jsc#SLE-19033). +- bus: fsl-mc: pause the MC firmware before IOMMU setup + (jsc#SLE-19033). +- bus: fsl-mc: add .shutdown() op for the bus driver + (jsc#SLE-19033). +- bus: fsl-mc: fully resume the firmware (jsc#SLE-19033). +- bus: fsl-mc: handle DMA config deferral in ACPI case + (jsc#SLE-19033). +- bus: fsl-mc: extend fsl_mc_get_endpoint() to pass interface ID + (jsc#SLE-19033). +- commit 5b2ac90 + +- Revert "drm/i915: Implement Wa_1508744258" (git-fixes). +- commit 78bf6ea + +- blacklist.conf: 1cbf731ef3a1 drm/i915: Fix missing docbook chapters for i915 uapi. +- commit 6777126 + +- xen: remove stray preempt_disable() from PV AP startup code + (bsc#1193524). +- commit 39c2dee + +- xen/pvh: add missing prototype to header (git-fixes). +- commit e49e355 + +- x86/pvh: add prototype for xen_pvh_init() (git-fixes). +- commit 4f8d143 + +- ipmi: ssif: initialize ssif_info->client early (bsc#1193490). +- commit e8af4dd + +- Delete + patches.suse/sched-fair-Adjust-the-allowed-NUMA-imbalance-when-SD_NUMA-spans-multiple-LLCs.patch. +- Delete + patches.suse/sched-fair-Use-weight-of-SD_NUMA-domain-in-find_busiest_group.patch. + New revision pending upstream. +- commit dd182d0 + +- nvme-multipath: Skip not ready namespaces when revalidating paths (bsc#1191793 bsc#1192507 bsc#1192969). +- commit 10dc5b5 + +- blacklist.conf: went in through stable +- commit c751562 + +- drm/connector: Give connector sysfs devices there own + device_type (jsc#SLE-19356). +- commit 5b7ab45 + +- drm/connector: Add a fwnode pointer to drm_connector and + register with ACPI (v2) (jsc#SLE-19356). +- commit f0b908e + +- drm/connector: Add support for out-of-band hotplug notification + (v3) (jsc#SLE19356). +- commit 6fa8d3d + +- drm/connector: Add drm_connector_find_by_fwnode() function (v3) + (jsc#SLE-19356). +- commit f8f4127 + +- usb: typec: ucsi: Don't stop alt mode registration on busy + condition (jsc#SLE-19356). +- commit d1dd3c7 + +- usb: typec: ucsi: Always cancel the command if PPM reports + BUSY condition (jsc#SLE-19356). +- commit 7d740d2 + +- usb: typec: altmodes/displayport: Notify drm subsys of hotplug + events (git-fixes). +- commit 5f1a962 + +- Remove patches.suse/nvme-add-sibling-to-list-after-full-initialization.patch + As it turns out this fix is not correct. +- commit bb77a4c + +- lpfc: Reintroduce old IRQ probe logic (bsc#1183897). +- commit 00a7ff5 + +- Update + patches.suse/powerpc-security-Use-a-mutex-for-interrupt-exit-code.patch + (stable-5.14.19 bsc#1193470 ltc#195599). +- commit a8808ca + +- Refresh + patches.suse/0004-MODSIGN-checking-the-blacklisted-hash-before-loading.patch. +- commit 4f48964 + +- net/mlx4_en: Fix an use-after-free bug in + mlx4_en_try_alloc_resources() (jsc#SLE-19256). +- net: qlogic: qlcnic: Fix a NULL pointer dereference in + qlcnic_83xx_add_rings() (git-fixes). +- net/mlx5e: SHAMPO, Fix constant expression result + (jsc#SLE-19253). +- net/mlx5: Fix access to a non-supported register + (jsc#SLE-19253). +- net/mlx5: Fix too early queueing of log timestamp work + (jsc#SLE-19253). +- net/mlx5: Fix use after free in mlx5_health_wait_pci_up + (jsc#SLE-19253). +- net/mlx5: E-Switch, Use indirect table only if all destinations + support it (jsc#SLE-19253). +- net/mlx5: E-Switch, Check group pointer before reading bw_share + value (jsc#SLE-19253). +- net/mlx5: E-Switch, fix single FDB creation on BlueField + (jsc#SLE-19253). +- net/mlx5: E-switch, Respect BW share of the new group + (jsc#SLE-19253). +- net/mlx5: Lag, Fix recreation of VF LAG (jsc#SLE-19253). +- net/mlx5: Move MODIFY_RQT command to ignore list in internal + error state (jsc#SLE-19253). +- net/mlx5e: Sync TIR params updates against concurrent + create/modify (jsc#SLE-19253). +- net/mlx5e: Fix missing IPsec statistics on uplink representor + (jsc#SLE-19253). +- net/mlx5e: IPsec: Fix Software parser inner l3 type setting + in case of encapsulation (jsc#SLE-19253). +- ice: xsk: clear status_error0 for each allocated desc + (jsc#SLE-18375). +- net/mlx4_en: Update reported link modes for 1/10G + (jsc#SLE-19256). +- net: qed: fix the array may be out of bound (jsc#SLE-19001). +- igb: fix netpoll exit with traffic (jsc#SLE-18379). +- net: chelsio: cxgb4vf: Fix an error code in cxgb4vf_pci_probe() + (jsc#SLE-18992). +- ice: avoid bpf_prog refcount underflow (jsc#SLE-18375). +- ice: fix vsi->txq_map sizing (jsc#SLE-18375). +- iavf: Fix VLAN feature flags after VFR (jsc#SLE-18385). +- iavf: Fix refreshing iavf adapter stats on ethtool request + (jsc#SLE-18385). +- iavf: Fix deadlock occurrence during resetting VF interface + (jsc#SLE-18385). +- iavf: Prevent changing static ITR values if adaptive moderation + is on (jsc#SLE-18385). +- igb: unbreak I2C bit-banging on i350 (jsc#SLE-18379). +- commit 24091ea + +- Delete patches.suse/0003-MODSIGN-load-blacklist-from-MOKx.patch. + The ebd9c2ae369a45 patch introduced mokx support since v5.13 on + upstream. Let's remove this downstream patch. (fate#316531, bnc#854875) +- commit cd4e1c6 + +- Delete + patches.suse/0001-efi-add-a-function-to-convert-the-status-code-to-a-s.patch. + Delete + patches.suse/0002-efi-show-error-messages-only-when-loading-certificat.patch + Because upstream patch ebd9c2ae369a "efi: Only print errors about failing to + get certs if EFI vars are found" already introduced new behavior of log. So + those two SUSE downstream patches can be removed. (fate#316531, bnc#854875) +- commit f98e665 + +- Refresh + patches.suse/0001-MODSIGN-do-not-load-mok-when-secure-boot-disabled.patch. +- Refresh patches.suse/0001-MODSIGN-do-not-load-mok-when-secure-boot-disabled.patch + merge with patches.suse/0001-integrity-use-arch_ima_get_secureboot-instead-of-che.patch. + (bsc#1188366) +- Delete + patches.suse/0001-integrity-use-arch_ima_get_secureboot-instead-of-che.patch. +- commit f00ef99 + +- blacklist.conf: Add git-fixes patches checked into perf userspace +- commit 032d842 + +- perf: Ignore sigtrap for tracepoints destined for other tasks + (git-fixes). +- perf/x86/intel/uncore: Fix IIO event constraints for Snowridge + (git-fixes). +- perf/x86/intel/uncore: Fix IIO event constraints for Skylake + Server (git-fixes). +- perf/x86/intel/uncore: Fix filter_tid mask for CHA events on + Skylake Server (git-fixes). +- perf/x86/vlbr: Add c->flags to vlbr event constraints + (git-fixes). +- perf/x86/intel/uncore: Fix Intel SPR M3UPI event constraints + (git-fixes). +- perf/x86/intel/uncore: Fix Intel SPR M2PCIE event constraints + (git-fixes). +- perf/x86/intel/uncore: Fix Intel SPR IIO event constraints + (git-fixes). +- perf/x86/intel/uncore: Fix Intel SPR CHA event constraints + (git-fixes). +- commit 1cfbe90 + +- x86/xen: Add xenpv_restore_regs_and_return_to_usermode() + (bsc#1190497). +- commit 00aee08 + +- tracing/histograms: String compares should not care about + signed values (git-fixes). +- commit fa5ea58 + +- tracing: Fix pid filtering when triggers are attached + (git-fixes). +- commit 3c359a7 + +- blacklist.conf: 27ff768fa21c ("tracing: Test the 'Do not trace this pid' case in create event") + Not needed. The backported "broken" commit is already fixed. +- commit 2c0434d + +- tracing: Check pid filtering when creating events (git-fixes). +- commit 90d7fd0 + +- arm64: cpufeature: Export this_cpu_has_cap helper + (jsc#SLE-19046). +- commit fd033df + +- coresight: Use devm_bitmap_zalloc when applicable (jsc#SLE-19046). +- arm64: errata: Enable TRBE workaround for write to out-of-range address (jsc#SLE-19046). +- arm64: errata: Enable workaround for TRBE overwrite in FILL mode (jsc#SLE-19046). +- coresight: trbe: Work around write to out of range (jsc#SLE-19046). +- coresight: trbe: Make sure we have enough space (jsc#SLE-19046). +- coresight: trbe: Add a helper to determine the minimum buffer size (jsc#SLE-19046). +- coresight: trbe: Workaround TRBE errata overwrite in FILL mode (jsc#SLE-19046). +- coresight: trbe: Add infrastructure for Errata handling (jsc#SLE-19046). +- coresight: trbe: Allow driver to choose a different alignment (jsc#SLE-19046). +- coresight: trbe: Decouple buffer base from the hardware base (jsc#SLE-19046). +- coresight: trbe: Add a helper to pad a given buffer area (jsc#SLE-19046). +- coresight: trbe: Add a helper to calculate the trace generated (jsc#SLE-19046). +- coresight: trbe: Prohibit trace before disabling TRBE (jsc#SLE-19046). +- coresight: trbe: End the AUX handle on truncation (jsc#SLE-19046). +- coresight: trbe: Do not truncate buffer on IRQ (jsc#SLE-19046). +- coresight: trbe: Fix handling of spurious interrupts (jsc#SLE-19046). +- coresight: trbe: irq handler: Do not disable TRBE if no action is needed (jsc#SLE-19046). +- coresight: trbe: Unify the enabling sequence (jsc#SLE-19046). +- coresight: trbe: Drop duplicate TRUNCATE flags (jsc#SLE-19046). +- coresight: trbe: Ensure the format flag is always set (jsc#SLE-19046). +- coresight: etm-pmu: Ensure the AUX handle is valid (jsc#SLE-19046). +- coresight: etm4x: Use Trace Filtering controls dynamically (jsc#SLE-19046). +- coresight: etm4x: Save restore TRFCR_EL1 (jsc#SLE-19046). +- coresight: Don't immediately close events that are run on invalid CPU/sink combos (jsc#SLE-19046). +- coresight: tmc-etr: Speed up for bounce buffer in flat mode (jsc#SLE-19046). +- coresight: Update comments for removing cs_etm_find_snapshot() (jsc#SLE-19046). +- coresight: tmc-etr: Use perf_output_handle::head for AUX ring buffer (jsc#SLE-19046). +- coresight: tmc-etf: Add comment for store ordering (jsc#SLE-19046). +- coresight: tmc-etr: Add barrier after updating AUX ring buffer (jsc#SLE-19046). +- coresight: tmc: Configure AXI write burst size (jsc#SLE-19046). +- arm64: errata: Add detection for TRBE write to out-of-range (jsc#SLE-19046). +- arm64: errata: Add workaround for TSB flush failures (jsc#SLE-19046). +- arm64: errata: Add detection for TRBE overwrite in FILL mode (jsc#SLE-19046). +- arm64: Add Neoverse-N2, Cortex-A710 CPU part definition (jsc#SLE-19046). +- commit d3c2191 + +- Update + patches.suse/RDMA-cma-Do-not-change-route.addr.src_addr.ss_family.patch + (stable-5.14.10 bsc#1192845 CVE-2021-43975). + Added CVE reference +- commit 8142e42 + +- atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait + (bsc#1192845 CVE-2021-43975). +- commit 283c0a0 + +- perf: qcom_l2_pmu: ACPI: Use ACPI_COMPANION() directly + (git-fixes). +- drivers/perf: thunderx2_pmu: Change data in size + tx2_uncore_event_update() (git-fixes). +- drivers/perf: hisi: Fix PA PMU counter offset (git-fixes). +- KVM: arm64: Fix PMU probe ordering (git-fixes). +- KVM: arm64: perf: Replace '0xf' instances with + ID_AA64DFR0_PMUVER_IMP_DEF (git-fixes). +- commit 91fb475 + +- usb: typec: altmodes/displayport: Make dp_altmode_notify() + more generic (git-fixes). +- commit 5136280 + +- x86/entry: Use the correct fence macro after swapgs in kernel + CR3 (bsc#1190497). +- commit e1ed0c4 + +- Refresh + patches.suse/s390-lock-down-kernel-in-secure-boot-mode.patch. +- commit 2d12b8e + +- x86/entry: Add a fence for kernel entry SWAPGS in + paranoid_entry() (bsc#1190497). +- commit 69d2c59 + +- unmark patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch +- commit 36647a7 + +- Refresh + patches.suse/powerpc-lock-down-kernel-in-secure-boot-mode.patch. +- commit e4b09e3 + +- unmark + patches.suse/0004-efi-Lock-down-the-kernel-at-the-integrity-level-if-b.patch +- commit 0cf1770 + +- Refresh + patches.suse/0003-efi-Lock-down-the-kernel-if-booted-in-secure-boot-mode.patch. +- Update config files. x86_64, arm64, ppc64le, s390x + - Add CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT=y +- commit 6189d45 + +- Refresh + patches.suse/0002-efi-Add-an-EFI_SECURE_BOOT-flag-to-indicate-secure-boot-mode.patch. +- commit f2a5454 + +- Refresh + patches.suse/0001-security-lockdown-expose-a-hook-to-lock-the-kernel-down.patch. +- commit f2c3a99 + +- usb: cdnsp: Fix a NULL pointer dereference in + cdnsp_endpoint_init() (git-fixes). +- usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect + (git-fixes). +- serial: 8250_bcm7271: UART errors after resuming from S2 + (git-fixes). +- serial: 8250_pci: rewrite pericom_do_set_divisor() (git-fixes). +- serial: 8250_pci: Fix ACCES entries in pci_serial_quirks array + (git-fixes). +- serial: 8250: Fix RTS modem control while in rs485 mode + (git-fixes). +- serial: tegra: Change lower tolerance baud rate limit for + tegra20 and tegra30 (git-fixes). +- serial: liteuart: fix minor-number leak on probe errors + (git-fixes). +- serial: liteuart: fix use-after-free and memleak on unbind + (git-fixes). +- serial: liteuart: Fix NULL pointer dereference in ->remove() + (git-fixes). +- vgacon: Propagate console boot parameters before calling + `vc_resize' (git-fixes). +- tty: serial: msm_serial: Deactivate RX DMA for polling support + (git-fixes). +- serial: core: fix transmit-buffer reset and memleak (git-fixes). +- commit 3fabb98 + +- Move upstreamed USB fix into sorted section +- commit e02363b + +- ALSA: hda/cs8409: Set PMSG_ON earlier inside cs8409 driver + (git-fixes). +- commit e3352ca + +- ipmi: msghandler: Make symbol 'remove_work_wq' static + (git-fixes). +- commit 992fab0 + +- drm/vc4: kms: Fix previous HVS commit wait (git-fixes). +- drm/vc4: kms: Don't duplicate pending commit (git-fixes). +- drm/vc4: kms: Clear the HVS FIFO commit pointer once done + (git-fixes). +- drm/vc4: kms: Add missing drm_crtc_commit_put (git-fixes). +- drm/vc4: kms: Fix return code check (git-fixes). +- drm/vc4: kms: Wait for the commit before increasing our clock + rate (git-fixes). +- drm/msm: Do hw_init() before capturing GPU state (git-fixes). +- drm/msm/a6xx: Allocate enough space for GMU registers + (git-fixes). +- rt2x00: do not mark device gone on EPROTO errors during start + (git-fixes). +- mt76: mt7915: fix NULL pointer dereference in + mt7915_get_phy_mode (git-fixes). +- iwlwifi: Fix memory leaks in error handling path (git-fixes). +- iwlwifi: fix warnings produced by kernel debug options + (git-fixes). +- net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of + "0" if no IRQ is available (git-fixes). +- ipmi: Move remove_work to dedicated workqueue (git-fixes). +- commit 7d5a7f0 + +- i2c: stm32f7: stop dma transfer in case of NACK (git-fixes). +- i2c: stm32f7: recover the bus on access timeout (git-fixes). +- i2c: stm32f7: flush TX FIFO upon transfer errors (git-fixes). +- i2c: cbus-gpio: set atomic transfer callback (git-fixes). +- dma-buf: system_heap: Use 'for_each_sgtable_sg' in pages free + flow (git-fixes). +- atlantic: Remove warn trace message (git-fixes). +- atlantic: Fix statistics logic for production hardware + (git-fixes). +- atlantic: Add missing DIDs and fix 115c (git-fixes). +- atlantic: Fix to display FW bundle version instead of FW mac + version (git-fixes). +- atlatnic: enable Nbase-t speeds with base-t (git-fixes). +- atlantic: Increase delay for fw transactions (git-fixes). +- ASoC: rk817: Add module alias for rk817-codec (git-fixes). +- ASoC: tegra: Fix kcontrol put callback in Mixer (git-fixes). +- ASoC: tegra: Fix kcontrol put callback in ADX (git-fixes). +- ASoC: tegra: Fix kcontrol put callback in AMX (git-fixes). +- ASoC: tegra: Fix kcontrol put callback in SFC (git-fixes). +- ASoC: tegra: Fix kcontrol put callback in MVC (git-fixes). +- ASoC: tegra: Fix kcontrol put callback in AHUB (git-fixes). +- ASoC: tegra: Fix kcontrol put callback in DSPK (git-fixes). +- ASoC: tegra: Fix kcontrol put callback in DMIC (git-fixes). +- ASoC: tegra: Fix kcontrol put callback in I2S (git-fixes). +- ASoC: tegra: Fix kcontrol put callback in ADMAIF (git-fixes). +- ASoC: tegra: Fix wrong value type in MVC (git-fixes). +- ASoC: tegra: Fix wrong value type in SFC (git-fixes). +- ASoC: tegra: Fix wrong value type in DSPK (git-fixes). +- ASoC: tegra: Fix wrong value type in DMIC (git-fixes). +- ASoC: tegra: Fix wrong value type in I2S (git-fixes). +- ASoC: tegra: Fix wrong value type in ADMAIF (git-fixes). +- ALSA: intel-dsp-config: add quirk for CML devices based on + ES8336 codec (git-fixes). +- commit d6b0e1d + +- scsi: core: sysfs: Fix setting device state to SDEV_RUNNING + (git-fixes). +- commit 713d069 + +- xhci: Fix commad ring abort, write all 64 bits to CRCR register + (bsc#1192569). +- commit e4fbc61 + +- ibmvnic: drop bad optimization in reuse_tx_pools() (bsc#1193349 + ltc#195568). +- ibmvnic: drop bad optimization in reuse_rx_pools() (bsc#1193349 + ltc#195568). +- commit 667806f + +- Bluetooth: Apply initial command workaround for more Intel chips + (bsc#83f2dafe2a62). +- commit e1329be + +- drm/i915/hdmi: Turn DP++ TMDS output buffers back on in + encoder->shutdown() (git-fixes). +- commit 905574f + +- Refresh + patches.suse/drm-i915-Extend-the-async-flip-VT-d-w-a-to-skl-bxt.patch. + Alt-commit +- commit afad9d5 + +- Refresh + patches.suse/drm-i915-gvt-fix-the-usage-of-ww-lock-in-gvt-schedul.patch. + Alt-commit +- commit 0475b7e + +- Refresh + patches.suse/drm-amdgpu-Fix-even-more-out-of-bound-writes-from-de.patch. + Alt-commit. Also updated the patch-mainline tag. +- commit ce4a8c2 + +- Refresh + patches.suse/drm-amd-display-Fix-deadlock-when-falling-back-to-v2.patch. + Alt-commit +- commit fadf24f + +- drm/amdgpu/display: add quirk handling for stutter mode + (git-fixes). +- commit 9ae484d + +- fuse: release pipe buf after last use (bsc#1193318). +- commit fad20a3 + +- drm/msm/dsi: fix wrong type in msm_dsi_host (git-fixes). +- commit 9d4cd6e + +- drm/msm/dsi: do not enable irq handler before powering up the + host (git-fixes). +- commit 21c53a3 + +- mm: vmscan: Reduce throttling due to a failure to make progress + (bsc#1190208 (MM functional and performance backports)). +- commit c9d43e5 + +- sched,x86: Fix L2 cache mask (bsc#1193302). +- commit 512a2f3 + +- sched/fair: Adjust the allowed NUMA imbalance when SD_NUMA + spans multiple LLCs (bsc#1192120). +- sched/fair: Use weight of SD_NUMA domain in find_busiest_group + (bsc#1192120). +- commit 67de029 + +- Delete + patches.suse/sched-fair-Adjust-the-allowed-NUMA-imbalance-when-SD_NUMA-spans-multiple-LLCS.patch. +- commit 79c1d08 + +- drm/msm/dsi: rename dual DSI to bonded DSI (git-fixes). +- commit 383555c + +- drm/amd/pm: Fix incorrect power limit readback in smu11 if + POWER_SOURCE_DC (git-fixes). +- commit c04f48c + +- drm/i915: Replace the unconditional clflush with + drm_clflush_virt_range() (git-fixes). +- commit bf0c1da + +- Refresh + patches.suse/drm-i915-Remove-memory-frequency-calculation.patch. + Alt-commit +- commit 2650497 + +- Refresh + patches.suse/0001-drm-i915-guc-drop-guc_communication_enabled.patch. + Alt-commit +- commit 01f68ee + +- blacklist.conf: faf890985e30 drm/i915: Fix syncmap memory leak +- commit 62955ef + +- Refresh + patches.suse/drm-amdgpu-handle-the-case-of-pci_channel_io_frozen-.patch. + Alt-commit +- commit 3b7e322 + +- staging: rtl8723bs: remove a second possible deadlock + (git-fixes). +- commit e15a622 + +- USB: serial: option: add Fibocom FM101-GL variants (git-fixes). +- USB: serial: option: add Telit LE910S1 0x9200 composition + (git-fixes). +- mmc: sdhci: Fix ADMA for PAGE_SIZE >= 64KiB (git-fixes). +- drm/nouveau: recognise GA106 (git-fixes). +- drm/amdgpu: IH process reset count when restart (git-fixes). +- PCI: aardvark: Simplify initialization of rootcap on virtual + bridge (git-fixes). +- PCI: aardvark: Implement re-issuing config requests on CRS + response (git-fixes). +- staging: rtl8723bs: remove a third possible deadlock + (git-fixes). +- staging: rtl8723bs: remove possible deadlock when disconnect + (v2) (git-fixes). +- commit cbbc2ed + +- rpm/kernel-binary.spec.in: don't strip vmlinux again (bsc#1193306) + After usrmerge, vmlinux file is not named vmlinux-, but simply + vmlinux. And this is not reflected in STRIP_KEEP_SYMTAB we set. + So fix this by removing the dash... +- commit 83af88d + +- Refresh + patches.suse/drm-amdkfd-fix-a-potential-ttm-sg-memory-leak.patch. + Alt-commit +- commit 18c0378 + +- Refresh + patches.suse/drm-amdkfd-fix-dma-mapping-leaking-warning.patch. + Alt-commit +- commit d513741 + +- Refresh + patches.suse/0001-drm-amd-display-Fix-white-screen-page-fault-for-gpuv.patch. + Alt-commit +- commit d8362fa + +- Refresh + patches.suse/0001-drm-amdgpu-fix-use-after-free-during-BO-move.patch. + Alt-commit +- commit 6231070 + +- Refresh + patches.suse/drm-i915-tc-Fix-TypeC-port-init-resume-time-sanitiza.patch. + Alt-commit +- commit 75478ec + +- Refresh + patches.suse/0425-drm-i915-Update-memory-bandwidth-parameters.patch. + Alt-commit +- commit 20108dd + +- blacklist.conf: b6dfa4161729 drm/i915/dp: Drop redundant debug print +- commit c59ba00 + +- Refresh + patches.suse/0001-drm-i915-dp-return-proper-DPRX-link-training-result.patch. + Alt-commit +- commit 70fb6b8 + +- blacklist.conf: d8959fb33890 drm/i915/dp: remove superfluous EXPORT_SYMBOL() +- commit 83d3fca + +- blacklist.conf: f6864b27d6d3 drm/i915/edp: fix eDP MSO pipe sanity checks for ADL-P +- commit fc8a263 + +- blacklist.conf: 8b46cc6577f4 drm/i915: Tweaked Wa_14010685332 for all PCHs +- commit 8d282e0 + +- blacklist.conf: c5589bb5dccb drm/i915: Only access SFC_DONE when media domain is not fused off +- commit e46b9ce + +- blacklist.conf: 70418a68713c drm/i915/display: Fix the 12 BPC bits for PIPE_MISC reg +- commit 0ee0cf4 + +- rtw89: add AXIDMA and TX FIFO dump in mac_mem_dump + (bsc#1188303). +- rtw89: fix potentially access out of range of RF register array + (bsc#1188303). +- rtw89: remove unneeded variable (bsc#1188303). +- rtw89: remove unnecessary conditional operators (bsc#1188303). +- rtw89: update tx power limit/limit_ru tables to R54 + (bsc#1188303). +- rtw89: update rtw89 regulation definition to R58-R31 + (bsc#1188303). +- rtw89: fill regd field of limit/limit_ru tables by enum + (bsc#1188303). +- commit bdba716 + +- Update rtw89 fix with the upstream patch from wireless-drivers tree +- commit 70a5c33 + +- mwifiex: Fix skb_over_panic in mwifiex_usb_recv() + (CVE-2021-43976 bsc#1192847). +- commit 4829170 + +- nvme-pci: add NO APST quirk for Kioxia device (git-fixes). +- commit 86d3c56 + +- crypto: dh - call dh_init() after drbg_init() and jent_mod_init() + (jsc#SLE-21132,bsc#1191256). +- commit 61dfd91 + +- crypto: dh - implement FIPS PCT (jsc#SLE-21132,bsc#1191256). +- commit 9f91254 + +- crypto: dh - accept only approved safe-prime groups in FIPS mode + (jsc#SLE-21132,bsc#1191256). +- commit 2d1a8e9 + +- crypto: dh - try to match domain parameters to a known + safe-prime group (jsc#SLE-21132,bsc#1191256). +- commit 26a335b + +- crypto: dh - calculate Q from P for the full public key + verification (jsc#SLE-21132,bsc#1191256). +- commit b4037c4 + +- crypto: dh - store group id in dh-generic's dh_ctx + (jsc#SLE-21132,bsc#1191256). +- commit f0486a1 + +- lib/mpi: export mpi_rshift (jsc#SLE-21132,bsc#1191256). +- commit 4310d0e + +- crypto: testmgr - add DH test vectors for key generation + (jsc#SLE-21132,bsc#1191256). +- commit 54bd083 + +- crypto: dh - introduce support for ephemeral key generation + to qat driver (jsc#SLE-21132,bsc#1191256). +- commit 7368cee + +- crypto: dh - introduce support for ephemeral key generation + to hpre driver (jsc#SLE-21132,bsc#1191256). +- commit 2b8dc8a + +- crypto: dh - introduce support for ephemeral key generation + to dh-generic (jsc#SLE-21132,bsc#1191256). +- commit 3773460 + +- crypto: dh - implement private key generation primitive + (jsc#SLE-21132,bsc#1191256). +- commit 6465374 + +- crypto: testmgr - run only subset of DH vectors based on config + (jsc#SLE-21132,bsc#1191256). +- commit ac8f2bb + +- crypto: testmgr - add DH RFC 3526 modp2048 test vector + (jsc#SLE-21132,bsc#1191256). +- commit d59cad5 + +- crypto: dh - introduce RFC 3526 safe-prime groups + (jsc#SLE-21132,bsc#1191256). +- Update config files. +- commit 7ce8fbd + +- crypto: testmgr - add DH RFC 7919 ffdhe3072 test vector + (jsc#SLE-21132,bsc#1191256). +- commit 66277b9 + +- crypto: dh - introduce RFC 7919 safe-prime groups + (jsc#SLE-21132,bsc#1191256). +- Update config files. +- commit ffde948 + +- hwmon: (dell-smm-hwmon) Fix fan mutliplier detection for 3rd + fan (git-fixes). +- commit fc58f7c + +- hwmon: (dell-smm-hwmon) Convert to + devm_hwmon_device_register_with_info() (git-fixes). +- commit 8eb28b7 + +- crypto: dh - optimize domain parameter serialization for + well-known groups (jsc#SLE-21132,bsc#1191256). +- commit 0e9a462 + +- crypto: dh - constify struct dh's pointer members + (jsc#SLE-21132,bsc#1191256). +- commit cd58585 + +- crypto: dh - remove struct dh's ->q member + (jsc#SLE-21132,bsc#1191256). +- commit ca28b3e + +- hwmon: (dell-smm-hwmon) Move variables into a driver private + data structure (git-fixes). +- commit a97cfe2 + +- hwmon: (dell-smm-hwmon) Use devm_add_action_or_reset() + (git-fixes). +- commit 12a377a + +- hwmon: (dell-smm-hwmon) Mark functions as __init (git-fixes). +- commit a95801d + +- ptp: ocp: add COMMON_CLK dependency (git-fixes). +- commit c11a32b + +- hwmon: (dell-smm-hwmon) Use platform device (git-fixes). +- commit f051ae7 + +- mm: Add kvrealloc() (git-fixes). +- commit ef97709 + +- crypto: jitter - quit sample collection loop upon RCT failure + (jsc#SLE-21132,bsc#1191259). +- commit 990cfda + +- crypto: jitter - don't limit ->health_failure check to FIPS mode + (jsc#SLE-21132,bsc#1191259). +- commit 583d284 + +- crypto: drbg - ignore jitterentropy errors if not in FIPS mode + (jsc#SLE-21132,bsc#1191259). +- commit a216735 + +- mt76: drop MCU header size from buffer size in + __mt76_mcu_send_firmware (git-fixes). +- commit 3d10da9 + +- mt76: introduce __mt76_mcu_send_firmware routine (git-fixes). +- commit a54556a + +- x86/hyperv: Move required MSRs check to initial platform probing + (git-fixes). +- x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V + setup fails (git-fixes). +- Drivers: hv: balloon: Use VMBUS_RING_SIZE() wrapper for + dm_ring_size (git-fixes). +- net: mana: Fix spelling mistake "calledd" -> "called" + (jsc#SLE-18779, bsc#1185726). +- PCI: hv: Remove unnecessary use of %hx (git-fixes). +- Drivers: hv : vmbus: Adding NULL pointer check (git-fixes). +- x86/hyperv: Remove duplicate include (git-fixes). +- x86/hyperv: Remove duplicated include in hv_init (git-fixes). +- Drivers: hv: vmbus: Remove unused code to check for subchannels + (git-fixes). +- net: mana: Support hibernation and kexec (jsc#SLE-18779, + bsc#1185726). +- net: mana: Improve the HWC error handling (jsc#SLE-18779, + bsc#1185726). +- net: mana: Report OS info to the PF driver (jsc#SLE-18779, + bsc#1185726). +- net: mana: Fix the netdev_err()'s vPort argument in + mana_init_port() (jsc#SLE-18779, bsc#1185726). +- net: mana: Allow setting the number of queues while the NIC + is down (jsc#SLE-18779, bsc#1185726). +- hv_netvsc: Add comment of netvsc_xdp_xmit() (git-fixes). +- hv_netvsc: use netif_is_bond_master() instead of open code + (git-fixes). +- net: mana: Use kcalloc() instead of kzalloc() (jsc#SLE-18779, + bsc#1185726). +- net: use eth_hw_addr_set() (jsc#SLE-19256). +- commit 64933c8 + +- Revert "drm/i915: Fix missing docbook chapters for i915 uapi" + This reverts commit d33eb4b2a0b7422c9dc94bcd23d0d9ef458f2f77. +- commit 6e0d735 + +- bpf: Stop caching subprog index in the bpf_pseudo_func insn + (git-fixes). +- commit 76c87a6 + +- usb: ohci: disable start-of-frame interrupt in ohci_rh_suspend + (git-fixes). +- commit 474865f + +- Refresh + patches.suse/0410-drm-i915-adl_p-Also-disable-underrun-recovery-with-M.patch. + Add alt-commit tag for duplicate +- commit b076848 + +- drm/i915/guc: Reset LRC descriptor if register returns -ENODEV + (git-fixes). +- commit 65e549a + +- drm/i915/guc: Take context ref when cancelling request + (git-fixes). +- commit 506a6d9 + +- drm/i915/guc: Copy whole golden context, set engine state size + of subset (git-fixes). +- commit b1fdf4a + +- drm/i915/guc: Don't enable scheduling on a banned context, + guc_id invalid, not registered (git-fixes). +- commit c06d135 + +- drm/i915/guc: Kick tasklet after queuing a request (git-fixes). +- commit 35e2726 + +- drm/i915/guc: Workaround reset G2H is received after schedule + done G2H (git-fixes). +- commit e25f4c3 + +- drm/i915/guc: Don't drop ce->guc_active.lock when unwinding + context (git-fixes). +- commit 380814a + +- drm/i915/guc: Unwind context requests in reverse order + (git-fixes). +- commit b4b0087 + +- drm/i915/guc: Fix outstanding G2H accounting (git-fixes). +- commit bd00cfe + +- drm/i915/guc: Fix blocked context accounting (git-fixes). +- commit 5787530 + +- drm/i915: Fix missing docbook chapters for i915 uapi + (git-fixes). +- commit d33eb4b + +- config: set the default cpufreq governor on x86 to "ondemand" (bsc#1190923) + "Ondemand" has been the default cpufreq governor in previous SLES + releases. Upstream has now set the default to be "schedutil" on all x86_64 + systems except for the most recent Intel CPUs (see a00ec3874e7d3 ("cpufreq: + intel_pstate: Select schedutil as the default governor")). We estimate this + choice carries a notable performance regression. + The direct effect of this patch is to restore "ondemand" as default + governor on AMD systems. + Setting CPU_FREQ_DEFAULT_GOV_CONSERVATIVE=n explicitely is necessary otherwise + "make syncconfig" thinks that option is new and stops the build, if no silent + config updates are permitted. +- commit 5f12495 + +- Revert "cpufreq: Avoid configuring old governors as default + with intel_pstate" (bsc#1190923). +- commit a145265 + +- net: hns3: fix incorrect components info of ethtool --reset + command (bsc#1190336). +- net: hns3: fix one incorrect value of page pool info when + queried by debugfs (bsc#1190336). +- net: hns3: add check NULL address for page pool (bsc#1190336). +- net: hns3: fix VF RSS failed problem after PF enable multi-TCs + (bsc#1190336). +- ethtool: ioctl: fix potential NULL deref in + ethtool_set_coalesce() (jsc#SLE-19253). +- nixge: fix mac address error handling again (jsc#SLE-19253). +- ptp: ocp: Fix a couple NULL vs IS_ERR() checks (jsc#SLE-19253). +- RDMA/core: Set sgtable nents when using ib_dma_virt_map_sg() + (jsc#SLE-19249). +- ethernet: fix up ps3_gelic_net.c for "ethernet: use + eth_hw_addr_set()" (jsc#SLE-19256). +- ethernet: ehea: add missing cast (jsc#SLE-19256). +- dma-mapping: fix the kerneldoc for dma_map_sgtable() + (jsc#SLE-19249). +- dma-mapping: fix the kerneldoc for dma_map_sg_attrs + (jsc#SLE-19249). +- ptp: ocp: Have Kconfig select NET_DEVLINK (jsc#SLE-19253). +- commit 5d25d7c + +- iommu/vt-d: Fix unmap_pages support (git-fixes). +- commit 7a9b51b + +- rpm/modules.fips: remove des3 and des (jsc#SLE-21132,bsc#1191261). + DES3 has been marked as not approved for FIPS now, remove it + from modules.fips. +- commit e1ec547 + +- iommu/rockchip: Fix PAGE_DESC_HI_MASKs for RK3568 (git-fixes). +- iommu/dma: Account for min_align_mask w/swiotlb (git-fixes). +- swiotlb: Support aligned swiotlb buffers (git-fixes). +- iommu/dma: Check CONFIG_SWIOTLB more broadly (git-fixes). +- iommu/dma: Fold _swiotlb helpers into callers (git-fixes). +- iommu/dma: Skip extra sync during unmap w/swiotlb (git-fixes). +- iommu/dma: Fix sync_sg with swiotlb (git-fixes). +- iommu/vt-d: Drop "0x" prefix from PCI bus & device addresses + (git-fixes). +- iommu/amd: Remove iommu_init_ga() (git-fixes). +- commit 27f96b2 + +- crypto: ecdh - implement FIPS PCT (jsc#SLE-21132,bsc#1191256). +- commit 4be783b + +- crypto: populate downstream list of drivers unapproved for + FIPS mode usage (jsc#SLE-21132,bsc#1191270). +- commit cf79007 + +- crypto: implement downstream solution for disabling drivers + in FIPS mode (jsc#SLE-21132,bsc#1191270). +- commit 267194d + +- hugetlbfs: flush TLBs correctly after huge_pmd_unshare + (bsc#1192946 CVE-2021-4002). +- commit 9a6f8ea + +- locking/rwsem: Optimize down_read_trylock() under highly + contended case (bsc#1190137). +- locking/rwsem: Make handoff bit handling more consistent + (bsc#1190137). +- shm: extend forced shm destroy to support objects from several + IPC nses (git-fixes). +- net: stats: Read the statistics in ___gnet_stats_copy_basic() + instead of adding (bsc#1189998). +- lib/logic_iomem: fix sparse warnings (git-fixes). +- net/sched: cls_api, reset flags on replay (bsc#1189998). +- commit 2753e49 + +- Move upstreamed xhci patch into sorted section +- commit e524866 + +- crypto: dh - limit key size to 2048 in FIPS mode + (jsc#SLE-21132,bsc#1193136). +- commit 5ff1146 + +- crypto: rsa - limit key size to 2048 in FIPS mode + (jsc#SLE-21132,bsc#1193136). +- commit e13c64c + +- crypto: des - disallow des3 in FIPS mode + (jsc#SLE-21132,bsc#1191261). +- commit 5cba32d + +- crypto: jitter - consider 32 LSB for APT + (jsc#SLE-21132,bsc#1191259). +- commit e52f765 + +- crypto: drbg - reseed 'nopr' drbgs periodically from + get_random_bytes() (jsc#SLE-21132,bsc#1191259). +- commit 9772beb + +- crypto: drbg - make drbg_prepare_hrng() handle jent + instantiation errors (jsc#SLE-21132,bsc#1191259). +- commit 5d82af9 + +- crypto: drbg - make reseeding from get_random_bytes() + synchronous (jsc#SLE-21132,bsc#1191259). +- commit c503088 + +- crypto: drbg - move dynamic ->reseed_threshold adjustments to + __drbg_seed() (jsc#SLE-21132,bsc#1191259). +- commit fe4673f + +- crypto: drbg - track whether DRBG was seeded with + !rng_is_initialized() (jsc#SLE-21132,bsc#1191259). +- commit 832d7de + +- crypto: drbg - prepare for more fine-grained tracking of + seeding state (jsc#SLE-21132,bsc#1191259). +- commit 832ea10 + +- crypto: drbg - Fix unused value warning in + drbg_healthcheck_sanity() (jsc#SLE-21132,bsc#1191259). +- commit 585265f + +- bpf: Fix toctou on read-only map's constant scalar tracking + (bsc#1192990,CVE-2021-4001). +- commit a65db58 + +- bpf: Use kvmalloc for map keys in syscalls + (bsc#1192990,CVE-2021-4001). +- Refresh + patches.suse/bpf-Fix-error-usage-of-map_fd-and-fdget-in-generic_m.patch. +- commit 8529db1 + +- usb: hub: Fix locking issues with address0_mutex (git-fixes). +- commit 6e122fb + +- mdio: aspeed: Fix "Link is Down" issue (git-fixes). +- lan743x: fix deadlock in lan743x_phy_link_status_change() + (git-fixes). +- ACPI: Get acpi_device's parent from the parent field + (git-fixes). +- ACPI: CPPC: Add NULL pointer check to cppc_get_perf() + (git-fixes). +- PM: hibernate: use correct mode for swsusp_close() (git-fixes). +- staging/fbtft: Fix backlight (git-fixes). +- USB: serial: pl2303: fix GC type detection (git-fixes). +- usb: chipidea: ci_hdrc_imx: fix potential error pointer + dereference in probe (git-fixes). +- usb: hub: Fix usb enumeration issue due to address0 race + (git-fixes). +- usb: typec: fusb302: Fix masking of comparator and bc_lvl + interrupts (git-fixes). +- usb: dwc3: leave default DMA for PCI devices (git-fixes). +- usb: dwc2: hcd_queue: Fix use of floating point literal + (git-fixes). +- usb: dwc3: gadget: Fix null pointer exception (git-fixes). +- usb: dwc2: gadget: Fix ISOC flow for elapsed frames (git-fixes). +- usb: dwc3: gadget: Check for L1/L2/U3 for Start Transfer + (git-fixes). +- usb: dwc3: gadget: Ignore NoStream after End Transfer + (git-fixes). +- usb: dwc3: core: Revise GHWPARAMS9 offset (git-fixes). +- mmc: sdhci-esdhc-imx: disable CMDQ support (git-fixes). +- commit 41fc655 + +- drm/dp: Don't zero PWMGEN_BIT_COUNT when driver_pwm_freq_hz not specified (git-fixes). +- commit c054b5e + +- Alt-commit updates for duplicates +- Refresh + patches.suse/0409-drm-i915-Use-designated-initializers-for-init-exit-t.patch. +- Refresh + patches.suse/0411-drm-i915-gt-Potential-error-pointer-dereference-in-p.patch. +- Refresh + patches.suse/0412-drm-i915-selftest-Fix-use-of-err-in-igt_reset_-fail-.patch. +- Refresh + patches.suse/0419-drm-i915-gem-Fix-the-mman-selftest.patch. +- Refresh + patches.suse/0420-drm-i915-Release-ctx-syncobj-on-final-put-not-on-ctx.patch. +- Refresh + patches.suse/0421-drm-i915-Get-PM-ref-before-accessing-HW-register.patch. +- Refresh + patches.suse/0422-drm-i915-selftests-Do-not-use-import_obj-uninitializ.patch. +- Refresh + patches.suse/0423-drm-i915-selftests-Always-initialize-err-in-igt_dmab.patch. +- Refresh + patches.suse/0426-drm-i915-Move-__i915_gem_free_object-to-ttm_bo_destr.patch. +- Refresh patches.suse/0427-drm-i915-Free-all-DMC-payloads.patch. +- Refresh + patches.suse/0429-drm-i915-guc-docs-Fix-pdfdocs-build-error-by-removin.patch. +- Refresh + patches.suse/0432-drm-i915-fix-blank-screen-booting-crashes.patch. +- Refresh + patches.suse/0439-drm-i915-Fix-bug-in-user-proto-context-creation-that.patch. +- Refresh + patches.suse/0440-drm-i915-Free-the-returned-object-of-acpi_evaluate_d.patch. +- Refresh + patches.suse/0445-drm-i915-Revert-guc_id-from-i915_request-tracepoint.patch. +- commit 6fe956e + +- constraints: Build aarch64 on recent ARMv8.1 builders. + Request asimdrdm feature which is available only on recent ARMv8.1 CPUs. + This should prevent scheduling the kernel on an older slower builder. +- commit 60fc53f + +- iio: imu: adis16400: Fix buffer alignment requirements + (git-fixes). +- iio: gyro: mpu3050: Fix alignment and size issues with buffers + (git-fixes). +- iio: adc: ti-adc108s102: Fix alignment of buffer pushed to + iio buffers (git-fixes). +- staging: wfx: ensure IRQ is ready before enabling it + (git-fixes). +- commit 594abf0 + +- firmware: smccc: Fix check for ARCH_SOC_ID not implemented + (git-fixes). +- firmware: arm_scmi: Fix type error assignment in voltage + protocol (git-fixes). +- HID: multitouch: disable sticky fingers for UPERFECT Y + (git-fixes). +- tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc + (git-fixes). +- iio: imu: st_lsm6dsx: Avoid potential array overflow in + st_lsm6dsx_set_odr() (git-fixes). +- iio: core: Introduce iio_push_to_buffers_with_ts_unaligned() + (git-fixes). +- usb: host: ohci-tmio: check return value after calling + platform_get_resource() (git-fixes). +- usb: typec: tipd: Remove WARN_ON in tps6598x_block_read + (git-fixes). +- usb: musb: tusb6010: check return value after calling + platform_get_resource() (git-fixes). +- memory: tegra20-emc: Add runtime dependency on devfreq governor + module (git-fixes). +- commit 872c3f8 + +- drm/hyperv: Fix device removal on Gen1 VMs (git-fixes). +- drm/aspeed: Fix vga_pw sysfs output (git-fixes). +- drm/vc4: fix error code in vc4_create_object() (git-fixes). +- drm/nouveau/acr: fix a couple NULL vs IS_ERR() checks + (git-fixes). +- drm/amd/display: Set plane update flags for all planes in reset + (git-fixes). +- drm/amd/display: Fix DPIA outbox timeout after GPU reset + (git-fixes). +- firmware: arm_scmi: Fix type error in sensor protocol + (git-fixes). +- firmware: arm_scmi: pm: Propagate return value to caller + (git-fixes). +- firmware: arm_scmi: Fix base agent discover response + (git-fixes). +- drm/amdgpu: fix set scaling mode Full/Full aspect/Center not + works on vga and dvi connectors (git-fixes). +- commit 90685db + +- drm/amd/pm: avoid duplicate powergate/ungate setting + (git-fixes). +- drm/nouveau: clean up all clients on device removal + (CVE-2020-27820 bsc#1179599 git-fixes). +- drm/nouveau: Add a dedicated mutex for the clients list + (CVE-2020-27820 bsc#1179599 git-fixes). +- drm/nouveau: use drm_dev_unplug() during device removal + (CVE-2020-27820 bsc#1179599 git-fixes). +- clk: sunxi-ng: Unregister clocks/resets when unbinding + (git-fixes). +- clk: imx: imx6ul: Move csi_sel mux to correct base register + (git-fixes). +- bus: ti-sysc: Use context lost quirk for otg (git-fixes). +- bus: ti-sysc: Add quirk handling for reinit on context lost + (git-fixes). +- ASoC: rt5682: fix a little pop while playback (git-fixes). +- ASoC: Intel: sof_sdw: add missing quirk for Dell SKU 0A45 + (git-fixes). +- ASoC: Intel: soc-acpi: add missing quirk for TGL SDCA single + amp (git-fixes). +- ASoC: nau8824: Add DMI quirk mechanism for active-high + jack-detect (git-fixes). +- ASoC: rt5651: Use IRQF_NO_AUTOEN when requesting the IRQ + (git-fixes). +- ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ + (git-fixes). +- ALSA: gus: fix null pointer dereference on pointer block + (git-fixes). +- ASoC: SOF: Intel: hda-dai: fix potential locking issue + (git-fixes). +- drm/amd/display: Update swizzle mode enums (git-fixes). +- drm/amd/display: Limit max DSC target bpp for specific monitors + (git-fixes). +- commit acb861b + +- Move upstreamed media and ARM patches into sorted section + Dropped a corresponding blacklist entry, too +- commit c1e7317 + +- powerpc/kexec_file: Add KEXEC_SIG support (jsc#SLE-18145 + bsc#1192295). + Update config files. +- commit b9bad9a + +- powerpc/watchdog: Fix wd_smp_last_reset_tb reporting + (bsc#1187541 ltc#192129). +- powerpc/watchdog: read TB close to where it is used (bsc#1187541 + ltc#192129). +- powerpc/watchdog: Avoid holding wd_smp_lock over printk and + smp_send_nmi_ipi (bsc#1187541 ltc#192129). +- powerpc/watchdog: tighten non-atomic read-modify-write access + (bsc#1187541 ltc#192129). +- powerpc/watchdog: Fix missed watchdog reset due to memory + ordering race (bsc#1187541 ltc#192129). +- commit 823022d + +- x86/sev: Fix noinstr for vc_ghcb_invalidate() (bsc#1169514). +- commit 794a8a0 + +- x86: Always inline ip_within_syscall_gap() (bsc#1169514). +- commit cfc10d5 + +- x86/kvm: Always inline evmcs_write64() (bsc#1169514). +- commit 22c39a2 + +- x86/kvm: Always inline to_svm() (bsc#1169514). +- commit 5a2d299 + +- x86: Always inline context_tracking_guest_enter() (bsc#1169514). +- commit 57c3b6f + +- x86/kvm: Always inline vmload() / vmsave() (bsc#1169514). +- commit bd03ad7 + +- x86/kvm: Always inline sev_*guest() (bsc#1169514). +- commit cc1d87a + +- objtool: Introduce CFI hash (bsc#1169514). +- Refresh + patches.suse/objtool-Handle-__sanitize_cov-tail-calls.patch. +- commit 4b4d3bb + +- HID: input: set usage type to key on keycode remap (git-fixes). +- HID: input: Fix parsing of HID_CP_CONSUMER_CONTROL fields + (git-fixes). +- HID: wacom: Use "Confidence" flag to prevent reporting invalid + contacts (git-fixes). +- commit 00be7f6 + +- Refresh + patches.suse/lib-scatterlist-Provide-a-dedicated-function-to-supp.patch. + Fixes warning: + ../drivers/gpu/drm/i915/gem/i915_gem_ttm.c:382:22: warning: unused variable 'sg' [-Wunused-variable] +- commit 883a20a + +- ASoC: cs42l42: Assume 24-bit samples are in 32-bit slots + (bsc#1192354). +- commit 41fb147 + +- ASoC: rt1015: remove possible unused variable `bclk_ms' + (bsc#1192354). +- ASoC: rt1015p: add new acpi id and comapatible id (bsc#1192354). +- ASoC: max98390: Add support change dsm param name (bsc#1192354). +- ASoC: cs42l42: Update module authors (bsc#1192354). +- ASoC: cs42l42: Validate dai_set_sysclk() frequency + (bsc#1192354). +- ASoC: cs42l42: Add PLL configuration for 44.1kHz/16-bit + (bsc#1192354). +- ASoC: max98090: remove duplicate status reads and useless + assignmment (bsc#1192354). +- ASoC: tlv320aic32x4: make array clocks static, makes object + smaller (bsc#1192354). +- ASoC: rt1015: Remove unnecessary flush work on rt1015 driver + (bsc#1192354). +- commit 79753e1 + +- ASoC: Intel: bytcht_es8316: Utilize dev_err_probe() to avoid + log saturation (bsc#1192354). +- ASoC: Intel: bytcht_es8316: Switch to use gpiod_get_optional() + (bsc#1192354). +- ASoC: Intel: bytcht_es8316: Use temporary variable for struct + device (bsc#1192354). +- ASoC: Intel: bytcht_es8316: Get platform data via + dev_get_platdata() (bsc#1192354). +- ASoC: SOF: trace: Omit error print when waking up trace sleepers + (bsc#1192354). +- ASoC: SOF: loader: Re-phrase the missing firmware error to + avoid duplication (bsc#1192354). +- ASoC: Intel: boards: Fix CONFIG_SND_SOC_SDW_MOCKUP select + (bsc#1192354). +- commit f37efd9 + +- ASoC: rt5682: fix headset background noise when S3 state + (bsc#1192354). +- ASoC: rt5682: Fix the vol+ button detection issue (bsc#1192354). +- ASoC: Intel: bytcr_rt5640: Make + rt5640_jack_gpio/rt5640_jack2_gpio static (bsc#1192354). +- ASoC: SOF: intel: remove duplicate include (bsc#1192354). +- ASoC: Intel: Skylake: Select first entry for singular pipe + config arrays (bsc#1192354). +- ASoC: Intel: Skylake: Properly configure modules with generic + extension (bsc#1192354). +- ASoC: Intel: Skylake: Support modules with generic extension + (bsc#1192354). +- ASoC: Intel: Skylake: Support multiple format configs + (bsc#1192354). +- ASoC: Intel: Skylake: Simplify m_state for loadable modules + (bsc#1192354). +- ASoC: Intel: Skylake: Select proper format for NHLT blob + (bsc#1192354). +- ASoC: Intel: bytcr_rt5640: Mark hp_elitepad_1000g2_jack?_check + functions static (bsc#1192354). +- ASoC: Intel: bytcr_rt5640: Add support for HP Elite Pad 1000G2 + jack-detect (bsc#1192354). +- ASoC: rt5640: Add rt5640_set_ovcd_params() helper (bsc#1192354). +- ASoC: rt5640: Add optional hp_det_gpio parameter to + rt5640_detect_headset() (bsc#1192354). +- ASoC: rt5640: Delay requesting IRQ until the machine-drv calls + set_jack (bsc#1192354). +- ASoC: rt5640: Move rt5640_disable_jack_detect() up in the + rt5640.c file (bsc#1192354). +- ASoC: rt5514: make array div static const, makes object smaller + (bsc#1192354). +- ASoC: rt5682: enable SAR ADC power saving mode during suspend + (bsc#1192354). +- commit 048b9dc + +- ASoC: Intel: sof_sdw: pass card information to init/exit + functions (bsc#1192354). +- Refresh + patches.suse/ASoC-Intel-sof_sdw-tag-SoundWire-BEs-as-non-atomic.patch. +- commit 1e10617 + +- ASoC: Intel: bytct_rt5640: Add a separate "Headset Mic 2" + DAPM pin for the mic on the 2nd jack (bsc#1192354). +- ASoC: Intel: bytcr_rt5640: Use cfg-lineout:2 in the components + string (bsc#1192354). +- ASoC: Intel: boards: use software node API in Atom boards + (bsc#1192354). +- ASoC: Intel: remove device_properties for Atom boards + (bsc#1192354). +- ASoC: Intel: use software node API in SoundWire machines + (bsc#1192354). +- ASoC: Intel: sof_sdw_rt711*: keep codec device reference until + remove (bsc#1192354). +- ASoC: Intel: boards: get codec device with ACPI instead of + bus search (bsc#1192354). +- ASoC: Intel: boards: handle errors with + acpi_dev_get_first_match_dev() (bsc#1192354). +- ASoC: Intel: boards: harden codec property handling + (bsc#1192354). +- ASoC: SOF: Intel: make DMI L1 selection more robust + (bsc#1192354). +- commit 5cbe7a7 + +- ASoC: SOF: Intel: simplify logic for DMI_L1 handling + (bsc#1192354). +- ASoC: SOF: Intel: hda-stream: remove always true condition + (bsc#1192354). +- ASoC: SOF: Intel: Kconfig: clarify DMI L1 option description + (bsc#1192354). +- ASoC: amd: vangogh: Drop superfluous mmap callback + (bsc#1192354). +- ASoC: Intel: sof_sdw_max98373: remove useless inits + (bsc#1192354). +- ASoC: SOF: Intel: Use DMI string to search for + adl_mx98373_rt5682 variant (bsc#1192354). +- ASoC: Intel: sof_sdw: add quirk for Dell XPS 9710 (bsc#1192354). +- soundwire: intel: introduce shim and alh base (bsc#1192354). +- ASoC: SOF: intel: add snd_sof_dsp_check_sdw_irq ops + (bsc#1192354). +- commit e73d522 + +- ASoC: SOF: intel: move sof_intel_dsp_desc() forward + (bsc#1192354). +- Refresh + patches.suse/ASoC-SOF-Intel-hda-fix-hotplug-when-only-codec-is-su.patch. +- commit 6f291a3 + +- ASoC: SOF: intel: hda: remove HDA_DSP_REG_SNDW_WAKE_STS + definition (bsc#1192354). +- ASoC: SOF: intel: add sdw_shim/alh_base to sof_intel_dsp_desc + (bsc#1192354). +- soundwire: move intel sdw register definitions to sdw_intel.h + (bsc#1192354). +- ASoC: Intel: bytcr_rt5640: Fix HP ElitePad 1000 G2 quirk + (bsc#1192354). +- ASoC: Intel: bytcr_rt5640: Add support for a second headset + mic input (bsc#1192354). +- ASoC: Intel: bytcr_rt5640: Add support for a second headphones + output (bsc#1192354). +- ASoC: Intel: bytcr_rt5640: Add a byt_rt5640_get_codec_dai() + helper (bsc#1192354). +- ASoC: Intel: bytcr_rt5640: Add line-out support (bsc#1192354). +- ASoC: intel: skylake: Drop superfluous mmap callback + (bsc#1192354). +- commit d756b8c + +- ASoC: amd: enable vangogh acp5x driver build (bsc#1192354). +- Update config files. +- commit 1e2e7cc + +- ASoC: amd: Drop superfluous mmap callbacks (bsc#1192354). +- ASoC: Intel: Fix spelling contraction "cant" -> "can't" + (bsc#1192354). +- ASoC: amd: fix an IS_ERR() vs NULL bug in probe (bsc#1192354). +- ASoC: amd: Use dev_probe_err helper (bsc#1192354). +- ASoC: amd: Don't show messages about deferred probing by default + (bsc#1192354). +- ASoC: amd: add vangogh i2s dma driver pm ops (bsc#1192354). +- ASoC: amd: add vangogh pci driver pm ops (bsc#1192354). +- ASoC: amd: add vangogh i2s dai driver ops (bsc#1192354). +- ASoC: amd: add vangogh i2s controller driver (bsc#1192354). +- commit 97bb2cd + +- ASoC: amd: add ACP5x pcm dma driver ops (bsc#1192354). +- ASoC: amd: irq handler changes for ACP5x PCM dma driver + (bsc#1192354). +- ASoC: amd: add ACP5x PCM platform driver (bsc#1192354). +- ASoC: amd: create acp5x platform devices (bsc#1192354). +- ASoc: amd: add acp5x init/de-init functions (bsc#1192354). +- ASoC: amd: add Vangogh ACP PCI driver (bsc#1192354). +- ASoC: amd: add Vangogh ACP5x IP register header (bsc#1192354). +- ASOC: Intel: sof_sdw: add quirk for Intel 'Bishop County' + NUC M15 (bsc#1192354). +- ASoC: Intel: sof_sdw: update quirk for jack detection in ADL + RVP (bsc#1192354). +- ASoC: Intel: sof_sdw: include rt711.h for RT711 JD mode + (bsc#1192354). +- commit 725b1cd + +- ASoC: Intel: sof_sdw: extends SOF_RT711_JDSRC to 4 bits + (bsc#1192354). +- ASoC: Intel: sof_rt5682: code refactor for max98360a + (bsc#1192354). +- ASoC: Intel: sof_cs42l42: add support for jsl_cs4242_mx98360a + (bsc#1192354). +- ASoC: Intel: maxim-common: support max98360a (bsc#1192354). +- ASoC: Intel: sof_cs42l42: support arbitrary DAI link sequence + (bsc#1192354). +- ASoC: Intel: sof_cs42l42: use helper function to get bclk + frequency (bsc#1192354). +- ASoC: SOF: add a helper to get topology configured bclk + (bsc#1192354). +- ASoC: Intel: soc-acpi: add support for SoundWire of TGL-H-RVP + (bsc#1192354). +- ASoC: amd: fix spelling mistakes (bsc#1192354). +- ASoC: intel: atom: Revert PCM buffer address setup workaround + again (bsc#1192354). +- soundwire: cadence: do not extend reset delay (bsc#1192354). +- soundwire: intel: conditionally exit clock stop mode on system + suspend (bsc#1192354). +- soundwire: intel: skip suspend/resume/wake when link was not + started (bsc#1192354). +- soundwire: cadence: override PDI configurations to create + loopback (bsc#1192354). +- soundwire: cadence: add debugfs interface for PDI loopbacks + (bsc#1192354). +- soundwire: stream: don't program mockup device ports + (bsc#1192354). +- soundwire: bus: squelch error returned by mockup devices + (bsc#1192354). +- soundwire: add flag to ignore all command/control for mockup + devices (bsc#1192354). +- soundwire: stream: don't abort bank switch on + Command_Ignored/-ENODATA (bsc#1192354). +- ASoC: Intel: boards: sof_sdw: add SoundWire mockup codecs for + tests (bsc#1192354). +- commit 01f384c + +- ASoC: codecs: add SoundWire mockup device support (bsc#1192354). +- Update config files. +- commit cb6d378 + +- ASoC: soc-acpi: tgl: add table for SoundWire mockup devices + (bsc#1192354). +- ASoC: soc-acpi: cnl: add table for SoundWire mockup devices + (bsc#1192354). +- soundwire: cadence: add paranoid check on self-clearing bits + (bsc#1192354). +- soundwire: dmi-quirks: add quirk for Intel 'Bishop County' + NUC M15 (bsc#1192354). +- soundwire: bus: update Slave status in sdw_clear_slave_status + (bsc#1192354). +- soundwire: cadence: Remove ret variable from sdw_cdns_irq() + (bsc#1192354). +- soundwire: bus: filter out more -EDATA errors on clock stop + (bsc#1192354). +- soundwire: dmi-quirks: add ull suffix for SoundWire _ADR values + (bsc#1192354). +- commit 96de317 + +- Revert "ALSA: hda: Drop workaround for a hang at shutdown again" + (bsc#1192354). +- Refresh + patches.suse/ALSA-hda-Use-position-buffer-for-SKL-again.patch. +- commit 14d0e54 + +- ALSA: hda: Drop workaround for a hang at shutdown again + (bsc#1192354). +- Refresh + patches.suse/ALSA-hda-Use-position-buffer-for-SKL-again.patch. +- commit 0b88e07 + +- ALSA: hda/cirrus: Move CS8409 HDA bridge to separate module + (bsc#1192354). +- Update config files. +- commit af1e7cf + +- ALSA: hda: fix general protection fault in azx_runtime_idle + (bsc#1192354). +- ALSA: hda/cs8409: Setup Dolphin Headset Mic as Phantom Jack + (bsc#1192354). +- ALSA: hda/cs8409: Initialize Codec only in init fixup + (bsc#1192354). +- ALSA: hda/cs8409: Ensure Type Detection is only run on startup + when necessary (bsc#1192354). +- ALSA: hda: Disable runtime resume at shutdown (bsc#1192354). +- ALSA: hda: Allow model option to specify PCI SSID alias + (bsc#1192354). +- ALSA: hda: Code refactoring snd_hda_pick_fixup() (bsc#1192354). +- ALSA: hda/analog - Sink ad198x_shutup() and shuffle CONFIG_PM + guards (bsc#1192354). +- ALSA: hda/sigmatel - Sink stac_shutup() into stac_suspend() + (bsc#1192354). +- ALSA: hda: Nuke unused reboot_notify callback (bsc#1192354). +- ALSA: hda: Suspend codec at shutdown (bsc#1192354). +- ALSA: hda: conexant: Turn off EAPD at suspend, too + (bsc#1192354). +- ALSA: hda/cs8409: Prevent pops and clicks during suspend + (bsc#1192354). +- ALSA: hda/cs8409: Unmute/Mute codec when stream starts/stops + (bsc#1192354). +- ALSA: hda/cs8409: Follow correct CS42L42 power down sequence + for suspend (bsc#1192354). +- ALSA: hda/cs8409: Remove unnecessary delays (bsc#1192354). +- ALSA: hda/cs8409: Use timeout rather than retries for I2C + transaction waits (bsc#1192354). +- ALSA: hda/cs8409: Set fixed sample rate of 48kHz for CS42L42 + (bsc#1192354). +- ALSA: hda/cs8409: Enable Full Scale Volume for Line Out Codec + on Dolphin (bsc#1192354). +- ALSA: hda/cs8409: Add support for dolphin (bsc#1192354). +- ALSA: hda/cs8409: Add Support to disable jack type detection + for CS42L42 (bsc#1192354). +- ALSA: hda/cs8409: Support multiple sub_codecs for + Suspend/Resume/Unsol events (bsc#1192354). +- ALSA: hda/cs8409: Move codec properties to its own struct + (bsc#1192354). +- ALSA: hda/cs8409: Separate CS8409, CS42L42 and project functions + (bsc#1192354). +- ALSA: hda/cs8409: Support i2c bulk read/write functions + (bsc#1192354). +- ALSA: hda/cs8409: Avoid re-setting the same page as the last + access (bsc#1192354). +- ALSA: hda/cs8409: Avoid setting the same I2C address for every + access (bsc#1192354). +- ALSA: hda/cs8409: Dont disable I2C clock between consecutive + accesses (bsc#1192354). +- ALSA: hda/cs8409: Generalize volume controls (bsc#1192354). +- ALSA: hda/cs8409: Prevent I2C access during suspend time + (bsc#1192354). +- ALSA: hda/cs8409: Simplify CS42L42 jack detect (bsc#1192354). +- ALSA: hda/cs8409: Mask CS42L42 wake events (bsc#1192354). +- ALSA: hda/cs8409: Disable unsolicited response for the first + boot (bsc#1192354). +- ALSA: hda/cs8409: Disable unsolicited responses during suspend + (bsc#1192354). +- ALSA: hda/cs8409: Disable unnecessary Ring Sense for + Cyborg/Warlock/Bullseye (bsc#1192354). +- ALSA: hda/cs8409: Reduce HS pops/clicks for Cyborg + (bsc#1192354). +- ALSA: hda/cs8409: Mask all CS42L42 interrupts on initialization + (bsc#1192354). +- ALSA: hda/cs8409: Use enums for register names and coefficients + (bsc#1192354). +- ALSA: hda/cs8409: Move arrays of configuration to a new file + (bsc#1192354). +- ALSA: hda: Allocate resources with device-managed APIs + (bsc#1192354). +- ALSA: hda/hdmi: Add option to enable all pins forcibly + (bsc#1192354). +- ALSA: hda/ca0132: remove redundant initialization of variable + status (bsc#1192354). +- commit bdfccf7 + +- ALSA: intel-dsp-config: add quirk for JSL devices based on + ES8336 codec (bsc#1192354). +- ALSA: intel-dsp-config: add quirk for APL/GLK/TGL devices + based on ES8336 codec (bsc#1192354). +- ALSA: hda: hdac_ext_stream: fix potential locking issues + (bsc#1192354). +- ALSA: hda: hdac_stream: fix potential locking issue in + snd_hdac_stream_assign() (bsc#1192354). +- commit 7c0aa55 + +- ALSA: doc: Fix indentation warning (bsc#1192354). +- ALSA: memalloc: Drop superfluous snd_dma_buffer_sync() + declaration (bsc#1192354). +- commit 856f153 + +- ALSA: usb-audio: Don't start stream for capture at prepare + (bsc#1192354). +- ALSA: usb-audio: Switch back to non-latency mode at a later + point (bsc#1192354). +- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc + (bsc#1192354). +- ALSA: usb-audio: Initialize every feature unit once at probe + time (bsc#1192354). +- ALSA: usb-audio: Drop superfluous error message after + disconnection (bsc#1192354). +- ALSA: usb-audio: Downgrade error message in get_ctl_value_v2() + (bsc#1192354). +- ALSA: usb-audio: Less restriction for low-latency playback mode + (bsc#1192354). +- ALSA: usb-audio: Pass JOINT_DUPLEX info flag for implicit fb + streams (bsc#1192354). +- ALSA: usb-audio: Fix packet size calculation regression + (bsc#1192354). +- ALSA: usb-audio: disable implicit feedback sync for Behringer + UFX1204 and UFX1604 (bsc#1192354). +- ALSA: usb-audio: Avoid killing in-flight URBs during draining + (bsc#1192354). +- ALSA: usb-audio: Improved lowlatency playback support + (bsc#1192354). +- ALSA: usb-audio: Add spinlock to stop_urbs() (bsc#1192354). +- ALSA: usb-audio: Check available frames for the next packet size + (bsc#1192354). +- ALSA: usb-audio: Disable low-latency mode for implicit feedback + sync (bsc#1192354). +- ALSA: usb-audio: Disable low-latency playback for free-wheel + mode (bsc#1192354). +- ALSA: usb-audio: Rename early_playback_start flag with + lowlatency_playback (bsc#1192354). +- ALSA: usb-audio: fix comment reference in + __uac_clock_find_source (bsc#1192354). +- commit 9d7667d + +- ALSA: usb-audio: Move ignore_ctl_error check into quirk_flags + (bsc#1192354). +- Refresh + patches.suse/ALSA-usb-audio-Add-Audient-iD14-to-mixer-map-quirk-t.patch. +- Refresh + patches.suse/ALSA-usb-audio-Add-Schiit-Hel-device-to-mixer-map-qu.patch. +- Refresh + patches.suse/Revive-usb-audio-Keep-Interface-mixer.patch. +- commit 823344c + +- ALSA: usx2y: Prefer struct_size over open coded arithmetic + (bsc#1192354). +- ALSA: usb-audio: Fix microphone sound on Jieli webcam + (bsc#1192354). +- ALSA: usb-audio: Enable rate validation for Scarlett devices + (bsc#1192354). +- ALSA: usb-audio: Move set-interface-first workaround into + common quirk (bsc#1192354). +- ALSA: usb-audio: make array static const, makes object smaller + (bsc#1192354). +- ALSA: doc: Add the description of quirk_flags option for + snd-usb-audio (bsc#1192354). +- ALSA: usb-audio: Add quirk_flags module option (bsc#1192354). +- ALSA: usb-audio: Move generic DSD raw detection into quirk_flags + (bsc#1192354). +- ALSA: usb-audio: Move autosuspend quirk into quirk_flags + (bsc#1192354). +- ALSA: usb-audio: Move rate validation quirk into quirk_flags + (bsc#1192354). +- commit d167cc1 + +- ALSA: usb-audio: Move interface setup delay into quirk_flags + (bsc#1192354). +- ALSA: usb-audio: Move control message delay quirk into + quirk_flags (bsc#1192354). +- ALSA: usb-audio: Move ITF-USB DSD quirk handling into + quirk_flags (bsc#1192354). +- ALSA: usb-audio: Move clock setup quirk into quirk_flags + (bsc#1192354). +- ALSA: usb-audio: Move playback_first flag into quirk_flags + (bsc#1192354). +- ALSA: usb-audio: Move tx_length quirk handling to quirk_flags + (bsc#1192354). +- ALSA: usb-audio: Move txfr_quirk handling to quirk_flags + (bsc#1192354). +- ALSA: usb-audio: Move media-controller API quirk into + quirk_flags (bsc#1192354). +- ALSA: usb-audio: Introduce quirk_flags field (bsc#1192354). +- commit 6630f4e + +- ALSA: memalloc: Remove a stale comment (bsc#1192354). +- ALSA: memalloc: Use proper SG helpers for noncontig allocations + (bsc#1192354). +- ALSA: memalloc: Fix a typo in snd_dma_buffer_sync() description + (bsc#1192354). +- ALSA: memalloc: Support for non-coherent page allocation + (bsc#1192354). +- ALSA: memalloc: Support for non-contiguous page allocation + (bsc#1192354). +- ALSA: ISA: not for M68K (bsc#1192354). +- ALSA: pcm: Unify snd_pcm_delay() and snd_pcm_hwsync() + (bsc#1192354). +- ALSA: pcm: Add more disconnection checks at file ops + (bsc#1192354). +- ALSA: pcm: Add SNDRV_PCM_INFO_EXPLICIT_SYNC flag (bsc#1192354). +- ALSA: memalloc: Count continuous pages in vmalloc buffer handler + (bsc#1192354). +- ALSA: core: control_led: use strscpy instead of strlcpy + (bsc#1192354). +- ALSA: memalloc: Fix mmap of SG-buffer with WC pages + (bsc#1192354). +- ALSA: memalloc: Store snd_dma_buffer.addr for continuous pages, + too (bsc#1192354). +- ALSA: memalloc: Fix pgprot for WC mmap on x86 (bsc#1192354). +- ALSA: memalloc: Support WC allocation on all architectures + (bsc#1192354). +- ALSA: pcm: Allow exact buffer preallocation (bsc#1192354). +- ALSA: memalloc: Correctly name as WC (bsc#1192354). +- ALSA: memalloc: Minor refactoring (bsc#1192354). +- ALSA: core: Fix double calls of snd_card_free() via devres + (bsc#1192354). +- ALSA: seq: Fix comments of wrong client number for MIDI + Passthrough (bsc#1192354). +- ALSA: core: Add device-managed request_dma() (bsc#1192354). +- ALSA: core: Add managed card creation (bsc#1192354). +- ALSA: core: Add device-managed page allocator helper + (bsc#1192354). +- ALSA: compress: Initialize mutex in snd_compress_new() + (bsc#1192354). +- ALSA: compress: Drop unused functions (bsc#1192354). +- commit f0eac26 + +- drm/i915/adl_s: Remove require_force_probe protection + (jsc#SLE-22724). +- commit 276c538 + +- drm/i915/dp: fix for ADL_P/S dp/edp max source rates + (jsc#SLE-22724). +- commit f8dd603 + +- drm/i915/dp: fix DG1 and RKL max source rates (jsc#SLE-22724). +- commit ef43dd0 + +- drm/i915/dp: fix EHL/JSL max source rates calculation + (jsc#SLE-22724). +- commit 0821357 + +- drm/i915/dp: fix TGL and ICL max source rates (jsc#SLE-22724). +- commit 61199d4 + +- drm/i915/dp: Fix eDP max rate for display 11+ (jsc#SLE-22724). +- commit 468b330 + +- drm/i915/adl_s: Update ADL-S PCI IDs (jsc#SLE-22724). +- commit d125195 + +- drm/i915: Disable bonding on gen12+ platforms (jsc#SLE-22724). +- commit 5d84d6d + +- ALSA: ctxfi: Fix out-of-range access (git-fixes). +- ALSA: hda/realtek: Fix LED on HP ProBook 435 G7 (git-fixes). +- ALSA: hda/realtek: Add quirk for ASRock NUC Box 1100 + (git-fixes). +- commit aee8b91 + +- selinux: fix NULL-pointer dereference when hashtab allocation + fails (git-fixes). +- ASoC: stm32: i2s: fix 32 bits channel length without mclk + (git-fixes). +- ASoC: codecs: lpass-rx-macro: fix HPHR setting CLSH mask + (git-fixes). +- ASoC: codecs: wcd934x: return error code correctly from + hw_params (git-fixes). +- ASoC: codecs: wcd938x: fix volatile register range (git-fixes). +- ASoC: topology: Add missing rwsem around snd_ctl_remove() + calls (git-fixes). +- ASoC: qdsp6: q6asm: fix q6asm_dai_prepare error handling + (git-fixes). +- ASoC: qdsp6: q6routing: Conditionally reset FrontEnd Mixer + (git-fixes). +- ASoC: DAPM: Cover regression by kctl change notification fix + (git-fixes). +- ASoC: SOF: Intel: hda: fix hotplug when only codec is suspended + (git-fixes). +- media: cec: copy sequence field for the reply (git-fixes). +- media: v4l2-core: fix VIDIOC_DQEVENT handling on non-x86 + (git-fixes). +- pinctrl: tegra194: remove duplicate initializer again + (git-fixes). +- memory: tegra186-emc: Fix error return code in + tegra186_emc_probe() (git-fixes). +- commit 40b2336 + +- Delete patches.suse/Fix-breakage-of-swap-over-NFS.patch. + A recent patch + patches.suse/NFS-move-generic_write_checks-call-from-nfs_file_dir.patch + provides a better solution. +- commit ab6f39b + +- SUNRPC/xprt: async tasks mustn't block waiting for memory + (bsc#1191876). +- SUNRPC: remove scheduling boost for "SWAPPER" tasks + (bsc#1191876). +- SUNRPC: improve 'swap' handling: scheduling and PF_MEMALLOC + (bsc#1191876). +- SUNRPC/call_alloc: async tasks mustn't block waiting for memory + (bsc#1191876). +- SUNRPC/auth: async tasks mustn't block waiting for memory + (bsc#1191876). +- NFS: move generic_write_checks() call from + nfs_file_direct_write() to nfs_file_write() (bsc#1191876). +- NFS: do not take i_rwsem for swap IO (bsc#1191876). +- MM: reclaim mustn't enter FS for swap-over-NFS (bsc#1191876). +- commit 11279f5 + +- scsi: qla2xxx: Fix mailbox direction flags in + qla2xxx_get_adapter_id() (git-fixes). +- scsi: core: sysfs: Fix hang when device state is set via sysfs + (git-fixes). +- scsi: ufs: core: Improve SCSI abort handling (git-fixes). +- commit 13e7c01 + +- drm/i915: Revert 'guc_id' from i915_request tracepoint + (jsc#SLE-22601). +- drm/i915: Free the returned object of acpi_evaluate_dsm() + (jsc#SLE-22601). +- drm/i915: Fix bug in user proto-context creation that leaked + contexts (jsc#SLE-22601). +- drm/i915: remember to call i915_sw_fence_fini (jsc#SLE-22601). +- drm/i915: fix blank screen booting crashes (jsc#SLE-22601). +- drm/i915/guc, docs: Fix pdfdocs build error by removing nested + grid (jsc#SLE-22601). +- drm/i915: Free all DMC payloads (jsc#SLE-22601). +- drm/i915: Move __i915_gem_free_object to ttm_bo_destroy + (jsc#SLE-22601). +- drm/i915: Update memory bandwidth parameters (jsc#SLE-22601). +- drm/i915: Enable -Wsometimes-uninitialized (jsc#SLE-22601). +- drm/i915/selftests: Always initialize err in + igt_dmabuf_import_same_driver_lmem() (jsc#SLE-22601). +- drm/i915/selftests: Do not use import_obj uninitialized + (jsc#SLE-22601). +- drm/i915: Get PM ref before accessing HW register + (jsc#SLE-22601). +- drm/i915: Release ctx->syncobj on final put, not on ctx close + (jsc#SLE-22601). +- drm/i915/gem: Fix the mman selftest (jsc#SLE-22601). +- tools headers UAPI: Sync drm/i915_drm.h with the kernel sources + (jsc#SLE-22601). +- drm/i915: use linux/stddef.h due to "isystem: trim/fixup + stdarg.h and other headers" (jsc#SLE-22601). +- vfio/gvt: Fix open/close when multiple device FDs are open + (jsc#SLE-22601). +- vfio: Provide better generic support for open/release + vfio_device_ops (jsc#SLE-22601). +- drm/i915/selftest: Fix use of err in igt_reset_{fail, + nop}_engine() (jsc#SLE-22601). +- drm/i915/gt: Potential error pointer dereference in + pinned_context() (jsc#SLE-22601). +- drm/i915/adl_p: Also disable underrun recovery with MSO + (jsc#SLE-22601). +- drm/i915: Use designated initializers for init/exit table + (jsc#SLE-22601). +- drm/i915/dg2: Add support for new DG2-G11 revid 0x5 + (jsc#SLE-22601). +- drm/i915/display/adl_p: Correctly program MBUS DBOX A credits + (jsc#SLE-22601). +- drm/i915: Apply CMTG clock disabling WA while DPLL0 is enabled + (jsc#SLE-22601). +- drm/i915/dg1: Adjust the AUDIO power domain (jsc#SLE-22601). +- drm/i915: finish removal of CNL (jsc#SLE-22601). +- drm/i915: rename/remove CNL registers (jsc#SLE-22601). +- drm/i915: remove GRAPHICS_VER == 10 (jsc#SLE-22601). +- drm/i915: switch num_scalers/num_sprites to consider DISPLAY_VER + (jsc#SLE-22601). +- drm/i915: replace random CNL comments (jsc#SLE-22601). +- drm/i915: rename CNL references in intel_dram.c (jsc#SLE-22601). +- drm/i915: remove explicit CNL handling from intel_wopcm.c + (jsc#SLE-22601). +- drm/i915: remove explicit CNL handling from intel_pch.c + (jsc#SLE-22601). +- drm/i915: remove explicit CNL handling from intel_pm.c + (jsc#SLE-22601). +- drm/i915: remove explicit CNL handling from i915_irq.c + (jsc#SLE-22601). +- drm/i915/display: rename CNL references in skl_scaler.c + (jsc#SLE-22601). +- drm/i915/display: remove CNL ddi buf translation tables + (jsc#SLE-22601). +- drm/i915/display: remove explicit CNL handling from + intel_display_power.c (jsc#SLE-22601). +- drm/i915/display: remove explicit CNL handling from + skl_universal_plane.c (jsc#SLE-22601). +- drm/i915/display: remove explicit CNL handling from intel_vdsc.c + (jsc#SLE-22601). +- drm/i915/display: remove explicit CNL handling from + intel_dpll_mgr.c (jsc#SLE-22601). +- drm/i915/display: remove explicit CNL handling from intel_dp.c + (jsc#SLE-22601). +- drm/i915/display: remove explicit CNL handling from intel_dmc.c + (jsc#SLE-22601). +- drm/i915/display: remove explicit CNL handling from + intel_display_debugfs.c (jsc#SLE-22601). +- drm/i915/display: remove explicit CNL handling from intel_ddi.c + (jsc#SLE-22601). +- drm/i915/display: remove explicit CNL handling from intel_crtc.c + (jsc#SLE-22601). +- drm/i915/display: remove explicit CNL handling from + intel_combo_phy.c (jsc#SLE-22601). +- drm/i915/display: remove explicit CNL handling from + intel_color.c (jsc#SLE-22601). +- drm/i915/display: remove explicit CNL handling from + intel_cdclk.c (jsc#SLE-22601). +- drm/i915/display: remove PORT_F workaround for CNL + (jsc#SLE-22601). +- drm/i915/dp: DPTX writes Swing/Pre-emphs(DPCD 0x103-0x106) + requested during PHY Layer testing (jsc#SLE-22601). +- drm/i915/dg2: Update to bigjoiner path (jsc#SLE-22601). +- drm/i915/dg2: Update lane disable power state during PSR + (jsc#SLE-22601). +- drm/i915/dg2: Wait for SNPS PHY calibration during display init + (jsc#SLE-22601). +- drm/i915/dg2: Update modeset sequences (jsc#SLE-22601). +- drm/i915/dg2: Add vswing programming for SNPS phys + (jsc#SLE-22601). +- drm/i915/dg2: Add MPLLB programming for HDMI (jsc#SLE-22601). +- drm/i915/dg2: Add MPLLB programming for SNPS PHY + (jsc#SLE-22601). +- drm/i915/adl_p: Add ddi buf translation tables for combo PHY + (jsc#SLE-22601). +- drm/i915/adl_s: Update ddi buf translation tables + (jsc#SLE-22601). +- drm/i915: dgfx cards need to wait on pcode's uncore init done + (jsc#SLE-22601). +- drm/i915/adlp: Add workaround to disable CMTG clock gating + (jsc#SLE-22601). +- drm/i915/adl_p: Allow underrun recovery when possible + (jsc#SLE-22601). +- drm/i915/display: Disable audio, DRRS and PSR before planes + (jsc#SLE-22601). +- drm/i915: Implement PSF GV point support (jsc#SLE-22601). +- drm/i915: Extend QGV point restrict mask to 0x3 (jsc#SLE-22601). +- drm/i915/display/psr2: Fix cursor updates using legacy apis + (jsc#SLE-22601). +- drm/i915/display/psr2: Mark as updated all planes that intersect + with pipe_clip (jsc#SLE-22601). +- drm/i915: Program chicken bit during DP MST sequence on TGL+ + (jsc#SLE-22601). +- drm/i915/dg2: Add DG2 to the PSR2 defeature list + (jsc#SLE-22601). +- drm/i915/dg2: Classify DG2 PHY types (jsc#SLE-22601). +- drm/i915/firmware: Update to DMC v2.03 on RKL (jsc#SLE-22601). +- drm/i915/firmware: Update to DMC v2.12 on TGL (jsc#SLE-22601). +- drm/i915/dmc: Change intel_get_stepping_info() (jsc#SLE-22601). +- drm/i915/step: Add macro magic for handling steps + (jsc#SLE-22601). +- drm/i915/dg2: DG2 has fixed memory bandwidth (jsc#SLE-22601). +- drm/i915/dg2: Don't read DRAM info (jsc#SLE-22601). +- drm/i915/dg2: Don't program BW_BUDDY registers (jsc#SLE-22601). +- drm/i915/dg2: Add dbuf programming (jsc#SLE-22601). +- drm/i915/dg2: Setup display outputs (jsc#SLE-22601). +- drm/i915/dg2: Don't wait for AUX power well enable ACKs + (jsc#SLE-22601). +- drm/i915/dg2: Skip shared DPLL handling (jsc#SLE-22601). +- drm/i915/dg2: Add cdclk table and reference clock + (jsc#SLE-22601). +- drm/i915/dg2: Add fake PCH (jsc#SLE-22601). +- drm/i915: Fork DG1 interrupt handler (jsc#SLE-22601). +- drm/i915: Make display workaround upper bounds exclusive + (jsc#SLE-22601). +- drm/i915/rkl: Wa_1408330847 no longer applies to RKL + (jsc#SLE-22601). +- drm/i915/rkl: Wa_1409767108 also applies to RKL (jsc#SLE-22601). +- drm/i915/adl_s: Wa_14011765242 is also needed on A1 display + stepping (jsc#SLE-22601). +- drm/i915/display: Fix shared dpll mismatch for bigjoiner slave + (jsc#SLE-22601). +- drm/i915/display: Disable FBC when PSR2 is enabled display 12 + and newer (jsc#SLE-22601). +- drm/i915/display/adl_p: Implement PSR changes (jsc#SLE-22601). +- drm/i915/display/dsc: Force dsc BPP (jsc#SLE-22601). +- drm/i915/display/dsc: Add Per connector debugfs node for DSC + BPP enable (jsc#SLE-22601). +- drm/i915/display: Add write permissions for fec support + (jsc#SLE-22601). +- drm/i915/debugfs: DISPLAY_VER 13 lpsp capability + (jsc#SLE-22601). +- drm/i915/display/xelpd: Extend Wa_14011508470 (jsc#SLE-22601). +- drm/i915: Limit Wa_22010178259 to affected platforms + (jsc#SLE-22601). +- drm/i915/display: Settle on "adl-x" in WA comments + (jsc#SLE-22601). +- drm/i915: Invoke another _DSM to enable MUX on HP Workstation + laptops (jsc#SLE-22601). +- drm/i915/dg1: Compute MEM Bandwidth using MCHBAR + (jsc#SLE-22601). + Refresh + patches.suse/drm-i915-Remove-memory-frequency-calculation.patch. +- drm/i915/display/xelpd: Fix incorrect color capability reporting + (jsc#SLE-22601). +- drm/i915: Handle cdclk crawling flag in standard manner + (jsc#SLE-22601). +- drm/i915/plane: add intel_plane_helper_add() helper + (jsc#SLE-22601). +- drm/i915/dg2: Add SQIDI steering (jsc#SLE-22601). +- drm/i915/dg2: Update steering tables (jsc#SLE-22601). +- drm/i915/xehpsdv: Define steering tables (jsc#SLE-22601). +- drm/i915/xehp: handle new steering options (jsc#SLE-22601). +- drm/i915/userptr: Probe existence of backing struct pages upon + creation (jsc#SLE-22601). +- drm/i915: delete gpu reloc code (jsc#SLE-22601). +- drm/i915: Disable gpu relocations (jsc#SLE-22601). +- drm/i915/dg2: DG2 uses the same sseu limits as XeHP SDV + (jsc#SLE-22601). +- drm/i915/xehpsdv: Add maximum sseu limits (jsc#SLE-22601). +- drm/i915/xehp: Changes to ss/eu definitions (jsc#SLE-22601). +- drm/i915/dg2: Add forcewake table (jsc#SLE-22601). +- drm/i915/guc/rc: Setup and enable GuCRC feature (jsc#SLE-22601). +- drm/i915/guc/slpc: Add SLPC selftest (jsc#SLE-22601). +- drm/i915/guc/slpc: Sysfs hooks for SLPC (jsc#SLE-22601). +- drm/i915/guc/slpc: Cache platform frequency limits + (jsc#SLE-22601). +- drm/i915/guc/slpc: Enable ARAT timer interrupt (jsc#SLE-22601). +- drm/i915/guc/slpc: Add debugfs for SLPC info (jsc#SLE-22601). +- drm/i915/guc/slpc: Add get max/min freq hooks (jsc#SLE-22601). +- drm/i915/guc/slpc: Add methods to set min/max frequency + (jsc#SLE-22601). +- drm/i915/guc/slpc: Remove BUG_ON in guc_submission_disable + (jsc#SLE-22601). +- drm/i915/guc/slpc: Enable SLPC and add related H2G events + (jsc#SLE-22601). +- drm/i915/guc/slpc: Allocate, initialize and release SLPC + (jsc#SLE-22601). +- drm/i915/guc/slpc: Adding SLPC communication interfaces + (jsc#SLE-22601). +- drm/i915/guc/slpc: Gate Host RPS when SLPC is enabled + (jsc#SLE-22601). + Refresh + patches.suse/drm-i915-Remove-warning-from-the-rps-worker.patch. +- drm/i915/guc/slpc: Initial definitions for SLPC (jsc#SLE-22601). +- drm/i915/xehp: Fix missing sentinel on mcr_ranges_xehp + (jsc#SLE-22601). +- drm/i915/selftests: prefer the create_user helper + (jsc#SLE-22601). +- drm/i915/gt: remove GRAPHICS_VER == 10 (jsc#SLE-22601). +- drm/i915/gt: rename CNL references in intel_engine.h + (jsc#SLE-22601). +- drm/i915/gt: remove explicit CNL handling from intel_sseu.c + (jsc#SLE-22601). +- drm/i915/gt: remove explicit CNL handling from intel_mocs.c + (jsc#SLE-22601). +- drm/i915: Extract i915_module.c (jsc#SLE-22601). +- drm/i915: Remove i915_globals (jsc#SLE-22601). +- drm/i915: move vma slab to direct module init/exit + (jsc#SLE-22601). +- drm/i915: move scheduler slabs to direct module init/exit + (jsc#SLE-22601). +- drm/i915: move request slabs to direct module init/exit + (jsc#SLE-22601). +- drm/i915: move gem_objects slab to direct module init/exit + (jsc#SLE-22601). +- drm/i915: move gem_context slab to direct module init/exit + (jsc#SLE-22601). +- drm/i915: move intel_context slab to direct module init/exit + (jsc#SLE-22601). +- drm/i915: move i915_buddy slab to direct module init/exit + (jsc#SLE-22601). +- drm/i915: move i915_active slab to direct module init/exit + (jsc#SLE-22601). +- drm/i915: Check for nomodeset in i915_init() first + (jsc#SLE-22601). +- drm/i915/xehpsdv: Correct parameters for IS_XEHPSDV_GT_STEP() + (jsc#SLE-22601). +- drm/i915/guc: Unblock GuC submission on Gen11+ (jsc#SLE-22601). +- drm/i915/guc: Implement GuC priority management (jsc#SLE-22601). +- drm/i915/selftest: Bump selftest timeouts for hangcheck + (jsc#SLE-22601). +- drm/i915/selftest: Fix hangcheck self test for GuC submission + (jsc#SLE-22601). +- drm/i915/selftest: Increase some timeouts in live_requests + (jsc#SLE-22601). +- drm/i915/selftest: Fix MOCS selftest for GuC submission + (jsc#SLE-22601). +- drm/i915/selftest: Fix workarounds selftest for GuC submission + (jsc#SLE-22601). +- drm/i915/selftest: Better error reporting from hangcheck + selftest (jsc#SLE-22601). +- drm/i915/guc: Support request cancellation (jsc#SLE-22601). +- drm/i915/guc: Implement banned contexts for GuC submission + (jsc#SLE-22601). +- drm/i915/guc: Add golden context to GuC ADS (jsc#SLE-22601). +- drm/i915/guc: Include scheduling policies in the debugfs state + dump (jsc#SLE-22601). +- drm/i915/guc: Connect reset modparam updates to GuC policy flags + (jsc#SLE-22601). +- drm/i915/guc: Hook GuC scheduling policies up (jsc#SLE-22601). +- drm/i915/guc: Fix for error capture after full GPU reset with + GuC (jsc#SLE-22601). +- drm/i915/guc: Capture error state on context reset + (jsc#SLE-22601). +- drm/i915/guc: Enable GuC engine reset (jsc#SLE-22601). +- drm/i915/guc: Don't complain about reset races (jsc#SLE-22601). +- drm/i915/guc: Provide mmio list to be saved/restored on engine + reset (jsc#SLE-22601). +- drm/i915/guc: Enable the timer expired interrupt for GuC + (jsc#SLE-22601). +- drm/i915/guc: Handle engine reset failure notification + (jsc#SLE-22601). +- drm/i915/guc: Handle context reset notification (jsc#SLE-22601). +- drm/i915/guc: Suspend/resume implementation for new interface + (jsc#SLE-22601). +- drm/i915/guc: Add disable interrupts to guc sanitize + (jsc#SLE-22601). +- drm/i915: Reset GPU immediately if submission is disabled + (jsc#SLE-22601). +- drm/i915/guc: Reset implementation for new GuC interface + (jsc#SLE-22601). +- drm/i915: Move active request tracking to a vfunc + (jsc#SLE-22601). +- drm/i915: Add i915_sched_engine destroy vfunc (jsc#SLE-22601). +- drm/i915/guc: Direct all breadcrumbs for a class to single + breadcrumbs (jsc#SLE-22601). +- drm/i915/guc: Disable bonding extension with GuC submission + (jsc#SLE-22601). +- drm/i915: Hold reference to intel_context over life of + i915_request (jsc#SLE-22601). +- drm/i915/guc: Make hangcheck work with GuC virtual engines + (jsc#SLE-22601). +- drm/i915/guc: GuC virtual engines (jsc#SLE-22601). +- drm/i915/ehl: unconditionally flush the pages on acquire + (jsc#SLE-22601). +- drm/i915: document caching related bits (jsc#SLE-22601). +- drm/i915/gem: Migrate to system at dma-buf attach time (v7) + (jsc#SLE-22601). +- drm/i915/gem: Correct the locking and pin pattern for dma-buf + (v8) (jsc#SLE-22601). +- drm/i915/gem: Always call obj->ops->migrate unless can_migrate + fails (jsc#SLE-22601). +- drm/i915/gem/ttm: Only call __i915_gem_object_set_pages if + needed (jsc#SLE-22601). +- drm/i915/gem: Unify user object creation (v3) (jsc#SLE-22601). +- drm/i915/gem: Call i915_gem_flush_free_objects() in + i915_gem_dumb_create() (jsc#SLE-22601). +- drm/i915/gem: Refactor placement setup for + i915_gem_object_create* (v2) (jsc#SLE-22601). +- drm/i915/gem: Check object_can_migrate from object_migrate + (jsc#SLE-22601). +- drm/i915/gt: nuke gen6_hw_id (jsc#SLE-22601). +- drm/i915/xehp: Xe_HP forcewake support (jsc#SLE-22601). +- drm/i915/xehp: Extra media engines - Part 3 (reset) + (jsc#SLE-22601). +- drm/i915/xehp: Extra media engines - Part 2 (interrupts) + (jsc#SLE-22601). +- drm/i915/xehp: Extra media engines - Part 1 (engine definitions) + (jsc#SLE-22601). +- drm/i915/xehp: Define multicast register ranges (jsc#SLE-22601). +- drm/i915: Extend Wa_1406941453 to adl-p (jsc#SLE-22601). +- drm/i915/uapi: reject set_domain for discrete (jsc#SLE-22601). +- drm/i915/xehp: VDBOX/VEBOX fusing registers are enable-based + (jsc#SLE-22601). +- drm/i915/gt: rename legacy engine->hw_id to engine->gen6_hw_id + (jsc#SLE-22601). +- drm/i915/gt: nuke unused legacy engine hw_id (jsc#SLE-22601). +- drm/i915/gt: fix platform prefix (jsc#SLE-22601). +- drm/i915: Add intel_context tracing (jsc#SLE-22601). +- drm/i915/guc: Add trace point for GuC submit (jsc#SLE-22601). +- drm/i915/guc: Update GuC debugfs to support new GuC + (jsc#SLE-22601). +- drm/i915/guc: Update intel_gt_wait_for_idle to work with GuC + (jsc#SLE-22601). +- drm/i915/guc: Ensure G2H response has space in buffer + (jsc#SLE-22601). +- drm/i915/guc: Disable semaphores when using GuC scheduling + (jsc#SLE-22601). +- drm/i915/guc: Ensure request ordering via completion fences + (jsc#SLE-22601). +- drm/i915: Disable preempt busywait when using GuC scheduling + (jsc#SLE-22601). +- drm/i915/guc: Extend deregistration fence to schedule disable + (jsc#SLE-22601). +- drm/i915/guc: Disable engine barriers with GuC during unpin + (jsc#SLE-22601). +- drm/i915/guc: Defer context unpin until scheduling is disabled + (jsc#SLE-22601). +- drm/i915/guc: Insert fence on context when deregistering + (jsc#SLE-22601). +- drm/i915/guc: Implement GuC context operations for new inteface + (jsc#SLE-22601). +- drm/i915/guc: Add bypass tasklet submission path to GuC + (jsc#SLE-22601). +- drm/i915/guc: Implement GuC submission tasklet (jsc#SLE-22601). +- drm/i915/guc: Add LRC descriptor context lookup array + (jsc#SLE-22601). +- drm/i915/guc: Remove GuC stage descriptor, add LRC descriptor + (jsc#SLE-22601). +- drm/i915/guc: Add new GuC interface defines and structures + (jsc#SLE-22601). +- drm/i915/xehp: New engine context offsets (jsc#SLE-22601). +- drm/i915/xehp: Handle new device context ID format + (jsc#SLE-22601). +- drm/i915/selftests: Allow for larger engine counts + (jsc#SLE-22601). +- drm/i915/gen12: Use fuse info to enable SFC (jsc#SLE-22601). +- drm/i915/dg2: add DG2 platform info (jsc#SLE-22601). +- drm/i915/xehpsdv: add initial XeHP SDV definitions + (jsc#SLE-22601). +- drm/i915: Add XE_HP initial definitions (jsc#SLE-22601). +- drm/i915: Add release id version (jsc#SLE-22601). +- drm/i915: do not abbreviate version in debugfs (jsc#SLE-22601). +- drm/i915: Make the kmem slab for i915_buddy_block a global + (jsc#SLE-22601). +- drm/i915: Use a table for i915_init/exit (v2) (jsc#SLE-22601). +- drm/i915: Call i915_globals_exit() after i915_pmu_exit() + (jsc#SLE-22601). +- drm/i915: Ditch i915 globals shrink infrastructure + (jsc#SLE-22601). +- drm/i915: Make GT workaround upper bounds exclusive + (jsc#SLE-22601). +- drm/i915: Program DFR enable/disable as a GT workaround + (jsc#SLE-22601). +- drm/i915/icl: Drop a couple unnecessary workarounds + (jsc#SLE-22601). +- drm/i915: Fix application of WaInPlaceDecompressionHang + (jsc#SLE-22601). +- drm/i915: Add TTM offset argument to mmap (jsc#SLE-22601). +- drm/i915/uapi: convert drm_i915_gem_userptr to kernel doc + (jsc#SLE-22601). +- drm/i915/uapi: reject caching ioctls for discrete + (jsc#SLE-22601). +- Revert "drm/i915: Skip over MI_NOOP when parsing" + (jsc#SLE-22601). +- drm/i915: Drop error handling from dma_fence_work + (jsc#SLE-22601). +- drm/i915: Remove allow_alloc from i915_gem_object_get_sg* + (jsc#SLE-22601). +- drm/i915/icl: Drop workarounds that only apply to pre-production + steppings (jsc#SLE-22601). +- drm/i915/cnl: Drop all workarounds (jsc#SLE-22601). +- drm/i915/dg1: Use revid->stepping tables (jsc#SLE-22601). +- drm/i915/rkl: Use revid->stepping tables (jsc#SLE-22601). +- drm/i915/jsl_ehl: Use revid->stepping tables (jsc#SLE-22601). +- drm/i915/icl: Use revid->stepping tables (jsc#SLE-22601). +- drm/i915/glk: Use revid->stepping tables (jsc#SLE-22601). +- drm/i915/bxt: Use revid->stepping tables (jsc#SLE-22601). +- drm/i915/kbl: Drop pre-production revision from stepping table + (jsc#SLE-22601). +- drm/i915/skl: Use revid->stepping tables (jsc#SLE-22601). +- drm/i915: Make pre-production detection use direct revid + comparison (jsc#SLE-22601). +- drm/i915/step: s/_revid_tbl/_revids + (jsc#SLE-22601). +- drm/i915/uapi: convert drm_i915_gem_set_domain to kernel doc + (jsc#SLE-22601). +- drm/i915/uapi: convert drm_i915_gem_caching to kernel doc + (jsc#SLE-22601). +- drm/i915/guc: Module load failure test for CT buffer creation + (jsc#SLE-22601). +- drm/i915/guc: Optimize CTB writes and reads (jsc#SLE-22601). +- drm/i915/guc: Add stall timer to non blocking CTB send function + (jsc#SLE-22601). +- drm/i915/guc: Add non blocking CTB send function + (jsc#SLE-22601). +- drm/i915/guc: Increase size of CTB buffers (jsc#SLE-22601). +- drm/i915/guc: Improve error message for unsolicited CT response + (jsc#SLE-22601). +- drm/i915/guc: Relax CTB response timeout (jsc#SLE-22601). +- drm/i915/adl_s: Extend Wa_1406941453 (jsc#SLE-22601). +- drm/i915: Implement Wa_1508744258 (jsc#SLE-22601). +- drm/i915: Settle on "adl-x" in WA comments (jsc#SLE-22601). +- drm/i915: use consistent CPU mappings for pin_map users + (jsc#SLE-22601). +- drm/i915: Finalize contexts in GEM_CONTEXT_CREATE on version 13+ + (jsc#SLE-22601). +- drm/i915/gem: Roll all of context creation together + (jsc#SLE-22601). +- i915/gem/selftests: Assign the VM at context creation in + igt_shared_ctx_exec (jsc#SLE-22601). +- drm/i915/selftests: Take a VM in kernel_context() + (jsc#SLE-22601). +- drm/i915/gem: Don't allow changing the engine set on running + contexts (v3) (jsc#SLE-22601). +- drm/i915/gem: Don't allow changing the VM on running contexts + (v4) (jsc#SLE-22601). +- drm/i915/gem: Delay context creation (v3) (jsc#SLE-22601). +- drm/i915/gt: Drop i915_address_space::file (v2) (jsc#SLE-22601). +- drm/i915/gem: Return an error ptr from context_lookup + (jsc#SLE-22601). +- drm/i915/gem: Use the proto-context to handle create parameters + (v5) (jsc#SLE-22601). +- drm/i915/gem: Make an alignment check more sensible + (jsc#SLE-22601). +- drm/i915: Add an i915_gem_vm_lookup helper (jsc#SLE-22601). +- drm/i915/gem: Optionally set SSEU in intel_context_set_gem + (jsc#SLE-22601). +- drm/i915/gem: Rework error handling in default_engines + (jsc#SLE-22601). +- drm/i915/gem: Add an intermediate proto_context struct (v5) + (jsc#SLE-22601). +- drm/i915: Add gem/i915_gem_context.h to the docs + (jsc#SLE-22601). +- drm/i915/gem: Add a separate validate_priority helper + (jsc#SLE-22601). +- drm/i915: Stop manually RCU banging in reset_stats_ioctl (v2) + (jsc#SLE-22601). +- drm/i915/gem: Disallow creating contexts with too many engines + (jsc#SLE-22601). +- drm/i915/request: Remove the hook from await_execution + (jsc#SLE-22601). +- drm/i915/gem: Remove engine auto-magic with FENCE_SUBMIT (v2) + (jsc#SLE-22601). +- drm/i915/gem: Disallow bonding of virtual engines (v3) + (jsc#SLE-22601). +- drm/i915: Drop getparam support for I915_CONTEXT_PARAM_ENGINES + (jsc#SLE-22601). +- drm/i915: Implement SINGLE_TIMELINE with a syncobj (v4) + (jsc#SLE-22601). +- drm/i915: Drop the CONTEXT_CLONE API (v2) (jsc#SLE-22601). +- drm/i915/gem: Return void from context_apply_all + (jsc#SLE-22601). +- drm/i915/gem: Set the watchdog timeout directly in + intel_context_set_gem (v2) (jsc#SLE-22601). +- drm/i915: Drop I915_CONTEXT_PARAM_NO_ZEROMAP (jsc#SLE-22601). +- drm/i915: Stop storing the ring size in the ring pointer (v3) + (jsc#SLE-22601). +- drm/i915: Drop I915_CONTEXT_PARAM_RINGSIZE (jsc#SLE-22601). +- drm/i915/adlp: Add ADL-P GuC/HuC firmware files (jsc#SLE-22601). +- drm/i915/huc: Update TGL and friends to HuC 7.9.3 + (jsc#SLE-22601). +- drm/i915/adl_s: Fix dma_mask_size to 39 bit (jsc#SLE-22601). +- drm/i915/gt: finish INTEL_GEN and friends conversion + (jsc#SLE-22601). +- drm/i915/selftests: fix smatch warning in mock_reserve + (jsc#SLE-22601). +- drm/i915/selftests: fix smatch warning in igt_check_blocks + (jsc#SLE-22601). +- drm/i915: Improve debug Kconfig texts a bit (jsc#SLE-22601). +- drm/i915/gtt: ignore min_page_size for paging structures + (jsc#SLE-22601). +- drm/i915: support forcing the page size with lmem + (jsc#SLE-22601). +- drm/i915/display: Migrate objects to LMEM if possible for + display (jsc#SLE-22601). +- drm/i915/gem: Introduce a selftest for the gem object migrate + functionality (jsc#SLE-22601). +- drm/i915/gem: Implement object migration (jsc#SLE-22601). +- drm/i915/selftest: Extend ctx_timestamp ICL workaround to GEN11 + (jsc#SLE-22601). +- drm/i915/ttm: Use TTM for system memory (jsc#SLE-22601). +- drm/i915/ttm: Adjust gem flags and caching settings after a move + (jsc#SLE-22601). +- drm/i915: Update object placement flags to be mutable + (jsc#SLE-22601). +- drm/i915/ttm: fix static warning (jsc#SLE-22601). +- drm/i915/eb: Fix pagefault disabling in the first slowpath + (jsc#SLE-22601). +- drm/i915: Document the Virtual Engine uAPI (jsc#SLE-22601). +- drm/i915/guc: Update firmware to v62.0.0 (jsc#SLE-22601). +- drm/i915/guc: Introduce unified HXG messages (jsc#SLE-22601). +- drm/i915: Move submission tasklet to i915_sched_engine + (jsc#SLE-22601). +- drm/i915: Update i915_scheduler to operate on i915_sched_engine + (jsc#SLE-22601). +- drm/i915: Add kick_backend function to i915_sched_engine + (jsc#SLE-22601). +- drm/i915: Move engine->schedule to i915_sched_engine + (jsc#SLE-22601). +- drm/i915: Move active tracking to i915_sched_engine + (jsc#SLE-22601). +- drm/i915: Reset sched_engine.no_priolist immediately after + dequeue (jsc#SLE-22601). +- drm/i915: Add i915_sched_engine_is_empty function + (jsc#SLE-22601). +- drm/i915: Move priolist to new i915_sched_engine object + (jsc#SLE-22601). +- drm/i915/selftests: add back the selftest() hook for the buddy + (jsc#SLE-22601). +- drm/i915/ttm: Fix incorrect assumptions about ttm_bo_validate() + semantics (jsc#SLE-22601). +- drm/i915: Add support for explicit L3BANK steering + (jsc#SLE-22601). +- drm/i915: Add GT support for multiple types of multicast + steering (jsc#SLE-22601). +- drm/i915: extract steered reg access to common function + (jsc#SLE-22601). +- drm/i915: Remove duplicate include of intel_region_lmem.h + (jsc#SLE-22601). +- drm/i915: Perform execbuffer object locking as a separate step + (jsc#SLE-22601). +- drm/i915/gem: Zap the i915_gem_object_blt code (jsc#SLE-22601). +- drm/i915/gem: Zap the client blt code (jsc#SLE-22601). +- drm/i915/ttm: accelerated move implementation (jsc#SLE-22601). +- drm/i915/gt: Setup a default migration context on the GT + (jsc#SLE-22601). +- drm/i915/gt: Pipelined clear (jsc#SLE-22601). +- drm/i915/gt: Pipelined page migration (jsc#SLE-22601). +- drm/i915/gt: Export the pinned context constructor and + destructor (jsc#SLE-22601). +- drm/i915/gt: Add a routine to iterate over the pagetables of + a GTT (jsc#SLE-22601). +- drm/i915/gt: Add an insert_entry for gen8_ppgtt (jsc#SLE-22601). +- drm/i915: Introduce a ww transaction helper (jsc#SLE-22601). +- drm/i915: Break out dma_resv ww locking utilities to separate + files (jsc#SLE-22601). +- drm/i915: Reference objects on the ww object list + (jsc#SLE-22601). +- drm/i915/ttm: remove unused function (jsc#SLE-22601). +- drm/i915/gem: Remove duplicated call to ops->pread + (jsc#SLE-22601). +- drm/i915/ttm: restore min_page_size behaviour (jsc#SLE-22601). +- drm/i915/ttm: switch over to ttm_buddy_man (jsc#SLE-22601). +- drm/i915/ttm: remove node usage in our naming (jsc#SLE-22601). +- drm/i915/ttm: pass along the I915_BO_ALLOC_CONTIGUOUS + (jsc#SLE-22601). +- drm/i915/ttm: Calculate the object placement at get_pages time + (jsc#SLE-22601). +- drm/i915/ttm: add i915_sg_from_buddy_resource (jsc#SLE-22601). +- drm/i915/ttm: add ttm_buddy_man (jsc#SLE-22601). +- drm/i915/ttm: Fix memory leaks (jsc#SLE-22601). +- drm/i915/adl_p: Add initial ADL_P Workarounds (jsc#SLE-22601). +- drm/i915: Simplify userptr locking (jsc#SLE-22601). + Refresh + patches.suse/lib-scatterlist-Provide-a-dedicated-function-to-supp.patch. +- drm/i915: Fix busy ioctl commentary (jsc#SLE-22601). +- drm/aperture: Pass DRM driver structure instead of driver name + (jsc#SLE-22601). +- drm/i915: Track IRQ state in local device state (jsc#SLE-22601). +- dma-buf: add dma_fence_chain_alloc/free v3 (jsc#SLE-22601). +- drm/i915: Use ttm mmap handling for ttm bo's (jsc#SLE-22601). +- drm/vma: Add a driver_private member to vma_node + (jsc#SLE-22601). +- drm/i915/lmem: Verify checks for lmem residency (jsc#SLE-22601). +- drm/i915/ttm: Introduce a TTM i915 gem object backend + (jsc#SLE-22601). + Refresh + patches.suse/lib-scatterlist-Provide-a-dedicated-function-to-supp.patch. +- drm/dp: Extract i915's eDP backlight code into DRM helpers + (jsc#SLE-22601). +- drm/i915/dpcd_bl: Print return codes for VESA backlight failures + (jsc#SLE-22601). +- drm/i915/dpcd_bl: Return early in vesa_calc_max_backlight if + we can't read PWMGEN_BIT_COUNT (jsc#SLE-22601). +- drm/i915/dpcd_bl: Move VESA backlight enabling code closer + together (jsc#SLE-22601). +- drm/i915/dpcd_bl: Cache some backlight capabilities in + intel_panel.backlight (jsc#SLE-22601). +- drm/i915/dpcd_bl: Cleanup intel_dp_aux_vesa_enable_backlight() + a bit (jsc#SLE-22601). +- drm/i915/dpcd_bl: Handle drm_dpcd_read/write() return values + correctly (jsc#SLE-22601). +- drm/i915/dpcd_bl: Remove redundant AUX backlight frequency + calculations (jsc#SLE-22601). +- gpu/drm/i915: nuke old GEN macros (jsc#SLE-22601). +- drm/i915: finish INTEL_GEN and friends conversion + (jsc#SLE-22601). +- drm/i915/hdcp: Nuke Platform check for mst hdcp init + (jsc#SLE-22601). +- drm/i915/display: check if compressed_llb was allocated + (jsc#SLE-22601). +- drm/i915/display: Fix state mismatch in drm infoframe + (jsc#SLE-22601). +- drm/i915/ehl: Remove require_force_probe protection + (jsc#SLE-22601). +- drm/i915/jsl: Remove require_force_probe protection + (jsc#SLE-22601). +- drm/i915/display: use max_level to control loop (jsc#SLE-22601). +- drm/i915/display: fix level 0 adjustement on display ver >= + 12 (jsc#SLE-22601). +- drm/i915/display/adl_p: Implement Wa_16011303918 + (jsc#SLE-22601). +- drm/i915/xelpd: Handle PSR2 SDP indication in the prior scanline + (jsc#SLE-22601). +- drm/i915/display/adl_p: Implement Wa_16011168373 + (jsc#SLE-22601). +- drm/i915/display/adl_p: Implement Wa_22012278275 + (jsc#SLE-22601). +- drm/i915/display/psr: Handle SU Y granularity (jsc#SLE-22601). +- drm/i915: s/intel_crtc/crtc/ (jsc#SLE-22601). +- drm/i915: Clean up intel_fbdev_init_bios() a bit + (jsc#SLE-22601). +- drm/i915: Clean up pre-skl wm calling convention + (jsc#SLE-22601). +- drm/i915: Clean up intel_find_initial_plane_obj() a bit + (jsc#SLE-22601). +- drm/i915: Clean up intel_get_load_detect_pipe() a bit + (jsc#SLE-22601). +- drm/i915: Stop hand rolling drm_crtc_mask() (jsc#SLE-22601). +- drm/i915/fbc: Allocate llb before cfb (jsc#SLE-22601). +- drm/i915/fbc: Make the cfb allocation loop a bit more legible + (jsc#SLE-22601). +- drm/i915/fbc: Extract intel_fbc_stolen_end() (jsc#SLE-22601). +- drm/i915/fbc: Introduce g4x_dpfc_ctl_limit() (jsc#SLE-22601). +- drm/i915/fbc: Handle 16bpp compression limit better + (jsc#SLE-22601). +- drm/i915/fbc: Don't pass around the mm node (jsc#SLE-22601). +- drm/i915/fbc: Embed the compressed_llb node (jsc#SLE-22601). +- drm/i915/fbc: Extract intel_fbc_program_cfb() (jsc#SLE-22601). +- drm/i915/fbc: s/threshold/limit/ (jsc#SLE-22601). +- drm/i915: Add the missing adls vswing tables (jsc#SLE-22601). +- drm/i915: Nuke buf_trans hdmi functions (jsc#SLE-22601). +- drm/i915: Clean up jsl/ehl buf trans functions (jsc#SLE-22601). +- drm/i915: Fix ehl edp hbr2 vswing table (jsc#SLE-22601). +- drm/i915: keep backlight_enable on until turn eDP display off + (jsc#SLE-22601). +- drm/i915: Deduplicate icl DP HBR2 vs. eDP HBR3 table + (jsc#SLE-22601). +- drm/i915: Fix dg1 buf trans tables (jsc#SLE-22601). +- drm/i915: Introduce rkl_get_combo_buf_trans() (jsc#SLE-22601). +- drm/i915: Clean up hsw/bdw/skl/kbl buf trans funcs + (jsc#SLE-22601). +- drm/i915: Introduce encoder->get_buf_trans() (jsc#SLE-22601). +- drm/i915: Store the HDMI default entry in the bug trans struct + (jsc#SLE-22601). +- drm/i915; Return the whole buf_trans struct from get_buf_trans() + (jsc#SLE-22601). +- drm/i915: Introduce intel_get_buf_trans() (jsc#SLE-22601). +- drm/i915: Wrap the buf trans tables into a struct + (jsc#SLE-22601). +- drm/i915: Rename dkl phy buf trans tables (jsc#SLE-22601). +- drm/i915: Wrap the platform specific buf trans structs into + a union (jsc#SLE-22601). +- drm/i915: Introduce hsw_get_buf_trans() (jsc#SLE-22601). +- drm/i915: s/intel/hsw/ for hsw/bdw/skl buf trans + (jsc#SLE-22601). +- drm/i915/adl_p: Load DMC (jsc#SLE-22601). +- drm/i915/adl_p: Pipe B DMC Support (jsc#SLE-22601). +- drm/i915/xelpd: Pipe A DMC plugging (jsc#SLE-22601). +- drm/i915/dmc: Introduce DMC_FW_MAIN (jsc#SLE-22601). +- drm/i915: Force a TypeC PHY disconnect during suspend/shutdown + (jsc#SLE-22601). +- drm/i915/xelpd: break feature inheritance (jsc#SLE-22601). +- drm/i915: apply WaEnableVGAAccessThroughIOPort as needed + (jsc#SLE-22601). +- commit a14349b + +- block: Hold invalidate_lock in BLKZEROOUT ioctl (bsc#1183392). + This patch series fixes the block/009 test which can fail with a low failure + rate of about 1/1400. I've tested this series with kernel-ci against the + baseline and found no regressions. +- block: Hold invalidate_lock in BLKDISCARD ioctl (bsc#1183392). +- mm: Add functions to lock invalidate_lock for two mappings + (bsc#1183392). +- mm: Protect operations adding pages to page cache with + invalidate_lock (bsc#1183392). +- commit 2ea6207 + +- printk: restore flushing of NMI buffers on remote CPUs after + NMI backtraces (bsc#1192988). +- commit 21c31a1 + +- printk: Remove printk.h inclusion in percpu.h (bsc#1192987). +- commit b339baf + +- ethernet: chelsio: use eth_hw_addr_set() (jsc#SLE-18992). +- net: chelsio: cxgb4vf: Make use of the helper function + dev_err_probe() (jsc#SLE-18992). +- cxgb4: Search VPD with pci_vpd_find_ro_info_keyword() + (jsc#SLE-18992). +- cxgb4: Remove unused vpd_param member ec (jsc#SLE-18992). +- cxgb4: Validate VPD checksum with pci_vpd_check_csum() + (jsc#SLE-18992). +- cxgb4: Properly revert VPD changes (jsc#SLE-18992). +- cxgb4: improve printing NIC information (jsc#SLE-18992). +- net: chelsio: switch from 'pci_' to 'dma_' API (jsc#SLE-18992). +- Revert "cxgb4: Validate VPD checksum with pci_vpd_check_csum()" + (jsc#SLE-18992). +- Revert "Revert "cxgb4: Search VPD with + pci_vpd_find_ro_info_keyword()"" (jsc#SLE-18992). +- Revert "cxgb4: Search VPD with pci_vpd_find_ro_info_keyword()" + (jsc#SLE-18992). +- cxgb4: Search VPD with pci_vpd_find_ro_info_keyword() + (jsc#SLE-18992). +- cxgb4: Remove unused vpd_param member ec (jsc#SLE-18992). +- cxgb4: Validate VPD checksum with pci_vpd_check_csum() + (jsc#SLE-18992). +- cxgb4: make the array match_all_mac static, makes object smaller + (jsc#SLE-18992). +- commit e59b97c + +- RDMA/nldev: Check stat attribute before accessing it + (jsc#SLE-19249). +- RDMA/mlx4: Do not fail the registration on port stats + (jsc#SLE-19255). +- IB/hfi1: Properly allocate rdma counter desc memory + (jsc#SLE-19242). +- RDMA/core: Set send and receive CQ before forwarding to the + driver (jsc#SLE-19249). +- i40e: Fix display error code in dmesg (jsc#SLE-18378). +- i40e: Fix creation of first queue by omitting it if is not + power of two (jsc#SLE-18378). +- i40e: Fix warning message and call stack during rmmod i40e + driver (jsc#SLE-18378). +- i40e: Fix ping is lost after configuring ADq on VF + (jsc#SLE-18378). +- i40e: Fix changing previously set num_queue_pairs for PFs + (jsc#SLE-18378). +- i40e: Fix NULL ptr dereference on VSI filter sync + (jsc#SLE-18378). +- i40e: Fix correct max_pkt_size on VF RX queue (jsc#SLE-18378). +- devlink: Don't throw an error if flash notification sent before + devlink visible (jsc#SLE-19253). +- net/mlx5: E-Switch, return error if encap isn't supported + (jsc#SLE-19253). +- net/mlx5: Lag, update tracker when state change event received + (jsc#SLE-19253). +- net/mlx5e: CT, Fix multiple allocations and memleak of mod acts + (jsc#SLE-19253). +- net/mlx5: Fix flow counters SF bulk query len (jsc#SLE-19253). +- net/mlx5: E-Switch, rebuild lag only when needed + (jsc#SLE-19253). +- net/mlx5: Update error handler for UCTX and UMEM + (jsc#SLE-19253). +- net/mlx5: DR, Fix check for unsupported fields in match param + (jsc#SLE-19253). +- net/mlx5: DR, Handle eswitch manager and uplink vports + separately (jsc#SLE-19253). +- net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() + (jsc#SLE-19253). +- net/mlx5: E-Switch, Fix resetting of encap mode when entering + switchdev (jsc#SLE-19253). +- net/mlx5e: Wait for concurrent flow deletion during neigh/fib + events (jsc#SLE-19253). +- net/mlx5e: kTLS, Fix crash in RX resync flow (jsc#SLE-19253). +- net: sched: act_mirred: drop dst for the direction from egress + to ingress (git-fixes). +- bnxt_en: Fix compile error regression when CONFIG_BNXT_SRIOV + is not set (jsc#SLE-18978). +- udp: Validate checksum in udp_read_sock() (git-fixes). +- xsk: Fix crash on double free in buffer pool (jsc#SLE-18375). +- iavf: Restore VLAN filters after link down (jsc#SLE-18385). +- iavf: Fix for setting queues to 0 (jsc#SLE-18385). +- iavf: Fix for the false positive ASQ/ARQ errors while issuing + VF reset (jsc#SLE-18385). +- iavf: validate pointers (jsc#SLE-18385). +- iavf: prevent accidental free of filter structure + (jsc#SLE-18385). +- iavf: Fix failure to exit out from last all-multicast mode + (jsc#SLE-18385). +- iavf: don't clear a lock we don't hold (jsc#SLE-18385). +- iavf: free q_vectors before queues in iavf_disable_vf + (jsc#SLE-18385). +- iavf: check for null in iavf_fix_features (jsc#SLE-18385). +- iavf: Fix return of set the new channel count (jsc#SLE-18385). +- bnxt_en: reject indirect blk offload when hw-tc-offload is off + (jsc#SLE-18978). +- bnxt_en: fix format specifier in live patch error message + (jsc#SLE-18978). +- bnxt_en: extend RTNL to VF check in devlink driver_reinit + (jsc#SLE-18978). +- net: bnx2x: fix variable dereferenced before check + (jsc#SLE-18274). +- ethernet: bnx2x: use eth_hw_addr_set() (jsc#SLE-18274). +- bnx2x: Search VPD with pci_vpd_find_ro_info_keyword() + (jsc#SLE-18274). +- bnx2x: Read VPD with pci_vpd_alloc() (jsc#SLE-18274). +- bnx2x: remove unused variable 'cur_data_offset' (jsc#SLE-18274). +- commit 4626034 + +- kernel-source.spec: install-kernel-tools also required on 15.4 +- commit 6cefb55 + +- dmanegine: idxd: fix resource free ordering on driver removal + (git-fixes). +- ALSA: usb-audio: Fix possible race at sync of urb completions + (git-fixes). +- Bluetooth: call sock_hold earlier in sco_conn_del (git-fixes). +- commit c31b8d8 + +- blacklist.conf: 70a9ac36ffd8 ("f2fs: fix up f2fs_lookup tracepoints") + CONFIG_F2FS_FS is not set anywhere. +- commit 192a1c3 + +- tracing/histogram: Do not copy the fixed-size char array field + over the field size (git-fixes). +- commit c8df0a0 + +- blacklist.conf: 172f7ba9772c ("ftrace: Make ftrace_profile_pages_init static") + A cosmetic fix. +- commit 99f4114 + +- tracing: use %ps format string to print symbols (git-fixes). +- commit 11044ff + +- Drivers: hv: vmbus: Initialize VMbus ring buffer for Isolation VM (bsc#1183682). +- Update config files. +- commit a524613 + +- config: disable unprivileged BPF by default (jsc#SLE-22573) + Backport of mainline commit 8a03e56b253e ("bpf: Disallow unprivileged bpf + by default") only changes kconfig default, used e.g. for "make oldconfig" + when the config option is missing, but does not update our kernel configs + used for build. Update also these to make sure unprivileged BPF is really + disabled by default. +- commit 4a1e78c + +- Drivers: hv: vmbus: Add SNP support for VMbus channel initiate + message (bsc#1183682). +- x86/hyperv: Add ghcb hvcall support for SNP VM (bsc#1183682). +- x86/hyperv: Add Write/Read MSR registers via ghcb page + (bsc#1183682). +- Drivers: hv: vmbus: Mark vmbus ring buffer visible to host in + Isolation VM (bsc#1183682). +- x86/hyperv: Add new hvcall guest address host visibility support + (bsc#1183682). +- x86/hyperv: Initialize shared memory boundary in the Isolation + VM (bsc#1183682). +- x86/hyperv: Initialize GHCB page in Isolation VM (bsc#1183682). +- x86/sev: Expose sev_es_ghcb_hv_call() for use by HyperV + (bsc#1183682). +- commit 7b9b378 + +- x86/sev: Allow #VC exceptions on the VC2 stack (git-fixes). +- commit a295ccf + +- pstore/blk: Use "%lu" to format unsigned long (git-fixes). +- commit 4c246a2 + +- Linux 5.14.21 (stable-5.14.21). +- commit ccb8dac + +- Revert "ACPI: scan: Release PM resources blocked by unused + objects" (stable-5.14.21). +- KVM: Fix steal time asm constraints (stable-5.14.21). +- parisc/entry: fix trace test in syscall exit path + (stable-5.14.21). +- PCI/MSI: Destroy sysfs before freeing entries (stable-5.14.21). +- PCI: Add MSI masking quirk for Nvidia ION AHCI (stable-5.14.21). +- PCI/MSI: Deal with devices lying about their MSI mask capability + (stable-5.14.21). +- perf/core: Avoid put_page() when GUP fails (stable-5.14.21). +- thermal: Fix NULL pointer dereferences in of_thermal_ functions + (stable-5.14.21). +- Bluetooth: btusb: Add support for TP-Link UB500 Adapter + (stable-5.14.21). +- fortify: Explicitly disable Clang support (stable-5.14.21). +- loop: Use blk_validate_block_size() to validate block size + (stable-5.14.21). +- block: Add a helper to validate the block size (stable-5.14.21). +- bootconfig: init: Fix memblock leak in xbc_make_cmdline() + (stable-5.14.21). +- commit 5099a2b + +- Update patch references for stable-5.14.21 +- commit b78e4e4 + +- Revert "mark pstore-blk as broken" (git-fixes). +- Update config files. +- supported.conf: adjust for pstore_blk and co +- commit 79eccc2 + +- pinctrl: qcom: sm8350: Correct UFS and SDC offsets (git-fixes). +- pinctrl: qcom: sdm845: Enable dual edge errata (git-fixes). +- pinctrl: ralink: include 'ralink_regs.h' in 'pinctrl-mt7620.c' + (git-fixes). +- ACPI: Add stubs for wakeup handler functions (git-fixes). +- commit 7d34774 + +- blacklist.conf: add media patch entry that was already picked up +- commit 262559d + +- ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE + (bsc#1192473). +- commit a604fd5 + +- NFC: reorder the logic in nfc_{un,}register_device (git-fixes). +- Refresh + patches.suse/NFC-SUSE-specific-brutal-fix-for-runtime-PM.patch. +- commit 58d673a + +- Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping" + (git-fixes). +- fbdev: Prevent probing generic drivers if a FB is already + registered (git-fixes). +- drm/cma-helper: Release non-coherent memory with + dma_free_noncoherent() (git-fixes). +- drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame + (git-fixes). +- thermal: int340x: Limit Kconfig to 64-bit (git-fixes). +- platform/x86: think-lmi: Abort probe on analyze failure + (git-fixes). +- platform/x86: hp_accel: Fix an error handling path in + 'lis3lv02d_probe()' (git-fixes). +- spi: fix use-after-free of the add_lock mutex (git-fixes). +- e100: fix device suspend/resume (git-fixes). +- NFC: add NCI_UNREG flag to eliminate the race (git-fixes). +- NFC: reorganize the functions in nci_request (git-fixes). +- mac80211: fix monitor_sdata RCU/locking assertions (git-fixes). +- mac80211: drop check for DONT_REORDER in + __ieee80211_select_queue (git-fixes). +- nl80211: fix radio statistics in survey dump (git-fixes). +- cfg80211: call cfg80211_stop_ap when switch from P2P_GO type + (git-fixes). +- docs: accounting: update delay-accounting.rst reference + (git-fixes). +- commit 195d274 + +- powerpc/pseries/svm: Add a powerpc version of cc_platform_has() (jsc#SLE-19924). +- Update config files. +- commit d22f826 + +- btrfs: update comments for chunk allocation -ENOSPC cases + (bsc#1192896). +- btrfs: fix deadlock between chunk allocation and chunk btree + modifications (bsc#1192896). +- commit 09c9eb3 + +- blacklist.conf: Add b94f9ac79a73 cgroup/cpuset: Change references of cpuset_mutex to cpuset_rwsem +- commit b3581c2 + +- x86/sme: Use #define USE_EARLY_PGTABLE_L5 in + mem_encrypt_identity.c (bsc#1192547). +- treewide: Replace the use of mem_encrypt_active() with + cc_platform_has() (jsc#SLE-19924). +- x86/sev: Replace occurrences of sev_es_active() with + cc_platform_has() (jsc#SLE-19924). +- x86/sev: Replace occurrences of sev_active() with + cc_platform_has() (jsc#SLE-19924). +- x86/sme: Replace occurrences of sme_active() with + cc_platform_has() (jsc#SLE-19924). +- x86/ioremap: Selectively build arch override encryption + functions (jsc#SLE-19924). +- powerpc/svm: Don't issue ultracalls if !mem_encrypt_active() + (jsc#SLE-19924). +- commit c6b9314 + +- memcg: replace in_interrupt() by !in_task() in active_memcg() + (bsc#1192894). +- commit 8c447eb + +- Update metadata + patches.suse/bpf-cgroup-Assign-cgroup-in-cgroup_sk_alloc-when-cal.patch + (stable-5.14.19 bsc#1191279). +- Update metadata + patches.suse/bpf-cgroups-Fix-cgroup-v2-fallback-on-v1-v2-mixed-mo.patch + (stable-5.14.19 bsc#1191279). +- commit 590ab5b + +- btrfs: fix memory ordering between normal and ordered work functions (git-fixes). +- commit 0b78f1b + +- Eradicate Patch-mainline: No + The pre-commit check can reject this deprecated tag then. +- Refresh patches.suse/acpi_thinkpad_introduce_acpi_root_table_boot_param.patch. +- Refresh patches.suse/btrfs-provide-super_operations-get_inode_dev. +- Refresh patches.suse/intel_idle-Disable-ACPI-_CST-on-Haswell.patch +- commit 50b72c3 + +- pinctrl: tegra: Return const pointer from + tegra_pinctrl_get_group() (jsc#SLE-20498). +- usb: xhci: tegra: Check padctrl interrupt presence in device + tree (git-fixes). +- dmaengine: tegra210-adma: Override ADMA FIFO size + (jsc#SLE-20498). +- dmaengine: tegra210-adma: Add description for + 'adma_get_burst_config' (jsc#SLE-20498). +- dmaengine: tegra210-adma: Re-order 'has_outstanding_reqs' + member (jsc#SLE-20498). +- gpio: tegra186: Support multiple interrupts per bank + (jsc#SLE-20498). +- gpio: tegra186: Force one interrupt per bank (jsc#SLE-20498). +- i2c: tegra: Ensure that device is suspended before driver is + removed (git-fixes). +- pinctrl: tegra: Fix warnings and error (jsc#SLE-20498). +- pinctrl: tegra: Use correct offset for pin group + (jsc#SLE-20498). +- pinctrl: tegra: Add pinmux support for Tegra194 (jsc#SLE-20498). +- pinctrl: tegra: include lpdr pin properties (jsc#SLE-20498). +- usb: phy: tegra: Support OTG mode programming (git-fixes). +- memory: tegra186-emc: Handle errors in BPMP response + (jsc#SLE-20498). +- soc/tegra: Add Tegra186 ARI driver (jsc#SLE-20498). +- cpufreq: tegra186/tegra194: Handle errors in BPMP response + (jsc#SLE-20498). +- spi: tegra210-quad: Put device into suspend on driver removal + (git-fixes). +- regulator: Don't error out fixed regulator in + regulator_sync_voltage() (git-fixes). +- thermal/drivers/tegra-soctherm: Silence message about clamped + temperature (git-fixes). +- PCI: tegra194: Cleanup unused code (jsc#SLE-20498). +- PCI: tegra194: Don't allow suspend when Tegra PCIe is in EP mode + (jsc#SLE-20498). +- PCI: tegra194: Disable interrupts before entering L2 + (jsc#SLE-20498). +- gpio: tegra186: Add ACPI support (jsc#SLE-20498). +- clk: tegra: Remove CLK_IS_CRITICAL flag from fuse clock + (git-fixes). +- soc/tegra: fuse: Enable fuse clock on suspend for Tegra124 + (git-fixes). +- soc/tegra: fuse: Add runtime PM support (git-fixes). +- soc/tegra: fuse: Clear fuse->clk on driver probe failure + (git-fixes). +- soc/tegra: pmc: Prevent racing with cpuilde driver (git-fixes). +- ASoC: rt5640: Silence warning message about missing interrupt + (git-fixes). +- commit 1fc03e4 + +- Update config files: bump to 5.14.20 +- commit c08e20b + +- Linux 5.14.20 (stable-5.14.20). +- commit 1a4044c + +- Drop x86 patch to follow a stable-5.14.20 revert + Other two (sched and x86 fixes) were reverted in 5.14.20 but we keep them + Delete patches.suse/x86-Fix-__get_wchan-for-STACKTRACE.patch + Update blacklist.conf +- commit 6440d2c + +- x86/setup: Explicitly include acpi.h (bsc#1192825). +- commit 915b5b4 + +- iscsi_ibft: fix warning in reserve_ibft_region() (bsc#1191540). +- commit 4ad3fae + +- e1000e: Add support for the next LOM generation (jsc#SLE-18382). +- Refresh + patches.suse/e1000e-Separate-TGP-board-type-from-SPT.patch. +- commit 92196b6 + +- e1000e: Add support for Lunar Lake (jsc#SLE-18382). +- Refresh + patches.suse/e1000e-Separate-TGP-board-type-from-SPT.patch. +- commit d86918a + +- e1000e: Remove redundant statement (jsc#SLE-18382). +- ionic: no devlink_unregister if not registered (jsc#SLE-19282). +- ionic: tame the filter no space message (jsc#SLE-19282). +- ionic: allow adminq requests to override default error message + (jsc#SLE-19282). +- ionic: handle vlan id overflow (jsc#SLE-19282). +- ionic: generic filter delete (jsc#SLE-19282). +- ionic: generic filter add (jsc#SLE-19282). +- ionic: add generic filter search (jsc#SLE-19282). +- ionic: remove mac overflow flags (jsc#SLE-19282). +- ionic: move lif mac address functions (jsc#SLE-19282). +- ionic: add filterlist to debugfs (jsc#SLE-19282). +- ionic: add lif param to ionic_qcq_disable (jsc#SLE-19282). +- ionic: have ionic_qcq_disable decide on sending to hardware + (jsc#SLE-19282). +- ionic: add polling to adminq wait (jsc#SLE-19282). +- ionic: widen queue_lock use around lif init and deinit + (jsc#SLE-19282). +- ionic: move lif mutex setup and delete (jsc#SLE-19282). +- ionic: check for binary values in FW ver string (jsc#SLE-19282). +- ionic: remove debug stats (jsc#SLE-19282). +- ionic: Move devlink registration to be last devlink command + (jsc#SLE-19282). +- net: e1000e: solve insmod 'Unknown symbol mutex_lock' error + (jsc#SLE-18382). +- net/e1000e: Fix spelling mistake "The" -> "This" + (jsc#SLE-18382). +- e1000e: Add space to the debug print (jsc#SLE-18382). +- e1000e: Additional PHY power saving in S0ix (jsc#SLE-18382). +- e1000e: Add polling mechanism to indicate CSME DPG exit + (jsc#SLE-18382). +- e1000e: Add handshake with the CSME to support S0ix + (jsc#SLE-18382). +- commit 405902c + +- PCI: PM: Do not call platform_pci_power_manageable() + unnecessarily (jsc#SLE-19359). +- commit 18069d0 + +- PCI: PM: Make pci_choose_state() call pci_target_state() + (jsc#SLE-19359). +- commit 397bfa6 + +- PCI: PM: Rearrange pci_target_state() (jsc#SLE-19359). +- commit 6bb9c14 + +- PCI: endpoint: Use sysfs_emit() in "show" functions + (jsc#SLE-19359). +- commit 9243675 + +- PCI: ACPI: PM: Do not use pci_platform_pm_ops for ACPI + (jsc#SLE-19359). +- commit 96c7dd9 + +- PCI: PM: Do not use pci_platform_pm_ops for Intel MID PM + (jsc#SLE-19359). +- commit 7e981c8 + +- PCI: Tidy comments (git-fixes). +- commit 125067a + +- iscsi_ibft: Fix isa_bus_to_virt not working under ARM + (bsc#1191540). +- iscsi_ibft: fix crash due to KASLR physical memory remapping + (bsc#1191540). +- commit 64cab0a + +- kernel-*-subpackage: Add dependency on kernel scriptlets (bsc#1192740). +- commit a133bf4 + +- Fix problem with missing installkernel on Tumbleweed. +- commit 2ed6686 + +- char/random: reinstantiate DRBGs once optimized sha512 becomes + available (jsc#SLE-21132,bsc#1191259). +- commit f4f5829 + +- char/random: wire up userspace interface to SP800-90B compliant + drbg (jsc#SLE-21132,bsc#1191259). +- commit 08f937f + kernel-firmware +- Update to version 20211123: + * linux-firmware: Update firmware file for Intel Bluetooth 9462 + * linux-firmware: Update firmware file for Intel Bluetooth 9462 + * linux-firmware: Update firmware file for Intel Bluetooth 9560 + * linux-firmware: Update firmware file for Intel Bluetooth 9560 + * linux-firmware: Update firmware file for Intel Bluetooth AX201 + * linux-firmware: Update firmware file for Intel Bluetooth AX201 + * linux-firmware: Update firmware file for Intel Bluetooth AX211 + * linux-firmware: Update firmware file for Intel Bluetooth AX211 + * linux-firmware: Update firmware file for Intel Bluetooth AX210 + * linux-firmware: Update firmware file for Intel Bluetooth 9560 + * linux-firmware: Update firmware file for Intel Bluetooth 9260 + * linux-firmware: Update firmware file for Intel Bluetooth AX200 + * linux-firmware: Update firmware file for Intel Bluetooth AX201 + * amdgpu: update yellow carp dmcub firmware + * amdgpu: update vangogh DMCUB firmware + * Update ath10k/QCA6174/hw3.0/board-2.bin + * mrvl: prestera: Update Marvell Prestera Switchdev v4.0 + * QCA: Add Bluetooth firmware for WCN685x +- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256) +- Update _service to follow branch main instead +- Update aliases + kernel-firmware:compressed +- Update to version 20211123: + * linux-firmware: Update firmware file for Intel Bluetooth 9462 + * linux-firmware: Update firmware file for Intel Bluetooth 9462 + * linux-firmware: Update firmware file for Intel Bluetooth 9560 + * linux-firmware: Update firmware file for Intel Bluetooth 9560 + * linux-firmware: Update firmware file for Intel Bluetooth AX201 + * linux-firmware: Update firmware file for Intel Bluetooth AX201 + * linux-firmware: Update firmware file for Intel Bluetooth AX211 + * linux-firmware: Update firmware file for Intel Bluetooth AX211 + * linux-firmware: Update firmware file for Intel Bluetooth AX210 + * linux-firmware: Update firmware file for Intel Bluetooth 9560 + * linux-firmware: Update firmware file for Intel Bluetooth 9260 + * linux-firmware: Update firmware file for Intel Bluetooth AX200 + * linux-firmware: Update firmware file for Intel Bluetooth AX201 + * amdgpu: update yellow carp dmcub firmware + * amdgpu: update vangogh DMCUB firmware + * Update ath10k/QCA6174/hw3.0/board-2.bin + * mrvl: prestera: Update Marvell Prestera Switchdev v4.0 + * QCA: Add Bluetooth firmware for WCN685x +- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256) +- Update _service to follow branch main instead +- Update aliases + kmod +- Enable ZSTD on 15.3 as well (boo#1192104). +- Only test ZSTD in testsuite on releases where it is available. + ldb +- Update to version 2.4.1 + + Corrected python behaviour for 'in' for LDAP attributes + contained as part of ldb.Message; (bso#14845); + + Fix memory handling in ldb.msg_diff; (bso#14836); + + Corrected python docstrings + libapparmor -- update to AppArmor 2.13.6 - - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.6 +- Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED + operation="file_mmap" violation in SLE15-SP4; (bsc#1192336). + +- add aa-notify-more-arch-mr809.diff: Add support for reading s390x + and aarch64 wtmp files (boo#1181155) + +- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532) + +- lessopen.sh profile: allow reading files that live on NFS over UDP + (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552) + +- add profiles-python-3.10-mr783.diff: update abstractions/python and + profiles for python 3.10 + +- update to AppArmor 3.0.3 + - fix a failure in the parser tests + - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3 + for the detailed upstream changelog + +- update to AppArmor 3.0.2 + - add missing permissions to several profiles and abstractions + (including boo#1188296) + - bugfixes in utils and parser (including boo#1180766 and boo#1184779) + - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.2 + for the detailed upstream changelog +- remove upstreamed patches: + - apparmor-dovecot-stats-metrics.diff + - abstractions-php8.diff + - crypto-policies-mr720.diff + +- added apparmor-dovecot-stats-metrics.diff to allow Prometheus metrics end-point + +- move Requires: python3 back to the python3-apparmor subpackage - + readline usage is in the python modules, not in apparmor-utils + +- Remove python symbols (python means currently python2), work + only with python3 ones (fallout from bsc#1185588). + +- add abstractions-php8.diff to support PHP8 in abstractions/php (boo#1186267) + +- add crypto-policies-mr720.diff to allow reading crypto policies + in abstractions/ssl_certs (boo#1183597) + +- replace %{?systemd_requires} with %{?systemd_ordering} to avoid dragging in + systemd into containers just because apparmor-parser ships a *.service file + +- merge libapparmor.changes into apparmor.changes + +- avoid file listed twice error + +- define %_pamdir for <= 15.x to fix the build on those releases + +- add apache-extra-profile-include-if-exists.diff: make + include in apache extra profile optional to avoid problems with empty + profile directory (boo#1178527) + +- prepare usrmerge (boo#1029961) + * use %_pamdir + +- update to AppArmor 3.0.1 + - minor additions to profiles and abstractions + - some bugfixes in libapparmor, apparmor_parser and the aa-* utils + - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1 + for the detailed upstream changelog +- removed upstream(ed) patches: + - changes-since-3.0.0.diff + - extra-profiles-fix-Pux.diff + - utils-fix-hotkey-conflict.diff + +- Use apache provided variables for the module_directry: + + Use %apache_libexecdir + + Add apache-rpm-macros BuildRequires + +- add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in + de, id and sv translations (and fix the test) (MR 675) +- add extra-profiles-fix-Pux.diff to fix an inactive profile - + prevents a crash in aa-logprof and aa-genprof when creating a new + profile (MR 676) + +- update to AppArmor 3.0.0 + - introduce feature abi declaration in profiles to enable use of + new rule types (for openSUSE: dbus and unix rules) + - support xattr attachment conditionals + - experimental support for kill and unconfined profile modes + - rewritten aa-status (in C), including support for new profile modes + - rewritten aa-notify (in python), finally dropping the perl + requirement at runtime + - new tool aa-features-abi for extracting feature abis from the kernel + - update profiles to have profile names and to use 3.0 feature abi + - introduce @{etc_ro} and @{etc_rw} profile variables + - new profile for php-fpm + - several updates to profiles and abstractions (including boo#1166007) + - fully support 'include if exists' in the aa-* tools + - rewrite handling of alias, include, link and variable rules in + the aa-* tools + - rewrite and simplify log handling in the aa-logprof and aa-genprof + - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0 -- drop upstreamed patch libapparmor-so-number.diff +- patches: + - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0 + release up to 3e18c0785abc03ee42a022a67a27a085516a7921 + - drop upstreamed usr-etc-abstractions-base-nameservice.diff + - drop 2.13-only libapparmor-so-number.diff + - refresh apparmor-enable-profile-cache.diff - partially upstreamed + - update apparmor-samba-include-permissions-for-shares.diff and + apparmor-lessopen-profile.patch - switch to "include if exists" + - apparmor-lessopen-profile.patch: add abi rule to lessopen profile + - refresh apparmor-lessopen-nfs-workaround.diff +- move away very loose apache profile that doesn't even match the + apache2 binary path in openSUSE to avoid confusion (boo#872984) +- move rewritten aa-status from utils to parser subpackage +- add aa-features-abi to parser subpackage +- replace perl and libnotify-tools requires with requiring + python3-notify2 and python3-psutil (needed by the rewritten + aa-notify) +- drop ancient cleanup for /etc/init.d/subdomain from parser %pre +- drop (never enabled) conditionals to build with python2 and to + build the python-apparmor subpackage (upstream dropped python2 + support) +- drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed +- set PYFLAKES path for utils check +- add precompiled_cache build conditional to allow faster local + builds without using kvm +- remove duplicated BuildRequires: swig - - fix two potential build failures + - add missing permissions to several profiles and abstractions + - bugfixes in parser and tools + - fix two potential build failures in libapparmor +- remove upstream(ed) patches + - changes-since-2.13.4.diff + - abstractions-X-xauth-mr582.diff + - sevdb-caps-mr589.diff + - libvirt-leaseshelper.patch + - cap_checkpoint_restore.diff +- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656, + cap_checkpoint_restore.diff) + +- %service_del_postun_without_restart only works for Tumbleweed, + keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x + +- Make use of %service_del_postun_without_restart + And stop using DISABLE_RESTART_ON_UPDATE as this interface is + obsolete. + +- libvirt-leaseshelper.patch: add /usr/libexec as a path to the + libvirt leaseshelper script (jsc#SLE-14253) + +- sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON + to severity.db (lp#1890547) + +- add abstractions-X-xauth-mr582.diff to allow reading the xauth file + from its new sddm location (boo#1174290, boo#1174293) + +- add changes-since-2.13.4.diff with upstream changes and fixes + since 2.13.4 up to 5f61bd4c: + - add several abstractions related to xdg-open: + dbus-network-manager-strict, exo-open, gio-open, gvfs-open, + kde-open5, xdg-open + - introduce @{run} variable + - update dnsmasq and winbindd profile + - update mdns, mesa and nameservice abstraction + - some bugfixes in the aa-* tools, including a remote bugfix in the + YaST AppArmor module (boo#1171315) +- drop upstream(ed) patches (now part of changes-since-2.13.4.diff): + - make-4.3-capabilities.diff + - make-4.3-capabilities-vim.diff + - make-4.3-fix-utils-network-test.diff + - make-4.3-network.diff + - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch +- apply usr-etc-abstractions-base-nameservice.diff only for + Tumbleweed, but not for Leap 15.x where it's not needed +- refresh usr-etc-abstractions-base-nameservice.diff + +- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch + (bsc#1168306) + +- fix build with make 4.3 by backporting some commits from upstream + master (boo#1167953): + - make-4.3-capabilities.diff + - make-4.3-capabilities-vim.diff + - make-4.3-network.diff + - make-4.3-fix-utils-network-test.diff + + - several abstraction updates (including boo#1153162) + - disallow writing to fontconfig cache in abstractions/fonts + - some bugfixes in the aa-* tools - -- update to AppArmor 2.13.1 +- drop upstreamed patches: + - abstractions-ssl-certbot-paths.diff + - apparmor-krb5-conf-d.diff + - libapparmor-python3.8.diff + - usr-etc-abstractions-authentification.diff +- refresh usr-etc-abstractions-base-nameservice.diff + +- add usr-etc-abstractions-base-nameservice.diff to adjust + abstractions/base and nameservice for /usr/etc/ (boo#1161756) + +- Properly pull in full python3 interpreter + +- add libapparmor-python3.8.diff to fix building the libapparmor python + bindings (deb#943657) + +- add usr-etc-abstractions-authentification.diff to allow reading + /usr/etc/pam.d/* and some other authentification-related files (boo#1153162) + +- add abstractions-ssl-certbot-paths.diff - add certbot paths to + abstractions/ssl_certs and abstractions/ssl_keys + +- add apparmor-krb5-conf-d.diff for kerberos client + +- update to 2.13.3 + - profile updates for dnsmasq, dovecot, identd, syslog-ng + - new "lsb_release" profile (only used when using "Px -> lsb_release") + - fix buggy syntax in tunables/share + - several abstraction updates + - parser: fix "Px -> foo-bar" (the "-" was rejected before) + - several bugfixes in aa-genprof and aa-logprof +- drop upstream(ed) patches: + - apparmor-nameservice-resolv-conf-link.patch + - profile_filename_cornercase.diff + - dnsmasq-libvirtd.diff + - dnsmasq-revert-alternation.diff + - usrmerge-fixes.diff + - libapparmor-swig-4.diff +- re-number remaining patches + +- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig + 4.0 (boo#1135751) +- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350) + +- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by + update-alternatives (boo#1127877) + +- add dnsmasq-revert-alternation.diff: revert path alternation in + dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid + breaking libvirtd (boo#1127073) + +- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile + to match the newly added libvirtd profile name (boo#1118952#c3) + +- Use %license instead of %doc [bsc#1082318] + +- add apparmor-lessopen-nfs-workaround.diff: allow network access in + lessopen.sh for reading files on NFS (workaround for boo#1119937 / + lp#1784499) + +- add profile_filename_cornercase.diff: drop check that lets aa-logprof + error out in a corner-case (log event for a non-existing profile while + a profile file with the default filename for that non-existing profile + exists) (boo#1120472) + +- netconfig: write resolv.conf to /run with link to /etc (fate#325872, + boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch] + - - no changes in libapparmor + - add profile names to most profiles + - update dnsmasq profile (pid file and logfile path) (boo#1111342) + - add vulkan abstraction + - add letsencrypt certificate path to abstractions/ssl_* + - ignore *.orig and *.rej files when loading profiles + - fix aa-complain etc. to handle named profiles + - several bugfixes and small profile improvements +- remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch -- update to AppArmor 2.13.1 - - several bug fixes +- update to 2.13.1 + - add qt5 and qt5-compose-cache-write abstractions + - add @{uid} and @{uids} kernel var placeholders + - several profile and abstraction updates + - ignore "abi" rules in parser and tools (instead of erroring out) + - utils: fix overwriting of child profile flags if they differ from + the main profile + - several bugfixes (including boo#1100779) +- remove upstream(ed) patches: + - aa-teardown-path.diff + - fix-apparmor-systemd-perms.diff + - logprof-skip-cache-d.diff + - fix-samba-profiles.patch + - make-pyflakes-happy.diff + - dnsmasq-Add-permission-to-open-log-files.patch +- refresh apparmor-samba-include-permissions-for-shares.diff +- add fix-syntax-error-in-rc.apparmor.functions.patch + +- update rpmlintrc: + - whitelist .features file which is part of the pre-compiled cache + - comment out filters for the disabled tomcat_apparmor subpackage + +- Backport dnsmasq fix: + 025c7dc6 - dnsmasq-Add-permission-to-open-log-files.patch + (boo#1111342) + +- add make-pyflakes-happy.diff to fix an unused variable (SR 629206) + +- add fix-samba-profiles.patch - smbd loads new shared libraries. + Allow winbindd to access new kerberos credential cache location + (boo#1092099) + +- exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing + (logprof-skip-cache-d.diff) + +- add fix-apparmor-systemd-perms.diff - fix permissions of + /lib/apparmor/apparmor.systemd (boo#1090545) + +- create and package precompiled cache (/usr/share/apparmor/cache, + read-only) (boo#1069906, boo#1074429) +- change (writeable) cache directory to /var/cache/apparmor/ - with the + new btrfs layout, the only reason for using /var/lib/apparmor/cache/ + (which was "it's part of the / subvolume") is gone, and /var/cache + makes more sense for the cache +- adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both + cache locations +- clear cache also in %post of abstractions package + - add support for conditional includes in policy + - remove group restrictions from aa-notify (boo#1058787) + - aa-complain etc.: set flags for profiles represented by a glob + - aa-status: split profile from exec name + - several profile and abstraction updates +- drop upstreamed patches and files: + - aa-teardown + - apparmor.service + - apparmor.systemd + - 32-bit-no-uid.diff + - disable-cache-on-ro-fs.diff + - dovecot-stats.diff + - parser-write-cache-warn-only.diff + - set-flags-for-profiles-represented-by-glob.patch + - fix-regression-in-set-flags.patch +- drop spec code that handled installing aa-teardown, apparmor.service + and apparmor.systemd (now part of upstream Makefile) +- simplify "make -C profiles parser-check" call (upstream Makefile bug + that required to call "cd" was fixed) +- add aa-teardown-path.diff - install aa-teardown in /usr/sbin/ +- move 'exec' symlink to parser package (belongs to aa-exec) + +- Set flags for profiles represented by glob (bsc#1086154) + set-flags-for-profiles-represented-by-glob.patch + fix-regression-in-set-flags.patch + +- add dovecot-stats.diff: + - add dovecot/stats profile and allow dovecot to run it (boo#1088161) + - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753) +- update 32-bit-no-uid.diff with upstream fix + +- Change of path of rpm in lessopen.sh (boo#1082956) + +- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is + read-only and don't bail out (bsc#1069906, bsc#1074429) + +- add parser-write-cache-warn-only.diff to make cache write failures a + warning instead of an error (boo#1069906, boo#1074429) +- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests" + to avoid pulling in several Gnome packages on servers (boo#1067477) + - add support for 'owner' rules in aa-logprof and aa-genprof + - add support for includes with absolute path in aa-logprof etc. (lp#1733700) + - update aa-decode to also decode PROCTITLE (lp#1736841) + - several profile and abstraction updates, including boo#1069470 +- drop upstreamed patches: + - read_inactive_profile-exactly-once.patch + - utils-fix-sorted-save_profiles-regression.diff +- lessopen profile: change all 'rix' rules to 'mrix' +- add 32-bit-no-uid.diff to fix handling of log events without ouid on + 32 bit systems - - no changes in libapparmor + - add JSON interface to aa-logprof and aa-genprof (used by YaST) + - drop old YaST interface code + - update audio, base and nameservice abstractions + - allow @{pid} to match 7-digit pids +- drop upstreamed patches + - apparmor-yast-cleanup.patch + - apparmor-json-support.patch + - nameservice-libtirpc.diff +- drop obsolete perl modules (YaST no longer needs them) +- drop patches that were only needed by the obsolete perl modules: + - apparmor-utils-string-split + - apparmor-abstractions-no-multiline.diff +- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in + apparmor_parser +- refresh utils-fix-sorted-save_profiles-regression.diff +- add aa-teardown (new script to unload all profiles) +- make ExecStop in apparmor.service a no-op (workaround for a systemd + restriction, see boo#996520 and boo#853019 for details) +- lessopen profile: allow capability dac_read_search and dac_override, + allow groff to execute several helpers (boo#1065388) + +- read_inactive_profile-exactly-once.patch (bsc#1069346) + Perform reading of inactive profiles exactly once. - - mostly test-related changes in libapparmor + - add permissions to several profiles and abstractions (including + lp#1650827 and boo#1057900) + - several fixes in the aa-* tools (including lp#1689667, lp#1628286, + lp#1661766 and boo#1062667) + - fix downgrading/converting of 'unix' rules (will be supported in + kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195) +- remove upstream(ed) patches + - upstream-changes-r3616..3628.diff + - upstream-changes-r3629..3648.diff + - parser-tests-dbus-duplicated-conditionals.diff + - apparmor-fix-podsyntax.patch + - sshd-profile-drop-local-include-r3615.diff +- refresh apparmor-yast-cleanup.patch +- add utils-fix-sorted-save_profiles-regression.diff to fix a regression + in displaying the "changed profiles" list in aa-logprof + +- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244) + +- profiles-sockets-temporary-fix.patch to cater to nameservices with the + new sockets mediation, until unix rules are upstreamed (boo#1061195) + +- add apparmor-fix-podsyntax.patch from mailing list to fix + compilation with perl 5.26 + +- do not require exact X.Y version of "python3" +- require also matching python(abi) which is arguably more important + +- don't rely on implementation details for reload in %post + +- add JSON support. Required for FATE#323380. + (apparmor-yast-cleanup.patch, apparmor-json-support.patch) + +- add upstream-changes-r3629..3648.diff: + - preserve unknown profiles when reloading apparmor.service + (CVE-2017-6507, lp#1668892, boo#1029696) + - add aa-remove-unknown utility to unload unknown profiles (lp#1668892) + - update nvidia abstraction for newer nvidia drivers + - don't enforce ordering of dbus rule attributes in utils (lp#1628286) + - add --parser, --base and --Include option to aa-easyprof to allow + non-standard paths (useful for tests) (lp#1521031) + - move initialization code in apparmor.aa to init_aa(). This allows to + run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser + don't exist. + - several improvements in the utils tests +- drop upstreamed python3-drop-re-locale.patch +- no longer delete/skip some of the utils tests (to allow this, add + parser-tests-dbus-duplicated-conditionals.diff) +- add var.mount dependeny to apparmor.service (boo#1016259#c34) + +- Cleanup spec file: + - don't use insserv if we afterwards call systemd, this can + have bad side effects + - remove dead code + - remove now obsolete 'distro' checks +- Replace init.d script with new wrapper working with systemd + +- add python3-drop-re-locale.patch: remove deprecated re.LOCALE + flag in Python UI as it was dropped from Python 3.6 (lp#1661766) +- add upstream-changes-r3616..3628.diff: + - update abstractions/base, abstractions/apache2-common and dovecot profiles + - merge ask_the_questions() of aa-logprof and aa-mergeprof + - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor +- adjust deleting the cache in profiles %post to the new cache location +- silence errors when deleting the cache (boo#976914) + +- update to AppArmor 2.11.0 + - apparmor_parser now supports parallel compiles and loads + - add full support for dbus, ptrace and signal rules and events to the + utils + - full rewrite of the file rule handling in the utils + - lots of improvements and fixes + - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the + detailed changelog +- patches: + - add sshd-profile-drop-local-include-r3615.diff to fix 'make check' + - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed + - refresh apparmor-abstractions-no-multiline.diff + - refresh apparmor-samba-include-permissions-for-shares.diff +- spec changes: + - aa-unconfined switched to using ss (from iproute2), adjust Recommends: + - move libapparmor to /usr/lib*/ + - drop %if %suse_version checks for 12.x + - change several Obsoletes from %version to < 2.9. Those package names + weren't used since years, and 2.9 is still a careful choice + - include apparmor.service independent of %suse_version + - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires + - drop latex2html, texlive-* and w3m BuildRequires + - techdoc.txt and techdoc.html not included, drop them from the package + - run most of utils/ make check (some tests expect /etc/apparmor.d/ and + /sbin/apparmor_parser to exist, skip them) + - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests) + - drop sed'ing python3 into aa-* shebang (upstreamed) + - build binutils + - aa-exec is now written in C and lives in /usr/bin/, move it to the + apparmor_parser package and create a compability symlink in /usr/sbin/ + - aa-exec manpage moved to section 1 + - aa-enabled is a small new tool to find out if AppArmor is enabled + - package new aa_stack_profile(2) manpage + +- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. + This is part of the root partition (at least with default partitioning) + and should be available earlier than /var/cache/apparmor/ + (boo#1015249, boo#980081, bsc#1016259) +- add dependency on var-lib.mount to apparmor.service as safety net + +- update to AppArmor 2.10.2 maintenance release + - lots of bugfixes and profile updates (including boo#1000201, + boo#1009964, boo#1014463) + - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details +- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression + in aa-unconfined +- drop upstream(ed) patches: + - changes-since-2.10.1--r3326..3346.diff + - changes-since-2.10.1--r3347..3353.diff + - libapparmor-fix-import-path.diff (upstream fix is slightly different) + - nscd-var-lib.diff +- refresh apparmor-abstractions-no-multiline.diff + +- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and + abstractions/nameservice (path changed in latest nscd in Tumbleweed) + +- add changes-since-2.10.1--r3347..3353.diff with upstream changes and + fixes in the 2.10 branch, including + - allow writing *.qf files (for disk-based buffering) in syslog-ng profile + - add several permissions to the dovecot profiles (deb#835826) + - add a missing path in the traceroute profile + +- add changes-since-2.10.1--r3326..3346.diff with upstream changes and + fixes since the 2.10.1 release, including + - allow dac_override in winbindd profile (boo#990006#c5) + - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since + Samba 4.4.x, boo#990006) + - abstractions/nameservice: also support ConnMan-managed resolv.conf + - let aa-genprof ask about profiles in extra dir (again) + - fix aa-logprof "add hat" endless loop (lp#1538306) + - honor 'chown' file events in logparser.py + - ignore log file events with a request mask of 'send' or 'receive' + because they are actually network events (lp#1577051, lp#1582374) + - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2) +- fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607) + (libapparmor-fix-import-path.diff) +- refresh apparmor-abstractions-no-multiline.diff +- drop upstreamed profiles-ping-inet6-r3449.diff +- add %check section - runs libapparmor (including swig bindings), + parser and profiles tests +- add BuildRequires: perl(Locale::gettext) - needed for parser tests + +- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596) + +- update to AppArmor 2.10.1 (2.10 branch r3326): + - fix incorrect output of child profile names (apparmor_parser -N) which + caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) + - fix a crash in aa-logprof / logparser.py for change_hat log events + (lp#1523297) and log events that look like file events, but aren't + (lp#1540562, lp#1525119, lp#1466812) + - write unix rules when saving a profile (lp#1522938, boo#954104#c3) + - several fixes for variable handling in aa-logprof + - map c (create) log events to w instead of a + - add python to the "no Px rule" list in logprof.conf + - let aa-logprof check for duplicate profiles + - let aa-status work without the apparmor.fail python module (boo#971917, + lp#1480492) + - add permissions in several profiles (including boo#948584, boo#948753, + boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and + boo#921098#c15). + - and many more fixes, see the full changelog at + http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 +- drop upstream(ed) patches: + - fix-initscript-aa_log_end_msg.diff + - syslog-ng-profile-boo948584.diff + - upstream-profile-updates-r3205-3241.diff +- refresh patches: + - apparmor-abstractions-no-multiline.diff + - apparmor-samba-include-permissions-for-shares.diff +- drop libapparmor autogen.sh call (broke the build) and remove libtool BR + +- add syslog-ng-profile-boo948584.diff - add several permissions needed + by latest syslog-ng (boo#948584, boo#948753) +- add upstream-profile-updates-r3205-3241.diff with several profile updates: + - add /usr/share/locale-bundle/** to abstractions/base + - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash + - allow dovecot imap to read /run/dovecot/mounts + - allow avahi-daemon to write to /run/systemd/notify + - allow ntpd to read $PATH directory listings (boo#945592, boo#948752) + - update dhclient profile + - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568) + - and some other small updates +- drop upstreamed apparmor-winbindd-r3213.diff (included in the + upstream-profile-updates patch) + +- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904) + +- add apparmor-winbindd-r3213.diff - add missing k permissions for + /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19) + +- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript + output (boo#862170) + +- update to AppArmor 2.10 (trunk r3205) + - profile names can now contain variables + - improved profile compile time in apparmor_parser + - lots of improvements, refactoring and bugfixes in the aa-* tools + - new apis for managing and loading profile caches into the kernel in + libapparmor + - lots of profile updates + - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the + complete changelog with more details +- add new apparmor_private.h and the aa_query_label(2), aa_features(3), + aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages + to libapparmor-devel +- drop apparmor-2.5.1-edirectory-profile patch - it's most probably + no longer needed (see boo#621394 for details) +- drop upstreamed samba-4.2-profiles.diff +- refresh apparmor-samba-include-permissions-for-shares.diff + +- systemd-rpm-macros and %systemd_requires were at the wrong place, + move them to the parser package (boo#931792) + +- update to AppArmor 2.9.2 (2.9 branch r2911) + - lots of bugfixes in the parser and the aa-* tools (including + boo#918787) + - update dovecot and dnsmasq profiles and several abstractions + (including boo#911001) + - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the + full changelog +- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and + apparmor-fix-stl-ostream.diff +- replace GPG key with new AppArmor GPG signing key, see + https://launchpad.net/apparmor/+announcement/13404 + +- make sure %service_del_postun doesn't call systemctl try-restart + (boo#853019, bare systemd edition) +- add samba-4.2-profiles.diff: update samba (winbindd and nmb) + profiles for samba 4.2 (boo#921098, boo#923201) + +- only install apparmor.service for openSUSE > 13.2 + +- Add a native systemd unit which *at the moment* only + wraps/masks the early boot script. + +- add apparmor-fix-stl-ostream.diff which fixes odd uses of + std::ostream which are not valid. Fixes build with GCC 5 + +- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858) + +- add Requires: python3 to python3-apparmor package - readline isn't + part of python3-base (boo#917577) + +- add apparmor-changes-since-2.9.1.diff with upstream fixes since the + 2.9.1 release + - update logparser.py to support changed syslog format (lp#1399027) + - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles + (lp#1296667) + - update the mysqld profile + - fix network rule description in apparmor.d(5) manpage +- drop upstreamed dnsmasq-profile-fixes.patch +- update expired GPG key + +- update to AppArmor 2.9.1 (2.9 branch r2831) + - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368) + - several fixes and performance improvements in the aa-* utils + - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and + bnc#908856), useradd, sendmail, man and passwd + - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1 + for full release notes +- refresh dnsmasq-profile-fixes.patch + +- Fix dnsmasq profile to allow executing bash to run the --dhcp-script + argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt + leasehealper script to run even on x86_64. + dnsmasq-profile-fixes.patch. boo#911001 + +- rename lessopen.sh profile file to usr.bin.lessopen.sh to match the + script filename + +- add apparmor-lessopen-profile.patch: /usr/bin/lessopen.sh needs + confinement. bnc#906858 + +- delete cache in apparmor-profiles %post (workaround for + bnc#904620#c8 / lp#1392042) + +- No longer perform gpg validation; osc source_validator does it + implicit: + + Drop gpg-offline BuildRequires. + + No longer execute gpg_verify. + +- fix bashism in post script + +- update to AppArmor 2.9.0 (r2759) + - change aa-mergeprof to the final commandline syntax + - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several + bugs without a formal bugreport) + - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java + and user-mail abstractions + - fix mod_apparmor to not break basic auth + - update perl modules to support signal, unix and ptrace rules (bnc#900013) + - don't warn about rules not supported by the kernel + - fix logging of "audit capability" (lp#1378091) + - add support for the "hat" keyword in apparmor.vim + - build html version of apparmor.vim manpage again (lp#1366572) + - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0 +- update apparmor-abstractions-no-multiline.diff +- remove upstreamed apparmor-profiles-ntpd-pid-location.diff + libchewing +- Update to version 0.5.1+git20200627.452f622: + * chewing.py supports platforms with 64bit pointer + * Change ︰ to ： + * Don't run tests in parallel + * Try Ubuntu 16.04 Xenial + * autotools: Build with -fPIC like the CMake-based one does + * Show compilation commands if the build system is autotools + * Tolerate unused const warnings + * Fix LSan + * Use internal-sqlite instead of static-sqlite, following 570ab6be + +- Remove unneeded BuildRequires on python-devel, and the conflicting + old py_* macros. +- Remove references to "Python 2", the module supports Python 3. +- Mark COPYING as license. + +- Remove pointless ldconfig call from chewing-utils subpackage. +- Specfile update: remove implicit BuildRoot and defattrs. +- Properly fulfill SLPP requirement that only the library file + is in the library subpackage. + -- retrack upstream source. previous source is from unknown origin. - * it couldn't be found at the link in specfile. - * it didn't have the same content and build result - as upstream source. - * it missed entire python and data sub directories, - so almost useless. -- remove ambiguous libchewing package. fix bnc#808338 - * libchewing is always taken as an old version by users. - * libchewing contained the runtime libraries but it was - not required by libchewing3. important orphan package. - so ibus-chewing and fcitx-chewing can't work. -- enable ncurses wide-char and thread-safe (w6) -- enable python. -- new sub-packages: chewing-data python-chewing chewing-utils - -- fix baselibs.conf - there is no libchewing-32bit - -- Parallel build with %_smp_mflags -- Remove redundant %clean, authors sections -- Avoid requires on library, the other way is preferred - (library requires data package) - -- Split libchewing.so.* into subpackage libchewing3 - -- Update to libchewing 0.3.4 -- Remove libchewing-gcc-fix.diff (upstream rewrite this part) -- Improve the description of libchewing API - Simplified examples to illustrate the usage are added -- Revise libchewing API. Check the documentation for details -- Support THL (Taiwan Huayu Luomapinyin) and MPS2 Pinyin keyboard layout -- Reimplementation of unit test framework. No external 'check' package is required -- Fix several phrase errors - Add exceptional phrase as well -- Improved developer and user guide -- Introduce CMake based build system, which is convenient to MS-Windows based environments. -- Add --enable-gcov to enable gcov coverage -- Fix possible strncat() overflow -- Consistent checks for bopomofo sequence internally -- Handle incomplete bopomofo with space key properly -- Internal structure refactoring -- Read hash path from CHEWING_PATH environment variable -- Make libchewing thread-safe -- Fix IM crash by changing default candidate per page to 10 -- Fix the detection of ncursesw -- Fix the usage of autotools -- Update and tune symbols -- Fix valgrind warning -- Fix several compilation warnings -- Fix GCC visibility availability for Darwin specific PIC code -- Fix hash table initialization and its memory leakage -- Support building with mingw32 toolchain -- Fix GNU Hurd build -- Fix Microsoft VC build -- Fix Windows 64-bit build -- Fix mingw32/64 + WINE build - -- add libtool as explicit buildrequire to avoid implicit dependency from prjconf - -- Update to libchewing 0.3.3: - Fix setfault, improved python-binding, build fixes, etc; - see http://chewing.csie.net/news.html for details - -- fix buffer overflow - -- updated patches to apply with fuzz=0 - -- fix to apply the previous patch properly - -- fix missing call to fclose in sort_word.c (bnc#535452) - -- updated to version 0.3.2, including previous fix patches, - fix memory leaks, doxygen updates, etc. - See ChangeLog for details. -- build with -fno-strict-aliasing to avoid type punning problems - in src/hash.c - libevdev +- It is actually not necessary to use python2, python3 works as + well. + +- update to 1.11.0: + * One new API, libevdev_disable_property() + * Kernel 5.8 changed the SW_MAX define from 0x0f to 0x10. In some niche cases + this causes issues if libevdev and the software build against + different headers and thus end up with different values + * include: sync event codes with kernel 5.10 + * Fix included license to the "always intended" MIT license + +- update to 1.9.1 + * no changelog available +- remove n_buildfix_for_opensuse_12_2.patch: obsolete + +- Update to 1.9.0 (no changelog) + +- Update to 1.8.0 + * Bug fixes + * Docs update + * Improve tests + * Sync with latest kernels + -- Update to 1.3: - * m4: fix CC_CHECK_WERROR and CC_FLAG_VISIBILITY macros - * Add per-device log handlers - * include: update to Linux 3.15 header - * uinput: use the UI_GET_SYSNAME ioctl if available - * uinput: change strcpy/strcat usage for snprintf - * include: add uinput.h header as well - * include: update to Linux 3.16 header - * uinput: check errno against the positive value - * uinput: preserve the errno before cleaning up - * configure: move the python check down to re-unite the - gcov check outputs - * Add libevdev_property_from_name() - * Rename symbols leaking from static library to - avoid name clashes - * uinput: close the managed fd on error - * tools: pass -rc to strerror, not rc - * uinput: explicitly ignore the UI_DEV_DESTROY return value - * Hook up nm to check for leaking symbols in the static library - * Add some minimal documentation about static linking - -- Add git repository metadata - -- Update to 1.2 (recommended for xf86-input-synaptics 1.8.0) - -- add baselibs.conf since libevdev2-32bit is required by libinput-32bit - -- Update to 1.0.99.1 (1.1~rc1) - * Send an extra ABS_MT_SLOT event to sync the client up with - the current slot - * Fix the include directives when building in tools/ - * tools: Fix compiler warning - * Replace hardcoded 0 with the enum for it - * tools: add a tool to print the actual range provided by - a touchpad - * Document that the return value of get_name|uniq|phys is - not permanent - * Plug a memory leak for name, uniq, phys - * Fix memory leaks when failing to create a uinput device - * Document the FORCE_SYNC behavior a bit better - * Fix a wrong reference in the libevdev_next_event - documentation - * Add unlikely() macro - * Don't sync past MAX_SLOTS slots - * Dynamically allocate the slot values - * Reduce memory requirement for MT syncing - * Increase MAX_SLOTS to 60 - * Cap slot values to the announced maximum - * Move some functions/macros between libevdev-int.h - and libevdev-util.h - * Don't sync the MT state for fake MT devices - * If the tracking ID changes during SYN_DROPPED, terminate - the touch first - * Add a documentation note to update the slot after syncing -- New tools subpackage - -- Update to 1.0, for more details, please see: - http://lists.freedesktop.org/archives/input-tools/2014-January/000763.html - and http://lists.freedesktop.org/archives/input-tools/2014-February/000766.html -- SO version bumped to 2 -- Explicitly remove la files, instead of excluding them - -- fixed license to MIT in specfile - -- n_buildfix_for_opensuse_12_2.patch - * buildfix for openSUSE 12.2 (Linux kernel headers too old) - -- Initialize libevdev pckage - libgudev +- Update to version 237: + + Fix reading double precision floats from sysfs attributes in + locales that use comma as a separator + + Fix compilation warning + + Fix headers to help with build reproducibility + + Clarify licensing information +- Changes from version 236: + + Fix meson project name to match autotools. +- Changes from version 235: + + Port build system to meson and remove autotools + + Fix conversion of sysfs attributes to boolean. +- Add meson BuildRequires and macros following upstreams port. +- Enable pkgconfig(umockdev-1.0) BuildRequires and test macro. +- Update Licence tag to LGPL-2.1-or-later. + +- update to 234: + * Clarify that _get_sysfs_attr() functions are cached + * Add functions to get uncached sysfs attributes + +- Update to version 233: + + Require glib 2.38. + + Small documentation updates. + + Remove gnome-common build dependency. +- Use modern macros. + +- Modernize spec-file by calling spec-cleaner + libinput +- Update to release 1.19.2: + * quirks: add quirk for GPD Win Max + * evdev: disable button scroll timeout for extra mouse buttons + * evdev: avoid usage of bogus BTN_FORWARD name + * gestures: avoid processing the last hold and + motion event twice + * quirks: Add quirk for StarLabs clickpads with two + phyisical buttons + * quirks: Update dmi for StarBook Mk V + * quirks: relax DMI modalias match for Purism Librem 14v1 + +- Update to release 1.19.1 + * New: Detects (and works around) buggy devices that claim to + have a high-resolution scroll wheel but which do not actually + send events. + * New assumption that any non-bluetooth touchpad is internal. + * Jumping cursor warning has been reduced once again. + +- Update to release 1.19 + * Hold gestures are a new type of gestures that are triggered + by holding one or more fingers on a touchpad without + significant movement. They add to the existing pinch and + swipe gestures and allow for the implementation of + hold-to-click. + * High-resolution wheel scrolling has been long in the making + and the solution ends up replacing the existing pointer axis + API. Three new events are available: + LIBINPUT_EVENT_POINTER_SCROLL_WHEEL, + LIBINPUT_EVENT_POINTER_SCROLL_FINGER, and + LIBINPUT_EVENT_POINTER_SCROLL_CONTINUOUS. These events + replace the existing LIBINPUT_EVENT_POINTER_AXIS events, i.e. + if you are processing the new events simply discard the old + events. + +- Update to release 1.18.1 + * This release only adds device-specific quirks. + libseccomp +- reenable python bindings at least for the distro default python3 + package: + - adds make-python-build.patch + +- Update to release 2.5.3 + * Update the syscall table for Linux v5.15 + * Fix issues with multiplexed syscalls on mipsel introduced in v2.5.2 + * Document that seccomp_rule_add() may return -EACCES + +- Skip 11-basic-basic_errors test on qemu linux-user emulation + +- Update to release 2.5.2 + * Update the syscall table for Linux v5.14-rc7 + * Add a function, get_notify_fd(), to the Python bindings to + get the nofication file descriptor. + * Consolidate multiplexed syscall handling for all + architectures into one location. + * Add multiplexed syscall support to PPC and MIPS + * The meaning of SECCOMP_IOCTL_NOTIF_ID_VALID changed within + the kernel. libseccomp's fd notification logic was modified + to support the kernel's previous and new usage of + SECCOMP_IOCTL_NOTIF_ID_VALID. + +- update to 2.5.1: + * Fix a bug where seccomp_load() could only be called once + * Change the notification fd handling to only request a notification fd if + * the filter has a _NOTIFY action + * Add documentation about SCMP_ACT_NOTIFY to the seccomp_add_rule(3) manpage + * Clarify the maintainers' GPG keys +- remove testsuite-riscv64-missing-syscalls.patch + +- Do not rely on gperf: pass GPERF=/bin/true to configure and + remove gperf BuildRequires. The syscalls.perf file it would + generate is part of the tarball already. + +- testsuite-riscv64-missing-syscalls.patch: Fix testsuite failure on + riscv64 +- Ignore failure of tests/52-basic-load on qemu linux-user emulation + +- Update to release 2.5.0 + * Add support for the seccomp user notifications, see the + seccomp_notify_alloc(3), seccomp_notify_receive(3), + seccomp_notify_respond(3) manpages for more information + * Add support for new filter optimization approaches, including a balanced + tree optimization, see the SCMP_FLTATR_CTL_OPTIMIZE filter attribute for + more information + * Add support for the 64-bit RISC-V architecture + * Performance improvements when adding new rules to a filter thanks to the + use of internal shadow transactions and improved syscall lookup tables + * Properly document the libseccomp API return values and include them in the + stable API promise + * Improvements to the s390 and s390x multiplexed syscall handling + * Multiple fixes and improvements to the libseccomp manpages + * Moved from manually maintained syscall tables to an automatically generated + syscall table in CSV format + * Update the syscall tables to Linux v5.8.0-rc5 + * Python bindings and build now default to Python 3.x + * Improvements to the tests have boosted code coverage to over 93% +- libseccomp.keyring: replaced by Paul Moore key. + +- Update to release 2.4.3 + * Add list of authorized release signatures to README.md + * Fix multiplexing issue with s390/s390x shm* syscalls + * Remove the static flag from libseccomp tools compilation + * Add define for __SNR_ppoll + * Fix potential memory leak identified by clang in the + scmp_bpf_sim tool +- Drop no-static.diff, libseccomp-fix_aarch64-test.patch, + SNR_ppoll.patch (merged) + +- Add patch to fix ntpsec and others build (accidental drop of symbols): + * SNR_ppoll.patch + +- Tests are passing on all architectures + +- Backport patch to fix test on aarch64: + * libseccomp-fix_aarch64-test.patch + +- Update to release 2.4.2 + * Add support for io-uring related system calls + libssh -- Fix possible Denial of Service attack when using AES-CTR - ciphers; (bsc#1168699) - * Add 0001-CVE-2020-1730-Fix-a-possible-segfault-when-zeroing-A.patch +- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634) + * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6 -- Update to latest version of patch for CVE-2019-14889; (bsc#1158095) - * Update CVE-2019-14889.patch +- Add missing BR for openssh needed for tests -- Fix CVE-2019-14889: arbitrary command execution; (bsc#1158095) - * Add CVE-2019-14889.patch +- update to 0.9.5 (bsc#1174713, CVE-2020-16135): + * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232) + * Improve handling of library initialization (T222) + * Fix parsing of subsecond times in SFTP (T219) + * Make the documentation reproducible + * Remove deprecated API usage in OpenSSL + * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN + * Define version in one place (T226) + * Prevent invalid free when using different C runtimes than OpenSSL (T229) + * Compatibility improvements to testsuite + +- Update to version 0.9.4 + * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/ + * Fix possible Denial of Service attack when using AES-CTR-ciphers + CVE-2020-1730 (bsc#1168699) + +- Drop the hack to pull curl-mini: we moved the split a bit higher + up and now have a non-curl linked variant of cmake in + openSUSE:Factory. + +- Update to version 0.9.3 + * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095) + * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state + * SSH-01-006 General: Various unchecked Null-derefs cause DOS + * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys + * SSH-01-010 SSH: Deprecated hash function in fingerprinting + * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS + * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access + * SSH-01-001 State Machine: Initial machine states should be set explicitly + * SSH-01-002 Kex: Differently bound macros used to iterate same array + * SSH-01-005 Code-Quality: Integer sign confusion during assignments + * SSH-01-008 SCP: Protocol Injection via unescaped File Names + * SSH-01-009 SSH: Update documentation which RFCs are implemented + * SSH-01-012 PKI: Information leak via uninitialized stack buffer + +- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved + for internal use. + +- Update to version 0.9.2 + * Fixed libssh-config.cmake + * Fixed issues with rsa algorithm negotiation (T191) + * Fixed detection of OpenSSL ed25519 support (T197) + +- Update to version 0.9.1 + * Added support for Ed25519 via OpenSSL + * Added support for X25519 via OpenSSL + * Added support for localuser in Match keyword + * Fixed Match keyword to be case sensitive + * Fixed compilation with LibreSSL + * Fixed error report of channel open (T75) + * Fixed sftp documentation (T137) + * Fixed known_hosts parsing (T156) + * Fixed build issue with MinGW (T157) + * Fixed build with gcc 9 (T164) + * Fixed deprecation issues (T165) + * Fixed known_hosts directory creation (T166) + +- Split out configuration to separate package to not mess up the + library packaging and coinstallation + +- Update to verion 0.9.0 + * Added support for AES-GCM + * Added improved rekeying support + * Added performance improvements + * Disabled blowfish support by default + * Fixed several ssh config parsing issues + * Added support for DH Group Exchange KEX + * Added support for Encrypt-then-MAC mode + * Added support for parsing server side configuration file + * Added support for ECDSA/Ed25519 certificates + * Added FIPS 140-2 compatibility + * Improved known_hosts parsing + * Improved documentation + * Improved OpenSSL API usage for KEX, DH, and signatures +- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch +- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch +- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch +- Add libssh client and server config files libstorage-ng +- merge gh#openSUSE/libstorage-ng#848 +- properly quote partition label +- coding style +- 4.4.63 + +- merge gh#openSUSE/libstorage-ng#847 +- support to set partition label +- updated pot and po files +- extended documentation +- 4.4.62 + +- merge gh#openSUSE/libstorage-ng#846 +- make function is_efibootmgr() public (for bsc#937067) +- 4.4.61 + +- merge gh#openSUSE/libstorage-ng#845 +- prefer file system over empty MS-DOS partition table (bsc#1186823) +- fixed testcase +- 4.4.60 + +- merge gh#openSUSE/libstorage-ng#844 +- extended Holder::set_source for multipath devices +- documentation and coding style +- 4.4.59 + +- Translated using Weblate (Catalan) (bsc#1149754) +- 4.4.58 + +- merge gh#openSUSE/libstorage-ng#843 +- added convenience function get_blk_devices() for Multipath and + DmRaid +- added macro LIBSTORAGE_NG_VERSION_AT_LEAST +- 4.4.57 + libwacom +- Add python requires to tools subpackage (bsc#1192852) + +- update to 1.12: + - New devices: + - ELAN 2513 + - HP Probook x360, 435 G7 + - Waltop Slim Tablet 12.1 + - XP-PEN Star 3 + - Lenovo ThinkPad L390 Yoga, Yoga C940, Yoga 460, Yoga 720 + - ThinkVision M14t, IdeaPad Flex5 + - HP EliteBook x360 1030 G3 + - Dell XPS 13 9310 2-in-1 + - HUION Kamvas Pro 13 + - ELAN 2514 variant 2718 + - libwacom's hwdb no longer tags devices with "Keyboard" in + their name as ID_INPUT_TABLET + +- update to 1.10: + - Duplicate matches in /etc no longer cause conflicts with the + system-provided .tablet files + - libwacom-list-local-devices now prints YAML by default + - New tools: + - libwacom-list-devices lists all supported devices + - libwacom-update-db to update the db after adding tablet files + - New devices: + - Elan 2514 variant 25BF + - Huion H640P + - Lenovo X1 Yoga Gen 6 + - Samsung CHromebook Pro + - libwacom can now read tablet and stylus files from /etc/libwacom + - New tool: libwacom-show-stylus to interactively show stylus IDs and serial + numbers + - New devices: + - HP Envy x360, Pro Tablet 508 + - Lenovo X1 Yoga Gen5, Yoga6, Ideapad Flex 5, Yoga 7, Yoga C650, L13 Yoga + - Microsoft Surface Go + - New devices: + - Dell XPS 15 7590 + - HP EliteBook x360 (830 and 1030), Spectre x360 + - Lenovo Thinkpad P15 Gen1, Yoga, Yoga 3, Yoga 11e, X13 Yoga + - New devices: + - Dell XPS 13 2-in-1 9310 + - Lenovo IdeaPad Flex 14API, Flex 5 + - HP Envy x360, EliteBook x360 + - Huawei MateBook HZ-W19 + - XP Pen Star G640 + +- update to 1.6: + * add XP Pen G640 + * add XP Pen G430 + * build fixes + +- Use official %%meson_test macro for the %check section. +- Do not crrate empty %check section when not using meson. + +- Fix Leap build. + +- update to 1.5: + - New devices: + - Acer Spin 5 / Acer Spin SP513-54N + - Dell Latitude 7410, + - GAOMON S620 + - HP Pavilion x360 Convertible 14-dh0xxx + - Huawei MateBook HZ-W19 + - Lenovo ThinkPad X1 Yoga 3rd + - Wacom Cintiq 16, DTK-1660E + +- update to 1.4.1: +- New devices: + - HP ZBook Studio x360 G5 + - Dell Latitude 7285 + - Dell Latitude 7200 2-in-1, Dell Latitude 7400 2-in-1 + - Elan 2415 + - HP ENVY x360 Convertible 13, + - Huion 420, 1060 Plus, + - GAOMON S56K + - Wacom FT-0405 + - Many AES stylus definitions added + - New API: libwacom_stylus_get_eraser_type() + - udev rules are now using hwdb entries + +- use %{_udevrulesdir}, %{_libexecdir} now expands to /usr/libexec + +- Update to 1.3 +- Add a dependency on doxygen +- Remove 174.patch + + The changes were merged upstream + +- Pass b_lto option to meson, otherwise the previous patch has no + effect (meson does not derive the b_lto value from the FLAGS). + libxml2 -- Update to version 2.9.12 in SLE-15-SP4 [jsc#SLE-21255] - * Drop patches fixed upstream: - - libxml2-CVE-2018-14404.patch - - libxml2-CVE-2018-14567.patch +- Limit BuildRequires of python-rpm-macros to 20211022 (to have working + multi-version macros). + +- Rewrite package to the single-spec %python_subpackage_only style and + eliminate unnecessary multibuild. -- Remove libxml2-CVE-2019-19956.patch - -- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021] -- Security fix: [bsc#1161521, CVE-2019-20388] - * Memory leak in xmlSchemaPreRun in xmlschemas.c -- Add libxml2-CVE-2019-20388.patch - -- Security fix: [bsc#1161517, CVE-2020-7595] - * xmlStringLenDecodeEntities in parser.c has an infinite loop in - a certain end-of-file situation -- Add libxml2-CVE-2020-7595.patch - -- Security fix: [bsc#1159928, CVE-2019-19956] - * Memory leak related to newDoc->oldNs in xmlParseBalancedChunkMemoryRecover:parser.c -- Add libxml2-CVE-2019-19956.patch - +- Security fix: [bsc#1159928, CVE-2019-19956] + * Memory leak related to newDoc->oldNs in + xmlParseBalancedChunkMemoryRecover:parser.c + Fix byl later reverted, so it is not present in the upstream + tree anymore. + + Memory leak in xmlFreeID (xmlreader.c) -- Synchronize changelog files for libxml2 and python-libxml2-python [bsc#1123919] - - decompression (boo#1088279 boo#1105166). + decompression (boo#1088279 boo#1105166, bsc#1088279 bsc#1105166). - (boo#1102046). + (boo#1102046, bsc#1102046). -- Security fix: - [bsc#1088279, CVE-2018-9251][bsc#1105166, CVE-2018-14567] - * Infinite loop in LZMA decompression - * Fixes CVE-2018-9251 introduced by CVE-2017-18258 - * Added libxml2-CVE-2018-14567.patch - -- Security fix [bsc#1102046, CVE-2018-14404] - * NULL pointer dereference in xpath.c:xmlXPathCompOpEval() can - allow attackers to cause a denial of service - * Added libxml2-CVE-2018-14404.patch - man-pages-ja -- update to 20171215 +- Remove conflicting cdparanoia manpage + +- update SPEC file + +- Update to version 20210515 -- Update to 20170515 +- version update to 20201215 -- update to 20161115 +- version update to 20201115 -- update to 20151215 +- version update to 20191215 -- update to 20150415 +- update to 20181215 -- update to 20141115 +- update to 20171215 -- Update to new upstream release 20140915 - * No upstream changelog was provided -- Remove ancient specfile tags and sections -- Remove unneeded dependency "deb", has no effect on filelist +- Update to 20170515 + * added and improved manual pages + +- update to 20161115 + * added and improved manual pages -- updated to 20140615: +- update to 20151215 -- updated to 20140315: +- update to 20150415 -- updated to 20131115: +- update to 20141115 metamail +- Add simple mimelang tool to be able to check unicode block of + UTF-8 MIME encoded e-mail subjects + +- Replace old mgrep script with new m(mime)grep written in hackweek + +- Remove tcsh dependency by dropping bogus mailserver and + sun-message.csh +- use autosetup, refresh all 5 patches + -- Fix typo in mailto manual page (bnc#422090) - -- Avoid autobuild error - -- Add MIME check script usable e.g. in procmailrc filter rules - monapo-fonts +- Upstream update to 20170722 + * Update IPA P Gothic to 00303 + mosh +- Update to version 1.3.2+20200518: + * If exec()ing the remote command fails, pause briefly + * Move generated includes to their own directory to avoid conflicts. + * Use Travis Homebrew addon. + * "Fix" Travis OS X builds. + * configure: Add test for whether protoc matches protobuf + * configure: Fix FD_ISSET test under -Werror + * configure: Fix forkpty test code indentation + * configure: Remove unused tests + * configure: Set language to C++ globally + +- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by + firewalld, see [1]. + [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html + +- Switch to git snapshots as there was no release over years. +- Update to version 1.3.2+20190710 + * Apply latest consecutive resize, not earliest. + * mosh-server: improve error logging + * Add syslog logging of connections + * Fix issue with incorrect true-color background erase colors. + * Add true color support. + * Allow non-inserting prediction. + * Don't do prediction on large pastes into mosh-client. + * and more. + -- Patch (mosh-1.2.4-ipv6.patch) for IPv6 support from - https://github.com/keithw/mosh/pull/453 - -- Make ufw files happy with rpmlint from suse (i hope). - mozilla-nss +- Mozilla NSS 3.68.1 + MFSA 2021-51 (bsc#1193170) + * CVE-2021-43527 (bmo#1737470) + Memory corruption via DER-encoded DSA and RSA-PSS signatures +- Remove now obsolete patch nss-bsc1193170.patch + +- Add patch to fix CVE-2021-43527 (bsc#1193170): + nss-bsc1193170.patch + mtd-utils +- Update to version 2.1.2: + * Features: + + flashcp: Add option -A/--erase-all + + mtd-utils: add optional offset parameter to flash_otp_dump + + ubi-utils: Implement a ubihealthd + + mkfs.ubifs: Add authentication support + * Fixes: + + ubifs-media: Update to Linux-5.3-rc3 + + mtd-utils: Fix return value of ubiformat + + ubiupdatevol: Prevent null pointer dereference + + libubigen: remove unnecessary include + + libubi: remove private kernel header from includes + + mkfs.ubifs: fscrypt: bail from encrypt_block if gen_essiv_salt fails + + mkfs.ubifs: abort add_directory if readdir fails + + mkfs.ubifs: close file descriptor in add_file error path + + mkfs.ubifs: don't leak copied command line arguments + + mkfs.ubifs: free derived fscrypt context in add_directory error paths + + mkfs.ubifs: don't leak hastable iterators + + mkfs.ubifs: don't leak temporary buffers + + mkfs.ubifs: propperly cleanup in ALL interpret_table_entry error paths + + mkfs.jffs2: don't leak temporary buffer if readlink fails + + libmtd: don't leak temporary buffers + + ftl_check: don't leak temporary buffers + + ftl_format: don't leak temporary buffers + + ubiformat: don't leak file descriptors + + nanddump: don't leak copied command line arguments + + mtd_debug: cleanup error handling in flash_to_file + + jittertest: fix error check for open system call + + fs-tests: don't leak temporary buffers + + mtd-utils: Fix printf format specifiers with the wrong type + + mtd-utils: Fix potential negative arguments passed to close(2) + + mtd-utils: Fix various TOCTOU issues + + mtd-utils: Fix some simple cases of uninitialized value reads + + mtd-utils: Fix wrong argument to sizeof in nanddump + + mtd-utils: Fix "are we really at EOF" test logic in libubi read_data + + mtd-utils: Fix potentially unterminated strings + + mtd-utils: Add checks to code that copies strings into fixed sized buffers + + mkfs.ubifs: fix broken build if fscrtyp is disabled + +- Update to version 2.1.1: + * Features: + - mkfs.ubifs: Add ZSTD compression + * Fixes: + + ubiformat: Dont ignore sequence number CLI option + + mkfs.ubifs: fix build without openssl + + mkfs.ubifs: fix regression when trying to store device special files + + mkfs.ubifs: fix description of favor_lzo + + unittests/test_lib: Include proper header for _IOC_SIZE + + unittests/libmtd_test: Include fcntl header + + unittests: Define the use of _GNU_SOURCE + + ubinize: Exit with non-zero exit code on error. + + mtd-tests: nandbiterrs: Fix issue that just insert error at bit 7 + + ubi-tests: ubi_mkvol_request: Fully initialize 'struct ubi_mkvol_request req' + + ubi-tests: io_read: Filter invalid offset value before 'lseek' in io_read test + + ubi-tests: mkvol test: Checks return value 'ENOSPC' for 'ubi_mkvol' + + ubi-tests: fm_param: Replace 'fm_auto' with 'fm_autoconvert' + +- Update to version 2.1.0: + * Features: + + mkfs.ubifs: Implement support for file system encryption + + mkfs.ubifs: Implement selinux labelling support + + ubinize: add support for skipping CRC check of a static volume when opening + + ubimkvol: add support for skipping CRC check of a static volume when opening + + Add lsmtd program + * Fixes: + - update various kernel headers + + Instead of doing preprocessor magic, just output off_t as long long + + fix verification percent display in flashcp + + mkfs.ubifs: fix double free + + mkfs.ubifs: Fix xattr nlink value + + ubinize: avoid to create two UBI_LAYOUT_VOLUME_ID volume + + common.h: fix prompt function + + libmtd: don't print an error message for devices without ecc support + + io_paral: Fix error handling of update_volume() + + ubimkvol: Initialize req to zero to make sure no flags are set by default + + libubi: add volume flags to ubi_mkvol_request + + mkfs.ubifs: add_xattr is not depending on host XATTR support + + Revert "Return correct error number in ubi_get_vol_info1" which introduced a regression. + + make sure pkg-config is installed in configure script + + ubiformat: process command line arguments before handling file arguments + * Cleanup: + + ubiformat: remove no-volume-table option + +- Update to version 2.0.2: + * libmtd: Add support to access OOB available size + * mkfs.ubifs: Allow root entry in device table + * Fix unit-test header and file paths for out of tree builds + * Fix unit test mockup for oobavail sysfs file + * misc-utils: flash_erase: Fix Jffs2 type flash erase problem + * libmtd_legacy: Fix some function description mismatches + * mtd-utils: ubifs: fix typo in without_lzo definition + * mtd: tests: check erase block count in page test + * mtd: unittests: Stop testing stat() calls + * mtd: unittests: Decode arg size from ioctl request + * mtd: unittests: Use proper unsigned long type for ioctl requests + * mtd: tests: Fix check on ebcnt in nandpagetest + * ubi-utils: ubicrc32: process command line arguments first + * nandbiterrs: Fix erroneous counter increment in for loop body + * jittertest: Use the appropriate versions of abs() + * Mark or fix switch cases that fall through + * mkfs.ubifs: ignore EOPNOTSUPP when listing extended attributes + * misc-utils: initialize "ip" in docfdisk to NULL + * mkfs.ubifs: Apply squash-uids to the root node + -- %debug_package no longer required - -- rewrote spec file -- added libacl support -- created in the filesystems repository - -- Update to version 1.2.0. - -- Initial build. - multipath-tools +- Update to 0.8.8+38+suse.2bdd3a14.obscpio + * upstream version bump. Code-wise identical to 0.8.7+138+suse.7c9afe31 + +- Drop versioned dependency on libmpath0 again (bsc#1190622) + * Since 0.8.6, libmultipath and libmpathpersist have got proper ABI + versioning, and rpmbuild auto-generates dependencies on + libmultipath.so.0(LIBMULTIPATH_13.0.0) etc. + +- Update to version 0.8.7+138+suse.7c9afe31: + New upstream version (pre-0.8.8) + * deprecate "config_dir" and "multipath_dir" config options + (will be removed in future version) + * remove dependency on systemd-udevd-settle.service (boo#1193336) + * fix crash in remove_map (boo#1193334) + * CLI: add path wildcard "%I" for init state + * CLI: add "reconfigure all" command + * allow multiple pending "reconfigure" commands (bsc#1189551) + * speed up "reconfigure" by avoiding unnecessary map reloads + (bsc#1189551) + * rework of CLI command handler (unix socket handler) to avoid + hanging CLI commands (bsc#1189551) + * fix multipathd startup after stop during reconfigure (boo#1193338) + * improve error detection and warning messages in config file parser + * fix exit status of multipath -T (bsc#1191900) + * fix defects reported by coverity (boo#1193342) + - avoid sleeping with locks held + - exit if bindings file is broken + - set umask before mkstemp + - add bounds and consistency checks in SCSI VPD parsing code + * add hardware table entry for DellEMC/ME4 (PowerVault ME4) + +- Add a versioned dependency of multipath-tools on libmpath0 + (bsc#1190622) + +- Update to version 0.8.7+14+suse.5a09bfa1: + * Fix possible string overflows (bsc#1188148) +- Upstream fixes / changes + * better string handling + * multipath: print warning if multipathd isn't running + * mpathpersist: better error msg when no usable paths exist + * fixes from 0.8.6+32+suse.f11c192 merged upstream + +- Spec file: remove compatibility code for SLE <= SLE15-SP2 + +- Update to version 0.8.6+32+suse.f11c192: + * libmultipath:fix compilation with glibc 2.34 (bsc#1189099) + * libmultipath: avoid buffer size warning with systemd 240+ + (bsc#1189176) + * libmultipath: use uint64_t for sg_id.lun (bsc#1187534) +- Upstream bug fixes: + * multipath-tools: make HUAWEI/XSG1 config work with alua and multibus + * multipath-tools: add info about HPE Alletra 6000 and 9000 + * multipathd: cli_getprkey(): fix return value and "aptpl" support + * multipathd: don't rescan_path on wwid change in uev_update_path + * kpartx: Don't leak memory when getblock returns NULL + * multipath: free vectors in configure + * multipathd: fix ev_remove_path return code handling + * multipathd: remove duplicate orphan_paths in flush_map + * multipathd: don't fail to remove path once the map is removed + * multipathd: fix compilation issue with liburcu < 0.8 + nkf +- Update to version 2.1.5 + * [bugfix] reset bom flag on each checking call + (nkf-bug#34797) + * [bugfix] nkf32.dll: SetNkfOption can't correctly specify + options for multiple options + * [bugfix] add document about multiple options + (nkf-bug#32974) + * [bugfix] Split install into -main, -man, -man-ja + (nkf-bug#34250) + * [bugfix] add LDFLAGS (nkf-bug#32639) + * [bugfix] fix pod2man doesn't through non ASCII + (nkf-bug#32546) + -- update to 2.0.2 - * now with UTF-8 support -- remove obsolete patch which was needed namazu, it's included - in the new version already. - notification-daemon +- Remove obsolete translation-update-upstream support + (jsc#SLE-21105). + +- No longer recommend -lang: supplements are in use + nvme-cli +- Allow -1 as ctrl_loss_tmo value (bsc#1192348) + * add 0013-nvme-cli-ctrl-loss-tmo-should-accept-1-as-value.patch +- Fix segfauls while discovering (bsc#1191935) + * add 0014-Input-expects-device-name-without-dev.patch + * add 0015-fabrics-fix-nvme-discover-segfault-if-sysfs-path-is-.patch + * add 0016-fabrics-Only-free-initialized-valued-on-exit.patch + * add 0017-nvme-print-add-discovery-async-event-config-field.patch + * add 0018-fabrics-fix-nvme-connect-segfault-if-transport-type-.patch +- Context udpate + * refresh 0004-nvme-topology-no-error-message-when-openeing-of-cont.patch +- Adding missing hunk (bsc#1182591) + * update 0001-fabrics-ensure-zero-kato-for-non-persistent-controllers.patch +- Use pkg-config for libuuid dependency setup + * add 0103-build-use-pkg-config-for-libuuid-detection.patch + open-iscsi +- Merged latest upstream. Mostly cleanup, but includes a fix for + iscsi-init.service when trying to write to the root volume too + early (bsc#1192568), as well as an upstream fix for possible + deadlock when dealing with sysfs. + +- Fix the usr-merge changes (bsc#1192013). This includes catching + all the places that /sbin was still used directly, as well as + making the SPEC file build using /usr/sbin for openSUSE but + still use /sbin for SLE, for now. + +- Fix possible systemd cycle by adding an "obsoletes" for + the old libopeniscsiusr for older versions. + +- Update to latest from upstream, fixing: + * Moving the executables from /sbin to /usr/sbin (bsc#1191054) + * Remove default dependencies from iscsi-init.service + (bsc#1187190) + +- Updated to latest upstream 2.1.5 as 2.1.5-suse, which contains + these changes not already present: + * Handle IPv6 interfaces correctly. (bsc#1187958) + * Handle qedi correctly in NPAR mode (bsc#1187958) + * Update iscsiadm man page (bsc#1187958) + * Update iface.example for ipv6 + * Change iscsi IP type from defines to enum. + * Handle recv() returning 0 in iscsid_response() + +- Merged latest upstream, which includes: + * iscsid: set PR_SET_IO_FLUSHER (bsc#1188869) + openexr +- added patches + fix CVE-2021-3941 [bsc#1192556], Divide-by-zero in Imf_3_1:RGBtoXYZ + + openexr-CVE-2021-3941.patch + +- security update +- added patches + fix CVE-2021-3933 [bsc#1192498], Integer-overflow in Imf_3_1:bytesPerDeepLineTable + + openexr-CVE-2021-3933.patch + +- security update openssh +- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch + (bsc#1190975, CVE-2021-41617), backported from upstream by + Ali Abdallah. + postgresql14 -- Let genlists skip non-existing binaries to avoid lots of version - conditionals in the file lists. +- bsc#1192516: Upgrade to 14.1 + * Make the server reject extraneous data after an SSL or GSS + encryption handshake (CVE-2021-23214). + * Make libpq reject extraneous data after an SSL or GSS + encryption handshake (CVE-2021-23222). + * https://www.postgresql.org/docs/14/release-14-1.html + +- boo#1191782: Let rpmlint ignore shlib-policy-name-error. + presage +- Fix one more GCC 11 warning. + +- redo presage-0.9.1-gcc11.patch (boo#1181881) + * use noexcept(false) for "throw PresageException" + +- add presage-0.9.1-gcc11.patch (boo#1181881) + * fix ISO C++17 does not allow dynamic exception specifications + * fix come from github.com/AcademySoftwareFoundation/openexr/pull/280 + +- Revert change of the source package name for the doc flavor. + Different flavors require distinct package names for _multibuild + to work properly. + +- Update presage-0.9.1-python3.patch: Adjust two more env python to + for python3. + +- Export the include path to fix the build under python 3.8 + +- Add presage-0.9.1-python3.patch, port python binding and apps + to python3 +- Rename subpackages: + * dbus-1-presage -> python3-dbus-presage + * python-presage -> python3-presage + * pyprompter -> python3-pyprompter + * python-presagemate -> python3-presagemate + +- Add explicit BuildRequires for pkg-config for doc flavor, otherwise + configuration on Leap 15.x / SLE 15 fails. +- Disable build and checks for tools/bindings when building API docs. + +- Make the package name dependent on the flavor, otherwise OBS can not track + the packages correctly and keeps blocking until all flavors are finished. +- Remove unnneded Requires: presage in devel subpackge + +- Split out API doc generation using multibuild. graphviz-gd has + become quite heavy as a build dependency. +- Cleanup specfile + * remove defattr, use license macro + * remove conditionals for EOLed distribution versions +- Remove gpresagemate, it depends on the long deprecated XEVIE extension +- Set she-bang for /usr/bin/presage_dbus_* to /usr/bin/python2 + -- update version 0.9.beta20140216 - * see ChangeLog file -- drop patch: presage-0.8.9-automake_1.12_abuild.patch -- add patch: presage-0.9.0-automake_1.12_abuild.patch - pullin-bcm43xx-firmware +- use %_firmwaredir + +- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to + shortcut through the -mini flavors. + python-rpm-macros +- Update to version 20211022.38e7c70: + * no newline after python_install_alternative + +- Update to version 20211018.c7614ad: + * remove ghost gh#openSUSE/python-rpm-macros#118 + * revert reset name change + * fix README + * move u-a/la switch for scriptlets to build phase + +- Update to version 20211001.fc6c04e: + * Supporting libalternatives. + +- Update to version 20210628.eccf3f2: + * fix boolean split gh#openSUSE/python-rpm-macros#111 + +- Update to version 20210607.c22f1cc: + * increase default python3 update-alternative prio by 1000 + * Update default-prjconf + * Support flavor rewriting of boolean runtime dependencies + +- Update to version 20210204.937b8d8: + * fixup: last PR was missing a commit for pyproject_wheel syntax errors + +- Update to version 20210204.90721de: + * mv -n does not work in SLE12 + * Update PEP517/518 macro documentation in README + * Let pyproject_install search for more locations for wheels or specify explicitely + * Read .rpmmacros (= prjconf Macro: definitions) for default buildset + +- Update to version 20210203.0d8a91e: + * don't define skip_python2 by default + +- Update to version 20210131.ec7577b: + * remove old commented path finding section + * expand python_subpackage_only not earlier than in python_subpackages call + * make the path and var macros return a non-interrupted string even when the flavor is not installed + +- Update to version 20210131.1450767: + * only add parentheses when boolean operators are used + * sync buildset definitions with Factory + * fix typo + +- Update to version 20210127.3a18043: + * dont't rename wheel when it already has the same name + +- Update to version 20210126.fea1c1f: + * Document python_module with boolean dependecies + * workaround undetected abi and platform tags gh#openSUSE/python-rpm-macros#93 + +- Update to version 20210121.ef5b8b9: + * Add %python pseudo-macro for %python_modules -- server and rpm version + +- Update to version 20210117.63cf413: + * improve flavor variable naming in python_expand + +- Update to version 20210116.2682657: + * remove python2 not found error + +- Update to version 20210112.86f4d9d: + * fix gh#openSUSE/python-rpm-macros#84: python_sysconfig_ macros + +- Update to version 20201207.2177fcf: + * README update after merge + +- Update to version 20201207.259cdda: + * Update python_expand description in README + * python_expand to basename only + +- Update to version 20201204.32a910e: + * fix print_provided_flavor again + +- Update to version 20201203.5331183: + * fix print_provided_flavor + +- Update to version 20201128.669edb3: + * fix provides (for python-numpy f2py, in gh#openSUSE/python-rpm-macros#66) + +- Update to version 20201123.6978323: + * also rewrite subpackage_only default providers + * pytest: ignore _build dirs for all flavors + +- Update to version 20201119.6bb5f69: + * add default provider properties + * don't replace %name, for subpackage_only + * expand parameters for subpackage_only packages + +- Update to version 20201112.a4c80dc: + * handle python_subpackage_only, fixes gh#openSUSE/python-rpm-macros#73 + * define default providers for pythonX from pythonXY flavors: fixes #69 + +- Update to version 20201103.cec67c2: + * document python_find_lang + * add python_find_lang and allow to specify in %python_files. Fixes #5 + +- Update to version 20201102.31ccfc2: + * fix python_clone shebang replacement + * one less expansion for python_exec + * expand default %python_ macros earlier + * update README for multiple flavors + * more command delimiters for %python_expand + +- Update to version 20201022.7f87908: + * Add python36 and python38 flavours. + +- Update to version 20201021.adb6953: + * Prepare for multiple python3 flavors +- Remove multiple_flavors.patch as it is included in the upstream + tarball. + +- Update to version 20201016.5d22545: + * fix whitespace after escape in compileall macro + +- Update to version 20201016.db09189: + * Delete pycache files before compilealll + * Update macros/010-common-defs + * Reword compileall + * mention pyproject.toml and link to PEP517 and PEP518 + * add description for pyunittest macro + * add description for python_compileall macro + * add description for pyproject macros + * add python_compileall macro and use it in pyproject_install + * disable pip version check: no connection to pypi.org + +- Update multiple_flavors.patch to generate correct names of the + python binary. + +- %__#FLAVOR# should be defined as + /usr/bin/python%{#FLAVOR#_version} not just /usr/bin/#FLAVOR# + +- Add patch multiple_flavors.patch which makes compile_macros.sh + generate alternative flavours as well. + +- Update to version 20200824.8fa42a7: + * Drop -v from the pyunittest macros + +- Update to version 20200806.f44d3ac: + * fix unittest macros + +- Update to version 20200714.252de1f: + * Add pyunittest and pyunittest_arch macros + +- Update to version 20200701.9f5a2f6: + * add blank line between pytest and pytest_arch to fix expansion + failure in Leap gh#openSUSE/python-rpm-macros#53 + +- Update to version 20200625.e862151: + * fix pytest_arch PYTHONPATH + * expand calls pyproject* macros (revert #45) + * let the shell expand PYTHONPATH + +- Update to version 20200623.3ea9b62: + * fix PYTHONPATH on pytest_arch macro + +- Update to version 20200622.1919233: + * Expand %buildroot first (avoid endless cycle; bsc#1162743) + +- Update to version 20200622.1f4c5d2: + * Add missing semicolon + +- For Factory change %system_python to python3. + +- Update to version 20200603.503823c: + * Don't add empty path to PYTHONPATH setting. + * Do not expand macros, just print them unexpanded (for %pytest* and %pyproject* macros) + * Replace py.test -> pytest + +- Update to version 20200529.b301e36: + * update-alternatives are quiet during install + python-setuptools +- We cannot remove vendored packages when generating setuptools + wheel (bsc#1177127). + +- Add remove_mock.patch to remove dependency on the external mock + package. + +- Avoid duplicite wheel name in the generated package, and we actually + don't need a subpackage at all. + +- Make wheel a separate build run to avoid the setuptools/wheel build + cycle. + +- update to 44.1.0 + * Set sys.argv[0] in setup script run by build_meta.__legacy__ + * Fix for Python 4: replace unsafe six.PY3 with six.PY2 + * Fixed a bug in the “setuptools.finalize_distribution_options” hook + that lead to ignoring the order attribute of entry points managed + by this hook. + * Avoid loading working set during Distribution.finalize_options prior + to invoking _install_setup_requires, broken since v42.0.0. + +- use local source dir for pytest imports + gh#openSUSE/python-rpm-macros#48 + +- Fix License to the correct MIT + +- Fix build without python2 + +- update to 44.0.0 +- last version with python2 support +- add testdata.tar.gz -> missing data for testsuite + * Drop support for Python 3.4. + * include pyproject.toml in source distribution by default. + Projects relying on the previous behavior where pyproject.toml + * Setuptools once again declares 'setuptools' in the build-system.requires + and adds PEP 517 build support by declaring itself as the build-backend + * Fix support for easy_install's find-links option in setup.cfg + * Build dependencies (setup_requires and tests_require) now install transitive + dependencies indicated by extras. + * Mark the easy_install script and setuptools command as deprecated, and use + pip when available to fetch/build wheels for missing setup_requires/tests_require + requirements, with the following differences in behavior: + + support for python_requires + + better support for wheels (proper handling of priority with respect to PEP 425 tags) + + PEP 517/518 support + + eggs are not supported + + no support for the allow_hosts easy_install option (index_url/find_links are still honored) + + pip environment variables are honored (and take precedence over easy_install options) + * Removed the "upload" and "register" commands in favor of twine. + * Add support for the license_files option in setup.cfg to automatically + include multiple license files in a source distribution. + * Update handling of wheels compatibility tags: * add support for manylinux2010 + * fix use of removed 'm' ABI flag in Python 3.8 on Windows + * Fix empty namespace package installation from wheel. + * Setuptools now exposes a new entry point hook "setuptools.finalize_distribution_options", + enabling plugins like setuptools_scm to configure options on the distribution + at finalization time. + +- update to 41.6.0 +- add importlib.patch + * Replace usage of deprecated imp module with local + re-implementation in setuptools._imp + * Fix pkg_resources.Requirement hash/equality implementation + * Fix tests when running under python3.10. + * drop 'deprecated' documentation (test command, ez_setup, EasyInstall) + +- Remove runtime dependency for the full python3 package, as the + actually required SSL module is in python3-base. For python(2), + SSL is in the "full" python package. Avoids build loops and + shortens the dependency chain for e.g. rust. + +- Try to use system packages rather than the vendored variants + +- Add patch to sort outputs for better reproducability: + * sort-for-reproducibility.patch +- Add missing dep on ordered-set as it is now in the vendored + dir too + +- Update to 41.4.0 + * In declarative config, now traps errors when invalid python_requires + values are supplied. + * When storing extras, rely on OrderedSet to retain order of extras + as indicated by the packager, which will also be deterministic + on Python 2.7 (with PYTHONHASHSEED unset) and Python 3.6+. + * Fixed failing integration test triggered by 'long_description_content_type' in packaging. + +- Define LANG in %check to fix openSUSE/SLE 15 testsuite + +- Switch to multibuild to enable testsuite + +- Update to 41.2.0: + * #479: Remove some usage of the deprecated imp module. + * #1565: Changed html_sidebars from string to list of string as per https://www.sphinx-doc.org/en/master/changes.html#id58 + * #1697: Moved most of the constants from setup.py to setup.cfg + * #1756: Forse metadata-version >= 1.2. when project urls are present. + +- update to version 41.0.1: + * #1671: Fixed issue with the PEP 517 backend that prevented + building a wheel when the dist/ directory contained existing .whl + files. + * #1709: In test.paths_on_python_path, avoid adding unnecessary + duplicates to the PYTHONPATH. + * #1741: In package_index, now honor "current directory" during a + checkout of git and hg repositories under Windows + +- update to 41.0.0 + * #1735: When parsing setup.cfg files, setuptools now requires the files + to be encoded as UTF-8. Any other encoding will lead to a UnicodeDecodeError. + This change removes support for specifying an encoding using a 'coding: ' + directive in the header of the file, a feature that was introduces in 40.7. + Given the recent release of the aforementioned feature, it is assumed that + few if any projects are utilizing the feature to specify an encoding + other than UTF-8. + +- update to version 40.8.0: + * #1652: Added the build_meta:__legacy__ backend, a "compatibility + mode" PEP 517 backend that can be used as the default when + build-backend is left unspecified in pyproject.toml. + * #1635: Resource paths are passed to pkg_resources.resource_string + and similar no longer accept paths that traverse parents, that + begin with a leading /. Violations of this expectation raise + DeprecationWarnings and will become errors. Additionally, any + paths that are absolute on Windows are strictly disallowed and + will raise ValueErrors. + * #1536: setuptools will now automatically include licenses if + setup.cfg contains a license_file attribute, unless this file is + manually excluded inside MANIFEST.in. +- changes from version 40.7.3: + * #1670: In package_index, revert to using a copy of splituser from + Python 3.8. Attempts to use urllib.parse.urlparse led to problems + as reported in #1663 and #1668. This change serves as an + alternative to #1499 and fixes #1668. + +- update to version 40.7.2: + * #1666: Restore port in URL handling in package_index. +- changes from version 40.7.1: + * #1660: On Python 2, when reading config files, downcast options + from text to bytes to satisfy distutils expectations. +- changes from version 40.7.0: + * #1551: File inputs for the license field in setup.cfg files now + explicitly raise an error. + * #1180: Add support for non-ASCII in setup.cfg (#1062). Add support + for native strings on some parameters (#1136). + * #1499: setuptools.package_index no longer relies on the deprecated + urllib.parse.splituser per Python #27485. + * #1544: Added tests for PackageIndex.download (for git URLs). + * #1625: In PEP 517 build_meta builder, ensure that sdists are built + as gztar per the spec. + +- BuildIgnore python[23]-pyparsing: python-packaging requires it + for some actions it could perform, but we don't make use of these + here. Ignoring this dependency allows us to break open a + BuildCycle. + +- update to 40.6.3: + * #1594: PEP 517 backend no longer declares setuptools as a dependency + as it can be assumed. + +- Fix fdupes call + +- update to version 40.6.2: + * #1592: Fix invalid dependency on external six module (instead of + vendored version). +- changes from version 40.6.1: + * #1590: Fixed regression where packages without author or + author_email fields generated malformed package metadata. +- changes from version 40.6.0: + * #1541: Officially deprecated the requires parameter in setup(). + * #1519: In pkg_resources.normalize_path, additional path + normalization is now performed to ensure path values to a + directory is always the same, preventing false positives when + checking scripts have a consistent prefix to set up on Windows. + * #1545: Changed the warning class of all deprecation warnings; + deprecation warning classes are no longer derived from + DeprecationWarning and are thus visible by default. + * #1554: build_meta.build_sdist now includes setup.py in source + distributions by default. + * #1576: Started monkey-patching get_metadata_version and + read_pkg_file onto distutils.DistributionMetadata to retain the + correct version on the PKG-INFO file in the (deprecated) upload + command. + * #1533: Restricted the recursive-include setuptools/_vendor to + contain only .py and .txt files. + * #1395: Changed Pyrex references to Cython in the documentation. + * #1456: Documented that the rpmbuild packages is required for the + bdist_rpm command. + * #1537: Documented how to use setup.cfg for src/ layouts + * #1539: Added minimum version column in setup.cfg metadata table. + * #1552: Fixed a minor typo in the python 2/3 compatibility + documentation. + * #1553: Updated installation instructions to point to pip install + instead of ez_setup.py. + * #1560: Updated setuptools distribution documentation to remove + some outdated information. + * #1564: Documented setup.cfg minimum version for version and + project_urls. + * #1572: Added the concurrent.futures backport futures to the Python + 2.7 test suite requirements. + +- build python3 subpackage (FATE#323875) + +- update to 18.0.1 for fate#319032 + * see full changelog in CHANGES.txt + +- fix vulnerability in non-RFC6125-compliant host name matching + (bsc#930189, setuptools-1.1.7-match-hostname.patch) + +- Add package to SLE 12 SDK (FATE#318137, bnc#913229) + ruby2 +Add patches to fix the following CVE's: + - CVE-2021-32066.patch (CVE-2021-32066): Fix StartTLS stripping + vulnerability in Net:IMAP (bsc#1188160) + - CVE-2021-31810.patch (CVE-2021-31810): Fix trusting FTP PASV + responses vulnerability in Net:FTP (bsc#1188161) + - CVE-2021-31799.patch (CVE-2021-31799): Fix Command injection + vulnerability in RDoc (bsc#1190375) + s390-tools +- Added s390-tools-sles15sp3-dbginfo.sh-exclude-page_idle-bitmap.patch + Reading /sys/kernel/mm/page_idle/bitmap can cause hang up on + reading offline pages. (bsc#1192599) +- Added %{version} to the Requires: libekmfweb1 for the + libekmfweb1-devel package. + samba +- Fix dependency problem upgrading from libndr0 to libndr2 and + from libsamba-credentials0 to libsamba-credentials1; + (bsc#1192684); + +- Fix regression introduced by CVE-2020-25717 patches, winbindd + does not start when 'allow trusted domains' is off; (bso#14899); +- Update to 4.15.2 + * CVE-2016-2124: SMB1 client connections can be downgraded to + plaintext authentication; (bso#12444); (bsc#1014440); + * CVE-2020-25717: A user on the domain can become root on domain + members; (bso#14556); (bsc#1192284); + * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos + tickets issued by an RODC; (bso#14558); (bsc#1192246); + * CVE-2020-25719: Samba AD DC did not always rely on the SID and + PAC in Kerberos tickets; (bso#14561); (bsc#1192247); + * CVE-2020-25721: Kerberos acceptors need easy access to stable + AD identifiers (eg objectSid); (bso#14557); (bsc#1192505); + * CVE-2020-25722: Samba AD DC did not do suffienct access and + conformance checking of data stored; (bso#14564); + (bsc#1192283); + * CVE-2021-3738: Use after free in Samba AD DC RPC server; + (bso#14468); (bsc#1192215); + * CVE-2021-23192: Subsequent DCE/RPC fragment injection + vulnerability; (bso#14875); (bsc#1192214); +- Update to 4.15.1 + * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682); + * Log clutter from filename_convert_internal; (bso#14685); + * MacOSX compilation fixes; (bso#14862); + * rodc_rwdc test flaps; (bso#14868); + * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze + bit' S4U2Proxy Constrained Delegation bypass in Samba with + embedded Heimdal; (bso#14642); + * Python ldb.msg_diff() memory handling failure; (bso#14836); + * "in" operator on ldb.Message is case sensitive; (bso#14845); + * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848); + * samldb_krbtgtnumber_available() looks for incorrect string; + (bso#14854); + * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871); + * Allow special chars like "@" in samAccountName when generating + the salt; (bso#14874); + * Correctly ignore comments in CTDB public addresses file; + (bso#14826); + * Fix transit path validation; (bso#12998); + * Fix that child winbindd logs to log.winbindd instead of + log.wb-; (bso#14852); + * SMB3 cancel requests should only include the MID together with + AsyncID when AES-128-GMAC is used; (bso#14855); + * Prepare to operate with MIT krb5 >= 1.20; (bso#14870); + * Heimdal prefers RC4 over AES for machine accounts; (bso#14864); + +- Enable samba-tool without ad dc. + +- Adjust spec to use pam macros; (bsc#1191046). + +- Adjust spec for size + * allow some Recommends instead Requires to be configured + for cifs-utils, samba-libs-python3 & samba-gpupdate; + (bsc#1182847). + * remove fam, undocumented and unneeded. + +- Add missing build dependency on bison when building with the + embedded Heimdal Kerberos + sg3_utils -- Update to version 1.44~763+19.1ed0757: - * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384) +- Update to version 1.47: + * sg_rep_zones: add support for REPORT ZONE DOMAINS and + REPORT REALMS in this utility + * sg_raw: fix prints of NVMe NVM command names + * sg_logs: additions to Volume statistics lpage [ssc5r05c] + - additions to Command duration limits statistics log + page [spc6r06] + * sg_vpd: fix do_hex type on some recent pages + - zoned block dev char vpd: add zone alignment mode and + zone starting LBA granularity [zbc2r11] + * sg_read_buffer: fix --length= problem + * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors + * sg_dd: srand48_r() and mrand48_r() are GNU libc specific, + put conditional in so non-reentrant version used otherwise + - 'iflag=00,ff' places the 32 bit block address (big endian) + into each block + * sgp_dd: major rework, fix issue with error being ignored + - new: --chkaddr which checks for block address in each block + - add check for stdatomic.h presence in configure.ac + * sg_xcopy: tweak CSCD identification descriptor + * sg_get_elem_status: fix issue with '--maxlen=' option + - add 2 depopulation revocation health attributes [sbc5r01] + * transport error handling improved. To fix report of a + BAD_TARGET transport error but the utility still continued. + - introduce SG_LIB_TRANSPORT_ERROR [35] exit status + * several utilities: override '--maxlen=LEN' when LEN + is < 16 (or 4), take default (or 4) instead + * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297) + * sg_lib: add sg_scsi_status_is_good(), + sg_scsi_status_is_bad() and sg_get_zone_type_str() + * pt_linux: fix verify(BytChk=0) which Linux SNTL translated + to write, other SNTL cleanups + * pt_linux_nvme: fix fua setting + * pt: check_pt_file_handle() add return value of 5 for +- _service updates: + * re-enable service, hadn't been used for 1.46 release + * use upstream author's git repository, simplify versioning scheme + * use obscpio format + +- Update to version 1.46: + * sg_rep_pip: new utility: report provisioning initialization + pattern command + * sg_turs: estimated time-to-ready [spc6r03] + - add --delay=MS option + * sg_requests: substantial cleanup + * sg_vpd: add Format presets and Concurrent positioning ranges + - add hot-pluggable field in standard Inquiry [spc6r05] + - fix vendor struct opts_t alignment + * sg_inq: add hot-pluggable field in standard Inquiry + * sg_dd: --verify : separate category for miscompare errors + - --verify : oflag=coe continue on miscompares, counts them + - add cdl= operand for command duration limit indexes + - add oflag=nocreat and conv=nocreat : OFILE must exist + - add iflag=00, ff, random flags + - setup conditional auto rule for getrandom() + - add command timeout after comma in time= operand + * sg_get_elem_status: add ralwd bit sbc4r20a + * sg_write_x: add dld bits to write(32) [sbc4r19a] + * sg_rep_zones: print invalid write pointer LBA as -1 rather + than 16 "f"s + * sg_opcodes: improve handling of RWCDLP field + * sg_ses: use fan speed factor field for calculation [ses4r04] + - add --all (-a) option, same action as --join + * sg_compare_and_write: add examples section to its manpage + * sg_modes: document '-s' option (same as '-6') + * sg_sanitize + sg_format: when --verbose given once report + probable success; without --verbose 'no news is good news' + * sg_zone: add Remove element and modify zones command + * sg_raw: increase maximum data-in and data-out buffer size + from 64 KB to 1 MB + - fix --cmdfile= handling + - add --nvm option to send commands from the NVM command set + - add --cmdset option to bypass cdb heuristic + - add --scan= first_opcode,last_opcode + * sg_pt_freebsd: allow device names without leading /dev/ + thus fix for regression introduced in rev 731 (ver: 1.43) + * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj() + which needs to remember is_nvme and dev_fd values + * sg_lib: add ZBC (2020) feature set entries + * sg_lib: restore elements and rebuild command added + * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(), + get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf() + - add do_nvm_pt() for the NVM (sub-)command set + - tweak transport error handling in Linux + * sg_lib: Linux NVMe SNTL: add read, write and verify; + synchronize cache and write same translations + - add dummy start stop unit and test unit ready commands + - wire cache mpage's WCE to nvme 'volatile write cache' + - fix crash in sg_f2hex_arr() when fname not found + * sg_lib: reprint cdb with illegal request sense key + - asc/ascq match asc-num.txt @t10 20200708 [spc6r02] + * gcc-10: suppress warnings + * autoconf: upgrade version 2.69 to 2.70 + * remove space from end of source lines for git-svn + * testing/sg_mrq_testing: new, for blocking mrq usage + * testing/sgs_dd: add evfd flags and eventfd processing + * testing: remove master-slave terminology for sgv4 + * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex +- Earlier SUSE fixes included in 1.46: - (bsc#840054, bsc#1131482) + (bsc#840054, bsc#1131482) -- Spec file: add fc_wwpn_id to generate by-path links for - fibrechannel (bsc#1005063) -- Update to version 1.44~763+17.35f525b: - * Changed versioning scheme (svn r763, pre-release of - upstream 1.44, plus 16 SUSE patches, SUSE git commit b2fedfa) - * Code-identical to previous release except for the following: +- Update to version 1.45~815+5.6aa67ed: +- Update to svn r815: + * sg_opcodes: expand MLU (spc5r20) + * sg_inq: update version descriptors to spc5r21 + * sg_vpd: 3pc VPD page add copy group descriptor + * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1 + * add nanosecond durations with SG3_UTILS_LINUX_NANO +- Earlier SUSE fixes now included upstream: + * 58-scsi-sg3_symlink.rules: don't skip multipath members + (bsc#1085212) [r815] + * rescan-scsi-bus.sh: terminate scanning if last lun got removed + (bsc#1087008) [r815] + * Add scsi-enable-target-scan.sh (bsc#954600) [r814] + * shellcheck cleanups for rescan-scsi-bus.sh [r814] + +- Replace old $RPM_* shell vars. + +- Spec file: + * add fc_wwpn_id (bsc#1005063) + * add lun masking service (bsc#954600) + * drop BuildRequires on udev + * replace unversioned "Provides: scsi" with versioned +- Update to version sg3_utils-1.45~803+31.564be3d: + * New versioning scheme for upstream pre-release: + 1.45 - upstream release target, 803 - upstream svn id, + +31: SUSE commits on top of svn, 564be3d - git hash + * rescan-scsi-bus.sh: terminate scanning if last lun got removed + (bsc#1087008) + * 58-scsi-sg3_symlink.rules: don't skip multipath members + (bsc#1085212) + * Add scsi-enable-target-scan.sh (bsc#954600) +- Update to svn r803: + * sg_opcodes: expand MLU (18-102r0) + * sg_format: add --dcrt used twice (FOV=1 DCRT=0) + * rescan-scsi-bus: widen LUN 0 only scanning + (bsc#1069384) +- Earlier SUSE fixes included in 1.45: + * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384) + [svn: r795] + * sg_ses: fixup page decoding (bsc#1077787) [svn: r795] + * sg_ses: allow to decode raw data instead of reading from a device + (bsc#1050943) [svn: r795] +- Update to sg3_utils-1.44 [20180912] [svn: r791] + * rescan-scsi-bus.sh: harden code + - bump version to 20180615 + - add --ignore-rev to ignore revision change + * introduce SG3_UTILS_DSENSE environment variable + * sginfo: don't open /dev/snapshot + * sg_timestamp: add '--no-timestamp' option + - add --elapsed and --hex options + * sg_wr_mode: add --rtd option for RTD bi + * sg_unmap: add --all=ST,RN[,LA] option + * sgm_dd, sg_dd: add --dry-run and --verbose options + * sg_inq+sg_vpd: update Extended inquiry data vpd page + * sg_ses: add 'hw_reset' and 'sw_reset' to enclosure services + controller electronics element type (18-047r1) + * sg_decode sense: add --cdb and --err=ES options + * sg_format: add --dry-run option + - extend --wait timeout for > 4TB disks + * sg_sanitize: add --dry-run option +- Earlier SUSE fixes included in 1.44: + * sg_inq: decode standard INQUIRY for CD-ROMs correctly + (bsc#1065448, bsc#1070431) [svn: r742] + * sg_inq: export all NAA values (bsc#1050767) [svn: r715] + * Add fc_wwpn_id to generate by-path links for fibrechannel + (bsc#1005063) (svn@715) + * sg_vpd: struct opts_t misaligment (bsc#1050943) [svn: r707] -- Use separate repository for SLE15 +- rescan-scsi-bus.sh: Fixes from shellcheck speex +- Fix zero division error in read_samples (CVE-2020-23903 bsc#1192580) + speex-CVE-2020-23903.patch + -- fix build for SLE_10 - autoreconf for suse_version >= 1100 -- spec - o sort TAGS - o macros - rm > {__rm} - version > {version} .... - -- split off libspeex1 and libspeexdsp1 according to library - packaging policy -- include actual tarball version in package version -- don't package README's for embedded cpus - -- add baselibs.conf as a source -- enable parallel building - suse-module-tools +- Update to version 15.4.10: + * same as Factory version 16.0.17 + * 60-io-scheduler.rules: add rules for virtual devices + (boo#1193759) + * 60-io-scheduler.rules: enforce "none" for loop devices + (boo#1193759) + * install some modprobe.d files only for relevant architectures + (apm_bios, sonypi, toshiba, legacy rtc) (bsc#1192974) + +- Update to version 15.4.9: + * same as Factory version 16.0.16 + * modprobe.d: split conf files (jsc#SLE-21626, boo#1193059) + - Rather than shipping two large files with modprobe.d options + (00-system.conf and 50-blacklist.conf), ship multiple small + per-module files. This makes it easier for users to override + distribution defaults. + * blacklist isst_if_mbox_msr (bsc#1187196) + * boot-sysctl: make sure file exists (fix for containers) + * remove blacklist entry for snd_bt87x (bsc#1192974, bsc#51718) + susepaste +- Add 0002-susepaste-add-image-paste-info.patch: Add info on + posting an image to susepaste in the man page, (boo#1193400). + -- adding http://paste.opensuse.org as another output -- adding man page - terminus-bitmap-fonts +- Add note to package description about pango not supporting + pcf bitmap fonts. + -- amend spec file to reflect new font packaging scheme - (see openFATE#313536); - timezone +- timezone update 2021e (bsc#1177460): + * Palestine will fall back 10-29 (not 10-30) at 01:00 +- timezone update 2021d: + * Fiji suspends DST for the 2021/2022 season + * 'zic -r' marks unspecified timestamps with "-00" +- timezone update 2021c: + * Revert almost all of 2021b's changes to the 'backward' file + * Fix a bug in 'zic -b fat' that caused old timestamps to be + mishandled in 32-bit-only readers +- timezone update 2021b: + * Jordan now starts DST on February's last Thursday. + * Samoa no longer observes DST. + * Move some backward-compatibility links to 'backward'. + * Rename Pacific/Enderbury to Pacific/Kanton. + * Correct many pre-1993 transitions in Malawi, Portugal, etc. + * zic now creates each output file or link atomically. + * zic -L no longer omits the POSIX TZ string in its output. + * zic fixes for truncation and leap second table expiration. + * zic now follows POSIX for TZ strings using all-year DST. + * Fix some localtime crashes and bugs in obscure cases. + * zdump -v now outputs more-useful boundary cases. + * tzfile.5 better matches a draft successor to RFC 8536. +- Refresh tzdata-china.patch + tlp +- Update to 1.4.0 24.09.2021 +- * Features + Audio: + - SOUND_POWER_SAVE_ON_AC: change default to enabled (Issue #495) + Battery: + - "Battery Features" renamed to "Battery Care" + - Introduce plugins to support Battery Care for non-ThinkPads: + - ASUS laptops: stop threshold + - Huawei MateBooks: start and stop threshold + - LG Gram laptops: stop threshold at 80% aka "battery care limit" + - Lenovo laptops: stop threshold at 60% aka "battery conservation mode" + - Samsung laptops: stop threshold at 80% aka "battery life extender" + - ThinkPads + - Allow deactivation of the start threshold (START_CHARGE_THRESH_BATx=0) + - Discharge malfunction: hint to check battery and charger + - Use standard sysfs attributes for charge thresholds + (Issue #513) + - Flag ThinkPad L512 as "unsupported" + - Validate charge threshold configuration, don't fail silently + - tlp-stat -b + - Battery Care: show plugin, supported features, driver usage and + related kernel module(s) + - Map battery state "Unknown" to "Idle" for clarity + Configuration: + - tlp-stat --cdiff: show configuration differing from defaults + - PARAMETER+="add values": append values to a parameter already defined + as intrinsic default or in a *previously* read file (Issue #457) + - TLP_WARN_LEVEL: warn about invalid settings, configurable for background + tasks and command line + - Rename parameters (backwards compatible to legacy config files): + SATA_LINKPWR_BLACKLIST -> SATA_LINKPWR_DENYLIST + RUNTIME_PM_BLACKLIST -> RUNTIME_PM_DENYLIST + RUNTIME_PM_DRIVER_BLACKLIST -> RUNTIME_PM_DRIVER_DENYLIST + USB_BLACKLIST -> USB_DENYLIST + USB_BLACKLIST_BTUSB -> USB_EXCLUDE_BTUSB + USB_BLACKLIST_PHONE -> USB_EXCLUDE_PHONE + USB_BLACKLIST_PRINTER -> USB_EXCLUDE_PRINTER + USB_BLACKLIST_WWAN -> USB_EXCLUDE_WWAN + USB_WHITELIST -> USB_ALLOWLIST + Disks: + - AHCI_RUNTIME_PM_ON_AC/BAT: + - Works only on disks defined in DISK_DEVICES + - Works on NVMe (new), SATA/ATA and plugged in USB (new) disks + - Works on SATA ports + - No longer experimental i.e. now enabled by default; the previously + existing risk of system freezes (and data loss) with the multiqueue + scheduler is now eliminated: + - Kernel >= 4.19 itself locks unsafe disk runtime pm + - TLP generally locks it for kernel < 4.19 + - DISK_APM_CLASS_DENYLIST: exclude disk classes from APM, i.e. you may + now activate it for USB and IEEE1394 drives (Issue #523) + - DISK_APM_LEVEL_ON_AC/BAT, DISK_SPINDOWN_TIMEOUT_ON_AC, DISK_IOSCHED: + now also work when plugging in USB disks; provided disk is contained in + DISK_DEVICES and 'usb' is removed from DISK_APM_CLASS_DENYLIST + - tlp-stat -d + - Explain why AHCI_RUNTIME_PM is locked for a disk + - Show disks attached to SATA links/ports + - Show a disk's host (for SATA_LINKPWR_DENYLIST) + - Show ALPM state in the sysfs directory of the AHCI host + - Show IDs for all disks configured in DISK_DEVICES + - Distinguish SATA from ATA(IDE) disks + - Show NVMe disk temperature + General: + - power-profiles-daemon: issue error messages about conflicting service + - tlp-stat -s: determine OS release without the lsb_release utility + Graphics: + - Add support for amdgpu (Issue #498) + - Improve powerdown of unused GPUs with drivers amdgpu, nouveau, + nvidia and without driver (Issues #488, #495, #498) + - tlp-stat -g: + - List all GPUs with at least the driver info + - Show hybrid graphics switch state (switcheroo) + - Intel GPU: + - Show hardware min/max frequency instead of + list of available frequencies (kernel change) + - Show more informative RC6, FBC and PSR status where available + (Issue #203) + Operation Mode AC/BAT: + - Speed up system shutdown/suspend by not applying AC settings anymore + - TLP_PS_IGNORE: add USB; allow to ignore multiple power supply classes + - tlp-stat -s: speed up power source detection + - tlp-stat --psup/udev: check if udev rules for power source changes and + connecting USB devices are active + PCI(e) devices: + - RUNTIME_PM_ENABLE/DISABLE: permanently enable/disable runtime PM for + PCI(e) devices based on address (independent of the power source) + - RUNTIME_PM_DENYLIST: remove amdgpu, nvidia, pcieport from defaults + - tlp-stat -e -v: show device runtime_status + Platform: + - PLATFORM_PROFILE_ON_AC/BAT: select platform profile to control system + operating characteristics around power/performance levels, thermal + and fan speed + - tlp-stat -p: show state of ThinkPad lapmode + Processor: + - CPU_HWP_DYN_BOOST_ON_AC/BAT: Intel CPU HWP dynamic boost (Issue #468) + - Remove backwards compatibility of CPU_ENERGY_PERF_POLICY_ON_AC/BAT with + ENERGY_PERF_POLICY_ON_AC/BAT to prevent performance issues caused by the + value 'power' in legacy configurations + - PHC_CONTROLS removed (obsolete) + - tlp-stat -p: + - cpu1..cpuN omitted for clarity, use -v to show all + - Sort more than 10 CPU cores in proper numerical order + - Show intel_pstate operation mode ("status") + - Omit "EPB: unsupported" for AMD or non-intel_pstate CPUs + USB: + - USB_EXCLUDE_AUDIO: exclude audio devices from autosuspend (Issue #556) + - tlp-stat -u -v: show device runtime_status + +- Don't recommend bbswitch, there's no relation to tlp (boo#1190631) + +- tlp-sleep.service does not exist anymore +- Make %files section a bit more precise + +- Recommend bbswitch for ThinkPad battery charge control instead of + acpi-call or tp-smapi not present in the distribution. + +- Use the same value for TLP_ULIB in the %build phase and the + %install phase (boo#1180495): + + BuildRequire pkgconfig(udev) + + Use pkg-config --variable udev_dir udev for the value of + TLP_ULIB. + tnftp +- tnftp ssl client should validate hostnames and certificates, + so for example tnftp -d https://revoked.badssl.com/example + fails to connect. (tnftp-verify_hostname.patch), There are + at least two reports about this misbehaviour online but it has + never been fixed. Patch targets openSSL 1.1.x and later + so specify requirement in spec file. + tpm2-0-tss -- drop 0001-esys-Fix-HMAC-generation-for-policy-sessions.patch: now contained - in upstream tarball -- update to upstream version 2.4.5 (jsc#SLE-17366): - - changes in version 2.3.2: - * Fix unit tests on S390 architectures - * Fixed HMAC generation for policy sessions - - changes in version 2.3.3: +- Version 3.1.0 includes: + + cover update to 2.4.5 (jsc#SLE-17366) + + cover update to 2.3.0 (jsc#SLE-9515) + + fix policy session for TPM2_PolicyAuthValue (bsc#1160736) +- Add version the configuration file tpm2-tss-fapi.conf + +- Remove conflicting sysusers.d file + +- Clean spec file +- Add new library libtss2-tcti-pcap0 +- Update to 3.1.0: + * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455) + * Fixed possible access outside the array in ifapi_calculate_tree + * Added pcap TCTI + * Added GlobalSign TPM Root CA certs to FAPI cert store + * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59 + * Added two new TPM commands TPM2_CC_CertifyX509, + and TPM2_CC_ACT_SetTimeout + +- small services fixes and comments + +- update to 3.0.3: + - changes in 3.0.3: + * Fix Regression in Fapi_List + * Fix memory leak in policy calculation + - changes in 3.0.2: + * FAPI: Fix setting of the system flag of NV objects + * This will let NV object metadata be created system-wide always instead of + * locally in the user. Existing metadata will remain in the user directory. + * It can be moved to the corresponding systemstore manually if needed. + * FAPI: Fix policy searching, when a policyRef was provided + * FAPI: Accept EK-Certs without CRL dist point + * FAPI: Fix return codes of Fapi_List + * FAPI: Fix memleak in policy execution + * FAPI: Fix coverity NULL-pointer check + * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands + * FAPI: Fix deleting of policy files. + * FAPI: Fix wrong file loading during object search. + * Fapi: Fix memory leak + * Fapi: Fix potential NULL-Dereference + * Fapi: Remove superfluous NULL check + * Fix a memory leak in async keystore load. + +- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package. +- improve the descriptions of new libraries (fapi1, cmd0, swtpm0) +- adjust baselibs.conf to match new library versions and added libraries + +- Update to 3.0.1, changelog at: + https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md +- Update libtss2-sys0 to libtss2-sys1 +- Add new libs: + * libtss2-fapi1 + * libtss2-tcti-cmd0 + * libtss2-tcti-swtpm0 + +- Update to version 2.3.3 - - changes in version 2.4.0: - * Added a new Feature API (FAPI) implementation - * Added Esys_TRSess_GetAuthRequired() ESAPI function - * Added Esys_TR_GetTpmHandle() SAPI function - * Added Esys_GetSysContext() SAPI function - * Added the with-sanitizer configure option - * Added CI for FreeBSD - * Changed MSSIM TCTI to be async capable - * Removed TCTI loaders from ESYS dependencies in pkg-config - * Changed getPollHandles to allow num_handles query - * Improved CI builds - * Converted builds to docker builds - * Number of fixes and improvements in the test code - * Changed tcti-device in non-async mode to allways block - * Fixed hmac calculation for tpm2_clear command in ESAPI - * Fixed mixing salted and unsalted sessions in the same ESAPI context - * Removed use of VLAs from TPML marshal code - * Fixed setting C++ compiler for non-fuzzing builds at configure - * Fixed setting the name of session objects - * Fixed page alignment errors in Sys_Get/SetAuths functions - * Fixed potential buffer overflow in tcti_mssim_receive - * Fixed invalid memory alloc failure in Tss2_TctiLdr_Initialize - * Fixed list of exported symbols map for libtss2-mu - * Fixed resource name calculation in Esys_CreateLoaded - * Fixed keysize of ECC curve TPM2_ECC_NISTP224 - * Fixed segmentation fault in tctildr if name_conf was too big - * Fixed memory leak in tctildr-tcti tests - * Fixed HMAC generation for policy sessions - * Added check for object node before calling compute_session_value function - * Fixed auth calculation in Esys_StartAuthSession called with optional parameters - * Fixed compute_encrypted_salt error handling in Esys_StartAuthSession - * Fixed exported symbols map for libtss2-mu - * Remove duplicate ESYS entries from map file - * Removed the private implementation of strndup from tctildr - - changes in version 2.4.1: - * Fixed systemd-sysusers/-tmpfiles creation without systemd - * Removed expired coverity token from travis.yaml - * Fixed uninitialized context of FAPI command Fapi_ChangeAuth issue - * Fixed handling of tcti pointer in Esys_Initialize - * Fixed usages of EC routines deprecated in OSSL 1.2 and greater - * Fixed FAPI handling of TPMs without stored certificates - - changes in version 2.4.2: - * Fixed duoble json_object_put call in event log processing. - * Fixed memory leaks on error paths in FAPI - * Fixed setting of FAPI app data. - * Fixed size check for Fapi_Encrypt. - * Fixed computation of PCR logs and PCR digest of PCR logs. - * Improved comments for FAPI authentication. - * Fixed segfault and leaks in FAPI - * Fixed Fapi_GetCertificate for objects which are not of type key - * Fixed hierarchy usage in Fapi_Provision - * Fixed ESYS Shared secret calculation - * Fixed doxygen warnings for FAPI docs - * Fixed copying of primary template during key loading. - * Fixed some wrong format directives in debug statements. - * Fixed usage of hierarchy and authentication in Fapi_GetCertificate und Fapi_Delete - * Fixed unallocated return buffers which may have lead to segfaults in tooling - * Fixed usage of persistent handles. - * Fixed computation of the size of a PCR selection (Fixes #1737). - * Fixed missing hierarchy authentication for Fapi_Delete. - * Fixed uninitialized context of FAPI command Fapi_ChangeAuth. - * Fixed computation of random value for objects used for sealing. - * Fixed return code for event parsing errors. - * Fixed NV index and path handling in NV creation. - * Fixed path checking for keys. - * Fixed Fapi_GetInfo function. - * Fixed path usage in Fapi_Import. - * Fixed invalid settings of default flags for keys creation. - * Fixed handle usage in Fapi_ChangeAuth - * Enabled all PCR registers for SHA256 bank in the distribution profiles. - * Added some checks to Fapi_Provisioning to avoid nasty failure states - * Added a check to prevent overwrite or delete FAPI storage objects and directories - * Remove obsolete test fapi-key-create-policy-password-sign.int.c - * Checked hierarchy needed for EvictControl for deleting objects in FAPI. - * Checked event log file before calling the TPM in Fapi_PcrExtend. - * Adapted integration tests to SRK delete checking. - * Improved presentation of Fapi_GetInfo. - * Silenced expected errors from Esys_TestParams - * Added man pages for FAPI json config files - * Added a check that prevents deleting default directories - * Added a check if primary keys already exist for Fapi_Provision - * Added tests for derived persistent keys. - * Added test policy PCR with PCR register 8. - * Added check for deleting of the SRK. - * Added test for sealing a random value. - * Added content of the config file to FAPI Info. - * Added a check for valid pathnames in keystore module. - * Removed unecassary code from Fapi_ExportKey - * Removed obsolete LIBDL_LDFLAGS and replace it with LIBADD_DL - * Removed superfluous policies/pol_password.json file - - changes in version 2.4.3: - * Fix CVE-2020-24455 FAPI PolicyPCR not instatiating correctly - Note that all TPM object created with a PolicyPCR with the currentPcrs - and currentPcrsAndBank options have been created with an incorrect policy - that ommits PCR checks. All these objects have to be recreated! - * Fix bug in FAPI NV creation with custom index values - * Cleanup of leftover sessions in error cases in FAPI - * Better error messages in several FAPI errors - * Add checks to FAPI policy paths - * Add checks if FAPI is correctly provisioned - * Fix execution of FAPI policies in some cases - * Allow 0x prefixes for TPMU_HA in JSON encoding - - changes in version 2.4.4: - * FAPI: Fix policy searching, when a policyRef was provided - * FAPI: Accept EK-Certs without CRL dist point - * FAPI: Fix memleak in policy execution - * FAPI: Fix setting of the system flag of NV objects - This will let NV object metadata be created system-wide always instead of - locally in the user. Existing metadata will remain in the user directory. - It can be moved to the corresponding systemstore manually if needed. - * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands - * FAPI: Fix deleting of policy files. - * FAPI: Fix wrong file loading during object search. - * Fapi: Fix memory leak - * Fapi: Fix potential NULL-Dereference - * Fapi: Remove superfluous NULL check - - changes in version 2.4.5: - * Fix Regression in Fapi_List - * Fix memory leak in policy calculation -- 0001-esys-Fix-HMAC-generation-for-policy-sessions.patch: fix problems with - policy sessions that don't include an TPM2_PolicyAuthValue (bsc#1160736). - This bug was fixed upstream in a minor release 2.3.2. +- Use system-users for tss user creation (boo#1162360). + +- BuildRequire pkgconfig(udev) instead of udev: allow OBS to + shortcut through the -mini flavor. + +- update to upstream version 2.3.2: + - changes since version 2.3.0: + - Fix unit tests on S390 architectures + - Fixed HMAC generation for policy sessions -- update to upstream version 2.3.0 (dependency for jsc#SLE-9515): +- update to upstream version 2.3.0: xclip +- modernise spec-file (move license to licensedir) + xorg-x11-libX11-ccache +- make package arch again (boo#1110020) + -- bumped version to 7.3 - xorg-x11-server +- U_xfixes-Fix-out-of-bounds-access-in-ProcXFixesCreateP.patch + * CVE-2021-4009/ZDI-CAN-14950 (bsc#1190487) + The handler for the CreatePointerBarrier request of the XFixes + extension does not properly validate the request length leading + to out of bounds memory write. +- U_Xext-Fix-out-of-bounds-access-in-SProcScreenSaverSus.patch + * CVE-2021-4010/ZDI-CAN-14951 (bsc#1190488) + The handler for the Suspend request of the Screen Saver extension + does not properly validate the request length leading to out of + bounds memory write. +- U_record-Fix-out-of-bounds-access-in-SwapCreateRegiste.patch + * CVE-2021-4011/ZDI-CAN-14952 (bsc#1190489) + The handlers for the RecordCreateContext and RecordRegisterClients + requests of the Record extension do not properly validate the request + length leading to out of bounds memory write. + +- u_Support-configuration-files-under-run-X11-xorg.conf..patch +- u_Add-udev-scripts-for-configuration-of-platform-devic.patch +- u_Add-udev-rule-for-HyperV-devices.patch + * Remove udev-based configuration again (not working) +- U_rendercompositeglyphs.patch + * X.Org Server SProcRenderCompositeGlyphs Out-Of-Bounds Access + Privilege Escalation Vulnerability [CVE-2021-4008, ZDI-CAN-14192] + (boo#1193030) + +- u_pci-primary-Fix-up-primary-PCI-device-detection-for-the-platfrom-bus.patch + * Fix possible SEGFAULT when parsing busid + +- u_Support-configuration-files-under-run-X11-xorg.conf..patch + * Support configuration files under /run +- u_Add-udev-scripts-for-configuration-of-platform-devic.patch + * Add udev rules for configuration of platform (e.g., + simple-framebuffer) devices +- u_Add-udev-rule-for-HyperV-devices.patch + * Add udev rules for configuration of HyperV graphics devices + xscreensaver -- update to 5.44 (ECO-2755): +- Do not own /usr/share/fonts. It belongs to filesystem. + +- Update to version 6.02: + * New hacks, `marbling' and `binaryhorizon'. + * `atlantis' behaviors are more random and lifelike. + * `headroom' is now Mask Headroom. + * `fontglide' skips fonts that can't display ASCII. + * Use asterisks in the password dialog if the system fonts don't + have bullets in them. + * "Disable Screen Saver" was behaving like "Blank Screen Only". +- Fix compilation with older versions of gcc and on aarch64 + (xscreensaver-6.02-marbling-std-c.patch). + +- Update to version 6.01: + * Major refactor of the `xscreensaver' daemon for improved + security, dividing it into three programs: `xscreensaver', + `xscreensaver-gfx' and `xscreensaver-auth'. + * Renamed `xscreensaver-demo' to `xscreensaver-settings'. + * Unlock dialog has user-selectable color schemes. + * Everything uses XFreeType for fonts now. + * Install a few custom fonts needed by some savers. + * Properly disable the server's built-in screen saver. + * The passwdTimeout option was being ignored. + * The display of the unlock thermometer was weird. + * Fixed password entry on old-school multi-screen setups (:0.1). + * Worked around a KDE 5 compositor bug that caused the desktop + to momentarily become visible when cycling. + * Fixed possible high CPU usage in `xscreensaver-systemd'. + * Fixed some spurious warnings in `xscreensaver-text'. + * Warn when Wayland is in use, since it makes both screen saving + and locking impossible. + * Dropped support for systems older than X11R7 (2009). + * Fading works on systems without gamma (e.g. Raspberry Pi). + * Use EGL instead of GLX when available. + * `xscreensaver-systemd' now detects when a video player has + inhibited screen blanking and then exits without uninhibiting. + * Improved GLSL and GLES3 support: Phong shading in `etruscanvenus', + `hypertorus', `klein', `projectiveplane',`romanboy' and + `sphereeversion'. + * Updates to `cubicgrid'. +- Refresh xscreensaver-disable-upgrade-nagging-message.patch. +- Use default libexecdir. + +- Update to version 5.45: + * New hacks, covid19, headroom, sphereeversion and beats. + * Shader updates to hypertorus. + * No more image-loading pause in glslideshow. + * BSOD supports GNOME. + * Image loaders support SVG. + * xscreensaver-systemd now allows video players to request that + the screen not blank. + * -log implies -verbose -no-capture-stderr. + * Glade -> GtkBuilder. + * Various bug fixes. + +- update to 5.44: yast2 +- Fixed RelURL to work properly with the FTP URLs (related to + jsc#SLE-22669) +- 4.4.30 + +- Fixed RelURL unit test randomly crashing (related to + jsc#SLE-22669) +- 4.4.29 + +- Added RelURL class for working with relative URLs ("relurl://") + (jsc#SLE-22669) +- 4.4.28 + +- Drop support for subscription-tools, that package is not present + in SLE15 anymore - removed modules/ProductProfiles.rb file + (bsc#1193339) +- 4.4.27 + +- Popup.YesNo(): Unify the internal [No] button ID (bsc#1193326) +- 4.4.26 + +- Add register_target to the Y2Packager::Product class + (bsc#1193212). +- 4.4.25 + +- Do not crash when it is not possible to fetch the package + containing the release notes (bsc#1193148). +- 4.4.24 + +- Prepare code for ruby3 (bsc#1193192) +- 4.4.23 + yast2-add-on +- Drop support for subscription-tools, that package is not present + in SLE15 anymore (bsc#1193339) +- 4.4.5 + +- Properly set the custom repository name (bsc#1191491) +- 4.4.4 + yast2-alternatives +- 4.4.0 (bsc#1185510) + +- Change .desktop file so module launches with xdg-su (bsc#1180173). +- 4.3.1 + +- Handle properly help command for alternatives client + (bsc#1172340) +- 4.3.0 + yast2-bootloader +- rely on yast-storage-ng to detect UEFI boot support status (bsc#937067) +- 4.4.10 + +- bnc#1193016 + - fixed crash due to missing require +- 4.4.9 + yast2-installation +- Self-update now supports relative URLs (relurl://), it defines + the self-update repository relatively to the main installation + repository (jsc#SLE-22669) +- 4.4.30 + +- Do not preselect any product during upgrade (related to + bsc#1192230). +- 4.4.29 + +- Improve the self-update process, do not read the products from + the installation medium (bsc#1193536) +- Adde more /etc/os-release replacements in the self-update URL +- 4.4.28 + +- Display the correct title in the welcome screen depending + on its content (related to bsc#1193223 and bsc#1192230). +- 4.4.27 + +- Display the product's license when only 1 product is available + in the online medium (bsc#1193223). +- Do not display the product's selector during upgrade + (kanderssen@suse.com, bsc#1192230). +- 4.4.26 + +- Drop support for subscription-tools, that package is not present + in SLE15 anymore (bsc#1193339) +- 4.4.25 + +- Do not crash when it is not possible to fetch the package + containing the release notes (bsc#1193148). +- 4.4.24 + +- Remove no longer used extra warning about destructive actions + before starting the installation process (related to bsc#1057437). +- 4.4.23 + yast2-journal +- Prepare code for ruby3 (bsc#1193192) +- 4.4.1 + yast2-network +- Prepare code for ruby3 (bsc#1193192) +- 4.4.32 + yast2-nfs-client +- Adding /usr/bin/killall as a requirement (bsc#1161687) +- 4.4.2 + yast2-packager +- Adapt iso handling to do properly double escaping ( fix for wrong + fix for bsc#954813) +- Prepare code for ruby3 (bsc#1193192) +- 4.4.18 + +- Unify the Yes/No popup button IDs (bsc#1193326) +- 4.4.17 + +- Properly set the custom repository name (#1191491) +- 4.4.16 + +- Add the register_target property to ProductSpec so it is + available in all the derived classes (bsc#1193212). +- 4.4.15 + +- Use consistent names for the Full medium repositories + (bsc#1191652) +- 4.4.14 + yast2-python-bindings +- Fix yast2-python-bindings requires Python (bsc#1190890). +- 4.4.2 + yast2-ruby-bindings +- Avoid timing issue in integration tests ( bsc#1193192 ) +- 4.4.6 + +- Avoid warning in ruby3.0 ( bsc#1193192 ) +- 4.4.5 + yast2-storage-ng +- Improve probing issues handling by raising exceptions. +- Fix aborting from standalone modules when the user decides + to not continue (bsc#1193749). +- 4.4.27 + +- Partitioner: nest thin logical volumes below their thin pools (related to + jsc#SLE-15283) +- 4.4.26 + +- AutoYaST: fixes for reusing encrypted devices, RAIDs and bcache + devices (bsc#1193450). +- 4.4.25 + +- document UEFI handling (bsc#937067) +- 4.4.24 + +- Proposal: add support for mount options (related to fate#318196). +- 4.4.23 + +- use libstorage-ng to determine whether efibootmgr is available + (bsc#937067) +- 4.4.22 + +- Prepare code for ruby3 - adapt openstruct usage (bsc#1193192) +- 4.4.21 + +- Fix regression for unit tests: mock the generation of Bcache + issues to avoid setting the architecture for every test (related + to jsc#SLE-18430). +- 4.4.20 + +- Refined the criteria used to check whether a certain mount point + needs the _netdev mount option (jsc#SLE-20535). +- Now _netdev is only added if needed at the end of the Guided + Proposal, is not longer suggested as part of the default mount + options for new mount points. +- 4.4.19 + +- Improve probing errors handling: when there are several errors, + only one popup is shown, and Details button shows all the errors + (jsc#SLE-18430). +- Partitioner: add menu option View/System Issues. +- 4.4.18 + +- Unify the Yes/No popup button IDs (bsc#1193326) +- 4.4.17 + +- Prepare code for ruby3 (bsc#1193192) +- 4.4.16 + +- Changed the HWInfoReader API: now it always returns objects of + a new Y2Storage::HWInfoDisk class (backwards compatible with + OpenStruct). + +- Fixed typo in message about encryption (part of jsc#SLE-21308) +- 4.4.15 + yast2-trans +- Update to version 84.87.20211204.c55adb9b7a: + * New POT for text domain 'installation'. + * Translated using Weblate (Japanese) + * Translated using Weblate (Japanese) + * Translated using Weblate (Ukrainian) + * Translated using Weblate (Ukrainian) + * Translated using Weblate (Slovak) + * Translated using Weblate (Slovak) + * Translated using Weblate (Catalan) + * Translated using Weblate (Slovak) + * New POT for text domain 'update'. + * New POT for text domain 'storage'. + * New POT for text domain 'packager'. + * New POT for text domain 'installation'. + * New POT for text domain 'base'. + * New POT for text domain 'add-on'. + * Translated using Weblate (Portuguese) + * Translated using Weblate (Portuguese) + * Translated using Weblate (Portuguese) + * New POT for text domain 'users'. + * New POT for text domain 'installation'. + * New POT for text domain 'autoinst'. + * New POT for text domain 'update'. + * Translated using Weblate (Japanese) + +- Update to version 84.87.20211126.cedf3cc035: + * New POT for text domain 'installation'. + * New POT for text domain 'bootloader'. + * New POT for text domain 'autoinst'. + * Translated using Weblate (French) + * Translated using Weblate (French) + * Translated using Weblate (Slovak) + * Translated using Weblate (Catalan) + * Translated using Weblate (Catalan) + * Translated using Weblate (Catalan) + * Translated using Weblate (Catalan) + * New POT for text domain 'storage'. + * Translated using Weblate (Catalan) + * Translated using Weblate (Catalan) + * Translated using Weblate (Catalan) + * Translated using Weblate (Catalan) + * Translated using Weblate (Catalan) + * Translated using Weblate (Catalan) + * Translated using Weblate (Catalan) + * Translated using Weblate (Catalan) + * Translated using Weblate (Catalan) + * Translated using Weblate (Catalan) + * Translated using Weblate (Japanese) + * Translated using Weblate (Catalan) + * Translated using Weblate (Catalan) + * Translated using Weblate (Catalan) + * Translated using Weblate (Catalan) + * Translated using Weblate (Catalan) + * Translated using Weblate (Catalan) + * Translated using Weblate (Catalan) + * Translated using Weblate (Catalan) + * Translated using Weblate (Catalan) + * New POT for text domain 'xpram'. + * New POT for text domain 's390'. + * New POT for text domain 'packager'. + * New POT for text domain 'autoinst'. + yast2-tune +- Fixed heading if component is empty or nil (bsc#1193809) +- Fixed typo in common wizard button ID (:abort, not :bort) +- 4.4.2 + yast2-update +- Do not crash after selecting the system to upgrade when using + the full medium (bsc#1193212). +- 4.4.6 + +- Remove obsolete code for treating /var differently when mounting + partitions, avoiding calling old storage code and crashing + (related to bsc#1186268). +- 4.4.5 + yast2-users +- Prepare code for ruby3 (bsc#1193192) +- 4.4.10 + +- AutoYaST: do not warning about deprecated + when it is empty, "x", "!", or "*" (related to jsc#SLE-20592). +- 4.4.9 + zstd +- Update to version 1.5.0 (jsc#SLE-20392) + * https://github.com/facebook/zstd/releases/tag/v1.5.0 + * Improved Middle-Level Compression Speed + * Improved High-Level Compression Ratio + * Faster Decompression Speed + * Dynamic Library Supports Multithreading by Default +