Packages changed:
  cockpit (232 -> 235)
  containers-systemd (0.0+git20210107.f55f4b3 -> 0.0+git20210118.1366ecb)
  iproute2 (5.9.0 -> 5.10.0)
  kernel-source (5.10.9 -> 5.10.12)
  kmod (27 -> 28)
  libunwind (1.4.0 -> 1.5.0)
  openssh
  permissions (1550_20201111 -> 1550_20210125)
  pinentry (1.1.0 -> 1.1.1)
  python-PyYAML (5.3.1 -> 5.4.1)
  python-importlib-metadata (3.3.0 -> 3.4.0)
  python-networkx
  python-packaging (20.4 -> 20.8)
  python-psutil (5.7.3 -> 5.8.0)
  python-urllib3 (1.26.2 -> 1.26.3)
  python38 (3.8.6 -> 3.8.7)
  python38-core (3.8.6 -> 3.8.7)
  rpm
  socat (1.7.3.4 -> 1.7.4.1)
  supportutils
  timezone (2020f -> 2021a)
  toolbox (1.0+git20210119.b5acdcf -> 2.0+git20210125.50611db)
  tpm2-0-tss (3.0.1 -> 3.0.3)
  util-linux (2.35.1 -> 2.36.1)
  util-linux-systemd (2.35.1 -> 2.36.1)
  yast2 (4.3.49 -> 4.3.51)
  zeromq (4.3.3 -> 4.3.4)
  zstd

=== Details ===

==== cockpit ====
Version update (232 -> 235)
Subpackages: cockpit-bridge cockpit-system

- new version 235
  https://cockpit-project.org/blog/cockpit-235.html
  https://cockpit-project.org/blog/cockpit-234.html
  https://cockpit-project.org/blog/cockpit-233.html

==== containers-systemd ====
Version update (0.0+git20210107.f55f4b3 -> 0.0+git20210118.1366ecb)

- Update to version 0.0+git20210118.1366ecb:
  * postfix: provide SPAMASSASSIN_HOST environment variable

==== iproute2 ====
Version update (5.9.0 -> 5.10.0)

- Update to release 5.10
  * iplink: add support for protodown reason
  * ss: add support to expose various inet sockopts
  * ss: add support for XDP statistics
  * bridge: mdb: add support for source address

==== kernel-source ====
Version update (5.10.9 -> 5.10.12)

- Linux 5.10.12 (bsc#1012628).
- gpio: mvebu: fix pwm .get_state period calculation
  (bsc#1012628).
- Revert "mm/slub: fix a memory leak in sysfs_slab_add()"
  (bsc#1012628).
- futex: Ensure the correct return value from futex_lock_pi()
  (bsc#1012628).
- futex: Replace pointless printk in fixup_owner() (bsc#1012628).
- futex: Provide and use pi_state_update_owner() (bsc#1012628).
- rtmutex: Remove unused argument from rt_mutex_proxy_unlock()
  (bsc#1012628).
- futex: Use pi_state_update_owner() in put_pi_state()
  (bsc#1012628).
- futex: Simplify fixup_pi_state_owner() (bsc#1012628).
- futex: Handle faults correctly for PI futexes (bsc#1012628).
- HID: wacom: Correct NULL dereference on AES pen proximity
  (bsc#1012628).
- HID: multitouch: Apply MT_QUIRK_CONFIDENCE quirk for multi-input
  devices (bsc#1012628).
- media: Revert "media: videobuf2: Fix length check for single
  plane dmabuf queueing" (bsc#1012628).
- media: v4l2-subdev.h: BIT() is not available in userspace
  (bsc#1012628).
- RDMA/vmw_pvrdma: Fix network_hdr_type reported in WC
  (bsc#1012628).
- kernel/io_uring: cancel io_uring before task works
  (bsc#1012628).
- io_uring: inline io_uring_attempt_task_drop() (bsc#1012628).
- io_uring: add warn_once for io_uring_flush() (bsc#1012628).
- io_uring: stop SQPOLL submit on creator's death (bsc#1012628).
- io_uring: fix null-deref in io_disable_sqo_submit (bsc#1012628).
- io_uring: do sqo disable on install_fd error (bsc#1012628).
- io_uring: fix false positive sqo warning on flush (bsc#1012628).
- io_uring: fix uring_flush in exit_files() warning (bsc#1012628).
- io_uring: fix skipping disabling sqo on exec (bsc#1012628).
- io_uring: dont kill fasync under completion_lock (bsc#1012628).
- io_uring: fix sleeping under spin in __io_clean_op
  (bsc#1012628).
- objtool: Don't fail on missing symbol table (bsc#1012628).
- mm/page_alloc: add a missing mm_page_alloc_zone_locked()
  tracepoint (bsc#1012628).
- mm: fix a race on nr_swap_pages (bsc#1012628).
- tools: Factor HOSTCC, HOSTLD, HOSTAR definitions (bsc#1012628).
- printk: fix buffer overflow potential for print_text()
  (bsc#1012628).
- printk: fix string termination for record_print_text()
  (bsc#1012628).
- commit a3c8888
- floppy: reintroduce O_NDELAY fix (boo#1181018).
- commit fcfe481
- Update config files.
  Only refresh after 5.10.11.
- commit 90db4e6
- Linux 5.10.11 (bsc#1012628).
- scsi: target: tcmu: Fix use-after-free of se_cmd->priv
  (bsc#1012628).
- mtd: rawnand: gpmi: fix dst bit offset when extracting raw
  payload (bsc#1012628).
- mtd: rawnand: nandsim: Fix the logic when selecting Hamming
  soft ECC engine (bsc#1012628).
- i2c: tegra: Wait for config load atomically while in ISR
  (bsc#1012628).
- i2c: bpmp-tegra: Ignore unknown I2C_M flags (bsc#1012628).
- platform/x86: i2c-multi-instantiate: Don't create platform
  device for INT3515 ACPI nodes (bsc#1012628).
- platform/x86: ideapad-laptop: Disable touchpad_switch for
  ELAN0634 (bsc#1012628).
- ALSA: seq: oss: Fix missing error check in
  snd_seq_oss_synth_make_info() (bsc#1012628).
- ALSA: hda/realtek - Limit int mic boost on Acer Aspire E5-575T
  (bsc#1012628).
- ALSA: hda/via: Add minimum mute flag (bsc#1012628).
- crypto: xor - Fix divide error in do_xor_speed() (bsc#1012628).
- dm crypt: fix copy and paste bug in crypt_alloc_req_aead
  (bsc#1012628).
- ACPI: scan: Make acpi_bus_get_device() clear return pointer
  on error (bsc#1012628).
- btrfs: don't get an EINTR during drop_snapshot for reloc
  (bsc#1012628).
- btrfs: do not double free backref nodes on error (bsc#1012628).
- btrfs: fix lockdep splat in btrfs_recover_relocation
  (bsc#1012628).
- btrfs: don't clear ret in btrfs_start_dirty_block_groups
  (bsc#1012628).
- btrfs: send: fix invalid clone operations when cloning from
  the same file and root (bsc#1012628).
- fs: fix lazytime expiration handling in
  __writeback_single_inode() (bsc#1012628).
- pinctrl: ingenic: Fix JZ4760 support (bsc#1012628).
- mmc: core: don't initialize block size from ext_csd if not
  present (bsc#1012628).
- mmc: sdhci-of-dwcmshc: fix rpmb access (bsc#1012628).
- mmc: sdhci-xenon: fix 1.8v regulator stabilization
  (bsc#1012628).
- mmc: sdhci-brcmstb: Fix mmc timeout errors on S5 suspend
  (bsc#1012628).
- dm: avoid filesystem lookup in dm_get_dev_t() (bsc#1012628).
- dm integrity: fix a crash if "recalculate" used without
  "internal_hash" (bsc#1012628).
- dm integrity: conditionally disable "recalculate" feature
  (bsc#1012628).
- drm/atomic: put state on error path (bsc#1012628).
- drm/syncobj: Fix use-after-free (bsc#1012628).
- drm/amdgpu: remove gpu info firmware of green sardine
  (bsc#1012628).
- drm/amd/display: DCN2X Find Secondary Pipe properly in MPO +
  ODM Case (bsc#1012628).
- drm/i915/gt: Prevent use of engine->wa_ctx after error
  (bsc#1012628).
- drm/i915: Check for rq->hwsp validity after acquiring RCU lock
  (bsc#1012628).
- ASoC: Intel: haswell: Add missing pm_ops (bsc#1012628).
- ASoC: rt711: mutex between calibration and power state changes
  (bsc#1012628).
- SUNRPC: Handle TCP socket sends with kernel_sendpage() again
  (bsc#1012628).
- HID: multitouch: Enable multi-input for Synaptics
  pointstick/touchpad device (bsc#1012628).
- HID: sony: select CONFIG_CRC32 (bsc#1012628).
- dm integrity: select CRYPTO_SKCIPHER (bsc#1012628).
- x86/hyperv: Fix kexec panic/hang issues (bsc#1012628).
- scsi: ufs: Relax the condition of
  UFSHCI_QUIRK_SKIP_MANUAL_WB_FLUSH_CTRL (bsc#1012628).
- scsi: ufs: Correct the LUN used in eh_device_reset_handler()
  callback (bsc#1012628).
- scsi: qedi: Correct max length of CHAP secret (bsc#1012628).
- scsi: scsi_debug: Fix memleak in scsi_debug_init()
  (bsc#1012628).
- scsi: sd: Suppress spurious errors when WRITE SAME is being
  disabled (bsc#1012628).
- riscv: Fix kernel time_init() (bsc#1012628).
- riscv: Fix sifive serial driver (bsc#1012628).
- riscv: Enable interrupts during syscalls with M-Mode
  (bsc#1012628).
- HID: logitech-dj: add the G602 receiver (bsc#1012628).
- HID: Ignore battery for Elan touchscreen on ASUS UX550
  (bsc#1012628).
- clk: tegra30: Add hda clock default rates to clock driver
  (bsc#1012628).
- ALSA: hda/tegra: fix tegra-hda on tegra30 soc (bsc#1012628).
- riscv: cacheinfo: Fix using smp_processor_id() in preemptible
  (bsc#1012628).
- arm64: make atomic helpers __always_inline (bsc#1012628).
- xen: Fix event channel callback via INTX/GSI (bsc#1012628).
- x86/xen: Add xen_no_vector_callback option to test PCI INTX
  delivery (bsc#1012628).
- x86/xen: Fix xen_hvm_smp_init() when vector callback not
  available (bsc#1012628).
- dts: phy: fix missing mdio device and probe failure of
  vsc8541-01 device (bsc#1012628).
- dts: phy: add GPIO number and active state used for phy reset
  (bsc#1012628).
- riscv: defconfig: enable gpio support for HiFive Unleashed
  (bsc#1012628).
- drm/amdgpu/psp: fix psp gfx ctrl cmds (bsc#1012628).
- drm/amd/display: disable dcn10 pipe split by default
  (bsc#1012628).
- HID: logitech-hidpp: Add product ID for MX Ergo in Bluetooth
  mode (bsc#1012628).
- drm/amd/display: Fix to be able to stop crc calculation
  (bsc#1012628).
- drm/nouveau/bios: fix issue shadowing expansion ROMs
  (bsc#1012628).
- drm/nouveau/privring: ack interrupts the same way as RM
  (bsc#1012628).
- drm/nouveau/i2c/gm200: increase width of aux semaphore owner
  fields (bsc#1012628).
- drm/nouveau/mmu: fix vram heap sizing (bsc#1012628).
- drm/nouveau/kms/nv50-: fix case where notifier buffer is at
  offset 0 (bsc#1012628).
- io_uring: flush timeouts that should already have expired
  (bsc#1012628).
- libperf tests: If a test fails return non-zero (bsc#1012628).
- libperf tests: Fail when failing to get a tracepoint id
  (bsc#1012628).
- RISC-V: Set current memblock limit (bsc#1012628).
- RISC-V: Fix maximum allowed phsyical memory for RV32
  (bsc#1012628).
- x86/xen: fix 'nopvspin' build error (bsc#1012628).
- nfsd: Fixes for nfsd4_encode_read_plus_data() (bsc#1012628).
- nfsd: Don't set eof on a truncated READ_PLUS (bsc#1012628).
- gpiolib: cdev: fix frame size warning in gpio_ioctl()
  (bsc#1012628).
- pinctrl: aspeed: g6: Fix PWMG0 pinctrl setting (bsc#1012628).
- pinctrl: mediatek: Fix fallback call path (bsc#1012628).
- RDMA/ucma: Do not miss ctx destruction steps in some cases
  (bsc#1012628).
- btrfs: print the actual offset in btrfs_root_name (bsc#1012628).
- scsi: megaraid_sas: Fix MEGASAS_IOC_FIRMWARE regression
  (bsc#1012628).
- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1012628).
- scsi: ufs: Fix tm request when non-fatal error happens
  (bsc#1012628).
- crypto: omap-sham - Fix link error without crypto-engine
  (bsc#1012628).
- bpf: Prevent double bpf_prog_put call from
  bpf_tracing_prog_attach (bsc#1012628).
- powerpc: Use the common INIT_DATA_SECTION macro in vmlinux.lds.S
  (bsc#1012628).
- powerpc: Fix alignment bug within the init sections
  (bsc#1012628).
- arm64: entry: remove redundant IRQ flag tracing (bsc#1012628).
- bpf: Reject too big ctx_size_in for raw_tp test run
  (bsc#1012628).
- drm/amdkfd: Fix out-of-bounds read in
  kdf_create_vcrat_image_cpu() (bsc#1012628).
- RDMA/umem: Avoid undefined behavior of rounddown_pow_of_two()
  (bsc#1012628).
- RDMA/cma: Fix error flow in default_roce_mode_store
  (bsc#1012628).
- printk: ringbuffer: fix line counting (bsc#1012628).
- printk: fix kmsg_dump_get_buffer length calulations
  (bsc#1012628).
- iov_iter: fix the uaccess area in copy_compat_iovec_from_user
  (bsc#1012628).
- i2c: octeon: check correct size of maximum RECV_LEN packet
  (bsc#1012628).
- drm/vc4: Unify PCM card's driver_name (bsc#1012628).
- platform/x86: intel-vbtn: Drop HP Stream x360 Convertible PC
  11 from allow-list (bsc#1012628).
- platform/x86: hp-wmi: Don't log a warning on
  HPWMI_RET_UNKNOWN_COMMAND errors (bsc#1012628).
- gpio: sifive: select IRQ_DOMAIN_HIERARCHY rather than depend
  on it (bsc#1012628).
- ALSA: hda: Balance runtime/system PM if direct-complete is
  disabled (bsc#1012628).
- xsk: Clear pool even for inactive queues (bsc#1012628).
- selftests: net: fib_tests: remove duplicate log test
  (bsc#1012628).
- can: dev: can_restart: fix use after free bug (bsc#1012628).
- can: vxcan: vxcan_xmit: fix use after free bug (bsc#1012628).
- can: peak_usb: fix use after free bugs (bsc#1012628).
- perf evlist: Fix id index for heterogeneous systems
  (bsc#1012628).
- i2c: sprd: depend on COMMON_CLK to fix compile tests
  (bsc#1012628).
- iio: common: st_sensors: fix possible infinite loop in
  st_sensors_irq_thread (bsc#1012628).
- iio: ad5504: Fix setting power-down state (bsc#1012628).
- drivers: iio: temperature: Add delay after the addressed reset
  command in mlx90632.c (bsc#1012628).
- iio: adc: ti_am335x_adc: remove omitted iio_kfifo_free()
  (bsc#1012628).
- counter:ti-eqep: remove floor (bsc#1012628).
- powerpc/64s: fix scv entry fallback flush vs interrupt
  (bsc#1012628).
- cifs: do not fail __smb_send_rqst if non-fatal signals are
  pending (bsc#1012628).
- irqchip/mips-cpu: Set IPI domain parent chip (bsc#1012628).
- x86/fpu: Add kernel_fpu_begin_mask() to selectively initialize
  state (bsc#1012628).
- x86/topology: Make __max_die_per_package available
  unconditionally (bsc#1012628).
- x86/mmx: Use KFPU_387 for MMX string operations (bsc#1012628).
- x86/setup: don't remove E820_TYPE_RAM for pfn 0 (bsc#1012628).
- proc_sysctl: fix oops caused by incorrect command parameters
  (bsc#1012628).
- mm: memcg/slab: optimize objcg stock draining (bsc#1012628).
- mm: memcg: fix memcg file_dirty numa stat (bsc#1012628).
- mm: fix numa stats for thp migration (bsc#1012628).
- io_uring: iopoll requests should also wake task ->in_idle state
  (bsc#1012628).
- io_uring: fix SQPOLL IORING_OP_CLOSE cancelation state
  (bsc#1012628).
- io_uring: fix short read retries for non-reg files
  (bsc#1012628).
- intel_th: pci: Add Alder Lake-P support (bsc#1012628).
- stm class: Fix module init return on allocation failure
  (bsc#1012628).
- serial: mvebu-uart: fix tx lost characters at power off
  (bsc#1012628).
- ehci: fix EHCI host controller initialization sequence
  (bsc#1012628).
- USB: ehci: fix an interrupt calltrace error (bsc#1012628).
- usb: gadget: aspeed: fix stop dma register setting
  (bsc#1012628).
- USB: gadget: dummy-hcd: Fix errors in port-reset handling
  (bsc#1012628).
- usb: udc: core: Use lock when write to soft_connect
  (bsc#1012628).
- usb: bdc: Make bdc pci driver depend on BROKEN (bsc#1012628).
- usb: cdns3: imx: fix writing read-only memory issue
  (bsc#1012628).
- usb: cdns3: imx: fix can't create core device the second time
  issue (bsc#1012628).
- xhci: make sure TRB is fully written before giving it to the
  controller (bsc#1012628).
- xhci: tegra: Delay for disabling LFPS detector (bsc#1012628).
- drivers core: Free dma_range_map when driver probe failed
  (bsc#1012628).
- driver core: Fix device link device name collision
  (bsc#1012628).
- driver core: Extend device_is_dependent() (bsc#1012628).
- drm/i915: s/intel_dp_sink_dpms/intel_dp_set_power/
  (bsc#1012628).
- drm/i915: Only enable DFP 4:4:4->4:2:0 conversion when
  outputting YCbCr 4:4:4 (bsc#1012628).
- x86/entry: Fix noinstr fail (bsc#1012628).
- x86/cpu/amd: Set __max_die_per_package on AMD (bsc#1012628).
- cls_flower: call nla_ok() before nla_next() (bsc#1012628).
- netfilter: rpfilter: mask ecn bits before fib lookup
  (bsc#1012628).
- tools: gpio: fix %llu warning in gpio-event-mon.c (bsc#1012628).
- tools: gpio: fix %llu warning in gpio-watch.c (bsc#1012628).
- drm/i915/hdcp: Update CP property in update_pipe (bsc#1012628).
- sh: dma: fix kconfig dependency for G2_DMA (bsc#1012628).
- sh: Remove unused HAVE_COPY_THREAD_TLS macro (bsc#1012628).
- locking/lockdep: Cure noinstr fail (bsc#1012628).
- ASoC: SOF: Intel: fix page fault at probe if i915 init fails
  (bsc#1012628).
- octeontx2-af: Fix missing check bugs in rvu_cgx.c (bsc#1012628).
- net: dsa: mv88e6xxx: also read STU state in
  mv88e6250_g1_vtu_getnext (bsc#1012628).
- selftests/powerpc: Fix exit status of pkey tests (bsc#1012628).
- sh_eth: Fix power down vs. is_opened flag ordering
  (bsc#1012628).
- nvme-pci: refactor nvme_unmap_data (bsc#1012628).
- nvme-pci: fix error unwind in nvme_map_data (bsc#1012628).
- cachefiles: Drop superfluous readpages aops NULL check
  (bsc#1012628 bsc#1175245).
- lightnvm: fix memory leak when submit fails (bsc#1012628).
- skbuff: back tiny skbs with kmalloc() in __netdev_alloc_skb()
  too (bsc#1012628).
- kasan: fix unaligned address is unhandled in
  kasan_remove_zero_shadow (bsc#1012628).
- kasan: fix incorrect arguments passing in kasan_add_zero_shadow
  (bsc#1012628).
- tcp: fix TCP socket rehash stats mis-accounting (bsc#1012628).
- net_sched: gen_estimator: support large ewma log (bsc#1012628).
- udp: mask TOS bits in udp_v4_early_demux() (bsc#1012628).
- ipv6: create multicast route with RTPROT_KERNEL (bsc#1012628).
- net_sched: avoid shift-out-of-bounds in tcindex_set_parms()
  (bsc#1012628).
- net_sched: reject silly cell_log in qdisc_get_rtab()
  (bsc#1012628).
- ipv6: set multicast flag on the multicast route (bsc#1012628).
- net: mscc: ocelot: allow offloading of bridge on top of LAG
  (bsc#1012628).
- net: Disable NETIF_F_HW_TLS_RX when RXCSUM is disabled
  (bsc#1012628).
- net: dsa: b53: fix an off by one in checking "vlan->vid"
  (bsc#1012628).
- tcp: do not mess with cloned skbs in tcp_add_backlog()
  (bsc#1012628).
- tcp: fix TCP_USER_TIMEOUT with zero window (bsc#1012628).
- net: mscc: ocelot: Fix multicast to the CPU port (bsc#1012628).
- net: core: devlink: use right genl user_ptr when handling port
  param get/set (bsc#1012628).
- pinctrl: qcom: Allow SoCs to specify a GPIO function that's
  not 0 (bsc#1012628).
- pinctrl: qcom: No need to read-modify-write the interrupt status
  (bsc#1012628).
- pinctrl: qcom: Properly clear "intr_ack_high" interrupts when
  unmasking (bsc#1012628).
- pinctrl: qcom: Don't clear pending interrupts when enabling
  (bsc#1012628).
- x86/sev: Fix nonistr violation (bsc#1012628).
- tty: implement write_iter (bsc#1012628).
- tty: fix up hung_up_tty_write() conversion (bsc#1012628).
- net: systemport: free dev before on error path (bsc#1012628).
- x86/sev-es: Handle string port IO to kernel memory properly
  (bsc#1012628).
- tcp: Fix potential use-after-free due to double kfree()
  (bsc#1012628).
- ASoC: SOF: Intel: hda: Avoid checking jack on system suspend
  (bsc#1012628).
- drm/i915/hdcp: Get conn while content_type changed
  (bsc#1012628).
- bpf: Local storage helpers should check nullness of owner ptr
  passed (bsc#1012628).
- kernfs: implement ->read_iter (bsc#1012628).
- kernfs: implement ->write_iter (bsc#1012628).
- kernfs: wire up ->splice_read and ->splice_write (bsc#1012628).
- interconnect: imx8mq: Use icc_sync_state (bsc#1012628).
- fs/pipe: allow sendfile() to pipe again (bsc#1012628).
- Commit 9bb48c82aced ("tty: implement write_iter") converted
  the tty layer to use write_iter. Fix the redirected_tty_write
  declaration also in n_tty and change the comparisons to use
  write_iter instead of write. also in n_tty and change the
  comparisons to use write_iter instead of write (bsc#1012628).
- mm: fix initialization of struct page for holes in memory layout
  (bsc#1012628).
- Revert "mm: fix initialization of struct page for holes in
  memory layout" (bsc#1012628).
- Delete
  patches.suse/fs-cachefs-Drop-superfluous-readpages-aops-NULL-chec.patch.
- commit 7d05541
- ALSA: hda/via: Apply the workaround generically for Clevo
  machines (bsc#1181330).
- commit 87d962b
- Linux 5.10.10 (bsc#1012628).
- spi: cadence: cache reference clock rate during probe
  (bsc#1012628).
- spi: fsl: Fix driver breakage when SPI_CS_HIGH is not set in
  spi->mode (bsc#1012628).
- cxgb4/chtls: Fix tid stuck due to wrong update of qid
  (bsc#1012628).
- net: dsa: unbind all switches from tree when DSA master unbinds
  (bsc#1012628).
- mac80211: check if atf has been disabled in
  __ieee80211_schedule_txq (bsc#1012628).
- mac80211: do not drop tx nulldata packets on encrypted links
  (bsc#1012628).
- drm/panel: otm8009a: allow using non-continuous dsi clock
  (bsc#1012628).
- can: mcp251xfd: mcp251xfd_handle_rxif_one(): fix wrong NULL
  pointer check (bsc#1012628).
- net: stmmac: use __napi_schedule() for PREEMPT_RT (bsc#1012628).
- rxrpc: Fix handling of an unsupported token type in rxrpc_read()
  (bsc#1012628).
- net: dsa: clear devlink port type before unregistering slave
  netdevs (bsc#1012628).
- net: phy: smsc: fix clk error handling (bsc#1012628).
- dt-bindings: net: renesas,etheravb: RZ/G2H needs
  tx-internal-delay-ps (bsc#1012628).
- net: avoid 32 x truesize under-estimation for tiny skbs
  (bsc#1012628).
- net: stmmac: fix taprio configuration when base_time is in
  the past (bsc#1012628).
- net: stmmac: fix taprio schedule configuration (bsc#1012628).
- net: sit: unregister_netdevice on newlink's error path
  (bsc#1012628).
- net: stmmac: Fixed mtu channged by cache aligned (bsc#1012628).
- i40e: fix potential NULL pointer dereferencing (bsc#1012628).
- rxrpc: Call state should be read with READ_ONCE() under some
  circumstances (bsc#1012628).
- net: dcb: Accept RTM_GETDCB messages carrying set-like DCB
  commands (bsc#1012628).
- net: dcb: Validate netlink message in DCB handler (bsc#1012628).
- esp: avoid unneeded kmap_atomic call (bsc#1012628).
- rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM
  request (bsc#1012628).
- net: mvpp2: Remove Pause and Asym_Pause support (bsc#1012628).
- mlxsw: core: Increase critical threshold for ASIC thermal zone
  (bsc#1012628).
- mlxsw: core: Add validation of transceiver temperature
  thresholds (bsc#1012628).
- tipc: fix NULL deref in tipc_link_xmit() (bsc#1012628).
- net: ipv6: Validate GSO SKB before finish IPv6 processing
  (bsc#1012628).
- netxen_nic: fix MSI/MSI-x interrupts (bsc#1012628).
- udp: Prevent reuseport_select_sock from reading uninitialized
  socks (bsc#1012628).
- net: fix use-after-free when UDP GRO with shared fraglist
  (bsc#1012628).
- net: ipa: modem: add missing SET_NETDEV_DEV() for proper sysfs
  links (bsc#1012628).
- bpf: Fix helper bpf_map_peek_elem_proto pointing to wrong
  callback (bsc#1012628).
- bpf: Support PTR_TO_MEM{,_OR_NULL} register spilling
  (bsc#1012628).
- bpf: Don't leak memory in bpf getsockopt when optlen == 0
  (bsc#1012628).
- nfsd4: readdirplus shouldn't return parent of export
  (bsc#1012628).
- X.509: Fix crash caused by NULL pointer (bsc#1012628).
- bpf: Fix signed_{sub,add32}_overflows type handling
  (bsc#1012628).
- drm/amdgpu/display: drop DCN support for aarch64 (bsc#1012628).
- Update config files.
- x86/hyperv: Initialize clockevents after LAPIC is initialized
  (bsc#1012628).
- bpf: Fix selftest compilation on clang 11 (bsc#1012628).
- Revert "kconfig: remove 'kvmconfig' and 'xenconfig' shorthands"
  (bsc#1012628).
- commit 167b75d
- drm/gpu/nouveau/dispnv50: Restore pushing of all data
  (boo#1181271).
- commit c3f7185
- media: pwc: Fix the URB buffer allocation (bsc#1181133).
- commit a9c85b1
- media: dvb-usb: Fix use-after-free access (bsc#1181104).
- media: dvb-usb: Fix memory leak at error in
  dvb_usb_device_init() (bsc#1181104).
- commit 807ed8c

==== kmod ====
Version update (27 -> 28)
Subpackages: libkmod2

- Supplement bash-completion subpackage against the main package
  and bash-completion.
- Also require the main package plus bash-completion: the
  completion package is useless without either of the two.
- Update to v28
  * Add Zstandard to the supported compression formats using libzstd
    (tests only - cannot be disabled in tests)
  * Ignore ill-formed kernel command line, e.g. with "ivrs_acpihid[00:14.5]=AMD0020:0"
    option in it
  * Fix some memory leaks
  * Fix 0-length builtin.alias.bin: it needs at least the index header
- Backport upstream fix 0001-Fix-modinfo-F-always-shows-name-for-built-ins.patch

==== libunwind ====
Version update (1.4.0 -> 1.5.0)

- update to 1.5.0:
  * dwarf: clang doesn't respect the static alias
  * Fixed a missing dependency in dwarf-eh.h
  * x86_64: Fix tdep_init_done when built with libatomic_ops
  * mips: make _step_n64 as a static function
  * Added braces to suppress empty if/else warnings
  * Delete hardcode of address size to support MIPS64.
  * Fix format specifier for int64_t:29
  * Add initial support for Solaris x86-64
  * x86_64: Add fixup code if previous RIP was invalid
  * x86-64: make `is_cached_valid_mem` functional
  * arm: clear ip thumb/arm mode bit before move to previous instruction
  * Fix compilation with -fno-common.
  * Fix off-by-one error in x86_64 stack frames
  * aarch64: Fix __sigset build issue on muslC
  * Make SHF_COMPRESSED use contingent on its existence
- remove libunwind_U_dyn_info_list.patch (upstream)

==== openssh ====
Subpackages: openssh-clients openssh-common openssh-server

- Add support for /etc/ssh/ssh_config.d and /etc/ssh/sshd_config.d
  (openssh-8.4p1-ssh_config_d.patch)

==== permissions ====
Version update (1550_20201111 -> 1550_20210125)
Subpackages: chkstat permissions-config

- Update to version 20210125:
  * usbauth: drop compatibility variable for libexec
  * usbauth: Updated path for usbauth-npriv
  * profiles: finish usage of variable for polkit-agent-helper-1

==== pinentry ====
Version update (1.1.0 -> 1.1.1)

- actually build efl based pinentry
- re-enable validation of upstream signing key
- update to 1.1.1:
  * A EFL-based pinentry has been contributed.
  * Disable echoing in backspace key is pressed first
    (GTK, Qt, TQt, and ncurses pinentries).
  * Support line editing in TTY pinentry.
  * Remove support for old GTK+2 (< 2.12.0).
  * Various minor fixes.
- drop pinentry-qt-Fix-use-of-dangling-pointer.patch (upstream)
- drop pinentry-ncurses6.diff: obsolete

==== python-PyYAML ====
Version update (5.3.1 -> 5.4.1)

- update to 5.4.1 (bsc#1174514, CVE-2020-14343):
  * Fix stub compat with older pyyaml versions that may unwittingly load it
  * Build modernization, remove distutils, fix metadata, build wheels, CI to GHA
  * Fix for CVE-2020-14343, moves arbitrary python tags to UnsafeLoader
  * Fix memory leak in implicit resolver setup
  * Fix py2 copy support for timezone objects
  * Fix compatibility with Jython

==== python-importlib-metadata ====
Version update (3.3.0 -> 3.4.0)

- update to 3.4.0:
  * Project now declares itself as being typed.
  * Additional performance enhancements to distribution
    discovery.
  * For PyPA projects, add test ensuring that
    ``MetadataPathFinder._search_paths`` honors the needed
    interface. Method is still private.

==== python-networkx ====

- Temporarily reenable python36 build until SciPy is updated,
  because the PyYAML fix needs to be merged first
- Add yaml-loader.patch adding support for new PyYAML
- Skip python36 because of SciPy 1.6.0

==== python-packaging ====
Version update (20.4 -> 20.8)

- update to 20.8:
  * Revert back to setuptools for compatibility purposes for some Linux distros (:issue:`363`)
  * Do not insert an underscore in wheel tags when the interpreter version number
    is more than 2 digits (:issue:`372`)
  * Fix flit configuration, to include LICENSE files (:issue:`357`)
  * Make `intel` a recognized CPU architecture for the `universal` macOS platform tag (:issue:`361`)
  * Add some missing type hints to `packaging.requirements` (issue:`350`)
  * Officially support Python 3.9 (:issue:`343`)
  * Deprecate the ``LegacyVersion`` and ``LegacySpecifier`` classes (:issue:`321`)
  * Handle ``OSError`` on non-dynamic executables when attempting to resolve
    the glibc version string.

==== python-psutil ====
Version update (5.7.3 -> 5.8.0)

- Do not install tests (and change the way they're run since they
  were run from %{buildroot})
- Add patch to skip tests related to rlimit and zombie processes
  that fail when building for python2 on i586:
  * skip_rlimit_tests_on_python2.patch
- update to 5.8.0:
  * Enhancements:
  - 1863: disk_partitions() exposes 2 extra fields: maxfile and
    maxpath, which are the maximum file name and path name
    length.
  - 1872: [Windows] added support for PyPy 2.7.
  - 1879: provide pre-compiled wheels for Linux and macOS.
  - 1880: get rid of Travis and Cirrus CI services (they are no
    longer free). CI testing is now done by GitHub Actions on
    Linux, macOS and FreeBSD (yes). AppVeyor is still being used
    for Windows CI.
  * Bug fixes:
  - 1708: [Linux] get rid of sensors_temperatures() duplicates.
    (patch by Tim Schlueter).
  - 1839: [Windows] always raise AccessDenied when failing to
    query 64 processes from 32 bit ones (NtWoW64 APIs).
  - 1866: [Windows] process exe(), cmdline(), environ() may raise
    "invalid access to memory location" on Python 3.9.
  - 1874: [Solaris] wrong swap output given when encrypted column
    is present.
  - 1875: [Windows] process username() may raise
    ERROR_NONE_MAPPED if the SID has no corresponding account
    name. In this case AccessDenied is now raised.
  - 1877: [Windows] OpenProcess may fail with ERROR_SUCCESS.
    Turn it into AccessDenied or NoSuchProcess depending on
    whether the PID is alive.
  - 1886: [macOS] EIO error may be raised on cmdline() and
    environment(). Now it gets translated into AccessDenied.
  - 1891: [macOS] get rid of deprecated getpagesize().
- Rebase patch and skip three other tests that fail on obs
  * skip-obs.patch

==== python-urllib3 ====
Version update (1.26.2 -> 1.26.3)

- update to 1.26.3:
  * Fixed bytes and string comparison issue with headers (Pull #2141)
  * Changed ``ProxySchemeUnknown`` error message to be
    more actionable if the user supplies a proxy URL without
    a scheme. (Pull #2107)

==== python38 ====
Version update (3.8.6 -> 3.8.7)

- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.
- (bsc#1180125) We really don't Require python-rpm-macros package.
  Unnecessary dependency.
- Update to 3.8.7:
  - bugfix release
  - multiple patches realigned:
  - F00102-lib64.patch
  - SUSE-FEDORA-multilib.patch
  - bpo-31046_ensurepip_honours_prefix.patch
  - skip_random_failing_tests.patch
- Last try before this results in an editwar:
  * remove importlib_resources and importlib-metadata
    provides/obsoletes
  * import importlib_resources is not the same as
    import importlib.resources, same for metadata
  * The backport packages from PyPI needed for older flavors are
    specified as such for setuptools or in pyproject.toml. If a
    package requires them they typically add them with a python
    version qualifier and the packages have their own version
    numbers.
- Add patch sphinx-update-removed-function.patch to no longer call
  a now removed function and to make documentation build independent of
  the Sphinx version (bsc#1179630, gh#python/cpython#13236).
- Add importlib_resources provide/obsolete as it is integral
  part of the lang since 3.7 release

==== python38-core ====
Version update (3.8.6 -> 3.8.7)
Subpackages: libpython3_8-1_0 python38-base

- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.
- (bsc#1180125) We really don't Require python-rpm-macros package.
  Unnecessary dependency.
- Update to 3.8.7:
  - bugfix release
  - multiple patches realigned:
  - F00102-lib64.patch
  - SUSE-FEDORA-multilib.patch
  - bpo-31046_ensurepip_honours_prefix.patch
  - skip_random_failing_tests.patch
- Last try before this results in an editwar:
  * remove importlib_resources and importlib-metadata
    provides/obsoletes
  * import importlib_resources is not the same as
    import importlib.resources, same for metadata
  * The backport packages from PyPI needed for older flavors are
    specified as such for setuptools or in pyproject.toml. If a
    package requires them they typically add them with a python
    version qualifier and the packages have their own version
    numbers.
- Add patch sphinx-update-removed-function.patch to no longer call
  a now removed function and to make documentation build independent of
  the Sphinx version (bsc#1179630, gh#python/cpython#13236).
- Add importlib_resources provide/obsolete as it is integral
  part of the lang since 3.7 release

==== rpm ====
Subpackages: librpmbuild9

- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125).

==== socat ====
Version update (1.7.3.4 -> 1.7.4.1)

- update to 1.7.4.1:
  Security:
  * Buffer size option (-b) is internally doubled for CR-CRLF conversion,
    but not checked for integer overflow. This could lead to heap based buffer
    overflow, assuming the attacker could provide this parameter.
  * Many further bugfixes and new features, see the CHANGES file

==== supportutils ====

- Require the awk, which and sed commands instead of packages to
  allow alternate implementations on embedded/Edge systems

==== timezone ====
Version update (2020f -> 2021a)

- timezone update 2021a (bsc#1177460)
  * South Sudan changes from +03 to +02 on 2021-02-01 at 00:00.

==== toolbox ====
Version update (1.0+git20210119.b5acdcf -> 2.0+git20210125.50611db)

- Update to version 2.0+git20210125.50611db:
  * Document configuration files, add /usr/etc/toolboxrc
  * Update README to include commands
  * Update the README
  * Be even more compatible with Silverblue Toolbox
  * Introduce commands, for compatibility with Silverblue's toolbox
  * Mount /run/media and and /tmp inside a user toolbox
  * Export more env variables inside (user) toolboxes

==== tpm2-0-tss ====
Version update (3.0.1 -> 3.0.3)
Subpackages: libtss2-esys0 libtss2-mu0 libtss2-rc0 libtss2-sys1

- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.

==== util-linux ====
Version update (2.35.1 -> 2.36.1)
Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1

- Do not require libeconf-devel on products without /usr/etc.
- s/--enable-vendordir/--with-vendordir/
- remove pam_securetty line again. As long as there is no agreement
  from pam side having it would fail openQA (boo#1033626)
- Update to version 2.36.1:
  * chrt: use SCHED_FLAG_RESET_ON_FORK for sched_setattr()
  * fallocate: fix --dig-holes at end of files
  * fdisk: always report fdisk_create_disklabel() errors
  * flock: keep -E exit status more restrictive
  * fstrim: remove fstab condition from fstrim.timer
  * hexdump: automatically use -C when called as hd
  * hwclock: add fallback if SYS_settimeofday does not exist, fix
    SYS_settimeofday fallback
  * libblkid: allow a lot of mac partitions, fix Atari prober logic,
    limit amount of parsed partitions
  * more libfdisk improvements
  * losetup: avoid infinite busy loop, increase limit of setup
    attempts
  * lsblk: fix -T optional argument, fix SCSI_IDENT_SERIAL, print
    zero rather than empty SIZE, read ID_SCSI_IDENT_SERIAL if
    available
  * lscpu: Add FUJITSU aarch64 A64FX cpupart, Even more Arm part
    numbers, avoid segfault on PowerPC systems with valid hardware
    configurations (bsc#1175623)
  * mount: Add support for "nosymfollow" mount option.
  * pg: fix wcstombs()
  * sfdisk: correct --json --dump false exclusive, fix backward
  - -move-data
  * vipw: fix short write handling in copyfile
  * whereis: fix out of boundary read, support zst compressed man
    pages
  * minor code improvements and fixes
  * minor licensing changes
  * improve docs
- Require both group(uuidd) and user(uuidd).
- Do search /usr/sbin for mount helpers. (This drops /sbin/fs,
  /sbin/fs.d, which we do not use in openSUSE.)
- prepare usrmerge (boo#1029961)
- Modernize patch util-linux-sulogin4bsc1175514.patch
  * Try to autoconfigure broken serial lines
- Add patch util-linux-sulogin4bsc1175514.patch
  Avoid sulogin failing on not existing or not functional console
  devices (bsc#1175514)
- Fix default permissions of wall and write.
- Update to version 2.36:
  * blkdiscard(8) refuses to proceed if filesystem or RAID
    signatures are found in interactive mode (executed on a
    terminal). The option --force is required to the discard
    data.
  * new commands irqtop(1) and lsirq(1)to monitor kernel
    interrupts.
  * cal(1) provides a new --vertical command line option.
  * blkzone(8) implements open/close/finish commands now.
  * unshare(1) and nsenter(1) commands support the time namespace
    now.
  * agetty(8) now supports multiple paths in the option
  - -issue-file.
  * fdisk(8), sfdisk(8), cfdisk(8), mkswap(8) and wipefs(8) now
    support block devices locking by flock(2), new command line
    option --lock and $LOCK_BLOCK_DEVICE environmental variable.
  * dmesg(1) new command line option --follow-new to wait and
    print only new kernel messages.
  * fdisk(8) new command line option --list-details and
  - -noauto-pt.
  * fdisk(8) and sfdisk(8) support user-friendly aliases for
    partition types.
  * fstrim(8) supports new command line option --listed-in.
  * libfdisk provides API to relocate GPT backup header. New
    command line option "sfdisk --relocate".
  * mount(8) now supports mount by ID= tag.
  * login(1) supports list of "message of the day".
  * All tools which read /etc/login.defs is possible to compile
    with libeconf now.
  * more(1) has been refactored.
  * man pages cleanup
  * other fixes and improvements, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.36/v2.36-ReleaseNotes
- Refresh Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- Drop upstreamed libeconf.patch,
  libmount-Avoid-triggering-autofs-in-lookup_umount_fs.patch.
- util-linux-login_defs-check.sh: Perform all steps to integrate
  MOTD_FIRSTONLY.
- Update baselibs.conf.
- Use plain #!/bin/sh for flushb
- Include pam_securetty in login.pamd again (bsc#1033626)
- Update to 2.35.2
  * make glibc 2.31 compatible
- Dropped unneeded patch libfdisk-script-accept-sector-size.patch

==== util-linux-systemd ====
Version update (2.35.1 -> 2.36.1)

- Do not require libeconf-devel on products without /usr/etc.
- s/--enable-vendordir/--with-vendordir/
- remove pam_securetty line again. As long as there is no agreement
  from pam side having it would fail openQA (boo#1033626)
- Update to version 2.36.1:
  * chrt: use SCHED_FLAG_RESET_ON_FORK for sched_setattr()
  * fallocate: fix --dig-holes at end of files
  * fdisk: always report fdisk_create_disklabel() errors
  * flock: keep -E exit status more restrictive
  * fstrim: remove fstab condition from fstrim.timer
  * hexdump: automatically use -C when called as hd
  * hwclock: add fallback if SYS_settimeofday does not exist, fix
    SYS_settimeofday fallback
  * libblkid: allow a lot of mac partitions, fix Atari prober logic,
    limit amount of parsed partitions
  * more libfdisk improvements
  * losetup: avoid infinite busy loop, increase limit of setup
    attempts
  * lsblk: fix -T optional argument, fix SCSI_IDENT_SERIAL, print
    zero rather than empty SIZE, read ID_SCSI_IDENT_SERIAL if
    available
  * lscpu: Add FUJITSU aarch64 A64FX cpupart, Even more Arm part
    numbers, avoid segfault on PowerPC systems with valid hardware
    configurations (bsc#1175623)
  * mount: Add support for "nosymfollow" mount option.
  * pg: fix wcstombs()
  * sfdisk: correct --json --dump false exclusive, fix backward
  - -move-data
  * vipw: fix short write handling in copyfile
  * whereis: fix out of boundary read, support zst compressed man
    pages
  * minor code improvements and fixes
  * minor licensing changes
  * improve docs
- Require both group(uuidd) and user(uuidd).
- Do search /usr/sbin for mount helpers. (This drops /sbin/fs,
  /sbin/fs.d, which we do not use in openSUSE.)
- prepare usrmerge (boo#1029961)
- Modernize patch util-linux-sulogin4bsc1175514.patch
  * Try to autoconfigure broken serial lines
- Add patch util-linux-sulogin4bsc1175514.patch
  Avoid sulogin failing on not existing or not functional console
  devices (bsc#1175514)
- Fix default permissions of wall and write.
- Update to version 2.36:
  * blkdiscard(8) refuses to proceed if filesystem or RAID
    signatures are found in interactive mode (executed on a
    terminal). The option --force is required to the discard
    data.
  * new commands irqtop(1) and lsirq(1)to monitor kernel
    interrupts.
  * cal(1) provides a new --vertical command line option.
  * blkzone(8) implements open/close/finish commands now.
  * unshare(1) and nsenter(1) commands support the time namespace
    now.
  * agetty(8) now supports multiple paths in the option
  - -issue-file.
  * fdisk(8), sfdisk(8), cfdisk(8), mkswap(8) and wipefs(8) now
    support block devices locking by flock(2), new command line
    option --lock and $LOCK_BLOCK_DEVICE environmental variable.
  * dmesg(1) new command line option --follow-new to wait and
    print only new kernel messages.
  * fdisk(8) new command line option --list-details and
  - -noauto-pt.
  * fdisk(8) and sfdisk(8) support user-friendly aliases for
    partition types.
  * fstrim(8) supports new command line option --listed-in.
  * libfdisk provides API to relocate GPT backup header. New
    command line option "sfdisk --relocate".
  * mount(8) now supports mount by ID= tag.
  * login(1) supports list of "message of the day".
  * All tools which read /etc/login.defs is possible to compile
    with libeconf now.
  * more(1) has been refactored.
  * man pages cleanup
  * other fixes and improvements, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.36/v2.36-ReleaseNotes
- Refresh Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
- Drop upstreamed libeconf.patch,
  libmount-Avoid-triggering-autofs-in-lookup_umount_fs.patch.
- util-linux-login_defs-check.sh: Perform all steps to integrate
  MOTD_FIRSTONLY.
- Update baselibs.conf.
- Use plain #!/bin/sh for flushb
- Include pam_securetty in login.pamd again (bsc#1033626)
- Update to 2.35.2
  * make glibc 2.31 compatible
- Dropped unneeded patch libfdisk-script-accept-sector-size.patch

==== yast2 ====
Version update (4.3.49 -> 4.3.51)

- Do not propose hibernation when running over a virtualized setup
  (bsc#1180982).
- 4.3.51
- Fixed Resolvables class to uniqely identify the libzypp objects
  to avoid random failures (related to bsc#1178688)
- 4.3.50

==== zeromq ====
Version update (4.3.3 -> 4.3.4)

- update to 4.3.4:
  * ZMQ_PRIORITY will set the SO_PRIORITY socket option on the underlying
    sockets. Only supported on Linux.
  * Fixed compilation errors on kFreeBSD and GNU/Hurd
  * Fixed excessive amount of socket files left behind in Windows TMP
  * Fixed regression that breaks using IPv6 link-local addresses on Linux
  * Fixed compilation errors on Android
  * Fixed compilation error with ulibc and libbsd
  * Fixed stack overflow on Windows x64
  * Fixed various compilation errors on Windows ARM 32bit
  * Fixed various compilation warnings with XCode
  * Fixed return value of zmq_ctx_get changed unintentionally

==== zstd ====

- Add libzstd-devel-32bit (boo#1181272)