Packages changed: aaa_base (84.87+git20190404.8684de3 -> 84.87+git20190418.d83e9d6) apparmor autofs bash bash-completion bind blog branding-openSUSE (15.0 -> 84.87.20180403) btrfsprogs (4.20.1 -> 5.1) bzip2 ceph (14.2.0.300+gacd2f2b9e1 -> 14.2.1.463+g99339b576a) cloud-init cni (0.6.0 -> 0.7.0) cri-o (1.14.0 -> 1.14.1) curl (7.64.0 -> 7.65.0) dbus-1 dhcp dracut e2fsprogs (1.45.0 -> 1.45.1) elfutils ethtool (5.0 -> 5.1) fuse gcc9 (8.3.1+r269200 -> 9.1.1+r271393) glib-networking (2.60.0.1 -> 2.60.2) glib2 (2.60.0 -> 2.60.3) glibc gnutls (3.6.6 -> 3.6.7) gpg2 (2.2.15 -> 2.2.16) grub2 gsettings-desktop-schemas (3.28.1 -> 3.32.0) health-checker (1.2.2 -> 1.2.3) hwdata (0.321 -> 0.323) hwinfo (21.64 -> 21.66) installation-images-MicroOS (14.420 -> 14.427) iproute2 (4.20 -> 5.1) iputils (s20180629 -> s20190515) kdump kernel-default-base (5.0.6 -> 5.1.4) kernel-firmware (20190312 -> 20190514) kernel-source (5.0.6 -> 5.1.7) kmod (25 -> 26) krb5 kubernetes (1.14.0 -> 1.14.1) kured (1.1.0 -> 1.2.0) ldb (1.4.3 -> 1.5.4) libaio libapparmor libcroco (0.6.12 -> 0.6.13) libedit libostree libpng16 (1.6.36 -> 1.6.37) libpsl (0.20.2 -> 0.21.0) libselinux libselinux-bindings libsoup (2.66.0 -> 2.66.2) libssh libtasn1 libx86emu (2.2 -> 2.3) libxslt libyaml (0.2.1 -> 0.2.2) logrotate (3.14.0 -> 3.15.0) lsof lzo mozilla-nspr (4.20 -> 4.21) mozilla-nss (3.42.1 -> 3.43) multipath-tools (0.7.9+139+suse.ed9d450 -> 0.8.1+8+suse.8c11498) ncurses netcfg nghttp2 (1.36.0 -> 1.38.0) numactl open-lldp open-vm-tools openldap2 openssh openssl (1.1.0h -> 1.1.1b) openssl-1_1 (1.1.0h -> 1.1.1b) p11-kit pam pam-config (0.96 -> 1.0) patterns-containers patterns-microos pcre2 (10.32 -> 10.33) permissions (20190212 -> 20190429) podman (1.2.0 -> 1.3.1) python-Jinja2 (2.10 -> 2.10.1) python-base (2.7.15 -> 2.7.16) python-cffi (1.12.2 -> 1.12.3) python-ecdsa (0.13 -> 0.13.2) python-ipy (0.83 -> 1.00) python-jsonpatch python-jsonschema (3.0.1 -> 2.6.0) python-pycryptodome (3.7.2 -> 3.8.1) python-pyparsing (2.3.0+git.1546912853.bf348d6 -> 2.4.0) python-pyserial python-pytz (2018.9 -> 2019.1) python-requests (2.21.0 -> 2.22.0) python-rpm-macros (20190402.c88be49 -> 20190430.5260267) python-semanage python-setuptools (40.8.0 -> 41.0.1) python-urllib3 (1.24.1 -> 1.24.2) rdma-core (22.1 -> 23.1) reiserfs rpm rpm-config-SUSE (0.g11 -> 0.g14) rsync runc (1.0.0~rc6 -> 1.0.0~rc8) salt (2018.3.2 -> 2019.2.0) sg3_utils (1.43 -> 1.45~815+5.6aa67ed) shadow shared-mime-info socat (1.7.3.2 -> 1.7.3.3) sssd (2.0.0 -> 2.1.0) suse-module-tools system-user-root (20170617 -> 20190513) systemd (241 -> 242) systemd-presets-common-SUSE sysuser-tools sysvinit talloc (2.1.14 -> 2.1.16) tdb (1.3.16 -> 1.3.18) tevent (0.9.37 -> 0.9.39) transactional-update (2.14.1 -> 2.14.2) ucode-intel (20190312 -> 20190514) util-linux (2.33.1 -> 2.33.2) util-linux-systemd (2.33.1 -> 2.33.2) vim (8.1.1066 -> 8.1.1330) xen (4.12.0_08 -> 4.12.0_12) xfsprogs (4.20.0 -> 5.0.0) xmlsec1 (1.2.26 -> 1.2.28) yast2 (4.1.67 -> 4.2.3) zstd (1.3.8 -> 1.4.0) === Details === ==== aaa_base ==== Version update (84.87+git20190404.8684de3 -> 84.87+git20190418.d83e9d6) - Update to version 84.87+git20190418.d83e9d6: * convert_sysctl isn't needed anymore - Update to version 84.87+git20190418.f488c70: * Remove sysconfig/sysctl to sysctl.conf merge, there is no active distribution anymore from which we support an update with this. - Update to version 84.87+git20190418.155e7f0: * Remove sysconfig/cron to tmpfiles, we don't support upgrade from such old distributions to Factory anymore. * /etc/sysconfig/boot and /etc/sysconfig/shutdown don't exist anymore, no need to remove single variables from it. * Remove obsolete code for /etc/psdevtab and YaST - Remove over 12 year old compat provides - Remove BuildRequires for net-tools, the code was removed and this package does not contain the wanted tool anymore - Replace net-tools with successors in Recommends - Update to version 84.87+git20190418.a543e8e: * Remove rc.splash and rc.status, now part of insserv-compat [bsc#1132738] ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils perl-apparmor python3-apparmor - Disable LTO (boo#1133091). - update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350) ==== autofs ==== - Remove legacy LSB-init script code, we don't have that anymore. ==== bash ==== - Add official patch bash50-004 * In bash-5.0, the `wait' builtin without arguments waits for all children of the shell. This includes children it `inherited' at shell invocation time. This patch modifies the behavior to not wait for these inherited children, some of which might be long-lived. - Add official patch bash50-005 * In certain cases, bash optimizes out a fork() call too early and prevents traps from running. - Add official patch bash50-006 * Bash-5.0 did not build successfully if SYSLOG_HISTORY was defined without also defining SYSLOG_SHOPT. - Add official patch bash50-007 * Running `exec' when job control was disabled, even temporarily, but after it had been initialized, could leave the terminal in the wrong process group for the executed process. ==== bash-completion ==== - Add patch gcc-564d068.patch from pull request 564d068 of Martin to upstream of bash-completion ==== bind ==== Subpackages: bind-utils libbind9-160 libdns169 libirs160 libisc166 libisccc160 libisccfg160 liblwres160 python3-bind - Add FIPS patch back into bind (bsc#1128220) - File: bind-fix-fips.patch ==== blog ==== - Implement shared library packaging guideline. ==== branding-openSUSE ==== Version update (15.0 -> 84.87.20180403) - Rewrite the spec and makefile to make it easier to contibute - Change the default plymouth theme to bgrt ==== btrfsprogs ==== Version update (4.20.1 -> 5.1) Subpackages: btrfsprogs-udev-rules libbtrfs0 - update to version 5.1 * repair: flush/FUA support to avoid breaking metadata COW * file extents repair no longer relies on data in extent tree * lowmem: fix false error reports about gaps between extents * add inode mode check and repair for various objects * add check for invalid combination of nocow/compressed extents * device scan option to forget scanned devices [new] * mkfs: use same chunk size as kernel for initial creation * dev-repace: better report when other exclusive operation runs * help for sntax errors on command lines, print relevant msgs * defrag: able to open files in RO mode * dump-tree: --block can be specified multiple times - update to version 4.20.2 * dump-super: minor output fixup * revert fix for prefix detection of receive path, this is temporary and unbreaks existing user setups ==== bzip2 ==== - add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after free vulnerability that was reported in bzip2recover [bsc#985657] [CVE-2016-3189] ==== ceph ==== Version update (14.2.0.300+gacd2f2b9e1 -> 14.2.1.463+g99339b576a) Subpackages: ceph-common libcephfs2 librados2 libradosstriper1 librbd1 librgw2 python3-ceph-argparse python3-cephfs python3-rados python3-rbd python3-rgw - Update to 14.2.1-463-g99339b576a: + qa/deepsea: redirect journalctl output to a logfile + spec: install/package ceph-volume lvmcache plugin + common: make ms_bind_msgr2 default to "false" (bsc#1124957) - Update to 14.2.1-457-gb42e3171b3: + qa/deepsea/salt: * 1node5disks salt configuration * grafana_service_check validation test * Disk drive replacement test * use "ceph_cm_ansible: false" instead of "ceph_cm: salt" + spec: Disable LTO in spec when being used (bsc#1135030) - civetweb: fix file descriptor leak (bsc#1125080, CVE-2019-3821) (fix has been in since February 2019) - rgw: sanitize customer encryption keys from log output in v4 auth (bsc#1121567, CVE-2018-16889) (fix has been in since February 2019) - Update to 14.2.1-448-g1bd10a856f: + monitoring: update Grafana dashboards + mgr/dashboard: fix some performance data are not displayed + monitoring: SNMP OID per every Prometheus alert rule + mgr/dashboard: Validate if any client belongs to more than one group + mgr/dashboard: Admin resource not honored + mgr/dashboard: Unable to see tcmu-runner perf counters (bsc#1135388) + mgr/dashboard: iSCSI form does not support IPv6 - Update to 14.2.1-440-g0ac6920288: + rebase on top of upstream nautilus branch, SHA1 1dc43a036fcc0121e3a0c1fe7ca6cd77cde1bf60 + client: fix vxattr nanosecond field padding (bsc#1135219, bsc#1135221) - Update to 14.2.1-431-gd032e5dd80: + ReplicatedPG: add CHECKSUM->CMPEXT req translation (bsc#1123360) + MDS + libcephfs snapshot btime support (jsc#SES-183) - Update to 14.2.1-423-g3df171fd28: + rgw: cloud sync fixes (jsc#SES-97) - Update to 14.2.1-419-gb72ca927c1: + rebase on top of upstream nautilus branch, SHA1 8e188313cf2f790f131e21a3a02094e32cf02087 + replaced ~25 downstream ceph-volume lvmcache commits with a single squashed commit + rgw: object expirer fixes (bsc#1133139) + rgw_lc: use a new bl while encoding RGW_ATTR_LC (jsc#SES-327) + rgw: beast IPv6 (jsc#SES-454) - Update to 14.2.1-426-g7a12897012: + nautilus: core: Give recovery for inactive PGs a higher priority (bsc#1133461) + spec: new subpackage ceph-prometheus-alerts + nautilus: librbd: re-add support for nautilus clients talking to jewel clusters + systemd: ceph-mgr: set MemoryDenyWriteExecute to false - Update to 14.2.1-345-g040ffffe0e: + Upstream v14.2.1 release draft release notes: https://github.com/ceph/ceph/pull/27793 + rpm: have pybind RPMs provide/obsolete their python2 predecessors (bsc#1125899) + ceph-volume: add lvmcache plugin (jsc#SES-267) - Update to 14.2.0-636-g19cfb53b0c: + rebase on top of upstream nautilus branch, SHA1 d947e804dd316c89c28d25948947927fa290e227 + downstream branding no longer displays Ceph logo in error popup (bsc#1131984) + mgr: make run-tox.sh scripts more robust (jsc#SES-478) - Update to 14.2.0-465-gdfed19b089: + rebase on top of upstream nautilus branch, SHA1 c09e90d1847fc4ffdd7384c9adf7f60c13479095 * dashboard improvements: [#] Add Polish language [#] Add date range and log search functionality [#] Add refresh interval to the dashboard landing page [#] Add separate option to config SSL port [#] Filter iSCSI target images based on required features [#] Fixed auth TTL expired error [#] Fixed error when trying to create NFS export without "NFSv3" [#] Fixed error when trying to create NFS export without "UDP" - Update to 14.2.0-345-g183e6fe4f5: + rebase on top of upstream nautilus branch, upstream SHA1 d4290f8edcbadbfecb9396a43a586afe0d0afd00 * common/blkdev: get_device_id: behave if model is lvm and id_model_enc isn't there * mon/Monitor.cc: print min_mon_release correctly * mgr/dashboard: dashboard giving 401 unauthorized - _constraints: increase x86_64 ceph memory constraint to 10G after seeing "memory exhausted" build failure on a machine with 9.8G total memory (including swap) - Update to 14.2.0-328-gf3638ba646: + rebase on top of upstream nautilus branch, upstream SHA1 41b9e7f94f1f08e8607ef574befaaaf6998a89dd * librbd: ignore -EOPNOTSUPP errors when retrieving image group membership * crush: various fixes for weight-sets, the osd_crush_update_weight_set option, and tests * osd/OSDMap: add 'zone' to default crush map * common/blkdev: handle devices with ID_MODEL as "LVM PV ..." but valid ID_MODEL_ENC * mgr/orchestrator: Add error handling to interface * mon/OSDMonitor: allow 'osd pool set pgp_num_actual' * rgw: ldap: fix early return in LDAPAuthEngine::init w/uri not empty() * mon/MgrStatMonitor: ensure only one copy of initial service map + drop downstream patch "rgw: dmclock: async scheduler: wrap yield_ctx around ifdefs" (replaced by https://github.com/ceph/ceph/pull/26634) - _constraints: increase aarch64 ceph memory constraint to 10G after seeing "memory exhausted" build failure on a machine with 9.8G total memory (including swap) ==== cloud-init ==== - Update cloud-init-write-routes.patch (bsc#1132692) + Properly accumulate all the defined routes for a given network device. Previously only the last defined route was written to the routes file. - Update cloud-init-trigger-udev.patch (bsc#1125950) + Write the udev rules to a different file than the default + Settle udev if not all configured devices are in the device tree to avoid race condition between udev and cloud-init ==== cni ==== Version update (0.6.0 -> 0.7.0) - Update to version 0.7.0: * Spec changes: + Use more RFC2119 style language in specification (must, should...) + add notes about ADD/DEL ordering + Make the container ID required and unique. + remove the version parameter from ADD and DEL commands. + Network interface name matters + be explicit about optional and required structure members + add CHECK method + Add a well-known error for "try again" + SPEC.md: clarify meaning of 'routes' * Library changes: + pkg/types: Makes IPAM concrete type + libcni: return error if Type is empty + skel: VERSION shouldn't block on stdin + non-pointer instances of types.Route now correctly marshal to JSON + libcni: add ValidateNetwork and ValidateNetworkList functions + pkg/skel: return error if JSON config has no network name + skel: add support for plugin version string + libcni: make exec handling an interface for better downstream testing + libcni: api now takes a Context to allow operations to be timed out or cancelled + types/version: add helper to parse PrevResult + skel: only print about message, not errors + skel,invoke,libcni: implementation of CHECK method + cnitool: Honor interface name supplied via CNI_IFNAME environment variable. + cnitool: validate correct number of args + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0 + add PrintTo method to Result interface + Return a better error when the plugin returns none - Install sleep binary into CNI plugin directory - Restore build.sh script which was removed upstream ==== cri-o ==== Version update (1.14.0 -> 1.14.1) Subpackages: cri-o-kubeadm-criconfig - Add _constraints to avoid OOM - Update cri-o to v1.14.1 * Add min memory limit check to sandbox_run_linux.go * Fix crash when network namespace is not setup * Log oom_handling_score failure to debug * Fix possible out of bounds access during log parsing * Fix sandbox segfault with manage_network_ns_lifecycle - Add registry-mirror.patch - Update repository paths from `kubernetes-sigs` to `cri-o` - Remove unnecessary ostree dependency - Use /opt/cni/bin as the additional directory where cri-o is going to look up for CNI plugins installed by DaemonSets running on Kubernetes (i.e. Cilium). - Update the configuration to fallback to the storage driver specified in libcontainers-common (`/etc/containers/storage.conf`) - Update go version to >= 1.12 to be in sync with upstream ==== curl ==== Version update (7.64.0 -> 7.65.0) Subpackages: libcurl4 - Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436] * Changes: - CURLOPT_DNS_USE_GLOBAL_CACHE: removed - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse - pipelining: removed * Bugfixes: - CVE-2019-5435: Integer overflows in curl_url_set - CVE-2019-5436: tftp: use the current blksize for recvfrom() - --config: clarify that initial : and = might need quoting - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk - CURLOPT_ADDRESS_SCOPE: fix range check and more - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE - CURL_MAX_INPUT_LENGTH: largest acceptable string input size - Curl_disconnect: treat all CONNECT_ONLY connections as "dead" - OS400/ccsidcurl: replace use of Curl_vsetopt - OpenSSL: Report -fips in version if OpenSSL is built with FIPS - WRITEFUNCTION: add missing set_in_callback around callback - altsvc: Fix building with cookies disabled - auth: Rename the various authentication clean up functions - base64: build conditionally if there are users - cmake: avoid linking executable for some tests with cmake 3.6+ - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use - cmake: set SSL_BACKENDS - configure: avoid unportable '==' test(1) operator - configure: error out if OpenSSL wasn't detected when asked for - configure: fix default location for fish completions - cookie: Guard against possible NULL ptr deref - curl: make code work with protocol-disabled libcurl - curl: report error for "--no-" on non-boolean options - curlver.h: use parenthesis in CURL_VERSION_BITS macro - docs/INSTALL: fix broken link - doh: acknowledge CURL_DISABLE_DOH - doh: disable DOH for the cases it doesn't work - examples: remove unused variables - ftplistparser: fix LGTM alert "Empty block without comment" - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies - http: acknowledge CURL_DISABLE_HTTP_AUTH - http: mark bundle as not for multiuse on < HTTP/2 response - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled - http_negotiate: do not treat failure of gss_init_sec_context() as fatal - http_ntlm: Corrected the name of the include guard - http_ntlm_wb: Handle auth for only a single request - http_ntlm_wb: Return the correct error on receiving an empty auth message - lib509: add missing include for strdup - lib557: initialize variables - mbedtls: enable use of EC keys - mime: acknowledge CURL_DISABLE_MIME - multi: improved HTTP_1_1_REQUIRED handling - netrc: acknowledge CURL_DISABLE_NETRC - nss: allow fifos and character devices for certificates - nss: provide more specific error messages on failed init - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4 - openssl: mark connection for close on TLS close_notify - openvms: Remove pre-processor for SecureTransport - parse_proxy: use the URL parser API - parsedate: disabled on CURL_DISABLE_PARSEDATE - pingpong: disable more when no pingpong protocols are enabled - polarssl_threadlock: remove conditionally unused code - progress: acknowledge CURL_DISABLE_PROGRESS_METER - proxy: acknowledge DISABLE_PROXY more - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries - revert "multi: support verbose conncache closure handle" - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616 - sasl: only enable if there's a protocol enabled using it - singleipconnect: show port in the verbose "Trying ..." message - socks5: user name and passwords must be shorter than 256 - socks: fix error message - socksd: new SOCKS 4+5 server for tests - spnego_gssapi: fix return code on gss_init_sec_context() failure - ssh-libssh: remove unused variable - ssh: define USE_SSH if SSH is enabled (any backend) - ssh: move variable declaration to where it's used - test1002: correct the name - test2100: Fix typos in test description - tests: Run global cleanup at end of tests - tests: make Impacket (SMB server) Python 3 compatible - tool_cb_wrt: fix bad-function-cast warning - tool_formparse: remove redundant assignment - tool_help: Warn if curl and libcurl versions do not match - tool_help: include for strcasecmp - url: always clone the CUROPT_CURLU handle - url: convert the zone id from a IPv6 URL to correct scope id - urlapi: add CURLUPART_ZONEID to set and get - urlapi: increase supported scheme length to 40 bytes - urlapi: require a non-zero host name length when parsing URL - urlapi: stricter CURLUPART_PORT parsing - urlapi: strip off zone id from numerical IPv6 addresses - urlapi: urlencode characters above 0x7f correctly - vauth/cleartext: update the PLAIN login to match RFC 4616 - vauth/oauth2: Fix OAUTHBEARER token generation - vauth: Fix incorrect function description for Curl_auth_user_contains_domain - vtls: fix potential ssl_buffer stack overflow - wildcard: disable from build when FTP isn't present - xattr: skip unittest on unsupported platforms - Install curl.fish completions file from curl rather than from the fish package - update to version 7.64.1 * Changes: - alt-svc: experiemental support added - configure: add --with-amissl * Bugfixes: - AppVeyor: switch VS 2015 builds to VS 2017 image - CURLU: fix NULL dereference when used over proxy - Curl_easy: remove req.maxfd - never used! - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning - DoH: inherit some SSL options from user's easy handle - Secure Transport: no more "darwinssl" - Secure Transport: tvOS 11 is required for ALPN support - cirrus: Added FreeBSD builds using Cirrus CI - cleanup: make local functions static - cli tool: do not use mime.h private structures - cmdline-opts/proxytunnel.d: the option tunnnels all protocols - configure: add additional libraries to check for LDAP support - configure: remove the unused fdopen macro - configure: show features as well in the final summary - conncache: use conn->data to know if a transfer owns it - connection: never reuse CONNECT_ONLY connections - connection_check: restore original conn->data after the check - connection_check: set ->data to the transfer doing the check - cookie: Add support for cookie prefixes - cookies: dotless names can set cookies again - cookies: fix NULL dereference if flushing cookies with no CookieInfo set - curl.1: --user and --proxy-user are hidden from ps output - curl.1: mark the argument to --cookie as - curl.h: use __has_declspec_attribute for shared builds - curl: display --version features sorted alphabetically - curl: fix FreeBSD compiler warning in the --xattr code - curl: remove MANUAL from -M output - curl_easy_duphandle.3: clarify that a duped handle has no shares - curl_multi_remove_handle.3: use at any time, just not from within callbacks - curl_url.3: this API is not experimental anymore - dns: release sharelock as soon as possible - docs: update max-redirs.d phrasing - examples/10-at-a-time.c: improve readability and simplify - examples/cacertinmem.c: use multiple certificates for loading CA-chain - examples/crawler: Fix the Accept-Encoding setting - examples/ephiperfifo.c: various fixes - examples/externalsocket: add missing close socket calls - examples/http2-download: cleaned up - examples/http2-serverpush: add some sensible error checks - examples/http2-upload: cleaned up - examples/httpcustomheader: Value stored to 'res' is never read - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory' - examples/sftpuploadresume: Value stored to 'result' is never read - examples: only include - examples: remove recursive calls to curl_multi_socket_action - examples: remove superfluous null-pointer checks - file: fix "Checking if unsigned variable 'readcount' is less than zero." - fnmatch: disable if FTP is disabled - gnutls: remove call to deprecated gnutls_compression_get_name - gopher: remove check for path == NULL - gssapi: fix deprecated header warnings - hostip: make create_hostcache_id avoid alloc + free - http2: multi_connchanged() moved from multi.c, only used for h2 - http2: verify :athority in push promise requests - http: make adding a blank header thread-safe - http: send payload when (proxy) authentication is done - http: set state.infilesize when sending multipart formposts - makefile: make checksrc and hugefile commands "silent" - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set - mbedtls: release sessionid resources on error - memdebug: log pointer before freeing its data - memdebug: make debug-specific functions use curl_dbg_ prefix - mime: put the boundary buffer into the curl_mime struct - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME - multi: remove verbose "Expire in" ... messages - multi: removed unused code for request retries - multi: support verbose conncache closure handle - negotiate: fix for HTTP POST with Negotiate - openssl: add support for TLS ASYNC state - openssl: if cert type is ENG and no key specified, key is ENG too - pretransfer: don't strlen() POSTFIELDS set for GET requests - rand: Fix a mismatch between comments in source and header - runtests: detect "schannel" as an alias for "winssl" - schannel: be quiet - remove verbose output - schannel: close TLS before removing conn from cache - schannel: support CALG_ECDH_EPHEM algorithm - scripts/completion.pl: also generate fish completion file - singlesocket: fix the 'sincebefore' placement - source: fix two 'nread' may be used uninitialized warnings - ssh: fix Condition '!status' is always true - ssh: loop the state machine if not done and not blocking - strerror: make the strerror function use local buffers - test578: make it read data from the correct test - tests: Fixed XML validation errors in some test files - tests: add stderr comparison to the test suite - tests: fix multiple may be used uninitialized warnings - threaded-resolver: shutdown the resolver thread without error message - tool_cb_wrt: fix writing to Windows null device NUL - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr - tool_operate: build on AmigaOS - tool_operate: fix typecheck warning - transfer.c: do not compute length of undefined hex buffer - travis: add build using gnutls - travis: add scan-build - travis: bump the used wolfSSL version to 4.0.0 - travis: enable valgrind for the iconv tests - travis: use updated compiler versions: clang 7 and gcc 8 - unit1307: require FTP support - unit1651: survive curl_easy_init() fails - url/idnconvert: remove scan for <= 32 ascii values - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks - urlapi: reduce variable scope, remove unreachable 'break' - urldata: convert bools to bitfields and move to end - urldata: simplify bytecounters - urlglob: Argument with 'nonnull' attribute passed null - version.c: silent scan-build even when librtmp is not enabled - vtls: rename some of the SSL functions - wolfssl: stop custom-adding curves - x509asn1: "Dereference of null pointer" - x509asn1: cleanup and unify code layout - zsh.pl: escape ':' character - zsh.pl: update regex to better match curl -h output - Dropped patches fixed upstream: * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch * 0002-connection_check-restore-original-conn-data-after-th.patch * curl-singlesocket-sincebefore-placement.patch ==== dbus-1 ==== Subpackages: libdbus-1-3 - Replace DISABLE_RESTART_ON_UPDATE with %service_del_postun_without_restart - Remove version specific code to block all updates on restart as hopefully no tumbleweed versions still have code causing those issues (was only present for a few snapshots) - Remove the Leap42 conditionals that cause file conflict with filesystem package ==== dhcp ==== Subpackages: dhcp-client - Add workaround to require insserv-compat until the package is converted to full systemd units (boo#1133632). ==== dracut ==== Subpackages: dracut-ima - dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448) * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch - 95iscsi: avoid error messages when building initrd, multipath timeouts (bsc#1130114, bsc#1130107, bsc#1121238) * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch * adds 0599-iscsiroot-try-targets-only-once.patch * adds 0600-iscsiroot-remove-bashisms.patch ==== e2fsprogs ==== Version update (1.45.0 -> 1.45.1) Subpackages: libcom_err2 libext2fs2 - Remove unused configure-Fix-autoheader-failure.patch. - Update to 1.45.1 * Remove configure-Fix-autoheader-failure.patch (fixed upstream) * Debugfs now supports non-printable chars * E2fsck now checks to make sure all unused bits in block are set * E2fsck now supports writing out a problem code log * Fixed various casefold bugs * Fix mke2fs support for < 900TB disks * E2scrub will take its snapshots with UDISK_IGNORE * Dropped utf8/nls symbols from libext2fs shared library ==== elfutils ==== Subpackages: libasm1 libdw1 libebl-plugins libelf1 - Add gcc9-tests-Don-t-printf-a-known-NULL-symname.patch in order to fix boo#1120864. ==== ethtool ==== Version update (5.0 -> 5.1) - Update to new upstream release 5.1 * support for 200Gbps (50Gbps per lane) link modes * support for new PHY tunable Fast Link Down * new 'start N' option when setting Rx flow indirection table * add bash completion script * support show and set of per queue coalescing * fec: add pretty dump ==== fuse ==== - Move definition of _lto_cflags into %build. - Disable LTO (boo#1133101). ==== gcc9 ==== Version update (8.3.1+r269200 -> 9.1.1+r271393) Subpackages: libgcc_s1 libstdc++6 - Update to gcc-9-branch head (r271393). - Always use ISL for crosses like for native compilers. - Update to gcc-9-branch head (r271050). - Strip -flto from $optflags as we use LTO bootstrap config. - Update to GCC 9.1.0 release. - Update to gcc-9-branch head (r270796). - Enable D for s390x. - Enable D for aarch64 and riscv64 - Update to gcc-9-branch head (r270689). * GCC 9.1 RC2. - Update to gcc-9-branch head (r270591). - Update to SVN trunk head (r270403). - Use --enable-link-mutex for LTO builds to limit peak memory use. - Omit libbacktrace .log files from gcc-testresults package to fix build. - Update to SVN trunk head (r270275). * Includes gcc9-pgo-lto-bootstrap.patch. - Update to SVN trunk head (r270202). - Add gcc9-pgo-lto-bootstrap.patch in order to enable LTO on platforms where we use PGO (except i386). - Limit LTO to new openSUSE. - Increase constraints for targets that use LTO bootstrap. - Do not use PGO and LTO in gcc9-testresults package. - Define 'build_d' in cross.spec.in in order to repair cross package builds. - Update to SVN trunk head (r270012). - Update to SVN trunk head (r269761). - Change URLs to use https. - Update to SVN trunk head (r269411). ==== glib-networking ==== Version update (2.60.0.1 -> 2.60.2) - Update to version 2.60.2: + OpenSSL backend now defaults to system trust store. + Fix client auth failure error with GnuTLS 3.6.7. - Drop 0001-gnutls-Handle-new-GNUTLS_E_CERTIFICATE_REQUIRED.patch: fixed upstream. - Handle new GnuTLS error GNUTLS_E_CERTIFICATE_REQUIRED + https://gitlab.gnome.org/GNOME/glib-networking/issues/70 + add 0001-gnutls-Handle-new-GNUTLS_E_CERTIFICATE_REQUIRED.patch - Update to version 2.60.1: + Improve reliability of client auth failure tests. + Fix excessive CPU usage after sync handshake. ==== glib2 ==== Version update (2.60.0 -> 2.60.3) Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 - Set umask to 022 before running glib-compile-schemas (boo#1131761). - Update to version 2.60.3: + * Various fixes to small key/value support in `GHashTable`. * Bugs fixed: - Critical in g_socket_client_async_connect_complete. - New GHashTable implementation confuses valgrind. - test_month_names: assertion failed. - GNetworkAddressAddressEnumerator unsafely modifies cache in GNetworkAddress. - Leaks in gsocketclient.c connection code. - glib/date test fails. - GDB pretty-printer for GHashTable no longer works + Updated translations. - Move glib2.macros to %_rpmmacrodir. /etc is for the system admin. - Update to version 2.60.2: + Fix crash when displaying notifications on macOS. + Improve network status detection with NetworkManager. + Bugs fixed: glgo#GNOME/GLib!790, glgo#GNOME/GLib!793, glgo#GNOME/GLib!803. + Updated translations. - Use FAT LTO objects in order to provide proper static library (boo#1133129). - Update to version 2.60.1: + Fix documentation for `gdbus-tool wait` to use correct units. + Bugs fixed: glgo#GNOME/GLib#1709, glgo#GNOME/GLib#1725, glgo#GNOME/GLib#1737, glgo#GNOME/GLib!711, glgo#GNOME/GLib!722, glgo#GNOME/GLib!727, glgo#GNOME/GLib!729, glgo#GNOME/GLib!758, glgo#GNOME/GLib!775. + Updated translations. - Drop upstream fixed patch: 0001-Handle-an-UNKNOWN-NetworkManager-connectivity-as-NONE.patch. ==== glibc ==== Subpackages: glibc-locale glibc-locale-base - dl-show-auxv.patch: Fix output of LD_SHOW_AUXV=1 - s390-vx-vxe-hwcap.patch: S390: Mark vx and vxe as important hwcap - taisho-era-string.patch: ja_JP: Change the offset for Taisho gan-nen from 2 to 1 (BZ #24162) - malloc-tracing-hooks.patch: malloc: Set and reset all hooks for tracing (BZ #16573) - pldd-inf-loop.patch: elf: Fix pldd (BZ#18035) - malloc-large-bin-corruption-check.patch: malloc: Check for large bin list corruption when inserting unsorted chunk (BZ #24216) - wfile-sync-crash.patch: Fix crash in _IO_wfile_sync (BZ #20568) ==== gnutls ==== Version update (3.6.6 -> 3.6.7) - Trim useless %if..%endif guards that do not affect the build. - Fix language errors in description again. - Update gnutls to 3.6.7 * * libgnutls, gnutls tools: Every gnutls_free() will automatically set the free'd pointer to NULL. This prevents possible use-after-free and double free issues. Use-after-free will be turned into NULL dereference. The counter-measure does not extend to applications using gnutls_free(). * * libgnutls: Fixed a memory corruption (double free) vulnerability in the certificate verification API. Reported by Tavis Ormandy; addressed with the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829) * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages; Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836) * * libgnutls: enforce key usage limitations on certificates more actively. Previously we would enforce it for TLS1.2 protocol, now we enforce it even when TLS1.3 is negotiated, or on client certificates as well. When an inappropriate for TLS1.3 certificate is seen on the credentials structure GnuTLS will disable TLS1.3 support for that session (#690). * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to two. This makes it easier for clients which perform multiple connections to the server to use the tickets sent by a default server. * * libgnutls: enforce the equality of the two signature parameters fields in a certificate. We were already enforcing the signature algorithm, but there was a bug in parameter checking code. * * libgnutls: fixed issue preventing sending and receiving from different threads when false start was enabled (#713). * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable session, as non-writeable security officer sessions are undefined in PKCS#11 (#721). * * libgnutls: no longer send downgrade sentinel in TLS 1.3. Previously the sentinel value was embedded to early in version negotiation and was sent even on TLS 1.3. It is now sent only when TLS 1.2 or earlier is negotiated (#689). * * gnutls-cli: Added option --logfile to redirect informational messages output. - Disabled dane support in SLE since dane is not shipped there - Changed configure script to hardware guile site directory since command-line option '--with-guile-site-dir=' was removed from the configure script. * * Added gnutls-3.6.6-set_guile_site_dir.patch - Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix compilation issues on PPC ==== gpg2 ==== Version update (2.2.15 -> 2.2.16) - Update to 2.2.16 * gpg: Fixed i18n markup of some strings. * gpg: Allow deletion of subkeys with --delete-[secret-]key. * gpg: Do not bail on an invalid packet in the local keyring. * gpg: Do not allow creation of user ids larger than our parser allows. * gpg: Do not delete any keys if --dry-run is passed. * gpg: Fix using --decrypt along with --use-embedded-filename. * gpg: Improve the photo image viewer selection. * gpg: enable OpenPGP export of cleartext keys with comments. * gpg: Do not print a hint to use the deprecated --keyserver option. * gpg: Change update_keysig_packet to replace SHA-1 by SHA-256. * gpg: Use just the addrspec from the Signer's UID. * gpg: Accept also armored data from the WKD. * gpg: Set a limit of 5 to the number of keys imported from the WKD. * gpg: Don't use EdDSA algo ID for ECDSA curves. * agent: Stop scdaemon after reload when disable_scdaemon. * agent: For SSH key, don't put NUL-byte at the end. * agent: correct length for uri and comment on 64-bit big-endian platforms * dirmngr: Allow for other hash algorithms than SHA-1 in OCSP. * dirmngr: Improve domaininfo cache update algorithm. * dirmngr: Better error code for http status 413. * g10: Fix possible null dereference. * g10: Fix double free when locating by mbox. * g10: Fix symmetric cipher algo constant for ECDH. * sm: Avoid confusing diagnostic for the default key. * sm: Fix a warning in an es_fopencooie function. * gpgconf: Before --launch check that the config file is fine. * gpgconf: Support --homedir for --launch. * build: Update m4/iconv.m4. * doc: correct documentation for gpgconf --kill. * scd: Add dummy option --application-priority. * common: Fix AWK portability. ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-x86_64-efi - Check/refresh zipl-kernel before hibernate on s390x. (bsc#940457) (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.) * grub2-systemd-sleep.sh - Try to refresh zipl-kernel on failed kexec. (bsc#1127293) * grub2-s390x-04-grub2-install.patch - Fully support "previous" zipl-kernel, with 'mem=1G' being available on dedicated entries. (bsc#928131) * grub2-s390x-09-improve-zipl-setup.patch - Refresh * grub2-zipl-setup-fix-btrfs-multipledev.patch - Fix GCC 9 build failure (bsc#1121208) * 0001-cpio-Disable-gcc9-Waddress-of-packed-member.patch * 0002-jfs-Disable-gcc9-Waddress-of-packed-member.patch * 0003-hfs-Fix-gcc9-error-Waddress-of-packed-member.patch * 0004-hfsplus-Fix-gcc9-error-with-Waddress-of-packed-membe.patch * 0005-acpi-Fix-gcc9-error-Waddress-of-packed-member.patch * 0006-usbtest-Disable-gcc9-Waddress-of-packed-member.patch * 0007-chainloader-Fix-gcc9-error-Waddress-of-packed-member.patch * 0008-efi-Fix-gcc9-error-Waddress-of-packed-member.patch ==== gsettings-desktop-schemas ==== Version update (3.28.1 -> 3.32.0) - Add adobe-sourcecodepro-fonts Recommends: New default font for monospace was added for version 3.32.x. - Rebase gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch - Update to version 3.32.0: + Updated translations. - Update to version 3.31.92: + Drop legacy build systems. + Updated translations. - Update to version 3.31.91: + Updated translations. - Update to version 3.31.90: + Updated default monospace font. + More meson build fixes. + Updated translations. - Switch to meson build system, add meson BuildRequires and macros. - Drop obsolete gnome-common and intltool BuildRequires. - Update to version 3.31.0.2: + Fixed generation of enums XML on meson builds. + Convert post-install script to python. + Updated translations. - Update to version 3.31.0.1: + Brown paper bag release, included several fixes to meson build. - Changes from version 3.31.0: + Add settings to inhibit microphone/camera. + Change tablets'/touchscreens' "display" setting to "output" one with different semantics. + Added meson build support. + Changed default clock settings. + Added XF86Keyboard keybinding to cycle the keyboard layout. - Disable gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch Needs rebase. - Add gnome-common BuildRequires and bootstrap tarball. - Replace glib2-devel with pkgconfig(gio-2.0) BuildRequires. ==== health-checker ==== Version update (1.2.2 -> 1.2.3) Subpackages: health-checker-plugins-MicroOS health-checker-plugins-kubic - Update to version 1.2.3 * Fix crio RPM name ==== hwdata ==== Version update (0.321 -> 0.323) - Update to version 0.323: * Updated pci, usb and vendor ids. - Update to version 0.322: * Updated pci, usb and vendor ids. ==== hwinfo ==== Version update (21.64 -> 21.66) - merge gh#openSUSE/hwinfo#80 - fix Makefile and allow building for old distros - 21.66 - merge gh#openSUSE/hwinfo#79 - return BIOS UUID in decoded (with '-'s) form (bsc#1135819) - 21.65 ==== installation-images-MicroOS ==== Version update (14.420 -> 14.427) - merge gh#openSUSE/installation-images#314 - set root password for rescue system explicitly (bsc#1134524) - 14.427 - merge gh#openSUSE/installation-images#313 - aarch64: ptp_qoriq.ko is now ptp-qoriq.ko - 14.426 - do not use openssl-1_1-hmac in openSUSE for now - merge gh#openSUSE/installation-images#312 - follow aaa_base package change - 14.425 - merge gh#openSUSE/installation-images#311 - prevent MD/RAID auto-assembly if linuxrc says so (bsc#1132688) - 14.424 - merge gh#openSUSE/installation-images#310 - Revert "add /dev/btrfs-control to initrd (bsc#1133368)" - autoload btrfs module to get /dev/btrfs-control (bsc#1133368) - 14.423 - merge gh#openSUSE/installation-images#308 - add /dev/btrfs-control to initrd (bsc#1133368) - 14.422 - merge gh#openSUSE/installation-images#307 - patch zypp config also for MicroOS (bsc#1132848) - adjust branding example - 14.421 ==== iproute2 ==== Version update (4.20 -> 5.1) - Revert-tc-ematch-fix-deprecated-yacc-warning.patch: fix build on SLE12 and openSUSE Leap 42.3 - Update to new upstream release 5.1 * bridge: fdb: add support for src_vni option * devlink: report cell size * devlink: add dev info and dev flash subcommands * devlink: add health subcommand * ip link: display netrom link type * ip link: bond_slave: add xstats support * ip link: bridge: support mcast to unicast flag * ip netns: add attach subcommand to attach existing netns * ip xfrm: add option to hide keys in state output * ip xfrm: support xfrm interfaces * rdma: add unbound workqueue to list of poll context types * rdma: provide parent context index for all objects except CM_ID * rdma: add prefix for driver attributes * ss: support AF_XDP * tc: add hit counter for matchall * tc: add kind property to csum action * tc: q_cake: support fwmark option * improve batch and dump performance by caching link lookups * more JSON support * many text/JSON output fixes - Update to new upstream release 5.0.0 * ip route: get print JSON output when -j is given * ip route: print route type in JSON output * tc: m_connmark: fix action error messages * ipaddress: print error messages on stderr * iprule: fix printing hint about unresolved iifname + oofname * man: Document COLORFGBG environment variable * tcpedit: Fix wrong pedit ipv6 structure id * ss: Render buffer to output every time a number of chunks alloc * ss: fix compilation under glibc < 2.18 - Add patches which enable support of BPF global data section, pulled from https://github.com/cilium/iproute2/tree/static-data * bpf-bss-section-poc.patch * bpf-data-section-support-poc.patch ==== iputils ==== Version update (s20180629 -> s20190515) - Update to version s20190515 (includes changes s20190324) * s20190324: 189 commits since s20180629 that include changing build system from autotools to meson, added rarpd and rdisc systemd service files, many fixes * s20190515 bugfix release (6 commits) - User visible change: arping and clockdiff are moved from /usr/sbin to /usr/bin (respect upstream path) - Backport patch 0001-build-sys-doc-Fix-the-dependency-on-xsltproc.patch (fixing build system) - Add workaround patch meson-remove-setcap-setuid.sh.patch - Remove 0001-tracepath-Fix-copying-input-IPv6-address.patch (included in s20190324 release) - Refresh old patches (iputils-ping-interrupt.diff, iputils-sec-ping-unblock.diff) - Changes caused by upstream switching to meson build system (drop sed build dependency) - Added locales - Fix typos ==== kdump ==== - kdump-kdumprd-Look-for-boot-image-and-boot-Image.patch: kdumprd: Look for /boot/image-* and /boot/Image-* (bsc#1132799). - kdump-Add-skip_balance-option-to-BTRFS-mounts.patch: Add skip_balance option to BTRFS mounts (bsc#1108255). ==== kernel-default-base ==== Version update (5.0.6 -> 5.1.4) - dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574). ==== kernel-firmware ==== Version update (20190312 -> 20190514) Subpackages: ucode-amd - Update to version 20190514: * linux-firmware: Update firmware file for Intel Bluetooth 8265 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 22161 * amlogic: add video decoder firmwares * iwlwifi: update -46 firmwares for 22260 and 9000 series * iwlwifi: add firmware for 22260 and update 9000 series -46 firmwares * iwlwifi: add -46.ucode firmwares for 9000 series - Update to version 20190502: * amdgpu: update vega20 to the latest 19.10 firmware * amdgpu: update vega12 to the latest 19.10 firmware * amdgpu: update vega10 to the latest 19.10 firmware * amdgpu: update polaris11 to the latest 19.10 firmware * amdgpu: update polaris10 to the latest 19.10 firmware * amdgpu: update raven2 to the latest 19.10 firmware * amdgpu: update raven to the latest 19.10 firmware * amdgpu: update picasso to the latest 19.10 firmware * linux-firmware: update fw for qat devices * Mellanox: Add new mlxsw_spectrum firmware 13.2000.1122 * drm/i915/firmware: Add ICL HuC v8.4.3238 * drm/i915/firmware: Add ICL GuC v32.0.3 * drm/i915/firmware: Add GLK HuC v03.01.2893 * drm/i915/firmware: Add GLK GuC v32.0.3 * drm/i915/firmware: Add KBL GuC v32.0.3 * drm/i915/firmware: Add SKL GuC v32.0.3 * drm/i915/firmware: Add BXT GuC v32.0.3 - Update to version 20190409: * linux-firmware: Add firmware file for Intel Bluetooth 22161 * cxgb4: update firmware to revision 1.23.4.0 * linux-firmware: Update NXP Management Complex firmware to version 10.14.3 * linux-firmware: add firmware for MT7615E * mediatek: update MT8173 VPU firmware to v1.1.2 [decoder] Enlarge struct vdec_pic_info to support more capture buffer plane and capture buffer format change. * linux-firmware: update Marvell 8797/8997 firmware images * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.23 * cxgb4: update firmware to revision 1.23.3.0 * linux-firmware: Update firmware file for Intel Bluetooth 8265 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * linux-firmware: Update firmware file for Intel Bluetooth 9560 ==== kernel-source ==== Version update (5.0.6 -> 5.1.7) Subpackages: kernel-debug kernel-default - Linux 5.1.7 (bnc#1012628). - tipc: fix modprobe tipc failed after switch order of device registration (bnc#1012628). - Revert "tipc: fix modprobe tipc failed after switch order of device registration" (bnc#1012628). - crypto: vmx - ghash: do nosimd fallback manually (bnc#1012628). - net: correct zerocopy refcnt with udp MSG_MORE (bnc#1012628). - cxgb4: Revert "cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size" (bnc#1012628). - net/tls: don't ignore netdev notifications if no TLS features (bnc#1012628). - net/tls: fix state removal with feature flags off (bnc#1012628). - selftests/tls: add test for sleeping even though there is data (bnc#1012628). - net/tls: fix no wakeup on partial reads (bnc#1012628). - selftests/tls: test for lowat overshoot with multiple records (bnc#1012628). - net/tls: fix lowat calculation if some data came from previous record (bnc#1012628). - bnxt_en: Reduce memory usage when running in kdump kernel (bnc#1012628). - bnxt_en: Fix possible BUG() condition when calling pci_disable_msix() (bnc#1012628). - bnxt_en: Fix aggregation buffer leak under OOM condition (bnc#1012628). - net: stmmac: dma channel control register need to be init first (bnc#1012628). - net: stmmac: fix ethtool flow control not able to get/set (bnc#1012628). - net/mlx5e: Disable rxhash when CQE compress is enabled (bnc#1012628). - net/mlx5: Allocate root ns memory using kzalloc to match kfree (bnc#1012628). - tipc: Avoid copying bytes beyond the supplied data (bnc#1012628). - net/mlx5: Avoid double free in fs init error unwinding path (bnc#1012628). - usbnet: fix kernel crash after disconnect (bnc#1012628). - r8169: fix MAC address being lost in PCI D3 (bnc#1012628). - net: stmmac: fix reset gpio free missing (bnc#1012628). - net: sched: don't use tc_action->order during action dump (bnc#1012628). - net: phy: marvell10g: report if the PHY fails to boot firmware (bnc#1012628). - net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value (bnc#1012628). - net: mvneta: Fix err code path of probe (bnc#1012628). - net-gro: fix use-after-free read in napi_gro_frags() (bnc#1012628). - net: fec: fix the clk mismatch in failed_reset path (bnc#1012628). - net: dsa: mv88e6xxx: fix handling of upper half of STATS_TYPE_PORT (bnc#1012628). - mlxsw: spectrum_acl: Avoid warning after identical rules insertion (bnc#1012628). - llc: fix skb leak in llc_build_and_send_ui_pkt() (bnc#1012628). - ipv6: Fix redirect with VRF (bnc#1012628). - ipv6: Consider sk_bound_dev_if when binding a raw socket to an address (bnc#1012628). - ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST (bnc#1012628). - ipv4/igmp: fix another memory leak in igmpv3_del_delrec() (bnc#1012628). - inet: switch IP ID generator to siphash (bnc#1012628). - ethtool: Check for vlan etype or vlan tci when parsing flow_rule (bnc#1012628). - cxgb4: offload VLAN flows regardless of VLAN ethtype (bnc#1012628). - bonding/802.3ad: fix slave link initialization transition states (bnc#1012628). - commit 55f2451 - Refresh patches.suse/memcg-make-it-work-on-sparse-non-0-node-systems.patch. Update upstream status. - commit 2e484d7 - Linux 5.1.6 (bnc#1012628). - x86: Hide the int3_emulate_call/jmp functions from UML (bnc#1012628). - ext4: do not delete unlinked inode from orphan list on failed truncate (bnc#1012628). - ext4: wait for outstanding dio during truncate in nojournal mode (bnc#1012628). - KVM: x86: fix return value for reserved EFER (bnc#1012628). - bio: fix improper use of smp_mb__before_atomic() (bnc#1012628). - sbitmap: fix improper use of smp_mb__before_atomic() (bnc#1012628). - Revert "scsi: sd: Keep disk read-only when re-reading partition" (bnc#1012628). - crypto: hash - fix incorrect HASH_MAX_DESCSIZE (bnc#1012628). - crypto: vmx - CTR: always increment IV as quadword (bnc#1012628). - mmc: sdhci-iproc: cygnus: Set NO_HISPD bit to fix HS50 data hold time problem (bnc#1012628). - mmc: sdhci-iproc: Set NO_HISPD bit to fix HS50 data hold time problem (bnc#1012628). - tracing: Add a check_val() check before updating cond_snapshot() track_val (bnc#1012628). - dax: Arrange for dax_supported check to span multiple devices (bnc#1012628). - kvm: Check irqchip mode before assign irqfd (bnc#1012628). - kvm: svm/avic: fix off-by-one in checking host APIC ID (bnc#1012628). - KVM: nVMX: Fix using __this_cpu_read() in preemptible context (bnc#1012628). - libnvdimm/pmem: Bypass CONFIG_HARDENED_USERCOPY overhead (bnc#1012628). - arm64/kernel: kaslr: reduce module randomization range to 2 GB (bnc#1012628). - arm64: Kconfig: Make ARM64_PSEUDO_NMI depend on BROKEN for now (bnc#1012628). - arm64/iommu: handle non-remapped addresses in ->mmap and - >get_sgtable (bnc#1012628). - gfs2: Fix sign extension bug in gfs2_update_stats (bnc#1012628). - btrfs: don't double unlock on error in btrfs_punch_hole (bnc#1012628). - btrfs: Check the compression level before getting a workspace (bnc#1012628). - Btrfs: do not abort transaction at btrfs_update_root() after failure to COW path (bnc#1012628). - Btrfs: avoid fallback to transaction commit during fsync of files with holes (bnc#1012628). - Btrfs: fix race between ranged fsync and writeback of adjacent ranges (bnc#1012628). - btrfs: sysfs: Fix error path kobject memory leak (bnc#1012628). - btrfs: sysfs: don't leak memory when failing add fsid (bnc#1012628). - fbdev: fix divide error in fb_var_to_videomode (bnc#1012628). - arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (bnc#1012628). - ovl: relax WARN_ON() for overlapping layers use case (bnc#1012628). - fbdev: fix WARNING in __alloc_pages_nodemask bug (bnc#1012628). - media: cpia2: Fix use-after-free in cpia2_exit (bnc#1012628). - media: serial_ir: Fix use-after-free in serial_ir_init_module (bnc#1012628). - media: vb2: add waiting_in_dqbuf flag (bnc#1012628). - media: vivid: use vfree() instead of kfree() for dev->bitmap_cap (bnc#1012628). - ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit (bnc#1012628). - bpf: devmap: fix use-after-free Read in __dev_map_entry_free (bnc#1012628). - batman-adv: mcast: fix multicast tt/tvlv worker locking (bnc#1012628). - at76c50x-usb: Don't register led_trigger if usb_register_driver failed (bnc#1012628). - acct_on(): don't mess with freeze protection (bnc#1012628). - netfilter: ctnetlink: Resolve conntrack L3-protocol flush regression (bnc#1012628). - Revert "btrfs: Honour FITRIM range constraints during free space trim" (bnc#1012628). - gfs2: Fix lru_count going negative (bnc#1012628). - cxgb4: Fix error path in cxgb4_init_module (bnc#1012628). - afs: Fix getting the afs.fid xattr (bnc#1012628). - NFS: make nfs_match_client killable (bnc#1012628). - gfs2: fix race between gfs2_freeze_func and unmount (bnc#1012628). - io_uring: use cpu_online() to check p->sq_thread_cpu instead of cpu_possible() (bnc#1012628). - IB/hfi1: Fix WQ_MEM_RECLAIM warning (bnc#1012628). - gfs2: Fix occasional glock use-after-free (bnc#1012628). - mmc: core: Verify SD bus width (bnc#1012628). - tools/bpf: fix perf build error with uClibc (seen on ARC) (bnc#1012628). - i40e: Fix of memory leak and integer truncation in i40e_virtchnl.c (bnc#1012628). - libbpf: fix invalid munmap call (bnc#1012628). - selftests/bpf: set RLIMIT_MEMLOCK properly for test_libbpf_open.c (bnc#1012628). - bpftool: exclude bash-completion/bpftool from .gitignore pattern (bnc#1012628). - ice: Separate if conditions for ice_set_features() (bnc#1012628). - ice: Preserve VLAN Rx stripping settings (bnc#1012628). - blk-mq: split blk_mq_alloc_and_init_hctx into two parts (bnc#1012628). - blk-mq: grab .q_usage_counter when queuing request from plug code path (bnc#1012628). - dmaengine: tegra210-dma: free dma controller in remove() (bnc#1012628). - net: ena: gcc 8: fix compilation warning (bnc#1012628). - net: ena: fix: set freed objects to NULL to avoid failing future allocations (bnc#1012628). - hv_netvsc: fix race that may miss tx queue wakeup (bnc#1012628). - Bluetooth: Ignore CC events not matching the last HCI command (bnc#1012628). - pinctrl: zte: fix leaked of_node references (bnc#1012628). - ASoC: Intel: kbl_da7219_max98357a: Map BTN_0 to KEY_PLAYPAUSE (bnc#1012628). - usb: dwc2: gadget: Increase descriptors count for ISOC's (bnc#1012628). - usb: dwc3: move synchronize_irq() out of the spinlock protected block (bnc#1012628). - usb: gadget: f_fs: don't free buffer prematurely (bnc#1012628). - ASoC: hdmi-codec: unlock the device on startup errors (bnc#1012628). - powerpc/perf: Return accordingly on invalid chip-id in (bnc#1012628). - powerpc/boot: Fix missing check of lseek() return value (bnc#1012628). - powerpc/perf: Fix loop exit condition in nest_imc_event_init (bnc#1012628). - spi: atmel-quadspi: fix crash while suspending (bnc#1012628). - ASoC: imx: fix fiq dependencies (bnc#1012628). - spi: pxa2xx: fix SCR (divisor) calculation (bnc#1012628). - net/mlx5: E-Switch, Use atomic rep state to serialize state change (bnc#1012628). - brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler() (bnc#1012628). - ACPI / property: fix handling of data_nodes in acpi_get_next_subnode() (bnc#1012628). - drm/nouveau/bar/nv50: ensure BAR is mapped (bnc#1012628). - media: stm32-dcmi: return appropriate error codes during probe (bnc#1012628). - ARM: vdso: Remove dependency with the arch_timer driver internals (bnc#1012628). - arm64: Fix compiler warning from pte_unmap() with - Wunused-but-set-variable (bnc#1012628). - mt76: remove mt76_queue dependency from tx_queue_skb function pointer (bnc#1012628). - x86/ftrace: Set trampoline pages as executable (bnc#1012628). - powerpc/watchdog: Use hrtimers for per-CPU heartbeat (bnc#1012628). - cpufreq: Fix kobject memleak (bnc#1012628). - scsi: qla2xxx: Fix a qla24xx_enable_msix() error path (bnc#1012628). - scsi: qla2xxx: Fix abort handling in tcm_qla2xxx_write_pending() (bnc#1012628). - scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in tcm_qla2xxx_close_session() (bnc#1012628). - scsi: qla2xxx: Fix hardirq-unsafe locking (bnc#1012628). - x86/modules: Avoid breaking W^X while loading modules (bnc#1012628). - Btrfs: fix data bytes_may_use underflow with fallocate due to failed quota reserve (bnc#1012628). - btrfs: fix panic during relocation after ENOSPC before writeback happens (bnc#1012628). - btrfs: Don't panic when we can't find a root key (bnc#1012628). - iwlwifi: pcie: don't crash on invalid RX interrupt (bnc#1012628). - rtc: 88pm860x: prevent use-after-free on device remove (bnc#1012628). - rtc: stm32: manage the get_irq probe defer case (bnc#1012628). - scsi: qedi: Abort ep termination if offload not scheduled (bnc#1012628). - s390/kexec_file: Fix detection of text segment in ELF loader (bnc#1012628). - ALSA: hda: fix unregister device twice on ASoC driver (bnc#1012628). - sched/nohz: Run NOHZ idle load balancer on HK_FLAG_MISC CPUs (bnc#1012628). - net: ethernet: ti: cpsw: fix allmulti cfg in dual_mac mode (bnc#1012628). - w1: fix the resume command API (bnc#1012628). - net: hns3: fix pause configure fail problem (bnc#1012628). - net: hns3: fix for TX clean num when cleaning TX BD (bnc#1012628). - net: phy: improve genphy_soft_reset (bnc#1012628). - s390: qeth: address type mismatch warning (bnc#1012628). - arm64: futex: Fix FUTEX_WAKE_OP atomic ops with non-zero result value (bnc#1012628). - net: hns3: use atomic_t replace u32 for arq's count (bnc#1012628). - dmaengine: pl330: _stop: clear interrupt status (bnc#1012628). - mac80211/cfg80211: update bss channel on channel switch (bnc#1012628). - drm: prefix header search paths with $(srctree)/ (bnc#1012628). - libbpf: fix samples/bpf build failure due to undefined UINT32_MAX (bnc#1012628). - slimbus: fix a potential NULL pointer dereference in of_qcom_slim_ngd_register (bnc#1012628). - regulator: core: Actually put the gpiod after use (bnc#1012628). - ASoC: fsl_sai: Update is_slave_mode with correct value (bnc#1012628). - Fix nfs4.2 return -EINVAL when do dedupe operation (bnc#1012628). - mwifiex: prevent an array overflow (bnc#1012628). - rsi: Fix NULL pointer dereference in kmalloc (bnc#1012628). - net: cw1200: fix a NULL pointer dereference (bnc#1012628). - nvme: set 0 capacity if namespace block size exceeds PAGE_SIZE (bnc#1012628). - nvme-rdma: fix a NULL deref when an admin connect times out (bnc#1012628). - nvme-tcp: fix a NULL deref when an admin connect times out (bnc#1012628). - crypto: sun4i-ss - Fix invalid calculation of hash end (bnc#1012628). - bcache: avoid potential memleak of list of journal_replay(s) in the CACHE_SYNC branch of run_cache_set (bnc#1012628). - bcache: return error immediately in bch_journal_replay() (bnc#1012628). - bcache: fix failure in journal relplay (bnc#1012628). - bcache: add failure check to run_cache_set() for journal replay (bnc#1012628). - bcache: avoid clang -Wunintialized warning (bnc#1012628). - RDMA/cma: Consider scope_id while binding to ipv6 ll address (bnc#1012628). - vfio-ccw: Do not call flush_workqueue while holding the spinlock (bnc#1012628). - vfio-ccw: Release any channel program when releasing/removing vfio-ccw mdev (bnc#1012628). - x86/build: Move _etext to actual end of .text (bnc#1012628). - smpboot: Place the __percpu annotation correctly (bnc#1012628). - x86/uaccess: Dont leak the AC flag into __put_user() argument evaluation (bnc#1012628). - x86/mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault() (bnc#1012628). - mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC versions (bnc#1012628). - Bluetooth: hci_qca: Fix crash with non-serdev devices (bnc#1012628). - Bluetooth: hci_qca: Give enough time to ROME controller to bootup (bnc#1012628). - Bluetooth: btbcm: Add default address for BCM43341B (bnc#1012628). - Bluetooth: mediatek: Fixed incorrect type in assignment (bnc#1012628). - HID: logitech-hidpp: use RAP instead of FAP to get the protocol version (bnc#1012628). - pinctrl: pistachio: fix leaked of_node references (bnc#1012628). - pinctrl: st: fix leaked of_node references (bnc#1012628). - pinctrl: samsung: fix leaked of_node references (bnc#1012628). - clk: rockchip: undo several noc and special clocks as critical on rk3288 (bnc#1012628). - perf/arm-cci: Remove broken race mitigation (bnc#1012628). - dmaengine: at_xdmac: remove BUG_ON macro in tasklet (bnc#1012628). - media: coda: clear error return value before picture run (bnc#1012628). - media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper (bnc#1012628). - media: au0828: stop video streaming only when last user stops (bnc#1012628). - media: ov2659: make S_FMT succeed even if requested format doesn't match (bnc#1012628). - audit: fix a memory leak bug (bnc#1012628). - media: stm32-dcmi: fix crash when subdev do not expose any formats (bnc#1012628). - media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable() (bnc#1012628). - media: pvrusb2: Prevent a buffer overflow (bnc#1012628). - iio: adc: stm32-dfsdm: fix unmet direct dependencies detected (bnc#1012628). - block: fix use-after-free on gendisk (bnc#1012628). - powerpc/numa: improve control of topology updates (bnc#1012628). - powerpc/64: Fix booting large kernels with STRICT_KERNEL_RWX (bnc#1012628). - random: fix CRNG initialization when random.trust_cpu=1 (bnc#1012628). - random: add a spinlock_t to struct batched_entropy (bnc#1012628). - cgroup: protect cgroup->nr_(dying_)descendants by css_set_lock (bnc#1012628). - sched/core: Check quota and period overflow at usec to nsec conversion (bnc#1012628). - sched/rt: Check integer overflow at usec to nsec conversion (bnc#1012628). - sched/core: Handle overflow in cpu_shares_write_u64 (bnc#1012628). - staging: vc04_services: handle kzalloc failure (bnc#1012628). - drm/msm/dpu: release resources on modeset failure (bnc#1012628). - drm/msm: a5xx: fix possible object reference leak (bnc#1012628). - drm/msm: dpu: Don't set frame_busy_mask for async updates (bnc#1012628). - drm/msm: Fix NULL pointer dereference (bnc#1012628). - irq_work: Do not raise an IPI when queueing work on the local CPU (bnc#1012628). - thunderbolt: Take domain lock in switch sysfs attribute callbacks (bnc#1012628). - s390/qeth: handle error from qeth_update_from_chp_desc() (bnc#1012628). - USB: core: Don't unbind interfaces following device reset failure (bnc#1012628). - x86/irq/64: Limit IST stack overflow check to #DB stack (bnc#1012628). - drm: etnaviv: avoid DMA API warning when importing buffers (bnc#1012628). - dt-bindings: phy-qcom-qmp: Add UFS PHY reset (bnc#1012628). - phy: sun4i-usb: Make sure to disable PHY0 passby for peripheral mode (bnc#1012628). - phy: mapphone-mdm6600: add gpiolib dependency (bnc#1012628). - phy: ti: usb2: fix OMAP_CONTROL_PHY dependency (bnc#1012628). - dpaa2-eth: Fix Rx classification status (bnc#1012628). - i40e: Able to add up to 16 MAC filters on an untrusted VF (bnc#1012628). - i40e: don't allow changes to HW VLAN stripping on active port VLANs (bnc#1012628). - ACPI/IORT: Reject platform device creation on NUMA node mapping failure (bnc#1012628). - arm64: vdso: Fix clock_getres() for CLOCK_REALTIME (bnc#1012628). - RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure (bnc#1012628). - fscrypt: use READ_ONCE() to access ->i_crypt_info (bnc#1012628). - perf/x86/msr: Add Icelake support (bnc#1012628). - perf/x86/intel/rapl: Add Icelake support (bnc#1012628). - perf/x86/intel/cstate: Add Icelake support (bnc#1012628). - PM / devfreq: Fix static checker warning in try_then_request_governor (bnc#1012628). - hwmon: (vt1211) Use request_muxed_region for Super-IO accesses (bnc#1012628). - hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses (bnc#1012628). - hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses (bnc#1012628). - hwmon: (pc87427) Use request_muxed_region for Super-IO accesses (bnc#1012628). - hwmon: (f71805f) Use request_muxed_region for Super-IO accesses (bnc#1012628). - scsi: libsas: Do discovery on empty PHY to update PHY info (bnc#1012628). - mmc: core: make pwrseq_emmc (partially) support sleepy GPIO controllers (bnc#1012628). - mmc_spi: add a status check for spi_sync_locked (bnc#1012628). - mmc: sdhci-of-esdhc: add erratum eSDHC5 support (bnc#1012628). - mmc: sdhci-of-esdhc: add erratum A-009204 support (bnc#1012628). - mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support (bnc#1012628). - net: hns3: free the pending skb when clean RX ring (bnc#1012628). - drm/amdgpu: fix old fence check in amdgpu_fence_emit (bnc#1012628). - PM / core: Propagate dev->power.wakeup_path when no callbacks (bnc#1012628). - clk: rockchip: Fix video codec clocks on rk3288 (bnc#1012628). - extcon: arizona: Disable mic detect if running when driver is removed (bnc#1012628). - clk: rockchip: Make rkpwm a critical clock on rk3288 (bnc#1012628). - clk: zynqmp: fix check for fractional clock (bnc#1012628). - s390: zcrypt: initialize variables before_use (bnc#1012628). - x86/microcode: Fix the ancient deprecated microcode loading method (bnc#1012628). - drm/amd/display: Initialize stream_update with memset (bnc#1012628). - s390/mm: silence compiler warning when compiling without CONFIG_PGSTE (bnc#1012628). - s390: cio: fix cio_irb declaration (bnc#1012628). - drm/amd/display: use proper formula to calculate bandwidth from timing (bnc#1012628). - selftests: cgroup: fix cleanup path in test_memcg_subtree_control() (bnc#1012628). - net: hns3: fix keep_alive_timer not stop problem (bnc#1012628). - qmi_wwan: Add quirk for Quectel dynamic config (bnc#1012628). - net: hns3: add error handler for initializing command queue (bnc#1012628). - cpufreq: ppc_cbe: fix possible object reference leak (bnc#1012628). - cpufreq/pasemi: fix possible object reference leak (bnc#1012628). - cpufreq: pmac32: fix possible object reference leak (bnc#1012628). - cpufreq: kirkwood: fix possible object reference leak (bnc#1012628). - cpufreq: imx6q: fix possible object reference leak (bnc#1012628). - cpufreq: ap806: fix possible object reference leak (bnc#1012628). - block: sed-opal: fix IOC_OPAL_ENABLE_DISABLE_MBR (bnc#1012628). - habanalabs: prevent device PTE read/write during hard-reset (bnc#1012628). - habanalabs: all FD must be closed before removing device (bnc#1012628). - samples/bpf: fix build with new clang (bnc#1012628). - x86/build: Keep local relocations with ld.lld (bnc#1012628). - spi: Don't call spi_get_gpio_descs() before device name is set (bnc#1012628). - regulator: core: Avoid potential deadlock on regulator_unregister (bnc#1012628). - ASoC: core: remove link components before cleaning up card resources (bnc#1012628). - drm/pl111: fix possible object reference leak (bnc#1012628). - iio: ad_sigma_delta: Properly handle SPI bus locking vs CS assertion (bnc#1012628). - iio: hmc5843: fix potential NULL pointer dereferences (bnc#1012628). - iio: common: ssp_sensors: Initialize calculated_time in ssp_common_process_data (bnc#1012628). - iio: adc: ti-ads7950: Fix improper use of mlock (bnc#1012628). - net: hns3: check resetting status in hns3_get_stats() (bnc#1012628). - net: hns3: add protect when handling mac addr list (bnc#1012628). - selftests/bpf: ksym_search won't check symbols exists (bnc#1012628). - rtlwifi: fix a potential NULL pointer dereference (bnc#1012628). - mwifiex: Fix mem leak in mwifiex_tm_cmd (bnc#1012628). - brcmfmac: fix missing checks for kmemdup (bnc#1012628). - b43: shut up clang -Wuninitialized variable warning (bnc#1012628). - brcmfmac: convert dev_init_lock mutex to completion (bnc#1012628). - brcmfmac: fix WARNING during USB disconnect in case of unempty psq (bnc#1012628). - brcmfmac: fix race during disconnect when USB completion is in progress (bnc#1012628). - brcmfmac: fix Oops when bringing up interface during USB disconnect (bnc#1012628). - rtc: xgene: fix possible race condition (bnc#1012628). - spi: Add missing error handling for CS GPIOs (bnc#1012628). - rtlwifi: fix potential NULL pointer dereference (bnc#1012628). - scsi: ufs: Fix regulator load and icc-level configuration (bnc#1012628). - scsi: ufs: Avoid configuring regulator with undefined voltage range (bnc#1012628). - drm/panel: otm8009a: Add delay at the end of initialization (bnc#1012628). - drm/amd/display: Prevent cursor hotspot overflow for RV overlay planes (bnc#1012628). - arm64: cpu_ops: fix a leaked reference by adding missing of_node_put (bnc#1012628). - locking/static_key: Fix false positive warnings on concurrent dec/inc (bnc#1012628). - wil6210: fix return code of wmi_mgmt_tx and wmi_mgmt_tx_ext (bnc#1012628). - x86/uaccess, ftrace: Fix ftrace_likely_update() vs. SMAP (bnc#1012628). - iwlwifi: mvm: IBSS: use BE FIFO for multicast (bnc#1012628). - x86/uaccess, signal: Fix AC=1 bloat (bnc#1012628). - x86/ia32: Fix ia32_restore_sigcontext() AC leak (bnc#1012628). - x86/uaccess: Fix up the fixup (bnc#1012628). - chardev: add additional check for minor range overlap (bnc#1012628). - RDMA/hns: Fix bad endianess of port_pd variable (bnc#1012628). - sh: sh7786: Add explicit I/O cast to sh7786_mm_sel() (bnc#1012628). - HID: core: move Usage Page concatenation to Main item (bnc#1012628). - ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put (bnc#1012628). - ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put (bnc#1012628). - ASoC: wcd9335: fix a leaked reference by adding missing of_node_put (bnc#1012628). - cxgb3/l2t: Fix undefined behaviour (bnc#1012628). - clk: renesas: rcar-gen3: Correct parent clock of SYS-DMAC (bnc#1012628). - block: avoid to break XEN by multi-page bvec (bnc#1012628). - block: pass page to xen_biovec_phys_mergeable (bnc#1012628). - clk: renesas: rcar-gen3: Correct parent clock of Audio-DMAC (bnc#1012628). - HID: logitech-hidpp: change low battery level threshold from 31 to 30 percent (bnc#1012628). - spi: tegra114: reset controller on probe (bnc#1012628). - habanalabs: prevent CPU soft lockup on Palladium (bnc#1012628). - kobject: Don't trigger kobject_uevent(KOBJ_REMOVE) twice (bnc#1012628). - media: video-mux: fix null pointer dereferences (bnc#1012628). - media: wl128x: prevent two potential buffer overflows (bnc#1012628). - media: gspca: Kill URBs on USB device disconnect (bnc#1012628). - media: mtk-vcodec: fix access to incorrect planes member (bnc#1012628). - thunderbolt: property: Fix a missing check of kzalloc (bnc#1012628). - thunderbolt: Fix to check the return value of kmemdup (bnc#1012628). - drm: rcar-du: lvds: Set LVEN and LVRES bits together on D3 (bnc#1012628). - drm: rcar-du: lvds: Fix post-DLL divider calculation (bnc#1012628). - timekeeping: Force upper bound for setting CLOCK_REALTIME (bnc#1012628). - IB/mlx5: Compare only index part of a memory window rkey (bnc#1012628). - scsi: qedf: Add missing return in qedf_post_io_req() in the fcport offload check (bnc#1012628). - misc: fastrpc: consider address offset before sending to DSP (bnc#1012628). - misc: fastrpc: make sure memory read and writes are visible (bnc#1012628). - misc: fastrpc: Fix a possible double free (bnc#1012628). - virtio_console: initialize vtermno value for ports (bnc#1012628). - tty: ipwireless: fix missing checks for ioremap (bnc#1012628). - staging: mt7621-mmc: Initialize completions a single time during probe (bnc#1012628). - overflow: Fix -Wtype-limits compilation warnings (bnc#1012628). - x86/mce: Fix machine_check_poll() tests for error types (bnc#1012628). - rcutorture: Fix cleanup path for invalid torture_type strings (bnc#1012628). - x86/mce: Handle varying MCA bank counts (bnc#1012628). - rcuperf: Fix cleanup path for invalid perf_type strings (bnc#1012628). - rcu: Do a single rhp->func read in rcu_head_after_call_rcu() (bnc#1012628). - x86/platform/uv: Fix missing checks of kcalloc() return values (bnc#1012628). - RDMA/rxe: Fix slab-out-bounds access which lead to kernel crash later (bnc#1012628). - spi: stm32-qspi: add spi_master_put in release function (bnc#1012628). - usb: core: Add PM runtime calls to usb_hcd_platform_shutdown (bnc#1012628). - ice: Fix for adaptive interrupt moderation (bnc#1012628). - scsi: qla4xxx: avoid freeing unallocated dma memory (bnc#1012628). - scsi: lpfc: avoid uninitialized variable warning (bnc#1012628). - media: vicodec: bugfix - call v4l2_m2m_buf_copy_metadata also if decoding fails (bnc#1012628). - ice: Prevent unintended multiple chain resets (bnc#1012628). - selinux: avoid uninitialized variable warning (bnc#1012628). - batman-adv: allow updating DAT entry timeouts on incoming ARP Replies (bnc#1012628). - dmaengine: tegra210-adma: use devm_clk_*() helpers (bnc#1012628). - x86/CPU/hygon: Fix phys_proc_id calculation logic for multi-die processors (bnc#1012628). - net/mlx5e: Fix compilation warning in en_tc.c (bnc#1012628). - staging: mt7621-mmc: Check for nonzero number of scatterlist entries (bnc#1012628). - hwrng: omap - Set default quality (bnc#1012628). - thunderbolt: Fix to check return value of ida_simple_get (bnc#1012628). - thunderbolt: Fix to check for kmemdup failure (bnc#1012628). - spi: export tracepoint symbols to modules (bnc#1012628). - regulator: add regulator_get_linear_step() stub helper (bnc#1012628). - drm/amd/display: fix releasing planes when exiting odm (bnc#1012628). - drm/amd/display: Link train only when link is DP and backend is enabled (bnc#1012628). - drm/amd/display: Update ABM crtc state on non-modeset (bnc#1012628). - drm/amd/display: Reset alpha state for planes to the correct values (bnc#1012628). - thunderbolt: property: Fix a NULL pointer dereference (bnc#1012628). - media: v4l2-fwnode: The first default data lane is 0 on C-PHY (bnc#1012628). - media: ov7670: restore default settings after power-up (bnc#1012628). - media: staging/intel-ipu3: mark PM function as __maybe_unused (bnc#1012628). - media: vicodec: reset last_src/dst_buf based on the IS_OUTPUT (bnc#1012628). - ice: Fix issue with VF reset and multiple VFs support on PFs (bnc#1012628). - e1000e: Disable runtime PM on CNP+ (bnc#1012628). - tinydrm/mipi-dbi: Use dma-safe buffers for all SPI transfers (bnc#1012628). - igb: Exclude device from suspend direct complete optimization (bnc#1012628). - media: si2165: fix a missing check of return value (bnc#1012628). - media: dvbsky: Avoid leaking dvb frontend (bnc#1012628). - media: m88ds3103: serialize reset messages in m88ds3103_set_frontend (bnc#1012628). - drm/amd/display: add pipe lock during stream update (bnc#1012628). - media: staging: davinci_vpfe: disallow building with COMPILE_TEST (bnc#1012628). - drm/amd/display: Fix Divide by 0 in memory calculations (bnc#1012628). - drm/amd/display: Re-add custom degamma support (bnc#1012628). - drm/amd/display: half bandwidth for YCbCr420 during validation (bnc#1012628). - drm/amd/display: Set stream->mode_changed when connectors change (bnc#1012628). - scsi: ufs: fix a missing check of devm_reset_control_get (bnc#1012628). - media: vimc: stream: fix thread state before sleep (bnc#1012628). - media: gspca: do not resubmit URBs when streaming has stopped (bnc#1012628). - media: vicodec: avoid clang frame size warning (bnc#1012628). - media: go7007: avoid clang frame overflow warning with KASAN (bnc#1012628). - media: mtk-vcodec: fix access to vb2_v4l2_buffer struct (bnc#1012628). - media: imx: vdic: Restore default case to prepare_vdi_in_buffers() (bnc#1012628). - media: vimc: zero the media_device on probe (bnc#1012628). - media: vim2m: replace devm_kzalloc by kzalloc (bnc#1012628). - media: cedrus: Add a quirk for not setting DMA offset (bnc#1012628). - scsi: lpfc: Fix FDMI manufacturer attribute value (bnc#1012628). - scsi: lpfc: Fix fc4type information for FDMI (bnc#1012628). - scsi: lpfc: Fix io lost on host resets (bnc#1012628). - media: saa7146: avoid high stack usage with clang (bnc#1012628). - scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices (bnc#1012628). - scsi: lpfc: Fix mailbox hang on adapter init (bnc#1012628). - scsi: lpfc: Resolve inconsistent check of hdwq in lpfc_scsi_cmd_iocb_cmpl (bnc#1012628). - scsi: lpfc: Resolve irq-unsafe lockdep heirarchy warning in lpfc_io_free (bnc#1012628). - scsi: lpfc: Fix use-after-free mailbox cmd completion (bnc#1012628). - audit: fix a memleak caused by auditing load module (bnc#1012628). - spi : spi-topcliff-pch: Fix to handle empty DMA buffers (bnc#1012628). - drm: writeback: Fix leak of writeback job (bnc#1012628). - drm/omap: dsi: Fix PM for display blank with paired dss_pll calls (bnc#1012628). - drm/omap: Notify all devices in the pipeline of output disconnection (bnc#1012628). - spi: rspi: Fix sequencer reset during initialization (bnc#1012628). - regulator: wm831x ldo: Fix notifier mutex lock warning (bnc#1012628). - regulator: wm831x isink: Fix notifier mutex lock warning (bnc#1012628). - regulator: ltc3676: Fix notifier mutex lock warning (bnc#1012628). - regulator: ltc3589: Fix notifier mutex lock warning (bnc#1012628). - regulator: pv88060: Fix notifier mutex lock warning (bnc#1012628). - spi: imx: stop buffer overflow in RX FIFO flush (bnc#1012628). - regulator: lp8755: Fix notifier mutex lock warning (bnc#1012628). - regulator: da9211: Fix notifier mutex lock warning (bnc#1012628). - regulator: da9063: Fix notifier mutex lock warning (bnc#1012628). - regulator: pv88080: Fix notifier mutex lock warning (bnc#1012628). - regulator: wm831x: Fix notifier mutex lock warning (bnc#1012628). - regulator: pv88090: Fix notifier mutex lock warning (bnc#1012628). - regulator: da9062: Fix notifier mutex lock warning (bnc#1012628). - regulator: da9055: Fix notifier mutex lock warning (bnc#1012628). - spi: Fix zero length xfer bug (bnc#1012628). - ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM (bnc#1012628). - ASoC: ti: fix davinci_mcasp_probe dependencies (bnc#1012628). - drm/v3d: Handle errors from IRQ setup (bnc#1012628). - drm/amd/display: Fix exception from AUX acquire failure (bnc#1012628). - drm/amd/display: Reset planes that were disabled in init_pipes (bnc#1012628). - drm/drv: Hold ref on parent device during drm_device lifetime (bnc#1012628). - drm: Wake up next in drm_read() chain if we are forced to putback the event (bnc#1012628). - drm/sun4i: dsi: Change the start delay calculation (bnc#1012628). - drm/sun4i: dsi: Restrict DSI tcon clock divider (bnc#1012628). - vfio-ccw: Prevent quiesce function going into an infinite loop (bnc#1012628). - extcon: axp288: Add a depends on ACPI to the Kconfig entry (bnc#1012628). - ice: Put __ICE_PREPARED_FOR_RESET check in ice_prepare_for_reset (bnc#1012628). - drm/sun4i: dsi: Enforce boundaries on the start delay (bnc#1012628). - NFS: Fix a double unlock from nfs_match,get_client (bnc#1012628). - Update config files. - commit 7375706 - Update config files. - commit 6ad4f79 - Linux 5.1.5 (bnc#1012628). - ipv6: fix src addr routing with the exception table (bnc#1012628). - ipv6: prevent possible fib6 leaks (bnc#1012628). - net: Always descend into dsa/ (bnc#1012628). - net: avoid weird emergency message (bnc#1012628). - net/mlx4_core: Change the error print to info print (bnc#1012628). - net: test nouarg before dereferencing zerocopy pointers (bnc#1012628). - net: usb: qmi_wwan: add Telit 0x1260 and 0x1261 compositions (bnc#1012628). - nfp: flower: add rcu locks when accessing netdev for tunnels (bnc#1012628). - ppp: deflate: Fix possible crash in deflate_init (bnc#1012628). - rtnetlink: always put IFLA_LINK for links with a link-netnsid (bnc#1012628). - tipc: switch order of device registration to fix a crash (bnc#1012628). - vsock/virtio: free packets during the socket release (bnc#1012628). - tipc: fix modprobe tipc failed after switch order of device registration (bnc#1012628). - mlxsw: core: Prevent QSFP module initialization for old hardware (bnc#1012628). - mlxsw: core: Prevent reading unsupported slave address from SFP EEPROM (bnc#1012628). - flow_offload: support CVLAN match (bnc#1012628). - net/mlx5e: Fix calling wrong function to get inner vlan key and mask (bnc#1012628). - net/mlx5: Fix peer pf disable hca command (bnc#1012628). - vsock/virtio: Initialize core virtio vsock before registering the driver (bnc#1012628). - net/mlx5e: Add missing ethtool driver info for representors (bnc#1012628). - net/mlx5e: Additional check for flow destination comparison (bnc#1012628). - net/mlx5: Imply MLXFW in mlx5_core (bnc#1012628). - net/mlx5e: Fix ethtool rxfh commands when CONFIG_MLX5_EN_RXNFC is disabled (bnc#1012628). - blk-mq: free hw queue's resource in hctx's release handler (bnc#1012628). - regulator: core: fix error path for regulator_set_voltage_unlocked (bnc#1012628). - parisc: Export running_on_qemu symbol for modules (bnc#1012628). - parisc: Add memory clobber to TLB purges (bnc#1012628). - parisc: Skip registering LED when running in QEMU (bnc#1012628). - parisc: Add memory barrier to asm pdc and sync instructions (bnc#1012628). - parisc: Allow live-patching of __meminit functions (bnc#1012628). - parisc: Use PA_ASM_LEVEL in boot code (bnc#1012628). - parisc: Rename LEVEL to PA_ASM_LEVEL to avoid name clash with DRBD code (bnc#1012628). - stm class: Fix channel free in stm output free path (bnc#1012628). - stm class: Fix channel bitmap on 32-bit systems (bnc#1012628). - brd: re-enable __GFP_HIGHMEM in brd_insert_page() (bnc#1012628). - proc: prevent changes to overridden credentials (bnc#1012628). - Revert "MD: fix lock contention for flush bios" (bnc#1012628). - md: batch flush requests (bnc#1012628). - md: add mddev->pers to avoid potential NULL pointer dereference (bnc#1012628). - md: add a missing endianness conversion in check_sb_changes (bnc#1012628). - dcache: sort the freeing-without-RCU-delay mess for good (bnc#1012628). - intel_th: msu: Fix single mode with IOMMU (bnc#1012628). - p54: drop device reference count if fails to enable device (bnc#1012628). - of: fix clang -Wunsequenced for be32_to_cpu() (bnc#1012628). - brcmfmac: Add DMI nvram filename quirk for ACEPC T8 and T11 mini PCs (bnc#1012628). - cifs: fix credits leak for SMB1 oplock breaks (bnc#1012628). - cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (bnc#1012628). - phy: ti-pipe3: fix missing bit-wise or operator when assigning val (bnc#1012628). - media: ov6650: Fix sensor possibly not detected on probe (bnc#1012628). - media: seco-cec: fix building with RC_CORE=m (bnc#1012628). - media: imx: csi: Allow unknown nearest upstream entities (bnc#1012628). - media: imx: Clear fwnode link struct for each endpoint iteration (bnc#1012628). - media: imx: Rename functions that add IPU-internal subdevs (bnc#1012628). - media: imx: Don't register IPU subdevs/links if CSI port missing (bnc#1012628). - RDMA/mlx5: Use get_zeroed_page() for clock_info (bnc#1012628). - RDMA/ipoib: Allow user space differentiate between valid dev_port (bnc#1012628). - NFS4: Fix v4.0 client state corruption when mount (bnc#1012628). - PNFS fallback to MDS if no deviceid found (bnc#1012628). - clk: hi3660: Mark clk_gate_ufs_subsys as critical (bnc#1012628). - clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider (bnc#1012628). - clk: mediatek: Disable tuner_en before change PLL rate (bnc#1012628). - clk: rockchip: fix wrong clock definitions for rk3328 (bnc#1012628). - udlfb: delete the unused parameter for dlfb_handle_damage (bnc#1012628). - udlfb: fix sleeping inside spinlock (bnc#1012628). - udlfb: introduce a rendering mutex (bnc#1012628). - fuse: fix writepages on 32bit (bnc#1012628). - fuse: honor RLIMIT_FSIZE in fuse_file_fallocate (bnc#1012628). - ovl: fix missing upper fs freeze protection on copy up for ioctl (bnc#1012628). - fsnotify: fix unlink performance regression (bnc#1012628). - gcc-plugins: arm_ssp_per_task_plugin: Fix for older GCC < 6 (bnc#1012628). - iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114 (bnc#1012628). - ceph: flush dirty inodes before proceeding with remount (bnc#1012628). - x86_64: Add gap to int3 to allow for call emulation (bnc#1012628). - x86_64: Allow breakpoints to emulate call instructions (bnc#1012628). - ftrace/x86_64: Emulate call function while updating in breakpoint handler (bnc#1012628). - tracing: Fix partial reading of trace event's id file (bnc#1012628). - tracing: probeevent: Fix to make the type of $comm string (bnc#1012628). - memory: tegra: Fix integer overflow on tick value calculation (bnc#1012628). - perf intel-pt: Fix instructions sampling rate (bnc#1012628). - perf intel-pt: Fix improved sample timestamp (bnc#1012628). - perf intel-pt: Fix sample timestamp wrt non-taken branches (bnc#1012628). - MIPS: perf: Fix build with CONFIG_CPU_BMIPS5000 enabled (bnc#1012628). - objtool: Allow AR to be overridden with HOSTAR (bnc#1012628). - x86/mpx, mm/core: Fix recursive munmap() corruption (bnc#1012628). - fbdev/efifb: Ignore framebuffer memmap entries that lack any memory types (bnc#1012628). - fbdev: sm712fb: fix brightness control on reboot, don't set SR30 (bnc#1012628). - fbdev: sm712fb: fix VRAM detection, don't set SR70/71/74/75 (bnc#1012628). - fbdev: sm712fb: fix white screen of death on reboot, don't set CR3B-CR3F (bnc#1012628). - fbdev: sm712fb: fix boot screen glitch when sm712fb replaces VGA (bnc#1012628). - fbdev: sm712fb: fix crashes during framebuffer writes by correctly mapping VRAM (bnc#1012628). - fbdev: sm712fb: fix support for 1024x768-16 mode (bnc#1012628). - fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display (bnc#1012628). - fbdev: sm712fb: fix crashes and garbled display during DPMS modesetting (bnc#1012628). - PCI: Mark AMD Stoney Radeon R7 GPU ATS as broken (bnc#1012628). - PCI: Mark Atheros AR9462 to avoid bus reset (bnc#1012628). - PCI: Reset Lenovo ThinkPad P50 nvgpu at boot if necessary (bnc#1012628). - PCI: Init PCIe feature bits for managed host bridge alloc (bnc#1012628). - PCI/AER: Change pci_aer_init() stub to return void (bnc#1012628). - PCI: rcar: Add the initialization of PCIe link in resume_noirq() (bnc#1012628). - PCI: Factor out pcie_retrain_link() function (bnc#1012628). - PCI: Work around Pericom PCIe-to-PCI bridge Retrain Link erratum (bnc#1012628). - dm cache metadata: Fix loading discard bitset (bnc#1012628). - dm zoned: Fix zone report handling (bnc#1012628). - dm init: fix max devices/targets checks (bnc#1012628). - dm delay: fix a crash when invalid device is specified (bnc#1012628). - dm crypt: move detailed message into debug level (bnc#1012628). - dm integrity: correctly calculate the size of metadata area (bnc#1012628). - dm ioctl: fix hang in early create error condition (bnc#1012628). - dm mpath: always free attached_handler_name in parse_path() (bnc#1012628). - fuse: Add FOPEN_STREAM to use stream_open() (bnc#1012628). - md/raid: raid5 preserve the writeback action after the parity check (bnc#1012628). - dmaengine: imx-sdma: Only check ratio on parts that support 1:1 (bnc#1012628). - driver core: Postpone DMA tear-down until after devres release for probe failure (bnc#1012628). - bpf: relax inode permission check for retrieving bpf program (bnc#1012628). - bpf: add map_lookup_elem_sys_only for lookups from syscall side (bnc#1012628). - bpf, lru: avoid messing with eviction heuristics upon syscall lookup (bnc#1012628). - y2038: Make CONFIG_64BIT_TIME unconditional (bnc#1012628). - btrfs: reloc: Fix NULL pointer dereference due to expanded reloc_root lifespan (bnc#1012628). - ARM: dts: imx6q-logicpd: Reduce inrush current on USBH1 (bnc#1012628). - ARM: dts: imx6q-logicpd: Reduce inrush current on start (bnc#1012628). - fbdev: sm712fb: fix memory frequency by avoiding a switch/case fallthrough (bnc#1012628). - Update config files. - commit bde30e1 - Bluetooth: Check key sizes only when Secure Simple Pairing is enabled (bsc#1135556). - commit ed1f493 - Delete patches.suse/Revert-Bluetooth-btusb-driver-to-enable-the-usb-wake.patch (boo#1130448). Should be fixed in 5.1-rc5 commit 771acc7e4a6e5dba779cb1a7fd851a164bc81033 Author: Brian Norris Date: Tue Apr 9 11:49:17 2019 -0700 Bluetooth: btusb: request wake pin with NOAUTOEN - commit 817786b - Update config files. - commit 0739fa4 - dm: make sure to obey max_io_len_target_boundary (bnc#1135868). - commit 4be0add - Linux 5.1.4 (bnc#1012628). - s390/mm: convert to the generic get_user_pages_fast code (bnc#1012628). - s390/mm: make the pxd_offset functions more robust (bnc#1012628). - libnvdimm/namespace: Fix label tracking error (bnc#1012628). - powerpc/32s: fix flush_hash_pages() on SMP (bnc#1012628). - xen/pvh: correctly setup the PV EFI interface for dom0 (bnc#1012628). - xen/pvh: set xen_domain_type to HVM in xen_pvh_init (bnc#1012628). - kbuild: turn auto.conf.cmd into a mandatory include file (bnc#1012628). - smb3: display session id in debug data (bnc#1012628). - KVM: lapic: Busy wait for timer to expire when using hv_timer (bnc#1012628). - KVM: x86: Skip EFER vs. guest CPUID checks for host-initiated writes (bnc#1012628). - KVM: Fix the bitmap range to copy during clear dirty (bnc#1012628). - Revert "KVM: nVMX: Expose RDPMC-exiting only when guest supports PMU" (bnc#1012628). - jbd2: fix potential double free (bnc#1012628). - ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug (bnc#1012628). - ALSA: hda/realtek - Fixup headphone noise via runtime suspend (bnc#1012628). - ALSA: hda/realtek - Corrected fixup for System76 Gazelle (gaze14) (bnc#1012628). - ext4: avoid panic during forced reboot due to aborted journal (bnc#1012628). - ext4: fix use-after-free in dx_release() (bnc#1012628). - ext4: fix data corruption caused by overlapping unaligned and aligned IO (bnc#1012628). - ext4: zero out the unused memory region in the extent tree block (bnc#1012628). - tty: Don't force RISCV SBI console as preferred console (bnc#1012628). - fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount (bnc#1012628). - mm/compaction.c: correct zone boundary handling when isolating pages from a pageblock (bnc#1012628). - ARM: dts: imx: Fix the AR803X phy-mode (bnc#1012628). - ipmi:ssif: compare block number correctly for multi-part return messages (bnc#1012628). - ipmi: Add the i2c-addr property for SSIF interfaces (bnc#1012628). - bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim() (bnc#1012628). - bcache: fix a race between cache register and cacheset unregister (bnc#1012628). - Btrfs: fix race between send and deduplication that lead to failures and crashes (bnc#1012628). - Btrfs: do not start a transaction at iterate_extent_inodes() (bnc#1012628). - Btrfs: do not start a transaction during fiemap (bnc#1012628). - Btrfs: send, flush dellaloc in order to avoid data loss (bnc#1012628). - btrfs: Honour FITRIM range constraints during free space trim (bnc#1012628). - btrfs: Correctly free extent buffer in case btree_read_extent_buffer_pages fails (bnc#1012628). - btrfs: Check the first key and level for cached extent buffer (bnc#1012628). - ext4: fix ext4_show_options for file systems w/o journal (bnc#1012628). - ext4: actually request zeroing of inode table after grow (bnc#1012628). - ext4: fix use-after-free race with debug_want_extra_isize (bnc#1012628). - ext4: avoid drop reference to iloc.bh twice (bnc#1012628). - ext4: ignore e_value_offs for xattrs with value-in-ea-inode (bnc#1012628). - ext4: make sanity check in mballoc more strict (bnc#1012628). - jbd2: check superblock mapped prior to committing (bnc#1012628). - tty/vt: fix write/write race in ioctl(KDSKBSENT) handler (bnc#1012628). - tty: vt.c: Fix TIOCL_BLANKSCREEN console blanking if blankinterval == 0 (bnc#1012628). - mtd: maps: Allow MTD_PHYSMAP with MTD_RAM (bnc#1012628). - mtd: maps: physmap: Store gpio_values correctly (bnc#1012628). - mtd: spi-nor: intel-spi: Avoid crossing 4K address boundary on read/write (bnc#1012628). - mfd: max77620: Fix swapped FPS_PERIOD_MAX_US values (bnc#1012628). - mfd: da9063: Fix OTP control register names to match datasheets for DA9063/63L (bnc#1012628). - ACPICA: Linux: move ACPI_DEBUG_DEFAULT flag out of ifndef (bnc#1012628). - ACPI: PM: Set enable_for_wake for wakeup GPEs during suspend-to-idle (bnc#1012628). - userfaultfd: use RCU to free the task struct when fork fails (bnc#1012628). - ocfs2: fix ocfs2 read inode data panic in ocfs2_iget (bnc#1012628). - hugetlb: use same fault hash key for shared and private mappings (bnc#1012628). - mm/hugetlb.c: don't put_page in lock of hugetlb_lock (bnc#1012628). - mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (bnc#1012628). - mm/mincore.c: make mincore() more conservative (bnc#1012628). - crypto: ccree - handle tee fips error during power management resume (bnc#1012628). - crypto: ccree - add function to handle cryptocell tee fips error (bnc#1012628). - crypto: ccree - HOST_POWER_DOWN_EN should be the last CC access during suspend (bnc#1012628). - crypto: ccree - pm resume first enable the source clk (bnc#1012628). - crypto: ccree - don't map AEAD key and IV on stack (bnc#1012628). - crypto: ccree - use correct internal state sizes for export (bnc#1012628). - crypto: ccree - don't map MAC key on stack (bnc#1012628). - crypto: ccree - fix mem leak on error path (bnc#1012628). - crypto: ccree - remove special handling of chained sg (bnc#1012628). - bpf: fix out of bounds backwards jmps due to dead code removal (bnc#1012628). - bpf, arm64: remove prefetch insn in xadd mapping (bnc#1012628). - ASoC: codec: hdac_hdmi add device_link to card device (bnc#1012628). - ASoC: fsl_esai: Fix missing break in switch statement (bnc#1012628). - ASoC: RT5677-SPI: Disable 16Bit SPI Transfers (bnc#1012628). - ASoC: max98090: Fix restore of DAPM Muxes (bnc#1012628). - ALSA: hdea/realtek - Headset fixup for System76 Gazelle (gaze14) (bnc#1012628). - ALSA: hda/realtek - EAPD turn on later (bnc#1012628). - ALSA: hda/hdmi - Consider eld_valid when reporting jack event (bnc#1012628). - ALSA: hda/hdmi - Read the pin sense from register when repolling (bnc#1012628). - ALSA: usb-audio: Fix a memory leak bug (bnc#1012628). - ALSA: line6: toneport: Fix broken usage of timer for delayed execution (bnc#1012628). - mmc: sdhci-pci: Fix BYT OCP setting (bnc#1012628). - mmc: core: Fix tag set memory leak (bnc#1012628). - mmc: tegra: fix ddr signaling for non-ddr modes (bnc#1012628). - dt-bindings: mmc: Add disable-cqe-dcmd property (bnc#1012628). - drivers/dax: Allow to include DEV_DAX_PMEM as builtin (bnc#1012628). - crypto: arm64/aes-neonbs - don't access already-freed walk.iv (bnc#1012628). - crypto: arm/aes-neonbs - don't access already-freed walk.iv (bnc#1012628). - crypto: caam/qi2 - generate hash keys in-place (bnc#1012628). - crypto: caam/qi2 - fix DMA mapping of stack memory (bnc#1012628). - crypto: caam/qi2 - fix zero-length buffer DMA mapping (bnc#1012628). - crypto: rockchip - update IV buffer to contain the next IV (bnc#1012628). - crypto: gcm - fix incompatibility between "gcm" and "gcm_base" (bnc#1012628). - crypto: arm64/gcm-aes-ce - fix no-NEON fallback code (bnc#1012628). - crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest() (bnc#1012628). - crypto: crct10dif-generic - fix use via crypto_shash_digest() (bnc#1012628). - crypto: skcipher - don't WARN on unprocessed data after slow walk step (bnc#1012628). - crypto: vmx - fix copy-paste error in CTR mode (bnc#1012628). - crypto: ccp - Do not free psp_master when PLATFORM_INIT fails (bnc#1012628). - crypto: ccm - fix incompatibility between "ccm" and "ccm_base" (bnc#1012628). - crypto: chacha20poly1305 - set cra_name correctly (bnc#1012628). - crypto: chacha-generic - fix use as arm64 no-NEON fallback (bnc#1012628). - crypto: lrw - don't access already-freed walk.iv (bnc#1012628). - crypto: salsa20 - don't access already-freed walk.iv (bnc#1012628). - crypto: crypto4xx - fix cfb and ofb "overran dst buffer" issues (bnc#1012628). - crypto: crypto4xx - fix ctr-aes missing output IV (bnc#1012628). - x86/MCE/AMD: Don't report L1 BTB MCA errors on some family 17h models (bnc#1012628). - x86/MCE: Add an MCE-record filtering function (bnc#1012628). - sched/x86: Save [ER]FLAGS on context switch (bnc#1012628). - arm64: Save and restore OSDLR_EL1 across suspend/resume (bnc#1012628). - arm64: Clear OSDLR_EL1 on CPU boot (bnc#1012628). - arm64: compat: Reduce address limit (bnc#1012628). - arm64: arch_timer: Ensure counter register reads occur with seqlock held (bnc#1012628). - arm64: mmap: Ensure file offset is treated as unsigned (bnc#1012628). - power: supply: axp288_fuel_gauge: Add ACEPC T8 and T11 mini PCs to the blacklist (bnc#1012628). - power: supply: axp288_charger: Fix unchecked return value (bnc#1012628). - ARM: exynos: Fix a leaked reference by adding missing of_node_put (bnc#1012628). - mmc: sdhci-of-arasan: Add DTS property to disable DCMDs (bnc#1012628). - ARM: dts: exynos: Fix audio (microphone) routing on Odroid XU3 (bnc#1012628). - ARM: dts: exynos: Fix audio routing on Odroid XU3 (bnc#1012628). - ARM: dts: exynos: Fix interrupt for shared EINTs on Exynos5260 (bnc#1012628). - ARM: dts: qcom: ipq4019: enlarge PCIe BAR range (bnc#1012628). - arm64: dts: rockchip: Disable DCMDs on RK3399's eMMC controller (bnc#1012628). - arm64: dts: rockchip: fix IO domain voltage setting of APIO5 on rockpro64 (bnc#1012628). - objtool: Fix function fallthrough detection (bnc#1012628). - x86/speculation/mds: Improve CPU buffer clear documentation (bnc#1012628). - x86/speculation/mds: Revert CPU buffer clear on double fault exit (bnc#1012628). - locking/rwsem: Prevent decrement of reader count before increment (bnc#1012628). - commit 047096a - TTY: serial_core, add ->install (bnc#1129693). - commit da4e6dd - Refresh patches.suse/memcg-make-it-work-on-sparse-non-0-node-systems.patch. Update to a solution proposed by upstream. - commit 53906c9 - Revert "selinux: do not report error on connect(AF_UNSPEC)" (git-fixes). - Revert "Don't jump to compute_result state from check_result state" (git-fixes). - commit 3d34296 - Linux 5.1.3 (bnc#1012628). - f2fs: Fix use of number of devices (bnc#1012628). - PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (bnc#1012628). - PCI: hv: Add hv_pci_remove_slots() when we unload the driver (bnc#1012628). - PCI: hv: Fix a memory leak in hv_eject_device_work() (bnc#1012628). - virtio_ring: Fix potential mem leak in virtqueue_add_indirect_packed (bnc#1012628). - powerpc/booke64: set RI in default MSR (bnc#1012628). - powerpc/powernv/idle: Restore IAMR after idle (bnc#1012628). - powerpc/book3s/64: check for NULL pointer in pgd_alloc() (bnc#1012628). - drivers/virt/fsl_hypervisor.c: prevent integer overflow in ioctl (bnc#1012628). - drivers/virt/fsl_hypervisor.c: dereferencing error pointers in ioctl (bnc#1012628). - isdn: bas_gigaset: use usb_fill_int_urb() properly (bnc#1012628). - flow_dissector: disable preemption around BPF calls (bnc#1012628). - net: phy: fix phy_validate_pause (bnc#1012628). - tuntap: synchronize through tfiles array instead of tun->numqueues (bnc#1012628). - tuntap: fix dividing by zero in ebpf queue selection (bnc#1012628). - vrf: sit mtu should not be updated when vrf netdev is the link (bnc#1012628). - vlan: disable SIOCSHWTSTAMP in container (bnc#1012628). - tipc: fix hanging clients using poll with EPOLLOUT flag (bnc#1012628). - selinux: do not report error on connect(AF_UNSPEC) (bnc#1012628). - packet: Fix error path in packet_init (bnc#1012628). - net: ucc_geth - fix Oops when changing number of buffers in the ring (bnc#1012628). - net: seeq: fix crash caused by not set dev.parent (bnc#1012628). - net: macb: Change interrupt and napi enable order in open (bnc#1012628). - net: ethernet: stmmac: dwmac-sun8i: enable support of unicast filtering (bnc#1012628). - net: dsa: Fix error cleanup path in dsa_init_module (bnc#1012628). - ipv4: Fix raw socket lookup for local traffic (bnc#1012628). - fib_rules: return 0 directly if an exactly same rule exists when NLM_F_EXCL not supplied (bnc#1012628). - dpaa_eth: fix SG frame cleanup (bnc#1012628). - bridge: Fix error path for kobject_init_and_add() (bnc#1012628). - bonding: fix arp_validate toggling in active-backup mode (bnc#1012628). - Don't jump to compute_result state from check_result state (bnc#1012628). - rtlwifi: rtl8723ae: Fix missing break in switch statement (bnc#1012628). - mwl8k: Fix rate_idx underflow (bnc#1012628). - USB: serial: fix unthrottle races (bnc#1012628). - virt: vbox: Sanity-check parameter types for hgcm-calls coming from userspace (bnc#1012628). - kernfs: fix barrier usage in __kernfs_new_node() (bnc#1012628). - i2c: core: ratelimit 'transfer when suspended' errors (bnc#1012628). - selftests/seccomp: Handle namespace failures gracefully (bnc#1012628). - hwmon: (occ) Fix extended status bits (bnc#1012628). - hwmon: (pwm-fan) Disable PWM if fetching cooling data fails (bnc#1012628). - platform/x86: dell-laptop: fix rfkill functionality (bnc#1012628). - platform/x86: thinkpad_acpi: Disable Bluetooth for some machines (bnc#1012628). - platform/x86: sony-laptop: Fix unintentional fall-through (bnc#1012628). - commit 073196d - Update config files: disable CONFIG_IDE for ppc64/ppc64le (bsc#1135333) - commit 012b7ed - x86/kvm/pmu: Set AMD's virt PMU version to 1 (https://patchwork.kernel.org/patch/10936271/). - commit d737fc7 - Linux 5.1.2 (bnc#1012628). - x86/speculation/mds: Fix documentation typo (bnc#1012628). - Documentation: Correct the possible MDS sysfs values (bnc#1012628). - x86/mds: Add MDSUM variant to the MDS documentation (bnc#1012628). - x86/speculation/mds: Add 'mitigations=' support for MDS (bnc#1012628). - s390/speculation: Support 'mitigations=' cmdline option (bnc#1012628). - powerpc/speculation: Support 'mitigations=' cmdline option (bnc#1012628). - x86/speculation: Support 'mitigations=' cmdline option (bnc#1012628). - cpu/speculation: Add 'mitigations=' cmdline option (bnc#1012628). - x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (bnc#1012628). - x86/speculation/mds: Fix comment (bnc#1012628). - x86/speculation/mds: Add SMT warning message (bnc#1012628). - x86/speculation: Move arch_smt_update() call to after mitigation decisions (bnc#1012628). - x86/speculation/mds: Add mds=full,nosmt cmdline option (bnc#1012628). - Documentation: Add MDS vulnerability documentation (bnc#1012628). - Documentation: Move L1TF to separate directory (bnc#1012628). - x86/speculation/mds: Add mitigation mode VMWERV (bnc#1012628). - x86/speculation/mds: Add sysfs reporting for MDS (bnc#1012628). - x86/speculation/mds: Add mitigation control for MDS (bnc#1012628). - x86/speculation/mds: Conditionally clear CPU buffers on idle entry (bnc#1012628). - x86/kvm/vmx: Add MDS protection when L1D Flush is not active (bnc#1012628). - x86/speculation/mds: Clear CPU buffers on exit to user (bnc#1012628). - x86/speculation/mds: Add mds_clear_cpu_buffers() (bnc#1012628). - x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (bnc#1012628). - x86/speculation/mds: Add BUG_MSBDS_ONLY (bnc#1012628). - x86/speculation/mds: Add basic bug infrastructure for MDS (bnc#1012628). - x86/speculation: Consolidate CPU whitelists (bnc#1012628). - x86/msr-index: Cleanup bit defines (bnc#1012628). - commit 5a8c05f - config: keep LSM empty in s390x/zfcpdump This config doesn't really build AppArmor and always had DEFAULT_SECURITY_DAC so it seems more consistent to keep LSM list empty. - commit 3073856 - config: enable AppArmor by default again (bsc#1134906) AppArmor used to be enabled in kernel by default by after the recent introduction of CONFIG_LSM, we disabled all LSM modules. Enable AppArmor again. - commit 953db35 - Update upstream reference: patches.suse/efifb-Omit-memory-map-check-on-legacy-boot.patch - commit 133a780 - Linux 5.1.1 (bnc#1012628). - arm64: futex: Bound number of LDXR/STXR loops in FUTEX_WAKE_OP (bnc#1012628). - locking/futex: Allow low-level atomic operations to return - EAGAIN (bnc#1012628). - i3c: Fix a shift wrap bug in i3c_bus_set_addr_slot_status() (bnc#1012628). - ASoC: Intel: avoid Oops if DMA setup fails (bnc#1012628). - UAS: fix alignment of scatter/gather segments (bnc#1012628). - Bluetooth: hci_bcm: Fix empty regulator supplies for Intel Macs (bnc#1012628). - Bluetooth: Fix not initializing L2CAP tx_credits (bnc#1012628). - Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (bnc#1012628). - Bluetooth: hidp: fix buffer overflow (bnc#1012628). - scsi: qla2xxx: Fix device staying in blocked state (bnc#1012628). - scsi: qla2xxx: Set remote port devloss timeout to 0 (bnc#1012628). - scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines (bnc#1012628). - scsi: lpfc: change snprintf to scnprintf for possible overflow (bnc#1012628). - soc: sunxi: Fix missing dependency on REGMAP_MMIO (bnc#1012628). - ACPI / LPSS: Use acpi_lpss_* instead of acpi_subsys_* functions for hibernate (bnc#1012628). - cpufreq: armada-37xx: fix frequency calculation for opp (bnc#1012628). - iio: adc: qcom-spmi-adc5: Fix of-based module autoloading (bnc#1012628). - intel_th: pci: Add Comet Lake support (bnc#1012628). - genirq: Prevent use-after-free and work list corruption (bnc#1012628). - usb-storage: Set virt_boundary_mask to avoid SG overflows (bnc#1012628). - USB: cdc-acm: fix unthrottle races (bnc#1012628). - USB: serial: f81232: fix interrupt worker not stop (bnc#1012628). - usb: dwc3: Fix default lpm_nyet_threshold value (bnc#1012628). - usb: dwc3: Allow building USB_DWC3_QCOM without EXTCON (bnc#1012628). - staging: most: sound: pass correct device when creating a sound card (bnc#1012628). - staging: most: cdev: fix chrdev_region leak in mod_exit (bnc#1012628). - staging: wilc1000: Avoid GFP_KERNEL allocation from atomic context (bnc#1012628). - staging: greybus: power_supply: fix prop-descriptor request size (bnc#1012628). - ubsan: Fix nasty -Wbuiltin-declaration-mismatch GCC-9 warnings (bnc#1012628). - Drivers: hv: vmbus: Remove the undesired put_cpu_ptr() in hv_synic_cleanup() (bnc#1012628). - commit 8e0a089 - Sign non-x86 kernels when possible (boo#1134303) - commit bac621c - Update to 5.1 final - Eliminated 1 patch - New config options: - PCI: - PCIE_BW=n (recommended default) - commit a974d8b - Linux 5.0.13 (bnc#1012628). - ipv4: ip_do_fragment: Preserve skb_iif during fragmentation (bnc#1012628). - ipv6: A few fixes on dereferencing rt->from (bnc#1012628). - ipv6: fix races in ip6_dst_destroy() (bnc#1012628). - ipv6/flowlabel: wait rcu grace period before put_pid() (bnc#1012628). - ipv6: invert flowlabel sharing check in process and user mode (bnc#1012628). - l2ip: fix possible use-after-free (bnc#1012628). - l2tp: use rcu_dereference_sk_user_data() in l2tp_udp_encap_recv() (bnc#1012628). - net: dsa: bcm_sf2: fix buffer overflow doing set_rxnfc (bnc#1012628). - net: phy: marvell: Fix buffer overrun with stats counters (bnc#1012628). - net/tls: avoid NULL pointer deref on nskb->sk in fallback (bnc#1012628). - rxrpc: Fix net namespace cleanup (bnc#1012628). - sctp: avoid running the sctp state machine recursively (bnc#1012628). - selftests: fib_rule_tests: print the result and return 1 if any tests failed (bnc#1012628). - packet: validate msg_namelen in send directly (bnc#1012628). - packet: in recvmsg msg_name return at least sizeof sockaddr_ll (bnc#1012628). - selftests: fib_rule_tests: Fix icmp proto with ipv6 (bnc#1012628). - tcp: add sanity tests in tcp_add_backlog() (bnc#1012628). - udp: fix GRO reception in case of length mismatch (bnc#1012628). - udp: fix GRO packet of death (bnc#1012628). - bnxt_en: Improve multicast address setup logic (bnc#1012628). - bnxt_en: Free short FW command HWRM memory in error path in bnxt_init_one() (bnc#1012628). - bnxt_en: Fix possible crash in bnxt_hwrm_ring_free() under error conditions (bnc#1012628). - bnxt_en: Pass correct extended TX port statistics size to firmware (bnc#1012628). - bnxt_en: Fix statistics context reservation logic (bnc#1012628). - bnxt_en: Fix uninitialized variable usage in bnxt_rx_pkt() (bnc#1012628). - net/tls: don't copy negative amounts of data in reencrypt (bnc#1012628). - net/tls: fix copy to fragments in reencrypt (bnc#1012628). - KVM: nVMX: Fix size checks in vmx_set_nested_state (bnc#1012628). - ALSA: line6: use dynamic buffers (bnc#1012628). - iwlwifi: mvm: properly check debugfs dentry before using it (bnc#1012628). - ath10k: Drop WARN_ON()s that always trigger during system resume (bnc#1012628). - commit b11e2d7 - Linux 5.0.12 (bnc#1012628). - selinux: use kernel linux/socket.h for genheaders and mdp (bnc#1012628). - drm/i915: Do not enable FEC without DSC (bnc#1012628). - mm: make page ref count overflow check tighter and more explicit (bnc#1012628). - mm: add 'try_get_page()' helper function (bnc#1012628). - mm: prevent get_user_pages() from overflowing page refcount (bnc#1012628). - fs: prevent page refcount overflow in pipe_buf_get (bnc#1012628). - arm64: dts: renesas: r8a77990: Fix SCIF5 DMA channels (bnc#1012628). - ARM: dts: bcm283x: Fix hdmi hpd gpio pull (bnc#1012628). - s390: limit brk randomization to 32MB (bnc#1012628). - mt76x02: fix hdr pointer in write txwi for USB (bnc#1012628). - mt76: mt76x2: fix external LNA gain settings (bnc#1012628). - mt76: mt76x2: fix 2.4 GHz channel gain settings (bnc#1012628). - net: ieee802154: fix a potential NULL pointer dereference (bnc#1012628). - ieee802154: hwsim: propagate genlmsg_reply return code (bnc#1012628). - Btrfs: fix file corruption after snapshotting due to mix of buffered/DIO writes (bnc#1012628). - net: stmmac: don't set own bit too early for jumbo frames (bnc#1012628). - net: stmmac: fix jumbo frame sending with non-linear skbs (bnc#1012628). - qlcnic: Avoid potential NULL pointer dereference (bnc#1012628). - xsk: fix umem memory leak on cleanup (bnc#1012628). - staging: axis-fifo: add CONFIG_OF dependency (bnc#1012628). - staging, mt7621-pci: fix build without pci support (bnc#1012628). - netfilter: nft_set_rbtree: check for inactive element after flag mismatch (bnc#1012628). - netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING (bnc#1012628). - netfilter: fix NETFILTER_XT_TARGET_TEE dependencies (bnc#1012628). - netfilter: ip6t_srh: fix NULL pointer dereferences (bnc#1012628). - s390/qeth: fix race when initializing the IP address table (bnc#1012628). - ARM: imx51: fix a leaked reference by adding missing of_node_put (bnc#1012628). - sc16is7xx: missing unregister/delete driver on error in sc16is7xx_init() (bnc#1012628). - serial: ar933x_uart: Fix build failure with disabled console (bnc#1012628). - KVM: arm64: Reset the PMU in preemptible context (bnc#1012628). - arm64: KVM: Always set ICH_HCR_EL2.EN if GICv4 is enabled (bnc#1012628). - KVM: arm/arm64: vgic-its: Take the srcu lock when writing to guest memory (bnc#1012628). - KVM: arm/arm64: vgic-its: Take the srcu lock when parsing the memslots (bnc#1012628). - usb: dwc3: pci: add support for Comet Lake PCH ID (bnc#1012628). - usb: gadget: net2280: Fix overrun of OUT messages (bnc#1012628). - usb: gadget: net2280: Fix net2280_dequeue() (bnc#1012628). - usb: gadget: net2272: Fix net2272_dequeue() (bnc#1012628). - ARM: dts: pfla02: increase phy reset duration (bnc#1012628). - i2c: i801: Add support for Intel Comet Lake (bnc#1012628). - KVM: arm/arm64: Fix handling of stage2 huge mappings (bnc#1012628). - net: ks8851: Dequeue RX packets explicitly (bnc#1012628). - net: ks8851: Reassert reset pin if chip ID check fails (bnc#1012628). - net: ks8851: Delay requesting IRQ until opened (bnc#1012628). - net: ks8851: Set initial carrier state to dow