Packages changed: cryptsetup (2.3.4 -> 2.3.5) gnutls (3.7.0 -> 3.7.1) kernel-source (5.11.4 -> 5.11.6) libpng16 multipath-tools (0.8.5+12+suse.3b0e9ca -> 0.8.5+26+suse.2cbedfd) nfs-utils python-jsonpointer (2.0 -> 2.1) python-pyzmq sqlite3 (3.34.1 -> 3.35.0) supportutils vim (8.2.2564 -> 8.2.2607) xfsprogs (5.10.0 -> 5.11.0) === Details === ==== cryptsetup ==== Version update (2.3.4 -> 2.3.5) Subpackages: libcryptsetup12 - cryptsetup 2.3.5: * Fix partial reads of passphrase from an interactive terminal * Fix maximum length of password entered through a terminal * integritysetup: support new dm-integrity HMAC recalculation options * integritysetup: display of recalculating sector in dump command * veritysetup: fix verity FEC if stored in the same image with hashes * veritysetup: run FEC repair check even if root hash fails * veritysetup: do not process hash image if hash area is empty * veritysetup: store verity hash algorithm in superblock in lowercase * bitlk: fix a crash if the device disappears during BitLocker scan * bitlk: show a better error when trying to open an NTFS device * bitlk: add support for startup key protected VMKs * Fix LUKS1 repair code (regression since version 1.7.x) * Fix luksKeyChange for LUKS2 with assigned tokens * Fix cryptsetup resize using LUKS2 tokens * Print a visible error if device resize is not supported * Add error message when suspending wrong non-LUKS device * Fix default XTS mode key size in reencryption * Rephrase missing locking directory warning and move it to debug level * Many fixes for the use of cipher_null (empty debug cipher) * Fixes for libpasswdqc 2.0.x (optional passphrase quality check) * Fixes for problems discovered by various tools for code analysis * Various fixes to man pages - silence hmac packaging warnings - move licenses to licensedir ==== gnutls ==== Version update (3.7.0 -> 3.7.1) - Update to 3.7.1: [bsc#1183456, CVE-2021-20232] [bsc#1183457, CVE-2021-20231] * Fixed potential use-after-free in sending "key_share" and "pre_shared_key" extensions. * Fixed a regression in handling duplicated certs in a chain. * Fixed sending of session ID in TLS 1.3 middlebox compatibility mode. In that mode the client shall always send a non-zero session ID to make the handshake resemble the TLS 1.2 resumption; this was not true in the previous versions. * Removed dependency on the external 'fipscheck' package, when compiled with --enable-fips140-mode. * Added padlock acceleration for AES-192-CBC. - Remove patches upstream: * gnutls-gnutls-cli-debug.patch * gnutls-ignore-duplicate-certificates.patch * gnutls-test-fixes.patch ==== kernel-source ==== Version update (5.11.4 -> 5.11.6) - Linux 5.11.6 (bsc#1012628). - nvme-pci: add quirks for Lexar 256GB SSD (bsc#1012628). - nvme-pci: mark Seagate Nytro XM1440 as QUIRK_NO_NS_DESC_LIST (bsc#1012628). - KVM: SVM: Clear the CR4 register on reset (bsc#1012628). - scsi: ufs: Fix a duplicate dev quirk number (bsc#1012628). - ASoC: Intel: sof_sdw: add quirk for HP Spectre x360 convertible (bsc#1012628). - ASoC: Intel: sof_sdw: reorganize quirks by generation (bsc#1012628). - PCI: cadence: Retrain Link to work around Gen2 training defect (bsc#1012628). - HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch 10E (bsc#1012628). - ALSA: usb-audio: add mixer quirks for Pioneer DJM-900NXS2 (bsc#1012628). - ALSA: usb-audio: Add DJM750 to Pioneer mixer quirk (bsc#1012628). - HID: i2c-hid: Add I2C_HID_QUIRK_NO_IRQ_AFTER_RESET for ITE8568 EC on Voyo Winpad A15 (bsc#1012628). - mmc: sdhci-of-dwcmshc: set SDHCI_QUIRK2_PRESET_VALUE_BROKEN (bsc#1012628). - drm/msm/a5xx: Remove overwriting A5XX_PC_DBG_ECO_CNTL register (bsc#1012628). - scsi: ufs: ufs-exynos: Use UFSHCD_QUIRK_ALIGN_SG_WITH_PAGE_SIZE (bsc#1012628). - scsi: ufs: ufs-exynos: Apply vendor-specific values for three timeouts (bsc#1012628). - scsi: ufs: Introduce a quirk to allow only page-aligned sg entries (bsc#1012628). - misc: eeprom_93xx46: Add quirk to support Microchip 93LC46B eeprom (bsc#1012628). - scsi: ufs: Add a quirk to permit overriding UniPro defaults (bsc#1012628). - scsi: ufs-mediatek: Enable UFSHCI_QUIRK_SKIP_MANUAL_WB_FLUSH_CTRL (bsc#1012628). - iommu/amd: Fix sleeping in atomic in increase_address_space() (bsc#1012628). - btrfs: don't flush from btrfs_delayed_inode_reserve_metadata (bsc#1012628). - btrfs: export and rename qgroup_reserve_meta (bsc#1012628). - arm64: Make CPU_BIG_ENDIAN depend on ld.bfd or ld.lld 13.0.0+ (bsc#1012628). - parisc: Enable -mlong-calls gcc option with CONFIG_COMPILE_TEST (bsc#1012628). - nvme-pci: mark Kingston SKC2000 as not supporting the deepest power state (bsc#1012628). - media: cedrus: Remove checking for required controls (bsc#1012628). - io_uring: don't take uring_lock during iowq cancel (bsc#1012628). - io_uring/io-wq: return 2-step work swap scheme (bsc#1012628). - io_uring/io-wq: kill off now unused IO_WQ_WORK_NO_CANCEL (bsc#1012628). - io_uring: get rid of intermediate IORING_OP_CLOSE stage (bsc#1012628). - fs: provide locked helper variant of close_fd_get_file() (bsc#1012628). - io_uring: deduplicate failing task_work_add (bsc#1012628). - io_uring: unpark SQPOLL thread for cancelation (bsc#1012628). - io_uring: deduplicate core cancellations sequence (bsc#1012628). - io_uring: fix inconsistent lock state (bsc#1012628). - commit 7358b30 - rpm/check-for-config-changes: comment on the list To explain what it actually is. - commit e94bacf - ACPICA: Fix race in generic_serial_bus (I2C) and GPIO op_region parameter handling (bsc#1012628). - rpm/check-for-config-changes: define ignores more strictly * search for whole words, so make wildcards explicit * use ' for quoting * prepend CONFIG_ dynamically, so it need not be in the list - commit 7b06a8c - rpm/check-for-config-changes: sort the ignores They are growing so to make them searchable by humans. - commit 67c6b55 - rpm/check-for-config-changes: add -mrecord-mcount ignore Added by 3b15cdc15956 (tracing: move function tracer options to Kconfig) upstream. - commit 018b013 - Refresh patches.rpmify/kbuild-dummy-tools-fix-inverted-tests-for-gcc.patch. - Refresh patches.rpmify/kbuild-dummy-tools-support-MPROFILE_KERNEL-checks-fo.patch. Update upstream status. - commit c867c19 - Linux 5.11.5 (bsc#1012628). - ALSA: hda/realtek: Enable headset mic of Acer SWIFT with ALC256 (bsc#1012628). - ALSA: usb-audio: use Corsair Virtuoso mapping for Corsair Virtuoso SE (bsc#1012628). - ALSA: usb-audio: Don't abort even if the clock rate differs (bsc#1012628). - ALSA: usb-audio: Drop bogus dB range in too low level (bsc#1012628). - ALSA: usb-audio: Allow modifying parameters with succeeding hw_params calls (bsc#1012628). - tpm, tpm_tis: Decorate tpm_tis_gen_interrupt() with request_locality() (bsc#1012628). - tpm, tpm_tis: Decorate tpm_get_timeouts() with request_locality() (bsc#1012628). - btrfs: avoid double put of block group when emptying cluster (bsc#1012628). - btrfs: fix raid6 qstripe kmap (bsc#1012628). - btrfs: fix race between writes to swap files and scrub (bsc#1012628). - btrfs: fix race between swap file activation and snapshot creation (bsc#1012628). - btrfs: fix stale data exposure after cloning a hole with NO_HOLES enabled (bsc#1012628). - btrfs: tree-checker: do not error out if extent ref hash doesn't match (bsc#1012628). - btrfs: fix race between extent freeing/allocation when using bitmaps (bsc#1012628). - btrfs: validate qgroup inherit for SNAP_CREATE_V2 ioctl (bsc#1012628). - btrfs: free correct amount of space in btrfs_delayed_inode_reserve_metadata (bsc#1012628). - btrfs: fix spurious free_space_tree remount warning (bsc#1012628). - btrfs: unlock extents in btrfs_zero_range in case of quota reservation errors (bsc#1012628). - btrfs: fix warning when creating a directory with smack enabled (bsc#1012628). - PM: runtime: Update device status before letting suppliers suspend (bsc#1012628). - ring-buffer: Force before_stamp and write_stamp to be different on discard (bsc#1012628). - io_uring: ignore double poll add on the same waitqueue head (bsc#1012628). - dm bufio: subtract the number of initial sectors in dm_bufio_get_device_size (bsc#1012628). - dm verity: fix FEC for RS roots unaligned to block size (bsc#1012628). - drm/amd/pm: correct Arcturus mmTHM_BACO_CNTL register address (bsc#1012628). - drm/amdgpu:disable VCN for Navi12 SKU (bsc#1012628). - drm/amdgpu: Only check for S0ix if AMD_PMC is configured (bsc#1012628). - drm/amdgpu: fix parameter error of RREG32_PCIE() in amdgpu_regs_pcie (bsc#1012628). - crypto - shash: reduce minimum alignment of shash_desc structure (bsc#1012628). - ALSA: ctxfi: cthw20k2: fix mask on conf to allow 4 bits (bsc#1012628). - RDMA/cm: Fix IRQ restore in ib_send_cm_sidr_rep (bsc#1012628). - RDMA/rxe: Fix missing kconfig dependency on CRYPTO (bsc#1012628). - IB/mlx5: Add missing error code (bsc#1012628). - ALSA: hda: intel-nhlt: verify config type (bsc#1012628). - ftrace: Have recordmcount use w8 to read relp->r_info in arm64_is_fake_mcount (bsc#1012628). - ia64: don't call handle_signal() unless there's actually a signal queued (bsc#1012628). - rsxx: Return -EFAULT if copy_to_user() fails (bsc#1012628). - iommu/tegra-smmu: Fix mc errors on tegra124-nyan (bsc#1012628). - iommu: Don't use lazy flush for untrusted device (bsc#1012628). - iommu/vt-d: Fix status code for Allocate/Free PASID command (bsc#1012628). - btrfs: zoned: use sector_t for zone sectors (bsc#1012628). - tomoyo: recognize kernel threads correctly (bsc#1012628). - r8169: fix resuming from suspend on RTL8105e if machine runs on battery (bsc#1012628). - commit d09469d - ALSA: usb-audio: Apply the control quirk to Plantronics headsets (bsc#1182552). - ALSA: usb: Add Plantronics C320-M USB ctrl msg delay quirk (bsc#1182552). - commit f99c94c ==== libpng16 ==== - enable hardware optimizations (such as SSE) ==== multipath-tools ==== Version update (0.8.5+12+suse.3b0e9ca -> 0.8.5+26+suse.2cbedfd) Subpackages: kpartx libmpath0 - Update to version 0.8.5+26+suse.2cbedfd: Avoid "illegal request" errors on non-RDAC storage (bsc#bsc#1182072, bsc#1177371) - Update to version 0.8.5+23+suse.c11b054: * multipath -U: reduce log level of "adding new path" message (bsc#1181435) - Update to version 0.8.5+22+suse.e1e3c48: * multipath-tools tests: fix stringop-overflow build errors with gcc 11 (bsc#1181877) * README moved to README.md (has been converted to markdown upstream) ==== nfs-utils ==== Subpackages: libnfsidmap1 nfs-client - Include nfsd kernel module Requires (bsc#1089118) ==== python-jsonpointer ==== Version update (2.0 -> 2.1) - update to 2.1: * py 3.7-3.9 support * Avoid converting readme to rST for PyPI upload * Fix typos in messages * Use SVG versions of status icons in README.md ==== python-pyzmq ==== - Clean up of SPEC file, while investigating test suite errors. ==== sqlite3 ==== Version update (3.34.1 -> 3.35.0) - update to 3.35.0: * Added built-in SQL math functions(). (Requires the -DSQLITE_ENABLE_MATH_FUNCTIONS compile-time option.) * Added support for ALTER TABLE DROP COLUMN. * Generalize UPSERT: * Allow multiple ON CONFLICT clauses that are evaluated in order, * The final ON CONFLICT clause may omit the conflict target and yet still use DO UPDATE. * Add support for the RETURNING clause on DELETE, INSERT, and UPDATE statements. * Use less memory when running VACUUM on databases containing very large TEXT or BLOB values. It is no longer necessary to hold the entire TEXT or BLOB in memory all at once. * Add support for the MATERIALIZED and NOT MATERIALIZED hints when specifying common table expressions. The default behavior was formerly NOT MATERIALIZED, but is now changed to MATERIALIZED for CTEs that are used more than once. * The SQLITE_DBCONFIG_ENABLE_TRIGGER and SQLITE_DBCONFIG_ENABLE_VIEW settings are modified so that they only control triggers and views in the main database schema or in attached database schemas and not in the TEMP schema. TEMP triggers and views are always allowed. * Query planner/optimizer improvements * Enhance the ".stats" command to accept new arguments "stmt" and "vmstep", causing prepare statement statistics and only the virtual-machine step count to be shown, respectively. * Add the ".filectrl data_version" command. * Enhance the ".once" and ".output" commands so that if the destination argument begins with "|" (indicating that output is redirected into a pipe) then the argument does not need to be quoted. * Fix a bug in the IN-operator optimization of version 3.33.0 that can cause an incorrect answer. * Fix incorrect answers from the LIKE operator if the pattern ends with "%" and there is an "ESCAPE '_'" clause. ==== supportutils ==== - Fixed mismatched taint flags (bsc#1178491) - Removed redundant fdisk code that can cause timeout issues (bsc#1181679) - Supportconfig processes -f without hanging (bsc#1182904) ==== vim ==== Version update (8.2.2564 -> 8.2.2607) Subpackages: vim-data-common vim-small - Updated to version 8.2.2607, fixes the following problems * Focus events end Insert mode if 'esckeys' is not set. * Vim9: "..=" not always recognized. * Vim9: Function name is not recognized. * Vim9: no error if variable is defined for existing function. * Second time a preview popup is opened highlight is not set. (Gabriel Dupras) * 'fillchars' "stl" and "stlnc" items must be single byte. * Tests fail when run as root. * Test may leave file behind. * Vim9: crash when getting the types for a legacy function. * Vim9: using invalid pointer for error message. * Vim9: crash when calling partial with wrong function. * Vim9: a function name with "->" in the next line doesn't work. * Vim9: defining a :func function checks for white space after a comma in the arguments. * Compiler warning for type conversion. * Lua cannot handle a passed in lambda. * Vim9: crash in garbagecollect after for loop. * Vim9: checking vararg type is wrong when function is auto-loaded. * Vim9: sourcing Vim9 script triggers a redraw. * Vim9: screendump test fails on MS-Windows. * Vim9: cannot compare result of getenv() with null. * Vim9: type error for assigning the result of list concatenation to a list. * Vim9: illegal memory access. * Process id may be invalid. * Recover test fails on FreeBSD. * Build failure with tiny features. * Recover test hangs in the GUI. * Vim9: default argument value may cause internal error. * Poke files are not recognized. * Code coverage could be improved. * List of distributed files is incomplete. * Alternate buffer added to session file even when it's hidden. * Setting 'winminheight' may cause 'lines' to change. * :doautocmd may confuse scripts listening to WinEnter. * Vim9: "import * as" does not work at script level. * Vim9: :open does not need to be supported. * Build failure. * Vim9: crash when putting an unknown type in a dictionary. (Yegappan Lakshmanan) * Memory usage test often fails on FreeBSD. * Vim9: continue doesn't work if :while is very first command. (Yegappan Lakshmanan) * Vim9: no effect if user command is also a function. * GUI-specific command line arguments not tested. * Vim9: string index and slice does not include composing chars. * strchars() defaults to counting composing characters. * strcharpart() cannot include composing characters. ==== xfsprogs ==== Version update (5.10.0 -> 5.11.0) - update to v5.11.0: - xfs_admin: don't hide xfs_repair output when upgrading - man: document attr2, ikeep option deprecation in xfs.5 - mkfs: make use of xfs_validate_stripe_geometry() - mkfs: fix wrong inobtcount usage error output - xfs_repair: enable bigtime upgrade via repair - xfs_repair: enable inobtcount upgrade via repair - xfs_repair: set NEEDSREPAIR on first write - xfs_repair: clear the needsrepair flag when done - xfs_repair: check dquot id and type - xfs_fsr: Verify bulkstat version in qsort's cmp() - xfs_fsr: Interpret args of qsort's cmp() correctly - xfs_scrub: load and unload libicu properly - xfs_scrub: various fixes - xfs_admin: support adding features to V5 filesystems - xfs_admin: support filesystems with realtime devices - man: mark all deprecated V4 format options - misc: fix valgrind complaints - xfs_db: disallow label/uuid setting if NEEDSREPAIR - xfs_db: show NEEDSREPAIR in check & version commands - xfs_db: add an ls command - xfs_db: add a directory path lookup command - libxfs changes merged from kernel 5.11