<updates>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-716</id>
    <title>Security update for wpa_supplicant</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1655220588"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23303" id="CVE-2022-23303" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23303" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23304" id="CVE-2022-23304" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23304" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194733" id="1194733" title="VUL-0: CVE-2022-23304: wpa_supplicant, hostapd: EAP-pwd vulnerable to side-channel attacks as a result of cache access patterns" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194732" id="1194732" title="VUL-0: CVE-2022-23303: wpa_supplicant,hostapd: SAE vulnerable to side channel attacks as a result of cache access patterns" type="bugzilla"/>
    </references>
    <description>This update for wpa_supplicant fixes the following issues:
	  
- CVE-2022-23303: Fixed side-channel attacks in SAE (bsc#1194732).
- CVE-2022-23304: Fixed side-channel attacks in EAP-pwd (bsc#1194733).
</description>
    <pkglist>
      <collection>
        <package name="wpa_supplicant" epoch="0" version="2.9" release="4.33.1" arch="src" src="src/wpa_supplicant-2.9-4.33.1.src.rpm">
          <filename>wpa_supplicant-2.9-4.33.1.src.rpm</filename>
        </package>
        <package name="wpa_supplicant" epoch="0" version="2.9" release="4.33.1" arch="x86_64" src="x86_64/wpa_supplicant-2.9-4.33.1.x86_64.rpm">
          <filename>wpa_supplicant-2.9-4.33.1.x86_64.rpm</filename>
        </package>
        <package name="wpa_supplicant" epoch="0" version="2.9" release="4.33.1" arch="aarch64" src="aarch64/wpa_supplicant-2.9-4.33.1.aarch64.rpm">
          <filename>wpa_supplicant-2.9-4.33.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-1157</id>
    <title>Security update for libsolv, libzypp, zypper</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1657791269"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196514" id="1196514" title="Unable to update from SLES-12-SP5 to SLES-15-SP1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197134" id="1197134" title="[Build 20220314] openQA test fails in zypper_in when uninstalling packages with ZYPP_SINGLE_RPMTRANS=1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196368" id="1196368" title="L3: Autoyast migration from SLES 12 SP5 for SAP to SLES 15 SP2 for SAP returns vendor change errors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194848" id="1194848" title="L3: POC Lotus: zypper patch should handle PTF issues" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196925" id="1196925" title="Unable to install packages on s390 using ZYPP_SINGLE_RPMTRANS=1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196317" id="1196317" title="zypper core dumped  zypper info ptf-23641" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195999" id="1195999" title="umask adjusted to 022 when running zypper ref:_00D1igLOd._5001ipHdgv:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196061" id="1196061" title="ISO from a software raid gives &quot;Cannot access installation media&quot; during &quot;Loading the Package Manager&quot; &quot;Refresh Sources&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1184501" id="1184501" title="VUL-0: libzypp: RPM package signature verification bypass" type="bugzilla"/>
    </references>
    <description>This update for libsolv, libzypp, zypper fixes the following issues:

Security relevant fix:

- Harden package signature checks (bsc#1184501).

libsolv update to 0.7.22:

- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code (bsc#1196514)
- support parsing of Debian's Multi-Arch indicator
- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members (&quot;requires&quot; is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime

libzypp update to 17.30.0:

- ZConfig: Update solver settings if target changes (bsc#1196368)
- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)

zypper update to 1.14.52:

- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)
</description>
    <pkglist>
      <collection>
        <package name="libsolv" epoch="0" version="0.7.22" release="150200.12.1" arch="src" src="src/libsolv-0.7.22-150200.12.1.src.rpm">
          <filename>libsolv-0.7.22-150200.12.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.22" release="150200.12.1" arch="x86_64" src="x86_64/libsolv-tools-0.7.22-150200.12.1.x86_64.rpm">
          <filename>libsolv-tools-0.7.22-150200.12.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.30.0" release="150200.36.1" arch="src" src="src/libzypp-17.30.0-150200.36.1.src.rpm">
          <filename>libzypp-17.30.0-150200.36.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.30.0" release="150200.36.1" arch="x86_64" src="x86_64/libzypp-17.30.0-150200.36.1.x86_64.rpm">
          <filename>libzypp-17.30.0-150200.36.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.52" release="150200.30.2" arch="src" src="src/zypper-1.14.52-150200.30.2.src.rpm">
          <filename>zypper-1.14.52-150200.30.2.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.52" release="150200.30.2" arch="x86_64" src="x86_64/zypper-1.14.52-150200.30.2.x86_64.rpm">
          <filename>zypper-1.14.52-150200.30.2.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-needs-restarting" epoch="0" version="1.14.52" release="150200.30.2" arch="noarch" src="noarch/zypper-needs-restarting-1.14.52-150200.30.2.noarch.rpm">
          <filename>zypper-needs-restarting-1.14.52-150200.30.2.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools" epoch="0" version="0.7.22" release="150200.12.1" arch="aarch64" src="aarch64/libsolv-tools-0.7.22-150200.12.1.aarch64.rpm">
          <filename>libsolv-tools-0.7.22-150200.12.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.30.0" release="150200.36.1" arch="aarch64" src="aarch64/libzypp-17.30.0-150200.36.1.aarch64.rpm">
          <filename>libzypp-17.30.0-150200.36.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.52" release="150200.30.2" arch="aarch64" src="aarch64/zypper-1.14.52-150200.30.2.aarch64.rpm">
          <filename>zypper-1.14.52-150200.30.2.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="feature" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2926</id>
    <title>Feature update for LibreOffice</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1661762381"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197017" id="1197017" title="Enable gtk3-kde5 in build libreoffice" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196017" id="1196017" title="LibreOffice fails to build against KDE Frameworks 5.91" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196499" id="1196499" title="Libreoffice drop-down fields not working since transition to 7.3 in snapshot 20220224 in KDE wayland" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195881" id="1195881" title="Bullets appear larger and green (instead of black)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196212" id="1196212" title="Text with tabs appears quite different in Impress than in PowerPoint" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1041090" id="1041090" title="trackerbug: packages do not build reproducibly from unsorted input" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192616" id="1192616" title="Extraneous/missing lines in table in Impress versus PowerPoint" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1183308" id="1183308" title="Simple, seven page slide deck of 3.7MB takes looong to open, start presentation mode, or move back to slide 1" type="bugzilla"/>
      <reference href="https://fate.suse.com/326485" id="326485" title="https://fate.suse.com/326485" type="fate"/>
      <reference href="https://jira.suse.com/browse/SLE-24021" id="SLE-24021" title="https://jira.suse.com/browse/SLE-24021" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-23447" id="SLE-23447" title="https://jira.suse.com/browse/SLE-23447" type="jira"/>
      <reference href="https://jira.suse.com/browse/MSC-303" id="MSC-303" title="https://jira.suse.com/browse/MSC-303" type="jira"/>
    </references>
    <description>This feature update for LibreOffice provides the following fixes:

abseil-cpp:

- Provide abseil-cpp version 20211102.0 as LibreOffice 7.3 dependency. (jsc#SLE-23447)
- Mention already fixed issues. (fate#326485, bsc#1041090)

libcuckoo:

- Provide libcuckoo version 0.3 as LibreOffice dependency. (jsc#SLE-23447)

libixion:

- Update libixion from version 0.16.1 to version 0.17.0. (jsc#SLE-23447)
- Build with mdds-2_0 instead of mdds-1.5. (jsc#SLE-23447)
- Build with gcc11 and gcc11-c++. (jsc#SLE-23447)
- Remove unneeded vulkan dependency
- Provide binaries for non x86_64 architectures directly to SUSE Package Hub. (ijsc#MSC-303)
 
libreoffice:

- Update LibreOffice from version 7.2.5.1 to version 7.3.3.1. (jsc#SLE-23447, jsc#SLE-24021)
  * Update bundled dependencies:
    * gpgme from version 1.13.1 to version 1.16.0
    * libgpg-error from version 1.37 to version 1.43
    * libassuan from version 2.5.3 to version 2.5.5
    * pdfium from version 4500 to version 4699
    * skia from version m90-45c57e116ee0ce214bdf78405a4762722e4507d9 to version m97-a7230803d64ae9d44f4e1282444801119a3ae967
    * boost from version 1_75 to version 1_77
    * icu4c from version 69_1 to version 70_1
    * On SUSE Linux Enterprise 15 SP3 and newer require curl-devel 7.68.0 or newer
  * New build dependencies:
    * abseil-cpp-devel
    * libassuan0
    * libcuckoo-devel
    * libopenjp2
    * requrire liborcus-0.17 instead of liborcus-0.16
    * requrire mdds-2.0 instead of mdds-1.5
  * Do not use serf-1 anymore but use curl instead.
  * Other fixes:
    * Extraneous/missing lines in table in Impress versus PowerPoint (bsc#1192616)
    * Text with tabs appears quite different in Impress than in PowerPoint (bsc#1196212)
    * Bullets appear larger and green instead of black. (bsc#1195881)
    * Enable gtk3_kde5 and make it possible to use gtk3 in kde with the kde filepicker (bsc#1197017)
    * Mention already fixed issues. (bsc#1183308, bsc#1196017, bsc#1196499)

liborcus:

- Update liborcus from version 0.16.1 to version 0.17.2. (jsc#SLE-23447)
- Require mdds-2_0 instead of mdds-1.5. (jsc#SLE-23447)
- Require libixion-0.17 instead of libixion-0.16. (jsc#SLE-23447)
- Build with libtool and use autotools. (jsc#SLE-23447)
- Provide binaries for non x86_64 architectures directly to SUSE Package Hub. (ijsc#MSC-303)

mdds-2_0:

- Provide mdds-2_0 version 2.0.2 as LibreOffice dependency. (jsc#SLE-23447)

myspell-dictionaries:

- Provide binaries for non x86_64 architectures directly to SUSE Package Hub. (ijsc#MSC-303)
- There are no visible changes for the final user.

ucpp:

- Provide binaries for non x86_64 architectures directly to SUSE Package Hub. (ijsc#MSC-303)
- There are no visible changes for the final user.

xmlsec1:

- Provide binaries for non x86_64 architectures directly to SUSE Package Hub. (ijsc#MSC-303)
- There are no visible changes for the final user.
  </description>
    <pkglist>
      <collection>
        <package name="libxmlsec1-1" epoch="0" version="1.2.28" release="150100.7.11.1" arch="x86_64" src="x86_64/libxmlsec1-1-1.2.28-150100.7.11.1.x86_64.rpm">
          <filename>libxmlsec1-1-1.2.28-150100.7.11.1.x86_64.rpm</filename>
        </package>
        <package name="libxmlsec1-openssl1" epoch="0" version="1.2.28" release="150100.7.11.1" arch="x86_64" src="x86_64/libxmlsec1-openssl1-1.2.28-150100.7.11.1.x86_64.rpm">
          <filename>libxmlsec1-openssl1-1.2.28-150100.7.11.1.x86_64.rpm</filename>
        </package>
        <package name="xmlsec1" epoch="0" version="1.2.28" release="150100.7.11.1" arch="src" src="src/xmlsec1-1.2.28-150100.7.11.1.src.rpm">
          <filename>xmlsec1-1.2.28-150100.7.11.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2533</id>
    <title>Security update for mozilla-nss</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1658504364"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192079" id="1192079" title="FIPS: NSS: PBKDF requirements" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200027" id="1200027" title="VUL-0: MozillaFirefox / MozillaThunderbird: update to 101 and 91.10esr" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31741" id="CVE-2022-31741" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31741" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192086" id="1192086" title="FIPS: NSS: Provide module name/identifier and version" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192087" id="1192087" title="FIPS: NSS: Make sure zeroization is performed in all API functions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192228" id="1192228" title="FIPS: NSS: Test non-approved services" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192080" id="1192080" title="FIPS: NSS: Claim Triple-DES as non-approved" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198486" id="1198486" title="enable the FIPS test for builds" type="bugzilla"/>
    </references>
    <description>This update for mozilla-nss fixes the following issues:

Various FIPS 140-3 related fixes were backported from SUSE Linux Enterprise 15 SP4:

- Makes the PBKDF known answer test compliant with NIST SP800-132. (bsc#1192079). 
- FIPS: Add on-demand integrity tests through sftk_FIPSRepeatIntegrityCheck()
  (bsc#1198980).
- FIPS: mark algorithms as approved/non-approved according to security policy
  (bsc#1191546, bsc#1201298).
- FIPS: remove hard disabling of unapproved algorithms. This requirement is now
  fulfilled by the service level indicator (bsc#1200325).
- Run test suite at build time, and make it pass (bsc#1198486).
- FIPS: skip algorithms that are hard disabled in FIPS mode.
- Prevent expired PayPalEE cert from failing the tests.
- Allow checksumming to be disabled, but only if we entered FIPS mode
  due to NSS_FIPS being set, not if it came from /proc.
- FIPS: Make the PBKDF known answer test compliant with NIST SP800-132.
- Update FIPS validation string to version-release format.
- FIPS: remove XCBC MAC from list of FIPS approved algorithms.
- Enable NSS_ENABLE_FIPS_INDICATORS and set NSS_FIPS_MODULE_ID
  for build.
- FIPS: claim 3DES unapproved in FIPS mode (bsc#1192080).
- FIPS: allow testing of unapproved algorithms (bsc#1192228).
- FIPS: add version indicators. (bmo#1729550, bsc#1192086).
- FIPS: fix some secret clearing (bmo#1697303, bsc#1192087).

Version update to NSS 3.79:

- Use PK11_GetSlotInfo instead of raw C_GetSlotInfo calls.
- Update mercurial in clang-format docker image.
- Use of uninitialized pointer in lg_init after alloc fail.
- selfserv and tstclnt should use PR_GetPrefLoopbackAddrInfo.
- Add SECMOD_LockedModuleHasRemovableSlots.
- Fix secasn1d parsing of indefinite SEQUENCE inside indefinite GROUP.
- Added RFC8422 compliant TLS &lt;= 1.2 undefined/compressed ECPointFormat extension alerts.
- TLS 1.3 Server: Send protocol_version alert on unsupported ClientHello.legacy_version.
- Correct invalid record inner and outer content type alerts.
- NSS does not properly import or export pkcs12 files with large passwords and pkcs5v2 encoding.
- improve error handling after nssCKFWInstance_CreateObjectHandle.
- Initialize pointers passed to NSS_CMSDigestContext_FinishMultiple.
- NSS 3.79 should depend on NSPR 4.34   

Version update to NSS 3.78.1:

- Initialize pointers passed to NSS_CMSDigestContext_FinishMultiple

Version update to NSS 3.78:

- Added TLS 1.3 zero-length inner plaintext checks and tests, zero-length record/fragment handling tests.
- Reworked overlong record size checks and added TLS1.3 specific boundaries.
- Add ECH Grease Support to tstclnt
- Add a strict variant of moz::pkix::CheckCertHostname.
- Change SSL_REUSE_SERVER_ECDHE_KEY default to false.
- Make SEC_PKCS12EnableCipher succeed
- Update zlib in NSS to 1.2.12.

Version update to NSS 3.77:

- Fix link to TLS page on wireshark wiki
- Add two D-TRUST 2020 root certificates.
- Add Telia Root CA v2 root certificate.
- Remove expired explicitly distrusted certificates from certdata.txt.
- support specific RSA-PSS parameters in mozilla::pkix
- Remove obsolete stateEnd check in SEC_ASN1DecoderUpdate.
- Remove token member from NSSSlot struct.
- Provide secure variants of mpp_pprime and mpp_make_prime.
- Support UTF-8 library path in the module spec string.
- Update nssUTF8_Length to RFC 3629 and fix buffer overrun.
- Update googletest to 1.11.0
- Add SetTls13GreaseEchSize to experimental API.
- TLS 1.3 Illegal legacy_version handling/alerts.
- Fix calculation of ECH HRR Transcript.
- Allow ld path to be set as environment variable.
- Ensure we don't read uninitialized memory in ssl gtests.
- Fix DataBuffer Move Assignment.
- internal_error alert on Certificate Request with sha1+ecdsa in TLS 1.3
- rework signature verification in mozilla::pkix

Version update to NSS 3.76.1

- Remove token member from NSSSlot struct.
- Hold tokensLock through nssToken_GetSlot calls in nssTrustDomain_GetActiveSlots.
- Check return value of PK11Slot_GetNSSToken.
- Use Wycheproof JSON for RSASSA-PSS
- Add SHA256 fingerprint comments to old certdata.txt entries.
- Avoid truncating files in nss-release-helper.py.
- Throw illegal_parameter alert for illegal extensions in handshake message.

Version update to NSS 3.75

- Make DottedOIDToCode.py compatible with python3.
- Avoid undefined shift in SSL_CERT_IS while fuzzing.
- Remove redundant key type check.
- Update ABI expectations to match ECH changes.
- Enable CKM_CHACHA20.
- check return on NSS_NoDB_Init and NSS_Shutdown.
- Run ECDSA test vectors from bltest as part of the CI tests.
- Add ECDSA test vectors to the bltest command line tool.
- Allow to build using clang's integrated assembler.
- Allow to override python for the build.
- test HKDF output rather than input.
- Use ASSERT macros to end failed tests early.
- move assignment operator for DataBuffer.
- Add test cases for ECH compression and unexpected extensions in SH.
- Update tests for ECH-13.
- Tidy up error handling.
- Add tests for ECH HRR Changes.
- Server only sends GREASE HRR extension if enabled by preference.
- Update generation of the Associated Data for ECH-13.
- When ECH is accepted, reject extensions which were only advertised in the Outer Client Hello.
- Allow for compressed, non-contiguous, extensions.
- Scramble the PSK extension in CHOuter.
- Split custom extension handling for ECH.
- Add ECH-13 HRR Handling.
- Client side ECH padding.
- Stricter ClientHelloInner Decompression.
- Remove ECH_inner extension, use new enum format.
- Update the version number for ECH-13 and adjust the ECHConfig size.

Version update to NSS 3.74

- mozilla::pkix: support SHA-2 hashes in CertIDs in OCSP responses
- Ensure clients offer consistent ciphersuites after HRR
- NSS does not properly restrict server keys based on policy
- Set nssckbi version number to 2.54
- Replace Google Trust Services LLC (GTS) R4 root certificate
- Replace Google Trust Services LLC (GTS) R3 root certificate
- Replace Google Trust Services LLC (GTS) R2 root certificate
- Replace Google Trust Services LLC (GTS) R1 root certificate
- Replace GlobalSign ECC Root CA R4
- Remove Expired Root Certificates - DST Root CA X3
- Remove Expiring Cybertrust Global Root and GlobalSign root certificates
- Add renewed Autoridad de Certificacion Firmaprofesional CIF A62634068 root certificate
- Add iTrusChina ECC root certificate
- Add iTrusChina RSA root certificate
- Add ISRG Root X2 root certificate
- Add Chunghwa Telecom's HiPKI Root CA - G1 root certificate
- Avoid a clang 13 unused variable warning in opt build
- Check for missing signedData field
- Ensure DER encoded signatures are within size limits

- enable key logging option (boo#1195040)

Version update to NSS 3.73.1:

- Add SHA-2 support to mozilla::pkix's OSCP implementation

Version update to NSS 3.73

- check for missing signedData field.
- Ensure DER encoded signatures are within size limits.
- NSS needs FiPS 140-3 version indicators.
- pkix_CacheCert_Lookup doesn't return cached certs
- sunset Coverity from NSS

Fixed MFSA 2021-51 (bsc#1193170) CVE-2021-43527: Memory corruption via DER-encoded DSA and RSA-PSS signatures

Version update to NSS 3.72

- Fix nsinstall parallel failure.
- Increase KDF cache size to mitigate perf regression in about:logins

Version update to NSS 3.71

- Set nssckbi version number to 2.52.
- Respect server requirements of tlsfuzzer/test-tls13-signature-algorithms.py
- Import of PKCS#12 files with Camellia encryption is not supported
- Add HARICA Client ECC Root CA 2021.
- Add HARICA Client RSA Root CA 2021.
- Add HARICA TLS ECC Root CA 2021.
- Add HARICA TLS RSA Root CA 2021.
- Add TunTrust Root CA certificate to NSS.

Version update to NSS 3.70

- Update test case to verify fix.
- Explicitly disable downgrade check in TlsConnectStreamTls13.EchOuterWith12Max
- Explicitly disable downgrade check in TlsConnectTest.DisableFalseStartOnFallback
- Avoid using a lookup table in nssb64d.
- Use HW accelerated SHA2 on AArch64 Big Endian.
- Change default value of enableHelloDowngradeCheck to true.
- Cache additional PBE entries.
- Read HPKE vectors from official JSON.

Version update to NSS 3.69.1:

- Disable DTLS 1.0 and 1.1 by default
- integrity checks in key4.db not happening on private components with AES_CBC

NSS 3.69:

- Disable DTLS 1.0 and 1.1 by default (backed out again)
- integrity checks in key4.db not happening on private components with AES_CBC (backed out again)
- SSL handling of signature algorithms ignores environmental invalid algorithms.
- sqlite 3.34 changed it's open semantics, causing nss failures.
- Gtest update changed the gtest reports, losing gtest details in all.sh reports.
- NSS incorrectly accepting 1536 bit DH primes in FIPS mode
- SQLite calls could timeout in starvation situations.
- Coverity/cpp scanner errors found in nss 3.67
- Import the NSS documentation from MDN in nss/doc.
- NSS using a tempdir to measure sql performance not active

Version Update to 3.68.4 (bsc#1200027)

- CVE-2022-31741: Initialize pointers passed to NSS_CMSDigestContext_FinishMultiple.  (bmo#1767590)


Mozilla NSPR was updated to version 4.34:

* add an API that returns a preferred loopback IP on hosts that have two IP stacks available.
</description>
    <pkglist>
      <collection>
        <package name="libfreebl3" epoch="0" version="3.79" release="150000.3.74.1" arch="x86_64" src="x86_64/libfreebl3-3.79-150000.3.74.1.x86_64.rpm">
          <filename>libfreebl3-3.79-150000.3.74.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3-hmac" epoch="0" version="3.79" release="150000.3.74.1" arch="x86_64" src="x86_64/libfreebl3-hmac-3.79-150000.3.74.1.x86_64.rpm">
          <filename>libfreebl3-hmac-3.79-150000.3.74.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.79" release="150000.3.74.1" arch="x86_64" src="x86_64/libsoftokn3-3.79-150000.3.74.1.x86_64.rpm">
          <filename>libsoftokn3-3.79-150000.3.74.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3-hmac" epoch="0" version="3.79" release="150000.3.74.1" arch="x86_64" src="x86_64/libsoftokn3-hmac-3.79-150000.3.74.1.x86_64.rpm">
          <filename>libsoftokn3-hmac-3.79-150000.3.74.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nspr" epoch="0" version="4.34" release="150000.3.23.1" arch="src" src="src/mozilla-nspr-4.34-150000.3.23.1.src.rpm">
          <filename>mozilla-nspr-4.34-150000.3.23.1.src.rpm</filename>
        </package>
        <package name="mozilla-nspr" epoch="0" version="4.34" release="150000.3.23.1" arch="x86_64" src="x86_64/mozilla-nspr-4.34-150000.3.23.1.x86_64.rpm">
          <filename>mozilla-nspr-4.34-150000.3.23.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79" release="150000.3.74.1" arch="src" src="src/mozilla-nss-3.79-150000.3.74.1.src.rpm">
          <filename>mozilla-nss-3.79-150000.3.74.1.src.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79" release="150000.3.74.1" arch="x86_64" src="x86_64/mozilla-nss-3.79-150000.3.74.1.x86_64.rpm">
          <filename>mozilla-nss-3.79-150000.3.74.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.79" release="150000.3.74.1" arch="x86_64" src="x86_64/mozilla-nss-certs-3.79-150000.3.74.1.x86_64.rpm">
          <filename>mozilla-nss-certs-3.79-150000.3.74.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.79" release="150000.3.74.1" arch="x86_64" src="x86_64/mozilla-nss-tools-3.79-150000.3.74.1.x86_64.rpm">
          <filename>mozilla-nss-tools-3.79-150000.3.74.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.79" release="150000.3.74.1" arch="aarch64" src="aarch64/libfreebl3-3.79-150000.3.74.1.aarch64.rpm">
          <filename>libfreebl3-3.79-150000.3.74.1.aarch64.rpm</filename>
        </package>
        <package name="libfreebl3-hmac" epoch="0" version="3.79" release="150000.3.74.1" arch="aarch64" src="aarch64/libfreebl3-hmac-3.79-150000.3.74.1.aarch64.rpm">
          <filename>libfreebl3-hmac-3.79-150000.3.74.1.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.79" release="150000.3.74.1" arch="aarch64" src="aarch64/libsoftokn3-3.79-150000.3.74.1.aarch64.rpm">
          <filename>libsoftokn3-3.79-150000.3.74.1.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3-hmac" epoch="0" version="3.79" release="150000.3.74.1" arch="aarch64" src="aarch64/libsoftokn3-hmac-3.79-150000.3.74.1.aarch64.rpm">
          <filename>libsoftokn3-hmac-3.79-150000.3.74.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nspr" epoch="0" version="4.34" release="150000.3.23.1" arch="aarch64" src="aarch64/mozilla-nspr-4.34-150000.3.23.1.aarch64.rpm">
          <filename>mozilla-nspr-4.34-150000.3.23.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79" release="150000.3.74.1" arch="aarch64" src="aarch64/mozilla-nss-3.79-150000.3.74.1.aarch64.rpm">
          <filename>mozilla-nss-3.79-150000.3.74.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.79" release="150000.3.74.1" arch="aarch64" src="aarch64/mozilla-nss-certs-3.79-150000.3.74.1.aarch64.rpm">
          <filename>mozilla-nss-certs-3.79-150000.3.74.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.79" release="150000.3.74.1" arch="aarch64" src="aarch64/mozilla-nss-tools-3.79-150000.3.74.1.aarch64.rpm">
          <filename>mozilla-nss-tools-3.79-150000.3.74.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2546</id>
    <title>Security update for gpg2</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1658753025"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196125" id="1196125" title="[SLES15SP4][Build 98.1][SECURITY][FIPS] gpg key generating fail while creating Key-Length 2048 (seskey.c:50:make_session_key)" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34903" id="CVE-2022-34903" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34903" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201225" id="1201225" title="VUL-0: CVE-2022-34903: gpg2: vulnerable to status injection" type="bugzilla"/>
    </references>
    <description>This update for gpg2 fixes the following issues:

- CVE-2022-34903: Fixed a status injection vulnerability (bsc#1201225).
- Use AES as default cipher instead of 3DES when we are in FIPS mode. (bsc#1196125)
</description>
    <pkglist>
      <collection>
        <package name="gpg2" epoch="0" version="2.2.27" release="150300.3.5.1" arch="src" src="src/gpg2-2.2.27-150300.3.5.1.src.rpm">
          <filename>gpg2-2.2.27-150300.3.5.1.src.rpm</filename>
        </package>
        <package name="gpg2" epoch="0" version="2.2.27" release="150300.3.5.1" arch="x86_64" src="x86_64/gpg2-2.2.27-150300.3.5.1.x86_64.rpm">
          <filename>gpg2-2.2.27-150300.3.5.1.x86_64.rpm</filename>
        </package>
        <package name="gpg2" epoch="0" version="2.2.27" release="150300.3.5.1" arch="aarch64" src="aarch64/gpg2-2.2.27-150300.3.5.1.aarch64.rpm">
          <filename>gpg2-2.2.27-150300.3.5.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2251</id>
    <title>Security update for openssl-1_1</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1656921209"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199166" id="1199166" title="VUL-0: CVE-2022-1292: openssl,openssl-1_0_0,openssl1,openssl-3,compat-openssl098,openssl-1_1: command injection in c_rehash" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1185637" id="1185637" title="openssl-1_1 fails to build after 2022-06-01" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200550" id="1200550" title="VUL-0: EMBARGOED: CVE-2022-2068: openssl,openssl1,openssl-1_1,openssl-1_0_0: more shell code injection issues in c_rehash" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068" id="CVE-2022-2068" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292" id="CVE-2022-1292" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292" type="cve"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:
	  
- CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).
- CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1d" release="150200.11.48.1" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1d-150200.11.48.1.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1d-150200.11.48.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1d" release="150200.11.48.1" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1d-150200.11.48.1.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1d-150200.11.48.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1d" release="150200.11.48.1" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1d-150200.11.48.1.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1d-150200.11.48.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1d" release="150200.11.48.1" arch="src" src="src/openssl-1_1-1.1.1d-150200.11.48.1.src.rpm">
          <filename>openssl-1_1-1.1.1d-150200.11.48.1.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1d" release="150200.11.48.1" arch="x86_64" src="x86_64/openssl-1_1-1.1.1d-150200.11.48.1.x86_64.rpm">
          <filename>openssl-1_1-1.1.1d-150200.11.48.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1d" release="150200.11.48.1" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1d-150200.11.48.1.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1d-150200.11.48.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1d" release="150200.11.48.1" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1d-150200.11.48.1.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1d-150200.11.48.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1d" release="150200.11.48.1" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1d-150200.11.48.1.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1d-150200.11.48.1.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1d" release="150200.11.48.1" arch="aarch64" src="aarch64/openssl-1_1-1.1.1d-150200.11.48.1.aarch64.rpm">
          <filename>openssl-1_1-1.1.1d-150200.11.48.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2357</id>
    <title>Security update for python3</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1657564507"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-20107" id="CVE-2015-20107" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-20107" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198511" id="1198511" title="VUL-1: CVE-2015-20107: python3,python36,python,python310,python39,python27: command injection in the mailcap module" type="bugzilla"/>
    </references>
    <description>This update for python3 fixes the following issues:

- CVE-2015-20107: avoid command injection in the mailcap module (bsc#1198511).
</description>
    <pkglist>
      <collection>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.27.1" arch="x86_64" src="x86_64/libpython3_6m1_0-3.6.15-150300.10.27.1.x86_64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.27.1.x86_64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.27.1" arch="src" src="src/python3-3.6.15-150300.10.27.1.src.rpm">
          <filename>python3-3.6.15-150300.10.27.1.src.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.27.1" arch="x86_64" src="x86_64/python3-3.6.15-150300.10.27.1.x86_64.rpm">
          <filename>python3-3.6.15-150300.10.27.1.x86_64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.27.1" arch="x86_64" src="x86_64/python3-base-3.6.15-150300.10.27.1.x86_64.rpm">
          <filename>python3-base-3.6.15-150300.10.27.1.x86_64.rpm</filename>
        </package>
        <package name="python3-core" epoch="0" version="3.6.15" release="150300.10.27.1" arch="src" src="src/python3-core-3.6.15-150300.10.27.1.src.rpm">
          <filename>python3-core-3.6.15-150300.10.27.1.src.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.27.1" arch="aarch64" src="aarch64/libpython3_6m1_0-3.6.15-150300.10.27.1.aarch64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.27.1.aarch64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.27.1" arch="aarch64" src="aarch64/python3-3.6.15-150300.10.27.1.aarch64.rpm">
          <filename>python3-3.6.15-150300.10.27.1.aarch64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.27.1" arch="aarch64" src="aarch64/python3-base-3.6.15-150300.10.27.1.aarch64.rpm">
          <filename>python3-base-3.6.15-150300.10.27.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2810</id>
    <title>Recommended update for python-kiwi</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1660633431"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194992" id="1194992" title="/.snapshots subvolume created by kiwi has wrong permissions (0755 instead of 0700)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197616" id="1197616" title="Boot Issues due to uncommented GRUB_DISABLE_LINUX_UUID=true in /etc/default/grub in 20220309 image" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197783" id="1197783" title="kiwi &gt;= v9.23.21 excludes /run/* in containers, breaking Ceph containers in Rook environments" type="bugzilla"/>
    </references>
    <description>This update for python-kiwi fixes the following issues:

- Preserve the LABEL= setting when the grub config file is re-generated. (bsc#1197616)
- Add ensure empty tmpdirs option for OCI containers. (bsc#1197783)
- Set /.snapshots subvolume to mode 0700 (bsc#1194992)
</description>
    <pkglist>
      <collection>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.36" release="150100.3.53.2" arch="x86_64" src="x86_64/dracut-kiwi-lib-9.24.36-150100.3.53.2.x86_64.rpm">
          <filename>dracut-kiwi-lib-9.24.36-150100.3.53.2.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.36" release="150100.3.53.2" arch="x86_64" src="x86_64/dracut-kiwi-oem-dump-9.24.36-150100.3.53.2.x86_64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.36-150100.3.53.2.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.36" release="150100.3.53.2" arch="x86_64" src="x86_64/dracut-kiwi-oem-repart-9.24.36-150100.3.53.2.x86_64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.36-150100.3.53.2.x86_64.rpm</filename>
        </package>
        <package name="python-kiwi" epoch="0" version="9.24.36" release="150100.3.53.2" arch="src" src="src/python-kiwi-9.24.36-150100.3.53.2.src.rpm">
          <filename>python-kiwi-9.24.36-150100.3.53.2.src.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.36" release="150100.3.53.2" arch="aarch64" src="aarch64/dracut-kiwi-lib-9.24.36-150100.3.53.2.aarch64.rpm">
          <filename>dracut-kiwi-lib-9.24.36-150100.3.53.2.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.36" release="150100.3.53.2" arch="aarch64" src="aarch64/dracut-kiwi-oem-dump-9.24.36-150100.3.53.2.aarch64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.36-150100.3.53.2.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.36" release="150100.3.53.2" arch="aarch64" src="aarch64/dracut-kiwi-oem-repart-9.24.36-150100.3.53.2.aarch64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.36-150100.3.53.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2177</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1656070342"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1055117" id="1055117" title="SLE15 POWER9 fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1061840" id="1061840" title="SLE15 POWER9 KVM fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1103269" id="1103269" title="SLES 12 SP3 [4.4.140-94.42-default] 8TB/96c Brazos: Continuous soft-lockups observed during reboot, after configuring fadump. (kdump)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1118212" id="1118212" title="VUL-0: kernel-source: Misbehaving SATA device leaks kernel memory pages to unprivileged user" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1153274" id="1153274" title="Jira Broadcom-7 SLE15SP2 update requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1154353" id="1154353" title="Update skb/net-sched kernel API" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1156395" id="1156395" title="[TRACKERBUG] 5.3 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1158266" id="1158266" title="VUL-0: CVE-2019-19377: kernel-source: mounting a crafted btrfs filesystem image can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1167773" id="1167773" title="[Jira ECO-1386] Add the Pensando ionic network kernel driver." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1176447" id="1176447" title="TRACKERBUG Network Infrastructure backports for 15SP3" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1178134" id="1178134" title="[TRACKERBUG] git-fixes pile for SLE15-SP3" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1180100" id="1180100" title="SLES 15 SP3 Beta2 - [P10] Use extended &quot;ibm,thread-groups&quot; for Split-L2 information" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1183405" id="1183405" title="Delayed outgoing packets causing NFS timeouts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188885" id="1188885" title="PSP_CI: P10(DD2) performance degrades with Unixbench Multiple Copy on SLES 15 SP3 GM compared to P9 Lpar." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195826" id="1195826" title="SLES15SP4 - [P10] [Regression] ping6 on link local address is failing with ping: sendmsg: Invalid argument" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196426" id="1196426" title="VUL-0: CVE-2021-33061: kernel-source-azure,kernel-source-rt,kernel-source: Insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters results in denial of service" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196478" id="1196478" title="L3: SLES15SP4: EEH failed on nvmf adapter on zz server (lpfc/nvme_core/Redfish/SLES15SP4/ZZ)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196570" id="1196570" title="L3: NFS -- old ACCESS reply info is not being flushed (NFS attribute cache)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196840" id="1196840" title="SLES15sp3: ping -I on link local address is failing with ping: sendmsg: Invalid argument" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197446" id="1197446" title="SLES 15 SP2 / SLES15SP3 - [P9] [P10] Call traces  and system reboots during DLPAR CPU add/remove and move operation [Fleetwood 64TB] [Rainier]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197472" id="1197472" title="VUL-1: CVE-2022-0168: kernel-source,kernel-source-rt,kernel-source-azure: smb2_ioctl_query_info NULL Pointer Dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197601" id="1197601" title="VUL-1: kernel: Buffer overflow in pkcs1pad that allows processing heap content" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197675" id="1197675" title="Update Broadcom Emulex lpfc driver to 14.2.0.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198438" id="1198438" title="qla2xxx doesn't report SAN device changes to the upper SCSI layers" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198577" id="1198577" title="VUL-0: CVE-2022-1184: kernel: use-after-free and memory errors in ext4 when mounting and operating on a corrupted image" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198971" id="1198971" title="SLES 15 SP3 - POWER10 Rainer: EXT4 filesystem : stress-ng test failed with errors in dmesg BUG: soft lockup CPU#6 stuck" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198989" id="1198989" title="Booting with recent kernel 4.12.14-122.116 lpfc broken" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199035" id="1199035" title="SYN and ACK are being dropped by iptables after LIF migration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199052" id="1199052" title="amd iommu- warning after resume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199063" id="1199063" title="VUL-0: CVE-2022-1652: kernel-source,kernel-source-rt,kernel-source-azure: We found a concurrency use-after-free in bad_flp_intr for latest kernel version" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199114" id="1199114" title="Cannot set pmem region alignment /sys/bus/nd/devices/region6/align: Permission denied" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199314" id="1199314" title="[Azure] PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199505" id="1199505" title="VUL-0: CVE-2022-30594: kernel-source,kernel-source-azure,kernel-source-rt: mishandled seccomp permissions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199507" id="1199507" title="VUL-0: CVE-2022-1729: kernel-source: kernel/core: race condition in perf_event_open leads to privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199564" id="1199564" title="VUL-0: CVE-2022-20008: kernel-source-rt,kernel-source-azure,kernel-source: possible to read kernel heap memory due to uninitialized data in mmc_blk_read_single of block.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199626" id="1199626" title="copy_process(): Move fd_install() out of sighand-&gt;siglock critical  section" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199631" id="1199631" title="fnic Bug Fix -  [PATCH] scsi: fnic: Replace DMA mask of 64 bits with 47 bits" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199670" id="1199670" title="Partner-L3: [DELL SLES 15 SP3 BUG] - NVMe TCP controller resets/reconnections observed under stress" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199839" id="1199839" title="cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in  cpuset_init_smp()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200019" id="1200019" title="VUL-0: CVE-2022-1972: kernel: buffer overflow in nftable can lead to privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200045" id="1200045" title="Update Broadcom Emulex lpfc driver to 14.2.0.3" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200046" id="1200046" title="Add qla2xxx driver fixes for 10.02.07.400-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200192" id="1200192" title="ceph: fix setting of xattrs on async created inodes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200216" id="1200216" title="Missing backport for kernel" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200015" id="1200015" title="VUL-0: CVE-2022-1966: kernel: use-after-free in the netfilter subsystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1177282" id="1177282" title="VUL-1: CVE-2020-26541: kernel-source: Forbidden Signature Database (aka dbx) protection mechanism is not properly enforced" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199365" id="1199365" title="PCI: hv: Fix NUMA node assignment when kernel boots with custom NUMA topology" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199650" id="1199650" title="VUL-0: CVE-2022-21166, CVE-2022-21127, CVE-2022-21123, CVE-2022-21125, CVE-2022-21180: kernel: stale MMIO data transient information leaks (INTEL-TA-00615)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200143" id="1200143" title="VUL-0: CVE-2022-1975: kernel-source,kernel-source-azure,kernel-source-rt: sleep in atomic bug when firmware download timeout" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200144" id="1200144" title="VUL-0: CVE-2022-1974: kernel-source-rt,kernel-source,kernel-source-azure: use-after-free in /net/nfc/core.c causes kernel crash by simulating nfc device from user-space" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200206" id="1200206" title="SLES 15 SP3 - s390/dasd: Fix read inconsistency and failure for ESE devices" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200207" id="1200207" title="SLES 15 SP3 - s390/dasd: Fix data corruption for ESE devices" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200249" id="1200249" title="SLE15-SP3/armv7l/lpae: NEW WARNINGS (4c788136)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200259" id="1200259" title="Kernel Panic in bfq_bic_update_cgroup while fstrim after Update to Kernel 5.3.18-150300.59.68.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200263" id="1200263" title="Partner-L3: I/O request allocation is stuck for more than 120 seconds" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200529" id="1200529" title="L3-Question: Customer is requesting Workaround/Mitigation for CVE-2022-1966 / Netfilter use-after-free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200549" id="1200549" title="VUL-0: CVE-2022-21123,CVE-2022-21125,CVE-2022-21166: xen: x86: MMIO Stale Data vulnerabilities (XSA-404)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200604" id="1200604" title="VUL-0: CVE-2022-20141: kernel-source-azure,kernel-source,kernel-source-rt: use after free in ip_check_mc_rcu()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20141" id="CVE-2022-20141" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20141" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1966" id="CVE-2022-1966" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1966" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32250" id="CVE-2022-32250" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32250" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1975" id="CVE-2022-1975" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1975" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1974" id="CVE-2022-1974" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1974" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26541" id="CVE-2020-26541" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26541" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21166" id="CVE-2022-21166" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21166" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21127" id="CVE-2022-21127" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21127" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21123" id="CVE-2022-21123" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21123" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21125" id="CVE-2022-21125" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21125" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21180" id="CVE-2022-21180" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21180" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1972" id="CVE-2022-1972" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1972" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19377" id="CVE-2019-19377" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19377" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1729" id="CVE-2022-1729" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1729" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1184" id="CVE-2022-1184" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1184" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1652" id="CVE-2022-1652" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1652" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20008" id="CVE-2022-20008" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20008" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30594" id="CVE-2022-30594" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30594" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0168" id="CVE-2022-0168" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0168" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33061" id="CVE-2021-33061" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33061" type="cve"/>
      <reference href="https://jira.suse.com/browse/SLE-13521" id="SLE-13521" title="https://jira.suse.com/browse/SLE-13521" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-16387" id="SLE-16387" title="https://jira.suse.com/browse/SLE-16387" type="jira"/>
      <reference href="https://jira.suse.com/browse/SLE-8371" id="SLE-8371" title="https://jira.suse.com/browse/SLE-8371" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP3 kernel was updated.

The following security bugs were fixed:

- CVE-2022-1972: Fixed a buffer overflow in nftable that could lead to privilege escalation. (bsc#1200019)
- CVE-2019-19377: Fixed an user-after-free that could be triggered when an attacker mounts a crafted btrfs filesystem image. (bnc#1158266)
- CVE-2022-1729: Fixed a sys_perf_event_open() race condition against self (bsc#1199507).
- CVE-2022-1184: Fixed an use-after-free and memory errors in ext4 when mounting and operating on a corrupted image. (bsc#1198577)
- CVE-2022-1652: Fixed a statically allocated error counter inside the floppy kernel module (bsc#1199063).
- CVE-2022-20008: Fixed bug that allows to read kernel heap memory due to uninitialized data in mmc_blk_read_single of block.c. (bnc#1199564)
- CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag (bnc#1199505).
- CVE-2022-0168: Fixed a NULL pointer dereference in smb2_ioctl_query_info. (bsc#1197472)
- CVE-2021-33061: Fixed insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters that may have allowed an authenticated user to potentially enable denial of service via local access (bnc#1196426).
- CVE-2022-20141: Fixwed an use after free due to improper locking. This bug could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. (bnc#1200604)
- CVE-2022-21123: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21125: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21180: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21166: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21127: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-1975: Fixed a sleep-in-atomic bug that allows attacker to crash linux kernel by simulating nfc device from user-space. (bsc#1200143)
- CVE-2022-1974: Fixed an use-after-free that could causes kernel crash by simulating an nfc device from user-space. (bsc#1200144)
- CVE-2020-26541: Enforce the secure boot forbidden signature database (aka dbx) protection mechanism. (bnc#1177282)
- CVE-2022-32250: Fixed an use-after-free bug in the netfilter subsystem. This flaw allowed a local attacker with user access to cause a privilege escalation issue. (bnc#1200015)

The following non-security bugs were fixed:

- ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default (git-fixes).
- ACPI: property: Release subnode properties with data nodes (git-fixes).
- ACPI: sysfs: Fix BERT error region memory mapping (git-fixes).
- ACPI: sysfs: Make sparse happy about address space in use (git-fixes).
- ALSA: ctxfi: Add SB046x PCI ID (git-fixes).
- ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes (git-fixes).
- ALSA: hda - fix unused Realtek function when PM is not enabled (git-fixes).
- ALSA: hda/conexant - Fix loopback issue with CX20632 (git-fixes).
- ALSA: hda/realtek - Add new type for ALC245 (git-fixes).
- ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS (git-fixes).
- ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9520 laptop (git-fixes).
- ALSA: hda/realtek: Enable headset mic on Lenovo P360 (git-fixes).
- ALSA: pcm: Check for null pointer of pointer substream before dereferencing it (git-fixes).
- ALSA: usb-audio: Add missing ep_idx in fixed EP quirks (git-fixes).
- ALSA: usb-audio: Clear MIDI port active flag after draining (git-fixes).
- ALSA: usb-audio: Configure sync endpoints before data (git-fixes).
- ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant (git-fixes).
- ALSA: usb-audio: Optimize TEAC clock quirk (git-fixes).
- ALSA: usb-audio: Restore Rane SL-1 quirk (git-fixes).
- ALSA: usb-audio: Set up (implicit) sync for Saffire 6 (git-fixes).
- ALSA: usb-audio: Skip generic sync EP parse for secondary EP (git-fixes).
- ALSA: usb-audio: Workaround for clock setup on TEAC devices (git-fixes).
- ALSA: wavefront: Proper check of get_user() error (git-fixes).
- ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling (git-fixes)
- ARM: 9170/1: fix panic when kasan and kprobe are enabled (git-fixes)
- ARM: 9187/1: JIVE: fix return value of __setup handler (git-fixes)
- ARM: config: u8500: Re-enable AB8500 battery charging (git-fixes)
- ARM: davinci: da850-evm: Avoid NULL pointer dereference (git-fixes)
- ARM: dts: am3517-evm: Fix misc pinmuxing (git-fixes)
- ARM: dts: armada-38x: Add generic compatible to UART nodes (git-fixes)
- ARM: dts: at91: fix pinctrl phandles (git-fixes)
- ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek (git-fixes)
- ARM: dts: at91: sama5d2: Fix PMERRLOC resource size (git-fixes)
- ARM: dts: at91: sama5d4_xplained: fix pinctrl phandle name (git-fixes)
- ARM: dts: bcm2835-rpi-b: Fix GPIO line names (git-fixes)
- ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT (git-fixes)
- ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED (git-fixes)
- ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C (git-fixes)
- ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 (git-fixes)
- ARM: dts: Fix OpenBMC flash layout label addresses (git-fixes)
- ARM: dts: imx: Add missing LVDS decoder on M53Menlo (git-fixes)
- ARM: dts: imx23-evk: Remove MX23_PAD_SSP1_DETECT from hog group (git-fixes)
- ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue (git-fixes)
- ARM: dts: imx6qdl-udoo: Properly describe the SD card detect (git-fixes)
- ARM: dts: imx6ull-colibri: fix vqmmc regulator (git-fixes)
- ARM: dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name (git-fixes)
- ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35 (git-fixes)
- ARM: dts: meson: Fix the UART compatible strings (git-fixes)
- ARM: dts: meson8: Fix the UART device-tree schema validation (git-fixes)
- ARM: dts: meson8b: Fix the UART device-tree schema validation (git-fixes)
- ARM: dts: qcom: ipq4019: fix sleep clock (git-fixes)
- ARM: dts: qcom: msm8974: Drop flags for mdss irqs (git-fixes)
- ARM: dts: suniv: F1C100: fix watchdog compatible (git-fixes)
- ARM: ftrace: ensure that ADR takes the Thumb bit into account (git-fixes)
- ARM: mediatek: select arch timer for mt7629 (git-fixes)
- ARM: omap: remove debug-leds driver (git-fixes)
- ARM: OMAP2+: Fix refcount leak in omap_gic_of_init (git-fixes)
- ARM: socfpga: dts: fix qspi node compatible (git-fixes)
- ARM: socfpga: fix missing RESET_CONTROLLER (git-fixes)
- ARM: tegra: Move panels to AUX bus (git-fixes)
- arm64: avoid fixmap race condition when create pud mapping (git-fixes)
- arm64: dts: broadcom: Fix sata nodename (git-fixes)
- arm64: dts: ns2: Fix spi-cpol and spi-cpha property (git-fixes)
- arm64: dts: rockchip: Fix SDIO regulator supply properties on (git-fixes)
- arm64: paravirt: Use RCU read locks to guard stolen_time (git-fixes).
- arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions (git-fixes)
- ASoC: atmel-classd: Remove endianness flag on class d component (git-fixes).
- ASoC: atmel-pdmic: Remove endianness flag on pdmic component (git-fixes).
- ASoC: da7219: Fix change notifications for tone generator frequency (git-fixes).
- ASoC: dapm: Do not fold register value changes into notifications (git-fixes).
- ASoC: dmaengine: Restore NULL prepare_slave_config() callback (git-fixes).
- ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition (git-fixes).
- ASoC: max98090: Generate notifications on changes for custom control (git-fixes).
- ASoC: max98090: Move check for invalid values before casting in max98090_put_enab_tlv() (git-fixes).
- ASoC: max98090: Reject invalid values in custom control put() (git-fixes).
- ASoC: max98357a: remove dependency on GPIOLIB (git-fixes).
- ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe (git-fixes).
- ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe (git-fixes).
- ASoC: meson: Fix event generation for G12A tohdmi mux (git-fixes).
- ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe (git-fixes).
- ASoC: ops: Validate input values in snd_soc_put_volsw_range() (git-fixes).
- ASoC: rk3328: fix disabling mclk on pclk probe failure (git-fixes).
- ASoC: rt5514: Fix event generation for &quot;DSP Voice Wake Up&quot; control (git-fixes).
- ASoC: rt5645: Fix errorenous cleanup order (git-fixes).
- ASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_* (git-fixes).
- ASoC: tscs454: Add endianness flag in snd_soc_component_driver (git-fixes).
- ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition() (git-fixes).
- ASoC: wm8958: Fix change notifications for DSP controls (git-fixes).
- assoc_array: Fix BUG_ON during garbage collect (git-fixes).
- ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files (git-fixes).
- ata: pata_hpt37x: fix PCI clock detection (git-fixes).
- ata: pata_marvell: Check the 'bmdma_addr' beforing reading (git-fixes).
- ath9k_htc: fix potential out of bounds access with invalid rxstatus-&gt;rs_keyix (git-fixes).
- ath9k: fix ar9003_get_eepmisc (git-fixes).
- ath9k: fix QCA9561 PA bias level (git-fixes).
- b43: Fix assigning negative value to unsigned variable (git-fixes).
- b43legacy: Fix assigning negative value to unsigned variable (git-fixes).
- batman-adv: Do not skb_split skbuffs with frag_list (git-fixes).
- blk-cgroup: move blkcg_{get,set}_fc_appid out of line (bsc#1200045).
- blk-mq: fix tag_get wait task can't be awakened (bsc#1200263).
- blk-mq: Fix wrong wakeup batch configuration which will cause hang (bsc#1200263).
- block: fix bio_clone_blkg_association() to associate with proper blkcg_gq (bsc#1200259).
- Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (git-fixes).
- Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout (git-fixes).
- Bluetooth: Fix the creation of hdev-&gt;name (git-fixes).
- Bluetooth: hci_qca: Use del_timer_sync() before freeing (git-fixes).
- bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag (jsc#SLE-8371 bsc#1153274).
- bnxt_en: Fix unnecessary dropping of RX packets (jsc#SLE-15075).
- brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant (git-fixes).
- btrfs: tree-checker: fix incorrect printk format (bsc#1200249).
- bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create() (git-fixes).
- bus: ti-sysc: Fix warnings for unbind for serial (git-fixes).
- can: grcan: grcan_close(): fix deadlock (git-fixes).
- can: grcan: use ofdev-&gt;dev when allocating DMA memory (git-fixes).
- carl9170: tx: fix an incorrect use of list iterator (git-fixes).
- ceph: fix setting of xattrs on async created inodes (bsc#1200192).
- cfg80211: set custom regdomain after wiphy registration (git-fixes).
- cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() (bsc#1199839).
- clk: at91: generated: consider range when calculating best rate (git-fixes).
- clk: bcm2835: fix bcm2835_clock_choose_div (git-fixes).
- clk: imx8mp: fix usb_root_clk parent (git-fixes).
- clk: renesas: r9a06g032: Fix the RTC hclock description (git-fixes).
- clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource() (git-fixes).
- clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value (git-fixes).
- clocksource/drivers/sp804: Avoid error on multiple instances (git-fixes).
- copy_process(): Move fd_install() out of sighand-&gt;siglock critical section (bsc#1199626).
- crypto: caam - fix i.MX6SX entropy delay value (git-fixes).
- crypto: ecrdsa - Fix incorrect use of vli_cmp (git-fixes).
- crypto: stm32 - fix reference leak in stm32_crc_remove (git-fixes).
- crypto: x86 - eliminate anonymous module_init and module_exit (git-fixes).
- crypto: x86/chacha20 - Avoid spurious jumps to other functions (git-fixes).
- dim: initialize all struct fields (git-fixes).
- dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace (git-fixes).
- dmaengine: idxd: Fix the error handling path in idxd_cdev_register() (git-fixes).
- dmaengine: stm32-mdma: remove GISR1 register (git-fixes).
- dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type (git-fixes).
- docs: powerpc: Fix misspellings and grammar errors (bsc#1055117 ltc#159753).
- docs: submitting-patches: Fix crossref to 'The canonical patch format' (git-fixes).
- drbd: fix an invalid memory access caused by incorrect use of list iterator (git-fixes).
- drbd: fix duplicate array initializer (git-fixes).
- drbd: Fix five use after free bugs in get_initial_state (git-fixes).
- drbd: remove assign_p_sizes_qlim (git-fixes).
- drbd: use bdev based limit helpers in drbd_send_sizes (git-fixes).
- drbd: use bdev_alignment_offset instead of queue_alignment_offset (git-fixes).
- driver core: fix deadlock in __device_attach (git-fixes).
- driver: base: fix UAF when driver_attach failed (git-fixes).
- drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION() (git-fixes)
- drivers: i2c: thunderx: Allow driver to work with ACPI defined TWSI controllers (git-fixes).
- drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() (git-fixes).
- drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop() (git-fixes).
- drivers: tty: serial: Fix deadlock in sa1100_set_termios() (git-fixes).
- drivers: usb: host: Fix deadlock in oxu_bus_suspend() (git-fixes).
- drivers/base/memory: fix an unlikely reference counting issue in __add_memory_block() (git-fixes).
- drivers/base/node.c: fix compaction sysfs file leak (git-fixes).
- drm: imx: fix compiler warning with gcc-12 (git-fixes).
- drm: mali-dp: potential dereference of null pointer (git-fixes).
- drm: msm: fix error check return value of irq_of_parse_and_map() (git-fixes).
- drm: msm: fix possible memory leak in mdp5_crtc_cursor_set() (git-fixes).
- drm: sti: do not use kernel-doc markers (git-fixes).
- drm/amd/display/dc/gpio/gpio_service: Pass around correct dce_{version, environment} types (git-fixes).
- drm/amdgpu/cs: make commands with 0 chunks illegal behaviour (git-fixes).
- drm/amdgpu/smu10: fix SoC/fclk units in auto mode (git-fixes).
- drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo (git-fixes).
- drm/amdkfd: Fix GWS queue count (git-fixes).
- drm/atomic: Force bridge self-refresh-exit on CRTC switch (git-fixes).
- drm/blend: fix typo in the comment (git-fixes).
- drm/bridge: adv7511: clean up CEC adapter when probe fails (git-fixes).
- drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX (git-fixes).
- drm/bridge: analogix_dp: Support PSR-exit to disable transition (git-fixes).
- drm/bridge: Fix error handling in analogix_dp_probe (git-fixes).
- drm/edid: fix invalid EDID extension block filtering (git-fixes).
- drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency() (git-fixes).
- drm/i915: Fix CFI violation with show_dynamic_id() (git-fixes).
- drm/i915: fix i915_globals_exit() section mismatch error (git-fixes).
- drm/i915: Fix SEL_FETCH_PLANE_*(PIPE_B+) register addresses (git-fixes).
- drm/komeda: Fix an undefined behavior bug in komeda_plane_add() (git-fixes).
- drm/komeda: return early if drm_universal_plane_init() fails (git-fixes).
- drm/mediatek: Fix mtk_cec_mask() (git-fixes).
- drm/msm: return an error pointer in msm_gem_prime_get_sg_table() (git-fixes).
- drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init (git-fixes).
- drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume (git-fixes).
- drm/msm/dpu: adjust display_v_end for eDP and DP (git-fixes).
- drm/msm/dsi: fix address for second DSI PHY on SDM660 (git-fixes).
- drm/msm/dsi: fix error checks and return values for DSI xmit functions (git-fixes).
- drm/msm/hdmi: check return value after calling platform_get_resource_byname() (git-fixes).
- drm/msm/hdmi: fix error check return value of irq_of_parse_and_map() (git-fixes).
- drm/msm/mdp5: check the return of kzalloc() (git-fixes).
- drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected (git-fixes).
- drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected (git-fixes).
- drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name() (git-fixes).
- drm/nouveau/clk: Fix an incorrect NULL check on list iterator (git-fixes).
- drm/nouveau/kms/nv50-: atom: fix an incorrect NULL check on list iterator (git-fixes).
- drm/nouveau/tegra: Stop using iommu_present() (git-fixes).
- drm/panel: simple: Add missing bus flags for Innolux G070Y2-L01 (git-fixes).
- drm/plane: Move range check for format_count earlier (git-fixes).
- drm/radeon: fix a possible null pointer dereference (git-fixes).
- drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() (git-fixes).
- drm/vc4: hvs: Reset muxes at probe time (git-fixes).
- drm/vc4: txp: Do not set TXP_VSTART_AT_EOF (git-fixes).
- drm/vc4: txp: Force alpha to be 0xff if it's disabled (git-fixes).
- drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes (git-fixes).
- drm/vmwgfx: Initialize drm_mode_fb_cmd2 (git-fixes).
- EDAC/synopsys: Read the error count from the correct register (bsc#1178134).
- efi: Add missing prototype for efi_capsule_setup_info (git-fixes).
- efi: Do not import certificates from UEFI Secure Boot for T2 Macs (git-fixes).
- fbcon: Consistently protect deferred_takeover with console_lock() (git-fixes).
- firewire: core: extend card-&gt;lock in fw_core_handle_bus_reset (git-fixes).
- firewire: fix potential uaf in outbound_phy_packet_callback() (git-fixes).
- firewire: remove check of list iterator against head past the loop body (git-fixes).
- firmware: arm_scmi: Fix list protocols enumeration in the base protocol (git-fixes).
- firmware: arm_scmi: Validate BASE_DISCOVER_LIST_PROTOCOLS response (git-fixes).
- firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle (git-fixes).
- firmware: stratix10-svc: fix a missing check on list iterator (git-fixes).
- ftrace: Clean up hash direct_functions on register failures (git-fixes).
- genirq: Fix reference leaks on irq affinity notifiers (git-fixes)
- genirq: Let GENERIC_IRQ_IPI select IRQ_DOMAIN_HIERARCHY (git-fixes)
- genirq/affinity: Consider that CPUs on nodes can be (git-fixes)
- genirq/affinity: Handle affinity setting on inactive (git-fixes)
- genirq/msi: Ensure deactivation on teardown (git-fixes)
- genirq/proc: Reject invalid affinity masks (again) (git-fixes)
- genirq/timings: Fix error return code in (git-fixes)
- genirq/timings: Prevent potential array overflow in (git-fixes)
- gma500: fix an incorrect NULL check on list iterator (git-fixes).
- gpio: adp5588: Remove support for platform setup and teardown callbacks (git-fixes).
- gpio: gpio-vf610: do not touch other bits when set the target bit (git-fixes).
- gpio: mvebu/pwm: Refuse requests with inverted polarity (git-fixes).
- gpio: pca953x: fix irq_stat not updated when irq is disabled (irq_mask not set) (git-fixes).
- gpio: pca953x: use the correct register address to do regcache sync (git-fixes).
- gpiolib: of: fix bounds check for 'gpio-reserved-ranges' (git-fixes).
- hex2bin: fix access beyond string end (git-fixes).
- HID: bigben: fix slab-out-of-bounds Write in bigben_probe (git-fixes).
- HID: elan: Fix potential double free in elan_input_configured (git-fixes).
- HID: hid-led: fix maximum brightness for Dream Cheeky (git-fixes).
- HID: multitouch: Add support for Google Whiskers Touchpad (git-fixes).
- hinic: fix bug of wq out of bound access (bsc#1176447).
- hwmon: (f71882fg) Fix negative temperature (git-fixes).
- hwmon: (ltq-cputemp) restrict it to SOC_XWAY (git-fixes).
- hwmon: (tmp401) Add OF device ID table (git-fixes).
- hwmon: Make chip parameter for with_info API mandatory (git-fixes).
- i2c: at91: Initialize dma_buf in at91_twi_xfer() (git-fixes).
- i2c: at91: use dma safe buffers (git-fixes).
- i2c: cadence: Increase timeout per message if necessary (git-fixes).
- i2c: ismt: Provide a DMA buffer for Interrupt Cause Logging (git-fixes).
- i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe() (git-fixes).
- i40e: stop disabling VFs due to PF error responses (git-fixes).
- ice: arfs: fix use-after-free when freeing @rx_cpu_rmap (jsc#SLE-12878).
- ice: Clear default forwarding VSI during VSI release (jsc#SLE-12878).
- ice: Do not skip not enabled queues in ice_vc_dis_qs_msg (jsc#SLE-7926).
- ice: Fix race conditions between virtchnl handling and VF ndo ops (git-fixes).
- ice: synchronize_rcu() when terminating rings (jsc#SLE-7926).
- iio: adc: ad7124: Remove shift from scan_type (git-fixes).
- iio: adc: sc27xx: Fine tune the scale calibration values (git-fixes).
- iio: adc: sc27xx: fix read big scale voltage not right (git-fixes).
- iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check (git-fixes).
- iio: dac: ad5446: Fix read_raw not returning set value (git-fixes).
- iio: dac: ad5592r: Fix the missing return value (git-fixes).
- iio: dummy: iio_simple_dummy: check the return value of kstrdup() (git-fixes).
- iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on() (git-fixes).
- Input: add bounds checking to input_set_capability() (git-fixes).
- Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag (git-fixes).
- Input: goodix - fix spurious key release events (git-fixes).
- Input: ili210x - fix reset timing (git-fixes).
- Input: sparcspkr - fix refcount leak in bbc_beep_probe (git-fixes).
- Input: stmfts - do not leave device disabled in stmfts_input_open (git-fixes).
- Input: stmfts - fix reference leak in stmfts_input_open (git-fixes).
- iommu/amd: Increase timeout waiting for GA log enablement (bsc#1199052).
- ionic: avoid races in ionic_heartbeat_check (bsc#1167773).
- ionic: Cleanups in the Tx hotpath code (bsc#1167773).
- ionic: disable napi when ionic_lif_init() fails (bsc#1167773).
- ionic: Do not send reset commands if FW isn't running (bsc#1167773).
- ionic: fix missing pci_release_regions() on error in ionic_probe() (bsc#1167773).
- ionic: fix type complaint in ionic_dev_cmd_clean() (jsc#SLE-16649).
- ionic: monitor fw status generation (bsc#1167773).
- ionic: remove the dbid_inuse bitmap (bsc#1167773).
- ionic: start watchdog after all is setup (bsc#1167773).
- ipw2x00: Fix potential NULL dereference in libipw_xmit() (git-fixes).
- irqchip: irq-xtensa-mx: fix initial IRQ affinity (git-fixes).
- irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x (git-fixes).
- irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value (git-fixes).
- irqchip/exiu: Fix acknowledgment of edge triggered interrupts (git-fixes).
- ivtv: fix incorrect device_caps for ivtvfb (git-fixes).
- iwlwifi: iwl-dbg: Use del_timer_sync() before freeing (git-fixes).
- iwlwifi: mvm: fix assert 1F04 upon reconfig (git-fixes).
- iwlwifi: mvm: fix the return type for DSM functions 1 and 2 (git-fixes).
- jbd2: Fake symbols defined under CONFIG_JBD2_DEBUG (bsc#1198971).
- kABI: ivtv: restore caps member (git-fixes).
- Kconfig.debug: drop selecting non-existing HARDLOCKUP_DETECTOR_ARCH (git-fixes).
- KVM: fix wrong exception emulation in check_rdtsc (git-fixes).
- KVM: nVMX: Invalidate all roots when emulating INVVPID without EPT (git-fixes).
- KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use (git-fixes).
- KVM: nVMX: Set LDTR to its architecturally defined value on nested VM-Exit (git-fixes).
- KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter (git-fixes).
- KVM: PPC: Fix TCE handling for VFIO (bsc#1061840 git-fixes).
- KVM: s390: pv: add macros for UVC CC values (git-fixes).
- KVM: s390: pv: avoid double free of sida page (git-fixes).
- KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm (git-fixes).
- KVM: s390: vsie/gmap: reduce gmap_rmap overhead (git-fixes).
- KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state (git-fixes).
- KVM: VMX: Flush all EPTP/VPID contexts on remote TLB flush (git-fixes).
- KVM: VMX: Use current VMCS to query WAITPKG support for MSR emulation (git-fixes).
- KVM: x86: clflushopt should be treated as a no-op by emulation (git-fixes).
- KVM: x86: Do not force set BSP bit when local APIC is managed by userspace (git-fixes).
- KVM: x86: Fix emulation in writing cr8 (git-fixes).
- KVM: x86: Fix off-by-one error in kvm_vcpu_ioctl_x86_setup_mce (git-fixes).
- KVM: x86: Immediately reset the MMU context when the SMM flag is cleared (git-fixes).
- KVM: x86: Inject #GP if guest attempts to toggle CR4.LA57 in 64-bit mode (git-fixes).
- KVM: x86: Mark CR4.TSD as being possibly owned by the guest (git-fixes).
- KVM: x86: Migrate the PIT only if vcpu0 is migrated, not any BSP (git-fixes).
- KVM: x86: Toggling CR4.PKE does not load PDPTEs in PAE mode (git-fixes).
- KVM: x86: Toggling CR4.SMAP does not load PDPTEs in PAE mode (git-fixes).
- KVM: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU (git-fixes).
- KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() (git-fixes).
- KVM: x86/pmu: Fix HW_REF_CPU_CYCLES event pseudo-encoding in intel_arch_events[] (git-fixes).
- lan743x: fix rx_napi_poll/interrupt ping-pong (git-fixes).
- lan743x: remove redundant assignment to variable rx_process_result (git-fixes).
- lib/raid6/test: fix multiple definition linking error (git-fixes).
- lpfc: Readd update to version 14.2.0.1 (bsc#1197675 bsc#1196478 bsc#1198989) The update was reverted due to some regression on older hardware. These have been fixed in the meantime, thus update the driver.
- mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection (git-fixes).
- mac80211: fix rx reordering with non explicit / psmp ack policy (git-fixes).
- mac80211: Reset MBSSID parameters upon connection (git-fixes).
- mac80211: upgrade passive scan to active scan on DFS channels after beacon rx (git-fixes).
- md: fix an incorrect NULL check in does_sb_need_changing (git-fixes).
- md: fix an incorrect NULL check in md_reload_sb (git-fixes).
- media: cx25821: Fix the warning when removing the module (git-fixes).
- media: davinci: Make use of the helper function devm_platform_ioremap_resource() (git-fixes).
- media: davinci: vpif: fix unbalanced runtime PM enable (git-fixes).
- media: davinci: vpif: fix use-after-free on driver unbind (git-fixes).
- media: media-entity.h: Fix documentation for media_create_intf_link (git-fixes).
- media: netup_unidvb: Do not leak SPI master in probe error path (git-fixes).
- media: ov7670: remove ov7670_power_off from ov7670_remove (git-fixes).
- media: pci: cx23885: Fix the error handling in cx23885_initdev() (git-fixes).
- media: platform: add missing put_device() call in mtk_jpeg_probe() and mtk_jpeg_remove() (git-fixes).
- media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init (git-fixes).
- media: saa7134: fix incorrect use to determine if list is empty (git-fixes).
- media: uvcvideo: Fix missing check to determine if element is found in list (git-fixes).
- media: venus: hfi: avoid null dereference in deinit (git-fixes).
- media: videobuf2: Fix the size printk format (git-fixes).
- media: vim2m: Register video device after setting up internals (git-fixes).
- mfd: ipaq-micro: Fix error check return value of platform_get_irq() (git-fixes).
- misc: ocxl: fix possible double free in ocxl_file_register_afu (git-fixes).
- misc: rtsx: set NULL intfdata when probe fails (git-fixes).
- mm, page_alloc: fix build_zonerefs_node() (git-fixes).
- mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove() (jsc#SLE-15176, jsc#SLE-16387).
- mmc: block: Fix CQE recovery reset success (git-fixes).
- mmc: block: Use generic_cmd6_time when modifying INAND_CMD38_ARG_EXT_CSD (git-fixes).
- mmc: core: Specify timeouts for BKOPS and CACHE_FLUSH for eMMC (git-fixes).
- mmc: jz4740: Apply DMA engine limits to maximum segment size (git-fixes).
- modpost: fix removing numeric suffixes (git-fixes).
- modpost: fix undefined behavior of is_arm_mapping_symbol() (git-fixes).
- mt76: check return value of mt76_txq_send_burst in mt76_txq_schedule_list (git-fixes).
- mt76: Fix undefined behavior due to shift overflowing the constant (git-fixes).
- mt76: mt7663s: fix rx buffer refcounting (git-fixes).
- mtd: rawnand: fix ecc parameters for mt7622 (git-fixes).
- mtd: rawnand: Fix return value check of wait_for_completion_timeout (git-fixes).
- mtd: spi-nor: core: Check written SR value in spi_nor_write_16bit_sr_and_check() (git-fixes).
- mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue (git-fixes).
- net: bcmgenet: Fix a resource leak in an error handling path in the probe functin (git-fixes).
- net: dsa: lantiq_gswip: Enable GSWIP_MII_CFG_EN also for internal PHYs (git-fixes).
- net: dsa: lantiq_gswip: Fix GSWIP_MII_CFG(p) register access (git-fixes).
- net: ethernet: Fix memleak in ethoc_probe (git-fixes).
- net: ethernet: ti: cpts: fix ethtool output when no ptp_clock registered (git-fixes).
- net: hdlc_ppp: Fix issues when mod_timer is called while timer is running (git-fixes).
- net: hns3: add a check for index in hclge_get_rss_key() (git-fixes).
- net: hns3: clear inited state and stop client after failed to register netdev (bsc#1154353).
- net: hns3: fix bug when PF set the duplicate MAC address for VFs (jsc#SLE-14777).
- net: hns3: fix kernel crash when unload VF while it is being reset (git-fixes).
- net: korina: fix return value (git-fixes).
- net: rtlwifi: properly check for alloc_workqueue() failure (git-fixes).
- net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog (bsc#1183405).
- net: stmmac: dwmac-sun8i: Balance internal PHY power (git-fixes).
- net: stmmac: dwmac-sun8i: Balance internal PHY resource references (git-fixes).
- net: stmmac: dwmac-sun8i: Balance syscon (de)initialization (git-fixes).
- net: stmmac: dwmac-sun8i: Fix probe error handling (git-fixes).
- net/mlx5: Fix a race on command flush flow (jsc#SLE-15172).
- net/mlx5e: Fix the calling of update_buffer_lossy() API (jsc#SLE-15172).
- netdevice: demote the type of some dev_addr_set() helpers (bsc#1200216).
- netfilter: conntrack: connection timeout after re-register (bsc#1199035).
- netfilter: conntrack: move synack init code to helper (bsc#1199035).
- netfilter: conntrack: re-init state for retransmitted syn-ack (bsc#1199035).
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (bsc#1199035).
- netfilter: nf_conntrack_tcp: re-init for syn packets only (bsc#1199035).
- netfilter: nft_set_rbtree: overlap detection with element re-addition after deletion (bsc#1176447).
- NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx (git-fixes).
- NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc (git-fixes).
- NFC: netlink: fix sleep in atomic bug when firmware download timeout (git-fixes).
- NFC: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs (git-fixes).
- NFC: NULL out the dev-&gt;rfkill to prevent UAF (git-fixes).
- NFC: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION (git-fixes).
- NFC: st21nfca: fix incorrect validating logic in EVT_TRANSACTION (git-fixes).
- NFC: st21nfca: fix memory leaks in EVT_TRANSACTION handling (git-fixes).
- NFS: Do not report ENOSPC write errors twice (git-fixes).
- NFS: limit use of ACCESS cache for negative responses (bsc#1196570).
- nfsd: Fix null-ptr-deref in nfsd_fill_super() (git-fixes).
- NFSv4: Do not invalidate inode attributes on delegation return (git-fixes).
- nl80211: show SSID for P2P_GO interfaces (git-fixes).
- nvdimm/region: always show the 'align' attribute (bsc#1199114).
- nvme-tcp: allow selecting the network interface for connections (bsc#1199670).
- nvme-tcp: use __dev_get_by_name instead dev_get_by_name for OPT_HOST_IFACE (bsc#1199670).
- objtool: Fix type of reloc::addend (git-fixes).
- PCI: aardvark: Clear all MSIs at setup (git-fixes).
- PCI: cadence: Fix find_first_zero_bit() limit (git-fixes).
- PCI: Do not enable AtomicOps on VFs (git-fixes).
- PCI: dwc: Fix setting error return on MSI DMA mapping failure (git-fixes).
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (bsc#1199314).
- PCI: hv: Fix NUMA node assignment when kernel boots with custom NUMA topology (bsc#1199365).
- PCI: imx6: Fix PERST# start-up sequence (git-fixes).
- PCI: iproc: Set affinity mask on MSI interrupts (git-fixes).
- PCI: qcom: Fix runtime PM imbalance on probe errors (git-fixes).
- PCI: qcom: Fix unbalanced PHY init on probe errors (git-fixes).
- PCI: rockchip: Fix find_first_zero_bit() limit (git-fixes).
- PCI/AER: Clear MULTI_ERR_COR/UNCOR_RCV bits (git-fixes).
- PCI/PM: Power up all devices during runtime resume (git-fixes).
- pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards (git-fixes).
- phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe (git-fixes).
- phy: qcom-qmp: fix pipe-clock imbalance on power-on failure (git-fixes).
- phy: qcom-qmp: fix reset-controller leak on probe errors (git-fixes).
- phy: qcom-qmp: fix struct clk leak on probe errors (git-fixes).
- phy: samsung: exynos5250-sata: fix missing device put in probe error paths (git-fixes).
- phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe (git-fixes).
- phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe (git-fixes).
- phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks (git-fixes).
- pinctrl: mvebu: Fix irq_of_parse_and_map() return value (git-fixes).
- pinctrl: pistachio: fix use of irq_of_parse_and_map() (git-fixes).
- pinctrl: rockchip: fix RK3308 pinmux bits (git-fixes).
- pinctrl: sunxi: fix f1c100s uart2 function (git-fixes).
- pinctrl/rockchip: support deferring other gpio params (git-fixes).
- ping: fix the sk_bound_dev_if match in ping_lookup (bsc#1195826).
- ping: remove pr_err from ping_lookup (bsc#1195826).
- platform/chrome: cros_ec_debugfs: detach log reader wq from devm (git-fixes).
- platform/chrome: cros_ec_proto: Send command again when timeout occurs (git-fixes).
- platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative (git-fixes).
- platform/x86: wmi: Fix driver-&gt;notify() vs -&gt;probe() race (git-fixes).
- platform/x86: wmi: Replace read_takes_no_args with a flags field (git-fixes).
- PM / devfreq: rk3399_dmc: Disable edev on remove() (git-fixes).
- powerpc: Enable the DAWR on POWER9 DD2.3 and above (bsc#1055117 ltc#159753).
- powerpc/64s: Add CPU_FTRS_POWER10 to ALWAYS mask (jsc#SLE-13521 git-fixes).
- powerpc/64s: Add CPU_FTRS_POWER9_DD2_2 to CPU_FTRS_ALWAYS mask (bsc#1061840 git-fixes).
- powerpc/64s/radix: Fix huge vmap false positive (bsc#1156395).
- powerpc/fadump: fix PT_LOAD segment for boot memory area (bsc#1103269 ltc#169948 git-fixes).
- powerpc/powernv: Add __init attribute to eligible functions (bsc#1188885 ltc#193722 git-fixes).
- powerpc/powernv: Get L1D flush requirements from device-tree (bsc#1188885 ltc#193722 git-fixes).
- powerpc/powernv: Get STF barrier requirements from device-tree (bsc#1188885 ltc#193722 git-fixes).
- powerpc/powernv: Remove POWER9 PVR version check for entry and uaccess flushes (bsc#1188885 ltc#193722 git-fixes).
- powerpc/xive: Add some error handling code to 'xive_spapr_init()' (git-fixes).
- powerpc/xive: Fix refcount leak in xive_spapr_init (git-fixes).
- pwm: lp3943: Fix duty calculation in case period was clamped (git-fixes).
- pwm: raspberrypi-poe: Fix endianness in firmware struct (git-fixes).
- qlcnic: Fix error code in probe (git-fixes).
- raid5: introduce MD_BROKEN (git-fixes).
- regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET (git-fixes).
- regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt (git-fixes).
- rtc: fix use-after-free on device removal (git-fixes).
- rtc: mc146818-lib: Fix the AltCentury for AMD platforms (git-fixes).
- rtc: mt6397: check return value after calling platform_get_resource() (git-fixes).
- rtl818x: Prevent using not initialized queues (git-fixes).
- rtlwifi: Use pr_warn instead of WARN_ONCE (git-fixes).
- s390: fix detection of vector enhancements facility 1 vs. vector packed decimal facility (git-fixes).
- s390: fix strrchr() implementation (git-fixes).
- s390/cio: dont call css_wait_for_slow_path() inside a lock (git-fixes).
- s390/cio: Fix the &quot;type&quot; field in s390_cio_tpi tracepoint (git-fixes).
- s390/crypto: fix scatterwalk_unmap() callers in AES-GCM (git-fixes).
- s390/ctcm: fix potential memory leak (git-fixes).
- s390/ctcm: fix variable dereferenced before check (git-fixes).
- s390/dasd: fix data corruption for ESE devices (bsc#1200207 LTC#198454).
- s390/dasd: Fix read for ESE with blksize 4k (bsc#1200206 LTC#198455).
- s390/dasd: Fix read inconsistency for ESE DASD devices (bsc#1200206 LTC#198455).
- s390/dasd: prevent double format of tracks for ESE devices (bsc#1200207 LTC#198454).
- s390/ftrace: fix ftrace_update_ftrace_func implementation (git-fixes).
- s390/lcs: fix variable dereferenced before check (git-fixes).
- s390/mcck: fix invalid KVM guest condition check (git-fixes).
- s390/mcck: isolate SIE instruction when setting CIF_MCCK_GUEST flag (git-fixes).
- s390/nmi: handle guarded storage validity failures for KVM guests (git-fixes).
- s390/nmi: handle vector validity failures for KVM guests (git-fixes).
- s390/pv: fix the forcing of the swiotlb (git-fixes).
- s390/qdio: cancel the ESTABLISH ccw after timeout (git-fixes).
- s390/qdio: fix roll-back after timeout on ESTABLISH ccw (git-fixes).
- s390/vfio-ap: fix circular lockdep when setting/clearing crypto masks (git-fixes).
- sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl (git-fixes).
- sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl (git-fixes).
- sched/pelt: Fix attach_entity_load_avg() corner case (git-fixes)
- sched/topology: Skip updating masks for non-online nodes (bsc#1197446 ltc#183000).
- scsi: dc395x: Fix a missing check on list iterator (git-fixes).
- scsi: fnic: Fix a tracing statement (git-fixes).
- scsi: fnic: Replace DMA mask of 64 bits with 47 bits (bsc#1199631).
- scsi: hisi_sas: Change permission of parameter prot_mask (git-fixes).
- scsi: lpfc: Alter FPIN stat accounting logic (bsc#1200045).
- scsi: lpfc: Change FA-PWWN detection methodology (bsc#1200045).
- scsi: lpfc: Change VMID registration to be based on fabric parameters (bsc#1200045).
- scsi: lpfc: Clear fabric topology flag before initiating a new FLOGI (bsc#1200045).
- scsi: lpfc: Copyright updates for 14.2.0.2 patches (bsc#1200045).
- scsi: lpfc: Correct BDE DMA address assignment for GEN_REQ_WQE (bsc#1200045 bsc#1198989 bsc#1197675).
- scsi: lpfc: Correct CRC32 calculation for congestion stats (bsc#1200045).
- scsi: lpfc: Decrement outstanding gidft_inp counter if lpfc_err_lost_link() (bsc#1200045).
- scsi: lpfc: Expand setting ELS_ID field in ELS_REQUEST64_WQE (bsc#1200045).
- scsi: lpfc: Fill in missing ndlp kref puts in error paths (bsc#1200045).
- scsi: lpfc: Fix additional reference counting in lpfc_bsg_rport_els() (bsc#1200045).
- scsi: lpfc: Fix call trace observed during I/O with CMF enabled (bsc#1200045).
- scsi: lpfc: Fix diagnostic fw logging after a function reset (bsc#1200045).
- scsi: lpfc: Fix dmabuf ptr assignment in lpfc_ct_reject_event() (bsc#1200045).
- scsi: lpfc: Fix element offset in __lpfc_sli_release_iocbq_s4() (bsc#1200045).
- scsi: lpfc: Fix field overload in lpfc_iocbq data structure (bsc#1200045).
- scsi: lpfc: Fix ndlp put following a LOGO completion (bsc#1200045).
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI (bsc#1200045).
- scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp() (bsc#1200045).
- scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock (bsc#1200045).
- scsi: lpfc: Fix split code for FLOGI on FCoE (bsc#1200045 bsc#1198989 bsc#1197675).
- scsi: lpfc: Inhibit aborts if external loopback plug is inserted (bsc#1200045).
- scsi: lpfc: Introduce FC_RSCN_MEMENTO flag for tracking post RSCN completion (bsc#1200045).
- scsi: lpfc: Move cfg_log_verbose check before calling lpfc_dmp_dbg() (bsc#1200045).
- scsi: lpfc: Move MI module parameter check to handle dynamic disable (bsc#1200045).
- scsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJT (bsc#1200045).
- scsi: lpfc: Refactor cleanup of mailbox commands (bsc#1200045).
- scsi: lpfc: Register for Application Services FC-4 type in Fabric topology (bsc#1200045).
- scsi: lpfc: Remove false FDMI NVMe FC-4 support for NPIV ports (bsc#1200045).
- scsi: lpfc: Remove redundant lpfc_sli_prep_wqe() call (bsc#1200045).
- scsi: lpfc: Remove unnecessary null ndlp check in lpfc_sli_prep_wqe() (bsc#1200045).
- scsi: lpfc: Remove unnecessary NULL pointer assignment for ELS_RDF path (bsc#1200045).
- scsi: lpfc: Remove unneeded variable (bsc#1200045).
- scsi: lpfc: Requeue SCSI I/O to upper layer when fw reports link down (bsc#1200045).
- scsi: lpfc: Revise FDMI reporting of supported port speed for trunk groups (bsc#1200045).
- scsi: lpfc: Rework FDMI initialization after link up (bsc#1200045).
- scsi: lpfc: Transition to NPR state upon LOGO cmpl if link down or aborted (bsc#1200045).
- scsi: lpfc: Tweak message log categories for ELS/FDMI/NVMe rescan (bsc#1200045).
- scsi: lpfc: Update fc_prli_sent outstanding only after guaranteed IOCB submit (bsc#1200045).
- scsi: lpfc: Update lpfc version to 14.2.0.2 (bsc#1200045).
- scsi: lpfc: Update lpfc version to 14.2.0.3 (bsc#1200045).
- scsi: lpfc: Update stat accounting for READ_STATUS mbox command (bsc#1200045).
- scsi: lpfc: Use list_for_each_entry_safe() in rscn_recovery_check() (bsc#1200045).
- scsi: lpfc: Use sg_dma_address() and sg_dma_len() macros for NVMe I/O (bsc#1200045).
- scsi: lpfc: Zero SLI4 fcp_cmnd buffer's fcpCntl0 field (bsc#1200045).
- scsi: pm8001: Fix abort all task initialization (git-fixes).
- scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() (git-fixes).
- scsi: pm8001: Fix command initialization in pm80XX_send_read_log() (git-fixes).
- scsi: pm8001: Fix le32 values handling in pm80xx_chip_sata_req() (git-fixes).
- scsi: pm8001: Fix le32 values handling in pm80xx_chip_ssp_io_req() (git-fixes).
- scsi: pm8001: Fix le32 values handling in pm80xx_set_sas_protocol_timer_config() (git-fixes).
- scsi: pm8001: Fix NCQ NON DATA command completion handling (git-fixes).
- scsi: pm8001: Fix NCQ NON DATA command task initialization (git-fixes).
- scsi: pm8001: Fix payload initialization in pm80xx_encrypt_update() (git-fixes).
- scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() (git-fixes).
- scsi: pm80xx: Enable upper inbound, outbound queues (git-fixes).
- scsi: pm80xx: Mask and unmask upper interrupt vectors 32-63 (git-fixes).
- scsi: qla2xxx: edif: Remove unneeded variable (bsc#1200046).
- scsi: qla2xxx: Fix missed DMA unmap for aborted commands (bsc#1200046).
- scsi: qla2xxx: Remove free_sg command flag (bsc#1200046).
- scsi: qla2xxx: Remove unneeded flush_workqueue() (bsc#1200046).
- scsi: sr: Do not leak information in ioctl (git-fixes).
- scsi: ufs: core: Exclude UECxx from SFR dump list (git-fixes).
- scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled (git-fixes).
- scsi: ufs: qcom: Fix ufs_qcom_resume() (git-fixes).
- scsi: virtio-scsi: Eliminate anonymous module_init and module_exit (git-fixes).
- scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() (git-fixes).
- selftests: firmware: Use smaller dictionary for XZ compression (git-fixes).
- serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485 (git-fixes).
- serial: 8250_mtk: Fix register address for XON/XOFF character (git-fixes).
- serial: 8250_mtk: Fix UART_EFR register address (git-fixes).
- serial: 8250: Also set sticky MCR bits in console restoration (git-fixes).
- serial: 8250: core: Remove unneeded linux/pm_runtime.h (git-fixes).
- serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device (git-fixes).
- serial: 8250: pxa: Remove unneeded linux/pm_runtime.h (git-fixes).
- serial: digicolor-usart: Do not allow CS5-6 (git-fixes).
- serial: imx: fix overrun interrupts in DMA mode (git-fixes).
- serial: meson: acquire port-&gt;lock in startup() (git-fixes).
- serial: msm_serial: disable interrupts in __msm_console_write() (git-fixes).
- serial: pch: do not overwrite xmit-&gt;buf[0] by x_char (git-fixes).
- serial: rda-uart: Do not allow CS5-6 (git-fixes).
- serial: sh-sci: Do not allow CS5-6 (git-fixes).
- serial: sifive: Sanitize CSIZE and c_iflag (git-fixes).
- serial: st-asc: Sanitize CSIZE and correct PARENB for CS7 (git-fixes).
- serial: stm32-usart: Correct CSIZE, bits, and parity (git-fixes).
- serial: txx9: Do not allow CS5-6 (git-fixes).
- slimbus: qcom: Fix IRQ check in qcom_slim_probe (git-fixes).
- smp: Fix offline cpu check in flush_smp_call_function_queue() (git-fixes).
- smsc911x: allow using IRQ0 (git-fixes).
- soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc (git-fixes).
- soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc (git-fixes).
- soc: rockchip: Fix refcount leak in rockchip_grf_init (git-fixes).
- spi: img-spfi: Fix pm_runtime_get_sync() error checking (git-fixes).
- spi: Introduce device-managed SPI controller allocation (git-fixes).
- spi: spi-cadence: Fix kernel-doc format for resume/suspend (git-fixes).
- spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname() (git-fixes).
- spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction (git-fixes).
- spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout (git-fixes).
- spi: stm32-qspi: Fix wait_cmd timeout in APM mode (git-fixes).
- staging: fieldbus: Fix the error handling path in anybuss_host_common_probe() (git-fixes).
- staging: rtl8712: fix uninit-value in r871xu_drv_init() (git-fixes).
- staging: rtl8712: fix uninit-value in usb_read8() and friends (git-fixes).
- SUNRPC: Ensure gss-proxy connects on setup (git-fixes).
- SUNRPC: Ensure that the gssproxy client can start in a connected state (git-fixes).
- thermal: int340x: Fix attr.show callback prototype (git-fixes).
- thermal/drivers/bcm2711: Do not clamp temperature at zero (git-fixes).
- thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe (git-fixes).
- tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator (git-fixes).
- timekeeping: Really make sure wall_to_monotonic isn't (git-fixes)
- timers: Fix warning condition in __run_timers() (git-fixes)
- tpm: Fix buffer access in tpm2_get_tpm_pt() (git-fixes).
- tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe() (bsc#1065729).
- tracing: Fix potential double free in create_var_ref() (git-fixes).
- tracing: Fix return value of trace_pid_write() (git-fixes).
- tty: Fix a possible resource leak in icom_probe (git-fixes).
- tty: fix deadlock caused by calling printk() under tty_port-&gt;lock (git-fixes).
- tty: goldfish: Use tty_port_destroy() to destroy port (git-fixes).
- tty: serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() (git-fixes).
- tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id and ida_simple_get (git-fixes).
- tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe (git-fixes).
- tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() (git-fixes).
- usb: cdc-wdm: fix reading stuck on device close (git-fixes).
- usb: core: hcd: Add support for deferring roothub registration (git-fixes).
- usb: dwc2: gadget: do not reset gadget's driver-&gt;bus (git-fixes).
- usb: dwc3: pci: Fix pm_runtime_get_sync() error checking (git-fixes).
- usb: ehci-omap: drop unused ehci_read() function (git-fixes).
- usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind() (git-fixes).
- usb: hcd-pci: Fully suspend across freeze/thaw cycle (git-fixes).
- usb: host: isp116x: check return value after calling platform_get_resource() (git-fixes).
- usb: misc: fix improper handling of refcount in uss720_probe() (git-fixes).
- usb: mtu3: fix USB 3.0 dual-role-switch from device to host (git-fixes).
- usb: musb: Fix missing of_node_put() in omap2430_probe (git-fixes).
- usb: new quirk for Dell Gen 2 devices (git-fixes).
- usb: quirks: add a Realtek card reader (git-fixes).
- usb: quirks: add STRING quirk for VCOM device (git-fixes).
- usb: serial: cp210x: add PIDs for Kamstrup USB Meter Reader (git-fixes).
- usb: serial: option: add Fibocom L610 modem (git-fixes).
- usb: serial: option: add Fibocom MA510 modem (git-fixes).
- usb: serial: option: add Quectel BG95 modem (git-fixes).
- usb: serial: option: add support for Cinterion MV32-WA/MV32-WB (git-fixes).
- usb: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions (git-fixes).
- usb: serial: pl2303: add device id for HP LM930 Display (git-fixes).
- usb: serial: qcserial: add support for Sierra Wireless EM7590 (git-fixes).
- usb: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS (git-fixes).
- usb: storage: karma: fix rio_karma_init return (git-fixes).
- usb: typec: mux: Check dev_set_name() return value (git-fixes).
- usb: typec: tcpci: Do not skip cleanup in .remove() on error (git-fixes).
- usb: typec: ucsi: Fix reuse of completion structure (git-fixes).
- usb: typec: ucsi: Fix role swapping (git-fixes).
- usb: usbip: add missing device lock on tweak configuration cmd (git-fixes).
- usb: usbip: fix a refcount leak in stub_probe() (git-fixes).
- vfio-ccw: Check initialized flag in cp_init() (git-fixes).
- vfio/ccw: Remove unneeded GFP_DMA (git-fixes).
- video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup (git-fixes).
- video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove() (git-fixes).
- virtio/s390: implement virtio-ccw revision 2 correctly (git-fixes).
- vringh: Fix loop descriptors check in the indirect cases (git-fixes).
- watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe (git-fixes).
- watchdog: wdat_wdt: Stop watchdog when rebooting the system (git-fixes).
- wifi: mac80211: fix use-after-free in chanctx code (git-fixes).
- wireguard: device: check for metadata_dst with skb_valid_dst() (git-fixes).
- xhci: increase usb U3 -&gt; U0 link resume timeout from 100ms to 500ms (git-fixes).
- xhci: stop polling roothubs after shutdown (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.3.18" release="150300.93.1" arch="nosrc" src="nosrc/kernel-rt-5.3.18-150300.93.1.nosrc.rpm">
          <filename>kernel-rt-5.3.18-150300.93.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.3.18" release="150300.93.1" arch="x86_64" src="x86_64/kernel-rt-5.3.18-150300.93.1.x86_64.rpm">
          <filename>kernel-rt-5.3.18-150300.93.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2173</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1656060803"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1177282" id="1177282" title="VUL-1: CVE-2020-26541: kernel-source: Forbidden Signature Database (aka dbx) protection mechanism is not properly enforced" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199365" id="1199365" title="PCI: hv: Fix NUMA node assignment when kernel boots with custom NUMA topology" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200015" id="1200015" title="VUL-0: CVE-2022-1966: kernel: use-after-free in the netfilter subsystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200143" id="1200143" title="VUL-0: CVE-2022-1975: kernel-source,kernel-source-azure,kernel-source-rt: sleep in atomic bug when firmware download timeout" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200144" id="1200144" title="VUL-0: CVE-2022-1974: kernel-source-rt,kernel-source,kernel-source-azure: use-after-free in /net/nfc/core.c causes kernel crash by simulating nfc device from user-space" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200206" id="1200206" title="SLES 15 SP3 - s390/dasd: Fix read inconsistency and failure for ESE devices" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200207" id="1200207" title="SLES 15 SP3 - s390/dasd: Fix data corruption for ESE devices" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200249" id="1200249" title="SLE15-SP3/armv7l/lpae: NEW WARNINGS (4c788136)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200259" id="1200259" title="Kernel Panic in bfq_bic_update_cgroup while fstrim after Update to Kernel 5.3.18-150300.59.68.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200263" id="1200263" title="Partner-L3: I/O request allocation is stuck for more than 120 seconds" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200268" id="1200268" title="VUL-0: CVE-2022-1966: kernel live patch: use-after-free in the netfilter subsystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200529" id="1200529" title="L3-Question: Customer is requesting Workaround/Mitigation for CVE-2022-1966 / Netfilter use-after-free" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1966" id="CVE-2022-1966" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1966" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1975" id="CVE-2022-1975" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1975" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1974" id="CVE-2022-1974" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1974" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26541" id="CVE-2020-26541" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26541" type="cve"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP3 kernel was updated.

The following security bugs were fixed:

- CVE-2022-1966: Fixed an use-after-free bug in the netfilter subsystem. This flaw allowed a local attacker with user access to cause a privilege escalation issue. (bnc#1200015)
- CVE-2022-1975: Fixed a sleep-in-atomic bug that allows attacker to crash linux kernel by simulating nfc device from user-space. (bsc#1200143)
- CVE-2022-1974: Fixed an use-after-free that could causes kernel crash by simulating an nfc device from user-space. (bsc#1200144)
- CVE-2020-26541: Enforce the secure boot forbidden signature database (aka dbx) protection mechanism. (bnc#1177282)
- 
The following non-security bugs were fixed:

- ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default (git-fixes).
- ACPI: sysfs: Fix BERT error region memory mapping (git-fixes).
- ACPI: sysfs: Make sparse happy about address space in use (git-fixes).
- ALSA: hda/conexant - Fix loopback issue with CX20632 (git-fixes).
- ALSA: usb-audio: Optimize TEAC clock quirk (git-fixes).
- ALSA: usb-audio: Set up (implicit) sync for Saffire 6 (git-fixes).
- ALSA: usb-audio: Skip generic sync EP parse for secondary EP (git-fixes).
- ALSA: usb-audio: Workaround for clock setup on TEAC devices (git-fixes).
- ASoC: dapm: Do not fold register value changes into notifications (git-fixes).
- ASoC: max98357a: remove dependency on GPIOLIB (git-fixes).
- ASoC: rt5645: Fix errorenous cleanup order (git-fixes).
- ASoC: tscs454: Add endianness flag in snd_soc_component_driver (git-fixes).
- ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files (git-fixes).
- ath9k: fix QCA9561 PA bias level (git-fixes).
- b43: Fix assigning negative value to unsigned variable (git-fixes).
- b43legacy: Fix assigning negative value to unsigned variable (git-fixes).
- blk-mq: fix tag_get wait task can't be awakened (bsc#1200263).
- blk-mq: Fix wrong wakeup batch configuration which will cause hang (bsc#1200263).
- block: fix bio_clone_blkg_association() to associate with proper blkcg_gq (bsc#1200259).
- btrfs: tree-checker: fix incorrect printk format (bsc#1200249).
- cfg80211: set custom regdomain after wiphy registration (git-fixes).
- clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value (git-fixes).
- clocksource/drivers/sp804: Avoid error on multiple instances (git-fixes).
- dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace (git-fixes).
- dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type (git-fixes).
- drivers: i2c: thunderx: Allow driver to work with ACPI defined TWSI controllers (git-fixes).
- drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() (git-fixes).
- drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop() (git-fixes).
- drivers: tty: serial: Fix deadlock in sa1100_set_termios() (git-fixes).
- drivers: usb: host: Fix deadlock in oxu_bus_suspend() (git-fixes).
- drm: imx: fix compiler warning with gcc-12 (git-fixes).
- drm: msm: fix error check return value of irq_of_parse_and_map() (git-fixes).
- drm/amdgpu/cs: make commands with 0 chunks illegal behaviour (git-fixes).
- drm/amdgpu/smu10: fix SoC/fclk units in auto mode (git-fixes).
- drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo (git-fixes).
- drm/atomic: Force bridge self-refresh-exit on CRTC switch (git-fixes).
- drm/bridge: analogix_dp: Support PSR-exit to disable transition (git-fixes).
- drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency() (git-fixes).
- drm/i915: fix i915_globals_exit() section mismatch error (git-fixes).
- drm/komeda: return early if drm_universal_plane_init() fails (git-fixes).
- drm/msm/dsi: fix address for second DSI PHY on SDM660 (git-fixes).
- drm/plane: Move range check for format_count earlier (git-fixes).
- drm/radeon: fix a possible null pointer dereference (git-fixes).
- drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes (git-fixes).
- efi: Add missing prototype for efi_capsule_setup_info (git-fixes).
- efi: Do not import certificates from UEFI Secure Boot for T2 Macs (git-fixes).
- fbcon: Consistently protect deferred_takeover with console_lock() (git-fixes).
- ftrace: Clean up hash direct_functions on register failures (git-fixes).
- HID: bigben: fix slab-out-of-bounds Write in bigben_probe (git-fixes).
- HID: multitouch: Add support for Google Whiskers Touchpad (git-fixes).
- hwmon: Make chip parameter for with_info API mandatory (git-fixes).
- i2c: cadence: Increase timeout per message if necessary (git-fixes).
- i2c: ismt: Provide a DMA buffer for Interrupt Cause Logging (git-fixes).
- iio: dummy: iio_simple_dummy: check the return value of kstrdup() (git-fixes).
- Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag (git-fixes).
- Input: goodix - fix spurious key release events (git-fixes).
- ipw2x00: Fix potential NULL dereference in libipw_xmit() (git-fixes).
- irqchip: irq-xtensa-mx: fix initial IRQ affinity (git-fixes).
- irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x (git-fixes).
- irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value (git-fixes).
- irqchip/exiu: Fix acknowledgment of edge triggered interrupts (git-fixes).
- iwlwifi: mvm: fix assert 1F04 upon reconfig (git-fixes).
- KVM: fix wrong exception emulation in check_rdtsc (git-fixes).
- KVM: nVMX: Invalidate all roots when emulating INVVPID without EPT (git-fixes).
- KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use (git-fixes).
- KVM: nVMX: Set LDTR to its architecturally defined value on nested VM-Exit (git-fixes).
- KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter (git-fixes).
- KVM: s390: pv: add macros for UVC CC values (git-fixes).
- KVM: s390: pv: avoid double free of sida page (git-fixes).
- KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm (git-fixes).
- KVM: s390: vsie/gmap: reduce gmap_rmap overhead (git-fixes).
- KVM: VMX: Flush all EPTP/VPID contexts on remote TLB flush (git-fixes).
- KVM: VMX: Use current VMCS to query WAITPKG support for MSR emulation (git-fixes).
- KVM: x86: clflushopt should be treated as a no-op by emulation (git-fixes).
- KVM: x86: Do not force set BSP bit when local APIC is managed by userspace (git-fixes).
- KVM: x86: Fix emulation in writing cr8 (git-fixes).
- KVM: x86: Fix off-by-one error in kvm_vcpu_ioctl_x86_setup_mce (git-fixes).
- KVM: x86: Immediately reset the MMU context when the SMM flag is cleared (git-fixes).
- KVM: x86: Inject #GP if guest attempts to toggle CR4.LA57 in 64-bit mode (git-fixes).
- KVM: x86: Mark CR4.TSD as being possibly owned by the guest (git-fixes).
- KVM: x86: Migrate the PIT only if vcpu0 is migrated, not any BSP (git-fixes).
- KVM: x86: Toggling CR4.PKE does not load PDPTEs in PAE mode (git-fixes).
- KVM: x86: Toggling CR4.SMAP does not load PDPTEs in PAE mode (git-fixes).
- KVM: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU (git-fixes).
- KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() (git-fixes).
- KVM: x86/pmu: Fix HW_REF_CPU_CYCLES event pseudo-encoding in intel_arch_events[] (git-fixes).
- mac80211: upgrade passive scan to active scan on DFS channels after beacon rx (git-fixes).
- md: fix an incorrect NULL check in does_sb_need_changing (git-fixes).
- md: fix an incorrect NULL check in md_reload_sb (git-fixes).
- media: cx25821: Fix the warning when removing the module (git-fixes).
- media: netup_unidvb: Do not leak SPI master in probe error path (git-fixes).
- media: pci: cx23885: Fix the error handling in cx23885_initdev() (git-fixes).
- media: venus: hfi: avoid null dereference in deinit (git-fixes).
- misc: rtsx: set NULL intfdata when probe fails (git-fixes).
- mmc: block: Fix CQE recovery reset success (git-fixes).
- mmc: jz4740: Apply DMA engine limits to maximum segment size (git-fixes).
- modpost: fix removing numeric suffixes (git-fixes).
- modpost: fix undefined behavior of is_arm_mapping_symbol() (git-fixes).
- mt76: check return value of mt76_txq_send_burst in mt76_txq_schedule_list (git-fixes).
- mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue (git-fixes).
- net: rtlwifi: properly check for alloc_workqueue() failure (git-fixes).
- nfc: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION (git-fixes).
- nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION (git-fixes).
- nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling (git-fixes).
- NFS: Do not report ENOSPC write errors twice (git-fixes).
- nfsd: Fix null-ptr-deref in nfsd_fill_super() (git-fixes).
- PCI: hv: Fix NUMA node assignment when kernel boots with custom NUMA topology (bsc#1199365).
- pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards (git-fixes).
- pinctrl: sunxi: fix f1c100s uart2 function (git-fixes).
- platform/chrome: cros_ec_proto: Send command again when timeout occurs (git-fixes).
- platform/x86: wmi: Fix driver-&gt;notify() vs -&gt;probe() race (git-fixes).
- platform/x86: wmi: Replace read_takes_no_args with a flags field (git-fixes).
- devfreq: rk3399_dmc: Disable edev on remove() (git-fixes).
- raid5: introduce MD_BROKEN (git-fixes).
- rtl818x: Prevent using not initialized queues (git-fixes).
- rtlwifi: Use pr_warn instead of WARN_ONCE (git-fixes).
- s390: fix detection of vector enhancements facility 1 vs. vector packed decimal facility (git-fixes).
- s390: fix strrchr() implementation (git-fixes).
- s390/cio: dont call css_wait_for_slow_path() inside a lock (git-fixes).
- s390/cio: Fix the &quot;type&quot; field in s390_cio_tpi tracepoint (git-fixes).
- s390/crypto: fix scatterwalk_unmap() callers in AES-GCM (git-fixes).
- s390/ctcm: fix potential memory leak (git-fixes).
- s390/ctcm: fix variable dereferenced before check (git-fixes).
- s390/dasd: fix data corruption for ESE devices (bsc#1200207 LTC#198454).
- s390/dasd: Fix read for ESE with blksize 4k (bsc#1200206 LTC#198455).
- s390/dasd: Fix read inconsistency for ESE DASD devices (bsc#1200206 LTC#198455).
- s390/dasd: prevent double format of tracks for ESE devices (bsc#1200207 LTC#198454).
- s390/ftrace: fix ftrace_update_ftrace_func implementation (git-fixes).
- s390/lcs: fix variable dereferenced before check (git-fixes).
- s390/mcck: fix invalid KVM guest condition check (git-fixes).
- s390/mcck: isolate SIE instruction when setting CIF_MCCK_GUEST flag (git-fixes).
- s390/nmi: handle guarded storage validity failures for KVM guests (git-fixes).
- s390/nmi: handle vector validity failures for KVM guests (git-fixes).
- s390/pv: fix the forcing of the swiotlb (git-fixes).
- s390/qdio: cancel the ESTABLISH ccw after timeout (git-fixes).
- s390/qdio: fix roll-back after timeout on ESTABLISH ccw (git-fixes).
- s390/vfio-ap: fix circular lockdep when setting/clearing crypto masks (git-fixes).
- serial: msm_serial: disable interrupts in __msm_console_write() (git-fixes).
- spi: Introduce device-managed SPI controller allocation (git-fixes).
- spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction (git-fixes).
- spi: stm32-qspi: Fix wait_cmd timeout in APM mode (git-fixes).
- staging: rtl8712: fix uninit-value in r871xu_drv_init() (git-fixes).
- staging: rtl8712: fix uninit-value in usb_read8() and friends (git-fixes).
- tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator (git-fixes).
- tty: Fix a possible resource leak in icom_probe (git-fixes).
- tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() (git-fixes).
- usb: core: hcd: Add support for deferring roothub registration (git-fixes).
- usb: dwc2: gadget: do not reset gadget's driver-&gt;bus (git-fixes).
- usb: hcd-pci: Fully suspend across freeze/thaw cycle (git-fixes).
- usb: host: isp116x: check return value after calling platform_get_resource() (git-fixes).
- usb: new quirk for Dell Gen 2 devices (git-fixes).
- usb: serial: option: add Quectel BG95 modem (git-fixes).
- vfio-ccw: Check initialized flag in cp_init() (git-fixes).
- vfio/ccw: Remove unneeded GFP_DMA (git-fixes).
- video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove() (git-fixes).
- virtio/s390: implement virtio-ccw revision 2 correctly (git-fixes).
- vringh: Fix loop descriptors check in the indirect cases (git-fixes).
- watchdog: wdat_wdt: Stop watchdog when rebooting the system (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.3.18" release="150300.59.76.1" arch="nosrc" src="nosrc/kernel-default-5.3.18-150300.59.76.1.nosrc.rpm">
          <filename>kernel-default-5.3.18-150300.59.76.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.3.18" release="150300.59.76.1" arch="x86_64" src="x86_64/kernel-default-5.3.18-150300.59.76.1.x86_64.rpm">
          <filename>kernel-default-5.3.18-150300.59.76.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.3.18" release="150300.59.76.1.150300.18.45.2" arch="src" src="src/kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.src.rpm">
          <filename>kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.3.18" release="150300.59.76.1.150300.18.45.2" arch="x86_64" src="x86_64/kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.x86_64.rpm">
          <filename>kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.3.18" release="150300.59.76.1" arch="aarch64" src="aarch64/kernel-default-5.3.18-150300.59.76.1.aarch64.rpm">
          <filename>kernel-default-5.3.18-150300.59.76.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.3.18" release="150300.59.76.1.150300.18.45.2" arch="aarch64" src="aarch64/kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.aarch64.rpm">
          <filename>kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3206</id>
    <title>Recommended update for bash-completion</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1662628581"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199724" id="1199724" title="no bashcompletion for modinfo" type="bugzilla"/>
    </references>
    <description>This update for bash-completion fixes the following issues:

- Enable upstream commit to list ko.zst modules as well. (bsc#1199724)
</description>
    <pkglist>
      <collection>
        <package name="bash-completion" epoch="0" version="2.7" release="150000.4.9.1" arch="noarch" src="noarch/bash-completion-2.7-150000.4.9.1.noarch.rpm">
          <filename>bash-completion-2.7-150000.4.9.1.noarch.rpm</filename>
        </package>
        <package name="bash-completion" epoch="0" version="2.7" release="150000.4.9.1" arch="src" src="src/bash-completion-2.7-150000.4.9.1.src.rpm">
          <filename>bash-completion-2.7-150000.4.9.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2364</id>
    <title>Recommended update for mdadm</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1657626943"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197158" id="1197158" title="resource RAID  failed during cluster patch, Mdadm gets floating point error" type="bugzilla"/>
    </references>
    <description>This update for mdadm fixes the following issue:

- Resource RAID failed during cluster patch, Mdadm gets floating point error (bsc#1197158)
</description>
    <pkglist>
      <collection>
        <package name="mdadm" epoch="0" version="4.1" release="150300.24.15.1" arch="src" src="src/mdadm-4.1-150300.24.15.1.src.rpm">
          <filename>mdadm-4.1-150300.24.15.1.src.rpm</filename>
        </package>
        <package name="mdadm" epoch="0" version="4.1" release="150300.24.15.1" arch="x86_64" src="x86_64/mdadm-4.1-150300.24.15.1.x86_64.rpm">
          <filename>mdadm-4.1-150300.24.15.1.x86_64.rpm</filename>
        </package>
        <package name="mdadm" epoch="0" version="4.1" release="150300.24.15.1" arch="aarch64" src="aarch64/mdadm-4.1-150300.24.15.1.aarch64.rpm">
          <filename>mdadm-4.1-150300.24.15.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3135</id>
    <title>Recommended update for hwdata</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1662532832"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200110" id="1200110" title="Update hwdata to version 0.360" type="bugzilla"/>
    </references>
    <description>This update for hwdata fixes the following issue:

- Update pci, usb and vendor ids to version 0.360 (bsc#1200110)
</description>
    <pkglist>
      <collection>
        <package name="hwdata" epoch="0" version="0.360" release="150000.3.48.1" arch="noarch" src="noarch/hwdata-0.360-150000.3.48.1.noarch.rpm">
          <filename>hwdata-0.360-150000.3.48.1.noarch.rpm</filename>
        </package>
        <package name="hwdata" epoch="0" version="0.360" release="150000.3.48.1" arch="src" src="src/hwdata-0.360-150000.3.48.1.src.rpm">
          <filename>hwdata-0.360-150000.3.48.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3127</id>
    <title>Recommended update for libtirpc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1662518189"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198752" id="1198752" title="Potential memory leak in libtirpc3 [ref:_00D1igLOd._5005q4V5rI:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200800" id="1200800" title="sles12sp5 - libtirpc segv issue ref:_00D1igLOd._5005q6RoKt:ref" type="bugzilla"/>
    </references>
    <description>This update for libtirpc fixes the following issues:

- Exclude ipv6 addresses in client protocol version 2 code (bsc#1200800)
- Fix memory leak in params.r_addr assignement (bsc#1198752)
</description>
    <pkglist>
      <collection>
        <package name="libtirpc" epoch="0" version="1.2.6" release="150300.3.11.1" arch="src" src="src/libtirpc-1.2.6-150300.3.11.1.src.rpm">
          <filename>libtirpc-1.2.6-150300.3.11.1.src.rpm</filename>
        </package>
        <package name="libtirpc-netconfig" epoch="0" version="1.2.6" release="150300.3.11.1" arch="x86_64" src="x86_64/libtirpc-netconfig-1.2.6-150300.3.11.1.x86_64.rpm">
          <filename>libtirpc-netconfig-1.2.6-150300.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="libtirpc3" epoch="0" version="1.2.6" release="150300.3.11.1" arch="x86_64" src="x86_64/libtirpc3-1.2.6-150300.3.11.1.x86_64.rpm">
          <filename>libtirpc3-1.2.6-150300.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="libtirpc-netconfig" epoch="0" version="1.2.6" release="150300.3.11.1" arch="aarch64" src="aarch64/libtirpc-netconfig-1.2.6-150300.3.11.1.aarch64.rpm">
          <filename>libtirpc-netconfig-1.2.6-150300.3.11.1.aarch64.rpm</filename>
        </package>
        <package name="libtirpc3" epoch="0" version="1.2.6" release="150300.3.11.1" arch="aarch64" src="aarch64/libtirpc3-1.2.6-150300.3.11.1.aarch64.rpm">
          <filename>libtirpc3-1.2.6-150300.3.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2178</id>
    <title>Security update for salt</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1656072290"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22967" id="CVE-2022-22967" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22967" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200566" id="1200566" title="VUL-0: EMBARGOED: CVE-2022-22967: salt: missing check for PAM_ACCT_MGM return value" type="bugzilla"/>
    </references>
    <description>This update for salt fixes the following issues:

- CVE-2022-22967: Fixed missing check for PAM_ACCT_MGM return value that could be used to bypass PAM authentication (bsc#1200566)
</description>
    <pkglist>
      <collection>
        <package name="python3-salt" epoch="0" version="3004" release="150300.53.24.1" arch="x86_64" src="x86_64/python3-salt-3004-150300.53.24.1.x86_64.rpm">
          <filename>python3-salt-3004-150300.53.24.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3004" release="150300.53.24.1" arch="src" src="src/salt-3004-150300.53.24.1.src.rpm">
          <filename>salt-3004-150300.53.24.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3004" release="150300.53.24.1" arch="x86_64" src="x86_64/salt-3004-150300.53.24.1.x86_64.rpm">
          <filename>salt-3004-150300.53.24.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3004" release="150300.53.24.1" arch="x86_64" src="x86_64/salt-minion-3004-150300.53.24.1.x86_64.rpm">
          <filename>salt-minion-3004-150300.53.24.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3004" release="150300.53.24.1" arch="x86_64" src="x86_64/salt-transactional-update-3004-150300.53.24.1.x86_64.rpm">
          <filename>salt-transactional-update-3004-150300.53.24.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3004" release="150300.53.24.1" arch="aarch64" src="aarch64/python3-salt-3004-150300.53.24.1.aarch64.rpm">
          <filename>python3-salt-3004-150300.53.24.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3004" release="150300.53.24.1" arch="aarch64" src="aarch64/salt-3004-150300.53.24.1.aarch64.rpm">
          <filename>salt-3004-150300.53.24.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3004" release="150300.53.24.1" arch="aarch64" src="aarch64/salt-minion-3004-150300.53.24.1.aarch64.rpm">
          <filename>salt-minion-3004-150300.53.24.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3004" release="150300.53.24.1" arch="aarch64" src="aarch64/salt-transactional-update-3004-150300.53.24.1.aarch64.rpm">
          <filename>salt-transactional-update-3004-150300.53.24.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2866</id>
    <title>Security update for systemd-presets-common-SUSE</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1661175408"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200485" id="1200485" title="wireplumber user service is not enabled automatically" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199524" id="1199524" title="VUL-0: CVE-2022-1706: ignition: configs are accessible from unprivileged containers in VMs running on VMware products" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1706" id="CVE-2022-1706" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1706" type="cve"/>
    </references>
    <description>This update for systemd-presets-common-SUSE fixes the following issues:

- CVE-2022-1706: Fixed accessible configs from unprivileged containers in VMs running on VMware products (bsc#1199524).

The following non-security bugs were fixed:

- Modify branding-preset-states to fix systemd-presets-common-SUSE
  not enabling new user systemd service preset configuration just
  as it handles system service presets. By passing an (optional)
  second parameter &quot;user&quot;, the save/apply-changes commands now
  work with user services instead of system ones (bsc#1200485)

- Add the wireplumber user service preset to enable it by default
  in SLE15-SP4 where it replaced pipewire-media-session, but keep
  pipewire-media-session preset so we don't have to branch the
  systemd-presets-common-SUSE package for SP4 (bsc#1200485)
</description>
    <pkglist>
      <collection>
        <package name="systemd-presets-common-SUSE" epoch="0" version="15" release="150100.8.17.1" arch="noarch" src="noarch/systemd-presets-common-SUSE-15-150100.8.17.1.noarch.rpm">
          <filename>systemd-presets-common-SUSE-15-150100.8.17.1.noarch.rpm</filename>
        </package>
        <package name="systemd-presets-common-SUSE" epoch="0" version="15" release="150100.8.17.1" arch="src" src="src/systemd-presets-common-SUSE-15-150100.8.17.1.src.rpm">
          <filename>systemd-presets-common-SUSE-15-150100.8.17.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2361</id>
    <title>Security update for pcre</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1657620355"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199232" id="1199232" title="VUL-0: CVE-2022-1586: pcre8,pcre,pcre2: Unicode property matching issue" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1586" id="CVE-2022-1586" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1586" type="cve"/>
    </references>
    <description>This update for pcre fixes the following issues:

- CVE-2022-1586: Fixed unicode property matching issue. (bsc#1199232)
</description>
    <pkglist>
      <collection>
        <package name="libpcre1" epoch="0" version="8.45" release="150000.20.13.1" arch="x86_64" src="x86_64/libpcre1-8.45-150000.20.13.1.x86_64.rpm">
          <filename>libpcre1-8.45-150000.20.13.1.x86_64.rpm</filename>
        </package>
        <package name="pcre" epoch="0" version="8.45" release="150000.20.13.1" arch="src" src="src/pcre-8.45-150000.20.13.1.src.rpm">
          <filename>pcre-8.45-150000.20.13.1.src.rpm</filename>
        </package>
        <package name="libpcre1" epoch="0" version="8.45" release="150000.20.13.1" arch="aarch64" src="aarch64/libpcre1-8.45-150000.20.13.1.aarch64.rpm">
          <filename>libpcre1-8.45-150000.20.13.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2406</id>
    <title>Recommended update for glibc</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1657878590"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197718" id="1197718" title="FTBFS: glibc won't compile on SP4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200334" id="1200334" title="glibc: __strncpy_power9() uses uninitialised register vs18 value for filling after \0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199140" id="1199140" title="L3: 32bit packages not included in SLES15 SP3 for s390x - ref:_00D1igLOd._5005q4xW1U:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200855" id="1200855" title="Glibc static TLS issue on aarch64" type="bugzilla"/>
    </references>
    <description>This update for glibc fixes the following issues:

- powerpc: Fix VSX register number on __strncpy_power9 (bsc#1200334)
- Disable warnings due to deprecated libselinux symbols used by nss and nscd (bsc#1197718)
- i386: Remove broken CAN_USE_REGISTER_ASM_EBP (bsc#1197718)
- rtld: Avoid using up static TLS surplus for optimizations (bsc#1200855, BZ #25051)

This readds the s390 32bit glibc and libcrypt1 libraries (glibc-32bit, glibc-locale-base-32bit, libcrypt1-32bit).
</description>
    <pkglist>
      <collection>
        <package name="glibc" epoch="0" version="2.31" release="150300.31.2" arch="src" src="src/glibc-2.31-150300.31.2.src.rpm">
          <filename>glibc-2.31-150300.31.2.src.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.31.2" arch="x86_64" src="x86_64/glibc-2.31-150300.31.2.x86_64.rpm">
          <filename>glibc-2.31-150300.31.2.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.31.2" arch="x86_64" src="x86_64/glibc-locale-2.31-150300.31.2.x86_64.rpm">
          <filename>glibc-locale-2.31-150300.31.2.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.31.2" arch="x86_64" src="x86_64/glibc-locale-base-2.31-150300.31.2.x86_64.rpm">
          <filename>glibc-locale-base-2.31-150300.31.2.x86_64.rpm</filename>
        </package>
        <package name="libcrypt1" epoch="0" version="4.4.15" release="150300.4.4.3" arch="x86_64" src="x86_64/libcrypt1-4.4.15-150300.4.4.3.x86_64.rpm">
          <filename>libcrypt1-4.4.15-150300.4.4.3.x86_64.rpm</filename>
        </package>
        <package name="libxcrypt" epoch="0" version="4.4.15" release="150300.4.4.3" arch="src" src="src/libxcrypt-4.4.15-150300.4.4.3.src.rpm">
          <filename>libxcrypt-4.4.15-150300.4.4.3.src.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.31.2" arch="aarch64" src="aarch64/glibc-2.31-150300.31.2.aarch64.rpm">
          <filename>glibc-2.31-150300.31.2.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.31.2" arch="aarch64" src="aarch64/glibc-locale-2.31-150300.31.2.aarch64.rpm">
          <filename>glibc-locale-2.31-150300.31.2.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.31.2" arch="aarch64" src="aarch64/glibc-locale-base-2.31-150300.31.2.aarch64.rpm">
          <filename>glibc-locale-base-2.31-150300.31.2.aarch64.rpm</filename>
        </package>
        <package name="libcrypt1" epoch="0" version="4.4.15" release="150300.4.4.3" arch="aarch64" src="aarch64/libcrypt1-4.4.15-150300.4.4.3.aarch64.rpm">
          <filename>libcrypt1-4.4.15-150300.4.4.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2538</id>
    <title>Recommended update for cockpit-tukit, transactional-update</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1658511497"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196826" id="1196826" title="AUDIT-FIND: transactional-update: integer overflow in the method `snapshot_list` of the D-Bus interface" type="bugzilla"/>
    </references>
    <description>This update for cockpit-tukit, transactional-update fixes the following issues:


- Initial package with version 0.0.3~git0.d4aa7e9:
  * Switch to ExecuteAndReboot
  * Add no-reboot actions to snapshot menus
  * Add some &quot;write&quot; actions
  * Disable actions during updates checking
  * Add updates error to status
  * Add _service file comment
  * Add OBS service definition
  * Fix license and files in spec
  * Switch cockpit-devel lib to last stable
  * Add missing global variables
- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call &quot;Execute&quot; for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
  - Fixed selfupdate
  - Code cleanup</description>
    <pkglist>
      <collection>
        <package name="dracut-transactional-update" epoch="0" version="4.0.0~rc3" release="150300.3.3.1" arch="noarch" src="noarch/dracut-transactional-update-4.0.0~rc3-150300.3.3.1.noarch.rpm">
          <filename>dracut-transactional-update-4.0.0~rc3-150300.3.3.1.noarch.rpm</filename>
        </package>
        <package name="libtukit4" epoch="0" version="4.0.0~rc3" release="150300.3.3.1" arch="x86_64" src="x86_64/libtukit4-4.0.0~rc3-150300.3.3.1.x86_64.rpm">
          <filename>libtukit4-4.0.0~rc3-150300.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.0.0~rc3" release="150300.3.3.1" arch="src" src="src/transactional-update-4.0.0~rc3-150300.3.3.1.src.rpm">
          <filename>transactional-update-4.0.0~rc3-150300.3.3.1.src.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.0.0~rc3" release="150300.3.3.1" arch="x86_64" src="x86_64/transactional-update-4.0.0~rc3-150300.3.3.1.x86_64.rpm">
          <filename>transactional-update-4.0.0~rc3-150300.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="transactional-update-zypp-config" epoch="0" version="4.0.0~rc3" release="150300.3.3.1" arch="noarch" src="noarch/transactional-update-zypp-config-4.0.0~rc3-150300.3.3.1.noarch.rpm">
          <filename>transactional-update-zypp-config-4.0.0~rc3-150300.3.3.1.noarch.rpm</filename>
        </package>
        <package name="tukit" epoch="0" version="4.0.0~rc3" release="150300.3.3.1" arch="x86_64" src="x86_64/tukit-4.0.0~rc3-150300.3.3.1.x86_64.rpm">
          <filename>tukit-4.0.0~rc3-150300.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="tukitd" epoch="0" version="4.0.0~rc3" release="150300.3.3.1" arch="x86_64" src="x86_64/tukitd-4.0.0~rc3-150300.3.3.1.x86_64.rpm">
          <filename>tukitd-4.0.0~rc3-150300.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libtukit4" epoch="0" version="4.0.0~rc3" release="150300.3.3.1" arch="aarch64" src="aarch64/libtukit4-4.0.0~rc3-150300.3.3.1.aarch64.rpm">
          <filename>libtukit4-4.0.0~rc3-150300.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.0.0~rc3" release="150300.3.3.1" arch="aarch64" src="aarch64/transactional-update-4.0.0~rc3-150300.3.3.1.aarch64.rpm">
          <filename>transactional-update-4.0.0~rc3-150300.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="tukit" epoch="0" version="4.0.0~rc3" release="150300.3.3.1" arch="aarch64" src="aarch64/tukit-4.0.0~rc3-150300.3.3.1.aarch64.rpm">
          <filename>tukit-4.0.0~rc3-150300.3.3.1.aarch64.rpm</filename>
        </package>
        <package name="tukitd" epoch="0" version="4.0.0~rc3" release="150300.3.3.1" arch="aarch64" src="aarch64/tukitd-4.0.0~rc3-150300.3.3.1.aarch64.rpm">
          <filename>tukitd-4.0.0~rc3-150300.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2470</id>
    <title>Recommended update for systemd</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1658371252"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195157" id="1195157" title="[HPS Bug] SAS multipath devices set up incorrectly during boot for by-label mounts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198732" id="1198732" title="Continuation of 1195247 &amp; 1197109" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1181658" id="1181658" title="[HPS Bug] SAS multipath devices set up incorrectly during boot for by-label mounts" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197570" id="1197570" title="SLES 15 SP3 - UUID= in fstab for multipath partition results in emergency shell on boot, where root-fs does not use multipath (multipath-tools) [regression] (L3:)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194708" id="1194708" title="San volume won't mount during boot after upgrading" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200170" id="1200170" title="SLES4SAP 15SP2 - ssh login warning - dbus-update-activation-environment: warning: error sending to systemd: org.freedesktop.DBus.Error.InvalidArgs: Invalid environment assignments - ref:_00D1igLOd._5005q60n5M:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198507" id="1198507" title="gnome-session-binary started by systemd --user which does not run pam_loginuid.so" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1137373" id="1137373" title="Systemd mount and unmount partition during boot" type="bugzilla"/>
    </references>
    <description>This update for systemd fixes the following issues:

- Allow control characters in environment variable values (bsc#1200170)
- Call pam_loginuid when creating user@.service (bsc#1198507)
- Fix parsing error in s390 udev rules conversion script (bsc#1198732)
- Fix issues with multipath setup (bsc#1137373, bsc#1181658, bsc#1194708, bsc#1195157, bsc#1197570)
- Flagsify EscapeStyle and make ESCAPE_BACKSLASH_ONELINE implicit
- Revert &quot;basic/env-util: (mostly) follow POSIX for what variable names are allowed&quot;
- basic/env-util: (mostly) follow POSIX for what variable names are allowed
- basic/env-util: make function shorter
- basic/escape: add mode where empty arguments are still shown as &quot;&quot;
- basic/escape: always escape newlines in shell_escape()
- basic/escape: escape control characters, but not utf-8, in shell quoting
- basic/escape: use consistent location for &quot;*&quot; in function declarations
- basic/string-util: inline iterator variable declarations
- basic/string-util: simplify how str_realloc() is used
- basic/string-util: split out helper function
- core/device: device_coldplug(): don't set DEVICE_DEAD
- core/device: do not downgrade device state if it is already enumerated
- core/device: drop unnecessary condition
- string-util: explicitly cast character to unsigned
- string-util: fix build error on aarch64
- test-env-util: Verify that \r is disallowed in env var values
- test-env-util: print function headers
</description>
    <pkglist>
      <collection>
        <package name="libsystemd0" epoch="0" version="246.16" release="150300.7.48.1" arch="x86_64" src="x86_64/libsystemd0-246.16-150300.7.48.1.x86_64.rpm">
          <filename>libsystemd0-246.16-150300.7.48.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1" epoch="0" version="246.16" release="150300.7.48.1" arch="x86_64" src="x86_64/libudev1-246.16-150300.7.48.1.x86_64.rpm">
          <filename>libudev1-246.16-150300.7.48.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="246.16" release="150300.7.48.1" arch="src" src="src/systemd-246.16-150300.7.48.1.src.rpm">
          <filename>systemd-246.16-150300.7.48.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="246.16" release="150300.7.48.1" arch="x86_64" src="x86_64/systemd-246.16-150300.7.48.1.x86_64.rpm">
          <filename>systemd-246.16-150300.7.48.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container" epoch="0" version="246.16" release="150300.7.48.1" arch="x86_64" src="x86_64/systemd-container-246.16-150300.7.48.1.x86_64.rpm">
          <filename>systemd-container-246.16-150300.7.48.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="246.16" release="150300.7.48.1" arch="x86_64" src="x86_64/systemd-journal-remote-246.16-150300.7.48.1.x86_64.rpm">
          <filename>systemd-journal-remote-246.16-150300.7.48.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="246.16" release="150300.7.48.1" arch="x86_64" src="x86_64/systemd-sysvinit-246.16-150300.7.48.1.x86_64.rpm">
          <filename>systemd-sysvinit-246.16-150300.7.48.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev" epoch="0" version="246.16" release="150300.7.48.1" arch="x86_64" src="x86_64/udev-246.16-150300.7.48.1.x86_64.rpm">
          <filename>udev-246.16-150300.7.48.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libsystemd0" epoch="0" version="246.16" release="150300.7.48.1" arch="aarch64" src="aarch64/libsystemd0-246.16-150300.7.48.1.aarch64.rpm">
          <filename>libsystemd0-246.16-150300.7.48.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1" epoch="0" version="246.16" release="150300.7.48.1" arch="aarch64" src="aarch64/libudev1-246.16-150300.7.48.1.aarch64.rpm">
          <filename>libudev1-246.16-150300.7.48.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="246.16" release="150300.7.48.1" arch="aarch64" src="aarch64/systemd-246.16-150300.7.48.1.aarch64.rpm">
          <filename>systemd-246.16-150300.7.48.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container" epoch="0" version="246.16" release="150300.7.48.1" arch="aarch64" src="aarch64/systemd-container-246.16-150300.7.48.1.aarch64.rpm">
          <filename>systemd-container-246.16-150300.7.48.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="246.16" release="150300.7.48.1" arch="aarch64" src="aarch64/systemd-journal-remote-246.16-150300.7.48.1.aarch64.rpm">
          <filename>systemd-journal-remote-246.16-150300.7.48.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="246.16" release="150300.7.48.1" arch="aarch64" src="aarch64/systemd-sysvinit-246.16-150300.7.48.1.aarch64.rpm">
          <filename>systemd-sysvinit-246.16-150300.7.48.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev" epoch="0" version="246.16" release="150300.7.48.1" arch="aarch64" src="aarch64/udev-246.16-150300.7.48.1.aarch64.rpm">
          <filename>udev-246.16-150300.7.48.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2270</id>
    <title>Recommended update for python-M2Crypto and SUSEConnect</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1657028133"/>
    <references>
      <reference href="https://jira.suse.com/browse/PM-3081" id="PM-3081" title="Azure Hybrid Benefit v3 - Support switching from BYOS to PAYG" type="jira"/>
    </references>
    <description>This updates for python-M2Crypto and SUSEConnect fixes the following issues:

- This is a re-release, no souce changes. This releases the packages to some extra repositories. (jsc#PM-3081)
</description>
    <pkglist>
      <collection>
        <package name="python-M2Crypto" epoch="0" version="0.35.2" release="150000.3.11.1" arch="src" src="src/python-M2Crypto-0.35.2-150000.3.11.1.src.rpm">
          <filename>python-M2Crypto-0.35.2-150000.3.11.1.src.rpm</filename>
        </package>
        <package name="python3-M2Crypto" epoch="0" version="0.35.2" release="150000.3.11.1" arch="x86_64" src="x86_64/python3-M2Crypto-0.35.2-150000.3.11.1.x86_64.rpm">
          <filename>python3-M2Crypto-0.35.2-150000.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="python3-M2Crypto" epoch="0" version="0.35.2" release="150000.3.11.1" arch="aarch64" src="aarch64/python3-M2Crypto-0.35.2-150000.3.11.1.aarch64.rpm">
          <filename>python3-M2Crypto-0.35.2-150000.3.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2327</id>
    <title>Security update for curl</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1657199187"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200737" id="1200737" title="VUL-0: CVE-2022-32208: curl: FTP-KRB bad message verification" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200735" id="1200735" title="VUL-0: CVE-2022-32206: curl: HTTP compression denial of service" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208" id="CVE-2022-32208" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206" id="CVE-2022-32206" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206" type="cve"/>
    </references>
    <description>This update for curl fixes the following issues:

- CVE-2022-32206: HTTP compression denial of service (bsc#1200735)
- CVE-2022-32208: FTP-KRB bad message verification (bsc#1200737)
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="7.66.0" release="150200.4.36.1" arch="src" src="src/curl-7.66.0-150200.4.36.1.src.rpm">
          <filename>curl-7.66.0-150200.4.36.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="7.66.0" release="150200.4.36.1" arch="x86_64" src="x86_64/curl-7.66.0-150200.4.36.1.x86_64.rpm">
          <filename>curl-7.66.0-150200.4.36.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="7.66.0" release="150200.4.36.1" arch="x86_64" src="x86_64/libcurl4-7.66.0-150200.4.36.1.x86_64.rpm">
          <filename>libcurl4-7.66.0-150200.4.36.1.x86_64.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="7.66.0" release="150200.4.36.1" arch="aarch64" src="aarch64/curl-7.66.0-150200.4.36.1.aarch64.rpm">
          <filename>curl-7.66.0-150200.4.36.1.aarch64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="7.66.0" release="150200.4.36.1" arch="aarch64" src="aarch64/libcurl4-7.66.0-150200.4.36.1.aarch64.rpm">
          <filename>libcurl4-7.66.0-150200.4.36.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2328</id>
    <title>Security update for openssl-1_1</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1657199275"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201099" id="1201099" title="VUL-0: EMBARGOED: CVE-2022-2097: openssl-1_1,openssl-3: AES OCB fails to encrypt some bytes" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097" id="CVE-2022-2097" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097" type="cve"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- CVE-2022-2097: Fixed partial missing encryption in AES OCB mode (bsc#1201099).
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1d" release="150200.11.51.1" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1d-150200.11.51.1.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1d-150200.11.51.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1d" release="150200.11.51.1" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1d-150200.11.51.1.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1d-150200.11.51.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1d" release="150200.11.51.1" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1d-150200.11.51.1.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1d-150200.11.51.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1d" release="150200.11.51.1" arch="src" src="src/openssl-1_1-1.1.1d-150200.11.51.1.src.rpm">
          <filename>openssl-1_1-1.1.1d-150200.11.51.1.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1d" release="150200.11.51.1" arch="x86_64" src="x86_64/openssl-1_1-1.1.1d-150200.11.51.1.x86_64.rpm">
          <filename>openssl-1_1-1.1.1d-150200.11.51.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1d" release="150200.11.51.1" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1d-150200.11.51.1.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1d-150200.11.51.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1d" release="150200.11.51.1" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1d-150200.11.51.1.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1d-150200.11.51.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1d" release="150200.11.51.1" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1d-150200.11.51.1.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1d-150200.11.51.1.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1d" release="150200.11.51.1" arch="aarch64" src="aarch64/openssl-1_1-1.1.1d-150200.11.51.1.aarch64.rpm">
          <filename>openssl-1_1-1.1.1d-150200.11.51.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2628</id>
    <title>Recommended update for apparmor</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1659435717"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195463" id="1195463" title="smb not starting after patch openSUSE-SLE-15.3-2022-283=1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196850" id="1196850" title="run &quot;# systemctl restart smb&quot; with Apparmor profile &quot;usr.sbin.smbd&quot; in enforcing mode reports &quot;DENIED&quot; audit records" type="bugzilla"/>
    </references>
    <description>This update for apparmor fixes the following issues:

- Add new rule to fix reported &quot;DENIED&quot; audit records with Apparmor profile &quot;usr.sbin.smbd&quot; (bsc#1196850)
- Add new rule to allow reading of openssl.cnf (bsc#1195463)
</description>
    <pkglist>
      <collection>
        <package name="apparmor" epoch="0" version="2.13.6" release="150300.3.15.1" arch="src" src="src/apparmor-2.13.6-150300.3.15.1.src.rpm">
          <filename>apparmor-2.13.6-150300.3.15.1.src.rpm</filename>
        </package>
        <package name="apparmor-parser" epoch="0" version="2.13.6" release="150300.3.15.1" arch="x86_64" src="x86_64/apparmor-parser-2.13.6-150300.3.15.1.x86_64.rpm">
          <filename>apparmor-parser-2.13.6-150300.3.15.1.x86_64.rpm</filename>
        </package>
        <package name="libapparmor" epoch="0" version="2.13.6" release="150300.3.15.1" arch="src" src="src/libapparmor-2.13.6-150300.3.15.1.src.rpm">
          <filename>libapparmor-2.13.6-150300.3.15.1.src.rpm</filename>
        </package>
        <package name="libapparmor1" epoch="0" version="2.13.6" release="150300.3.15.1" arch="x86_64" src="x86_64/libapparmor1-2.13.6-150300.3.15.1.x86_64.rpm">
          <filename>libapparmor1-2.13.6-150300.3.15.1.x86_64.rpm</filename>
        </package>
        <package name="pam_apparmor" epoch="0" version="2.13.6" release="150300.3.15.1" arch="x86_64" src="x86_64/pam_apparmor-2.13.6-150300.3.15.1.x86_64.rpm">
          <filename>pam_apparmor-2.13.6-150300.3.15.1.x86_64.rpm</filename>
        </package>
        <package name="apparmor-parser" epoch="0" version="2.13.6" release="150300.3.15.1" arch="aarch64" src="aarch64/apparmor-parser-2.13.6-150300.3.15.1.aarch64.rpm">
          <filename>apparmor-parser-2.13.6-150300.3.15.1.aarch64.rpm</filename>
        </package>
        <package name="libapparmor1" epoch="0" version="2.13.6" release="150300.3.15.1" arch="aarch64" src="aarch64/libapparmor1-2.13.6-150300.3.15.1.aarch64.rpm">
          <filename>libapparmor1-2.13.6-150300.3.15.1.aarch64.rpm</filename>
        </package>
        <package name="pam_apparmor" epoch="0" version="2.13.6" release="150300.3.15.1" arch="aarch64" src="aarch64/pam_apparmor-2.13.6-150300.3.15.1.aarch64.rpm">
          <filename>pam_apparmor-2.13.6-150300.3.15.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2801</id>
    <title>Security update for cifs-utils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1660314516"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29869" id="CVE-2022-29869" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29869" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198976" id="1198976" title="VUL-0: CVE-2022-29869: cifs-utils: cifs-utils with verbose logging can cause an information leak" type="bugzilla"/>
    </references>
    <description>This update for cifs-utils fixes the following issues:

- CVE-2022-29869: Fixed verbose messages on option parsing causing information leak (bsc#1198976).
</description>
    <pkglist>
      <collection>
        <package name="cifs-utils" epoch="0" version="6.9" release="150100.5.18.1" arch="src" src="src/cifs-utils-6.9-150100.5.18.1.src.rpm">
          <filename>cifs-utils-6.9-150100.5.18.1.src.rpm</filename>
        </package>
        <package name="cifs-utils" epoch="0" version="6.9" release="150100.5.18.1" arch="x86_64" src="x86_64/cifs-utils-6.9-150100.5.18.1.x86_64.rpm">
          <filename>cifs-utils-6.9-150100.5.18.1.x86_64.rpm</filename>
        </package>
        <package name="cifs-utils" epoch="0" version="6.9" release="150100.5.18.1" arch="aarch64" src="aarch64/cifs-utils-6.9-150100.5.18.1.aarch64.rpm">
          <filename>cifs-utils-6.9-150100.5.18.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="retracted" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2422</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1658313896"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1179195" id="1179195" title="I/O stops on connected disk after another disk removal from the system." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1180814" id="1180814" title="[15sp3 FEAT] PowerVM: Multiqueue support for ibmvfc scsi driver (NPIV)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1184924" id="1184924" title="[Build 134.3] openQA test fails in kdump_and_crash - forced crash didn't result into expected reboot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1185762" id="1185762" title="SLES 15 SP3 RC2 - native Emulex/NVMe; SLES crash / reboot during I/O" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192761" id="1192761" title="[NetApp SLES15 SP3]: Pull in TP 8013 &amp; 8014 upstream commits for NVMe-oF discovery enhancements" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194013" id="1194013" title="VUL-0: CVE-2021-4157: kernel-source-azure,kernel-source-rt,kernel-source: Buffer overwrite in decode_nfs_fh function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195504" id="1195504" title="UDP packet drop and latency issues [ref:_00D1igLOd._5001iq9ztq:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195775" id="1195775" title="apparmor fails to build with 5.16.7" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196901" id="1196901" title="VUL-0: CVE-2022-23960,CVE-2022-0001,CVE-2022-0002,CVE-2021-26341,CVE-2021-26401: xen: Multiple speculative security issues (XSA-398)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197362" id="1197362" title="L3: RIP: 0010:update_writeback_rate+0x1d0/0x310 [bcache]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197754" id="1197754" title="[PATCH] ext4: add check to prevent attempting to resize an fs with  sparse_super2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198020" id="1198020" title="[PATCH] block: don't merge across cgroup boundaries if blkcg is  enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198924" id="1198924" title="i915 driver failed to load firmware for Rocket Lake" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199482" id="1199482" title="VUL-0: CVE-2022-1012: kernel-source,kernel-source-rt,kernel-source-azure: A vulnerability due to small table perturb size in the TCP source port generation algorithm leads to information leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199487" id="1199487" title="VUL-0: CVE-2022-1679: kernel-source,kernel-source-rt,kernel-source-azure: kernel: Use-After-Free in ath9k_htc_probe_device() could cause an escalation of privileges" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199489" id="1199489" title="vmxnet3: update to latest ToT" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199657" id="1199657" title="VUL-0: EMBARGOED: CVE-2022-29900 CVE-2022-29901: kernel: RETBLEED speculative issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200217" id="1200217" title="[TRACKERBUG] SLE15-SP3 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200263" id="1200263" title="Partner-L3: I/O request allocation is stuck for more than 120 seconds" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200343" id="1200343" title="FVTR1020:Rainier:Non-HMC:MPIPL Dump is not getting offloaded to Linux partition (SUSE)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200442" id="1200442" title="kernel-install-tools should be recommended by all kernel-source flavors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200571" id="1200571" title="execve() incorrectly handles empty argv array" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200599" id="1200599" title="VUL-0: CVE-2022-20154: kernel-source,kernel-source-rt,kernel-source-azure: race condition leading to use-after-free in lock_sock_nested" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200600" id="1200600" title="[Build 20220614] openQA test fails in inotify12" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200604" id="1200604" title="VUL-0: CVE-2022-20141: kernel-source-azure,kernel-source,kernel-source-rt: use after free in ip_check_mc_rcu()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200605" id="1200605" title="VUL-0: CVE-2022-20141: kernel live patch: use after free in ip_check_mc_rcu()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200608" id="1200608" title="VUL-0: CVE-2022-20154: kernel live patch: race condition leading to use-after-free in lock_sock_nested" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200619" id="1200619" title="VUL-0: CVE-2022-20132: kernel-source-rt,kernel-source-azure,kernel-source: several potential out of bounds reads via malicious HID device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200622" id="1200622" title="L3: kernel PTF request with a patch fix from #1179195." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200806" id="1200806" title="[PATCH] ext4: limit length to bitmap_maxbytes - blocksize in  punch_hole" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200807" id="1200807" title="[PATCH] ext4: fix race condition between ext4_write and  ext4_convert_inline_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200809" id="1200809" title="[PATCH] ext4: fix bug_on in __es_tree_search" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200810" id="1200810" title="[PATCH] ext4: fix bug_on ext4_mb_use_inode_pa" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200813" id="1200813" title="[PATCH] writeback: Avoid skipping inode writeback" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200816" id="1200816" title="[PATCH] blk-mq: do not update io_ticks with passthrough requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200820" id="1200820" title="[PATCH] ext4: make variable &quot;count&quot; signed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200821" id="1200821" title="[PATCH] writeback: Fix inode-&gt;i_io_list not be protected by  inode-&gt;i_lock error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200822" id="1200822" title="[PATCH] init: Initialize noop_backing_dev_info early" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200825" id="1200825" title="[PATCH] blk-iolatency: Fix inflight count imbalances and IO hangs on  offline" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200828" id="1200828" title="[PATCH] jfs: fix divide error in dbNextAG" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200829" id="1200829" title="[PATCH] iomap: iomap_write_failed fix" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201050" id="1201050" title="VUL-0: CVE-2021-26341: kernel: straight line speculation on x86" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201080" id="1201080" title="VUL-0: CVE-2022-1679: kernel live patch: kernel: Use-After-Free in ath9k_htc_probe_device() could cause an escalation of privileges" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201143" id="1201143" title="fuse: annotate lock in fuse_reverse_inval_entry()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201147" id="1201147" title="ceph: add some lockdep assertions around snaprealm handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201149" id="1201149" title="ceph: clean up locking annotation for ceph_get_snap_realm and  __lookup_snap_realm" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201160" id="1201160" title="qla2xxx: update driver to 10.02.07.700-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201171" id="1201171" title="VUL-0: CVE-2022-34918: kernel: heap overflow in nft_set_elem_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201177" id="1201177" title="VUL-0: kernel: bufferoverflow in netfilter nft_set_elem_init" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201193" id="1201193" title="Update Broadcom Emulex lpfc driver to 14.2.0.4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201222" id="1201222" title="VUL-0: CVE-2022-34918: kernel live patch: heap overflow in nft_set_elem_init()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29900" id="CVE-2022-29900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29900" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29901" id="CVE-2022-29901" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29901" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34918" id="CVE-2022-34918" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34918" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26341" id="CVE-2021-26341" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26341" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20154" id="CVE-2022-20154" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20154" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1679" id="CVE-2022-1679" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1679" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4157" id="CVE-2021-4157" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4157" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20132" id="CVE-2022-20132" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20132" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20141" id="CVE-2022-20141" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20141" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1012" id="CVE-2022-1012" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1012" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200692" id="1200692" title="VUL-0: CVE-2022-33981: kernel-source-rt,kernel-source-azure,kernel-source: use-after-free in floppy driver" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33981" id="CVE-2022-33981" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33981" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200925" id="1200925" title="L3: sles15sp3 hanging tcp sessions after ibmvnic failover on Denali" type="bugzilla"/>
    </references>
    <description>The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.

NOTE:

This update has been retracted, as it has caused regressions on multiple machines types.


The following security bugs were fixed:

- CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak arbitrary kernel information (bsc#1199657).
- CVE-2022-34918: Fixed a buffer overflow with nft_set_elem_init() that could be used by a local attacker to escalate privileges (bnc#1201171).
- CVE-2021-26341: Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage (bsc#1201050).
- CVE-2022-1679: Fixed a use-after-free in the Atheros wireless driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages (bsc#1199487).
- CVE-2022-20132: Fixed out of bounds read due to improper input validation in lg_probe and related functions of hid-lg.c (bsc#1200619).
- CVE-2022-1012: Fixed information leak caused by small table perturb size in the TCP source port generation algorithm (bsc#1199482).
- CVE-2022-33981: Fixed use-after-free in floppy driver (bsc#1200692)
- CVE-2022-20141: Fixed a possible use after free due to improper locking in ip_check_mc_rcu() (bsc#1200604).
- CVE-2021-4157: Fixed an out of memory bounds write flaw in the NFS subsystem, related to the replication of files with NFS. A user could potentially crash the system or escalate privileges on the system (bsc#1194013).
- CVE-2022-20154: Fixed a use after free due to a race condition in lock_sock_nested of sock.c. This could lead to local escalation of privilege with System execution privileges needed (bsc#1200599).

The following non-security bugs were fixed:

- ALSA: hda/conexant: Fix missing beep setup (git-fixes).
- ALSA: hda/realtek - Add HW8326 support (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo PD70PNT (git-fixes).
- ALSA: hda/realtek - ALC897 headset MIC no sound (git-fixes).
- ALSA: hda/via: Fix missing beep setup (git-fixes).
- arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399 (git-fixes)
- arm64: ftrace: fix branch range checks (git-fixes)
- ASoC: cs35l36: Update digital volume TLV (git-fixes).
- ASoC: cs42l52: Correct TLV for Bypass Volume (git-fixes).
- ASoC: cs42l52: Fix TLV scales for mixer controls (git-fixes).
- ASoC: cs42l56: Correct typo in minimum level for SX volume controls (git-fixes).
- ASoC: cs53l30: Correct number of volume levels on SX controls (git-fixes).
- ASoC: es8328: Fix event generation for deemphasis control (git-fixes).
- ASoC: nau8822: Add operation for internal PLL off and on (git-fixes).
- ASoC: wm8962: Fix suspend while playing music (git-fixes).
- ASoC: wm_adsp: Fix event generation for wm_adsp_fw_put() (git-fixes).
- ata: libata: add qc-&gt;flags in ata_qc_complete_template tracepoint (git-fixes).
- ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() (git-fixes).
- bcache: avoid journal no-space deadlock by reserving 1 journal bucket (git-fixes).
- bcache: avoid unnecessary soft lockup in kworker update_writeback_rate() (bsc#1197362).
- bcache: fixup multiple threads crash (git-fixes).
- bcache: improve multithreaded bch_btree_check() (git-fixes).
- bcache: improve multithreaded bch_sectors_dirty_init() (git-fixes).
- bcache: memset on stack variables in bch_btree_check() and bch_sectors_dirty_init() (git-fixes).
- bcache: remove incremental dirty sector counting for bch_sectors_dirty_init() (git-fixes).
- bio: fix page leak bio_add_hw_page failure (git-fixes).
- blk-cgroup: fix a hd_struct leak in blkcg_fill_root_iostats (git-fixes).
- blk-iolatency: Fix inflight count imbalances and IO hangs on offline (bsc#1200825).
- blk-mq: clear active_queues before clearing BLK_MQ_F_TAG_QUEUE_SHARED (bsc#1200263).
- blk-mq: do not update io_ticks with passthrough requests (bsc#1200816).
- blk-mq: drop workarounds for cpu hotplug queue management (bsc#1185762) 
- blk-mq: update hctx-&gt;dispatch_busy in case of real scheduler (git-fixes).
- block: advance iov_iter on bio_add_hw_page failure (git-fixes).
- block: do not merge across cgroup boundaries if blkcg is enabled (bsc#1198020).
- block: Fix handling of offline queues in blk_mq_alloc_request_hctx() (bsc#1185762).
- block: Fix kABI in blk-merge.c (bsc#1198020).
- block/keyslot-manager: prevent crash when num_slots=1 (git-fixes).
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove() (git-fixes).
- caif_virtio: fix race between virtio_device_ready() and ndo_open() (git-fixes).
- ceph: add some lockdep assertions around snaprealm handling (bsc#1201147).
- ceph: clean up locking annotation for ceph_get_snap_realm and __lookup_snap_realm (bsc#1201149).
- certs/blacklist_hashes.c: fix const confusion in certs blacklist (git-fixes).
- cifs: add WARN_ON for when chan_count goes below minimum (bsc#1200217).
- cifs: adjust DebugData to use chans_need_reconnect for conn status (bsc#1200217).
- cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (bsc#1200217).
- cifs: avoid parallel session setups on same channel (bsc#1200217).
- cifs: avoid race during socket reconnect between send and recv (bsc#1200217).
- cifs: call cifs_reconnect when a connection is marked (bsc#1200217).
- cifs: call helper functions for marking channels for reconnect (bsc#1200217).
- cifs: change smb2_query_info_compound to use a cached fid, if available (bsc#1200217).
- cifs: check for smb1 in open_cached_dir() (bsc#1200217).
- cifs: check reconnects for channels of active tcons too (bsc#1200217).
- cifs: Check the IOCB_DIRECT flag, not O_DIRECT (bsc#1200217).
- cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (bsc#1200217).
- cifs: clean up an inconsistent indenting (bsc#1200217).
- cifs: destage any unwritten data to the server before calling copychunk_write (bsc#1200217).
- cifs: do not build smb1ops if legacy support is disabled (bsc#1200217).
- cifs: do not call cifs_dfs_query_info_nonascii_quirk() if nodfs was set (bsc#1200217).
- cifs: do not use tcpStatus after negotiate completes (bsc#1200217).
- cifs: do not use uninitialized data in the owner/group sid (bsc#1200217).
- cifs: fix confusing unneeded warning message on smb2.1 and earlier (bsc#1200217).
- cifs: fix double free race when mount fails in cifs_get_root() (bsc#1200217).
- cifs: fix FILE_BOTH_DIRECTORY_INFO definition (bsc#1200217).
- cifs: fix handlecache and multiuser (bsc#1200217).
- cifs: fix hang on cifs_get_next_mid() (bsc#1200217).
- cifs: fix incorrect use of list iterator after the loop (bsc#1200217).
- cifs: fix minor compile warning (bsc#1200217).
- cifs: fix missed refcounting of ipc tcon (bsc#1200217).
- cifs: fix ntlmssp auth when there is no key exchange (bsc#1200217).
- cifs: fix NULL ptr dereference in refresh_mounts() (bsc#1200217).
- cifs: fix potential deadlock in direct reclaim (bsc#1200217).
- cifs: fix potential double free during failed mount (bsc#1200217).
- cifs: fix potential race with cifsd thread (bsc#1200217).
- cifs: fix set of group SID via NTSD xattrs (bsc#1200217).
- cifs: fix signed integer overflow when fl_end is OFFSET_MAX (bsc#1200217).
- cifs: Fix smb311_update_preauth_hash() kernel-doc comment (bsc#1200217).
- cifs: fix the cifs_reconnect path for DFS (bsc#1200217).
- cifs: fix the connection state transitions with multichannel (bsc#1200217).
- cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (bsc#1200217).
- cifs: fix workstation_name for multiuser mounts (bsc#1200217).
- cifs: force new session setup and tcon for dfs (bsc#1200217).
- cifs: free ntlmsspblob allocated in negotiate (bsc#1200217).
- cifs: ignore resource_id while getting fscache super cookie (bsc#1200217).
- cifs: maintain a state machine for tcp/smb/tcon sessions (bsc#1200217).
- cifs: make status checks in version independent callers (bsc#1200217).
- cifs: mark sessions for reconnection in helper function (bsc#1200217).
- cifs: modefromsids must add an ACE for authenticated users (bsc#1200217).
- cifs: move definition of cifs_fattr earlier in cifsglob.h (bsc#1200217).
- cifs: move superblock magic defitions to magic.h (bsc#1200217).
- cifs: potential buffer overflow in handling symlinks (bsc#1200217).
- cifs: print TIDs as hex (bsc#1200217).
- cifs: protect all accesses to chan_* with chan_lock (bsc#1200217).
- cifs: quirk for STATUS_OBJECT_NAME_INVALID returned for non-ASCII dfs refs (bsc#1200217).
- cifs: reconnect only the connection and not smb session where possible (bsc#1200217).
- cifs: release cached dentries only if mount is complete (bsc#1200217).
- cifs: remove check of list iterator against head past the loop body (bsc#1200217).
- cifs: remove redundant assignment to pointer p (bsc#1200217).
- cifs: remove repeated debug message on cifs_put_smb_ses() (bsc#1200217).
- cifs: remove repeated state change in dfs tree connect (bsc#1200217).
- cifs: remove unused variable ses_selected (bsc#1200217).
- cifs: return ENOENT for DFS lookup_cache_entry() (bsc#1200217).
- cifs: return the more nuanced writeback error on close() (bsc#1200217).
- cifs: sanitize multiple delimiters in prepath (bsc#1200217).
- cifs: serialize all mount attempts (bsc#1200217).
- cifs: set the CREATE_NOT_FILE when opening the directory in use_cached_dir() (bsc#1200217).
- cifs: skip trailing separators of prefix paths (bsc#1200217).
- cifs: smbd: fix typo in comment (bsc#1200217).
- cifs: Split the smb3_add_credits tracepoint (bsc#1200217).
- cifs: take cifs_tcp_ses_lock for status checks (bsc#1200217).
- cifs: track individual channel status using chans_need_reconnect (bsc#1200217).
- cifs: unlock chan_lock before calling cifs_put_tcp_session (bsc#1200217).
- cifs: update internal module number (bsc#1193629).
- cifs: update internal module number (bsc#1200217).
- cifs: update tcpStatus during negotiate and sess setup (bsc#1200217).
- cifs: use a different reconnect helper for non-cifsd threads (bsc#1200217).
- cifs: use correct lock type in cifs_reconnect() (bsc#1200217).
- cifs: Use kzalloc instead of kmalloc/memset (bsc#1200217).
- cifs: use new enum for ses_status (bsc#1200217).
- cifs: use the chans_need_reconnect bitmap for reconnect status (bsc#1200217).
- cifs: verify that tcon is valid before dereference in cifs_kill_sb (bsc#1200217).
- cifs: version operations for smb20 unneeded when legacy support disabled (bsc#1200217).
- cifs: wait for tcon resource_id before getting fscache super (bsc#1200217).
- cifs: we do not need a spinlock around the tree access during umount (bsc#1200217).
- cifs: when extending a file with falloc we should make files not-sparse (bsc#1200217).
- drivers: cpufreq: Add missing of_node_put() in qoriq-cpufreq.c (git-fixes).
- drm/i915/reset: Fix error_state_read ptr + offset use (git-fixes).
- drm/i915: Update TGL and RKL DMC firmware versions (bsc#1198924).
- drm/msm: Fix double pm_runtime_disable() call (git-fixes).
- drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf (git-fixes).
- drm/sun4i: Fix crash during suspend after component bind failure (git-fixes).
- exec: Force single empty string when argv is empty (bsc#1200571).
- ext4: add check to prevent attempting to resize an fs with sparse_super2 (bsc#1197754).
- ext4: fix bug_on ext4_mb_use_inode_pa (bsc#1200810).
- ext4: fix bug_on in __es_tree_search (bsc#1200809).
- ext4: fix race condition between ext4_write and ext4_convert_inline_data (bsc#1200807).
- ext4: limit length to bitmap_maxbytes - blocksize in punch_hole (bsc#1200806).
- ext4: make variable &quot;count&quot; signed (bsc#1200820).
- Fix a warning about a malformed kernel doc comment in cifs (bsc#1200217).
- fuse: annotate lock in fuse_reverse_inval_entry() (bsc#1201143).
- gpio: winbond: Fix error code in winbond_gpio_get() (git-fixes).
- gtp: use icmp_ndo_send helper (git-fixes).
- hwmon: (ibmaem) do not call platform_device_del() if platform_device_add() fails (git-fixes).
- i2c: designware: Use standard optional ref clock implementation (git-fixes).
- ibmvnic: Properly dispose of all skbs during a failover (bsc#1200925).
- iio:accel:bma180: rearrange iio trigger get and register (git-fixes).
- iio: accel: mma8452: ignore the return value of reset operation (git-fixes).
- iio: adc: axp288: Override TS pin bias current for some models (git-fixes).
- iio: adc: vf610: fix conversion mode sysfs node name (git-fixes).
- iio:chemical:ccs811: rearrange iio trigger get and register (git-fixes).
- iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up() (git-fixes).
- iio: trigger: sysfs: fix use-after-free on remove (git-fixes).
- init: Initialize noop_backing_dev_info early (bsc#1200822).
- inotify: show inotify mask flags in proc fdinfo (bsc#1200600).
- iomap: iomap_write_failed fix (bsc#1200829).
- ipvs: add sysctl_run_estimation to support disable estimation (bsc#1195504).
- jfs: fix divide error in dbNextAG (bsc#1200828).
- kABI fix of sysctl_run_estimation (git-fixes).
- kabi: nvme workaround header include (bsc#1201193).
- kabi/severities: ignore KABI for NVMe target (bsc#1192761)
- linux/dim: Fix divide by 0 in RDMA DIM (git-fixes).
- md: fix update super 1.0 on rdev size change (git-fixes).
- move devm_allocate to end of structure for kABI (git-fixes).
- mtd: rawnand: gpmi: Fix setting busy timeout setting (git-fixes).
- net: ax25: Fix deadlock caused by skb_recv_datagram in ax25_recvmsg (git-fixes).
- net: ethernet: stmmac: Disable hardware multicast filter (git-fixes).
- net: ieee802154: ca8210: Stop leaking skb's (git-fixes).
- net: lantiq: Add locking for TX DMA channel (git-fixes).
- net: rose: fix UAF bugs caused by timer handler (git-fixes).
- net: stmmac: reset Tx desc base address before restarting Tx (git-fixes).
- net: usb: ax88179_178a: Fix packet receiving (git-fixes).
- nfc: nfcmrvl: Fix irq_of_parse_and_map() return value (git-fixes).
- nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred (git-fixes).
- NFC: nxp-nci: Do not issue a zero length i2c_master_read() (git-fixes).
- NFS: Do not report EINTR/ERESTARTSYS as mapping errors (git-fixes).
- NFS: Do not report errors from nfs_pageio_complete() more than once (git-fixes).
- NFS: Do not report flush errors in nfs_write_end() (git-fixes).
- NFS: Further fixes to the writeback error handling (git-fixes).
- NFS: Memory allocation failures are not server fatal errors (git-fixes).
- NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout (git-fixes).
- nvdimm: Fix firmware activation deadlock scenarios (git-fixes).
- nvdimm/region: Fix default alignment for small regions (git-fixes).
- nvme: add CNTRLTYPE definitions for 'identify controller' (bsc#1192761).
- nvme: Add connect option 'discovery' (bsc#1192761).
- nvme: add new discovery log page entry definitions (bsc#1192761).
- nvme: display correct subsystem NQN (bsc#1192761).
- nvme: expose subsystem type in sysfs attribute 'subsystype' (bsc#1192761).
- nvme: kabi fix nvme subsystype change (bsc#1192761)
- nvmet: add nvmet_is_disc_subsys() helper (bsc#1192761).
- nvmet: add nvmet_req_subsys() helper (bsc#1192761).
- nvme-tcp: fix H2CData PDU send accounting (again) (git-fixes).
- nvmet: do not check iosqes,iocqes for discovery controllers (bsc#1192761).
- nvmet: fix freeing unallocated p2pmem (git-fixes).
- nvmet: make discovery NQN configurable (bsc#1192761).
- nvmet-rdma: Fix NULL deref when SEND is completed with error (git-fixes).
- nvmet-rdma: Fix NULL deref when setting pi_enable and traddr INADDR_ANY (git-fixes).
- nvmet: register discovery subsystem as 'current' (bsc#1192761).
- nvmet: set 'CNTRLTYPE' in the identify controller data (bsc#1192761).
- nvmet: switch check for subsystem type (bsc#1192761).
- phy: aquantia: Fix AN when higher speeds than 1G are not advertised (git-fixes).
- pNFS: Do not keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE (git-fixes).
- powerpc/idle: Fix return value of __setup() handler (bsc#1065729).
- powerpc/perf: Fix the threshold compare group constraint for power9 (bsc#1065729).
- powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address (bsc#1200343 ltc#198477).
- random: Add and use pr_fmt() (bsc#1184924).
- random: remove unnecessary unlikely() (bsc#1184924).
- regmap-irq: Fix a bug in regmap_irq_enable() for type_in_mask chips (git-fixes).
- Revert &quot;block: Fix a lockdep complaint triggered by request queue flushing&quot; (git-fixes).
- scsi: core: Show SCMD_LAST in text form (git-fixes).
- scsi: ibmvfc: Allocate/free queue resource only during probe/remove (jsc#SLE-15442 bsc#1180814 ltc#187461 git-fixes).
- scsi: ibmvfc: Store vhost pointer during subcrq allocation (jsc#SLE-15442 bsc#1180814 ltc#187461 git-fixes).
- scsi: lpfc: Add more logging of cmd and cqe information for aborted NVMe cmds (bsc#1201193).
- scsi: lpfc: Address NULL pointer dereference after starget_to_rport() (bsc#1201193).
- scsi: lpfc: Add support for ATTO Fibre Channel devices (bsc#1201193).
- scsi: lpfc: Add support for VMID tagging of NVMe I/Os (bsc#1201193).
- scsi: lpfc: Allow reduced polling rate for nvme_admin_async_event cmd completion (bsc#1201193).
- scsi: lpfc: Commonize VMID code location (bsc#1201193).
- scsi: lpfc: Correct BDE type for XMIT_SEQ64_WQE in lpfc_ct_reject_event() (bsc#1201193).
- scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology (bsc#1201193).
- scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted (bsc#1201193).
- scsi: lpfc: Resolve some cleanup issues following abort path refactoring (bsc#1201193).
- scsi: lpfc: Resolve some cleanup issues following SLI path refactoring (bsc#1201193).
- scsi: lpfc: Rework lpfc_vmid_get_appid() to be protocol independent (bsc#1201193).
- scsi: lpfc: Update lpfc version to 14.2.0.4 (bsc#1201193).
- scsi: nvme: Added a new sysfs attribute appid_store (bsc#1201193).
- scsi: nvme-fc: Add new routine nvme_fc_io_getuuid() (bsc#1201193).
- scsi: qla2xxx: Add a new v2 dport diagnostic feature (bsc#1201160).
- scsi: qla2xxx: Add debug prints in the device remove path (bsc#1201160).
- scsi: qla2xxx: edif: Add bsg interface to read doorbell events (bsc#1201160).
- scsi: qla2xxx: edif: Add retry for ELS passthrough (bsc#1201160).
- scsi: qla2xxx: edif: bsg refactor (bsc#1201160).
- scsi: qla2xxx: edif: Fix I/O timeout due to over-subscription (bsc#1201160).
- scsi: qla2xxx: edif: Fix n2n discovery issue with secure target (bsc#1201160).
- scsi: qla2xxx: edif: Fix n2n login retry for secure device (bsc#1201160).
- scsi: qla2xxx: edif: Fix no login after app start (bsc#1201160).
- scsi: qla2xxx: edif: Fix no logout on delete for N2N (bsc#1201160).
- scsi: qla2xxx: edif: Fix potential stuck session in sa update (bsc#1201160).
- scsi: qla2xxx: edif: Fix session thrash (bsc#1201160).
- scsi: qla2xxx: edif: Fix slow session teardown (bsc#1201160).
- scsi: qla2xxx: edif: Reduce disruption due to multiple app start (bsc#1201160).
- scsi: qla2xxx: edif: Reduce Initiator-Initiator thrashing (bsc#1201160).
- scsi: qla2xxx: edif: Reduce N2N thrashing at app_start time (bsc#1201160).
- scsi: qla2xxx: edif: Remove old doorbell interface (bsc#1201160).
- scsi: qla2xxx: edif: Send LOGO for unexpected IKE message (bsc#1201160).
- scsi: qla2xxx: edif: Synchronize NPIV deletion with authentication application (bsc#1201160).
- scsi: qla2xxx: edif: Tear down session if keys have been removed (bsc#1201160).
- scsi: qla2xxx: edif: Wait for app to ack on sess down (bsc#1201160).
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (bsc#1201160).
- scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection (bsc#1201160).
- scsi: qla2xxx: Fix excessive I/O error messages by default (bsc#1201160).
- scsi: qla2xxx: Fix losing FCP-2 targets during port perturbation tests (bsc#1201160).
- scsi: qla2xxx: Fix losing FCP-2 targets on long port disable with I/Os (bsc#1201160).
- scsi: qla2xxx: Fix losing target when it reappears during delete (bsc#1201160).
- scsi: qla2xxx: Remove setting of 'req' and 'rsp' parameters (bsc#1201160).
- scsi: qla2xxx: Remove unused 'ql_dm_tgt_ex_pct' parameter (bsc#1201160).
- scsi: qla2xxx: Turn off multi-queue for 8G adapters (bsc#1201160).
- scsi: qla2xxx: Update version to 10.02.07.500-k (bsc#1201160).
- scsi: qla2xxx: Update version to 10.02.07.600-k (bsc#1201160).
- scsi: qla2xxx: Update version to 10.02.07.700-k (bsc#1201160).
- scsi: qla2xxx: Wind down adapter after PCIe error (bsc#1201160).
- scsi: sd: sd_zbc: Do not pass GFP_NOIO to kvcalloc (git-fixes).
- scsi: sd: sd_zbc: Fix handling of host-aware ZBC disks (git-fixes).
- scsi: sd: sd_zbc: Fix ZBC disk initialization (git-fixes).
- scsi: sd: Signal drive managed SMR disks (git-fixes).
- scsi: sd_zbc: Do not limit max_zone_append sectors to (git-fixes).
- scsi: sd_zbc: Ensure buffer size is aligned to SECTOR_SIZE (git-fixes).
- scsi: sd_zbc: Improve zone revalidation (git-fixes).
- scsi: sd_zbc: Remove unused inline functions (git-fixes).
- scsi: sd_zbc: Support disks with more than 2**32 logical (git-fixes).
- scsi: smartpqi: create module parameters for LUN reset (bsc#1179195 bsc#1200622).
- smb3: add mount parm nosparse (bsc#1200217).
- smb3: add trace point for lease not found issue (bsc#1200217).
- smb3: add trace point for oplock not found (bsc#1200217).
- smb3: check for null tcon (bsc#1200217).
- smb3: cleanup and clarify status of tree connections (bsc#1200217).
- smb3: do not set rc when used and unneeded in query_info_compound (bsc#1200217).
- SMB3: EBADF/EIO errors in rename/open caused by race condition in smb2_compound_op (bsc#1200217).
- smb3: fix incorrect session setup check for multiuser mounts (bsc#1200217).
- smb3: fix ksmbd bigendian bug in oplock break, and move its struct to smbfs_common (bsc#1200217).
- smb3: fix snapshot mount option (bsc#1200217).
- smb3 improve error message when mount options conflict with posix (bsc#1200217).
- smb3: move defines for ioctl protocol header and SMB2 sizes to smbfs_common (bsc#1200217).
- smb3: move defines for query info and query fsinfo to smbfs_common (bsc#1200217).
- smb3: move more common protocol header definitions to smbfs_common (bsc#1200217).
- smb3: send NTLMSSP version information (bsc#1200217).
- soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe (git-fixes).
- spi: Fix use-after-free with devm_spi_alloc_* (git-fixes).
- SUNRPC: Fix the calculation of xdr-&gt;end in xdr_get_next_encode_buffer() (git-fixes).
- sunvnet: use icmp_ndo_send helper (git-fixes).
- tty: goldfish: Fix free_irq() on remove (git-fixes).
- usb: chipidea: udc: check request status before setting device address (git-fixes).
- usb: dwc2: Fix memory leak in dwc2_hcd_init (git-fixes).
- usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe (git-fixes).
- usb: gadget: u_ether: fix regression in setting fixed MAC address (git-fixes).
- usbnet: fix memory allocation in helpers (git-fixes).
- USB: serial: io_ti: add Agilent E5805A support (git-fixes).
- USB: serial: option: add Quectel EM05-G modem (git-fixes).
- USB: serial: option: add Quectel RM500K module support (git-fixes).
- USB: serial: option: add support for Cinterion MV31 with new baseline (git-fixes).
- USB: serial: option: add Telit LE910Cx 0x1250 composition (git-fixes).
- usb: xhci: Workaround for S3 issue on AMD SNPS 3.0 xHC (git-fixes).
- veth: fix races around rq-&gt;rx_notify_masked (git-fixes).
- virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed (git-fixes).
- virtio-net: fix race between ndo_open() and virtio_device_ready() (git-fixes).
- virtio_net: fix xdp_rxq_info bug after suspend/resume (git-fixes).
- virtio-pci: Remove wrong address verification in vp_del_vqs() (git-fixes).
- vmxnet3: fix minimum vectors alloc issue (bsc#1199489).
- writeback: Avoid skipping inode writeback (bsc#1200813).
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error (bsc#1200821).
- xhci: Add reset resume quirk for AMD xhci controller (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.3.18" release="150300.59.81.1" arch="nosrc" src="nosrc/kernel-default-5.3.18-150300.59.81.1.nosrc.rpm">
          <filename>kernel-default-5.3.18-150300.59.81.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.3.18" release="150300.59.81.1" arch="x86_64" src="x86_64/kernel-default-5.3.18-150300.59.81.1.x86_64.rpm">
          <filename>kernel-default-5.3.18-150300.59.81.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.3.18" release="150300.59.81.1.150300.18.47.2" arch="src" src="src/kernel-default-base-5.3.18-150300.59.81.1.150300.18.47.2.src.rpm">
          <filename>kernel-default-base-5.3.18-150300.59.81.1.150300.18.47.2.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.3.18" release="150300.59.81.1.150300.18.47.2" arch="x86_64" src="x86_64/kernel-default-base-5.3.18-150300.59.81.1.150300.18.47.2.x86_64.rpm">
          <filename>kernel-default-base-5.3.18-150300.59.81.1.150300.18.47.2.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.3.18" release="150300.59.81.1" arch="aarch64" src="aarch64/kernel-default-5.3.18-150300.59.81.1.aarch64.rpm">
          <filename>kernel-default-5.3.18-150300.59.81.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.3.18" release="150300.59.81.1.150300.18.47.2" arch="aarch64" src="aarch64/kernel-default-base-5.3.18-150300.59.81.1.150300.18.47.2.aarch64.rpm">
          <filename>kernel-default-base-5.3.18-150300.59.81.1.150300.18.47.2.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2647</id>
    <title>Security update for tiff</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1659527089"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2057" id="CVE-2022-2057" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2057" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2056" id="CVE-2022-2056" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2056" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2058" id="CVE-2022-2058" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2058" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201176" id="1201176" title="VUL-0: CVE-2022-2056: tiff: DoS from Divide By Zero Error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201175" id="1201175" title="VUL-0: CVE-2022-2057: tiff: DoS from Divide By Zero Error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201174" id="1201174" title="VUL-0: CVE-2022-2058: tiff: DoS from Divide By Zero Error" type="bugzilla"/>
    </references>
    <description>This update for tiff fixes the following issues:

- CVE-2022-2056: Fixed a division by zero denial of service (bsc#1201176).
- CVE-2022-2057: Fixed a division by zero denial of service (bsc#1201175).
- CVE-2022-2058: Fixed a division by zero denial of service (bsc#1201174).
</description>
    <pkglist>
      <collection>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.11.1" arch="x86_64" src="x86_64/libtiff5-4.0.9-150000.45.11.1.x86_64.rpm">
          <filename>libtiff5-4.0.9-150000.45.11.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" epoch="0" version="4.0.9" release="150000.45.11.1" arch="src" src="src/tiff-4.0.9-150000.45.11.1.src.rpm">
          <filename>tiff-4.0.9-150000.45.11.1.src.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.11.1" arch="aarch64" src="aarch64/libtiff5-4.0.9-150000.45.11.1.aarch64.rpm">
          <filename>libtiff5-4.0.9-150000.45.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2735</id>
    <title>Recommended update for tar</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1660098735"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200657" id="1200657" title="tar-1.34-150000.3.12.1  failed to extract due to race condition in creating directories" type="bugzilla"/>
    </references>
    <description>This update for tar fixes the following issues:

- Fix race condition while creating intermediate subdirectories (bsc#1200657)
</description>
    <pkglist>
      <collection>
        <package name="tar" epoch="0" version="1.34" release="150000.3.15.1" arch="src" src="src/tar-1.34-150000.3.15.1.src.rpm">
          <filename>tar-1.34-150000.3.15.1.src.rpm</filename>
        </package>
        <package name="tar" epoch="0" version="1.34" release="150000.3.15.1" arch="x86_64" src="x86_64/tar-1.34-150000.3.15.1.x86_64.rpm">
          <filename>tar-1.34-150000.3.15.1.x86_64.rpm</filename>
        </package>
        <package name="tar" epoch="0" version="1.34" release="150000.3.15.1" arch="aarch64" src="aarch64/tar-1.34-150000.3.15.1.aarch64.rpm">
          <filename>tar-1.34-150000.3.15.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2974</id>
    <title>Recommended update for btrfsprogs</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1662027869"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199391" id="1199391" title="BTRFS WARNING: adding device" type="bugzilla"/>
    </references>
    <description>This update for btrfsprogs fixes the following issues:

- Build btrfsprogs against libudev-devel properly
- Ignore path devices when scanning btrfs filesystem (bsc#1199391)
</description>
    <pkglist>
      <collection>
        <package name="btrfsprogs" epoch="0" version="4.19.1" release="150300.18.5.1" arch="src" src="src/btrfsprogs-4.19.1-150300.18.5.1.src.rpm">
          <filename>btrfsprogs-4.19.1-150300.18.5.1.src.rpm</filename>
        </package>
        <package name="btrfsprogs" epoch="0" version="4.19.1" release="150300.18.5.1" arch="x86_64" src="x86_64/btrfsprogs-4.19.1-150300.18.5.1.x86_64.rpm">
          <filename>btrfsprogs-4.19.1-150300.18.5.1.x86_64.rpm</filename>
        </package>
        <package name="btrfsprogs-udev-rules" epoch="0" version="4.19.1" release="150300.18.5.1" arch="noarch" src="noarch/btrfsprogs-udev-rules-4.19.1-150300.18.5.1.noarch.rpm">
          <filename>btrfsprogs-udev-rules-4.19.1-150300.18.5.1.noarch.rpm</filename>
        </package>
        <package name="libbtrfs0" epoch="0" version="4.19.1" release="150300.18.5.1" arch="x86_64" src="x86_64/libbtrfs0-4.19.1-150300.18.5.1.x86_64.rpm">
          <filename>libbtrfs0-4.19.1-150300.18.5.1.x86_64.rpm</filename>
        </package>
        <package name="btrfsprogs" epoch="0" version="4.19.1" release="150300.18.5.1" arch="aarch64" src="aarch64/btrfsprogs-4.19.1-150300.18.5.1.aarch64.rpm">
          <filename>btrfsprogs-4.19.1-150300.18.5.1.aarch64.rpm</filename>
        </package>
        <package name="libbtrfs0" epoch="0" version="4.19.1" release="150300.18.5.1" arch="aarch64" src="aarch64/libbtrfs0-4.19.1-150300.18.5.1.aarch64.rpm">
          <filename>libbtrfs0-4.19.1-150300.18.5.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2547</id>
    <title>Security update for logrotate</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1658771884"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192449" id="1192449" title="VUL-0: logrotate: Core-dump handing with SUID binaries" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200802" id="1200802" title="logrotate emits unintended warning: keyword size not properly separated, found 0x3d" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200278" id="1200278" title="logrotate complains about &quot;size=&quot; elements in the rotate config files" type="bugzilla"/>
    </references>
    <description>This update for logrotate fixes the following issues:

Security issues fixed:

- Improved coredump handing for SUID binaries (bsc#1192449).

Non-security issues fixed:

- Fixed &quot;logrotate emits unintended warning: keyword size not properly separated, found 0x3d&quot; (bsc#1200278, bsc#1200802).
</description>
    <pkglist>
      <collection>
        <package name="logrotate" epoch="0" version="3.13.0" release="150000.4.7.1" arch="src" src="src/logrotate-3.13.0-150000.4.7.1.src.rpm">
          <filename>logrotate-3.13.0-150000.4.7.1.src.rpm</filename>
        </package>
        <package name="logrotate" epoch="0" version="3.13.0" release="150000.4.7.1" arch="x86_64" src="x86_64/logrotate-3.13.0-150000.4.7.1.x86_64.rpm">
          <filename>logrotate-3.13.0-150000.4.7.1.x86_64.rpm</filename>
        </package>
        <package name="logrotate" epoch="0" version="3.13.0" release="150000.4.7.1" arch="aarch64" src="aarch64/logrotate-3.13.0-150000.4.7.1.aarch64.rpm">
          <filename>logrotate-3.13.0-150000.4.7.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2349</id>
    <title>Security update for ignition</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1657528451"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1706" id="CVE-2022-1706" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1706" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199524" id="1199524" title="VUL-0: CVE-2022-1706: ignition: configs are accessible from unprivileged containers in VMs running on VMware products" type="bugzilla"/>
    </references>
    <description>This update for ignition fixes the following issues:
    
- CVE-2022-1706: Fixed accessible configs from unprivileged containers in VMs running on VMware products (bsc#1199524).
- Update to version 2.14.0
</description>
    <pkglist>
      <collection>
        <package name="ignition" epoch="0" version="2.14.0" release="150300.6.7.1" arch="src" src="src/ignition-2.14.0-150300.6.7.1.src.rpm">
          <filename>ignition-2.14.0-150300.6.7.1.src.rpm</filename>
        </package>
        <package name="ignition" epoch="0" version="2.14.0" release="150300.6.7.1" arch="x86_64" src="x86_64/ignition-2.14.0-150300.6.7.1.x86_64.rpm">
          <filename>ignition-2.14.0-150300.6.7.1.x86_64.rpm</filename>
        </package>
        <package name="ignition-dracut-grub2" epoch="0" version="2.14.0" release="150300.6.7.1" arch="x86_64" src="x86_64/ignition-dracut-grub2-2.14.0-150300.6.7.1.x86_64.rpm">
          <filename>ignition-dracut-grub2-2.14.0-150300.6.7.1.x86_64.rpm</filename>
        </package>
        <package name="ignition" epoch="0" version="2.14.0" release="150300.6.7.1" arch="aarch64" src="aarch64/ignition-2.14.0-150300.6.7.1.aarch64.rpm">
          <filename>ignition-2.14.0-150300.6.7.1.aarch64.rpm</filename>
        </package>
        <package name="ignition-dracut-grub2" epoch="0" version="2.14.0" release="150300.6.7.1" arch="aarch64" src="aarch64/ignition-dracut-grub2-2.14.0-150300.6.7.1.aarch64.rpm">
          <filename>ignition-dracut-grub2-2.14.0-150300.6.7.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2572</id>
    <title>Recommended update for libzypp, zypper</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1658974987"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199042" id="1199042" title="(zypper) libcurl hangs on RPi4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194550" id="1194550" title="zypper crashes when installing RPM with 404 URL" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197684" id="1197684" title="[Build 117.1] No Application Data Found in gnome-software &quot;Explore&quot; panel." type="bugzilla"/>
    </references>
    <description>This update for libzypp, zypper fixes the following issues:

libzypp:

- appdata plugin: Pass path to the repodata/ directory inside the cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending endOfScriptTag
- PluginRepoverification: initial version hooked into repo::Downloader and repo refresh
- Immediately start monitoring the download.transfer_timeout. Do not wait until the first data arrived (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only
- Work around cases where sat repo.start points to an invalid solvable. May happen if (wrong arch) solvables were 
  removed at the  beginning of the repo.
- Fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER

zypper:

- Basic JobReport for &quot;cmdout/monitor&quot;
- versioncmp: if verbose, also print the edition 'parts' which are compared
- Make sure MediaAccess is closed on exception (bsc#1194550)
- Display plus-content hint conditionally
- Honor the NO_COLOR environment variable when auto-detecting whether to use color
- Define table columns which should be sorted natural [case insensitive]
- lr/ls: Use highlight color on name and alias as well
</description>
    <pkglist>
      <collection>
        <package name="libzypp" epoch="0" version="17.30.2" release="150200.39.1" arch="src" src="src/libzypp-17.30.2-150200.39.1.src.rpm">
          <filename>libzypp-17.30.2-150200.39.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.30.2" release="150200.39.1" arch="x86_64" src="x86_64/libzypp-17.30.2-150200.39.1.x86_64.rpm">
          <filename>libzypp-17.30.2-150200.39.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.53" release="150200.33.1" arch="src" src="src/zypper-1.14.53-150200.33.1.src.rpm">
          <filename>zypper-1.14.53-150200.33.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.53" release="150200.33.1" arch="x86_64" src="x86_64/zypper-1.14.53-150200.33.1.x86_64.rpm">
          <filename>zypper-1.14.53-150200.33.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-needs-restarting" epoch="0" version="1.14.53" release="150200.33.1" arch="noarch" src="noarch/zypper-needs-restarting-1.14.53-150200.33.1.noarch.rpm">
          <filename>zypper-needs-restarting-1.14.53-150200.33.1.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.30.2" release="150200.39.1" arch="aarch64" src="aarch64/libzypp-17.30.2-150200.39.1.aarch64.rpm">
          <filename>libzypp-17.30.2-150200.39.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.53" release="150200.33.1" arch="aarch64" src="aarch64/zypper-1.14.53-150200.33.1.aarch64.rpm">
          <filename>zypper-1.14.53-150200.33.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2904</id>
    <title>Recommended update for openldap2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1661484564"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198341" id="1198341" title="segfault in libc for slapd: __GI___libc_free (mem=0x20) at malloc.c:2956" type="bugzilla"/>
    </references>
    <description>This update for openldap2 fixes the following issues:

- Prevent memory reuse which may lead to instability (bsc#1198341)
</description>
    <pkglist>
      <collection>
        <package name="libldap-2_4-2" epoch="0" version="2.4.46" release="150200.14.11.2" arch="x86_64" src="x86_64/libldap-2_4-2-2.4.46-150200.14.11.2.x86_64.rpm">
          <filename>libldap-2_4-2-2.4.46-150200.14.11.2.x86_64.rpm</filename>
        </package>
        <package name="libldap-data" epoch="0" version="2.4.46" release="150200.14.11.2" arch="noarch" src="noarch/libldap-data-2.4.46-150200.14.11.2.noarch.rpm">
          <filename>libldap-data-2.4.46-150200.14.11.2.noarch.rpm</filename>
        </package>
        <package name="openldap2" epoch="0" version="2.4.46" release="150200.14.11.2" arch="src" src="src/openldap2-2.4.46-150200.14.11.2.src.rpm">
          <filename>openldap2-2.4.46-150200.14.11.2.src.rpm</filename>
        </package>
        <package name="libldap-2_4-2" epoch="0" version="2.4.46" release="150200.14.11.2" arch="aarch64" src="aarch64/libldap-2_4-2-2.4.46-150200.14.11.2.aarch64.rpm">
          <filename>libldap-2_4-2-2.4.46-150200.14.11.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3132</id>
    <title>Recommended update for sg3_utils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1662522940"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199248" id="1199248" title="Backport of sg3_utils rescan-scsi-bus.sh with timeout parameter" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1099278" id="1099278" title="sg3_utils tries to restart non existing lunmask.service" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=954600" id="954600" title="FATE#319786: Implement LUN masking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1095671" id="1095671" title="sg3_utils: sg_turs command in Leap broken" type="bugzilla"/>
    </references>
    <description>This update for sg3_utils fixes the following issues:

- Add systemd service files for LUN masking (bsc#1099278, bsc#954600)
- Fix exit status of `sg_turs` command, when not ready in single case (bsc#1095671)
- Add timeout parameter to rescan-scsi-bus.sh (bsc#1199248)
</description>
    <pkglist>
      <collection>
        <package name="libsgutils2-1_43-2" epoch="0" version="1.44~763+22.a121545" release="150300.16.5.1" arch="x86_64" src="x86_64/libsgutils2-1_43-2-1.44~763+22.a121545-150300.16.5.1.x86_64.rpm">
          <filename>libsgutils2-1_43-2-1.44~763+22.a121545-150300.16.5.1.x86_64.rpm</filename>
        </package>
        <package name="sg3_utils" epoch="0" version="1.44~763+22.a121545" release="150300.16.5.1" arch="src" src="src/sg3_utils-1.44~763+22.a121545-150300.16.5.1.src.rpm">
          <filename>sg3_utils-1.44~763+22.a121545-150300.16.5.1.src.rpm</filename>
        </package>
        <package name="sg3_utils" epoch="0" version="1.44~763+22.a121545" release="150300.16.5.1" arch="x86_64" src="x86_64/sg3_utils-1.44~763+22.a121545-150300.16.5.1.x86_64.rpm">
          <filename>sg3_utils-1.44~763+22.a121545-150300.16.5.1.x86_64.rpm</filename>
        </package>
        <package name="libsgutils2-1_43-2" epoch="0" version="1.44~763+22.a121545" release="150300.16.5.1" arch="aarch64" src="aarch64/libsgutils2-1_43-2-1.44~763+22.a121545-150300.16.5.1.aarch64.rpm">
          <filename>libsgutils2-1_43-2-1.44~763+22.a121545-150300.16.5.1.aarch64.rpm</filename>
        </package>
        <package name="sg3_utils" epoch="0" version="1.44~763+22.a121545" release="150300.16.5.1" arch="aarch64" src="aarch64/sg3_utils-1.44~763+22.a121545-150300.16.5.1.aarch64.rpm">
          <filename>sg3_utils-1.44~763+22.a121545-150300.16.5.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2424</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1658126744"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1179195" id="1179195" title="I/O stops on connected disk after another disk removal from the system." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1180814" id="1180814" title="[15sp3 FEAT] PowerVM: Multiqueue support for ibmvfc scsi driver (NPIV)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1184924" id="1184924" title="[Build 134.3] openQA test fails in kdump_and_crash - forced crash didn't result into expected reboot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1185762" id="1185762" title="SLES 15 SP3 RC2 - native Emulex/NVMe; SLES crash / reboot during I/O" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192761" id="1192761" title="[NetApp SLES15 SP3]: Pull in TP 8013 &amp; 8014 upstream commits for NVMe-oF discovery enhancements" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194013" id="1194013" title="VUL-0: CVE-2021-4157: kernel-source-azure,kernel-source-rt,kernel-source: Buffer overwrite in decode_nfs_fh function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195504" id="1195504" title="UDP packet drop and latency issues [ref:_00D1igLOd._5001iq9ztq:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195775" id="1195775" title="apparmor fails to build with 5.16.7" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196901" id="1196901" title="VUL-0: CVE-2022-23960,CVE-2022-0001,CVE-2022-0002,CVE-2021-26341,CVE-2021-26401: xen: Multiple speculative security issues (XSA-398)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197362" id="1197362" title="L3: RIP: 0010:update_writeback_rate+0x1d0/0x310 [bcache]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197754" id="1197754" title="[PATCH] ext4: add check to prevent attempting to resize an fs with  sparse_super2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198020" id="1198020" title="[PATCH] block: don't merge across cgroup boundaries if blkcg is  enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198924" id="1198924" title="i915 driver failed to load firmware for Rocket Lake" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199482" id="1199482" title="VUL-0: CVE-2022-1012: kernel-source,kernel-source-rt,kernel-source-azure: A vulnerability due to small table perturb size in the TCP source port generation algorithm leads to information leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199487" id="1199487" title="VUL-0: CVE-2022-1679: kernel-source,kernel-source-rt,kernel-source-azure: kernel: Use-After-Free in ath9k_htc_probe_device() could cause an escalation of privileges" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199489" id="1199489" title="vmxnet3: update to latest ToT" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199657" id="1199657" title="VUL-0: EMBARGOED: CVE-2022-29900 CVE-2022-29901: kernel: RETBLEED speculative issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200217" id="1200217" title="[TRACKERBUG] SLE15-SP3 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200263" id="1200263" title="Partner-L3: I/O request allocation is stuck for more than 120 seconds" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200343" id="1200343" title="FVTR1020:Rainier:Non-HMC:MPIPL Dump is not getting offloaded to Linux partition (SUSE)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200442" id="1200442" title="kernel-install-tools should be recommended by all kernel-source flavors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200571" id="1200571" title="execve() incorrectly handles empty argv array" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200599" id="1200599" title="VUL-0: CVE-2022-20154: kernel-source,kernel-source-rt,kernel-source-azure: race condition leading to use-after-free in lock_sock_nested" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200600" id="1200600" title="[Build 20220614] openQA test fails in inotify12" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200608" id="1200608" title="VUL-0: CVE-2022-20154: kernel live patch: race condition leading to use-after-free in lock_sock_nested" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200619" id="1200619" title="VUL-0: CVE-2022-20132: kernel-source-rt,kernel-source-azure,kernel-source: several potential out of bounds reads via malicious HID device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200622" id="1200622" title="L3: kernel PTF request with a patch fix from #1179195." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200806" id="1200806" title="[PATCH] ext4: limit length to bitmap_maxbytes - blocksize in  punch_hole" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200807" id="1200807" title="[PATCH] ext4: fix race condition between ext4_write and  ext4_convert_inline_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200809" id="1200809" title="[PATCH] ext4: fix bug_on in __es_tree_search" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200810" id="1200810" title="[PATCH] ext4: fix bug_on ext4_mb_use_inode_pa" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200813" id="1200813" title="[PATCH] writeback: Avoid skipping inode writeback" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200816" id="1200816" title="[PATCH] blk-mq: do not update io_ticks with passthrough requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200820" id="1200820" title="[PATCH] ext4: make variable &quot;count&quot; signed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200821" id="1200821" title="[PATCH] writeback: Fix inode-&gt;i_io_list not be protected by  inode-&gt;i_lock error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200822" id="1200822" title="[PATCH] init: Initialize noop_backing_dev_info early" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200825" id="1200825" title="[PATCH] blk-iolatency: Fix inflight count imbalances and IO hangs on  offline" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200828" id="1200828" title="[PATCH] jfs: fix divide error in dbNextAG" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200829" id="1200829" title="[PATCH] iomap: iomap_write_failed fix" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200925" id="1200925" title="L3: sles15sp3 hanging tcp sessions after ibmvnic failover on Denali" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201050" id="1201050" title="VUL-0: CVE-2021-26341: kernel: straight line speculation on x86" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201080" id="1201080" title="VUL-0: CVE-2022-1679: kernel live patch: kernel: Use-After-Free in ath9k_htc_probe_device() could cause an escalation of privileges" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201143" id="1201143" title="fuse: annotate lock in fuse_reverse_inval_entry()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201147" id="1201147" title="ceph: add some lockdep assertions around snaprealm handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201149" id="1201149" title="ceph: clean up locking annotation for ceph_get_snap_realm and  __lookup_snap_realm" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201160" id="1201160" title="qla2xxx: update driver to 10.02.07.700-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201171" id="1201171" title="VUL-0: CVE-2022-34918: kernel: heap overflow in nft_set_elem_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201177" id="1201177" title="VUL-0: kernel: bufferoverflow in netfilter nft_set_elem_init" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201193" id="1201193" title="Update Broadcom Emulex lpfc driver to 14.2.0.4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201222" id="1201222" title="VUL-0: CVE-2022-34918: kernel live patch: heap overflow in nft_set_elem_init()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29900" id="CVE-2022-29900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29900" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29901" id="CVE-2022-29901" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29901" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34918" id="CVE-2022-34918" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34918" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26341" id="CVE-2021-26341" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26341" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20154" id="CVE-2022-20154" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20154" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1679" id="CVE-2022-1679" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1679" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4157" id="CVE-2021-4157" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4157" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20132" id="CVE-2022-20132" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20132" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1012" id="CVE-2022-1012" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1012" type="cve"/>
      <reference href="https://jira.suse.com/browse/SLE-15442" id="SLE-15442" title="https://jira.suse.com/browse/SLE-15442" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200692" id="1200692" title="VUL-0: CVE-2022-33981: kernel-source-rt,kernel-source-azure,kernel-source: use-after-free in floppy driver" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33981" id="CVE-2022-33981" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33981" type="cve"/>
    </references>
    <description>The SUSE Linux Enterprise 15 SP3 RT kernel was updated to 3.12.31 to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak arbitrary kernel information (bsc#1199657).
- CVE-2022-34918: Fixed a buffer overflow with nft_set_elem_init() that could be used by a local attacker to escalate privileges (bnc#1201171).
- CVE-2021-26341: Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage (bsc#1201050).
- CVE-2022-1679: Fixed a use-after-free in the Atheros wireless driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages (bsc#1199487).
- CVE-2022-20132: Fixed out of bounds read due to improper input validation in lg_probe and related functions of hid-lg.c (bsc#1200619).
- CVE-2022-1012: Fixed information leak caused by small table perturb size in the TCP source port generation algorithm (bsc#1199482).
- CVE-2022-33981: Fixed use-after-free in floppy driver (bsc#1200692)
- CVE-2021-4157: Fixed an out of memory bounds write flaw in the NFS subsystem, related to the replication of files with NFS. A user could potentially crash the system or escalate privileges on the system (bsc#1194013).
- CVE-2022-20154: Fixed a use after free due to a race condition in lock_sock_nested of sock.c. This could lead to local escalation of privilege with System execution privileges needed (bsc#1200599).

The following non-security bugs were fixed:

- Add missing recommends of kernel-install-tools to kernel-source-vanilla (bsc#1200442)
- Add various fsctl structs (bsc#1200217).
- ALSA: hda/conexant: Fix missing beep setup (git-fixes).
- ALSA: hda/realtek - Add HW8326 support (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo PD70PNT (git-fixes).
- ALSA: hda/realtek - ALC897 headset MIC no sound (git-fixes).
- ALSA: hda/via: Fix missing beep setup (git-fixes).
- arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399 (git-fixes)
- arm64: ftrace: fix branch range checks (git-fixes)
- ASoC: cs35l36: Update digital volume TLV (git-fixes).
- ASoC: cs42l52: Correct TLV for Bypass Volume (git-fixes).
- ASoC: cs42l52: Fix TLV scales for mixer controls (git-fixes).
- ASoC: cs42l56: Correct typo in minimum level for SX volume controls (git-fixes).
- ASoC: cs53l30: Correct number of volume levels on SX controls (git-fixes).
- ASoC: es8328: Fix event generation for deemphasis control (git-fixes).
- ASoC: nau8822: Add operation for internal PLL off and on (git-fixes).
- ASoC: wm8962: Fix suspend while playing music (git-fixes).
- ASoC: wm_adsp: Fix event generation for wm_adsp_fw_put() (git-fixes).
- ata: libata: add qc-&gt;flags in ata_qc_complete_template tracepoint (git-fixes).
- ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() (git-fixes).
- bcache: avoid journal no-space deadlock by reserving 1 journal bucket (git-fixes).
- bcache: avoid unnecessary soft lockup in kworker update_writeback_rate() (bsc#1197362).
- bcache: fixup multiple threads crash (git-fixes).
- bcache: improve multithreaded bch_btree_check() (git-fixes).
- bcache: improve multithreaded bch_sectors_dirty_init() (git-fixes).
- bcache: memset on stack variables in bch_btree_check() and bch_sectors_dirty_init() (git-fixes).
- bcache: remove incremental dirty sector counting for bch_sectors_dirty_init() (git-fixes).
- bio: fix page leak bio_add_hw_page failure (git-fixes).
- blk-cgroup: fix a hd_struct leak in blkcg_fill_root_iostats (git-fixes).
- blk-iolatency: Fix inflight count imbalances and IO hangs on offline (bsc#1200825).
- blk-mq: clear active_queues before clearing BLK_MQ_F_TAG_QUEUE_SHARED (bsc#1200263).
- blk-mq: do not update io_ticks with passthrough requests (bsc#1200816).
- blk-mq: drop workarounds for cpu hotplug queue management (bsc#1185762)
- blk-mq: update hctx-&gt;dispatch_busy in case of real scheduler (git-fixes).
- block: advance iov_iter on bio_add_hw_page failure (git-fixes).
- block: do not merge across cgroup boundaries if blkcg is enabled (bsc#1198020).
- block: Fix handling of offline queues in blk_mq_alloc_request_hctx() (bsc#1185762).
- block: Fix kABI in blk-merge.c (bsc#1198020).
- block/keyslot-manager: prevent crash when num_slots=1 (git-fixes).
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove() (git-fixes).
- caif_virtio: fix race between virtio_device_ready() and ndo_open() (git-fixes).
- ceph: add some lockdep assertions around snaprealm handling (bsc#1201147).
- ceph: clean up locking annotation for ceph_get_snap_realm and __lookup_snap_realm (bsc#1201149).
- certs/blacklist_hashes.c: fix const confusion in certs blacklist (git-fixes).
- cifs: add WARN_ON for when chan_count goes below minimum (bsc#1200217).
- cifs: adjust DebugData to use chans_need_reconnect for conn status (bsc#1200217).
- cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (bsc#1200217).
- cifs: avoid parallel session setups on same channel (bsc#1200217).
- cifs: avoid race during socket reconnect between send and recv (bsc#1200217).
- cifs: call cifs_reconnect when a connection is marked (bsc#1200217).
- cifs: call helper functions for marking channels for reconnect (bsc#1200217).
- cifs: change smb2_query_info_compound to use a cached fid, if available (bsc#1200217).
- cifs: check for smb1 in open_cached_dir() (bsc#1200217).
- cifs: check reconnects for channels of active tcons too (bsc#1200217).
- cifs: Check the IOCB_DIRECT flag, not O_DIRECT (bsc#1200217).
- cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (bsc#1200217).
- cifs: clean up an inconsistent indenting (bsc#1200217).
- cifs: destage any unwritten data to the server before calling copychunk_write (bsc#1200217).
- cifs: do not build smb1ops if legacy support is disabled (bsc#1200217).
- cifs: do not call cifs_dfs_query_info_nonascii_quirk() if nodfs was set (bsc#1200217).
- cifs: do not use tcpStatus after negotiate completes (bsc#1200217).
- cifs: do not use uninitialized data in the owner/group sid (bsc#1200217).
- cifs: fix confusing unneeded warning message on smb2.1 and earlier (bsc#1200217).
- cifs: fix double free race when mount fails in cifs_get_root() (bsc#1200217).
- cifs: fix FILE_BOTH_DIRECTORY_INFO definition (bsc#1200217).
- cifs: fix handlecache and multiuser (bsc#1200217).
- cifs: fix hang on cifs_get_next_mid() (bsc#1200217).
- cifs: fix incorrect use of list iterator after the loop (bsc#1200217).
- cifs: fix minor compile warning (bsc#1200217).
- cifs: fix missed refcounting of ipc tcon (bsc#1200217).
- cifs: fix ntlmssp auth when there is no key exchange (bsc#1200217).
- cifs: fix NULL ptr dereference in refresh_mounts() (bsc#1200217).
- cifs: fix potential deadlock in direct reclaim (bsc#1200217).
- cifs: fix potential double free during failed mount (bsc#1200217).
- cifs: fix potential race with cifsd thread (bsc#1200217).
- cifs: fix set of group SID via NTSD xattrs (bsc#1200217).
- cifs: fix signed integer overflow when fl_end is OFFSET_MAX (bsc#1200217).
- cifs: Fix smb311_update_preauth_hash() kernel-doc comment (bsc#1200217).
- cifs: fix the cifs_reconnect path for DFS (bsc#1200217).
- cifs: fix the connection state transitions with multichannel (bsc#1200217).
- cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (bsc#1200217).
- cifs: fix workstation_name for multiuser mounts (bsc#1200217).
- cifs: force new session setup and tcon for dfs (bsc#1200217).
- cifs: free ntlmsspblob allocated in negotiate (bsc#1200217).
- cifs: ignore resource_id while getting fscache super cookie (bsc#1200217).
- cifs: maintain a state machine for tcp/smb/tcon sessions (bsc#1200217).
- cifs: make status checks in version independent callers (bsc#1200217).
- cifs: mark sessions for reconnection in helper function (bsc#1200217).
- cifs: modefromsids must add an ACE for authenticated users (bsc#1200217).
- cifs: move definition of cifs_fattr earlier in cifsglob.h (bsc#1200217).
- cifs: move superblock magic defitions to magic.h (bsc#1200217).
- cifs: potential buffer overflow in handling symlinks (bsc#1200217).
- cifs: print TIDs as hex (bsc#1200217).
- cifs: protect all accesses to chan_* with chan_lock (bsc#1200217).
- cifs: quirk for STATUS_OBJECT_NAME_INVALID returned for non-ASCII dfs refs (bsc#1200217).
- cifs: reconnect only the connection and not smb session where possible (bsc#1200217).
- cifs: release cached dentries only if mount is complete (bsc#1200217).
- cifs: remove check of list iterator against head past the loop body (bsc#1200217).
- cifs: remove redundant assignment to pointer p (bsc#1200217).
- cifs: remove repeated debug message on cifs_put_smb_ses() (bsc#1200217).
- cifs: remove repeated state change in dfs tree connect (bsc#1200217).
- cifs: remove unused variable ses_selected (bsc#1200217).
- cifs: return ENOENT for DFS lookup_cache_entry() (bsc#1200217).
- cifs: return the more nuanced writeback error on close() (bsc#1200217).
- cifs: sanitize multiple delimiters in prepath (bsc#1200217).
- cifs: serialize all mount attempts (bsc#1200217).
- cifs: set the CREATE_NOT_FILE when opening the directory in use_cached_dir() (bsc#1200217).
- cifs: skip trailing separators of prefix paths (bsc#1200217).
- cifs: smbd: fix typo in comment (bsc#1200217).
- cifs: Split the smb3_add_credits tracepoint (bsc#1200217).
- cifs: take cifs_tcp_ses_lock for status checks (bsc#1200217).
- cifs: track individual channel status using chans_need_reconnect (bsc#1200217).
- cifs: unlock chan_lock before calling cifs_put_tcp_session (bsc#1200217).
- cifs: update internal module number (bsc#1193629).
- cifs: update internal module number (bsc#1200217).
- cifs: update internal module number (bsc#1200217).
- cifs: update tcpStatus during negotiate and sess setup (bsc#1200217).
- cifs: use a different reconnect helper for non-cifsd threads (bsc#1200217).
- cifs: use correct lock type in cifs_reconnect() (bsc#1200217).
- cifs: Use kzalloc instead of kmalloc/memset (bsc#1200217).
- cifs: use new enum for ses_status (bsc#1200217).
- cifs: use the chans_need_reconnect bitmap for reconnect status (bsc#1200217).
- cifs: verify that tcon is valid before dereference in cifs_kill_sb (bsc#1200217).
- cifs: version operations for smb20 unneeded when legacy support disabled (bsc#1200217).
- cifs: wait for tcon resource_id before getting fscache super (bsc#1200217).
- cifs: we do not need a spinlock around the tree access during umount (bsc#1200217).
- cifs: when extending a file with falloc we should make files not-sparse (bsc#1200217).
- drivers: cpufreq: Add missing of_node_put() in qoriq-cpufreq.c (git-fixes).
- drm/i915/reset: Fix error_state_read ptr + offset use (git-fixes).
- drm/i915: Update TGL and RKL DMC firmware versions (bsc#1198924).
- drm/msm: Fix double pm_runtime_disable() call (git-fixes).
- drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf (git-fixes).
- drm/sun4i: Fix crash during suspend after component bind failure (git-fixes).
- exec: Force single empty string when argv is empty (bsc#1200571).
- ext4: add check to prevent attempting to resize an fs with sparse_super2 (bsc#1197754).
- ext4: fix bug_on ext4_mb_use_inode_pa (bsc#1200810).
- ext4: fix bug_on in __es_tree_search (bsc#1200809).
- ext4: fix race condition between ext4_write and ext4_convert_inline_data (bsc#1200807).
- ext4: limit length to bitmap_maxbytes - blocksize in punch_hole (bsc#1200806).
- ext4: make variable &quot;count&quot; signed (bsc#1200820).
- Fix a warning about a malformed kernel doc comment in cifs (bsc#1200217).
- fuse: annotate lock in fuse_reverse_inval_entry() (bsc#1201143).
- gpio: winbond: Fix error code in winbond_gpio_get() (git-fixes).
- gtp: use icmp_ndo_send helper (git-fixes).
- hwmon: (ibmaem) do not call platform_device_del() if platform_device_add() fails (git-fixes).
- i2c: designware: Use standard optional ref clock implementation (git-fixes).
- ibmvnic: Properly dispose of all skbs during a failover (bsc#1200925).
- iio:accel:bma180: rearrange iio trigger get and register (git-fixes).
- iio: accel: mma8452: ignore the return value of reset operation (git-fixes).
- iio: adc: axp288: Override TS pin bias current for some models (git-fixes).
- iio: adc: vf610: fix conversion mode sysfs node name (git-fixes).
- iio:chemical:ccs811: rearrange iio trigger get and register (git-fixes).
- iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up() (git-fixes).
- iio: trigger: sysfs: fix use-after-free on remove (git-fixes).
- init: Initialize noop_backing_dev_info early (bsc#1200822).
- inotify: show inotify mask flags in proc fdinfo (bsc#1200600).
- iomap: iomap_write_failed fix (bsc#1200829).
- ipvs: add sysctl_run_estimation to support disable estimation (bsc#1195504).
- jfs: fix divide error in dbNextAG (bsc#1200828).
- kABI fix of sysctl_run_estimation (git-fixes).
- kabi: nvme workaround header include (bsc#1201193).
- kabi/severities: ignore KABI for NVMe target (bsc#1192761)
- linux/dim: Fix divide by 0 in RDMA DIM (git-fixes).
- md: fix update super 1.0 on rdev size change (git-fixes).
- move devm_allocate to end of structure for kABI (git-fixes).
- mtd: rawnand: gpmi: Fix setting busy timeout setting (git-fixes).
- net: ax25: Fix deadlock caused by skb_recv_datagram in ax25_recvmsg (git-fixes).
- net: ethernet: stmmac: Disable hardware multicast filter (git-fixes).
- net: ieee802154: ca8210: Stop leaking skb's (git-fixes).
- net: lantiq: Add locking for TX DMA channel (git-fixes).
- net: rose: fix UAF bugs caused by timer handler (git-fixes).
- net: stmmac: reset Tx desc base address before restarting Tx (git-fixes).
- net: usb: ax88179_178a: Fix packet receiving (git-fixes).
- nfc: nfcmrvl: Fix irq_of_parse_and_map() return value (git-fixes).
- nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred (git-fixes).
- NFC: nxp-nci: Do not issue a zero length i2c_master_read() (git-fixes).
- NFS: Do not report EINTR/ERESTARTSYS as mapping errors (git-fixes).
- NFS: Do not report errors from nfs_pageio_complete() more than once (git-fixes).
- NFS: Do not report flush errors in nfs_write_end() (git-fixes).
- NFS: Further fixes to the writeback error handling (git-fixes).
- NFS: Memory allocation failures are not server fatal errors (git-fixes).
- NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout (git-fixes).
- nvdimm: Fix firmware activation deadlock scenarios (git-fixes).
- nvdimm/region: Fix default alignment for small regions (git-fixes).
- nvme: add CNTRLTYPE definitions for 'identify controller' (bsc#1192761).
- nvme: Add connect option 'discovery' (bsc#1192761).
- nvme: add new discovery log page entry definitions (bsc#1192761).
- nvme: display correct subsystem NQN (bsc#1192761).
- nvme: expose subsystem type in sysfs attribute 'subsystype' (bsc#1192761).
- nvme: kabi fix nvme subsystype change (bsc#1192761)
- nvmet: add nvmet_is_disc_subsys() helper (bsc#1192761).
- nvmet: add nvmet_req_subsys() helper (bsc#1192761).
- nvme-tcp: fix H2CData PDU send accounting (again) (git-fixes).
- nvmet: do not check iosqes,iocqes for discovery controllers (bsc#1192761).
- nvmet: fix freeing unallocated p2pmem (git-fixes).
- nvmet: make discovery NQN configurable (bsc#1192761).
- nvmet-rdma: Fix NULL deref when SEND is completed with error (git-fixes).
- nvmet-rdma: Fix NULL deref when setting pi_enable and traddr INADDR_ANY (git-fixes).
- nvmet: register discovery subsystem as 'current' (bsc#1192761).
- nvmet: set 'CNTRLTYPE' in the identify controller data (bsc#1192761).
- nvmet: switch check for subsystem type (bsc#1192761).
- pahole 1.22 required for full BTF features. also recommend pahole for kernel-source to make the kernel buildable with standard config
- phy: aquantia: Fix AN when higher speeds than 1G are not advertised (git-fixes).
- pNFS: Do not keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE (git-fixes).
- powerpc/idle: Fix return value of __setup() handler (bsc#1065729).
- powerpc/perf: Fix the threshold compare group constraint for power9 (bsc#1065729).
- powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address (bsc#1200343 ltc#198477).
- random: Add and use pr_fmt() (bsc#1184924).
- random: remove unnecessary unlikely() (bsc#1184924).
- regmap-irq: Fix a bug in regmap_irq_enable() for type_in_mask chips (git-fixes).
- Revert &quot;block: Fix a lockdep complaint triggered by request queue flushing&quot; (git-fixes).
- rpm/check-for-config-changes: ignore GCC12/CC_NO_ARRAY_BOUNDS
- rpm/kernel-obs-build.spec.in: add systemd-initrd and terminfo dracut module (bsc#1195775)
- rpm/kernel-obs-build.spec.in: Also depend on dracut-systemd (bsc#1195775)
- scsi: core: Show SCMD_LAST in text form (git-fixes).
- scsi: ibmvfc: Allocate/free queue resource only during probe/remove (jsc#SLE-15442 bsc#1180814 ltc#187461 git-fixes).
- scsi: ibmvfc: Store vhost pointer during subcrq allocation (jsc#SLE-15442 bsc#1180814 ltc#187461 git-fixes).
- scsi: lpfc: Add more logging of cmd and cqe information for aborted NVMe cmds (bsc#1201193).
- scsi: lpfc: Address NULL pointer dereference after starget_to_rport() (bsc#1201193).
- scsi: lpfc: Add support for ATTO Fibre Channel devices (bsc#1201193).
- scsi: lpfc: Add support for VMID tagging of NVMe I/Os (bsc#1201193).
- scsi: lpfc: Allow reduced polling rate for nvme_admin_async_event cmd completion (bsc#1201193).
- scsi: lpfc: Commonize VMID code location (bsc#1201193).
- scsi: lpfc: Correct BDE type for XMIT_SEQ64_WQE in lpfc_ct_reject_event() (bsc#1201193).
- scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology (bsc#1201193).
- scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted (bsc#1201193).
- scsi: lpfc: Resolve some cleanup issues following abort path refactoring (bsc#1201193).
- scsi: lpfc: Resolve some cleanup issues following SLI path refactoring (bsc#1201193).
- scsi: lpfc: Rework lpfc_vmid_get_appid() to be protocol independent (bsc#1201193).
- scsi: lpfc: Update lpfc version to 14.2.0.4 (bsc#1201193).
- scsi: nvme: Added a new sysfs attribute appid_store (bsc#1201193).
- scsi: nvme-fc: Add new routine nvme_fc_io_getuuid() (bsc#1201193).
- scsi: qla2xxx: Add a new v2 dport diagnostic feature (bsc#1201160).
- scsi: qla2xxx: Add debug prints in the device remove path (bsc#1201160).
- scsi: qla2xxx: edif: Add bsg interface to read doorbell events (bsc#1201160).
- scsi: qla2xxx: edif: Add retry for ELS passthrough (bsc#1201160).
- scsi: qla2xxx: edif: bsg refactor (bsc#1201160).
- scsi: qla2xxx: edif: Fix I/O timeout due to over-subscription (bsc#1201160).
- scsi: qla2xxx: edif: Fix n2n discovery issue with secure target (bsc#1201160).
- scsi: qla2xxx: edif: Fix n2n login retry for secure device (bsc#1201160).
- scsi: qla2xxx: edif: Fix no login after app start (bsc#1201160).
- scsi: qla2xxx: edif: Fix no logout on delete for N2N (bsc#1201160).
- scsi: qla2xxx: edif: Fix potential stuck session in sa update (bsc#1201160).
- scsi: qla2xxx: edif: Fix session thrash (bsc#1201160).
- scsi: qla2xxx: edif: Fix slow session teardown (bsc#1201160).
- scsi: qla2xxx: edif: Reduce disruption due to multiple app start (bsc#1201160).
- scsi: qla2xxx: edif: Reduce Initiator-Initiator thrashing (bsc#1201160).
- scsi: qla2xxx: edif: Reduce N2N thrashing at app_start time (bsc#1201160).
- scsi: qla2xxx: edif: Remove old doorbell interface (bsc#1201160).
- scsi: qla2xxx: edif: Send LOGO for unexpected IKE message (bsc#1201160).
- scsi: qla2xxx: edif: Synchronize NPIV deletion with authentication application (bsc#1201160).
- scsi: qla2xxx: edif: Tear down session if keys have been removed (bsc#1201160).
- scsi: qla2xxx: edif: Wait for app to ack on sess down (bsc#1201160).
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (bsc#1201160).
- scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection (bsc#1201160).
- scsi: qla2xxx: Fix excessive I/O error messages by default (bsc#1201160).
- scsi: qla2xxx: Fix losing FCP-2 targets during port perturbation tests (bsc#1201160).
- scsi: qla2xxx: Fix losing FCP-2 targets on long port disable with I/Os (bsc#1201160).
- scsi: qla2xxx: Fix losing target when it reappears during delete (bsc#1201160).
- scsi: qla2xxx: Remove setting of 'req' and 'rsp' parameters (bsc#1201160).
- scsi: qla2xxx: Remove unused 'ql_dm_tgt_ex_pct' parameter (bsc#1201160).
- scsi: qla2xxx: Turn off multi-queue for 8G adapters (bsc#1201160).
- scsi: qla2xxx: Update version to 10.02.07.500-k (bsc#1201160).
- scsi: qla2xxx: Update version to 10.02.07.600-k (bsc#1201160).
- scsi: qla2xxx: Update version to 10.02.07.700-k (bsc#1201160).
- scsi: qla2xxx: Wind down adapter after PCIe error (bsc#1201160).
- scsi: sd: sd_zbc: Do not pass GFP_NOIO to kvcalloc (git-fixes).
- scsi: sd: sd_zbc: Fix handling of host-aware ZBC disks (git-fixes).
- scsi: sd: sd_zbc: Fix ZBC disk initialization (git-fixes).
- scsi: sd: Signal drive managed SMR disks (git-fixes).
- scsi: sd_zbc: Do not limit max_zone_append sectors to (git-fixes).
- scsi: sd_zbc: Ensure buffer size is aligned to SECTOR_SIZE (git-fixes).
- scsi: sd_zbc: Improve zone revalidation (git-fixes).
- scsi: sd_zbc: Remove unused inline functions (git-fixes).
- scsi: sd_zbc: Support disks with more than 2**32 logical (git-fixes).
- scsi: smartpqi: create module parameters for LUN reset (bsc#1179195 bsc#1200622).
- smb3: add mount parm nosparse (bsc#1200217).
- smb3: add trace point for lease not found issue (bsc#1200217).
- smb3: add trace point for oplock not found (bsc#1200217).
- smb3: check for null tcon (bsc#1200217).
- smb3: cleanup and clarify status of tree connections (bsc#1200217).
- smb3: do not set rc when used and unneeded in query_info_compound (bsc#1200217).
- SMB3: EBADF/EIO errors in rename/open caused by race condition in smb2_compound_op (bsc#1200217).
- smb3: fix incorrect session setup check for multiuser mounts (bsc#1200217).
- smb3: fix ksmbd bigendian bug in oplock break, and move its struct to smbfs_common (bsc#1200217). [ ematsumiya: remove ksmbd parts ]
- smb3: fix snapshot mount option (bsc#1200217).
- [smb3] improve error message when mount options conflict with posix (bsc#1200217).
- smb3: move defines for ioctl protocol header and SMB2 sizes to smbfs_common (bsc#1200217). [ ematsumiya: remove ksmbd parts ]
- smb3: move defines for query info and query fsinfo to smbfs_common (bsc#1200217). [ ematsumiya: remove ksmbd parts ]
- [smb3] move more common protocol header definitions to smbfs_common (bsc#1200217). [ ematsumiya: remove ksmbd parts ]
- smb3: send NTLMSSP version information (bsc#1200217).
- soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe (git-fixes).
- spi: Fix use-after-free with devm_spi_alloc_* (git-fixes).
- SUNRPC: Fix the calculation of xdr-&gt;end in xdr_get_next_encode_buffer() (git-fixes).
- sunvnet: use icmp_ndo_send helper (git-fixes).
- tty: goldfish: Fix free_irq() on remove (git-fixes).
- usb: chipidea: udc: check request status before setting device address (git-fixes).
- usb: dwc2: Fix memory leak in dwc2_hcd_init (git-fixes).
- usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe (git-fixes).
- usb: gadget: u_ether: fix regression in setting fixed MAC address (git-fixes).
- usbnet: fix memory allocation in helpers (git-fixes).
- USB: serial: io_ti: add Agilent E5805A support (git-fixes).
- USB: serial: option: add Quectel EM05-G modem (git-fixes).
- USB: serial: option: add Quectel RM500K module support (git-fixes).
- USB: serial: option: add support for Cinterion MV31 with new baseline (git-fixes).
- USB: serial: option: add Telit LE910Cx 0x1250 composition (git-fixes).
- usb: xhci: Workaround for S3 issue on AMD SNPS 3.0 xHC (git-fixes).
- veth: fix races around rq-&gt;rx_notify_masked (git-fixes).
- virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed (git-fixes).
- virtio-net: fix race between ndo_open() and virtio_device_ready() (git-fixes).
- virtio_net: fix xdp_rxq_info bug after suspend/resume (git-fixes).
- virtio-pci: Remove wrong address verification in vp_del_vqs() (git-fixes).
- vmxnet3: fix minimum vectors alloc issue (bsc#1199489).
- writeback: Avoid skipping inode writeback (bsc#1200813).
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error (bsc#1200821).
- xhci: Add reset resume quirk for AMD xhci controller (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.3.18" release="150300.96.1" arch="nosrc" src="nosrc/kernel-rt-5.3.18-150300.96.1.nosrc.rpm">
          <filename>kernel-rt-5.3.18-150300.96.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.3.18" release="150300.96.1" arch="x86_64" src="x86_64/kernel-rt-5.3.18-150300.96.1.x86_64.rpm">
          <filename>kernel-rt-5.3.18-150300.96.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2562</id>
    <title>Security update for python-M2Crypto</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1658925402"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25657" id="CVE-2020-25657" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25657" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1178829" id="1178829" title="VUL-0: CVE-2020-25657: python-m2crypto,python-M2Crypto: Bleichenbacher timing attacks in the RSA decryption API" type="bugzilla"/>
    </references>
    <description>This update for python-M2Crypto fixes the following issues:

- CVE-2020-25657: Fixed Bleichenbacher timing attacks in the RSA decryption API (bsc#1178829).
</description>
    <pkglist>
      <collection>
        <package name="python-M2Crypto" epoch="0" version="0.35.2" release="150000.3.14.1" arch="src" src="src/python-M2Crypto-0.35.2-150000.3.14.1.src.rpm">
          <filename>python-M2Crypto-0.35.2-150000.3.14.1.src.rpm</filename>
        </package>
        <package name="python3-M2Crypto" epoch="0" version="0.35.2" release="150000.3.14.1" arch="x86_64" src="x86_64/python3-M2Crypto-0.35.2-150000.3.14.1.x86_64.rpm">
          <filename>python3-M2Crypto-0.35.2-150000.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="python3-M2Crypto" epoch="0" version="0.35.2" release="150000.3.14.1" arch="aarch64" src="aarch64/python3-M2Crypto-0.35.2-150000.3.14.1.aarch64.rpm">
          <filename>python3-M2Crypto-0.35.2-150000.3.14.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2586</id>
    <title>Security update for ldb, samba</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1659088893"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199247" id="1199247" title="Samba 4.15 regrestion - netgroups dropped" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200964" id="1200964" title="autoyast auth-client for AD does not install required packages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198255" id="1198255" title="winbind is not starting: Failed to initialize passdb backend! after updating to recent samba-winbind packages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200556" id="1200556" title="smbclient - NT_STATUS_OBJECT_PATH_NOT_FOUND deleting remote file on DFS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196224" id="1196224" title="User Kerberos Tickets are not refresh or get destroyed after Update to samba 4.15.4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199734" id="1199734" title="Cannot join windows domain with YaST" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201492" id="1201492" title="VUL-0: EMBARGOED: CVE-2022-32745: samba, ldb: AD users can crash the server process with an LDAP add or modify request" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201493" id="1201493" title="VUL-0: EMBARGOED: CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201490" id="1201490" title="VUL-0: EMBARGOED: CVE-2022-32746: samba,ldb: Use-after-free occurring in database audit logging module" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201496" id="1201496" title="VUL-0: EMBARGOED: CVE-2022-32742: samba: Server memory information leak via SMB1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201495" id="1201495" title="VUL-0: EMBARGOED: CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2031" id="CVE-2022-2031" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2031" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32744" id="CVE-2022-32744" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32744" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32746" id="CVE-2022-32746" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32746" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32742" id="CVE-2022-32742" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32742" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32745" id="CVE-2022-32745" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32745" type="cve"/>
    </references>
    <description>This update for ldb, samba fixes the following issues:

- CVE-2022-32746: Fixed a use-after-free occurring in database audit logging (bsc#1201490).
- CVE-2022-32745: Fixed a remote server crash with an LDAP add or modify request (bsc#1201492).
- CVE-2022-2031: Fixed AD restrictions bypass associated with changing passwords (bsc#1201495).
- CVE-2022-32742: Fixed a memory leak in SMB1 (bsc#1201496).
- CVE-2022-32744: Fixed an arbitrary password change request for any AD user (bsc#1201493).

The following security bugs were fixed:

samba was updated to 4.15.8:

* Use pathref fd instead of io fd in vfs_default_durable_cookie;
  (bso#15042);
* Setting fruit:resource = stream in vfs_fruit causes a panic;
  (bso#15099);
* Add support for bind 9.18; (bso#14986);
* logging dsdb audit to specific files does not work; (bso#15076);
* vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
  file had been deleted; (bso#15069);
* netgroups support removed; (bso#15087); (bsc#1199247);
* net ads info shows LDAP Server: 0.0.0.0 depending on contacted
  server; (bso#14674); (bsc#1199734);
* waf produces incorrect names for python extensions with Python
  3.11; (bso#15071);
* smbclient commands del &amp; deltree fail with
  NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
  (bsc#1200556);
* vfs_gpfs recalls=no option prevents listing files; (bso#15055);
* waf produces incorrect names for python extensions with Python
  3.11; (bso#15071);
* Compile error in source3/utils/regedit_hexedit.c; (bso#15091);
* ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
  (bso#15108);
* smbd doesn't handle UPNs for looking up names; (bso#15054);
* Out-by-4 error in smbd read reply max_send clamp; (bso#14443);

- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);
- Fix  smbclient commands del &amp; deltree failing with
  NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
  (bsc#1200556).

ldb was updated to version 2.4.3

* Fix build problems, waf produces incorrect names for python extensions; (bso#15071);
</description>
    <pkglist>
      <collection>
        <package name="ldb" epoch="0" version="2.4.3" release="150300.3.20.1" arch="src" src="src/ldb-2.4.3-150300.3.20.1.src.rpm">
          <filename>ldb-2.4.3-150300.3.20.1.src.rpm</filename>
        </package>
        <package name="libldb2" epoch="0" version="2.4.3" release="150300.3.20.1" arch="x86_64" src="x86_64/libldb2-2.4.3-150300.3.20.1.x86_64.rpm">
          <filename>libldb2-2.4.3-150300.3.20.1.x86_64.rpm</filename>
        </package>
        <package name="samba" epoch="0" version="4.15.8+git.500.d5910280cc7" release="150300.3.37.1" arch="src" src="src/samba-4.15.8+git.500.d5910280cc7-150300.3.37.1.src.rpm">
          <filename>samba-4.15.8+git.500.d5910280cc7-150300.3.37.1.src.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.15.8+git.500.d5910280cc7" release="150300.3.37.1" arch="x86_64" src="x86_64/samba-client-libs-4.15.8+git.500.d5910280cc7-150300.3.37.1.x86_64.rpm">
          <filename>samba-client-libs-4.15.8+git.500.d5910280cc7-150300.3.37.1.x86_64.rpm</filename>
        </package>
        <package name="libldb2" epoch="0" version="2.4.3" release="150300.3.20.1" arch="aarch64" src="aarch64/libldb2-2.4.3-150300.3.20.1.aarch64.rpm">
          <filename>libldb2-2.4.3-150300.3.20.1.aarch64.rpm</filename>
        </package>
        <package name="samba-client-libs" epoch="0" version="4.15.8+git.500.d5910280cc7" release="150300.3.37.1" arch="aarch64" src="aarch64/samba-client-libs-4.15.8+git.500.d5910280cc7-150300.3.37.1.aarch64.rpm">
          <filename>samba-client-libs-4.15.8+git.500.d5910280cc7-150300.3.37.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2614</id>
    <title>Security update for dwarves and elfutils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1659343286"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18520" id="CVE-2018-18520" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18520" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7612" id="CVE-2017-7612" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7612" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7146" id="CVE-2019-7146" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7146" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7611" id="CVE-2017-7611" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7611" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7148" id="CVE-2019-7148" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7148" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7664" id="CVE-2019-7664" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7664" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7149" id="CVE-2019-7149" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7149" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7610" id="CVE-2017-7610" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7610" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7607" id="CVE-2017-7607" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7607" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16402" id="CVE-2018-16402" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16402" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16062" id="CVE-2018-16062" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16062" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7609" id="CVE-2017-7609" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7609" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18521" id="CVE-2018-18521" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18521" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18310" id="CVE-2018-18310" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18310" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16403" id="CVE-2018-16403" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16403" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7608" id="CVE-2017-7608" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7608" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7150" id="CVE-2019-7150" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7150" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7665" id="CVE-2019-7665" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7665" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7613" id="CVE-2017-7613" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7613" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1033090" id="1033090" title="VUL-1: CVE-2017-7613: elfutils: denial of service (memory consumption) via a crafted ELF file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1112726" id="1112726" title="VUL-1: CVE-2018-18520: elfutils: An Invalid Memory Address Dereference exists in the function elf_end in libelf" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1125007" id="1125007" title="VUL-1: CVE-2019-7665: elfutils: heap-based buffer over-read in the function elf32_xlatetom in elf32_xlatetom.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1123685" id="1123685" title="VUL-1: CVE-2019-7150: elfutils: segmentation fault can occur in the function elf64_xlatetom in libelf/elf32_xlatetom.c, due to a missing check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1106390" id="1106390" title="VUL-1: CVE-2018-16062: elfutils: dwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18allows remote attackers to cause a denial of service (heap-based bufferover-read) via a crafted file." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1033086" id="1033086" title="VUL-1: CVE-2017-7609: elfutils: denial of service (memory consumption) via a crafted ELF file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1033089" id="1033089" title="VUL-1: CVE-2017-7612: elfutils: denial of service (heap-based buffer over-read and application crash) via a crafted ELF file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1033084" id="1033084" title="VUL-1: CVE-2017-7607: elfutils: denial of service (heap-based buffer over-read and application crash) via a crafted ELF file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1033088" id="1033088" title="VUL-1: CVE-2017-7611: elfutils: denial of service (heap-based buffer over-read and application crash) via a crafted ELF file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1104264" id="1104264" title="Recommended packages that are missing:" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1107066" id="1107066" title="VUL-0: CVE-2018-16402: elfutils: Double-free due to double decompression of sections in crafted ELF causes crash" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1112723" id="1112723" title="VUL-1: CVE-2018-18521: elfutils: Divide-by-zero vulnerabilities in the function arlib_add_symbols() used by eu-ranlib" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1082318" id="1082318" title="Packages must not mark license files as %doc" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1107067" id="1107067" title="VUL-1: CVE-2018-16403: elfutils: Heap-based buffer over-read in libdw/dwarf_getabbrev.c and libwd/dwarf_hasattr.c causes crash" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1033087" id="1033087" title="VUL-1: CVE-2017-7610: elfutils: denial of service (heap-based buffer over-read and application crash) via a crafted ELF file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1033085" id="1033085" title="VUL-1: CVE-2017-7608: elfutils: denial of service (heap-based buffer over-read and application crash) via a crafted ELF file" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1111973" id="1111973" title="VUL-1: CVE-2018-18310: elfutils: An invalid memory address dereference in dwfl_segment_report_module.c" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/SLE-24501" id="SLE-24501" title="https://jira.suse.com/browse/SLE-24501" type="jira"/>
    </references>
    <description>This update for dwarves and elfutils fixes the following issues:

elfutils was updated to version 0.177 (jsc#SLE-24501):
  
- elfclassify: New tool to analyze ELF objects.
- readelf: Print DW_AT_data_member_location as decimal offset.
             Decode DW_AT_discr_list block attributes.
- libdw: Add DW_AT_GNU_numerator, DW_AT_GNU_denominator and DW_AT_GNU_bias.
- libdwelf: Add dwelf_elf_e_machine_string.
            dwelf_elf_begin now only returns NULL when there is an error
            reading or decompressing a file. If the file is not an ELF file
            an ELF handle of type ELF_K_NONE is returned.
- backends: Add support for C-SKY.
  
Update to version 0.176:

- build: Add new --enable-install-elfh option.
         Do NOT use this for system installs (it overrides glibc elf.h).
- backends: riscv improved core file and return value location support.
- Fixes:
  - CVE-2019-7146, CVE-2019-7148, CVE-2019-7149, CVE-2019-7664 - CVE-2019-7150: dwfl_segment_report_module doesn't check whether the dyn data read from core file is truncated (bsc#1123685)
  - CVE-2019-7665: NT_PLATFORM core file note should be a zero terminated string (CVE is a bit misleading, as this is not a bug in libelf as described) (bsc#1125007)
  
Update to version 0.175:
  
- readelf: Handle mutliple .debug_macro sections.
           Recognize and parse GNU Property, NT_VERSION and
           GNU Build Attribute ELF Notes.
- strip: Handle SHT_GROUP correctly.
         Add strip --reloc-debug-sections-only option.
         Handle relocations against GNU compressed sections.
- libdwelf: New function dwelf_elf_begin.
- libcpu: Recognize bpf jump variants BPF_JLT, BPF_JLE, BPF_JSLT
            and BPF_JSLE.
    backends: RISCV handles ADD/SUB relocations.
              Handle SHT_X86_64_UNWIND.
  - CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the function arlib_add_symbols() used by eu-ranlib (bsc#1112723)
  - CVE-2018-18310: Invalid Address Read problem in dwfl_segment_report_module.c (bsc#1111973)
  - CVE-2018-18520: eu-size: Bad handling of ar files inside are files (bsc#1112726)
  
Update to version 0.174:
  
- libelf, libdw and all tools now handle extended shnum and
  shstrndx correctly.
  
- elfcompress: Don't rewrite input file if no section data needs
               updating. Try harder to keep same file mode bits
               (suid) on rewrite.
- strip: Handle mixed (out of order) allocated/non-allocated sections.
- unstrip: Handle SHT_GROUP sections.
- backends: RISCV and M68K now have backend implementations to
            generate CFI based backtraces.
- Fixes:
  - CVE-2018-16402: libelf: denial of service/double free on an attempt to decompress the same section twice (bsc#1107066) Double-free crash in nm and readelf
  - CVE-2018-16403: heap buffer overflow in readelf (bsc#1107067)
  - CVE-2018-16062: heap-buffer-overflow in /elfutils/libdw/dwarf_getaranges.c:156 (bsc#1106390)
    
Update to version 0.173:
  
- More fixes for crashes and hangs found by afl-fuzz. In particular various
  functions now detect and break infinite loops caused by bad DIE tree cycles.
- readelf: Will now lookup the size and signedness of constant value types
           to display them correctly (and not just how they were encoded).
- libdw: New function dwarf_next_lines to read CU-less .debug_line data.
         dwarf_begin_elf now accepts ELF files containing just .debug_line
         or .debug_frame sections (which can be read without needing a DIE
         tree from the .debug_info section).
         Removed dwarf_getscn_info, which was never implemented.
- backends: Handle BPF simple relocations.
            The RISCV backends now handles ABI specific CFI and knows about
            RISCV register types and names.
  
Update to version 0.172:
  
- Various bug fixes in libdw and eu-readelf dealing with bad DWARF5 data.
  Thanks to running the afl fuzzer on eu-readelf and various testcases.
  
Update to version 0.171:
  
- DWARF5 and split dwarf, including GNU DebugFission, are supported now.
  Data can be read from the new DWARF sections .debug_addr, .debug_line_str,
  .debug_loclists, .debug_str_offsets and .debug_rnglists.  Plus the new
  DWARF5 and GNU DebugFission encodings of the existing .debug sections.
  Also in split DWARF .dwo (DWARF object) files.  This support is mostly
  handled by existing functions (dwarf_getlocation*, dwarf_getsrclines,
  dwarf_ranges, dwarf_form*, etc.) now returning the data from the new
  sections and data formats.  But some new functions have been added
  to more easily get information about skeleton and split compile units
  (dwarf_get_units and dwarf_cu_info), handle new attribute data
  (dwarf_getabbrevattr_data) and to keep references to Dwarf_Dies
  that might come from different sections or files (dwarf_die_addr_die).
- Not yet supported are .dwp (Dwarf Package) and .sup (Dwarf Supplementary)
  files, the .debug_names index, the .debug_cu_index and .debug_tu_index
  sections. Only a single .debug_info (and .debug_types) section are
  currently handled.
- readelf: Handle all new DWARF5 sections.
           --debug-dump=info+ will show split unit DIEs when found.
           --dwarf-skeleton can be used when inspecting a .dwo file.
     Recognizes GNU locviews with --debug-dump=loc.
- libdw: New functions dwarf_die_addr_die, dwarf_get_units,
         dwarf_getabbrevattr_data and dwarf_cu_info.
         libdw will now try to resolve the alt file on first use of
         an alt attribute FORM when not set yet with dwarf_set_alt.
         dwarf_aggregate_size() now works with multi-dimensional arrays.
- libdwfl: Use process_vm_readv when available instead of ptrace.
  backends: Add a RISC-V backend.
  
  There were various improvements to build on Windows.
  The sha1 and md5 implementations have been removed, they weren't used.

Update to version 0.170:

- libdw: Added new DWARF5 attribute, tag, character encoding, language code,
         calling convention, defaulted member function and macro constants
         to dwarf.h.
	 New functions dwarf_default_lower_bound and dwarf_line_file.
  	 dwarf_peel_type now handles DWARF5 immutable, packed and shared tags.
  	 dwarf_getmacros now handles DWARF5 .debug_macro sections.
- strip: Add -R, --remove-section=SECTION and --keep-section=SECTION.
- backends: The bpf disassembler is now always build on all platforms.

Update to version 0.169:

- backends: Add support for EM_PPC64 GNU_ATTRIBUTES.
            Frame pointer unwinding fallback support for i386, x86_64, aarch64.
- translations: Update Polish translation.
  - CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and application crash) via a crafted ELF file (bsc#1033088)
  - CVE-2017-7610: elflint: heap-based buffer overflow in check_group (bsc#1033087)
  - CVE-2017-7609: memory allocation failure in __libelf_decompress (bsc#1033086)
  - CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi (readelf.c) (bsc#1033084)
  - CVE-2017-7608: heap-based buffer overflow in ebl_object_note_type_name (eblobjnotetypename.c) (bsc#1033085)
  - CVE-2017-7613: elfutils: denial of service (memory consumption) via a crafted ELF file (bsc#1033090)
  - CVE-2017-7612: elfutils: denial of service (heap-based buffer over-read and application crash) via a crafted ELF file (bsc#1033089)
- Don't make elfutils recommend elfutils-lang as elfutils-lang
  already supplements elfutils.

dwarves is shipped new in version 1.22 to provide tooling for use by the Linux Kernel BTF verification framework.
</description>
    <pkglist>
      <collection>
        <package name="dwarves" epoch="0" version="1.22" release="150300.7.3.1" arch="src" src="src/dwarves-1.22-150300.7.3.1.src.rpm">
          <filename>dwarves-1.22-150300.7.3.1.src.rpm</filename>
        </package>
        <package name="dwarves" epoch="0" version="1.22" release="150300.7.3.1" arch="x86_64" src="x86_64/dwarves-1.22-150300.7.3.1.x86_64.rpm">
          <filename>dwarves-1.22-150300.7.3.1.x86_64.rpm</filename>
        </package>
        <package name="elfutils" epoch="0" version="0.177" release="150300.11.3.1" arch="src" src="src/elfutils-0.177-150300.11.3.1.src.rpm">
          <filename>elfutils-0.177-150300.11.3.1.src.rpm</filename>
        </package>
        <package name="elfutils" epoch="0" version="0.177" release="150300.11.3.1" arch="x86_64" src="x86_64/elfutils-0.177-150300.11.3.1.x86_64.rpm">
          <filename>elfutils-0.177-150300.11.3.1.x86_64.rpm</filename>
        </package>
        <package name="libasm1" epoch="0" version="0.177" release="150300.11.3.1" arch="x86_64" src="x86_64/libasm1-0.177-150300.11.3.1.x86_64.rpm">
          <filename>libasm1-0.177-150300.11.3.1.x86_64.rpm</filename>
        </package>
        <package name="libdw1" epoch="0" version="0.177" release="150300.11.3.1" arch="x86_64" src="x86_64/libdw1-0.177-150300.11.3.1.x86_64.rpm">
          <filename>libdw1-0.177-150300.11.3.1.x86_64.rpm</filename>
        </package>
        <package name="libdwarves-devel" epoch="0" version="1.22" release="150300.7.3.1" arch="x86_64" src="x86_64/libdwarves-devel-1.22-150300.7.3.1.x86_64.rpm">
          <filename>libdwarves-devel-1.22-150300.7.3.1.x86_64.rpm</filename>
        </package>
        <package name="libdwarves1" epoch="0" version="1.22" release="150300.7.3.1" arch="x86_64" src="x86_64/libdwarves1-1.22-150300.7.3.1.x86_64.rpm">
          <filename>libdwarves1-1.22-150300.7.3.1.x86_64.rpm</filename>
        </package>
        <package name="libebl-plugins" epoch="0" version="0.177" release="150300.11.3.1" arch="x86_64" src="x86_64/libebl-plugins-0.177-150300.11.3.1.x86_64.rpm">
          <filename>libebl-plugins-0.177-150300.11.3.1.x86_64.rpm</filename>
        </package>
        <package name="libelf1" epoch="0" version="0.177" release="150300.11.3.1" arch="x86_64" src="x86_64/libelf1-0.177-150300.11.3.1.x86_64.rpm">
          <filename>libelf1-0.177-150300.11.3.1.x86_64.rpm</filename>
        </package>
        <package name="dwarves" epoch="0" version="1.22" release="150300.7.3.1" arch="aarch64" src="aarch64/dwarves-1.22-150300.7.3.1.aarch64.rpm">
          <filename>dwarves-1.22-150300.7.3.1.aarch64.rpm</filename>
        </package>
        <package name="elfutils" epoch="0" version="0.177" release="150300.11.3.1" arch="aarch64" src="aarch64/elfutils-0.177-150300.11.3.1.aarch64.rpm">
          <filename>elfutils-0.177-150300.11.3.1.aarch64.rpm</filename>
        </package>
        <package name="libasm1" epoch="0" version="0.177" release="150300.11.3.1" arch="aarch64" src="aarch64/libasm1-0.177-150300.11.3.1.aarch64.rpm">
          <filename>libasm1-0.177-150300.11.3.1.aarch64.rpm</filename>
        </package>
        <package name="libdw1" epoch="0" version="0.177" release="150300.11.3.1" arch="aarch64" src="aarch64/libdw1-0.177-150300.11.3.1.aarch64.rpm">
          <filename>libdw1-0.177-150300.11.3.1.aarch64.rpm</filename>
        </package>
        <package name="libdwarves-devel" epoch="0" version="1.22" release="150300.7.3.1" arch="aarch64" src="aarch64/libdwarves-devel-1.22-150300.7.3.1.aarch64.rpm">
          <filename>libdwarves-devel-1.22-150300.7.3.1.aarch64.rpm</filename>
        </package>
        <package name="libdwarves1" epoch="0" version="1.22" release="150300.7.3.1" arch="aarch64" src="aarch64/libdwarves1-1.22-150300.7.3.1.aarch64.rpm">
          <filename>libdwarves1-1.22-150300.7.3.1.aarch64.rpm</filename>
        </package>
        <package name="libebl-plugins" epoch="0" version="0.177" release="150300.11.3.1" arch="aarch64" src="aarch64/libebl-plugins-0.177-150300.11.3.1.aarch64.rpm">
          <filename>libebl-plugins-0.177-150300.11.3.1.aarch64.rpm</filename>
        </package>
        <package name="libelf1" epoch="0" version="0.177" release="150300.11.3.1" arch="aarch64" src="aarch64/libelf1-0.177-150300.11.3.1.aarch64.rpm">
          <filename>libelf1-0.177-150300.11.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2405</id>
    <title>Security update for p11-kit</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1657878489"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29362" id="CVE-2020-29362" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29362" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1180065" id="1180065" title="VUL-0: CVE-2020-29362: p11-kit: out-of-bounds read in p11_rpc_buffer_get_byte_array function in rpc-message.c" type="bugzilla"/>
    </references>
    <description>This update for p11-kit fixes the following issues:

- CVE-2020-29362: Fixed a 4 byte overread in p11_rpc_buffer_get_byte_array which could lead to crashes (bsc#1180065)
</description>
    <pkglist>
      <collection>
        <package name="libp11-kit0" epoch="0" version="0.23.2" release="150000.4.16.1" arch="x86_64" src="x86_64/libp11-kit0-0.23.2-150000.4.16.1.x86_64.rpm">
          <filename>libp11-kit0-0.23.2-150000.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="p11-kit" epoch="0" version="0.23.2" release="150000.4.16.1" arch="src" src="src/p11-kit-0.23.2-150000.4.16.1.src.rpm">
          <filename>p11-kit-0.23.2-150000.4.16.1.src.rpm</filename>
        </package>
        <package name="p11-kit" epoch="0" version="0.23.2" release="150000.4.16.1" arch="x86_64" src="x86_64/p11-kit-0.23.2-150000.4.16.1.x86_64.rpm">
          <filename>p11-kit-0.23.2-150000.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="p11-kit-tools" epoch="0" version="0.23.2" release="150000.4.16.1" arch="x86_64" src="x86_64/p11-kit-tools-0.23.2-150000.4.16.1.x86_64.rpm">
          <filename>p11-kit-tools-0.23.2-150000.4.16.1.x86_64.rpm</filename>
        </package>
        <package name="libp11-kit0" epoch="0" version="0.23.2" release="150000.4.16.1" arch="aarch64" src="aarch64/libp11-kit0-0.23.2-150000.4.16.1.aarch64.rpm">
          <filename>libp11-kit0-0.23.2-150000.4.16.1.aarch64.rpm</filename>
        </package>
        <package name="p11-kit" epoch="0" version="0.23.2" release="150000.4.16.1" arch="aarch64" src="aarch64/p11-kit-0.23.2-150000.4.16.1.aarch64.rpm">
          <filename>p11-kit-0.23.2-150000.4.16.1.aarch64.rpm</filename>
        </package>
        <package name="p11-kit-tools" epoch="0" version="0.23.2" release="150000.4.16.1" arch="aarch64" src="aarch64/p11-kit-tools-0.23.2-150000.4.16.1.aarch64.rpm">
          <filename>p11-kit-tools-0.23.2-150000.4.16.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2717</id>
    <title>Security update for ncurses</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1660042484"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198627" id="1198627" title="VUL-0: CVE-2022-29458: ncurses: segfaulting OOB read" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29458" id="CVE-2022-29458" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29458" type="cve"/>
    </references>
    <description>This update for ncurses fixes the following issues:

- CVE-2022-29458: Fixed segfaulting out-of-bounds read in convert_strings in tinfo/read_entry.c (bsc#1198627).
</description>
    <pkglist>
      <collection>
        <package name="libncurses6" epoch="0" version="6.1" release="150000.5.12.1" arch="x86_64" src="x86_64/libncurses6-6.1-150000.5.12.1.x86_64.rpm">
          <filename>libncurses6-6.1-150000.5.12.1.x86_64.rpm</filename>
        </package>
        <package name="ncurses" epoch="0" version="6.1" release="150000.5.12.1" arch="src" src="src/ncurses-6.1-150000.5.12.1.src.rpm">
          <filename>ncurses-6.1-150000.5.12.1.src.rpm</filename>
        </package>
        <package name="ncurses-utils" epoch="0" version="6.1" release="150000.5.12.1" arch="x86_64" src="x86_64/ncurses-utils-6.1-150000.5.12.1.x86_64.rpm">
          <filename>ncurses-utils-6.1-150000.5.12.1.x86_64.rpm</filename>
        </package>
        <package name="terminfo" epoch="0" version="6.1" release="150000.5.12.1" arch="x86_64" src="x86_64/terminfo-6.1-150000.5.12.1.x86_64.rpm">
          <filename>terminfo-6.1-150000.5.12.1.x86_64.rpm</filename>
        </package>
        <package name="terminfo-base" epoch="0" version="6.1" release="150000.5.12.1" arch="x86_64" src="x86_64/terminfo-base-6.1-150000.5.12.1.x86_64.rpm">
          <filename>terminfo-base-6.1-150000.5.12.1.x86_64.rpm</filename>
        </package>
        <package name="libncurses6" epoch="0" version="6.1" release="150000.5.12.1" arch="aarch64" src="aarch64/libncurses6-6.1-150000.5.12.1.aarch64.rpm">
          <filename>libncurses6-6.1-150000.5.12.1.aarch64.rpm</filename>
        </package>
        <package name="ncurses-utils" epoch="0" version="6.1" release="150000.5.12.1" arch="aarch64" src="aarch64/ncurses-utils-6.1-150000.5.12.1.aarch64.rpm">
          <filename>ncurses-utils-6.1-150000.5.12.1.aarch64.rpm</filename>
        </package>
        <package name="terminfo" epoch="0" version="6.1" release="150000.5.12.1" arch="aarch64" src="aarch64/terminfo-6.1-150000.5.12.1.aarch64.rpm">
          <filename>terminfo-6.1-150000.5.12.1.aarch64.rpm</filename>
        </package>
        <package name="terminfo-base" epoch="0" version="6.1" release="150000.5.12.1" arch="aarch64" src="aarch64/terminfo-base-6.1-150000.5.12.1.aarch64.rpm">
          <filename>terminfo-base-6.1-150000.5.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3215</id>
    <title>Recommended update for rpm</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1662645562"/>
    <references>
      <reference href="https://jira.suse.com/browse/SLE-24714" id="SLE-24714" title="https://jira.suse.com/browse/SLE-24714" type="jira"/>
    </references>
    <description>This update for rpm fixes the following issues:

- Support Ed25519 RPM signatures [jsc#SLE-24714]
</description>
    <pkglist>
      <collection>
        <package name="python-rpm" epoch="0" version="4.14.3" release="150300.49.1" arch="src" src="src/python-rpm-4.14.3-150300.49.1.src.rpm">
          <filename>python-rpm-4.14.3-150300.49.1.src.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150300.49.1" arch="x86_64" src="x86_64/python3-rpm-4.14.3-150300.49.1.x86_64.rpm">
          <filename>python3-rpm-4.14.3-150300.49.1.x86_64.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150300.49.1" arch="src" src="src/rpm-4.14.3-150300.49.1.src.rpm">
          <filename>rpm-4.14.3-150300.49.1.src.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150300.49.1" arch="x86_64" src="x86_64/rpm-4.14.3-150300.49.1.x86_64.rpm">
          <filename>rpm-4.14.3-150300.49.1.x86_64.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150300.49.1" arch="src" src="src/rpm-ndb-4.14.3-150300.49.1.src.rpm">
          <filename>rpm-ndb-4.14.3-150300.49.1.src.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150300.49.1" arch="x86_64" src="x86_64/rpm-ndb-4.14.3-150300.49.1.x86_64.rpm">
          <filename>rpm-ndb-4.14.3-150300.49.1.x86_64.rpm</filename>
        </package>
        <package name="python3-rpm" epoch="0" version="4.14.3" release="150300.49.1" arch="aarch64" src="aarch64/python3-rpm-4.14.3-150300.49.1.aarch64.rpm">
          <filename>python3-rpm-4.14.3-150300.49.1.aarch64.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.14.3" release="150300.49.1" arch="aarch64" src="aarch64/rpm-4.14.3-150300.49.1.aarch64.rpm">
          <filename>rpm-4.14.3-150300.49.1.aarch64.rpm</filename>
        </package>
        <package name="rpm-ndb" epoch="0" version="4.14.3" release="150300.49.1" arch="aarch64" src="aarch64/rpm-ndb-4.14.3-150300.49.1.aarch64.rpm">
          <filename>rpm-ndb-4.14.3-150300.49.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2678</id>
    <title>Recommended update for hwinfo</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1659664893"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198043" id="1198043" title="Install FAIL on Altra &amp; AltraMax Mt. Jade" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199948" id="1199948" title="[HWCert] SLES15 SP3 hwinfo lists seahawk3 and kingfisher as not attached to any nvme pci controller" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1184339" id="1184339" title="select() no longer modifies timeout value" type="bugzilla"/>
    </references>
    <description>This update for hwinfo fixes the following issues:

- Keep NVMe's namespace output consistency when the option `nvme_core.multipath=1` (bsc#1199948)
- Fix bug in determining serial console device name (bsc#1198043)
- Don't rely on select() updating its timeout argument (bsc#1184339)
- Fix logic around CD-ROM detection
- Prevent closing of the open CD-ROM tray after read
- Always read numerical 32bit serial number from EDID header. Override this with ASCII serial number from display 
  descriptor, if available.
- Display numerical 32bit serial number for monitors without serial number display descriptor
- Fix timezone issue in SOURCE_DATE_EPOCH code
- Recognize loongarch64 architecture
- Update PCI and USB ids
</description>
    <pkglist>
      <collection>
        <package name="hwinfo" epoch="0" version="21.82" release="150300.3.3.1" arch="src" src="src/hwinfo-21.82-150300.3.3.1.src.rpm">
          <filename>hwinfo-21.82-150300.3.3.1.src.rpm</filename>
        </package>
        <package name="hwinfo" epoch="0" version="21.82" release="150300.3.3.1" arch="x86_64" src="x86_64/hwinfo-21.82-150300.3.3.1.x86_64.rpm">
          <filename>hwinfo-21.82-150300.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="hwinfo" epoch="0" version="21.82" release="150300.3.3.1" arch="aarch64" src="aarch64/hwinfo-21.82-150300.3.3.1.aarch64.rpm">
          <filename>hwinfo-21.82-150300.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2649</id>
    <title>Security update for pcre2</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1659532011"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20454" id="CVE-2019-20454" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20454" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1587" id="CVE-2022-1587" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1587" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199235" id="1199235" title="VUL-0: CVE-2022-1587: pcre2,pcre8,pcre: pcre2: Out-of-bounds read due to bug in recursions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1164384" id="1164384" title="VUL-0: CVE-2019-20454: pcre2: out-of-bounds read in JIT mode when \X is used in non-UTF mode" type="bugzilla"/>
    </references>
    <description>This update for pcre2 fixes the following issues:

- CVE-2019-20454: Fixed out-of-bounds read in JIT mode when \X is used in non-UTF mode (bsc#1164384).
- CVE-2022-1587: Fixed out-of-bounds read due to bug in recursions (bsc#1199235).
</description>
    <pkglist>
      <collection>
        <package name="libpcre2-8-0" epoch="0" version="10.31" release="150000.3.12.1" arch="x86_64" src="x86_64/libpcre2-8-0-10.31-150000.3.12.1.x86_64.rpm">
          <filename>libpcre2-8-0-10.31-150000.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="pcre2" epoch="0" version="10.31" release="150000.3.12.1" arch="src" src="src/pcre2-10.31-150000.3.12.1.src.rpm">
          <filename>pcre2-10.31-150000.3.12.1.src.rpm</filename>
        </package>
        <package name="libpcre2-8-0" epoch="0" version="10.31" release="150000.3.12.1" arch="aarch64" src="aarch64/libpcre2-8-0-10.31-150000.3.12.1.aarch64.rpm">
          <filename>libpcre2-8-0-10.31-150000.3.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2494</id>
    <title>Recommended update for glibc</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1658409462"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200855" id="1200855" title="Glibc static TLS issue on aarch64" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201560" id="1201560" title="Since 15.4 getting 100's of cron *** stack smashing detected ***: terminated" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201640" id="1201640" title="i586 binaries and libraries failing to load with &quot;Illegal Instruction&quot;" type="bugzilla"/>
    </references>
    <description>This update for glibc fixes the following issues:

- Remove tunables from static tls surplus patch which caused crashes (bsc#1200855)
- i386: Disable check_consistency for GCC 5 and above (bsc#1201640, BZ #25788)
</description>
    <pkglist>
      <collection>
        <package name="glibc" epoch="0" version="2.31" release="150300.37.1" arch="src" src="src/glibc-2.31-150300.37.1.src.rpm">
          <filename>glibc-2.31-150300.37.1.src.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.37.1" arch="x86_64" src="x86_64/glibc-2.31-150300.37.1.x86_64.rpm">
          <filename>glibc-2.31-150300.37.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.37.1" arch="x86_64" src="x86_64/glibc-locale-2.31-150300.37.1.x86_64.rpm">
          <filename>glibc-locale-2.31-150300.37.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.37.1" arch="x86_64" src="x86_64/glibc-locale-base-2.31-150300.37.1.x86_64.rpm">
          <filename>glibc-locale-base-2.31-150300.37.1.x86_64.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.31" release="150300.37.1" arch="aarch64" src="aarch64/glibc-2.31-150300.37.1.aarch64.rpm">
          <filename>glibc-2.31-150300.37.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.31" release="150300.37.1" arch="aarch64" src="aarch64/glibc-locale-2.31-150300.37.1.aarch64.rpm">
          <filename>glibc-locale-2.31-150300.37.1.aarch64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.31" release="150300.37.1" arch="aarch64" src="aarch64/glibc-locale-base-2.31-150300.37.1.aarch64.rpm">
          <filename>glibc-locale-base-2.31-150300.37.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2599</id>
    <title>Security update for xen</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1659104010"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201469" id="1201469" title="VUL-0: CVE-2022-23816,CVE-2022-23825,CVE-2022-29900: xen: retbleed - arbitrary speculative code execution with return instructions (XSA-407)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199965" id="1199965" title="VUL-0: CVE-2022-26362: xen: Race condition in typeref acquisition (XSA-401)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199966" id="1199966" title="VUL-0: CVE-2022-26363,CVE-2022-26364: xen: Insufficient care with non-coherent mappings (XSA-402)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1027519" id="1027519" title="Xen: Missing upstream bug fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200549" id="1200549" title="VUL-0: CVE-2022-21123,CVE-2022-21125,CVE-2022-21166: xen: x86: MMIO Stale Data vulnerabilities (XSA-404)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201394" id="1201394" title="VUL-0: EMBARGOED: CVE-2022-33745: xen: insufficient TLB flush for x86 PV guests in shadow mode (XSA-408)" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23825" id="CVE-2022-23825" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23825" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21123" id="CVE-2022-21123" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21123" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33745" id="CVE-2022-33745" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33745" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21125" id="CVE-2022-21125" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21125" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26363" id="CVE-2022-26363" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26363" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29900" id="CVE-2022-29900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29900" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26362" id="CVE-2022-26362" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26362" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23816" id="CVE-2022-23816" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23816" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21166" id="CVE-2022-21166" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21166" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26364" id="CVE-2022-26364" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26364" type="cve"/>
    </references>
    <description>This update for xen fixes the following issues:

- CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966).
- CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-404) (bsc#1200549).
- CVE-2022-26362: Fixed a race condition in typeref acquisition (XSA-401) (bsc#1199965).
- CVE-2022-33745: Fixed insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) (bsc#1201394).
- CVE-2022-23816, CVE-2022-23825, CVE-2022-29900: Fixed RETBLEED vulnerability, arbitrary speculative code execution with return instructions (XSA-407) (bsc#1201469).

Fixed several upstream bugs (bsc#1027519). 
</description>
    <pkglist>
      <collection>
        <package name="xen" epoch="0" version="4.14.5_04" release="150300.3.32.1" arch="src" src="src/xen-4.14.5_04-150300.3.32.1.src.rpm">
          <filename>xen-4.14.5_04-150300.3.32.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="xen-libs" epoch="0" version="4.14.5_04" release="150300.3.32.1" arch="x86_64" src="x86_64/xen-libs-4.14.5_04-150300.3.32.1.x86_64.rpm">
          <filename>xen-libs-4.14.5_04-150300.3.32.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2549</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1658836758"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1179195" id="1179195" title="I/O stops on connected disk after another disk removal from the system." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1180814" id="1180814" title="[15sp3 FEAT] PowerVM: Multiqueue support for ibmvfc scsi driver (NPIV)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1184924" id="1184924" title="[Build 134.3] openQA test fails in kdump_and_crash - forced crash didn't result into expected reboot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1185762" id="1185762" title="SLES 15 SP3 RC2 - native Emulex/NVMe; SLES crash / reboot during I/O" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192761" id="1192761" title="[NetApp SLES15 SP3]: Pull in TP 8013 &amp; 8014 upstream commits for NVMe-oF discovery enhancements" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194013" id="1194013" title="VUL-0: CVE-2021-4157: kernel-source-azure,kernel-source-rt,kernel-source: Buffer overwrite in decode_nfs_fh function" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195504" id="1195504" title="UDP packet drop and latency issues [ref:_00D1igLOd._5001iq9ztq:ref]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195775" id="1195775" title="apparmor fails to build with 5.16.7" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196901" id="1196901" title="VUL-0: CVE-2022-23960,CVE-2022-0001,CVE-2022-0002,CVE-2021-26341,CVE-2021-26401: xen: Multiple speculative security issues (XSA-398)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197362" id="1197362" title="L3: RIP: 0010:update_writeback_rate+0x1d0/0x310 [bcache]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197754" id="1197754" title="[PATCH] ext4: add check to prevent attempting to resize an fs with  sparse_super2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198020" id="1198020" title="[PATCH] block: don't merge across cgroup boundaries if blkcg is  enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198924" id="1198924" title="i915 driver failed to load firmware for Rocket Lake" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199482" id="1199482" title="VUL-0: CVE-2022-1012: kernel-source,kernel-source-rt,kernel-source-azure: A vulnerability due to small table perturb size in the TCP source port generation algorithm leads to information leak" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199487" id="1199487" title="VUL-0: CVE-2022-1679: kernel-source,kernel-source-rt,kernel-source-azure: kernel: Use-After-Free in ath9k_htc_probe_device() could cause an escalation of privileges" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199489" id="1199489" title="vmxnet3: update to latest ToT" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199657" id="1199657" title="VUL-0: EMBARGOED: CVE-2022-29900 CVE-2022-29901: kernel: RETBLEED speculative issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200217" id="1200217" title="[TRACKERBUG] SLE15-SP3 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200263" id="1200263" title="Partner-L3: I/O request allocation is stuck for more than 120 seconds" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200343" id="1200343" title="FVTR1020:Rainier:Non-HMC:MPIPL Dump is not getting offloaded to Linux partition (SUSE)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200442" id="1200442" title="kernel-install-tools should be recommended by all kernel-source flavors" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200571" id="1200571" title="execve() incorrectly handles empty argv array" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200599" id="1200599" title="VUL-0: CVE-2022-20154: kernel-source,kernel-source-rt,kernel-source-azure: race condition leading to use-after-free in lock_sock_nested" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200600" id="1200600" title="[Build 20220614] openQA test fails in inotify12" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200604" id="1200604" title="VUL-0: CVE-2022-20141: kernel-source-azure,kernel-source,kernel-source-rt: use after free in ip_check_mc_rcu()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200605" id="1200605" title="VUL-0: CVE-2022-20141: kernel live patch: use after free in ip_check_mc_rcu()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200608" id="1200608" title="VUL-0: CVE-2022-20154: kernel live patch: race condition leading to use-after-free in lock_sock_nested" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200619" id="1200619" title="VUL-0: CVE-2022-20132: kernel-source-rt,kernel-source-azure,kernel-source: several potential out of bounds reads via malicious HID device" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200622" id="1200622" title="L3: kernel PTF request with a patch fix from #1179195." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200806" id="1200806" title="[PATCH] ext4: limit length to bitmap_maxbytes - blocksize in  punch_hole" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200807" id="1200807" title="[PATCH] ext4: fix race condition between ext4_write and  ext4_convert_inline_data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200809" id="1200809" title="[PATCH] ext4: fix bug_on in __es_tree_search" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200810" id="1200810" title="[PATCH] ext4: fix bug_on ext4_mb_use_inode_pa" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200813" id="1200813" title="[PATCH] writeback: Avoid skipping inode writeback" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200816" id="1200816" title="[PATCH] blk-mq: do not update io_ticks with passthrough requests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200820" id="1200820" title="[PATCH] ext4: make variable &quot;count&quot; signed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200821" id="1200821" title="[PATCH] writeback: Fix inode-&gt;i_io_list not be protected by  inode-&gt;i_lock error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200822" id="1200822" title="[PATCH] init: Initialize noop_backing_dev_info early" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200825" id="1200825" title="[PATCH] blk-iolatency: Fix inflight count imbalances and IO hangs on  offline" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200828" id="1200828" title="[PATCH] jfs: fix divide error in dbNextAG" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200829" id="1200829" title="[PATCH] iomap: iomap_write_failed fix" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201050" id="1201050" title="VUL-0: CVE-2021-26341: kernel: straight line speculation on x86" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201080" id="1201080" title="VUL-0: CVE-2022-1679: kernel live patch: kernel: Use-After-Free in ath9k_htc_probe_device() could cause an escalation of privileges" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201143" id="1201143" title="fuse: annotate lock in fuse_reverse_inval_entry()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201147" id="1201147" title="ceph: add some lockdep assertions around snaprealm handling" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201149" id="1201149" title="ceph: clean up locking annotation for ceph_get_snap_realm and  __lookup_snap_realm" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201160" id="1201160" title="qla2xxx: update driver to 10.02.07.700-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201171" id="1201171" title="VUL-0: CVE-2022-34918: kernel: heap overflow in nft_set_elem_init()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201177" id="1201177" title="VUL-0: kernel: bufferoverflow in netfilter nft_set_elem_init" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201193" id="1201193" title="Update Broadcom Emulex lpfc driver to 14.2.0.4" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201222" id="1201222" title="VUL-0: CVE-2022-34918: kernel live patch: heap overflow in nft_set_elem_init()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29900" id="CVE-2022-29900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29900" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29901" id="CVE-2022-29901" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29901" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34918" id="CVE-2022-34918" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34918" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26341" id="CVE-2021-26341" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26341" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20154" id="CVE-2022-20154" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20154" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1679" id="CVE-2022-1679" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1679" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4157" id="CVE-2021-4157" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4157" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20132" id="CVE-2022-20132" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20132" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20141" id="CVE-2022-20141" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20141" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1012" id="CVE-2022-1012" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1012" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200692" id="1200692" title="VUL-0: CVE-2022-33981: kernel-source-rt,kernel-source-azure,kernel-source: use-after-free in floppy driver" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33981" id="CVE-2022-33981" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33981" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200925" id="1200925" title="L3: sles15sp3 hanging tcp sessions after ibmvnic failover on Denali" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201644" id="1201644" title="Kernel crashes on Dell PowerEdge R340 and R440 after latest kernel upgrade" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201664" id="1201664" title="kernel 5.3.18-150300.59.81-default is continuously crashing on Supermicro X11DPU-Z+ (Intel Skylake SP)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201672" id="1201672" title="bad RIP value - kernel NULL pointer dereference address 0000000000000000" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201673" id="1201673" title="L3: buggy kernel 5.3.18-150300.59.81 on SLES15-SP3 keeps crashing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201676" id="1201676" title="crashes on new 15-sp3 kernel (retbleed fallout?)" type="bugzilla"/>
    </references>
    <description>The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak arbitrary kernel information (bsc#1199657).
- CVE-2022-34918: Fixed a buffer overflow with nft_set_elem_init() that could be used by a local attacker to escalate privileges (bnc#1201171).
- CVE-2021-26341: Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage (bsc#1201050).
- CVE-2022-1679: Fixed a use-after-free in the Atheros wireless driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages (bsc#1199487).
- CVE-2022-20132: Fixed out of bounds read due to improper input validation in lg_probe and related functions of hid-lg.c (bsc#1200619).
- CVE-2022-1012: Fixed information leak caused by small table perturb size in the TCP source port generation algorithm (bsc#1199482).
- CVE-2022-33981: Fixed use-after-free in floppy driver (bsc#1200692)
- CVE-2022-20141: Fixed a possible use after free due to improper locking in ip_check_mc_rcu() (bsc#1200604).
- CVE-2021-4157: Fixed an out of memory bounds write flaw in the NFS subsystem, related to the replication of files with NFS. A user could potentially crash the system or escalate privileges on the system (bsc#1194013).
- CVE-2022-20154: Fixed a use after free due to a race condition in lock_sock_nested of sock.c. This could lead to local escalation of privilege with System execution privileges needed (bsc#1200599).

The following non-security bugs were fixed:

- ALSA: hda/conexant: Fix missing beep setup (git-fixes).
- ALSA: hda/realtek - Add HW8326 support (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo PD70PNT (git-fixes).
- ALSA: hda/realtek - ALC897 headset MIC no sound (git-fixes).
- ALSA: hda/via: Fix missing beep setup (git-fixes).
- arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399 (git-fixes)
- arm64: ftrace: fix branch range checks (git-fixes)
- ASoC: cs35l36: Update digital volume TLV (git-fixes).
- ASoC: cs42l52: Correct TLV for Bypass Volume (git-fixes).
- ASoC: cs42l52: Fix TLV scales for mixer controls (git-fixes).
- ASoC: cs42l56: Correct typo in minimum level for SX volume controls (git-fixes).
- ASoC: cs53l30: Correct number of volume levels on SX controls (git-fixes).
- ASoC: es8328: Fix event generation for deemphasis control (git-fixes).
- ASoC: nau8822: Add operation for internal PLL off and on (git-fixes).
- ASoC: wm8962: Fix suspend while playing music (git-fixes).
- ASoC: wm_adsp: Fix event generation for wm_adsp_fw_put() (git-fixes).
- ata: libata: add qc-&gt;flags in ata_qc_complete_template tracepoint (git-fixes).
- ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() (git-fixes).
- bcache: avoid journal no-space deadlock by reserving 1 journal bucket (git-fixes).
- bcache: avoid unnecessary soft lockup in kworker update_writeback_rate() (bsc#1197362).
- bcache: fixup multiple threads crash (git-fixes).
- bcache: improve multithreaded bch_btree_check() (git-fixes).
- bcache: improve multithreaded bch_sectors_dirty_init() (git-fixes).
- bcache: memset on stack variables in bch_btree_check() and bch_sectors_dirty_init() (git-fixes).
- bcache: remove incremental dirty sector counting for bch_sectors_dirty_init() (git-fixes).
- bio: fix page leak bio_add_hw_page failure (git-fixes).
- blk-cgroup: fix a hd_struct leak in blkcg_fill_root_iostats (git-fixes).
- blk-iolatency: Fix inflight count imbalances and IO hangs on offline (bsc#1200825).
- blk-mq: clear active_queues before clearing BLK_MQ_F_TAG_QUEUE_SHARED (bsc#1200263).
- blk-mq: do not update io_ticks with passthrough requests (bsc#1200816).
- blk-mq: drop workarounds for cpu hotplug queue management (bsc#1185762) 
- blk-mq: update hctx-&gt;dispatch_busy in case of real scheduler (git-fixes).
- block: advance iov_iter on bio_add_hw_page failure (git-fixes).
- block: do not merge across cgroup boundaries if blkcg is enabled (bsc#1198020).
- block: Fix handling of offline queues in blk_mq_alloc_request_hctx() (bsc#1185762).
- block: Fix kABI in blk-merge.c (bsc#1198020).
- block/keyslot-manager: prevent crash when num_slots=1 (git-fixes).
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove() (git-fixes).
- caif_virtio: fix race between virtio_device_ready() and ndo_open() (git-fixes).
- ceph: add some lockdep assertions around snaprealm handling (bsc#1201147).
- ceph: clean up locking annotation for ceph_get_snap_realm and __lookup_snap_realm (bsc#1201149).
- certs/blacklist_hashes.c: fix const confusion in certs blacklist (git-fixes).
- cifs: add WARN_ON for when chan_count goes below minimum (bsc#1200217).
- cifs: adjust DebugData to use chans_need_reconnect for conn status (bsc#1200217).
- cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (bsc#1200217).
- cifs: avoid parallel session setups on same channel (bsc#1200217).
- cifs: avoid race during socket reconnect between send and recv (bsc#1200217).
- cifs: call cifs_reconnect when a connection is marked (bsc#1200217).
- cifs: call helper functions for marking channels for reconnect (bsc#1200217).
- cifs: change smb2_query_info_compound to use a cached fid, if available (bsc#1200217).
- cifs: check for smb1 in open_cached_dir() (bsc#1200217).
- cifs: check reconnects for channels of active tcons too (bsc#1200217).
- cifs: Check the IOCB_DIRECT flag, not O_DIRECT (bsc#1200217).
- cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (bsc#1200217).
- cifs: clean up an inconsistent indenting (bsc#1200217).
- cifs: destage any unwritten data to the server before calling copychunk_write (bsc#1200217).
- cifs: do not build smb1ops if legacy support is disabled (bsc#1200217).
- cifs: do not call cifs_dfs_query_info_nonascii_quirk() if nodfs was set (bsc#1200217).
- cifs: do not use tcpStatus after negotiate completes (bsc#1200217).
- cifs: do not use uninitialized data in the owner/group sid (bsc#1200217).
- cifs: fix confusing unneeded warning message on smb2.1 and earlier (bsc#1200217).
- cifs: fix double free race when mount fails in cifs_get_root() (bsc#1200217).
- cifs: fix FILE_BOTH_DIRECTORY_INFO definition (bsc#1200217).
- cifs: fix handlecache and multiuser (bsc#1200217).
- cifs: fix hang on cifs_get_next_mid() (bsc#1200217).
- cifs: fix incorrect use of list iterator after the loop (bsc#1200217).
- cifs: fix minor compile warning (bsc#1200217).
- cifs: fix missed refcounting of ipc tcon (bsc#1200217).
- cifs: fix ntlmssp auth when there is no key exchange (bsc#1200217).
- cifs: fix NULL ptr dereference in refresh_mounts() (bsc#1200217).
- cifs: fix potential deadlock in direct reclaim (bsc#1200217).
- cifs: fix potential double free during failed mount (bsc#1200217).
- cifs: fix potential race with cifsd thread (bsc#1200217).
- cifs: fix set of group SID via NTSD xattrs (bsc#1200217).
- cifs: fix signed integer overflow when fl_end is OFFSET_MAX (bsc#1200217).
- cifs: Fix smb311_update_preauth_hash() kernel-doc comment (bsc#1200217).
- cifs: fix the cifs_reconnect path for DFS (bsc#1200217).
- cifs: fix the connection state transitions with multichannel (bsc#1200217).
- cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (bsc#1200217).
- cifs: fix workstation_name for multiuser mounts (bsc#1200217).
- cifs: force new session setup and tcon for dfs (bsc#1200217).
- cifs: free ntlmsspblob allocated in negotiate (bsc#1200217).
- cifs: ignore resource_id while getting fscache super cookie (bsc#1200217).
- cifs: maintain a state machine for tcp/smb/tcon sessions (bsc#1200217).
- cifs: make status checks in version independent callers (bsc#1200217).
- cifs: mark sessions for reconnection in helper function (bsc#1200217).
- cifs: modefromsids must add an ACE for authenticated users (bsc#1200217).
- cifs: move definition of cifs_fattr earlier in cifsglob.h (bsc#1200217).
- cifs: move superblock magic defitions to magic.h (bsc#1200217).
- cifs: potential buffer overflow in handling symlinks (bsc#1200217).
- cifs: print TIDs as hex (bsc#1200217).
- cifs: protect all accesses to chan_* with chan_lock (bsc#1200217).
- cifs: quirk for STATUS_OBJECT_NAME_INVALID returned for non-ASCII dfs refs (bsc#1200217).
- cifs: reconnect only the connection and not smb session where possible (bsc#1200217).
- cifs: release cached dentries only if mount is complete (bsc#1200217).
- cifs: remove check of list iterator against head past the loop body (bsc#1200217).
- cifs: remove redundant assignment to pointer p (bsc#1200217).
- cifs: remove repeated debug message on cifs_put_smb_ses() (bsc#1200217).
- cifs: remove repeated state change in dfs tree connect (bsc#1200217).
- cifs: remove unused variable ses_selected (bsc#1200217).
- cifs: return ENOENT for DFS lookup_cache_entry() (bsc#1200217).
- cifs: return the more nuanced writeback error on close() (bsc#1200217).
- cifs: sanitize multiple delimiters in prepath (bsc#1200217).
- cifs: serialize all mount attempts (bsc#1200217).
- cifs: set the CREATE_NOT_FILE when opening the directory in use_cached_dir() (bsc#1200217).
- cifs: skip trailing separators of prefix paths (bsc#1200217).
- cifs: smbd: fix typo in comment (bsc#1200217).
- cifs: Split the smb3_add_credits tracepoint (bsc#1200217).
- cifs: take cifs_tcp_ses_lock for status checks (bsc#1200217).
- cifs: track individual channel status using chans_need_reconnect (bsc#1200217).
- cifs: unlock chan_lock before calling cifs_put_tcp_session (bsc#1200217).
- cifs: update internal module number (bsc#1193629).
- cifs: update internal module number (bsc#1200217).
- cifs: update tcpStatus during negotiate and sess setup (bsc#1200217).
- cifs: use a different reconnect helper for non-cifsd threads (bsc#1200217).
- cifs: use correct lock type in cifs_reconnect() (bsc#1200217).
- cifs: Use kzalloc instead of kmalloc/memset (bsc#1200217).
- cifs: use new enum for ses_status (bsc#1200217).
- cifs: use the chans_need_reconnect bitmap for reconnect status (bsc#1200217).
- cifs: verify that tcon is valid before dereference in cifs_kill_sb (bsc#1200217).
- cifs: version operations for smb20 unneeded when legacy support disabled (bsc#1200217).
- cifs: wait for tcon resource_id before getting fscache super (bsc#1200217).
- cifs: we do not need a spinlock around the tree access during umount (bsc#1200217).
- cifs: when extending a file with falloc we should make files not-sparse (bsc#1200217).
- drivers: cpufreq: Add missing of_node_put() in qoriq-cpufreq.c (git-fixes).
- drm/i915/reset: Fix error_state_read ptr + offset use (git-fixes).
- drm/i915: Update TGL and RKL DMC firmware versions (bsc#1198924).
- drm/msm: Fix double pm_runtime_disable() call (git-fixes).
- drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf (git-fixes).
- drm/sun4i: Fix crash during suspend after component bind failure (git-fixes).
- exec: Force single empty string when argv is empty (bsc#1200571).
- ext4: add check to prevent attempting to resize an fs with sparse_super2 (bsc#1197754).
- ext4: fix bug_on ext4_mb_use_inode_pa (bsc#1200810).
- ext4: fix bug_on in __es_tree_search (bsc#1200809).
- ext4: fix race condition between ext4_write and ext4_convert_inline_data (bsc#1200807).
- ext4: limit length to bitmap_maxbytes - blocksize in punch_hole (bsc#1200806).
- ext4: make variable &quot;count&quot; signed (bsc#1200820).
- Fix a warning about a malformed kernel doc comment in cifs (bsc#1200217).
- fuse: annotate lock in fuse_reverse_inval_entry() (bsc#1201143).
- gpio: winbond: Fix error code in winbond_gpio_get() (git-fixes).
- gtp: use icmp_ndo_send helper (git-fixes).
- hwmon: (ibmaem) do not call platform_device_del() if platform_device_add() fails (git-fixes).
- i2c: designware: Use standard optional ref clock implementation (git-fixes).
- ibmvnic: Properly dispose of all skbs during a failover (bsc#1200925).
- iio:accel:bma180: rearrange iio trigger get and register (git-fixes).
- iio: accel: mma8452: ignore the return value of reset operation (git-fixes).
- iio: adc: axp288: Override TS pin bias current for some models (git-fixes).
- iio: adc: vf610: fix conversion mode sysfs node name (git-fixes).
- iio:chemical:ccs811: rearrange iio trigger get and register (git-fixes).
- iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up() (git-fixes).
- iio: trigger: sysfs: fix use-after-free on remove (git-fixes).
- init: Initialize noop_backing_dev_info early (bsc#1200822).
- inotify: show inotify mask flags in proc fdinfo (bsc#1200600).
- iomap: iomap_write_failed fix (bsc#1200829).
- ipvs: add sysctl_run_estimation to support disable estimation (bsc#1195504).
- jfs: fix divide error in dbNextAG (bsc#1200828).
- kABI fix of sysctl_run_estimation (git-fixes).
- kabi: nvme workaround header include (bsc#1201193).
- kabi/severities: ignore KABI for NVMe target (bsc#1192761)
- linux/dim: Fix divide by 0 in RDMA DIM (git-fixes).
- md: fix update super 1.0 on rdev size change (git-fixes).
- move devm_allocate to end of structure for kABI (git-fixes).
- mtd: rawnand: gpmi: Fix setting busy timeout setting (git-fixes).
- net: ax25: Fix deadlock caused by skb_recv_datagram in ax25_recvmsg (git-fixes).
- net: ethernet: stmmac: Disable hardware multicast filter (git-fixes).
- net: ieee802154: ca8210: Stop leaking skb's (git-fixes).
- net: lantiq: Add locking for TX DMA channel (git-fixes).
- net: rose: fix UAF bugs caused by timer handler (git-fixes).
- net: stmmac: reset Tx desc base address before restarting Tx (git-fixes).
- net: usb: ax88179_178a: Fix packet receiving (git-fixes).
- nfc: nfcmrvl: Fix irq_of_parse_and_map() return value (git-fixes).
- nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred (git-fixes).
- NFC: nxp-nci: Do not issue a zero length i2c_master_read() (git-fixes).
- NFS: Do not report EINTR/ERESTARTSYS as mapping errors (git-fixes).
- NFS: Do not report errors from nfs_pageio_complete() more than once (git-fixes).
- NFS: Do not report flush errors in nfs_write_end() (git-fixes).
- NFS: Further fixes to the writeback error handling (git-fixes).
- NFS: Memory allocation failures are not server fatal errors (git-fixes).
- NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout (git-fixes).
- nvdimm: Fix firmware activation deadlock scenarios (git-fixes).
- nvdimm/region: Fix default alignment for small regions (git-fixes).
- nvme: add CNTRLTYPE definitions for 'identify controller' (bsc#1192761).
- nvme: Add connect option 'discovery' (bsc#1192761).
- nvme: add new discovery log page entry definitions (bsc#1192761).
- nvme: display correct subsystem NQN (bsc#1192761).
- nvme: expose subsystem type in sysfs attribute 'subsystype' (bsc#1192761).
- nvme: kabi fix nvme subsystype change (bsc#1192761)
- nvmet: add nvmet_is_disc_subsys() helper (bsc#1192761).
- nvmet: add nvmet_req_subsys() helper (bsc#1192761).
- nvme-tcp: fix H2CData PDU send accounting (again) (git-fixes).
- nvmet: do not check iosqes,iocqes for discovery controllers (bsc#1192761).
- nvmet: fix freeing unallocated p2pmem (git-fixes).
- nvmet: make discovery NQN configurable (bsc#1192761).
- nvmet-rdma: Fix NULL deref when SEND is completed with error (git-fixes).
- nvmet-rdma: Fix NULL deref when setting pi_enable and traddr INADDR_ANY (git-fixes).
- nvmet: register discovery subsystem as 'current' (bsc#1192761).
- nvmet: set 'CNTRLTYPE' in the identify controller data (bsc#1192761).
- nvmet: switch check for subsystem type (bsc#1192761).
- phy: aquantia: Fix AN when higher speeds than 1G are not advertised (git-fixes).
- pNFS: Do not keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE (git-fixes).
- powerpc/idle: Fix return value of __setup() handler (bsc#1065729).
- powerpc/perf: Fix the threshold compare group constraint for power9 (bsc#1065729).
- powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address (bsc#1200343 ltc#198477).
- random: Add and use pr_fmt() (bsc#1184924).
- random: remove unnecessary unlikely() (bsc#1184924).
- regmap-irq: Fix a bug in regmap_irq_enable() for type_in_mask chips (git-fixes).
- Revert &quot;block: Fix a lockdep complaint triggered by request queue flushing&quot; (git-fixes).
- scsi: core: Show SCMD_LAST in text form (git-fixes).
- scsi: ibmvfc: Allocate/free queue resource only during probe/remove (jsc#SLE-15442 bsc#1180814 ltc#187461 git-fixes).
- scsi: ibmvfc: Store vhost pointer during subcrq allocation (jsc#SLE-15442 bsc#1180814 ltc#187461 git-fixes).
- scsi: lpfc: Add more logging of cmd and cqe information for aborted NVMe cmds (bsc#1201193).
- scsi: lpfc: Address NULL pointer dereference after starget_to_rport() (bsc#1201193).
- scsi: lpfc: Add support for ATTO Fibre Channel devices (bsc#1201193).
- scsi: lpfc: Add support for VMID tagging of NVMe I/Os (bsc#1201193).
- scsi: lpfc: Allow reduced polling rate for nvme_admin_async_event cmd completion (bsc#1201193).
- scsi: lpfc: Commonize VMID code location (bsc#1201193).
- scsi: lpfc: Correct BDE type for XMIT_SEQ64_WQE in lpfc_ct_reject_event() (bsc#1201193).
- scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology (bsc#1201193).
- scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted (bsc#1201193).
- scsi: lpfc: Resolve some cleanup issues following abort path refactoring (bsc#1201193).
- scsi: lpfc: Resolve some cleanup issues following SLI path refactoring (bsc#1201193).
- scsi: lpfc: Rework lpfc_vmid_get_appid() to be protocol independent (bsc#1201193).
- scsi: lpfc: Update lpfc version to 14.2.0.4 (bsc#1201193).
- scsi: nvme: Added a new sysfs attribute appid_store (bsc#1201193).
- scsi: nvme-fc: Add new routine nvme_fc_io_getuuid() (bsc#1201193).
- scsi: qla2xxx: Add a new v2 dport diagnostic feature (bsc#1201160).
- scsi: qla2xxx: Add debug prints in the device remove path (bsc#1201160).
- scsi: qla2xxx: edif: Add bsg interface to read doorbell events (bsc#1201160).
- scsi: qla2xxx: edif: Add retry for ELS passthrough (bsc#1201160).
- scsi: qla2xxx: edif: bsg refactor (bsc#1201160).
- scsi: qla2xxx: edif: Fix I/O timeout due to over-subscription (bsc#1201160).
- scsi: qla2xxx: edif: Fix n2n discovery issue with secure target (bsc#1201160).
- scsi: qla2xxx: edif: Fix n2n login retry for secure device (bsc#1201160).
- scsi: qla2xxx: edif: Fix no login after app start (bsc#1201160).
- scsi: qla2xxx: edif: Fix no logout on delete for N2N (bsc#1201160).
- scsi: qla2xxx: edif: Fix potential stuck session in sa update (bsc#1201160).
- scsi: qla2xxx: edif: Fix session thrash (bsc#1201160).
- scsi: qla2xxx: edif: Fix slow session teardown (bsc#1201160).
- scsi: qla2xxx: edif: Reduce disruption due to multiple app start (bsc#1201160).
- scsi: qla2xxx: edif: Reduce Initiator-Initiator thrashing (bsc#1201160).
- scsi: qla2xxx: edif: Reduce N2N thrashing at app_start time (bsc#1201160).
- scsi: qla2xxx: edif: Remove old doorbell interface (bsc#1201160).
- scsi: qla2xxx: edif: Send LOGO for unexpected IKE message (bsc#1201160).
- scsi: qla2xxx: edif: Synchronize NPIV deletion with authentication application (bsc#1201160).
- scsi: qla2xxx: edif: Tear down session if keys have been removed (bsc#1201160).
- scsi: qla2xxx: edif: Wait for app to ack on sess down (bsc#1201160).
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (bsc#1201160).
- scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection (bsc#1201160).
- scsi: qla2xxx: Fix excessive I/O error messages by default (bsc#1201160).
- scsi: qla2xxx: Fix losing FCP-2 targets during port perturbation tests (bsc#1201160).
- scsi: qla2xxx: Fix losing FCP-2 targets on long port disable with I/Os (bsc#1201160).
- scsi: qla2xxx: Fix losing target when it reappears during delete (bsc#1201160).
- scsi: qla2xxx: Remove setting of 'req' and 'rsp' parameters (bsc#1201160).
- scsi: qla2xxx: Remove unused 'ql_dm_tgt_ex_pct' parameter (bsc#1201160).
- scsi: qla2xxx: Turn off multi-queue for 8G adapters (bsc#1201160).
- scsi: qla2xxx: Update version to 10.02.07.500-k (bsc#1201160).
- scsi: qla2xxx: Update version to 10.02.07.600-k (bsc#1201160).
- scsi: qla2xxx: Update version to 10.02.07.700-k (bsc#1201160).
- scsi: qla2xxx: Wind down adapter after PCIe error (bsc#1201160).
- scsi: sd: sd_zbc: Do not pass GFP_NOIO to kvcalloc (git-fixes).
- scsi: sd: sd_zbc: Fix handling of host-aware ZBC disks (git-fixes).
- scsi: sd: sd_zbc: Fix ZBC disk initialization (git-fixes).
- scsi: sd: Signal drive managed SMR disks (git-fixes).
- scsi: sd_zbc: Do not limit max_zone_append sectors to (git-fixes).
- scsi: sd_zbc: Ensure buffer size is aligned to SECTOR_SIZE (git-fixes).
- scsi: sd_zbc: Improve zone revalidation (git-fixes).
- scsi: sd_zbc: Remove unused inline functions (git-fixes).
- scsi: sd_zbc: Support disks with more than 2**32 logical (git-fixes).
- scsi: smartpqi: create module parameters for LUN reset (bsc#1179195 bsc#1200622).
- smb3: add mount parm nosparse (bsc#1200217).
- smb3: add trace point for lease not found issue (bsc#1200217).
- smb3: add trace point for oplock not found (bsc#1200217).
- smb3: check for null tcon (bsc#1200217).
- smb3: cleanup and clarify status of tree connections (bsc#1200217).
- smb3: do not set rc when used and unneeded in query_info_compound (bsc#1200217).
- SMB3: EBADF/EIO errors in rename/open caused by race condition in smb2_compound_op (bsc#1200217).
- smb3: fix incorrect session setup check for multiuser mounts (bsc#1200217).
- smb3: fix ksmbd bigendian bug in oplock break, and move its struct to smbfs_common (bsc#1200217).
- smb3: fix snapshot mount option (bsc#1200217).
- smb3 improve error message when mount options conflict with posix (bsc#1200217).
- smb3: move defines for ioctl protocol header and SMB2 sizes to smbfs_common (bsc#1200217).
- smb3: move defines for query info and query fsinfo to smbfs_common (bsc#1200217).
- smb3: move more common protocol header definitions to smbfs_common (bsc#1200217).
- smb3: send NTLMSSP version information (bsc#1200217).
- soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe (git-fixes).
- spi: Fix use-after-free with devm_spi_alloc_* (git-fixes).
- SUNRPC: Fix the calculation of xdr-&gt;end in xdr_get_next_encode_buffer() (git-fixes).
- sunvnet: use icmp_ndo_send helper (git-fixes).
- tty: goldfish: Fix free_irq() on remove (git-fixes).
- usb: chipidea: udc: check request status before setting device address (git-fixes).
- usb: dwc2: Fix memory leak in dwc2_hcd_init (git-fixes).
- usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe (git-fixes).
- usb: gadget: u_ether: fix regression in setting fixed MAC address (git-fixes).
- usbnet: fix memory allocation in helpers (git-fixes).
- USB: serial: io_ti: add Agilent E5805A support (git-fixes).
- USB: serial: option: add Quectel EM05-G modem (git-fixes).
- USB: serial: option: add Quectel RM500K module support (git-fixes).
- USB: serial: option: add support for Cinterion MV31 with new baseline (git-fixes).
- USB: serial: option: add Telit LE910Cx 0x1250 composition (git-fixes).
- usb: xhci: Workaround for S3 issue on AMD SNPS 3.0 xHC (git-fixes).
- veth: fix races around rq-&gt;rx_notify_masked (git-fixes).
- virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed (git-fixes).
- virtio-net: fix race between ndo_open() and virtio_device_ready() (git-fixes).
- virtio_net: fix xdp_rxq_info bug after suspend/resume (git-fixes).
- virtio-pci: Remove wrong address verification in vp_del_vqs() (git-fixes).
- vmxnet3: fix minimum vectors alloc issue (bsc#1199489).
- writeback: Avoid skipping inode writeback (bsc#1200813).
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error (bsc#1200821).
- xhci: Add reset resume quirk for AMD xhci controller (git-fixes).
- x86/entry: Remove skip_r11rcx (bsc#1201644).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.3.18" release="150300.59.87.1" arch="nosrc" src="nosrc/kernel-default-5.3.18-150300.59.87.1.nosrc.rpm">
          <filename>kernel-default-5.3.18-150300.59.87.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.3.18" release="150300.59.87.1" arch="x86_64" src="x86_64/kernel-default-5.3.18-150300.59.87.1.x86_64.rpm">
          <filename>kernel-default-5.3.18-150300.59.87.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.3.18" release="150300.59.87.1.150300.18.50.2" arch="src" src="src/kernel-default-base-5.3.18-150300.59.87.1.150300.18.50.2.src.rpm">
          <filename>kernel-default-base-5.3.18-150300.59.87.1.150300.18.50.2.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.3.18" release="150300.59.87.1.150300.18.50.2" arch="x86_64" src="x86_64/kernel-default-base-5.3.18-150300.59.87.1.150300.18.50.2.x86_64.rpm">
          <filename>kernel-default-base-5.3.18-150300.59.87.1.150300.18.50.2.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.3.18" release="150300.59.87.1" arch="aarch64" src="aarch64/kernel-default-5.3.18-150300.59.87.1.aarch64.rpm">
          <filename>kernel-default-5.3.18-150300.59.87.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.3.18" release="150300.59.87.1.150300.18.50.2" arch="aarch64" src="aarch64/kernel-default-base-5.3.18-150300.59.87.1.150300.18.50.2.aarch64.rpm">
          <filename>kernel-default-base-5.3.18-150300.59.87.1.150300.18.50.2.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2663</id>
    <title>Security update for harfbuzz</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1659597695"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33068" id="CVE-2022-33068" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33068" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200900" id="1200900" title="VUL-0: CVE-2022-33068: harfbuzz: integer overflow in the component hb-ot-shape-fallback.cc" type="bugzilla"/>
    </references>
    <description>This update for harfbuzz fixes the following issues:

- CVE-2022-33068: Fixed a integer overflow in hb-ot-shape-fallback.cc (bsc#1200900).
</description>
    <pkglist>
      <collection>
        <package name="harfbuzz" epoch="0" version="2.6.4" release="150200.3.3.1" arch="src" src="src/harfbuzz-2.6.4-150200.3.3.1.src.rpm">
          <filename>harfbuzz-2.6.4-150200.3.3.1.src.rpm</filename>
        </package>
        <package name="libharfbuzz0" epoch="0" version="2.6.4" release="150200.3.3.1" arch="x86_64" src="x86_64/libharfbuzz0-2.6.4-150200.3.3.1.x86_64.rpm">
          <filename>libharfbuzz0-2.6.4-150200.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="libharfbuzz0" epoch="0" version="2.6.4" release="150200.3.3.1" arch="aarch64" src="aarch64/libharfbuzz0-2.6.4-150200.3.3.1.aarch64.rpm">
          <filename>libharfbuzz0-2.6.4-150200.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2902</id>
    <title>Recommended update for Mesa</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1661484331"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197046" id="1197046" title="PCI IDs for GL drivers not in sync with Mesa" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200965" id="1200965" title="Intel Skylake: iris driver mistakenly been used (Dell Latitude 7480)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197045" id="1197045" title="PCI IDs for GL drivers not in sync with Mesa" type="bugzilla"/>
    </references>
    <description>This update for Mesa fixes the following issues:

- Change default driver from 'iris' back to 'i965' for Intel Gen8-11 hardware; that way we also use the same driver
  used by X and Mesa (bsc#1200965, bsc#1197045, bsc#1197046)
</description>
    <pkglist>
      <collection>
        <package name="Mesa" epoch="0" version="20.2.4" release="150300.59.3.1" arch="src" src="src/Mesa-20.2.4-150300.59.3.1.src.rpm">
          <filename>Mesa-20.2.4-150300.59.3.1.src.rpm</filename>
        </package>
        <package name="libgbm1" epoch="0" version="20.2.4" release="150300.59.3.1" arch="x86_64" src="x86_64/libgbm1-20.2.4-150300.59.3.1.x86_64.rpm">
          <filename>libgbm1-20.2.4-150300.59.3.1.x86_64.rpm</filename>
        </package>
        <package name="libgbm1" epoch="0" version="20.2.4" release="150300.59.3.1" arch="aarch64" src="aarch64/libgbm1-20.2.4-150300.59.3.1.aarch64.rpm">
          <filename>libgbm1-20.2.4-150300.59.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2944</id>
    <title>Recommended update for procps</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1661917204"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1181475" id="1181475" title="'free' command reports misleading &quot;used&quot; value" type="bugzilla"/>
    </references>
    <description>This update for procps fixes the following issues:

- Fix 'free' command reporting misleading &quot;used&quot; value (bsc#1181475)
</description>
    <pkglist>
      <collection>
        <package name="libprocps7" epoch="0" version="3.3.15" release="150000.7.25.1" arch="x86_64" src="x86_64/libprocps7-3.3.15-150000.7.25.1.x86_64.rpm">
          <filename>libprocps7-3.3.15-150000.7.25.1.x86_64.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.15" release="150000.7.25.1" arch="src" src="src/procps-3.3.15-150000.7.25.1.src.rpm">
          <filename>procps-3.3.15-150000.7.25.1.src.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.15" release="150000.7.25.1" arch="x86_64" src="x86_64/procps-3.3.15-150000.7.25.1.x86_64.rpm">
          <filename>procps-3.3.15-150000.7.25.1.x86_64.rpm</filename>
        </package>
        <package name="libprocps7" epoch="0" version="3.3.15" release="150000.7.25.1" arch="aarch64" src="aarch64/libprocps7-3.3.15-150000.7.25.1.aarch64.rpm">
          <filename>libprocps7-3.3.15-150000.7.25.1.aarch64.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.15" release="150000.7.25.1" arch="aarch64" src="aarch64/procps-3.3.15-150000.7.25.1.aarch64.rpm">
          <filename>procps-3.3.15-150000.7.25.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2996</id>
    <title>Security update for gdk-pixbuf</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1662113577"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46829" id="CVE-2021-46829" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46829" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201826" id="1201826" title="VUL-0: CVE-2021-46829: gdk-pixbuf: Heap buffer overflow in gdk-pixbuf" type="bugzilla"/>
    </references>
    <description>This update for gdk-pixbuf fixes the following issues:

- CVE-2021-46829: Fixed overflow when compositing or clearing frames (bsc#1201826).
</description>
    <pkglist>
      <collection>
        <package name="gdk-pixbuf" epoch="0" version="2.40.0" release="150200.3.6.1" arch="src" src="src/gdk-pixbuf-2.40.0-150200.3.6.1.src.rpm">
          <filename>gdk-pixbuf-2.40.0-150200.3.6.1.src.rpm</filename>
        </package>
        <package name="gdk-pixbuf-query-loaders" epoch="0" version="2.40.0" release="150200.3.6.1" arch="x86_64" src="x86_64/gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1.x86_64.rpm">
          <filename>gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libgdk_pixbuf-2_0-0" epoch="0" version="2.40.0" release="150200.3.6.1" arch="x86_64" src="x86_64/libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1.x86_64.rpm">
          <filename>libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="typelib-1_0-GdkPixbuf-2_0" epoch="0" version="2.40.0" release="150200.3.6.1" arch="x86_64" src="x86_64/typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.6.1.x86_64.rpm">
          <filename>typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="gdk-pixbuf-query-loaders" epoch="0" version="2.40.0" release="150200.3.6.1" arch="aarch64" src="aarch64/gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1.aarch64.rpm">
          <filename>gdk-pixbuf-query-loaders-2.40.0-150200.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="libgdk_pixbuf-2_0-0" epoch="0" version="2.40.0" release="150200.3.6.1" arch="aarch64" src="aarch64/libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1.aarch64.rpm">
          <filename>libgdk_pixbuf-2_0-0-2.40.0-150200.3.6.1.aarch64.rpm</filename>
        </package>
        <package name="typelib-1_0-GdkPixbuf-2_0" epoch="0" version="2.40.0" release="150200.3.6.1" arch="aarch64" src="aarch64/typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.6.1.aarch64.rpm">
          <filename>typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3219</id>
    <title>Recommended update for sysconfig</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1662664539"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194557" id="1194557" title="/var/run leftovers in wicked and/or netconfig" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199093" id="1199093" title="netconfig.d/dns-resolver (as of sysconfig) still limits to 6 search domains" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1185882" id="1185882" title="/etc/resolv.conf not restored after NetworkManager VPN connection terminates" type="bugzilla"/>
    </references>
    <description>This update for sysconfig fixes the following issues:

- netconfig: remove sed dependency
- netconfig/dns-resolver: remove search limit of 6 domains (bsc#1199093)
- netconfig: cleanup /var/run leftovers (bsc#1194557)
- netconfig: update ntp man page documentation, fix typos
- netconfig: revert NM default policy change change (bsc#1185882)
  With the change to the default policy, netconfig with NetworkManager
  as network.service accepted settings from all services/programs
  directly instead only from NetworkManager, where plugins/services
  have to deliver their settings to apply them.
- Also support service(network) provides</description>
    <pkglist>
      <collection>
        <package name="sysconfig" epoch="0" version="0.85.9" release="150200.12.1" arch="src" src="src/sysconfig-0.85.9-150200.12.1.src.rpm">
          <filename>sysconfig-0.85.9-150200.12.1.src.rpm</filename>
        </package>
        <package name="sysconfig" epoch="0" version="0.85.9" release="150200.12.1" arch="x86_64" src="x86_64/sysconfig-0.85.9-150200.12.1.x86_64.rpm">
          <filename>sysconfig-0.85.9-150200.12.1.x86_64.rpm</filename>
        </package>
        <package name="sysconfig-netconfig" epoch="0" version="0.85.9" release="150200.12.1" arch="x86_64" src="x86_64/sysconfig-netconfig-0.85.9-150200.12.1.x86_64.rpm">
          <filename>sysconfig-netconfig-0.85.9-150200.12.1.x86_64.rpm</filename>
        </package>
        <package name="sysconfig" epoch="0" version="0.85.9" release="150200.12.1" arch="aarch64" src="aarch64/sysconfig-0.85.9-150200.12.1.aarch64.rpm">
          <filename>sysconfig-0.85.9-150200.12.1.aarch64.rpm</filename>
        </package>
        <package name="sysconfig-netconfig" epoch="0" version="0.85.9" release="150200.12.1" arch="aarch64" src="aarch64/sysconfig-netconfig-0.85.9-150200.12.1.aarch64.rpm">
          <filename>sysconfig-netconfig-0.85.9-150200.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3223</id>
    <title>Recommended update for libzypp, zypper</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1662690838"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201092" id="1201092" title="Almost any zypper command segfauls" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201638" id="1201638" title="zypper lr output garbled when tty too small" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199895" id="1199895" title="PackageKit does not honor zypper package locks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201576" id="1201576" title="&quot;zypper rm -&quot; attempts to remove all packages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200993" id="1200993" title="CLM filters for removing packages that require a reboot do not filter out all packages" type="bugzilla"/>
    </references>
    <description>This update for libzypp, zypper fixes the following issues:

libzypp:

- Improve handling of package locks, allowing to reset the status of its initial state (bsc#1199895)
- Fix issues when receiving exceptions from curl_easy_cleanup (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and its dependent code. First reason for this is that MediaNetwork was just meant as a way to test
  the new CURL based downloaded. Second the Provide API is going to completely replace the current media backend.

zypper:

- Truncate the 'Name' column when using `zypper lr`, if the table is wider than the terminal (bsc#1201638)
- Reject install/remove modifier without argument (bsc#1201576)
- zypper-download: Handle unresolvable arguments as errors
- Put signing key supplying repository name in quotes
</description>
    <pkglist>
      <collection>
        <package name="libzypp" epoch="0" version="17.31.0" release="150200.42.1" arch="src" src="src/libzypp-17.31.0-150200.42.1.src.rpm">
          <filename>libzypp-17.31.0-150200.42.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.0" release="150200.42.1" arch="x86_64" src="x86_64/libzypp-17.31.0-150200.42.1.x86_64.rpm">
          <filename>libzypp-17.31.0-150200.42.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.55" release="150200.36.1" arch="src" src="src/zypper-1.14.55-150200.36.1.src.rpm">
          <filename>zypper-1.14.55-150200.36.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.55" release="150200.36.1" arch="x86_64" src="x86_64/zypper-1.14.55-150200.36.1.x86_64.rpm">
          <filename>zypper-1.14.55-150200.36.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-needs-restarting" epoch="0" version="1.14.55" release="150200.36.1" arch="noarch" src="noarch/zypper-needs-restarting-1.14.55-150200.36.1.noarch.rpm">
          <filename>zypper-needs-restarting-1.14.55-150200.36.1.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.31.0" release="150200.42.1" arch="aarch64" src="aarch64/libzypp-17.31.0-150200.42.1.aarch64.rpm">
          <filename>libzypp-17.31.0-150200.42.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.55" release="150200.36.1" arch="aarch64" src="aarch64/zypper-1.14.55-150200.36.1.aarch64.rpm">
          <filename>zypper-1.14.55-150200.36.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3276</id>
    <title>This update fixes the following issues:</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1663215353"/>
    <references/>
    <description>Implement ECO jsc#SLE-20950 to fix the channel configuration for libeconf-devel having L3 support (instead of unsupported).</description>
    <pkglist>
      <collection>
        <package name="libeconf" epoch="0" version="0.4.4+git20220104.962774f" release="150300.3.8.1" arch="src" src="src/libeconf-0.4.4+git20220104.962774f-150300.3.8.1.src.rpm">
          <filename>libeconf-0.4.4+git20220104.962774f-150300.3.8.1.src.rpm</filename>
        </package>
        <package name="libeconf0" epoch="0" version="0.4.4+git20220104.962774f" release="150300.3.8.1" arch="x86_64" src="x86_64/libeconf0-0.4.4+git20220104.962774f-150300.3.8.1.x86_64.rpm">
          <filename>libeconf0-0.4.4+git20220104.962774f-150300.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="libeconf0" epoch="0" version="0.4.4+git20220104.962774f" release="150300.3.8.1" arch="aarch64" src="aarch64/libeconf0-0.4.4+git20220104.962774f-150300.3.8.1.aarch64.rpm">
          <filename>libeconf0-0.4.4+git20220104.962774f-150300.3.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2982</id>
    <title>Recommended update for util-linux</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1662028450"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197178" id="1197178" title="agetty should give a sensible name when &quot;-&quot; is passed as tty port" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200842" id="1200842" title="SLES15sp3: mesg: cannot open /dev/pts/0: Permission denied" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198731" id="1198731" title="libmount: when moving a mounted tree, all mounted sub tree entries in utab should also be updated" type="bugzilla"/>
    </references>
    <description>This update for util-linux fixes the following issues:


- su: Change owner and mode for pty (bsc#1200842)
- agetty: Resolve tty name even if stdin is specified (bsc#1197178)
- libmount: When moving a mount point, update all sub mount entries in utab (bsc#1198731)
- mesg: use only stat() to get the current terminal status (bsc#1200842)
</description>
    <pkglist>
      <collection>
        <package name="libblkid1" epoch="0" version="2.36.2" release="150300.4.23.1" arch="x86_64" src="x86_64/libblkid1-2.36.2-150300.4.23.1.x86_64.rpm">
          <filename>libblkid1-2.36.2-150300.4.23.1.x86_64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.36.2" release="150300.4.23.1" arch="x86_64" src="x86_64/libfdisk1-2.36.2-150300.4.23.1.x86_64.rpm">
          <filename>libfdisk1-2.36.2-150300.4.23.1.x86_64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.36.2" release="150300.4.23.1" arch="x86_64" src="x86_64/libmount1-2.36.2-150300.4.23.1.x86_64.rpm">
          <filename>libmount1-2.36.2-150300.4.23.1.x86_64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.36.2" release="150300.4.23.1" arch="x86_64" src="x86_64/libsmartcols1-2.36.2-150300.4.23.1.x86_64.rpm">
          <filename>libsmartcols1-2.36.2-150300.4.23.1.x86_64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.36.2" release="150300.4.23.1" arch="x86_64" src="x86_64/libuuid1-2.36.2-150300.4.23.1.x86_64.rpm">
          <filename>libuuid1-2.36.2-150300.4.23.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.36.2" release="150300.4.23.1" arch="src" src="src/util-linux-2.36.2-150300.4.23.1.src.rpm">
          <filename>util-linux-2.36.2-150300.4.23.1.src.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.36.2" release="150300.4.23.1" arch="x86_64" src="x86_64/util-linux-2.36.2-150300.4.23.1.x86_64.rpm">
          <filename>util-linux-2.36.2-150300.4.23.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.36.2" release="150300.4.23.1" arch="src" src="src/util-linux-systemd-2.36.2-150300.4.23.1.src.rpm">
          <filename>util-linux-systemd-2.36.2-150300.4.23.1.src.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.36.2" release="150300.4.23.1" arch="x86_64" src="x86_64/util-linux-systemd-2.36.2-150300.4.23.1.x86_64.rpm">
          <filename>util-linux-systemd-2.36.2-150300.4.23.1.x86_64.rpm</filename>
        </package>
        <package name="libblkid1" epoch="0" version="2.36.2" release="150300.4.23.1" arch="aarch64" src="aarch64/libblkid1-2.36.2-150300.4.23.1.aarch64.rpm">
          <filename>libblkid1-2.36.2-150300.4.23.1.aarch64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.36.2" release="150300.4.23.1" arch="aarch64" src="aarch64/libfdisk1-2.36.2-150300.4.23.1.aarch64.rpm">
          <filename>libfdisk1-2.36.2-150300.4.23.1.aarch64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.36.2" release="150300.4.23.1" arch="aarch64" src="aarch64/libmount1-2.36.2-150300.4.23.1.aarch64.rpm">
          <filename>libmount1-2.36.2-150300.4.23.1.aarch64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.36.2" release="150300.4.23.1" arch="aarch64" src="aarch64/libsmartcols1-2.36.2-150300.4.23.1.aarch64.rpm">
          <filename>libsmartcols1-2.36.2-150300.4.23.1.aarch64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.36.2" release="150300.4.23.1" arch="aarch64" src="aarch64/libuuid1-2.36.2-150300.4.23.1.aarch64.rpm">
          <filename>libuuid1-2.36.2-150300.4.23.1.aarch64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.36.2" release="150300.4.23.1" arch="aarch64" src="aarch64/util-linux-2.36.2-150300.4.23.1.aarch64.rpm">
          <filename>util-linux-2.36.2-150300.4.23.1.aarch64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.36.2" release="150300.4.23.1" arch="aarch64" src="aarch64/util-linux-systemd-2.36.2-150300.4.23.1.aarch64.rpm">
          <filename>util-linux-systemd-2.36.2-150300.4.23.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3019</id>
    <title>Recommended update for lshw</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1662368440"/>
    <references/>
    <description>This update for lshw fixes the following issues:

- Update to version B.02.19.2+git.20220628
  * make version check optional
- Update to version B.02.19.2+git.20220310:
  * Set product name for all netdevs sharing the same PCI number
- Update to version B.02.19.2+git.20211222:
  * Add Spanish translation
  * Fix mistakes in Catalan translation
- Update to version B.02.19.2+git.20211102:
  * Read and parse network transceiver module eeprom
  * use max (9) Gzip compression
  * Add Catalan translation
  * Update POT file
  * Add more network speeds
- Update to version B.02.19.2+git.20211013:
  * support for new ethtool capabilities
  * code clean-up
  * allow pkg-config override
  * Translate all words of a phrase together
</description>
    <pkglist>
      <collection>
        <package name="lshw" epoch="0" version="B.02.19.2+git.20220628" release="150200.3.12.1" arch="src" src="src/lshw-B.02.19.2+git.20220628-150200.3.12.1.src.rpm">
          <filename>lshw-B.02.19.2+git.20220628-150200.3.12.1.src.rpm</filename>
        </package>
        <package name="lshw" epoch="0" version="B.02.19.2+git.20220628" release="150200.3.12.1" arch="x86_64" src="x86_64/lshw-B.02.19.2+git.20220628-150200.3.12.1.x86_64.rpm">
          <filename>lshw-B.02.19.2+git.20220628-150200.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="lshw" epoch="0" version="B.02.19.2+git.20220628" release="150200.3.12.1" arch="aarch64" src="aarch64/lshw-B.02.19.2+git.20220628-150200.3.12.1.aarch64.rpm">
          <filename>lshw-B.02.19.2+git.20220628-150200.3.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2941</id>
    <title>Security update for libslirp</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1661849498"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3593" id="CVE-2021-3593" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3593" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201551" id="1201551" title="libslirp header file version macro is broken" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1187365" id="1187365" title="VUL-1: CVE-2021-3593: qemu: slirp,libslirp: invalid pointer initialization may lead to information disclosure (udp6)" type="bugzilla"/>
    </references>
    <description>This update for libslirp fixes the following issues:

- CVE-2021-3593: Fixed invalid pointer initialization may lead to information disclosure (udp6) (bsc#1187365).

Non-security fixes:

- Fix the version header (bsc#1201551)
</description>
    <pkglist>
      <collection>
        <package name="libslirp" epoch="0" version="4.3.1" release="150300.11.1" arch="src" src="src/libslirp-4.3.1-150300.11.1.src.rpm">
          <filename>libslirp-4.3.1-150300.11.1.src.rpm</filename>
        </package>
        <package name="libslirp0" epoch="0" version="4.3.1" release="150300.11.1" arch="x86_64" src="x86_64/libslirp0-4.3.1-150300.11.1.x86_64.rpm">
          <filename>libslirp0-4.3.1-150300.11.1.x86_64.rpm</filename>
        </package>
        <package name="libslirp0" epoch="0" version="4.3.1" release="150300.11.1" arch="aarch64" src="aarch64/libslirp0-4.3.1-150300.11.1.aarch64.rpm">
          <filename>libslirp0-4.3.1-150300.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3202</id>
    <title>Recommended update for sssd</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1662626692"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197925" id="1197925" title="L3-Question: sssd-ad trusted domain site topology,ad server choice" type="bugzilla"/>
    </references>
    <description>This update for sssd fixes the following issues:

- Create kdcinfo file for sub-domains (bsc#1197925)
</description>
    <pkglist>
      <collection>
        <package name="libsss_certmap0" epoch="0" version="1.16.1" release="150300.23.34.1" arch="x86_64" src="x86_64/libsss_certmap0-1.16.1-150300.23.34.1.x86_64.rpm">
          <filename>libsss_certmap0-1.16.1-150300.23.34.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="1.16.1" release="150300.23.34.1" arch="x86_64" src="x86_64/libsss_idmap0-1.16.1-150300.23.34.1.x86_64.rpm">
          <filename>libsss_idmap0-1.16.1-150300.23.34.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="1.16.1" release="150300.23.34.1" arch="x86_64" src="x86_64/libsss_nss_idmap0-1.16.1-150300.23.34.1.x86_64.rpm">
          <filename>libsss_nss_idmap0-1.16.1-150300.23.34.1.x86_64.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="1.16.1" release="150300.23.34.1" arch="src" src="src/sssd-1.16.1-150300.23.34.1.src.rpm">
          <filename>sssd-1.16.1-150300.23.34.1.src.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="1.16.1" release="150300.23.34.1" arch="x86_64" src="x86_64/sssd-1.16.1-150300.23.34.1.x86_64.rpm">
          <filename>sssd-1.16.1-150300.23.34.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="1.16.1" release="150300.23.34.1" arch="x86_64" src="x86_64/sssd-common-1.16.1-150300.23.34.1.x86_64.rpm">
          <filename>sssd-common-1.16.1-150300.23.34.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="1.16.1" release="150300.23.34.1" arch="x86_64" src="x86_64/sssd-krb5-common-1.16.1-150300.23.34.1.x86_64.rpm">
          <filename>sssd-krb5-common-1.16.1-150300.23.34.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="1.16.1" release="150300.23.34.1" arch="x86_64" src="x86_64/sssd-ldap-1.16.1-150300.23.34.1.x86_64.rpm">
          <filename>sssd-ldap-1.16.1-150300.23.34.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_certmap0" epoch="0" version="1.16.1" release="150300.23.34.1" arch="aarch64" src="aarch64/libsss_certmap0-1.16.1-150300.23.34.1.aarch64.rpm">
          <filename>libsss_certmap0-1.16.1-150300.23.34.1.aarch64.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="1.16.1" release="150300.23.34.1" arch="aarch64" src="aarch64/libsss_idmap0-1.16.1-150300.23.34.1.aarch64.rpm">
          <filename>libsss_idmap0-1.16.1-150300.23.34.1.aarch64.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="1.16.1" release="150300.23.34.1" arch="aarch64" src="aarch64/libsss_nss_idmap0-1.16.1-150300.23.34.1.aarch64.rpm">
          <filename>libsss_nss_idmap0-1.16.1-150300.23.34.1.aarch64.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="1.16.1" release="150300.23.34.1" arch="aarch64" src="aarch64/sssd-1.16.1-150300.23.34.1.aarch64.rpm">
          <filename>sssd-1.16.1-150300.23.34.1.aarch64.rpm</filename>
        </package>
        <package name="sssd-common" epoch="0" version="1.16.1" release="150300.23.34.1" arch="aarch64" src="aarch64/sssd-common-1.16.1-150300.23.34.1.aarch64.rpm">
          <filename>sssd-common-1.16.1-150300.23.34.1.aarch64.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="1.16.1" release="150300.23.34.1" arch="aarch64" src="aarch64/sssd-krb5-common-1.16.1-150300.23.34.1.aarch64.rpm">
          <filename>sssd-krb5-common-1.16.1-150300.23.34.1.aarch64.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="1.16.1" release="150300.23.34.1" arch="aarch64" src="aarch64/sssd-ldap-1.16.1-150300.23.34.1.aarch64.rpm">
          <filename>sssd-ldap-1.16.1-150300.23.34.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3183</id>
    <title>Recommended update for salt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1662622879"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198489" id="1198489" title="Salt function 'pkg.upgrade' ignores 'name=&lt;pacakge&gt;' or 'pkgs=&lt;package&gt;' argument" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198744" id="1198744" title="salt incompatible with python-Jinja2 3.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201082" id="1201082" title="[Build 20220630] Unable to connect to the salt master publisher at /var/run/salt/master" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199372" id="1199372" title="salt wrong return value for test=true if state contains &quot;contents&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195895" id="1195895" title="Failed to install Package with .ARCH in the name" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197288" id="1197288" title="Update package list fails on top of Ubuntu 18 clients" type="bugzilla"/>
    </references>
    <description>This recommended update for salt fixes the following issues:

- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore errors on reading license files with dpkg_lowpkg (bsc#1197288)
  </description>
    <pkglist>
      <collection>
        <package name="python3-salt" epoch="0" version="3004" release="150300.53.27.1" arch="x86_64" src="x86_64/python3-salt-3004-150300.53.27.1.x86_64.rpm">
          <filename>python3-salt-3004-150300.53.27.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3004" release="150300.53.27.1" arch="src" src="src/salt-3004-150300.53.27.1.src.rpm">
          <filename>salt-3004-150300.53.27.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3004" release="150300.53.27.1" arch="x86_64" src="x86_64/salt-3004-150300.53.27.1.x86_64.rpm">
          <filename>salt-3004-150300.53.27.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3004" release="150300.53.27.1" arch="x86_64" src="x86_64/salt-minion-3004-150300.53.27.1.x86_64.rpm">
          <filename>salt-minion-3004-150300.53.27.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3004" release="150300.53.27.1" arch="x86_64" src="x86_64/salt-transactional-update-3004-150300.53.27.1.x86_64.rpm">
          <filename>salt-transactional-update-3004-150300.53.27.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3004" release="150300.53.27.1" arch="aarch64" src="aarch64/python3-salt-3004-150300.53.27.1.aarch64.rpm">
          <filename>python3-salt-3004-150300.53.27.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3004" release="150300.53.27.1" arch="aarch64" src="aarch64/salt-3004-150300.53.27.1.aarch64.rpm">
          <filename>salt-3004-150300.53.27.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3004" release="150300.53.27.1" arch="aarch64" src="aarch64/salt-minion-3004-150300.53.27.1.aarch64.rpm">
          <filename>salt-minion-3004-150300.53.27.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3004" release="150300.53.27.1" arch="aarch64" src="aarch64/salt-transactional-update-3004-150300.53.27.1.aarch64.rpm">
          <filename>salt-transactional-update-3004-150300.53.27.1.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2882</id>
    <title>Security update for gnutls</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1661330091"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202020" id="1202020" title="VUL-0: CVE-2022-2509: gnutls: Double free during gnutls_pkcs7_verify." type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2509" id="CVE-2022-2509" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2509" type="cve"/>
    </references>
    <description>This update for gnutls fixes the following issues:

- CVE-2022-2509: Fixed a double free issue during PKCS7 verification (bsc#1202020).
</description>
    <pkglist>
      <collection>
        <package name="gnutls" epoch="0" version="3.6.7" release="150200.14.19.2" arch="src" src="src/gnutls-3.6.7-150200.14.19.2.src.rpm">
          <filename>gnutls-3.6.7-150200.14.19.2.src.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.6.7" release="150200.14.19.2" arch="x86_64" src="x86_64/gnutls-3.6.7-150200.14.19.2.x86_64.rpm">
          <filename>gnutls-3.6.7-150200.14.19.2.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.6.7" release="150200.14.19.2" arch="x86_64" src="x86_64/libgnutls30-3.6.7-150200.14.19.2.x86_64.rpm">
          <filename>libgnutls30-3.6.7-150200.14.19.2.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30-hmac" epoch="0" version="3.6.7" release="150200.14.19.2" arch="x86_64" src="x86_64/libgnutls30-hmac-3.6.7-150200.14.19.2.x86_64.rpm">
          <filename>libgnutls30-hmac-3.6.7-150200.14.19.2.x86_64.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.6.7" release="150200.14.19.2" arch="aarch64" src="aarch64/gnutls-3.6.7-150200.14.19.2.aarch64.rpm">
          <filename>gnutls-3.6.7-150200.14.19.2.aarch64.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.6.7" release="150200.14.19.2" arch="aarch64" src="aarch64/libgnutls30-3.6.7-150200.14.19.2.aarch64.rpm">
          <filename>libgnutls30-3.6.7-150200.14.19.2.aarch64.rpm</filename>
        </package>
        <package name="libgnutls30-hmac" epoch="0" version="3.6.7" release="150200.14.19.2" arch="aarch64" src="aarch64/libgnutls30-hmac-3.6.7-150200.14.19.2.aarch64.rpm">
          <filename>libgnutls30-hmac-3.6.7-150200.14.19.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2839</id>
    <title>Security update for podman</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1660801152"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21698" id="CVE-2022-21698" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21698" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27191" id="CVE-2022-27191" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27191" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1227" id="CVE-2022-1227" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1227" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1182428" id="1182428" title="VUL-0: CVE-2022-1227: podman: podman-top error executing &quot;nsenter -U -t 1 cat /proc/1/status&quot;: exec: &quot;nsenter&quot;: executable file not found in $PATH in rootless mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196338" id="1196338" title="VUL-0: CVE-2022-21698: rook,golang-github-prometheus-alertmanager,golang-github-prometheus-node_exporter,golang-github-prometheus-prometheus: prometheus/client_golang: Denial of service using InstrumentHandlerCounter" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197284" id="1197284" title="VUL-0: CVE-2022-27191: docker, containerd, kubernete, helm, helm3, etcd: crash in a golang.org/x/crypto/ssh server" type="bugzilla"/>
    </references>
    <description>This update for podman fixes the following issues:

Updated to version 3.4.7:
- CVE-2022-1227: Fixed an issue that could allow an attacker to publish
  a malicious image to a public registry and run arbitrary code in the
  victim's context via the 'podman top' command (bsc#1182428).
- CVE-2022-27191: Fixed a potential crash via SSH under specific
  configurations (bsc#1197284).
- CVE-2022-21698: Fixed a potential denial of service that affected
  servers that used Prometheus instrumentation (bsc#1196338).
</description>
    <pkglist>
      <collection>
        <package name="podman" epoch="0" version="3.4.7" release="150300.9.9.2" arch="src" src="src/podman-3.4.7-150300.9.9.2.src.rpm">
          <filename>podman-3.4.7-150300.9.9.2.src.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="3.4.7" release="150300.9.9.2" arch="x86_64" src="x86_64/podman-3.4.7-150300.9.9.2.x86_64.rpm">
          <filename>podman-3.4.7-150300.9.9.2.x86_64.rpm</filename>
        </package>
        <package name="podman-cni-config" epoch="0" version="3.4.7" release="150300.9.9.2" arch="noarch" src="noarch/podman-cni-config-3.4.7-150300.9.9.2.noarch.rpm">
          <filename>podman-cni-config-3.4.7-150300.9.9.2.noarch.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="3.4.7" release="150300.9.9.2" arch="aarch64" src="aarch64/podman-3.4.7-150300.9.9.2.aarch64.rpm">
          <filename>podman-3.4.7-150300.9.9.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2875</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1661253592"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1178134" id="1178134" title="[TRACKERBUG] git-fixes pile for SLE15-SP3" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196616" id="1196616" title="VUL-0: CVE-2020-36516: kernel-source-azure,kernel-source,kernel-source-rt: An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198829" id="1198829" title="VUL-0: CVE-2022-1462: kernel-source,kernel-source-rt,kernel-source-azure: A race condition vulnerability in drivers/tty/tty_buffers.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199364" id="1199364" title="hv_netvsc: Add support for XDP_REDIRECT" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199647" id="1199647" title="VUL-0: CVE-2022-1116: kernel-source-azure,kernel-source-rt,kernel-source: Integer overflow in io_uring may lead to local privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199665" id="1199665" title="VUL-0: CVE-2022-29581: kernel-source,kernel-source-rt,kernel-source-azure: Improper Update of Reference Count vulnerability in net/sched" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199670" id="1199670" title="NVMe TCP controller resets/reconnections observed under stress" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200015" id="1200015" title="VUL-0: CVE-2022-32250: kernel: use-after-free in the netfilter subsystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200521" id="1200521" title="[NetApp SLES15 SP3 Bug]: Path loss on Broadcom NVMe/FC MU host during ONTAP SFOs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200598" id="1200598" title="VUL-0: CVE-2022-20166: kernel-source-rt,kernel-source,kernel-source-azure: possible out of bounds write due to sprintf unsafety" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200644" id="1200644" title="L3: NVMe autoconnect fails with &quot;nvme_fc: nvme_fc_parse_traddr: bad traddr string&quot; error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200651" id="1200651" title="L3: 12SP5 4.12.14-122.116 breaks qla2xxx nvme over FC" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200762" id="1200762" title="VUL-0: CVE-2022-26365,CVE-2022-33740,CVE-2022-33741,CVE-2022-33742: xen: Linux disk/nic frontends data leaks (XSA-403)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200910" id="1200910" title="VUL-0:  CVE-2020-36558: kernel: use after free due to race condition between ioctl(VT_DISALLOCATE) and ioctl(VT_RESIZEX)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201196" id="1201196" title="L3: With kernel 5.3.18-59.37-default or greater, kernel cashes in NFS v4 code,  when accessing certain NFS share" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201206" id="1201206" title="Macbook pro12 battery is not detected with the latest kernel update on Leap 15.3" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201251" id="1201251" title="VUL-0: CVE-2022-2318: kernel-source,kernel-source-rt,kernel-source-azure:  Use-after-free caused by timer handler in net/rose/rose_timer.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201381" id="1201381" title="L3: BUG: unable to handle kernel NULL pointer dereference at xenvif_rx_skb+0x23" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201429" id="1201429" title="VUL-0: CVE-2020-36557: kernel use after free due to race condition in ioctl(VT_DISALLOCATE)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201442" id="1201442" title="KVM: arm64: Avoid setting the upper 32 bits of TCR_EL2 and CPTR_EL2 to 1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201458" id="1201458" title="VUL-0: CVE-2022-21505: kernel lockdown bypass via IMA appraisal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201635" id="1201635" title="VUL-0: CVE-2021-33655: kernel-source,kernel-source-azure,kernel-source-rt: Out of bounds write with ioctl cmd FBIOPUT_VSCREENINFO" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201636" id="1201636" title="VUL-0: CVE-2021-33656: kernel-source-azure,kernel-source,kernel-source-rt: When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201644" id="1201644" title="Kernel crashes on Dell PowerEdge R340 and R440 after latest kernel upgrade" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201645" id="1201645" title="Forced crash didn't result into expected reboot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201664" id="1201664" title="kernel 5.3.18-150300.59.81-default is continuously crashing on Supermicro X11DPU-Z+ (Intel Skylake SP)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201672" id="1201672" title="bad RIP value - kernel NULL pointer dereference address 0000000000000000" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201673" id="1201673" title="buggy kernel 5.3.18-150300.59.81 on SLES15-SP3 keeps crashing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201676" id="1201676" title="crashes on new 15-sp3 kernel (retbleed fallout?)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201846" id="1201846" title="HSCLB60C HMC message and hard lockup log entries after 10 successful LPM operations (P10)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201930" id="1201930" title="Regression running some VM guests with 5.3.18-150300.59.87.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201940" id="1201940" title="VUL-0: CVE-2022-36946: kernel-source-azure,kernel-source,kernel-source-rt: incorrect packet truncation in nfqnl_mangle() leads to remote DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201954" id="1201954" title="[NetApp SLES15 SP4 Bug] QLogic NVMe/FC broken after SP4 kernel MU upgrade" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201956" id="1201956" title="Update Broadcom Emulex lpfc driver to 14.2.0.5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201958" id="1201958" title="qla2xxx: update driver to 10.02.07.800-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202154" id="1202154" title="VUL-0: CVE-2022-2639: kernel-source-azure,kernel-source,kernel-source-rt: integer underflow leads to out-of-bounds write in reserve_sfa_size()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36516" id="CVE-2020-36516" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36516" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36557" id="CVE-2020-36557" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36557" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36558" id="CVE-2020-36558" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36558" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33655" id="CVE-2021-33655" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33655" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33656" id="CVE-2021-33656" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33656" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1116" id="CVE-2022-1116" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1116" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1462" id="CVE-2022-1462" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1462" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2318" id="CVE-2022-2318" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2318" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2639" id="CVE-2022-2639" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2639" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20166" id="CVE-2022-20166" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20166" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21505" id="CVE-2022-21505" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21505" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26365" id="CVE-2022-26365" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26365" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29581" id="CVE-2022-29581" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29581" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32250" id="CVE-2022-32250" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32250" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33740" id="CVE-2022-33740" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33740" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33741" id="CVE-2022-33741" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33741" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33742" id="CVE-2022-33742" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33742" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36946" id="CVE-2022-36946" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36946" type="cve"/>
      <reference href="https://jira.suse.com/browse/SLE-24559" id="SLE-24559" title="https://jira.suse.com/browse/SLE-24559" type="jira"/>
    </references>
    <description>The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-36516: Fixed TCP session data injection vulnerability via the mixed IPID assignment method (bnc#1196616).
- CVE-2020-36557: Fixed race condition between the VT_DISALLOCATE ioctl and closing/opening of ttys that could lead to a use-after-free (bnc#1201429).
- CVE-2020-36558: Fixed race condition involving VT_RESIZEX that could lead to a NULL pointer dereference and general protection fault (bnc#1200910).
- CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635).
- CVE-2021-33656: Fixed out of bounds write with ioctl PIO_FONT (bnc#1201636).
- CVE-2022-1116: Fixed a integer overflow vulnerability in io_uring which allowed a local attacker to cause memory corruption and escalate privileges to root (bnc#1199647).
- CVE-2022-1462: Fixed an out-of-bounds read flaw in the TeleTYpe subsystem (bnc#1198829).
- CVE-2022-2318: Fixed a use-after-free vulnerabilities in the timer handler in net/rose/rose_timer.c that allow attackers to crash the system without any privileges (bsc#1201251).
- CVE-2022-2639: Fixed integer underflow that could lead to out-of-bounds write in reserve_sfa_size() (bsc#1202154).
- CVE-2022-20166: Fixed possible out of bounds write due to sprintf unsafety that could cause local escalation of privilege (bnc#1200598)
- CVE-2022-21505: Fixed kexec lockdown bypass with IMA policy (bsc#1201458).
- CVE-2022-26365, CVE-2022-33740, CVE-2022-33741, CVE-2022-33742: Fixed multiple potential data leaks with Block and Network devices when using untrusted backends (bsc#1200762).
- CVE-2022-29581: Fixed improper update of Reference Count in net/sched that could cause root privilege escalation (bnc#1199665).
- CVE-2022-32250: Fixed user-after-free in net/netfilter/nf_tables_api.c that could allow local privilege escalation (bnc#1200015).
- CVE-2022-36946: Fixed incorrect packet truncation in nfqnl_mangle() that could lead to remote DoS (bnc#1201940).

The following non-security bugs were fixed:

- ACPI: APEI: Better fix to avoid spamming the console with old error logs (git-fixes).
- ACPI: CPPC: Do not prevent CPPC from working in the future (git-fixes).
- ACPI: video: Shortening quirk list by identifying Clevo by board_name only (git-fixes).
- ALSA: hda - Add fixup for Dell Latitidue E5430 (git-fixes).
- ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model (git-fixes).
- ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop (git-fixes).
- ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc221 (git-fixes).
- ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 (git-fixes).
- ASoC: Intel: Skylake: Correct the handling of fmt_config flexible array (git-fixes).
- ASoC: Intel: Skylake: Correct the ssp rate discovery in skl_get_ssp_clks() (git-fixes).
- ASoC: Remove unused hw_write_t type (git-fixes).
- ASoC: cs47l15: Fix event generation for low power mux control (git-fixes).
- ASoC: madera: Fix event generation for OUT1 demux (git-fixes).
- ASoC: madera: Fix event generation for rate controls (git-fixes).
- ASoC: ops: Fix off by one in range control validation (git-fixes).
- ASoC: sgtl5000: Fix noise on shutdown/remove (git-fixes).
- ASoC: wm5110: Fix DRE control (git-fixes).
- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put (git-fixes).
- Bluetooth: hci_intel: Add check for platform_driver_register (git-fixes).
- FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR (git-fixes).
- FDDI: defxx: Make MMIO the configuration default except for EISA (git-fixes).
- Fixed a system crash related to the recent RETBLEED mitigation (bsc#1201644, bsc#1201664, bsc#1201672, bsc#1201673, bsc#1201676).
- Fixed battery detection problem on macbooks (bnc#1201206).
- HID: cp2112: prevent a buffer overflow in cp2112_xfer() (git-fixes).
- KVM/emulate: Fix SETcc emulation function offsets with SLS (bsc#1201930).
- KVM: VMX: Add non-canonical check on writes to RTIT address MSRs (git-fixes).
- KVM: VMX: Do not freeze guest when event delivery causes an APIC-access exit (git-fixes).
- KVM: apic: avoid calculating pending eoi from an uninitialized val (git-fixes).
- KVM: arm64: Avoid setting the upper 32 bits of TCR_EL2 and CPTR_EL2 (bsc#1201442)
- KVM: arm64: Fix definition of PAGE_HYP_DEVICE (git-fixes)
- KVM: emulate: do not adjust size of fastop and setcc subroutines (bsc#1201930).
- KVM: nVMX: avoid NULL pointer dereference with incorrect EVMCS GPAs (git-fixes).
- KVM: nVMX: handle nested posted interrupts when apicv is disabled for L1 (git-fixes).
- KVM: x86/pmu: Fix UBSAN shift-out-of-bounds warning in intel_pmu_refresh() (git-fixes).
- KVM: x86: Do not let userspace set host-reserved cr4 bits (git-fixes).
- KVM: x86: Fix split-irqchip vs interrupt injection window request (git-fixes).
- KVM: x86: Refactor prefix decoding to prevent Spectre-v1/L1TF attacks (git-fixes).
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (git-fixes).
- KVM: x86: handle !lapic_in_kernel case in kvm_cpu_*_extint (git-fixes).
- NFC: nxp-nci: do not print header length mismatch on i2c error (git-fixes).
- PCI/portdrv: Do not disable AER reporting in get_port_device_capability() (git-fixes).
- PCI: dwc: Add unroll iATU space support to dw_pcie_disable_atu() (git-fixes).
- PCI: dwc: Always enable CDM check if &quot;snps,enable-cdm-check&quot; exists (git-fixes).
- PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors (git-fixes).
- PCI: dwc: Disable outbound windows only for controllers using iATU (git-fixes).
- PCI: dwc: Stop link on host_init errors and de-initialization (git-fixes).
- PCI: qcom: Power on PHY before IPQ8074 DBI register accesses (git-fixes).
- PCI: qcom: Set up rev 2.1.0 PARF_PHY before enabling clocks (git-fixes).
- PCI: tegra194: Fix PM error handling in tegra_pcie_config_ep() (git-fixes).
- PCI: tegra194: Fix Root Port interrupt handling (git-fixes).
- PCI: tegra194: Fix link up retry sequence (git-fixes).
- PM: runtime: Remove link state checks in rpm_get/put_supplier() (git-fixes).
- Sort in RETbleed backport into the sorted section Now that it is upstream..
- USB: Follow-up to SPDX identifiers addition - remove now useless comments (git-fixes).
- USB: serial: fix tty-port initialized comments (git-fixes).
- USB: serial: ftdi_sio: add Belimo device ids (git-fixes).
- amd-xgbe: Update DMA coherency values (git-fixes).
- arm64 module: set plt* section addresses to 0x0 (git-fixes)
- arm64: Extend workaround for erratum 1024718 to all versions of (git-fixes)
- arm64: asm: Add new-style position independent function annotations (git-fixes)
- arm64: compat: Ensure upper 32 bits of x0 are zero on syscall return (git-fixes)
- arm64: dts: marvell: armada-37xx: Set pcie_reset_pin to gpio function (git-fixes)
- arm64: dts: marvell: espressobin: Add ethernet switch aliases (git-fixes)
- arm64: dts: marvell: espressobin: add ethernet alias (git-fixes)
- arm64: dts: mcbin: support 2W SFP modules (git-fixes)
- arm64: fix compat syscall return truncation (git-fixes)
- arm64: fix inline asm in load_unaligned_zeropad() (git-fixes)
- arm64: mm: Do not invalidate FROM_DEVICE buffers at start of DMA (git-fixes)
- arm64: module: remove (NOLOAD) from linker script (git-fixes)
- arm64: module: rework special section handling (git-fixes)
- arm64: perf: Report the PC value in REGS_ABI_32 mode (git-fixes)
- arm64: ptrace: Consistently use pseudo-singlestep exceptions (git-fixes)
- arm64: ptrace: Override SPSR.SS when single-stepping is enabled (git-fixes)
- arm64: stackleak: fix current_top_of_stack() (git-fixes)
- arm64: uprobe: Return EOPNOTSUPP for AARCH32 instruction probing (git-fixes)
- arm64: vdso: Avoid ISB after reading from cntvct_el0 (git-fixes)
- ath10k: Fix error handling in ath10k_setup_msa_resources (git-fixes).
- ath10k: do not enforce interrupt trigger type (git-fixes).
- ax88179_178a: add ethtool_op_get_ts_info() (git-fixes).
- blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN (git-fixes).
- blk-zoned: allow zone management send operations without CAP_SYS_ADMIN (git-fixes).
- block/compat_ioctl: fix range check in BLKGETSIZE (git-fixes).
- block: Fix fsync always failed if once failed (git-fixes).
- block: Fix wrong offset in bio_truncate() (git-fixes).
- block: bio-integrity: Advance seed correctly for larger interval sizes (git-fixes).
- block: do not delete queue kobject before its children (git-fixes).
- block: drbd: drbd_nl: Make conversion to 'enum drbd_ret_code' explicit (git-fixes).
- bpf, cpumap: Remove rcpu pointer from cpu_map_build_skb signature (bsc#1199364).
- bpf: Add config to allow loading modules with BTF mismatches (jsc#SLE-24559).
- bpf: Add in-kernel split BTF support (jsc#SLE-24559).
- bpf: Assign ID to vmlinux BTF and return extra info for BTF in GET_OBJ_INFO (jsc#SLE-24559).
- bpf: Keep module's btf_data_size intact after load (jsc#SLE-24559).
- bpf: Load and verify kernel module BTFs (jsc#SLE-24559).
- bpf: Provide function to get vmlinux BTF information (jsc#SLE-24559).
- bpf: Sanitize BTF data pointer after module is loaded (jsc#SLE-24559).
- bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe() (git-fixes).
- can: Break loopback loop on loopback documentation (git-fixes).
- can: error: specify the values of data[5..7] of CAN error frames (git-fixes).
- can: gs_usb: gs_usb_open/close(): fix memory leak (git-fixes).
- can: hi311x: do not report txerr and rxerr during bus-off (git-fixes).
- can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off (git-fixes).
- can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off (git-fixes).
- can: pch_can: do not report txerr and rxerr during bus-off (git-fixes).
- can: pch_can: pch_can_error(): initialize errc before using it (git-fixes).
- can: rcar_can: do not report txerr and rxerr during bus-off (git-fixes).
- can: sja1000: do not report txerr and rxerr during bus-off (git-fixes).
- can: sun4i_can: do not report txerr and rxerr during bus-off (git-fixes).
- can: usb_8dev: do not report txerr and rxerr during bus-off (git-fixes).
- clk: qcom: camcc-sdm845: Fix topology around titan_top power domain (git-fixes).
- clk: qcom: clk-krait: unlock spin after mux completion (git-fixes).
- clk: qcom: ipq8074: SW workaround for UBI32 PLL lock (git-fixes).
- clk: qcom: ipq8074: fix NSS core PLL-s (git-fixes).
- clk: qcom: ipq8074: fix NSS port frequency tables (git-fixes).
- clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks (git-fixes).
- clk: renesas: r9a06g032: Fix UART clkgrp bitsel (git-fixes).
- config: enable DEBUG_INFO_BTF This option allows users to access the btf type information for vmlinux but not kernel modules.
- cpuidle: PSCI: Move the `has_lpi` check to the beginning of the (git-fixes)
- crypto: qat - disable registration of algorithms (git-fixes).
- crypto: qat - fix memory leak in RSA (git-fixes).
- crypto: qat - remove dma_free_coherent() for DH (git-fixes).
- crypto: qat - remove dma_free_coherent() for RSA (git-fixes).
- crypto: qat - set to zero DH parameters before free (git-fixes).
- cxgb4: Fix the -Wmisleading-indentation warning (git-fixes).
- dm btree remove: assign new_root only when removal succeeds (git-fixes).
- dm btree remove: fix use after free in rebalance_children() (git-fixes).
- dm bufio: subtract the number of initial sectors in dm_bufio_get_device_size (git-fixes).
- dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc() (git-fixes).
- dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS (git-fixes).
- dm crypt: make printing of the key constant-time (git-fixes).
- dm integrity: conditionally disable &quot;recalculate&quot; feature (git-fixes).
- dm integrity: fix a crash if &quot;recalculate&quot; used without &quot;internal_hash&quot; (git-fixes).
- dm integrity: fix error code in dm_integrity_ctr() (git-fixes).
- dm integrity: fix memory corruption when tag_size is less than digest size (git-fixes).
- dm integrity: fix the maximum number of arguments (git-fixes).
- dm mirror log: round up region bitmap size to BITS_PER_LONG (git-fixes).
- dm persistent data: packed struct should have an aligned() attribute too (git-fixes).
- dm raid: fix inconclusive reshape layout on fast raid4/5/6 table reload sequences (git-fixes).
- dm snapshot: fix crash with transient storage and zero chunk size (git-fixes).
- dm snapshot: flush merged data before committing metadata (git-fixes).
- dm snapshot: properly fix a crash when an origin has no snapshots (git-fixes).
- dm space map common: fix division bug in sm_ll_find_free_block() (git-fixes).
- dm stats: add cond_resched when looping over entries (git-fixes).
- dm verity: fix FEC for RS roots unaligned to block size (git-fixes).
- dm: fix mempool NULL pointer race when completing IO (git-fixes).
- dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly (git-fixes).
- dmaengine: imx-sdma: Allow imx8m for imx7 FW revs (git-fixes).
- dmaengine: pl330: Fix lockdep warning about non-static key (git-fixes).
- dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate (git-fixes).
- dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate (git-fixes).
- do not call utsname() after -&gt;nsproxy is NULL (bsc#1201196).
- drbd: fix potential silent data corruption (git-fixes).
- driver core: fix potential deadlock in __driver_attach (git-fixes).
- drivers/net: Fix kABI in tun.c (git-fixes).
- drivers: net: fix memory leak in atusb_probe (git-fixes).
- drivers: net: fix memory leak in peak_usb_create_dev (git-fixes).
- drm/amd/display: Enable building new display engine with KCOV enabled (git-fixes).
- drm/bridge: tc358767: Make sure Refclk clock are enabled (git-fixes).
- drm/doc: Fix comment typo (git-fixes).
- drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed (git-fixes).
- drm/i915/gt: Serialize TLB invalidates with GT resets (git-fixes).
- drm/i915/selftests: fix a couple IS_ERR() vs NULL tests (git-fixes).
- drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector() (git-fixes).
- drm/mcde: Fix refcount leak in mcde_dsi_bind (git-fixes).
- drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function (git-fixes).
- drm/mediatek: dpi: Only enable dpi after the bridge is enabled (git-fixes).
- drm/mediatek: dpi: Remove output format of YUV (git-fixes).
- drm/mipi-dbi: align max_chunk to 2 in spi_transfer (git-fixes).
- drm/msm/hdmi: enable core-vcc/core-vdda-supply for 8996 platform (git-fixes).
- drm/msm/mdp5: Fix global state lock backoff (git-fixes).
- drm/nouveau: fix another off-by-one in nvbios_addr (git-fixes).
- drm/panfrost: Fix shrinker list corruption by madvise IOCTL (git-fixes).
- drm/panfrost: Put mapping instead of shmem obj on panfrost_mmu_map_fault_addr() error (git-fixes).
- drm/radeon: fix incorrrect SPDX-License-Identifiers (git-fixes).
- drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() (git-fixes).
- drm/rockchip: Fix an error handling path rockchip_dp_probe() (git-fixes).
- drm/rockchip: vop: Do not crash for invalid duplicate_state() (git-fixes).
- drm/st7735r: Fix module autoloading for Okaya RH128128T (git-fixes).
- drm/vc4: dsi: Add correct stop condition to vc4_dsi_encoder_disable iteration (git-fixes).
- drm/vc4: dsi: Correct DSI divider calculations (git-fixes).
- drm/vc4: dsi: Correct pixel order for DSI0 (git-fixes).
- drm/vc4: hdmi: Correct HDMI timing registers for interlaced modes (git-fixes).
- drm/vc4: hdmi: Fix timings for interlaced modes (git-fixes).
- drm/vc4: plane: Fix margin calculations for the right/bottom edges (git-fixes).
- drm/vc4: plane: Remove subpixel positioning check (git-fixes).
- drm: adv7511: override i2c address of cec before accessing it (git-fixes).
- drm: bridge: adv7511: Add check for mipi_dsi_driver_register (git-fixes).
- drm: bridge: sii8620: fix possible off-by-one (git-fixes).
- fbcon: Disallow setting font bigger than screen size (git-fixes).
- fbcon: Prevent that screen size is smaller than font size (git-fixes).
- fbdev: fbmem: Fix logo center image dx issue (git-fixes).
- fbmem: Check virtual screen sizes in fb_set_var() (git-fixes).
- fpga: altera-pr-ip: fix unsigned comparison with less than zero (git-fixes).
- ftgmac100: Restart MAC HW once (git-fixes).
- gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data() (git-fixes).
- gpio: pca953x: only use single read/write for No AI mode (git-fixes).
- gpio: pca953x: use the correct range when do regmap sync (git-fixes).
- gpio: pca953x: use the correct register address when regcache sync during init (git-fixes).
- hex2bin: make the function hex_to_bin constant-time (git-fixes).
- hv_netvsc: Add (more) validation for untrusted Hyper-V values (bsc#1199364).
- hv_netvsc: Add comment of netvsc_xdp_xmit() (bsc#1199364).
- hv_netvsc: Add support for XDP_REDIRECT (bsc#1199364).
- hv_netvsc: Copy packets sent by Hyper-V out of the receive buffer (bsc#1199364).
- hv_netvsc: Fix validation in netvsc_linkstatus_callback() (bsc#1199364).
- i2c: Fix a potential use after free (git-fixes).
- i2c: cadence: Change large transfer count reset logic to be unconditional (git-fixes).
- i2c: cadence: Support PEC for SMBus block read (git-fixes).
- i2c: cadence: Unregister the clk notifier in error path (git-fixes).
- i2c: mux-gpmux: Add of_node_put() when breaking out of loop (git-fixes).
- ida: do not use BUG_ON() for debugging (git-fixes).
- igb: Enable RSS for Intel I211 Ethernet Controller (git-fixes).
- iio: accel: bma220: Fix alignment for DMA safety (git-fixes).
- iio: accel: sca3000: Fix alignment for DMA safety (git-fixes).
- iio: adc: ad7266: Fix alignment for DMA safety (git-fixes).
- iio: adc: ad7298: Fix alignment for DMA safety (git-fixes).
- iio: adc: ad7476: Fix alignment for DMA safety (git-fixes).
- iio: adc: ad7766: Fix alignment for DMA safety (git-fixes).
- iio: adc: ad7768-1: Fix alignment for DMA safety (git-fixes).
- iio: adc: ad7887: Fix alignment for DMA safety (git-fixes).
- iio: adc: hi8435: Fix alignment for DMA safety (git-fixes).
- iio: adc: ltc2497: Fix alignment for DMA safety (git-fixes).
- iio: adc: max1027: Fix alignment for DMA safety (git-fixes).
- iio: adc: max11100: Fix alignment for DMA safety (git-fixes).
- iio: adc: max1118: Fix alignment for DMA safety (git-fixes).
- iio: adc: mcp320x: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-adc0832: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-adc084s021: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-adc12138: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-adc128s052: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-adc161s626: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-ads124s08: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-ads7950: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-ads8344: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-ads8688: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-tlc4541: Fix alignment for DMA safety (git-fixes).
- iio: amplifiers: ad8366: Fix alignment for DMA safety (git-fixes).
- iio: core: Fix IIO_ALIGN and rename as it was not sufficiently large (git-fixes).
- iio: dac: ad5064: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5360: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5421: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5449: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5504: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5755: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5761: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5764: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5791: Fix alignment for DMA saftey (git-fixes).
- iio: dac: ad7303: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad8801: Fix alignment for DMA safety (git-fixes).
- iio: dac: mcp4922: Fix alignment for DMA safety (git-fixes).
- iio: dac: ti-dac082s085: Fix alignment for DMA safety (git-fixes).
- iio: dac: ti-dac5571: Fix alignment for DMA safety (git-fixes).
- iio: dac: ti-dac7311: Fix alignment for DMA safety (git-fixes).
- iio: dac: ti-dac7612: Fix alignment for DMA safety (git-fixes).
- iio: frequency: ad9523: Fix alignment for DMA safety (git-fixes).
- iio: frequency: adf4350: Fix alignment for DMA safety (git-fixes).
- iio: frequency: adf4371: Fix alignment for DMA safety (git-fixes).
- iio: gyro: adis16080: Fix alignment for DMA safety (git-fixes).
- iio: gyro: adis16130: Fix alignment for DMA safety (git-fixes).
- iio: gyro: adxrs450: Fix alignment for DMA safety (git-fixes).
- iio: gyro: fxas210002c: Fix alignment for DMA safety (git-fixes).
- iio: light: isl29028: Fix the warning in isl29028_remove() (git-fixes).
- iio: potentiometer: ad5272: Fix alignment for DMA safety (git-fixes).
- iio: potentiometer: max5481: Fix alignment for DMA safety (git-fixes).
- iio: potentiometer: mcp41010: Fix alignment for DMA safety (git-fixes).
- iio: potentiometer: mcp4131: Fix alignment for DMA safety (git-fixes).
- iio: proximity: as3935: Fix alignment for DMA safety (git-fixes).
- iio: resolver: ad2s1200: Fix alignment for DMA safety (git-fixes).
- iio: resolver: ad2s90: Fix alignment for DMA safety (git-fixes).
- ima: Fix a potential integer overflow in ima_appraise_measurement (git-fixes).
- ima: Fix potential memory leak in ima_init_crypto() (git-fixes).
- intel_th: Fix a resource leak in an error handling path (git-fixes).
- intel_th: msu-sink: Potential dereference of null pointer (git-fixes).
- intel_th: msu: Fix vmalloced buffers (git-fixes).
- kABI workaround for rtsx_usb (git-fixes).
- kabi: create module private struct to hold btf size/data (jsc#SLE-24559).
- kbuild: Build kernel module BTFs if BTF is enabled and pahole supports it (jsc#SLE-24559).
- kbuild: Skip module BTF generation for out-of-tree external modules (jsc#SLE-24559).
- kbuild: add marker for build log of *.mod.o (jsc#SLE-24559).
- kbuild: drop $(wildcard $^) check in if_changed* for faster rebuild (jsc#SLE-24559).
- kbuild: rebuild modules when module linker scripts are updated (jsc#SLE-24559).
- kbuild: rename any-prereq to newer-prereqs (jsc#SLE-24559).
- kbuild: split final module linking out into Makefile.modfinal (jsc#SLE-24559).
- lib/string.c: implement stpcpy (git-fixes).
- linux/random.h: Mark CONFIG_ARCH_RANDOM functions __must_check (git-fixes).
- linux/random.h: Remove arch_has_random, arch_has_random_seed (git-fixes).
- linux/random.h: Use false with bool (git-fixes).
- lkdtm: Disable return thunks in rodata.c (bsc#1178134).
- macvlan: remove redundant null check on data (git-fixes).
- md/bitmap: wait for external bitmap writes to complete during tear down (git-fixes).
- md/raid0: Ignore RAID0 layout if the second zone has only one device (git-fixes).
- md: Set prev_flush_start and flush_bio in an atomic way (git-fixes).
- md: bcache: check the return value of kzalloc() in detached_dev_do_request() (git-fixes).
- media: hdpvr: fix error value returns in hdpvr_read (git-fixes).
- media: rc: increase rc-mm tolerance and add debug message (git-fixes).
- media: rtl28xxu: Add support for PROlectrix DV107669 DVB-T dongle (git-fixes).
- media: rtl28xxu: add missing sleep before probing slave demod (git-fixes).
- media: rtl28xxu: set keymap for Astrometa DVB-T2 (git-fixes).
- media: smipcie: fix interrupt handling and IR timeout (git-fixes).
- media: tw686x: Register the irq at the end of probe (git-fixes).
- media: usb: dvb-usb-v2: rtl28xxu: convert to use i2c_new_client_device() (git-fixes).
- media: v4l2-mem2mem: always consider OUTPUT queue during poll (git-fixes).
- media: v4l2-mem2mem: reorder checks in v4l2_m2m_poll() (git-fixes).
- mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init() (git-fixes).
- memregion: Fix memregion_free() fallback definition (git-fixes).
- memstick/ms_block: Fix a memory leak (git-fixes).
- memstick/ms_block: Fix some incorrect memory allocation (git-fixes).
- meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init (git-fixes).
- misc: rtsx: Fix an error handling path in rtsx_pci_probe() (git-fixes).
- misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer (git-fixes).
- misc: rtsx_usb: set return value in rsp_buf alloc err path (git-fixes).
- misc: rtsx_usb: use separate command and response buffers (git-fixes).
- mm/slub: add missing TID updates on slab deactivation (git-fixes).
- mm: fix page reference leak in soft_offline_page() (git fixes (mm/memory-failure)).
- mmc: cavium-octeon: Add of_node_put() when breaking out of loop (git-fixes).
- mmc: cavium-thunderx: Add of_node_put() when breaking out of loop (git-fixes).
- mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R (git-fixes).
- mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch (git-fixes).
- mt7601u: add USB device ID for some versions of XiaoDu WiFi Dongle (git-fixes).
- mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg (git-fixes).
- net, xdp: Introduce __xdp_build_skb_from_frame utility routine (bsc#1199364).
- net, xdp: Introduce xdp_build_skb_from_frame utility routine (bsc#1199364).
- net/mlx5e: When changing XDP program without reset, take refs for XSK RQs (git-fixes).
- net/sonic: Fix some resource leaks in error handling paths (git-fixes).
- net: ag71xx: remove unnecessary MTU reservation (git-fixes).
- net: allwinner: Fix some resources leak in the error handling path of the probe and in the remove function (git-fixes).
- net: amd-xgbe: Fix NETDEV WATCHDOG transmit queue timeout warning (git-fixes).
- net: amd-xgbe: Fix network fluctuations when using 1G BELFUSE SFP (git-fixes).
- net: amd-xgbe: Reset link when the link never comes back (git-fixes).
- net: amd-xgbe: Reset the PHY rx data path when mailbox command timeout (git-fixes).
- net: axienet: Handle deferred probe on clock properly (git-fixes).
- net: dsa: bcm_sf2: Qualify phydev-&gt;dev_flags based on port (git-fixes).
- net: dsa: bcm_sf2: put device node before return (git-fixes).
- net: dsa: lantiq_gswip: Exclude RMII from modes that report 1 GbE (git-fixes).
- net: dsa: lantiq_gswip: Let GSWIP automatically set the xMII clock (git-fixes).
- net: enetc: fix incorrect TPID when receiving 802.1ad tagged packets (git-fixes).
- net: enetc: keep RX ring consumer index in sync with hardware (git-fixes).
- net: evaluate net.ipv4.conf.all.proxy_arp_pvlan (git-fixes).
- net: evaluate net.ipvX.conf.all.ignore_routes_with_linkdown (git-fixes).
- net: hns3: fix error mask definition of flow director (git-fixes).
- net: hso: bail out on interrupt URB allocation failure (git-fixes).
- net: lapbether: Remove netif_start_queue / netif_stop_queue (git-fixes).
- net: ll_temac: Fix potential NULL dereference in temac_probe() (git-fixes).
- net: ll_temac: Use devm_platform_ioremap_resource_byname() (git-fixes).
- net: macb: add function to disable all macb clocks (git-fixes).
- net: macb: restore cmp registers on resume path (git-fixes).
- net: macb: unprepare clocks in case of failure (git-fixes).
- net: mscc: Fix OF_MDIO config check (git-fixes).
- net: mvneta: Remove per-cpu queue mapping for Armada 3700 (git-fixes).
- net: rose: fix UAF bug caused by rose_t0timer_expiry (git-fixes).
- net: stmmac: dwmac-sun8i: Provide TX and RX fifo sizes (git-fixes).
- net: stmmac: dwmac1000: provide multicast filter fallback (git-fixes).
- net: stmmac: fix CBS idleslope and sendslope calculation (git-fixes).
- net: stmmac: fix incorrect DMA channel intr enable setting of EQoS v4.10 (git-fixes).
- net: stmmac: fix watchdog timeout during suspend/resume stress test (git-fixes).
- net: stmmac: stop each tx channel independently (git-fixes).
- net: tun: set tun-&gt;dev-&gt;addr_len during TUNSETLINK processing (git-fixes).
- net: usb: ax88179_178a: add Allied Telesis AT-UMCs (git-fixes).
- net: usb: ax88179_178a: add MCT usb 3.0 adapter (git-fixes).
- net: usb: ax88179_178a: add Toshiba usb 3.0 adapter (git-fixes).
- net: usb: ax88179_178a: remove redundant assignment to variable ret (git-fixes).
- net: usb: ax88179_178a: write mac to hardware in get_mac_addr (git-fixes).
- net: usb: qmi_wwan: add Telit 0x1060 composition (git-fixes).
- net: usb: qmi_wwan: add Telit 0x1070 composition (git-fixes).
- net: usb: use eth_hw_addr_set() (git-fixes).
- nvme: consider also host_iface when checking ip options (bsc#1199670).
- octeontx2-af: fix memory leak of lmac and lmac-&gt;name (git-fixes).
- pinctrl: sunxi: a83t: Fix NAND function name for some pins (git-fixes).
- pinctrl: sunxi: sunxi_pconf_set: use correct offset (git-fixes).
- platform/olpc: Fix uninitialized data in debugfs write (git-fixes).
- platform/x86: hp-wmi: Ignore Sanitization Mode event (git-fixes).
- power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe (git-fixes).
- powerpc/mobility: wait for memory transfer to complete (bsc#1201846 ltc#198761).
- powerpc/pseries/mobility: set NMI watchdog factor during an LPM (bsc#1201846 ltc#198761).
- powerpc/watchdog: introduce a NMI watchdog's factor (bsc#1201846 ltc#198761).
- profiling: fix shift-out-of-bounds bugs (git fixes).
- qla2xxx: drop patch which prevented nvme port discovery (bsc#1200651 bsc#1200644 bsc#1201954 bsc#1201958).
- r8169: fix accessing unset transport header (git-fixes).
- random: document add_hwgenerator_randomness() with other input functions (git-fixes).
- random: fix typo in comments (git-fixes).
- random: remove useless header comment (git fixes).
- raw: Fix a data-race around sysctl_raw_l3mdev_accept (git-fixes).
- regulator: of: Fix refcount leak bug in of_get_regulation_constraints() (git-fixes).
- rpm/kernel-binary.spec.in: Require dwarves &gt;= 1.22 on SLE15-SP3 or newer Dwarves 1.22 or newer is required to build kernels with BTF information embedded in modules.
- sched/debug: Remove mpol_get/put and task_lock/unlock from (git-fixes)
- sched/fair: Revise comment about lb decision matrix (git fixes (sched/fair)).
- sched/membarrier: fix missing local execution of ipi_sync_rq_state() (git fixes (sched/membarrier)).
- scripts: dummy-tools, add pahole (jsc#SLE-24559).
- scsi: core: Fix error handling of scsi_host_alloc() (git-fixes).
- scsi: core: Fix failure handling of scsi_add_host_with_dma() (git-fixes).
- scsi: core: Only put parent device if host state differs from SHOST_CREATED (git-fixes).
- scsi: core: Put .shost_dev in failure path if host state changes to RUNNING (git-fixes).
- scsi: core: Put LLD module refcnt after SCSI device is released (git-fixes).
- scsi: core: Retry I/O for Notify (Enable Spinup) Required error (git-fixes).
- scsi: lpfc: Copyright updates for 14.2.0.5 patches (bsc#1201956).
- scsi: lpfc: Fix attempted FA-PWWN usage after feature disable (bsc#1201956).
- scsi: lpfc: Fix lost NVMe paths during LIF bounce stress test (bsc#1201956 bsc#1200521).
- scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE (bsc#1201956).
- scsi: lpfc: Fix uninitialized cqe field in lpfc_nvme_cancel_iocb() (bsc#1201956).
- scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input (bsc#1201956).
- scsi: lpfc: Refactor lpfc_nvmet_prep_abort_wqe() into lpfc_sli_prep_abort_xri() (bsc#1201956).
- scsi: lpfc: Remove Menlo/Hornet related code (bsc#1201956).
- scsi: lpfc: Remove extra atomic_inc on cmd_pending in queuecommand after VMID (bsc#1201956).
- scsi: lpfc: Revert RSCN_MEMENTO workaround for misbehaved configuration (bsc#1201956).
- scsi: lpfc: Set PU field when providing D_ID in XMIT_ELS_RSP64_CX iocb (bsc#1201956).
- scsi: lpfc: Update lpfc version to 14.2.0.5 (bsc#1201956).
- scsi: qla2xxx: Check correct variable in qla24xx_async_gffid() (bsc#1201958).
- scsi: qla2xxx: Fix discovery issues in FC-AL topology (bsc#1201958).
- scsi: qla2xxx: Fix imbalance vha-&gt;vref_count (bsc#1201958).
- scsi: qla2xxx: Fix incorrect display of max frame size (bsc#1201958).
- scsi: qla2xxx: Fix response queue handler reading stale packets (bsc#1201958).
- scsi: qla2xxx: Fix sparse warning for dport_data (bsc#1201958).
- scsi: qla2xxx: Update manufacturer details (bsc#1201958).
- scsi: qla2xxx: Update version to 10.02.07.800-k (bsc#1201958).
- scsi: qla2xxx: Zero undefined mailbox IN registers (bsc#1201958).
- scsi: qla2xxx: edif: Fix dropped IKE message (bsc#1201958).
- scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() (git-fixes).
- scsi: sd: Fix potential NULL pointer dereference (git-fixes).
- scsi: ufs: Release clock if DMA map fails (git-fixes).
- scsi: ufs: handle cleanup correctly on devm_reset_control_get error (git-fixes).
- serial: 8250: fix return error code in serial8250_request_std_resource() (git-fixes).
- serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle (git-fixes).
- serial: stm32: Clear prev values before setting RTS delays (git-fixes).
- soc: fsl: guts: machine variable might be unset (git-fixes).
- soc: ixp4xx/npe: Fix unused match warning (git-fixes).
- soundwire: bus_type: fix remove and shutdown support (git-fixes).
- spi: &amp;lt;linux/spi/spi.h&gt;: add missing struct kernel-doc entry (git-fixes).
- spi: amd: Limit max transfer and message size (git-fixes).
- staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback (git-fixes).
- sysctl: Fix data races in proc_dointvec() (git-fixes).
- sysctl: Fix data races in proc_dointvec_jiffies() (git-fixes).
- sysctl: Fix data races in proc_dointvec_minmax() (git-fixes).
- sysctl: Fix data races in proc_douintvec() (git-fixes).
- sysctl: Fix data races in proc_douintvec_minmax() (git-fixes).
- sysctl: Fix data-races in proc_dointvec_ms_jiffies() (git-fixes).
- thermal/tools/tmon: Include pthread and time headers in tmon.h (git-fixes).
- tick/nohz: Use WARN_ON_ONCE() to prevent console saturation (git fixes (kernel/time)).
- usb: dwc3: add cancelled reasons for dwc3 requests (git-fixes).
- usb: dwc3: gadget: Fix event pending check (git-fixes).
- usb: gadget: udc: amd5536 depends on HAS_DMA (git-fixes).
- usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe (git-fixes).
- usb: host: xhci: use snprintf() in xhci_decode_trb() (git-fixes).
- usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe (git-fixes).
- usb: typec: add missing uevent when partner support PD (git-fixes).
- usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion (git-fixes).
- usb: xhci: tegra: Fix error check (git-fixes).
- usbnet: fix memory leak in error case (git-fixes).
- video: of_display_timing.h: include errno.h (git-fixes).
- virtio-gpu: fix a missing check to avoid NULL dereference (git-fixes).
- virtio-net: fix the race between refill work and close (git-fixes).
- virtio_mmio: Add missing PM calls to freeze/restore (git-fixes).
- virtio_mmio: Restore guest page size on resume (git-fixes).
- watchdog: export lockup_detector_reconfigure (bsc#1201846 ltc#198761).
- wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd() (git-fixes).
- wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue (git-fixes).
- wifi: libertas: Fix possible refcount leak in if_usb_probe() (git-fixes).
- wifi: mac80211: fix queue selection for mesh/OCB interfaces (git-fixes).
- wifi: p54: Fix an error handling path in p54spi_probe() (git-fixes).
- wifi: p54: add missing parentheses in p54_flush() (git-fixes).
- wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c() (git-fixes).
- wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() (git-fixes).
- wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` (git-fixes).
- x86/bugs: Remove apostrophe typo (bsc#1178134).
- x86/kvmclock: Move this_cpu_pvti into kvmclock.h (git-fixes).
- x86/retbleed: Add fine grained Kconfig knobs (bsc#1178134).
- xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue (bsc#1201381).
- xen: detect uninitialized xenbus in xenbus_init (git-fixes).
- xen: do not continue xenstore initialization in case of errors (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.3.18" release="150300.59.90.1" arch="nosrc" src="nosrc/kernel-default-5.3.18-150300.59.90.1.nosrc.rpm">
          <filename>kernel-default-5.3.18-150300.59.90.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.3.18" release="150300.59.90.1" arch="x86_64" src="x86_64/kernel-default-5.3.18-150300.59.90.1.x86_64.rpm">
          <filename>kernel-default-5.3.18-150300.59.90.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.3.18" release="150300.59.90.1.150300.18.52.1" arch="src" src="src/kernel-default-base-5.3.18-150300.59.90.1.150300.18.52.1.src.rpm">
          <filename>kernel-default-base-5.3.18-150300.59.90.1.150300.18.52.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.3.18" release="150300.59.90.1.150300.18.52.1" arch="x86_64" src="x86_64/kernel-default-base-5.3.18-150300.59.90.1.150300.18.52.1.x86_64.rpm">
          <filename>kernel-default-base-5.3.18-150300.59.90.1.150300.18.52.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.3.18" release="150300.59.90.1" arch="aarch64" src="aarch64/kernel-default-5.3.18-150300.59.90.1.aarch64.rpm">
          <filename>kernel-default-5.3.18-150300.59.90.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.3.18" release="150300.59.90.1.150300.18.52.1" arch="aarch64" src="aarch64/kernel-default-base-5.3.18-150300.59.90.1.150300.18.52.1.aarch64.rpm">
          <filename>kernel-default-base-5.3.18-150300.59.90.1.150300.18.52.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3151</id>
    <title>Recommended update for open-iscsi</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1662546068"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200570" id="1200570" title="[Build 20220614-1] openQA test fails in iscsi_client - Configuration file /usr/lib/systemd/system/iscsi* is marked executable." type="bugzilla"/>
    </references>
    <description>This update for open-iscsi fixes the following issues:

- Modify SPEC file so systemd unit files are mode 644 (not 755) (bsc#1200570)
- On Tumbleweed, moved logrotate files from user-specific directory /etc/logrotate.d 
  to vendor-specific /usr/etc/logrotate.d
</description>
    <pkglist>
      <collection>
        <package name="iscsiuio" epoch="0" version="0.7.8.6" release="150300.32.21.1" arch="x86_64" src="x86_64/iscsiuio-0.7.8.6-150300.32.21.1.x86_64.rpm">
          <filename>iscsiuio-0.7.8.6-150300.32.21.1.x86_64.rpm</filename>
        </package>
        <package name="libopeniscsiusr0_2_0" epoch="0" version="2.1.7" release="150300.32.21.1" arch="x86_64" src="x86_64/libopeniscsiusr0_2_0-2.1.7-150300.32.21.1.x86_64.rpm">
          <filename>libopeniscsiusr0_2_0-2.1.7-150300.32.21.1.x86_64.rpm</filename>
        </package>
        <package name="open-iscsi" epoch="0" version="2.1.7" release="150300.32.21.1" arch="src" src="src/open-iscsi-2.1.7-150300.32.21.1.src.rpm">
          <filename>open-iscsi-2.1.7-150300.32.21.1.src.rpm</filename>
        </package>
        <package name="open-iscsi" epoch="0" version="2.1.7" release="150300.32.21.1" arch="x86_64" src="x86_64/open-iscsi-2.1.7-150300.32.21.1.x86_64.rpm">
          <filename>open-iscsi-2.1.7-150300.32.21.1.x86_64.rpm</filename>
        </package>
        <package name="iscsiuio" epoch="0" version="0.7.8.6" release="150300.32.21.1" arch="aarch64" src="aarch64/iscsiuio-0.7.8.6-150300.32.21.1.aarch64.rpm">
          <filename>iscsiuio-0.7.8.6-150300.32.21.1.aarch64.rpm</filename>
        </package>
        <package name="libopeniscsiusr0_2_0" epoch="0" version="2.1.7" release="150300.32.21.1" arch="aarch64" src="aarch64/libopeniscsiusr0_2_0-2.1.7-150300.32.21.1.aarch64.rpm">
          <filename>libopeniscsiusr0_2_0-2.1.7-150300.32.21.1.aarch64.rpm</filename>
        </package>
        <package name="open-iscsi" epoch="0" version="2.1.7" release="150300.32.21.1" arch="aarch64" src="aarch64/open-iscsi-2.1.7-150300.32.21.1.aarch64.rpm">
          <filename>open-iscsi-2.1.7-150300.32.21.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2947</id>
    <title>Security update for zlib</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1661930221"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202175" id="1202175" title="VUL-0: CVE-2022-37434: zlib: heap-based buffer over-read or buffer overflow in inflate.c via a large gzip header extra field" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434" id="CVE-2022-37434" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434" type="cve"/>
    </references>
    <description>This update for zlib fixes the following issues:

- CVE-2022-37434: Fixed heap-based buffer over-read or buffer overflow via large gzip header extra field (bsc#1202175).
</description>
    <pkglist>
      <collection>
        <package name="libz1" epoch="0" version="1.2.11" release="150000.3.33.1" arch="x86_64" src="x86_64/libz1-1.2.11-150000.3.33.1.x86_64.rpm">
          <filename>libz1-1.2.11-150000.3.33.1.x86_64.rpm</filename>
        </package>
        <package name="zlib" epoch="0" version="1.2.11" release="150000.3.33.1" arch="src" src="src/zlib-1.2.11-150000.3.33.1.src.rpm">
          <filename>zlib-1.2.11-150000.3.33.1.src.rpm</filename>
        </package>
        <package name="libz1" epoch="0" version="1.2.11" release="150000.3.33.1" arch="aarch64" src="aarch64/libz1-1.2.11-150000.3.33.1.aarch64.rpm">
          <filename>libz1-1.2.11-150000.3.33.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3241</id>
    <title>Recommended update for cups</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1662960086"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201511" id="1201511" title="L3-Question: Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0" type="bugzilla"/>
    </references>
    <description>This update for cups fixes the following issues:

- Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0 (bsc#1201511)
</description>
    <pkglist>
      <collection>
        <package name="cups" epoch="0" version="2.2.7" release="150000.3.35.1" arch="src" src="src/cups-2.2.7-150000.3.35.1.src.rpm">
          <filename>cups-2.2.7-150000.3.35.1.src.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.35.1" arch="x86_64" src="x86_64/cups-config-2.2.7-150000.3.35.1.x86_64.rpm">
          <filename>cups-config-2.2.7-150000.3.35.1.x86_64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.35.1" arch="x86_64" src="x86_64/libcups2-2.2.7-150000.3.35.1.x86_64.rpm">
          <filename>libcups2-2.2.7-150000.3.35.1.x86_64.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.2.7" release="150000.3.35.1" arch="aarch64" src="aarch64/cups-config-2.2.7-150000.3.35.1.aarch64.rpm">
          <filename>cups-config-2.2.7-150000.3.35.1.aarch64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.2.7" release="150000.3.35.1" arch="aarch64" src="aarch64/libcups2-2.2.7-150000.3.35.1.aarch64.rpm">
          <filename>libcups2-2.2.7-150000.3.35.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2960</id>
    <title>Security update for ucode-intel</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1661944318"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201727" id="1201727" title="VUL-0:  CVE-2022-21233: ucode-intel: CPU stale data read from xAPIC" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21233" id="CVE-2022-21233" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21233" type="cve"/>
    </references>
    <description>This update for ucode-intel fixes the following issues:

Updated to Intel CPU Microcode 20220809 release (bsc#1201727):

- CVE-2022-21233: Fixed an issue where stale data may have been leaked from the legacy xAPIC MMIO region, which could be used to compromise an SGX enclave (INTEL-SA-00657).
    See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00657.html

Other fixes:

- Update for functional issues.
    See also: https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update

- Updated Platforms:

  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SKX-SP         | B1       | 06-55-03/97 | 0100015d | 0100015e | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon D-21xx
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000363 | 0d000375 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 0000003a | 0000003c | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GLK-R          | R0       | 06-7a-08/01 | 0000001e | 00000020 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b0 | 000000b2 | Core Gen10 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000026 | 00000028 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 0000003e | 00000040 | Core Gen11 Mobile
  | RKL-S          | B0       | 06-a7-01/02 | 00000053 | 00000054 | Core Gen11
  | ADL            | C0       | 06-97-02/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | C0       | 06-97-05/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 0000041c | 00000421 | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 0000041c | 00000421 | Core Gen12
  | ADL            | C0       | 06-bf-02/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | C0       | 06-bf-05/03 | 0000001f | 00000022 | Core Gen12
  ------------------------------------------------------------------
</description>
    <pkglist>
      <collection>
        <package name="ucode-intel" epoch="0" version="20220809" release="150200.18.1" arch="src" src="src/ucode-intel-20220809-150200.18.1.src.rpm">
          <filename>ucode-intel-20220809-150200.18.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="ucode-intel" epoch="0" version="20220809" release="150200.18.1" arch="x86_64" src="x86_64/ucode-intel-20220809-150200.18.1.x86_64.rpm">
          <filename>ucode-intel-20220809-150200.18.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3162</id>
    <title>Security update for libyajl</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1662556081"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24795" id="CVE-2022-24795" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24795" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198405" id="1198405" title="VUL-0: CVE-2022-24795: libyajl,rubygem-yajl-ruby: heap-based buffer overflow when handling large inputs due to an integer overflow" type="bugzilla"/>
    </references>
    <description>This update for libyajl fixes the following issues:

- CVE-2022-24795: Fixed heap-based buffer overflow when handling large inputs (bsc#1198405).
</description>
    <pkglist>
      <collection>
        <package name="libyajl" epoch="0" version="2.1.0" release="150000.4.3.1" arch="src" src="src/libyajl-2.1.0-150000.4.3.1.src.rpm">
          <filename>libyajl-2.1.0-150000.4.3.1.src.rpm</filename>
        </package>
        <package name="libyajl2" epoch="0" version="2.1.0" release="150000.4.3.1" arch="x86_64" src="x86_64/libyajl2-2.1.0-150000.4.3.1.x86_64.rpm">
          <filename>libyajl2-2.1.0-150000.4.3.1.x86_64.rpm</filename>
        </package>
        <package name="libyajl2" epoch="0" version="2.1.0" release="150000.4.3.1" arch="aarch64" src="aarch64/libyajl2-2.1.0-150000.4.3.1.aarch64.rpm">
          <filename>libyajl2-2.1.0-150000.4.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2959</id>
    <title>Security update for rsync</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1661944234"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29154" id="CVE-2022-29154" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29154" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201840" id="1201840" title="VUL-0: CVE-2022-29154: rsync: arbitrary file write vulnerability via do_server_recv function" type="bugzilla"/>
    </references>
    <description>This update for rsync fixes the following issues:

- CVE-2022-29154: Fixed an arbitrary file write issue that could be
  triggered by a malicious remote server (bsc#1201840).
</description>
    <pkglist>
      <collection>
        <package name="rsync" epoch="0" version="3.1.3" release="150000.4.13.1" arch="src" src="src/rsync-3.1.3-150000.4.13.1.src.rpm">
          <filename>rsync-3.1.3-150000.4.13.1.src.rpm</filename>
        </package>
        <package name="rsync" epoch="0" version="3.1.3" release="150000.4.13.1" arch="x86_64" src="x86_64/rsync-3.1.3-150000.4.13.1.x86_64.rpm">
          <filename>rsync-3.1.3-150000.4.13.1.x86_64.rpm</filename>
        </package>
        <package name="rsync" epoch="0" version="3.1.3" release="150000.4.13.1" arch="aarch64" src="aarch64/rsync-3.1.3-150000.4.13.1.aarch64.rpm">
          <filename>rsync-3.1.3-150000.4.13.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2844</id>
    <title>Recommended update for tar</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1660826511"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202436" id="1202436" title="tar hang unpacking test data from gcc" type="bugzilla"/>
    </references>
    <description>This update for tar fixes the following issues:

- A regression in a previous update lead to potential deadlocks when extracting an archive. (bsc#1202436)

 </description>
    <pkglist>
      <collection>
        <package name="tar" epoch="0" version="1.34" release="150000.3.18.1" arch="src" src="src/tar-1.34-150000.3.18.1.src.rpm">
          <filename>tar-1.34-150000.3.18.1.src.rpm</filename>
        </package>
        <package name="tar" epoch="0" version="1.34" release="150000.3.18.1" arch="x86_64" src="x86_64/tar-1.34-150000.3.18.1.x86_64.rpm">
          <filename>tar-1.34-150000.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="tar" epoch="0" version="1.34" release="150000.3.18.1" arch="aarch64" src="aarch64/tar-1.34-150000.3.18.1.aarch64.rpm">
          <filename>tar-1.34-150000.3.18.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2921</id>
    <title>Recommended update for systemd</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1661519891"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195059" id="1195059" title="[Build84.1][Host Upgrade][Offline] Host can not fully boot up and user has difficulty in login after upgrade from 12sp5 to 15sp4" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-944" id="PED-944" title="https://jira.suse.com/browse/PED-944" type="jira"/>
    </references>
    <description>This update for systemd fixes the following issues:

- Drop or soften some of the deprecation warnings (jsc#PED-944)
- Ensure root user can login even if systemd-user-sessions.service is not activated yet (bsc#1195059)
- tmpfiles: check for the correct directory
</description>
    <pkglist>
      <collection>
        <package name="libsystemd0" epoch="0" version="246.16" release="150300.7.51.1" arch="x86_64" src="x86_64/libsystemd0-246.16-150300.7.51.1.x86_64.rpm">
          <filename>libsystemd0-246.16-150300.7.51.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1" epoch="0" version="246.16" release="150300.7.51.1" arch="x86_64" src="x86_64/libudev1-246.16-150300.7.51.1.x86_64.rpm">
          <filename>libudev1-246.16-150300.7.51.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="246.16" release="150300.7.51.1" arch="src" src="src/systemd-246.16-150300.7.51.1.src.rpm">
          <filename>systemd-246.16-150300.7.51.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="246.16" release="150300.7.51.1" arch="x86_64" src="x86_64/systemd-246.16-150300.7.51.1.x86_64.rpm">
          <filename>systemd-246.16-150300.7.51.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container" epoch="0" version="246.16" release="150300.7.51.1" arch="x86_64" src="x86_64/systemd-container-246.16-150300.7.51.1.x86_64.rpm">
          <filename>systemd-container-246.16-150300.7.51.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="246.16" release="150300.7.51.1" arch="x86_64" src="x86_64/systemd-journal-remote-246.16-150300.7.51.1.x86_64.rpm">
          <filename>systemd-journal-remote-246.16-150300.7.51.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="246.16" release="150300.7.51.1" arch="x86_64" src="x86_64/systemd-sysvinit-246.16-150300.7.51.1.x86_64.rpm">
          <filename>systemd-sysvinit-246.16-150300.7.51.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev" epoch="0" version="246.16" release="150300.7.51.1" arch="x86_64" src="x86_64/udev-246.16-150300.7.51.1.x86_64.rpm">
          <filename>udev-246.16-150300.7.51.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libsystemd0" epoch="0" version="246.16" release="150300.7.51.1" arch="aarch64" src="aarch64/libsystemd0-246.16-150300.7.51.1.aarch64.rpm">
          <filename>libsystemd0-246.16-150300.7.51.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1" epoch="0" version="246.16" release="150300.7.51.1" arch="aarch64" src="aarch64/libudev1-246.16-150300.7.51.1.aarch64.rpm">
          <filename>libudev1-246.16-150300.7.51.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="246.16" release="150300.7.51.1" arch="aarch64" src="aarch64/systemd-246.16-150300.7.51.1.aarch64.rpm">
          <filename>systemd-246.16-150300.7.51.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container" epoch="0" version="246.16" release="150300.7.51.1" arch="aarch64" src="aarch64/systemd-container-246.16-150300.7.51.1.aarch64.rpm">
          <filename>systemd-container-246.16-150300.7.51.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="246.16" release="150300.7.51.1" arch="aarch64" src="aarch64/systemd-journal-remote-246.16-150300.7.51.1.aarch64.rpm">
          <filename>systemd-journal-remote-246.16-150300.7.51.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-sysvinit" epoch="0" version="246.16" release="150300.7.51.1" arch="aarch64" src="aarch64/systemd-sysvinit-246.16-150300.7.51.1.aarch64.rpm">
          <filename>systemd-sysvinit-246.16-150300.7.51.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev" epoch="0" version="246.16" release="150300.7.51.1" arch="aarch64" src="aarch64/udev-246.16-150300.7.51.1.aarch64.rpm">
          <filename>udev-246.16-150300.7.51.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2881</id>
    <title>Security update for spice</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1661327277"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1181686" id="1181686" title="VUL-0: CVE-2021-20201: spice,spice-gtk: client initiated renegotiation denial of service" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20201" id="CVE-2021-20201" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20201" type="cve"/>
    </references>
    <description>This update for spice fixes the following issues:

- CVE-2021-20201: Fixed an issue which could allow clients to cause a
  denial of service by repeatedly renegotiating a connection (bsc#1181686).
</description>
    <pkglist>
      <collection>
        <package name="libspice-server1" epoch="0" version="0.14.3" release="150300.3.3.1" arch="x86_64" src="x86_64/libspice-server1-0.14.3-150300.3.3.1.x86_64.rpm">
          <filename>libspice-server1-0.14.3-150300.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="spice" epoch="0" version="0.14.3" release="150300.3.3.1" arch="src" src="src/spice-0.14.3-150300.3.3.1.src.rpm">
          <filename>spice-0.14.3-150300.3.3.1.src.rpm</filename>
        </package>
        <package name="libspice-server1" epoch="0" version="0.14.3" release="150300.3.3.1" arch="aarch64" src="aarch64/libspice-server1-0.14.3-150300.3.3.1.aarch64.rpm">
          <filename>libspice-server1-0.14.3-150300.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3142</id>
    <title>Security update for icu</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1662537302"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21913" id="CVE-2020-21913" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21913" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193951" id="1193951" title="VUL-0: CVE-2020-21913: icu: Use after free in pkg_createWithAssemblyCode function in tools/pkgdata/pkgdata.cpp" type="bugzilla"/>
    </references>
    <description>This update for icu fixes the following issues:

- CVE-2020-21913: Fixed a memory safetey issue that could lead to use
  after free (bsc#1193951).
</description>
    <pkglist>
      <collection>
        <package name="icu" epoch="0" version="65.1" release="150200.4.5.1" arch="src" src="src/icu-65.1-150200.4.5.1.src.rpm">
          <filename>icu-65.1-150200.4.5.1.src.rpm</filename>
        </package>
        <package name="libicu-suse65_1" epoch="0" version="65.1" release="150200.4.5.1" arch="x86_64" src="x86_64/libicu-suse65_1-65.1-150200.4.5.1.x86_64.rpm">
          <filename>libicu-suse65_1-65.1-150200.4.5.1.x86_64.rpm</filename>
        </package>
        <package name="libicu65_1-ledata" epoch="0" version="65.1" release="150200.4.5.1" arch="noarch" src="noarch/libicu65_1-ledata-65.1-150200.4.5.1.noarch.rpm">
          <filename>libicu65_1-ledata-65.1-150200.4.5.1.noarch.rpm</filename>
        </package>
        <package name="libicu-suse65_1" epoch="0" version="65.1" release="150200.4.5.1" arch="aarch64" src="aarch64/libicu-suse65_1-65.1-150200.4.5.1.aarch64.rpm">
          <filename>libicu-suse65_1-65.1-150200.4.5.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2892</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1661418489"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1178134" id="1178134" title="[TRACKERBUG] git-fixes pile for SLE15-SP3" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196616" id="1196616" title="VUL-0: CVE-2020-36516: kernel-source-azure,kernel-source,kernel-source-rt: An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196867" id="1196867" title="VUL-1: CVE-2020-36516: kernel live patch: An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198829" id="1198829" title="VUL-0: CVE-2022-1462: kernel-source,kernel-source-rt,kernel-source-azure: A race condition vulnerability in drivers/tty/tty_buffers.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199364" id="1199364" title="hv_netvsc: Add support for XDP_REDIRECT" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199647" id="1199647" title="VUL-0: CVE-2022-1116: kernel-source-azure,kernel-source-rt,kernel-source: Integer overflow in io_uring may lead to local privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199648" id="1199648" title="VUL-0: CVE-2022-1116: kernel live patch: Integer overflow in io_uring may lead to local privilege escalation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199665" id="1199665" title="VUL-0: CVE-2022-29581: kernel-source,kernel-source-rt,kernel-source-azure: Improper Update of Reference Count vulnerability in net/sched" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199670" id="1199670" title="[DELL SLES 15 SP3 BUG] - NVMe TCP controller resets/reconnections observed under stress" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199695" id="1199695" title="VUL-0: CVE-2022-29581: kernel live patch: Improper Update of Reference Count vulnerability in net/sched" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200521" id="1200521" title="[NetApp SLES15 SP3 Bug]: Path loss on Broadcom NVMe/FC MU host during ONTAP SFOs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200598" id="1200598" title="VUL-0: CVE-2022-20166: kernel-source-rt,kernel-source,kernel-source-azure: possible out of bounds write due to sprintf unsafety" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200644" id="1200644" title="L3: NVMe autoconnect fails with &quot;nvme_fc: nvme_fc_parse_traddr: bad traddr string&quot; error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200651" id="1200651" title="12SP5 4.12.14-122.116 breaks qla2xxx nvme over FC" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200762" id="1200762" title="VUL-0: CVE-2022-26365,CVE-2022-33740,CVE-2022-33741,CVE-2022-33742: xen: Linux disk/nic frontends data leaks (XSA-403)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200910" id="1200910" title="VUL-0:  CVE-2020-36558: kernel: use after free due to race condition between ioctl(VT_DISALLOCATE) and ioctl(VT_RESIZEX)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201196" id="1201196" title="With kernel 5.3.18-59.37-default or greater, kernel cashes in NFS v4 code,  when accessing certain NFS share" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201206" id="1201206" title="Macbook pro12 battery is not detected with the latest kernel update on Leap 15.3" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201251" id="1201251" title="VUL-0: CVE-2022-2318: kernel-source,kernel-source-rt,kernel-source-azure:  Use-after-free caused by timer handler in net/rose/rose_timer.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201381" id="1201381" title="L3: BUG: unable to handle kernel NULL pointer dereference at xenvif_rx_skb+0x23" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201429" id="1201429" title="VUL-0: CVE-2020-36557: kernel use after free due to race condition in ioctl(VT_DISALLOCATE)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201442" id="1201442" title="KVM: arm64: Avoid setting the upper 32 bits of TCR_EL2 and CPTR_EL2 to 1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201458" id="1201458" title="VUL-0: CVE-2022-21505: kernel lockdown bypass via IMA appraisal" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201635" id="1201635" title="VUL-0: CVE-2021-33655: kernel-source,kernel-source-azure,kernel-source-rt: Out of bounds write with ioctl cmd FBIOPUT_VSCREENINFO" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201636" id="1201636" title="VUL-0: CVE-2021-33656: kernel-source-azure,kernel-source,kernel-source-rt: When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201644" id="1201644" title="Kernel crashes on Dell PowerEdge R340 and R440 after latest kernel upgrade" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201645" id="1201645" title="Forced crash didn't result into expected reboot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201664" id="1201664" title="kernel 5.3.18-150300.59.81-default is continuously crashing on Supermicro X11DPU-Z+ (Intel Skylake SP)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201672" id="1201672" title="bad RIP value - kernel NULL pointer dereference address 0000000000000000" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201673" id="1201673" title="buggy kernel 5.3.18-150300.59.81 on SLES15-SP3 keeps crashing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201676" id="1201676" title="crashes on new 15-sp3 kernel (retbleed fallout?)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201742" id="1201742" title="VUL-0: CVE-2020-36557: kernel live patch: use after free due to race condition in ioctl(VT_DISALLOCATE)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201752" id="1201752" title="VUL-0:  CVE-2020-36558: kernel live patch: use after free due to race condition between ioctl(VT_DISALLOCATE) and ioctl(VT_RESIZEX)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201846" id="1201846" title="HSCLB60C HMC message and hard lockup log entries after 10 successful LPM operations (P10)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201930" id="1201930" title="Regression running some VM guests with 5.3.18-150300.59.87.1" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201940" id="1201940" title="VUL-0: CVE-2022-36946: kernel-source-azure,kernel-source,kernel-source-rt: incorrect packet truncation in nfqnl_mangle() leads to remote DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201941" id="1201941" title="VUL-0: CVE-2022-36946: kernel live patch: incorrect packet truncation in nfqnl_mangle() leads to remote DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201954" id="1201954" title="[NetApp SLES15 SP4 Bug] QLogic NVMe/FC broken after SP4 kernel MU upgrade" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201956" id="1201956" title="Update Broadcom Emulex lpfc driver to 14.2.0.5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201958" id="1201958" title="qla2xxx: update driver to 10.02.07.800-k" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202087" id="1202087" title="VUL-0: CVE-2021-33655: kernel live patch: Out of bounds write with ioctl cmd FBIOPUT_VSCREENINFO" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202154" id="1202154" title="VUL-0: CVE-2022-2639: kernel-source-azure,kernel-source,kernel-source-rt: integer underflow leads to out-of-bounds write in reserve_sfa_size()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202312" id="1202312" title="CVE-2022-36946 on SLES 12 SP2 Reactive LTSS: kernel-default" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2639" id="CVE-2022-2639" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2639" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36516" id="CVE-2020-36516" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36516" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36946" id="CVE-2022-36946" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36946" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29581" id="CVE-2022-29581" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29581" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20166" id="CVE-2022-20166" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20166" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36558" id="CVE-2020-36558" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36558" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36557" id="CVE-2020-36557" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36557" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21505" id="CVE-2022-21505" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21505" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33656" id="CVE-2021-33656" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33656" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33655" id="CVE-2021-33655" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33655" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1462" id="CVE-2022-1462" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1462" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1116" id="CVE-2022-1116" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1116" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2318" id="CVE-2022-2318" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2318" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33741" id="CVE-2022-33741" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33741" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33740" id="CVE-2022-33740" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33740" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33742" id="CVE-2022-33742" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33742" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26365" id="CVE-2022-26365" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26365" type="cve"/>
      <reference href="https://jira.suse.com/browse/SLE-24559" id="SLE-24559" title="https://jira.suse.com/browse/SLE-24559" type="jira"/>
    </references>
    <description>The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

- CVE-2022-2639: Fixed integer underflow that could lead to out-of-bounds write in reserve_sfa_size() (bsc#1202154).
- CVE-2020-36516: Fixed TCP session data injection vulnerability via the mixed IPID assignment method (bnc#1196616).
- CVE-2022-36946: Fixed an incorrect packet trucation operation which could lead to denial of service (bnc#1201940).
- CVE-2022-29581: Fixed improper update of Reference Count in net/sched that could cause root privilege escalation (bnc#1199665).
- CVE-2022-20166: Fixed several possible memory safety issues due to unsafe operations (bsc#1200598).
- CVE-2020-36558: Fixed a race condition involving VT_RESIZEX which could lead to a NULL pointer dereference and general protection fault (bnc#1200910).
- CVE-2020-36557: Fixed a race condition between the VT_DISALLOCATE ioctl and closing/opening of TTYs could lead to a use-after-free (bnc#1201429).
- CVE-2022-21505: Fixed kexec lockdown bypass with IMA policy (bsc#1201458).
- CVE-2021-33656: Fixed memory out of bounds write related to ioctl cmd PIO_FONT (bnc#1201636).
- CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635).
- CVE-2022-1462: Fixed an out-of-bounds read flaw in the TTY subsystem (bnc#1198829).
- CVE-2022-1116: Fixed a integer overflow vulnerability in io_uring which allowed a local attacker to cause memory corruption and escalate privileges to root (bnc#1199647).
- CVE-2022-2318: Fixed a use-after-free vulnerability in the timer handler in Rose subsystem that allowed unprivileged attackers to crash the system (bsc#1201251).
- CVE-2022-26365, CVE-2022-33740, CVE-2022-33741, CVE-2022-33742: Fixed multiple potential data leaks with Block and Network devices when using untrusted backends (bsc#1200762).

The following non-security bugs were fixed:

- Fix bsc#1201644, bsc#1201664, bsc#1201672, bsc#1201673, bsc#1201676 All are reports of the same problem - the IBRS_* regs push/popping was wrong but it needs 1b331eeea7b8 (&quot;x86/entry: Remove skip_r11rcx&quot;) too.
- ACPI: APEI: Better fix to avoid spamming the console with old error logs (git-fixes).
- ACPI: CPPC: Do not prevent CPPC from working in the future (git-fixes).
- ACPI: video: Shortening quirk list by identifying Clevo by board_name only (git-fixes).
- ALSA: hda - Add fixup for Dell Latitidue E5430 (git-fixes).
- ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model (git-fixes).
- ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop (git-fixes).
- ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc221 (git-fixes).
- ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 (git-fixes).
- ASoC: Intel: Skylake: Correct the handling of fmt_config flexible array (git-fixes).
- ASoC: Intel: Skylake: Correct the ssp rate discovery in skl_get_ssp_clks() (git-fixes).
- ASoC: Remove unused hw_write_t type (git-fixes).
- ASoC: cs47l15: Fix event generation for low power mux control (git-fixes).
- ASoC: madera: Fix event generation for OUT1 demux (git-fixes).
- ASoC: madera: Fix event generation for rate controls (git-fixes).
- ASoC: ops: Fix off by one in range control validation (git-fixes).
- ASoC: sgtl5000: Fix noise on shutdown/remove (git-fixes).
- ASoC: wm5110: Fix DRE control (git-fixes).
- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put (git-fixes).
- Bluetooth: hci_intel: Add check for platform_driver_register (git-fixes).
- Fixed a regression where smart batteries would not be detected on Mac (bsc#1201206).
- Fixed an issue where qla2xxx would prevent nvme port discovery (bsc#1200651 bsc#1200644 bsc#1201954 bsc#1201958).
- FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR (git-fixes).
- FDDI: defxx: Make MMIO the configuration default except for EISA (git-fixes).
- Fix 1201644, 1201664, 1201672, 1201673, 1201676 All are reports of the same problem - the IBRS_* regs push/popping was wrong but it needs 1b331eeea7b8 (&quot;x86/entry: Remove skip_r11rcx&quot;) too.
- HID: cp2112: prevent a buffer overflow in cp2112_xfer() (git-fixes).
- KVM: VMX: Add non-canonical check on writes to RTIT address MSRs (git-fixes).
- KVM: VMX: Do not freeze guest when event delivery causes an APIC-access exit (git-fixes).
- KVM: apic: avoid calculating pending eoi from an uninitialized val (git-fixes).
- KVM: arm64: Avoid setting the upper 32 bits of TCR_EL2 and CPTR_EL2 (bsc#1201442)
- KVM: arm64: Fix definition of PAGE_HYP_DEVICE (git-fixes)
- KVM: emulate: do not adjust size of fastop and setcc subroutines (bsc#1201930).
- KVM: nVMX: avoid NULL pointer dereference with incorrect EVMCS GPAs (git-fixes).
- KVM: nVMX: handle nested posted interrupts when apicv is disabled for L1 (git-fixes).
- KVM: x86: Do not let userspace set host-reserved cr4 bits (git-fixes).
- KVM: x86: Fix split-irqchip vs interrupt injection window request (git-fixes).
- KVM: x86: Refactor prefix decoding to prevent Spectre-v1/L1TF attacks (git-fixes).
- KVM: x86: handle !lapic_in_kernel case in kvm_cpu_*_extint (git-fixes).
- NFC: nxp-nci: do not print header length mismatch on i2c error (git-fixes).
- PCI/portdrv: Do not disable AER reporting in get_port_device_capability() (git-fixes).
- PCI: dwc: Add unroll iATU space support to dw_pcie_disable_atu() (git-fixes).
- PCI: dwc: Always enable CDM check if &quot;snps,enable-cdm-check&quot; exists (git-fixes).
- PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors (git-fixes).
- PCI: dwc: Disable outbound windows only for controllers using iATU (git-fixes).
- PCI: dwc: Stop link on host_init errors and de-initialization (git-fixes).
- PCI: qcom: Power on PHY before IPQ8074 DBI register accesses (git-fixes).
- PCI: qcom: Set up rev 2.1.0 PARF_PHY before enabling clocks (git-fixes).
- PCI: tegra194: Fix PM error handling in tegra_pcie_config_ep() (git-fixes).
- PCI: tegra194: Fix Root Port interrupt handling (git-fixes).
- PCI: tegra194: Fix link up retry sequence (git-fixes).
- PM: runtime: Remove link state checks in rpm_get/put_supplier() (git-fixes).
- USB: Follow-up to SPDX identifiers addition - remove now useless comments (git-fixes).
- USB: serial: fix tty-port initialized comments (git-fixes).
- USB: serial: ftdi_sio: add Belimo device ids (git-fixes).
- arm64 module: set plt* section addresses to 0x0 (git-fixes)
- arm64: asm: Add new-style position independent function annotations (git-fixes)
- arm64: compat: Ensure upper 32 bits of x0 are zero on syscall return (git-fixes)
- arm64: dts: marvell: armada-37xx: Set pcie_reset_pin to gpio function (git-fixes)
- arm64: dts: marvell: espressobin: Add ethernet switch aliases (git-fixes)
- arm64: dts: marvell: espressobin: add ethernet alias (git-fixes)
- arm64: dts: mcbin: support 2W SFP modules (git-fixes)
- arm64: fix compat syscall return truncation (git-fixes)
- arm64: fix inline asm in load_unaligned_zeropad() (git-fixes)
- arm64: mm: Do not invalidate FROM_DEVICE buffers at start of DMA (git-fixes)
- arm64: module: remove (NOLOAD) from linker script (git-fixes)
- arm64: module: rework special section handling (git-fixes)
- arm64: perf: Report the PC value in REGS_ABI_32 mode (git-fixes)
- arm64: ptrace: Consistently use pseudo-singlestep exceptions (git-fixes)
- arm64: ptrace: Override SPSR.SS when single-stepping is enabled (git-fixes)
- arm64: stackleak: fix current_top_of_stack() (git-fixes)
- arm64: uprobe: Return EOPNOTSUPP for AARCH32 instruction probing (git-fixes)
- arm64: vdso: Avoid ISB after reading from cntvct_el0 (git-fixes)
- ath10k: Fix error handling in ath10k_setup_msa_resources (git-fixes).
- ath10k: do not enforce interrupt trigger type (git-fixes).
- ax88179_178a: add ethtool_op_get_ts_info() (git-fixes).
- blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN (git-fixes).
- blk-zoned: allow zone management send operations without CAP_SYS_ADMIN (git-fixes).
- block/compat_ioctl: fix range check in BLKGETSIZE (git-fixes).
- block: Fix fsync always failed if once failed (git-fixes).
- block: Fix wrong offset in bio_truncate() (git-fixes).
- block: bio-integrity: Advance seed correctly for larger interval sizes (git-fixes).
- block: drbd: drbd_nl: Make conversion to 'enum drbd_ret_code' explicit (git-fixes).
- bpf, cpumap: Remove rcpu pointer from cpu_map_build_skb signature (bsc#1199364).
- bpf: enable BPF type format (BTF) (jsc#SLE-24559).
- bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe() (git-fixes).
- can: Break loopback loop on loopback documentation (git-fixes).
- can: error: specify the values of data[5..7] of CAN error frames (git-fixes).
- can: gs_usb: gs_usb_open/close(): fix memory leak (git-fixes).
- can: hi311x: do not report txerr and rxerr during bus-off (git-fixes).
- can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off (git-fixes).
- can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off (git-fixes).
- can: m_can: process interrupt only when not runtime suspended (git-fixes).
- can: pch_can: do not report txerr and rxerr during bus-off (git-fixes).
- can: pch_can: pch_can_error(): initialize errc before using it (git-fixes).
- can: rcar_can: do not report txerr and rxerr during bus-off (git-fixes).
- can: sja1000: do not report txerr and rxerr during bus-off (git-fixes).
- can: sun4i_can: do not report txerr and rxerr during bus-off (git-fixes).
- can: usb_8dev: do not report txerr and rxerr during bus-off (git-fixes).
- clk: qcom: camcc-sdm845: Fix topology around titan_top power domain (git-fixes).
- clk: qcom: clk-krait: unlock spin after mux completion (git-fixes).
- clk: qcom: ipq8074: SW workaround for UBI32 PLL lock (git-fixes).
- clk: qcom: ipq8074: fix NSS core PLL-s (git-fixes).
- clk: qcom: ipq8074: fix NSS port frequency tables (git-fixes).
- clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks (git-fixes).
- clk: renesas: r9a06g032: Fix UART clkgrp bitsel (git-fixes).
- cpuidle: PSCI: Move the `has_lpi` check to the beginning of the (git-fixes)
- crypto: qat - disable registration of algorithms (git-fixes).
- crypto: qat - fix memory leak in RSA (git-fixes).
- crypto: qat - remove dma_free_coherent() for DH (git-fixes).
- crypto: qat - remove dma_free_coherent() for RSA (git-fixes).
- crypto: qat - set to zero DH parameters before free (git-fixes).
- cxgb4: Fix the -Wmisleading-indentation warning (git-fixes).
- dm btree remove: assign new_root only when removal succeeds (git-fixes).
- dm btree remove: fix use after free in rebalance_children() (git-fixes).
- dm bufio: subtract the number of initial sectors in dm_bufio_get_device_size (git-fixes).
- dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc() (git-fixes).
- dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS (git-fixes).
- dm crypt: make printing of the key constant-time (git-fixes).
- dm integrity: conditionally disable &quot;recalculate&quot; feature (git-fixes).
- dm integrity: fix a crash if &quot;recalculate&quot; used without &quot;internal_hash&quot; (git-fixes).
- dm integrity: fix error code in dm_integrity_ctr() (git-fixes).
- dm integrity: fix memory corruption when tag_size is less than digest size (git-fixes).
- dm integrity: fix the maximum number of arguments (git-fixes).
- dm mirror log: round up region bitmap size to BITS_PER_LONG (git-fixes).
- dm persistent data: packed struct should have an aligned() attribute too (git-fixes).
- dm raid: fix inconclusive reshape layout on fast raid4/5/6 table reload sequences (git-fixes).
- dm snapshot: fix crash with transient storage and zero chunk size (git-fixes).
- dm snapshot: flush merged data before committing metadata (git-fixes).
- dm snapshot: properly fix a crash when an origin has no snapshots (git-fixes).
- dm space map common: fix division bug in sm_ll_find_free_block() (git-fixes).
- dm stats: add cond_resched when looping over entries (git-fixes).
- dm verity: fix FEC for RS roots unaligned to block size (git-fixes).
- dm: fix mempool NULL pointer race when completing IO (git-fixes).
- dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly (git-fixes).
- dmaengine: imx-sdma: Allow imx8m for imx7 FW revs (git-fixes).
- dmaengine: pl330: Fix lockdep warning about non-static key (git-fixes).
- dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate (git-fixes).
- dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate (git-fixes).
- do not call utsname() after -&gt;nsproxy is NULL (bsc#1201196).
- drbd: fix potential silent data corruption (git-fixes).
- driver core: fix potential deadlock in __driver_attach (git-fixes).
- drivers/net: Fix kABI in tun.c (git-fixes).
- drivers: net: fix memory leak in atusb_probe (git-fixes).
- drivers: net: fix memory leak in peak_usb_create_dev (git-fixes).
- drm/amd/display: Enable building new display engine with KCOV enabled (git-fixes).
- drm/bridge: tc358767: Make sure Refclk clock are enabled (git-fixes).
- drm/doc: Fix comment typo (git-fixes).
- drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed (git-fixes).
- drm/i915/gt: Serialize TLB invalidates with GT resets (git-fixes).
- drm/i915/selftests: fix a couple IS_ERR() vs NULL tests (git-fixes).
- drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector() (git-fixes).
- drm/mcde: Fix refcount leak in mcde_dsi_bind (git-fixes).
- drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function (git-fixes).
- drm/mediatek: dpi: Only enable dpi after the bridge is enabled (git-fixes).
- drm/mediatek: dpi: Remove output format of YUV (git-fixes).
- drm/mipi-dbi: align max_chunk to 2 in spi_transfer (git-fixes).
- drm/msm/hdmi: enable core-vcc/core-vdda-supply for 8996 platform (git-fixes).
- drm/msm/mdp5: Fix global state lock backoff (git-fixes).
- drm/nouveau: fix another off-by-one in nvbios_addr (git-fixes).
- drm/panfrost: Fix shrinker list corruption by madvise IOCTL (git-fixes).
- drm/panfrost: Put mapping instead of shmem obj on panfrost_mmu_map_fault_addr() error (git-fixes).
- drm/radeon: fix incorrrect SPDX-License-Identifiers (git-fixes).
- drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() (git-fixes).
- drm/rockchip: Fix an error handling path rockchip_dp_probe() (git-fixes).
- drm/rockchip: vop: Do not crash for invalid duplicate_state() (git-fixes).
- drm/st7735r: Fix module autoloading for Okaya RH128128T (git-fixes).
- drm/vc4: dsi: Add correct stop condition to vc4_dsi_encoder_disable iteration (git-fixes).
- drm/vc4: dsi: Correct DSI divider calculations (git-fixes).
- drm/vc4: dsi: Correct pixel order for DSI0 (git-fixes).
- drm/vc4: hdmi: Correct HDMI timing registers for interlaced modes (git-fixes).
- drm/vc4: hdmi: Fix timings for interlaced modes (git-fixes).
- drm/vc4: plane: Fix margin calculations for the right/bottom edges (git-fixes).
- drm/vc4: plane: Remove subpixel positioning check (git-fixes).
- drm: adv7511: override i2c address of cec before accessing it (git-fixes).
- drm: bridge: adv7511: Add check for mipi_dsi_driver_register (git-fixes).
- drm: bridge: sii8620: fix possible off-by-one (git-fixes).
- fbcon: Disallow setting font bigger than screen size (git-fixes).
- fbcon: Prevent that screen size is smaller than font size (git-fixes).
- fbdev: fbmem: Fix logo center image dx issue (git-fixes).
- fbmem: Check virtual screen sizes in fb_set_var() (git-fixes).
- fpga: altera-pr-ip: fix unsigned comparison with less than zero (git-fixes).
- ftgmac100: Restart MAC HW once (git-fixes).
- gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data() (git-fixes).
- gpio: pca953x: only use single read/write for No AI mode (git-fixes).
- gpio: pca953x: use the correct range when do regmap sync (git-fixes).
- gpio: pca953x: use the correct register address when regcache sync during init (git-fixes).
- hex2bin: make the function hex_to_bin constant-time (git-fixes).
- hv_netvsc: Add (more) validation for untrusted Hyper-V values (bsc#1199364).
- hv_netvsc: Add comment of netvsc_xdp_xmit() (bsc#1199364).
- hv_netvsc: Add support for XDP_REDIRECT (bsc#1199364).
- hv_netvsc: Copy packets sent by Hyper-V out of the receive buffer (bsc#1199364).
- hv_netvsc: Fix validation in netvsc_linkstatus_callback() (bsc#1199364).
- i2c: Fix a potential use after free (git-fixes).
- i2c: cadence: Change large transfer count reset logic to be unconditional (git-fixes).
- i2c: cadence: Support PEC for SMBus block read (git-fixes).
- i2c: cadence: Unregister the clk notifier in error path (git-fixes).
- i2c: mux-gpmux: Add of_node_put() when breaking out of loop (git-fixes).
- ida: do not use BUG_ON() for debugging (git-fixes).
- igb: Enable RSS for Intel I211 Ethernet Controller (git-fixes).
- iio: accel: bma220: Fix alignment for DMA safety (git-fixes).
- iio: accel: sca3000: Fix alignment for DMA safety (git-fixes).
- iio: adc: ad7266: Fix alignment for DMA safety (git-fixes).
- iio: adc: ad7298: Fix alignment for DMA safety (git-fixes).
- iio: adc: ad7476: Fix alignment for DMA safety (git-fixes).
- iio: adc: ad7766: Fix alignment for DMA safety (git-fixes).
- iio: adc: ad7768-1: Fix alignment for DMA safety (git-fixes).
- iio: adc: ad7887: Fix alignment for DMA safety (git-fixes).
- iio: adc: hi8435: Fix alignment for DMA safety (git-fixes).
- iio: adc: ltc2497: Fix alignment for DMA safety (git-fixes).
- iio: adc: max1027: Fix alignment for DMA safety (git-fixes).
- iio: adc: max11100: Fix alignment for DMA safety (git-fixes).
- iio: adc: max1118: Fix alignment for DMA safety (git-fixes).
- iio: adc: mcp320x: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-adc0832: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-adc084s021: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-adc12138: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-adc128s052: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-adc161s626: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-ads124s08: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-ads7950: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-ads8344: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-ads8688: Fix alignment for DMA safety (git-fixes).
- iio: adc: ti-tlc4541: Fix alignment for DMA safety (git-fixes).
- iio: amplifiers: ad8366: Fix alignment for DMA safety (git-fixes).
- iio: core: Fix IIO_ALIGN and rename as it was not sufficiently large (git-fixes).
- iio: dac: ad5064: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5360: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5421: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5449: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5504: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5755: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5761: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5764: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad5791: Fix alignment for DMA saftey (git-fixes).
- iio: dac: ad7303: Fix alignment for DMA safety (git-fixes).
- iio: dac: ad8801: Fix alignment for DMA safety (git-fixes).
- iio: dac: mcp4922: Fix alignment for DMA safety (git-fixes).
- iio: dac: ti-dac082s085: Fix alignment for DMA safety (git-fixes).
- iio: dac: ti-dac5571: Fix alignment for DMA safety (git-fixes).
- iio: dac: ti-dac7311: Fix alignment for DMA safety (git-fixes).
- iio: dac: ti-dac7612: Fix alignment for DMA safety (git-fixes).
- iio: frequency: ad9523: Fix alignment for DMA safety (git-fixes).
- iio: frequency: adf4350: Fix alignment for DMA safety (git-fixes).
- iio: frequency: adf4371: Fix alignment for DMA safety (git-fixes).
- iio: gyro: adis16080: Fix alignment for DMA safety (git-fixes).
- iio: gyro: adis16130: Fix alignment for DMA safety (git-fixes).
- iio: gyro: adxrs450: Fix alignment for DMA safety (git-fixes).
- iio: gyro: fxas210002c: Fix alignment for DMA safety (git-fixes).
- iio: light: isl29028: Fix the warning in isl29028_remove() (git-fixes).
- iio: potentiometer: ad5272: Fix alignment for DMA safety (git-fixes).
- iio: potentiometer: max5481: Fix alignment for DMA safety (git-fixes).
- iio: potentiometer: mcp41010: Fix alignment for DMA safety (git-fixes).
- iio: potentiometer: mcp4131: Fix alignment for DMA safety (git-fixes).
- iio: proximity: as3935: Fix alignment for DMA safety (git-fixes).
- iio: resolver: ad2s1200: Fix alignment for DMA safety (git-fixes).
- iio: resolver: ad2s90: Fix alignment for DMA safety (git-fixes).
- ima: Fix a potential integer overflow in ima_appraise_measurement (git-fixes).
- ima: Fix potential memory leak in ima_init_crypto() (git-fixes).
- intel_th: Fix a resource leak in an error handling path (git-fixes).
- intel_th: msu-sink: Potential dereference of null pointer (git-fixes).
- intel_th: msu: Fix vmalloced buffers (git-fixes).
- kABI workaround for rtsx_usb (git-fixes).
- kvm/emulate: Fix SETcc emulation function offsets with SLS (bsc#1201930).
- lib/string.c: implement stpcpy (git-fixes).
- linux/random.h: Mark CONFIG_ARCH_RANDOM functions __must_check (git-fixes).
- linux/random.h: Remove arch_has_random, arch_has_random_seed (git-fixes).
- linux/random.h: Use false with bool (git-fixes).
- lkdtm: Disable return thunks in rodata.c (bsc#1178134).
- macvlan: remove redundant null check on data (git-fixes).
- md/bitmap: wait for external bitmap writes to complete during tear down (git-fixes).
- md/raid0: Ignore RAID0 layout if the second zone has only one device (git-fixes).
- md: Set prev_flush_start and flush_bio in an atomic way (git-fixes).
- md: bcache: check the return value of kzalloc() in detached_dev_do_request() (git-fixes).
- media: hdpvr: fix error value returns in hdpvr_read (git-fixes).
- media: rc: increase rc-mm tolerance and add debug message (git-fixes).
- media: rtl28xxu: Add support for PROlectrix DV107669 DVB-T dongle (git-fixes).
- media: rtl28xxu: add missing sleep before probing slave demod (git-fixes).
- media: rtl28xxu: set keymap for Astrometa DVB-T2 (git-fixes).
- media: smipcie: fix interrupt handling and IR timeout (git-fixes).
- media: tw686x: Register the irq at the end of probe (git-fixes).
- media: usb: dvb-usb-v2: rtl28xxu: convert to use i2c_new_client_device() (git-fixes).
- media: v4l2-mem2mem: always consider OUTPUT queue during poll (git-fixes).
- media: v4l2-mem2mem: reorder checks in v4l2_m2m_poll() (git-fixes).
- mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init() (git-fixes).
- memregion: Fix memregion_free() fallback definition (git-fixes).
- memstick/ms_block: Fix a memory leak (git-fixes).
- memstick/ms_block: Fix some incorrect memory allocation (git-fixes).
- meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init (git-fixes).
- misc: rtsx: Fix an error handling path in rtsx_pci_probe() (git-fixes).
- misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer (git-fixes).
- misc: rtsx_usb: set return value in rsp_buf alloc err path (git-fixes).
- misc: rtsx_usb: use separate command and response buffers (git-fixes).
- mm: fix page reference leak in soft_offline_page() (git fixes (mm/memory-failure)).
- mmc: cavium-octeon: Add of_node_put() when breaking out of loop (git-fixes).
- mmc: cavium-thunderx: Add of_node_put() when breaking out of loop (git-fixes).
- mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R (git-fixes).
- mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch (git-fixes).
- mt7601u: add USB device ID for some versions of XiaoDu WiFi Dongle (git-fixes).
- mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg (git-fixes).
- net, xdp: Introduce __xdp_build_skb_from_frame utility routine (bsc#1199364).
- net, xdp: Introduce xdp_build_skb_from_frame utility routine (bsc#1199364).
- net/mlx5e: When changing XDP program without reset, take refs for XSK RQs (git-fixes).
- net/sonic: Fix a resource leak in an error handling path in 'jazz_sonic_probe()' (git-fixes).
- net/sonic: Fix some resource leaks in error handling paths (git-fixes).
- net: ag71xx: remove unnecessary MTU reservation (git-fixes).
- net: allwinner: Fix some resources leak in the error handling path of the probe and in the remove function (git-fixes).
- net: amd-xgbe: Fix NETDEV WATCHDOG transmit queue timeout warning (git-fixes).
- net: amd-xgbe: Fix network fluctuations when using 1G BELFUSE SFP (git-fixes).
- net: amd-xgbe: Reset link when the link never comes back (git-fixes).
- net: amd-xgbe: Reset the PHY rx data path when mailbox command timeout (git-fixes).
- net: axienet: Handle deferred probe on clock properly (git-fixes).
- net: dsa: b53: fix an off by one in checking &quot;vlan-&gt;vid&quot; (git-fixes).
- net: dsa: bcm_sf2: Qualify phydev-&gt;dev_flags based on port (git-fixes).
- net: dsa: bcm_sf2: put device node before return (git-fixes).
- net: dsa: lantiq_gswip: Exclude RMII from modes that report 1 GbE (git-fixes).
- net: dsa: lantiq_gswip: Let GSWIP automatically set the xMII clock (git-fixes).
- net: enetc: fix incorrect TPID when receiving 802.1ad tagged packets (git-fixes).
- net: enetc: keep RX ring consumer index in sync with hardware (git-fixes).
- net: evaluate net.ipv4.conf.all.proxy_arp_pvlan (git-fixes).
- net: evaluate net.ipvX.conf.all.ignore_routes_with_linkdown (git-fixes).
- net: ftgmac100: Fix crash when removing driver (git-fixes).
- net: hdlc_x25: Return meaningful error code in x25_open (git-fixes).
- net: hns3: fix error mask definition of flow director (git-fixes).
- net: hso: bail out on interrupt URB allocation failure (git-fixes).
- net: lapbether: Prevent racing when checking whether the netif is running (git-fixes).
- net: lapbether: Remove netif_start_queue / netif_stop_queue (git-fixes).
- net: ll_temac: Fix potential NULL dereference in temac_probe() (git-fixes).
- net: ll_temac: Use devm_platform_ioremap_resource_byname() (git-fixes).
- net: macb: add function to disable all macb clocks (git-fixes).
- net: macb: restore cmp registers on resume path (git-fixes).
- net: macb: unprepare clocks in case of failure (git-fixes).
- net: mscc: Fix OF_MDIO config check (git-fixes).
- net: mvneta: Remove per-cpu queue mapping for Armada 3700 (git-fixes).
- net: mvpp2: fix interrupt mask/unmask skip condition (git-fixes).
- net: rose: fix UAF bug caused by rose_t0timer_expiry (git-fixes).
- net: stmmac: Modify configuration method of EEE timers (git-fixes).
- net: stmmac: Use resolved link config in mac_link_up() (git-fixes).
- net: stmmac: dwmac-sun8i: Provide TX and RX fifo sizes (git-fixes).
- net: stmmac: dwmac1000: provide multicast filter fallback (git-fixes).
- net: stmmac: fix CBS idleslope and sendslope calculation (git-fixes).
- net: stmmac: fix incorrect DMA channel intr enable setting of EQoS v4.10 (git-fixes).
- net: stmmac: fix watchdog timeout during suspend/resume stress test (git-fixes).
- net: stmmac: stop each tx channel independently (git-fixes).
- net: tun: set tun-&gt;dev-&gt;addr_len during TUNSETLINK processing (git-fixes).
- net: usb: ax88179_178a: add Allied Telesis AT-UMCs (git-fixes).
- net: usb: ax88179_178a: add MCT usb 3.0 adapter (git-fixes).
- net: usb: ax88179_178a: add Toshiba usb 3.0 adapter (git-fixes).
- net: usb: ax88179_178a: remove redundant assignment to variable ret (git-fixes).
- net: usb: ax88179_178a: write mac to hardware in get_mac_addr (git-fixes).
- net: usb: qmi_wwan: add Telit 0x1060 composition (git-fixes).
- net: usb: qmi_wwan: add Telit 0x1070 composition (git-fixes).
- net: usb: use eth_hw_addr_set() (git-fixes).
- nvme: consider also host_iface when checking ip options (bsc#1199670).
- octeontx2-af: fix infinite loop in unmapping NPC counter (git-fixes).
- octeontx2-af: fix memory leak of lmac and lmac-&gt;name (git-fixes).
- pinctrl: sunxi: a83t: Fix NAND function name for some pins (git-fixes).
- pinctrl: sunxi: sunxi_pconf_set: use correct offset (git-fixes).
- platform/olpc: Fix uninitialized data in debugfs write (git-fixes).
- platform/x86: hp-wmi: Ignore Sanitization Mode event (git-fixes).
- power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe (git-fixes).
- powerpc/mobility: wait for memory transfer to complete (bsc#1201846 ltc#198761).
- powerpc/pseries/mobility: set NMI watchdog factor during an LPM (bsc#1201846 ltc#198761).
- powerpc/watchdog: introduce a NMI watchdog's factor (bsc#1201846 ltc#198761).
- profiling: fix shift-out-of-bounds bugs (git fixes).
- r8169: fix accessing unset transport header (git-fixes).
- random: document add_hwgenerator_randomness() with other input functions (git-fixes).
- random: fix typo in comments (git-fixes).
- random: remove useless header comment (git fixes).
- raw: Fix a data-race around sysctl_raw_l3mdev_accept (git-fixes).
- regulator: of: Fix refcount leak bug in of_get_regulation_constraints() (git-fixes).
- sched/debug: Remove mpol_get/put and task_lock/unlock from (git-fixes)
- sched/fair: Revise comment about lb decision matrix (git fixes (sched/fair)).
- sched/membarrier: fix missing local execution of ipi_sync_rq_state() (git fixes (sched/membarrier)).
- scsi: core: Fix error handling of scsi_host_alloc() (git-fixes).
- scsi: core: Fix failure handling of scsi_add_host_with_dma() (git-fixes).
- scsi: core: Only put parent device if host state differs from SHOST_CREATED (git-fixes).
- scsi: core: Put .shost_dev in failure path if host state changes to RUNNING (git-fixes).
- scsi: core: Put LLD module refcnt after SCSI device is released (git-fixes).
- scsi: core: Retry I/O for Notify (Enable Spinup) Required error (git-fixes).
- scsi: lpfc: Copyright updates for 14.2.0.5 patches (bsc#1201956).
- scsi: lpfc: Fix attempted FA-PWWN usage after feature disable (bsc#1201956).
- scsi: lpfc: Fix lost NVMe paths during LIF bounce stress test (bsc#1201956 bsc#1200521).
- scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE (bsc#1201956).
- scsi: lpfc: Fix uninitialized cqe field in lpfc_nvme_cancel_iocb() (bsc#1201956).
- scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input (bsc#1201956).
- scsi: lpfc: Refactor lpfc_nvmet_prep_abort_wqe() into lpfc_sli_prep_abort_xri() (bsc#1201956).
- scsi: lpfc: Remove Menlo/Hornet related code (bsc#1201956).
- scsi: lpfc: Remove extra atomic_inc on cmd_pending in queuecommand after VMID (bsc#1201956).
- scsi: lpfc: Revert RSCN_MEMENTO workaround for misbehaved configuration (bsc#1201956).
- scsi: lpfc: Set PU field when providing D_ID in XMIT_ELS_RSP64_CX iocb (bsc#1201956).
- scsi: lpfc: Update lpfc version to 14.2.0.5 (bsc#1201956).
- scsi: qla2xxx: Check correct variable in qla24xx_async_gffid() (bsc#1201958).
- scsi: qla2xxx: Fix discovery issues in FC-AL topology (bsc#1201958).
- scsi: qla2xxx: Fix imbalance vha-&gt;vref_count (bsc#1201958).
- scsi: qla2xxx: Fix incorrect display of max frame size (bsc#1201958).
- scsi: qla2xxx: Fix response queue handler reading stale packets (bsc#1201958).
- scsi: qla2xxx: Fix sparse warning for dport_data (bsc#1201958).
- scsi: qla2xxx: Update manufacturer details (bsc#1201958).
- scsi: qla2xxx: Update version to 10.02.07.800-k (bsc#1201958).
- scsi: qla2xxx: Zero undefined mailbox IN registers (bsc#1201958).
- scsi: qla2xxx: edif: Fix dropped IKE message (bsc#1201958).
- scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() (git-fixes).
- scsi: sd: Fix potential NULL pointer dereference (git-fixes).
- scsi: ufs: Release clock if DMA map fails (git-fixes).
- scsi: ufs: handle cleanup correctly on devm_reset_control_get error (git-fixes).
- serial: 8250: fix return error code in serial8250_request_std_resource() (git-fixes).
- serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle (git-fixes).
- serial: stm32: Clear prev values before setting RTS delays (git-fixes).
- soc: fsl: guts: machine variable might be unset (git-fixes).
- soc: ixp4xx/npe: Fix unused match warning (git-fixes).
- soundwire: bus_type: fix remove and shutdown support (git-fixes).
- spi: &amp;lt;linux/spi/spi.h&gt;: add missing struct kernel-doc entry (git-fixes).
- spi: amd: Limit max transfer and message size (git-fixes).
- staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback (git-fixes).
- sysctl: Fix data races in proc_dointvec() (git-fixes).
- sysctl: Fix data races in proc_dointvec_jiffies() (git-fixes).
- sysctl: Fix data races in proc_dointvec_minmax() (git-fixes).
- sysctl: Fix data races in proc_douintvec() (git-fixes).
- sysctl: Fix data races in proc_douintvec_minmax() (git-fixes).
- sysctl: Fix data-races in proc_dointvec_ms_jiffies() (git-fixes).
- thermal/tools/tmon: Include pthread and time headers in tmon.h (git-fixes).
- tick/nohz: Use WARN_ON_ONCE() to prevent console saturation (git fixes (kernel/time)).
- usb: dwc3: add cancelled reasons for dwc3 requests (git-fixes).
- usb: dwc3: gadget: Fix event pending check (git-fixes).
- usb: gadget: udc: amd5536 depends on HAS_DMA (git-fixes).
- usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe (git-fixes).
- usb: host: xhci: use snprintf() in xhci_decode_trb() (git-fixes).
- usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe (git-fixes).
- usb: typec: add missing uevent when partner support PD (git-fixes).
- usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion (git-fixes).
- usb: xhci: tegra: Fix error check (git-fixes).
- usbnet: fix memory leak in error case (git-fixes).
- video: of_display_timing.h: include errno.h (git-fixes).
- virtio-gpu: fix a missing check to avoid NULL dereference (git-fixes).
- virtio-net: fix the race between refill work and close (git-fixes).
- virtio_mmio: Add missing PM calls to freeze/restore (git-fixes).
- virtio_mmio: Restore guest page size on resume (git-fixes).
- watchdog: export lockup_detector_reconfigure (bsc#1201846 ltc#198761).
- wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd() (git-fixes).
- wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue (git-fixes).
- wifi: libertas: Fix possible refcount leak in if_usb_probe() (git-fixes).
- wifi: mac80211: fix queue selection for mesh/OCB interfaces (git-fixes).
- wifi: p54: Fix an error handling path in p54spi_probe() (git-fixes).
- wifi: p54: add missing parentheses in p54_flush() (git-fixes).
- wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c() (git-fixes).
- wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() (git-fixes).
- wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` (git-fixes).
- x86/bugs: Remove apostrophe typo (bsc#1178134).
- x86/entry: Remove skip_r11rcx (bsc#1201644).
- x86/kvmclock: Move this_cpu_pvti into kvmclock.h (git-fixes).
- x86/retbleed: Add fine grained Kconfig knobs (bsc#1178134).
- xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue (bsc#1201381).
- xen: detect uninitialized xenbus in xenbus_init (git-fixes).
- xen: do not continue xenstore initialization in case of errors (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="5.3.18" release="150300.99.1" arch="nosrc" src="nosrc/kernel-rt-5.3.18-150300.99.1.nosrc.rpm">
          <filename>kernel-rt-5.3.18-150300.99.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="5.3.18" release="150300.99.1" arch="x86_64" src="x86_64/kernel-rt-5.3.18-150300.99.1.x86_64.rpm">
          <filename>kernel-rt-5.3.18-150300.99.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3252</id>
    <title>Security update for freetype2</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1662966503"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27405" id="CVE-2022-27405" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27405" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27404" id="CVE-2022-27404" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27404" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27406" id="CVE-2022-27406" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27406" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198830" id="1198830" title="VUL-0: CVE-2022-27404: freetype2,freetype: FreeType: Buffer Overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198832" id="1198832" title="VUL-0: CVE-2022-27405: freetype2,freetype: FreeType: Segmentation Fault" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198823" id="1198823" title="VUL-0: CVE-2022-27406: freetype,freetype2: Segmentation violation" type="bugzilla"/>
    </references>
    <description>This update for freetype2 fixes the following issues:

- CVE-2022-27404 Fixed a segmentation fault via a crafted typeface (bsc#1198830).
- CVE-2022-27405 Fixed a buffer overflow via a crafted typeface (bsc#1198832).
- CVE-2022-27406 Fixed a segmentation fault via a crafted typeface (bsc#1198823).

Non-security fixes:

- Updated to version 2.10.4
</description>
    <pkglist>
      <collection>
        <package name="freetype2" epoch="0" version="2.10.4" release="150000.4.12.1" arch="src" src="src/freetype2-2.10.4-150000.4.12.1.src.rpm">
          <filename>freetype2-2.10.4-150000.4.12.1.src.rpm</filename>
        </package>
        <package name="libfreetype6" epoch="0" version="2.10.4" release="150000.4.12.1" arch="x86_64" src="x86_64/libfreetype6-2.10.4-150000.4.12.1.x86_64.rpm">
          <filename>libfreetype6-2.10.4-150000.4.12.1.x86_64.rpm</filename>
        </package>
        <package name="libfreetype6" epoch="0" version="2.10.4" release="150000.4.12.1" arch="aarch64" src="aarch64/libfreetype6-2.10.4-150000.4.12.1.aarch64.rpm">
          <filename>libfreetype6-2.10.4-150000.4.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3004</id>
    <title>Security update for curl</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1662123749"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202593" id="1202593" title="VUL-0: EMBARGOED: CVE-2022-2509: curl: control code in cookie denial of service" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35252" id="CVE-2022-35252" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35252" type="cve"/>
    </references>
    <description>This update for curl fixes the following issues:

- CVE-2022-35252: Fixed a potential injection of control characters
  into cookies, which could be exploited by sister sites to cause a
  denial of service (bsc#1202593).
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="7.66.0" release="150200.4.39.1" arch="src" src="src/curl-7.66.0-150200.4.39.1.src.rpm">
          <filename>curl-7.66.0-150200.4.39.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="7.66.0" release="150200.4.39.1" arch="x86_64" src="x86_64/curl-7.66.0-150200.4.39.1.x86_64.rpm">
          <filename>curl-7.66.0-150200.4.39.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="7.66.0" release="150200.4.39.1" arch="x86_64" src="x86_64/libcurl4-7.66.0-150200.4.39.1.x86_64.rpm">
          <filename>libcurl4-7.66.0-150200.4.39.1.x86_64.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="7.66.0" release="150200.4.39.1" arch="aarch64" src="aarch64/curl-7.66.0-150200.4.39.1.aarch64.rpm">
          <filename>curl-7.66.0-150200.4.39.1.aarch64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="7.66.0" release="150200.4.39.1" arch="aarch64" src="aarch64/libcurl4-7.66.0-150200.4.39.1.aarch64.rpm">
          <filename>libcurl4-7.66.0-150200.4.39.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3298</id>
    <title>Recommended update for python-psutil</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1663569852"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1181475" id="1181475" title="'free' command reports misleading &quot;used&quot; value" type="bugzilla"/>
    </references>
    <description>This update for python-psutil fixes the following issues:

- Adopt change of used memory calculation from upstream of procps (bsc#1181475)
</description>
    <pkglist>
      <collection>
        <package name="python-psutil" epoch="0" version="5.8.0" release="150300.3.3.2" arch="src" src="src/python-psutil-5.8.0-150300.3.3.2.src.rpm">
          <filename>python-psutil-5.8.0-150300.3.3.2.src.rpm</filename>
        </package>
        <package name="python3-psutil" epoch="0" version="5.8.0" release="150300.3.3.2" arch="x86_64" src="x86_64/python3-psutil-5.8.0-150300.3.3.2.x86_64.rpm">
          <filename>python3-psutil-5.8.0-150300.3.3.2.x86_64.rpm</filename>
        </package>
        <package name="python3-psutil" epoch="0" version="5.8.0" release="150300.3.3.2" arch="aarch64" src="aarch64/python3-psutil-5.8.0-150300.3.3.2.aarch64.rpm">
          <filename>python3-psutil-5.8.0-150300.3.3.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3091</id>
    <title>Recommended update for mozilla-nss</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1662443394"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201298" id="1201298" title="FIPS: NSS uses DSA for shared library integrity checking, mark DSA sigverify as APPROVED, rest as NOT-APPROVED in the SLI" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202645" id="1202645" title="VUL-0: MozillaFirefox / MozillaThunderbird: update to 104 and 102.2esr/91.13esr" type="bugzilla"/>
    </references>
    <description>This update for mozilla-nss fixes the following issues:

Update to NSS 3.79.1 (bsc#1202645)

* compare signature and signatureAlgorithm fields in legacy certificate verifier.
* Uninitialized value in cert_ComputeCertType.
* protect SFTKSlot needLogin with slotLock.
* avoid data race on primary password change.
* check for null template in sec_asn1{d,e}_push_state.

- FIPS: unapprove the rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
</description>
    <pkglist>
      <collection>
        <package name="libfreebl3" epoch="0" version="3.79.1" release="150000.3.77.1" arch="x86_64" src="x86_64/libfreebl3-3.79.1-150000.3.77.1.x86_64.rpm">
          <filename>libfreebl3-3.79.1-150000.3.77.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3-hmac" epoch="0" version="3.79.1" release="150000.3.77.1" arch="x86_64" src="x86_64/libfreebl3-hmac-3.79.1-150000.3.77.1.x86_64.rpm">
          <filename>libfreebl3-hmac-3.79.1-150000.3.77.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.79.1" release="150000.3.77.1" arch="x86_64" src="x86_64/libsoftokn3-3.79.1-150000.3.77.1.x86_64.rpm">
          <filename>libsoftokn3-3.79.1-150000.3.77.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3-hmac" epoch="0" version="3.79.1" release="150000.3.77.1" arch="x86_64" src="x86_64/libsoftokn3-hmac-3.79.1-150000.3.77.1.x86_64.rpm">
          <filename>libsoftokn3-hmac-3.79.1-150000.3.77.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.1" release="150000.3.77.1" arch="src" src="src/mozilla-nss-3.79.1-150000.3.77.1.src.rpm">
          <filename>mozilla-nss-3.79.1-150000.3.77.1.src.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.1" release="150000.3.77.1" arch="x86_64" src="x86_64/mozilla-nss-3.79.1-150000.3.77.1.x86_64.rpm">
          <filename>mozilla-nss-3.79.1-150000.3.77.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.79.1" release="150000.3.77.1" arch="x86_64" src="x86_64/mozilla-nss-certs-3.79.1-150000.3.77.1.x86_64.rpm">
          <filename>mozilla-nss-certs-3.79.1-150000.3.77.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.79.1" release="150000.3.77.1" arch="x86_64" src="x86_64/mozilla-nss-tools-3.79.1-150000.3.77.1.x86_64.rpm">
          <filename>mozilla-nss-tools-3.79.1-150000.3.77.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.79.1" release="150000.3.77.1" arch="aarch64" src="aarch64/libfreebl3-3.79.1-150000.3.77.1.aarch64.rpm">
          <filename>libfreebl3-3.79.1-150000.3.77.1.aarch64.rpm</filename>
        </package>
        <package name="libfreebl3-hmac" epoch="0" version="3.79.1" release="150000.3.77.1" arch="aarch64" src="aarch64/libfreebl3-hmac-3.79.1-150000.3.77.1.aarch64.rpm">
          <filename>libfreebl3-hmac-3.79.1-150000.3.77.1.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.79.1" release="150000.3.77.1" arch="aarch64" src="aarch64/libsoftokn3-3.79.1-150000.3.77.1.aarch64.rpm">
          <filename>libsoftokn3-3.79.1-150000.3.77.1.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3-hmac" epoch="0" version="3.79.1" release="150000.3.77.1" arch="aarch64" src="aarch64/libsoftokn3-hmac-3.79.1-150000.3.77.1.aarch64.rpm">
          <filename>libsoftokn3-hmac-3.79.1-150000.3.77.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.1" release="150000.3.77.1" arch="aarch64" src="aarch64/mozilla-nss-3.79.1-150000.3.77.1.aarch64.rpm">
          <filename>mozilla-nss-3.79.1-150000.3.77.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.79.1" release="150000.3.77.1" arch="aarch64" src="aarch64/mozilla-nss-certs-3.79.1-150000.3.77.1.aarch64.rpm">
          <filename>mozilla-nss-certs-3.79.1-150000.3.77.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.79.1" release="150000.3.77.1" arch="aarch64" src="aarch64/mozilla-nss-tools-3.79.1-150000.3.77.1.aarch64.rpm">
          <filename>mozilla-nss-tools-3.79.1-150000.3.77.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2936</id>
    <title>Security update for open-vm-tools</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1661776465"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202733" id="1202733" title="Open-vm-tools 12.1.0 has been released - please rebase" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202657" id="1202657" title="VUL-0: CVE-2022-31676: open-vm-tools: local privilege escalation vulnerability" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31676" id="CVE-2022-31676" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31676" type="cve"/>
    </references>
    <description>This update for open-vm-tools fixes the following issues:

- Updated to version 12.1.0 (build 20219665) (bsc#1202733):
  - CVE-2022-31676: Fixed an issue that could allow unprivileged users
    inside a virtual machine to escalate privileges (bsc#1202657).
</description>
    <pkglist>
      <collection>
        <package name="libvmtools0" epoch="0" version="12.1.0" release="150300.19.1" arch="x86_64" src="x86_64/libvmtools0-12.1.0-150300.19.1.x86_64.rpm">
          <filename>libvmtools0-12.1.0-150300.19.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.1.0" release="150300.19.1" arch="src" src="src/open-vm-tools-12.1.0-150300.19.1.src.rpm">
          <filename>open-vm-tools-12.1.0-150300.19.1.src.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.1.0" release="150300.19.1" arch="x86_64" src="x86_64/open-vm-tools-12.1.0-150300.19.1.x86_64.rpm">
          <filename>open-vm-tools-12.1.0-150300.19.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-2929</id>
    <title>Recommended update for timezone</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1661764932"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202310" id="1202310" title="L3: timezone RPM needs update to reflect new Chile DST change" type="bugzilla"/>
    </references>
    <description>This update for timezone fixes the following issue:

- Reflect new Chile DST change (bsc#1202310)
</description>
    <pkglist>
      <collection>
        <package name="timezone" epoch="0" version="2022a" release="150000.75.10.1" arch="src" src="src/timezone-2022a-150000.75.10.1.src.rpm">
          <filename>timezone-2022a-150000.75.10.1.src.rpm</filename>
        </package>
        <package name="timezone" epoch="0" version="2022a" release="150000.75.10.1" arch="x86_64" src="x86_64/timezone-2022a-150000.75.10.1.x86_64.rpm">
          <filename>timezone-2022a-150000.75.10.1.x86_64.rpm</filename>
        </package>
        <package name="timezone" epoch="0" version="2022a" release="150000.75.10.1" arch="aarch64" src="aarch64/timezone-2022a-150000.75.10.1.aarch64.rpm">
          <filename>timezone-2022a-150000.75.10.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3262</id>
    <title>Recommended update for gcc11</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1663076102"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199140" id="1199140" title="L3: 32bit packages not included in SLES15 SP3 for s390x - ref:_00D1igLOd._5005q4xW1U:ref" type="bugzilla"/>
    </references>
    <description>
This update for gcc11 ships some missing 32bit libraries for s390x. (bsc#1199140)
</description>
    <pkglist>
      <collection>
        <package name="gcc11" epoch="0" version="11.3.0+git1637" release="150000.1.11.2" arch="src" src="src/gcc11-11.3.0+git1637-150000.1.11.2.src.rpm">
          <filename>gcc11-11.3.0+git1637-150000.1.11.2.src.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="11.3.0+git1637" release="150000.1.11.2" arch="x86_64" src="x86_64/libgcc_s1-11.3.0+git1637-150000.1.11.2.x86_64.rpm">
          <filename>libgcc_s1-11.3.0+git1637-150000.1.11.2.x86_64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="11.3.0+git1637" release="150000.1.11.2" arch="x86_64" src="x86_64/libstdc++6-11.3.0+git1637-150000.1.11.2.x86_64.rpm">
          <filename>libstdc++6-11.3.0+git1637-150000.1.11.2.x86_64.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="11.3.0+git1637" release="150000.1.11.2" arch="aarch64" src="aarch64/libgcc_s1-11.3.0+git1637-150000.1.11.2.aarch64.rpm">
          <filename>libgcc_s1-11.3.0+git1637-150000.1.11.2.aarch64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="11.3.0+git1637" release="150000.1.11.2" arch="aarch64" src="aarch64/libstdc++6-11.3.0+git1637-150000.1.11.2.aarch64.rpm">
          <filename>libstdc++6-11.3.0+git1637-150000.1.11.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3327</id>
    <title>Security update for oniguruma</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1663757263"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1164550" id="1164550" title="VUL-0: CVE-2019-19203: oniguruma: heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1177179" id="1177179" title="VUL-1: CVE-2020-26159: oniguruma: Buffer overflow in concat_opt_exact_str could result in DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1164569" id="1164569" title="VUL-0: CVE-2019-19204: oniguruma: heap-based buffer over-read in function fetch_interval_quantifier in regparse.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1157805" id="1157805" title="VUL-0: CVE-2019-19246: oniguruma: Heap-based buffer over-read in str_lower_case_match in regexec.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1142847" id="1142847" title="VUL-0: CVE-2019-13224: oniguruma: use-after-free in onig_new_deluxe() in regext.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1150130" id="1150130" title="VUL-1: CVE-2019-16163: oniguruma: stack Exhaustion in regcomp.c because of recursion in regparse.c." type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16163" id="CVE-2019-16163" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16163" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19203" id="CVE-2019-19203" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19203" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13224" id="CVE-2019-13224" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13224" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19204" id="CVE-2019-19204" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19204" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26159" id="CVE-2020-26159" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26159" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19246" id="CVE-2019-19246" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19246" type="cve"/>
    </references>
    <description>This update for oniguruma fixes the following issues:

- CVE-2019-19246: Fixed an out of bounds access during regular
  expression matching (bsc#1157805).
- CVE-2019-19204: Fixed an out of bounds access when compiling a
  crafted regular expression (bsc#1164569).
- CVE-2019-19203: Fixed an out of bounds access when performing a
  string search (bsc#1164550).
- CVE-2019-16163: Fixed an uncontrolled recursion issue when compiling
  a crafted regular expression, which could lead to denial of service (bsc#1150130).
- CVE-2020-26159: Fixed an off-by-one buffer overflow (bsc#1177179).
- CVE-2019-13224: Fixed a potential use-after-free when handling
  multiple different encodings (bsc#1142847).
</description>
    <pkglist>
      <collection>
        <package name="libonig4" epoch="0" version="6.7.0" release="150000.3.3.1" arch="x86_64" src="x86_64/libonig4-6.7.0-150000.3.3.1.x86_64.rpm">
          <filename>libonig4-6.7.0-150000.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="oniguruma" epoch="0" version="6.7.0" release="150000.3.3.1" arch="src" src="src/oniguruma-6.7.0-150000.3.3.1.src.rpm">
          <filename>oniguruma-6.7.0-150000.3.3.1.src.rpm</filename>
        </package>
        <package name="libonig4" epoch="0" version="6.7.0" release="150000.3.3.1" arch="aarch64" src="aarch64/libonig4-6.7.0-150000.3.3.1.aarch64.rpm">
          <filename>libonig4-6.7.0-150000.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3308</id>
    <title>Recommended update for mdadm</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1663586880"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201297" id="1201297" title="VMD on Alder Lake:  Install does not recognize RAID on HP Z2 G9 Workstation" type="bugzilla"/>
    </references>
    <description>This update for mdadm fixes the following issues:

- imsm: support for third Sata controller (bsc#1201297)
- mdadm: enable Intel Alderlake RSTe configuration (bsc#1201297)
</description>
    <pkglist>
      <collection>
        <package name="mdadm" epoch="0" version="4.1" release="150300.24.18.1" arch="src" src="src/mdadm-4.1-150300.24.18.1.src.rpm">
          <filename>mdadm-4.1-150300.24.18.1.src.rpm</filename>
        </package>
        <package name="mdadm" epoch="0" version="4.1" release="150300.24.18.1" arch="x86_64" src="x86_64/mdadm-4.1-150300.24.18.1.x86_64.rpm">
          <filename>mdadm-4.1-150300.24.18.1.x86_64.rpm</filename>
        </package>
        <package name="mdadm" epoch="0" version="4.1" release="150300.24.18.1" arch="aarch64" src="aarch64/mdadm-4.1-150300.24.18.1.aarch64.rpm">
          <filename>mdadm-4.1-150300.24.18.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3229</id>
    <title>Security update for vim</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1662727598"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201132" id="1201132" title="VUL-1: CVE-2022-2264: vim: out of bounds read in inc()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200698" id="1200698" title="VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200700" id="1200700" title="VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201152" id="1201152" title="VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200884" id="1200884" title="Vim: Error on startup" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202046" id="1202046" title="VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202512" id="1202512" title="VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201620" id="1201620" title="SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202050" id="1202050" title="VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202689" id="1202689" title="VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201363" id="1201363" title="VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202414" id="1202414" title="VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202049" id="1202049" title="VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202421" id="1202421" title="VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202420" id="1202420" title="VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201151" id="1201151" title="VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201249" id="1201249" title="VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200732" id="1200732" title="VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201134" id="1201134" title="VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201135" id="1201135" title="VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202511" id="1202511" title="VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202687" id="1202687" title="VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202515" id="1202515" title="VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201356" id="1201356" title="VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202552" id="1202552" title="VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201136" id="1201136" title="VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200701" id="1200701" title="VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202599" id="1202599" title="VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201863" id="1201863" title="VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201153" id="1201153" title="VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201150" id="1201150" title="VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200697" id="1200697" title="VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201133" id="1201133" title="VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200904" id="1200904" title="VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201155" id="1201155" title="VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200270" id="1200270" title="VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201154" id="1201154" title="VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202051" id="1202051" title="VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202862" id="1202862" title="VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200903" id="1200903" title="VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201359" id="1201359" title="VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200902" id="1200902" title="VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1968" id="CVE-2022-1968" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1968" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2286" id="CVE-2022-2286" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2286" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2598" id="CVE-2022-2598" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2598" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2581" id="CVE-2022-2581" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2581" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2345" id="CVE-2022-2345" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2345" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2129" id="CVE-2022-2129" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2129" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2816" id="CVE-2022-2816" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2816" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1720" id="CVE-2022-1720" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1720" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2231" id="CVE-2022-2231" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2231" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2207" id="CVE-2022-2207" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2207" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2126" id="CVE-2022-2126" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2126" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2285" id="CVE-2022-2285" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2285" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2344" id="CVE-2022-2344" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2344" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2287" id="CVE-2022-2287" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2287" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2304" id="CVE-2022-2304" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2304" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2889" id="CVE-2022-2889" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2889" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3016" id="CVE-2022-3016" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3016" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2580" id="CVE-2022-2580" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2580" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2862" id="CVE-2022-2862" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2862" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2210" id="CVE-2022-2210" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2210" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2522" id="CVE-2022-2522" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2522" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2845" id="CVE-2022-2845" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2845" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2257" id="CVE-2022-2257" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2257" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2571" id="CVE-2022-2571" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2571" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2175" id="CVE-2022-2175" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2175" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2264" id="CVE-2022-2264" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2264" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2124" id="CVE-2022-2124" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2124" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2343" id="CVE-2022-2343" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2343" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2817" id="CVE-2022-2817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2817" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2819" id="CVE-2022-2819" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2819" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2849" id="CVE-2022-2849" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2849" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2946" id="CVE-2022-2946" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2946" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2923" id="CVE-2022-2923" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2923" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2284" id="CVE-2022-2284" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2284" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2206" id="CVE-2022-2206" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2206" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2874" id="CVE-2022-2874" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2874" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2183" id="CVE-2022-2183" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2183" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2208" id="CVE-2022-2208" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2208" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2182" id="CVE-2022-2182" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2182" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2125" id="CVE-2022-2125" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2125" type="cve"/>
    </references>
    <description>This update for vim fixes the following issues:

Updated to version 9.0 with patch level 0313:

- CVE-2022-2183: Fixed out-of-bounds read through get_lisp_indent() (bsc#1200902).
- CVE-2022-2182: Fixed heap-based buffer overflow through parse_cmd_address() (bsc#1200903).
- CVE-2022-2175: Fixed buffer over-read through cmdline_insert_reg() (bsc#1200904).
- CVE-2022-2304: Fixed stack buffer overflow in spell_dump_compl() (bsc#1201249).
- CVE-2022-2343: Fixed heap-based buffer overflow in GitHub repository vim prior to 9.0.0044 (bsc#1201356).
- CVE-2022-2344: Fixed another heap-based buffer overflow vim prior to 9.0.0045 (bsc#1201359).
- CVE-2022-2345: Fixed use after free in GitHub repository vim prior to 9.0.0046. (bsc#1201363).
- CVE-2022-2819: Fixed heap-based Buffer Overflow in compile_lock_unlock() (bsc#1202414).
- CVE-2022-2874: Fixed NULL Pointer Dereference in generate_loadvar() (bsc#1202552).
- CVE-2022-1968: Fixed use after free in utf_ptr2char (bsc#1200270).
- CVE-2022-2124: Fixed out of bounds read in current_quote() (bsc#1200697).
- CVE-2022-2125: Fixed out of bounds read in get_lisp_indent() (bsc#1200698).
- CVE-2022-2126: Fixed out of bounds read in suggest_trie_walk() (bsc#1200700).
- CVE-2022-2129: Fixed out of bounds write in vim_regsub_both() (bsc#1200701).
- CVE-2022-1720: Fixed out of bounds read in grab_file_name() (bsc#1200732).
- CVE-2022-2264: Fixed out of bounds read in inc() (bsc#1201132).
- CVE-2022-2284: Fixed out of bounds read in utfc_ptr2len() (bsc#1201133).
- CVE-2022-2285: Fixed negative size passed to memmove() due to integer overflow (bsc#1201134).
- CVE-2022-2286: Fixed out of bounds read in ins_bytes() (bsc#1201135).
- CVE-2022-2287: Fixed out of bounds read in suggest_trie_walk() (bsc#1201136).
- CVE-2022-2231: Fixed null pointer dereference skipwhite() (bsc#1201150).
- CVE-2022-2210: Fixed out of bounds read in ml_append_int() (bsc#1201151).
- CVE-2022-2208: Fixed null pointer dereference in diff_check() (bsc#1201152).
- CVE-2022-2207: Fixed out of bounds read in ins_bs() (bsc#1201153).
- CVE-2022-2257: Fixed out of bounds read in msg_outtrans_special() (bsc#1201154).
- CVE-2022-2206: Fixed out of bounds read in msg_outtrans_attr() (bsc#1201155).
- CVE-2022-2522: Fixed out of bounds read via nested autocommand (bsc#1201863).
- CVE-2022-2571: Fixed heap-based buffer overflow related to ins_comp_get_next_word_or_line() (bsc#1202046).
- CVE-2022-2580: Fixed heap-based buffer overflow related to eval_string() (bsc#1202049).
- CVE-2022-2581: Fixed out-of-bounds read related to cstrchr() (bsc#1202050).
- CVE-2022-2598: Fixed undefined behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput() (bsc#1202051).
- CVE-2022-2817: Fixed use after gree in f_assert_fails() (bsc#1202420).
- CVE-2022-2816: Fixed out-of-bounds Read in check_vim9_unlet() (bsc#1202421).
- CVE-2022-2862: Fixed use-after-free in compile_nested_function() (bsc#1202511).
- CVE-2022-2849: Fixed invalid memory access related to mb_ptr2len() (bsc#1202512).
- CVE-2022-2845: Fixed buffer Over-read related to display_dollar() (bsc#1202515).
- CVE-2022-2889: Fixed use-after-free in find_var_also_in_script() in evalvars.c (bsc#1202599).
- CVE-2022-2923: Fixed NULL pointer dereference in GitHub repository vim/vim prior to 9.0.0240 (bsc#1202687).
- CVE-2022-2946: Fixed use after free in function vim_vsnprintf_typval (bsc#1202689).
- CVE-2022-3016: Fixed use after free in vim prior to 9.0.0285 (bsc#1202862).
  
Bugfixes:

- Fixing vim error on startup (bsc#1200884).
- Fixing vim SUSE Linux Enterprise Server 15 SP4 Basesystem plugin-tlib issue (bsc#1201620).
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.0.0313" release="150000.5.25.1" arch="src" src="src/vim-9.0.0313-150000.5.25.1.src.rpm">
          <filename>vim-9.0.0313-150000.5.25.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.0.0313" release="150000.5.25.1" arch="noarch" src="noarch/vim-data-common-9.0.0313-150000.5.25.1.noarch.rpm">
          <filename>vim-data-common-9.0.0313-150000.5.25.1.noarch.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.0313" release="150000.5.25.1" arch="x86_64" src="x86_64/vim-small-9.0.0313-150000.5.25.1.x86_64.rpm">
          <filename>vim-small-9.0.0313-150000.5.25.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.0313" release="150000.5.25.1" arch="aarch64" src="aarch64/vim-small-9.0.0313-150000.5.25.1.aarch64.rpm">
          <filename>vim-small-9.0.0313-150000.5.25.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3304</id>
    <title>Recommended update for libassuan</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1663580628"/>
    <references/>
    <description>This update for libassuan fixes the following issues:

- Add a timeout for writing to a SOCKS5 proxy
- Add workaround for a problem with LD_LIBRARY_PATH on newer systems
- Fix issue in the logging code
- Fix some build trivialities
- Upgrade autoconf
</description>
    <pkglist>
      <collection>
        <package name="libassuan" epoch="0" version="2.5.5" release="150000.4.3.1" arch="src" src="src/libassuan-2.5.5-150000.4.3.1.src.rpm">
          <filename>libassuan-2.5.5-150000.4.3.1.src.rpm</filename>
        </package>
        <package name="libassuan0" epoch="0" version="2.5.5" release="150000.4.3.1" arch="x86_64" src="x86_64/libassuan0-2.5.5-150000.4.3.1.x86_64.rpm">
          <filename>libassuan0-2.5.5-150000.4.3.1.x86_64.rpm</filename>
        </package>
        <package name="libassuan0" epoch="0" version="2.5.5" release="150000.4.3.1" arch="aarch64" src="aarch64/libassuan0-2.5.5-150000.4.3.1.aarch64.rpm">
          <filename>libassuan0-2.5.5-150000.4.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3230</id>
    <title>Security update for gdk-pixbuf</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1662727705"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194633" id="1194633" title="VUL-0: CVE-2021-44648: gtk2,gdk-pixbuf:  heap-buffer overflow vulnerability when decoding the lzw compressed stream of GIF files" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44648" id="CVE-2021-44648" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44648" type="cve"/>
    </references>
    <description>This update for gdk-pixbuf fixes the following issues:

- CVE-2021-44648: Fixed overflow vulnerability in lzw code size (bsc#1194633).
</description>
    <pkglist>
      <collection>
        <package name="gdk-pixbuf" epoch="0" version="2.40.0" release="150200.3.9.1" arch="src" src="src/gdk-pixbuf-2.40.0-150200.3.9.1.src.rpm">
          <filename>gdk-pixbuf-2.40.0-150200.3.9.1.src.rpm</filename>
        </package>
        <package name="gdk-pixbuf-query-loaders" epoch="0" version="2.40.0" release="150200.3.9.1" arch="x86_64" src="x86_64/gdk-pixbuf-query-loaders-2.40.0-150200.3.9.1.x86_64.rpm">
          <filename>gdk-pixbuf-query-loaders-2.40.0-150200.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="libgdk_pixbuf-2_0-0" epoch="0" version="2.40.0" release="150200.3.9.1" arch="x86_64" src="x86_64/libgdk_pixbuf-2_0-0-2.40.0-150200.3.9.1.x86_64.rpm">
          <filename>libgdk_pixbuf-2_0-0-2.40.0-150200.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="typelib-1_0-GdkPixbuf-2_0" epoch="0" version="2.40.0" release="150200.3.9.1" arch="x86_64" src="x86_64/typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.9.1.x86_64.rpm">
          <filename>typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.9.1.x86_64.rpm</filename>
        </package>
        <package name="gdk-pixbuf-query-loaders" epoch="0" version="2.40.0" release="150200.3.9.1" arch="aarch64" src="aarch64/gdk-pixbuf-query-loaders-2.40.0-150200.3.9.1.aarch64.rpm">
          <filename>gdk-pixbuf-query-loaders-2.40.0-150200.3.9.1.aarch64.rpm</filename>
        </package>
        <package name="libgdk_pixbuf-2_0-0" epoch="0" version="2.40.0" release="150200.3.9.1" arch="aarch64" src="aarch64/libgdk_pixbuf-2_0-0-2.40.0-150200.3.9.1.aarch64.rpm">
          <filename>libgdk_pixbuf-2_0-0-2.40.0-150200.3.9.1.aarch64.rpm</filename>
        </package>
        <package name="typelib-1_0-GdkPixbuf-2_0" epoch="0" version="2.40.0" release="150200.3.9.1" arch="aarch64" src="aarch64/typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.9.1.aarch64.rpm">
          <filename>typelib-1_0-GdkPixbuf-2_0-2.40.0-150200.3.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3271</id>
    <title>Security update for perl</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1663130768"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1047178" id="1047178" title="VUL-0: CVE-2017-6512 perl: File::Path rmtree/remove_tree race condition" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6512" id="CVE-2017-6512" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6512" type="cve"/>
    </references>
    <description>This update for perl fixes the following issues:

- CVE-2017-6512: Fixed File::Path rmtree/remove_tree race condition (bsc#1047178).
</description>
    <pkglist>
      <collection>
        <package name="perl" epoch="0" version="5.26.1" release="150300.17.11.1" arch="src" src="src/perl-5.26.1-150300.17.11.1.src.rpm">
          <filename>perl-5.26.1-150300.17.11.1.src.rpm</filename>
        </package>
        <package name="perl" epoch="0" version="5.26.1" release="150300.17.11.1" arch="x86_64" src="x86_64/perl-5.26.1-150300.17.11.1.x86_64.rpm">
          <filename>perl-5.26.1-150300.17.11.1.x86_64.rpm</filename>
        </package>
        <package name="perl-base" epoch="0" version="5.26.1" release="150300.17.11.1" arch="x86_64" src="x86_64/perl-base-5.26.1-150300.17.11.1.x86_64.rpm">
          <filename>perl-base-5.26.1-150300.17.11.1.x86_64.rpm</filename>
        </package>
        <package name="perl" epoch="0" version="5.26.1" release="150300.17.11.1" arch="aarch64" src="aarch64/perl-5.26.1-150300.17.11.1.aarch64.rpm">
          <filename>perl-5.26.1-150300.17.11.1.aarch64.rpm</filename>
        </package>
        <package name="perl-base" epoch="0" version="5.26.1" release="150300.17.11.1" arch="aarch64" src="aarch64/perl-base-5.26.1-150300.17.11.1.aarch64.rpm">
          <filename>perl-base-5.26.1-150300.17.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3264</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1663129431"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1023051" id="1023051" title="VUL-1: CVE-2016-3695: kernel-source: Error injection via EINJ is allowed when securelevel is enabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1156395" id="1156395" title="[TRACKERBUG] 5.3 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1179722" id="1179722" title="[PATCH] ext4: fix error handling code in add_new_gdb" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1179723" id="1179723" title="[PATCH] ext4: fix invalid inode checksum" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1181862" id="1181862" title="GCC 11: kernel-default package failures" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191662" id="1191662" title="[PATCH] ext4: fix potential infinite loop in ext4_dx_readdir()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191667" id="1191667" title="[PATCH] ocfs2: drop acl cache for directories too" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191881" id="1191881" title="NVMe over TCP] : Observing multiple call traces during NVMe TCP single ethernet port failover from switch after 60 reconnection trials is completed with dm-multipathing active" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192594" id="1192594" title="seccomp-bpf on s390x gets wrong syscall number" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192968" id="1192968" title="[Build 64.17] openQA test fails in zypper_migration - grub-core/kern/dl.c:380:symbol 'grub_disk_get_size' not found" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194272" id="1194272" title="VUL-0: CVE-2021-4155: kernel-source: xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194535" id="1194535" title="VUL-0: CVE-2021-4203: kernel-source-azure,kernel-source-rt,kernel-source: kernel: Race condition in races in sk_peer_pid and sk_peer_cred accesses" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197158" id="1197158" title="resource RAID  failed during cluster patch, Mdadm gets floating point error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197755" id="1197755" title="[PATCH] ext4: Fix BUG_ON in ext4_bread when write quota data" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197756" id="1197756" title="[PATCH] ext4: don't use the orphan list when migrating an inode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197757" id="1197757" title="[PATCH] ext4: fix error handling in ext4_restore_inline_data()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197760" id="1197760" title="[PATCH] ocfs2: mount fails with buffer overflow in strlen" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197763" id="1197763" title="[PATCH] mm: bdi: initialize bdi_min_ratio when bdi is unregistered" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197920" id="1197920" title="[PATCH] ocfs2: fix crash when initialize filecheck kobj fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198971" id="1198971" title="SLES 15 SP3 - POWER10 Rainer: EXT4 filesystem : stress-ng test failed with errors in dmesg BUG: soft lockup CPU#6 stuck" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199291" id="1199291" title="Back port vmci patches to stable and upcoming releases" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200431" id="1200431" title="vmxnet3: update to latest ToT" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200845" id="1200845" title="[Azure] [vPCI] add the support of multi-MSI" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200868" id="1200868" title="[PATCH] ext4: fix symlink file size not match to file content" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200869" id="1200869" title="[PATCH] ext4: fix overhead calculation to account for the reserved  gdt blocks" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200870" id="1200870" title="[PATCH] ext4: force overhead calculation if the s_overhead_cluster  makes no sense" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200871" id="1200871" title="[PATCH] ext4: fix use-after-free in ext4_rename_dir_prepare" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200872" id="1200872" title="[PATCH] ext4: fix bug_on in ext4_writepages" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200873" id="1200873" title="[PATCH] =?UTF-8?q?fs-writeback:=20writeback=5Fsb=5Finodes?=  =?UTF-8?q?=EF=BC=9ARecalculate=20'wrote'=20according=20skipped=20pages?=" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201019" id="1201019" title="rpmbuild failure: Dependency tokens must begin with alpha-numeric, '_' or '/': BuildRequires: %kernel_module_package_buildreqs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201420" id="1201420" title="VUL-0: CVE-2022-2991: kernel-source-rt,kernel-source-azure,kernel-source: heap-based overflow in the lightnvm subsystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201610" id="1201610" title="cgroup: Use separate src/dst nodes when preloading css_sets for  migration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201705" id="1201705" title="kernel-obs-build: include qemu_fw_cfg" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201726" id="1201726" title="VUL-0: CVE-2022-26373: CPU info leak via post-barrier RSB predictions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201948" id="1201948" title="VUL-0: CVE-2022-36879: kernel-source-azure,kernel-source-rt,kernel-source: xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202096" id="1202096" title="VUL-0: CVE-2022-2588: kernel-source: use-after-free in cls_route" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202097" id="1202097" title="VUL-0: CVE-2022-2663: kernel-source: nf_conntrack_irc message handling issue" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202346" id="1202346" title="VUL-0: CVE-2022-20368: kernel: slab-out-of-bounds access in packet_recvmsg()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202347" id="1202347" title="VUL-0: CVE-2022-20369: kernel: possible out of bounds write due to improper input validation in v4l2_m2m_querybuf of v4l2-mem2mem.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202393" id="1202393" title="VUL-0: kernel: net_sched: cls_route: disallow handle of 0" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202396" id="1202396" title="SLE-15SP3 KOTD: Livepatching infrastructure tests started failing" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202447" id="1202447" title="mm: memcontrol: fix potential oom_lock recursion deadlock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202564" id="1202564" title="VUL-0: CVE-2022-2905: kernel-source: Linux kernel slab-out-of-bound Read in bpf" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202577" id="1202577" title="After abrupt power failure, XFS drive is corrupted and system starts up in emergency mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202636" id="1202636" title="NVMe: CPU Soft lockup when running NVMe" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202672" id="1202672" title="VUL-0: CVE-2022-2977: kernel-source,kernel-source-rt,kernel-source-azure: use-after-free Read in put_device (/dev/vtpmx)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202701" id="1202701" title="L3: 5.3.18-150300.59.90.1 fails in boot because of hv_netvsc module - ref:_00D1igLOd._5005qAK268:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202708" id="1202708" title="[PATCH] ext4: do not set SB_ACTIVE in ext4_orphan_cleanup()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202709" id="1202709" title="[PATCH] ext4: fix loff_t overflow in ext4_max_bitmap_size()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202710" id="1202710" title="[PATCH] ext4: fix use-after-free in ext4_search_dir" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202711" id="1202711" title="[PATCH] ext4: fix warning in ext4_handle_inode_extension" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202712" id="1202712" title="[PATCH] ext4: add reserved GDT blocks check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202713" id="1202713" title="[PATCH] ext4: recover csum seed of tmp_inode after migrating to  extents" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202714" id="1202714" title="[PATCH] reiserfs: fix handling of -EOPNOTSUPP in  reiserfs_for_each_xattr" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202715" id="1202715" title="[PATCH] jbd2: fix outstanding credits assert in  jbd2_journal_commit_transaction()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202716" id="1202716" title="[PATCH] jbd2: fix assertion 'jh-&gt;b_frozen_data == NULL' failure when  journal aborted" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202717" id="1202717" title="[PATCH] blk-iocost: fix weight updates of inner active iocgs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202718" id="1202718" title="[PATCH] loop: Fix missing discard support when using LOOP_CONFIGURE" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202720" id="1202720" title="[PATCH] blk-iocost: fix operation ordering in iocg_wake_fn()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202722" id="1202722" title="[PATCH] blk-iocost: rename propagate_active_weights() to  propagate_weights()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202745" id="1202745" title="[PATCH] list: add &quot;list_del_init_careful()&quot; to go with  &quot;list_empty_careful()&quot;" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202756" id="1202756" title="Building of external modules (KMPs) broken due to BTF" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202810" id="1202810" title="ceph: don't leak snap_rwsem in handle_cap_grant" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202811" id="1202811" title="ceph: don't truncate file in atomic_open" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202860" id="1202860" title="VUL-0: CVE-2022-2905: kernel-source-azure,kernel-source,kernel-source-rt: slab-out-of-bound read in bpf" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202895" id="1202895" title="VUL-0: CVE-2020-27784: kernel-source-azure,kernel-source,kernel-source-rt: kernel: deallocated instance in printer_ioctl() printer_ioctl() tries to access lock_printer_io of the printer_dev instance" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202898" id="1202898" title="VUL-0: CVE-2022-3028: kernel-source,kernel-source-rt,kernel-source-azure: kernel: race condition in xfrm_probe_algs can lead to out-of-bounds read/write" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203063" id="1203063" title="Update Broadcom Emulex lpfc driver to 14.2.0.6" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203098" id="1203098" title="git-fixes: backport mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203107" id="1203107" title="VUL-0: CVE-2022-39188: kernel-source-azure,kernel-source-rt,kernel-source: race condition between unmap_mapping_range() and munmap() on VM_PFNMAP mappings leads to stale TLB entry" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203116" id="1203116" title="VUL-0: CVE-2022-39188: kernel live patch: race condition between unmap_mapping_range() and munmap() on VM_PFNMAP mappings leads to stale TLB entry" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203117" id="1203117" title="VUL-0: CVE-2022-39190: kernel-source-azure,kernel-source-rt,kernel-source: binding an already bound chain in netfilter leads to denial of service" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203135" id="1203135" title="fuse: limit nsec" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203136" id="1203136" title="fuse: ioctl: translate ENOSYS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203137" id="1203137" title="fuse: Remove the control interface for virtio-fs" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39188" id="CVE-2022-39188" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39188" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39190" id="CVE-2022-39190" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39190" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2663" id="CVE-2022-2663" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2663" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3028" id="CVE-2022-3028" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3028" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27784" id="CVE-2020-27784" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27784" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4155" id="CVE-2021-4155" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4155" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2905" id="CVE-2022-2905" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2905" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2977" id="CVE-2022-2977" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2977" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4203" id="CVE-2021-4203" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4203" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588" id="CVE-2022-2588" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36879" id="CVE-2022-36879" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36879" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20368" id="CVE-2022-20368" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20368" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20369" id="CVE-2022-20369" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20369" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26373" id="CVE-2022-26373" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26373" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3695" id="CVE-2016-3695" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3695" type="cve"/>
      <reference href="https://jira.suse.com/browse/SLE-24635" id="SLE-24635" title="https://jira.suse.com/browse/SLE-24635" type="jira"/>
    </references>
    <description>
The SUSE Linux Enterprise 15 SP3 kernel was updated receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-39190: Fixed an issue that was discovered in net/netfilter/nf_tables_api.c and could cause a denial of service upon binding to an already bound chain (bnc#1203117).
- CVE-2022-39188: Fixed race condition in include/asm-generic/tlb.h where a device driver can free a page while it still has stale TLB entries (bnc#1203107).
- CVE-2022-36879: Fixed an issue in xfrm_expand_policies in net/xfrm/xfrm_policy.c where a refcount could be dropped twice (bnc#1201948).
- CVE-2022-3028: Fixed race condition that was found in the IP framework for transforming packets (XFRM subsystem) (bnc#1202898).
- CVE-2022-2977: Fixed reference counting for struct tpm_chip (bsc#1202672).
- CVE-2022-2905: Fixed tnum_range usage on array range checking for poke descriptors (bsc#1202564, bsc#1202860).
- CVE-2022-2663: Fixed an issue that was found in nf_conntrack_irc where the message handling could be confused and incorrectly matches the message (bnc#1202097).
- CVE-2022-26373: Fixed non-transparent sharing of return predictor targets between contexts in some Intel Processors (bnc#1201726).
- CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096).
- CVE-2022-20369: Fixed out of bounds write in v4l2_m2m_querybuf of v4l2-mem2mem.c (bnc#1202347).
- CVE-2022-20368: Fixed slab-out-of-bounds access in packet_recvmsg() (bsc#1202346).
- CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bnc#1194535).
- CVE-2021-4155: Fixed a data leak flaw that was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem (bnc#1194272).
- CVE-2020-27784: Fixed a vulnerability that was found in printer_ioctl() printer_ioctl() when accessing a deallocated instance (bnc#1202895).
- CVE-2016-3695: Fixed an issue inside the einj_error_inject function in drivers/acpi/apei/einj.c that allowed users to simulate hardware errors and consequently cause a denial of service (bnc#1023051).

The following non-security bugs were fixed:

- ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks (git-fixes).
- ACPI: LPSS: Fix missing check in register_device_clock() (git-fixes).
- ACPI: PM: save NVS memory for Lenovo G40-45 (git-fixes).
- ACPI: processor: Remove freq Qos request for all CPUs (git-fixes).
- ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool (git-fixes).
- ACPI: video: Force backlight native for some TongFang devices (git-fixes).
- ALSA: bcd2000: Fix a UAF bug on the error path of probing (git-fixes).
- ALSA: hda/cirrus - support for iMac 12,1 model (git-fixes).
- ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP OMEN 15 (8786) mute LED (git-fixes).
- ALSA: hda/realtek: Add mute LED quirk for HP Omen laptop (git-fixes).
- ALSA: hda/realtek: Add new alc285-hp-amp-init model (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo L140PU (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NP50PNJ (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NP70PNJ (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NP70PNP (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NS50PU (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NV45PZ (git-fixes).
- ALSA: hda/realtek: Add quirk for Dell Latitude 7520 (git-fixes).
- ALSA: hda/realtek: Add quirk for HP Dev One (git-fixes).
- ALSA: hda/realtek: Add quirk for HP Spectre x360 15-eb0xxx (git-fixes).
- ALSA: hda/realtek: Add quirk for TongFang devices with pop noise (git-fixes).
- ALSA: hda/realtek: Add quirk for another Asus K42JZ model (git-fixes).
- ALSA: hda/realtek: Add quirk for the Framework Laptop (git-fixes).
- ALSA: hda/realtek: Fix LED on HP ProBook 435 G7 (git-fixes).
- ALSA: hda/realtek: Fix deadlock by COEF mutex (git-fixes).
- ALSA: hda/realtek: Fix headset mic for Acer SF313-51 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP machines (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes).
- ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machine (git-fixes).
- ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machines (git-fixes).
- ALSA: info: Fix llseek return value when using callback (git-fixes).
- ALSA: usb-audio: More comprehensive mixer map for ASUS ROG Zenith II (git-fixes).
- ARM: 9077/1: PLT: Move struct plt_entries definition to header (git-fixes).
- ARM: 9078/1: Add warn suppress parameter to arm_gen_branch_link() (git-fixes).
- ARM: 9079/1: ftrace: Add MODULE_PLTS support (git-fixes).
- ARM: 9098/1: ftrace: MODULE_PLT: Fix build problem without DYNAMIC_FTRACE (git-fixes).
- ASoC: SOF: debug: Fix potential buffer overflow by snprintf() (git-fixes).
- ASoC: audio-graph-card: Add of_node_put() in fail path (git-fixes).
- ASoC: codecs: da7210: add check for i2c_add_driver (git-fixes).
- ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV (git-fixes).
- ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV (git-fixes).
- ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe (git-fixes).
- ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp() (git-fixes).
- ASoC: tas2770: Allow mono streams (git-fixes).
- Bluetooth: L2CAP: Fix build errors in some archs (git-fixes).
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression (git-fixes).
- Bluetooth: MGMT: Fixes build warnings with C=1 (git-fixes).
- Fix parsing of rpm/macros.kernel-source on SLE12 (bsc#1201019).
- HID: alps: Declare U1_UNICORN_LEGACY support (git-fixes).
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report (git-fixes).
- HID: wacom: Do not register pad_input for touch switch (git-fixes).
- HID: wacom: Only report rotation for art pen (git-fixes).
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag (git-fixes).
- Input: rk805-pwrkey - fix module autoloading (git-fixes).
- KABI: cgroup: Restore KABI of css_set (bsc#1201610).
- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs (bsc#1065729).
- KVM: PPC: Book3S HV: Prevent POWER7/8 TLB flush flushing SLB (bsc#1156395).
- KVM: PPC: Book3S HV: Use GLOBAL_TOC for kvmppc_h_set_dabr/xdabr() (bsc#1156395).
- KVM: PPC: Fix vmx/vsx mixup in mmio emulation (bsc#1156395).
- KVM: PPC: Use arch_get_random_seed_long instead of powernv variant (bsc#1156395).
- KVM: VMX: Refuse to load kvm_intel if EPT and NX are disabled (git-fixes).
- KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case (git-fixes).
- KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case (git-fixes).
- KVM: x86: accept userspace interrupt only if no event is injected (git-fixes).
- NFS: fix nfs_path in case of a rename retry (git-fixes).
- NFSD: Add missing NFSv2 .pc_func methods (git-fixes).
- NFSD: Clamp WRITE offsets (git-fixes).
- NFSD: Fix possible sleep during nfsd4_release_lockowner() (git-fixes).
- NFSD: prevent integer overflow on 32 bit systems (git-fixes).
- NFSD: prevent underflow in nfssvc_decode_writeargs() (git-fixes).
- NFSv4.2: support EXCHGID4_FLAG_SUPP_FENCE_OPS 4.2 EXCHANGE_ID flag (git-fixes).
- NFSv4: Fix second deadlock in nfs4_evict_inode() (git-fixes).
- NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error (git-fixes).
- NTB: ntb_tool: uninitialized heap data in tool_fn_write() (git-fixes).
- PCI/ACPI: Guard ARM64-specific mcfg_quirks (git-fixes).
- PCI: Add ACS quirk for Broadcom BCM5750x NICs (git-fixes).
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (bsc#1200845).
- PCI: hv: Fix interrupt mapping for multi-MSI (bsc#1200845).
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (bsc#1200845).
- PCI: hv: Make the code arch neutral by adding arch specific interfaces (bsc#1200845).
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (bsc#1200845).
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (bsc#1200845).
- PCI: qcom: Fix pipe clock imbalance (git-fixes).
- SUNRPC reverting d03727b248d0 (&quot;NFSv4 fix CLOSE not waiting for direct IO compeletion&quot;) (git-fixes).
- SUNRPC: Clean up scheduling of autoclose (git-fixes).
- SUNRPC: Do not dereference xprt-&gt;snd_task if it's a cookie (git-fixes).
- SUNRPC: Fix READ_PLUS crasher (git-fixes).
- SUNRPC: Prevent immediate close+reconnect (git-fixes).
- VMCI: Add support for ARM64 (bsc#1199291, jsc#SLE-24635).
- VMCI: Check exclusive_vectors when freeing interrupt 1 (bsc#1199291, jsc#SLE-24635).
- VMCI: Enforce queuepair max size for IOCTL_VMCI_QUEUEPAIR_ALLOC (bsc#1199291, jsc#SLE-24635).
- VMCI: Fix some error handling paths in vmci_guest_probe_device() (bsc#1199291, jsc#SLE-24635).
- VMCI: Release notification_bitmap in error path (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: add MMIO access to registers (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: add support for DMA datagrams receive (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: add support for DMA datagrams sends (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: allocate send and receive buffers for DMA datagrams (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: detect DMA datagram capability (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: register dummy IRQ handlers for DMA datagrams (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: set OS page size (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: whitespace formatting change for vmci register defines (bsc#1199291, jsc#SLE-24635).
- arm64: signal: nofpsimd: Do not allocate fp/simd context when not available (git-fixes).
- asm-generic: sections: refactor memory_intersects (git-fixes).
- ata: libata-eh: Add missing command name (git-fixes).
- atm: idt77252: fix use-after-free bugs caused by tst_timer (git-fixes).
- blk-iocost: clamp inuse and skip noops in __propagate_weights() (bsc#1202722).
- blk-iocost: fix operation ordering in iocg_wake_fn() (bsc#1202720).
- blk-iocost: fix weight updates of inner active iocgs (bsc#1202717).
- blk-iocost: rename propagate_active_weights() to propagate_weights() (bsc#1202722).
- blktrace: fix blk_rq_merge documentation (git-fixes).
- can: ems_usb: fix clang's -Wunaligned-access warning (git-fixes).
- can: m_can: process interrupt only when not runtime suspended (git-fixes).
- ceph: do not leak snap_rwsem in handle_cap_grant (bsc#1202810).
- ceph: do not truncate file in atomic_open (bsc#1202811).
- cgroup: Trace event cgroup id fields should be u64 (git-fixes).
- cgroup: Use separate src/dst nodes when preloading css_sets for migration (bsc#1201610).
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate (git-fixes).
- clk: core: Fix runtime PM sequence in clk_core_unprepare() (git-fixes).
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops (git-fixes).
- clk: qcom: ipq8074: dont disable gcc_sleep_clk_src (git-fixes).
- clk: rockchip: add sclk_mac_lbtest to rk3188_critical_clocks (git-fixes).
- coresight: cti: Correct the parameter for pm_runtime_put (git-fixes).
- devlink: Fix use-after-free after a failed reload (git-fixes).
- dm raid: fix KASAN warning in raid5_add_disks (git-fixes).
- dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed (git-fixes).
- dpaa2-eth: unregister the netdev before disconnecting from the PHY (git-fixes).
- driver core: Do not probe devices after bus_type.match() probe deferral (git-fixes).
- drm/amdgpu: Check BO's requested pinning domains against its preferred_domains (git-fixes).
- drm/amdgpu: remove useless condition in amdgpu_job_stop_all_jobs_on_sched() (git-fixes).
- drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error (git-fixes).
- drm/i915/reg: Fix spelling mistake &quot;Unsupport&quot; -&gt; &quot;Unsupported&quot; (git-fixes).
- drm/meson: Fix overflow implicit truncation warnings (git-fixes).
- drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() (git-fixes).
- drm/msm/dsi: Fix number of regulators for SDM660 (git-fixes).
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg (git-fixes).
- drm/msm/dsi: fix the inconsistent indenting (git-fixes).
- drm/sun4i: dsi: Prevent underflow when computing packet sizes (git-fixes).
- ehea: fix error return code in ehea_restart_qps() (git-fixes).
- enetc: Fix endianness issues for enetc_qos (git-fixes).
- ethernet: sun: niu: fix missing checks of niu_pci_eeprom_read() (git-fixes).
- ext4: Fix BUG_ON in ext4_bread when write quota data (bsc#1197755).
- ext4: add reserved GDT blocks check (bsc#1202712).
- ext4: do not set SB_ACTIVE in ext4_orphan_cleanup() (bsc#1202708).
- ext4: do not use the orphan list when migrating an inode (bsc#1197756).
- ext4: fix bug_on in ext4_writepages (bsc#1200872).
- ext4: fix error handling code in add_new_gdb (bsc#1179722).
- ext4: fix error handling in ext4_restore_inline_data() (bsc#1197757).
- ext4: fix invalid inode checksum (bsc#1179723).
- ext4: fix loff_t overflow in ext4_max_bitmap_size() (bsc#1202709).
- ext4: fix overhead calculation to account for the reserved gdt blocks (bsc#1200869).
- ext4: fix potential infinite loop in ext4_dx_readdir() (bsc#1191662).
- ext4: fix race when reusing xattr blocks (bsc#1198971).
- ext4: fix symlink file size not match to file content (bsc#1200868).
- ext4: fix use-after-free in ext4_rename_dir_prepare (bsc#1200871).
- ext4: fix use-after-free in ext4_search_dir (bsc#1202710).
- ext4: fix warning in ext4_handle_inode_extension (bsc#1202711).
- ext4: force overhead calculation if the s_overhead_cluster makes no sense (bsc#1200870).
- ext4: recover csum seed of tmp_inode after migrating to extents (bsc#1202713).
- ext4: remove EA inode entry from mbcache on inode eviction (bsc#1198971).
- ext4: unindent codeblock in ext4_xattr_block_set() (bsc#1198971).
- fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters (git-fixes).
- firmware: tegra: bpmp: Do only aligned access to IPC memory area (git-fixes).
- fs-writeback: writeback_sb_inodes: Recalculate 'wrote' according skipped pages (bsc#1200873).
- fuse: Remove the control interface for virtio-fs (bsc#1203137).
- fuse: ioctl: translate ENOSYS (bsc#1203136).
- fuse: limit nsec (bsc#1203135).
- gadgetfs: ep_io - wait until IRQ finishes (git-fixes).
- geneve: do not use RT_TOS for IPv6 flowlabel (git-fixes).
- geneve: fix TOS inheriting for ipv4 (git-fixes).
- gpio: pca953x: Add mutex_lock for regcache sync in PM (git-fixes).
- hv_netvsc: Load and store the proper (NBL_HASH_INFO) per-packet info (bsc#1202701).
- hwmon: (gpio-fan) Fix array out of bounds access (git-fixes).
- i2c: imx: Make sure to unregister adapter on remove() (git-fixes).
- ice: report supported and advertised autoneg using PHY capabilities (git-fixes).
- ieee802154/adf7242: defer destroy_workqueue call (git-fixes).
- iio: adc: mcp3911: make use of the sign bit (git-fixes).
- iio: adc: mcp3911: use correct formula for AD conversion (git-fixes).
- intel_th: pci: Add Meteor Lake-P support (git-fixes).
- intel_th: pci: Add Raptor Lake-S CPU support (git-fixes).
- intel_th: pci: Add Raptor Lake-S PCH support (git-fixes).
- iommu/amd: Simplify and Consolidate Virtual APIC (AVIC) Enablement (git-fixes).
- iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop (git-fixes).
- iommu/exynos: Handle failed IOMMU device registration properly (git-fixes).
- iommu/iova: Improve 32-bit free space estimate (git-fixes).
- iommu/ipmmu-vmsa: Check for error num after setting mask (git-fixes).
- iommu/mediatek: Add list_del in mtk_iommu_remove (git-fixes).
- iommu/msm: Fix an incorrect NULL check on list iterator (git-fixes).
- iommu/omap: Fix regression in probe for NULL pointer dereference (git-fixes).
- iommu/vt-d: Calculate mask for non-aligned flushes (git-fixes).
- iommu/vt-d: Fix PCI bus rescan device hot add (git-fixes).
- iommu/vt-d: Fix RID2PASID setup/teardown failure (git-fixes).
- iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) (git-fixes).
- ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback (git-fixes).
- ipmi: ssif: initialize ssif_info-&gt;client early (git-fixes).
- ixgbevf: add correct exception tracing for XDP (git-fixes).
- jbd2: fix assertion 'jh-&gt;b_frozen_data == NULL' failure when journal aborted (bsc#1202716).
- jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction() (bsc#1202715).
- kabi/severities: add stmmac driver local sumbols
- kbuild: do not create built-in objects for external module builds (jsc#SLE-24559 bsc#1202756).
- kbuild: dummy-tools: avoid tmpdir leak in dummy gcc (bsc#1181862 git-fixes).
- kbuild: dummy-tools: avoid tmpdir leak in dummy gcc (git-fixes).
- kernel-obs-build: include qemu_fw_cfg (boo#1201705)
- kfifo: fix kfifo_to_user() return type (git-fixes).
- kfifo: fix ternary sign extension bugs (git-fixes).
- lib/list_debug.c: Detect uninitialized lists (git-fixes).
- lib: bitmap: provide devm_bitmap_alloc() and devm_bitmap_zalloc() (git-fixes).
- lightnvm: Remove lightnvm implemenation (bsc#1191881 bsc#1201420 ZDI-CAN-17325).
- list: add &quot;list_del_init_careful()&quot; to go with &quot;list_empty_careful()&quot; (bsc#1202745).
- locking/lockdep: Avoid potential access of invalid memory in lock_class (git-fixes).
- loop: Fix missing discard support when using LOOP_CONFIGURE (bsc#1202718).
- mbcache: add functions to delete entry if unused (bsc#1198971).
- mbcache: do not reclaim used entries (bsc#1198971).
- md/bitmap: do not set sb values if can't pass sanity check (bsc#1197158).
- mfd: max77620: Fix refcount leak in max77620_initialise_fps (git-fixes).
- mfd: t7l66xb: Drop platform disable callback (git-fixes).
- misc: fastrpc: fix memory corruption on open (git-fixes).
- misc: fastrpc: fix memory corruption on probe (git-fixes).
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (git-fixes, bsc#1203098).
- mm: bdi: initialize bdi_min_ratio when bdi is unregistered (bsc#1197763).
- mm: memcontrol: fix potential oom_lock recursion deadlock (bsc#1202447).
- mmc: pxamci: Fix an error handling path in pxamci_probe() (git-fixes).
- mmc: pxamci: Fix another error handling path in pxamci_probe() (git-fixes).
- module: Ignore _GLOBAL_OFFSET_TABLE_ when warning for undefined symbols (git-fixes).
- mtd: maps: Fix refcount leak in ap_flash_init (git-fixes).
- mtd: maps: Fix refcount leak in of_flash_probe_versatile (git-fixes).
- mtd: partitions: Fix refcount leak in parse_redboot_of (git-fixes).
- mtd: rawnand: meson: Fix a potential double free issue (git-fixes).
- mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release (git-fixes).
- mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path (git-fixes).
- net/mlx5e: Check for needed capability for cvlan matching (git-fixes).
- net/sonic: Fix a resource leak in an error handling path in 'jazz_sonic_probe()' (git-fixes).
- net: bcmgenet: Add mdio-bcm-unimac soft dependency (git-fixes).
- net: cpsw: Properly initialise struct page_pool_params (git-fixes).
- net: cpsw: add missing of_node_put() in cpsw_probe_dt() (git-fixes).
- net: davinci_emac: Fix incorrect masking of tx and rx error channel (git-fixes).
- net: dsa: b53: fix an off by one in checking &quot;vlan-&gt;vid&quot; (git-fixes).
- net: dsa: felix: suppress -EPROBE_DEFER errors (git-fixes).
- net: dsa: mt7530: fix VLAN traffic leaks (git-fixes).
- net: enetc: Use pci_release_region() to release some resources (git-fixes).
- net: enetc: report software timestamping via SO_TIMESTAMPING (git-fixes).
- net: enetc: unmap DMA in enetc_send_cmd() (git-fixes).
- net: ethernet: aeroflex: fix UAF in greth_of_remove (git-fixes).
- net: ethernet: ezchip: fix UAF in nps_enet_remove (git-fixes).
- net: ethernet: ezchip: fix error handling (git-fixes).
- net: ethernet: ezchip: remove redundant check (git-fixes).
- net: ethernet: fix potential use-after-free in ec_bhf_remove (git-fixes).
- net: ethernet: ti: cpsw_ale: Fix access to un-initialized memory (git-fixes).
- net: fec: fix the potential memory leak in fec_enet_init() (git-fixes).
- net: fec_ptp: add clock rate zero check (git-fixes).
- net: ftgmac100: Fix crash when removing driver (git-fixes).
- net: hdlc_x25: Return meaningful error code in x25_open (git-fixes).
- net: hns: Fix kernel-doc (git-fixes).
- net: lantiq: fix memory corruption in RX ring (git-fixes).
- net: lapbether: Prevent racing when checking whether the netif is running (git-fixes).
- net: moxa: Use devm_platform_get_and_ioremap_resource() (git-fixes).
- net: mscc: ocelot: correctly report the timestamping RX filters in ethtool (git-fixes).
- net: mscc: ocelot: do not downgrade timestamping RX filters in SIOCSHWTSTAMP (git-fixes).
- net: mvpp2: fix interrupt mask/unmask skip condition (git-fixes).
- net: netcp: Fix an error message (git-fixes).
- net: pch_gbe: Propagate error from devm_gpio_request_one() (git-fixes).
- net: rose: fix netdev reference changes (git-fixes).
- net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale pointer (git-fixes).
- net: stmicro: handle clk_prepare() failure during init (git-fixes).
- net: stmmac: Modify configuration method of EEE timers (git-fixes).
- net: stmmac: Use resolved link config in mac_link_up() (git-fixes).
- net: stmmac: disable clocks in stmmac_remove_config_dt() (git-fixes).
- net: stmmac: dwmac1000: Fix extended MAC address registers definition (git-fixes).
- net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() (bsc#1200431).
- net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() (bsc#1200431).
- net: vmxnet3: remove multiple false checks in vmxnet3_ethtool.c (bsc#1200431).
- net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (git-fixes).
- net:enetc: allocate CBD ring data memory using DMA coherent methods (git-fixes).
- net_sched: cls_route: disallow handle of 0 (bsc#1202393).
- nfsd: fix use-after-free due to delegation race (git-fixes).
- nvme: fix RCU hole that allowed for endless looping in multipath round robin (bsc#1202636).
- objtool: Add support for intra-function calls (bsc#1202396).
- objtool: Make handle_insn_ops() unconditional (bsc#1202396).
- objtool: Remove INSN_STACK (bsc#1202396).
- objtool: Rework allocating stack_ops on decode (bsc#1202396).
- objtool: Support multiple stack_op per instruction (bsc#1202396).
- ocfs2: drop acl cache for directories too (bsc#1191667).
- ocfs2: fix crash when initialize filecheck kobj fails (bsc#1197920).
- ocfs2: mount fails with buffer overflow in strlen (bsc#1197760).
- octeontx2-af: fix infinite loop in unmapping NPC counter (git-fixes).
- perf bench: Share some global variables to fix build with gcc 10 (git-fixes).
- pinctrl/rockchip: fix gpio device creation (git-fixes).
- pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map (git-fixes).
- pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed (git-fixes).
- pinctrl: sunxi: Add I/O bias setting for H6 R-PIO (git-fixes).
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask (git-fixes).
- powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable (bsc#1156395).
- powerpc/powernv/kvm: Use darn for H_RANDOM on Power9 (bsc#1065729).
- powerpc/powernv: Avoid crashing if rng is NULL (bsc#1065729).
- powerpc/powernv: Staticify functions without prototypes (bsc#1065729).
- powerpc/powernv: delay rng platform device creation until later in boot (bsc#1065729).
- powerpc/powernv: rename remaining rng powernv_ functions to pnv_ (bsc#1065729).
- powerpc/powernv: wire up rng during setup_arch (bsc#1065729).
- powerpc/pseries: wire up rng during setup_arch() (bsc#1065729).
- powerpc/xive: Fix refcount leak in xive_get_max_prio (git-fixess).
- powerpc: Enable execve syscall exit tracepoint (bsc#1065729).
- powerpc: define get_cycles macro for arch-override (bsc#1065729).
- powerpc: powernv: kABI: add back powernv_get_random_long (bsc#1065729).
- profiling: fix shift too large makes kernel panic (git-fixes).
- qlcnic: Add null check after calling netdev_alloc_skb (git-fixes).
- random: fix crash on multiple early calls to add_bootloader_randomness() (git-fixes).
- ratelimit: Fix data-races in ___ratelimit() (git-fixes).
- reiserfs: fix handling of -EOPNOTSUPP in reiserfs_for_each_xattr (bsc#1202714).
- remoteproc: qcom: q6v5-mss: add powerdomains to MSM8996 config (git-fixes).
- remoteproc: qcom: wcnss: Fix handling of IRQs (git-fixes).
- s390/crash: fix incorrect number of bytes to copy to user space (git-fixes).
- s390/crash: make copy_oldmem_page() return number of bytes copied (git-fixes).
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE (git-fixes).
- s390/mm: fix 2KB pgtable release race (git-fixes).
- s390/ptrace: pass invalid syscall numbers to tracing (bsc#1192594 LTC#197522).
- scsi: lpfc: Add warning notification period to CMF_SYNC_WQE (bsc#1203063).
- scsi: lpfc: Check the return value of alloc_workqueue() (bsc#1203063).
- scsi: lpfc: Copyright updates for 14.2.0.6 patches (bsc#1203063).
- scsi: lpfc: Fix null ndlp ptr dereference in abnormal exit path for GFT_ID (bsc#1203063).
- scsi: lpfc: Fix unsolicited FLOGI receive handling during PT2PT discovery (bsc#1203063).
- scsi: lpfc: Remove SANDiags related code (bsc#1203063).
- scsi: lpfc: Rework MIB Rx Monitor debug info logic (bsc#1203063).
- scsi: lpfc: Update lpfc version to 14.2.0.6 (bsc#1203063).
- selftests: futex: Use variable MAKE instead of make (git-fixes).
- serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty() (git-fixes).
- serial: fsl_lpuart: RS485 RTS polariy is inverse (git-fixes).
- serial: mvebu-uart: uart2 error bits clearing (git-fixes).
- serial: tegra: Change lower tolerance baud rate limit for tegra20 and tegra30 (git-fixes).
- silence nfscache allocation warnings with kvzalloc (git-fixes).
- spi: Fix incorrect cs_setup delay handling (git-fixes).
- spi: spi-rspi: Fix PIO fallback on RZ platforms (git-fixes).
- spi: synquacer: Add missing clk_disable_unprepare() (git-fixes).
- spmi: trace: fix stack-out-of-bound access in SPMI tracing functions (git-fixes).
- staging: rtl8712: fix use after free bugs (git-fixes).
- tee: optee: Fix incorrect page free bug (git-fixes).
- thermal: Fix NULL pointer dereferences in of_thermal_ functions (git-fixes).
- thermal: sysfs: Fix cooling_device_stats_setup() error code path (git-fixes).
- thunderbolt: Use the actual buffer in tb_async_error() (git-fixes).
- tools/thermal: Fix possible path truncations (git-fixes).
- tracing/histogram: Fix a potential memory leak for kstrdup() (git-fixes).
- tracing/histograms: Fix memory leak problem (git-fixes).
- tracing/probes: Have kprobes and uprobes use $COMM too (git-fixes).
- tracing: Add ustring operation to filtering string pointers (git-fixes).
- tty: serial: Fix refcount leak bug in ucc_uart.c (git-fixes).
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete (git-fixes).
- tty: vt: initialize unicode screen buffer (git-fixes).
- usb: dwc2: fix wrong order of phy_power_on and phy_init (git-fixes).
- usb: dwc3: Switch to platform_get_irq_byname_optional() (git-fixes).
- usb: dwc3: ep0: Fix delay status handling (git-fixes).
- usb: dwc3: gadget: END_TRANSFER before CLEAR_STALL command (git-fixes).
- usb: dwc3: gadget: Fix IN endpoint max packet size allocation (git-fixes).
- usb: dwc3: gadget: Refactor dwc3_gadget_ep_dequeue (git-fixes).
- usb: dwc3: gadget: Remove FS bInterval_m1 limitation (git-fixes).
- usb: dwc3: gadget: Remove unnecessary checks (git-fixes).
- usb: dwc3: gadget: Replace list_for_each_entry_safe() if using giveback (git-fixes).
- usb: dwc3: gadget: Store resource index of start cmd (git-fixes).
- usb: dwc3: qcom: fix missing optional irq warnings.
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS (git-fixes).
- usb: gadget: u_audio: fix race condition on endpoint stop (git-fixes).
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (git-fixes).
- usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info (git-fixes).
- usb: host: ohci-ppc-of: Fix refcount leak bug (git-fixes).
- usb: renesas: Fix refcount leak bug (git-fixes).
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles (git-fixes).
- usbnet: Fix linkwatch use-after-free on disconnect (git-fixes).
- usbnet: smsc95xx: Fix deadlock on runtime resume (git-fixes).
- vboxguest: Do not use devm for irq (git-fixes).
- vfio/ccw: Remove UUID from s390 debug log (git-fixes).
- video: fbdev: amba-clcd: Fix refcount leak bugs (git-fixes).
- video: fbdev: arkfb: Check the size of screen before memset_io() (git-fixes).
- video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock() (git-fixes).
- video: fbdev: i740fb: Check the argument of i740_calc_vclk() (git-fixes).
- video: fbdev: s3fb: Check the size of screen before memset_io() (git-fixes).
- video: fbdev: sis: fix typos in SiS_GetModeID() (git-fixes).
- video: fbdev: vt8623fb: Check the size of screen before memset_io() (git-fixes).
- virtio_net: fix memory leak inside XPD_TX with mergeable (git-fixes).
- vmxnet3: Implement ethtool's get_channels command (bsc#1200431).
- vmxnet3: Record queue number to incoming packets (bsc#1200431).
- vmxnet3: Remove useless DMA-32 fallback configuration (bsc#1200431).
- vmxnet3: add command to set ring buffer sizes (bsc#1200431).
- vmxnet3: add support for capability registers (bsc#1200431).
- vmxnet3: add support for large passthrough BAR register (bsc#1200431).
- vmxnet3: add support for out of order rx completion (bsc#1200431).
- vmxnet3: disable overlay offloads if UPT device does not support (bsc#1200431).
- vmxnet3: do not reschedule napi for rx processing (bsc#1200431).
- vmxnet3: do not stop tx queues after netif_device_detach() (bsc#1200431).
- vmxnet3: limit number of TXDs used for TSO packet (bsc#1200431).
- vmxnet3: prepare for version 7 changes (bsc#1200431).
- vmxnet3: switch from 'pci_' to 'dma_' API (bsc#1200431).
- vmxnet3: update to version 7 (bsc#1200431).
- vmxnet3: use ext1 field to indicate encapsulated packet (bsc#1200431).
- vsock: Fix memory leak in vsock_connect() (git-fixes).
- vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout() (git-fixes).
- watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe() (git-fixes).
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() (git-fixes).
- wifi: mac80211: Do not finalize CSA in IBSS mode if state is disconnected (git-fixes).
- wifi: mac80211_hwsim: add back erroneously removed cast (git-fixes).
- wifi: mac80211_hwsim: fix race condition in pending packet (git-fixes).
- wifi: mac80211_hwsim: use 32-bit skb cookie (git-fixes).
- x86/olpc: fix 'logical not is only applied to the left hand side' (git-fixes).
- xfs: Fix assert failure in xfs_setattr_size() (git-fixes).
- xfs: bunmapi has unnecessary AG lock ordering issues (git-fixes).
- xfs: check sb_meta_uuid for dabuf buffer recovery (bsc#1202577).
- xfs: make xfs_rtalloc_query_range input parameters const (git-fixes).
- xfs: mark a data structure sick if there are cross-referencing errors (git-fixes).
- xfs: only reset incore inode health state flags when reclaiming an inode (git-fixes).
- xfs: prevent a UAF when log IO errors race with unmount (git-fixes).
- xfs: use kmem_cache_free() for kmem_cache objects (git-fixes).
- xprtrdma: Fix XDRBUF_SPARSE_PAGES support (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.3.18" release="150300.59.93.1" arch="nosrc" src="nosrc/kernel-default-5.3.18-150300.59.93.1.nosrc.rpm">
          <filename>kernel-default-5.3.18-150300.59.93.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.3.18" release="150300.59.93.1" arch="x86_64" src="x86_64/kernel-default-5.3.18-150300.59.93.1.x86_64.rpm">
          <filename>kernel-default-5.3.18-150300.59.93.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.3.18" release="150300.59.93.1.150300.18.54.1" arch="src" src="src/kernel-default-base-5.3.18-150300.59.93.1.150300.18.54.1.src.rpm">
          <filename>kernel-default-base-5.3.18-150300.59.93.1.150300.18.54.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.3.18" release="150300.59.93.1.150300.18.54.1" arch="x86_64" src="x86_64/kernel-default-base-5.3.18-150300.59.93.1.150300.18.54.1.x86_64.rpm">
          <filename>kernel-default-base-5.3.18-150300.59.93.1.150300.18.54.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.3.18" release="150300.59.93.1" arch="aarch64" src="aarch64/kernel-default-5.3.18-150300.59.93.1.aarch64.rpm">
          <filename>kernel-default-5.3.18-150300.59.93.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.3.18" release="150300.59.93.1.150300.18.54.1" arch="aarch64" src="aarch64/kernel-default-base-5.3.18-150300.59.93.1.150300.18.54.1.aarch64.rpm">
          <filename>kernel-default-base-5.3.18-150300.59.93.1.150300.18.54.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3307</id>
    <title>Security update for sqlite3</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1663586842"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35737" id="CVE-2022-35737" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35737" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36690" id="CVE-2021-36690" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36690" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195773" id="1195773" title="VUL-0: tcl: embedded sqlite version means that security fixes are not addressed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201783" id="1201783" title="VUL-0: CVE-2022-35737: sqlite3: multiple fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1189802" id="1189802" title="https://bugzilla.suse.com/show_bug.cgi?id=1189802" type="bugzilla"/>
    </references>
    <description>This update for sqlite3 fixes the following issues:

- CVE-2022-35737: Fixed an array-bounds overflow if billions of bytes are used in a string argument to a C API (bnc#1201783).
- CVE-2021-36690: Fixed an issue with the SQLite Expert extension when a column has no collating sequence (bsc#1189802).
  
- Package the Tcl bindings here again so that we only ship one copy of SQLite (bsc#1195773).
</description>
    <pkglist>
      <collection>
        <package name="libsqlite3-0" epoch="0" version="3.39.3" release="150000.3.17.1" arch="x86_64" src="x86_64/libsqlite3-0-3.39.3-150000.3.17.1.x86_64.rpm">
          <filename>libsqlite3-0-3.39.3-150000.3.17.1.x86_64.rpm</filename>
        </package>
        <package name="sqlite3" epoch="0" version="3.39.3" release="150000.3.17.1" arch="src" src="src/sqlite3-3.39.3-150000.3.17.1.src.rpm">
          <filename>sqlite3-3.39.3-150000.3.17.1.src.rpm</filename>
        </package>
        <package name="libsqlite3-0" epoch="0" version="3.39.3" release="150000.3.17.1" arch="aarch64" src="aarch64/libsqlite3-0-3.39.3-150000.3.17.1.aarch64.rpm">
          <filename>libsqlite3-0-3.39.3-150000.3.17.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.2-2022-3305</id>
    <title>Security update for libtirpc</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.2</release>
    <issued date="1663580778"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46828" id="CVE-2021-46828" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46828" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201680" id="1201680" title="VUL-0: CVE-2021-46828: libtirpc: DoS vulnerability with lots of connections" type="bugzilla"/>
    </references>
    <description>This update for libtirpc fixes the following issues:

- CVE-2021-46828: Fixed denial of service vulnerability with lots of connections (bsc#1201680).
</description>
    <pkglist>
      <collection>
        <package name="libtirpc" epoch="0" version="1.2.6" release="150300.3.14.1" arch="src" src="src/libtirpc-1.2.6-150300.3.14.1.src.rpm">
          <filename>libtirpc-1.2.6-150300.3.14.1.src.rpm</filename>
        </package>
        <package name="libtirpc-netconfig" epoch="0" version="1.2.6" release="150300.3.14.1" arch="x86_64" src="x86_64/libtirpc-netconfig-1.2.6-150300.3.14.1.x86_64.rpm">
          <filename>libtirpc-netconfig-1.2.6-150300.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="libtirpc3" epoch="0" version="1.2.6" release="150300.3.14.1" arch="x86_64" src="x86_64/libtirpc3-1.2.6-150300.3.14.1.x86_64.rpm">
          <filename>libtirpc3-1.2.6-150300.3.14.1.x86_64.rpm</filename>
        </package>
        <package name="libtirpc-netconfig" epoch="0" version="1.2.6" release="150300.3.14.1" arch="aarch64" src="aarch64/libtirpc-netconfig-1.2.6-150300.3.14.1.aarch64.rpm">
          <filename>libtirpc-netconfig-1.2.6-150300.3.14.1.aarch64.rpm</filename>
        </package>
        <package name="libtirpc3" epoch="0" version="1.2.6" release="150300.3.14.1" arch="aarch64" src="aarch64/libtirpc3-1.2.6-150300.3.14.1.aarch64.rpm">
          <filename>libtirpc3-1.2.6-150300.3.14.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>
