Packages changed:
  aaa_base (84.87+git20200918.331aa2f -> 84.87+git20201123.4f16b16)
  bcache-tools
  branding-openSUSE (84.87.20191004 -> 84.87.20200106)
  cni-plugins (0.8.7 -> 0.9.0)
  containers-systemd (0.0+git20201220.ed8a6b2 -> 0.0+git20210107.f55f4b3)
  cri-o (1.19.0 -> 1.19.1)
  cri-tools (1.18.0 -> 1.20.0)
  dhcp
  etcd (3.4.13 -> 3.4.14)
  k9s (0.24.1 -> 0.24.2)
  kernel-source (5.10.4 -> 5.10.5)
  libnettle (3.6 -> 3.7)
  libslirp (4.3.1 -> 4.4.0)
  permissions (1550_20201008 -> 1550_20201111)
  python-rpm (4.15.1 -> 4.16.0)
  rpm (4.15.1 -> 4.16.0)
  slirp4netns (1.0.0 -> 1.1.8)

=== Details ===

==== aaa_base ====
Version update (84.87+git20200918.331aa2f -> 84.87+git20201123.4f16b16)

- clean up rpmlintrc. Add filter for deprecated init scripts. We'll have to
  keep them around for a while until systemd takes over ownership.
- Update to version 84.87+git20201123.4f16b16:
  * mark /etc/init.d/{boot,after}.local as %config(noreplace) (boo#1179097)
  * Avoid semicolon within (t)csh login script on S/390
- prepare usrmerge (boo#1029961)

==== bcache-tools ====

- bcache.h: fix typo from SUUP to SUPP (jsc#SLE-9807)
  0019-bcache.h-fix-typo-from-SUUP-to-SUPP.patch
- bcache-tools: only call set_bucket_size() for cache device
  (jsc#SLE-9807)
  0020-bcache-tools-only-call-set_bucket_size-for-cache-dev.patch
- bcache.h: add BCH_FEATURE_INCOMPAT_LARGE_BUCKET to
  BCH_FEATURE_INCOMPAT_SUPP (jsc#SLE-9807)
  0021-bcache.h-add-BCH_FEATURE_INCOMPAT_LARGE_BUCKET-to-BC.patch
- bcache-tools: check incompatible feature set (jsc#SLE-9807)
  0022-bcache-tools-check-incompatible-feature-set.patch
- bcache-tools: introduce BCH_FEATURE_INCOMPAT_LOG_LARGE_BUCKET_SIZE
  for large bucket (jsc#SLE-9807)
  0023-bcache-tools-introduce-BCH_FEATURE_INCOMPAT_LOG_LARG.patch
- bcache-tools: display obsoleted bucket size configuration
  (jsc#SLE-9807)
  0024-bcache-tools-display-obsoleted-bucket-size-configura.patch
- bcache-tools: recover the missing sb.csum for showing bcache device
  super block (jsc#SLE-9807)
  0025-bcache-tools-recover-the-missing-sb.csum-for-showing.patch
- bcache-tools: only call to_cache_sb() for bcache device
  in may_add_item() (jsc#SLE-9807)
  0026-bcache-tools-only-call-to_cache_sb-for-bcache-device.patch
- bcache-tools: improve column alignment for "bcache show
  - m" output (jsc#SLE-9807)
  0027-bcache-tools-improve-column-alignment-for-bcache-sho.patch

==== branding-openSUSE ====
Version update (84.87.20191004 -> 84.87.20200106)
Subpackages: grub2-branding-openSUSE

- Update LibreOffice About image (boo#1180550)

==== cni-plugins ====
Version update (0.8.7 -> 0.9.0)

- Update to version 0.9.0:
  * tuning: revert values on delete (#540)
  * go mod tidy
  * bump to go 1.15
  * Add ability to trigger retests via comments
  * pkg/ns: fix test case to tolerate pids going away.
  * Add github build & test actions
  * bridge: fix testcase to check addresses we care about
  * Remove travis.
  * vendor: bump ginkgo, gover
  * portmap plugin should flush previous udp connections
  * Updating plugin README.md files (#549)
  * update netlink dependencies
  * Xdhcp: fix example configuration
  * VRF: extend supported version to 0.3.1 too.
  * VRF CNI: Add an optional table parameter.
  * Add more tests for the vrf cni plugin.
  * Update github.com/vishvananda/netlink to v1.1.0
  * Introduce a new VRF CNI meta plugin.
  * Travis: run tests on arm64
  * Replace nc with the local echo client.
  * Add an echo client to be used instead of nc.
  * Bump up the ubuntu version used in CI to bionic.
  * flannel: allow input ipam parameters as basis for delegate
  * ipvlan: make master config as optional
  * Remove extraneous test file in Windows plugin

==== containers-systemd ====
Version update (0.0+git20201220.ed8a6b2 -> 0.0+git20210107.f55f4b3)

- Update to version 0.0+git20210107.f55f4b3:
  * postfix: provide SMTP_TLS_SECURITY_LEVEL variable
- Update to version 0.0+git20210107.5e7d60c:
  * spamassassin: add volume for configuration files
- Update to version 0.0+git20210105.c149375:
  * postfix: Add SMTP_PORT and NULLCLIENT

==== cri-o ====
Version update (1.19.0 -> 1.19.1)
Subpackages: cri-o-kubeadm-criconfig

- Update to version 1.19.1:
  * bump to v1.19.1
  * don't do unnecesary iptables restore
  * switch CRI-O to use its own hostport manager
  * dual-stack host port manager
  * fix upstream hostport manager
  * Add README to hostport folder
  * fork hosport kubernetes code
  * [1.19] vendor: bump containers/storage to v1.20.5
  * runtime_vm: Ensure closeIOChan is not nil inside CloseStdin's function
  * runtime: parse oom file for VM type runtimes
  * runtime_vm: Ignore ttrpc.ErrClosed when removing a container
  * runtime_vm: StopContainers() should not fail when the VM is shutdown
  * runtime_vm: Don't let wait() return ttrpc.ErrClosed
  * runtime_vm: Fix updateContainerStatus() logic
  * runtime_vm: set Pid and InitPid for VM runtimes
  * internal/config/node: add checkFsMayDetachMounts
  * Fix bogus CI test failures
  * test/config: fix shellcheck warning
  * test/config: fix "config dir should fail with invalid option"
  * server: cleanup container in runtime after failed creation

==== cri-tools ====
Version update (1.18.0 -> 1.20.0)

- Update to version 1.20.0:
  * fix a bug in closure function
  * Trigger prow job
  * Update Kubernetes to v1.20.0
  * Dockershim critest on Windows
  * Fix CRI Test with Windows containerd runtime
  * Add comment to cloud build manifest file
  * Add clarity to docs about default runtimes
  * Add staging build for test user images
  * version 1.17.0 -> 1.19.0 in crictl.md

==== dhcp ====
Subpackages: dhcp-client

- prepare usrmerge (boo#1029961)

==== etcd ====
Version update (3.4.13 -> 3.4.14)

- Update to version 3.4.14:
  * version: 3.4.14
  * pkg/netutil: remove unused "iptables" wrapper
  * tools/etcd-dump-metrics: validate exec cmd args
  * clientv3: get AuthToken automatically when clientConn is ready.
  * etcdserver: add ConfChangeAddLearnerNode to the list of config changes
  * integration: add flag WatchProgressNotifyInterval in integration test

==== k9s ====
Version update (0.24.1 -> 0.24.2)

- Update to version 0.24.2:
  * add rel notes
  * cleanup + rel notes
  * fix typo and clean up prs
  * Add OneDark color theme.
  * handling non json lines as raw with red color
  * Disable filtering on the Help screen
  * Handle Empty Port List in PortForward View

==== kernel-source ====
Version update (5.10.4 -> 5.10.5)

- drm/docs: Fix todo.rst (git-fixes).
- net/sched: sch_taprio: ensure to reset/destroy all child qdiscs
  (git-fixes).
- commit 19815f3
- Linux 5.10.5 (bsc#1012628).
- net/sched: sch_taprio: reset child qdiscs before freeing them
  (bsc#1012628).
- mptcp: fix security context on server socket (bsc#1012628).
- ethtool: fix error paths in ethnl_set_channels() (bsc#1012628).
- ethtool: fix string set id check (bsc#1012628).
- md/raid10: initialize r10_bio->read_slot before use
  (bsc#1012628).
- drm/amd/display: Add get_dig_frontend implementation for DCEx
  (bsc#1012628).
- io_uring: close a small race gap for files cancel (bsc#1012628).
- jffs2: Allow setting rp_size to zero during remounting
  (bsc#1012628).
- jffs2: Fix NULL pointer dereference in rp_size fs option parsing
  (bsc#1012628).
- spi: dw-bt1: Fix undefined devm_mux_control_get symbol
  (bsc#1012628).
- opp: fix memory leak in _allocate_opp_table (bsc#1012628).
- opp: Call the missing clk_put() on error (bsc#1012628).
- scsi: block: Fix a race in the runtime power management code
  (bsc#1012628).
- mm/hugetlb: fix deadlock in hugetlb_cow error path
  (bsc#1012628).
- mm: memmap defer init doesn't work as expected (bsc#1012628).
- lib/zlib: fix inflating zlib streams on s390 (bsc#1012628).
- io_uring: don't assume mm is constant across submits
  (bsc#1012628).
- io_uring: use bottom half safe lock for fixed file data
  (bsc#1012628).
- io_uring: add a helper for setting a ref node (bsc#1012628).
- io_uring: fix io_sqe_files_unregister() hangs (bsc#1012628).
- uapi: move constants from <linux/kernel.h> to <linux/const.h>
  (bsc#1012628).
- tools headers UAPI: Sync linux/const.h with the kernel headers
  (bsc#1012628).
- cgroup: Fix memory leak when parsing multiple source parameters
  (bsc#1012628).
- zlib: move EXPORT_SYMBOL() and MODULE_LICENSE() out of
  dfltcc_syms.c (bsc#1012628).
- scsi: cxgb4i: Fix TLS dependency (bsc#1012628).
- Bluetooth: hci_h5: close serdev device and free hu in h5_close
  (bsc#1012628).
- fbcon: Disable accelerated scrolling (bsc#1012628).
- reiserfs: add check for an invalid ih_entry_count (bsc#1012628).
- misc: vmw_vmci: fix kernel info-leak by initializing dbells
  in vmci_ctx_get_chkpt_doorbells() (bsc#1012628).
- media: gp8psk: initialize stats at power control logic
  (bsc#1012628).
- f2fs: fix shift-out-of-bounds in sanity_check_raw_super()
  (bsc#1012628).
- ALSA: seq: Use bool for snd_seq_queue internal flags
  (bsc#1012628).
- ALSA: rawmidi: Access runtime->avail always in spinlock
  (bsc#1012628).
- bfs: don't use WARNING: string when it's just info
  (bsc#1012628).
- ext4: check for invalid block size early when mounting a file
  system (bsc#1012628).
- fcntl: Fix potential deadlock in send_sig{io, urg}()
  (bsc#1012628).
- io_uring: check kthread stopped flag when sq thread is unparked
  (bsc#1012628).
- rtc: sun6i: Fix memleak in sun6i_rtc_clk_init (bsc#1012628).
- module: set MODULE_STATE_GOING state when a module fails to load
  (bsc#1012628).
- quota: Don't overflow quota file offsets (bsc#1012628).
- rtc: pl031: fix resource leak in pl031_probe (bsc#1012628).
- powerpc: sysdev: add missing iounmap() on error in
  mpic_msgr_probe() (bsc#1012628).
- i3c master: fix missing destroy_workqueue() on error in
  i3c_master_register (bsc#1012628).
- NFSv4: Fix a pNFS layout related use-after-free race when
  freeing the inode (bsc#1012628).
- f2fs: avoid race condition for shrinker count (bsc#1012628).
- f2fs: fix race of pending_pages in decompression (bsc#1012628).
- module: delay kobject uevent until after module init call
  (bsc#1012628).
- powerpc/64: irq replay remove decrementer overflow check
  (bsc#1012628).
- fs/namespace.c: WARN if mnt_count has become negative
  (bsc#1012628).
- watchdog: rti-wdt: fix reference leak in rti_wdt_probe
  (bsc#1012628).
- um: random: Register random as hwrng-core device (bsc#1012628).
- um: ubd: Submit all data segments atomically (bsc#1012628).
- NFSv4.2: Don't error when exiting early on a READ_PLUS buffer
  overflow (bsc#1012628).
- ceph: fix inode refcount leak when ceph_fill_inode on non-I_NEW
  inode fails (bsc#1012628).
- drm/amd/display: updated wm table for Renoir (bsc#1012628).
- tick/sched: Remove bogus boot "safety" check (bsc#1012628).
- s390: always clear kernel stack backchain before calling
  functions (bsc#1012628).
- io_uring: remove racy overflow list fast checks (bsc#1012628).
- ALSA: pcm: Clear the full allocated memory at hw_params
  (bsc#1012628).
- dm verity: skip verity work if I/O error when system is shutting
  down (bsc#1012628).
- ext4: avoid s_mb_prefetch to be zero in individual scenarios
  (bsc#1012628).
- device-dax: Fix range release (bsc#1012628).
- Refresh patches.suse/supported-flag.
- commit 3bb334e
- Revert "drm/amd/display: Fixed Intermittent blue screen on
  OLED panel" (bsc#1180404).
- commit 086fc4c
- ALSA: hda/hdmi: Fix incorrect mutex unlock in
  silent_stream_disable() (bsc#1180543).
- commit 010df91

==== libnettle ====
Version update (3.6 -> 3.7)
Subpackages: libhogweed6 libnettle8

- GNU Nettle 3.7:
  * add bcrypt password hashing
  * add optimizations: PowerPC64 assembly
- remove deprecated texinfo packaing macros

==== libslirp ====
Version update (4.3.1 -> 4.4.0)

- Update to version 4.4.0:
  * Release v4.4.0
  * socket: consume empty packets
  * slirp: check pkt_len before reading protocol header
  * Remove the QEMU-special make build-system
  * Add DNS resolving for iOS
  * meson: support compiling as subproject
  * meson: remove meson-dist script
  * Add G_GNUC_PRINTF to local function slirp_vsnprintf
  * sosendoob: better document what urgc is used for
  * .gitlab-ci: add a Coverity stage
  * TCPIPHDR_DELTA: Fix potential negative value
  * udp, udp6, icmp, icmp6: Enable forwarding errors on Linux
  * icmp, icmp6: Add icmp_forward_error and icmp6_forward_error
  * udp, udp6, icmp: handle TTL value
  * ip_stripoptions use memmove
  * changelog: post-release

==== permissions ====
Version update (1550_20201008 -> 1550_20201111)
Subpackages: chkstat permissions-config

- move man page to where the documented files are
- Update to version 20201111:
  * squid: remove basic_pam_auth which doesn't need special perms (bsc#1171569)
  * mgetty: remove long dead (or never existing) locks directory (bsc#1171882)
  * adjust squid pinger path (bsc#1171569)
  * profiles: remove now superfluous squid pinger paths (bsc#1171569)
  * ksgrd_network_helper: remove obviously wrong path
  * etc/permissions: remove unnecessary, duplicate, outdated entries
  * chkstat: implement support for variables in profile paths in new
    variables.conf
  * man pages: add documentation about variables, update copyrights
  * profiles: use new variables feature to remove redundant entries
  * profiles: prepare /usr/sbin versions of profile entries (bsc#1029961)
  * Makefile: support CXXFLAGS and LDFLAGS override / extension via make/env variables (bsc#1178475)
  * Makefile: compile with LFO support to fix 32-bit emulation on 64-bit hosts (bsc#1178476)
  * README: added information about know limitations of this approach
- adjusted spec file:
  - package new variables.conf
  - apply %{optflags} correctly via CXXFLAGS variable
  - drop FSCAPS_DEFAULT_ENABLED which isn't recognized anymore by the
    refactored chkstat sources. This is now the default.

==== python-rpm ====
Version update (4.15.1 -> 4.16.0)

- update to rpm-4.16.0

==== rpm ====
Version update (4.15.1 -> 4.16.0)
Subpackages: librpmbuild9

- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  * new patch: ndbglue.diff
- allow opening the rpm database with an unset db_backend
  * new patch: empty_dbbackend.diff
- RPM no longer ships config.sub and config.guess, just copy it
  from Libtool since it is identical
- update to rpm-4.16.0
  * powerful macro and %if expressions including ternary operator
    and native version comparison
  * optional MIME type based file classification
  * dependency generation by parametric macros
  * a new version parsing and comparison API in C and Python
  * parallelise test-suite execution
  * clarify RPM license
- add method to iterate over header blobs
  * new patch: nextiteratorheaderblob.diff
- modified patches:
  * brpcompress.diff
  * brp-compress-no-img.patch
  * brp.diff
  * checkfilesnoinfodir.diff
  * db_conversion.diff
  * dbrointerruptable.diff
  * findsupplements.diff
  * ignore-auxv.diff
  * macrosin.diff
  * nobuildcolor.diff
  * nomagiccheck.diff
  * platformin.diff
  * rpmqpack.diff
  * rpm-shorten-changelog.diff
  * suspendlock.diff
- dropped patches:
  * rpm-4.12.0.1-fix-bashisms.patch
  * lazystatfs.diff
  * db_ops_name.diff
  * bdb_ro.diff
  * disable_bdb.diff
  * ndb_backport.diff
  * initgcrypt.diff
  * gcryptdsa2.diff
  * ndb_backport2.diff
  * touch_backport.diff

==== slirp4netns ====
Version update (1.0.0 -> 1.1.8)

- Update to version 1.1.8:
  * v1.1.8
  * CI: bump libslirp to v4.4.0
  * tests: Avoid closing pipe grep in cidr test
  * v1.1.7+dev
  * v1.1.7
  * test-slirp4netns-cidr.sh: avoid EPIPE
  * CI: s/test-centos/test-centos7/ for clarity
  * CI: Test with libslirp 4.3.1 on CentOS 7
  * .gitignore: add .vagrant
  * Vagrantfile: change VirtualBox itself's slirp CIDR