Packages changed: container-selinux (2.158.0 -> 2.160.1) dtc grub2 java-11-openjdk (11.0.10.0 -> 11.0.11.0) kernel-source (5.11.15 -> 5.11.16) kexec-tools (2.0.20 -> 2.0.21) kyotocabinet libgcrypt (1.9.2 -> 1.9.3) libupnp (1.14.5 -> 1.14.6) lvm2 lvm2-device-mapper ncompress (4.2.4.6 -> 5.0) openvpn perl-XML-LibXML (2.0206 -> 2.0207) pipewire (0.3.25 -> 0.3.26) python-M2Crypto python-MarkupSafe python-dulwich (0.20.15 -> 0.20.20) python-pydot (1.4.1 -> 1.4.2) python-pymongo (3.11.2 -> 3.11.3) rubygem-nokogiri (1.11.2 -> 1.11.3) suse-module-tools (15.4.0 -> 15.4.1) tk xf86-input-joystick xf86-video-fbdev xinit yast2-trans (84.87.20210418.dfe53bf215 -> 84.87.20210425.616915ed60) === Details === ==== container-selinux ==== Version update (2.158.0 -> 2.160.1) - Fix container runtime binary labels (bsc#1185030). You need to relable at least /usr/sbin if you're affected ==== dtc ==== - explicitly pass -pie in CFLAGS, since the build system explicitly passes - fPIC, which breaks our gcc-PIE profile. This makes all packaged binaries PIE-executables (bsc#1184122). ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Fix obsolete syslog in systemd unit file and updating to use journal as StandardOutput (bsc#1185149) * grub2-once.service ==== java-11-openjdk ==== Version update (11.0.10.0 -> 11.0.11.0) Subpackages: java-11-openjdk-headless - Update to upstream tag jdk-11.0.11+9 (April 2021, CPU) * Security fixes + JDK-8244473: Contextualize registration for JNDI + JDK-8244543: Enhanced handling of abstract classes + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous processing + JDK-8253799: Make lists of normal filenames + JDK-8257001: Improve Http Client Support * Other changes + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream readDouble() conversion to long mishandled + JDK-7146776: deadlock between URLStreamHandler.getHostAddress and file.Handler.openconnection + JDK-8086003: Test fails on OSX with java.lang.RuntimeException 'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3' missing + JDK-8168869: jdeps: localized messages don't use proper line breaks + JDK-8180837: SunPKCS11-NSS tests failing with CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID + JDK-8202343: Disable TLS 1.0 and 1.1 + JDK-8205992: jhsdb cannot attach to Java processes running in Docker containers + JDK-8209193: Fix aarch64-linux compilation after -Wreorder changes + JDK-8210413: AArch64: Optimize div/rem by constant in C1 + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction + JDK-8211051: jdeps usage of --dot-output doesn't provide valid output for modular jar + JDK-8211057: Gensrc step CompileProperties generates unstable CompilerProperties output + JDK-8211150: G1 Full GC not purging code root memory and hence causing memory leak + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup delegation when module reads automatic module + JDK-8212043: Add floating-point Math.min/max intrinsics + JDK-8212218: [TESTBUG] runtime/ErrorHandling/ /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/ /WindowsComboBoxSizeTest.java fails in Windows + JDK-8213909: jdeps --print-module-deps should report missing dependences + JDK-8214180: Need better granularity for sleeping + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed due to missing Lib2 file + JDK-8214230: Classes generated by SystemModulesPlugin.java are not reproducable + JDK-8214741: docs/index.html has no title or copyright + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed after 8212043 + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/ /resexhausted003/TestDescription.java fails + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java failed - no KrbException thrown + JDK-8218550: Add test omitted from JDK-8212043 + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in JvmtiRawMonitor::raw_exit while posting method exit event + JDK-8221995: AARCH64: problems with CAS instructions encoding + JDK-8222518: Remove unnecessary caching of Parker object in java.lang.Thread + JDK-8222785: aarch64: add necessary masking for immediate shift counts + JDK-8223186: HotSpot compile warnings from GCC 9 + JDK-8225773: jdeps --check produces NPE if there are missing module dependences + JDK-8225805: Java Access Bridge does not close the logger + JDK-8226810: Failed to launch JVM because of NullPointerException occured on System.props + JDK-8229396: jdeps ignores multi-release when generate-module-info used on command line + JDK-8229474: Shenandoah: Cleanup CM::update_roots() + JDK-8232225: Rework the fix for JDK-8071483 + JDK-8232905: JFR fails with assertion: assert(t->unflushed_size() == 0) failed: invariant + JDK-8233164: C2 fails with assert(phase->C->get_alias_index(t) == phase->C->get_alias_index(t_adr)) failed: correct memory chain + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is failing intermittently in nightly lnux-x64 system + JDK-8233912: aarch64: minor improvements of atomic operations + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads non-strong fields with an on-strong load barrier + JDK-8234742: Improve handshake logging + JDK-8234796: Refactor Handshake::execute to take a more complex type than ThreadClosure + JDK-8235324: Dying objects are published from users of CollectedHeap::object_iterate + JDK-8235351: Lookup::unreflect should bind with the original caller independent of Method's accessible flag + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/ /AttachOnDemand/attach021/TestDescription.java test + JDK-8237392: Shenandoah: Remove unreliable assertion + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error + JDK-8237495: Java MIDI fails with a dereferenced memory error when asked to send a raw 0xF7 + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow sending large datagrams (macOS) + JDK-8240353: AArch64: missing support for - XX:+ExtendedDTraceProbes in C1 + JDK-8240704: CheckHandles.java failed "AssertionError: Handle use increased by more than 10 percent." + JDK-8240751: Shenandoah: fold ShenandoahTracer definition + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with "assert(store != load->find_exact_control(load->in(0))) failed: dependence cycle found" + JDK-8241598: Upgrade JLine to 3.14.0 + JDK-8241649: Optimize Character.toString + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if module-info.class found as resource in unnamed module + JDK-8241911: AArch64: Fix a potential register clash issue in reduce_add2I + JDK-8242030: Wrong package declarations in jline classes after JDK-8241598 + JDK-8242565: Policy initialization issues when the denyAfter constraint is enabled + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox + JDK-8243670: Unexpected test result caused by C2 MergeMemNode::Ideal + JDK-8244088: [Regression] Switch of Gnome theme ends up in deadlocked UI + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header files + JDK-8244340: Handshake processing thread lacks yielding + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown for malformed class file + JDK-8244683: A TSA server used by tests + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java failed with No enum constant + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is unused + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco agent + JDK-8245512: CRC32 optimization using AVX512 instructions + JDK-8245527: LDAP Channel Binding support for Java GSS/Kerberos + JDK-8246707: (sc) SocketChannel.read/write throws AsynchronousCloseException on closed channel + JDK-8246709: sun/security/tools/jarsigner/ /TsacertOptionTest.java compilation failed after JDK-8244683 + JDK-8247200: assert((unsigned)fpargs < 32) + JDK-8247766: [aarch64] guarantee(val < (1U << nbits)) failed: Field too big for insn. + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit + JDK-8248865: Document JNDI/LDAP timeout properties + JDK-8248901: Signed immediate support in .../share/assembler.hpp is broken. + JDK-8249543: Force DirectBufferAllocTest to run with - ExplicitGCInvokesConcurrent + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows + JDK-8249749: modify a primitive array through a stream and a for cycle causes jre crash + JDK-8249787: Make TestGCLocker more resilient with concurrent GCs + JDK-8249867: xml declaration is not followed by a newline + JDK-8250911: [windows] os::pd_map_memory() error detection broken + JDK-8251255: [linux] Add process-memory information to hs-err and VM.info + JDK-8251359: Shenandoah: filter null oops before calling enqueue/SATB barrier + JDK-8251925: C2: RenaissanceStressTest fails with assert(!had_error): bad dominance + JDK-8251944: Add Shenandoah test config to compiler/gcbarriers/UnsafeIntrinsicsTest.java + JDK-8251992: VM crashed running TestComplexAddrExpr.java test with -XX:UseAVX=X + JDK-8253220: Epsilon: clean up unused code/declarations + JDK-8253274: The CycleDMImagetest brokes the system + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node + JDK-8253368: TLS connection always receives close_notify exception + JDK-8253404: C2: assert(C->live_nodes() <= C->max_node_limit()) failed: Live Node limit exceeded limit + JDK-8253409: Double-rounding possibility in float fma + JDK-8253476: TestUseContainerSupport.java fails on some Linux kernels w/o swap limit capabilities + JDK-8253524: C2: Refactor code that clones predicates during loop unswitching + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff)) failed: unexpected + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/ /MouseEventAfterStartDragTest.html test failed + JDK-8253702: BigSur version number reported as 10.16, should be 11.nn + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*) + JDK-8254104: MethodCounters must exist before nmethod is installed + JDK-8254734: "dead loop detected" assert failure with patch from 8223051 + JDK-8254748: Bad Copyright header format after JDK-8212218 + JDK-8254799: runtime/ErrorHandling/ /TestHeapDumpOnOutOfMemoryError.java fails with release VMs + JDK-8255058: C1: assert(is_virtual()) failed: type check + JDK-8255351: Add detection for Graviton 2 CPUs + JDK-8255368: Math.exp() gives wrong result for large values on x86 32-bit platforms + JDK-8255387: Japanese characters were printed upside down on AIX + JDK-8255401: Shenandoah: Allow oldval and newval registers to overlap in cmpxchg_oop() + JDK-8255479: [aarch64] assert(src->section_index_of(target) == CodeBuffer::SECT_NONE) failed: sanity + JDK-8255544: Create a checked cast + JDK-8255559: Leak File Descriptors Because of ResolverLocalFilesystem#engineResolveURI() + JDK-8255681: print callstack in error case in runAWTLoopWithApp + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too + JDK-8255742: PrintInlining as compiler directive doesn't print virtual calls + JDK-8255845: Memory leak in imageFile.cpp + JDK-8255880: UI of Swing components is not redrawn after their internal state changed + JDK-8255908: ExceptionInInitializerError due to UncheckedIOException while initializing cgroupv1 subsystem + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset() is incorrect for stub calls + JDK-8256056: Deoptimization stub doesn't save vector registers on x86 + JDK-8256061: RegisterSaver::save_live_registers() omits upper halves of ZMM0-15 registers + JDK-8256187: [TEST_BUG] Automate bug4275046.java test + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after JDK-8210764 due to mishandled lir_neg + JDK-8256258: some missing NULL checks or asserts after CodeCache::find_blob_unsafe + JDK-8256264: Printed GlyphVector outline with low DPI has bad quality on Windows + JDK-8256290: javac/lambda/T8031967.java fails with StackOverflowError on x86_32 + JDK-8256359: AArch64: runtime/ReservedStack/ /ReservedStackTestCompiler.java fails + JDK-8256387: Unexpected result if patching an entire instruction on AArch64 + JDK-8256421: Add 2 HARICA roots to cacerts truststore + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for small copies in StubGenerator::copy_memory + JDK-8256489: Make gtest for long path names on Windows more resilient in the presence of virus scanners + JDK-8256501: libTestMainKeyWindow fails to build with Xcode 12.2 + JDK-8256633: Fix product build on Windows+Arm64 + JDK-8256682: JDK-8202343 is incomplete + JDK-8256751: Incremental rebuild with precompiled header fails when touching a header file + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset() for CallLeafNoFP on x86_32 + JDK-8256806: Shenandoah: optimize shenandoah/jni/ /TestPinnedGarbage.java test + JDK-8256807: C2: Not marking stores correctly as mismatched in string opts + JDK-8256810: Incremental rebuild broken on Macosx + JDK-8256818: SSLSocket that is never bound or connected leaks socket resources + JDK-8256888: Client manual test problem list update + JDK-8257083: Security infra test failures caused by JDK-8202343 + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11 + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps is on + JDK-8257513: C2: assert((constant_addr - _masm.code()->consts()->start()) == con.offset()) + JDK-8257547: Handle multiple prereqs on the same line in deps files + JDK-8257561: Some code is not vectorized after 8251925 and 8250607 + JDK-8257565: epsilonBarrierSet.hpp should not include barrierSetAssembler + JDK-8257575: C2: "failed: only phis" assert failure in loop strip mining verification + JDK-8257594: C2 compiled checkcast of non-null object triggers endless deoptimization/recompilation cycle + JDK-8257633: Missing -mmacosx-version-min=X flag when linking libjvm + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java reports leaks + JDK-8257707: Fix incorrect format string in Http1HeaderParser + JDK-8257746: Regression introduced with JDK-8250984 - memory might be null in some machines + JDK-8257798: [PPC64] undefined reference to Klass::vtable_start_offset() + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/ /SSLSocketLeak.java as automatic test + JDK-8257910: [JVMCI] Set exception_seen accordingly in the runtime. + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java again reports leaks after JDK-8257884 + JDK-8257999: Parallel GC crash in gc/parallel/ /TestDynShrinkHeap.java: new region is not in covered_region + JDK-8258077: Using -Xcheck:jni can lead to a double-free after JDK-8193234 + JDK-8258247: Couple of issues in fix for JDK-8249906 + JDK-8258373: Update the text handling in the JPasswordField + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder .rotateDisk() + JDK-8258419: RSA cipher buffer cleanup + JDK-8258471: "search codecache" clhsdb command does not work + JDK-8258534: Epsilon: clean up unused includes + JDK-8258805: Japanese characters not entered by mouse click on Windows 10 + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11 after failures + JDK-8258836: JNI local refs exceed capacity getDiagnosticCommandInfo + JDK-8258884: [TEST_BUG] Convert applet-based test open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java to a regular java test + JDK-8259007: This test printed a blank page + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f + JDK-8259049: Uninitialized variable after JDK-8257513 + JDK-8259231: Epsilon: improve performance under contention during virtual space expansion + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails "assert(covered_region.contains(new_memregion)) failed: new region is not in covered_region" + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert will expire in 90 days + JDK-8259319: Illegal package access when SunPKCS11 requires SunJCE's classes + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails with void.class input + JDK-8259428: AlgorithmId.getEncodedParams() should return copy + JDK-8259446: runtime/jni/checked/ /TestCheckedReleaseArrayElements.java fails with stderr not empty + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA to false + JDK-8259580: Shenandoah: uninitialized label in VerifyThreadGCState + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use condition is incorrect + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE after JDK-8244543 + JDK-8259706: C2 compilation fails with assert(vtable_index == Method::invalid_vtable_index) failed: correct sentinel value + JDK-8259707: LDAP channel binding does not work with StartTLS extension + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction + JDK-8259849: Shenandoah: Rename store-val to IU-barrier + JDK-8259949: x86 32-bit build fails when -fcf-protection is passed in the compiler flags + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp + JDK-8260029: aarch64: fix typo in verify_oop_array + JDK-8260308: Update LogCompilation junit to 4.13.1 + JDK-8260338: Some fields in HaltNode is not cloned + JDK-8260349: Cannot programmatically retrieve Metaspace max set via JAVA_TOOL_OPTIONS + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports false positive + JDK-8260497: Shenandoah: Improve SATB flushing + JDK-8260502: [s390] NativeMovRegMem::verify() fails because it's too strict + JDK-8260632: Build failures after JDK-8253353 + JDK-8260704: ParallelGC: oldgen expansion needs release-store for _end + JDK-8261022: Fix incorrect result of Math.abs() with char type + JDK-8261089: [TESTBUG] native library of test TestCheckedReleaseCriticalArray.java fails to compile with gcc 4.x + JDK-8261183: Follow on to Make lists of normal filenames + JDK-8261209: isStandalone property: remove dependency on pretty-print + JDK-8261231: Windows IME was disabled after DnD operation + JDK-8261251: Shenandoah: Use object size for full GC humongous compaction + JDK-8261310: PPC64 Zero build fails with 'VMError::controlled_crash(int)::FunctionDescriptor functionDescriptor' has incomplete type and cannot be defined + JDK-8261334: NMT: tuning statistic shows incorrect hash distribution + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode + JDK-8261522: [PPC64] AES intrinsics write beyond the destination array + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/ /IllegalPackageAccess.java fails on platforms where no nsslib artifacts are defined + JDK-8261585: Restore HandleArea used in Deoptimization::uncommon_trap + JDK-8261753: Test java/lang/System/OsVersionTest.java still failing on BigSur patch versions after JDK-8253702 + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java in 11u + JDK-8261912: Code IfNode::fold_compares_helper more defensively + JDK-8261920: [AIX] jshell command throws java.io.IOError on non English locales + JDK-8262018: Wrong format in SAP copyright header of OsVersionTest + JDK-8263069: Exclude some failing tests from security/infra/java/security/cert/CertPathValidator - moved mozilla-nss dependency to java-11-openjdk-headless package This is necessary to be able to do crypto with just java-11-openjdk-headless installed. Fixes boo#1184606 ==== kernel-source ==== Version update (5.11.15 -> 5.11.16) Subpackages: kernel-default kernel-docs - Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)" This turned out to be a bad idea: the kernel-$flavor-devel package must be usable without kernel-$flavor, e.g. at the build of a KMP. And this change brought superfluous installation of kernel-preempt when a system had kernel-syms (bsc#1185113). - commit d771304 - rpm/check-for-config-changes: add AS_HAS_* to ignores arch/arm64/Kconfig defines a lot of these. So far our current compilers seem to support them all. But it can quickly change with SLE later. - commit a4d8194 - Linux 5.11.16 (bsc#1012628). - bpf: Move sanitize_val_alu out of op switch (bsc#1012628). - bpf: Improve verifier error messages for users (bsc#1012628). - bpf: Rework ptr_limit into alu_limit and add common error path (bsc#1012628). - ARM: 9071/1: uprobes: Don't hook on thumb instructions (bsc#1012628). - bpf: Move off_reg into sanitize_ptr_alu (bsc#1012628). - bpf: Ensure off_reg has no mixed signed bounds for all types (bsc#1012628). - r8169: don't advertise pause in jumbo mode (bsc#1012628). - r8169: tweak max read request size for newer chips also in jumbo mtu mode (bsc#1012628). - kasan: remove redundant config option (bsc#1012628). - kasan: fix hwasan build for gcc (bsc#1012628). - KVM: VMX: Don't use vcpu->run->internal.ndata as an array index (bsc#1012628). - KVM: VMX: Convert vcpu_vmx.exit_reason to a union (bsc#1012628). - bpf: Use correct permission flag for mixed signed bounds arithmetic (bsc#1012628). - arm64: dts: allwinner: h6: beelink-gs1: Remove ext. 32 kHz osc reference (bsc#1012628). - arm64: dts: allwinner: Fix SD card CD GPIO for SOPine systems (bsc#1012628). - ARM: OMAP2+: Fix uninitialized sr_inst (bsc#1012628). - ARM: footbridge: fix PCI interrupt mapping (bsc#1012628). - ARM: 9069/1: NOMMU: Fix conversion for_each_membock() to for_each_mem_range() (bsc#1012628). - ARM: 9063/1: mm: reduce maximum number of CPUs if DEBUG_KMAP_LOCAL is enabled (bsc#1012628). - ARM: OMAP2+: Fix warning for omap_init_time_of() (bsc#1012628). - gro: ensure frag0 meets IP header alignment (bsc#1012628). - ch_ktls: do not send snd_una update to TCB in middle (bsc#1012628). - ch_ktls: tcb close causes tls connection failure (bsc#1012628). - ch_ktls: fix device connection close (bsc#1012628). - ch_ktls: Fix kernel panic (bsc#1012628). - ibmvnic: remove duplicate napi_schedule call in open function (bsc#1012628). - ibmvnic: remove duplicate napi_schedule call in do_reset function (bsc#1012628). - ibmvnic: avoid calling napi_disable() twice (bsc#1012628). - ia64: tools: remove inclusion of ia64-specific version of errno.h header (bsc#1012628). - ia64: remove duplicate entries in generic_defconfig (bsc#1012628). - ethtool: pause: make sure we init driver stats (bsc#1012628). - i40e: fix the panic when running bpf in xdpdrv mode (bsc#1012628). - ibmvnic: correctly use dev_consume/free_skb_irq (bsc#1012628). - net: Make tcp_allowed_congestion_control readonly in non-init netns (bsc#1012628). - mm: ptdump: fix build failure (bsc#1012628). - net: ip6_tunnel: Unregister catch-all devices (bsc#1012628). - net: sit: Unregister catch-all devices (bsc#1012628). - net: phy: marvell: fix detection of PHY on Topaz switches (bsc#1012628). - net: davicom: Fix regulator not turned off on failed probe (bsc#1012628). - net/mlx5e: Fix setting of RS FEC mode (bsc#1012628). - netfilter: nftables: clone set element expression template (bsc#1012628). - netfilter: nft_limit: avoid possible divide error in nft_limit_init (bsc#1012628). - net/mlx5e: fix ingress_ifindex check in mlx5e_flower_parse_meta (bsc#1012628). - net: macb: fix the restore of cmp registers (bsc#1012628). - drm/i915/display/vlv_dsi: Do not skip panel_pwr_cycle_delay when disabling the panel (bsc#1012628). - libbpf: Fix potential NULL pointer dereference (bsc#1012628). - netfilter: arp_tables: add pre_exit hook for table unregister (bsc#1012628). - netfilter: bridge: add pre_exit hooks for ebtable unregistration (bsc#1012628). - libnvdimm/region: Fix nvdimm_has_flush() to handle ND_REGION_ASYNC (bsc#1012628). - ice: Fix potential infinite loop when using u8 loop counter (bsc#1012628). - netfilter: conntrack: do not print icmpv6 as unknown via /proc (bsc#1012628). - netfilter: flowtable: fix NAT IPv6 offload mangling (bsc#1012628). - ixgbe: fix unbalanced device enable/disable in suspend/resume (bsc#1012628). - ixgbe: Fix NULL pointer dereference in ethtool loopback test (bsc#1012628). - drm/vmwgfx: Make sure we unpin no longer needed buffers (bsc#1012628). - scsi: libsas: Reset num_scatter if libata marks qc as NODATA (bsc#1012628). - riscv: Fix spelling mistake "SPARSEMEM" to "SPARSMEM" (bsc#1012628). - vfio/pci: Add missing range check in vfio_pci_mmap (bsc#1012628). - arm64: alternatives: Move length validation in alternative_{insn, endif} (bsc#1012628). - arm64: mte: Ensure TIF_MTE_ASYNC_FAULT is set atomically (bsc#1012628). - Update config files. - arm64: fix inline asm in load_unaligned_zeropad() (bsc#1012628). - drm/i915: Don't zero out the Y plane's watermarks (bsc#1012628). - readdir: make sure to verify directory entry for legacy interfaces too (bsc#1012628). - dm verity fec: fix misaligned RS roots IO (bsc#1012628). - HID: wacom: set EV_KEY and EV_ABS only for non-HID_GENERIC type of devices (bsc#1012628). - Input: i8042 - fix Pegatron C15B ID entry (bsc#1012628). - Input: s6sy761 - fix coordinate read bit shift (bsc#1012628). - net/sctp: fix race condition in sctp_destroy_sock (bsc#1012628). - lib: fix kconfig dependency on ARCH_WANT_FRAME_POINTERS (bsc#1012628). - virt_wifi: Return micros for BSS TSF values (bsc#1012628). - mac80211: clear sta->fast_rx when STA removed from 4-addr VLAN (bsc#1012628). - drm/amd/display: Add missing mask for DCN3 (bsc#1012628). - pcnet32: Use pci_resource_len to validate PCI resource (bsc#1012628). - net: ieee802154: forbid monitor for add llsec seclevel (bsc#1012628). - net: ieee802154: stop dump llsec seclevels for monitors (bsc#1012628). - net: ieee802154: forbid monitor for del llsec devkey (bsc#1012628). - net: ieee802154: forbid monitor for add llsec devkey (bsc#1012628). - net: ieee802154: stop dump llsec devkeys for monitors (bsc#1012628). - net: ieee802154: forbid monitor for del llsec dev (bsc#1012628). - net: ieee802154: forbid monitor for add llsec dev (bsc#1012628). - net: ieee802154: stop dump llsec devs for monitors (bsc#1012628). - net: ieee802154: forbid monitor for del llsec key (bsc#1012628). - net: ieee802154: forbid monitor for add llsec key (bsc#1012628). - net: ieee802154: stop dump llsec keys for monitors (bsc#1012628). - iwlwifi: add support for Qu with AX201 device (bsc#1012628). - scsi: scsi_transport_srp: Don't block target in SRP_PORT_LOST state (bsc#1012628). - ASoC: fsl_esai: Fix TDM slot setup for I2S mode (bsc#1012628). - drm/msm: Fix a5xx/a6xx timestamps (bsc#1012628). - ARM: omap1: fix building with clang IAS (bsc#1012628). - ARM: keystone: fix integer overflow warning (bsc#1012628). - powerpc/signal32: Fix Oops on sigreturn with unmapped VDSO (bsc#1012628). - neighbour: Disregard DEAD dst in neigh_update (bsc#1012628). - bpf: Take module reference for trampoline in module (bsc#1012628). - gpu/xen: Fix a use after free in xen_drm_drv_init (bsc#1012628). - net: axienet: allow setups without MDIO (bsc#1012628). - ASoC: max98373: Added 30ms turn on/off time delay (bsc#1012628). - ASoC: max98373: Changed amp shutdown register as volatile (bsc#1012628). - xfrm: BEET mode doesn't support fragments for inner packets (bsc#1012628). - iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_enqueue_hcmd() (bsc#1012628). - arc: kernel: Return -EFAULT if copy_to_user() fails (bsc#1012628). - lockdep: Add a missing initialization hint to the "INFO: Trying to register non-static key" message (bsc#1012628). - remoteproc: pru: Fix loading of GNU Binutils ELF (bsc#1012628). - ARM: dts: Fix moving mmc devices with aliases for omap4 & 5 (bsc#1012628). - ARM: dts: Drop duplicate sha2md5_fck to fix clk_disable race (bsc#1012628). - ACPI: x86: Call acpi_boot_table_init() after acpi_table_upgrade() (bsc#1012628). - dmaengine: idxd: fix wq cleanup of WQCFG registers (bsc#1012628). - dmaengine: idxd: clear MSIX permission entry on shutdown (bsc#1012628). - dmaengine: plx_dma: add a missing put_device() on error path (bsc#1012628). - dmaengine: Fix a double free in dma_async_device_register (bsc#1012628). - dmaengine: dw: Make it dependent to HAS_IOMEM (bsc#1012628). - dmaengine: idxd: fix wq size store permission state (bsc#1012628). - dmaengine: idxd: fix opcap sysfs attribute output (bsc#1012628). - dmaengine: idxd: fix delta_rec and crc size field for completion record (bsc#1012628). - dmaengine: idxd: Fix clobbering of SWERR overflow bit on writeback (bsc#1012628). - gpio: sysfs: Obey valid_mask (bsc#1012628). - Input: nspire-keypad - enable interrupts only when opened (bsc#1012628). - mtd: rawnand: mtk: Fix WAITRDY break condition and timeout (bsc#1012628). - AMD_SFH: Add DMI quirk table for BIOS-es which don't set the activestatus bits (bsc#1012628). - AMD_SFH: Add sensor_mask module parameter (bsc#1012628). - AMD_SFH: Removed unused activecontrolstatus member from the amd_mp2_dev struct (bsc#1012628). - commit d57ad55 ==== kexec-tools ==== Version update (2.0.20 -> 2.0.21) - kexec-tools-remove-duplicate-ramdisk-definition.patch: Remove duplicate definition of ramdisk (fix ppc build). - Bump version to 2.0.21 - Drop patches from upstream git: * kexec-tools-add-variant-helper-functions.patch * kexec-tools-arm64-kexec-allocate-memory-space-avoiding-reserved-regions.patch * kexec-tools-arm64-kdump-deal-with-resource-entries-in-proc-iomem.patch * kexec-tools-build-multiboot2-for-i386.patch * kexec-tools-fix-kexec_file_load-error-handling.patch * kexec-tools-reset-getopt-before-falling-back-to-legacy.patch * kexec-tools-s390-Reset-kernel-command-line-on-syscal.patch * kexec-tools-Remove-duplicated-variable-declarations.patch - Hardening: Link as PIE (bsc#1185020). ==== kyotocabinet ==== - Add yet an other patch kyotocabinet-pie.patch * link all executables as pie (bsc#1185033) ==== libgcrypt ==== Version update (1.9.2 -> 1.9.3) Subpackages: libgcrypt20 libgcrypt20-32bit libgcrypt20-hmac - libgcrypt 1.9.3: * Bug fixes: - Fix build problems on i386 using gcc-4.7. - Fix checksum calculation in OCB decryption for AES on s390. - Fix a regression in gcry_mpi_ec_add related to certain usages of curve 25519. - Fix a symbol not found problem on Apple M1. - Fix for Apple iOS getentropy peculiarity. - Make keygrip computation work for compressed points. * Performance: - Add x86_64 VAES/AVX2 accelerated implementation of Camellia. - Add x86_64 VAES/AVX2 accelerated implementation of AES. - Add VPMSUMD acceleration for GCM mode on PPC. * Internal changes. - Harden MPI conditional code against EM leakage. - Harden Elgamal by introducing exponent blinding. ==== libupnp ==== Version update (1.14.5 -> 1.14.6) Subpackages: libixml11 libupnp17 - Update to release 1.14.6 * Fix for a DNS Rebind exploit. [CVE-2021-29462] ==== lvm2 ==== Subpackages: liblvm2cmd2_03 - Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190) + bug-1185190_01-pvscan-support-disabled-event_activation.patch + bug-1185190_02-config-improve-description-for-event_activation.patch - LVM cannot be disabled on boot (bsc#1184687) + bug-1184687_Add-nolvm-for-kernel-cmdline.patch - Update patch for avoiding apply warning message + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch - Add metadata-based autoactivation property for VG and LV (bsc#1178680) + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch ==== lvm2-device-mapper ==== Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 libdevmapper1_03-32bit - Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190) + bug-1185190_01-pvscan-support-disabled-event_activation.patch + bug-1185190_02-config-improve-description-for-event_activation.patch - LVM cannot be disabled on boot (bsc#1184687) + bug-1184687_Add-nolvm-for-kernel-cmdline.patch - Update patch for avoiding apply warning message + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch - Add metadata-based autoactivation property for VG and LV (bsc#1178680) + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch ==== ncompress ==== Version update (4.2.4.6 -> 5.0) - Update to version 5.0: * New stream for cleanups * Drop support for 2.0 output & -C option * Improve & fix recursive mode * Drop old DEF_ERRNO support * Drop DIRENT/SYSDIR config knobs * Drop support for REGISTER build knob * Drop support for explicit unaligned memory accesses * Drop support for dead operating systems * Fix Windows access fallback logic * Include io.h on Windows * Disable "deprecated" API warnings on Windows * Add setmode binary for stdin and stdout on Windows * Clean up help text a bit * Add a standard -k (keep) option * Use io.h fallbacks on mingw too ==== openvpn ==== - update 'rcopenvpn' to work without /etc/rc.status (boo#1185273) ==== perl-XML-LibXML ==== Version update (2.0206 -> 2.0207) - updated to 2.0207 see /usr/share/doc/packages/perl-XML-LibXML/Changes 2.0207 2021-04-17 - Small cleanups: - https://github.com/shlomif/perl-XML-LibXML/pull/63 - Thanks to @Grinnz , @Kritzefitz and @atoomic . ==== pipewire ==== Version update (0.3.25 -> 0.3.26) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-modules pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to 0.3.26: + Highlights: - I18n support, with translations merged from PulseAudio. - New pw-link tool. - Many Bluetooth improvements, support for hardware volumes. - Support for 64 channel devices. - Stability fixes and improvements. + PipeWire improvements: - The link factory can now also make links between nodes and ports by name so that it can be used in scripts. - Add module-protocol-simple that can stream raw audio on a socket. - Added i18n support. Merge PulseAudio translations for the ACP library so that we don't cause regressions. - Support more than 19 channels in the channel mixer. This makes all channels usable on 32 and 64 channel cards. - Detect if we're running in a VM and allow for tweaking some settings such as the max-quantum to make things work better in VMs. - Fix a potential crash when connecting a client and updating permissions. - Fix a potential crash when trying to link incompatible ports. - Lingering links in error will now be destroyed automatically. + Tools: - Added new pw-link tool to list and monitor ports and to list, monitor, create and destroy links between them. - pw-cli can now also list params by name. - pw-dump now outputs Spa:String:JSON types in metadata as properly parsed and formatted JSON so that tools can parse the metadata values using a JSON parser. + Session-manager: - Add logind support. The bluetooth monitor can only be started for one user at the time, so use logind detect active seats. - ALSA icon names were improved to match what PulseAudio does. - Improve the bluetooth icon name. Also use the device alias as the device description, like PulseAudio. + Device support: - When devices become inaccessible, they are now removed from the PipeWire graph. - Fix datatype selection for buffers in v4l2 and libcamera. + Bluetooth: - Various memory leaks and crashes are fixed. - Added support for AVRCP hardware volume. - Added support for HSP/HFP hardware volume. + PulseAudio server: - Fix module-loopback connections to monitor ports. - Implement module-native-protocol-tcp. - Handle nodes and streams with > 32 channels. The PulseAudio API only supports up to 32 channels so only make those 32 first channels available with the PA API. - Implement module-simple-protocol-tcp. - Improve events emitted by the server. - Improvements to channels and channel_map properties on modules. One can imply the other and they should match when both given. - null-sink will now have their volume work correctly by default. + JACK: JACK developement files can now optionally be installed. ==== python-M2Crypto ==== - Add no-need-parameterized.patch ... we don't need run-time requirement of parameterized package (bsc#1185150). ==== python-MarkupSafe ==== - allow tests to be disabled (still on by default) ==== python-dulwich ==== Version update (0.20.15 -> 0.20.20) - update to 0.20.20: * Support untracked symlinks to paths outside the repository. * Fix handling of negative matches in nested gitignores. * Fix formatting in setup.py. (Jelmer Vernoo?) * Add release configuration. (Jelmer Vernoo?) * credentials: ignore end-of-line character. (Georges Racinet) * Fix failure in get_untracked_paths when the repository contains symlinks. * docs: Clarify that Git objects are created on `git add`. * Add flag to only attempt to fetch ignored untracked files when specifically requested. ==== python-pydot ==== Version update (1.4.1 -> 1.4.2) - update to 1.4.2: - Documentation: Basic usage examples in `README.md`. (#141) Changed: - More detailed error message in case of Graphviz errors. (#239) - More detailed warning message in case of failure to import the DOT parser module. (#241) Deprecated: - A future pydot 2.0.0 will drop support for Python 2, 3.4 and possibly other Python versions that are end-of-life at that time. Pydot does not emit any deprecation warnings about this. Further pydot 1.x.x releases are currently not foreseen, but if there are any, should still support the mentioned Python versions. (#229) Fixed: - On Python 2, non-equality comparison (`!=`) between two separate, but equal `Edge` instances will now correctly return `False`, as it already did on Python 3. (#248) - Prevent `TypeError` in handling of DOT parser error. (#176) - Prevent `TypeError` in `graph_from_adjacency_matrix()` and `graph_from_incidence_matrix()`. (#98) - Prevent `TypeError` when creating an edge with a `Subgraph` or `Cluster` object (as opposed to name string) as an edge point. (#89) - Windows only: Fixed most failures to find Graphviz when a conda or Anaconda installation exists, but Graphviz was installed manually or through pip (`.bat`/`.exe` suffix problem). (#205) - Windows only: Fixed failure to run Graphviz related to side-by-side assembly (SxS) by now propagating the `SYSTEMROOT` environment variable. (#208) ==== python-pymongo ==== Version update (3.11.2 -> 3.11.3) - update to 3.11.3: - Version 3.11.3 fixes a bug that prevented PyMongo from retrying writes after a writeConcernError on MongoDB 4.4+ (PYTHON-2452) ==== rubygem-nokogiri ==== Version update (1.11.2 -> 1.11.3) - updated to version 1.11.3 [#]## Fixed * [CRuby] Passing non-`Node` objects to `Document#root=` now raises an `ArgumentError` exception. Previously this likely segfaulted. [[#1900](https://github.com/sparklemotion/nokogiri/issues/1900)] * [JRuby] Passing non-`Node` objects to `Document#root=` now raises an `ArgumentError` exception. Previously this raised a `TypeError` exception. * [CRuby] arm64/aarch64 systems (like Apple's M1) can now compile libxml2 and libxslt from source (though we continue to strongly advise users to install the native gems for the best possible experience) ==== suse-module-tools ==== Version update (15.4.0 -> 15.4.1) - Update to version 15.4.1: * dm-crypt requires essiv in SLE15 SP3 (boo#1183063 bsc#1184134 ltc#192244). ==== tk ==== - Update to version 8.6.11.1 (still presenting itself as 8.6.11) * Fixed issue in bindMouseWheel ==== xf86-input-joystick ==== - modernize spec file: * use https urls * move license to licensedir * remove unnecessary attributes and add curly braces where spec-cleaner likes them ==== xf86-video-fbdev ==== - modernize spec file: * move license to license dir * use spec-cleaner induced cleanups ==== xinit ==== - modernize spec file (move license to licensedir, use https) ==== yast2-trans ==== Version update (84.87.20210418.dfe53bf215 -> 84.87.20210425.616915ed60) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20210425.616915ed60: * Translated using Weblate (Portuguese) * Translated using Weblate (Hindi) * Translated using Weblate (Portuguese) * Translated using Weblate (Hindi) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Added translation using Weblate (Portuguese) * Added translation using Weblate (Portuguese) * Translated using Weblate (Slovak) * Translated using Weblate (Slovak) * Translated using Weblate (Slovak) * Translated using Weblate (Slovak) * Translated using Weblate (Slovak) * Translated using Weblate (Japanese) * Translated using Weblate (Japanese) * Translated using Weblate (Japanese) * Translated using Weblate (Japanese) * New POT for text domain 'packager'. * Translated using Weblate (Hindi) * Translated using Weblate (Hindi) * Translated using Weblate (Hindi) * Translated using Weblate (Hindi) * Translated using Weblate (Hindi) * Translated using Weblate (Hindi) * Translated using Weblate (Hindi) * Translated using Weblate (Hindi) * New POT for text domain 'ldap'. * Translated using Weblate (Hindi) * Translated using Weblate (Hindi) * Translated using Weblate (Hindi) * Translated using Weblate (Slovak) * New POT for text domain 'bootloader'. * Translated using Weblate (Japanese) * Translated using Weblate (Dutch) * Translated using Weblate (Catalan) * New POT for text domain 'base'. * Translated using Weblate (Portuguese)