<updates>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4081</id>
    <title>Security update for dpkg</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1668782590"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1664" id="CVE-2022-1664" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1664" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199944" id="1199944" title="VUL-1: CVE-2022-1664: dpkg: dpkg -- security update" type="bugzilla"/>
    </references>
    <description>This update for dpkg fixes the following issues:

- CVE-2022-1664: Fixed a directory traversal vulnerability in Dpkg::Source::Archive (bsc#1199944).
</description>
    <pkglist>
      <collection>
        <package name="update-alternatives" epoch="0" version="1.19.0.4" release="150000.4.4.1" arch="src" src="src/update-alternatives-1.19.0.4-150000.4.4.1.src.rpm">
          <filename>update-alternatives-1.19.0.4-150000.4.4.1.src.rpm</filename>
        </package>
        <package name="update-alternatives" epoch="0" version="1.19.0.4" release="150000.4.4.1" arch="x86_64" src="x86_64/update-alternatives-1.19.0.4-150000.4.4.1.x86_64.rpm">
          <filename>update-alternatives-1.19.0.4-150000.4.4.1.x86_64.rpm</filename>
        </package>
        <package name="update-alternatives" epoch="0" version="1.19.0.4" release="150000.4.4.1" arch="aarch64" src="aarch64/update-alternatives-1.19.0.4-150000.4.4.1.aarch64.rpm">
          <filename>update-alternatives-1.19.0.4-150000.4.4.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4226</id>
    <title>Recommended update for suseconnect-ng</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669396630"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204821" id="1204821" title="Release with version 1.0.0 so to not clash with future SUSEConnect ruby releases" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200803" id="1200803" title="'zypper targetos' fails in Autoyast installation" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196076" id="1196076" title="SUSE Connect: periodically check status" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200994" id="1200994" title="service suseconnect-keepalive.service  does not recognize a configured proxy." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198625" id="1198625" title="Migration from SLE Micro 5.1 to 5.2 fails if registered to SMT server" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203341" id="1203341" title="libsuseconnect update causes core dump" type="bugzilla"/>
    </references>
    <description>This update for suseconnect-ng fixes the following issues:

- Fix System-Token support in ruby binding (bsc#1203341)
- Use system-wide proxy settings (bsc#1200994)
- Add timer for SUSEConnect --keepalive (bsc#1196076)
- Added support for the System-Token header
- Add Keepalive command line option
- Print nested zypper errors (bsc#1200803)
- Fix migration json error with SMT (bsc#1198625)
- Packaging adjustments (bsc#1204821)
- Add option to run local scc tests
</description>
    <pkglist>
      <collection>
        <package name="suseconnect-ng" epoch="0" version="1.0.0~git0.faee7c196dc1" release="150400.3.7.3" arch="src" src="src/suseconnect-ng-1.0.0~git0.faee7c196dc1-150400.3.7.3.src.rpm">
          <filename>suseconnect-ng-1.0.0~git0.faee7c196dc1-150400.3.7.3.src.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.0.0~git0.faee7c196dc1" release="150400.3.7.3" arch="x86_64" src="x86_64/suseconnect-ng-1.0.0~git0.faee7c196dc1-150400.3.7.3.x86_64.rpm">
          <filename>suseconnect-ng-1.0.0~git0.faee7c196dc1-150400.3.7.3.x86_64.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.0.0~git0.faee7c196dc1" release="150400.3.7.3" arch="aarch64" src="aarch64/suseconnect-ng-1.0.0~git0.faee7c196dc1-150400.3.7.3.aarch64.rpm">
          <filename>suseconnect-ng-1.0.0~git0.faee7c196dc1-150400.3.7.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4205</id>
    <title>Security update for net-snmp</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670932158"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201103" id="1201103" title="VUL-0: CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808, CVE-2022-24809, CVE-2022-24810: net-snmp: multiple memory handling issues" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/SLE-11203" id="SLE-11203" title="https://jira.suse.com/browse/SLE-11203" type="jira"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24805" id="CVE-2022-24805" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24805" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24810" id="CVE-2022-24810" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24810" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24806" id="CVE-2022-24806" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24806" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24809" id="CVE-2022-24809" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24809" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24808" id="CVE-2022-24808" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24808" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24807" id="CVE-2022-24807" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24807" type="cve"/>
    </references>
    <description>This update for net-snmp fixes the following issues:

  Updated to version 5.9.3 (bsc#1201103, jsc#SLE-11203):

  - CVE-2022-24805: Fixed a buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB that can cause an out-of-bounds memory access.
  - CVE-2022-24809: Fixed a malformed OID in a GET-NEXT to the nsVacmAccessTable that can cause a NULL pointer dereference.
  - CVE-2022-24806: Fixed an improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously.
  - CVE-2022-24807: Fixed a malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access.
  - CVE-2022-24808: Fixed a malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference.
  - CVE-2022-24810: Fixed a malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference.
</description>
    <pkglist>
      <collection>
        <package name="libsnmp40" epoch="0" version="5.9.3" release="150300.15.3.1" arch="x86_64" src="x86_64/libsnmp40-5.9.3-150300.15.3.1.x86_64.rpm">
          <filename>libsnmp40-5.9.3-150300.15.3.1.x86_64.rpm</filename>
        </package>
        <package name="net-snmp" epoch="0" version="5.9.3" release="150300.15.3.1" arch="src" src="src/net-snmp-5.9.3-150300.15.3.1.src.rpm">
          <filename>net-snmp-5.9.3-150300.15.3.1.src.rpm</filename>
        </package>
        <package name="snmp-mibs" epoch="0" version="5.9.3" release="150300.15.3.1" arch="x86_64" src="x86_64/snmp-mibs-5.9.3-150300.15.3.1.x86_64.rpm">
          <filename>snmp-mibs-5.9.3-150300.15.3.1.x86_64.rpm</filename>
        </package>
        <package name="libsnmp40" epoch="0" version="5.9.3" release="150300.15.3.1" arch="aarch64" src="aarch64/libsnmp40-5.9.3-150300.15.3.1.aarch64.rpm">
          <filename>libsnmp40-5.9.3-150300.15.3.1.aarch64.rpm</filename>
        </package>
        <package name="snmp-mibs" epoch="0" version="5.9.3" release="150300.15.3.1" arch="aarch64" src="aarch64/snmp-mibs-5.9.3-150300.15.3.1.aarch64.rpm">
          <filename>snmp-mibs-5.9.3-150300.15.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4256</id>
    <title>Recommended update for gcc12</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669635534"/>
    <references>
      <reference href="https://jira.suse.com/browse/PED-2030" id="PED-2030" title="https://jira.suse.com/browse/PED-2030" type="jira"/>
    </references>
    <description>This update for gcc12 fixes the following issues:

This update ship the GCC 12 compiler suite and its base libraries.

The compiler baselibraries are provided for all SUSE Linux Enterprise 15
versions and replace the same named GCC 11 ones.

The new compilers for C, C++, and Fortran are provided for SUSE Linux
Enterprise 15 SP3 and SP4, and provided in the &quot;Development Tools&quot; module.

The Go, D and Ada language compiler parts are available unsupported via the
PackageHub repositories.

To use gcc12 compilers use:

- install &quot;gcc12&quot; or &quot;gcc12-c++&quot; or one of the other &quot;gcc12-COMPILER&quot; frontend packages.
- override your Makefile to use CC=gcc12, CXX=g++12 and similar overrides for the other languages.

For a full changelog with all new GCC12 features, check out

	https://gcc.gnu.org/gcc-12/changes.html

</description>
    <pkglist>
      <collection>
        <package name="gcc12" epoch="0" version="12.2.1+git416" release="150000.1.5.1" arch="src" src="src/gcc12-12.2.1+git416-150000.1.5.1.src.rpm">
          <filename>gcc12-12.2.1+git416-150000.1.5.1.src.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="12.2.1+git416" release="150000.1.5.1" arch="x86_64" src="x86_64/libgcc_s1-12.2.1+git416-150000.1.5.1.x86_64.rpm">
          <filename>libgcc_s1-12.2.1+git416-150000.1.5.1.x86_64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="12.2.1+git416" release="150000.1.5.1" arch="x86_64" src="x86_64/libstdc++6-12.2.1+git416-150000.1.5.1.x86_64.rpm">
          <filename>libstdc++6-12.2.1+git416-150000.1.5.1.x86_64.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="12.2.1+git416" release="150000.1.5.1" arch="aarch64" src="aarch64/libgcc_s1-12.2.1+git416-150000.1.5.1.aarch64.rpm">
          <filename>libgcc_s1-12.2.1+git416-150000.1.5.1.aarch64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="12.2.1+git416" release="150000.1.5.1" arch="aarch64" src="aarch64/libstdc++6-12.2.1+git416-150000.1.5.1.aarch64.rpm">
          <filename>libstdc++6-12.2.1+git416-150000.1.5.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4262</id>
    <title>Recommended update for lvm2</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669697146"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203482" id="1203482" title="lvmlockd is not supporting sanlock" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199074" id="1199074" title="dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le - ref:_00D1igLOd._5005q4wDqx:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203216" id="1203216" title="killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group" type="bugzilla"/>
    </references>
    <description>This update for lvm2 fixes the following issues:

- Fix terminated lvmlockd not clearing/adopting locks, leading to inability to start volume group (bsc#1203216)
- Fix device-mapper rpm package versioning to prevent migration issues (bsc#1199074)
- Fix lvmlockd to support sanlock (bsc#1203482)
</description>
    <pkglist>
      <collection>
        <package name="device-mapper" epoch="0" version="2.03.05_1.02.163" release="150400.185.1" arch="x86_64" src="x86_64/device-mapper-2.03.05_1.02.163-150400.185.1.x86_64.rpm">
          <filename>device-mapper-2.03.05_1.02.163-150400.185.1.x86_64.rpm</filename>
        </package>
        <package name="libdevmapper-event1_03" epoch="0" version="2.03.05_1.02.163" release="150400.185.1" arch="x86_64" src="x86_64/libdevmapper-event1_03-2.03.05_1.02.163-150400.185.1.x86_64.rpm">
          <filename>libdevmapper-event1_03-2.03.05_1.02.163-150400.185.1.x86_64.rpm</filename>
        </package>
        <package name="libdevmapper1_03" epoch="0" version="2.03.05_1.02.163" release="150400.185.1" arch="x86_64" src="x86_64/libdevmapper1_03-2.03.05_1.02.163-150400.185.1.x86_64.rpm">
          <filename>libdevmapper1_03-2.03.05_1.02.163-150400.185.1.x86_64.rpm</filename>
        </package>
        <package name="liblvm2cmd2_03" epoch="0" version="2.03.05" release="150400.185.1" arch="x86_64" src="x86_64/liblvm2cmd2_03-2.03.05-150400.185.1.x86_64.rpm">
          <filename>liblvm2cmd2_03-2.03.05-150400.185.1.x86_64.rpm</filename>
        </package>
        <package name="lvm2" epoch="0" version="2.03.05" release="150400.185.1" arch="src" src="src/lvm2-2.03.05-150400.185.1.src.rpm">
          <filename>lvm2-2.03.05-150400.185.1.src.rpm</filename>
        </package>
        <package name="lvm2" epoch="0" version="2.03.05" release="150400.185.1" arch="x86_64" src="x86_64/lvm2-2.03.05-150400.185.1.x86_64.rpm">
          <filename>lvm2-2.03.05-150400.185.1.x86_64.rpm</filename>
        </package>
        <package name="lvm2-device-mapper" epoch="0" version="2.03.05" release="150400.185.1" arch="src" src="src/lvm2-device-mapper-2.03.05-150400.185.1.src.rpm">
          <filename>lvm2-device-mapper-2.03.05-150400.185.1.src.rpm</filename>
        </package>
        <package name="device-mapper" epoch="0" version="2.03.05_1.02.163" release="150400.185.1" arch="aarch64" src="aarch64/device-mapper-2.03.05_1.02.163-150400.185.1.aarch64.rpm">
          <filename>device-mapper-2.03.05_1.02.163-150400.185.1.aarch64.rpm</filename>
        </package>
        <package name="libdevmapper-event1_03" epoch="0" version="2.03.05_1.02.163" release="150400.185.1" arch="aarch64" src="aarch64/libdevmapper-event1_03-2.03.05_1.02.163-150400.185.1.aarch64.rpm">
          <filename>libdevmapper-event1_03-2.03.05_1.02.163-150400.185.1.aarch64.rpm</filename>
        </package>
        <package name="libdevmapper1_03" epoch="0" version="2.03.05_1.02.163" release="150400.185.1" arch="aarch64" src="aarch64/libdevmapper1_03-2.03.05_1.02.163-150400.185.1.aarch64.rpm">
          <filename>libdevmapper1_03-2.03.05_1.02.163-150400.185.1.aarch64.rpm</filename>
        </package>
        <package name="liblvm2cmd2_03" epoch="0" version="2.03.05" release="150400.185.1" arch="aarch64" src="aarch64/liblvm2cmd2_03-2.03.05-150400.185.1.aarch64.rpm">
          <filename>liblvm2cmd2_03-2.03.05-150400.185.1.aarch64.rpm</filename>
        </package>
        <package name="lvm2" epoch="0" version="2.03.05" release="150400.185.1" arch="aarch64" src="aarch64/lvm2-2.03.05-150400.185.1.aarch64.rpm">
          <filename>lvm2-2.03.05-150400.185.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4281</id>
    <title>Security update for python3</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669733223"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188607" id="1188607" title="segfault in Python 3.6 GC module" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18348" id="CVE-2019-18348" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18348" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8492" id="CVE-2020-8492" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8492" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10735" id="CVE-2020-10735" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10735" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37454" id="CVE-2022-37454" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37454" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203125" id="1203125" title="VUL-0: CVE-2020-10735: python27,python,python310,python3,python39,python36: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204577" id="1204577" title="VUL-0: CVE-2022-37454: python,php7,php8: SHA-3 Buffer Overflow" type="bugzilla"/>
    </references>
    <description>This update for python3 fixes the following issues:

- CVE-2022-37454: Fixed a buffer overflow in hashlib.sha3_* implementations. (bsc#1204577)
- CVE-2020-10735: Fixed a bug to limit amount of digits converting text to int and vice vera. (bsc#1203125)

The following non-security bug was fixed:

- Fixed a crash in the garbage collection (bsc#1188607).
</description>
    <pkglist>
      <collection>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.37.2" arch="x86_64" src="x86_64/libpython3_6m1_0-3.6.15-150300.10.37.2.x86_64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.37.2.x86_64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.37.2" arch="src" src="src/python3-3.6.15-150300.10.37.2.src.rpm">
          <filename>python3-3.6.15-150300.10.37.2.src.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.37.2" arch="x86_64" src="x86_64/python3-3.6.15-150300.10.37.2.x86_64.rpm">
          <filename>python3-3.6.15-150300.10.37.2.x86_64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.37.2" arch="x86_64" src="x86_64/python3-base-3.6.15-150300.10.37.2.x86_64.rpm">
          <filename>python3-base-3.6.15-150300.10.37.2.x86_64.rpm</filename>
        </package>
        <package name="python3-core" epoch="0" version="3.6.15" release="150300.10.37.2" arch="src" src="src/python3-core-3.6.15-150300.10.37.2.src.rpm">
          <filename>python3-core-3.6.15-150300.10.37.2.src.rpm</filename>
        </package>
        <package name="libpython3_6m1_0" epoch="0" version="3.6.15" release="150300.10.37.2" arch="aarch64" src="aarch64/libpython3_6m1_0-3.6.15-150300.10.37.2.aarch64.rpm">
          <filename>libpython3_6m1_0-3.6.15-150300.10.37.2.aarch64.rpm</filename>
        </package>
        <package name="python3" epoch="0" version="3.6.15" release="150300.10.37.2" arch="aarch64" src="aarch64/python3-3.6.15-150300.10.37.2.aarch64.rpm">
          <filename>python3-3.6.15-150300.10.37.2.aarch64.rpm</filename>
        </package>
        <package name="python3-base" epoch="0" version="3.6.15" release="150300.10.37.2" arch="aarch64" src="aarch64/python3-base-3.6.15-150300.10.37.2.aarch64.rpm">
          <filename>python3-base-3.6.15-150300.10.37.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4312</id>
    <title>Recommended update for tar</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669976305"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203600" id="1203600" title="tar extract fails with Unexpected inconsistency when making directory" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200657" id="1200657" title="tar-1.34-150000.3.12.1 failed to extract due to race condition in creating directories" type="bugzilla"/>
    </references>
    <description>This update for tar fixes the following issues:

- Fix unexpected inconsistency when making directory (bsc#1203600)
- Update race condition fix (bsc#1200657)
</description>
    <pkglist>
      <collection>
        <package name="tar" epoch="0" version="1.34" release="150000.3.22.3" arch="src" src="src/tar-1.34-150000.3.22.3.src.rpm">
          <filename>tar-1.34-150000.3.22.3.src.rpm</filename>
        </package>
        <package name="tar" epoch="0" version="1.34" release="150000.3.22.3" arch="x86_64" src="x86_64/tar-1.34-150000.3.22.3.x86_64.rpm">
          <filename>tar-1.34-150000.3.22.3.x86_64.rpm</filename>
        </package>
        <package name="tar" epoch="0" version="1.34" release="150000.3.22.3" arch="aarch64" src="aarch64/tar-1.34-150000.3.22.3.aarch64.rpm">
          <filename>tar-1.34-150000.3.22.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4153</id>
    <title>Security update for krb5</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669037673"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42898" id="CVE-2022-42898" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42898" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205126" id="1205126" title="VUL-0: EMBARGOED:  CVE-2022-42898: krb5: samba: heimdal: Samba buffer overflow vulnerabilities on 32-bit systems" type="bugzilla"/>
    </references>
    <description>This update for krb5 fixes the following issues:

- CVE-2022-42898: Fixed integer overflow in PAC parsing (bsc#1205126).
</description>
    <pkglist>
      <collection>
        <package name="krb5" epoch="0" version="1.19.2" release="150400.3.3.1" arch="src" src="src/krb5-1.19.2-150400.3.3.1.src.rpm">
          <filename>krb5-1.19.2-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="krb5" epoch="0" version="1.19.2" release="150400.3.3.1" arch="x86_64" src="x86_64/krb5-1.19.2-150400.3.3.1.x86_64.rpm">
          <filename>krb5-1.19.2-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="krb5" epoch="0" version="1.19.2" release="150400.3.3.1" arch="aarch64" src="aarch64/krb5-1.19.2-150400.3.3.1.aarch64.rpm">
          <filename>krb5-1.19.2-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4206</id>
    <title>Security update for pixman</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669221327"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44638" id="CVE-2022-44638" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44638" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205033" id="1205033" title="VUL-0: CVE-2022-44638: pixman: integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write" type="bugzilla"/>
    </references>
    <description>This update for pixman fixes the following issues:

- CVE-2022-44638: Fixed an integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write (bsc#1205033).
</description>
    <pkglist>
      <collection>
        <package name="libpixman-1-0" epoch="0" version="0.40.0" release="150400.3.3.1" arch="x86_64" src="x86_64/libpixman-1-0-0.40.0-150400.3.3.1.x86_64.rpm">
          <filename>libpixman-1-0-0.40.0-150400.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="pixman" epoch="0" version="0.40.0" release="150400.3.3.1" arch="src" src="src/pixman-0.40.0-150400.3.3.1.src.rpm">
          <filename>pixman-0.40.0-150400.3.3.1.src.rpm</filename>
        </package>
        <package name="libpixman-1-0" epoch="0" version="0.40.0" release="150400.3.3.1" arch="aarch64" src="aarch64/libpixman-1-0-0.40.0-150400.3.3.1.aarch64.rpm">
          <filename>libpixman-1-0-0.40.0-150400.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4141</id>
    <title>Security update for grub2</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669019313"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3775" id="CVE-2022-3775" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3775" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2601" id="CVE-2022-2601" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2601" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205178" id="1205178" title="VUL-0: EMBARGOED: CVE-2022-2601: grub2: buffer overflow in grub_font_construct_glyph" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205182" id="1205182" title="VUL-0: EMBARGOED: CVE-2022-3775: grub2: font: Fix an integer underflow in blit_comb()" type="bugzilla"/>
    </references>
    <description>This update for grub2 fixes the following issues:

- CVE-2022-2601: Fixed buffer overflow in grub_font_construct_glyph (bsc#1205178).
- CVE-2022-3775: Fixed integer underflow in blit_comb() (bsc#1205182).
    
Other:

- Bump upstream SBAT generation to 3
</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.17.1" arch="src" src="src/grub2-2.06-150400.11.17.1.src.rpm">
          <filename>grub2-2.06-150400.11.17.1.src.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.17.1" arch="x86_64" src="x86_64/grub2-2.06-150400.11.17.1.x86_64.rpm">
          <filename>grub2-2.06-150400.11.17.1.x86_64.rpm</filename>
        </package>
        <package name="grub2-i386-pc" epoch="0" version="2.06" release="150400.11.17.1" arch="noarch" src="noarch/grub2-i386-pc-2.06-150400.11.17.1.noarch.rpm">
          <filename>grub2-i386-pc-2.06-150400.11.17.1.noarch.rpm</filename>
        </package>
        <package name="grub2-snapper-plugin" epoch="0" version="2.06" release="150400.11.17.1" arch="noarch" src="noarch/grub2-snapper-plugin-2.06-150400.11.17.1.noarch.rpm">
          <filename>grub2-snapper-plugin-2.06-150400.11.17.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-efi" epoch="0" version="2.06" release="150400.11.17.1" arch="noarch" src="noarch/grub2-x86_64-efi-2.06-150400.11.17.1.noarch.rpm">
          <filename>grub2-x86_64-efi-2.06-150400.11.17.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.06" release="150400.11.17.1" arch="noarch" src="noarch/grub2-x86_64-xen-2.06-150400.11.17.1.noarch.rpm">
          <filename>grub2-x86_64-xen-2.06-150400.11.17.1.noarch.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.06" release="150400.11.17.1" arch="aarch64" src="aarch64/grub2-2.06-150400.11.17.1.aarch64.rpm">
          <filename>grub2-2.06-150400.11.17.1.aarch64.rpm</filename>
        </package>
        <package name="grub2-arm64-efi" epoch="0" version="2.06" release="150400.11.17.1" arch="noarch" src="noarch/grub2-arm64-efi-2.06-150400.11.17.1.noarch.rpm">
          <filename>grub2-arm64-efi-2.06-150400.11.17.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4278</id>
    <title>Security update for supportutils</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669733061"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188086" id="1188086" title="&quot;#includedir /etc/sudoers.d&quot; in sudoers file is skipped by supportutils" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197428" id="1197428" title="supportconfig not collecting power management information (supportutils)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203818" id="1203818" title="Some passwords are not censored in supportconfig files." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1184689" id="1184689" title="supportconfig reporting bare metal systems as KVM" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200330" id="1200330" title="Xorg does not log messages in /var/log/Xorg.[0,1].log" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192252" id="1192252" title="Improve collection of multipath related information with supportconfig" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202337" id="1202337" title="Supportconfig's updates.txt does not show the system registration status" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192648" id="1192648" title="Request from IBM to add current day's sar data to supportconfig" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202417" id="1202417" title="Need to include nvmf specific commands/logs in supportconfig (nvme_core/nvmf/Sles)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202269" id="1202269" title="supportconfig does not include expected YaST logs" type="bugzilla"/>
    </references>
    <description>This update for supportutils fixes the following issues:

Security issues fixed:

- Passwords correctly removed from email.txt, updates.txt and fs-iscsi.txt (bsc#1203818)

Bug fixes:

- Added lifecycle information
- Fixed KVM virtualization detection on bare metal (bsc#1184689)
- Added logging using journalctl (bsc#1200330)
- Get current sar data before collecting files (bsc#1192648)
- Collects everything in /etc/multipath/ (bsc#1192252)
- Collects power management information in hardware.txt (bsc#1197428)
- Checks for suseconnect-ng or SUSEConnect packages (bsc#1202337)
- Fixed conf_files and conf_text_files so y2log is gathered (bsc#1202269)
- Update to nvme_info and block_info (bsc#1202417)
- Added includedir directories from /etc/sudoers (bsc#1188086)
</description>
    <pkglist>
      <collection>
        <package name="supportutils" epoch="0" version="3.1.21" release="150300.7.35.15.1" arch="noarch" src="noarch/supportutils-3.1.21-150300.7.35.15.1.noarch.rpm">
          <filename>supportutils-3.1.21-150300.7.35.15.1.noarch.rpm</filename>
        </package>
        <package name="supportutils" epoch="0" version="3.1.21" release="150300.7.35.15.1" arch="src" src="src/supportutils-3.1.21-150300.7.35.15.1.src.rpm">
          <filename>supportutils-3.1.21-150300.7.35.15.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4147</id>
    <title>Security update for kubevirt stack</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669022654"/>
    <references/>
    <description>
This update provides rebuilds of the kubevirt containers with up to date base images,
fixing various security issues.
</description>
    <pkglist>
      <collection>
        <package name="kubevirt" epoch="0" version="0.54.0" release="150400.3.7.1" arch="src" src="src/kubevirt-0.54.0-150400.3.7.1.src.rpm">
          <filename>kubevirt-0.54.0-150400.3.7.1.src.rpm</filename>
        </package>
        <package name="kubevirt-manifests" epoch="0" version="0.54.0" release="150400.3.7.1" arch="x86_64" src="x86_64/kubevirt-manifests-0.54.0-150400.3.7.1.x86_64.rpm">
          <filename>kubevirt-manifests-0.54.0-150400.3.7.1.x86_64.rpm</filename>
        </package>
        <package name="kubevirt-virtctl" epoch="0" version="0.54.0" release="150400.3.7.1" arch="x86_64" src="x86_64/kubevirt-virtctl-0.54.0-150400.3.7.1.x86_64.rpm">
          <filename>kubevirt-virtctl-0.54.0-150400.3.7.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4138</id>
    <title>Recommended update for python-msgpack</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1668993707"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203743" id="1203743" title="FTBFS: python-msgpack won't compile on SP5" type="bugzilla"/>
    </references>
    <description>This update for python-msgpack fixes the following issues:

- Fix build failures on SUSE Linux Enterprise 15 Service Pack 5 (bsc#1203743)
</description>
    <pkglist>
      <collection>
        <package name="python-msgpack" epoch="0" version="0.5.6" release="150100.3.3.1" arch="src" src="src/python-msgpack-0.5.6-150100.3.3.1.src.rpm">
          <filename>python-msgpack-0.5.6-150100.3.3.1.src.rpm</filename>
        </package>
        <package name="python3-msgpack" epoch="0" version="0.5.6" release="150100.3.3.1" arch="x86_64" src="x86_64/python3-msgpack-0.5.6-150100.3.3.1.x86_64.rpm">
          <filename>python3-msgpack-0.5.6-150100.3.3.1.x86_64.rpm</filename>
        </package>
        <package name="python3-msgpack" epoch="0" version="0.5.6" release="150100.3.3.1" arch="aarch64" src="aarch64/python3-msgpack-0.5.6-150100.3.3.1.aarch64.rpm">
          <filename>python3-msgpack-0.5.6-150100.3.3.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4466</id>
    <title>Recommended update for python-kiwi</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670994002"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203896" id="1203896" title="kexec fail in selfinstall with secureboot" type="bugzilla"/>
    </references>
    <description>This update for python-kiwi fixes the following issues:

Version update from 9.24.36 to 9.24.43:

- Add example aarch64 integration test for Ubuntu
- Add option '--target-arch' for image info to allow cross architecture dependency solving
- Add support for group id in users setting
- Fix error handling for setfiles policy lookup and ensure the path to run scandir is properly created
- Fix handling of signing_keys in cmdline options
- Fix helper method to detect dracut outfile format
- Fix 'kexec' options setup in kiwi-dump-reboot
- Fix issues with the setfiles SELinux relabel command
- Prefer file based syscall in kexec when possible, needed to support boot on a secure boot enabled system (bsc#1203896)
- Setup SELinux on every system prepare / build
</description>
    <pkglist>
      <collection>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.56.3" arch="x86_64" src="x86_64/dracut-kiwi-lib-9.24.43-150100.3.56.3.x86_64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.56.3.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.56.3" arch="x86_64" src="x86_64/dracut-kiwi-oem-dump-9.24.43-150100.3.56.3.x86_64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.56.3.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.56.3" arch="x86_64" src="x86_64/dracut-kiwi-oem-repart-9.24.43-150100.3.56.3.x86_64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.56.3.x86_64.rpm</filename>
        </package>
        <package name="python-kiwi" epoch="0" version="9.24.43" release="150100.3.56.3" arch="src" src="src/python-kiwi-9.24.43-150100.3.56.3.src.rpm">
          <filename>python-kiwi-9.24.43-150100.3.56.3.src.rpm</filename>
        </package>
        <package name="dracut-kiwi-lib" epoch="0" version="9.24.43" release="150100.3.56.3" arch="aarch64" src="aarch64/dracut-kiwi-lib-9.24.43-150100.3.56.3.aarch64.rpm">
          <filename>dracut-kiwi-lib-9.24.43-150100.3.56.3.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="9.24.43" release="150100.3.56.3" arch="aarch64" src="aarch64/dracut-kiwi-oem-dump-9.24.43-150100.3.56.3.aarch64.rpm">
          <filename>dracut-kiwi-oem-dump-9.24.43-150100.3.56.3.aarch64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="9.24.43" release="150100.3.56.3" arch="aarch64" src="aarch64/dracut-kiwi-oem-repart-9.24.43-150100.3.56.3.aarch64.rpm">
          <filename>dracut-kiwi-oem-repart-9.24.43-150100.3.56.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4191</id>
    <title>Security update for containerized-data-importer</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669196195"/>
    <references/>
    <description>
This update rebuilds the current containeried data importer images against
current base images, to fix security issues.
</description>
    <pkglist>
      <collection>
        <package name="containerized-data-importer" epoch="0" version="1.51.0" release="150400.4.7.1" arch="src" src="src/containerized-data-importer-1.51.0-150400.4.7.1.src.rpm">
          <filename>containerized-data-importer-1.51.0-150400.4.7.1.src.rpm</filename>
        </package>
        <package name="containerized-data-importer-manifests" epoch="0" version="1.51.0" release="150400.4.7.1" arch="x86_64" src="x86_64/containerized-data-importer-manifests-1.51.0-150400.4.7.1.x86_64.rpm">
          <filename>containerized-data-importer-manifests-1.51.0-150400.4.7.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4328</id>
    <title>Recommended update for audit-secondary</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670325919"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204844" id="1204844" title="&quot;systemctl restart auditd.service&quot; will not reload audit rules" type="bugzilla"/>
    </references>
    <description>This update for audit-secondary fixes the following issues:

- Fix rules not loaded when restarting auditd.service (bsc#1204844)
</description>
    <pkglist>
      <collection>
        <package name="audit" epoch="0" version="3.0.6" release="150400.4.6.1" arch="x86_64" src="x86_64/audit-3.0.6-150400.4.6.1.x86_64.rpm">
          <filename>audit-3.0.6-150400.4.6.1.x86_64.rpm</filename>
        </package>
        <package name="audit-audispd-plugins" epoch="0" version="3.0.6" release="150400.4.6.1" arch="x86_64" src="x86_64/audit-audispd-plugins-3.0.6-150400.4.6.1.x86_64.rpm">
          <filename>audit-audispd-plugins-3.0.6-150400.4.6.1.x86_64.rpm</filename>
        </package>
        <package name="audit-secondary" epoch="0" version="3.0.6" release="150400.4.6.1" arch="src" src="src/audit-secondary-3.0.6-150400.4.6.1.src.rpm">
          <filename>audit-secondary-3.0.6-150400.4.6.1.src.rpm</filename>
        </package>
        <package name="python3-audit" epoch="0" version="3.0.6" release="150400.4.6.1" arch="x86_64" src="x86_64/python3-audit-3.0.6-150400.4.6.1.x86_64.rpm">
          <filename>python3-audit-3.0.6-150400.4.6.1.x86_64.rpm</filename>
        </package>
        <package name="system-group-audit" epoch="0" version="3.0.6" release="150400.4.6.1" arch="x86_64" src="x86_64/system-group-audit-3.0.6-150400.4.6.1.x86_64.rpm">
          <filename>system-group-audit-3.0.6-150400.4.6.1.x86_64.rpm</filename>
        </package>
        <package name="audit" epoch="0" version="3.0.6" release="150400.4.6.1" arch="aarch64" src="aarch64/audit-3.0.6-150400.4.6.1.aarch64.rpm">
          <filename>audit-3.0.6-150400.4.6.1.aarch64.rpm</filename>
        </package>
        <package name="audit-audispd-plugins" epoch="0" version="3.0.6" release="150400.4.6.1" arch="aarch64" src="aarch64/audit-audispd-plugins-3.0.6-150400.4.6.1.aarch64.rpm">
          <filename>audit-audispd-plugins-3.0.6-150400.4.6.1.aarch64.rpm</filename>
        </package>
        <package name="python3-audit" epoch="0" version="3.0.6" release="150400.4.6.1" arch="aarch64" src="aarch64/python3-audit-3.0.6-150400.4.6.1.aarch64.rpm">
          <filename>python3-audit-3.0.6-150400.4.6.1.aarch64.rpm</filename>
        </package>
        <package name="system-group-audit" epoch="0" version="3.0.6" release="150400.4.6.1" arch="aarch64" src="aarch64/system-group-audit-3.0.6-150400.4.6.1.aarch64.rpm">
          <filename>system-group-audit-3.0.6-150400.4.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4214</id>
    <title>Security update for libdb-4_8</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669303095"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1174414" id="1174414" title="VUL-1: CVE-2019-2708: libdb-4_5,libdb-4_8: libdb: data store execution leads to partial DoS" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2708" id="CVE-2019-2708" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2708" type="cve"/>
    </references>
    <description>This update for libdb-4_8 fixes the following issues:

- CVE-2019-2708: Fixed partial DoS due to data store execution (bsc#1174414).
</description>
    <pkglist>
      <collection>
        <package name="db48-utils" epoch="0" version="4.8.30" release="150000.7.6.1" arch="x86_64" src="x86_64/db48-utils-4.8.30-150000.7.6.1.x86_64.rpm">
          <filename>db48-utils-4.8.30-150000.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="libdb-4_8" epoch="0" version="4.8.30" release="150000.7.6.1" arch="src" src="src/libdb-4_8-4.8.30-150000.7.6.1.src.rpm">
          <filename>libdb-4_8-4.8.30-150000.7.6.1.src.rpm</filename>
        </package>
        <package name="libdb-4_8" epoch="0" version="4.8.30" release="150000.7.6.1" arch="x86_64" src="x86_64/libdb-4_8-4.8.30-150000.7.6.1.x86_64.rpm">
          <filename>libdb-4_8-4.8.30-150000.7.6.1.x86_64.rpm</filename>
        </package>
        <package name="db48-utils" epoch="0" version="4.8.30" release="150000.7.6.1" arch="aarch64" src="aarch64/db48-utils-4.8.30-150000.7.6.1.aarch64.rpm">
          <filename>db48-utils-4.8.30-150000.7.6.1.aarch64.rpm</filename>
        </package>
        <package name="libdb-4_8" epoch="0" version="4.8.30" release="150000.7.6.1" arch="aarch64" src="aarch64/libdb-4_8-4.8.30-150000.7.6.1.aarch64.rpm">
          <filename>libdb-4_8-4.8.30-150000.7.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4259</id>
    <title>Security update for tiff</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669646632"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3970" id="CVE-2022-3970" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3970" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3599" id="CVE-2022-3599" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3599" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3626" id="CVE-2022-3626" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3626" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3627" id="CVE-2022-3627" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3627" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3597" id="CVE-2022-3597" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3597" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204643" id="1204643" title="VUL-0: CVE-2022-3599: tiff: out-of-bounds read in writeSingleSection in tools/tiffcrop.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205392" id="1205392" title="VUL-0: CVE-2022-3970: tiff: unsigned integer overflow in TIFFReadRGBATileExt()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204644" id="1204644" title="VUL-0: CVE-2022-3626: tiff: out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204645" id="1204645" title="VUL-0: CVE-2022-3627: tiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204641" id="1204641" title="VUL-0: CVE-2022-3597: tiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c" type="bugzilla"/>
    </references>
    <description>This update for tiff fixes the following issues:

- CVE-2022-3597: Fixed out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (bnc#1204641).
- CVE-2022-3599: Fixed out-of-bounds read in writeSingleSection in tools/tiffcrop.c (bnc#1204643).
- CVE-2022-3626: Fixed out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c (bnc#1204644)
- CVE-2022-3627: Fixed out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (bnc#1204645).
- CVE-2022-3970: Fixed unsigned integer overflow in TIFFReadRGBATileExt() (bnc#1205392).
</description>
    <pkglist>
      <collection>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.19.1" arch="x86_64" src="x86_64/libtiff5-4.0.9-150000.45.19.1.x86_64.rpm">
          <filename>libtiff5-4.0.9-150000.45.19.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" epoch="0" version="4.0.9" release="150000.45.19.1" arch="src" src="src/tiff-4.0.9-150000.45.19.1.src.rpm">
          <filename>tiff-4.0.9-150000.45.19.1.src.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.19.1" arch="aarch64" src="aarch64/libtiff5-4.0.9-150000.45.19.1.aarch64.rpm">
          <filename>libtiff5-4.0.9-150000.45.19.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4420</id>
    <title>Recommended update for salt</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670916345"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203886" id="1203886" title="L3: Exclude with extend function not working as expected" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203834" id="1203834" title="files.py:385: RuntimeWarning: line buffering (buffering=1) isn't supported in binary mode, the default buffer size will be used" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203685" id="1203685" title="Amazon EC2 instances using Nitro Hypervisor are not detected as virtual machines with SP4 Clients" type="bugzilla"/>
    </references>
    <description>This update for salt fixes the following issues:

- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
</description>
    <pkglist>
      <collection>
        <package name="python3-salt" epoch="0" version="3004" release="150400.8.17.7" arch="x86_64" src="x86_64/python3-salt-3004-150400.8.17.7.x86_64.rpm">
          <filename>python3-salt-3004-150400.8.17.7.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3004" release="150400.8.17.7" arch="src" src="src/salt-3004-150400.8.17.7.src.rpm">
          <filename>salt-3004-150400.8.17.7.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3004" release="150400.8.17.7" arch="x86_64" src="x86_64/salt-3004-150400.8.17.7.x86_64.rpm">
          <filename>salt-3004-150400.8.17.7.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3004" release="150400.8.17.7" arch="x86_64" src="x86_64/salt-minion-3004-150400.8.17.7.x86_64.rpm">
          <filename>salt-minion-3004-150400.8.17.7.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3004" release="150400.8.17.7" arch="x86_64" src="x86_64/salt-transactional-update-3004-150400.8.17.7.x86_64.rpm">
          <filename>salt-transactional-update-3004-150400.8.17.7.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python3-salt" epoch="0" version="3004" release="150400.8.17.7" arch="aarch64" src="aarch64/python3-salt-3004-150400.8.17.7.aarch64.rpm">
          <filename>python3-salt-3004-150400.8.17.7.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3004" release="150400.8.17.7" arch="aarch64" src="aarch64/salt-3004-150400.8.17.7.aarch64.rpm">
          <filename>salt-3004-150400.8.17.7.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3004" release="150400.8.17.7" arch="aarch64" src="aarch64/salt-minion-3004-150400.8.17.7.aarch64.rpm">
          <filename>salt-minion-3004-150400.8.17.7.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3004" release="150400.8.17.7" arch="aarch64" src="aarch64/salt-transactional-update-3004-150400.8.17.7.aarch64.rpm">
          <filename>salt-transactional-update-3004-150400.8.17.7.aarch64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4592</id>
    <title>Security update for cni</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1671551536"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1181961" id="1181961" title="VUL-0: CVE-2021-20206: cni,podman,cni-plugins: Arbitrary path injection via type field in CNI configuration" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20206" id="CVE-2021-20206" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20206" type="cve"/>
    </references>
    <description>This update for cni fixes the following issues:

- CVE-2021-20206: Fixed arbitrary path injection via type field in CNI configuration (bsc#1181961).
</description>
    <pkglist>
      <collection>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.8.1" arch="src" src="src/cni-0.7.1-150100.3.8.1.src.rpm">
          <filename>cni-0.7.1-150100.3.8.1.src.rpm</filename>
        </package>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.8.1" arch="x86_64" src="x86_64/cni-0.7.1-150100.3.8.1.x86_64.rpm">
          <filename>cni-0.7.1-150100.3.8.1.x86_64.rpm</filename>
        </package>
        <package name="cni" epoch="0" version="0.7.1" release="150100.3.8.1" arch="aarch64" src="aarch64/cni-0.7.1-150100.3.8.1.aarch64.rpm">
          <filename>cni-0.7.1-150100.3.8.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4593</id>
    <title>Security update for cni-plugins</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1671551761"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1181961" id="1181961" title="VUL-0: CVE-2021-20206: cni,podman,cni-plugins: Arbitrary path injection via type field in CNI configuration" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20206" id="CVE-2021-20206" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20206" type="cve"/>
    </references>
    <description>This update for cni-plugins fixes the following issues:

- CVE-2021-20206: Fixed arbitrary path injection via type field in CNI configuration (bsc#1181961).
</description>
    <pkglist>
      <collection>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.11.1" arch="src" src="src/cni-plugins-0.8.6-150100.3.11.1.src.rpm">
          <filename>cni-plugins-0.8.6-150100.3.11.1.src.rpm</filename>
        </package>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.11.1" arch="x86_64" src="x86_64/cni-plugins-0.8.6-150100.3.11.1.x86_64.rpm">
          <filename>cni-plugins-0.8.6-150100.3.11.1.x86_64.rpm</filename>
        </package>
        <package name="cni-plugins" epoch="0" version="0.8.6" release="150100.3.11.1" arch="aarch64" src="aarch64/cni-plugins-0.8.6-150100.3.11.1.aarch64.rpm">
          <filename>cni-plugins-0.8.6-150100.3.11.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4382</id>
    <title>Recommended update for libnvme</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670554847"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205019" id="1205019" title="[NetApp SLES15 SP4 Bug] nvme connect-all crash due to double free()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203163" id="1203163" title="[NetApp SLES15 SP4 RFE] NVMe/FC auto-connect scripts should leverage the config JSON file for connect-all" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200089" id="1200089" title="[NetApp SLES15 SP4 RFE]: New command to display entire NVMe topology" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203204" id="1203204" title="[NetApp SLES15 SP4 Bug] nvme connect-all still relies on discovery.conf even for a target that is TP 8013/8014 compliant" type="bugzilla"/>
    </references>
    <description>This update for libnvme fixes the following issues:

libnvme:

- Fix 'connect-all' failures when handling JSON configuration file (bsc#1205019)

nvme-cli:

- Honor JSON config file in 'connect-all' command (bsc#1203204 bsc#1203163)
- Add 'show-topology' command (bsc#1200089)
</description>
    <pkglist>
      <collection>
        <package name="libnvme" epoch="0" version="1.0" release="150400.3.9.3" arch="src" src="src/libnvme-1.0-150400.3.9.3.src.rpm">
          <filename>libnvme-1.0-150400.3.9.3.src.rpm</filename>
        </package>
        <package name="libnvme1" epoch="0" version="1.0" release="150400.3.9.3" arch="x86_64" src="x86_64/libnvme1-1.0-150400.3.9.3.x86_64.rpm">
          <filename>libnvme1-1.0-150400.3.9.3.x86_64.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0" release="150400.3.9.3" arch="src" src="src/nvme-cli-2.0-150400.3.9.3.src.rpm">
          <filename>nvme-cli-2.0-150400.3.9.3.src.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0" release="150400.3.9.3" arch="x86_64" src="x86_64/nvme-cli-2.0-150400.3.9.3.x86_64.rpm">
          <filename>nvme-cli-2.0-150400.3.9.3.x86_64.rpm</filename>
        </package>
        <package name="libnvme1" epoch="0" version="1.0" release="150400.3.9.3" arch="aarch64" src="aarch64/libnvme1-1.0-150400.3.9.3.aarch64.rpm">
          <filename>libnvme1-1.0-150400.3.9.3.aarch64.rpm</filename>
        </package>
        <package name="nvme-cli" epoch="0" version="2.0" release="150400.3.9.3" arch="aarch64" src="aarch64/nvme-cli-2.0-150400.3.9.3.aarch64.rpm">
          <filename>nvme-cli-2.0-150400.3.9.3.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4499</id>
    <title>Recommended update for openssh</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1671097779"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1179465" id="1179465" title="L3: dbus not available when logged over ssh (ssh -X: GTK apps timeout on flatpak initialization)" type="bugzilla"/>
    </references>
    <description>This update for openssh fixes the following issues:

- Make ssh connections update their dbus environment (bsc#1179465):
  * Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish 
</description>
    <pkglist>
      <collection>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.15.4" arch="src" src="src/openssh-8.4p1-150300.3.15.4.src.rpm">
          <filename>openssh-8.4p1-150300.3.15.4.src.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.15.4" arch="x86_64" src="x86_64/openssh-8.4p1-150300.3.15.4.x86_64.rpm">
          <filename>openssh-8.4p1-150300.3.15.4.x86_64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.15.4" arch="x86_64" src="x86_64/openssh-clients-8.4p1-150300.3.15.4.x86_64.rpm">
          <filename>openssh-clients-8.4p1-150300.3.15.4.x86_64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.15.4" arch="x86_64" src="x86_64/openssh-common-8.4p1-150300.3.15.4.x86_64.rpm">
          <filename>openssh-common-8.4p1-150300.3.15.4.x86_64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.15.4" arch="x86_64" src="x86_64/openssh-fips-8.4p1-150300.3.15.4.x86_64.rpm">
          <filename>openssh-fips-8.4p1-150300.3.15.4.x86_64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.15.4" arch="x86_64" src="x86_64/openssh-server-8.4p1-150300.3.15.4.x86_64.rpm">
          <filename>openssh-server-8.4p1-150300.3.15.4.x86_64.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="8.4p1" release="150300.3.15.4" arch="aarch64" src="aarch64/openssh-8.4p1-150300.3.15.4.aarch64.rpm">
          <filename>openssh-8.4p1-150300.3.15.4.aarch64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="8.4p1" release="150300.3.15.4" arch="aarch64" src="aarch64/openssh-clients-8.4p1-150300.3.15.4.aarch64.rpm">
          <filename>openssh-clients-8.4p1-150300.3.15.4.aarch64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="8.4p1" release="150300.3.15.4" arch="aarch64" src="aarch64/openssh-common-8.4p1-150300.3.15.4.aarch64.rpm">
          <filename>openssh-common-8.4p1-150300.3.15.4.aarch64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="8.4p1" release="150300.3.15.4" arch="aarch64" src="aarch64/openssh-fips-8.4p1-150300.3.15.4.aarch64.rpm">
          <filename>openssh-fips-8.4p1-150300.3.15.4.aarch64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="8.4p1" release="150300.3.15.4" arch="aarch64" src="aarch64/openssh-server-8.4p1-150300.3.15.4.aarch64.rpm">
          <filename>openssh-server-8.4p1-150300.3.15.4.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4383</id>
    <title>Recommended update for iputils</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670554925"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203957" id="1203957" title="[aarch64] ping (iputils): Occasional segfault" type="bugzilla"/>
    </references>
    <description>This update for iputils fixes the following issues:

- Fix occasional memory access violation when using `ping` (bsc#1203957)
</description>
    <pkglist>
      <collection>
        <package name="iputils" epoch="0" version="20211215" release="150400.3.3.2" arch="src" src="src/iputils-20211215-150400.3.3.2.src.rpm">
          <filename>iputils-20211215-150400.3.3.2.src.rpm</filename>
        </package>
        <package name="iputils" epoch="0" version="20211215" release="150400.3.3.2" arch="x86_64" src="x86_64/iputils-20211215-150400.3.3.2.x86_64.rpm">
          <filename>iputils-20211215-150400.3.3.2.x86_64.rpm</filename>
        </package>
        <package name="iputils" epoch="0" version="20211215" release="150400.3.3.2" arch="aarch64" src="aarch64/iputils-20211215-150400.3.3.2.aarch64.rpm">
          <filename>iputils-20211215-150400.3.3.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="feature" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4380</id>
    <title>Feature update for ipset</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670554708"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1116432" id="1116432" title="ipset save -file &lt;filename&gt; produces empty files" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1122853" id="1122853" title="ipset error with /etc/services in SLE 15" type="bugzilla"/>
      <reference href="https://jira.suse.com/browse/PED-2086" id="PED-2086" title="https://jira.suse.com/browse/PED-2086" type="jira"/>
    </references>
    <description>This update for ipset fixes the following issues:

Version update from 6.36 to 7.15 (jsc#PED-2086):

- Update needed to match kernel protocol version
- Fix bug with 'ipset save -file &lt;filename&gt;' that wrongly produced empty files (bsc#1116432)
- A new internal protocol version between the kernel and userspace is used. This is required in order to support two
  new functions and the extendend LIST operation, which makes possible to run ipset in every case entirely over netlink
  without the need to use getsockopt()
- Allow specifying protocols by number
- Enable memory accounting for ipset allocations
- Fix argument parsing buffer overflow in ipset_parse_argv
- Fix parsing the service names for ports
- Fix memory accounting for hash types on resize
- Fix rename concurrency with listing, which can result broken list/save results
- Fix to list/save into file specified by option
- Implement sorting for hash types in the ipset tool
- Limit the maximum range of consecutive elements to add/delete
- Support the '-exist' flag with the destroy command
- For the full list of changes please consult the changelog at https://ipset.netfilter.org/changelog.html
</description>
    <pkglist>
      <collection>
        <package name="ipset" epoch="0" version="7.15" release="150400.12.3.2" arch="src" src="src/ipset-7.15-150400.12.3.2.src.rpm">
          <filename>ipset-7.15-150400.12.3.2.src.rpm</filename>
        </package>
        <package name="ipset" epoch="0" version="7.15" release="150400.12.3.2" arch="x86_64" src="x86_64/ipset-7.15-150400.12.3.2.x86_64.rpm">
          <filename>ipset-7.15-150400.12.3.2.x86_64.rpm</filename>
        </package>
        <package name="libipset13" epoch="0" version="7.15" release="150400.12.3.2" arch="x86_64" src="x86_64/libipset13-7.15-150400.12.3.2.x86_64.rpm">
          <filename>libipset13-7.15-150400.12.3.2.x86_64.rpm</filename>
        </package>
        <package name="ipset" epoch="0" version="7.15" release="150400.12.3.2" arch="s390x" src="s390x/ipset-7.15-150400.12.3.2.s390x.rpm">
          <filename>ipset-7.15-150400.12.3.2.s390x.rpm</filename>
        </package>
        <package name="libipset13" epoch="0" version="7.15" release="150400.12.3.2" arch="s390x" src="s390x/libipset13-7.15-150400.12.3.2.s390x.rpm">
          <filename>libipset13-7.15-150400.12.3.2.s390x.rpm</filename>
        </package>
        <package name="ipset" epoch="0" version="7.15" release="150400.12.3.2" arch="ppc64le" src="ppc64le/ipset-7.15-150400.12.3.2.ppc64le.rpm">
          <filename>ipset-7.15-150400.12.3.2.ppc64le.rpm</filename>
        </package>
        <package name="libipset13" epoch="0" version="7.15" release="150400.12.3.2" arch="ppc64le" src="ppc64le/libipset13-7.15-150400.12.3.2.ppc64le.rpm">
          <filename>libipset13-7.15-150400.12.3.2.ppc64le.rpm</filename>
        </package>
        <package name="ipset" epoch="0" version="7.15" release="150400.12.3.2" arch="aarch64" src="aarch64/ipset-7.15-150400.12.3.2.aarch64.rpm">
          <filename>ipset-7.15-150400.12.3.2.aarch64.rpm</filename>
        </package>
        <package name="libipset13" epoch="0" version="7.15" release="150400.12.3.2" arch="aarch64" src="aarch64/libipset13-7.15-150400.12.3.2.aarch64.rpm">
          <filename>libipset13-7.15-150400.12.3.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4212</id>
    <title>Recommended update for openssl-1_1</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669301641"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1190651" id="1190651" title="FIPS: OpenSSL Provide a service-level indicator" type="bugzilla"/>
    </references>
    <description>This update for openssl-1_1 fixes the following issues:

- FIPS: Mark PBKDF2 with key shorter than 112 bits as non-approved (bsc#1190651)
- FIPS: Consider RSA siggen/sigver with PKCS1 padding also approved (bsc#1190651)
- FIPS: Return the correct indicator for a given EC group order bits (bsc#1190651)
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.16.1" arch="x86_64" src="x86_64/libopenssl-1_1-devel-1.1.1l-150400.7.16.1.x86_64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.16.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.16.1" arch="x86_64" src="x86_64/libopenssl1_1-1.1.1l-150400.7.16.1.x86_64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.16.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.16.1" arch="x86_64" src="x86_64/libopenssl1_1-hmac-1.1.1l-150400.7.16.1.x86_64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.16.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.16.1" arch="src" src="src/openssl-1_1-1.1.1l-150400.7.16.1.src.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.16.1.src.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.16.1" arch="x86_64" src="x86_64/openssl-1_1-1.1.1l-150400.7.16.1.x86_64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.16.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-1_1-devel" epoch="0" version="1.1.1l" release="150400.7.16.1" arch="aarch64" src="aarch64/libopenssl-1_1-devel-1.1.1l-150400.7.16.1.aarch64.rpm">
          <filename>libopenssl-1_1-devel-1.1.1l-150400.7.16.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1" epoch="0" version="1.1.1l" release="150400.7.16.1" arch="aarch64" src="aarch64/libopenssl1_1-1.1.1l-150400.7.16.1.aarch64.rpm">
          <filename>libopenssl1_1-1.1.1l-150400.7.16.1.aarch64.rpm</filename>
        </package>
        <package name="libopenssl1_1-hmac" epoch="0" version="1.1.1l" release="150400.7.16.1" arch="aarch64" src="aarch64/libopenssl1_1-hmac-1.1.1l-150400.7.16.1.aarch64.rpm">
          <filename>libopenssl1_1-hmac-1.1.1l-150400.7.16.1.aarch64.rpm</filename>
        </package>
        <package name="openssl-1_1" epoch="0" version="1.1.1l" release="150400.7.16.1" arch="aarch64" src="aarch64/openssl-1_1-1.1.1l-150400.7.16.1.aarch64.rpm">
          <filename>openssl-1_1-1.1.1l-150400.7.16.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4209</id>
    <title>Security update for libarchive</title>
    <severity>low</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669221418"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36227" id="CVE-2022-36227" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36227" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205629" id="1205629" title="VUL-0: CVE-2022-36227: libarchive,bsdtar: potential NULL pointer dereference in __archive_write_allocate_filter()" type="bugzilla"/>
    </references>
    <description>This update for libarchive fixes the following issues:

- CVE-2022-36227: Fixed potential NULL pointer dereference in __archive_write_allocate_filter() (bsc#1205629).
</description>
    <pkglist>
      <collection>
        <package name="libarchive" epoch="0" version="3.5.1" release="150400.3.12.1" arch="src" src="src/libarchive-3.5.1-150400.3.12.1.src.rpm">
          <filename>libarchive-3.5.1-150400.3.12.1.src.rpm</filename>
        </package>
        <package name="libarchive13" epoch="0" version="3.5.1" release="150400.3.12.1" arch="x86_64" src="x86_64/libarchive13-3.5.1-150400.3.12.1.x86_64.rpm">
          <filename>libarchive13-3.5.1-150400.3.12.1.x86_64.rpm</filename>
        </package>
        <package name="libarchive13" epoch="0" version="3.5.1" release="150400.3.12.1" arch="aarch64" src="aarch64/libarchive13-3.5.1-150400.3.12.1.aarch64.rpm">
          <filename>libarchive13-3.5.1-150400.3.12.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4282</id>
    <title>Security update for vim</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669733470"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203152" id="1203152" title="VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203820" id="1203820" title="VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203272" id="1203272" title="VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203799" id="1203799" title="VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204779" id="1204779" title="VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203796" id="1203796" title="VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203110" id="1203110" title="VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203924" id="1203924" title="VUL-1: CVE-2022-3352: vim: vim: use after free" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203797" id="1203797" title="VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203155" id="1203155" title="VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202962" id="1202962" title="VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203509" id="1203509" title="VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203508" id="1203508" title="VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192478" id="1192478" title="VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203194" id="1203194" title="VUL-1: CVE-2022-3134: vim: use after free in do_tag()" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3278" id="CVE-2022-3278" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3278" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3324" id="CVE-2022-3324" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3324" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2980" id="CVE-2022-2980" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2980" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3297" id="CVE-2022-3297" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3297" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3235" id="CVE-2022-3235" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3235" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3296" id="CVE-2022-3296" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3296" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3099" id="CVE-2022-3099" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3099" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3928" id="CVE-2021-3928" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3928" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3134" id="CVE-2022-3134" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3134" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3153" id="CVE-2022-3153" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3153" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2982" id="CVE-2022-2982" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2982" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3352" id="CVE-2022-3352" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3352" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3705" id="CVE-2022-3705" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3705" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3037" id="CVE-2022-3037" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3037" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3234" id="CVE-2022-3234" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3234" type="cve"/>
    </references>
    <description>This update for vim fixes the following issues:

Updated to version 9.0 with patch level 0814:

- CVE-2021-3928: Fixed stack-based buffer overflow (bsc#1192478).
- CVE-2022-3234: Fixed heap-based buffer overflow (bsc#1203508).
- CVE-2022-3235: Fixed use-after-free (bsc#1203509).
- CVE-2022-3324: Fixed stack-based buffer overflow (bsc#1203820).
- CVE-2022-3705: Fixed use-after-free in function qf_update_buffer of the file quickfix.c (bsc#1204779).
- CVE-2022-2982: Fixed use-after-free in qf_fill_buffer() (bsc#1203152).
- CVE-2022-3296: Fixed stack out of bounds read in ex_finally() in ex_eval.c (bsc#1203796).
- CVE-2022-3297: Fixed use-after-free in process_next_cpt_value() at insexpand.c (bsc#1203797).
- CVE-2022-3099: Fixed use-after-free in ex_docmd.c (bsc#1203110).
- CVE-2022-3134: Fixed use-after-free in do_tag() (bsc#1203194).
- CVE-2022-3153: Fixed NULL pointer dereference (bsc#1203272).
- CVE-2022-3278: Fixed NULL pointer dereference in eval_next_non_blank() in eval.c (bsc#1203799).
- CVE-2022-3352: Fixed use-after-free (bsc#1203924).
- CVE-2022-2980: Fixed NULL pointer dereference in do_mouse() (bsc#1203155).
- CVE-2022-3037: Fixed use-after-free (bsc#1202962).
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.0.0814" release="150000.5.28.1" arch="src" src="src/vim-9.0.0814-150000.5.28.1.src.rpm">
          <filename>vim-9.0.0814-150000.5.28.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.0.0814" release="150000.5.28.1" arch="noarch" src="noarch/vim-data-common-9.0.0814-150000.5.28.1.noarch.rpm">
          <filename>vim-data-common-9.0.0814-150000.5.28.1.noarch.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.0814" release="150000.5.28.1" arch="x86_64" src="x86_64/vim-small-9.0.0814-150000.5.28.1.x86_64.rpm">
          <filename>vim-small-9.0.0814-150000.5.28.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.0.0814" release="150000.5.28.1" arch="aarch64" src="aarch64/vim-small-9.0.0814-150000.5.28.1.aarch64.rpm">
          <filename>vim-small-9.0.0814-150000.5.28.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4311</id>
    <title>Recommended update for open-vm-tools</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1669975376"/>
    <references>
      <reference href="https://jira.suse.com/browse/SLE-22385" id="SLE-22385" title="https://jira.suse.com/browse/SLE-22385" type="jira"/>
    </references>
    <description>This update for open-vm-tools fixes the following issues:

- Include binaries of open-vm-tools for ARM architecture aarch64 in SUSE Linux Enterprise 15 Service Pack 4
  (jsc#SLE-22385)
</description>
    <pkglist>
      <collection>
        <package name="libvmtools0" epoch="0" version="12.1.0" release="150300.21.2" arch="x86_64" src="x86_64/libvmtools0-12.1.0-150300.21.2.x86_64.rpm">
          <filename>libvmtools0-12.1.0-150300.21.2.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.1.0" release="150300.21.2" arch="src" src="src/open-vm-tools-12.1.0-150300.21.2.src.rpm">
          <filename>open-vm-tools-12.1.0-150300.21.2.src.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.1.0" release="150300.21.2" arch="x86_64" src="x86_64/open-vm-tools-12.1.0-150300.21.2.x86_64.rpm">
          <filename>open-vm-tools-12.1.0-150300.21.2.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4457</id>
    <title>Security update for libtpms</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670933470"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204556" id="1204556" title="libtpms failing to build on ppc64le" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1187767" id="1187767" title="VUL-0: CVE-2021-3623: libtpms: out-of-bounds access when trying to resume the state of the vTPM" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3623" id="CVE-2021-3623" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3623" type="cve"/>
    </references>
    <description>This update for libtpms fixes the following issues:

- CVE-2021-3623: Fixed out-of-bounds access when trying to resume the
  state of the vTPM (bsc#1187767)
</description>
    <pkglist>
      <collection>
        <package name="libtpms" epoch="0" version="0.8.2" release="150300.3.6.1" arch="src" src="src/libtpms-0.8.2-150300.3.6.1.src.rpm">
          <filename>libtpms-0.8.2-150300.3.6.1.src.rpm</filename>
        </package>
        <package name="libtpms0" epoch="0" version="0.8.2" release="150300.3.6.1" arch="x86_64" src="x86_64/libtpms0-0.8.2-150300.3.6.1.x86_64.rpm">
          <filename>libtpms0-0.8.2-150300.3.6.1.x86_64.rpm</filename>
        </package>
        <package name="libtpms0" epoch="0" version="0.8.2" release="150300.3.6.1" arch="aarch64" src="aarch64/libtpms0-0.8.2-150300.3.6.1.aarch64.rpm">
          <filename>libtpms0-0.8.2-150300.3.6.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4411</id>
    <title>Security update for tiff</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670901727"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3598" id="CVE-2022-3598" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3598" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3570" id="CVE-2022-3570" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3570" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204642" id="1204642" title="VUL-0: CVE-2022-3598: tiff: out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205422" id="1205422" title="VUL-0: CVE-2022-3570: tiff: libtiff: heap buffer overflows in tiffcrop.c" type="bugzilla"/>
    </references>
    <description>This update for tiff fixes the following issues:

- CVE-2022-3570: Fixed heap buffer overflows in tiffcrop.c (bsc#1205422).
- CVE-2022-3598: Fixed out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c [bsc#1204642]
</description>
    <pkglist>
      <collection>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.22.1" arch="x86_64" src="x86_64/libtiff5-4.0.9-150000.45.22.1.x86_64.rpm">
          <filename>libtiff5-4.0.9-150000.45.22.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" epoch="0" version="4.0.9" release="150000.45.22.1" arch="src" src="src/tiff-4.0.9-150000.45.22.1.src.rpm">
          <filename>tiff-4.0.9-150000.45.22.1.src.rpm</filename>
        </package>
        <package name="libtiff5" epoch="0" version="4.0.9" release="150000.45.22.1" arch="aarch64" src="aarch64/libtiff5-4.0.9-150000.45.22.1.aarch64.rpm">
          <filename>libtiff5-4.0.9-150000.45.22.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4367</id>
    <title>Recommended update for cloud-regionsrv-client</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670514999"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205089" id="1205089" title="RMT 2.9 breaks cloud client system registration" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195925" id="1195925" title="cloud-regionsrv-client needs cert check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191880" id="1191880" title="self signed cert replacement" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195924" id="1195924" title="cloud-regionsrv-client needs cert check" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203382" id="1203382" title="AWS Update Infrastructure - No response" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206082" id="1206082" title="remove dmidecode dependencies on s390/ppc64_le" type="bugzilla"/>
    </references>
    <description>This update for cloud-regionsrv-client fixes the following issues:

- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924) 
- Implement functionality to detect if an update server has a new cert. 
Import the new cert when it is detected. 
- From 10.0.6 (bsc#1205089) 
- Credentials are equal when username and password are the same ignore 
other entries in the credentials file 
- Handle multiple zypper names in process table, zypper and Zypp-main 
to properly detect the running process
- Require dmidecode only on supported archs (bsc#1206082)
</description>
    <pkglist>
      <collection>
        <package name="cloud-regionsrv-client" epoch="0" version="10.0.7" release="150000.6.83.2" arch="noarch" src="noarch/cloud-regionsrv-client-10.0.7-150000.6.83.2.noarch.rpm">
          <filename>cloud-regionsrv-client-10.0.7-150000.6.83.2.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client" epoch="0" version="10.0.7" release="150000.6.83.2" arch="src" src="src/cloud-regionsrv-client-10.0.7-150000.6.83.2.src.rpm">
          <filename>cloud-regionsrv-client-10.0.7-150000.6.83.2.src.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-addon-azure" epoch="0" version="1.0.5" release="150000.6.83.2" arch="noarch" src="noarch/cloud-regionsrv-client-addon-azure-1.0.5-150000.6.83.2.noarch.rpm">
          <filename>cloud-regionsrv-client-addon-azure-1.0.5-150000.6.83.2.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-generic-config" epoch="0" version="1.0.0" release="150000.6.83.2" arch="noarch" src="noarch/cloud-regionsrv-client-generic-config-1.0.0-150000.6.83.2.noarch.rpm">
          <filename>cloud-regionsrv-client-generic-config-1.0.0-150000.6.83.2.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-azure" epoch="0" version="2.0.0" release="150000.6.83.2" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.83.2.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.83.2.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-ec2" epoch="0" version="1.0.2" release="150000.6.83.2" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.83.2.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.83.2.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-gce" epoch="0" version="1.0.0" release="150000.6.83.2" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.83.2.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.83.2.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4469</id>
    <title>Recommended update for sudo</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670994330"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197998" id="1197998" title="sudo maintenance update to sudo-1.8.27-4.18.1 broke LDAP query sudo rules for windbind connected AD user." type="bugzilla"/>
    </references>
    <description>This update for sudo fixes the following issues:

- Change sudo-ldap schema from ASCII to UTF8 to fix a regression introduced in a previous maintenance update
  (bsc#1197998)
</description>
    <pkglist>
      <collection>
        <package name="sudo" epoch="0" version="1.9.9" release="150400.4.9.1" arch="src" src="src/sudo-1.9.9-150400.4.9.1.src.rpm">
          <filename>sudo-1.9.9-150400.4.9.1.src.rpm</filename>
        </package>
        <package name="sudo" epoch="0" version="1.9.9" release="150400.4.9.1" arch="x86_64" src="x86_64/sudo-1.9.9-150400.4.9.1.x86_64.rpm">
          <filename>sudo-1.9.9-150400.4.9.1.x86_64.rpm</filename>
        </package>
        <package name="sudo" epoch="0" version="1.9.9" release="150400.4.9.1" arch="aarch64" src="aarch64/sudo-1.9.9-150400.4.9.1.aarch64.rpm">
          <filename>sudo-1.9.9-150400.4.9.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4489</id>
    <title>Recommended update for keepalived</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1671020914"/>
    <references>
      <reference href="https://jira.suse.com/browse/SLE-11203" id="SLE-11203" title="https://jira.suse.com/browse/SLE-11203" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-2086" id="PED-2086" title="https://jira.suse.com/browse/PED-2086" type="jira"/>
    </references>
    <description>
This update of keepalived fixes the following issues:

- rebuild against the new net-snmp (jsc#SLE-11203).
- rebuild against the new libipset (jsc#PED-2086).
</description>
    <pkglist>
      <collection>
        <package name="keepalived" epoch="0" version="2.2.2" release="150400.3.7.2" arch="src" src="src/keepalived-2.2.2-150400.3.7.2.src.rpm">
          <filename>keepalived-2.2.2-150400.3.7.2.src.rpm</filename>
        </package>
        <package name="keepalived" epoch="0" version="2.2.2" release="150400.3.7.2" arch="x86_64" src="x86_64/keepalived-2.2.2-150400.3.7.2.x86_64.rpm">
          <filename>keepalived-2.2.2-150400.3.7.2.x86_64.rpm</filename>
        </package>
        <package name="keepalived" epoch="0" version="2.2.2" release="150400.3.7.2" arch="aarch64" src="aarch64/keepalived-2.2.2-150400.3.7.2.aarch64.rpm">
          <filename>keepalived-2.2.2-150400.3.7.2.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4585</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1671537176"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1156395" id="1156395" title="[TRACKERBUG] 5.3 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1164051" id="1164051" title="WARNING: at ../lib/vsprintf.c:1916 when create a MD Raid0 array with 50 disks. ref:_00D1igLOd._5001iLhGpk:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1184350" id="1184350" title="SLES 15 SP3 - LPAR network did not come up after 10minutes during lpm test: (ibmvnic) (HANA)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1189297" id="1189297" title="Partner-L3: Linux path loss occurs during FCoE uplink failover test" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1190256" id="1190256" title="Keyboard not working after cold-boot on ASUS Zenbook 14 UM425UA with Tumbleweed 20210904" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193629" id="1193629" title="[TRACKERBUG] SLE15-SP4 backports for cifs.ko" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203183" id="1203183" title="Partner-L3: Problems with IPv6 with large messages on OPA fabrics" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203391" id="1203391" title="VUL-0: CVE-2022-3176: kernel: io_uring: disable polling pollfree files" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203511" id="1203511" title="VUL-0: CVE-2022-3176: kernel live patch: io_uring: disable polling pollfree files" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203960" id="1203960" title="VUL-0: CVE-2022-41850: kernel: Race condition in roccat_report_event in drivers/hid/hid-roccat.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204228" id="1204228" title="VUL-0: CVE-2022-2602: kernel: defer registered files gc to io_uring release" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204405" id="1204405" title="VUL-0: CVE-2022-3566: kernel: race condition in tcp_getsockopt()/tcp_setsockopt() of the component TCP handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204414" id="1204414" title="VUL-0: CVE-2022-3567: kernel: race condition in inet6_stream_ops()/inet6_dgram_ops() of the component IPv6 Handler" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204631" id="1204631" title="VUL-0: CVE-2022-3635: kernel-source,kernel-source-rt,kernel-source-azure: use-after-free bugs caused by tst_timer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204636" id="1204636" title="VUL-0: CVE-2022-3635: kernel live patch: use-after-free bugs caused by tst_timer" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204780" id="1204780" title="VUL-0: CVE-2022-3707: kernel: Double-free in split_2MB_gtt_entry when function intel_gvt_dma_map_guest_page failed" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204810" id="1204810" title="Delays in NPIV discovery/reinstatement causes LPM failures/readonly filesystems" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204850" id="1204850" title="Sometimes newly deployed VMs are not getting accelerated network during provisioning" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205007" id="1205007" title="kvm_intel module crash with vmx_sync_pir_to_irr+0xe2/0x120" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205100" id="1205100" title="No sound from internal speakers [Samsung GBP360 aka NP930QDB]" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205111" id="1205111" title="USB audio interface Edirol M-100FX is not recognized as audio interface anymore with kernel version &gt; 6.0.2" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205113" id="1205113" title="io_uring fails t/exit-no-cleanup.t" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205128" id="1205128" title="VUL-0: CVE-2022-43945: kernel-source-azure,kernel-source,kernel-source-rt: nfsd: buffer overflow due to incorrect calculation of send buffer size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205130" id="1205130" title="VUL-0: CVE-2022-43945: kernel live patch: nfsd: buffer overflow due to incorrect calculation of send buffer size" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205149" id="1205149" title="%kernel_module_package_buildreqs needs to require suse-kernel-rpm-scriptlets" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205153" id="1205153" title="VUL-0: kernel: Spectre-BHB mitigation for AmpereOne" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205220" id="1205220" title="VUL-0: CVE-2022-3903: kernel: An invalid pipe direction in the mceusb driver cause DOS" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205264" id="1205264" title="Apply microcode patch early on every logical thread" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205282" id="1205282" title="objtool does not recognise AMX instructions" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205331" id="1205331" title="fuse: fix readdir cache race" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205332" id="1205332" title="fuse: add file_modified() to fallocate" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205427" id="1205427" title="SLES 15 SP4 - kernel: missing exception table entries" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205428" id="1205428" title="SLES 15 SP3 - kernel: missing exception table entries" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205473" id="1205473" title="VUL-0: kernel: AMD speculation fix for S3 resume" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205507" id="1205507" title="Yast Sound configuration not persistent" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205514" id="1205514" title="VUL-0: CVE-2022-4095: kernel: use after free in rtl8712 driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205521" id="1205521" title="fstests btrfs/262 fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205567" id="1205567" title="WARNING: CPU: 2 PID: 31106 at ../mm/vmalloc.c:2590 __vunmap+0x207/0x240 - ref:_00D1igLOd._5005qFh4oZ:ref" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205616" id="1205616" title="fstests generic/681 fails in xfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205617" id="1205617" title="[Azure] VM Deployment Failures Patch Request" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205653" id="1205653" title="SLES15 SP4 MU [ 5.14.21-150400.24.28-default ] : smt=off is taking more time on SLES15 SP4 [59min]." type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205671" id="1205671" title="VUL-0: CVE-2022-41858: kernel: null-ptr-deref vulnerabilities in sl_tx_timeout in drivers/net/slip" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205679" id="1205679" title="fstests generic/682 fails in xfs" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205683" id="1205683" title="[SPR] Telemetry value is not correct with read method" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205700" id="1205700" title="VUL-0: CVE-2022-4139: kernel: incorrect GPU TLB flush in i915 kernel driver" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205705" id="1205705" title="VUL-0: CVE-2022-42895: kernel-source,kernel-source-azure,kernel-source-rt: Information leak in l2cap_parse_conf_req function in net/bluetooth/l2cap_core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205709" id="1205709" title="VUL-0: CVE-2022-42896: kernel-source,kernel-source-azure,kernel-source-rt: Use after free in l2cap_connect and l2cap_le_connect_req functions in net/bluetooth/l2cap_core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205711" id="1205711" title="VUL-0: CVE-2022-4129: kernel-source-rt,kernel-source,kernel-source-azure: kernel: l2tp: missing lock when clearing sk_user_data can lead to NULL pointer dereference" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205744" id="1205744" title="[SLE15 SP5 Beta1][KVM]Host hang when creating VM with shadow mode" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205764" id="1205764" title="VUL-0: CVE-2022-45888: kernel-source-rt,kernel-source,kernel-source-azure: UaF in drivers/char/xillybus/xillyusb.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205796" id="1205796" title="VUL-0: CVE-2022-45934: kernel: integer wraparound via L2CAP_CONF_REQ packets affects l2cap_config_req in net/bluetooth/l2cap_core.c" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205882" id="1205882" title="VUL-0: CVE-2022-45869: kernel-source-rt,kernel-source,kernel-source-azure: Race condition in the x86 KVM subsystem" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205993" id="1205993" title="Kernel doesn't build when swap is disabled" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206035" id="1206035" title="[PATCH] btrfs: prevent subvol with swapfile from being deleted" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206036" id="1206036" title="btrfs: backport recent fixes for send/receive into SLE15 SP4/SP5" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206045" id="1206045" title="ceph: properly handle statfs on multifs setups" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206046" id="1206046" title="ceph: switch netfs read ops to use rreq-&gt;inode instead of  rreq-&gt;mapping-&gt;host" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206047" id="1206047" title="ceph: do not update snapshot context when there is no new snapshot" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206048" id="1206048" title="ceph: fix inode reference leakage in ceph_get_snapdir()" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206049" id="1206049" title="ceph: fix memory leak in ceph_readdir when note_last_dentry returns  error" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206050" id="1206050" title="ceph: allow ceph.dir.rctime xattr to be updatable" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206051" id="1206051" title="ceph: avoid putting the realm twice when decoding snaps fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206056" id="1206056" title="[PATCH] btrfs: fix processing of delayed data refs during backref  walking" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206057" id="1206057" title="[PATCH] btrfs: fix processing of delayed tree block refs during  backref walking" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3635" id="CVE-2022-3635" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3635" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45869" id="CVE-2022-45869" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45869" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45888" id="CVE-2022-45888" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45888" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4139" id="CVE-2022-4139" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4139" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41850" id="CVE-2022-41850" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41850" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45934" id="CVE-2022-45934" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45934" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4129" id="CVE-2022-4129" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4129" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42896" id="CVE-2022-42896" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42896" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42895" id="CVE-2022-42895" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42895" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41858" id="CVE-2022-41858" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41858" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43945" id="CVE-2022-43945" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43945" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4095" id="CVE-2022-4095" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4095" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3566" id="CVE-2022-3566" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3566" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3567" id="CVE-2022-3567" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3567" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2602" id="CVE-2022-2602" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2602" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3176" id="CVE-2022-3176" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3176" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3903" id="CVE-2022-3903" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3903" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3707" id="CVE-2022-3707" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3707" type="cve"/>
      <reference href="https://jira.suse.com/browse/PED-1573" id="PED-1573" title="https://jira.suse.com/browse/PED-1573" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-1706" id="PED-1706" title="https://jira.suse.com/browse/PED-1706" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-1936" id="PED-1936" title="https://jira.suse.com/browse/PED-1936" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-2684" id="PED-2684" title="https://jira.suse.com/browse/PED-2684" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-611" id="PED-611" title="https://jira.suse.com/browse/PED-611" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-824" id="PED-824" title="https://jira.suse.com/browse/PED-824" type="jira"/>
      <reference href="https://jira.suse.com/browse/PED-849" id="PED-849" title="https://jira.suse.com/browse/PED-849" type="jira"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202341" id="1202341" title="Raspi 4 (4GB): boots to blank screen with kernel 5.14.21-150400.24.11-default" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204693" id="1204693" title="BTF-enabled kernel fails to build with dwarves-1.24" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206037" id="1206037" title="VUL-0: kernel: MSR_SPEC_CTRL not correctly updated when doing S3 resumes" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206113" id="1206113" title="VUL-0: CVE-2022-3643: xen: Guests can trigger NIC interface reset/abort/crash via netback (XSA-423)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206114" id="1206114" title="VUL-0: CVE-2022-42328, CVE-2022-42329: xen: Guests can trigger deadlock in Linux netback driver (XSA-424)" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206147" id="1206147" title="fstests btrfs/275 fails" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206149" id="1206149" title="fstests btrfs/264 fails" type="bugzilla"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4378" id="CVE-2022-4378" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4378" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42328" id="CVE-2022-42328" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42328" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42329" id="CVE-2022-42329" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42329" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3643" id="CVE-2022-3643" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3643" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206207" id="1206207" title="VUL-0: CVE-2022-4378: kernel: stack overflow in __do_proc_dointvec" type="bugzilla"/>
    </references>
    <description>The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207).
- CVE-2022-42328: Guests could trigger denial of service via the netback driver (bsc#1206114).
- CVE-2022-42329: Guests could trigger denial of service via the netback driver (bsc#1206113).
- CVE-2022-3643: Guests could trigger NIC interface reset/abort/crash via netback driver (bsc#1206113).
- CVE-2022-3635: Fixed a use-after-free in the tst_timer() of the file drivers/atm/idt77252.c (bsc#1204631).
- CVE-2022-41850: Fixed a race condition in roccat_report_event() in drivers/hid/hid-roccat.c (bsc#1203960).
- CVE-2022-45934: Fixed a integer wraparound via L2CAP_CONF_REQ packets in l2cap_config_req in net/bluetooth/l2cap_core.c (bsc#1205796).
- CVE-2022-3567: Fixed a to race condition in inet6_stream_ops()/inet6_dgram_ops() (bsc#1204414).
- CVE-2022-41858: Fixed a denial of service in sl_tx_timeout() in drivers/net/slip (bsc#1205671).
- CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
- CVE-2022-4095: Fixed a use-after-free in rtl8712 driver (bsc#1205514).
- CVE-2022-3903: Fixed a denial of service with the Infrared Transceiver USB driver (bsc#1205220).
- CVE-2022-45869: Fixed a race condition in the x86 KVM subsystem which could cause a denial of service (bsc#1205882).
- CVE-2022-45888: Fixed a use-after-free during physical removal of a USB devices when using drivers/char/xillybus/xillyusb.c (bsc#1205764).
- CVE-2022-4139: Fixed an issue with the i915 driver that allowed the GPU to access any physical memory (bsc#1205700).
- CVE-2022-4129: Fixed a denial of service with the Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to a race condition and NULL pointer dereference. (bsc#1205711)
- CVE-2022-42896: Fixed a use-after-free vulnerability in the net/bluetooth/l2cap_core.c's l2cap_connect() and l2cap_le_connect_req() which may have allowed code execution and leaking kernel memory (respectively) remotely via Bluetooth (bsc#1205709).
- CVE-2022-42895: Fixed an information leak in the net/bluetooth/l2cap_core.c's l2cap_parse_conf_req() which can be used to leak kernel pointers remotely (bsc#1205705).
- CVE-2022-3566: Fixed a race condition in the functions tcp_getsockopt/tcp_setsockopt. The manipulation leads to a race condition (bsc#1204405).
- CVE-2022-2602: Fixed a local privilege escalation vulnerability involving Unix socket Garbage Collection and io_uring (bsc#1204228).
- CVE-2022-3176: Fixed a use-after-free in io_uring related to signalfd_poll() and binder_poll() (bsc#1203391).
- CVE-2022-3707: Fixed a double free in the Intel GVT-g graphics driver (bsc#1204780).

The following non-security bugs were fixed:

- ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() (git-fixes).
- ACPI: HMAT: Fix initiator registration for single-initiator systems (git-fixes).
- ACPI: HMAT: remove unnecessary variable initialization (git-fixes).
- ACPI: scan: Add LATT2021 to acpi_ignore_dep_ids[] (git-fixes).
- ACPI: x86: Add another system to quirk list for forcing StorageD3Enable (git-fixes).
- ALSA: dice: fix regression for Lexicon I-ONIX FW810S (git-fixes).
- ALSA: hda/ca0132: add quirk for EVGA Z390 DARK (git-fixes).
- ALSA: hda/hdmi - enable runtime pm for more AMD display audio (git-fixes).
- ALSA: hda/realtek: Add Positivo C6300 model quirk (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS Zenbook using CS35L41 (git-fixes).
- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 (bsc#1205100).
- ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro (bsc#1205100).
- ALSA: hda: fix potential memleak in 'add_widget_node' (git-fixes).
- ALSA: usb-audio: Add DSD support for Accuphase DAC-60 (git-fixes).
- ALSA: usb-audio: Add quirk entry for M-Audio Micro (git-fixes).
- ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() (git-fixes).
- ALSA: usb-audio: Remove redundant workaround for Roland quirk (bsc#1205111).
- ALSA: usb-audio: Yet more regression for for the delayed card registration (bsc#1205111).
- ALSA: usb-audio: add quirk to fix Hamedal C20 disconnect issue (git-fixes).
- ARM: at91: rm9200: fix usb device clock id (git-fixes).
- ARM: dts: am335x-pcm-953: Define fixed regulators in root node (git-fixes).
- ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl (git-fixes).
- ARM: dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties (git-fixes).
- ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset (git-fixes).
- ARM: dts: imx7: Fix NAND controller size-cells (git-fixes).
- ARM: mxs: fix memory leak in mxs_machine_init() (git-fixes).
- ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01 (git-fixes).
- ASoC: Intel: sof_sdw: add quirk variant for LAPBC710 NUC15 (git-fixes).
- ASoC: codecs: jz4725b: Fix spelling mistake &quot;Sourc&quot; -&gt; &quot;Source&quot;, &quot;Routee&quot; -&gt; &quot;Route&quot; (git-fixes).
- ASoC: codecs: jz4725b: add missed Line In power control bit (git-fixes).
- ASoC: codecs: jz4725b: fix capture selector naming (git-fixes).
- ASoC: codecs: jz4725b: fix reported volume for Master ctl (git-fixes).
- ASoC: codecs: jz4725b: use right control for Capture Volume (git-fixes).
- ASoC: core: Fix use-after-free in snd_soc_exit() (git-fixes).
- ASoC: fsl_asrc fsl_esai fsl_sai: allow CONFIG_PM=N (git-fixes).
- ASoC: fsl_sai: use local device pointer (git-fixes).
- ASoC: max98373: Add checks for devm_kcalloc (git-fixes).
- ASoC: mt6660: Keep the pm_runtime enables before component stuff in mt6660_i2c_probe (git-fixes).
- ASoC: ops: Fix bounds check for _sx controls (git-fixes).
- ASoC: rt1019: Fix the TDM settings (git-fixes).
- ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove (git-fixes).
- ASoC: soc-pcm: Do not zero TDM masks in __soc_pcm_open() (git-fixes).
- ASoC: soc-utils: Remove __exit for snd_soc_util_exit() (git-fixes).
- ASoC: stm32: dfsdm: manage cb buffers cleanup (git-fixes).
- ASoC: tas2764: Fix set_tdm_slot in case of single slot (git-fixes).
- ASoC: tas2770: Fix set_tdm_slot in case of single slot (git-fixes).
- ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK (git-fixes).
- Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() (git-fixes).
- Bluetooth: Fix not cleanup led when bt_init fails (git-fixes).
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (git-fixes).
- Bluetooth: L2CAP: Fix attempting to access uninitialized memory (git-fixes).
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (git-fixes).
- Decrease the number of SMB3 smbdirect client SGEs (bsc#1193629).
- Drivers: hv: Always reserve framebuffer region for Gen1 VMs (git-fixes).
- Drivers: hv: Fix syntax errors in comments (git-fixes).
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region (git-fixes).
- Drivers: hv: fix repeated words in comments (git-fixes).
- Drivers: hv: remove duplicate word in a comment (git-fixes).
- Drivers: hv: vmbus: Accept hv_sock offers in isolated guests (git-fixes).
- Drivers: hv: vmbus: Add VMbus IMC device to unsupported list (git-fixes).
- Drivers: hv: vmbus: Do not wait for the ACPI device upon initialization (git-fixes).
- Drivers: hv: vmbus: Fix kernel-doc (git-fixes).
- Drivers: hv: vmbus: Optimize vmbus_on_event (git-fixes).
- Drivers: hv: vmbus: Release cpu lock in error case (git-fixes).
- Drivers: hv: vmbus: Use PCI_VENDOR_ID_MICROSOFT for better discoverability (git-fixes).
- Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() (git-fixes).
- Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() (git-fixes).
- Drivers: hv: vmbus: fix typo in comment (git-fixes).
- Fix formatting of client smbdirect RDMA logging (bsc#1193629).
- HID: core: fix shift-out-of-bounds in hid_report_raw_event (git-fixes).
- HID: hid-lg4ff: Add check for empty lbuf (git-fixes).
- HID: hyperv: fix possible memory leak in mousevsc_probe() (git-fixes).
- HID: playstation: add initial DualSense Edge controller support (git-fixes).
- HID: saitek: add madcatz variant of MMO7 mouse device ID (git-fixes).
- Handle variable number of SGEs in client smbdirect send (bsc#1193629).
- IB/hfi1: Correctly move list in sc_disable() (git-fixes)
- IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers (git-fixes)
- Input: goodix - try resetting the controller when no config is set (git-fixes).
- Input: i8042 - fix leaking of platform device on module removal (git-fixes).
- Input: iforce - invert valid length check when fetching device IDs (git-fixes).
- Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send() (git-fixes).
- Input: soc_button_array - add Acer Switch V 10 to dmi_use_low_level_irq[] (git-fixes).
- Input: soc_button_array - add use_low_level_irq module parameter (git-fixes).
- Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode (git-fixes).
- KVM: Move wiping of the kvm-&gt;vcpus array to common code (git-fixes).
- KVM: SEV: Mark nested locking of vcpu-&gt;lock (git-fixes).
- KVM: SVM: Disable SEV-ES support if MMIO caching is disable (git-fixes).
- KVM: SVM: Stuff next_rip on emulated INT3 injection if NRIPS is supported (git-fixes).
- KVM: SVM: adjust register allocation for __svm_vcpu_run() (git-fixes).
- KVM: SVM: move guest vmsave/vmload back to assembly (git-fixes).
- KVM: SVM: replace regs argument of __svm_vcpu_run() with vcpu_svm (git-fixes).
- KVM: SVM: retrieve VMCB from assembly (git-fixes).
- KVM: VMX: Add helper to check if the guest PMU has PERF_GLOBAL_CTRL (git-fixes).
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS (git-fixes).
- KVM: VMX: Mark all PERF_GLOBAL_(OVF)_CTRL bits reserved if there's no vPMU (git-fixes).
- KVM: VMX: clear vmx_x86_ops.sync_pir_to_irr if APICv is disabled (bsc#1205007).
- KVM: VMX: fully disable SGX if SECONDARY_EXEC_ENCLS_EXITING unavailable (git-fixes).
- KVM: nVMX: Always enable TSC scaling for L2 when it was enabled for L1 (git-fixes).
- KVM: nVMX: Attempt to load PERF_GLOBAL_CTRL on nVMX xfer iff it exists (git-fixes).
- KVM: nVMX: Rename handle_vm{on,off}() to handle_vmx{on,off}() (git-fixes).
- KVM: s390: Add a routine for setting userspace CPU state (git-fixes jsc#PED-611).
- KVM: s390: Simplify SIGP Set Arch handling (git-fixes jsc#PED-611).
- KVM: s390: pv: do not allow userspace to set the clock under PV (git-fixes).
- KVM: s390: pv: leak the topmost page table when destroy fails (git-fixes).
- KVM: x86/mmu: Fix wrong/misleading comments in TDP MMU fast zap (git-fixes).
- KVM: x86/mmu: WARN if old _or_ new SPTE is REMOVED in non-atomic path (git-fixes).
- KVM: x86/mmu: fix memoryleak in kvm_mmu_vendor_module_init() (git-fixes).
- KVM: x86/pmu: Fix and isolate TSX-specific performance event logic (git-fixes).
- KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog (git-fixes).
- KVM: x86/pmu: Use different raw event masks for AMD and Intel (git-fixes).
- KVM: x86/svm: Account for family 17h event renumberings in amd_pmc_perf_hw_id (git-fixes).
- KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op() (git-fixes).
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (git-fixes).
- KVM: x86: Mask off reserved bits in CPUID.80000001H (git-fixes).
- KVM: x86: Mask off reserved bits in CPUID.80000006H (git-fixes).
- KVM: x86: Mask off reserved bits in CPUID.80000008H (git-fixes).
- KVM: x86: Mask off reserved bits in CPUID.8000001AH (git-fixes).
- KVM: x86: Report error when setting CPUID if Hyper-V allocation fails (git-fixes).
- KVM: x86: Retry page fault if MMU reload is pending and root has no sp (bsc#1205744).
- KVM: x86: Signal #GP, not -EPERM, on bad WRMSR(MCi_CTL/STATUS) (git-fixes).
- KVM: x86: Treat #DBs from the emulator as fault-like (code and DR7.GD=1) (git-fixes).
- KVM: x86: Use __try_cmpxchg_user() to emulate atomic accesses (git-fixes).
- KVM: x86: Use __try_cmpxchg_user() to update guest PTE A/D bits (git-fixes).
- KVM: x86: avoid loading a vCPU after .vm_destroy was called (git-fixes).
- KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (git-fixes).
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode (git-fixes).
- KVM: x86: emulator: update the emulation mode after CR0 write (git-fixes).
- KVM: x86: emulator: update the emulation mode after rsm (git-fixes).
- KVM: x86: use a separate asm-offsets.c file (git-fixes).
- MIPS: Loongson: Use hwmon_device_register_with_groups() to register hwmon (git-fixes).
- NFC: nci: Bounds check struct nfc_target arrays (git-fixes).
- NFC: nci: fix memory leak in nci_rx_data_packet() (git-fixes).
- PCI: Move PCI_VENDOR_ID_MICROSOFT/PCI_DEVICE_ID_HYPERV_VIDEO definitions to pci_ids.h (git-fixes).
- PCI: hv: Add validation for untrusted Hyper-V values (git-fixes).
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (git-fixes).
- RDMA/cm: Fix memory leak in ib_cm_insert_listen (git-fixes)
- RDMA/cm: Use SLID in the work completion as the DLID in responder side (git-fixes)
- RDMA/cma: Use output interface for net_dev check (git-fixes)
- RDMA/core: Fix null-ptr-deref in ib_core_cleanup() (git-fixes)
- RDMA/hfi1: Prevent panic when SDMA is disabled (git-fixes)
- RDMA/hfi1: Prevent use of lock before it is initialized (git-fixes)
- RDMA/hfi1: fix potential memory leak in setup_base_ctxt() (git-fixes)
- RDMA/hns: Correct the type of variables participating in the shift operation (git-fixes)
- RDMA/hns: Disable local invalidate operation (git-fixes)
- RDMA/hns: Fix incorrect clearing of interrupt status register (git-fixes)
- RDMA/hns: Fix supported page size (git-fixes)
- RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift (git-fixes)
- RDMA/hns: Remove magic number (git-fixes)
- RDMA/hns: Remove the num_cqc_timer variable (git-fixes)
- RDMA/hns: Remove the num_qpc_timer variable (git-fixes)
- RDMA/hns: Remove unnecessary check for the sgid_attr when modifying QP (git-fixes)
- RDMA/hns: Replace tab with space in the right-side comments (git-fixes)
- RDMA/hns: Use hr_reg_xxx() instead of remaining roce_set_xxx() (git-fixes)
- RDMA/irdma: Fix deadlock in irdma_cleanup_cm_core() (git-fixes)
- RDMA/irdma: Use s/g array in post send only when its valid (git-fixes)
- RDMA/mlx5: Set local port to one when accessing counters (git-fixes)
- RDMA/qedr: clean up work queue on failure in qedr_alloc_resources() (git-fixes)
- RDMA/rtrs-clt: Use the right sg_cnt after ib_dma_map_sg (git-fixes)
- RDMA/rtrs-srv: Fix modinfo output for stringify (git-fixes)
- RDMA/rxe: Limit the number of calls to each tasklet (git-fixes)
- RDMA/rxe: Remove useless pkt parameters (git-fixes)
- Reduce client smbdirect max receive segment size (bsc#1193629).
- SCSI: scsi_probe_lun: retry INQUIRY after timeout (bsc#1189297).
- SMB3: fix lease break timeout when multiple deferred close handles for the same file (bsc#1193629).
- USB: bcma: Make GPIO explicitly optional (git-fixes).
- USB: serial: option: add Fibocom FM160 0x0111 composition (git-fixes).
- USB: serial: option: add Sierra Wireless EM9191 (git-fixes).
- USB: serial: option: add u-blox LARA-L6 modem (git-fixes).
- USB: serial: option: add u-blox LARA-R6 00B modem (git-fixes).
- USB: serial: option: remove old LARA-R6 PID (git-fixes).
- arcnet: fix potential memory leak in com20020_probe() (git-fixes).
- arm64/syscall: Include asm/ptrace.h in syscall_wrapper header (git-fixes).
- arm64: Add AMPERE1 to the Spectre-BHB affected list (git-fixes).
- arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro (git-fixes)
- arm64: dts: imx8: correct clock order (git-fixes).
- arm64: dts: imx8mm: Fix NAND controller size-cells (git-fixes).
- arm64: dts: imx8mn: Fix NAND controller size-cells (git-fixes).
- arm64: dts: juno: Add thermal critical trip points (git-fixes).
- arm64: dts: ls1088a: specify clock frequencies for the MDIO controllers (git-fixes).
- arm64: dts: ls208xa: specify clock frequencies for the MDIO controllers (git-fixes).
- arm64: dts: lx2160a: specify clock frequencies for the MDIO controllers (git-fixes).
- arm64: dts: qcom: sa8155p-adp: Specify which LDO modes are allowed (git-fixes).
- arm64: dts: qcom: sm8150-xperia-kumano: Specify which LDO modes are allowed (git-fixes).
- arm64: dts: qcom: sm8250-xperia-edo: Specify which LDO modes are allowed (git-fixes).
- arm64: dts: qcom: sm8350-hdk: Specify which LDO modes are allowed (git-fixes).
- arm64: dts: rockchip: add enable-strobe-pulldown to emmc phy on nanopi4 (git-fixes).
- arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency (git-fixes).
- arm64: efi: Fix handling of misaligned runtime regions and drop warning (git-fixes).
- arm64: entry: avoid kprobe recursion (git-fixes).
- arm64: errata: Add Cortex-A55 to the repeat tlbi list (git-fixes). Enable CONFIG_ARM64_ERRATUM_2441007, too
- arm64: errata: Remove AES hwcap for COMPAT tasks (git-fixes) Enable CONFIG_ARM64_ERRATUM_1742098 in arm64/default
- arm64: fix rodata=full again (git-fixes)
- ata: libata-core: do not issue non-internal commands once EH is pending (git-fixes).
- ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure (git-fixes).
- ata: libata-scsi: simplify __ata_scsi_queuecmd() (git-fixes).
- ata: libata-transport: fix double ata_host_put() in ata_tport_add() (git-fixes).
- ata: libata-transport: fix error handling in ata_tdev_add() (git-fixes).
- ata: libata-transport: fix error handling in ata_tlink_add() (git-fixes).
- ata: libata-transport: fix error handling in ata_tport_add() (git-fixes).
- audit: fix undefined behavior in bit shift for AUDIT_BIT (git-fixes).
- blk-cgroup: fix missing put device in error path from blkg_conf_pref() (git-fixes).
- blk-mq: Properly init requests from blk_mq_alloc_request_hctx() (git-fixes).
- blk-mq: do not create hctx debugfs dir until q-&gt;debugfs_dir is created (git-fixes).
- blk-mq: fix io hung due to missing commit_rqs (git-fixes).
- blk-wbt: call rq_qos_add() after wb_normal is initialized (git-fixes).
- blktrace: Trace remapped requests correctly (git-fixes).
- block/rnbd-srv: Set keep_id to true after mutex_trylock (git-fixes).
- block: add bio_start_io_acct_time() to control start_time (git-fixes).
- block: blk_queue_enter() / __bio_queue_enter() must return -EAGAIN for nowait (git-fixes).
- block: drop unused includes in &amp;lt;linux/genhd.h&gt; (git-fixes).
- bridge: switchdev: Fix memory leaks when changing VLAN protocol (git-fixes).
- btrfs: check if root is readonly while setting security xattr (bsc#1206147).
- btrfs: do not allow compression on nodatacow files (bsc#1206149).
- btrfs: export a helper for compression hard check (bsc#1206149).
- btrfs: fix processing of delayed data refs during backref walking (bsc#1206056).
- btrfs: fix processing of delayed tree block refs during backref walking (bsc#1206057).
- btrfs: prevent subvol with swapfile from being deleted (bsc#1206035).
- btrfs: send: always use the rbtree based inode ref management infrastructure (bsc#1206036).
- btrfs: send: fix failures when processing inodes with no links (bsc#1206036).
- btrfs: send: fix send failure of a subcase of orphan inodes (bsc#1206036).
- btrfs: send: fix sending link commands for existing file paths (bsc#1206036).
- btrfs: send: introduce recorded_ref_alloc and recorded_ref_free (bsc#1206036).
- btrfs: send: refactor arguments of get_inode_info() (bsc#1206036).
- btrfs: send: remove unused found_type parameter to lookup_dir_item_inode() (bsc#1206036).
- btrfs: send: remove unused type parameter to iterate_inode_ref_t (bsc#1206036).
- btrfs: send: use boolean types for current inode status (bsc#1206036).
- bus: sunxi-rsb: Remove the shutdown callback (git-fixes).
- bus: sunxi-rsb: Support atomic transfers (git-fixes).
- ca8210: Fix crash by zero initializing data (git-fixes).
- can: af_can: fix NULL pointer dereference in can_rx_register() (git-fixes).
- can: cc770: cc770_isa_probe(): add missing free_cc770dev() (git-fixes).
- can: etas_es58x: es58x_init_netdev(): free netdev when register_candev() (git-fixes).
- can: j1939: j1939_send_one(): fix missing CAN header initialization (git-fixes).
- can: m_can: Add check for devm_clk_get (git-fixes).
- can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (git-fixes).
- can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() (git-fixes).
- capabilities: fix potential memleak on error path from vfs_getxattr_alloc() (git-fixes).
- capabilities: fix undefined behavior in bit shift for CAP_TO_MASK (git-fixes).
- ceph: allow ceph.dir.rctime xattr to be updatable (bsc#1206050).
- ceph: avoid putting the realm twice when decoding snaps fails (bsc#1206051).
- ceph: do not update snapshot context when there is no new snapshot (bsc#1206047).
- ceph: fix inode reference leakage in ceph_get_snapdir() (bsc#1206048).
- ceph: fix memory leak in ceph_readdir when note_last_dentry returns error (bsc#1206049).
- ceph: properly handle statfs on multifs setups (bsc#1206045).
- ceph: switch netfs read ops to use rreq-&gt;inode instead of rreq-&gt;mapping-&gt;host (bsc#1206046).
- char: tpm: Protect tpm_pm_suspend with locks (git-fixes).
- cifs: Add constructor/destructors for tcon-&gt;cfid (bsc#1193629).
- cifs: Add helper function to check smb1+ server (bsc#1193629).
- cifs: Do not access tcon-&gt;cfids-&gt;cfid directly from is_path_accessible (bsc#1193629).
- cifs: Do not use tcon-&gt;cfid directly, use the cfid we get from open_cached_dir (bsc#1193629).
- cifs: Fix connections leak when tlink setup failed (git-fixes).
- cifs: Fix memory leak on the deferred close (bsc#1193629).
- cifs: Fix memory leak when build ntlmssp negotiate blob failed (bsc#1193629).
- cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (bsc#1193629).
- cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (bsc#1193629).
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message (bsc#1193629).
- cifs: Fix wrong return value checking when GETFLAGS (git-fixes).
- cifs: Fix xid leak in cifs_copy_file_range() (bsc#1193629).
- cifs: Fix xid leak in cifs_create() (bsc#1193629).
- cifs: Fix xid leak in cifs_flock() (bsc#1193629).
- cifs: Fix xid leak in cifs_get_file_info_unix() (bsc#1193629).
- cifs: Fix xid leak in cifs_ses_add_channel() (bsc#1193629).
- cifs: Make tcon contain a wrapper structure cached_fids instead of cached_fid (bsc#1193629).
- cifs: Move cached-dir functions into a separate file (bsc#1193629).
- cifs: Replace a couple of one-element arrays with flexible-array members (bsc#1193629).
- cifs: Use after free in debug code (git-fixes).
- cifs: Use help macro to get the header preamble size (bsc#1193629).
- cifs: Use help macro to get the mid header size (bsc#1193629).
- cifs: add check for returning value of SMB2_close_init (git-fixes).
- cifs: add check for returning value of SMB2_set_info_init (git-fixes).
- cifs: add missing spinlock around tcon refcount (bsc#1193629).
- cifs: alloc_mid function should be marked as static (bsc#1193629).
- cifs: always initialize struct msghdr smb_msg completely (bsc#1193629).
- cifs: always iterate smb sessions using primary channel (bsc#1193629).
- cifs: avoid deadlocks while updating iface (bsc#1193629).
- cifs: avoid unnecessary iteration of tcp sessions (bsc#1193629).
- cifs: avoid use of global locks for high contention data (bsc#1193629).
- cifs: cache the dirents for entries in a cached directory (bsc#1193629).
- cifs: change iface_list from array to sorted linked list (bsc#1193629).
- cifs: destage dirty pages before re-reading them for cache=none (bsc#1193629).
- cifs: do not send down the destination address to sendmsg for a SOCK_STREAM (bsc#1193629).
- cifs: drop the lease for cached directories on rmdir or rename (bsc#1193629).
- cifs: during reconnect, update interface if necessary (bsc#1193629).
- cifs: enable caching of directories for which a lease is held (bsc#1193629).
- cifs: find and use the dentry for cached non-root directories also (bsc#1193629).
- cifs: fix double-fault crash during ntlmssp (bsc#1193629).
- cifs: fix lock length calculation (bsc#1193629).
- cifs: fix memory leaks in session setup (bsc#1193629).
- cifs: fix missing unlock in cifs_file_copychunk_range() (git-fixes).
- cifs: fix race condition with delayed threads (bsc#1193629).
- cifs: fix skipping to incorrect offset in emit_cached_dirents (bsc#1193629).
- cifs: fix small mempool leak in SMB2_negotiate() (bsc#1193629).
- cifs: fix static checker warning (bsc#1193629).
- cifs: fix uninitialised var in smb2_compound_op() (bsc#1193629).
- cifs: fix use-after-free caused by invalid pointer `hostname` (bsc#1193629).
- cifs: fix use-after-free on the link name (bsc#1193629).
- cifs: fix wrong unlock before return from cifs_tree_connect() (bsc#1193629).
- cifs: improve handlecaching (bsc#1193629).
- cifs: improve symlink handling for smb2+ (bsc#1193629).
- cifs: lease key is uninitialized in smb1 paths (bsc#1193629).
- cifs: lease key is uninitialized in two additional functions when smb1 (bsc#1193629).
- cifs: list_for_each() -&gt; list_for_each_entry() (bsc#1193629).
- cifs: misc: fix spelling typo in comment (bsc#1193629).
- cifs: move from strlcpy with unused retval to strscpy (bsc#1193629).
- cifs: periodically query network interfaces from server (bsc#1193629).
- cifs: populate empty hostnames for extra channels (bsc#1193629).
- cifs: prevent copying past input buffer boundaries (bsc#1193629).
- cifs: remove &quot;cifs_&quot; prefix from init/destroy mids functions (bsc#1193629).
- cifs: remove initialization value (bsc#1193629).
- cifs: remove minor build warning (bsc#1193629).
- cifs: remove redundant initialization to variable mnt_sign_enabled (bsc#1193629).
- cifs: remove remaining build warnings (bsc#1193629).
- cifs: remove some camelCase and also some static build warnings (bsc#1193629).
- cifs: remove unnecessary (void*) conversions (bsc#1193629).
- cifs: remove unnecessary locking of chan_lock while freeing session (bsc#1193629).
- cifs: remove unnecessary type castings (bsc#1193629).
- cifs: remove unused server parameter from calc_smb_size() (bsc#1193629).
- cifs: remove useless DeleteMidQEntry() (bsc#1193629).
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (bsc#1193629).
- cifs: replace kfree() with kfree_sensitive() for sensitive data (bsc#1193629).
- cifs: return correct error in -&gt;calc_signature() (bsc#1193629).
- cifs: return errors during session setup during reconnects (bsc#1193629).
- cifs: revalidate mapping when doing direct writes (bsc#1193629).
- cifs: secmech: use shash_desc directly, remove sdesc (bsc#1193629).
- cifs: set rc to -ENOENT if we can not get a dentry for the cached dir (bsc#1193629).
- cifs: skip extra NULL byte in filenames (bsc#1193629).
- cifs: store a pointer to a fid in the cfid structure instead of the struct (bsc#1193629).
- cifs: truncate the inode and mapping when we simulate fcollapse (bsc#1193629).
- cifs: update cifs_ses::ip_addr after failover (bsc#1193629).
- cifs: update internal module number (bsc#1193629).
- cifs: use ALIGN() and round_up() macros (bsc#1193629).
- cifs: use LIST_HEAD() and list_move() to simplify code (bsc#1193629).
- cifs: when a channel is not found for server, log its connection id (bsc#1193629).
- cifs: when insecure legacy is disabled shrink amount of SMB1 code (bsc#1193629).
- clocksource/drivers/hyperv: add data structure for reference TSC MSR (git-fixes).
- cpufreq: intel_pstate: Handle no_turbo in frequency invariance (jsc#PED-849).
- cpufreq: intel_pstate: Support Sapphire Rapids OOB mode (jsc#PED-849).
- cpuidle: intel_idle: Drop redundant backslash at line end (jsc#PED-1936).
- dm btree remove: fix use after free in rebalance_children() (git-fixes).
- dm crypt: make printing of the key constant-time (git-fixes).
- dm era: commit metadata in postsuspend after worker stops (git-fixes).
- dm integrity: fix memory corruption when tag_size is less than digest size (git-fixes).
- dm mirror log: clear log bits up to BITS_PER_LONG boundary (git-fixes).
- dm raid: fix accesses beyond end of raid member array (git-fixes).
- dm stats: add cond_resched when looping over entries (git-fixes).
- dm thin: fix use-after-free crash in dm_sm_register_threshold_callback (git-fixes).
- dm: fix double accounting of flush with data (git-fixes).
- dm: interlock pending dm_io and dm_wait_for_bios_completion (git-fixes).
- dm: properly fix redundant bio-based IO accounting (git-fixes).
- dm: remove unnecessary assignment statement in alloc_dev() (git-fixes).
- dm: return early from dm_pr_call() if DM device is suspended (git-fixes).
- dm: revert partial fix for redundant bio-based IO accounting (git-fixes).
- dma-buf: fix racing conflict of dma_heap_add() (git-fixes).
- dmaengine: at_hdmac: Check return code of dma_async_device_register (git-fixes).
- dmaengine: at_hdmac: Do not allow CPU to reorder channel enable (git-fixes).
- dmaengine: at_hdmac: Do not call the complete callback on device_terminate_all (git-fixes).
- dmaengine: at_hdmac: Do not start transactions at tx_submit level (git-fixes).
- dmaengine: at_hdmac: Fix at_lli struct definition (git-fixes).
- dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors (git-fixes).
- dmaengine: at_hdmac: Fix concurrency over descriptor (git-fixes).
- dmaengine: at_hdmac: Fix concurrency over the active list (git-fixes).
- dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all() (git-fixes).
- dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware (git-fixes).
- dmaengine: at_hdmac: Fix impossible condition (git-fixes).
- dmaengine: at_hdmac: Fix premature completion of desc in issue_pending (git-fixes).
- dmaengine: at_hdmac: Free the memset buf without holding the chan lock (git-fixes).
- dmaengine: at_hdmac: Protect atchan-&gt;status with the channel lock (git-fixes).
- dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending (git-fixes).
- dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() (git-fixes).
- dmaengine: pxa_dma: use platform_get_irq_optional (git-fixes).
- dmaengine: ti: k3-udma-glue: fix memory leak when register device fail (git-fixes).
- docs, kprobes: Fix the wrong location of Kprobes (git-fixes).
- docs/core-api: expand Fedora instructions for GCC plugins (git-fixes).
- drm/amd/display: Add HUBP surface flip interrupt handler (git-fixes).
- drm/amdgpu: disable BACO on special BEIGE_GOBY card (git-fixes).
- drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram() (git-fixes).
- drm/amdkfd: Migrate in CPU page fault use current mm (git-fixes).
- drm/amdkfd: avoid recursive lock in migrations back to RAM (git-fixes).
- drm/amdkfd: handle CPU fault on COW mapping (git-fixes).
- drm/drv: Fix potential memory leak in drm_dev_init() (git-fixes).
- drm/hyperv: Add ratelimit on error message (git-fixes).
- drm/hyperv: Do not overwrite dirt_needed value set by host (git-fixes).
- drm/i915/dmabuf: fix sg_table handling in map_dma_buf (git-fixes).
- drm/i915/sdvo: Filter out invalid outputs more sensibly (git-fixes).
- drm/i915/sdvo: Setup DDC fully before output init (git-fixes).
- drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid (git-fixes).
- drm/msm/hdmi: Remove spurious IRQF_ONESHOT flag (git-fixes).
- drm/msm/hdmi: fix IRQ lifetime (git-fixes).
- drm/panel: simple: set bpc field for logic technologies displays (git-fixes).
- drm/rockchip: dsi: Force synchronous probe (git-fixes).
- drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() (git-fixes).
- drm/vc4: kms: Fix IS_ERR() vs NULL check for vc4_kms (git-fixes).
- drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker() (git-fixes).
- dt-bindings: power: gpcv2: add power-domains property (git-fixes).
- e1000e: Fix TX dispatch condition (git-fixes).
- e100: Fix possible use after free in e100_xmit_prepare (git-fixes).
- efi/tpm: Pass correct address to memblock_reserve (git-fixes).
- efi: random: Use 'ACPI reclaim' memory for random seed (git-fixes).
- efi: random: reduce seed size to 32 bytes (git-fixes).
- firmware: arm_scmi: Make Rx chan_setup fail on memory errors (git-fixes).
- firmware: arm_scmi: Suppress the driver's bind attributes (git-fixes).
- firmware: coreboot: Register bus in module init (git-fixes).
- fm10k: Fix error handling in fm10k_init_module() (git-fixes).
- ftrace: Fix null pointer dereference in ftrace_add_mod() (git-fixes).
- ftrace: Fix the possible incorrect kernel message (git-fixes).
- ftrace: Fix use-after-free for dynamic ftrace_ops (git-fixes).
- ftrace: Optimize the allocation for mcount entries (git-fixes).
- fuse: add file_modified() to fallocate (bsc#1205332).
- fuse: fix readdir cache race (bsc#1205331).
- gpio: amd8111: Fix PCI device reference count leak (git-fixes).
- hamradio: fix issue of dev reference count leakage in bpq_device_event() (git-fixes).
- hv_netvsc: Fix potential dereference of NULL pointer (git-fixes).
- hv_netvsc: Fix race between VF offering and VF association message from host (bsc#1204850).
- hv_netvsc: Print value of invalid ID in netvsc_send_{completion,tx_complete}() (git-fixes).
- hv_sock: Add validation for untrusted Hyper-V values (git-fixes).
- hv_sock: Check hv_pkt_iter_first_raw()'s return value (git-fixes).
- hv_sock: Copy packets sent by Hyper-V out of the ring buffer (git-fixes).
- hwmon: (coretemp) Check for null before removing sysfs attrs (git-fixes).
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (git-fixes).
- hwmon: (i5500_temp) fix missing pci_disable_device() (git-fixes).
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (git-fixes).
- hwmon: (ina3221) Fix shunt sum critical calculation (git-fixes).
- hwmon: (ltc2947) fix temperature scaling (git-fixes).
- i2c: i801: add lis3lv02d's I2C address for Vostro 5568 (git-fixes).
- i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set (git-fixes).
- i2c: npcm7xx: Fix error handling in npcm_i2c_init() (git-fixes).
- i2c: piix4: Fix adapter not be removed in piix4_remove() (git-fixes).
- i2c: tegra: Allocate DMA memory for DMA engine (git-fixes).
- i2c: xiic: Add platform module alias (git-fixes).
- ibmvnic: Free rwi on reset success (bsc#1184350 ltc#191533 git-fixes).
- ieee802154: cc2520: Fix error return code in cc2520_hw_init() (git-fixes).
- iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() (git-fixes).
- iio: adc: mp2629: fix potential array out of bound access (git-fixes).
- iio: adc: mp2629: fix wrong comparison of channel (git-fixes).
- iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails (git-fixes).
- iio: health: afe4403: Fix oob read in afe4403_read_raw (git-fixes).
- iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw (git-fixes).
- iio: light: apds9960: fix wrong register for gesture gain (git-fixes).
- iio: light: rpr0521: add missing Kconfig dependencies (git-fixes).
- iio: ms5611: Simplify IO callback parameters (git-fixes).
- iio: pressure: ms5611: changed hardcoded SPI speed to value limited (git-fixes).
- iio: pressure: ms5611: fixed value compensation bug (git-fixes).
- iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() (git-fixes).
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (git-fixes).
- intel_idle: Add AlderLake support (jsc#PED-824).
- intel_idle: Fix SPR C6 optimization (jsc#PED-824 jsc#PED-1936).
- intel_idle: Fix the 'preferred_cstates' module parameter (jsc#PED-824 jsc#PED-1936).
- intel_idle: make SPR C1 and C1E be independent (jsc#PED-1936).
- io-wq: Remove duplicate code in io_workqueue_create() (bnc#1205113).
- io-wq: do not retry task_work creation failure on fatal conditions (bnc#1205113).
- io-wq: ensure we exit if thread group is exiting (git-fixes).
- io-wq: exclusively gate signal based exit on get_signal() return (git-fixes).
- io-wq: fix cancellation on create-worker failure (bnc#1205113).
- io-wq: fix silly logic error in io_task_work_match() (bnc#1205113).
- io_uring: correct __must_hold annotation (git-fixes).
- io_uring: drop ctx-&gt;uring_lock before acquiring sqd-&gt;lock (git-fixes).
- io_uring: ensure IORING_REGISTER_IOWQ_MAX_WORKERS works with SQPOLL (git-fixes).
- io_uring: fix io_timeout_remove locking (git-fixes).
- io_uring: fix missing mb() before waitqueue_active (git-fixes).
- io_uring: fix missing sigmask restore in io_cqring_wait() (git-fixes).
- io_uring: fix possible poll event lost in multi shot mode (git-fixes).
- io_uring: pin SQPOLL data before unlocking ring lock (git-fixes).
- ipv6: ping: fix wrong checksum for large frames (bsc#1203183).
- kABI: Fix kABI after &quot;KVM: x86/pmu: Use different raw event masks for AMD and Intel&quot; (git-fixes).
- kbuild: Unify options for BTF generation for vmlinux and modules (bsc#1204693).
- kexec: turn all kexec_mutex acquisitions into trylocks (git-fixes).
- mISDN: fix misuse of put_device() in mISDN_register_device() (git-fixes).
- mISDN: fix possible memory leak in mISDN_dsp_element_register() (git-fixes).
- mac80211: radiotap: Use BIT() instead of shifts (git-fixes).
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (git-fixes).
- macsec: Fix invalid error code set (git-fixes).
- macsec: add missing attribute validation for offload (git-fixes).
- macsec: clear encryption keys from the stack after setting up offload (git-fixes).
- macsec: delete new rxsc when offload fails (git-fixes).
- macsec: fix detection of RXSCs when toggling offloading (git-fixes).
- macsec: fix secy-&gt;n_rx_sc accounting (git-fixes).
- md/raid5: Ensure stripe_fill happens on non-read IO with journal (git-fixes).
- md/raid5: Remove unnecessary bio_put() in raid5_read_one_chunk() (git-fixes).
- md: Replace snprintf with scnprintf (git-fixes, bsc#1164051).
- media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE (git-fixes).
- media: dvb-frontends/drxk: initialize err to 0 (git-fixes).
- media: meson: vdec: fix possible refcount leak in vdec_probe() (git-fixes).
- media: rkisp1: Do not pass the quantization to rkisp1_csm_config() (git-fixes).
- media: rkisp1: Initialize color space on resizer sink and source pads (git-fixes).
- media: rkisp1: Use correct macro for gradient registers (git-fixes).
- media: rkisp1: Zero v4l2_subdev_format fields in when validating links (git-fixes).
- media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE (git-fixes).
- media: v4l: subdev: Fail graciously when getting try data for NULL state (git-fixes).
- misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (git-fixes).
- mmc: core: Fix ambiguous TRIM and DISCARD arg (git-fixes).
- mmc: core: properly select voltage range without power cycle (git-fixes).
- mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI (git-fixes).
- mmc: mmc_test: Fix removal of debugfs file (git-fixes).
- mmc: sdhci-brcmstb: Enable Clock Gating to save power (git-fixes).
- mmc: sdhci-brcmstb: Fix SDHCI_RESET_ALL for CQHCI (git-fixes).
- mmc: sdhci-brcmstb: Re-organize flags (git-fixes).
- mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check (git-fixes).
- mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA (git-fixes).
- mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI (git-fixes).
- mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout (git-fixes).
- mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() (git-fixes).
- mmc: sdhci-sprd: Fix no reset data and command after voltage switch (git-fixes).
- mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI (git-fixes).
- mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI (git-fixes).
- mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI (git-fixes).
- mtd: parsers: bcm47xxpart: Fix halfblock reads (git-fixes).
- mtd: parsers: bcm47xxpart: print correct offset on read error (git-fixes).
- mtd: spi-nor: intel-spi: Disable write protection only if asked (git-fixes).
- nbd: Fix incorrect error handle when first_minor is illegal in nbd_dev_add (git-fixes).
- net/smc: Avoid overwriting the copies of clcsock callback functions (git-fixes).
- net/smc: Fix an error code in smc_lgr_create() (git-fixes).
- net/smc: Fix possible access to freed memory in link clear (git-fixes).
- net/smc: Fix possible leaked pernet namespace in smc_init() (git-fixes).
- net/smc: Fix slab-out-of-bounds issue in fallback (git-fixes).
- net/smc: Fix sock leak when release after smc_shutdown() (git-fixes).
- net/smc: Forward wakeup to smc socket waitqueue after fallback (git-fixes).
- net/smc: Only save the original clcsock callback functions (git-fixes).
- net/smc: Send directly when TCP_CORK is cleared (git-fixes).
- net/smc: kABI workarounds for struct smc_link (git-fixes).
- net/smc: kABI workarounds for struct smc_sock (git-fixes).
- net/smc: send directly on setting TCP_NODELAY (git-fixes).
- net/x25: Fix skb leak in x25_lapb_receive_frame() (git-fixes).
- net: ethernet: nixge: fix NULL dereference (git-fixes).
- net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed (git-fixes).
- net: ethernet: ti: am65-cpsw: fix error handling in am65_cpsw_nuss_probe() (git-fixes).
- net: hyperv: remove use of bpf_op_t (git-fixes).
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release() (git-fixes).
- net: mdiobus: fix unbalanced node reference count (git-fixes).
- net: phy: fix null-ptr-deref while probe() failed (git-fixes).
- net: phy: marvell: add sleep time after enabling the loopback bit (git-fixes).
- net: phy: mscc: macsec: clear encryption keys when freeing a flow (git-fixes).
- net: smsc95xx: add support for Microchip EVB-LAN8670-USB (git-fixes).
- net: stmmac: work around sporadic tx issue on link-up (git-fixes).
- net: thunderbolt: Fix error handling in tbnet_init() (git-fixes).
- net: thunderbolt: fix memory leak in tbnet_open() (git-fixes).
- net: thunderx: Fix the ACPI memory leak (git-fixes).
- net: usb: qmi_wwan: add Telit 0x103a composition (git-fixes).
- net: wwan: iosm: fix dma_alloc_coherent incompatible pointer type (git-fixes).
- net: wwan: iosm: fix kernel test robot reported error (git-fixes).
- nfc/nci: fix race with opening and closing (git-fixes).
- nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() (git-fixes).
- nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() (git-fixes).
- nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() (git-fixes).
- nfc: st-nci: fix incorrect sizing calculations in EVT_TRANSACTION (git-fixes).
- nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION (git-fixes).
- nfc: st-nci: fix memory leaks in EVT_TRANSACTION (git-fixes).
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() (git-fixes).
- nilfs2: fix deadlock in nilfs_count_free_blocks() (git-fixes).
- nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty (git-fixes).
- nilfs2: fix use-after-free bug of ns_writer on remount (git-fixes).
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure (git-fixes).
- panic, kexec: make __crash_kexec() NMI safe (git-fixes).
- parport_pc: Avoid FIFO port location truncation (git-fixes).
- phy: ralink: mt7621-pci: add sentinel to quirks table (git-fixes).
- phy: stm32: fix an error code in probe (git-fixes).
- pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map (git-fixes).
- pinctrl: intel: Save and restore pins in &quot;direct IRQ&quot; mode (git-fixes).
- pinctrl: rockchip: list all pins in a possible mux route for PX30 (git-fixes).
- pinctrl: single: Fix potential division by zero (git-fixes).
- platform/surface: aggregator: Do not check for repeated unsequenced packets (git-fixes).
- platform/x86/intel/pmt: Sapphire Rapids PMT errata fix (jsc#PED-2684 bsc#1205683).
- platform/x86/intel: hid: add quirk to support Surface Go 3 (git-fixes).
- platform/x86/intel: pmc: Do not unconditionally attach Intel PMC when virtualized (git-fixes).
- platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) (git-fixes).
- platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() (git-fixes).
- platform/x86: hp-wmi: Ignore Smart Experience App event (git-fixes).
- platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi (git-fixes).
- platform/x86: ideapad-laptop: Disable touchpad_switch (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2 2-in-1 (git-fixes).
- powerpc/64: Fix build failure with allyesconfig in book3s_64_entry.S (bsc#1194869).
- powerpc/boot: Explicitly disable usage of SPE instructions (bsc#1156395).
- powerpc/kvm: Fix kvm_use_magic_page (bsc#1156395).
- powerpc/pseries/vas: Declare pseries_vas_fault_thread_fn() as static (bsc#1194869).
- proc: avoid integer type confusion in get_proc_long (git-fixes).
- proc: proc_skip_spaces() shouldn't think it is working on C strings (git-fixes).
- rbd: fix possible memory leak in rbd_sysfs_init() (git-fixes).
- regulator: core: fix UAF in destroy_regulator() (git-fixes).
- regulator: core: fix kobject release warning and memory leak in regulator_register() (git-fixes).
- regulator: twl6030: re-add TWL6032_SUBCLASS (git-fixes).
- ring-buffer: Include dropped pages in counting dirty patches (git-fixes).
- ring_buffer: Do not deactivate non-existant pages (git-fixes).
- s390/futex: add missing EX_TABLE entry to __futex_atomic_op() (bsc#1205427 LTC#200502).
- s390/pci: add missing EX_TABLE entries to __pcistg_mio_inuser()/__pcilg_mio_inuser() (bsc#1205427 LTC#200502).
- s390/uaccess: add missing EX_TABLE entries to __clear_user(), copy_in_user_mvcos(), copy_in_user_mvc(), clear_user_xc() and __strnlen_user() (bsc#1205428 LTC#200501).
- s390: fix nospec table alignments (git-fixes).
- sched: Clear ttwu_pending after enqueue_task() (git fixes (sched/core)).
- sched: Disable sched domain debugfs creation on ppc64 unless sched_verbose is specified (bnc#1205653).
- scripts/faddr2line: Fix regression in name resolution on ppc64le (git-fixes).
- scsi: ibmvfc: Avoid path failures during live migration (bsc#1065729).
- scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 (bsc#1156395).
- scsi: megaraid_sas: Correct value passed to scsi_device_lookup() (git-fixes).
- scsi: mpt3sas: Fix return value check of dma_get_required_mask() (git-fixes).
- scsi: qedf: Populate sysfs attributes for vport (git-fixes).
- scsi: scsi_transport_sas: Fix error handling in sas_phy_add() (git-fixes).
- scsi: storvsc: Drop DID_TARGET_FAILURE use (git-fixes).
- scsi: storvsc: Fix handling of srb_status and capacity change events (git-fixes).
- scsi: storvsc: Fix typo in comment (git-fixes).
- scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq (git-fixes).
- scsi: storvsc: remove an extraneous &quot;to&quot; in a comment (git-fixes).
- scsi: zfcp: Fix double free of FSF request when qdio send fails (git-fixes).
- selftests/intel_pstate: fix build for ARCH=x86_64 (git-fixes).
- selftests: mptcp: fix mibit vs mbit mix up (git-fixes).
- selftests: mptcp: make sendfile selftest work (git-fixes).
- selftests: mptcp: more stable simult_flows tests (git-fixes).
- selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload (git-fixes).
- serial: 8250: 8250_omap: Avoid RS485 RTS glitch on -&gt;set_termios() (git-fixes).
- serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs (git-fixes).
- serial: 8250: Flush DMA Rx on RLSI (git-fixes).
- serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove() (git-fixes).
- serial: 8250: omap: Flush PM QOS work on remove (git-fixes).
- serial: 8250_lpss: Configure DMA also w/o DMA filter (git-fixes).
- serial: 8250_omap: remove wait loop from Errata i202 workaround (git-fixes).
- serial: imx: Add missing .thaw_noirq hook (git-fixes).
- siox: fix possible memory leak in siox_device_add() (git-fixes).
- slimbus: stream: correct presence rate frequencies (git-fixes).
- smb2: small refactor in smb2_check_message() (bsc#1193629).
- smb3: Move the flush out of smb2_copychunk_range() into its callers (bsc#1193629).
- smb3: add dynamic trace points for tree disconnect (bsc#1193629).
- smb3: add trace point for SMB2_set_eof (bsc#1193629).
- smb3: allow deferred close timeout to be configurable (bsc#1193629).
- smb3: check xattr value length earlier (bsc#1193629).
- smb3: clarify multichannel warning (bsc#1193629).
- smb3: do not log confusing message when server returns no network interfaces (bsc#1193629).
- smb3: fix empty netname context on secondary channels (bsc#1193629).
- smb3: fix oops in calculating shash_setkey (bsc#1193629).
- smb3: fix temporary data corruption in collapse range (bsc#1193629).
- smb3: fix temporary data corruption in insert range (bsc#1193629).
- smb3: improve SMB3 change notification support (bsc#1193629).
- smb3: interface count displayed incorrectly (bsc#1193629).
- smb3: missing inode locks in punch hole (bsc#1193629).
- smb3: missing inode locks in zero range (bsc#1193629).
- smb3: must initialize two ACL struct fields to zero (bsc#1193629).
- smb3: remove unneeded null check in cifs_readdir (bsc#1193629).
- smb3: rename encryption/decryption TFMs (bsc#1193629).
- smb3: use filemap_write_and_wait_range instead of filemap_write_and_wait (bsc#1193629).
- smb3: use netname when available on secondary channels (bsc#1193629).
- smb3: workaround negprot bug in some Samba servers (bsc#1193629).
- soc: imx8m: Enable OCOTP clock before reading the register (git-fixes).
- soundwire: intel: Initialize clock stop timeout (bsc#1205507).
- soundwire: qcom: check for outanding writes before doing a read (git-fixes).
- soundwire: qcom: reinit broadcast completion (git-fixes).
- speakup: fix a segfault caused by switching consoles (git-fixes).
- spi: dw-dma: decrease reference count in dw_spi_dma_init_mfld() (git-fixes).
- spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock (git-fixes).
- spi: stm32: Print summary 'callbacks suppressed' message (git-fixes).
- spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run (git-fixes).
- spi: tegra210-quad: Fix duplicate resource error (git-fixes).
- thunderbolt: Add DP OUT resource when DP tunnel is discovered (git-fixes).
- tools: hv: Remove an extraneous &quot;the&quot; (git-fixes).
- tools: hv: kvp: remove unnecessary (void*) conversions (git-fixes).
- tools: iio: iio_generic_buffer: Fix read size (git-fixes).
- tracing/ring-buffer: Have polling block on watermark (git-fixes).
- tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() (git-fixes).
- tracing: Fix memory leak in tracing_read_pipe() (git-fixes).
- tracing: Fix wild-memory-access in register_synth_event() (git-fixes).
- tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() (git-fixes).
- tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit() (git-fixes).
- tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit() (git-fixes).
- tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send (git-fixes).
- tty: serial: fsl_lpuart: do not break the on-going transfer when global reset (git-fixes).
- usb: add NO_LPM quirk for Realforce 87U Keyboard (git-fixes).
- usb: cdns3: host: fix endless superspeed hub port reset (git-fixes).
- usb: cdnsp: Fix issue with Clear Feature Halt Endpoint (git-fixes).
- usb: cdnsp: fix issue with ZLP - added TD_SIZE = 1 (git-fixes).
- usb: chipidea: fix deadlock in ci_otg_del_timer (git-fixes).
- usb: dwc3: exynos: Fix remove() function (git-fixes).
- usb: dwc3: gadget: Clear ep descriptor last (git-fixes).
- usb: dwc3: gadget: Return -ESHUTDOWN on ep disable (git-fixes).
- usb: dwc3: gadget: conditionally remove requests (git-fixes).
- usb: smsc: use eth_hw_addr_set() (git-fixes).
- usb: typec: mux: Enter safe mode only when pins need to be reconfigured (git-fixes).
- usb: xhci-mtk: check boundary before check tt (git-fixes).
- usb: xhci-mtk: update fs bus bandwidth by bw_budget_table (git-fixes).
- usbnet: smsc95xx: Do not reset PHY behind PHY driver's back (git-fixes).
- v3 of &quot;PCI: hv: Only reuse existing IRTE allocation for Multi-MSI&quot;
- video/fbdev/stifb: Implement the stifb_fillrect() function (git-fixes).
- virtio-blk: Use blk_validate_block_size() to validate block size (git-fixes).
- vmxnet3: correctly report encapsulated LRO packet (git-fixes).
- vmxnet3: use correct intrConf reference when using extended queues (git-fixes).
- wifi: airo: do not assign -1 to unsigned char (git-fixes).
- wifi: ath11k: Fix QCN9074 firmware boot on x86 (git-fixes).
- wifi: ath11k: avoid deadlock during regulatory update in ath11k_regd_update() (git-fixes).
- wifi: cfg80211: do not allow multi-BSSID in S1G (git-fixes).
- wifi: cfg80211: fix buffer overflow in elem comparison (git-fixes).
- wifi: cfg80211: fix memory leak in query_regdb_file() (git-fixes).
- wifi: cfg80211: silence a sparse RCU warning (git-fixes).
- wifi: mac80211: Fix ack frame idr leak when mesh has no route (git-fixes).
- wifi: mac80211: fix memory free error when registering wiphy fail (git-fixes).
- wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support (git-fixes).
- wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration (git-fixes).
- wifi: wext: use flex array destination for memcpy() (git-fixes).
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute (git-fixes).
- wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute (git-fixes).
- wifi: wilc1000: validate number of channels (git-fixes).
- wifi: wilc1000: validate pairwise and authentication suite offsets (git-fixes).
- x86/Xen: streamline (and fix) PV CPU enumeration (git-fixes).
- x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 (bsc#1206037).
- x86/cpu: Restore AMD's DE_CFG MSR after resume (bsc#1205473).
- x86/entry: Work around Clang __bdos() bug (git-fixes).
- x86/extable: Extend extable functionality (git-fixes).
- x86/fpu: Drop fpregs lock before inheriting FPU permissions (bnc#1205282).
- x86/futex: Remove .fixup usage (git-fixes).
- x86/hyperv: Disable hardlockup detector by default in Hyper-V guests (git-fixes).
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition (git-fixes).
- x86/hyperv: Update 'struct hv_enlightened_vmcs' definition (git-fixes).
- x86/hyperv: fix invalid writes to MSRs during root partition kexec (git-fixes).
- x86/kexec: Fix double-free of elf header buffer (bsc#1205567).
- x86/microcode/AMD: Apply the patch early on every logical thread (bsc#1205264).
- x86/uaccess: Implement macros for CMPXCHG on user addresses (git-fixes).
- xen/gntdev: Accommodate VMA splitting (git-fixes).
- xen/pcpu: fix possible memory leak in register_pcpu() (git-fixes).
- xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu&gt;=32 (git-fixes).
- xfs: convert XLOG_FORCED_SHUTDOWN() to xlog_is_shutdown() (git-fixes).
- xfs: fix perag reference leak on iteration race with growfs (git-fixes).
- xfs: fix xfs_ifree() error handling to not leak perag ref (git-fixes).
- xfs: reserve quota for dir expansion when linking/unlinking files (bsc#1205616).
- xfs: reserve quota for target dir expansion when renaming files (bsc#1205679).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.38.1" arch="nosrc" src="nosrc/kernel-default-5.14.21-150400.24.38.1.nosrc.rpm">
          <filename>kernel-default-5.14.21-150400.24.38.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.38.1" arch="x86_64" src="x86_64/kernel-default-5.14.21-150400.24.38.1.x86_64.rpm">
          <filename>kernel-default-5.14.21-150400.24.38.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.38.1.150400.24.13.2" arch="src" src="src/kernel-default-base-5.14.21-150400.24.38.1.150400.24.13.2.src.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.38.1.150400.24.13.2.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.38.1.150400.24.13.2" arch="x86_64" src="x86_64/kernel-default-base-5.14.21-150400.24.38.1.150400.24.13.2.x86_64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.38.1.150400.24.13.2.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="5.14.21" release="150400.24.38.1" arch="aarch64" src="aarch64/kernel-default-5.14.21-150400.24.38.1.aarch64.rpm">
          <filename>kernel-default-5.14.21-150400.24.38.1.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="5.14.21" release="150400.24.38.1.150400.24.13.2" arch="aarch64" src="aarch64/kernel-default-base-5.14.21-150400.24.38.1.150400.24.13.2.aarch64.rpm">
          <filename>kernel-default-base-5.14.21-150400.24.38.1.150400.24.13.2.aarch64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4463</id>
    <title>Security update for containerd</title>
    <severity>important</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1670947527"/>
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27191" id="CVE-2022-27191" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27191" type="cve"/>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23471" id="CVE-2022-23471" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23471" type="cve"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206065" id="1206065" title="[trackerbug] Docker 20.10.21-ce update" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1197284" id="1197284" title="VUL-0: CVE-2022-27191: docker, containerd, kubernetes, helm, helm3, etcd: crash in a golang.org/x/crypto/ssh server" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206235" id="1206235" title="VUL-0: CVE-2022-23471: containerd, kubernetes, kubernetes1.18, kubernetes1.23: host memory exhaustion through Terminal resize goroutine leak" type="bugzilla"/>
    </references>
    <description>This update for containerd fixes the following issues:

Update to containerd v1.6.12 including Docker v20.10.21-ce (bsc#1206065). 

Also includes the following fix:

- CVE-2022-23471: host memory exhaustion through Terminal resize goroutine leak (bsc#1206235).
- CVE-2022-27191: crash in a golang.org/x/crypto/ssh server (bsc#1197284).
</description>
    <pkglist>
      <collection>
        <package name="containerd" epoch="0" version="1.6.12" release="150000.79.1" arch="src" src="src/containerd-1.6.12-150000.79.1.src.rpm">
          <filename>containerd-1.6.12-150000.79.1.src.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.6.12" release="150000.79.1" arch="x86_64" src="x86_64/containerd-1.6.12-150000.79.1.x86_64.rpm">
          <filename>containerd-1.6.12-150000.79.1.x86_64.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.6.12" release="150000.79.1" arch="aarch64" src="aarch64/containerd-1.6.12-150000.79.1.aarch64.rpm">
          <filename>containerd-1.6.12-150000.79.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4492</id>
    <title>Recommended update for mozilla-nss</title>
    <severity>moderate</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1671022372"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201298" id="1201298" title="FIPS: NSS uses DSA for shared library integrity checking, mark DSA sigverify as APPROVED, rest as NOT-APPROVED in the SLI" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198980" id="1198980" title="FIPS: NSS on-demand integrity tests" type="bugzilla"/>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1191546" id="1191546" title="FIPS: mozilla-nss: service level indicator" type="bugzilla"/>
    </references>
    <description>This update for mozilla-nss fixes the following issues:

- FIPS: Disapprove the creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)
- FIPS: Allow the use SHA keygen mechs (bsc#1191546).
- FIPS: ensure abort() is called when the repeat integrity check fails (bsc#1198980).
</description>
    <pkglist>
      <collection>
        <package name="libfreebl3" epoch="0" version="3.79.2" release="150400.3.18.1" arch="x86_64" src="x86_64/libfreebl3-3.79.2-150400.3.18.1.x86_64.rpm">
          <filename>libfreebl3-3.79.2-150400.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3-hmac" epoch="0" version="3.79.2" release="150400.3.18.1" arch="x86_64" src="x86_64/libfreebl3-hmac-3.79.2-150400.3.18.1.x86_64.rpm">
          <filename>libfreebl3-hmac-3.79.2-150400.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.79.2" release="150400.3.18.1" arch="x86_64" src="x86_64/libsoftokn3-3.79.2-150400.3.18.1.x86_64.rpm">
          <filename>libsoftokn3-3.79.2-150400.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3-hmac" epoch="0" version="3.79.2" release="150400.3.18.1" arch="x86_64" src="x86_64/libsoftokn3-hmac-3.79.2-150400.3.18.1.x86_64.rpm">
          <filename>libsoftokn3-hmac-3.79.2-150400.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.2" release="150400.3.18.1" arch="src" src="src/mozilla-nss-3.79.2-150400.3.18.1.src.rpm">
          <filename>mozilla-nss-3.79.2-150400.3.18.1.src.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.2" release="150400.3.18.1" arch="x86_64" src="x86_64/mozilla-nss-3.79.2-150400.3.18.1.x86_64.rpm">
          <filename>mozilla-nss-3.79.2-150400.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.79.2" release="150400.3.18.1" arch="x86_64" src="x86_64/mozilla-nss-certs-3.79.2-150400.3.18.1.x86_64.rpm">
          <filename>mozilla-nss-certs-3.79.2-150400.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.79.2" release="150400.3.18.1" arch="x86_64" src="x86_64/mozilla-nss-tools-3.79.2-150400.3.18.1.x86_64.rpm">
          <filename>mozilla-nss-tools-3.79.2-150400.3.18.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.79.2" release="150400.3.18.1" arch="aarch64" src="aarch64/libfreebl3-3.79.2-150400.3.18.1.aarch64.rpm">
          <filename>libfreebl3-3.79.2-150400.3.18.1.aarch64.rpm</filename>
        </package>
        <package name="libfreebl3-hmac" epoch="0" version="3.79.2" release="150400.3.18.1" arch="aarch64" src="aarch64/libfreebl3-hmac-3.79.2-150400.3.18.1.aarch64.rpm">
          <filename>libfreebl3-hmac-3.79.2-150400.3.18.1.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.79.2" release="150400.3.18.1" arch="aarch64" src="aarch64/libsoftokn3-3.79.2-150400.3.18.1.aarch64.rpm">
          <filename>libsoftokn3-3.79.2-150400.3.18.1.aarch64.rpm</filename>
        </package>
        <package name="libsoftokn3-hmac" epoch="0" version="3.79.2" release="150400.3.18.1" arch="aarch64" src="aarch64/libsoftokn3-hmac-3.79.2-150400.3.18.1.aarch64.rpm">
          <filename>libsoftokn3-hmac-3.79.2-150400.3.18.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.79.2" release="150400.3.18.1" arch="aarch64" src="aarch64/mozilla-nss-3.79.2-150400.3.18.1.aarch64.rpm">
          <filename>mozilla-nss-3.79.2-150400.3.18.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.79.2" release="150400.3.18.1" arch="aarch64" src="aarch64/mozilla-nss-certs-3.79.2-150400.3.18.1.aarch64.rpm">
          <filename>mozilla-nss-certs-3.79.2-150400.3.18.1.aarch64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.79.2" release="150400.3.18.1" arch="aarch64" src="aarch64/mozilla-nss-tools-3.79.2-150400.3.18.1.aarch64.rpm">
          <filename>mozilla-nss-tools-3.79.2-150400.3.18.1.aarch64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>openSUSE-Leap-Micro-5.3-2022-4584</id>
    <title>Recommended update for cloud-regionsrv-client</title>
    <severity>critical</severity>
    <release>SUSE Updates openSUSE-Leap-Micro 5.3</release>
    <issued date="1671536571"/>
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206428" id="1206428" title="cloud-regionsrv-client removing too many entries from hosts file ref:_00D1igLOd._5005qHpurr:ref" type="bugzilla"/>
    </references>
    <description>This update for cloud-regionsrv-client fixes the following issues:

- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified such that there is
    no empty line at the end of the file the content after removing the registration data does
    not match the content prior to registration.
    The update fixes the issue triggered by an index logic error.
  </description>
    <pkglist>
      <collection>
        <package name="cloud-regionsrv-client" epoch="0" version="10.0.8" release="150000.6.86.1" arch="noarch" src="noarch/cloud-regionsrv-client-10.0.8-150000.6.86.1.noarch.rpm">
          <filename>cloud-regionsrv-client-10.0.8-150000.6.86.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client" epoch="0" version="10.0.8" release="150000.6.86.1" arch="src" src="src/cloud-regionsrv-client-10.0.8-150000.6.86.1.src.rpm">
          <filename>cloud-regionsrv-client-10.0.8-150000.6.86.1.src.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-addon-azure" epoch="0" version="1.0.5" release="150000.6.86.1" arch="noarch" src="noarch/cloud-regionsrv-client-addon-azure-1.0.5-150000.6.86.1.noarch.rpm">
          <filename>cloud-regionsrv-client-addon-azure-1.0.5-150000.6.86.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-generic-config" epoch="0" version="1.0.0" release="150000.6.86.1" arch="noarch" src="noarch/cloud-regionsrv-client-generic-config-1.0.0-150000.6.86.1.noarch.rpm">
          <filename>cloud-regionsrv-client-generic-config-1.0.0-150000.6.86.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-azure" epoch="0" version="2.0.0" release="150000.6.86.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.86.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-azure-2.0.0-150000.6.86.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-ec2" epoch="0" version="1.0.2" release="150000.6.86.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.86.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-ec2-1.0.2-150000.6.86.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-gce" epoch="0" version="1.0.0" release="150000.6.86.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.86.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-gce-1.0.0-150000.6.86.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>
