Packages changed:
  aaa_base (84.87+git20200818.b9dd70f -> 84.87+git20200909.ee4a72c)
  acl
  apparmor
  bcache-tools
  boost-base
  busybox-links
  c-ares
  ceph (16.0.0.4862+g8ac6038555 -> 16.0.0.4863+g5d95d9d41d)
  cni-plugins (0.8.6 -> 0.8.7)
  efivar
  etcd (3.4.10 -> 3.4.13)
  gptfdisk
  haproxy (2.2.2+git0.b8a2763d5 -> 2.2.3+git0.0e58a340d)
  helm (3.3.0 -> 3.3.1)
  hostname (3.21 -> 3.23)
  installation-images-MicroOS (16.8 -> 16.14)
  iproute2 (5.7.0 -> 5.8.0)
  kbd
  kernel-source (5.8.4 -> 5.8.7)
  kuberlr (0.3.0 -> 0.3.1)
  kubernetes (1.19.0 -> 1.19.1)
  kubernetes1.19 (1.19.0 -> 1.19.1)
  libseccomp (2.4.3 -> 2.5.0)
  libxml2
  multipath-tools
  openldap2 (2.4.52 -> 2.4.53)
  permissions (1550_20200904 -> 1550_20200909)
  podman
  python-networkx (2.4 -> 2.5)
  python-pyzmq
  raspberrypi-firmware (2020.07.31 -> 2020.09.03)
  raspberrypi-firmware-config (2020.07.31 -> 2020.09.03)
  salt
  sudo
  xfsprogs (5.7.0 -> 5.8.0)
  yast2 (4.3.24 -> 4.3.25)
  yomi-formula (0.0.1+git.1595952633.b300be2 -> 0.0.1+git.1598948600.9a9eab0)

=== Details ===

==== aaa_base ====
Version update (84.87+git20200818.b9dd70f -> 84.87+git20200909.ee4a72c)

- Update to version 84.87+git20200909.ee4a72c:
  * /etc/profile.d/xdg-environment.{sh,csh}: Added /usr/etc/xdg to $XDG_CONFIG_DIRS
  * sysctl.d/50-default.conf: allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)

==== acl ====

- update url

==== apparmor ====
Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils perl-apparmor python3-apparmor

- libvirt-leaseshelper.patch: add /usr/libexec as a path to the
  libvirt leaseshelper script (jsc#SLE-14253)

==== bcache-tools ====

- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]

==== boost-base ====
Subpackages: boost-license1_74_0 libboost_thread1_74_0

- Enable context on s390x

==== busybox-links ====
Subpackages: busybox-coreutils busybox-gawk busybox-grep busybox-gzip busybox-xz

- busybox-vi: conflict with all vi variants

==== c-ares ====

- simplify conditions bit to make it tad more readable
- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..

==== ceph ====
Version update (16.0.0.4862+g8ac6038555 -> 16.0.0.4863+g5d95d9d41d)
Subpackages: ceph-common libcephfs2 librados2 librbd1 librgw2 python3-ceph-argparse python3-ceph-common python3-cephfs python3-rados python3-rbd python3-rgw

- Update to 16.0.0-4863-g5d95d9d41d:
  + cmake: detect and use sigdescr_np() if available (bsc#1175266)

==== cni-plugins ====
Version update (0.8.6 -> 0.8.7)

- Update to version 0.8.7:
  * Fix race condition in GetCurrentNS
  * lo: CNI_IFNAME is no longer ignored
  * cni: bump to 0.8.0
  * Bump Go version to 1.13 and 1.14
  * Add contact info
  * Update firewall README.md CNI-ADMIN
  * firewall: fix some typos in docs
  * portmap DEL noop if no portMappings present
  * flannel: remove net conf file after DEL succeed

==== efivar ====

- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault in non-EFI systems (bsc#1175989)

==== etcd ====
Version update (3.4.10 -> 3.4.13)

- Update to version 3.4.13:
  * version: 3.4.13
  * pkg: file stat warning
  * Automated cherry pick of #12243 on release 3.4
  * version: 3.4.12
  * etcdserver: Avoid panics logging slow v2 requests in integration tests
  * version: 3.4.11
  * Revert "etcdserver/api/v3rpc: "MemberList" never return non-empty ClientURLs"
  * *: fix backport of PR12216
  * *: add experimental flag for watch notify interval
  * clientv3: remove excessive watch cancel logging
  * etcdserver: add OS level FD metrics
  * pkg/runtime: optimize FDUsage by removing sort
  * clientv3: log warning in case of error sending request
  * etcdserver/api/v3rpc: "MemberList" never return non-empty ClientURLs

==== gptfdisk ====

- Remove old specfile constructs.

==== haproxy ====
Version update (2.2.2+git0.b8a2763d5 -> 2.2.3+git0.0e58a340d)

- Update to version 2.2.3+git0.0e58a340d:
  * [RELEASE] Released version 2.2.3
  * BUG/MEDIUM: mux-h1: always apply the timeout on half-closed connections
  * BUG/MINOR: auth: report valid crypto(3) support depending on build options
  * DOC: ssl-load-extra-files only applies to certificates on bind lines
  * MINOR: server: Improve log message sent when server address is updated
  * BUG/MEDIUM: dns: Be sure to renew IP address for already known servers
  * BUG/MEDIUM: dns: Don't store additional records in a linked-list
  * CLEANUP: dns: remove 45 "return" statements from dns_validate_dns_response()
  * CLEANUP: Update .gitignore
  * MINOR: Commit .gitattributes
  * BUILD: thread: limit the libgcc_s workaround to glibc only
  * BUG/MINOR: threads: work around a libgcc_s issue with chrooting
  * BUG/MEDIUM: ssl: does not look for all SNIs before chosing a certificate
  * MINOR: arg: Use chunk_destroy() to release string arguments
  * BUG/MEDIUM: ssl: check OCSP calloc in ssl_sock_load_ocsp()
  * REGTEST: Add a test for request path manipulations, with and without the QS
  * MINOR: http-fetch: Add pathq sample fetch
  * MINOR: http-rules: Add set-pathq and replace-pathq actions
  * BUG/MEDIUM: doc: Fix replace-path action description
  * Revert "BUG/MINOR: http-rules: Replace path and query-string in "replace-path" action"
  * BUG/MINOR: startup: haproxy -s cause 100% cpu
  * BUG/MEDIUM: contrib/spoa-server: Fix ipv4_address used instead of ipv6_address
  * BUG/MINOR: contrib/spoa-server: Updating references to free in case of failure
  * BUG/MINOR: contrib/spoa-server: Do not free reference to NULL
  * BUG/MINOR: contrib/spoa-server: Ensure ip address references are freed
  * BUG/MAJOR: contrib/spoa-server: Fix unhandled python call leading to memory leak
  * BUILD: task: work around a bogus warning in gcc 4.7/4.8 at -O1
  * BUILD: tools: include auxv a bit later
  * MINOR: cache: Reject duplicate cache names
  * DOC: cache: Use '<name>' instead of '<id>' in error message
  * BUG/MEDIUM: ssl: crt-list negative filters don't work
  * BUG/MINOR: http-rules: Replace path and query-string in "replace-path" action
  * MINOR: http-htx: Add an option to eval query-string when the path is replaced
  * BUG/MEDIUM: http-ana: Don't wait to send 1xx responses received from servers
  * BUG/MINOR: reload: do not fail when no socket is sent
  * BUG/MEDIUM: ssl: fix ssl_bind_conf double free w/ wildcards
  * BUG/MEDIUM: ssl: never generates the chain from the verify store
  * BUG/MEDIUM: htx: smp_prefetch_htx() must always validate the direction
  * BUG/MINOR: stats: use strncmp() instead of memcmp() on health states
  * BUG/MINOR: ssl: ssl-skip-self-issued-ca requires >= 1.0.2
  * BUG/MEDIUM: ssl: fix the ssl-skip-self-issued-ca option
  * BUG/MINOR: snapshots: leak of snapshots on deinit()
  * MEDIUM: lua: Don't filter exported fetches and converters
  * BUG/MINOR: lua: Duplicate lua strings in sample fetches/converters arg array
  * MINOR: hlua: Don't needlessly copy lua strings in trash during args validation
  * BUG/MINOR: lua: Check argument type to convert it to IP mask in arg validation
  * BUG/MINOR: lua: Check argument type to convert it to IPv4/IPv6 arg validation
  * BUG/MINOR: arg: Fix leaks during arguments validation for fetches/converters
  * BUG/MINOR: lua: Duplicate map name to load it when a new Map object is created
  * BUG/MINOR: converters: Store the sink in an arg pointer for debug() converter
  * MINOR: arg: Add an argument type to keep a reference on opaque data
  * BUG/MEDIUM: map/lua: Return an error if a map is loaded during runtime
  * BUG/MEDIUM: ssl: memory leak of ocsp data at SSL_CTX_free()
  * BUG/MINOR: ssl: fix memory leak at OCSP loading
  * DOC: spoa-server: fix false friends `actually`
  * BUG/MINOR: spoa-server: fix size_t format printing
  * BUG/MAJOR: dns: disabled servers through SRV records never recover
  * CLEANUP: dns: typo in reported error message
  * BUG/MEDIUM: mux-h1: Refresh H1 connection timeout after a synchronous send
  * SCRIPTS: git-show-backports: emit the shell command to backport a commit
  * SCRIPTS: git-show-backports: make -m most only show the left branch

==== helm ====
Version update (3.3.0 -> 3.3.1)

- Update to version 3.3.1:
  * Fix spelling in completion.go
  * Fixing linting of templates on Windows
  * Bump Kubernetes to v0.18.8 + Bump jsonpatch
  * Fix Quick Start Guide Link in README.md
  * fix test that modifies the wrong cache data
  * bufix: fix validateNumColons docs
  * Fix typo
  * Enhance readability by extracting bitwise operation
  * Make helm ls return only current releases if providing state filter
  * fix: Allow building in a path containing spaces
  * Alter whitespace in "Update Complete" output
  * Fixing version and spelling errors

==== hostname ====
Version update (3.21 -> 3.23)

- update to 3.23:
  * Increase buffer size for all FQDNs to NI_MAXHOST as suggested by manpage.
  (Closes: #942311)
  * Use the same size for getdomainname().
  * Bumped Standards-Version, no changes needed.

==== installation-images-MicroOS ====
Version update (16.8 -> 16.14)

- merge gh#openSUSE/installation-images#416
- fix library dependency checking
- 16.14
- BuildRequire system-role-common-criteria in SLE
- 16.13
- Include common critera system role handler (jsc#SLE-12905)
- merge gh#openSUSE/installation-images#413
- add watchdog modules (bsc#1176112)
- 16.12
- merge gh#openSUSE/installation-images#411
- make exfat support optional
- 16.11
- merge gh#openSUSE/installation-images#410
- add exfatprogs to spec file
- 16.10
- merge gh#openSUSE/installation-images#409
- support exfat filesystem (bsc#1175731)
- 16.9

==== iproute2 ====
Version update (5.7.0 -> 5.8.0)

- Update to release 5.8
  * macsec: add support for MAC offload
  * Add support for mptcp netlink interface
  * erspan: Add type I version 0 support

==== kbd ====
Subpackages: kbd-legacy

- add libkeymap-Fix-mk_mapname-for-the-plain-map.patch

==== kernel-source ====
Version update (5.8.4 -> 5.8.7)

- Revert "ALSA: hda: Add support for Loongson 7A1000 controller"
  (git-fixes).
- commit 7fc52c0
- Linux 5.8.7 (bsc#1012628).
- scsi: target: tcmu: Optimize use of flush_dcache_page
  (bsc#1012628).
- nl80211: fix NL80211_ATTR_HE_6GHZ_CAPABILITY usage
  (bsc#1012628).
- sdhci: tegra: Remove SDHCI_QUIRK_DATA_TIMEOUT_USES_SDCLK for
  Tegra186 (bsc#1012628).
- sdhci: tegra: Remove SDHCI_QUIRK_DATA_TIMEOUT_USES_SDCLK for
  Tegra210 (bsc#1012628).
- arm64: tegra: Add missing timeout clock to Tegra210 SDMMC
  (bsc#1012628).
- arm64: tegra: Add missing timeout clock to Tegra186 SDMMC nodes
  (bsc#1012628).
- arm64: tegra: Add missing timeout clock to Tegra194 SDMMC nodes
  (bsc#1012628).
- dt-bindings: mmc: tegra: Add tmclk for Tegra210 and later
  (bsc#1012628).
- KVM: arm64: Survive synchronous exceptions caused by AT
  instructions (bsc#1012628).
- KVM: arm64: Add kvm_extable for vaxorcism code (bsc#1012628).
- media: media/v4l2-core: Fix kernel-infoleak in video_put_user()
  (bsc#1012628).
- perf record/stat: Explicitly call out event modifiers in the
  documentation (bsc#1012628).
- selftests/x86/test_vsyscall: Improve the process_vm_readv()
  test (bsc#1012628).
- mm: fix pin vs. gup mismatch with gate pages (bsc#1012628).
- netfilter: nft_set_rbtree: Handle outcomes of tree rotations
  in overlap detection (bsc#1012628).
- HID: core: Sanitize event code and type when mapping input
  (bsc#1012628).
- HID: core: Correctly handle ReportSize being zero (bsc#1012628).
- commit dccac66
- Linux 5.8.6 (bsc#1012628).
- ALSA: usb-audio: Update documentation comment for MS2109 quirk
  (bsc#1012628).
- dma-pool: Fix an uninitialized variable bug in
  atomic_pool_expand() (bsc#1012628).
- drm/vmwgfx/ldu: Use drm_mode_config_reset (bsc#1012628).
- drm/vmwgfx/sou: Use drm_mode_config_reset (bsc#1012628).
- drm/vmwgfx/stdu: Use drm_mode_config_reset (bsc#1012628).
- HID: hiddev: Fix slab-out-of-bounds write in
  hiddev_ioctl_usage() (bsc#1012628).
- mm/page_counter: fix various data races at memsw (bsc#1012628).
- fbmem: pull fbcon_update_vcs() out of fb_set_var()
  (bsc#1012628).
- drm/atomic-helper: reset vblank on crtc reset (bsc#1012628).
- io_uring: make offset == -1 consistent with preadv2/pwritev2
  (bsc#1012628).
- io_uring: don't use poll handler if file can't be nonblocking
  read/written (bsc#1012628).
- io_uring: don't recurse on tsk->sighand->siglock with signalfd
  (bsc#1012628).
- usb: typec: tcpm: Fix Fix source hard reset response for TDA
  2.3.1.1 and TDA 2.3.1.2 failures (bsc#1012628).
- usb: typec: ucsi: Hold con->lock for the entire duration of
  ucsi_register_port() (bsc#1012628).
- usb: typec: ucsi: Rework ppm_lock handling (bsc#1012628).
- usb: typec: ucsi: Fix 2 unlocked ucsi_run_command calls
  (bsc#1012628).
- usb: typec: ucsi: Fix AB BA lock inversion (bsc#1012628).
- USB: Fix device driver race (bsc#1012628).
- USB: Also match device drivers using the ->match vfunc
  (bsc#1012628).
- usb: storage: Add unusual_uas entry for Sony PSZ drives
  (bsc#1012628).
- USB: cdc-acm: rework notification_buffer resizing (bsc#1012628).
- usb: dwc3: gadget: Handle ZLP for sg requests (bsc#1012628).
- usb: dwc3: gadget: Fix handling ZLP (bsc#1012628).
- usb: dwc3: gadget: Don't setup more than requested
  (bsc#1012628).
- USB: gadget: u_f: Unbreak offset calculation in VLAs
  (bsc#1012628).
- USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb()
  (bsc#1012628).
- USB: gadget: u_f: add overflow checks to VLA macros
  (bsc#1012628).
- usb: host: ohci-exynos: Fix error handling in
  exynos_ohci_probe() (bsc#1012628).
- USB: Ignore UAS for JMicron JMS567 ATA/ATAPI Bridge
  (bsc#1012628).
- USB: quirks: Ignore duplicate endpoint on Sound Devices MixPre-D
  (bsc#1012628).
- USB: quirks: Add no-lpm quirk for another Raydium touchscreen
  (bsc#1012628).
- usb: uas: Add quirk for PNY Pro Elite (bsc#1012628).
- USB: yurex: Fix bad gfp argument (bsc#1012628).
- drm/amd/pm: correct the thermal alert temperature limit settings
  (bsc#1012628).
- drm/amd/pm: correct Vega20 swctf limit setting (bsc#1012628).
- drm/amd/pm: correct Vega12 swctf limit setting (bsc#1012628).
- drm/amd/pm: correct Vega10 swctf limit setting (bsc#1012628).
- drm/amd/powerplay: Fix hardmins not being sent to SMU for RV
  (bsc#1012628).
- drm/amdgpu/gfx10: refine mgcg setting (bsc#1012628).
- drm/amd/display: use correct scale for actual_brightness
  (bsc#1012628).
- drm/amdgpu: Fix buffer overflow in INFO ioctl (bsc#1012628).
- drm/modeset-lock: Take the modeset BKL for legacy drivers
  (bsc#1012628).
- drm/dp_mst: Don't return error code when crtc is null
  (bsc#1012628).
- drm/etnaviv: fix external abort seen on GC600 rev 0x19
  (bsc#1012628).
- drm/i915: Fix cmd parser desc matching with masks (bsc#1012628).
- x86/hotplug: Silence APIC only after all interrupts are migrated
  (bsc#1012628).
- x86/irq: Unbreak interrupt affinity setting (bsc#1012628).
- irqchip/stm32-exti: Avoid losing interrupts due to clearing
  pending bits by mistake (bsc#1012628).
- genirq/matrix: Deal with the sillyness of for_each_cpu() on UP
  (bsc#1012628).
- usbip: Implement a match function to fix usbip (bsc#1012628).
- crypto: af_alg - Work around empty control messages without
  MSG_MORE (bsc#1012628).
- device property: Fix the secondary firmware node handling in
  set_primary_fwnode() (bsc#1012628).
- powerpc/perf: Fix crashes with generic_compat_pmu & BHRB
  (bsc#1012628).
- powerpc/32s: Disable VMAP stack which CONFIG_ADB_PMU
  (bsc#1012628).
- PM: sleep: core: Fix the handling of pending runtime resume
  requests (bsc#1012628).
- arm64: vdso32: make vdso32 install conditional (bsc#1012628).
- KVM: arm64: Set HCR_EL2.PTW to prevent AT taking synchronous
  exception (bsc#1012628).
- io-wq: fix hang after cancelling pending hashed work
  (bsc#1012628).
- xhci: Always restore EP_SOFT_CLEAR_TOGGLE even if ep reset
  failed (bsc#1012628).
- xhci: Do warm-reset when both CAS and XDEV_RESUME are set
  (bsc#1012628).
- usb: host: xhci: fix ep context print mismatch in debugfs
  (bsc#1012628).
- usb: host: xhci-tegra: fix tegra_xusb_get_phy() (bsc#1012628).
- usb: host: xhci-tegra: otg usb2/usb3 port init (bsc#1012628).
- usb: renesas-xhci: remove version check (bsc#1012628).
- XEN uses irqdesc::irq_data_common::handler_data to store a
  per interrupt XEN data pointer which contains XEN specific
  information (bsc#1012628).
- writeback: Fix sync livelock due to b_dirty_time processing
  (bsc#1012628).
- writeback: Avoid skipping inode writeback (bsc#1012628).
- writeback: Protect inode->i_io_list with inode->i_lock
  (bsc#1012628).
- io_uring: clear req->result on IOPOLL re-issue (bsc#1012628).
- serial: 8250: change lock order in serial8250_do_startup()
  (bsc#1012628).
- serial: 8250_exar: Fix number of ports for Commtech PCIe cards
  (bsc#1012628).
- serial: stm32: avoid kernel warning on absence of optional IRQ
  (bsc#1012628).
- serial: pl011: Don't leak amba_ports entry on driver register
  error (bsc#1012628).
- serial: pl011: Fix oops on -EPROBE_DEFER (bsc#1012628).
- serial: samsung: Removes the IRQ not found warning
  (bsc#1012628).
- vt_ioctl: change VT_RESIZEX ioctl to check for error return
  from vc_resize() (bsc#1012628).
- vt: defer kfree() of vc_screenbuf in vc_do_resize()
  (bsc#1012628).
- USB: lvtest: return proper error code in probe (bsc#1012628).
- fbcon: prevent user font height or width change from causing
  potential out-of-bounds access (bsc#1012628).
- btrfs: detect nocow for swap after snapshot delete
  (bsc#1012628).
- btrfs: fix space cache memory leak after transaction abort
  (bsc#1012628).
- btrfs: check the right error variable in
  btrfs_del_dir_entries_in_log (bsc#1012628).
- btrfs: reset compression level for lzo on remount (bsc#1012628).
- blk-mq: order adding requests to hctx->dispatch and checking
  SCHED_RESTART (bsc#1012628).
- HID: i2c-hid: Always sleep 60ms after I2C_HID_PWR_ON commands
  (bsc#1012628).
- block: loop: set discard granularity and alignment for block
  device backed loop (bsc#1012628).
- block: fix get_max_io_size() (bsc#1012628).
- hwmon: (gsc-hwmon) Scale temperature to millidegrees
  (bsc#1012628).
- arm64: Allow booting of late CPUs affected by erratum 1418040
  (bsc#1012628).
- arm64: Move handling of erratum 1418040 into C code
  (bsc#1012628).
- bpf: selftests: global_funcs: Check err_str before strstr
  (bsc#1012628).
- libbpf: Fix map index used in error message (bsc#1012628).
- powerpc/perf: Fix soft lockups due to missed interrupt
  accounting (bsc#1012628).
- ext4: limit the length of per-inode prealloc list (bsc#1012628).
- bpf: Avoid visit same object multiple times (bsc#1012628).
- bpf: Fix a rcu_sched stall issue with bpf task/task_file
  iterator (bsc#1012628).
- drm/amdkfd: fix the wrong sdma instance query for renoir
  (bsc#1012628).
- drm/amdgpu: fix NULL pointer access issue when unloading driver
  (bsc#1012628).
- net: gianfar: Add of_node_put() before goto statement
  (bsc#1012628).
- macvlan: validate setting of multiple remote source MAC
  addresses (bsc#1012628).
- Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command"
  (bsc#1012628).
- scsi: qla2xxx: Fix null pointer access during disconnect from
  subsystem (bsc#1012628).
- scsi: qla2xxx: Check if FW supports MQ before enabling
  (bsc#1012628).
- scsi: qla2xxx: Fix login timeout (bsc#1012628).
- scsi: qla2xxx: Indicate correct supported speeds for Mezz card
  (bsc#1012628).
- scsi: qla2xxx: Flush I/O on zone disable (bsc#1012628).
- scsi: qla2xxx: Flush all sessions on zone disable (bsc#1012628).
- scsi: scsi_debug: Fix scp is NULL errors (bsc#1012628).
- scsi: ufs: Clean up completed request without interrupt
  notification (bsc#1012628).
- scsi: ufs: Improve interrupt handling for shared interrupts
  (bsc#1012628).
- scsi: ufs: Fix possible infinite loop in ufshcd_hold
  (bsc#1012628).
- scsi: fcoe: Fix I/O path allocation (bsc#1012628).
- selftests: disable rp_filter for icmp_redirect.sh (bsc#1012628).
- ALSA: usb-audio: ignore broken processing/extension unit
  (bsc#1012628).
- ASoC: wm8994: Avoid attempts to read unreadable registers
  (bsc#1012628).
- s390/cio: add cond_resched() in the slow_eval_known_fn() loop
  (bsc#1012628).
- ALSA: hda/realtek: Add model alc298-samsung-headphone
  (bsc#1012628).
- drivers/net/wan/hdlc_x25: Added needed_headroom and a skb->len
  check (bsc#1012628).
- dma-pool: Only allocate from CMA when in same memory zone
  (bsc#1012628).
- dma-pool: fix coherent pool allocations for IOMMU mappings
  (bsc#1012628).
- can: j1939: transport: j1939_xtp_rx_dat_one(): compare own
  packets to detect corruptions (bsc#1012628).
- selftests/bpf: Correct various core_reloc 64-bit assumptions
  (bsc#1012628).
- selftests/bpf: Fix btf_dump test cases on 32-bit arches
  (bsc#1012628).
- selftest/bpf: Fix compilation warnings in 32-bit mode
  (bsc#1012628).
- tools/bpftool: Fix compilation warnings in 32-bit mode
  (bsc#1012628).
- libbpf: Prevent overriding errno when logging errors
  (bsc#1012628).
- netfilter: avoid ipv6 -> nf_defrag_ipv6 module dependency
  (bsc#1012628).
- selftests/bpf: Fix segmentation fault in test_progs
  (bsc#1012628).
- drm/amd/display: Switch to immediate mode for updating
  infopackets (bsc#1012628).
- drm/amd/display: Fix LFC multiplier changing erratically
  (bsc#1012628).
- drm/amd/powerplay: correct UVD/VCE PG state on custom pptable
  uploading (bsc#1012628).
- drm/amd/powerplay: correct Vega20 cached smu feature state
  (bsc#1012628).
- spi: stm32: always perform registers configuration prior to
  transfer (bsc#1012628).
- spi: stm32: fix stm32_spi_prepare_mbr in case of odd clk_rate
  (bsc#1012628).
- spi: stm32: fix fifo threshold level in case of short transfer
  (bsc#1012628).
- spi: stm32h7: fix race condition at end of transfer
  (bsc#1012628).
- fs: prevent BUG_ON in submit_bh_wbc() (bsc#1012628).
- ext4: correctly restore system zone info when remount fails
  (bsc#1012628).
- ext4: handle error of ext4_setup_system_zone() on remount
  (bsc#1012628).
- ext4: handle option set by mount flags correctly (bsc#1012628).
- jbd2: abort journal if free a async write error metadata buffer
  (bsc#1012628).
- ext4: abort the filesystem if failed to async write metadata
  buffer (bsc#1012628).
- drm/virtio: fix memory leak in virtio_gpu_cleanup_object()
  (bsc#1012628).
- ext4: skip non-loaded groups at cr=0/1 when scanning for good
  groups (bsc#1012628).
- ext4: handle read only external journal device (bsc#1012628).
- ext4: don't BUG on inconsistent journal feature (bsc#1012628).
- jbd2: make sure jh have b_transaction set in
  refile/unfile_buffer (bsc#1012628).
- spi: stm32: clear only asserted irq flags on interrupt
  (bsc#1012628).
- video: fbdev: controlfb: Fix build for COMPILE_TEST=y &&
  PPC_PMAC=n (bsc#1012628).
- usb: gadget: f_tcm: Fix some resource leaks in some error paths
  (bsc#1012628).
- vdpa: ifcvf: free config irq in ifcvf_free_irq() (bsc#1012628).
- vdpa: ifcvf: return err when fail to request config irq
  (bsc#1012628).
- i2c: rcar: in slave mode, clear NACK earlier (bsc#1012628).
- i2c: core: Don't fail PRP0001 enumeration when no ID table exist
  (bsc#1012628).
- drm/etnaviv: always start/stop scheduler in timeout processing
  (bsc#1012628).
- habanalabs: Fix memory corruption in debugfs (bsc#1012628).
- null_blk: fix passing of REQ_FUA flag in null_handle_rq
  (bsc#1012628).
- nvme: multipath: round-robin: fix single non-optimized path case
  (bsc#1012628).
- nvme-fc: Fix wrong return value in __nvme_fc_init_request()
  (bsc#1012628).
- nvmet: fix a memory leak (bsc#1012628).
- blkcg: fix memleak for iolatency (bsc#1012628).
- blk-mq: insert request not through ->queue_rq into sw/scheduler
  queue (bsc#1012628).
- hwmon: (nct7904) Correct divide by 0 (bsc#1012628).
- bfq: fix blkio cgroup leakage v4 (bsc#1012628).
- block: Fix page_is_mergeable() for compound pages (bsc#1012628).
- drm/msm/adreno: fix updating ring fence (bsc#1012628).
- block: virtio_blk: fix handling single range discard request
  (bsc#1012628).
- block: respect queue limit of max discard segment (bsc#1012628).
- nfsd: fix oops on mixed NFSv4/NFSv3 client access (bsc#1012628).
- ALSA: usb-audio: Add capture support for Saffire 6 (USB 1.1)
  (bsc#1012628).
- cpufreq: intel_pstate: Fix EPP setting via sysfs in active mode
  (bsc#1012628).
- PM / devfreq: Fix the wrong end with semicolon (bsc#1012628).
- PCI: qcom: Add missing reset for ipq806x (bsc#1012628).
- PCI: qcom: Change duplicate PCI reset to phy reset
  (bsc#1012628).
- PCI: qcom: Add missing ipq806x clocks in PCIe driver
  (bsc#1012628).
- net: openvswitch: introduce common code for flushing flows
  (bsc#1012628).
- arm64: Fix __cpu_logical_map undefined issue (bsc#1012628).
- efi: provide empty efi_enter_virtual_mode implementation
  (bsc#1012628).
- pinctrl: mediatek: fix build for tristate changes (bsc#1012628).
- pinctrl: mediatek: avoid virtual gpio trying to set reg
  (bsc#1012628).
- brcmfmac: Set timeout value when configuring power save
  (bsc#1012628).
- mmc: sdhci-of-arasan: fix timings allocation code (bsc#1012628).
- USB: sisusbvga: Fix a potential UB casued by left shifting a
  negative value (bsc#1012628).
- dmaengine: idxd: fix PCI_MSI build errors (bsc#1012628).
- powerpc/spufs: add CONFIG_COREDUMP dependency (bsc#1012628).
- KVM: arm64: Fix symbol dependency in __hyp_call_panic_nvhe
  (bsc#1012628).
- drm/amd/display: fix compilation error on allmodconfig
  (bsc#1012628).
- drm/amd/display: change global buffer to local buffer
  (bsc#1012628).
- media: i2c: imx290: fix reset GPIO pin handling (bsc#1012628).
- media: davinci: vpif_capture: fix potential double free
  (bsc#1012628).
- hugetlbfs: prevent filesystem stacking of hugetlbfs
  (bsc#1012628).
- EDAC/ie31200: Fallback if host bridge device is already
  initialized (bsc#1012628).
- i2c: i801: Add support for Intel Tiger Lake PCH-H (bsc#1012628).
- scsi: fcoe: Memory leak fix in fcoe_sysfs_fcf_del()
  (bsc#1012628).
- ceph: do not access the kiocb after aio requests (bsc#1012628).
- ceph: fix potential mdsc use-after-free crash (bsc#1012628).
- netfilter: nf_tables: report EEXIST on overlaps (bsc#1012628).
- scsi: iscsi: Do not put host in iscsi_set_flashnode_param()
  (bsc#1012628).
- btrfs: make btrfs_qgroup_check_reserved_leak take btrfs_inode
  (bsc#1012628).
- btrfs: file: reserve qgroup space after the hole punch range
  is locked (bsc#1012628).
- locking/lockdep: Fix overflow in presentation of average
  lock-time (bsc#1012628).
- drm/nouveau: Fix reference count leak in
  nouveau_connector_detect (bsc#1012628).
- drm/nouveau: fix reference count leak in nv50_disp_atomic_commit
  (bsc#1012628).
- drm/nouveau/drm/noveau: fix reference count leak in
  nouveau_fbcon_open (bsc#1012628).
- f2fs: fix use-after-free issue (bsc#1012628).
- HID: quirks: add NOGET quirk for Logitech GROUP (bsc#1012628).
- ASoC: Intel: sof_sdw_rt711: remove properties in card remove
  (bsc#1012628).
- cec-api: prevent leaking memory through hole in structure
  (bsc#1012628).
- gpu: host1x: Put gather's BO on pinning error (bsc#1012628).
- ALSA: hda: Add support for Loongson 7A1000 controller
  (bsc#1012628).
- mips/vdso: Fix resource leaks in genvdso.c (bsc#1012628).
- rtlwifi: rtl8192cu: Prevent leaking urb (bsc#1012628).
- ARM: dts: ls1021a: output PPS signal on FIPER2 (bsc#1012628).
- PCI: Fix pci_create_slot() reference count leak (bsc#1012628).
- omapfb: fix multiple reference count leaks due to
  pm_runtime_get_sync (bsc#1012628).
- MIPS: KVM: Limit Trap-and-Emulate to MIPS32R2 only
  (bsc#1012628).
- f2fs: fix error path in do_recover_data() (bsc#1012628).
- f2fs: remove write attribute of main_blkaddr sysfs node
  (bsc#1012628).
- selftests/powerpc: Purge extra count_pmc() calls of ebb
  selftests (bsc#1012628).
- scsi: target: Fix xcopy sess release leak (bsc#1012628).
- xfs: Don't allow logging of XFS_ISTALE inodes (bsc#1012628).
- scsi: lpfc: Fix shost refcount mismatch when deleting vport
  (bsc#1012628).
- drm/amdgpu/pm: fix ref count leak when pm_runtime_get_sync fails
  (bsc#1012628).
- drm/amdkfd: fix ref count leak when pm_runtime_get_sync fails
  (bsc#1012628).
- drm/amdgpu/fence: fix ref count leak when pm_runtime_get_sync
  fails (bsc#1012628).
- drm/amdgpu/display: fix ref count leak when pm_runtime_get_sync
  fails (bsc#1012628).
- drm/amdgpu: fix ref count leak in amdgpu_display_crtc_set_config
  (bsc#1012628).
- drm/amd/display: fix ref count leak in amdgpu_drm_ioctl
  (bsc#1012628).
- drm/amdgpu: fix ref count leak in amdgpu_driver_open_kms
  (bsc#1012628).
- drm/radeon: fix multiple reference count leak (bsc#1012628).
- drm/amdkfd: Fix reference count leaks (bsc#1012628).
- platform/chrome: cros_ec_sensorhub: Fix EC timestamp overflow
  (bsc#1012628).
- iommu/iova: Don't BUG on invalid PFNs (bsc#1012628).
- mfd: intel-lpss: Add Intel Tiger Lake PCH-H PCI IDs
  (bsc#1012628).
- scsi: target: tcmu: Fix crash on ARM during cmd completion
  (bsc#1012628).
- staging: rts5208: fix memleaks on error handling paths in probe
  (bsc#1012628).
- blktrace: ensure our debugfs dir exists (bsc#1012628).
- gcc-plugins/stackleak: Don't instrument itself (bsc#1012628).
- media: pci: ttpci: av7110: fix possible buffer overflow caused
  by bad DMA value in debiirq() (bsc#1012628).
- powerpc/xive: Ignore kmemleak false positives (bsc#1012628).
- arm64: dts: qcom: msm8916: Pull down PDM GPIOs during sleep
  (bsc#1012628).
- mfd: intel-lpss: Add Intel Emmitsburg PCH PCI IDs (bsc#1012628).
- ASoC: tegra: Fix reference count leaks (bsc#1012628).
- ASoC: img-parallel-out: Fix a reference count leak
  (bsc#1012628).
- ASoC: img: Fix a reference count leak in img_i2s_in_set_fmt
  (bsc#1012628).
- EDAC/mc: Call edac_inc_ue_error() before panic (bsc#1012628).
- drm/amdgpu: fix RAS memory leak in error case (bsc#1012628).
- ALSA: hda/hdmi: Use force connectivity quirk on another HP
  desktop (bsc#1012628).
- ALSA: hda/realtek: Fix pin default on Intel NUC 8 Rugged
  (bsc#1012628).
- ALSA: pci: delete repeated words in comments (bsc#1012628).
- ALSA: hda/hdmi: Add quirk to force connectivity (bsc#1012628).
- ASoC: intel/skl/hda - fix probe regression on systems without
  i915 (bsc#1012628).
- khugepaged: khugepaged_test_exit() check mmget_still_valid()
  (bsc#1012628).
- commit 6e8d15c
- net/packet: fix overflow in tpacket_rcv (CVE-2020-14386
  bsc#1176069).
- commit eba56bd
- fs/cachefiles: Drop superfluous readpages aops NULL check
  (bsc#1175245).
- commit 34111a4
- Linux 5.8.5 (bsc#1012628).
- binfmt_flat: revert "binfmt_flat: don't offset the data start"
  (bsc#1012628).
- io_uring: fix missing ->mm on exit (bsc#1012628).
- netlink: fix state reallocation in policy export (bsc#1012628).
- ethtool: Don't omit the netlink reply if no features were
  changed (bsc#1012628).
- ethtool: Account for hw_features in netlink interface
  (bsc#1012628).
- ethtool: Fix preserving of wanted feature bits in netlink
  interface (bsc#1012628).
- net: ena: Make missed_tx stat incremental (bsc#1012628).
- tipc: fix uninit skb->data in tipc_nl_compat_dumpit()
  (bsc#1012628).
- tipc: call rcu_read_lock() in tipc_aead_encrypt_done()
  (bsc#1012628).
- net/smc: Prevent kernel-infoleak in __smc_diag_dump()
  (bsc#1012628).
- net: sctp: Fix negotiation of the number of data streams
  (bsc#1012628).
- net/sched: act_ct: Fix skb double-free in
  tcf_ct_handle_fragments() error flow (bsc#1012628).
- net: qrtr: fix usage of idr in port assignment to socket
  (bsc#1012628).
- net: nexthop: don't allow empty NHA_GROUP (bsc#1012628).
- net: Fix potential wrong skb->protocol in skb_vlan_untag()
  (bsc#1012628).
- gre6: Fix reception with IP6_TNL_F_RCV_DSCP_COPY (bsc#1012628).
- commit 4d7a832

==== kuberlr ====
Version update (0.3.0 -> 0.3.1)

- Update to version 0.3.1:
  * Prepare for release of v0.3.1
  * fix: set progress bar desc to shorter string
  * Update Changelog
  * Update README to mention all the platforms supported
  * GitHub actions: enable test matrix
  * Build kuberlr binary for windows
  * windows: fix path construction for download dir
  * windows: require .exe extension on windows
  * windows: add filename extension utils

==== kubernetes ====
Version update (1.19.0 -> 1.19.1)
Subpackages: kubernetes-client kubernetes-kubeadm kubernetes-kubelet

- Bump kubernetes to 1.19.1, etcd to 3.4.13

==== kubernetes1.19 ====
Version update (1.19.0 -> 1.19.1)
Subpackages: kubernetes1.19-client kubernetes1.19-client-common kubernetes1.19-kubeadm kubernetes1.19-kubelet kubernetes1.19-kubelet-common

- Update to version 1.19.1:
  * build/lib/release: Explicitly use '--platform' in building server images
  * build/common.sh: Remove extraneous reference to debian-base image
  * Update default etcd server to 3.4.13
  * kubeadm: remove the CoreDNS check for supported image digests
  * Update snapshot controller to use k8s.gcr.io
  * kubeadm: make the scheduler and KCM connect to local endpoint
  * Fixed reflector not recovering from "Too large resource version" errors with API servers 1.17.0-1.18.5
  * let panics propagate up when processLoop panic
  * kubeadm: Fix `upgrade plan` for air-gapped setups
  * Add impersonated user to system:authenticated group
  * cleanup: print warning message after timeout
  * Revert "cleanup: decrease log level from warn to v3"
  * cleanup: decrease log level from warn to v3
  * Remove duplicate nodeSelector
  * test(kubelet): add a regression test to verify kubelet would not panic
  * fix(kubelet): protect `containerCleanupInfos` from concurrent map writes
  * fix(azure): check error returned by scaleSet.getVMSS
  * Fix issue on skipTest in storage suits
  * Use NLB Subnet CIDRs instead of VPC CIDRs in updateInstanceSecurityGroupsForNLB
  * Add PR #89069 Action Required
  * Update CHANGELOG/CHANGELOG-1.19.md for v1.19.0

==== libseccomp ====
Version update (2.4.3 -> 2.5.0)

- Do not rely on gperf: pass GPERF=/bin/true to configure and
  remove gperf BuildRequires. The syscalls.perf file it would
  generate is part of the tarball already.
- testsuite-riscv64-missing-syscalls.patch: Fix testsuite failure on
  riscv64
- Ignore failure of tests/52-basic-load on qemu linux-user emulation
- Update to release 2.5.0
  * Add support for the seccomp user notifications, see the
    seccomp_notify_alloc(3), seccomp_notify_receive(3),
    seccomp_notify_respond(3) manpages for more information
  * Add support for new filter optimization approaches, including a balanced
    tree optimization, see the SCMP_FLTATR_CTL_OPTIMIZE filter attribute for
    more information
  * Add support for the 64-bit RISC-V architecture
  * Performance improvements when adding new rules to a filter thanks to the
    use of internal shadow transactions and improved syscall lookup tables
  * Properly document the libseccomp API return values and include them in the
    stable API promise
  * Improvements to the s390 and s390x multiplexed syscall handling
  * Multiple fixes and improvements to the libseccomp manpages
  * Moved from manually maintained syscall tables to an automatically generated
    syscall table in CSV format
  * Update the syscall tables to Linux v5.8.0-rc5
  * Python bindings and build now default to Python 3.x
  * Improvements to the tests have boosted code coverage to over 93%
- libseccomp.keyring: replaced by Paul Moore <pmoore@redhat.com> key.

==== libxml2 ====
Subpackages: libxml2-2 libxml2-tools

- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch

==== multipath-tools ====
Subpackages: kpartx libmpath0

- Missing past changelog bug references:
  * 0.7.3+10+suse.70ccb55b0439:
  Patch series for NVMe discovery and failover (bsc#1038865,
  bsc#1057820)
  * 0.7.9+109+suse.203c1cf
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)

==== openldap2 ====
Version update (2.4.52 -> 2.4.53)

- updated to 2.4.53
  OpenLDAP 2.4.53 (2020/09/07)
  Added slapd syncrepl additional SYNC logging (ITS#9043)
  Fixed slapd syncrepl segfault on NULL cookie on REFRESH (ITS#9282)
  Fixed slapd syncrepl to use fresh connection on REFRESH fallback (ITS#9338)
  Fixed slapo-ppolicy race condition for pwdFailureTime (ITS#9302,ITS#9334)
  Build
    Require OpenSSL 1.0.2 or later (ITS#9323)
    Fixed libldap compilation issue with broken C compilers (ITS#9332)

==== permissions ====
Version update (1550_20200904 -> 1550_20200909)
Subpackages: chkstat permissions-config

- Update to version 20200909:
  * screen: remove /run/uscreens covered by systemd-tmpfiles (bsc#1171879)

==== podman ====
Subpackages: podman-cni-config

- Cleanup %install section to use "make install"
- install missing systemd units for the new Rest API (bsc#1175957)
  and a few man-pages that where missing before
- Drop varlink API related bits (in favor of the new API)
- fix install location for zsh completions

==== python-networkx ====
Version update (2.4 -> 2.5)

- Update to 2.5:
  * Highlights:
    + Dropped support for Python 3.5.
    + add Pathlib support to work with files.
    + improve performance.
    + Updated docs and tests.
    + Removed code designed to work with Python 2.
  * New Functions:
    + lukes_partitioning
    + triadic analysis functions
    + functions for trophic levels analysis
    + d_separated
    + is_regular and other regular graph measures
    + graph_hash using Weisfeiler Lehman methods
    + common_neighbor_centrality (CCPA link prediction)
    + max_weight_clique
    + path_weight and is_path
    + rescale_layout_dict
    + junction_tree
  * New generators:
    + paley_graph
    + interval_graph
  * New layouts:
    + multipartite_layout
- To see improvements, API changes and deprecations, please visit:
  https://networkx.github.io/documentation/stable/release/release_2.5.html
- Dropped patches already included by upstream:
  * numpy-38-test.patch
  * matplotlib.patch
  * networkx-pr4012-use-mpl.patch
- Add patch to remove a failing test in i586. The issue was
  submitted to upstream at gh#networkx/networkx#4203:
  * disable-test-failing-in-i586.patch

==== python-pyzmq ====

- Add timeout to tests (boo#1176232)

==== raspberrypi-firmware ====
Version update (2020.07.31 -> 2020.09.03)

- Update to baec4d28b (2020-09-03) (bsc#1176202)
  * firmware: Update to latest master

==== raspberrypi-firmware-config ====
Version update (2020.07.31 -> 2020.09.03)

- Update to baec4d28b (2020-09-03) (bsc#1176202)
  * firmware: Update to latest master

==== salt ====
Subpackages: python3-salt salt-master salt-minion salt-standalone-formulas-configuration

- Reintroduces the patches from
  opensuse-3000.2-virt-backports-236.patch coming from Salt 3001
- Added:
  * backport-virt-patches-from-3001-256.patch
- Adding missing virt backports to 3000.3
- Added:
  * opensuse-3000.2-virt-backports-236-257.patch
- Do not raise StreamClosedError traceback but only log it (bsc#1175549)
- Added:
  * do-not-raise-streamclosederror-traceback-but-only-lo.patch
- Take care of failed, skipped and unreachable tasks and propagate "retcode" (bsc#1173911) (bsc#1173909)
- Added:
  * ansiblegate-take-care-of-failed-skipped-and-unreacha.patch

==== sudo ====

- Modified the secure_path to include the other two default paths
  which are commonly available to $user. This will offer a better
  and more consistent UX.

==== xfsprogs ====
Version update (5.7.0 -> 5.8.0)

- update to v5.8.0:
  * xfs_db: set b_ops to NULL for types without verifiers
  * mkfs: allow setting dax flag on root directory
  * xfs_quota: improve reporting and messages
  * xfs_db: use correct inode to set inode type
  * xfs_db: fix nlink usage in check
  * xfs_db: report the inode dax flag
  * man: update mkfs.xfs inode flag option documentation
  * xfsprogs: move custom interface def'ns to new header
  * xfs_repair: check quota counters
  * xfs_io: fix -D vs -R handling
  * libxfs changes merged from kernel 5.8

==== yast2 ====
Version update (4.3.24 -> 4.3.25)

- Enhance GPG module with symmetric encryption
  (related to bsc#1176336)
- add new shared password dialog
- 4.3.25

==== yomi-formula ====
Version update (0.0.1+git.1595952633.b300be2 -> 0.0.1+git.1598948600.9a9eab0)

- Update to version 0.0.1+git.1598948600.9a9eab0:
  * Replace fdisk with parted in partitioned