Packages changed:
  bash
  busybox
  ca-certificates (2+git20200129.d1a437d -> 2+git20201002.34daf7f)
  chrony (3.5 -> 3.5.1)
  cni (0.7.1 -> 0.8.0)
  expat (2.2.9 -> 2.2.10)
  glib2 (2.64.5 -> 2.64.6)
  haproxy (2.2.3+git0.0e58a340d -> 2.2.4+git0.de456726d)
  installation-images-MicroOS (16.22 -> 16.23)
  iproute2
  kernel-default-base (5.8.12 -> 5.8.14)
  kernel-firmware (20200916 -> 20201005)
  kernel-source (5.8.12 -> 5.8.14)
  libproxy
  libsolv
  libzypp (17.25.1 -> 17.25.2)
  numactl (2.0.13 -> 2.0.14)
  p11-kit
  patterns-base
  popt
  procps
  rdma-core (27.1 -> 31.0)
  rook (1.4.3+git18.g42e1675e -> 1.4.5+git5.ge3c837f8)
  sysuser-tools
  wpa_supplicant

=== Details ===

==== bash ====

- dot.profile: moved example for user specific LANG setting
  from .profile to .i18n (x11-tools package) skeleton file (boo#1158724)

==== busybox ====

- Disable RPM builtin, did become pretty useless
- Disable popmaildir and mime utilities

==== ca-certificates ====
Version update (2+git20200129.d1a437d -> 2+git20201002.34daf7f)

- Update to version 2+git20201002.34daf7f:
  * Use relative symlink for /etc/ssl/certs (boo#1175340)

==== chrony ====
Version update (3.5 -> 3.5.1)
Subpackages: chrony-pool-openSUSE

- Adjust and rename the sysconfig file, so that it matches the
  expectations of chronyd.service (bsc#1173277).
- Update to 3.5.1:
  * Create new file when writing pidfile (CVE-2020-14367, bsc#1174911)

==== cni ====
Version update (0.7.1 -> 0.8.0)

- Update to version 0.8.0:
  * Specification and Conventions changes
    + docs: add ips and mac to well-known capabilities
    + add interface name validation
    + Add GUID to well known Capabilities
    + Add DeviceID attribute to RuntimeConfig
    + Typo fixes for infiniband GUID
    + Fix linting issues in docs, add headers to json example, update errors into table
  * Documentation changes
    + Update cnitool docs
    + Remove extra ',' chars which makes conflist examples invalid.
  * libcni changes
    + Remove Result.String method
    + libcni: add config caching [v2]
    + clean up : fix staticcheck warnings
    + libcni: add InitCNIConfigWithCacheDir() and deprecate RuntimeConfig.CacheDir
    + skel: clean up errors in skel and add some well-known error codes
    + libcni: find plugin in exec
    + validate containerID and networkName
    + skel: remove needless functions and types
    + libcni: also cache IfName
    + libcni: fix cache file 'result' key name
    + Bump Go version to 1.13
    + When CNI version isn't supplied in config, use default.
    + intercept netplugin std error
    + invoke: capture and return stderr if plugin exits unexpectedly
    + Retry exec commands on text file busy

==== expat ====
Version update (2.2.9 -> 2.2.10)

- Update to 2.2.10:
  * Bug fixes:
  - Fix undefined behavior during parsing caused by pointer
    arithmetic with NULL pointers
  - Fix reading uninitialized variable during parsing
  - xmlwf: Add missing check for malloc NULL return
  * Other changes:
  - xmlwf: Document exit codes in xmlwf manpage and exit with code 3
    (rather than code 1) for output errors when used with "-d DIRECTORY"
  - Autotools: Use -Werror while configure tests the compiler for
    supported compile flags to avoid false positives
  - Autotools: Improve handling of user (C|CPP|CXX|LD)FLAGS, e.g.
    ensure that they have the last word over flags added while
    running ./configure
  - CMake: Create libexpatw.{dll,so} and expatw.pc (with emphasis
    on suffix "w") with -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Detect and deny unsupported build combinations
    involving -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Install pre-compiled shipped xmlwf.1 manpage in case
    of -DEXPAT_BUILD_DOCS=OFF
  - CMake: Fix use of Expat by means of add_subdirectory
  - CMake: Keep expat target name constant at "expat" (i.e. refrain
    from using the target name to control build artifact filenames)
  - CMake: Expose man page compilation as target "xmlwf-manpage"
  - CMake: Introduce option EXPAT_BUILD_PKGCONFIG to control
    generation of pkg-config file "expat.pc"
  - CMake: Add minimalistic support for building binary packages
    with CMake target "package"; based on CPack
  - CMake: Add option -DEXPAT_OSSFUZZ_BUILD=(ON|OFF) with default
    OFF to build fuzzer code against OSS-Fuzz and related
    environment variable LIB_FUZZING_ENGINE
  - Fix testsuite for -DEXPAT_DTD=OFF and -DEXPAT_NS=OFF
  - Address compiler warnings
  - Address pngcheck warnings with doc/*.png images: Version info
    bumped from 7:11:6 to 7:12:6

==== glib2 ====
Version update (2.64.5 -> 2.64.6)
Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0

- Update to version 2.64.6:
  + Bugs fixed: glgo#GNOME/GLib#2194, glgo#GNOME/GLib#2209,
    glgo#GNOME/GLib!1633, glgo#GNOME/GLib!1634,
    glgo#GNOME/GLib!1656, glgo#GNOME/GLib!1659,
    glgo#GNOME/GLib!1666, glgo#GNOME/GLib!1672.
  + Updated translations.

==== haproxy ====
Version update (2.2.3+git0.0e58a340d -> 2.2.4+git0.de456726d)

- use parallel build
- Update to version 2.2.4+git0.de456726d:
  * [RELEASE] Released version 2.2.4
  * REGTEST: make map_regm_with_backref require 1.7
  * REGTEST: make abns_socket.vtc require 1.8
  * REGTEST: make agent-check.vtc require 1.8
  * REGTEST: fix host part in balance-uri-path-only.vtc
  * BUG/MINOR: ssl/crt-list: exit on warning out of crtlist_parse_line()
  * DOC: agent-check: fix typo in "fail" word expected reply
  * REGTESTS: use "command" instead of "which" for better POSIX compatibility
  * BUILD: trace: include tools.h
  * BUG/MEDIUM: listeners: do not pause foreign listeners
  * REGTESTS: add a few load balancing tests
  * MINOR: backend: add a new "path-only" option to "balance uri"
  * MINOR: backend: make the "whole" option of balance uri take only one bit
  * MINOR: h2/trace: also display the remaining frame length in traces
  * BUG/MINOR: Fix memory leaks cfg_parse_peers
  * BUG/MEDIUM: h2: report frame bits only for handled types
  * BUG/MINOR: config: Fix memory leak on config parse listen
  * BUG/MINOR: http-fetch: Don't set the sample type during the htx prefetch
  * BUG/MINOR: h2/trace: do not display "stream error" after a frame ACK
  * BUG/MINOR: ssl/crt-list: crt-list could end without a \n
  * BUG/MEDIUM: ssl: Don't call ssl_sock_io_cb() directly.
  * BUG/MINOR: server: report correct error message for invalid port on "socks4"
  * BUG/MINOR: ssl: verifyhost is case sensitive
  * BUG/MINOR: Fix type passed of sizeof() for calloc()
  * BUG/MEDIUM: pattern: Renew the pattern expression revision when it is pruned
  * BUILD: threads: better workaround for late loading of libgcc_s

==== installation-images-MicroOS ====
Version update (16.22 -> 16.23)

- merge gh#openSUSE/installation-images#429
- remove dependency on insserv-compat (bsc#1176501)
- remove ia64-specific dependency on ia32el
- remove obsolete kbd_simple script
- convert remaining insserv uses to systemctl calls
- 16.23

==== iproute2 ====

- Add 0001-ip-add-error-reporting-when-RTM_GETNSID-failed.patch

==== kernel-default-base ====
Version update (5.8.12 -> 5.8.14)

- Add cifs

==== kernel-firmware ====
Version update (20200916 -> 20201005)
Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd

- Placeholder for SLE15-SP3 package sync:
  bsc#1143331, bsc#1160204, bsc#1154395 bsc#1155307, jsc#SLE-8379
- Update to version 20201005 (git commit 58d41d0facca):
  * ice: Add comms package file for Intel E800 series driver
  * copy-firmware: Always write Link: entries
  * amdgpu: update vega20 firmware for 20.40
  * amdgpu: update vega12 firmware for 20.40
  * amdgpu: update vega10 firmware for 20.40
  * amdgpu: update renoir firmware for 20.40
  * amdgpu: update raven2 firmware for 20.40
  * amdgpu: update raven firmware for 20.40
  * amdgpu: update picasso firmware for 20.40
  * amdgpu: update navi14 firmware for 20.40
  * amdgpu: update navi12 firmware for 20.40
  * amdgpu: update navi10 firmware for 20.40
  * linux-firmware: Add new VPDMA firmware 1b8.bin
  * QCA : Updated firmware files for WCN3991
- Drop the AMDGPU Picasso workaround (bsc#1174278)
- Update to version 20200928 (git commit b78a66c909c7):
  * linux-firmware: Update firmware for Cadence MHDP8546 DP bridge
  * linux-firmware: Update firmware patch for Intel Bluetooth 7265 (D1)
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.1312
  * linux-firmware: nvidia: move firmware symlinks to WHENCE
  * linux-firmware: move i915 firmware symlinks to WHENCE
  * linux-firmware: move iwlwifi-7265D-10.ucode symlink to WHENCE
  * linux-firmware: Update Marvell Switchdev firmware with ABI changes
- Force bzip2 compression for compatibility (boo#1176981):
  for keeping the compatibility with older distros (like Leap 15.1)
  that can't deal with lzma-compressed rpm files

==== kernel-source ====
Version update (5.8.12 -> 5.8.14)

- Update config files.
  Only run_oldconfig.sh to sync up.
- commit cea47bb
- Linux 5.8.14 (bsc#1012628).
- io_uring: always delete double poll wait entry on match
  (bsc#1012628).
- btrfs: fix filesystem corruption after a device replace
  (bsc#1012628).
- mmc: sdhci: Workaround broken command queuing on Intel GLK
  based IRBIS models (bsc#1012628).
- USB: gadget: f_ncm: Fix NDP16 datagram validation (bsc#1012628).
- Revert "usbip: Implement a match function to fix usbip"
  (bsc#1012628).
- usbcore/driver: Fix specific driver selection (bsc#1012628).
- usbcore/driver: Fix incorrect downcast (bsc#1012628).
- usbcore/driver: Accommodate usbip (bsc#1012628).
- gpio: siox: explicitly support only threaded irqs (bsc#1012628).
- gpio: mockup: fix resource leak in error path (bsc#1012628).
- gpio: tc35894: fix up tc35894 interrupt configuration
  (bsc#1012628).
- gpio: amd-fch: correct logic of GPIO_LINE_DIRECTION
  (bsc#1012628).
- clk: samsung: Keep top BPLL mux on Exynos542x enabled
  (bsc#1012628).
- clk: socfpga: stratix10: fix the divider for the
  emac_ptp_free_clk (bsc#1012628).
- scsi: iscsi: iscsi_tcp: Avoid holding spinlock while calling
  getpeername() (bsc#1012628).
- i2c: i801: Exclude device from suspend direct complete
  optimization (bsc#1012628).
- Input: i8042 - add nopnp quirk for Acer Aspire 5 A515
  (bsc#1012628).
- iio: adc: qcom-spmi-adc5: fix driver name (bsc#1012628).
- ftrace: Move RCU is watching check after recursion check
  (bsc#1012628).
- tracing: Fix trace_find_next_entry() accounting of temp buffer
  size (bsc#1012628).
- memstick: Skip allocating card when removing host (bsc#1012628).
- xen/events: don't use chip_data for legacy IRQs (bsc#1012628).
- clocksource/drivers/timer-gx6605s: Fixup counter reload
  (bsc#1012628).
- vboxsf: Fix the check for the old binary mount-arguments struct
  (bsc#1012628).
- mt76: mt7915: use ieee80211_free_txskb to free tx skbs
  (bsc#1012628).
- libbpf: Remove arch-specific include path in Makefile
  (bsc#1012628).
- drivers/net/wan/hdlc_fr: Add needed_headroom for PVC devices
  (bsc#1012628).
- Revert "wlcore: Adding suppoprt for IGTK key in wlcore driver"
  (bsc#1012628).
- drm/sun4i: mixer: Extend regmap max_register (bsc#1012628).
- hv_netvsc: Cache the current data path to avoid duplicate call
  and message (bsc#1012628).
- net: dec: de2104x: Increase receive ring size for Tulip
  (bsc#1012628).
- rndis_host: increase sleep time in the query-response loop
  (bsc#1012628).
- nvme-pci: disable the write zeros command for Intel 600P/P3100
  (bsc#1012628).
- nvme-core: get/put ctrl and transport module in
  nvme_dev_open/release() (bsc#1012628).
- fuse: fix the ->direct_IO() treatment of iov_iter (bsc#1012628).
- drivers/net/wan/lapbether: Make skb->protocol consistent with
  the header (bsc#1012628).
- drivers/net/wan/hdlc: Set skb->protocol before transmitting
  (bsc#1012628).
- mac80211: Fix radiotap header channel flag for 6GHz band
  (bsc#1012628).
- mac80211: do not allow bigger VHT MPDUs than the hardware
  supports (bsc#1012628).
- tracing: Make the space reserved for the pid wider
  (bsc#1012628).
- tools/io_uring: fix compile breakage (bsc#1012628).
- io_uring: mark statx/files_update/epoll_ctl as non-SQPOLL
  (bsc#1012628).
- cpuidle: psci: Fix suspicious RCU usage (bsc#1012628).
- spi: fsl-espi: Only process interrupts for expected events
  (bsc#1012628).
- net: dsa: felix: fix some key offsets for IP4_TCP_UDP VCAP
  IS2 entries (bsc#1012628).
- nvme-pci: fix NULL req in completion handler (bsc#1012628).
- nvme-fc: fail new connections to a deleted host or remote port
  (bsc#1012628).
- scripts/kallsyms: skip ppc compiler stub *.long_branch.* /
  * .plt_branch.* (bsc#1012628).
- gpio: sprd: Clear interrupt when setting the type as edge
  (bsc#1012628).
- phy: ti: am654: Fix a leak in serdes_am654_probe()
  (bsc#1012628).
- pinctrl: mvebu: Fix i2c sda definition for 98DX3236
  (bsc#1012628).
- nfs: Fix security label length not being reset (bsc#1012628).
- NFSv4.2: fix client's attribute cache management for
  copy_file_range (bsc#1012628).
- pNFS/flexfiles: Ensure we initialise the mirror bsizes correctly
  on read (bsc#1012628).
- clk: tegra: Always program PLL_E when enabled (bsc#1012628).
- clk: tegra: Fix missing prototype for
  tegra210_clk_register_emc() (bsc#1012628).
- dmaengine: dmatest: Prevent to run on misconfigured channel
  (bsc#1012628).
- clk: samsung: exynos4: mark 'chipid' clock as CLK_IGNORE_UNUSED
  (bsc#1012628).
- scsi: target: Fix lun lookup for TARGET_SCF_LOOKUP_LUN_FROM_TAG
  case (bsc#1012628).
- iommu/exynos: add missing put_device() call in
  exynos_iommu_of_xlate() (bsc#1012628).
- gpio: pca953x: Fix uninitialized pending variable (bsc#1012628).
- gpio/aspeed-sgpio: enable access to all 80 input & output sgpios
  (bsc#1012628).
- gpio/aspeed-sgpio: don't enable all interrupts by default
  (bsc#1012628).
- gpio: aspeed: fix ast2600 bank properties (bsc#1012628).
- i2c: cpm: Fix i2c_ram structure (bsc#1012628).
- i2c: npcm7xx: Clear LAST bit after a failed transaction
  (bsc#1012628).
- Input: trackpoint - enable Synaptics trackpoints (bsc#1012628).
- blk-mq: call commit_rqs while list empty but error happen
  (bsc#1012628).
- scripts/dtc: only append to HOST_EXTRACFLAGS instead of
  overwriting (bsc#1012628).
- autofs: use __kernel_write() for the autofs pipe writing
  (bsc#1012628).
- pinctrl: qcom: sm8250: correct sdc2_clk (bsc#1012628).
- pinctrl: mediatek: check mtk_is_virt_gpio input parameter
  (bsc#1012628).
- gpio: pca953x: Correctly initialize registers 6 and 7 for
  PCA957x (bsc#1012628).
- iommu/amd: Fix the overwritten field in IVMD header
  (bsc#1012628).
- pipe: remove pipe_wait() and fix wakeup race with splice
  (bsc#1012628).
- random32: Restore __latent_entropy attribute on net_rand_state
  (bsc#1012628).
- gpiolib: Fix line event handling in syscall compatible mode
  (bsc#1012628).
- drm/i915/gvt: Fix port number for BDW on EDID region setup
  (bsc#1012628).
- scsi: sd: sd_zbc: Fix handling of host-aware ZBC disks
  (bsc#1012628).
- scsi: sd: sd_zbc: Fix ZBC disk initialization (bsc#1012628).
- epoll: do not insert into poll queues until all sanity checks
  are done (bsc#1012628).
- epoll: replace ->visited/visited_list with generation count
  (bsc#1012628).
- epoll: EPOLL_CTL_ADD: close the race in decision to take fast
  path (bsc#1012628).
- ep_create_wakeup_source(): dentry name can change under
  you.. (bsc#1012628).
- commit e882d6e
- platform/x86: intel-vbtn: Switch to an allow-list for
  SW_TABLET_MODE reporting (bsc#1175599).
- commit 5672f81
- drm/amdgpu: restore proper ref count in
  amdgpu_display_crtc_set_config (git-fixes).
- commit 08db7a3
- Linux 5.8.13 (bsc#1012628).
- device_cgroup: Fix RCU list debugging warning (bsc#1012628).
- ASoC: pcm3168a: ignore 0 Hz settings (bsc#1012628).
- ASoC: wm8994: Skip setting of the WM8994_MICBIAS register for
  WM1811 (bsc#1012628).
- ASoC: wm8994: Ensure the device is resumed in wm89xx_mic_detect
  functions (bsc#1012628).
- ASoC: Intel: bytcr_rt5640: Add quirk for MPMAN Converter9 2-in-1
  (bsc#1012628).
- clk: versatile: Add of_node_put() before return statement
  (bsc#1012628).
- RISC-V: Take text_mutex in ftrace_init_nop() (bsc#1012628).
- i2c: aspeed: Mask IRQ status to relevant bits (bsc#1012628).
- s390/init: add missing __init annotations (bsc#1012628).
- lockdep: fix order in trace_hardirqs_off_caller() (bsc#1012628).
- EDAC/ghes: Check whether the driver is on the safe list
  correctly (bsc#1012628).
- drm/amdkfd: fix a memory leak issue (bsc#1012628).
- drm/amd/display: Don't use DRM_ERROR() for DTM add topology
  (bsc#1012628).
- drm/amd/display: update nv1x stutter latencies (bsc#1012628).
- drm/amdgpu/dc: Require primary plane to be enabled whenever
  the CRTC is (bsc#1012628).
- drm/amd/display: Don't log hdcp module warnings in dmesg
  (bsc#1012628).
- objtool: Fix noreturn detection for ignored functions
  (bsc#1012628).
- i2c: mediatek: Send i2c master code at more than 1MHz
  (bsc#1012628).
- riscv: Fix Kendryte K210 device tree (bsc#1012628).
- ieee802154: fix one possible memleak in ca8210_dev_com_init
  (bsc#1012628).
- ieee802154/adf7242: check status of adf7242_read_reg
  (bsc#1012628).
- clocksource/drivers/h8300_timer8: Fix wrong return value in
  h8300_8timer_init() (bsc#1012628).
- mwifiex: Increase AES key storage size to 256 bits
  (bsc#1012628).
- batman-adv: bla: fix type misuse for backbone_gw hash indexing
  (bsc#1012628).
- libbpf: Fix build failure from uninitialized variable warning
  (bsc#1012628).
- atm: eni: fix the missed pci_disable_device() for eni_init_one()
  (bsc#1012628).
- batman-adv: mcast/TT: fix wrongly dropped or rerouted packets
  (bsc#1012628).
- netfilter: ctnetlink: add a range check for l3/l4 protonum
  (bsc#1012628).
- netfilter: ctnetlink: fix mark based dump filtering regression
  (bsc#1012628).
- netfilter: conntrack: nf_conncount_init is failing with IPv6
  disabled (bsc#1012628).
- netfilter: nft_meta: use socket user_ns to retrieve skuid and
  skgid (bsc#1012628).
- mac802154: tx: fix use-after-free (bsc#1012628).
- bpf: Fix clobbering of r2 in bpf_gen_ld_abs (bsc#1012628).
- tools/libbpf: Avoid counting local symbols in ABI check
  (bsc#1012628).
- drm/vc4/vc4_hdmi: fill ASoC card owner (bsc#1012628).
- net: qed: Disable aRFS for NPAR and 100G (bsc#1012628).
- net: qede: Disable aRFS for NPAR and 100G (bsc#1012628).
- net: qed: RDMA personality shouldn't fail VF load (bsc#1012628).
- igc: Fix wrong timestamp latency numbers (bsc#1012628).
- igc: Fix not considering the TX delay for timestamps
  (bsc#1012628).
- drm/sun4i: sun8i-csc: Secondary CSC register correction
  (bsc#1012628).
- spi: spi-fsl-dspi: use XSPI mode instead of DMA for DPAA2 SoCs
  (bsc#1012628).
- RDMA/core: Fix ordering of CQ pool destruction (bsc#1012628).
- batman-adv: Add missing include for in_interrupt()
  (bsc#1012628).
- xsk: Fix number of pinned pages/umem size discrepancy
  (bsc#1012628).
- nvme-tcp: fix kconfig dependency warning when !CRYPTO
  (bsc#1012628).
- batman-adv: mcast: fix duplicate mcast packets in BLA backbone
  from LAN (bsc#1012628).
- batman-adv: mcast: fix duplicate mcast packets in BLA backbone
  from mesh (bsc#1012628).
- batman-adv: mcast: fix duplicate mcast packets from BLA backbone
  to mesh (bsc#1012628).
- bpf: Fix a rcu warning for bpffs map pretty-print (bsc#1012628).
- lib80211: fix unmet direct dependendices config warning when
  !CRYPTO (bsc#1012628).
- mac80211: do not disable HE if HT is missing on 2.4 GHz
  (bsc#1012628).
- cfg80211: fix 6 GHz channel conversion (bsc#1012628).
- mac80211: fix 80 MHz association to 160/80+80 AP on 6 GHz
  (bsc#1012628).
- ALSA: asihpi: fix iounmap in error handler (bsc#1012628).
- io_uring: fix openat/openat2 unified prep handling
  (bsc#1012628).
- SUNRPC: Fix svc_flush_dcache() (bsc#1012628).
- regmap: fix page selection for noinc reads (bsc#1012628).
- regmap: fix page selection for noinc writes (bsc#1012628).
- net/mlx5e: mlx5e_fec_in_caps() returns a boolean (bsc#1012628).
- MIPS: Loongson-3: Fix fp register access if MSA enabled
  (bsc#1012628).
- PM / devfreq: tegra30: Disable clock on error in probe
  (bsc#1012628).
- MIPS: Add the missing 'CPU_1074K' into __get_cpu_type()
  (bsc#1012628).
- regulator: axp20x: fix LDO2/4 description (bsc#1012628).
- spi: bcm-qspi: Fix probe regression on iProc platforms
  (bsc#1012628).
- KVM: x86: Reset MMU context if guest toggles CR4.SMAP or CR4.PKE
  (bsc#1012628).
- KVM: SVM: Add a dedicated INVD intercept routine (bsc#1012628).
- mm: validate pmd after splitting (bsc#1012628).
- arch/x86/lib/usercopy_64.c: fix __copy_user_flushcache()
  cache writeback (bsc#1012628).
- x86/irq: Make run_on_irqstack_cond() typesafe (bsc#1012628).
- x86/ioapic: Unbreak check_timer() (bsc#1012628).
- scsi: lpfc: Fix initial FLOGI failure due to BBSCN not supported
  (bsc#1012628).
- ALSA: usb-audio: Add delay quirk for H570e USB headsets
  (bsc#1012628).
- ALSA: hda/realtek - Couldn't detect Mic if booting with headset
  plugged (bsc#1012628).
- ALSA: hda/realtek: Enable front panel headset LED on Lenovo
  ThinkStation P520 (bsc#1012628).
- lib/string.c: implement stpcpy (bsc#1012628).
- tracing: fix double free (bsc#1012628).
- s390/dasd: Fix zero write for FBA devices (bsc#1012628).
- mt76: mt7615: use v1 MCU API on MT7615 to fix issues with
  adding/removing stations (bsc#1012628).
- lib/bootconfig: Fix a bug of breaking existing tree nodes
  (bsc#1012628).
- lib/bootconfig: Fix to remove tailing spaces after value
  (bsc#1012628).
- kprobes: Fix to check probe enabled before
  disarm_kprobe_ftrace() (bsc#1012628).
- kprobes: tracing/kprobes: Fix to kill kprobes on initmem after
  boot (bsc#1012628).
- btrfs: fix put of uninitialized kobject after seed device delete
  (bsc#1012628).
- btrfs: fix overflow when copying corrupt csums for a message
  (bsc#1012628).
- media: cec-adap.c: don't use flush_scheduled_work()
  (bsc#1012628).
- MIPS: Loongson2ef: Disable Loongson MMI instructions
  (bsc#1012628).
- dmabuf: fix NULL pointer dereference in dma_buf_release()
  (bsc#1012628).
- mm, THP, swap: fix allocating cluster for swapfile by mistake
  (bsc#1012628).
- mm/gup: fix gup_fast with dynamic page table folding
  (bsc#1012628).
- mm: replace memmap_context by meminit_context (bsc#1012628).
- mm: don't rely on system state to detect hot-plug operations
  (bsc#1012628).
- s390/zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (bsc#1012628).
- io_uring: ensure open/openat2 name is cleaned on cancelation
  (bsc#1012628).
- KVM: arm64: Assume write fault on S1PTW permission fault on
  instruction fetch (bsc#1012628).
- dm: fix bio splitting and its bio completion order for regular
  IO (bsc#1012628).
- clocksource/drivers/timer-ti-dm: Do reset before enable
  (bsc#1012628).
- commit ea492d4

==== libproxy ====

- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).

==== libsolv ====

- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]

==== libzypp ====
Version update (17.25.1 -> 17.25.2)

- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)

==== numactl ====
Version update (2.0.13 -> 2.0.14)

- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning

==== p11-kit ====
Subpackages: libp11-kit0 p11-kit-tools

- avoid bareword to fix build failure

==== patterns-base ====
Subpackages: patterns-base-apparmor patterns-base-base patterns-base-bootloader patterns-base-minimal_base

- Handle the yast pattern split into basis, desktop and server (boo#1159875)

==== popt ====

- Update homepage URL.
- Drop old rpm constructs.

==== procps ====
Subpackages: libprocps8

- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.

==== rdma-core ====
Version update (27.1 -> 31.0)
Subpackages: libefa1 libibverbs libibverbs1 libmlx4-1 libmlx5-1 librdmacm1

- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available
- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI

==== rook ====
Version update (1.4.3+git18.g42e1675e -> 1.4.5+git5.ge3c837f8)

- Update to v1.4.5
  * Update the CSI driver to v3.1.1 (#6340)
  * Fix drive group deployment failure (#6267)
  * Fix OBC upgrade from 1.3 to 1.4 external cluster (#6353)
  * Remove user unlink while deleting OBC (#6338)
  * Enable RBAC in the helm chart for enabling monitoring (#6352)
  * Disable encryption keyring parameter not necessary after
    opening block (#6350)
  * Improve reconcile performance in clusters with many OSDs on
    PVCs (#6330)
  * Only one external cluster secret supported in import script (#6343)
  * Allow OSD PVC template name to be set to any value (#6307)
  * OSD prepare job was failing due to low aio-max-nr setting (#6284)
  * During upgrade assume a pod spec changed if diff checking fails (#6272)
  * Merge config from rook-config-override configmap to the default global
    config file (#6252)
- Package all sample yaml files in rook-k8s-yaml
- Update helm chart version to match rook product version plus
  the current release number
- Update to v1.4.4
  * Upgrade to v1.4.3 for cluster-on-pvc hung due to changing label
    selectors on the mons (#6256)
  * Remove osd status configmap for nodes with long names (#6235)
  * Allow running rgw daemons from an external cluster (#6226)
- Create symlinks in /usr/local/bin for toolbox.sh and rook to
  ensure compatibility with upstream sample yamls

==== sysuser-tools ====

- Avoid useless use of cat
- Simplify %sysusers_requires
- Drop shebang, rpm passes it to /bin/sh itself

==== wpa_supplicant ====

- Add wpa_supplicant-p2p_iname_size.diff -- Limit P2P_DEVICE name to appropriate ifname size
  (https://patchwork.ozlabs.org/project/hostap/patch/20200825062902.124600-1-benjamin@sipsolutions.net/)